Using Windows inside a VM makes removing dangerous stuff like rootkits easy (e.g. by simply falling back to a snapshot).
But if someone catches a trojan and then directly heads for his bank website to do some transfers, the VM doesn't do shit to protect him. Same goes for worms, spambots and all the other crazy stuff. As long as the VM is running, they are as dangerous as ever. Telling people by running stuff in VMs makes them immune to threats just gives a false sense of security.
Can't give any references right now, as it was a documentary on TV some days ago about the building of ATLAS (one of the two big particle detectors at LHC - maybe their homepage atlas.ch has more info about it).
They showed that the detector was tested before the rest of LHC was ready (and before the first particles were sent circulating through the pipe), by measuring the (often cited) particles that are bombarding earth from space as they travelled through ATLAS. So I'd guess that ATLAS, CMS and other (older/smaller) particle detectors are/were capable of measuring the energy of those space particles just fine, even if they weren't setup to specifically do that.
If you start a small firework rocket, you can't predict how far up it will fly and when exactly it will blow up in a shiny and entertaining explosion. But you know the limits of that rocket, e.g. it won't fly up more than 200 feet, the light of the explosion won't last longer than 10 seconds and it won't get hotter than 150 degrees celsius in the center of the explosion (numbers completely made up by me).
The scientists know that the black hole and anything else that may come from LHC won't destroy the world. They also have clear expectations about what they will see, based on what they know about science. But they can't predict 100% what exactly will happen and what new particles will be created, just like a fireworks producer won't be able to tell you how exactly the explosion of the firework will look, just stuff like "it will look like a red heart".
Shooting that firework rocket may point out weekness in design or understanding of explosives involved, just like the LHC may point out flaws in the understanding of physics.
If I were a game developer, the last person I would like to be financially dependent on would be the "gamer".
"Why is developement taking so loooong? I want the game now!"
"You want to cut out that cool-sounding feature to be able to finish the development (in time)? No way!"
"Look, game studio XYZ makes the same game, but better - I'm outta here!"
"I think I heard that the game might not be 100% exactly what I thought I wanted, so I told everybody I know to
not to give you any money, ever!"
"I f*cking paid for the development, why aren't you doing it the way I want!?!"
Although publishers tend to screw some game developement up with uber-tight schedules and other unrealistic demands, they will
at least not destroy "their" product with bad press or force development to go on and on and on
(till THE game "to rule 'em all" is produced), just because they feel like it.
Therefore, I chose to do all "challenges" in WoW by myself, wherever possible. The moment I couldn't do stuff on my own/finding a (working) group to do it would always take more than 1 hour, I quit. I am definetly not the "I need to be THE hero" type of player, therefore the timesinks in WoW ("Hey everybody, look at my super-duper 1000 hours worth of playtime pet, I'm awesome!") and other MMOs don't work for me either.
A single player WoW with bots would've been awesome.
A good "selling" point for Linux: "I have to delete and reinstall everything anyway, so would you like buy Windows 7 for xxx,xx EUR or get Ubuntu for free?"
Funny, how Microsoft sacrifices one of the biggest reasons for staying with Windows - no need to reinstall everything, just upgrade - just to show how angry they are at the EU.
Maybe it's some kind of dead man's switch. The guy who released that worm may be in prison/dead and therefore never had time to replace the destructive payload that is going to be downloaded with some more "constructive" code (e.g. newer version of the worm with new targets).
Software developers have optimized their multiplayer games to only transfer the necessary information, and leaving the less important stuff to the rest of the clients. Thats why up to 5 people can play FPS online games at the same time without problems at my house (only 700KBit up/2.5MBit down DSL). With this technology that would be reduced 1 or at most 2 (estimate based on my experience with streaming movies). Who will pay the server that creates content in
high quality based on complex calculations and on information of other clients AND compresses it good enough to go through my pipe without losing to much quality, in real time?
This whole system imho sounds like the regularly repeated idea, that a huge solar collector plattform placed in the dessert of North Africa could produce enough electricity for the whole world. Of course, it can. But no one lives in the dessert to use that power and transporting the power to where its needed is hard or impossible.
I'd rather help all my relatives/friends to advance to a recent browser instead of getting called every time when "the website doesn't work", because the browser is ancient and doesn't support the neccessary plugins, Javascript commands or HTML and CSS codes anymore. Not having to clean up the mess after virus contaminations because of over 5 year old security holes is a bonus.
