The best solution is to use a second machine to host the secret key. This one machine must be phisically disconected from the world, just a connection with the database machine.
The database machine receives the CC# and sends it to the black-box. How to do it? When you connect to the black box it automatically sends a public key for communication, the DB machine generates another pair of keys and sends the CC# using the black box public key. The DB machine will receive the encrypted key using the secret key, encrypted with it's own public key (double encryption). Store the key in the DB.
When you need to decrypt a CC# the DB machine sends the encrypted CC# to the black box (again, using public/private keys for secure communications) and receives the plain CC# encrypted in it's public key. The session public/private keys should be generated at runtime.
Setup the black box so it deletes the key on ligin and on ethernet communications with the wrong MAC Address (it should only receive connections from the DB machine).
The black box should be in a safe place, under a different security staff than the DB machine, so you will not loose both, and if someone plugs itself between both of them, they are communicating in a secure way.
You are so full of it. I can see you have never done consulting or worked at 10's of projects at the same time. This environment is not designed for morons like you, it is designed for people who work in 10's of projects with 10's of different teams.
I work for several projects and it's a pain in the butt every time I have to switch teams; you have to switch computers, make backups, arrange the desktop and check the new computer for sh*t left by the last user.
This idea is just great, I wish my company would adop it.
I myself created a system that optically recognized a moving object in a series of pictures after substracting the known GSC objects. It was 7 years ago when i was 17 and was used with images from a 1m Schmidt camera.
The problem was that since the software was made by an undergrad a few people took it seriously, but got great results. The system was made in pascal...
Right now it wouldn't take more than a week to build such a software, and even less time if you use something like scilab
hey, slow down cowboy... not all of us here are geeks you know... i just happen to be cleaning the computer of the fat-bad-smelling guy that spends 22 hours a day here... now, what are you saying about half affinity?
I believe this is a feature, not a problem. If you are coming from Visual Basic, then that's your problem, not the JVM's. Java is a strong typed language, and insecure construct are checked at compile time. If you want to write insecure code, use C or C++. We're very happy with having these checks at compile time, thank you.
The creators of the idea of DVD regions claimed that it would be used to deliver the DVD technology to relatively poor countries in a cheap way. For instance, soemody from India cant afford the prices in the US, so they have their own zone, with cheaper prices. This allows the diversity without destroying the US market.
But this idea (that doesnt sound bad at first) limits our rights over our own stuff. If i have a receipt for a buying, i must have the right to do anything with it. It doenst mean i can use the DVD to rip someone's head off, but i can play freebie with it if i feel like it.
What happens if i buy a DVD player and 100 movies and then moye to another continent?? is silly to restrict the use of something i legally bought.
As a system admin you should know that almost all system admins nughtmares come from unsafe code. The unsafe code is almos always product of bad use of pointers.
For what you say you must be a script programmer (for the perl and php), but not a UNIX system administrator.
In JAVA the compiler DOES take the burden. Thats the idea of not having pointers shown to the coder
I can't fscking believe these people. That comment was meant to be FUNNY!!!.
I'm sick of coming here and reading 80% of the comments bashing the editors for things like this one. I have read at least 10 comments highly moderated about that small comment and forget about the real issue of the article.
That's sad. We used to read interesting things in here.
Well, i think is a little impossible to contaminate Jupiter. Even if we threw the whole earth in there things wouldn't be much different.
Remember, Jupiter is a ball of gas with an solid hidrogen nucleus, the probe would burn and become gas (and part of the planet) before it gets near the core. The temperatures there dont allow anything to live.
I dont recall the name of the mission, but i think the probe that was sent to Jupiter and entered the planet discovered that all the planet heat came from within the planet just befor it passed away.
There are two main areas in 3D production, modelling and rendering. These kind of cards are for the first part, modelling and creating the animation files.
When you have millions of polygons and want to spin the camera, you need a card of this quality. It has nothing to do with rendering, which is a processor intensive task.
Sure, you can model a landscape in bryce with any card, but when you have the LOTR balrog sitting in Houdini or Maya, you need something really powerful, even the Geforce 3 will not be enough.
For the rendering phase you have the clusters and render farms, and there you need an 1's and 0's cruncher, and a CGA card will do the job as good as the Geforce 10.000...
If a company that can afford 3 days of "no-no" in their system uses Joe User as administrator or head developer, they deserve what they are getting.
If you are to develop serious applications spending 100's of thousands of $$$ you should concentrate on developing _your_ application, and not in losing 3 days because nobody knows if the OS is doing what should be doing.
