That's true for every exploit: Until the machine responds to you you don't know the exploit was suchessful. And also with the other hacking attempts you have to specifically design your attack to the system attacked. It's just a problem of monoculture that one hacking strategy proves to be successful on many different systems. If there is a 'silent filter on a disk' distribution out somewhere hundreds of people install at home or in the company, then an attack designed against this distribution has also hundreds of potential targets it works with. It would be easy to have the router get the internal host IP on its external interface or at least send packets with the internal host IP to you. It knows this IP, right? And because of the physical design it also sees all answer packets.
Oh, there are several packet based exploits out there. In former times (about 10 years ago) it was Landmark and TearDrop or overlong ping packets (>50 000 bytes payload). There are still CERN alerts for different types of payloads that cause some IP stacks to get out of sync or even allow stack overwrites. If you have an idea what system is used for an addressless packet filter, you might build approbriate packets to cause havoc.
It is unattackable with packets addressed to it (because it has no address). It is still attackable by malformed packets traversing it. To work as filter it has to scan the packets, and if this packet scan can malfunction on special packets, there is a possible attack to the packet filter.
a) German original or an english translation? b) For the U.S. there may be a kind of eternal license, insofar as the U.S. as winner of the WW II had access to all german ressources.
Programs in the system tray are mainly memory hogs, not processor time consuming. After all those just sit there and wait for something to happen. And interactive programs like chats just don't eat to much processor time either, the average amount of data to process is dwarfed by the amount the game engine is crunching.
Because this processor is mainly aimed at the gaming community, and games often aren't multithreaded, so the second core would just be idle and convert electricity into heat.
Interestingly though once there was only one Athlon 64FX, and if a new one came out, its predecessor would then, if remaining on sale, be renamed. This time the old Athlon 64FX (55) remains on sale with the 64FX name.
Differently than for the Communist Manifesto the copyright for Mein Kampf hasn't expired yet. For the original german version the copyright is with the Free State of Bavaria, and they don't license it.
No, I just wanted to point out that the "I wouldn't have bought it anyway" is as arguable as the "every illegitime copy is a lost sale of the orginal". I think the people most affected by piracy are neither the one downloading it nor the one crying foul because it was theirs. But those are the main proponents in the discussion.
It isn't necessary that every piece of pirated software would have been sold legit if there existed no piracy. There is no proof that people who download/buy pirated software would buy the originals if there were no pirated versions available...
But getting a non legit copy of a high end program might not hurt the originator of the high end program (because you won't be able to afford his price). It might hit the vendor of a cheaper alternative, because you might be able to afford his product, but you don't need to, because the copy of the high end program was cheaper als the price he demands.
That's one of the reasons why Microsoft for a long time tolerated non legit copying of its own software. It was not so much hurting Microsoft's business, it was hurting the business of everyone else.
The point is that there should be mechanisms in place to prevent this or at least to trigger immediate action if it happens. And the prices seemed to be predetermined, and the guy from the tabloid just had to ask. It was not that he was offering too much money per record. Validated postal addresses have been sold for more on a regular base. And you got the credit card information thrown in for free with this guy. Normally bribing someone to give you sensitive information costs much more.
The only difference is that Google actually has a business plan and makes some money. Do they make enough money to support an $80B market cap though? Only time will tell that one.
There is a quite simple definition of the "true" value of a company: It's today's net worth of all futural earnings. Because the market capitalization is thus today's estimation of today's net worth of all futural earnings, it is a tautology to ask if the company A is able to support its market capitalization. The market capitalization is already the answer: "We expect the company to earn today's $80bn net worth in the future".
If you like to play with a speadsheet you can build one for Google. It's like a credit: The inflation rate is the interest rate, today's market capitalization is the capital, and Googles earnings are payments which pay for interest and reduce the capital. As long as you can expect the earnings to be higher (for most of the time) than the inflation inducted value depreciation (expressed as interest on the capital), the market capitalization is not overblown.
(For now the numbers are: inflation 3%, market capitalization $80bn, thus $2.4bn lost value per year due to inflation. So Google should manage earnings of about $2.5bn per year and then it will be able to support the expectations in Google's futural profitability. In the first quarter of 2005 Google has earned $360mio. Times 4 means about $1,44bn for the year.)
If Google manages to grow an additional 50% within a short period, it will be able to pay for today's market capitalization with its earnings.
