They don't pay the full cost though - you pay most of that when your taxes subsidize the forestry and pulp industries, when you pay the hospital bills for people made ill by the pollution from those industries - depending on the country, either as 100% of your hospital bill, or 0.000001% of thousands of people's hospital bills - and when your government conveniently ignores habitat devastation from forests being wiped out.
Compared to all that, I don't particularly mind spam - the old "recycled electrons" gag is old, but a truism. Not to mention, no spam messages have made it into my home inbox in weeks (Apple Mail.app does an unusually good job filtering them), and less than one a day make it into my work inbox (I think it's Sybari that they use at work, and run it very cautiously to avoid false positives). I lose, maybe, a minute a week to spam. I lose almost that much time carrying a single junk mailing to the recycle bin.
The BC NDP are a very special lot, who don't have much to do with other provinces' NDPs, or the federal ones. I mean, BC and Alberta provincial politics are just weird little twilight zones in Canada.
Compare the other big NDP province - Saskatchewan. There the NDP are really the only sensible party to run the province. It took about one and a half terms of NDP government just to recover from the damage the PCs did (you know, the Grant Devine PCs, who later got convicted of massive fraud and sentenced to go to bed without dessert for a week).
The economics of the Saskatchewan NDP do work rather well - it was one of the first provinces in Canada to have a balanced budget some years ago.
And then the federal NDP is another lot of people altogether. Not quite sure what to make of them as a governing party, but then there's no danger of that happening soon, is there? They do make an excellent opposition party though - they're consistently the only ones that actually try to do some good while in opposition, rather than blindly opposing absolutely everything because, you know, they're in opposition.
An advantage of gas over diesel, in my part of the world, is that you stand a chance of starting a gas engine in February, if you remembered to plug it in last night. Diesel, not so much..
Microsoft would of course prefer people who find vulns to contact them directly, then they can work on a patch, and people can release the information after the patch is out. Read full-disclosure the week after Microsoft's monthly patch-release day, and you'll see that a great deal of that happens.
For a vulnerability to be "public" it needn't be all that public - most admins don't read bugtraq and FD on a daily basis, so they don't find out about the vulnerabilities when they become "public". They hear about them when Microsoft issues a patch and advisory. Mostly that's shortly before the posting with the exploit code hits the mailing lists.
I guess until now they weren't acknowledging that a vulnerability existed until the Appointed Day. I'm not sure when they introduced this monthly pill business, but it seems they're backing off somewhat. The "There are no 0days. All exploits are coded by reverse-engineering our patches" routine was getting ridiculous.
Please, show me the section of the constitution that says "The preceding stuff doesn't apply when the US government is acting abroad, and the victims of its actions are foreigners."
Everyone asserts that the US constitution doesn't apply overseas, but I don't see anything that would imply that in the constitution itself - it's all along the lines of, "Congress shall not do X."
Not "Congress shall not do X, except to brown-skinned furriners with funny outfits and long beards," or "Congress shall not do X in any place where reporters might see it done," or "Congress shall not do X unless they first convince a majority of voting Americans that it's OK."
If they hadn't revealed how they did it, it no one would be able to test their results. Then, the story would have no credibility - they could just as easily have made the whole thing up, and the military would doubtless have claimed they did.
And anyway, while the military might have managed to convince the world that it was all made up, they would have figured out how it was done quickly enough anyway.
Another counterpoint - in Canada, they've been issuing new bills lately. I think the history is something like this
1987 - one dollar coins start being minted.
1989 - one dollar bills go out of production
1996 - two dollar bills go out of production, two dollar coins start being minted.
2001 - new design for the $10 bill
2002 - new design for the $5 bill
2004 - new designs for the $100, $20 and $50 bills
And apparently this year they're going to come out with a new $10 bill, which will have new security features that were added to the new fives and later. The new bills have some raised dots on them for the blind to tell them apart (they aren't different sizes, which might be the other way of doing it)
Really, just look at the numbers they quote: 27% of midsize companies use Linux. Of the remaining 73% who don't, 100 - (48 + 15) = 37 % are interested doing so, meaning 73% x 37 % = 27 % of the total don't use Linux but are interested.
