Slashdot Mirror


WebSense Patents Censorware System

Matthew Skala writes "As reported in SiliconValley.internet.com, filtering-software vendor Websense has received US Patent 6,606,659 on a "System and method for controlling access to internet sites". The new features in the patented system seem to revolve around using time limits instead of filtering sites out entirely; offering users a choice of viewing a site and having it logged, or not viewing it; and a scheme for automatically categorizing sites that looks very much like the "Bayesian filters" we've heard so much about in recent weeks. You may be interested in the filtering company's press release about their patent, or my own view."

179 comments

  1. Yipee by Realistic_Dragon · · Score: 3, Insightful

    If internet filters are going to cost money, then maybe schools and libraries will stop using them.

    My local library blocks out anything to do with pregnancy (like the council run pregnancy advice service), anything with chat in the domain name (like the casual chat web forum) but doesn't block goatse.cx. Go figure.

    The only news that could be better is that someone had patented spam emailling and was taking every spammer in the world to court.

    --
    Beep beep.
    1. Re:Yipee by Realistic_Dragon · · Score: 0, Offtopic

      My local library blocks out anything to do with pregnancy (like the council run pregnancy advice service), anything with chat in the domain name (like the casual chat web forum) but doesn't block goatse.cx. Go figure.

      That'll teach me not to RTFA. It seems that this filter would actually improve this situation and make it slightly more sane - assuming that it was set up correctly.

      --
      Beep beep.
    2. Re:Yipee by Doom+Ihl'+Varia · · Score: 1, Insightful

      Often not having filtering makes schools and libraries inelligible for some federal and state funding. Filtering is in effect profitable.

    3. Re:Yipee by moosesocks · · Score: 4, Funny

      but doesn't block goatse.cx. Go figure.

      Imagine the look on the librarian's face. Honestly.
      Anybody who goes there volluntarily is nuts, but in a library!!!???

      --
      -- If you try to fail and succeed, which have you done? - Uli's moose
    4. Re:Yipee by Gzip+Christ · · Score: 1
      The only news that could be better is that someone had patented spam emailling and was taking every spammer in the world to court.
      Hey Darl, you listening? I hear that spammers have misappropriated serious amounts of SCO IP. Go sick 'em boy. Spammers are obviously copying your IP!
    5. Re:Yipee by SoSueMe · · Score: 1

      Currently have mod points but can't find the -1 "Didn't RTFA" catagory. Hey, how do we suggest a legit enhancement?

    6. Re:Yipee by Zak3056 · · Score: 2, Funny

      Anybody who goes there volluntarily is nuts, but in a library!!!???

      I wonder where the Goatse guy fits in the Dewey Decimal System... (Or, "In Soviet Russia," the Dewey Decimal System fits in the Goatse guy.)

      --
      What part of "shall not be infringed" is so hard to understand?
    7. Re:Yipee by Duck_Taffy · · Score: 1

      I could see that as falling under "-1 Offtopic".

      --
      Karma: Ran over your dogma.
    8. Re:Yipee by 47Ronin · · Score: 1

      I would check the article but Websense filtering has made the page inaccessible due to inappropriate content.


      ...j/k btw tell your local library about trying some goatse.cx

      --
      Those who laugh at you for you having a Mac.. are the people who constantly call you to fix their PC.
    9. Re:Yipee by Anonymous Coward · · Score: 0

      "Dewey Decimal System"

      Ummm. Ohh

      And I was thinking that it was a horrible typo. Maybe Melvil once heard the name for the base twelve radix, and thought 'cool name'?

      Duodecimal \Du`o*dec"i*mal\, a. [L. duodecim twelve. See {Dozen}.]
      Proceeding in computation by twelves; expressed in the scale
      of twelves. -- {Du`o*dec"i*mal*ly}, adv.
      [1913 Webster]

    10. Re:Yipee by kaltkalt · · Score: 1, Redundant

      No, the gov't will just use taxpayer money to buy (licenses for) the software. That way not only can we have censorship, but companies with stupid patents can make millions of dollars.

      --

      Stupid people make stupid things profitable.
    11. Re:Yipee by Sri+Lumpa · · Score: 1


      ""In Soviet Russia," the Dewey Decimal System fits in the Goatse guy."

      even outside Soviet Russia there are many things that fit in the Goatse guy.

      --
      "The obvious mathematical breakthrough would be development of an easy way to factor large prime numbers." Bill Gates,
  2. Who are you? by Anonymous Coward · · Score: 0, Troll

    And why would I be interested in reading your view, giving you page hits, or otherwise allowing you to spew your nonsense everywhere?

    I've heard of shameless self-promotion, but Christ, you take the cake, and I am now putting an entry in my hosts file for your site that resolves to goatse.cx. I'd rather see that than your ramblings.

  3. Prior art? by StewedSquirrel · · Score: 5, Interesting

    Can anyone comment on the existance of prior "software" using these features. I seem to recall a "time limiting" software designed for Windows 3.1 back in around 1994 or 1995. There have been "filtering" software utilities for longer than that.

    Is this another example of the abuse of software patents? I think I might move to the EU (assuming they stay sane and reject the ability to restrict software development through patents).

    Stewey

    --
    There are 10 kinds of people in the world. Those who understand binary and those who don't.
    1. Re:Prior art? by capt.Hij · · Score: 2, Interesting

      All you need to do is find one place that changes their filtering software according to the time of day. For example, a coffee house that switches off their filtering after 10:00pm. On the other hand, if the patent is allowed to stand does this mean that my local library would not be allowed to have different filters in place at different times of the day without paying this company?

    2. Re:Prior art? by WellAren'tYouJustThe · · Score: 1

      Well aren't you just the little boy scout.

    3. Re:Prior art? by Shivaji+Maharaj · · Score: 4, Informative

      I have experienced first hand internet access policies based on time of the day. When i was working at a CMM Level 5 company, we were not allowed to surf during office hours ( 9 AM to 6 PM ) and the proxy itself was open between 7 AM to 7 PM weekdays.

      --
      We do not have a history of profitable operations. Our future SCOsource licensing revenue is uncertain.
    4. Re:Prior art? by mkaltner · · Score: 1

      I know for a fact that there is. The iPrism Web Filtering Appliance (disclaimer: I am an employee of the company in question and NOT speaking as a representitive of the company or the product.) has had these 'features' for years (I don't know how long exactly so I won't quote numbers, but still, it's years). Day/Time based control of profiles and ACL's, filtering, blocking, logging, monitoring... It's all there, been done before and by many more than just us (8e6 and n2h2 just to name a couple.)

      - Mike

    5. Re:Prior art? by bladernr · · Score: 2, Insightful
      As far as I understand, the patent was issued for more than "Time of Day Filtering." Patents are usually specific; don't let the generic headline fool you.

      Now, if you could find where someone had software that used Bysien (sp) filters for categorizing web sites, and also used time of day as an input into the access control algorithm, from my quick read over this, that would be prior art.

      I, for one, have never seen this approach used before, so the patent may be valid. Remember, he didn't patent filtering, or time of day; the patent is for a specific application of multiple algorithms.

      Patent or no, I like this approach. The rules-based approach just doesn't work well. Maybe this will have some sanity. This company deserves kudos for thinking.

      Different topic (one I've always wondered): If there are any lawyers reading this: My understanding of patents is that if I profit off someone else's patenteded invention, I owe them money. Legally speaking, if I implement their patented technique completly in the open, and give it to the public domain, do I (or anyone) have any liability, as long as no one makes money off of it?

      --
      Sarcasm and hyperbole are the final refuges for weak minds
    6. Re:prior art? by windex82 · · Score: 1

      and their bundled spyware logs where you go if you circumvent the block.

      The irony, AOL 9 now comes with an ad/spyware detector/remover. This might just be the last version of AOL as everytime it is installed it automaticly uninstalled itself!

      On a side note, everyone knows AOL is an unlimited use service and has been for ages. Are there any marketers who could explain why AOL keeps shwoing off hours of use instead of just comming out and saying unlimited use?

    7. Re:Prior art? by tasidar · · Score: 2, Informative
      I know for a fact that there is. The iPrism Web Filtering Appliance (disclaimer: I am an employee of the company in question and NOT speaking as a representitive of the company or the product.) has had these 'features' for years (I don't know how long exactly so I won't quote numbers, but still, it's years). Day/Time based control of profiles and ACL's, filtering, blocking, logging, monitoring... It's all there, been done before and by many more than just us (8e6 and n2h2 just to name a couple.)

      For it to be considered prior art, your appliance has to predate January 28, 2000 (date the patent was filed)

    8. Re:Prior art? by ratpack91 · · Score: 1

      On my university network the proxy would only let you use kazaa and similar programs at speed between 00:00 to 06:00 because the "bandwidth was cheaper". Outside these hours the transfer rate would be terrible but still about 700KB/s for web pages etc

    9. Re:Prior art? by Anonymous Coward · · Score: 0

      DNS records are time-limited and RFC 1034 (Domain Names - Concepts and Facilities) is dated November 1987.

