[–] 7 points 1 month ago (1 child)

"May have existed"?

Molotov himself inadvertently implied their existence numerous times in his conversations with Chuev (Molotov Remembers; Molotov-Chuev interviews between 1970-1986, published 1993).

Khrushchev acknowledged their existence in his memoirs, which nobody disputes the provenance of, and which were published in the West in the 1970s.

The CPSU itself acknowledged their existence at the end of 1989, and published their copy of the text in their official journal.

The literal Soviet documents, held by the General Department of the CPSU Central Committee, were located after the archives were declassified in 1992, and have since been published widely.

No party seems to dispute the existence of the secret protocols. If you have a single credible source that does, feel free to cite them.

  • source
  • parent
  • context
  • [–] 5 points 1 month ago

    The more serious answer to that is that someone then needs to decide what "competent" means. Should a human rights activist be disqualified from office if they're terrible at math?

    Morality tests are even harder to make apolitically. It's another avenue of attack that could be used maliciously.

  • source
  • parent
  • context
  • [–] 7 points 1 month ago (2 children)

    It's not impossible, at least in C# I know you can mark objects that need to be RAII with some custom attribute and enforce correct usage patterns with a custom analyzer. You need to write it yourself but it's not impossible that way.

  • source
  • parent
  • context
  • [–] 1 point 1 month ago (1 child)

    I do a lot of security work and iOS RCE vulns are typically patched same day with all devices in support getting that security patch at the same time.

    The ones you know about, yes :). We know there are complete firms actively exploiting iOS devices though. With Android the security community can figure out what the flaws are and patch them, with iOS it's a black box.

    Android, it’s heavily dependant on the device manufacturer etc, no? So many forks of Android plus countless handsets never get an update as they’re out of support.

    Most devices are legally required to get X years of security updates, and most manufacturers do push those out fairly quickly. Maybe not all the same day, sure, but they do go out.

    I do remember a fair few exploits for iOS devices that allowed an attacker to take over a device without any user interaction, and most mentioned they were actively being exploited by malicious (state) actors.

    All I think however is that the price of the exploit doesn't necessarily correspond with how secure the device actually is, but rather it's based on the value that that exploit might hold. US entities would probably also offer more than EU entities, whereas for Android it might be the other way around.

  • source
  • parent
  • context
  • [–] 1 point 1 month ago (3 children)

    That means that they believe there's more value in having those exploits, not necessarily that they're harder to find. Though I imagine it's at least a little bit harder because iPhones are closed source. That does also mean that if Apple doesn't discover the vulnerability, it's unlikely to get a patch. With Android, these security issues are found more easily, but also patched much faster. Which I suppose makes an Android vulnerability also worth less, since you get more limited use out of it.

  • source
  • parent
  • context
  • view more: ‹ prev next ›