So, to sum it up, 27% of midsize businesses use Linux, and a further 27% are interested in doing so. 54% of midsize businesses either use Linux or are interested in doing so.
Surely the ones "spinning the results" would be those who would take the results to mean Linux is "not even on the radar" for midsize businesses, when in fact a minority according to their own results have no interest in using it (or are unsure).
So to sum it up, 27 percent already use Linux and of those who don't more than half are interested in it, while an other 15 percent are not sure.
Not quite right.
100 % total - 27 % with linux = 73 % without
of whom 100 % total - 48 % not interested - 15 % unsure = only 37 % of those without linux are interested
73 % without linux x 37 % of them interested = 27 % without linux but interested
I agree with your general point though - 27 % use linux, and a further 27 % are interested in it. 54 % are either using linux or interested it it. That hardly qualifies as "off the radar"
Ah, but they might tell one another. What's the point of doing something truly 1337 if you can't boast to your buddies about it?
Money. And anyway, it's not all that leet - it's not a new exploit, it's just a tool that does the grunt work of cryptanalyzing documents, based on someone else's discovery of the actual flaw.
An issue is "high priority" when there is a tool that can be used by an end user now as an exploit
No, that's when it's too late. It's high priority when you can imagine how such a tool might work, and it seems likely that an averagely clever programmer could write it in a week or two.
The only externally accessible service running by default is ssh.
That's one more than none, innit. But then we know ssh is secure - it says so right in the name. Because no one would ever discover a vulnerability in OpenSSH.
I might have missed something here, perhaps largely because it's past 1am and I was up late last night.
But - are you sure about the rightness of how you multiply in the positions? I mean, since your two non-repeating digits are unknown, that unknown-ness is already figured into the 10* 9 figure - you could swap your two 'Schroedinger digits', and it would have no effect on the size of the password space. As far as positional parameters go, they seem like they should be identical - 8C2, not 8P2. You can't have the same entropy count as random in two different ways, right?
I mean, if you make a password of 3 lower case characters and the @ character, it's just 26^3 * 4 - three characters, and the position of the @ - not 26^3 * 3! - the unknown-ness of your letters is already accounted for by the 26^3
So, let's separate this into two elements: The values of the elements:
32 * 10 * 9 * 26 * 25 * 26 * 25 * 87 * 86 = 9104097600000
and their positions:
9C1 * 8C2 * 6C2 * 4C2 * 2C2
= 9 * 28 * 15 * 6 * 1
=22680
22680 * 9104097600000 = 206480933568000000
Which is still 945 times bigger than space 2, but still you overstated the case by a factor of 15 or so.
None of which is to say that I haven't missed something obvious in all that....
If you knowingly ignore a copyright violation, you are considered to have waived your copyright. As soon as a copyright holder becomes aware of the violation, they have to do something about it.
It could be possible that they paid for a NON-GPL'd Version that they used as a base.
Except that the article (very short article, you can do it), explicitly states that the company claims to have developed the whole thing in house, and not to be using Asterisk under any license at all.
If they did have a legitimate commercial license, don't you suppose they would want to quickly clear the whole thing up by saying so as soon as allegations came out?
You might argue some sort of other damages, but not copyright violation.
Whether you get damages for copyright violation, or for unfair competition, doesn't really matter - as long as the court finds that your competitor is doing something wrong, orders them to stop, and maybe gives you some cash from them, do you really care what the grounds were?
Of course, it might work better if the first case to court was a copyright case, so you could later quote that precedent, and then you'd just have to establish that they gained unfair advantage through their copyright violation, so there would be fewer issues to argue in court.
anyone who violates copyrights by downloading files on p2p networks (myself included) is very hypocritical if he claims his copyright has been violated
Hypocritical maybe, but no less right from a legal POV (not necessarily, anyway).
MW/h would be to work as acceleration is to distance wouldn't it?