    10. Re:Prior art? by Anonymous Coward · · Score: 0
      That's your prior art:
      cron(8)
      and a proxy of your choice.
    11. Re:Prior art? by secolactico · · Score: 1

      For it to be considered prior art, your appliance has to predate January 28, 2000 (date the patent was filed)

      I remember using Watchguard Webblocker feature before 1999, and it did pretty much what was described by the grandparent post.

      --
      No sig
    12. Re:Prior art? by nolife · · Score: 1

      I don't know what prior art is required so I am basing this off your claim of what is required..

      Squid ACL's have a very wide variety of time and content access controls. I've been using it for at least 2 years. Actually with Squid you can base access control off of tens of things, time, day, url, headers, incoming ip address, a keyword list, auth, and probably even when outside temperature is below 32F and the tide is high, plus any combination of the above.

      --
      Bad boys rape our young girls but Violet gives willingly.
    13. Re:prior art? by FxChiP · · Score: 1

      Wild guess, but it might be because they can't be arsed to remove it.

      Well, that and the fact that you get like 1024 hours free when you get a promotional AOL disk, and they want you to know how many minutes/hours have been taken away already (why not just illustrate that directly?)... I dunno. Your guess is as good as mine.

    14. Re:Prior art? by Anonymous Coward · · Score: 1, Informative

      AtGuard and Symantec's NIS have been able to firewall outbound web connections to specific hosts based on time of day since 1998.

    15. Re:Prior art? by Xtraneous · · Score: 1

      They were probably using packeteer. For fun\profit port scan your res-halls network; you can usually find it pretty easily.

      --
      .noitacidem deen uoy siht daer nac uoy fI
    16. Re:Prior art? by Anonymous Coward · · Score: 0

      Seriously: when did they receive/apply for this patent? I suggested the idea of using Bayesian techniques for web site filtering on the Spam Conference mailing list on July 19. (Certainly, there have been other web filtering programs for years, but I had not heard of a statistical program.)

      I would imagine that the patent was applied for quite some time ago if it has now been issued, but (1) if not, then I had already published the idea, and (2) this is kind of sad, because it might mean that I can't use my own idea without paying someone else... Gotta love those software patents, huh? :-)

    17. Re:Prior art? by Zilquis · · Score: 1
      I work for Preventon (http://www.preventon.com), and have written their content filtering software, that will filter internet address's. It can be set to filter particular types of sites within certain time frames.

      We are based in the UK, so will this have any effect on us?

    18. Re:Prior art? by ajs318 · · Score: 1

      No, it's still illegal to patent software in this country. Until Blair realises that private companies can make a profit on it, anyway .....

      I mean, the system of charging for directory enquiries was "broken" because you could only get information from your own phone company, not from their competitors. So they "opened up the market to competition" -- i.e. introduced a whole series of numbers for directory enquiries, all competing for your business. These companies are spending a fortune advertising their new numbers on the wireless, telly and in the papers. And where will that money come from? The mug punters that end up paying for a service that used to be free, is where. And even if you never use the service, you've already paid by being made to listen to adverts. Why has nobody invented a device that will automatically retune a radio set if it is playing an advertisement? Something similar could also be done with VCRs; automagically fast-forwarding through them on playback probably would be safer than not recording them, though I do begrudge the advertisers the oxide.

      Yes, there used to be a time, long ago, when directory enquiries used to be free. And when you got sent a utility bill in the post, there would be a reply-paid envelope for your cheque. These days the envelope just has a space marked "affix stamp here" {though, writing the words "Cheque Enclosed - Postage To Be paid By Recipient" seems to work just as well as a stamp}. Yes, people just gave stuff away. Then something went a bit rotten and now everyone is trying to make everyone pay for everything.

      Blair and his kind are a disgrace to the Labour party and have done more to harm the common person in just six years than Thatcher managed in all her time. The government cares only about London, not the majority of the country, and have openly admitted they would sacrifice every worker's job in the North to put 50 pence on a house in the South; at least we'll be paid giros in pounds rather than wage cheques in euros. Not that the pound has long to last anyway; when London falls we'll end up spending either Yen or dollars, depending if or not the US still thinks we're any good for anything after being kicked out of the EU for bad behaviour.

      --
      Je fume. Tu fumes. Nous fûmes!
    19. Re:Prior art? by phoenix_rizzen · · Score: 1

      It has nothing to do with making money or not. If you use their patented techniques without licensing the patent from them, you are liable and will (maybe) be prosecuted.

  4. WTF? by Anonymous Coward · · Score: 0

    It is allowed to patent bad things, too? Now, is this good or bad? *head explodes*

  5. Good by Anonymous Coward · · Score: 5, Insightful

    I don't want to use a censorware application anyway. Hopefully they price things high so that other people won't use them, an in particular, so that the government won't use them (in libraries, etc).

    1. Re:Good by Adam9 · · Score: 1

      OTOH, the government could simply appropriate more money for it and take more of our money to pay for it.

    2. Re:Good by lightspawn · · Score: 2, Informative

      Hopefully they price things high so that other people won't use them, an in particular, so that the government won't use them (in libraries, etc).

      That's not how it works. The libraries have to install them, or they lose federal funding. Thanks, Sen. McCain.

    3. Re:Good by Anonymous Coward · · Score: 0

      Yes, that's a very reasonable business plan: price your product so high that nobody buys it. Brilliant.

    4. Re:Good by tuffy · · Score: 2, Insightful
      That's not how it works. The libraries have to install them, or they lose federal funding. Thanks, Sen. McCain.

      But a lot of libraries aren't installing filters simply because the cost of installing them is more than the paltry amount of federal funding they receive.

      --

      Ita erat quando hic adveni.

    5. Re:Good by SoSueMe · · Score: 1

      Not when GWB wants $87,000,000,000.00 to avoid another Vietnam (of finance one).

    6. Re:Good by lord_paladine · · Score: 1
      > so that the government won't use them

      Ah ha! Your posting as AC, but I'll put bet money that your our beloved President, G.W.Bush. If the gov doesn't use them, you'll finally be able to surf for pr0n. I mean, look what Clinton had to resort to due to the content filters... Good old healthy pr0n!

    7. Re:Good by sketerpot · · Score: 1
      If you want to pull an RMS (without all the fanaticism and bad press) and Help Your Neighbor, you could set up a CGI proxy on an unfiltered machine. The you could give the URL to anybody that you want to be able to see things on library/school computers. It would really be helpful to quite a few people.

      A while ago, I wrote down some thoughts about Bayesian web filtering. The main point that I had was this: with web filtering, the people on both sides of the HTTP connection are on the same side, rather than having a greedy asshat spamming millions of decidedly unappreciative victims. You can make, say, porn sites that are indistinguishable from a discussion of the W3C recommendation process. How is a bayesian filter to know the difference? With email, the HTML tags are very suspicious; the IMG tag gets a very high spam probability. But with web pages, what can you do?

  6. Dear god by JVert · · Score: 5, Interesting

    What about all those people who burned karma saying they wanted to protect our freedom by patenting censorship? You thought they were crazy didn't you?

    1. Re:Dear god by mrseigen · · Score: 1

      The scumsuckers who want to control what you see on the Internet are the same scumsuckers who probably like software patents.

      Although it would be nice to see this destroy this particular piece of censorware, and some other ones by association (by making them look like total crap because of a lack of this "intelligent" filtering).

    2. Re:Dear god by bladernr · · Score: 2, Insightful
      The scumsuckers who want to control what you see on the Internet are the same scumsuckers who probably like software patents.

      So parents trying to keep their young children off porn sites are the same people defending software patents? What does good parenting have to do with software patents?

      So not allowing my young children to see porn makes me evil? I'm sorry, there are substantial, good uses for this type of software. There are also bad uses. It is like any tool: the tool is not good or bad, the use is good or bad.

      --
      Sarcasm and hyperbole are the final refuges for weak minds
    3. Re:Dear god by FxChiP · · Score: 1

      There's better ways than the friggin' censorware. How about sitting behind your young children and watch what they're browsing? Works up until they're 7-10. After that, teach them what not to view, check the website history list often, and smack 'em up if they visited anything bad.

      Or, if you REALLY like the censorware way, find all the porn website servers on the internet and put them into your Hosts file. I'll tell you how to do this (if you don't know how) if you e-mail me at FxChiP (at) MyWay (dot) com.

  7. "Stupid"? by Ophidian+P.+Jones · · Score: 1

    That's what your original post should have been moderated as, but alas, that option doesn't exist.

  8. How is this different from the access control? by another_ganesha · · Score: 5, Interesting

    I've been using the same basic web site access control algorithm for years. A description of my code reads very similar to the abstract.

    My system maintains a database of Internet files, (not sites, though I don't know what the difference would be...)
    My system does not limit the number of visits to a category a limited number of times, however, it does limit to download links once per user, which is (probably the same thing).
    My system allows users to request access, and then have access granted.
    I don't log which pages/sites users visit, but I know many apps that do (like nuke).

    I'm not a patent attorney, does this mean that my access control code violates the patent?

    Truly bizarre.

