CFR 21 part 11 (Code of Federal Regulations governing electronic signatures) mandates that you have to have at least 2 out of 3 things to be said to have securely authenticated:
Something you HAVE (card key, key fob, etc.)
Something you ARE (biometric, iris, fingerprint)
Something you KNOW (password, passphrase, etc.)
Can you be more specific about where this is in the final rule? All I can find is references to requiring 2 components for identification unless the signature is based on biometrics. (Maybe I'm looking at an old version.)
As long as I'm here, can I make a plea to the general public to stop referring to biometrics as "something you are"? My fingerprint and my iris are not "what I am". They are "something I have that I can't change without a lot of pain".
I'd just like to avoid repeating today's whole mess over the SSN, which many agencies treat like "something you are". Can I repeat that louder, credit companies? Just because someone knows my SSN, it doesn't mean that they're me.
Honestly, what a bunch of fuck ups. If you're trying to do a service by penetration testing, you at the very least notify the sysadmins of the vulnerability you plan to explore.
To go all the way through to stealing *everyone's* information, and then afterwards claim you only did it to help is bad judgment at best. In some states it's criminal.
Thanks to the guys on the mjpegtools and MythTV discussion boards, I found a Matrox Marvel G200-TV for $50 at compuvest.com and while it was probably a return (CD-ROM envelope seal was broken) it seems to work just fine. Hardware MJPEG compression on the G200 lets me record at about 25% CPU on a P3-1Ghz. Haven't gotten around to MythTV yet, but the mjpegtools do the job for now.
Cool! Where did you get that data? I've been looking for historical data on oxygen in the atmosphere, but all anyone seems to want to track is the isotope ratio.
Suppose fossil fuels were inexhaustible and free. This wouldn't really solve the problem of unsustainability, because non-nuclear fuels don't work on their own. They need to react with oxygen to produce energy.
We're not pumping any new oxygen out of the ground. All we've got is our atmospheric reserve and the contribution of our green leafy friends. Photosynthesis produced our oxygen reserve over 600 million years' time. Does anyone have any figures on how fast we're burning oxygen compared to how fast the trees are regenerating it?
There is a lot of debate about whether fossil fuels are really dead dinosaurs and plants or whether they formed from primordial methane in the cosmos. But even if it's the latter, our whole non-nuclear energy economy is still essentially solar because photosynthesis gives us all our molecular oxygen.
Just to be pedantic, GPG was written long before the RSA patent expired. Because of the patent, it didn't have "official" RSA support, but you could get it separately as a module. This is still the case for IDEA, whose patent hasn't expired.
Rather than let the MPAA dictate hardware changes to every piece of consumer electronics in existence and thereby eliminate the general-use computer from the face of the earth, let them make their own "protected" media-playing devices for their own protected content and leave the rest of the computer industry alone.
The reason they don't do this in the first place is that it takes money and effort to come up with your own technology, whereas it takes almost none to "borrow" it from the computer industry. Particularly if you take a sum of money that wouldn't pay for Keanu Reeves' lunch and throw it at Senator Hollings to *force* the computer industry to do the work for you.
But all it will take is one judge to let Microsoft off the hook for them to once again be bulletproof. If Microsoft says to what is now the world's largest PC manufacturer "drop Linux or we'll triple your Windows licensing fees", how long do you think our enemy's enemy will be our friend?
It will be at least two and a half more years before the Justice Department will have the balls to stand up to MS. Until then, they're still one gavel-strike away from absolute power.
I have to carry a Nextel, but I've reached the sad conclusion that neither 1-way or 2-way messaging can be relied upon. It's been particularly bad lately - some messages never get through, some get delayed by a couple of *days*.
Laugh all you want but linux, GNU, *BSD and most of the other cool free software out there only exists because of the singing hand-holding hippies who gave their work away, only asking for credit and *voluntary* financial support.
Retail open-source is a relatively recent phenomenon. It's trickiest when most of the code is GPL'd, because then you *have to* give it away (or just stick your head in the sand and pretend your first paying customer won't redistribute). It may turn out not to be sustainable. If that is the case, would you prefer just losing the products entirely or PBS-style begging that keeps them available to the public?
Re:Why pay for something that you alreadt\y own?
on
Mandrake Asks for Support
·
· Score: 2, Interesting
Could you be any more whiny and obtuse?
"We all own it" sounds a lot like "I'm a spoiled leech, waaaa!"
I'm pretty sure the spirit of GNU was supposed to be "let's help each other out", not "gimme gimme gimme and don't let the free market hit you in the ass on the way out". In this case, many people are working FULL TIME to make Mandrake a high quality product that many people have enjoyed for free. They've supported themselves by selling box sets and support, but times are a little tough now and they're asking for some additional help.