Seeing as how a watt is already a joule/sec, a MW/h would be 1 million joules/sec/3600 sec, or 277 joule/(sec^2)
So, if the thing 'works up' at 6000 MW/h, then after running the thing for a year, it would be cranking out 3600 sec/h * 24 h/d * 365.25d/y * 1 y * 277 j/sec^2 * 6000 = 52,448,731,200,000 j/sec. 52 trillion Watts - not so cheap anymore!
As an admin user though, you should be able to write to/Library/StartupItems. The script will then be run as root on next reboot, and move itself from/Library/StartupItems to/System/Library/StartupItems
Slashdot Mirror
Compared to all that, I don't particularly mind spam - the old "recycled electrons" gag is old, but a truism. Not to mention, no spam messages have made it into my home inbox in weeks (Apple Mail.app does an unusually good job filtering them), and less than one a day make it into my work inbox (I think it's Sybari that they use at work, and run it very cautiously to avoid false positives). I lose, maybe, a minute a week to spam. I lose almost that much time carrying a single junk mailing to the recycle bin.
Look them up here
The BC NDP are a very special lot, who don't have much to do with other provinces' NDPs, or the federal ones. I mean, BC and Alberta provincial politics are just weird little twilight zones in Canada.
Compare the other big NDP province - Saskatchewan. There the NDP are really the only sensible party to run the province. It took about one and a half terms of NDP government just to recover from the damage the PCs did (you know, the Grant Devine PCs, who later got convicted of massive fraud and sentenced to go to bed without dessert for a week).
The economics of the Saskatchewan NDP do work rather well - it was one of the first provinces in Canada to have a balanced budget some years ago.
And then the federal NDP is another lot of people altogether. Not quite sure what to make of them as a governing party, but then there's no danger of that happening soon, is there? They do make an excellent opposition party though - they're consistently the only ones that actually try to do some good while in opposition, rather than blindly opposing absolutely everything because, you know, they're in opposition.
An advantage of gas over diesel, in my part of the world, is that you stand a chance of starting a gas engine in February, if you remembered to plug it in last night. Diesel, not so much..
Funny, because it's a Quicktime .mov. Quicktime being an Apple product and all...
For a vulnerability to be "public" it needn't be all that public - most admins don't read bugtraq and FD on a daily basis, so they don't find out about the vulnerabilities when they become "public". They hear about them when Microsoft issues a patch and advisory. Mostly that's shortly before the posting with the exploit code hits the mailing lists.
I guess until now they weren't acknowledging that a vulnerability existed until the Appointed Day. I'm not sure when they introduced this monthly pill business, but it seems they're backing off somewhat. The "There are no 0days. All exploits are coded by reverse-engineering our patches" routine was getting ridiculous.
Read the comment below yours...
Everyone asserts that the US constitution doesn't apply overseas, but I don't see anything that would imply that in the constitution itself - it's all along the lines of, "Congress shall not do X."
Not "Congress shall not do X, except to brown-skinned furriners with funny outfits and long beards," or "Congress shall not do X in any place where reporters might see it done," or "Congress shall not do X unless they first convince a majority of voting Americans that it's OK."
And anyway, while the military might have managed to convince the world that it was all made up, they would have figured out how it was done quickly enough anyway.
- 1987 - one dollar coins start being minted.
- 1989 - one dollar bills go out of production
- 1996 - two dollar bills go out of production, two dollar coins start being minted.
- 2001 - new design for the $10 bill
- 2002 - new design for the $5 bill
- 2004 - new designs for the $100, $20 and $50 bills
And apparently this year they're going to come out with a new $10 bill, which will have new security features that were added to the new fives and later. The new bills have some raised dots on them for the blind to tell them apart (they aren't different sizes, which might be the other way of doing it)Actually I think it was silver that was mined in Joachimstal
So, to sum it up, 27% of midsize businesses use Linux, and a further 27% are interested in doing so. 54% of midsize businesses either use Linux or are interested in doing so.
Surely the ones "spinning the results" would be those who would take the results to mean Linux is "not even on the radar" for midsize businesses, when in fact a minority according to their own results have no interest in using it (or are unsure).
Not quite right.