    1. Re:How is this different from the access control? by bladernr · · Score: 1
      I don't think you are in duplicate with this. It appears this invention uses Bysien (sp) filters for statistical analysis for web sites. It isn't keeping a database of web sites or rules per se. Remember, the patent isn't on the abstract, but the full details. People get caught up sometimes reading the headline or abstract; to really know what is patented, you must read the entire thing.

      As such, I don't think you have prior art. If you did, you still wouldn't be in the wrong. If you wrote yours prior to their patent application, their patent would be found invalid if they tried legal action (at least that is my non-lawyer understanding of patent law. you can't patent existing things... if you could, i would patent breathing, a pulse, etc, etc, then license it out to everyone)

      --
      Sarcasm and hyperbole are the final refuges for weak minds
    2. Re:How is this different from the access control? by Anonymous Coward · · Score: 0

      Compare your system to the one described in the claims. From a legal standpoint, the abstract is all but meaningless, and very rarely accurately describes the breadth and depth of what's actually covered by a patent. A patent abstract is more like the back cover of a book than the abstract of a scientific paper. Folks around here seem to base their analysis of patents based solely on abstracts when the information conveyed in the abstract is often a poor reflection of the nature and coverage of the patent.

    3. Re:How is this different from the access control? by LetterJ · · Score: 1

      I'm not criticizing your spelling (because it's a waste of time for all involved). I'm just curious why you spelled Bayesian the way you did twice in this same discussion, marking it with an (sp) both times, while the other spelling is in the article summary?

    4. Re:How is this different from the access control? by bladernr · · Score: 2, Informative
      Because my spelling is horrible, and I am dyslexic on top of that. When writing professionaly (rare occasion, but it happens), I am very careful, but it is a slow and arduous process. Informally, I just do the best I can and move on without spending inordinate amounts of time.

      My misspellings are frequently the same. Microsoft Word seems to reinforce this. It seems to notice words that I misspell often the same way and auto-corrects them after a while. Great for typing, bad for learning better spelling.

      Bayesian (copied from above) is one of those words that just gives me fits. I can read it, then be on a blank page 5 minutes later, and not remember, or, if I try, I get something mixed up. For me, if I can't spell the word right immediatly, trying to hard makes things get mixed up.

      Of course, on /., so many of us are bad spellers that the community is very forgiving of that particular sin.

      --
      Sarcasm and hyperbole are the final refuges for weak minds
    5. Re:How is this different from the access control? by Anonymous Coward · · Score: 0

      In the united states, a patent is valid not from the date of filing but from the date of invention. Rather, if I invent a combination beanie hat/potato-peeler on tuesday and you invent the same on wednesday, and i don't file until thursday, then after my patent is granted i would have the right to prevent you from selling your beenie hat/potato-peeler for the length of the patent. The prosecution of the patent could be more complicated because of the proximity of our independent inventions, but so long as I can prove when I invented said hat/peeler, my patent can stand up.

      That being said, a patent must be new, useful, and non-obvious (at the time of invention), and if any of these elements can be disproved in court then the patent is useless. For example, if you can get independent experts in the beanie hat and potato-peeler industries to testify in court that the combination of the two was obvious on tuesday then the patent is invalid. Patent examiners generally focus on patents and publications in their search for prior art which in turn guides them in determining whether an invention is new or non-obvious. Many inventions, such as those used as trade secrets, are never publicly disclosed and thus are rarely used to discredit a patent before it is granted. If Crazy Joe Idaho's Peeled Potatos used combo beanie hat/potato peelers in their peeled potato factory in secret but then learned of my patent, they could nullify my patent because they had undisclosed prior art.

      there are a lot of timetables on all of this, of course, and i don't know all the details off the top of my head. also, a company can't sit on something as a trade secret and then file for a patent once that secret has been revealed... it's important to show that you have been pursuing a patent and/or doing research towards that end in order to secure a patent, but there are a thousand shades of grey in there, and that's why there are lawyers and judges and such...

    6. Re:How is this different from the access control? by Anonymous Coward · · Score: 0
      >A description of my code reads very similar to the abstract.


      The abstract means nothing. It's the claims that matter. Many patents have abstracts that seem to apply to lots of existing systems, but when you examine the claims, it turns out the patent is much more narrow.

  9. This is a *good* thing by sosume · · Score: 1, Funny

    No longer will our children be hindered by censorware to discover the REAL face of mankind (pr0n)

  10. Shhh!!! by soliaus · · Score: 3, Funny

    ...dont tell them about a firewall, its a super-secret secret.

    --
    Speaking at Defcon 12 - Credit Card Networks Revisted: Pen
  11. logon hours restrictions by erikdotla · · Score: 1, Interesting

    Does this mean I have to turn off my Windows 2003 Server AD logon hour restrictions?

    Will anyone attempt to actually answer that, or will everyone start immediately making linux jokes and insulting me because I use Windows?

    --
    # Erik
    1. Re:logon hours restrictions by cscx · · Score: 1

      Linux won't ever support something like logon hour restrictions because of their political ideology. I'm not trolling here, but just think for a second. Such a thing could enhance security (i.e., people can't break in at night and just start randomly guessing passwords), but Linux will have none of that as it involves "restricting."

      What am I basing this on? Read Linux's man page for GNU su . You'll notice they don't support the 'wheel' (you-must-be-in-this-to-use-su) group like most other standart UNIXes. The man page actually contains a political rant from Richard Stallman about how the wheel group is da man's way of stifling freedom, or something. Go figure.

    2. Re:logon hours restrictions by letxa2000 · · Score: 1
      Based on your theory Linux would never support passwords because that involves "restricting."

    3. Re:logon hours restrictions by DeltaSigma · · Score: 1

      Naturally, all these GPG signatures we see all over the place are generated by windows users...

    4. Re:logon hours restrictions by 0racle · · Score: 1

      And if RMS had his way, thats quite true.

      --
      "I use a Mac because I'm just better than you are."
    5. Re:logon hours restrictions by cscx · · Score: 2, Insightful

      No, not really. See, you can always give your password to someone else (or rsa key if that may be the case). The major "concern" here, if you want to call it that, is the GNU folks don't like giving the sysadmin "too much control." Something like logon restrictions is against their thinking, but then again, the sysadmin can just change your password or delete the user.

      Of course, since you can do that, it makes the 'wheel' rant a bit silly, now doesn't it? In theory your statement should hold true, but it doesn't, so the whole "freedom" thing falls apart. If it were truely free, then you'd be right -- no one would have passwords. So disabling 'wheel' support in the name of freedom, in my opinion, is just dumb. Root is privelged access and *should* be restricted.

    6. Re:logon hours restrictions by vadim_t · · Score: 1
      It's already supported, see the PAM page. On the bottom you can see:

      pam_time: authorize users based on when and where they log in (like securetty, but) in a way that is dependent on the service they are requesting; Andrew Morgan

      Hint: RMS, while popular and quite unfluential, doesn't have full control of Linux and never will. Also my su manpage in Gentoo doesn't have that comment.

    7. Re:logon hours restrictions by falzer · · Score: 1

      Good thing it's not hard to make su act properly with the wheel group.

      chmod 4710 /bin/su
      chown root.wheel /bin/su

    8. Re:logon hours restrictions by Anonymous Coward · · Score: 0

      I don't get it in "man su", but here it is, from "info su":

      Why GNU `su' does not support the `wheel' group

      (This section is by Richard Stallman.)

      Sometimes a few of the users try to hold total power over all the
      rest. For example, in 1984, a few users at the MIT AI lab decided to
      seize power by changing the operator password on the Twenex system and
      keeping it secret from everyone else. (I was able to thwart this coup
      and give power back to the users by patching the kernel, but I wouldn't
      know how to do that in Unix.)

      However, occasionally the rulers do tell someone. Under the usual
      `su' mechanism, once someone learns the root password who sympathizes
      with the ordinary users, he or she can tell the rest. The "wheel
      group" feature would make this impossible, and thus cement the power of
      the rulers.

      I'm on the side of the masses, not that of the rulers. If you are
      used to supporting the bosses and sysadmins in whatever they do, you
      might find this idea strange at first.

    9. Re:logon hours restrictions by cscx · · Score: 1

      My bad, it's in the 'info' page.

    10. Re:logon hours restrictions by Anonymous Coward · · Score: 0

      d00d u can use setuid. u r t3h l337n355.

    11. Re:logon hours restrictions by cscx · · Score: 2, Informative

      Nice try at a "I AM SO SMART!!!1!" comment, but that totally defeats the purpose of su. 'wheel' simply defines who is allowed to su to root, not other users. 'su' by the way stands for "switch user" -- you can su to users other than root, you know. su should be mode 7411, and its program code should be something like:

      "If user is in group wheel, then su to root is allowed."

      But you already knew that.

    12. Re:logon hours restrictions by adrianbaugh · · Score: 1

      I've had pam_time running on a Linux box to do exactly this in 2001. I was trying to revise for finals but kept on being distracted by slashdot, so set up pam_time to only allow logins between 9pm and 9:30pm and had a root cronjob that killed all my normal user's processes at 10pm (and sounded a loud and annoying alarm at 7:30am!). It was a completely fascist system, but it did keep my computer usage reasonable for the term it mattered, and allowed me to get a 2:1. (Between hacking and climbing, physics came a close 3rd in terms of priorities!)

