Most Universities (in US and Canada anyways) charge foreign students full cost of education. On the plus side, those students often have good access to scholarships (usually from where they came from) and various grants.
Well, the FBI has suspects and they're 'asking' AOL and Earthlink for their logs. What kinds of logs, I can't imagine, no one logs entire emails, not even partial headers, just who sent it, to whom, when, and what was the result. But I guess they have to do _something_...
Give this a few weeks and ask the question again, let people cool off a little bit and a chance to reason this out.
Stopping/filtering/snooping on email will have no effect on terrorist organizations. They're already encrypting everything. Banning (strong) crypto will have no effect either, they'll just keep using crypto (duh) and steganography. Requiring strictly authorized access to the Internet will no nothing either; you're in effect making every user equally suspect of terrorist activities and you still have to sift through terabytes of data.
Any decisions to restrict freedoms now (except from better security checks at airports and better immigrant screening) are irrational. It will do nothing to stop terrorism. It will just make a few people feel better and safer for a while (which is dangerous in itself). Any freedom-limiting decisions made now are purely political, for show, to be seen doing something against terrorism, so this won't happen again, and of course for the children, and will do absolutely nothing except limit people's freedoms.
This belongs to this post: http://slashdot.org/comments.pl?sid=21525&cid=2275 922 but I can't post it there because no matter what I type in I get this error: 'Your comment violated the postersubj compression filter'. Whatever that means.
Database support for dates is horrible. Most db's have a DATETIME or TIMESTAMP column type. However, all databases seem to implement them differently.
This is also my big problem. You want an application that is easily db portable? Don't use date fields. Use ints and store unix time. Need more precision? Use bigint (or whatever) and store 64 bit datestamp. Date support _is_ horrible. At least Oracle allows you to output a unix datestamp after putting the dates through a mangler. You should _not_ have to do this. Every db uses different date formats, different date manipulation and formatting functions, dates are even handled differently (Oracle doesn't for example _output_ or _input_ a date, you _always_ have to format!), and forget about comparing or trying to range dates. MySQL appears to only accept dates in one specific format, and their date function set is extremely poor. It's just one big mess best avoided by not using date types at all.
Now, as to why use chars instead of int or bigint (_all_ dbs I've run into have some sort of bigint type that will handle 64 bit numbers)? Beats me. That's almost harder than date types.
Uh, and why not just do what they wanted from the start, if they were planning it, instead of leaving all their servers with an open security hole for anyone to exploit?
* For users of other Lycos services, such as Lycos mail, the user could be redirected to an imposter Lycos page which would ask for a username and password.
And more to the point, since JavaScript can read cookies, any active logins to the search engine site could be sent by the rouge JS to a third party.
Not funny at all. People at work and friends (I work for an ISP) try to tell me their passwords all the time to fix some problem with their account. You just don't want to know, too much baggage comes with it. Same principle applies to any confidential data, if you can read someone's mailbox during system maintenance, don't, and do everything you can to make sure you never have to. Likewise, you should do everything you can to never have to ask users for their passwords to do something. Either have them type it in, somehow give you permissions to do whatever you need, or reset it and have them change it immediately afterwards. It's just prudent and covers your ass.
Yes, there is definitely something funny going on with select/order by in mssql. We're running a 6.5 db, and sometimes the queries will not return the full set of rows (confirmed in both the Enterprise Manager query window and an ODBC app). This has so far (to my knowledge anyways) not affected any critical data, but then again I wouldn't know if 54869 rows were returned instead of 54893, and a perl script sure as hell doesn't have a chance. It's quite disconcerting.
I think this depends a lot on the area (both the city and actual neighbourhood you live in). My parents are listed in the phone book, and get marketing calls all the time, at the most inopportune times. I'm paying (it'a a crime that you should pay to protect your privacy!) to have my number unlisted, since anyone who knows me already has my home and/or cell numbers. I've received exactly 2 marketing calls in the least year+. If you know my name you can look me up on the Internet, and send email or icq.
The whois database IS a big deal, registries require a real real address, a real email address. Do you have any domains registered? I get at least one email a month telling me to move my domain or my hosting else where (no thinks on both counts). I also know I got some snail junk mail based off whois, because at one point I was listed as a Person contact with the name Bob Registrar, and guess what the name on the label was. Like one of the quotes said, you don't put your address on your web site, and it shouldn't be available via whois either.
