treadful

You're not alone.

Correct me if I'm wrong, but isn't the CA only signing your public key to prove identity/authority? I don't think the CA can magically MITM every cert they sign.

The impact is not serious enough to warrant a $1m entry fee, IMO. At best, someone could impersonate a site. They'd also have to get other things in line (e.g. DNS hijacking) to be at all successful anyway. And it's not like most people are authenticating certs themselves. They just trust browsers to trust CAs that vouch for you and prevents those scary browser warnings.

It doesn't improve encryption compared to a self-signed cert though.

They came up with the ACME protocol, so presumably somebody could. The real barrier to entry is the cost of getting into that certificate chain of trust. I have no idea why it's so difficult and expensive.

Remember they wanted like $75 for certs? The gall.

'til the sweat

That sure would be something for the history books.

Apparently, Zuckerberg made the song for his wife, Priscilla. “‘Get Low’ was playing when I first met Priscilla at a college party, so every year we listen to it on our dating anniversary,” Zuckerberg wrote on Instagram.

Holy cringe, Batman!

That's fair, but hardly so aggressive that I'd call it a "crypto crackdown."

But it's hardly unexpected to see lawsuits around unsettled law. Everyone should expect more as we start settling case law and bringing crypto inline with existing law.

Also, wasn't it mostly centered around their non-exchange activities? Press release specifically mentions their "Staking-as-a-Service" offering. Not that I see anything wrong with it, but I could see how that could be considered a security. Doesn't really pass the Howey test.

What crackdown? The SEC has only charged actual scammers and they've "requested information" from the legitimate players to figure out how to proceed. Other than some bad calls by sanctioning software, there's hardly been anything considered a "crackdown."

You have an intimate relationship with your grocer.

If you want access to it at system-level, you can use pip install --user .... If you run scripts as your user it'll be as if it was installed as a system package.

Only use that if it's something you use to manage your system. If you're using this as a development environment, use venvs.

Same. Short and sweet.