To an extent it can help reduce wasteful steps. But there's nothing AI can do that can make it less irresponsible to reduce soak times, stagger the release across many environments, etc.

Nothing you wrote seems to support what you said at the start there. Why is the importance of code quality decreasing?

Is the DC one of the availability zones of an AWS region?

Played a run through, would be nice to be able to play more than 1 puzzle (if there's nobody to queue with quickly in multiplayer). Maybe let me play yesterday's puzzle or something, especially if I just figured out the ropes?

Good idea! I’ll add an option to let you play previous Daily Puzzles, especially if you’re still getting the hang of things. To still keep the Daily Leaderboard fair and competitive, only players who complete the puzzle on the actual day it’s released will be eligible for that day’s leaderboard. Check back tomorrow for that feature!

I read this and came away a bit sheepish not really grasping the significance of extreme focus on PRNG and entropy for basic things. Glad to see the rest of the comments agreeing. "What every experimenter must know"...

Mere hours into the incident, before there's any RCA, someone rushes to discredit themselves with a simplistic explanation

Check out Defense in Depth as a security concept

It's not defense in depth, it's defense against a different threat entirely.

You want to have encryption, but I doubt their encryption or lack thereof has anything to do with this attack. Do we even have evidence the data wasn't encrypted?.

If someone gets access to a ticketing system they shouldn't have, talking about encryption is about as useful as talking about seatbelts. Important for general safety but irrelevant to the problem at hand.

Finally we can talk to the bomb dudes in Serious Sam

Or teach it as the only righteous alphabet to our children.

Yes, that is how I read it as well. Email was just for fun, and the code came by a different channel (of course). The email the scammer sent wouldn't contain a code they can use to take over his account (of course).

Oh, the fake email also contains a code, so I thought that was it.

On obvious spoofs I see "legal@gmail.com <via scamdude@askjdfaskldfj.net>". I think he means that it didn't indicate the latter. And if gmail phone app didn't fail to display headers he could have looked