It's not just about emulating the hardware. It's about rescuing the software, operating system and applications alike. Reverse engineering an application from the data it wrote is kinda problematic.
And additionally there is the difference of having the digital contents of an analogue tape and actually being able to analyse the digital contents.
Yes, you can make a copy on paper of an ancient stone with hieroglyphs, which then contains the same information than the original stone. But it doesn't mean you can actually read the hieroglyphs.
For instance there are many spas (Bad Brambach, Schlema) in the Ore Mountains in Germany who offer Radon cures. You are basicly sitting in a tub filled with warm, Radon contaminated water. Radon is a radioactive noble gas, basicly a heavy version of Helium and Neon, and most of it is the product of the slow decay of Uranium-238 (via the alpha ray decay of Radium-226). The soil of the Ore Mountains is rich in Uranium, and so there are enough places everywhere, where Radon comes out of the earth. Radon is part of nearly all natural well water, you can even use Radon as a measurement of the relative amount of well water in water sources, because all surface water will loose their Radon within a short period (within 3,8 days half the Radon of a given amount has decayed, and additionally it is gaseous, and a noble gas, so it will leave the water without any chemical reaction), and rain water will not contain any Radon anyway, because it is to heavy to reach the clouds. Because of its heavy weight cellars in the Ore Mountain may contain a high level of Radon, it enters the cellar through earth rifts and doesn't leave it anymore. It can reach levels where it really starts to be a health risk, leading to lung cancer because of the alpha rays (Helium cores), which destroy the tissue of the lung.
It's the sad shouty fundamentalist robots who unfortunately propagate the notion that you must believe in the literal truth of every word in the Bible/Q'uran/whatever to be considered truly religious.
If those people ever started to use the holy texts in their full depth, it wouldn't be that bad. No, they often choose a little detail and make it the scale with which everyone has to be measured. You are a moslem woman? Wear the scarf. You are a christian male? Don't marry if you want to be a priest. Every of those rules can be disproved by literal parts of the respective holy books. (Like this: Paul said, it would be better if the people remain unmarried, but on the other hand the same Paul says, a bishop should be a good husband and father of his children. Which one is the scale to measure?)
If the truth coming out of the holy books is so unique and without contradiction, how comes religions know their inner religious disputes between different 'truths' proved by the same texts? You can be fundamentalist about everything, it's just a way to avoid the contradictions for yourself by having them decided once and forever (which is until the next contradiction pops up and has to be decided too, often contradicting the first decision, but do you really care about the bullshit you were preaching yesterday?).
Ok, in the german language there is the fine difference between 'Eigentum' (property) and 'Besitz' (something one owns). A credit card thus is considered the 'Besitz' of the customer, nevertheless it remains the 'Eigentum' of the bank.
As someone who has worked on a project to replace 25 years old legacy applications I have some insight in how such old applications are used on a daily basis. Believe me. There was this report which was running for 200 processor hours because of the sheer amount of data to be processed, which was to be run on 18 different processors to keep the time low enough to have it run on weekend and still have the chance to restart it if it fails, once a month. Sometimes the processing time goes with the square or a higher potency of the amount of data;) It's called O(n^m), and this is not even the worst case. Addressing often isn't the issue, matrix operations are. And many optimization algorithms use matix operations. With every new generation of hardware more data was thrown at the old report, so it still was run once a month, and it still took about 200 hours of processing time, without changing the base algorithm.
And I was also working on the new report, where the processing time condensed to 1:20h, and suddenly the managers were running the report on a daily basis to make sure they don't miss any changing results.
Because sometimes the sheer amount of data those applications have to calculate has increased. Or because a calculation that once was done once a week during the weekend on several machines with separate data groups in parallel is now done as an instant report at the fingertip of a clueless manager, who just want to be the 'numbers to be up-to-date' (of course THIS calculation can be parallelized, but not in an algorithmic way, but by separating independent data).
You are describing something called a "man in the middle attack". Easiest way to defeat this one: Download the certificate at home and take this one with you to the company and install it there. If the company has an SSL interceptor, it will surely ring the alarm bells. It will also ring the alarm bells if the certificate you downloaded at home is tainted by the home ISP's SSL interceptor though. But at least you know that one of your points of entry into the internet is 0wn3d.
Slashdot Mirror
Soyuz is in operation for about 30 years, and they had their share of victims too.
