Slashback: Encumbrance, Silence, Internalization
Different folks, different contributions Dr. Sheueling Chang-Shantz writes:
"Hello, I am the lead researcher/developer of the ECC project at Sun Microsystems Laboratories. I appreciate very much the news you posted on Slashdot regarding 'OpenSSL Gets Cryptography Gift From Sun.'However, your wordings "Sun Microsystems has donated ... developed by Whitfield Diffie ..." seems to be causing some confusion on Slashdot forum. It gave the wrong interpretation that Whit has invented ECC. Sun is definitely making no attempt to claim that Whitfield Diffie has invented the Elliptic Curve Cryptosystem. Technically, neither has Whitfield Diffie developed the ECC technology that Sun has donated to the OpenSSL project recently.
I would appreciate it if you could correct the news before too late.
For clarification, Elliptic curve cryptography was independently invented by Neal Koblitz, Professor of Mathematics at the University of Washington and Victor Miller who was then at IBM.
Whitfield Diffie is Sun's chief security officer who co-invented Diffie-Helman public-key cryptography."
We now go north of the border ...
And further on the topic of that donation by Sun, friscolr writes "In a recent post on misc@, OpenBSD project leader Theo de Raadt states...
OpenSSL is becoming a non-free software project, because the code from Sun contains licenses which invoke patent litigation; the licence on the new code basically builds a contract that says "if you use this code, you cannot sue Sun".
He goes on to say, 'once again, i think it is time to fork OpenSSL.' Thank you, Theo, for always making sure we will have 100% free software at our disposal and for standing by your stated goals."
[Headline redacted] Dotnaught writes "The question of whether British composer Mike Batt's "A Minute's Silence" on the "Classical Graffiti" CD (by The Planets) violated the copyright of John Cage's silent composition " 4'33" " has been resolved in an out-of-court settlement. Batt reportedly paid the John Cage Trust an "adequate sum" (whatever that is). On his site, Batt writes, 'We have now settled the matter of my artless plagiarism of John Cage's silence, by his publishers caving in and us winning! Why didn't I think of that before! We could have saved a lot of time and buggering about, although I must say, the struggle was one of the most amusing disputes I've ever , er, disputed.' Batt may yet have the last laugh. According to the New Yorker, Batt has been busy copyrighting chunks of silence of various lengths other than the four minutes, thirty-three seconds of silence owned by Cage."
Hey, does this guy really work for the government? In response to broadly worded news that the U.S. Department of the Interior was switching to an all-Microsoft computing infrastructure, security architect (and oftc.net honcho) D. Clyde Williamson fired off a well-phrased mail to Hord Tipton, Acting Chief Information Officer for the Department of the Interior. asking for clarification, and urging that the DOI consider advantages of not tying themselves completely to proprietary systems. Tipton's response (posted with his permission) is informative:
"Thanks for your views on the DOI's attempts to standardize operating systems. Whereas it is true we are moving towards enterprise approaches to desktops and operating systems, there will be as you suggest a heterogenous mix at the server level. We have not decided at this point to be 100% Microsoft although that discussion has been entertained. There are certain risks and efficiencies that must be considered regardless of the path taken.Our major concern is interoperability and our current situation is all over the map. Thus standardization is an important step forward for us.
Thanks again for your views.
Hord Tipton
Department of the Interior"
Why relying on a single vendor for such an important aspect of the modern workplace is still considered an "enterprise approach" I'm not sure, but it is certainly true at many companies.
...all posts not submitted regarding this article.
It makes a lot of sense to have everyone using the same operating system at the user level. Standardize the OS, disallow unapproved app, device, driver installation, and use an OS that doesn't require extensive training.
Heh, you'd think they'd go with Mac.
But only for 2 minutes.
I'm trying to teach myself to set people on fire with my mind... Is it hot in here?
I have copyrighted the act of NOT posting on Slashdot. If you don't post, you're in violation. If you don't post twice, you're OK. I haven't copyrighted that. As far as I know, that one's under the GNU copyleft.
If tits were wings it'd be flying around.
So if Theo or any other 'major' player hadn't said Sun was making OpenSSL non-free and to fork it, we'd still use the Sun OpenSSL?
I have copyright on various lengths of passing gas. You may not issue a fart of 3, 4, or 7 seconds without violating my copyright.
- None can love freedom heartily, but good men; the rest love not freedom, but license. -- John Milton
This is abominable behavior on the part of Sun, and I think they should perhaps ask first before trying to subvert our Free project for their own means and eventual ownership. It is in poor taste, to say the least.