If you don't think it's worth money or you're too cash-strapped to contribute, then don't. But it's childish to say "well I already own it, so if they can't give me updates for free in perpetuity then fuck them."
Oh please. "A few loose ends in non-linear dynamics"? If you're sitting on some magical framework to predict the details of turbulent flow, there are probably a couple of people at Boeing or Lockheed who'd like to see it.
I forget who I'm misquoting here, but someone said "talking about non-linear dynamics is like talking about non-elephant biology".
Yeah, but when you're sitting in traffic in an electric, you're just sitting in traffic.
When you're sitting in traffic in a gas-powered car, you're burning fuel, getting zero mileage, and pumping hydrocarbons into the atmosphere for no reason.
This meteor shower just rocked! I went up into the hills at Henry Coe State Park near Morgan Hill, CA to escape the skyglow, and the show was just incredible. I can't even estimate how many I saw (hundreds?), but at the peak they seemed to be coming down like a light rain (a meteor "shower", if you will). Many fireballs died with a bright flash and left a trail that lasted for 10 or 15 seconds.
What was especially fun was that it was so dark in the hills you couldn't tell if anyone else was there, until a fireball streaked across the sky and a hundred voices from the mountain said "oooooooh".
I ordinarily wouldn't reveal something like this, but since you think you know me I'll just point out that I wanted to vote for Nader but when it got down to the wire and looked like Bush really had a chance, I voted for Gore. Imagine that one of us naive idealists could possibly have worked that one out!
There's nothing to stop you from voting "realistically" and still working for electoral change. I cast my vote for Gore because the straight plurality system had a gun to my head.
Oh, and to anyone who says that a vote for Nader is wasted: as it turns out my vote for Gore was wasted - it didn't keep Bush out of the White House and it blew my chance to show support for a third party.
Look up the name "Condorcet" if you think things like this are inevitable. Popular elections can't be perfect, but the way we do them now is almost the worst way possible.
"The enemy of my enemy is my friend" only applies if you can't count higher than two.
People like you are one of the reasons that Microsoft is getting off the hook.
Guess what? It's people like you who are the reason MS is off the hook. People who always vote for the 2 major parties rather than their conscience, guaranteeing that just the Dems and GOP will be in power and giving every corporate lobbyist a convenient two-stop shopping trip.
If more states would have the balls not to do winner-takes-all selection of electors, it would be a nice start. What would be even better would be to adopt a better method of reckoning the winner than first-past-the-post.
Otherwise, all "good Democrats" should be busting their asses trying to get Ross Perot to run again in 2004, so he can split the Republican vote away from Dubya just like he did to his dad. Is that a responsible way to have to run an election?
The current system requires people to play mind games like "I'd like to vote for X, but I'm really afraid Y might win so I'd better vote for Z since he's got more money than X". There's no reason people should have to do this - and no reason why campaign financers should be able to count on people doing this so that they don't have to have a qualified candidate to succeed, just a lot of cash.
Do a little poking around about "strategy-free" voting methods that give every voter the incentive to just vote his conscience. These things can all be changed state-by-state.
I upgraded the motherboard/CPU on my dual-boot box from an Abit P2/300 to a Soyo P3/1000. My Linux installation just recognized the new chipsets properly at the next reboot without any complaints.
Windows had a shit-fit. Claimed to have found all new EVERYthing - hard disks, sound cards, modems, cd drives, video, mice. Sometimes it found two or three of each kind, and it kept on finding new stuff at every reboot. Ended up having to do a complete reinstall, which was no real hardship since I only use that partition for games. But even with a clean re-install it doesn't seem to be able to shutdown or reboot from Windows anymore.
I think I heard Willie Nelson blame it on DuPont. They had just invented the first durable synthetic fiber (rayon? nylon?) and wanted to eliminate the competition from hemp.
A quick google search will yield some interesting articles on the subject - I can't vouch for their authenticity.
I heard Harlan Ellison opine that this saying is backwards. He said "of course you can have your cake and eat it -- what you can't do is eat your cake and still have it."
Slashdot Mirror
As long as I'm here, can I make a plea to the general public to stop referring to biometrics as "something you are"? My fingerprint and my iris are not "what I am". They are "something I have that I can't change without a lot of pain".
I'd just like to avoid repeating today's whole mess over the SSN, which many agencies treat like "something you are". Can I repeat that louder, credit companies? Just because someone knows my SSN, it doesn't mean that they're me.
Thanks for your indulgence.
I am now telling the computer exactly what it can do with a lifetime supply of chocolate.