      --
      "'I pass the test,' she said. 'I will diminish, and go into the West, and remain Galadriel.'"
      - JRR Tolkien.
    13. Re:logon hours restrictions by cscx · · Score: 1

      Typo, make that 4711.

    14. Re:logon hours restrictions by vadim_t · · Score: 1
      Ah, it is indeed there. However, I've just checked that in Gentoo you *have* to be in the wheel group to su root. It's just done through PAM, not su.

      From /etc/pam.d/su:
      # Comment this to allow any user, even those not in the 'wheel'
      # group to su
      auth required /lib/security/pam_wheel.so use_uid
      Which again brings me to my point, RMS can say pretty anything he wants, but that doesn't make it law. Distributions can and do remove and work around his changes. This is one of the reasons why I like Linux. Even the most influential personalities don't have full control of anything.
    15. Re:logon hours restrictions by falzer · · Score: 1

      You're quite right. I completely ignored the needs of users who need to become other users besides root.

    16. Re:logon hours restrictions by Unregistered · · Score: 1

      The su thing is why i think RMS is too off the wall. While i think extremists are necessary, i think RMS is actually too extreme. Can someone please prove me wrong?

    17. Re:logon hours restrictions by DA-MAN · · Score: 1

      I resent that remark!

      My way of stifling innovation has nothing to do with wheels....

      --
      Can I get an eye poke?
      Dog House Forum
    18. Re:logon hours restrictions by DA-MAN · · Score: 1

      Ok how about this! /etc/shadow
      root:*:12286:0:99999:7::: /etc/group
      root:x:0:root,me,him,othersysadmin /etc/sudoers
      %root ALL=(ALL) ALL

      and last .bashrc for sysadmin's
      alias su="/usr/bin/sudo -u root /bin/su"

      Only drawback is that everyones own password will be the same as a root password, thus they should be guarded as such.

      --
      Can I get an eye poke?
      Dog House Forum
    19. Re:logon hours restrictions by DA-MAN · · Score: 1

      Damn, forgot to preview...sorry. Here's what I really meant to say.

      /etc/shadow
      root:*:12286:0:99999:7:::

      /etc/group
      root:x:0:root,me,him,othersysadmin

      /etc/sudoers
      %root ALL=(ALL) ALL

      and last .bashrc for sysadmin's
      alias su="/usr/bin/sudo -u root /bin/su"

      --
      Can I get an eye poke?
      Dog House Forum
    20. Re:logon hours restrictions by Ice_Balrog · · Score: 1
      Will anyone attempt to actually answer that, or will everyone start immediately making linux jokes and insulting me because I use Windows?
      Yes.
      --
      #include "sig.h"
  12. prior art? by SHEENmaster · · Score: 4, Interesting

    AOL can censor sites, and their bundled spyware logs where you go if you circumvent the block. Same thing?

    --
    You can't judge a book by the way it wears its hair.
  13. This story is a troll by JohnGrahamCumming · · Score: 4, Interesting

    The story seems to have almost no merit at all. it's YASAAP: yet another story about a patent. OK, so the patent office issued a patent that lots of people are going to think was either (a) obvious or (b) invalid because of prior art. Is /. going to start mainlining the output of the patent office to come up with stories?

    We already know that the patent office is issuing what seem like silly patents, and we already know we'd like them to stop.

    Does this particular story add anything to the debate or is it just a troll?

    John.

    1. Re:This story is a troll by i_really_dont_care · · Score: 1

      Look, it is important that we get informed about very broad, obvious patents like this. After all we may be affected by them. They also can be used as examples. And if you don't feel like discussing this again, just skip the comments and go to the next story.

    2. Re:This story is a troll by donnacha · · Score: 1


      Does this particular story add anything to the debate...

      Yes, it's FUNNY.

      No matter how many facts I know about the hypocrisy and idiocy of the patent system OR Microsoft OR the Government, I am heartened by anecdotes that do a good job of illustrating and bringing to life those facts.

      BTW, this patent trepasses on one I filed last month covering pepper-shakers generally. I'll be contacting each of you individually to let you know how you can bring your kitchens into licensing compliance.

      Donnacha

    3. Re:This story is a troll by Anonymous Coward · · Score: 0

      Yeah, and the nightly news should stop reporting about murders for similar reasons. If you don't like it, have your /. front page filter stories about patents.

  14. Adopt a Patent by David_Bloom · · Score: 3, Funny
    Patenting internet filtering?
    Seems everything's patentable nowadays.

    Can someone do me a favor and patent DRM? and closed-source? and antitrust? and that stupid L-shaped enter key?

    --

    Karma: Excellent (fuck, even in the future moderation doesn't work!)
    1. Re:Adopt a Patent by adrianbaugh · · Score: 1

      dammit, you can have my l-shaped enter key when you prise it from my cold dead hands.

      --
      "'I pass the test,' she said. 'I will diminish, and go into the West, and remain Galadriel.'"
      - JRR Tolkien.
    2. Re:Adopt a Patent by Anonymous Coward · · Score: 0

      I love it if I got a paatent on clossed source (yes i know IBM has prior art but thats not a limitation) I could sue M$ for everything they ship from now on.

  15. Prior art: Novell Netware - in 1994. by Anonymous Coward · · Score: 5, Informative

    I helped to sysadmin a Novell Netware installation back when I was at high school in '94.

    I seem to remember that they had a time limiting system. Per user, you could set when that user was allowed to log on and access the network.

    We used it make sure that users couldn't access the network when they weren't supposed to be able to - so kids didn't share their accounts with others or access the network outside of the allowed times (after hours unsupervised, etc).

    I'm not sure how this would relate to the patent (I'm not a patent lawyer), but this was a form of network censorship based on time.

    1. Re:Prior art: Novell Netware - in 1994. by sys$manager · · Score: 1

      1994? Try VMS back in the early days.

    2. Re:Prior art: Novell Netware - in 1994. by Anonymous Coward · · Score: 0

      Everyone seems to forget that the whole prior-art ballgame changes if you add either of the following phrases to a mundane idea that has been in use since before the dawn of the Internet Era:

      1) on the Web

      2) over the Internet

      Observe:

      "No it's not normal commerce, its e-commerce. That's right, since it's commerce over the Internet it's new, and therefore patentable."

      See what happens? Patents have been issued, with litigation quickly following to the patent holder's competition, for things such as e-commerce, online auctions, online surveys, and online testing solely based on the medium used. It's not like 99% of any of the internet related patents are inventive or even innovative, nor do most of them pass the "sniff test", but there is big business in patents these days and they keep getting cranked out. Not until patents in and of themselves cease to be sources of revenue, either through licensing or litigation, will their egregious misuse be halted.

  16. Re:Offtopic! by Anonymous Coward · · Score: 0

    That's what happens when 12 yr old jerks moderate.

  17. Prior Art Again by tarnin · · Score: 2

    Yup, I'm being reduntant as others have probably have and will post about this but its a serious thing here. How many patents have we seen lately that have had mounds of prior art? How many of them have been so blatently obvious that even non-techies are shaking their heads? How many non-techies know that this patent was granted? There is the crux of the issue.

    This patent might actually be good for us as it may jack up pricing on current programs but one has to think, how far reaching will they allow this to go in a court? Hey, I filter out port 135 traffic (gg people patch your machines!!) and some known spam networks at the core end, will they now come after me for filtering? It seems that more and more the patents are being granted on the overly obvious and are being abused to the hilt by the company to which it is granted.

    I see mass law suits in our future over this one and with the state of the clueless judges presideing over the cases this could turn sour.

    1. Re:Prior Art Again by Not_Wiggins · · Score: 1

      Best thing that can come out of this is:

      This company spends money preventing other would-be "we make filtering software, too!" companies from either making more stuff like this (patent infringement), nor from profiting from it (too expensive to defend in court).

      I say... let 'em all patent the stuffing out of cruft we don't really want; it'll bring the whole system to a screeching halt. ;)

      --
      Diplomacy is the art of saying, "Nice doggie!" until you can find a rock.
    2. Re:Prior Art Again by wroceng · · Score: 1

      Or how to make yourself unpopular... I haven't seen one person read this patent in detail before shouting about prior art yet (though I've not read all posts). The patent is quite specific. For example, if you maintain web pages in categories and allocate number of downloads per category you are not covered by this patent. If you create a filter database of any kind, categorised, time based etc but add the pages by hand, you are not covered (though you may be by another patent). There are many styles of implementing filtering that are not covered by this patent. Specifically you must have in your system: 1. Categories 2. A learning database based around words 3. Lexical analysis of incoming pages 4. Timing 5. Users permission list If any one of these elements is missing, its not prior art. So no, filtering per se is not covered.

  18. U.S.? Not internationally? by axxackall · · Score: 3, Interesting

    I guess in the rest of the world outside of USA (is Canada included?) we can be live just fine, keeping our development of similar web applications without paying any fee to the company, which has just abused even further unfamous American IP laws.

