You can change the GPL all your want for your OWN programs. You just can't change it for other peoples programs. If you want to change a line of the GPL to restrict your program from being used by morons: "If you have ever posted a First Post! comment on Slashdot you may not use this program" you are welcome to but you cannot do the same thing for someone elses program. ALSO, once you have done this, anyone else you uses your program must also use your license for your code.
Re:This couldnt be further from the truth
on
A Profile of Coders
·
· Score: 1
You missed the point. If you can't concentrate for more than an hour at best then you aren't the person this article was talking about.
Someone already made this point, but you are so paranoid that I will make it again. Bob: Oh no! The $10M diamonds got shipped to John Smith instead of Dick Smegma! Tom: Who the hell shipped it? I'll fire the bastard! Bob: Uhmm.. it seems that John Smith was in charge of shipping that item.
Which amounts to guilty until proven innocent. If B&N has to stop doing business, they start to lose money. In this case the "offensive behaviour" is operating a web site that makes B&N money. Whether Amazon wins or not, B&N still loses money. This is pretty bad.
Public key encryption is very slow (for all operations) so it is never used for bulk encryption. Instead, what you need to do is use a very fast secret key stream encryption algorithm (such as RC4) to do your actual data transfer and use the public key system to transfer the keys. It works like this with client A and server B: A: generate a random, unguessable secret session key. A: obtain B's public key A: encrypt your secret key with B's public key A: send the encrypted key to B A: initialize the stream cipher with the session key B: decrypt the encrypted key with my private key B: initialize the cipher with the decrypted session key A and B: begin data transfer.
Now, as far as feasability of using a public key system for stream transfer.. it's certainly possible but only in output feedback mode with a rather large block size. Also, it will be slow as to be useless. Your only other option is to invent a very fast public key cryptosystem... I wish you luck:) By the way, the protocol I described above is very similar to what SSL and PGP use. The technical documents on those protocols would be good reading along with "Applied Cryptography" by Bruce Schnier
Comon people, think about this before you flame. Someone submitting invalid data can ruin this entire project for everyone. Open source software doesn't get tested until it's too late, and by time a calculation bug is found in the code, thousands and thousands of entries could be invalid. At least think about the project some before you randomly spew out "Free The Source!!"
I would like to hear your thoughts on the expiration of the RSA patent next September. Do you think that RSA will finally be free, or will RSADSI tangle it up in some type of legal mess?
Pilot and Palm Pilot are probally refering here to the old, old ones. It probally should have said Pilot and Pilot Pro or something. They are talking about pre Palm 3.
It's been said over and over. Security through obscurity does not work. Also, Skipjack was designed by the gubment.. if that's who you are hiding from, I would use something they didn't have their fingers in:)
Can you say "viable desktop environment?" Personally, I don't really think this is a good thing to point out at the end of a tech support call that outlines several of Linux's and it's various desktop systems weaknesses. Also, this should have never been made public. It gives Linux (and Loki) a bad image. Employee: I can't get Oracle for Linux installed. Boss: Call tech support. Employee: But what if I ask something dumb and my call shows up on Slashdot and I have to quit my job and become a hermit? Boss: Hmm.. good point. Let's use Solaris.
There is a VERY big difference in computing time to crack a 512 bit key compared to a 1024 bit (which any security conscious person is using) or even more so, a 2048 bit key (which we paranoids) use.
Export laws restrict you from having any easy way to add strong crypto to a weak crypto system. This is why the Crypto API has the provider signing process with Microsofts key. It restricts new providers to be signed by Microsoft, and MS is not allowed to sign any provider with strong crypto. Export laws suck ass.
Now, I hate Microsoft as much as the next guy, but if you face the facts, you will see that MS IE is much closer to standards than the current batch of Netscape browsers..
Just think how angry we will be in 1000 years when the only thing you can get on the radio is the random SPAM broadcast from Earth hundreds of years ago..
I have not really watched any TV in about 2.5 years. Once in a while I catch a Futurama or When Crazed Chickens Attack but I find my time is better spent coding, chatting with others or reading something. Even reading fiction is better than watching it. At least you have to excercise your brain a bit.
With Be you pay $69 (or lower at some places) for the OS. You then get EVERY dot release, fully installable, on a CD, in the mail, without messing with it... for free. Then, when they come out with a new major release, you can get that for $25 with the above qualifications. Basically, Be's "bug fix" releases are free, you only pay for big new stuff.
Did you use your credit card to get access? No? Fine, shut up. These are busy folks. They print what sounds interesting and unless you plan on paying them, they don't have time to read every article. Get over it.
Hey folks, barely anyone has seen the thing yet. Let the people at least get it out the door before you all kill them. If what most people are saying is correct (that it is just a modified BeOS) the source to all modified GNU utils IS ALREADY available and always was at ftp://ftp.be.com and on the BeOS CD. So, settle down and let a cool product breath a little.
Okay, so, Raster leaves RedHat with the intention of spending more time on E and making it the God of all window managers. E is *still* open source. Redhat no longer has to pay someone to develop E, and no longer has to deal with a engineer who doesn't fit into a corporate environment. They still get E, now they just don't have to pay for it.
And he is still worth approximatly 947 gazillion dollars more than you, me and Linus put together. Oh, and if money isn't everything.. he is greatly respected by a whole lot of people. Maybe not the Linux crowd, but I remember when I was just starting to program and I dreamed that I would be as bad-ass as Bill Gates. I don't feel that way any more, but lots of people do.
Slashdot Mirror
Aren't you the guys with the wacky CDR tax?