--
Theo DeRaadt
Founder, OpenBSD project.
A recent K5 article on Esperanto
I can't figure out whether "Thank you, Theo, for always making sure we will have 100% free software at our disposal and for standing by your stated goals." is sarcastic or not...
--Bennett Prescott
Former Lord Of Packets
...and our current situation is all over the map.
Right on! They should be 100% *nix! Why don't they see the light?
Facetiousness aside, they're considering it because they should investigate all the alternatives. 100% MS is a viable option, albeit a poor and risky choice for most applications, but a choice nonetheless. One should investigate all the alternatives before coming to a conclusion.
1. Copyright silence.
2. ???
3. Profit!!!
Why not? There are advantages to a homogenous environment. Many of these advantages are the same no matter which vendor provides 100% of your systems.
But hey! Let's consider the "alternative": 60 webservers all serving the same site, some running IIS, some running Apache, some running Iplanet. Now, go and maintain all of that.
I work in a very heterogenous datacenter, but all machines of the same type, in the same environment, run the same code on the same platform. The reasons for homogeneity on some level should be readily apparent.
Any sufficiently well-organized community is indistinguishable from Government.
How do you say "I'm not wearing any pants!" in Esperanto?
FYI, according to the OpenBSD site it's "Theo de Raadt", not "Theo DeRaadt".
Don't believe me? Check this user's posting history, Theo's personal homepage, interviews, or mailing list posts.
In the cryptography mailing list, it appears that Theo may not need to declare jihad on licenses he doesn't like.
According to Ulf Möller there will be a patch made before the next release to isolate the ECC code in case of patent concerns. The ECC code can be included or excluded based on a configure flag like the present RC5 and IDEA algorithms which are still patented in various parts of the world.
Apparently the patent claim is an additional optional provision that companies can use the Sun code under a truce against lawsuits if they agree to not sue about ECC patent infrigement either.
"We have not decided at this point to be 100% Microsoft although that discussion has been entertained. There are certain risks and efficiencies that must be considered regardless of the path taken."
Like or hate their decision, anybody who's ever tried to print from a Linux box to a printer hosted on a Windows machine can sympathize. Technical superiority is fine and all, but ease of use has a larger impact on overall efficiency.
Dirty pigsuckers, eat some turds, and be happy
I submit that Microsoftening is a better term, or is at least easier to pronounce with suitable derision.
Can Batt copyright 2 minutes, 16.5 seconds of silence, then countersue Cage for twice the damages?
A "heterogenous mix at the server level." could simply mean a mix of NT2000, NT4 and XP. Although one could hope that it really means other manufacturer's systems as well, it doesn't have to.
For the rest of it, it sounds like they still intend to force the desktop to pure MS.
OS Software is like love: The best way to make it grow is to give it away.
Yes, but he was arguing for interoperability, not consistency. I'm all for consistency, whether it be M$ or *nix. Of course there are advantages to a homogenous environment, but if you go homogenous Microsoft, you're tied to Microsoft, period.
If you run *nix, you can use NFS or a variety of new network filesystems. If you run Windows, you get SMB. But wait -- there's Samba for *nix that lets Windows speak its own little proprietary protocol and interoperate with *nix servers. *nix can speak Windows, but not vice versa.
If you run everything on Apache, you can host your sites on Linux, Windows, Solaris, FreeBSD, what-have-you on a variety of different architectures. If you host on IIS, you're stuck with Windows and the very limited number of platforms it supports. Apache runs on Windows, IIS does not run on *nix.
If you write your website in PHP, you can use it on a variety of Unicies on a variety of different platforms. If you write for ASP dot NET, you're stuck to Windows 2000+ on x86 (and whatever else Redmond feels like supporting). You can run PHP on Windows, but not vice versa.
So... tell me, which is the more flexible solution? Which delivers more interoperability? The open, freely extendable system or the closed and proprietary one? That's why I pointed this out as a no-brainer; it is.
(And yes, I know about Microsoft's UNIX tools, but it's a moot point.)
The phrasing of this is indicitive of the DOI falling prey to marketing pamphlets. Normal human beings do not use phrases like 'enterprise approaches'.
It's like MS locked someone up in their Ministry of Truth, then they came out praising Big Bill and using the words 'standard' and 'microsoft' in the same sentence.