Soyuz 1 failed at return, and Cosmonaut Komarov died.
That's true for every exploit: Until the machine responds to you you don't know the exploit was suchessful. And also with the other hacking attempts you have to specifically design your attack to the system attacked. It's just a problem of monoculture that one hacking strategy proves to be successful on many different systems. If there is a 'silent filter on a disk' distribution out somewhere hundreds of people install at home or in the company, then an attack designed against this distribution has also hundreds of potential targets it works with.
It would be easy to have the router get the internal host IP on its external interface or at least send packets with the internal host IP to you. It knows this IP, right? And because of the physical design it also sees all answer packets.
Oh, there are several packet based exploits out there. In former times (about 10 years ago) it was Landmark and TearDrop or overlong ping packets (>50 000 bytes payload).
There are still CERN alerts for different types of payloads that cause some IP stacks to get out of sync or even allow stack overwrites. If you have an idea what system is used for an addressless packet filter, you might build approbriate packets to cause havoc.
It is unattackable with packets addressed to it (because it has no address). It is still attackable by malformed packets traversing it. To work as filter it has to scan the packets, and if this packet scan can malfunction on special packets, there is a possible attack to the packet filter.
It became the AMD64 4200+, as far as I know.
a) German original or an english translation?
b) For the U.S. there may be a kind of eternal license, insofar as the U.S. as winner of the WW II had access to all german ressources.
Programs in the system tray are mainly memory hogs, not processor time consuming. After all those just sit there and wait for something to happen. And interactive programs like chats just don't eat to much processor time either, the average amount of data to process is dwarfed by the amount the game engine is crunching.
Because this processor is mainly aimed at the gaming community, and games often aren't multithreaded, so the second core would just be idle and convert electricity into heat.
Interestingly though once there was only one Athlon 64FX, and if a new one came out, its predecessor would then, if remaining on sale, be renamed. This time the old Athlon 64FX (55) remains on sale with the 64FX name.
Differently than for the Communist Manifesto the copyright for Mein Kampf hasn't expired yet. For the original german version the copyright is with the Free State of Bavaria, and they don't license it.
No, I just wanted to point out that the "I wouldn't have bought it anyway" is as arguable as the "every illegitime copy is a lost sale of the orginal". I think the people most affected by piracy are neither the one downloading it nor the one crying foul because it was theirs.
But those are the main proponents in the discussion.
But getting a non legit copy of a high end program might not hurt the originator of the high end program (because you won't be able to afford his price). It might hit the vendor of a cheaper alternative, because you might be able to afford his product, but you don't need to, because the copy of the high end program was cheaper als the price he demands.
That's one of the reasons why Microsoft for a long time tolerated non legit copying of its own software. It was not so much hurting Microsoft's business, it was hurting the business of everyone else.
The point is that there should be mechanisms in place to prevent this or at least to trigger immediate action if it happens.
And the prices seemed to be predetermined, and the guy from the tabloid just had to ask. It was not that he was offering too much money per record. Validated postal addresses have been sold for more on a regular base. And you got the credit card information thrown in for free with this guy.
Normally bribing someone to give you sensitive information costs much more.
There is a quite simple definition of the "true" value of a company: It's today's net worth of all futural earnings. Because the market capitalization is thus today's estimation of today's net worth of all futural earnings, it is a tautology to ask if the company A is able to support its market capitalization.
The market capitalization is already the answer: "We expect the company to earn today's $80bn net worth in the future".
If you like to play with a speadsheet you can build one for Google. It's like a credit: The inflation rate is the interest rate, today's market capitalization is the capital, and Googles earnings are payments which pay for interest and reduce the capital. As long as you can expect the earnings to be higher (for most of the time) than the inflation inducted value depreciation (expressed as interest on the capital), the market capitalization is not overblown.
(For now the numbers are: inflation 3%, market capitalization $80bn, thus $2.4bn lost value per year due to inflation. So Google should manage earnings of about $2.5bn per year and then it will be able to support the expectations in Google's futural profitability. In the first quarter of 2005 Google has earned $360mio. Times 4 means about $1,44bn for the year.)
If Google manages to grow an additional 50% within a short period, it will be able to pay for today's market capitalization with its earnings.
It's not just about emulating the hardware. It's about rescuing the software, operating system and applications alike. Reverse engineering an application from the data it wrote is kinda problematic.
