None of the articles (including in technical press) have mentioned where to find the alleged open-source software.
I found plans and progress reports and PDFs and PDFs, and more PDFs, oh, my!
Nary a source file. Nary a mention of language(s) etc.
Can somebody help me find where it is hiding?
Yes, I looked on GitHub. I realize it's not the only place to look, but the most obvious.
From a Pretty PDF:
"This should include making hardware components available for inspection, and source code to the extent that the manner of doing so would not jeopardize system security or availability."
"available for inspection"? Is this like how your HOA makes documents "available for inspection"? Looking through paper documents in a cramped office with no air conditioning?
And that "extent and manner" means it is not open-source. If it is not ALL open-source (place don't point to passwords, etc. which shouldn't be in a source code repo) then it's not open-source. Period.
When they figure out how to weed out fake account, could they share their knowledge with NextDoor.com?
Even the most obvious fakes are approved, and seldom deleted. In fact, complaining about the fakes will get you suspended.
In my neighborhood, we have/had:
- Jack Mehoff - Pat McGroin - Flappy Flapstick - Elenor Capstick (seems innocuous, until "she" posts back-to-back comments with Flappy Flapstick) - A fake reporter and fake executive producer of news from a local TV station. I reported it to the TV station. It wasn't them. They were contacting people about doing "stories".
These along with more than a dozen others are/were all the same person, apparently somebody unhappy with their HOA. They post as their neighbors who are not signed-up with Nextdoor on some of the fake accounts. I got stuck in the middle of this by trying to be nice and helping somebody sort Internet provider options. I got suspicious when "Pat McGroin" (how did I miss that?!) said that he lived in a complex for the developmentally disabled. ("We are all developmentally disabled up in here" was my first clue this was not genuine...) He went from asking for help about Internet providers to fake claims of elder abuse.
So, I Googled, expecting to find a group home, etc.. Nope, a normal condo complex with units selling from $500K to $700K. And one ass-pain homeowner who harasses the HOA and neighbors any way he can.
NextDoor apparently doesn't even make the most basic of checks. This guy logs-out and then right back in under a different account. I can guarantee he isn't using burner phones or posting from multiple Internet cafes. They give users "invitations" that they can use to invite others, and they are probably automatically approved without any checks - because of the fallacy that the inviter is a legitimate account. As well, "neighborhood leads" have super cow powers, and can approve new users. So, it only takes one bad apple to either hand out their 25 invitations to fakes, or become neighborhood lead and then approve fake accounts.
In case you're not familiar - NextDoor is a hyper-local site that limits visibility to immediate and nearby neighborhoods. They require real names and verify identity and residence. In theory.
NextDoor wants users to fell "safe" on their site. It is anything but.
Actually, they should have been fired, but for a different reason.
Presumably, they signed an NDA. They shouldn't have been discussing these specifics with outsiders, and in public. The company's approach to "writing player characters in an MMPORG" is presumably proprietary. In most cases, one is even enjoined from even stating that they work for the company. (But, given the widespread practice of in-game credits, the latter be difficult to enforce, and probably is absent from gaming company NDAs.)
Yes, I worked for a gaming company. (Sony). Did I just violate the NDA? Maybe. But I have in-game credits which makes that moot.
I can't imagine, though - even 10 years later - discussing in public e.g. specifics of how fantasy league baseball scoring is implemented.
There's no good reason to use an original IBM Model M. They will either be beat to hell or insanely expensive if original unused.
The Unicomp models are made to the same specifications - Unicomp acquired the intellectual property. I've seen arguments that somehow the originals are "better", but never experienced that myself. You might make an argument about the very early capacitive design vs the vast majority that were made with dome switches. (The Unicomp design uses dome switches).
It's unlikely many of the capacitive keyboard still work. The electronics were troublesome.
The later design has the same key-tops, plungers and buckling springs, but pushes on a dome rather than operating a capacitive switch.
The Unicomp keyboards have modern features including USB connectivity and programmability.
The big deal about the Model M and Unicomps is the buckling-spring design. When the spring buckles, and you hear the "click", you know that the key-press has "registered", and can lift up on the key. This occurs before the key bottoms-out.