100 % total - 27 % with linux = 73 % without
of whom 100 % total - 48 % not interested - 15 % unsure = only 37 % of those without linux are interested
73 % without linux x 37 % of them interested = 27 % without linux but interested
I agree with your general point though - 27 % use linux, and a further 27 % are interested in it. 54 % are either using linux or interested it it. That hardly qualifies as "off the radar"
Ah, but they might tell one another. What's the point of doing something truly 1337 if you can't boast to your buddies about it? Money. And anyway, it's not all that leet - it's not a new exploit, it's just a tool that does the grunt work of cryptanalyzing documents, based on someone else's discovery of the actual flaw.
No, that's when it's too late. It's high priority when you can imagine how such a tool might work, and it seems likely that an averagely clever programmer could write it in a week or two.
That's one more than none, innit. But then we know ssh is secure - it says so right in the name. Because no one would ever discover a vulnerability in OpenSSH.
International Business Fruit
Remember, it doesn't compare the contents, but the address - so
a IsNot b
is equivalent to
&a != &b
Which is three operators - two &s and a !=
But - are you sure about the rightness of how you multiply in the positions? I mean, since your two non-repeating digits are unknown, that unknown-ness is already figured into the 10* 9 figure - you could swap your two 'Schroedinger digits', and it would have no effect on the size of the password space. As far as positional parameters go, they seem like they should be identical - 8C2, not 8P2. You can't have the same entropy count as random in two different ways, right?
I mean, if you make a password of 3 lower case characters and the @ character, it's just 26^3 * 4 - three characters, and the position of the @ - not 26^3 * 3! - the unknown-ness of your letters is already accounted for by the 26^3
So, let's separate this into two elements: The values of the elements:
32 * 10 * 9 * 26 * 25 * 26 * 25 * 87 * 86 = 9104097600000
and their positions:
9C1 * 8C2 * 6C2 * 4C2 * 2C2
= 9 * 28 * 15 * 6 * 1
=22680
22680 * 9104097600000 = 206480933568000000
Which is still 945 times bigger than space 2, but still you overstated the case by a factor of 15 or so.
None of which is to say that I haven't missed something obvious in all that....
If you knowingly ignore a copyright violation, you are considered to have waived your copyright. As soon as a copyright holder becomes aware of the violation, they have to do something about it.
Except that the article (very short article, you can do it), explicitly states that the company claims to have developed the whole thing in house, and not to be using Asterisk under any license at all.
If they did have a legitimate commercial license, don't you suppose they would want to quickly clear the whole thing up by saying so as soon as allegations came out?
You might argue some sort of other damages, but not copyright violation.
Whether you get damages for copyright violation, or for unfair competition, doesn't really matter - as long as the court finds that your competitor is doing something wrong, orders them to stop, and maybe gives you some cash from them, do you really care what the grounds were?
Of course, it might work better if the first case to court was a copyright case, so you could later quote that precedent, and then you'd just have to establish that they gained unfair advantage through their copyright violation, so there would be fewer issues to argue in court.
anyone who violates copyrights by downloading files on p2p networks (myself included) is very hypocritical if he claims his copyright has been violated
Hypocritical maybe, but no less right from a legal POV (not necessarily, anyway).
MW/h would be to work as acceleration is to distance wouldn't it? Seeing as how a watt is already a joule/sec, a MW/h would be 1 million joules/sec /3600 sec, or 277 joule/(sec^2)
So, if the thing 'works up' at 6000 MW/h, then after running the thing for a year, it would be cranking out 3600 sec/h * 24 h/d * 365.25d/y * 1 y * 277 j/sec^2 * 6000 = 52,448,731,200,000 j/sec. 52 trillion Watts - not so cheap anymore!
Hm, I remember you used to be able to write directly to /Library/StartupItems without sudo-ing.
/Library/StartupItems/ /System/Library/StartupItems/
That must have been changed with some security update in the last while, because in 10.3.6 they're both
drwxr-xr-x 6 root wheel 204 15 Oct 19:22
drwxr-xr-x 34 root wheel 1156 30 Sep 19:05
As an admin user though, you should be able to write to /Library/StartupItems. The script will then be run as root on next reboot, and move itself from /Library/StartupItems to /System/Library/StartupItems