asciilifeform: when microshit's arm winblows catched up, dell et al - will ship'em.
asciilifeform: decimation: they operate under the dictum 'thou shalt not produce machine upon which microshit cannot run and in fact be the preferred or forced choice'
asciilifeform: to paraphrase mircea_popescu article, if christ saves in java - let me go straight to hell.☟︎☟︎
asciilifeform: but to get back to original thread, i wasn't even specifically thinking of 0days in the jre itself, but the overall turdification and prevention of fits-in-head that java inescapably leads to.
asciilifeform: if that's 'pretty clean', i shudder to imagine Naphex's idea of 'dirty'
asciilifeform: in fact, specifically only on boxes kept for running malware.
asciilifeform: the java stack per se - entirely ignoring the language (which is an instrument of torture) is a pernicious enough thing that i do not allow it on any metal under my control which matters☟︎
asciilifeform: as if it were a contest between languages
asciilifeform: williamdunne: when you eat a mighty fine dinner at your favourite restaurant, you still know that the chef often takes a shit. but it matters that he does it in the shitter and not in the kitchen
asciilifeform: 'There are strange things done in the midnight sun / By the men who moil for gold; / The Arctic trails have their secret tales / That would make your blood run cold; ...'
asciilifeform: (their local version of nsa is so impoverished that '80s-grade castrato keys must be used. the only way to achieve this is custom winblows code, rather than microshit's normal crypto api even. hence activex/exploder mandate.)
asciilifeform: and look into why - will blow your mind, guaranteed.
asciilifeform: of course, when the browser is pwned (and all modern graphical browsers are good for one or two public total-demolition pwnholes every quarter or so) the keys are out.
asciilifeform: though this may be for the same reason why no public toilet includes knives and forks
asciilifeform: mircea_popescu leads us to an interesting observation - that no www browser ever made any kind of provision for ensuring that you are running a particular known copy of a js proggy
asciilifeform: convenience is the mother of calamity
asciilifeform: and don't need browser-crypto for anything
asciilifeform: if you know how to use 'diff' - you are not a schmuck
asciilifeform: rather than an identical but key-returning one
asciilifeform: the ssl key was the only way for the schmucks/users to know that they are connecting to levison's box and getting the js they thought they were getting
asciilifeform: rather than the overall poor hygience of the ecosystem
asciilifeform: this, incidentally, is the core reason why in-browser crypto is intrinsically harmful
asciilifeform: because it was the only way to get the snowden crap out
asciilifeform: mircea_popescu: i thought it's where all the privileged white maletriarchs go to be horrible and chauvinistic and encourage rape and stuff ? << nah, that's at 18446744073709551616chan.
