Still cheaper than Newegg/Amazon/etc.

It's actually a hell of a feat to get any kind of electronics certified for outer space use.

The atmosphere we have blocks a HUGE portion of ionizing radiation, including x-rays and gamma rays. Those forms of energy will play merry hell with any kind of sensitive electronics, so they have to be suitably ruggedized -- far more so than even most military specs which mostly call for shock, impact, and exposure to elements. Since they can be supplying power to sensitive electronics, where half a volt can be the difference between containing and letting out the magic smoke, that sort of regulation is absolutely key.

Remember: MFA is a two-or-more combination of: something you know (password, pin, etc.), something you have (keycard, token, fob, etc.), something you are (fingerprint, iris scan, voice recognition, etc.), and potentially even somewhere you are (geolocation).

It's simply good data hygiene and privacy.

This is an obvious one. I've dealt with a ton of recruiters over the years. If they're not willing to discuss a range upfront with you (amongst other things), they're lying to you. THERE IS NO JOB. They're just building their virtual rolodex for future sales.

If they want to grill you about what you do, who you know, references, etc. before revealing the name and location of the client... THERE IS NO JOB. (Hint for my younger colleagues: never reveal your references until you get an offer. They're just hitting you up for warm bodies that they can then probe.)

Recruiters do this to play some weird game of Glengarry Glen Ross, and I have no idea why. They swing in the extreme direction of sales and remove the technical aspects of it. We're treated like fodder for the job position sacrifice. And worse yet, a lot of them seem to think we're too stupid to know better.

I never expect a recruiter to be technical; they're a form of HR, not engineering. I wouldn't expect one to know how to read a TCP dump, or analyze a Nessus report for false positives. However a base understanding of what you're pushing for is to be expected. I had one recruiter almost shy away from me because he only saw a keyword listed once or twice on my resume...even though it's a core technology used in every single role I've done that's industry-wide.

Heartbleed was touted as being bad by those that didn't read too far into it. You could scrape memory, sure. But it was always random fragments. This lets you make targeted address attacks. Force a process to use that memory space through a NOOP and now you can start scraping at will. Or you can just do an entire memory dump and pull things out in plaintext (like scraping Firefox passwords, which we've seen done already).

The only reason this isn't worse is it requires the ability to execute code on the machine. It has high (near absolute) impact, but low-to-moderate on the ease of execution.

(Of course, let's ignore the obvious joke about some AV solutions like Symantec.)