I've always taken my Unicomp with me, where it is tolerated. Fortunately, I work from home now, so it only bothers people on phone conferences... I worked a year at Sony in their PDIT department in a "bull pen" setup, and nobody complained, in fact, a couple of the developers went out and got Unicomp keyboards. Then I worked a year at Sony San Diego Studio, and the prima-donna in the next cubicle complained. I was given the choice of any MicroCrap keyboard I wanted. I suppose a factor was that the bull-pen arrangement puts people physically further apart than rows of cubicles.
They do ALL wear out. I've replaced my Unicomp a couple of times, and the springs are feeling weak, thanks for bringing this to mind, time to order a new one! (It's been MANY years, though.) I shall dig-out my compact spare first, though, to see if it has more pep in it's step. This one is at least 10 years old.
They scraped content from LinkedIn (or used an API?) to compile a directory, almost certainly in violation of TOS.
How was that OK?
Microsoft owns LinkedIn. Microsoft owns Github. Put two and two together. They are enforcing their TOS, and happen to have the ability to do so in this case without having to convince another site to take down the illegally-obtained material.
CSRF is irrelevant for IOT devices and native apps, and cUrl, etc. They are not browsers, and it's the popular consumer browsers that enforce CSRF. CSRF is a crock.
We can't guess whether you are referring to: the HDHomeRun devices, their mobile native apps, or their browser interface, because you didn't say.
But, yea, nobody should be using http: any more and end-running DNS black holes is uncool.
If you have proof, and it's like this on iOS, let Apple know. Google don't care.
I've been going back and forth with IBM for a week as to why I couldn't order CDN service (Akamai, which IBM bought a while back).
I got one strange error message, they did some "diagnosis", and then I started getting another strange error message. And, finally, an email stating that our credit card details couldn't be verified, and so the order was cancelled.
So, it turns out IBM needs more relevant error messages. The latter was apparently the easiest way they had to cancel the order.
IBM is currently not permitting customers to order new CDN service. Apparently, there is something they have to do to comply with GDPR requirements.
They have no projection when (if if) they will be selling CDN service again.
Thanks, EU. Somebody has FINALLY "broken the Internet".
Unfortunately, PostBox as of PostBox 6 no longer supports Add-Ons, saying:
Postbox is built using Mozilla code, and as of Firefox Quantum, add-ons are no longer supported by the Mozilla platform. Consequently, future versions of Postbox will no longer support add-ons, starting with Postbox 6.
I guess these means Add-Ons go away in Thunderbird, as well?
I only have two Add-Ons, but I can't live without them:
It's a fire SUPPRESSION system, not a fire ALARM system.
At least this time, it's the article (on Bleeping Computer) that is wrong, not the summary on/.
It's apparent the author of the article didn't bother to read the article (on Motherboard) that she cites about a similar incident in Romania at ING Bank. It clearly states that incident resulted from a "fire extinguishing test".
The sound BTW comes from the release of the gas, not some alarm. In both cases, the pressure was set too high. It was basically a - very loud - over 130db - hissing sound!
The second article cites a study about the effect of this sound done by Siemens. Siemens has a vested interest. I guess neither of these data centers were equipped with the Sinorix Silent Nozzle.
Slashdot Mirror
Now you can tip strippers with crypto!
No, he meant B(1)h, the "opposite" of H(1)b
Some people are not good targets for jokes. They would be the "humorless" segment of the population...
Is there an actual repository of actual code?
None of the articles (including in technical press) have mentioned where to find the alleged open-source software.
I found plans and progress reports and PDFs and PDFs, and more PDFs, oh, my!
Nary a source file. Nary a mention of language(s) etc.
Can somebody help me find where it is hiding?
Yes, I looked on GitHub. I realize it's not the only place to look, but the most obvious.
From a Pretty PDF:
"This should include making hardware components available for inspection, and source code to the
extent that the manner of doing so would not jeopardize system security or availability."
"available for inspection"? Is this like how your HOA makes documents "available for inspection"? Looking through paper documents in a cramped office with no air conditioning?
And that "extent and manner" means it is not open-source. If it is not ALL open-source (place don't point to passwords, etc. which shouldn't be in a source code repo) then it's not open-source. Period.