OT: BTW, with the recent phone bill increases (in Calgary, Canada) and paying to have my number unlisted, my cell phone now officially costs me less than my land line. That's just dandy. Another advantage cell phones have over land lines, telemarketers aren't allowed to call them, and there isn't a public directory.
Unless you put your machine to sleep or are using a transmeta, mobile pentium, or some other chip and OS that supports lowering the CPU's clock rate while idle (i.e no procceses need CPU time), your CPU stays on at full power running an idle thread waiting for your OS to give it something to do. In this case, there is little to no power savings having your machine sit idling compared to having it do heavy number crunching.
That's not true and you know it. Any modern OS will send NOPs when there is nothing to do instead of a wait loop. RC5 is not just computation either; it's not nearly comparable to a NOP which does nothing (like you'd expect). A real instruction uses many times the circuitry that a NOP does, and most importantly, it uses the bus and RAM and cache (pretty heavilly). A machine is not idling when it's running RC5, it of course appears responsive, but nevertheless, do not be fooled, that load of 1 is not waiting for I/O, it heavy duty CPU work.
Ever stop and wonder why your 3D card gets so hot (even shuts down if not properly cooled) after a few minutes of Quake, while happily running for hours showing spreadsheets? Same principle. More circuitry involved, more heat, more power drawn, shorter life.
Would you be happy with your boss getting your bank account PIN to make it easier to log into your work pc?
And what everyone's forgetting is that this is _at work_, as you yourself said. Why would you use any personal info for your work passport subscription? Do you use your home email address (as opposed to your work address) when you access MSDN right now? The Passport ID isn't tatooed on your forehead or on your retinas, there's nothing stopping you from using different accounts at home and at work, thus keeping your work and personal inforation neatly separate. Duh.
So if the machien [sic] gets hacked, the hacker can see all the web pages that he would have been able to see through the web server anyway, and can connect to your database to see data that he would have been able to see anyway.
That's a little simplistic. Even some web content is protected, perhaps it's a pay site or members only site. As for database, you're obviously talking best case scenario here. Yes, you have access to the same data as the web server, but it's not true that this is the same amount of data you'd have access to as a web browser. Consider a simple members database, username, password (hopefully crypted), email address, contact info. Any particular user can see their own record (obviously), but they certainly can't see all the data the web server can (which is to say, all records). Being able to run 'select field1 from table1 where loginid='bob'' and 'select * from table1' are two totally different things. Normally, database driven, 'extranet'-type pages have access to a little bit more valuable data than this, having someone running the same queries a web server can against your db is a very serious security breach.
Dude, both your links show Mozilla matching the referance image almost pixel for pixel (the second one has non-aliased fonts, and both radio buttons are checked in the first one). IE, on the other hand, is nowhere close to matching the reference image. Why don't you check your links and claims before you post them? Also, moderators, you're on crack.
It's not just apps. The permissions granularity on the filesystem are often misunderstood and misused by sysadmins, who leave their machines open to attack. The issue here is that while Windows is all GUI and easy enough for a monkey to configure (if you're to believe Microsoft advertising), finer points like correctly using the granularity provided are often overlooked because no one knows how to use them. And of course Microsoft is never part of the solution here, they stomp all over their own guidelines (design, installation, security, etc) with their software, so it's a big case of do as I say not as I do.
Oh come on, that's bullshit and you know it. France may have officially surrendered to German occupation, but that's not the end of the story. In any country occupied by German forces there were people willingly collaborating, people who didn't care and were just stuck in the middle, and people who organized resistance forces. Yes, even in Germany itself. Allied forces would have been able to do shit all in France if they weren't being helped by the local population.
This is even worse than the quecat... this one takes the que from the tv in the form of a special audio signal, so the computer has to be in the same room as the tv, 'which is a lot of people now' according to some DC mouthpiece. Well, at least cnet, even with all its cheesy quotes ('telewebbing'?!?!?) is willing to link to stories about the previous failures of the cuecat, and the whole thing reads like a sad attempt at a press release.