Ash OS durbatulk, ash OS gimbatul, ash OS thrakatulk, agh burzum-ishi krimpatul! Uzg-MS-ishi amal fauthut burgulli.
A seven second fart?
The heck with violating copyright, that sounds like it violates physiology.
That Jesus Christ guy is getting some terrible lag... it took him 3 days to respawn! -NJ CoolBreeze
Apparently Batt gave the Cage Trust a suitcase full of no money.
## W.Finlay McWalter ## http://www.mcwalter.org ##
Ok, this is important to me. Yeah, it sounds stupid that the suit was over silence - but what it really was about was that he credited Cage as an author and did not pay the estate. THAT caused the problem. Even Sonic Youth did a track of silence and didn't get sued - because they didn't have the cavalier audacity to credit someone else without checking the ramifications.
So how about we stop making fun of the situation? Cage's estate isn't at fault here. That guy shouldn't pull such stupid shit.
Since his email, journal, and a quick whois supports his identity. Plus which, the point he makes is one that is completely valid and in character. So is it live, or is it Memorex? And if you're sitting in front of a monitor, why do you care?
I serve notice that I have copyrighted the following:
Blank sheet of paper and an expression of abstract art depicting whiteness.
Anyone making, copying or distributing a blank sheet of paper owes me bigtime.
There are several nfs drivers for windows, there are asp drivers for several web servers other than IIS. Basically there are at least partial implementations of almost all important technologies going both ways. The real goal should be interoperability through published standards.
There are 4 boxes to use in the defense of liberty: soap, ballot, jury, ammo. Use in that order. Starting now.
Apparently, every finite sequence of bits will appear in pi *somewhere*
Really? That sounds like something begging a proof
or a url to a webpage with a proof.
It sounds unlikely that every finite sequence is
in there, but maybe its possible.
This is indeed Mr DeRaadt. I've seen his name spelled several different ways. He seems to be eccentric that way. In any event, I've previously emailed him about his posts and he confirmed that it is him.
Then again, I'm just an AC so who will listen to me?
Next Step: Outlaw all sarcastic humor.
Watch out, Onion, you're on the hit list. Cuz' I'm pretty sure that Bush didn't actually threaten to invade the West Nile in response to the West Virus.
Hello? Sarcasm? Where did that go?
My father works for the Department of Interior, and it is pretty obvious in my frequent vists to his office and in conversations with him that the IT Department over there is very competent, thus them moving to an all Microsoft environment is something that is quite likely. When I am talking all Microsoft environment, I mean Windows 95, because that is what he is running on a P3 machine down there, and it came with windows 2000 on it. The reason why I think it is very likely for them to move to an all Microsoft environment is because they don't know what they are doing, thus they would not see the problems with moving to an all Microsoft infrastructure and it would also be easier for them because they really aren't very good with Unix. Earlier in the year, there was a contraversy of sorts involving fiscal fraud in the Native American relations office and there was a court order to shut down all systems that are linked to the server which kept track of all fiscal transactions in the native american relations department. One system that was affected was email, and it took them about 6 months to get the system back up. When Mr. Tipton said "our current situation is all over the map", he wasn't joking.
This page was generated by a Barrel of Circus Midgets, and that is the way I like it!!!
Is this an actual proven fact.. or is it just the same common misconception people make... that because seomthing goes on infinitely, never repeating, that means every possible combination must exist somewhere. (not true)
Email me for a licence on "Method and apperatus for disseminating a plurality of absence of content via online bitching servers".
Thanks.
Nerd: Derogatory term typically directed at anybody with a lower Slashdot ID than you.
yes it will.
You should all be thankful to the /. lameness filter that filters out empty posts otherwise you'll all be in violation!
He paid them a six figure sum.
http://www.angio.net/pi/piquery
Not only does every possible finite sequence of bits occur in the bits of pi, it occurs an infinite number of times. It's all there: directions to Jimmy Hoffa's grave, the human genome, the lost works of Shakespeare, MPEG's of Gallmer and Bates doing the unspeakable, a bug-free release of Windows 2010, JPEG's of those court and military records Bush won't release, MS-DOS 1.0 with Gary Kildall's Easter Egg still in it, everything! An infinite number of times! Find it. Post it here.
Ah, grasshopper, you've just labeled yourself a novice. The reason you're not sure why that's considered an enterprise approach is that you have no experience with enterprise-class operations. You can get a vendor to agree to all kinds of massive price reductions on hardware and, more-importantly, the margin-laden services contracts, by agreeing to standardize your entire operation around their products.
sulli
RTFJ.