The code for your OS should be available to everyone who feels that is irresponsible to work on top of something that everybody know flaws.
Maybe you (Joe User) dont get to see the code, or you see it and dont understand a single char, but has the windows code been seen by more eyes that the linux one? No. Can you ask the windows coders about probelms in their code? No. Do a "Alan Cox" or "Linus Torvalds" search on groups.google.com and see for yourself how an operanting system must be.
The only thing that proves is this: "do not use a closed source OS". Period. Why the hell do you need a debug box ???? WTF is that ????
If you depend on their debug department for solving the problem, then you are thinking backwards. If you would have had the source, you could put your freaking breakpoint wherever you want, and could have solved the problem in a few hours.
This is the big problem, the people is so used to live with the Win$$ errors and the customer service for those errors, that they havent realized thats not the stuff they have to worry about.
The people who thinks this way deserves to use Win$$$
... and start writing some docs. This is one of the main OSS problems, go to sourceforge and see how many projects are there, we are always reinventing the weel (look at kde/gnome), and instead of creating a good product we focus on "showing what i can do". \
This is the same thing as with documentation, why do we need another documentation project?? if anybody wants to contribute there are plenty of things to do, i dont think the priority is "another great project" to provide access to the docs that havent even
been finished.
Well, I'm glad you care to stand up and ask. There _is_ a problem, but in this case Sun has already announced that they care about it, posted a temporary patch and scheduled a tested patch for next week, not to mention that the people with the Solaris Source CD has the _chance_ to fix it themselves.
The only stand M$ has had for the IE vulnerability is deny it. I believe that justifies the 8 paragraphs we read yesterday.
Slashdot Mirror
The best solution is to use a second machine to host the secret key. This one machine must be phisically disconected from the world, just a connection with the database machine.
The database machine receives the CC# and sends it to the black-box. How to do it? When you connect to the black box it automatically sends a public key for communication, the DB machine generates another pair of keys and sends the CC# using the black box public key. The DB machine will receive the encrypted key using the secret key, encrypted with it's own public key (double encryption). Store the key in the DB.
When you need to decrypt a CC# the DB machine sends the encrypted CC# to the black box (again, using public/private keys for secure communications) and receives the plain CC# encrypted in it's public key. The session public/private keys should be generated at runtime.
Setup the black box so it deletes the key on ligin and on ethernet communications with the wrong MAC Address (it should only receive connections from the DB machine).
The black box should be in a safe place, under a different security staff than the DB machine, so you will not loose both, and if someone plugs itself between both of them, they are communicating in a secure way.
You are so full of it. I can see you have never done consulting or worked at 10's of projects at the same time. This environment is not designed for morons like you, it is designed for people who work in 10's of projects with 10's of different teams.
I work for several projects and it's a pain in the butt every time I have to switch teams; you have to switch computers, make backups, arrange the desktop and check the new computer for sh*t left by the last user.
This idea is just great, I wish my company would adop it.
What really made my day was somebody named jkujawa ... :)
A true patriot uses GNOME, written in the land of the free and the home of the brave
Actually, GNOME was written in the land of tequila and the home of cantinflas
It stinks.
I myself created a system that optically recognized a moving object in a series of pictures after substracting the known GSC objects. It was 7 years ago when i was 17 and was used with images from a 1m Schmidt camera.
...
The problem was that since the software was made by an undergrad a few people took it seriously, but got great results. The system was made in pascal
Right now it wouldn't take more than a week to build such a software, and even less time if you use something like scilab
hey, slow down cowboy ... not all of us here are geeks you know ... i just happen to be cleaning the computer of the fat-bad-smelling guy that spends 22 hours a day here ... now, what are you saying about half affinity?
You can't create a list anonymously
Try function(new String[]{"a", "b", "c"})
Things that should be warnings are in fact error
I believe this is a feature, not a problem. If you are coming from Visual Basic, then that's your problem, not the JVM's. Java is a strong typed language, and insecure construct are checked at compile time. If you want to write insecure code, use C or C++. We're very happy with having these checks at compile time, thank you.
The creators of the idea of DVD regions claimed that it would be used to deliver the DVD technology to relatively poor countries in a cheap way. For instance, soemody from India cant afford the prices in the US, so they have their own zone, with cheaper prices. This allows the diversity without destroying the US market.
But this idea (that doesnt sound bad at first) limits our rights over our own stuff. If i have a receipt for a buying, i must have the right to do anything with it. It doenst mean i can use the DVD to rip someone's head off, but i can play freebie with it if i feel like it.