    --

    Less is more !
    1. Re:U.S.? Not internationally? by EverDense · · Score: 1

      I guess in the rest of the world outside of USA (is Canada included?) we can be live just fine...

      That is where WIPO comes in. WIPO itself does not issue patents.
      It is the however, a vehicle by which patent laws can be used and abused internationally.

      --
      http://jesus.everdense.com/
    2. Re:U.S.? Not internationally? by axxackall · · Score: 1

      So, are you saying that the vehicle already abuses it automatically, or an american company must ask explicitly WIPO to screw everyone else in the world up? If the former one than it will be the first time I would think that the globalization is a bad-bad process.

      --

      Less is more !
  19. WebSense filtering by TLouden · · Score: 3, Informative

    My school district uses WebSense to block out 'inappropriate' sites which includes porn, and instructions on making bombs as well as gaming and chat sites. It's pretty damned easy to bypass. Just find the google cache OR if pictures/files are needed find the foriegn version of the site. The de extension seems to be really good for downloads. Another idea would be to setup your own web server which had a form so that you could give it the URL of the site you wanted and it would then dl everything and serve it up under http://yourip/website_ext/
    Something like this would require replacing all the hyperlinks but that's not too difficult.
    Can anyone tell me if their filters check port 81? 45? etc?

    --
    -Tim Louden
    1. Re:WebSense filtering by damiam · · Score: 1

      My school's filter is a little smarter - it blocks Google cache and most anonymisers. The simple solution is to set up a web proxy server using CGIProxy on your home machine.

      --
      It's hard to be religious when certain people are never incinerated by bolts of lightning.
    2. Re:WebSense filtering by kittenthief · · Score: 1

      Heck no..if its not on port 80..its not blocked...this directly from websense itself, we've had a few computers with proxies installed, and have yet to find a way to block said proxies..port 8080, port 888 port 1024...all not blocked...

    3. Re:WebSense filtering by jroysdon · · Score: 1

      How about https on tcp/443? I doubt they'd block this as many things these days require it (FAFSA comes to mind).

      If they don't block it (try a few random banks' homebanking sign-on page to see if you can connect), then use proxytunnel to pass ssh via tcp/443 and you can then portforward to a home proxy server.

      Best of all, it's all encrypted and they can see none of it other than the ssh connection to your home server which is encrypted (as would be any https tcp/443 traffic).

    4. Re:WebSense filtering by tommertron · · Score: 1
      Just find the google cache...

      This is what I do at work on the odd occasion I go to a site that Websense decides in inappropriate for viewing in my own office and for my own eyes...

      Anyway, I'm not a techie, so I was wondering if anyone knows why it's not possible for Websense to block pages considering specific words, and not just specific domains. Is it because filtering words is by its nature buggy? You'd think a half-decent company would be able to write half-decent code to get around this.

      Can anyone clue me in here?

      --
      Random rants about technology: http://technorants.blogspot.com
    5. Re:WebSense filtering by TLouden · · Score: 1

      Filtering words would require more care because a perfectly legit page could use the word sex or porn or game or anything filtered and that isn't acceptable. Therefore in the interest of lazy programmers like me word filtering isn't used.

      --
      -Tim Louden
    6. Re:WebSense filtering by glasswalker889 · · Score: 1

      Actually, part of the reason they don't block based on content is because one of the ideas of web filtering at the corporate level is to save on bandwidth. If they had to pull down each site to look at the content it would completely defeat that selling point for the product.

      There are also the reasons you mention, of course...

    7. Re:WebSense filtering by Anonymous Coward · · Score: 0

      Most WebSense installations work as a kind of proxy plugin; and there is a standalone version which works as a proxy itself.

      Ensuring that all web traffic flows through WebSense isn't WebSense's responsibility, it depends on your internet infrastructure as a whole. If users aren't forced to use the corporate (WebSense being targetted at companies) proxy, well, sure they'll bypass WebSense by bypassing the proxy.

      WebSense filters on the URL itself, not on the content, so I think it can have HTTPS sites as well; although I'm not too sure about it.

      As for bypassing using google cache or something else, I remember them being quite good at keeping their URLs DB up-to-date, and they have a category with URL redirecting sites.

      I'm not that much in favor of censoring software, but I think it has a use in a corporate world; if only as a way to warn your users that they're about to see a site that might be against the company's policy. Doesn't dispense you of writing a good company policy to start with, of course.

  20. All or nothing by C10H14N2 · · Score: 1

    The management overhead of this system would result in the obvious: 1) anyone who could remotely need access to the internet as a job function would get unlimited access which may or may not already be logged. 2) anyone who doesn't would either be completed blocked, if they are not already, or using this system would simply modify their behavior, either choosing to be logged, or reducing their activity to below-radar levels. Any manager with an I.Q. above fifty would realize that an employee dicking-off for hours will fail to meet performance metrics. Doesn't matter if that is the internet or three hour lunches. All this system does is increase the cost and complexity of supervision.

    1. Re:All or nothing by slash.dt · · Score: 1

      It's not a significant increase in managment supervision. I work at a company that uses websense to manage Internet access for ~1000 brokers and IT staff. Works just fine and I seldom find a work related site blocked. Occasionally I hit a site which is blocked which doesn't deserve to be, but then, it's not work related so there is no obligation for the company to allow me access to it anyway. And it requires very little work to manage - a couple of people look after it amongst all their other tasks.

    2. Re:All or nothing by C10H14N2 · · Score: 1

      For blocking "objectionable" content it may be effective, but the attempt to block "casual surfing" if any access is deemed "work-related" simply seems pointless. If someone is going to laze around on the internet, they can do it just as well on CNN or the Wall Street Journal just as easily as on the latest incarnation of the jennicam. This reminds me of one poor sod at a rather large company I worked for a while ago who got caught using his computer for porn. He freaked out that there was a network logging system that surely must have caught someone else on his machine. In fact, it was deemed wholly absurd to waste resources planning, deploying and maintaining systems for that. Someone had simply walked by his cubicle and reported him, leading to his instantaneous termination. Most of that sort of abuse is quite easy to curb simply by similar social pressure -- e.g. "get caught, you're fired" -- rather like what is done for every other kind of workplace offense.

  21. Solution to rediculous software patents. by Thinkit3 · · Score: 0, Flamebait

    Abolish all patents. Thus, the software patents will no longer be valid. Simple, isn't it?

    --
    -Libertarian secular transhumanist
    1. Re:Solution to rediculous software patents. by ChrisHanel · · Score: 1
      I might be wrong, but i think a company or two might take umbrage with a move like that.

      Just a hunch. *shrug*

      --

      -=-This sig brought to you by The Cheat; and by Viewers Like You.-=-

    2. Re:Solution to rediculous software patents. by thorrbjorn · · Score: 1
      Yes, they might very well take umbrage, which is exactly why the companies themselves should be pressuring the government to abolish software patents (and other, even more rediculous forms of patents).

      Right now, Joe and Jane Sixpack fit into one of the following categories:

      • Don't know the patent system is badly broken
      • Don't care
      • Don't know what a patent is
      Eventually, that will change. Patent lunacy is already starting to his home with a small number of the Sixpacks.

      For example, Utah-based Myriad Genetics claims to own mutation genes called BRCA1 and BRCA2, genes associated with breast cancer. They sent cease-and-desist orders to every province in Canada, ordering them to stop using their own tests for the genes and use the Myriad tests instead. British Columbia complied for awhile, then started testing again. Ontario told them to go to hell.

      By the way, the Myriad test costs more than three times what Ontario's test costs, and takes about eight weeks longer to provide results. And this is what is mainly broken about the current patent system: it does not encourage innovation. It stiffles it.

      Another quick example, then I'll shut up. Did you know that better HIV/AIDS therapeutic drugs are available in India and other developing nations than in America? The reason? Of course, patent problems.

      So, to get back to my original point, why should companies want to kill software and other broken patents? Because eventually Joe and Jane Sixpack will wake up and see something wrong. What's the herds usual response to something unfavourable? Careful changes? A tweak here and there? Or burn the thing to the ground?
  22. Not the first time they've done this! by Anonymous Coward · · Score: 5, Insightful
    They have lots of trivial patents. I've personally come across one of their patents when developing CPU-usage limiting software for terminal server environments. (Hence the anonymous post, I'm trying to avoid legal action)

    The patent is GB2366891. The crux of it is that programs that use more than a certain percentage of the CPU (eg: 50%) are incrementally slowed down by quickly pausing/unpausing their threads at short intervals until their CPU usage is reduced below the threshold.

    How does this qualify for a patent? It's self evident! Things like this have been done in real time control systems (software and physical) for decades. It is nothing more than a high-frequency 1-bit DAC controller. Just because instead of controlling chemical reaction rates, the system is used for controlling processor usage, suddenly this method is worthy of a patent? Take a look at one of their diagrams. Is that the standard for new and inventive developments in the software industry? A flow chart with four, count them, four steps?

    The patent system needs an overhaul, and fast.

