Just because you assert that it is "wonderfully stupid" and "purely irresponsible" doesn't make it so.
Vendors like Microsoft don't care about security, the care about making money and their corporate image. They will keep shovelling buggy, insecure crap out the door until they discover that there are consequences for their actions.
If publishing an exploit puts a vendor out of business or causes them serious damage, I will be very happy.
Hammurabi's Building Code
229 If a builder build a house for some one, and does not construct it properly, and the house which he built fall in and kill its owner, then that builder shall be put to death.
230. If it kill the son of the owner the son of that builder shall be put to death.
231. If it kill a slave of the owner, then he shall pay slave for slave to the owner of the house.
232. If it ruin goods, he shall make compensation for all that has been ruined, and inasmuch as he did not construct properly this house which he built and it fell, he shall re-erect the house from his own means.
233. If a builder build a house for some one, even though he has not yet completed it; if then the walls seem toppling, the builder must make the walls solid from his own means.
I agree with l0pht. My experience has been that vendors ignore reports of security problems. If you're lucky, it gets fixed in the next release. More often, they ignore it until someone publicizes an exploit.
But let's be honest with ourselves: this will never happen in an era where we still are losing a couple million a year to AIDS/cancer/Parkinson's/Leukemia.
Millions of people die every year due to (fill in the blank).
So what. We are all going to die. More people are dying of cancer because they aren't being killed by other diseases/causes at an earlier age.
The fact that X people die from some disease is no reason not to spend money on the arts and sciences. NIH already gets more money than NASA, not to mention other spending on health research.
War, disease, poverty and death are not going to disappear, no matter how much money we spend.
A H-Bomb uses a fission primary (A-bomb) to compress a fusion secondary (lithium deuteride) with radiation pressure. The radiation from the primary fills a radiation channel that surrounds the secondary. The outer surface of the casing of the secondary evaporates, producing kinetic energy that compresses the secondary. Early H-bombs produced most of their yield from induced fission in the U-238 jacket of the bomb. There is also a Pu-239 "spark plug" in the center of the secondary. Read "Dark Sun" for a complete description of the process.
ANSI C++ is a fine idea. Unfortunately the compilers haven't caught up with the ANSI standard yet. Some of them will never be ANSI compliant due to lack of vendor interest.
In the USA, local phone rates are regulated by state public utility commissions, not the Federal Communications Commission.
Flat rate or "free" local calling is not available in all areas of the USA. Some large cities, such as Chicago and New York, only offer measured service. In other areas free local calls are restricted to artificially short distances. The rates for intra-state long distance calls are very high. I can call across the country for substantially less money than a similar call across the state.
Re:I still approve of metered calls
on
ISP War in the UK
·
· Score: 1
I don't have the source handy but there have been studies in the USA that found that most of the cost of providing local telephone service is providing and maintaining the subscriber's loop to the central office. Accounting and billing make up another large cost. The usage sensitive costs were a small percentage of the total cost.
The usage sensitive costs are determined by the desired quality of service during peak usage periods. This means that off-peak usage doesn't increase the cost of providing the service.
There are some cities in the USA that only offer measured service. The usage charges are far in excess of the cost of providing service. I've read that the actual costs are a few tenths of a cent per minute.
Being more urbanized, it should be cheaper to provide telephone service in the UK.
I was once told that many European countries used PTT revenues to subsidize other government programs. Is that still true?
I've never had to splice fiber but I've seen some of the equipment. It takes up a fair amount of space in a telephone company truck. The cable is stripped down to the fibers. The fibers are cleaned and cleaved. The two fibers that you want to connect are aligned end-to-end with the aid of a microscope. The fibers are then fused together with a heat source. Think of it as butt welding extremely thin strands of glass.
There is an old trick that I've used on 8-bit CPUs. Link the program as an absolute memory image at two different load addresses. Write a program that compares the two images and outputs a relocation list to a file. Then you can use a simple loader that takes an absolute memory image and the relocation list to load the program at any desired address. You should be able to do this with COM files on the 80x86.
There are a large number of uniformed military personnel that support the NSA. These are the people who may find themselves in dangerous situations while attempting to collect intelligence. The ships Pueblo and Liberty were intelligence collection platforms. The Pueblo was captured by Noth Korea and the Liberty was attacked by Israel. A number of aircraft have been shot down while on intelligence collection missions. It isn't James Bond, but it can still get you killed or captured.
The type of modulation is irrelevant. An RF signal has a center frequency, amplitude and bandwidth. The bandwidth usually determines how many "frequencies" are available in a frequency band. For example, an AM broadcast station's signal uses about 10 kHz of bandwidth and an NTSC (USA) TV signal uses about 6 MHz of bandwidth. The number of usable frequencies may be smaller because receivers do not have perfect rejection of signals on adjacent frequencies. That is why there are gaps in the channel assignments of TV stations.