Beating around the bush a little there, but the bottom line is: cookies are usually good because they store state and add to the user experience, web bugs have nothing for the user
As a sidenote, this just occured to me... since web bugs, like cookies, can track a single user through a site, can they be used in place of cookies to add state, if for example the user has disabled cookies? Are web bugs as accurate as cookies in identyfying users? I guess it's sort of a moot point, when a user disables cookies they also acknowledge they don't want to have state...
One thing Mozilla really needs as far as cookie selection goes, is a distinction between session and stored cookies, which doesn't exist right now. I gladly accept session cookies, they're vaguely helpful, but most tracking and such is done with stored cookies, so I only allow stored cookies for select sites, like/. login.
There's the kernel that boots on TiVo, but is this the complete thing? Can I start with a blank box and just throw this on? While the GPL requires you make your changes to the kernel available along with the entire source used to compile it, what about the actual programming, the guide, recording, spying, etc? If so, then you can find the parts that need a subscription, modify them, recompile and load the new kernel. In theory. Assuming the control software is GPL. (The source files are several megs, and the download is slow, so I don't know what's in the gz files).
It's not driver support (though that can be an issue), and it's not even performance. We've had some network cards in our servers here fail, totally stop working, for no reason. Kingston cards are the most notorious for us, we recently _gave away_ a box full of Kingston NICs. No-name and cheap NICs are just not worth the trouble of potential critical hardware failure, and the price premium on known good quality cards is not that high. For a moderate use home machine or a development server anything will work, these cards _are_ selling and they _do_ work, but sometimes you get what you pay for.
[ God damnit, I had this reply all nicely written up and previewed and fricking Mozilla crashed!! It can be such a pain in the ass sometimes! Argh!!! Alright, I'm ok now...;) ]
First of all, I don't know why the/. write up says CNN, the article is on Time.
Second, I don't think the article is offensive, or portraying Asians (or Koreans specifically) in a bad light. Replace Korea with Poland and I wouldn't mind a bit. There are dumbasses among the people of every nation, just deal with it.
What is bad about the article is that it makes it seem like all Lineage players are like that. Indeed, by extension it makes it seem like all online players are like that. There will always be a subset of players that take their games very seriously, and will take online world grievances offline. Many people in the US play Diablo and EverCrack, but geographical realities of the US mean you can't just call up your clan members and go to the cyber cafe across the street and pummel someone for killing your character.
We've all seen stories like this before about other games and people in other countries, in fact a quick search on Time's own site will reveal this article. Take with a big grain of salt and an agenda.
Slashdot Mirror
Most Universities (in US and Canada anyways) charge foreign students full cost of education. On the plus side, those students often have good access to scholarships (usually from where they came from) and various grants.
Yeah, someone could slip and twist their ankle or something equally terrible.
Well, the FBI has suspects and they're 'asking' AOL and Earthlink for their logs. What kinds of logs, I can't imagine, no one logs entire emails, not even partial headers, just who sent it, to whom, when, and what was the result. But I guess they have to do _something_...
Stopping/filtering/snooping on email will have no effect on terrorist organizations. They're already encrypting everything. Banning (strong) crypto will have no effect either, they'll just keep using crypto (duh) and steganography. Requiring strictly authorized access to the Internet will no nothing either; you're in effect making every user equally suspect of terrorist activities and you still have to sift through terabytes of data.
Any decisions to restrict freedoms now (except from better security checks at airports and better immigrant screening) are irrational. It will do nothing to stop terrorism. It will just make a few people feel better and safer for a while (which is dangerous in itself). Any freedom-limiting decisions made now are purely political, for show, to be seen doing something against terrorism, so this won't happen again, and of course for the children, and will do absolutely nothing except limit people's freedoms.
Database support for dates is horrible. Most db's have a DATETIME or TIMESTAMP column type. However, all databases seem to implement them differently.
This is also my big problem. You want an application that is easily db portable? Don't use date fields. Use ints and store unix time. Need more precision? Use bigint (or whatever) and store 64 bit datestamp. Date support _is_ horrible. At least Oracle allows you to output a unix datestamp after putting the dates through a mangler. You should _not_ have to do this. Every db uses different date formats, different date manipulation and formatting functions, dates are even handled differently (Oracle doesn't for example _output_ or _input_ a date, you _always_ have to format!), and forget about comparing or trying to range dates. MySQL appears to only accept dates in one specific format, and their date function set is extremely poor. It's just one big mess best avoided by not using date types at all.