... already supply all the bandwidth needed... for those tribes that have casinos.
Give the rest broadband at no cost.
I guess I missed something while I was never on Facebook...
Facebook is a store now?
Facebook has a merchant platform?
Facebook is banning promotion of devices with Kodi pre-installed by users/company presences? (Or whatever they call them...)
Did Trump just make Zuckerberg Secretary of Commerce?
So, I guess it's a trend to ban pre-installation of open-source software, now?
Sure, today is Kodi. Tomorrow it's cURL...
If your phone needs to be exciting, you need to get a life.
Solution: send Trump's resort workers to Programming Bootcamp.
They will be whizzes at it in a few days, and and move over to Microsoft for the rest of their visa period.
Then Trump can hire more foreign workers to replace those he's lost to Microsoft.
Rinse and repeat.
When they figure out how to weed out fake account, could they share their knowledge with NextDoor.com?
Even the most obvious fakes are approved, and seldom deleted. In fact, complaining about the fakes will get you suspended.
In my neighborhood, we have/had:
- Jack Mehoff
- Pat McGroin
- Flappy Flapstick
- Elenor Capstick (seems innocuous, until "she" posts back-to-back comments with Flappy Flapstick)
- A fake reporter and fake executive producer of news from a local TV station. I reported it to the TV station. It wasn't them. They were contacting people about doing "stories".
These along with more than a dozen others are/were all the same person, apparently somebody unhappy with their HOA. They post as their neighbors who are not signed-up with Nextdoor on some of the fake accounts. I got stuck in the middle of this by trying to be nice and helping somebody sort Internet provider options. I got suspicious when "Pat McGroin" (how did I miss that?!) said that he lived in a complex for the developmentally disabled. ("We are all developmentally disabled up in here" was my first clue this was not genuine...) He went from asking for help about Internet providers to fake claims of elder abuse.
So, I Googled, expecting to find a group home, etc.. Nope, a normal condo complex with units selling from $500K to $700K. And one ass-pain homeowner who harasses the HOA and neighbors any way he can.
NextDoor apparently doesn't even make the most basic of checks. This guy logs-out and then right back in under a different account. I can guarantee he isn't using burner phones or posting from multiple Internet cafes. They give users "invitations" that they can use to invite others, and they are probably automatically approved without any checks - because of the fallacy that the inviter is a legitimate account. As well, "neighborhood leads" have super cow powers, and can approve new users. So, it only takes one bad apple to either hand out their 25 invitations to fakes, or become neighborhood lead and then approve fake accounts.
In case you're not familiar - NextDoor is a hyper-local site that limits visibility to immediate and nearby neighborhoods. They require real names and verify identity and residence. In theory.
NextDoor wants users to fell "safe" on their site. It is anything but.
See subject.
Not innocuous at all. She shouldn't have been posting this in public, or discussing outside of the company at all. NDA.
Step 1 should have been the red flag. Not all the nonsense that followed.
The "woman" part is irrelevant, of course.
Actually, they should have been fired, but for a different reason.
Presumably, they signed an NDA. They shouldn't have been discussing these specifics with outsiders, and in public. The company's approach to "writing player characters in an MMPORG" is presumably proprietary. In most cases, one is even enjoined from even stating that they work for the company. (But, given the widespread practice of in-game credits, the latter be difficult to enforce, and probably is absent from gaming company NDAs.)
Yes, I worked for a gaming company. (Sony). Did I just violate the NDA? Maybe. But I have in-game credits which makes that moot.
I can't imagine, though - even 10 years later - discussing in public e.g. specifics of how fantasy league baseball scoring is implemented.
There's no good reason to use an original IBM Model M. They will either be beat to hell or insanely expensive if original unused.
The Unicomp models are made to the same specifications - Unicomp acquired the intellectual property. I've seen arguments that somehow the originals are "better", but never experienced that myself. You might make an argument about the very early capacitive design vs the vast majority that were made with dome switches. (The Unicomp design uses dome switches).
It's unlikely many of the capacitive keyboard still work. The electronics were troublesome.
The later design has the same key-tops, plungers and buckling springs, but pushes on a dome rather than operating a capacitive switch.
