Whatever happened to the fight for net neutrality? Timothy can't have thought about this story for top many milliseconds before adding his 'insight' there..
That we have all become good citizens, backing up all our data. I presume the data recovery firms are all panicking now that all their potebtial customers have backups of everything, and thus no longer need their services.
Not bad to have a global backup ratio of >1:1
Personally I use RAIM (Redundant Array of Instant Messages) to back up all my important notes and communications. It only works as long as all my friends log everything too, of course.
The researchers, and the article writers, completely fail to understand that 3-D Secure simply defines the interfaces between the three domains in the security model. The actual authentication model used is chosen and implemented by the card issuer. If the card issuer would decide it wants to use passphrase+OTP in a separate window (for URL validation), it could do so. In fact, outside of the US, many do. In Norway, for instance, online payments are usually verified through something akin to a "national electronic ID", which despite its flaws goes way above and beyond simple passwords.
The article is so full of factual mistakes and displays such a complete lack of knowledge and understanding it's not even funny.
They SO do.. but it might be for certain T-DSL products only; I have no idea. I've seen it in action at two different homes in southern Germany (Bavaria). My "samplings" are from the latter half of July 2009.
I don't have proof, and I cannot produce proof as I'm not in Germany at the moment.
I guess you'll just have to take my word for it, eh? Or offer alternative suggestions as to what I've seen.
I couldn't disagree more. Curiosity and Creativity are the two most outstanding qualities of human beings, and neither can flourish without the other.
Why should painters paint? Musicians compose and play? They shouldn't, following your logic. They do so because they can, and the rest of us are left to enjoy the fact that they do.
I think it is of *vital* importance that we explore and research for its own sake, and not only with specific purposes in mind. Fundamental research is the most important research we do, and for it to carry any meaning, it MUST be free of expectations and purpose. Whatever comes out of it can only be seen as a bonus, not taken for granted. Those bonuses will pay off, as they always have.
First mention I've seen of 3-D secure here. Good research. Anyway: Visa does not impose the authentication method on the issuers; the issuers can do this in any way they prefer (within certain limits). Some use "web shopping passwords", some use one-time passwords, some use a SMS or email solution, some tie it into the online banking security platform, some use national ID.
Also, many of the current gripes with 3DS are being worked on; for instance the iFrame/domainname issues.
Keep in mind that 3DS (VbV/MCSC) does NOT entail any other kind of fraud screening (name matching, etc.); it is an authentication system ONLY. And, for the time being and for most card products, if your card is not enrolled by your issuer (voluntary or not) you won't be asked to authenticate, though you will sometimes be redirected to a component of the 3DS chain to check your enrollment status.
For the merchant, it's simple: Attempt to authenticate, and liability for fraud is shifted to the issuer. Card not enrolled? Not your problem. Card enrolled? Authorize if authentication OK, otherwise don't.
But as many have said: This is not primarily done for the cardholder. It's for merchants (lower risk -> more/happier merchants), banks (lower risk -> lower cost, more merchants -> profit!) and the card companies (Visa/MC, less fraud -> less brand damage -> more shopping -> profit!).
...has some core2duo mobile based 1U barebones with room for a CF card, two SATA HDDs and "enough" memory, which make almost no noise at all unless under heavy load, and even then probably a lot less than your current box.
I use them for firewalling, and they are teh sweet, with 2 gigabit and 1 FE intel NIC onboard./Eirik
You're going to spend more time implementing blocks for myspace, not to mention all the other sites you then might think you want to block, than you would spend writing a corporate policy draft outlining acceptable use - plus installing efficient anti-virus and firewall software/hardware at appropriate places in your infrastructure.
Not to mention you'll come out of it looking less like a triggerhappy censoring dictator of some (not-so-)long-gone communist or fascist state.
If you have to block, block all and allow access only to those sites your employees need. That way it's not "selective censorship" anymore. Blocking a service is fair, blocking content is not.
...especially when one considers that the right of redress held by U.S. citizens is not extended to E.U. citizens...
is, to me, the real killer. Not only should our info (as collected by our governments or their representatives) be given to someone not under the control of our own governments, we will also have no rights with regards to the collected information once it reaches the other party.
I think it is a very Good Thing (tm) that the EU is trying to fight this.
Once you get the electricity to them they are indeed efficient. Which is why hybrid cars are such a good idea - just like the trains you mention. I'm looking at the efficiency from the first energy conversion to the last, which makes it a whole different story. See also my reply to the comment below./Eirik
I should have been more clear -- I meant electrical energy as delivered from common power plants through the normal power grid.