What happens if i buy a DVD player and 100 movies and then moye to another continent?? is silly to restrict the use of something i legally bought.
As a system admin you should know that almost all system admins nughtmares come from unsafe code. The unsafe code is almos always product of bad use of pointers.
For what you say you must be a script programmer (for the perl and php), but not a UNIX system administrator.
In JAVA the compiler DOES take the burden. Thats the idea of not having pointers shown to the coder
I believe as small as your IQ ...
It reads explicitly that the README contains a link to download the 900.000 pages. In the tar there are only 16.000 pages.
he is a god amoung men and is the main contributing reason as to why i no longer have a social life.. long live john carmack
... are you still dating him ?? :)
so
Please, somebody, mod this as funny for the first time on my life !!!!
The CD for the same version of MDK is always changing. They add all the patches needed
The updates are on the installation CD, not on an FTP server.
Couldn't it be also possible to hybernate a process, serialize it and send it to another machine with the same architecture to be executed there?
This maybe sounds too crazy, but it should be possible with well designed systems (aka Linux).
I stoped watching it the last season because it got really bad. I miss the 99 and 00 seasons, that really kicked ass!!.
Anyway, i'm waiting for the DVDs to come out.
I can't fscking believe these people. That comment was meant to be FUNNY!!!.
I'm sick of coming here and reading 80% of the comments bashing the editors for things like this one. I have read at least 10 comments highly moderated about that small comment and forget about the real issue of the article.
That's sad. We used to read interesting things in here.
Well, i think is a little impossible to contaminate Jupiter. Even if we threw the whole earth in there things wouldn't be much different.
Remember, Jupiter is a ball of gas with an solid hidrogen nucleus, the probe would burn and become gas (and part of the planet) before it gets near the core. The temperatures there dont allow anything to live.
I dont recall the name of the mission, but i think the probe that was sent to Jupiter and entered the planet discovered that all the planet heat came from within the planet just befor it passed away.
Why do you need it to be GPLed also???
Being BSD-style allows you to use it in GPLed projects also.
There are two main areas in 3D production, modelling and rendering. These kind of cards are for the first part, modelling and creating the animation files.
...
When you have millions of polygons and want to spin the camera, you need a card of this quality. It has nothing to do with rendering, which is a processor intensive task.
Sure, you can model a landscape in bryce with any card, but when you have the LOTR balrog sitting in Houdini or Maya, you need something really powerful, even the Geforce 3 will not be enough.
For the rendering phase you have the clusters and render farms, and there you need an 1's and 0's cruncher, and a CGA card will do the job as good as the Geforce 10.000
If a company that can afford 3 days of "no-no" in their system uses Joe User as administrator or head developer, they deserve what they are getting.
If you are to develop serious applications spending 100's of thousands of $$$ you should concentrate on developing _your_ application, and not in losing 3 days because nobody knows if the OS is doing what should be doing.
The code for your OS should be available to everyone who feels that is irresponsible to work on top of something that everybody know flaws.
Maybe you (Joe User) dont get to see the code, or you see it and dont understand a single char, but has the windows code been seen by more eyes that the linux one? No. Can you ask the windows coders about probelms in their code? No. Do a "Alan Cox" or "Linus Torvalds" search on groups.google.com and see for yourself how an operanting system must be.
The only thing that proves is this: "do not use a closed source OS". Period. Why the hell do you need a debug box ???? WTF is that ????
If you depend on their debug department for solving the problem, then you are thinking backwards. If you would have had the source, you could put your freaking breakpoint wherever you want, and could have solved the problem in a few hours.
This is the big problem, the people is so used to live with the Win$$ errors and the customer service for those errors, that they havent realized thats not the stuff they have to worry about.
The people who thinks this way deserves to use Win$$$
... and start writing some docs. This is one of the main OSS problems, go to sourceforge and see how many projects are there, we are always reinventing the weel (look at kde/gnome), and instead of creating a good product we focus on "showing what i can do".
\
This is the same thing as with documentation, why do we need another documentation project?? if anybody wants to contribute there are plenty of things to do, i dont think the priority is "another great project" to provide access to the docs that havent even
been finished.
Well, I'm glad you care to stand up and ask. There _is_ a problem, but in this case Sun has already announced that they care about it, posted a temporary patch and scheduled a tested patch for next week, not to mention that the people with the Solaris Source CD has the _chance_ to fix it themselves.
The only stand M$ has had for the IE vulnerability is deny it. I believe that justifies the 8 paragraphs we read yesterday.
I would think something more like SWTF (So WTF:)