Excuse me? Let me get your reason straight here...
It's okay for me to pinch something, so long as I don't give due credit? /Me thinks that's pretty damned twisted.
My experience has been people are generally much happier with you if you DO give them credit for something they came up with. Usually it gets nasty when you try to pass their idea off as your own.
Don't get my wrong, the idea that you can copyright silence is ridiculous. Your statement strikes me as even more so.
"They do not preach that their god will rouse them, a little before the Nuts work loose." Kipling, 'The Sons of Martha'
I feel really bad for anyone attempting to use
iPlanet for anything big. It's one of the reasons
Adelphia was in the state it was. Some idiot
listened to the marketing pitch and signed
off on it. It made the UNIX department a living
hell. It isn't even threaded. Try explaining to
a PHB that your email solution sucks ass because
it was originally written for win32, then ported
to Solaris. Try explaining that the fact that it's
non-threaded makes it run out of gas faster than
the OS does. Adelphia easily spent 10 times what
it should have bandaiding the whole thing
together because one idiot made a bad choice
and wasn't man enough to admit it.
The most important thing any republican needs to know.
A lot of Portuguese and Spanish people have their name like DaAnything but it's also really common to see Da Anything. You'll see as many people named DaSilva than Da Silva.
Anwyay, it doesn't mean anything since Theo is not Spanish nor Portuguese.
And while I'm here: Yay Theo! I don't care if it's him or not here, he made the good decision. I'll be glad to switch to a pure OBSD port of OpenSSL!
All Hail Discordia. Hail Eris. Fnord.
Wow, tell me that was written without bias. Windows can speak NFS. There are hundreds of utilities for just this. Just like you have to install smbfs support in Unix/Linux, you have to install it on Windows.
If you write your site in ASP (note you cite ASP.NET, to further your agenda with a brand new product), you can run it on Windows, Unix/Linux, and NetWare. Ever heard of Chilisoft! ASP, or Novell NScript?
Your idiotic points are akin to saying "Windows binaries don't run on a 4-way Sun box! Huzzah!"
When you can play the field fairly, and present valid points, feel free to do so. Otherwise STFU.
BTW, "more flexible" does NOT mean "more capable" or "more productive."
TCPIP, POSIX, SMB, there are millions of standards that Linux and @BSD had to meet just to be considered as part of the list for viable options (OSes), so thanks to them Microsoft will become "Just nother option" to do the same old thing, and thanks to open source, IBM (and many other company) is just another option, as a Linux vendor.
I think their prime criteria for evaluation was who could provide the most booze and hookers after their presentation.
Go ahead. Notice I'm posting as an AC so you can sue ME and I will have no alibi.
Come on, I double dog dare ya...
He had created a pseudonym previously as a Cage with a different first name
Last name Cage... Postmodern composer named John Cage... Mortal Kombat character named Johnny Cage, who cameoed in the unreleased video game Indeterminacy 64...
Will I retire or break 10K?
Rightly or wrongly, I think many helpdesks would be happier with machines that users leave well alone!
Much time, money and effort is often put into locking machines down and making sure the users are anything but comfy.
Not that that's a reason to recommend one OS over another, but your point can be taken both ways.
Lord Pixel - The cat who walks through walls
A little bigger on the inside than out
Despite fact OpenSSL is so widely used, there exist a project to make GPLed replacement for it - GNU Transport Layer Security Library.
It is useful for all those people, for whom BSD license is not enough free. I think that TLS (the new name for SSL, BTW) library is mandatory for GNU/Operating System. And because of GNU it has to be GPLed - now it means reimplemented from scratch.
I also fear, that it will be binary incompatible with OpenSSL - if so, it wouldn't gain popularity. It should be drop-in replacement.
But we will see - right now you can test it or go and help developing this crypto library.
:wq
I pointed out OpenBSD's concerns with OpenSSL on the NetBSD security list, and later summarised the points being made by Theo and others. The subsequent debate highlighted the fact that this is not a copyright issue, but a patent covenant one, and that Theo et. al. had misunderstood the purpose of Suns comments.
The hope is that the Sun code will be moved into a dedicated directory, as has been done with the problematic idea code. Then the code can be omitted when building binary packages for release. The source can be shipped with the offending code, and the end user can recompile OpenSSL to add it back in if the patent covenant is not an issue for them.