Trains are a different story - either because they produce their own (diesel-electrical ones) or because they get juice at a much higher voltage, often with less (dramatic) and fewer transformations between production and use./Eirik
When are people going to start looking at the bigger picture here? There are some obvious, and some not-so-obvious, disadvantages with electrical cars:
- If even a small percentage of people would start driving electrical cars, our power plants and grids wouldn't be able to handle it. It's as if every household in China suddenly should get a washing machine or microwave oven.
- Electrical energy used to move heavy objects is INCREDIBLY inefficient. First you need to produce electricity from some other sort of energysource - be it fossil fuels and gas, nuclear power (the only feasible option), coal, wind (blah), whatever. Then you need to transport it - potentially thousands of kilometres - through a very leaky distribution grid. Maybe 70% of the CONVERTED energy reaches your neighbourhood. Then you need to convert it down to 110 or 220 volts, or whatever you use there. Which loses you another bit (to wasted heat, mostly). Then you get to plug your car in, where the voltage is not only converted once again (to 12 or 24 or 48 volts or whatever), but it's also converted from AC to DC, which is, potentially, also very wasteful. That's when you can start filling up your accumulators. Then you either transform that directly to moving force by DC electrical engines (after going through a slew of regulators and stuff, though that is no worse than what goes on in a fuel engine), or you convert it to AC again to drive AC engines. DC engines are less efficient than AC engines, but converting to AC wastes power too. Maybe they even use 3-phase engines - even more efficient, but even more waste because you need to go via DC at some point. I don't know the exact figures, but I think there's about a one-digit percent of the energy that reaches your wheels.
- Battery production is expensive in terms of energy and dangerous materials.
- Battery disposal happens soon and frequently, further increasing the environmental load.
- Batteries become less efficient very quickly. 3-4 months to and from work, at most, before they start degrading noticeably.
Personally I'm more in favor of triple-hybrid cars: They run on fuel or gas (fuel has a well-developed distribution network, gas is getting there), but instead of driving the wheels directly they produce AC power to run highly efficient electrical engines. Plus, large capacitors are able to store breaking energy for quick re-use. This allows the diesel/fuel/gas engine to run at its most efficient at all times, and wastes somewhat less energy when breaking. And it requires no changes to our current distribution networks, it simply lessens the load. You could easily slice fuel usage in half if everyone drove hybrid cars.
It's not always a point aiming at zero, simply aim low enough for the problem to become manageable./Eirik
This is exactly what I was talking about. Too bad this feature simply doesn't work "right", so the problem can't at all be said to have ever been fixed.
The problem is that there exists only one input queue. Unless you can shoehorn a couple more in, related problems will NOT go away.
And as you sort of stated yourself -- OS/2 can easily be rendered unusable by a single misbehaving program. And if that program happens to be Mozilla, OpenOffice, or anything else even remotely useful, then I'd say the platform itself is pretty useless.
Mind you, I've been using OS/2 since the early 90s and well into the 21st century myself, and I loved many aspects of it, but some problems simply got hard to ignore./Eirik
*Wrong*. Version 4 (and everything that followed) still had the single input queue. What it did gain was some sort of asynchronous mechanism to detect when the input queue was hogged and attempt to forcibly grab control of it, but that rarely worked and more often than not caused even weirder problems.
They started playing with the various workarounds in fixpaks for version 3, with version 4 being the first (?) one with this feature enabled by default.
Didn't help much though. Add to that the various unfinished parts of the PM, and other parts that are simply buggy... And you have the one reason OS/2 was never as stable as it could have been.
"Hot on the heals of the invention of the telephone and automated switchboard, a research group called Fud-Tech just put out a recommendation to its customers that all corporations should ban the use of telephones in their organizations. The reports sites a laundry list of issues it feels plagues the telephone, most of which will have a familiar ring (ie the normal anti-chit and anti-chat talking points). Will this cool the telephone's rapid progress into the business arena?"
Microsoft SQL server has never been an option, and will (hopefully) never be;)
As mentioned in another thread, we use MySQL for now. It "works".
I'll check out Open Ingres either whenever it shows up in FreeBSD ports, or when I have time to play around with it in my spare time. Thanks for the tip.
Slashdot Mirror
Whatever happened to the fight for net neutrality?
Timothy can't have thought about this story for top many milliseconds before adding his 'insight' there..
...gnupg? ...tor? ...ssl+pfs? ...ssh? ...ipsec? ...openvpn? ...voip? .....<insert your favorite encryption/privacy tool here>?
Block everything? That would probably kick up more dust than the anti-gay legislation.
It doesn't take 16 fucking weeks for a woman to recover from giving birth.
Have you given birth lately?
...collect all the money so the rich capitalist bastards won't get their hands on them.
