> How to block our analytic technique - which > turns out to be the behaviour required for > correct functioning of NAT boxes - is > described in Section IV.
As I understand it, if the NAT box does NOT rewrite the IPid, then there is a risk of IPid collision if two sources behind the NAT are sending to the same destination, and the packets fragment.
This means it is possible to demonstrate a bug in most home gateways - perhaps that way they may get a fix long before most major ISPs can implement this.
Meanwhile, they hint at another way to confuse the scanner. Since your ISP does not see intranet packets, have each machine generate lots of itty bitty packets (pings?) and just send them to the gateway. Have a background task do this - all those IPid increments will break up the patterns in IPid on the outside of the gateway. Since most home LANs have higher inside bandwidth than outside bandwidth, this shouldn't affect available bandwidth too much.
As a matter of fact, that is EXACTLY how it works. There is a statement from the Copyright Board to this effect.
There are couple of small wrinkles. You are allowed to copy an original sound recording on to levied media for your own use. You are NOT allowed to copy the recording and give it to a friend - that would be distribution.
But - there is no restriction on HOW you get the original recording. Any legal method should be allowable. You can...
* borrow from a friend * borrow from a library * buy, copy, and return to the merchant
The last one only works if the merchant allows returns. HMV stopped allowing returns because this was getting to be too common. However, to HMV's credit, in all the announcements and press releases and interviews at the time, nowhere did HMV state that what the customers were doing was illegal - which is good, because it wasn't illegal.
Strauss and Howe also sets Gen X as 1961-1981. The term has been suffering from some creep over time, to the point where some references saying its only people born after 1970! I don't think we can stretch "boomers" to 1969 - that seems a bit much.
Yes, it will fit in that size memory. Lack of backlight is a bit of a problem, but anyone in the wilderness likely has a flashlight. You would likely prefer a red LED flashlight to the green backlight anyway, since it will tend to preserve your night vision.
...because you are making your own copy of an original, and artists are supposed to get reimbursed from a per-blank-disc levy (which is a topic of some discussion on its own).
Coverage is the big issue - 90% of my commute is underground, and there is no wireless coverage period - not even AM or FM radio. You have access only to what you bring with you.
I also record to local radio morning show from 6AM to 8AM to 4 MP3 files. My AvantGo sync and mp3 sync (separate devices) take about 5 minutes, and by 8:15 I can depart and have "internet" and "FM radio" without needing to be in contact from the subway.
The best alternative to AvantGo that I could see would be an online data gathering app that condensed everything down into a few Palm DOC files. That could run automatically at prescheduled times, and when you sync your Palm you just load the latest set. (It doesn't have to be Palm DOC, other formats could work too.) But it's got to be easy to set up. AvantGo has a significant edge in sync-transactions - you can make changes to your setup on the Palm, and they take effect next time you sync.
The other alternative for AvantGo is passthrough pricing, where smaller sites can set up for free but can only be loaded if the AvantGo user pays for them through AvantGo. Don't knock it - AvantGo has a significant aggregation edge there. This is exactly how DoCoMo's i-mode is doing it.
Here's another vote for the AVC Soul. I did a fair bit of checking, and finally picked it because it had the minimum features, and the price was good. I paid about C$170 (US$110) at a computer show.
The latest firmware ( 1.05s as noted above ) is truly slick. Tons of options, including the ability to set the rate of scan ff/rw within a track. Sounds pointless? Not at all...
I timeshift a lot of radio, because there's tons of interesting stuff on at times I can't sit around an listen. I use the DLink USB FM radio, and record to disk, with post conversion to MP3 using LAME. But a single two hour jazz show will run to 50 meg. I have 5 or 6 CDs each with a week of my fav show - 11 hours each, makes 3.5 gig right there. That was what caused me to discard the idea of a hard drive based player. The morning show I like but overlaps with sleep ends at 8 AM - by 8:05 the automatic conversion is done, and a 30 MB CR-RW write takes about 1 minute. Then I can grab the subway, where radio doesn't work.
Handily, the Soul has a Resume feature (restarts where you turned it off) but if you are trying to FF through a 2-hour track, you don't want to do it slowly!
