Once the information is released, can anyone can make FOIA requests using the schema?
1. Bugs happen. Critical ones, too. They didn't try to brush this under the carpet, but admitted to it, acted to resolve it and were transparent about it.
2. They worked quickly to make it happen. Would 24h been nice? Sure, but 24h is not much shorter than 120h. In general, 24h is plenty of time for some exploits and 120h doesn't open the window to many more. It would have been very different if it took them months or years to resolve it.
3. They genuinely engaged with the critics on bugzilla, even after Sectigo's CCO went completely off the rails with trying to strip customers off legal recourse and demanding to blacklist those who try to make use of it.
4. They could have taken legal actions against Sectigo's CCO directly but took the extra step to ask them to stop this nonsense. They didn't demand anything more and even outlined steps Sectigo needed to take to prevent any legal problems down the line, like affirming that their CCO did not make these statements on behalf of Sectigo, an affirmation that they would notify their employees to not make any actions that would violate the laws mentioned in their letter, affirm that their CCO would be instructed not to violate any of the laws outlined in their letter and lastly confirm that, upon consulting with their CCO, they were able to conclude that his statements were not meant to harm DigiCert.
The only ick is the short timeframe they expect a reply within, but that's sadly usual corporate US law practice...
Basically that letter is the result of asking an US law firm for help and telling them to be nice about it and helping their opponent through the process.
You are only suggesting they could have handled it worse. Why would they take legal action against the CCO for statements on a bug report other than to squash transparency?
Temporary restraining orders are the biggest exception. If DigiCert is about to do something crazy like take down all your websites, courts are generally willing to put a temporary stop to it without understanding all the details. "Preserve the status quo" and "prevent irreparable harm" are the buzzwords.
So if DigiCert's irreparable harm was great would that prevent it? Like legally requiring CAs to follow their revocation policies or pay millions in damages?
I can see how it's tempting to chalk this up to hysteria, but they are absolutely large drones of some kind.
Ignoring FAA by the FBI or the military just doesn't happen, the price to pay is WAY too high.
NSA or spooks could theoretically be behind this, but why do it where it annoys people and attracts attention and not in some desert or foreign place? Something doesn't add up.
The idiots reporting on it have NO idea how high these drones are. And the military has a bunch of carved airspace in various places. I think last time i looked (4 weeks ago), there was some reserved airspace off Cape Hatteras for the US Marines.
Politicians are PO'd that something about this doesn't add up: How can anyone know these aren't a threat without knowing whose they are? Why isn't anyone bringing them down? Where do they land? Is this similar to the Chinese spy balloon?
I've seen a huge number of theories by now, and not one of them actually fits.
How does anyone know how big these are? I've heard reports like this:
1. They looks larger than normal drones. 2. The look like they are operating at a height greater than 400 ft AGL.
How do they know the height? If they don't know the height, they certainly don't know the size. If it looks large, it isn't very high.
If it is large and high, I would think they would get some radar contacts.
If these are heavier than 55 pounds, I think we'd see the FAA jumping all over it. I also don't see why any LE would announce that they are actively figuring it out as they'd want to keep the element of surprise and track the drone back to the operators.
> Why isn't anyone bringing them down?
Only federal authorities can do anything to aircraft. This is in the realm of the FAA.
> How can anyone know these aren't a threat without knowing whose they are?
What kind of threat are we worried about here that wasn't around yesterday (last year)?
> White House says they aren't foreign adversaries I don't think the military is going to reveal its methods and capabilities.
Yes the court's judgment is so high, 1B USD, that he cannot make money without it being garnished. How does he get back to work? I personally do not think anyone should lose their livelihood over speech, NOTE: I did not say free speech. What he did is reprehensible but not enough that he is basically black balled from making a living. Penalties yes, loss of livelihood no.
He was harassing parents of dead children in order to personally enrich himself. Why do you think he shouldn't have to forgo his ill begotten gains? It's only 1B USD, because he refused to stop doing it. And then he decided not to really show up for court and accept the summary judgement of 1B USD.
Most of his penalty has nothing to do with speech. He can keep on speaking all he wants. He might suffer consequences, but he is free to say whatever he wants to.
Imagine taking any of that seriously. Didn't they give Hillary an 80% chance?