(s/money/patents/)
That we have all become good citizens, backing up all our data. I presume the data recovery firms are all panicking now that all their potebtial customers have backups of everything, and thus no longer need their services.
Not bad to have a global backup ratio of >1:1
Personally I use RAIM (Redundant Array of Instant Messages) to back up all my important notes and communications. It only works as long as all my friends log everything too, of course.
What on earth is the DMCA supposed to achieve, in the context of Ad-providers?
Sounds pretty scary to me.
The researchers, and the article writers, completely fail to understand that 3-D Secure simply defines the interfaces between the three domains in the security model. The actual authentication model used is chosen and implemented by the card issuer. If the card issuer would decide it wants to use passphrase+OTP in a separate window (for URL validation), it could do so. In fact, outside of the US, many do. In Norway, for instance, online payments are usually verified through something akin to a "national electronic ID", which despite its flaws goes way above and beyond simple passwords.
The article is so full of factual mistakes and displays such a complete lack of knowledge and understanding it's not even funny.
They SO do .. but it might be for certain T-DSL products only; I have no idea. I've seen it in action at two different homes in southern Germany (Bavaria). My "samplings" are from the latter half of July 2009.
I don't have proof, and I cannot produce proof as I'm not in Germany at the moment.
I guess you'll just have to take my word for it, eh? Or offer alternative suggestions as to what I've seen.
The Deutsche Telekom / T-Online does exactly the same in Germany.
I couldn't disagree more.
Curiosity and Creativity are the two most outstanding qualities of human beings, and neither can flourish without the other.
Why should painters paint? Musicians compose and play? They shouldn't, following your logic. They do so because they can, and the rest of us are left to enjoy the fact that they do.
I think it is of *vital* importance that we explore and research for its own sake, and not only with specific purposes in mind. Fundamental research is the most important research we do, and for it to carry any meaning, it MUST be free of expectations and purpose. Whatever comes out of it can only be seen as a bonus, not taken for granted. Those bonuses will pay off, as they always have.
...as I still need that to keep myself warm.
First mention I've seen of 3-D secure here. Good research.
Anyway: Visa does not impose the authentication method on the issuers; the issuers can do this in any way they prefer (within certain limits). Some use "web shopping passwords", some use one-time passwords, some use a SMS or email solution, some tie it into the online banking security platform, some use national ID.
Also, many of the current gripes with 3DS are being worked on; for instance the iFrame/domainname issues.
Keep in mind that 3DS (VbV/MCSC) does NOT entail any other kind of fraud screening (name matching, etc.); it is an authentication system ONLY. And, for the time being and for most card products, if your card is not enrolled by your issuer (voluntary or not) you won't be asked to authenticate, though you will sometimes be redirected to a component of the 3DS chain to check your enrollment status.
For the merchant, it's simple: Attempt to authenticate, and liability for fraud is shifted to the issuer. Card not enrolled? Not your problem. Card enrolled? Authorize if authentication OK, otherwise don't.
But as many have said: This is not primarily done for the cardholder. It's for merchants (lower risk -> more/happier merchants), banks (lower risk -> lower cost, more merchants -> profit!) and the card companies (Visa/MC, less fraud -> less brand damage -> more shopping -> profit!).
...has some core2duo mobile based 1U barebones with room for a CF card, two SATA HDDs and "enough" memory, which make almost no noise at all unless under heavy load, and even then probably a lot less than your current box.
/Eirik
I use them for firewalling, and they are teh sweet, with 2 gigabit and 1 FE intel NIC onboard.
You're going to spend more time implementing blocks for myspace, not to mention all the other sites you then might think you want to block, than you would spend writing a corporate policy draft outlining acceptable use - plus installing efficient anti-virus and firewall software/hardware at appropriate places in your infrastructure.
Not to mention you'll come out of it looking less like a triggerhappy censoring dictator of some (not-so-)long-gone communist or fascist state.
If you have to block, block all and allow access only to those sites your employees need. That way it's not "selective censorship" anymore. Blocking a service is fair, blocking content is not.
Biased or not, the part saying
...especially when one considers that the right of redress held by U.S. citizens is not extended to E.U. citizens...
is, to me, the real killer. Not only should our info (as collected by our governments or their representatives) be given to someone not under the control of our own governments, we will also have no rights with regards to the collected information once it reaches the other party.
I think it is a very Good Thing (tm) that the EU is trying to fight this.
Weird. I did. And my sister did, as a result she still doesn't have one.
We're in Norway though. And it's some time ago.
I apologise if I've been in error.
...or whatever it's called help, if you need a CC to register on iTunes in the first place?
