Given the real-time nature of phone conversations and the low amount of processing power that most phones have, surely the solution they chose was a best fit solution? When you throw a modern desktop PC into the equation, then you are going to be able to crack that very quickly. The real question is the GSMA has actually provided other levels of encryption for when processing capability is available? The improved encryption would depend on both phone and tower capabilities.
If all the changes done are only in user space then none of these companies have anything to worry about. If they aren't then they should either consider releasing that code or moving that code into user space. Either way they should be documenting the availability of the base source code.
One reason people switched to Google and OpenDNS was because of their ISP's policy of hijacking non-existent DNS entries and redirecting to their search engines.
My alternative solution was simply to block the IP of the search host. Sure it did not resolve the broken DNS server issue, but does help work around one of the symptoms. What I would really want to do is put in an intermediate DNS server that can filter out any IP address entries matching their bogus one.
We ran into this sort of issue with a high availability setup. The nice thing with the DNS approach is that it will always be www.myco.com, no matter the IP it resolves to. On the other hand if you delegate this to application server then you have to redirect to a server with a different name, such as www1, www2, etc
If we had been dealing with non transactional stuff where state was in the cookie the first approach would have worked, but we weren't and we had to ensure the browser was always talking to the same server, so we ended up using the second approach.
One other thing is that there is a certain assumption that there is only one DNS server between you and a root server and that none of them cache.
Maybe an alternative would to have DNS servers support geographical zones for the IP addresses, so it is the client that can decide which server to speak to. There would have to be a notion of default zone for compatibility and fallback.
How can you route packets to the location the cell phone is currently roaming at?
Your phone would probably need a unique ID and a service where it could announce its current IP address. When you try connecting to your cell phone, then a check with that service would be made and you have the IP you need to talk on. The simplest of solution would be for your phone to have a unique DNS name and then using dynamic IP service. In this case, even if the IP is in flux the name isn't. The rest is basic network architecture.
Funny, my home NATed systems seem to work with VPNs, Skype, and all that. What's the problem again? I suppose it's something to do with the routers?
This is partly because a number of these services use NAT busting techniques and I suspect in other cases you have had to do port mapping on your router.
If all the devices in your network only speak IPv6, then the missing you would just need a router that translates IPv6 to IPv4 (of course it will may also need to convert any DNS A record to a DNS AAAA record). A subset of the IPv6 range is actually allocated to cover the IPv4 address range - basically any address with a maximum value of 2^32 in the 2^128 bit range is an IPv4 address. So your IPv4 address 216.34.181.45 as an IPv6 address is::D822:B52D.
Client sites have nothing to worry about straight away, unless they want to access the new IPv6 server sites that will be coming online. The issue will be new sites needing IP addresses will be IPv6 only. If everyone started the move to IPv6 today, then the internet, from the average joe point of view, will look pretty much the same. The problem is that they will start seeing the breakages because we are almost out of IPv4 addresses before anyone has really started upgrading their infrastructure to IPv6.
Sounds more like the guy had a lousy defence team. Either that or it is was some crazy cowboy court where as soon as the hacker word was mentioned it was deemed over.
Kinda reminds me of when people show a picture of a fictitious flying saucer and call it a UFO. Clearly if you have a clear picture of it is an IFO (Identified Flying Object) and if it is also on the ground, then its a IGO (Identified Grounded Object) Then again if you know what it is just call it what it is and not a UFO.
I was about to say something snarky and suggest you should have read it online, except that it seems pretty difficult to find. I haven't found it yet. Maybe you can't read it unless you are on the XBox, which would be rather bothersome?
Sounds like they should have release Google TV beta first.
Joking aside, this is probably why Apple is taking such a cautious approach with Apple TV. They realise that there is potential, though it is not clear how it should manifest itself. Playing around with other solutions like XBMC and Plex it feels like there is certainly a future, but it may still be a few years down the road. Maybe devices like the Wii would be better, if it simply offered the missing components like being able to stream from a home media server?
If your devices do not need to speak to the outside world then they can just use link local addresses ( fe80::/64 ) and be hidden from view. Heck they could even stick with with IPv4 if need be. Anything else that needs to speak with the outside world will need a routable address or deal with some sort of proxy (if outgoing only).
You can even add a firewall (and you really should) to reduce access to resources that aren't intended for use by external entities. Firewalls can be written to deal with dynamic subnet prefixes, so there isn't really an excuse to not have one.