Now, as to why use chars instead of int or bigint (_all_ dbs I've run into have some sort of bigint type that will handle 64 bit numbers)? Beats me. That's almost harder than date types.
Who is eligible to register a domain during the Open Registration period?
--
--
And more to the point, since JavaScript can read cookies, any active logins to the search engine site could be sent by the rouge JS to a third party.
--
--
--
The whois database IS a big deal, registries require a real real address, a real email address. Do you have any domains registered? I get at least one email a month telling me to move my domain or my hosting else where (no thinks on both counts). I also know I got some snail junk mail based off whois, because at one point I was listed as a Person contact with the name Bob Registrar, and guess what the name on the label was. Like one of the quotes said, you don't put your address on your web site, and it shouldn't be available via whois either.
OT: BTW, with the recent phone bill increases (in Calgary, Canada) and paying to have my number unlisted, my cell phone now officially costs me less than my land line. That's just dandy. Another advantage cell phones have over land lines, telemarketers aren't allowed to call them, and there isn't a public directory.
--
That's not true and you know it. Any modern OS will send NOPs when there is nothing to do instead of a wait loop. RC5 is not just computation either; it's not nearly comparable to a NOP which does nothing (like you'd expect). A real instruction uses many times the circuitry that a NOP does, and most importantly, it uses the bus and RAM and cache (pretty heavilly). A machine is not idling when it's running RC5, it of course appears responsive, but nevertheless, do not be fooled, that load of 1 is not waiting for I/O, it heavy duty CPU work.
Ever stop and wonder why your 3D card gets so hot (even shuts down if not properly cooled) after a few minutes of Quake, while happily running for hours showing spreadsheets? Same principle. More circuitry involved, more heat, more power drawn, shorter life.
--
And what everyone's forgetting is that this is _at work_, as you yourself said. Why would you use any personal info for your work passport subscription? Do you use your home email address (as opposed to your work address) when you access MSDN right now? The Passport ID isn't tatooed on your forehead or on your retinas, there's nothing stopping you from using different accounts at home and at work, thus keeping your work and personal inforation neatly separate. Duh.
--
That's a little simplistic. Even some web content is protected, perhaps it's a pay site or members only site. As for database, you're obviously talking best case scenario here. Yes, you have access to the same data as the web server, but it's not true that this is the same amount of data you'd have access to as a web browser. Consider a simple members database, username, password (hopefully crypted), email address, contact info. Any particular user can see their own record (obviously), but they certainly can't see all the data the web server can (which is to say, all records). Being able to run 'select field1 from table1 where loginid='bob'' and 'select * from table1' are two totally different things. Normally, database driven, 'extranet'-type pages have access to a little bit more valuable data than this, having someone running the same queries a web server can against your db is a very serious security breach.
--
--
--
--
--
--
As a sidenote, this just occured to me... since web bugs, like cookies, can track a single user through a site, can they be used in place of cookies to add state, if for example the user has disabled cookies? Are web bugs as accurate as cookies in identyfying users? I guess it's sort of a moot point, when a user disables cookies they also acknowledge they don't want to have state...
--
--
--
--
First of all, I don't know why the /. write up says CNN, the article is on Time.
Second, I don't think the article is offensive, or portraying Asians (or Koreans specifically) in a bad light. Replace Korea with Poland and I wouldn't mind a bit. There are dumbasses among the people of every nation, just deal with it.
What is bad about the article is that it makes it seem like all Lineage players are like that. Indeed, by extension it makes it seem like all online players are like that. There will always be a subset of players that take their games very seriously, and will take online world grievances offline. Many people in the US play Diablo and EverCrack, but geographical realities of the US mean you can't just call up your clan members and go to the cyber cafe across the street and pummel someone for killing your character.
We've all seen stories like this before about other games and people in other countries, in fact a quick search on Time's own site will reveal this article. Take with a big grain of salt and an agenda.
--