ISO 27001 doesn't say this. The control implementation guidance (ISO 27002) specifically cautions against requiring frequent password changes.

I love this video about 'ed', the standard Unix text editor. I'll admit that in nearly 30 years of using Unix, my occasional interactions with ed have involved opening it accidentally and immediately exiting with ctrl-c. Having used vi and vim for most of that time, it's interesting to see how much of vim's interface draws from ed.

Do you mind sharing the better solutions you'd consider at the higher price point?

exactly. there is none.

There's nothing about ZeroTier's solution which deserves a higher price point than Tailscale. As a long-time user, ZT's administration UI is much worse and the product has been essentially unchanged for a decade.

Better solutions would be things that make the VPN invisible, rather than 'easy'. Tools such as Teleport, IOW.

Hanno Böck's monthly Bulletproof TLS Newsletter is an excellent summary of TLS/PKI goings-on.

https://www.feistyduck.com/bulletproof-tls-newsletter/

Arsenal F.C. on the other hand are commonly referred to as the Arsenal.

I don't know where you're based, but for me (NZ), I get redirected to gizmodo.com.au. I see $12k as well, but I'm guessing that's in AUD? Looking at BTC price graphs it seems the most recent peak was at about $9500USD

In terms of affordability, you'd need to look at average salaries as well. My impression is that Auckland doesn't fare so well on that front.

Yes, Auckland rates much worse than Seattle (and most of the world) in that comparison - http://www.demographia.com/dhi.pdf (Auckland has a median house:median salary ratio of 10.0, Seattle is 5.5)

I don't have my Mac in front of me, but you can do this using Seil[1] and Karabiner[2]. From recollection, you disable caps-link in OS X settings, use Seil to map caps-lock to control, and then use Karabiner to map tapped-ctrl to escape. Sounds a bit hackish, but it works very well.

You can also do the same thing on Linux using xcape[3]

[1]: https://pqrs.org/osx/karabiner/seil.html.en [2]: https://pqrs.org/osx/karabiner/index.html.en [3]: https://github.com/alols/xcape

Another factor is that some browsers will automatically retrieve intermediate certificates that aren't supplied by the server. I'm not sure if it's still the case, but it used to be that Firefox would fail on HTTPS connections with a broken chain where IE would succeed.

http://serverfault.com/a/449144

1. That's my understanding from the article.

2. I think this is for the situation where the glob doesn't match, and the nullglob shell option is not set. Without that option, a non-matching glob is processed as a regular word. e.g. In an empty directory:

  $ for file in ./*; do echo $file; done
  ./*

Note the glob pattern is printed by the echo statement. The -e test catches this condition.