I'd really like to know if this was/is a flaw in the structure/design of the JVM or just happened to be some kind of pitfall every major JVM-implementor fell into.
The articles and bug reports are light on detail, I could only find out it is related to "Deserializing Calendar Objects" and allows the applet to execute stuff with the users rights (or probably more correct, the rights of the webbrowser who started the applet)., which sounds like an implementation problem to me. Was there some reference implementation all JVM-developers used for this specific functionality?
If on average (far) below 100% for multiple seconds, scale down
If on average (very) close to 100% for multiple seconds, scale up
Basic functionality of any modern chipset in desktop systems, works like a charm. If the user does some obscure thing that will lead to non-optimal scaling with the previous method, he may set the frequency manually (I use "SpeedSwitchXP" for that). Problem solved.
I really don't see how having a process to capture and evaluate data from sensors/camera that _always runs_ will help to save any energy, especially on embedded devices.
Alternatively just give the user some physical buttons or maybe a wheel (sthng. like on headsets for volume control) to choose the speed for his embedded device.
As a citizen of Austria I would like to state that particle physics and membership at CERN only was interesting for one university in Vienna (capitol city) and therefore I think it was the right thing to take the money elsewhere (why should ONE university get to spend 70% of the budget for this kind of memberships?). We have many good universities in many different fields of science.
Austria is heavily involved in quantum physics (e. g. University of Innsbruck), and I think a good chunk of the saved Euros will likely flow in that direction in future, as it promises some nice inventions like quantum computers or cryptographics.
It definetly had nothing to do with recent elections (right wing parties are not part of the government) or religious composition of the people - although mostly catholic christians, religion has imho no measurable impact on politics or science in Austria. We've seperated those things long time ago.
Just watched an interview on TV with some guy who is representating interests of (some) ISPs in germany. He actually referred to the leaked Australian censorship list and how it was used to block sites that were not cp. He also mentioned that they are already forced (not by law, but somehow else) by government to block access to certain sites and how they are already breaking laws by doing so.
The interviewer didn't react to these statements at all - I mean, c'mon, he just said (some) ISPs in germany break the law many times because government wants them to - but just went on with some stupid questions about how germany still hasn't such censorship laws although they work so flawlessly in other countries...
The conversion USD to GBP is the only one that was done right (the brits are the only ones that profit from this recent change).
The fun thing is, although GBP and EUR have almost the same value nowadays, most games cost 26 GBP or 34 GBP and at the same time 49 EUR in Steam. That is what r e a l l y upsets the rest of Europe and possibly will be a matter the EU will have to handle in future: I, a EU-citizen, have the right to pay the UK prices and not be forced to pay the higher EUR prices for my home country. Apple already lost a similar case with iTunes.
... from dragging this issue to the European Court of Justice and therefore forcing a definite decision? The support for striking down any such restrictions on internet access for copyright infringements seems to be broadly available.
is a client that allows you to choose out of many projects like Folding@home or SETI. The client also runs on Windows, Linux and MacOS without problems.
There are many configuration options available to control the amount of CPU-power, cores, hard-disk space, RAM, the times it runs, how it should behave is someone else is using the system, etc. and the best is, anybody could set up a project that uses the client (although you'll probably have ahard time getting people to choose your project if it isn't something very interesting).
It probably doesn't go after the TLD, cause I'm put into "Marina Del Rey, CA, United States" instead of "Tyrol, Austria" and my ISPs TLD ends with.at
But thats a great way to compete against other countries. Anybody with a decent score is placed in USA.:)
"ASP.NET" isn't the same as ".NET-Framework".
While the ASP.NET is (as you described) completly OS-independent for the client, the.NET-Framework is more like the JavaVM an runtime environment for.NET-Applications, which are executed on the clients system.
1. SQL-Query for all tables in the database
2. Search for text-columns in table
3. add script-tag to every entry in those columns
4. hope at least some of those entries get included into the webpage without filtering (or escaping) the injected HTML
No need for FS access or root rights (as another./er suggested), but also not really spectacular creative.
Slashdot Mirror
Using Windows inside a VM makes removing dangerous stuff like rootkits easy (e.g. by simply falling back to a snapshot).
But if someone catches a trojan and then directly heads for his bank website to do some transfers, the VM doesn't do shit to protect him. Same goes for worms, spambots and all the other crazy stuff. As long as the VM is running, they are as dangerous as ever. Telling people by running stuff in VMs makes them immune to threats just gives a false sense of security.
Finally robots will be able to do the high speed, high precision moves magicians need to "create" coins out of thin air or do card tricks.
