Slashdot Mirror

It is registered by the author who wrote this article and published it on the IBM alphaWorks site. And spam has not lost the battle at all. In fact FairUCE actually gives spammers a new tool to do DDoS attacks. The logic of FairUCE is all wrong. And the code does not appear to be free open source. Networks that send C/R will still get blacklisted.

It is registered by the author who wrote this article and published it on the IBM alphaWorks site. And spam has not lost the battle at all. In fact FairUCE actually gives spammers a new tool to do DDoS attacks. The logic of FairUCE is all wrong. And the code does not appear to be free open source. Networks that send C/R will still get blacklisted.

CNN (and by extension, slashdot, surprise!) got this completely wrong. It's challenge and response sender identity technique, which is way different. See the IBM webpage about fairuce.

From the FAQ (http://www.alphaworks.ibm.com/tech/fairuce/faq)

No real performance testing has been done, but speed is expected. The code basically consists of a few if/then statements and some DNS look-ups (which are cached in memory as well as on the DNS server). The mail server will probably bog down before FairUCE does.

Wow... sounds like the developers don't even consider this to be a substantial piece of software.

The "news" story is pretty much completely wrong. You might want to read the actual technical details and refactor. (Sadly, a lot stays the same, I think.)

Moderators, parent post is not insightful, it is clueless. It doesn't depend on the spammer being honest. It depends on the spammer being dishonest. For actual information about how this system works see IBMs web page about it: http://www.alphaworks.ibm.com/tech/fairuce

At least Comcast requires a username and password to send mail through their own mail servers. I've seen references on dslpreorts and various other places that Comcast was blocking outgoing port 25 as well but I was just able to get to several mail servers directly that I just tried.

You might want to actually read the article or go to IBM's web site and get the real information on this project or browse some Google search results. They are not sending email to anyone and they are not performing a DDOS either. The money.cnn.com article referenced in the ./ story was a really bad attempt to describe the system and obviously misleading.

For those that actually read the article, it is completely wrong. It does a terrible job of explaining FairUCE. Read the material at http://www.alphaworks.ibm.com/tech/fairuce. They are not advocating sending spam back to the spammers, but instead are using a combination challenge/response and DNS lookups to associate a reputation to the IP that is sending the email message. I figured IBM was smarter than the original article was implying.

As mentioned in some other responses, the CNN article explains the technique/algorithm very poorly. After reading the developer's description of FairUCE I'm inclined to think your scenario won't occur.

It's been reported on a mailing list that the article is actually about FairUCE, which implements something completely different which makes at least some sense (for scoring, not for outright blocking).

What's even cooler about Amit Singh is that he's a he's a researcher at IBM Alamaden Research Center, working on, among other things, secure communications and Linux on the desktop.

And be sure to check out his other articles, particularly What is Mac OS X? . They're all well written, comprehensive on their respective topics, and generally excellent.

If Bray worked on the OED in 1985, he must have seen IBM Fellow Mike Cowlishaw's LEXX editor, which was the thing that displayed "the electronic version[] of dictionary. It was what we would now call XML. It had little embedded tags saying entry, word, and then pronunciation, etymology, a brief quotation, and the date, source, text, and so on." It was a color-terminal application, running (initially) on IBM's VM mainframe system. LEXX was the subject of an IBM Journal of Research and Development article back in 1987 - it's worth reading, even though the screen-shots didn't survive being scanned into the PDF.

If Bray worked on the OED in 1985, he must have seen IBM Fellow Mike Cowlishaw's LEXX editor, which was the thing that displayed "the electronic version[] of dictionary. It was what we would now call XML. It had little embedded tags saying entry, word, and then pronunciation, etymology, a brief quotation, and the date, source, text, and so on." It was a color-terminal application, running (initially) on IBM's VM mainframe system. LEXX was the subject of an IBM Journal of Research and Development article back in 1987 - it's worth reading, even though the screen-shots didn't survive being scanned into the PDF.

GML even had tags for doing Gantt charts, and I would dearly love to find a publishing system that could do printouts from such tags. ... ... Here it is 10 years later, and we still haven't gotten back to the level of ease of use and flexibility that GML had in the '80s

You're looking for Gary Richtmeyer's B2H program, available from IBM's z/VM download site. It's written in Rexx and runs on every system you're likely to be using, comes in source form, and can process just about everything the BookMaster markup can dish out (even the syntax diagram tags).

GML even had tags for doing Gantt charts, and I would dearly love to find a publishing system that could do printouts from such tags. ... ... Here it is 10 years later, and we still haven't gotten back to the level of ease of use and flexibility that GML had in the '80s

You're looking for Gary Richtmeyer's B2H program, available from IBM's z/VM download site. It's written in Rexx and runs on every system you're likely to be using, comes in source form, and can process just about everything the BookMaster markup can dish out (even the syntax diagram tags).

Similar to SDLT, but not quite.

SDLT Tape vs VXA-2.

