"Odd protocols, like GRE?" Hmmm.. not a network guy, are you? Should I use a standardized, widely implemented protocol like GRE, or a single-implementation solution like OpenVPN. Don't get me wrong, I love OpenVPN and thing those guys have a fantastic cross-platform solution... but GRE isn't exactly an "odd protocol".
Heh -- I'm not talking about the *implementers*... just the *protocol designers*. That's why I left out *OpenLDAP* and *OpenSSL*.;-)
Seriously though - ASN.1 is pretty good for specification, and some of the serializations aren't bad. Fairly compact, flexible... But don't code it by hand - se a ASN.1 compiler.
Hmmmm... any government agency? Based on the earlier story, it seems the U5 governments should be on the list, being shutdown by some Chinese Government agency...
Wait -- if it is 28,000 light years away, but only 140 years old.... does that mean we won't see it for another 27,860 years? Or, did it actually occur 28,140 years ago and we could see it 140 years ago?
It is your fault for running an insecure OS? Yes - you have the option of choosing a more secure OS, or purchasing components to better secure your current OS.
Not understanding the capabilities of your OS is not an excuse. If you buy a Ferrari, and it does not do well off-road, whose fault is it? If Ferrari claimed it was off-road capable, then *you* should go after them. If they made no such claim, then *you* are at fault for assuming it's off-road capabilities. Either way, *your* course of action is in *your* hands.
I am not a Verizon customer, but have made calls to many Verizon customers, and have received calls from many Verizon customers. Using only Verizon data, one would be able to reconstruct quite a bit of my calling patterns. Can I call Verizon, and have them withhold calls involving my phone number(s) ?
While I don't have a specific product in mind, avoid anything that attempts to filter out the bad stuff. It will never stop it all. Instead, use a product that allows for whitelisting. Deny everything by default, and then allow access to sites one at a time. This is great for young children -- disney.com, nick.com, etc make a nice, short, finite, manageable list. Teens may be a bit tougher, but minimally the kid has to come ask for a specific site to be whitelisted.
And, if proxy-style whitelisting is not an option, maybe a DNS server that defaults all resolution to 127.0.0.1, and allows overrides.
Use something at your router, if possible. Either an embedded DNS server (2Wire, I think, has one), or something like OpenWRT on a WRT54G, with either configurable DNS or a proxy. Then block all outbound DNS, to make sure that the PC is not simply configured to use external DNS. Possibly, default block IPs, and only allow IPs corresponding to names you've whitelisted.
Of course, how insane do you really want to get, when, as you point out, the kid can simply go to a friends house? How about implanted RFID?
High school physics was a while back for me now, but technically, isn't a kilogram a measure of mass? And therefore, if its weight is changing, isn't it actually possible that the mass has remained constant, but the force of gravity has slightly changed in that locality? Of course, other reference masses in the same locality could be used for comparison to determine gravitational fluctuations... but how does one account for that?
In the story posting, we are not "begging" the question in any sense. We are "raising" or "asking", but we are not begging the question. I don't think we can justify the use of the word "beg" here, unless it was meant to be used in reference to the logical fallacy, and therefore it was used incorrectly.
Wow -- my kids also come into contact with School Buses, Sidewalks, and Cafeterias during the normal course of school. They better start teach safety courses for those too!!!!
AFAIK - Windows has no ability to allow your system clock to be set to UTC yet still display localtime. But, yes - it is considered best practice to set your system clock to UTC whenever possible.
Why bother? Once you setup an SMB gateway, you lose almost all of the AFS functionality. You'd be limited to SMB ACLs, no client-server fault tolerance, no client initiated PT/DB balancing, etc. What do you gain over plain Samba?
Slashdot Mirror
Can you give me tomorrow's lottery numbers?
http://politics.slashdot.org/story/11/12/08/010250/iran-shuts-down-us-virtual-embassy
I was typing from DOS Edit -- the one Microsoft word processor that has never crashed on me -- and we DOS'rs use '\' !
I can't wait for the GNU\Linux Marketing Department to make a campaign out of this!!! Oh wait ..., well, Slashdot it is then!