Can't give any references right now, as it was a documentary on TV some days ago about the building of ATLAS (one of the two big particle detectors at LHC - maybe their homepage atlas.ch has more info about it).
They showed that the detector was tested before the rest of LHC was ready (and before the first particles were sent circulating through the pipe), by measuring the (often cited) particles that are bombarding earth from space as they travelled through ATLAS. So I'd guess that ATLAS, CMS and other (older/smaller) particle detectors are/were capable of measuring the energy of those space particles just fine, even if they weren't setup to specifically do that.
at least if we believe Walter Wagner: TheDailyShow - LHC
If you start a small firework rocket, you can't predict how far up it will fly and when exactly it will blow up in a shiny and entertaining explosion. But you know the limits of that rocket, e.g. it won't fly up more than 200 feet, the light of the explosion won't last longer than 10 seconds and it won't get hotter than 150 degrees celsius in the center of the explosion (numbers completely made up by me).
The scientists know that the black hole and anything else that may come from LHC won't destroy the world. They also have clear expectations about what they will see, based on what they know about science. But they can't predict 100% what exactly will happen and what new particles will be created, just like a fireworks producer won't be able to tell you how exactly the explosion of the firework will look, just stuff like "it will look like a red heart".
Shooting that firework rocket may point out weekness in design or understanding of explosives involved, just like the LHC may point out flaws in the understanding of physics.
If I were a game developer, the last person I would like to be financially dependent on would be the "gamer".
"Why is developement taking so loooong? I want the game now!"
"You want to cut out that cool-sounding feature to be able to finish the development (in time)? No way!"
"Look, game studio XYZ makes the same game, but better - I'm outta here!"
"I think I heard that the game might not be 100% exactly what I thought I wanted, so I told everybody I know to not to give you any money, ever!"
"I f*cking paid for the development, why aren't you doing it the way I want!?!"
Although publishers tend to screw some game developement up with uber-tight schedules and other unrealistic demands, they will at least not destroy "their" product with bad press or force development to go on and on and on (till THE game "to rule 'em all" is produced), just because they feel like it.
Therefore, I chose to do all "challenges" in WoW by myself, wherever possible. The moment I couldn't do stuff on my own/finding a (working) group to do it would always take more than 1 hour, I quit. I am definetly not the "I need to be THE hero" type of player, therefore the timesinks in WoW ("Hey everybody, look at my super-duper 1000 hours worth of playtime pet, I'm awesome!") and other MMOs don't work for me either.
A single player WoW with bots would've been awesome.
A good "selling" point for Linux: "I have to delete and reinstall everything anyway, so would you like buy Windows 7 for xxx,xx EUR or get Ubuntu for free?"
Funny, how Microsoft sacrifices one of the biggest reasons for staying with Windows - no need to reinstall everything, just upgrade - just to show how angry they are at the EU.
Maybe it's some kind of dead man's switch. The guy who released that worm may be in prison/dead and therefore never had time to replace the destructive payload that is going to be downloaded with some more "constructive" code (e.g. newer version of the worm with new targets).
Software developers have optimized their multiplayer games to only transfer the necessary information, and leaving the less important stuff to the rest of the clients. Thats why up to 5 people can play FPS online games at the same time without problems at my house (only 700KBit up/2.5MBit down DSL). With this technology that would be reduced 1 or at most 2 (estimate based on my experience with streaming movies). Who will pay the server that creates content in high quality based on complex calculations and on information of other clients AND compresses it good enough to go through my pipe without losing to much quality, in real time?
This whole system imho sounds like the regularly repeated idea, that a huge solar collector plattform placed in the dessert of North Africa could produce enough electricity for the whole world. Of course, it can. But no one lives in the dessert to use that power and transporting the power to where its needed is hard or impossible.
This isn't progress, this is a punishment to each and every one of us.
Some other words for progress: "develop in a positive way", "advance", "a movement forward"
IE 6 ---replaced by---> FireFox/chrome/Opera/IE 8 = Progress
I'd rather help all my relatives/friends to advance to a recent browser instead of getting called every time when "the website doesn't work", because the browser is ancient and doesn't support the neccessary plugins, Javascript commands or HTML and CSS codes anymore. Not having to clean up the mess after virus contaminations because of over 5 year old security holes is a bonus.
Thanks for pointing that out. That exploit is much more interesting and creative than I would have expected.
I'd really like to know if this was/is a flaw in the structure/design of the JVM or just happened to be some kind of pitfall every major JVM-implementor fell into.