See the NetBSD mail archives at http://mail-index.netbsd.org/tech-security/2002/09 / for details.
Chris
All together now...
Underground, Overground, Wombling Free...
I'm going to copyright a silence one minute long, so now every 11th November you can no longer pay your respects to those who died in the war without first writing to me for permission.
It was nice of the slashdot editors to include 4'33" as background music to this page. - Reload to start the piece from the beginning.
what's the world coming to?!?!?
Don't worry, eventually it will become
standardized people. "We only accept
certain kinds people. All others
are not accepted."
What lack of imagination, what a limited
mind set. Our taxes at work.
Umm... Unfortuately copyright now is valid for 75 years after the death of the author. Therefore, if God copyrighted silence, the copyright would still be valid.
McFly777
- - -
"What do people mean when they say the computer went down on them?" -Marilyn Pittman
Can you really copyright something that has demonstratable 'prior use' and 'prior art'? There must be many examples of silence in use, in various lengths of time. The silence between CD tracks must be of a uniform length for example. I do not believe that a copyright can be granted on that since it is in common use. And if that is the case, are not 'overtly similar' lengths of silence (like 1 to 5 seconds more or less) not copyright-able either? And as someone else noted in an earlier post, people often hold 'a minute of silence', plenty of prior art on that one too.
If so, is what Batt is doing: "Batt has been busy copyrighting chunks of silence of various lengths other than the four minutes, thirty-three seconds of silence owned by Cage" going to be invalid or just cause lawyers to get more wealthy as folks choose to fight his copyrights on silence?
Right or wrong?
I have to use this cause I can't afford a real sig...
One argument against having a homogeneous (uniform) environment is the argument from the security standpoint.
The argument here is pretty much the same as the argument against monoculture agriculture (which is also very convenient to administer): if you get a disease (in this case a virus or worm) that devastates a single species/configuration, you're dead.
Now, of course, one has to do a tradeoff --- maybe your stuff isn't so critical, and it makes better cost/benefit to just take the chance that the next Code Red will toast you, and you'll have to do an entire rebuild. But maybe your application is critical to safety, to your business, or whatever. In that case, you might want to seriously think about having a heterogeneous enterprise so that when your machines in configuration X are toasted, those in configuration Y can carry on until a fix is found.
Given that there are people out there who seem reasonably serious about attacking the U.S., maybe the DOI should think about this.
Given that there might be people interested in looting American Indian trust funds might be another reason....
What about users who don't speak the language? When initially installing the system, the initial text will be incomprehensible, and if the user's language is unsupported, he/she will find it difficult to ever use the text-only system.
/bin directory before successfully stopping the delete).
It is relativelty easy to get a system to *speak* a multitude of languages (just use GNU gettext or, if you must, catgets). It is much harder to get it to understand these (for instance, try altering GNU Bash or the Microsoft Command Prompt to understand copiez (fr), abschreibe (de), copia (es), copiate (it) and the word for "copy!" in all other languages). Adding ad hoc support (in an interpreter or file system) for all variants of commands is not practical. (This is a problem with input in general - it is easy to OUTPUT dates, sums of money or whatever in any number of formats, but much more difficult for a computer to accept them (though possible in principle).)
The Bourne Again Shell is fine for most English-speaking computer users (and better than icons for the visually impaired!), but non-English speaking users need a more universal way of entering commands.
As for "only one way to do something", users of software appreciate being able to automate certain commands; it is difficult to automate use of a GUI without providing a CLI or "extension language" which in effect "provides another way to do it". Anyway, this "one way" can be highly inconvenient - is it more comvenient to type M-x dired, scroll to the file name and press d and then x, or to type C-z (you permit shortcuts), then use one's mouse or equivalent to point to the bottom of the screen, find one's "file manager", find the offending file and then go to the appropriate menu bar and choose the delete command? This would also reduce the chance of recovery if some part of the system breaks (or if someone accidentally types rm -rfv / (or equivalent) and loses all of the
Couldn't this be considered a parody?
The two most common things in the Universe are hydrogen and stupidity. -- Harlan Ellison
Would less than 10 seconds of silence be fair use?
-no broken link
Surely you mean mute point, don't...oh wait. Never mind.
Fly Windows NT:
All the passengers carry their seats out onto the tarmac, placing the chairs
in the outline of a plane. They all sit down, flap their arms and make jet
swooshing sounds as if they are flying.
- this post brought to you by the Automated Last Post Generator...