Pretty good resource for that kind of thing if you have another interested kid and access to the internet. There’s also this:
https://en.wikipedia.org/wiki/Newton's_law_of_universal_gravitation
Pretty good resource for that kind of thing if you have another interested kid and access to the internet. There’s also this:
https://en.wikipedia.org/wiki/Newton's_law_of_universal_gravitation

The second amendment folks went through all this. This ultimately won’t work and will only harm makers and makerspaces who follow the law in good faith.
The law reads like they got together a group of people who don’t know anything about firearms and have never heard of the halting problem, but they barely knew enough to know they wanted a database: “The performance standards shall require that, at a minimum, firearm blueprint detection algorithms have the capacity to utilize an inventory of disallowed firearm blueprint files that have been commonly downloaded or shared on public internet forums to detect those files and modified versions of those files.”
What a cool government contract to have. You get to scrape the entire internet, including all the “bad” parts where 3D gun parts live, then you get designs for everything any school or business wants to 3D print. Whoever moves first on this is going to walk away with a pile of cash before it turns into the next clipper chip or those palm printing techniques for that New Jersey law about “smart guns.”
Anyone in California who wants a Glock gen 6 to evaluate how well the redesign went is welcome to get one.


Who defines the untrusted applications though?
¯\(ツ)/¯
If GNOME wrote it then they probably trust it. If you’re using GNOME, then you’ve accepted their security model on some level.
At least you know to go look for it. Attackers will only get more sophisticated:


according to their stated security model, untrusted applications must not be allowed to communicate with the secret service.
That won’t be a popular stance to take when someone eventually steals a bunch of cached, unlocked credentials off of D-BUS because of an oversight somewhere in the npm/aur/pip/cargo/whatever ecosystem.
More rabbit hole:
https://johncderrick.com/dinosaur-timeline
The timeline stuff always gets me.