While I understand why we might to turn off some of these devices for fear of radio-interference (which is what the french are worried about here), I don't believe that a cd-player puts out any amount of strong EM-waves...
The problem is that any device that uses digital logic, such as your CD player, may radiate at frequencies that interfere with communication and navigation systems. Your device may be a weak RF emitter but it is much closer to the aircraft's antenna than the transmitters the flight crew are monitoring.
I doubt that the NSA uses Crays for brute force attacks on keys. There are cheaper and more efficient machines for that sort of problem. The NSA has an in-house chip fabrication facility. They could crank out custom chips to do brute force key searchs.
From the unclassified bits of information available on the NSA, they are very interested in doing sophisticated statistical analysis on encrypted data. I suspect that is the main task of the vector supercomputers.
The NSA is the biggest employer of mathematicians in the USA. They have probably developed techniques of attacking ciphers that are considerably better than brute force attacks.
The NSA is probably the #1 supercomputer customer in the world. There used to be a Cray field office in Laurel, Maryland (near Fort Meade). I'm not sure if it is still there. The NSA has been a major supporter of high-end computing since the 1950s.
"The court shall enter such orders and take such other action as may be necessary and appropriate to preserve the confidentiality of the technique used by the governmental entity," Section 2716 of the proposed Cyberspace Electronic Security Act says.
This would mean that the feds could introduce evidence at a trial and not disclose how they obtained it. I think that is a very bad idea. What would prevent them from fabricating "incriminating evidence" and saying "we can't tell you where it came from, trust us". We already have the use of anonymous tips from non-existent sources as a basis for obtaining search warrants.
What is the deal with.edu? I was reading an article on the domain registration system and they quoted some guy who wanted to exterminate all community colleges in the.edu domain. I couldn't understand why he thought only 4 year colleges should have.edu domain names.
In the old days, when programs and data were punched on Hollerith cards and run on batch operating systems, an all 9s field was a popular way to mark the end of data. The problem was that a user's card deck was loaded into a card reader along with other people's jobs. This meant that there was no EOF from the card reader and a special sentinel card was needed to prevent the program from reading the next job as additional data. Even when Hollerith cards became obsolete, many mainframe programs still read/wrote card images from disk files. There are even microcomputer programs that still use card images because they were ported from an original mainframe program and the file formats were preserved to retain compatibility with existing data files.
I suspect Cutler copied it from VMS, which also splits the address space in half. When VMS was designed, 4 megabytes of physical RAM was a lot of memory.
I tried the "save as HTML" feature of Word 97 and was disappointed to find MS proprietary crap in the HTML file. There didn't seem to be any way to save a file in portable HTML format. I've heard that Office 2000 has the same problem.
Slashdot Mirror
I guess Seymour Cray was a moron because he didn't use cache in his computer designs.
Just because you assert that it is "wonderfully stupid" and "purely irresponsible" doesn't make it so.
Vendors like Microsoft don't care about security, the care about making money and their corporate image. They will keep shovelling buggy, insecure crap out the door until they discover that there are consequences for their actions.
If publishing an exploit puts a vendor out of business or causes them serious damage, I will be very happy.
Hammurabi's Building Code
229 If a builder build a house for some one, and does not construct it properly, and the house which he built fall in and kill its owner, then that builder shall be put to death.
230. If it kill the son of the owner the son of that builder shall be put to death.
231. If it kill a slave of the owner, then he shall pay slave for slave to the owner of the house.
232. If it ruin goods, he shall make compensation for all that has been ruined, and inasmuch as he did not construct properly this house which he built and it fell, he shall re-erect the house from his own means.
233. If a builder build a house for some one, even though he has not yet completed it; if then the walls seem toppling, the builder must make the walls solid from his own means.
I agree with l0pht. My experience has been that vendors ignore reports of security problems. If you're lucky, it gets fixed in the next release. More often, they ignore it until someone publicizes an exploit.
Millions of people die every year due to (fill in the blank).
So what. We are all going to die. More people are dying of cancer because they aren't being killed by other diseases/causes at an earlier age.
The fact that X people die from some disease is no reason not to spend money on the arts and sciences. NIH already gets more money than NASA, not to mention other spending on health research.
War, disease, poverty and death are not going to disappear, no matter how much money we spend.
The U.S. government has the bizarre idea that its laws and jurisdiction apply to any U.S. citizen in the known universe.
A H-Bomb uses a fission primary (A-bomb) to compress a fusion secondary (lithium deuteride) with radiation pressure. The radiation from the primary fills a radiation channel that surrounds the secondary. The outer surface of the casing of the secondary evaporates, producing kinetic energy that compresses the secondary. Early H-bombs produced most of their yield from induced fission in the U-238 jacket of the bomb. There is also a Pu-239 "spark plug" in the center of the secondary. Read "Dark Sun" for a complete description of the process.
ANSI C++ is a fine idea. Unfortunately the compilers haven't caught up with the ANSI standard yet. Some of them will never be ANSI compliant due to lack of vendor interest.
