If the network were encrypted then you could simply argue that the packet wasn't yours and you were merely forwarding it. But if it's in the plain then they'd be able to see that it didn't come in and infer that it was yours.
It's very easy to make a system self-healing when you are running in a completely controlled evironment.
Indeed my TiVo very rarely crashes and always recovers, but the same is also true of every embedded system i've used - be it a cellphone, weather station or alarm system.
Now if i screw around modding my tivo then it's entirely possible to crash it and it doesn't recover very well from that...
Is a little bit different from self-healing, but they are in the same vein.
I believe Sun are working on systems that will attempt to spot failure trends, so they can proactively identify other customers who may run into similar problems and then either have the system fix itself or send someone out to deal with it.
The other mindset i've seen with RAID disks, is why bother replacing them. Disks are getting to the point that it's probably cheaper just to leave the dead one in there and power up a spare than to dispatch someone to install a new one.
Plenty of Sun's boxes have redundant power supplies.
If something goes wrong with one, the system should detect either too little or too much DC voltage or current coming from it, and switch to it's backup.
Your suggestion doesn't make much sense. Should mozilla know what to do if a usb mouse fails or is removed unexpectedly? Of course not, the mozilla developers expect that this will be taken care of.
Likewise when an correctably memory or disk error occurs... The memory controller or disk firmware should deal with it and the application should be none-the-wiser.
About doing peer-to-peer radar detectors. It'd be really nice to know if a car up ahead detected a radar signal instead of waiting until it's pointed at mine:)
IIRC GSM permits up to a 2W transmission (if you are far from a base station), bluetooth is nearer 1mW, so it should cause less damage.
Of course people forget the whole inverse cubed relationship between power and distance, so the same people that complain about the effects of base stations near their house expose themselves to thousands of times more radation by using cellphones themselves.
Some drivers include proprietory information that can't be GPL'd. Most hardware manufacturers license IP from other people and naturally can't give that away as open source.
I'm not saying this is right, or the way things should be - but it does seem to be true.
I'm not even sure that all drivers need to be in the kernel. I don't see why we cant have stable interfaces for wireless drivers, for USB devices, firewire devices etc...
Attitudes like this guys don't help linux. Sure if linux were the world's #1 OS and all the cool new hardware needed to support it... then this would be great. But the truth is that we are playing catchup and making it more difficult for hardware vendors to provide support.
Kazaa could use google desktop to inspect the system to find sharable stuff without having to do a painfully slow system scan. In fact it could even relay incoming searches directly to GDS to maximize the number of hits.
Applets most definitely can ask for permission to access webservers other than the one that is in their immediate sandbox.
IIRC most jvms assess the risk involved in granting a particular privilege to an applet, and accessing webservers is one of the lower risk permissions - versus socket operations and local filesystem access.
Most users will click yes to anything but the most dire warnings:)
The article seemed a little vague, but i started investigating this when google desktop first came out.
GDS runs a webserver on your computer which any local application can query, including any java or activex app with outgoing http priviledges.
Google stop this by requiring that some sort of random ID as a key to access the page. This ID is generated as part of the url when you double click on the GDS icon in the taskbar.
It's also embedded into any results page that comes back from google, and you can exploit this by having the java applet first request www.google.com, find the link to GDS, then run a GDS search, then return those results via another web request to a remote host.
People complain about Universal Service Fee because it's an operating cost of your telecoms company yet they don't roll it into their advertized monthly rate.
Imagine subscribing to slashdot and having them bill you for:
Bandwidth Fee $0.39 Admin Salaries $20.31...
It's a cost of doing business and should be rolled into the cost that's presented to customers. I'd also argue that sales tax and CRV should be rolled in, as in europe, since it makes instore prices a lot clearer.
The biggest draw is that you have interchangable lenses which are compatible with the Brand X lenses that you've already invested thousands or tens of thousands of dollars in.
However the SLR viewfinder is mirrored so it's absolutely real-time. There's no viewfinder lag like you have with many P&S cameras.
For me... i'm just used to the viewfinder. It's weird using film cameras that dont have a viewfinder and it's weird using digital ones too.
Slashdot Mirror
Volcanic eruptions have happened in the last 4 million years....
:)
That's only about 15 iterations "emerge kde" on my gentoo laptop
Well the anonymous proxy knows all. It knows your IP address, what you are connecting to, and what you are sending.
No one node in the tor system knows all of this.
It's a completely different system.
Tor allows you to access existing internet resources anonymously.
Freenet allows you to PUBLISH and access resources anonymously - if it works.
If the network were encrypted then you could simply argue that the packet wasn't yours and you were merely forwarding it. But if it's in the plain then they'd be able to see that it didn't come in and infer that it was yours.
Yeah but they do it to generate buzz and publicity.. and i suspect lawyers end up being cheaper than advertising.
but i'd never dream of trying to set it up and run it myself - proper DBA support costs more than any database software and it is worth it.
Mysql and postgres are great little databases for non-critical projects, but a well admined oracle system is hard to top.
As others have pointed out, the sticker price of oracle is way less than the cost of the people to make it fly.
But replacing dead drives can now become part of routine maintenance instead of paging out an engineer.
It's very easy to make a system self-healing when you are running in a completely controlled evironment.