IPv6 addresses aren't meant to be used in their raw form (even if you can) and you should use some sort of name service, such as DNS or Zero-Config (amongst others). We could have stuck with a decimal notation for IPv6 addresses, but you would then be complaining that IPv6 addresses are too long. Believe me, the IPv6 numerical notation is not perfect, but it sure beats the alternative. Heck::1 is a lot short than 127.0.0.1 and your IPv4 address can be represented in IPv6. For example 123.156.123.156 is simply::7B9C:7B9C (blocks of zeros can be resumed to:: ).
IPv6 is not that much different to IPv4, though it is the address length is what breaks any levels of compatibility. No IPv4 hardware or software is designed with anything else than a 32-bit IP address in mind. So there really is no better solution that is "that is more compatible with the existing IPv4 network" and anyway even if there was it is too late for that now. No point in fighting the coming tidal wave, even if you are only seeing the receding IPv4 tide for the moment. Get with it!
I hate seeing the Java community tear itself apart like this, internal rifts have now become vast canyons thanks to the demise of Sun and the acquisition by Oracle.
Don't get me wrong, the tinder was plenty dry in the Java world but recent events have poured on the gasoline.
It also possible that this is case of the distrust of Oracle is far greater than that of Microsoft. Its possible that we are all being too reactionary, for something that is simply not that bad, but because we are talking about Oracle we need to look and the facts with more care and see what really is at play here.
She speaks to the mob. She tells the mob what it wants to hear, rather than what needs saying. This will get her a big following, but it doesn't mean a good mob leader is capable of much beyond causing noise and damage. On the other hand I wonder how much this differs from many people involved in politics?
Slashdot Mirror
Given the real-time nature of phone conversations and the low amount of processing power that most phones have, surely the solution they chose was a best fit solution? When you throw a modern desktop PC into the equation, then you are going to be able to crack that very quickly. The real question is the GSMA has actually provided other levels of encryption for when processing capability is available? The improved encryption would depend on both phone and tower capabilities.
If all the changes done are only in user space then none of these companies have anything to worry about. If they aren't then they should either consider releasing that code or moving that code into user space. Either way they should be documenting the availability of the base source code.
What software DNS solution did you uses? Please don't suggest BIND, since that is real bitch to set up.
One reason people switched to Google and OpenDNS was because of their ISP's policy of hijacking non-existent DNS entries and redirecting to their search engines.
My alternative solution was simply to block the IP of the search host. Sure it did not resolve the broken DNS server issue, but does help work around one of the symptoms. What I would really want to do is put in an intermediate DNS server that can filter out any IP address entries matching their bogus one.
We ran into this sort of issue with a high availability setup. The nice thing with the DNS approach is that it will always be www.myco.com, no matter the IP it resolves to. On the other hand if you delegate this to application server then you have to redirect to a server with a different name, such as www1, www2, etc
If we had been dealing with non transactional stuff where state was in the cookie the first approach would have worked, but we weren't and we had to ensure the browser was always talking to the same server, so we ended up using the second approach.
One other thing is that there is a certain assumption that there is only one DNS server between you and a root server and that none of them cache.
Maybe an alternative would to have DNS servers support geographical zones for the IP addresses, so it is the client that can decide which server to speak to. There would have to be a notion of default zone for compatibility and fallback.
Doesn't everyone just throw whatever they have in a glass to see if it's good? Why stick to established recipes?
What sort of heretic statement is that?
On the lighter side of things vodka and maple syrup work well together. We tried the maple syrup with whiskey and it didn't work out so well.
How can you route packets to the location the cell phone is currently roaming at?
Your phone would probably need a unique ID and a service where it could announce its current IP address. When you try connecting to your cell phone, then a check with that service would be made and you have the IP you need to talk on. The simplest of solution would be for your phone to have a unique DNS name and then using dynamic IP service. In this case, even if the IP is in flux the name isn't. The rest is basic network architecture.
Funny, my home NATed systems seem to work with VPNs, Skype, and all that. What's the problem again? I suppose it's something to do with the routers?
This is partly because a number of these services use NAT busting techniques and I suspect in other cases you have had to do port mapping on your router.
If all the devices in your network only speak IPv6, then the missing you would just need a router that translates IPv6 to IPv4 (of course it will may also need to convert any DNS A record to a DNS AAAA record). A subset of the IPv6 range is actually allocated to cover the IPv4 address range - basically any address with a maximum value of 2^32 in the 2^128 bit range is an IPv4 address. So your IPv4 address 216.34.181.45 as an IPv6 address is ::D822:B52D.
IPv6 of course.