"Odd protocols, like GRE?" .. not a network guy, are you? Should I use a standardized, widely implemented protocol like GRE, or a single-implementation solution like OpenVPN. Don't get me wrong, I love OpenVPN and thing those guys have a fantastic cross-platform solution ... but GRE isn't exactly an "odd protocol".
Hmmm
Heh -- I'm not talking about the *implementers* ... just the *protocol designers*. That's why I left out *OpenLDAP* and *OpenSSL*. ;-)
Seriously though - ASN.1 is pretty good for specification, and some of the serializations aren't bad. Fairly compact, flexible ... But don't code it by hand - se a ASN.1 compiler.
Yeah - those guys at MIT (Kerberos), UMich (LDAP), and the SSL guys ... not that anyone uses any of those protocols/implementations ...
ASN.1 is the solution ... the problem just hasn't been properly specified yet.
"Of the people, by the people, for the people" ... how much more open source can you get? ;-)
....
Of course, I can't quote from any substantive documents of the other U5 governments
Hmmmm... any government agency? Based on the earlier story, it seems the U5 governments should be on the list, being shutdown by some Chinese Government agency ...
Wait -- if it is 28,000 light years away, but only 140 years old .... does that mean we won't see it for another 27,860 years? Or, did it actually occur 28,140 years ago and we could see it 140 years ago?
Not understanding the capabilities of your OS is not an excuse. If you buy a Ferrari, and it does not do well off-road, whose fault is it? If Ferrari claimed it was off-road capable, then *you* should go after them. If they made no such claim, then *you* are at fault for assuming it's off-road capabilities. Either way, *your* course of action is in *your* hands.
* AFS - comparably complex setup, but does it all. Even makes me coffee in the morning.
'Nuff said
I am not a Verizon customer, but have made calls to many Verizon customers, and have received calls from many Verizon customers. Using only Verizon data, one would be able to reconstruct quite a bit of my calling patterns. Can I call Verizon, and have them withhold calls involving my phone number(s) ?
'Nuff said.
While I don't have a specific product in mind, avoid anything that attempts to filter out the bad stuff. It will never stop it all. Instead, use a product that allows for whitelisting. Deny everything by default, and then allow access to sites one at a time. This is great for young children -- disney.com, nick.com, etc make a nice, short, finite, manageable list. Teens may be a bit tougher, but minimally the kid has to come ask for a specific site to be whitelisted.
And, if proxy-style whitelisting is not an option, maybe a DNS server that defaults all resolution to 127.0.0.1, and allows overrides.
Use something at your router, if possible. Either an embedded DNS server (2Wire, I think, has one), or something like OpenWRT on a WRT54G, with either configurable DNS or a proxy. Then block all outbound DNS, to make sure that the PC is not simply configured to use external DNS. Possibly, default block IPs, and only allow IPs corresponding to names you've whitelisted.
Of course, how insane do you really want to get, when, as you point out, the kid can simply go to a friends house? How about implanted RFID?
High school physics was a while back for me now, but technically, isn't a kilogram a measure of mass? And therefore, if its weight is changing, isn't it actually possible that the mass has remained constant, but the force of gravity has slightly changed in that locality? Of course, other reference masses in the same locality could be used for comparison to determine gravitational fluctuations ... but how does one account for that?
Wow -- my kids also come into contact with School Buses, Sidewalks, and Cafeterias during the normal course of school. They better start teach safety courses for those too!!!!
AAahhhh ... that explains why I pay and pay and pay, and only get viruses in return!!!
I do XY plots with multiple sets of Y values all the time, and I get the expected results. What do you get?
I use OOo Calc everyday, with excellent success. Would you mind expanding on your opinion that "OOo Calc is horrible" ?
If you are dedicated it's possible to pull your appointments from an exchange server, covert to iCal, and then import them into Sunbird.
How do you pull your appointments from an exchange server?
AFAIK - Windows has no ability to allow your system clock to be set to UTC yet still display localtime. But, yes - it is considered best practice to set your system clock to UTC whenever possible.
Why bother? Once you setup an SMB gateway, you lose almost all of the AFS functionality. You'd be limited to SMB ACLs, no client-server fault tolerance, no client initiated PT/DB balancing, etc. What do you gain over plain Samba?
Agreed -- try OpenAFS. More complex, but scales well.