Supposedly the Soul can also read DirectCD formatted CD-RW, but I've never tried it. Doing that would let me automate the CD-RW write, so I would just pick up the pre-recorded CD in the morning and go.
HDCP's linear key exchange is a fundamental weaknesses. We can:
Eavesdrop on any data
Clone any device with only their public key
Avoid any blacklist on devices
Create new device keyvectors.
In aggregate, we can usurp the authority completely.
Why do people continue to think they can build a secure system designed to simultaneous distribute data publicly and prevent its distribution?
Linux Is Still Prizing Quality over Consistency
on
Is Slackware Fading Away?
·
· Score: 3, Interesting
...which is fine as long as quality is the only determinant of a successful OS.
I could even suggest that K.I.S.S. is, in part, a decision to pursue quality. But it does mean a less comprehensive product - 'right out the box'.
Linux will likely never die, because those want control over the lower layers of their OS, AND who have the skills to manage it, will always choose Linux-like systems.
But lots of non-technical people want to install their OS once, and never have to worry about recompiling the kernel because they didn't have SCSI support and wanted to plug in a new device they just brought home.
Perhaps, in the absence of a single first choice of a distro among the Linux users, there heeds to be a single *second* choice.
Everyone's pointers to prior art seem to be missing the same thing - keyboard! People who have used the RIM find the keyboard faster and more accurate for short email messages.
So that's the combo - Palm, cell, keyboard.
Being GSM is not a problem - that's the direction that AT&T is headed, so that coverage is coming. And GPRS instead of cellular means that the mailer can step out occasionally to look for mail, without the network having to push it all the way down to the handset.
Alternate address for results...
on
IgNobel Awards
·
· Score: 5, Informative
Patented the WHAT?!
on
IgNobel Awards
·
· Score: 5, Funny
Ok, I bet he only patented the ROUND wheel.
I'll patent the wheel composed of a high number
of flat sides arranged as a regular polygon.
That'll get him....
Not at those prices!
on
Pocket PC 2002
·
· Score: 5, Insightful
Unless these pocket PCs start being a lot cheaper, Palm still has some edge.
These are certainly nice and all, but with all those high performance processors, high memory, color screens - the price keeps running up. These are going to dominate the "pocket pc" category, and at the typically higher price, they have to be a 'pocket pc', because you couldn't afford a desktop as well. (If you can afford the desktop as well, then you're likely above the mass market.)
I'll still take a Palm-class device plus a good (and not pricey) desktop rather than a pocket pc anyday.
...and now that I think about it, there is the opportunity to do intelligent inserts. If the staging area is more full than usual, perhaps the DB processes can try and benefit from more comment adds between commits, and feed the cache a little less often.
You're dropping back from "instant update", but you should be able to capture *all* posts, and still feed more pageviews.
Maybe a 'comment spool' where the comments can be saved as flat files, ready to be inserted when the DBMS comes back up?
Some banks use this multi-stage processing. The overall system complexity goes up, but the complexity of each component goes down. The staging area allows you to bring down the database backends.
The key benefit is that you can continuously accept new transactions/posts.
With an auto-static cache and comment staging,/. could have taken down the DB at almost anytime, just as long as it wasn't out for long. You just have to be prepared for the sudden load hit on DB start as you catch up on the staged posts.
He as claimed that the only reason he was
taking that 'similar action' was that he felt
he was sitting in judgement without any idea
of what the lower ranking officer had actually
done.
When he corrected that lack of experience,
he opened himself to the same charges as the
person against whom he would pass judgement.
Talk about your Catch-22. By similar reasoning, can some of the U.S. courts be
charged under the DMCA for disseminating
materials which can be used for to remove
access protections - because the court
documents detail it and they have to send
those out as public documents?
Since the US has DMCA, those of outside want geographic walls so that we can sell software and services without worrying that it will be bought be USians (think iCraveTv.com and Skylarov).
Given the current state of affairs in the U.S., other countries should be trying to cut themselves off from you!