Client sites have nothing to worry about straight away, unless they want to access the new IPv6 server sites that will be coming online. The issue will be new sites needing IP addresses will be IPv6 only. If everyone started the move to IPv6 today, then the internet, from the average joe point of view, will look pretty much the same. The problem is that they will start seeing the breakages because we are almost out of IPv4 addresses before anyone has really started upgrading their infrastructure to IPv6.
Sounds more like the guy had a lousy defence team. Either that or it is was some crazy cowboy court where as soon as the hacker word was mentioned it was deemed over.
In soviet Russia ... nah, screw that. Its time for a new meme:
In fascist USA ... due process is disposed of with the value of the value of the dollar.
For anyone who hasn't ever seen a flying Chinese lantern:
http://www.youtube.com/watch?v=LcGP0hdq13w&feature=related
Kinda reminds me of when people show a picture of a fictitious flying saucer and call it a UFO. Clearly if you have a clear picture of it is an IFO (Identified Flying Object) and if it is also on the ground, then its a IGO (Identified Grounded Object) Then again if you know what it is just call it what it is and not a UFO.
"CIA's counter-intelligence centre"
I can't decide if this is redundant or an oxymoron.
Nah, this is more in the same vain as "Intelligent Design". It is about CIA being against intelligence.
If only the new AppleTV would include a browser and Flash / Silverlight... It would be perfect for my purposes.
The alternative would be for content services to provide the content in non-Flash/Silverlight format, such as MPEG4.
I was about to say something snarky and suggest you should have read it online, except that it seems pretty difficult to find. I haven't found it yet. Maybe you can't read it unless you are on the XBox, which would be rather bothersome?
Sounds like they should have release Google TV beta first.
Joking aside, this is probably why Apple is taking such a cautious approach with Apple TV. They realise that there is potential, though it is not clear how it should manifest itself. Playing around with other solutions like XBMC and Plex it feels like there is certainly a future, but it may still be a few years down the road. Maybe devices like the Wii would be better, if it simply offered the missing components like being able to stream from a home media server?
If your devices do not need to speak to the outside world then they can just use link local addresses ( fe80::/64 ) and be hidden from view. Heck they could even stick with with IPv4 if need be. Anything else that needs to speak with the outside world will need a routable address or deal with some sort of proxy (if outgoing only).
You can even add a firewall (and you really should) to reduce access to resources that aren't intended for use by external entities. Firewalls can be written to deal with dynamic subnet prefixes, so there isn't really an excuse to not have one.
IPv6 addresses aren't meant to be used in their raw form (even if you can) and you should use some sort of name service, such as DNS or Zero-Config (amongst others). We could have stuck with a decimal notation for IPv6 addresses, but you would then be complaining that IPv6 addresses are too long. Believe me, the IPv6 numerical notation is not perfect, but it sure beats the alternative. Heck ::1 is a lot short than 127.0.0.1 and your IPv4 address can be represented in IPv6. For example 123.156.123.156 is simply ::7B9C:7B9C (blocks of zeros can be resumed to :: ).
IPv6 is not that much different to IPv4, though it is the address length is what breaks any levels of compatibility. No IPv4 hardware or software is designed with anything else than a 32-bit IP address in mind. So there really is no better solution that is "that is more compatible with the existing IPv4 network" and anyway even if there was it is too late for that now. No point in fighting the coming tidal wave, even if you are only seeing the receding IPv4 tide for the moment. Get with it!
Given that Quicktime supports H.264, has anyone else looked into getting Firefox to use that for MP4/H264 playback, via a plugin in MacOS X?
BTW I am assuming we are talking about the video tag and not MP4/H264 in a embed/object tag?
I hate seeing the Java community tear itself apart like this, internal rifts have now become vast canyons thanks to the demise of Sun and the acquisition by Oracle.
Don't get me wrong, the tinder was plenty dry in the Java world but recent events have poured on the gasoline.
It also possible that this is case of the distrust of Oracle is far greater than that of Microsoft. Its possible that we are all being too reactionary, for something that is simply not that bad, but because we are talking about Oracle we need to look and the facts with more care and see what really is at play here.
The irony is that you need to find another computer to read up on how to fix the issue.
I do agree with some of your points. An IP for every refrigerator on the planet isn't really a big problem.
An IP for every shoe or wristwatch on the plant, however, is. The difference is mobility - since mobility tends to cause route fragmentation.
Then again, who says these devices will have the same IP where ever they go? I suspect these devices will get dynamic addresses.
What will be interesting is how big corporations connect to the internet via multiple providers.
She speaks to the mob. She tells the mob what it wants to hear, rather than what needs saying. This will get her a big following, but it doesn't mean a good mob leader is capable of much beyond causing noise and damage. On the other hand I wonder how much this differs from many people involved in politics?