Indeed my TiVo very rarely crashes and always recovers, but the same is also true of every embedded system i've used - be it a cellphone, weather station or alarm system.
Now if i screw around modding my tivo then it's entirely possible to crash it and it doesn't recover very well from that...
Is a little bit different from self-healing, but they are in the same vein.
I believe Sun are working on systems that will attempt to spot failure trends, so they can proactively identify other customers who may run into similar problems and then either have the system fix itself or send someone out to deal with it.
The other mindset i've seen with RAID disks, is why bother replacing them. Disks are getting to the point that it's probably cheaper just to leave the dead one in there and power up a spare than to dispatch someone to install a new one.
Plenty of Sun's boxes have redundant power supplies.
If something goes wrong with one, the system should detect either too little or too much DC voltage or current coming from it, and switch to it's backup.
Your suggestion doesn't make much sense. Should mozilla know what to do if a usb mouse fails or is removed unexpectedly? Of course not, the mozilla developers expect that this will be taken care of.
Likewise when an correctably memory or disk error occurs... The memory controller or disk firmware should deal with it and the application should be none-the-wiser.
Well it amazes me that lots of people get hysterical about the evils of microwave radiation yet dont understand some fairly simple principles.
They teach this stuff in high school - it's not rocket science.
About doing peer-to-peer radar detectors. It'd be really nice to know if a car up ahead detected a radar signal instead of waiting until it's pointed at mine :)
From what i can see on:
http://www.techmind.org/gsm/
GSM900 permits a maximum handset transmission of 2W - i remember seeing that in my nokia 7110 manual.
Bluetooth has a far lower transmission power.
IIRC GSM permits up to a 2W transmission (if you are far from a base station), bluetooth is nearer 1mW, so it should cause less damage.
Of course people forget the whole inverse cubed relationship between power and distance, so the same people that complain about the effects of base stations near their house expose themselves to thousands of times more radation by using cellphones themselves.
Not all drivers can be released as GPL.
Some drivers include proprietory information that can't be GPL'd. Most hardware manufacturers license IP from other people and naturally can't give that away as open source.
I'm not saying this is right, or the way things should be - but it does seem to be true.
I'm not even sure that all drivers need to be in the kernel. I don't see why we cant have stable interfaces for wireless drivers, for USB devices, firewire devices etc...
Attitudes like this guys don't help linux. Sure if linux were the world's #1 OS and all the cool new hardware needed to support it... then this would be great. But the truth is that we are playing catchup and making it more difficult for hardware vendors to provide support.
An effort to make device driver standards would mean a lot more to lots of us.
That would make it easier for manufacturers to make linux supported hardware and know that it worked.
Every linux user needs linux compatible hardware, but relatively few need commercial software.
Kazaa could use google desktop to inspect the system to find sharable stuff without having to do a painfully slow system scan. In fact it could even relay incoming searches directly to GDS to maximize the number of hits.
You must be new here...
Applets most definitely can ask for permission to access webservers other than the one that is in their immediate sandbox.
:)
IIRC most jvms assess the risk involved in granting a particular privilege to an applet, and accessing webservers is one of the lower risk permissions - versus socket operations and local filesystem access.
Most users will click yes to anything but the most dire warnings
Makes you wonder what this could be used for.
It's a dream exploit for finding users with illegal mp3s or video.
Trying to steal confidential information isn't so easy, since you'd have to have a fairly good idea what to search for first.
The article seemed a little vague, but i started investigating this when google desktop first came out.
GDS runs a webserver on your computer which any local application can query, including any java or activex app with outgoing http priviledges.
Google stop this by requiring that some sort of random ID as a key to access the page. This ID is generated as part of the url when you double click on the GDS icon in the taskbar.
It's also embedded into any results page that comes back from google, and you can exploit this by having the java applet first request www.google.com, find the link to GDS, then run a GDS search, then return those results via another web request to a remote host.
But it sounds like it's fixed, so that's good.
People complain about Universal Service Fee because it's an operating cost of your telecoms company yet they don't roll it into their advertized monthly rate.
...
Imagine subscribing to slashdot and having them bill you for:
Bandwidth Fee $0.39
Admin Salaries $20.31
It's a cost of doing business and should be rolled into the cost that's presented to customers. I'd also argue that sales tax and CRV should be rolled in, as in europe, since it makes instore prices a lot clearer.
Sure the fines proposed are dumb, but it seems wrong for public service companies to be able to pick and choose who gets which service.
Means large parts of the united states probably wont see broadband in this decade because it's not immediately profitable for their providers.
I dont see why the government can't set goals for broadband availability since it'll cripple the US if parts of it fall behind Europe and Asia.
I haven't read the spec in detail, but i thought that the session key used is signed with your real non-transient private key.
With that in mind i still don't see how anyone could forge any packets from me without knowing my key.
The biggest draw is that you have interchangable lenses which are compatible with the Brand X lenses that you've already invested thousands or tens of thousands of dollars in.
However the SLR viewfinder is mirrored so it's absolutely real-time. There's no viewfinder lag like you have with many P&S cameras.
For me... i'm just used to the viewfinder. It's weird using film cameras that dont have a viewfinder and it's weird using digital ones too.