  23. Skala misses the point by Anonymous Coward · · Score: 2, Insightful

    In his article, Skala tars Bayesian spam filters with the same brush as website filtering. He touches on the differences but seems to miss the main one - one has to actively seek out material on the web, while spam is pushed onto you by third parties. If my child happens to type in a web address that shows pr0n, I may not like it, but short of typosquatting, the site is not in the wrong. However, if a spam merchant sends email to my child's account that includes images of sex acts, the child has no choice to not view it. So Bayesian filters are great for spam, because they are freeing me from seeing crap I don't like, and would waste my time to delete. Web filters prevent me from accessing stuff (good or bad) that I know may be out there, and must actively seek.

  24. Awareness... by mcrbids · · Score: 3, Insightful

    Does this particular story add anything to the debate or is it just a troll?

    It most certainly *does* add something. If you say something once, people will be very unlikely to remember it. If you say it twice, a few will remember it.

    If it's repeated every week or so for a year, most everybody will have gotten the point. It's called "repetition".

    I'll paraphrase Hitler: "Repeat a lie often enough and people will believe it to be true".

    Except, in this case, there's no lie, except maybe at the patent office.

    --
    I have no problem with your religion until you decide it's reason to deprive others of the truth.
    1. Re:Awareness... by adrianbaugh · · Score: 1

      You seem to have mis-spelled "McBride" as "Hitler".

      --
      "'I pass the test,' she said. 'I will diminish, and go into the West, and remain Galadriel.'"
      - JRR Tolkien.
  25. You're worried about that? by Qwell · · Score: 3, Interesting
    Try THIS on for size.

    PN/6618857

    And guess who it was?

    Somebody get my tinfoil hat, quick!

    --
    As of 10/06/03, I hate COBOL developers.
    1. Re:You're worried about that? by pavera · · Score: 1

      wow!!
      RHN, Apple Update, any system that installs more than 1 program based on prerequisites/requirements watch out MS has you patented.

    2. Re:You're worried about that? by Qwell · · Score: 0

      Yeah, thats what *I* said...

      --
      As of 10/06/03, I hate COBOL developers.
    3. Re:You're worried about that? by Qwell · · Score: 0
      Alright, for those of you too lazy to actually click on the link to see what the patent is for...

      "Method and system for installing software on a computer system"

      Patent granted September 9th, 2003 to Microsoft Corp, Redmond WA.

      --
      As of 10/06/03, I hate COBOL developers.
    4. Re:You're worried about that? by El · · Score: 1

      Yes, Microsoft appears to have patented RPMs... guess anybody installing software on Linux is going to have to check dependencies manually now... the brilliant insight that it's easier to have the computer check for you is obviously one of those "innovations" that Microsoft keeps talkin' about...

      --

      "Freedom means freedom for everybody" -- Dick Cheney

    5. Re:You're worried about that? by Qwell · · Score: 0
      Let's even extend it more then that.

      What happens when you type `./configure`?

      "gcc > 3.1.1 needed" (version number and error not accurate)

      What about when you `make install`?

      It creates directories and moves the files into the correct place.

      On top of all that, you're absolutely right, RPMs, debian packages, (let's jump out of Linux for a moment) What about Install Shield?

      This is an obvious misuse of the patent system, even a non techie can spot this in a heartbeat.

      --
      As of 10/06/03, I hate COBOL developers.
    6. Re:You're worried about that? by Anonymous Coward · · Score: 0

      Check dependencies? I think the fact that it is written with words like "applies to the general installation of software" and "anyone with skill in the art can clearly see that this applies to any other configuration of hardware" is what scares the **** out of me. So, no more third party developers, only M$ remains? Oh, well, it's back to analog computing for the rest of us. I hope the management of MS dies from horrible cancers that could have been cured with the developments that they are preventing by attacking anybody else in the world with any smarts.

  26. From this moment on... by CoyoteGuy · · Score: 2, Funny

    U.S. Patent has just issued me Patent 6,606,660, which states that I now own exclusive rights to the following keyboard keys..

    Enter, Spacebar, Ctrl, Alt, Esc, all function keys, Tab, Shift (both left & right), Caps Lock, all Page Scrolling fuctions, the Numeric Pad, and directional arrows. You are still free to use alphanumeric keys without my permission.

    Obviously this is sarcasm, but it's heading there... Real fast..

    --
    Slashdot.. Land of nerds, trolls, and FlameBait..
    1. Re:From this moment on... by Absurd+Being · · Score: 1

      Well, I have U.S. Patent 6,666,666, which states that I own the exclusive rights to evil. I now own MS, SCO, Amazon, et.al.

      --
      Karma: Excellent^(-t/Tau), Tau=Wittiness/Trollishness
  27. Ah....patents by Anonymous+Crowhead · · Score: 5, Funny

    Here is a patent application for a pepper shaker shaped like a dog where the pepper comes out of the dog's ass. That's what is being patented: the fact that the pepper comes out of the dog's ass and that it can be called a 'pooper shaker'.

    1. Re:Ah....patents by Mr+Thinly+Sliced · · Score: 0

      Hahahahaha thanks man I really needed a good laugh:

      "the pepper shaker 20 will announce his/her intended use of what will be articulated as a "pooper shaker," to the delight of those at the dinner table 44" ... "individually and collectively, designated 52, descending from the hindquarter exit openings 26 onto a food serving 54 beneath the shaker 20"

    2. Re:Ah....patents by Anonymous Coward · · Score: 0

      Ahh who doesn't want to put a little bit of shit on their food? I mean everyone will be going on to buy this.

      Man what a stupid world.

    3. Re:Ah....patents by donnacha · · Score: 1


      Hilarious, for those of you who can't be bothered wading through the application here is the important bit, the actual "what is claimed part":

      What is claimed is: 1. A construction with novelty value in enhancing the known functioning of a pepper shaker in the shaking dispensing of the condiment pepper upon foods, said construction comprising a hollow simulated dog of ceramic construction material sized to be grasped during shaking use in the hand of a user, a body with depending legs of said shape effective to provide a non-use condition thereof on a support surface with said body in a clearance position above said support surface to facilitate the grasping about said body in said hand of said user, said hollowness of said shape delimited by an external surface bounding a storage compartment for a supply of said pepper condiment, a supply of pepper condiment in said storage compartment, a hindquarters of said simulated dog shape, and plural pepper condiment dispensing openings characterized by embodiment in said hindquarters and in communication with said stored supply of pepper condiment, and operative up and down shaking of said grasped shape by said user effective to dispense pepper condiment through said hindquarters dispensing openings upon foods, whereby there is a cognitive synergism caused by similarity between the words pepper and pooper contributing to novelty value in the advertising of said shaker.

      You can tell this guy isn't too used to writing patents because he's specified far too much, right down to stuff that's trademark-related; any manufacturer who wanted to get around his patent would find it quite easy but, somehow, I don't think they'll bother.

      Donnacha

    4. Re:Ah....patents by Excen · · Score: 1

      It's Official: All the idiots fired from INS after 9/11 are all officially working for the US Patent Office "No beer until you finish your tequila!" -Leela's Dad

      --
      "No beer until you finish your tequila!" -Leela's Dad
    5. Re:Ah....patents by blibbleblobble · · Score: 1

      "That's what is being patented: the fact that the pepper comes out of the dog's ass"

      Seems strangely appropriate somehow.

      Could I patent something with patent applications coming out of the dogs ass?

    6. Re:Ah....patents by Anonymous Coward · · Score: 0

      Sounds good to me. Where do I get one?

  28. Websense Blocks Matthew Skala's own view by Anonymous Coward · · Score: 2, Funny

    I would love to read Matthew Skala's view but Websense at work here blocks it as "Non-Traditional Religions and Occult and Folklore"

    They don't seem to like criticism, do they?

    1. Re:Websense Blocks Matthew Skala's own view by Ripplet · · Score: 1

      Well we have Websense here too, and I could read it OK. I guess where you work you must have a lot of people interested in weird stuff right? And the US patent office would seem to fit nicely into the "Occult and Folklore" category!

      START_RANT
      As a follow on, I have to say I really hate f***ing Websense. I get blocked by it several times a week, always on perfectly legit sites. It seems to have a word lookup feature that just does a string match, it doesn't even look for whole words, so for example, if the URL contains the word 'combustible', well that's obviously porn because it can find the word 'bust' in there. I pity people in England who live in Essex or Sussex and try to find local information!

      In my view, if your workers aren't going to work, then they'll find something else to do anyway, whether it's surf the net, or run their second hand car business from the car park. It just goes way too far, as in the parent post's example. Another great example, we have a product that's supposed to be able to play MP3 CDs. Think I can find any information on MP3s on the net, not a chance!
      (On the other hand, I must admit that blocking the download of files ending in '.mp3' might actually be a good idea, I did once work at a place where our brand new Sun Stations all had their hard disks completely full within a couple of weeks, and it didn't take much detective work to find the reason why!)
      END_RANT

      My experience with Websense at work has pretty much convinced me that I won't ever install filtering software on my kids' home PC. They just need to be, er whatever the web equivalent of streetwise is (webwise? netwise? wwwise? wwwwise?).
      (Anyhow, by the time they're interested in porn I fully expect them to have learnt how to get round anything I install so there'd be no point!)