And additionally there is the difference of having the digital contents of an analogue tape and actually being able to analyse the digital contents.
Yes, you can make a copy on paper of an ancient stone with hieroglyphs, which then contains the same information than the original stone. But it doesn't mean you can actually read the hieroglyphs.
For instance there are many spas (Bad Brambach, Schlema) in the Ore Mountains in Germany who offer Radon cures. You are basicly sitting in a tub filled with warm, Radon contaminated water. Radon is a radioactive noble gas, basicly a heavy version of Helium and Neon, and most of it is the product of the slow decay of Uranium-238 (via the alpha ray decay of Radium-226). The soil of the Ore Mountains is rich in Uranium, and so there are enough places everywhere, where Radon comes out of the earth. Radon is part of nearly all natural well water, you can even use Radon as a measurement of the relative amount of well water in water sources, because all surface water will loose their Radon within a short period (within 3,8 days half the Radon of a given amount has decayed, and additionally it is gaseous, and a noble gas, so it will leave the water without any chemical reaction), and rain water will not contain any Radon anyway, because it is to heavy to reach the clouds.
Because of its heavy weight cellars in the Ore Mountain may contain a high level of Radon, it enters the cellar through earth rifts and doesn't leave it anymore. It can reach levels where it really starts to be a health risk, leading to lung cancer because of the alpha rays (Helium cores), which destroy the tissue of the lung.
If those people ever started to use the holy texts in their full depth, it wouldn't be that bad. No, they often choose a little detail and make it the scale with which everyone has to be measured. You are a moslem woman? Wear the scarf. You are a christian male? Don't marry if you want to be a priest. Every of those rules can be disproved by literal parts of the respective holy books. (Like this: Paul said, it would be better if the people remain unmarried, but on the other hand the same Paul says, a bishop should be a good husband and father of his children. Which one is the scale to measure?)
If the truth coming out of the holy books is so unique and without contradiction, how comes religions know their inner religious disputes between different 'truths' proved by the same texts? You can be fundamentalist about everything, it's just a way to avoid the contradictions for yourself by having them decided once and forever (which is until the next contradiction pops up and has to be decided too, often contradicting the first decision, but do you really care about the bullshit you were preaching yesterday?).
Ok, in the german language there is the fine difference between 'Eigentum' (property) and 'Besitz' (something one owns). A credit card thus is considered the 'Besitz' of the customer, nevertheless it remains the 'Eigentum' of the bank.
So I don't even 'besitze' a credit card.
I don't even own a credit card, you insensitive clod!
You might still try the libflash for Linux, which covers a good part of Flash, (but not fscommand for instance).
As someone who has worked on a project to replace 25 years old legacy applications I have some insight in how such old applications are used on a daily basis. Believe me. There was this report which was running for 200 processor hours because of the sheer amount of data to be processed, which was to be run on 18 different processors to keep the time low enough to have it run on weekend and still have the chance to restart it if it fails, once a month. ;) It's called O(n^m), and this is not even the worst case.
Sometimes the processing time goes with the square or a higher potency of the amount of data
Addressing often isn't the issue, matrix operations are. And many optimization algorithms use matix operations.
With every new generation of hardware more data was thrown at the old report, so it still was run once a month, and it still took about 200 hours of processing time, without changing the base algorithm.
And I was also working on the new report, where the processing time condensed to 1:20h, and suddenly the managers were running the report on a daily basis to make sure they don't miss any changing results.
Because sometimes the sheer amount of data those applications have to calculate has increased. Or because a calculation that once was done once a week during the weekend on several machines with separate data groups in parallel is now done as an instant report at the fingertip of a clueless manager, who just want to be the 'numbers to be up-to-date' (of course THIS calculation can be parallelized, but not in an algorithmic way, but by separating independent data).
You mean, like the patent how to swing with a swing by pulling at the ropes?
I just wanted to be complete. :) Of course such a scenario is less likely.
You are describing something called a "man in the middle attack". Easiest way to defeat this one: Download the certificate at home and take this one with you to the company and install it there. If the company has an SSL interceptor, it will surely ring the alarm bells.
It will also ring the alarm bells if the certificate you downloaded at home is tainted by the home ISP's SSL interceptor though. But at least you know that one of your points of entry into the internet is 0wn3d.