The articles and bug reports are light on detail, I could only find out it is related to "Deserializing Calendar Objects" and allows the applet to execute stuff with the users rights (or probably more correct, the rights of the webbrowser who started the applet)., which sounds like an implementation problem to me. Was there some reference implementation all JVM-developers used for this specific functionality?
... is needed.
A small application, that monitors CPU usage:
If on average (far) below 100% for multiple seconds, scale down
If on average (very) close to 100% for multiple seconds, scale up Basic functionality of any modern chipset in desktop systems, works like a charm. If the user does some obscure thing that will lead to non-optimal scaling with the previous method, he may set the frequency manually (I use "SpeedSwitchXP" for that). Problem solved.
I really don't see how having a process to capture and evaluate data from sensors/camera that _always runs_ will help to save any energy, especially on embedded devices.
Alternatively just give the user some physical buttons or maybe a wheel (sthng. like on headsets for volume control) to choose the speed for his embedded device.
Maybe it's interest for the time between start of investigation/process and the actual ruling.
1 Billion + ~6% interest, so intel doesn't pay (effectively) less just because proving them guilty took such a long time.
As a citizen of Austria I would like to state that particle physics and membership at CERN only was interesting for one university in Vienna (capitol city) and therefore I think it was the right thing to take the money elsewhere (why should ONE university get to spend 70% of the budget for this kind of memberships?). We have many good universities in many different fields of science.
Austria is heavily involved in quantum physics (e. g. University of Innsbruck), and I think a good chunk of the saved Euros will likely flow in that direction in future, as it promises some nice inventions like quantum computers or cryptographics.
It definetly had nothing to do with recent elections (right wing parties are not part of the government) or religious composition of the people - although mostly catholic christians, religion has imho no measurable impact on politics or science in Austria. We've seperated those things long time ago.
But there you go, 25 EUR sent on their way.
...
Just watched an interview on TV with some guy who is representating interests of (some) ISPs in germany. He actually referred to the leaked Australian censorship list and how it was used to block sites that were not cp. He also mentioned that they are already forced (not by law, but somehow else) by government to block access to certain sites and how they are already breaking laws by doing so.
The interviewer didn't react to these statements at all - I mean, c'mon, he just said (some) ISPs in germany break the law many times because government wants them to - but just went on with some stupid questions about how germany still hasn't such censorship laws although they work so flawlessly in other countries
That's sickening.
The conversion USD to GBP is the only one that was done right (the brits are the only ones that profit from this recent change).
The fun thing is, although GBP and EUR have almost the same value nowadays, most games cost 26 GBP or 34 GBP and at the same time 49 EUR in Steam. That is what r e a l l y upsets the rest of Europe and possibly will be a matter the EU will have to handle in future: I, a EU-citizen, have the right to pay the UK prices and not be forced to pay the higher EUR prices for my home country. Apple already lost a similar case with iTunes.
... from dragging this issue to the European Court of Justice and therefore forcing a definite decision? The support for striking down any such restrictions on internet access for copyright infringements seems to be broadly available.
BOINC
is a client that allows you to choose out of many projects like Folding@home or SETI. The client also runs on Windows, Linux and MacOS without problems.
There are many configuration options available to control the amount of CPU-power, cores, hard-disk space, RAM, the times it runs, how it should behave is someone else is using the system, etc. and the best is, anybody could set up a project that uses the client (although you'll probably have ahard time getting people to choose your project if it isn't something very interesting).
Check it out!
It probably doesn't go after the TLD, cause I'm put into "Marina Del Rey, CA, United States" instead of "Tyrol, Austria" and my ISPs TLD ends with .at
But thats a great way to compete against other countries. Anybody with a decent score is placed in USA. :)
Cheese... suddenly the new race for the moon makes a lot more sense.
"ASP.NET" isn't the same as ".NET-Framework". While the ASP.NET is (as you described) completly OS-independent for the client, the .NET-Framework is more like the JavaVM an runtime environment for .NET-Applications, which are executed on the clients system.
It was even simpler than that (according to TFA):
./er suggested), but also not really spectacular creative.
1. SQL-Query for all tables in the database
2. Search for text-columns in table
3. add script-tag to every entry in those columns
4. hope at least some of those entries get included into the webpage without filtering (or escaping) the injected HTML
No need for FS access or root rights (as another
We need a new buzzword for those heavy, google page rank increasing, spam link invested websites. I vote for "honeypot"