      --

      Skiing? Check out The Independant Skiers Portal

    2. Re:Websense Blocks Matthew Skala's own view by RDW · · Score: 1

      >I pity people in England who live in Essex or Sussex and try to find local information!

      Not to mention Scunthorpe...

      The Websense site blocking policy is often at the whim of your system administrators or their PHB, and there may well be no particular logic behind it; a single mouse click that excludes a specific 'category' can wipe out vast tracts of the net without any thought having gone into why this particular block is in place. The administrators may well have been told to get some sort of filtering in place, and are then just left to fill in the details. Many sites that use Websense probably block categories like 'Adult Material', 'Drugs', 'Racism' and 'Violence', but some of the other choices can be fairly random ('Advocacy Groups' is blocked at one site I know for no readily apparent reason).

      Luckily the technically inclined can generally find ways to circumvent the system, including a well known https proxy, Google's cache, and some more elegant solutions. Routing your web traffic through an ssh tunnel to an external system that has access to an unrestricted proxy works rather well, and can be implemented with Mozilla and PuTTY under Windows - neither program requires 'installation' to work, which can be a bonus on 'locked down' systems.

  29. Re:What was that patent? - Obligatory SCO Rant by soliaus · · Score: 1
    What was that patent number again?
    666...

    Sorry, not true. 666 is the IFUDD (International FUD Database) number of SCO's claim that they own this patent, becuase the source contains Unix code, which we all know they own.

    --
    Speaking at Defcon 12 - Credit Card Networks Revisted: Pen
  30. Hah! by oogoliegoogolie · · Score: 3, Funny

    A day ago I received patent 6,606,659: The act of pressing the three keys Ctrl, Alt, & Delete on a keyboard simultaneously to achieve a desired effect.

    I believe your patent infringes on my patent so you must get permission to use those keys. In fact earlier I was issued patent 6,606,658, a patent that patents patent infringement. I will be expecting two big cheques. :)

  31. Censor Ware protects your freedom! by Anonymous Coward · · Score: 0
    What people don't seem to understand is that if there were no programs such as DansGuardian then rather than just filter the school or library - the beurocrats would bring down the sites they did not like instead. Your freedom as an adult to view what you like at home is preserved. Schools etc have every right not to allow kids to view subjects against the ethos of the organisation.

    So this patent is a very bad thing.

    Wake up!

  32. Re:wouldn't be nice by Anonymous Coward · · Score: 0

    I'm reporting you to the FBI for making threats of arson. These threats also constitute possible terrorism, and I'll be sure to inform them of this, too. I encourage anyone else who despises terrorism to also report the parent post to the FBI. I think most of us would prefer to read Slashdot without reading the terrorist viewpoints of a few very sick individuals who think they can use any means necessary to achieve their sick and twisted view of the world they desire.

  33. how come... by the_real_tigga · · Score: 1

    ... and I'm serious, how come for the last 15 or so slashdot story headers (and the text below too) I felt like going "fuck you, that dosn't concern me at all".

    There is no way to save this post to go be mod'd into "-1 Flamebait" oblivion anyway, so I'll just post my theory: I don't live in the land of the alleged Land Of The Free.

    BTW, if you're offended by this, don't bother to reply.
    Please.

    --
    my .sig is better than yours.
    1. Re:how come... by moz13 · · Score: 0

      BTW, if you're offended by this, don't bother to reply.

      Then why did you post the original comment if you were offended?

    2. Re:how come... by the_real_tigga · · Score: 1

      I wasn't.
      I'm merely observing.

      --
      my .sig is better than yours.
  34. Re:comp.sys.amiga.games by Anonymous Coward · · Score: 0

    listen dude. I owned an amiga and its a helluva thing. you should see the intro demos by the game hackers! nvidia still can't get there.

    oh, and btw, in two days it will be 811 aniversary. prepare material to post.

  35. Wow... by Anonymous Coward · · Score: 0

    I just sat in a sales pitch from these guys and they expounded upon the "open" nature of their solution.

  36. I, for one.... by Anonymous Coward · · Score: 0

    I, for one, <censored>.

  37. The Narrowing of the Internet by donnacha · · Score: 1



    "...offering users a choice of viewing a site and having it logged, or not viewing it"

    This may sound like quite an elegant solution, especially compared to the outright blocking of sites not recognised by their master database but this could well end up creating a far more dangerous climate of self-censorship.

    For instance, if a perfectly legimate but not "mainstream" site, say an anti-war one, hasn't yet made it onto their database, you have to accept that your boss will be notified of your visit and made aware of your doubts about the government.

    In that situation, most people will just give up and put the corporate propaganda feed-pipe back in their mouths.

    Donnacha

    1. Re:The Narrowing of the Internet by Mythicman · · Score: 1

      It seems a lot of this controversy has to do with the litigation-happy society we find ourselves living in these days. As the network admin for my company, I have used WebSense, and the risk that it might block something legitimate is negligible compared to the risk we, as a company, face if we are presented with a harassment lawsuit as a result of something we DIDN'T block.
      I guess it all comes down to each individual company or network. I certainly don't want to have my home use of the internet blocked or monitored in any way, but when at work, it should be expected that an employee should be WORKING rather than surfing the net, unless it is directly related to their job. It would seem that an additional step on the part of management to, not KEEP you from surfing, but just to restrict any objectionable (or anything that could possibly be construed as such) material is just an honest attempt to prevent some po'd employee from having an excuse to take money from the company. This is specifically true in the case of small to mid size companies who might REALLY be hurt by such a lawsuit. In fact, we at my company ditched the filtering method altogether, and set our firewall to block all web access with the exception of a whitelist of sites which our employees need access to for the performance of job duties. To my way of thinking, since the company owns the network, and is therefore liable for what goes on thereon, it is the company's perogative to take whatever precautions fit their specific needs.

  38. Re:comp.sys.amiga.games by Anonymous Coward · · Score: 0

    I used to write those amiga intro demos.

    They were crap

  39. Re:logon hours restrictions (su and wheel) by adrianbaugh · · Score: 1

    So find the su executable and chmod it to 754, chown it to root:wheel. It's not as fine-grained as the 'only-wheel-can-su-to-root-while-others-can-su-to- other-users' usage, but I have a hard time imagining why normal users should be allowed to su to other normal users anyway. Proper permissions can generally be set up to allow the correct access without all that malarkey.

    --
    "'I pass the test,' she said. 'I will diminish, and go into the West, and remain Galadriel.'"
    - JRR Tolkien.
  40. SquidGuard 1999-04-30 by jroysdon · · Score: 4, Interesting
    What date do we need to find prior art before?

    SquidGuard changelog

    1999-04-30 New time function: (leh)...


    Stupid lameness filter blocks me from posting more, but you can easily see it in the changelog.
  41. A link for the lazy by Jenolen · · Score: 0
    --
    Karma is like sex. I can't remember the last time I had either of them.
  42. One way around websense... by Anonymous Coward · · Score: 0

    I worked at a company who used websense.
    Sure it blocked sites...
    *evil grin*

    HOWEVER: Sites that have a https copy of their main site (or a proxy server at home) are invisible to websense since well *ahem* it is encrypted.

  43. Websense should be illegal. by Gannoc · · Score: 1
    NOT because of corporate/government censorship but they provide software to China so they can find out who goes to western news sites and suspicious political sites.

    "Why, Gannoc", you might be claiming, "Wherever did you hear such vicious slander against Websense?"

    Why, right on their goddamn website. They're proud of it, of course, because the type of people who invest in a company like Websense are the type of people who don't mind the idea of a few people going to jail for going to a politically progressive web site, as long as the stock price goes up.

    Bah.

    1. Re:Websense should be illegal. by Gannoc · · Score: 1
      I mean, I have to reply to my own freaking comment. That's like Ford putting up an article about a crazy escaped child molester who ran over 6 people before finally being taken down by a SWAT team, because the article mentioned that the man's Ford truck withstood over 142 bullets before bursting into flame.


      "Built Ford Tough!"

  44. Oh Boy! PNG-proxy by bigattichouse · · Score: 1

    Now, build a "PNG-Proxy" web-site. Enter a URL, it grabs the page and renders it to a snapshot of the website... so Bayesian (or other text-based) Filtering does nothing... you're looking as a screen shot (maybe even convenience image map as well) of the web page.

    --
    meh
    1. Re:Oh Boy! PNG-proxy by shish · · Score: 1

      They could always just ban the png proxy like they did with MegaProxy. I've been trying to find ways round websense since it banned my programming based site for containing "mild humour / games" :(

      --
      I mod down anyone who says "I will be modded down for this", regardless of the rest of their comment
  45. *sigh* by mingot · · Score: 1

    I used to work for a company that sells a blocking appliance (WebFilter by TeleMate.Net) and pitched the idea of using Beysian For categorization shortly after Paul Graham's "A plan for spam" in september of last year.

    Also pitched the "hey, I'm a big boy, let me go to the blocked site, but log it" idea.