At the present time, I recall the levy is still set at $0.07 per CD-R. (That's $0.07 CANADIAN.) Ooooh, yeah, sounds hefty to me. Yeah, the principal sucks if you only do data, but for music it works out to less than a penny a track. Note that for Audio CD-R (the restricted type) the levy is more like $0.77.
Second - and not widely known - once you have purchased "levied blank media" you are allowed to copy from an original CD in your possession to a blank. This IS the Copyright Board's ruling. So - rather than being considered a thief, the levy may make what you are doing LEGAL.(*)
* - As I understand it, you have to be copying from the original, not from a duplicate, and you cannot distribute or sell the copies. But as far as I can tell, my friend can loan me the original CD, and I can copy it to the blank for my use, and then return the CD.
The other notable advantage is that your encryption/decryption code is both widely available and doesn't appear to be cryptographic software. This is a huge advantage to those people who can be convicted/shot simply for having the ability to encrypt and decrypt information.
If it is possible to calculate digits of Pi starting at any point, then you could easily use Pi as a pseudo-random pad.
Once you know the starting digit location, you can easily decrypt something that has been XOR'd with the sequence from that point onward. But - given that each n-bit sequence occurs 1/n of all n-bit sequences, there are essentially an infinite number of options facing the code-breaker - even after each successful step!
If you are feeling particularly vicious that day, encrypt with two XOR sequences, based on two difference starting points.
Exactly! Right now the DMCA is unknown to most people outside of this arena. So - write up some stuff, put it on floppy disks or CD-ROMs, and then secure it with a good 'ol padlock - you will need to remove the lock to get the disk into the drive. Better yet, send out the disk just for the cost of shipping, but SELL THE KEYS.
This is an 'effective access control mechanism' for digital goods.
THEN lockpicks will be illegal. The resulting charges (you should be able to get the FBI to do this for you) should attract even more attention than Sklyarov's arrest.
Slashdot Mirror
> How to block our analytic technique - which
> turns out to be the behaviour required for
> correct functioning of NAT boxes - is
> described in Section IV.
As I understand it, if the NAT box does NOT rewrite the IPid, then there is a risk of IPid collision if two sources behind the NAT are sending to the same destination, and the packets fragment.
This means it is possible to demonstrate a bug in most home gateways - perhaps that way they may get a fix long before most major ISPs can implement this.
Meanwhile, they hint at another way to confuse the scanner. Since your ISP does not see intranet packets, have each machine generate lots of itty bitty packets (pings?) and just send them to the gateway. Have a background task do this - all those IPid increments will break up the patterns in IPid on the outside of the gateway. Since most home LANs have higher inside bandwidth than outside bandwidth, this shouldn't affect available bandwidth too much.
As a matter of fact, that is EXACTLY how it works. There is a statement from the Copyright Board to this effect.
There are couple of small wrinkles. You are allowed to copy an original sound recording on to levied media for your own use. You are NOT allowed to copy the recording and give it to a friend - that would be distribution.
But - there is no restriction on HOW you get the original recording. Any legal method should be allowable. You can...
* borrow from a friend
* borrow from a library
* buy, copy, and return to the merchant
The last one only works if the merchant allows returns. HMV stopped allowing returns because this was getting to be too common. However, to HMV's credit, in all the announcements and press releases and interviews at the time, nowhere did HMV state that what the customers were doing was illegal - which is good, because it wasn't illegal.
Strauss and Howe also sets Gen X as 1961-1981. The term has been suffering from some creep over time, to the point where some references saying its only people born after 1970! I don't think we can stretch "boomers" to 1969 - that seems a bit much.
> As long as I don't go into the wilderness for
Because you have your planetarium on it?> days on end it's not a problem (and if I did,
> why would I need a Palm?)
Yes, it will fit in that size memory. Lack of backlight is a bit of a problem, but anyone in the wilderness likely has a flashlight. You would likely prefer a red LED flashlight to the green backlight anyway, since it will tend to preserve your night vision.
...because you are making your own copy of an original, and artists are supposed to get reimbursed from a per-blank-disc levy (which is a topic of some discussion on its own).
It would be most cool as well.
Coverage is the big issue - 90% of my commute is underground, and there is no wireless coverage period - not even AM or FM radio. You have access only to what you bring with you.