Flat rate or "free" local calling is not available in all areas of the USA. Some large cities, such as Chicago and New York, only offer measured service. In other areas free local calls are restricted to artificially short distances. The rates for intra-state long distance calls are very high. I can call across the country for substantially less money than a similar call across the state.
The usage sensitive costs are determined by the desired quality of service during peak usage periods. This means that off-peak usage doesn't increase the cost of providing the service.
There are some cities in the USA that only offer measured service. The usage charges are far in excess of the cost of providing service. I've read that the actual costs are a few tenths of a cent per minute.
Being more urbanized, it should be cheaper to provide telephone service in the UK.
I was once told that many European countries used PTT revenues to subsidize other government programs. Is that still true?
I've never had to splice fiber but I've seen some of the equipment. It takes up a fair amount of space in a telephone company truck. The cable is stripped down to the fibers. The fibers are cleaned and cleaved. The two fibers that you want to connect are aligned end-to-end with the aid of a microscope. The fibers are then fused together with a heat source. Think of it as butt welding extremely thin strands of glass.
That's 9 kW total power to run multiple amplifiers on a very long cable. They insert an amplifier in the cable every N kilometers.
I bought a firearm and the owner's manual was amazing. About every other page was a warning, some of them were ridiculous.
There is an old trick that I've used on 8-bit CPUs. Link the program as an absolute memory image at two different load addresses. Write a program that compares the two images and outputs a relocation list to a file. Then you can use a simple loader that takes an absolute memory image and the relocation list to load the program at any desired address. You should be able to do this with COM files on the 80x86.
There are a large number of uniformed military personnel that support the NSA. These are the people who may find themselves in dangerous situations while attempting to collect intelligence. The ships Pueblo and Liberty were intelligence collection platforms. The Pueblo was captured by Noth Korea and the Liberty was attacked by Israel. A number of aircraft have been shot down while on intelligence collection missions. It isn't James Bond, but it can still get you killed or captured.
The type of modulation is irrelevant. An RF signal has a center frequency, amplitude and bandwidth. The bandwidth usually determines how many "frequencies" are available in a frequency band. For example, an AM broadcast station's signal uses about 10 kHz of bandwidth and an NTSC (USA) TV signal uses about 6 MHz of bandwidth. The number of usable frequencies may be smaller because receivers do not have perfect rejection of signals on adjacent frequencies. That is why there are gaps in the channel assignments of TV stations.
The problem is that any device that uses digital logic, such as your CD player, may radiate at frequencies that interfere with communication and navigation systems. Your device may be a weak RF emitter but it is much closer to the aircraft's antenna than the transmitters the flight crew are monitoring.
From the unclassified bits of information available on the NSA, they are very interested in doing sophisticated statistical analysis on encrypted data. I suspect that is the main task of the vector supercomputers.
The NSA is the biggest employer of mathematicians in the USA. They have probably developed techniques of attacking ciphers that are considerably better than brute force attacks.
The NSA is probably the #1 supercomputer customer in the world. There used to be a Cray field office in Laurel, Maryland (near Fort Meade). I'm not sure if it is still there. The NSA has been a major supporter of high-end computing since the 1950s.
"The court shall enter such orders and take such other action as may be necessary and appropriate to preserve the confidentiality of the technique used by the governmental entity," Section 2716 of the proposed Cyberspace Electronic Security Act says.
This would mean that the feds could introduce evidence at a trial and not disclose how they obtained it. I think that is a very bad idea. What would prevent them from fabricating "incriminating evidence" and saying "we can't tell you where it came from, trust us". We already have the use of anonymous tips from non-existent sources as a basis for obtaining search warrants.
Some of the stations have been located. Virginia, Cuba and Germany are a few of the more popular locations.
One SSBN can ruin your whole day.
What is the deal with .edu? I was reading an article on the domain registration system and they quoted some guy who wanted to exterminate all community colleges in the .edu domain. I couldn't understand why he thought only 4 year colleges should have .edu domain names.
In the old days, when programs and data were punched on Hollerith cards and run on batch operating systems, an all 9s field was a popular way to mark the end of data. The problem was that a user's card deck was loaded into a card reader along with other people's jobs. This meant that there was no EOF from the card reader and a special sentinel card was needed to prevent the program from reading the next job as additional data. Even when Hollerith cards became obsolete, many mainframe programs still read/wrote card images from disk files. There are even microcomputer programs that still use card images because they were ported from an original mainframe program and the file formats were preserved to retain compatibility with existing data files.
I suspect Cutler copied it from VMS, which also splits the address space in half. When VMS was designed, 4 megabytes of physical RAM was a lot of memory.
I tried the "save as HTML" feature of Word 97 and was disappointed to find MS proprietary crap in the HTML file. There didn't seem to be any way to save a file in portable HTML format. I've heard that Office 2000 has the same problem.