    Since they were already had a long term contract with another company for the categorization (which works pretty well) no one was very interested in re-doing that component. The other idea got an "interesting, but there is already to many other features the customer is asking for" response.

    Ah well.

  46. Websense and the "coaching" feature. by Nonesuch · · Score: 1
    Have you looked at Websense? How evil it is depends on how you deploy it. For a while I was using the eval version on my home Squid cache to asist in blocking porn site popups while not preventing intentional porn surfing. Not bad for censorware.

    "...offering users a choice of viewing a site and having it logged, or not viewing it" This may sound like quite an elegant solution, especially compared to the outright blocking of sites not recognised by their master database but this could well end up creating a far more dangerous climate of self-censorship.
    But in an office enviroment, this may be exactly what you want to have!

    Many an enlightened employer has put in an unrestricted DS3 connection for the office and expected that the employees will do the right thing (call it self-censorship, call it responsibility, whatever), only to start reviewing usage reports and discover that the sites that get hit most often are autopr0n and QuietSurfer.

    Thus the need for a censorware product (such as websense) that let's employees continue to access the sites they need to get their job done, without hurting productivity as would happen if questionable sites were just blocked with no option to "click through".

    For instance, if a perfectly legimate but not "mainstream" site, say an anti-war one, hasn't yet made it onto their database, you have to accept that your boss will be notified of your visit and made aware of your doubts about the government.
    And what exactly are you doing accessing this site from work, using the shareholder's computer and bandwidth?

    If you can justify how your visiting this "perfectly legitimate but not mainstream site" serves to maximize shareholder value, then you should not have anything to fear from your boss.

    In that situation, most people will just give up and put the corporate propaganda feed-pipe back in their mouths.
    Or just wait until you go home and access the "Dean for President" site on your own time.
    1. Re:Websense and the "coaching" feature. by donnacha · · Score: 1


      For a while I was using the eval version on my home Squid cache to asist in blocking porn site popups while not preventing intentional porn surfing.

      It's not the choice element I object to but, rather, the fact that choice is skewed by lack of privacy.

      Many an enlightened employer has put in an unrestricted DS3 connection for the office and expected that the employees will do the right thing (call it self-censorship, call it responsibility, whatever), only to start reviewing usage reports and discover that the sites that get hit most often are autopr0n and QuietSurfer.

      "Many an enlightended employer.." Have you got actual figures on that? In my (admittedly limited) experience, trust extended to workers is rewarded. Anything above basic monkey-work requires the employee to be self-motivated to at least some extent, management "crack-downs" may temporarily boost productivity on the shop floor but, in the longer run, this disempowerment shifts responsibility away from the worker and onto management, a teacher/child relationship which ends up consuming vast amounts of management time. Work become a "while the cats away" game.

      I'm not saying that some people don't abuse trust at times but this is generally a personal discipline issue that the person concerned is struggling with and that his co-workers and managers are all too aware of: if someone isn't pulling his weight, it's pretty obvious without having to discover through Internet logs. If he can't develop the self-discipline to do his job without requiring vast amounts of supervision, that worker actually belongs in a teacher/child relationship.

      That's the point at which the company has to decide whether they do teacher/child or adult/adult (you can't be both types of company)and act accordingly, hiring and retaining the appropriate staff. I have no doubt as to which model is more efficient.

      And what exactly are you doing accessing this site from work, using the shareholder's computer and bandwidth?

      I don't buy that argument either. All too many slashdotters, especially during the whole dotcom hallucination, will have personally experienced the culture of underpaid overtime promoted by management.

      Most people in both the US and the UK are working far too many hours, in stressful, understaffed and underfunded environments but one concession that has evolved is that they can conduct a certain amount of personal business (paying bills etc) online, reading their kids' school reports, stuff that would have required time-off or at least sane going-home times in the past.

      Okay, checking out a political site or reading the news might not be absolutely vital but we all work to a rhythm, with varying levels of focus throughout the day and a certain amount of off-time and reward. Some might call this goofing off but both the quality of your work and your sanity would disintegrate if you try to apply yourself fully every second of the day.

      That's just how humans work best, much as that thought might upset the poor auld shareholders.

      Also, to complain about this use of "the shareholder's computer and bandwidth" is ridiculous when your sweating over that computer 60 hours a week for said shareholder and probably "up-skilling" yourself with an O'Reilly book on your own time during the weekend.

      Or just wait until you go home and access the "Dean for President" site on your own time.

      Again, you might not have that much time at home if you're working insane modern hours - better to build that sort of thing into your at-work rhythm.

  47. MICHAEL?! MICHAEL SIMS?! by Anonymous Coward · · Score: 0

    Are you seriously meaning the guy who did more damage to the anti-Censorware issue than anything or anybody else? The same Michael who unlawfully took the entire Censorware.org site down rather than admit he was being a silly little girl over a perceived slight?!

    I don't know whether his coding skills come anywhere near that which you suggest, but his journalistic skills, ethics, and personal integrity SUCK!

  48. CIPA Requires by ArtisteTerroriste · · Score: 1

    If I remember correctly, the Child Internet Safety Protection Act requires many features simular (perhaps exact?) to be 100% compliant with the act. I doubt they would write such into the bill unless the technology was ALREADY widely available.

    The filter we use in our district, Netspective (Verso) also has simular features, and needed them to claim to be compliant.

    Fishy, fishy... I'll be forwarding this article to them.

  49. "They're watching you, you do not know..." by aixguru1 · · Score: 1

    At least this confirms my suspicions about whether our WebSense server at work knows how much time I spend on /. On the upside, at least I don't have to see those horrible X10 spycam ads.

    --
    root 10956 5164 0 Oct 22 - 0:23 sendmail: rejecting connections: load average: 70 (isn't sendmail just too kind)
  50. Testing by revscat · · Score: 1

    Please ignore this post. Don't even waste a mod point on it. It's just filler.

  51. Lousy quality sw patents by Anonymous Coward · · Score: 0

    This is a very specific sort of filtering method.

    It should also have been deemed obvious.

    Certain viewpoints:

    I am for software patents because:

    (1) they demonstrate utility.

    (2) the line between sw and non sw patents cannot be fully delineated.

    (3) certain software research can be accelerated via patent protection.

    That being said,

    (4) sw is much more malleable than other inventions.

    (5) because of (4) there is less of a cost of innovation.

    (6) because of (5) the obvious factor for sw patents needs to be raised to only incorporate "costly" innovation (example: an improved speech recognition capability).

    This patent exemplifies a minimal cost of innovation software utility.

    The supposed basic point of novelty over the prior art involves time limit filtering involving:

    insert start of time upon website entry.
    insert end of time upon website exit.
    compare cumulative time upon next website entry.

    This involves creation of a table which links user + time to a catagory.

    Plus 3 SQL statements.

    This sort of thing prejudices people away from my arguments (1, 2 and 3) above that the patent system could be used to spur sw innovation.

  52. RE: https by A55M0NKEY · · Score: 1

    If sites used https, instead of http for all pages it would do wonders to increase the privacy of web surfers. Sites could even serve up 500 Internal Server Errors to Websence crawler bots, and to people from IP addresses known to be associated with censorware companies to try and keep off the block list. What percentage of web traffic occurrs from people at work? Being monitor proof could really increase traffic to a site.

    --

    Eat at Joe's.

  53. How I got around Websense at my work. by citizen6350 · · Score: 1

    Websense blocks access to sites that mention 'proxy' servers and other work around methods. Fortunately I have access to a personal webserver with PHP. I simply wrote a script that would make my webserver download pages and images to it and post them to me, so the domain and content was innocuous to Websense. You could also set up a proxie from outside of work, and write down the information you needed when you went in to work to set it up on your computer- its really not very hard to get around Websense.

    --
    "Sorry Im not more user-friendly."
  54. RTFPatent by poot_rootbeer · · Score: 1


    Johnny Slashdot still doesn't get it. This patent covers A censorware system. Not every censorware system. Not the concept of a censorware system. Just the implementation they have come up with.

    Several aspects of this system are obvious and pre-existing, yes. But that doesn't mean the entire system is obvious or pre-existing. Combining existing components in a unique way has always been a form of innovation (and I don't mean in the sarcastic, Microsoft sense of the word).

    "Why, the fax machine is nothing more than a toaster with a phone attached!"

  55. Damn corporation, go proxies by JAgostoni · · Score: 1

    My company uses WebSense and filters out just about everything WebSense offers to filter. It's nice to know that I get 70% spam (vs. legtitimate) email in my Inbox but I cannot view a site that uses profanity. My virgin eyes... However, that's what proxies are for ...

  56. bigger number by SHEENmaster · · Score: 1

    Do you buy bandwidth is kilobytes/sec or kilobits/sec? Hard disk space in binary gigabytes or decimal gigabytes?

    Bigger numbers are easier to sell. I buy my bandwidth in bushels per horsepower, and that's how I like it!

    --
    You can't judge a book by the way it wears its hair.
  57. Your view on the patent was blocked... by Anonymous Coward · · Score: 0

    at my company by WebSense. Ironic, huh?