VXA-3 will exceed the capacity of the SDLT and will be the exact same size, using the same tapes and autoloaders. All I have to do is swap out the drive and gain double my storage.

maybe the best ftpd is the one on AIX, who knows?

From the vsftpd website...

IBM recommend vsftpd in their paper "Securing Linux Servers for Service Providers". It is top in a section entitled "Recommended FTP servers".

It seems that IBM disagrees with you (as do I). I'm a static-type proponent. Dynamically typed languages make me barf. :)

corrected XML and PDF links

trustedgentoo.xml
tcpa_rebuttal.pdf

Hmm... there appears to be in a bug in slash. The first time I tried to post those links the same thing happened that happened to the OP. Thankfully I previewed.

http://www.research.ibm.com/gsal/tcpa/tcpa_rebutta l.pdf

I've seen the above link and ensuing commentary many times, but I've never seen anyone critique the rebuttal above, and would be very keen to do so. Anyway, the paper above should be read as a matter of course before posting in this topic, as it is foolish to leap into a discussion having heard only one side of the argument.

Frankly, I found it allayed my fears somewhat, but I still have lingering doubts. Please reassure me :(

Apologies for the crappy URL; it seems I suck at them :)

This is interesting. The link when posted using URL tags is this: broken http://www.research.ibm.com/gsal/tcpa/tcpa_rebutta l.pdf. A bug in slashcode.
correct link is this

This is interesting. The link when posted using URL tags is this: broken http://www.research.ibm.com/gsal/tcpa/tcpa_rebutta l.pdf. A bug in slashcode.
correct link is this

I think it is important that you read this document from IBM which points out that the technology they will be introducing will not lock you down to a specific Operating System.

http://www.cl.cam.ac.uk/~rja14/tcpa-faq.html

this: http://www.gentoo.org/news/20050202-trustedgentoo. xml and, linked from there, this:

http://www.research.ibm.com/gsal/tcpa/tcpa_rebutta l.pdf

Emacs!

Seriously though, IBM has an article on it here.

No, it uses Web Services, and standardised security (WS-Security).

All this talk about blocking ports and security problems seems fairly unfounded -- Indigo is simply a way of using Web Services for app-to-app communication, while taking advantage of the latest WS security mechanisms.

I can't see it being less secure than Java Web Service calls, or HTTP communication in general. Just my 2c.

I agree. It's the software that's making PCs look slow - see this excellent piece at http://www-106.ibm.com/developerworks/web/library/ wa-cranky49.html?ca=dgr-lnxw01Cranky to see where your processing power is going (but you knew that already :-)

But my experience using OO differs from yours - it was painfully slow last time I used it, in 2002 I think.

It has been done

The mouse controller is being marketed by Montrose Secam Limited. It is available only for PS/2 mice at the moment, although a USB version is in the works.

A software version of the device is available at IBM Alphaworks

It uses fast task switching of 2 or 3 or 4 cycles of many soft-tasks using only one real core (more cores better!).

open4free ©

It uses fast task switching of 2 or 3 or 4 cycles of many soft-tasks using only one real core (more cores better!).

open4free ©

The correct URL for the OpenPower line is:

http://www-1.ibm.com/servers/eserver/openpower/

Click Here

The OS is more reliable then Windows, however the hardware can still fail. They use standard disks

Yes and no. They mount the disc in shock-absorbent rubber (which Toshiba/Compal didn't for my x86 laptop, relying on the rigidity of the plastic case to protect it) and there is a "sudden motion sensor" either in the laptop or the drive, which, under the control of software, can unload the heads before the laptop hits the ground. More details here. IBM do something similar on their Thinkpads.

Well, Don't think I'd personally call these cheap. But, they are reletivly cheaper than the alternatives. http://www-1.ibm.com/servers/eserver/openpower/har dware/720.html A business might call them cheap. The price/performance is there in any event.

Well, that's because they only sell the Power5 as a dual-core chip. That is, in the specs and what-not, when they say, "Two Power5 processors", they mean one physical die with two cores. Consequently the p595 that supports up to "64 processors", is 32 physical processors the way Sun counts them.

Even in the single-processor ppc systems,its a dual-core power5, with only one core activated.

This redbook discusses it in very clear, comprehensive terms:

http://www.redbooks.ibm.com/redpapers/abstracts/re dp9117.html

Thanks,

Matt

MY BAD. I somehow messed up the URL.

HERE IT IS.

We didn't see email spams coming,...

Indeed?

A brief history of spam; Our guide to junk e-mail's long and annoying past

CC.

Domino is not the thing to get from IBM for LDAP. It drags along a ton of non-LDAP stuff.

From IBM, you should go for the Tivoli Directory Server.

It is a full function DB2-based directory server. Best of all, you can download it FOR FREE.

How many people do you think actually has one of these to work on?

Yeah, I'm thinking they all own Macs.