I also record to local radio morning show from 6AM to 8AM to 4 MP3 files. My AvantGo sync and mp3 sync (separate devices) take about 5 minutes, and by 8:15 I can depart and have "internet" and "FM radio" without needing to be in contact from the subway.
The best alternative to AvantGo that I could see would be an online data gathering app that condensed everything down into a few Palm DOC files. That could run automatically at prescheduled times, and when you sync your Palm you just load the latest set. (It doesn't have to be Palm DOC, other formats could work too.) But it's got to be easy to set up. AvantGo has a significant edge in sync-transactions - you can make changes to your setup on the Palm, and they take effect next time you sync.
The other alternative for AvantGo is passthrough pricing, where smaller sites can set up for free but can only be loaded if the AvantGo user pays for them through AvantGo. Don't knock it - AvantGo has a significant aggregation edge there. This is exactly how DoCoMo's i-mode is doing it.
It was heard about here in a conference announcement from Marc Garneau and discussed on Slashdot.
And recently, it was pointed out that Canada does have critical exploration technology for drilling for samples.
..and here in Toronto we sometimes have below zero winters, but...
We also have a 2 minute idling bylaw. So, your car better warm up in two minutes, because that's all the time you've got after you remote start it.
Besides - below zero isn't really cold. Below -40 - now THAT'S cold. Winnipeg, yaaa!
Here's another vote for the AVC Soul. I did a fair bit of checking, and finally picked it because it had the minimum features, and the price was good. I paid about C$170 (US$110) at a computer show.
The latest firmware ( 1.05s as noted above ) is truly slick. Tons of options, including the ability to set the rate of scan ff/rw within a track. Sounds pointless? Not at all...
I timeshift a lot of radio, because there's tons of interesting stuff on at times I can't sit around an listen. I use the DLink USB FM radio, and record to disk, with post conversion to MP3 using LAME. But a single two hour jazz show will run to 50 meg. I have 5 or 6 CDs each with a week of my fav show - 11 hours each, makes 3.5 gig right there. That was what caused me to discard the idea of a hard drive based player. The morning show I like but overlaps with sleep ends at 8 AM - by 8:05 the automatic conversion is done, and a 30 MB CR-RW write takes about 1 minute. Then I can grab the subway, where radio doesn't work.
Handily, the Soul has a Resume feature (restarts where you turned it off) but if you are trying to FF through a 2-hour track, you don't want to do it slowly!
Supposedly the Soul can also read DirectCD formatted CD-RW, but I've never tried it. Doing that would let me automate the CD-RW write, so I would just pick up the pre-recorded CD in the morning and go.
In summary...
Conclusion
HDCP's linear key exchange is a fundamental weaknesses. We can:
Why do people continue to think they can build a secure system designed to simultaneous distribute data publicly and prevent its distribution?
...which is fine as long as quality is the only determinant of a successful OS.
I could even suggest that K.I.S.S. is, in part, a decision to pursue quality. But it does mean a less comprehensive product - 'right out the box'.
Linux will likely never die, because those want control over the lower layers of their OS, AND who have the skills to manage it, will always choose Linux-like systems.
But lots of non-technical people want to install their OS once, and never have to worry about recompiling the kernel because they didn't have SCSI support and wanted to plug in a new device they just brought home.
Perhaps, in the absence of a single first choice of a distro among the Linux users, there heeds to be a single *second* choice.
....cjs
Seriously - how about a postcard?
Since there is no 'inside' to open, and it can't contain anything, this should still be an acceptable form of mail for them.
Everyone's pointers to prior art seem to be missing the same thing - keyboard! People who have used the RIM find the keyboard faster and more accurate for short email messages.
So that's the combo - Palm, cell, keyboard.
Being GSM is not a problem - that's the direction that AT&T is headed, so that coverage is coming. And GPRS instead of cellular means that the mailer can step out occasionally to look for mail, without the network having to push it all the way down to the handset.
...and try this address for winners...
http://www.improb.com/ig/ig-2001-winners.html
Ok, I bet he only patented the ROUND wheel.