The Unicomp keyboards have modern features including USB connectivity and programmability.
The big deal about the Model M and Unicomps is the buckling-spring design. When the spring buckles, and you hear the "click", you know that the key-press has "registered", and can lift up on the key. This occurs before the key bottoms-out.
I've always taken my Unicomp with me, where it is tolerated. Fortunately, I work from home now, so it only bothers people on phone conferences... I worked a year at Sony in their PDIT department in a "bull pen" setup, and nobody complained, in fact, a couple of the developers went out and got Unicomp keyboards. Then I worked a year at Sony San Diego Studio, and the prima-donna in the next cubicle complained. I was given the choice of any MicroCrap keyboard I wanted. I suppose a factor was that the bull-pen arrangement puts people physically further apart than rows of cubicles.
They do ALL wear out. I've replaced my Unicomp a couple of times, and the springs are feeling weak, thanks for bringing this to mind, time to order a new one! (It's been MANY years, though.) I shall dig-out my compact spare first, though, to see if it has more pep in it's step. This one is at least 10 years old.
They scraped content from LinkedIn (or used an API?) to compile a directory, almost certainly in violation of TOS.
How was that OK?
Microsoft owns LinkedIn. Microsoft owns Github. Put two and two together. They are enforcing their TOS, and happen to have the ability to do so in this case without having to convince another site to take down the illegally-obtained material.
CSRF is irrelevant for IOT devices and native apps, and cUrl, etc. They are not browsers, and it's the popular consumer browsers that enforce CSRF. CSRF is a crock.
We can't guess whether you are referring to: the HDHomeRun devices, their mobile native apps, or their browser interface, because you didn't say.
But, yea, nobody should be using http: any more and end-running DNS black holes is uncool.
If you have proof, and it's like this on iOS, let Apple know. Google don't care.
I have to state the obvious...
I've been going back and forth with IBM for a week as to why I couldn't order CDN service (Akamai, which IBM bought a while back).
I got one strange error message, they did some "diagnosis", and then I started getting another strange error message. And, finally, an email stating that our credit card details couldn't be verified, and so the order was cancelled.
So, it turns out IBM needs more relevant error messages. The latter was apparently the easiest way they had to cancel the order.
IBM is currently not permitting customers to order new CDN service. Apparently, there is something they have to do to comply with GDPR requirements.
They have no projection when (if if) they will be selling CDN service again.
Thanks, EU. Somebody has FINALLY "broken the Internet".
I used Eudora for years.
Then I switched to PostBox.
Unfortunately, PostBox as of PostBox 6 no longer supports Add-Ons, saying:
I guess these means Add-Ons go away in Thunderbird, as well?
I only have two Add-Ons, but I can't live without them:
- SpamSieve
- Markdown Here
Suggestions?
Divisive?
And just how is this security flaw tending to cause disagreement or hostility between people?
For the spellings Nazis: "semi-trucks".
Send a few sei-trucks to San Diego. Washington can have our scooters!
Too bad, though, that they look like something you got at the kiosk in the mall, the checkout counter of 7-11, or a TV infomercial.
Maybe they can throw in a free Mr. Microphone?
"Hey, good lookin'! We'll be back to pick you up later!
https://www.youtube.com/watch?...
It's a fire SUPPRESSION system, not a fire ALARM system.
At least this time, it's the article (on Bleeping Computer) that is wrong, not the summary on /.
It's apparent the author of the article didn't bother to read the article (on Motherboard) that she cites about a similar incident in Romania at ING Bank. It clearly states that incident resulted from a "fire extinguishing test".
The sound BTW comes from the release of the gas, not some alarm. In both cases, the pressure was set too high. It was basically a - very loud - over 130db - hissing sound!
The second article cites a study about the effect of this sound done by Siemens. Siemens has a vested interest. I guess neither of these data centers were equipped with the Sinorix Silent Nozzle.
Somebody had to do a survey to discover this?
"Big pasta" is a thing?
You mean like giant shells, or extra-large rigatoni or Guinness-record mile-long lasagna?
It's the author who's lost touch with reality.
He never does say what "it" is, and somehow expects us to know.