This will take a little preparation, but I would suggest going with a copy of ROBOCODE and a few starter robots. The great thing about this stuff, is that you can have a battle with some fairly simple robots (which you could code beforehand) and then get the kids to look at the code, give them a simple example of how to change some parameters (one of your stock robots may move very slowly, with long waits, another may turn 405 degrees right, where there may be time to be gained by just turning 45 degrees - seed the examples which is fairly obviously easy to improve) and see if they can come up with a better performing one. You may have to help them with the stricter bits of syntax, but if they can analyse behaviour and use the basics (TurnRight, turnGunRight) to improve that behaviour, your well into the territory of CS and already a step away from just asking them to complete a basic program to say "Hello!", which is less CS and more code-monkey... :-) You've covered analysis, versioning, coding and testing phases! If you could just get them to document it, they'd already be a step ahead of most coders :-)) It's probably more important that they can improve the behaviour to win battles, even if they can't actually write the code - they can always learn to do that later if they're keen.

from http://domino.research.ibm.com/comm/pr.nsf/pages/n ews.20020611_millipede.html While current data rates of individual tips are limited to the kilobits-per-second range, which amounts to a few megabits for an entire array, faster electronics will allow the levers to be operated at considerably higher rates. Initial nanomechanical experiments done at IBM's Almaden Research Center showed that individual tips could support data rates as high as 1 - 2 megabits per second.

From the press release:

"Rüschlikon, 3 March 2005--Given the rapidly increasing data volumes that are downloaded onto mobile devices such as cell phones and PDAs, there is a growing demand for suitable storage media with more and more capacity. ... ... Thus, it is ideally suited for use in mobile devices such as digital cameras, cell phones and USB sticks."

So the demands of the environment seem to be specified.

CC.

Yeah, I remember my dad telling me that back in the early days of computing how computers used to be so big that they filled rooms as large as..... oh wait, Nevermind.

Kinda looks like a bowling alley too.

By the way: Athlon-64 has 16 64-bit GPRs, not 4.

There are a lot of alternatives out there, and your inability to find/use them is not a problem which AMD and Intel are overly concerned with. For instance, here are a few of your options:

64-bit RISC:
http://www-1.ibm.com/servers/eserver/pseries/
http://www-1.ibm.com/servers/eserver/iseries/
http://www.pegasosppc.com/tech_specs.php
http://www.apple.com/powermac/
http://www.sun.com/servers/index.html
http://www.hp.com/products1/servers/HP9000_family_ overview.html
http://h18002.www1.hp.com/alphaserver/index.html

64-bit CISC:
http://www-1.ibm.com/servers/eserver/zseries/
http://www.hp.com/products1/servers/integrity/inde x.html

Now why would Intel/AMD want to make it any easier than it already is for you to switch?

Phil

By the way: Athlon-64 has 16 64-bit GPRs, not 4.

There are a lot of alternatives out there, and your inability to find/use them is not a problem which AMD and Intel are overly concerned with. For instance, here are a few of your options:

64-bit RISC:
http://www-1.ibm.com/servers/eserver/pseries/
http://www-1.ibm.com/servers/eserver/iseries/
http://www.pegasosppc.com/tech_specs.php
http://www.apple.com/powermac/
http://www.sun.com/servers/index.html
http://www.hp.com/products1/servers/HP9000_family_ overview.html
http://h18002.www1.hp.com/alphaserver/index.html

64-bit CISC:
http://www-1.ibm.com/servers/eserver/zseries/
http://www.hp.com/products1/servers/integrity/inde x.html

Now why would Intel/AMD want to make it any easier than it already is for you to switch?

Phil

By the way: Athlon-64 has 16 64-bit GPRs, not 4.

There are a lot of alternatives out there, and your inability to find/use them is not a problem which AMD and Intel are overly concerned with. For instance, here are a few of your options:

64-bit RISC:
http://www-1.ibm.com/servers/eserver/pseries/
http://www-1.ibm.com/servers/eserver/iseries/
http://www.pegasosppc.com/tech_specs.php
http://www.apple.com/powermac/
http://www.sun.com/servers/index.html
http://www.hp.com/products1/servers/HP9000_family_ overview.html
http://h18002.www1.hp.com/alphaserver/index.html

64-bit CISC:
http://www-1.ibm.com/servers/eserver/zseries/
http://www.hp.com/products1/servers/integrity/inde x.html

Now why would Intel/AMD want to make it any easier than it already is for you to switch?

Phil

Sorry to reply to my own post, but after watching the video, it seems there would be at least two advantages over Knoppix:

1. A USB Flash drive/MP3 player is somthing you might be carrying anyway.

2. It looks as if you can mirror your internal drive to the USB device as a precautionary measure and then boot off the USB drive when the interal one fails. I do this with my iBook and iPod using CCC or SuperDuper!

Of course, your laptop must support booting from USB/Firewire as well.

Damn, I guess now Deep Blue will need to find a new friend to play with?

and to be replaced by a Computer.