You can change the GPL all your want for your OWN programs. You just can't change it for other peoples programs. If you want to change a line of the GPL to restrict your program from being used by morons: "If you have ever posted a First Post! comment on Slashdot you may not use this program" you are welcome to but you cannot do the same thing for someone elses program. ALSO, once you have done this, anyone else you uses your program must also use your license for your code.
You missed the point. If you can't concentrate for more than an hour at best then you aren't the person this article was talking about.
Someone already made this point, but you are so paranoid that I will make it again.
Bob: Oh no! The $10M diamonds got shipped to John Smith instead of Dick Smegma!
Tom: Who the hell shipped it? I'll fire the bastard!
Bob: Uhmm.. it seems that John Smith was in charge of shipping that item.
On other words "We are looking for people to stock shelves too" :)
Which amounts to guilty until proven innocent. If B&N has to stop doing business, they start to lose money. In this case the "offensive behaviour" is operating a web site that makes B&N money. Whether Amazon wins or not, B&N still loses money. This is pretty bad.
Public key encryption is very slow (for all operations) so it is never used for bulk encryption. Instead, what you need to do is use a very fast secret key stream encryption algorithm (such as RC4) to do your actual data transfer and use the public key system to transfer the keys. It works like this with client A and server B:
:)
A: generate a random, unguessable secret session key.
A: obtain B's public key
A: encrypt your secret key with B's public key
A: send the encrypted key to B
A: initialize the stream cipher with the session key
B: decrypt the encrypted key with my private key
B: initialize the cipher with the decrypted session key
A and B: begin data transfer.
Now, as far as feasability of using a public key system for stream transfer.. it's certainly possible but only in output feedback mode with a rather large block size. Also, it will be slow as to be useless. Your only other option is to invent a very fast public key cryptosystem... I wish you luck
By the way, the protocol I described above is very similar to what SSL and PGP use. The technical documents on those protocols would be good reading along with "Applied Cryptography" by Bruce Schnier
Comon people, think about this before you flame. Someone submitting invalid data can ruin this entire project for everyone. Open source software doesn't get tested until it's too late, and by time a calculation bug is found in the code, thousands and thousands of entries could be invalid. At least think about the project some before you randomly spew out "Free The Source!!"
Bruce,
I would like to hear your thoughts on the expiration of the RSA patent next September. Do you think that RSA will finally be free, or will RSADSI tangle it up in some type of legal mess?
Pilot and Palm Pilot are probally refering here to the old, old ones. It probally should have said Pilot and Pilot Pro or something. They are talking about pre Palm 3.
The URL to the site should be http://www.penop.com
Simple Answer: Take the blue pill.
It's been said over and over. Security through obscurity does not work. Also, Skipjack was designed by the gubment.. if that's who you are hiding from, I would use something they didn't have their fingers in :)
Can you say "viable desktop environment?"
Personally, I don't really think this is a good thing to point out at the end of a tech support call that outlines several of Linux's and it's various desktop systems weaknesses. Also, this should have never been made public. It gives Linux (and Loki) a bad image.
Employee: I can't get Oracle for Linux installed.
Boss: Call tech support.
Employee: But what if I ask something dumb and my call shows up on Slashdot and I have to quit my job and become a hermit?
Boss: Hmm.. good point. Let's use Solaris.
There is a VERY big difference in computing time to crack a 512 bit key compared to a 1024 bit (which any security conscious person is using) or even more so, a 2048 bit key (which we paranoids) use.
Let's see. Do you use a VPN? Authentication? NT Security? Active X code signing? SSL in Internet Exporer? Dozens of others?
Export laws restrict you from having any easy way to add strong crypto to a weak crypto system. This is why the Crypto API has the provider signing process with Microsofts key. It restricts new providers to be signed by Microsoft, and MS is not allowed to sign any provider with strong crypto. Export laws suck ass.
Now, I hate Microsoft as much as the next guy, but if you face the facts, you will see that MS IE is much closer to standards than the current batch of Netscape browsers..
Just think how angry we will be in 1000 years when the only thing you can get on the radio is the random SPAM broadcast from Earth hundreds of years ago..
I have not really watched any TV in about 2.5 years. Once in a while I catch a Futurama or When Crazed Chickens Attack but I find my time is better spent coding, chatting with others or reading something. Even reading fiction is better than watching it. At least you have to excercise your brain a bit.
With Be you pay $69 (or lower at some places) for the OS. You then get EVERY dot release, fully installable, on a CD, in the mail, without messing with it... for free. Then, when they come out with a new major release, you can get that for $25 with the above qualifications. Basically, Be's "bug fix" releases are free, you only pay for big new stuff.
Did you use your credit card to get access? No? Fine, shut up. These are busy folks. They print what sounds interesting and unless you plan on paying them, they don't have time to read every article. Get over it.
Hey folks, barely anyone has seen the thing yet. Let the people at least get it out the door before you all kill them. If what most people are saying is correct (that it is just a modified BeOS) the source to all modified GNU utils IS ALREADY available and always was at ftp://ftp.be.com and on the BeOS CD. So, settle down and let a cool product breath a little.
Okay, so, Raster leaves RedHat with the intention of spending more time on E and making it the God of all window managers. E is *still* open source. Redhat no longer has to pay someone to develop E, and no longer has to deal with a engineer who doesn't fit into a corporate environment. They still get E, now they just don't have to pay for it.
And he is still worth approximatly 947 gazillion dollars more than you, me and Linus put together.
Oh, and if money isn't everything.. he is greatly respected by a whole lot of people. Maybe not the Linux crowd, but I remember when I was just starting to program and I dreamed that I would be as bad-ass as Bill Gates.
I don't feel that way any more, but lots of people do.