I'll patent the wheel composed of a high number
of flat sides arranged as a regular polygon.
That'll get him....
Unless these pocket PCs start being a lot cheaper, Palm still has some edge.
These are certainly nice and all, but with all those high performance processors, high memory, color screens - the price keeps running up. These are going to dominate the "pocket pc" category, and at the typically higher price, they have to be a 'pocket pc', because you couldn't afford a desktop as well. (If you can afford the desktop as well, then you're likely above the mass market.)
I'll still take a Palm-class device plus a good (and not pricey) desktop rather than a pocket pc anyday.
...and now that I think about it, there is the opportunity to do intelligent inserts. If the staging area is more full than usual, perhaps the DB processes can try and benefit from more comment adds between commits, and feed the cache a little less often.
You're dropping back from "instant update", but you should be able to capture *all* posts, and still feed more pageviews.
Maybe a 'comment spool' where the comments can be saved as flat files, ready to be inserted when the DBMS comes back up?
Some banks use this multi-stage processing. The overall system complexity goes up, but the complexity of each component goes down. The staging area allows you to bring down the database backends.
The key benefit is that you can continuously accept new transactions/posts.
With an auto-static cache and comment staging, /. could have taken down the DB at almost anytime, just as long as it wasn't out for long. You just have to be prepared for the sudden load hit on DB start as you catch up on the staged posts.
...with one additional point.
He as claimed that the only reason he was
taking that 'similar action' was that he felt
he was sitting in judgement without any idea
of what the lower ranking officer had actually
done.
When he corrected that lack of experience,
he opened himself to the same charges as the
person against whom he would pass judgement.
Talk about your Catch-22. By similar reasoning, can some of the U.S. courts be
charged under the DMCA for disseminating
materials which can be used for to remove
access protections - because the court
documents detail it and they have to send
those out as public documents?
Geographic restrictions cut both ways.
Since the US has DMCA, those of outside want geographic walls so that we can sell software and services without worrying that it will be bought be USians (think iCraveTv.com and Skylarov).
Given the current state of affairs in the U.S., other countries should be trying to cut themselves off from you!
At the present time, I recall the levy is still set at $0.07 per CD-R. (That's $0.07 CANADIAN.) Ooooh, yeah, sounds hefty to me. Yeah, the principal sucks if you only do data, but for music it works out to less than a penny a track. Note that for Audio CD-R (the restricted type) the levy is more like $0.77.
Second - and not widely known - once you have purchased "levied blank media" you are allowed to copy from an original CD in your possession to a blank. This IS the Copyright Board's ruling. So - rather than being considered a thief, the levy may make what you are doing LEGAL.(*)
* - As I understand it, you have to be copying from the original, not from a duplicate, and you cannot distribute or sell the copies. But as far as I can tell, my friend can loan me the original CD, and I can copy it to the blank for my use, and then return the CD.
The other notable advantage is that your encryption/decryption code is both widely available and doesn't appear to be cryptographic software. This is a huge advantage to those people who can be convicted/shot simply for having the ability to encrypt and decrypt information.
Doh!
That should be:
"each n-bit sequence occurs 1/(2^n) of all n-bit sequences".
Doh!
If it is possible to calculate digits of Pi starting at any point, then you could easily use Pi as a pseudo-random pad.
Once you know the starting digit location, you can easily decrypt something that has been XOR'd with the sequence from that point onward. But - given that each n-bit sequence occurs 1/n of all n-bit sequences, there are essentially an infinite number of options facing the code-breaker - even after each successful step!
If you are feeling particularly vicious that day, encrypt with two XOR sequences, based on two difference starting points.
Exactly! Right now the DMCA is unknown to most people outside of this arena. So - write up some stuff, put it on floppy disks or CD-ROMs, and then secure it with a good 'ol padlock - you will need to remove the lock to get the disk into the drive. Better yet, send out the disk just for the cost of shipping, but SELL THE KEYS.
This is an 'effective access control mechanism' for digital goods.
THEN lockpicks will be illegal. The resulting charges (you should be able to get the FBI to do this for you) should attract even more attention than Sklyarov's arrest.