Once you get the electricity to them they are indeed efficient. Which is why hybrid cars are such a good idea - just like the trains you mention. I'm looking at the efficiency from the first energy conversion to the last, which makes it a whole different story. /Eirik
See also my reply to the comment below.
I should have been more clear -- I meant electrical energy as delivered from common power plants through the normal power grid.
/Eirik
Trains are a different story - either because they produce their own (diesel-electrical ones) or because they get juice at a much higher voltage, often with less (dramatic) and fewer transformations between production and use.
When are people going to start looking at the bigger picture here? There are some obvious, and some not-so-obvious, disadvantages with electrical cars:
/Eirik
- If even a small percentage of people would start driving electrical cars, our power plants and grids wouldn't be able to handle it. It's as if every household in China suddenly should get a washing machine or microwave oven.
- Electrical energy used to move heavy objects is INCREDIBLY inefficient. First you need to produce electricity from some other sort of energysource - be it fossil fuels and gas, nuclear power (the only feasible option), coal, wind (blah), whatever. Then you need to transport it - potentially thousands of kilometres - through a very leaky distribution grid. Maybe 70% of the CONVERTED energy reaches your neighbourhood. Then you need to convert it down to 110 or 220 volts, or whatever you use there. Which loses you another bit (to wasted heat, mostly). Then you get to plug your car in, where the voltage is not only converted once again (to 12 or 24 or 48 volts or whatever), but it's also converted from AC to DC, which is, potentially, also very wasteful. That's when you can start filling up your accumulators. Then you either transform that directly to moving force by DC electrical engines (after going through a slew of regulators and stuff, though that is no worse than what goes on in a fuel engine), or you convert it to AC again to drive AC engines. DC engines are less efficient than AC engines, but converting to AC wastes power too. Maybe they even use 3-phase engines - even more efficient, but even more waste because you need to go via DC at some point. I don't know the exact figures, but I think there's about a one-digit percent of the energy that reaches your wheels.
- Battery production is expensive in terms of energy and dangerous materials.
- Battery disposal happens soon and frequently, further increasing the environmental load.
- Batteries become less efficient very quickly. 3-4 months to and from work, at most, before they start degrading noticeably.
Personally I'm more in favor of triple-hybrid cars: They run on fuel or gas (fuel has a well-developed distribution network, gas is getting there), but instead of driving the wheels directly they produce AC power to run highly efficient electrical engines. Plus, large capacitors are able to store breaking energy for quick re-use. This allows the diesel/fuel/gas engine to run at its most efficient at all times, and wastes somewhat less energy when breaking. And it requires no changes to our current distribution networks, it simply lessens the load. You could easily slice fuel usage in half if everyone drove hybrid cars.
It's not always a point aiming at zero, simply aim low enough for the problem to become manageable.
...in GNU/Linux systems: 1500 pages, 3 volumes. ...in Windows systems: Two words: "You don't".
This is exactly what I was talking about.
/Eirik
Too bad this feature simply doesn't work "right", so the problem can't at all be said to have ever been fixed.
The problem is that there exists only one input queue. Unless you can shoehorn a couple more in, related problems will NOT go away.
And as you sort of stated yourself -- OS/2 can easily be rendered unusable by a single misbehaving program. And if that program happens to be Mozilla, OpenOffice, or anything else even remotely useful, then I'd say the platform itself is pretty useless.
Mind you, I've been using OS/2 since the early 90s and well into the 21st century myself, and I loved many aspects of it, but some problems simply got hard to ignore.
*Wrong*.
... And you have the one reason OS/2 was never as stable as it could have been.
Version 4 (and everything that followed) still had the single input queue. What it did gain was some sort of asynchronous mechanism to detect when the input queue was hogged and attempt to forcibly grab control of it, but that rarely worked and more often than not caused even weirder problems.
They started playing with the various workarounds in fixpaks for version 3, with version 4 being the first (?) one with this feature enabled by default.
Didn't help much though. Add to that the various unfinished parts of the PM, and other parts that are simply buggy
"Hot on the heals of the invention of the telephone and automated switchboard, a research group called Fud-Tech just put out a recommendation to its customers that all corporations should ban the use of telephones in their organizations. The reports sites a laundry list of issues it feels plagues the telephone, most of which will have a familiar ring (ie the normal anti-chit and anti-chat talking points). Will this cool the telephone's rapid progress into the business arena?"
Dinos shall once again rule the world.
Microsoft SQL server has never been an option, and will (hopefully) never be ;)
As mentioned in another thread, we use MySQL for now. It "works".
I'll check out Open Ingres either whenever it shows up in FreeBSD ports, or when I have time to play around with it in my spare time. Thanks for the tip.