Honestly, what a bunch of fuck ups. If you're trying to do a service by penetration testing, you at the very least notify the sysadmins of the vulnerability you plan to explore.
To go all the way through to stealing *everyone's* information, and then afterwards claim you only did it to help is bad judgment at best. In some states it's criminal.
Ever heard of Federal Prison Industries? They don't do software, but they undercut the private sector in plenty of other commercial markets.
Thanks to the guys on the mjpegtools and MythTV discussion boards, I found a Matrox Marvel G200-TV for $50 at compuvest.com and while it was probably a return (CD-ROM envelope seal was broken) it seems to work just fine. Hardware MJPEG compression on the G200 lets me record at about 25% CPU on a P3-1Ghz. Haven't gotten around to MythTV yet, but the mjpegtools do the job for now.
Richard Clarke, the head of this whole deal, said "We're not creating regulation, not creating mandates...We want to do this through market forces."
I'm wondering if anyone can come up with even one example of systems being made more secure by market forces?
Cool! Where did you get that data? I've been looking for historical data on oxygen in the atmosphere, but all anyone seems to want to track is the isotope ratio.
Suppose fossil fuels were inexhaustible and free. This wouldn't really solve the problem of unsustainability, because non-nuclear fuels don't work on their own. They need to react with oxygen to produce energy.
We're not pumping any new oxygen out of the ground. All we've got is our atmospheric reserve and the contribution of our green leafy friends. Photosynthesis produced our oxygen reserve over 600 million years' time. Does anyone have any figures on how fast we're burning oxygen compared to how fast the trees are regenerating it?
There is a lot of debate about whether fossil fuels are really dead dinosaurs and plants or whether they formed from primordial methane in the cosmos. But even if it's the latter, our whole non-nuclear energy economy is still essentially solar because photosynthesis gives us all our molecular oxygen.
So go plant a fern.
Just to be pedantic, GPG was written long before the RSA patent expired. Because of the patent, it didn't have "official" RSA support, but you could get it separately as a module. This is still the case for IDEA, whose patent hasn't expired.
I think you've missed the point, which is this:
Rather than let the MPAA dictate hardware changes to every piece of consumer electronics in existence and thereby eliminate the general-use computer from the face of the earth, let them make their own "protected" media-playing devices for their own protected content and leave the rest of the computer industry alone.
The reason they don't do this in the first place is that it takes money and effort to come up with your own technology, whereas it takes almost none to "borrow" it from the computer industry. Particularly if you take a sum of money that wouldn't pay for Keanu Reeves' lunch and throw it at Senator Hollings to *force* the computer industry to do the work for you.
Possibly.
But all it will take is one judge to let Microsoft off the hook for them to once again be bulletproof. If Microsoft says to what is now the world's largest PC manufacturer "drop Linux or we'll triple your Windows licensing fees", how long do you think our enemy's enemy will be our friend?
It will be at least two and a half more years before the Justice Department will have the balls to stand up to MS. Until then, they're still one gavel-strike away from absolute power.
I have to carry a Nextel, but I've reached the sad conclusion that neither 1-way or 2-way messaging can be relied upon. It's been particularly bad lately - some messages never get through, some get delayed by a couple of *days*.
Laugh all you want but linux, GNU, *BSD and most of the other cool free software out there only exists because of the singing hand-holding hippies who gave their work away, only asking for credit and *voluntary* financial support.
Retail open-source is a relatively recent phenomenon. It's trickiest when most of the code is GPL'd, because then you *have to* give it away (or just stick your head in the sand and pretend your first paying customer won't redistribute). It may turn out not to be sustainable. If that is the case, would you prefer just losing the products entirely or PBS-style begging that keeps them available to the public?
Could you be any more whiny and obtuse?
"We all own it" sounds a lot like "I'm a spoiled leech, waaaa!"
I'm pretty sure the spirit of GNU was supposed to be "let's help each other out", not "gimme gimme gimme and don't let the free market hit you in the ass on the way out". In this case, many people are working FULL TIME to make Mandrake a high quality product that many people have enjoyed for free. They've supported themselves by selling box sets and support, but times are a little tough now and they're asking for some additional help.
If you don't think it's worth money or you're too cash-strapped to contribute, then don't. But it's childish to say "well I already own it, so if they can't give me updates for free in perpetuity then fuck them."
Oh please. "A few loose ends in non-linear dynamics"? If you're sitting on some magical framework to predict the details of turbulent flow, there are probably a couple of people at Boeing or Lockheed who'd like to see it.
I forget who I'm misquoting here, but someone said "talking about non-linear dynamics is like talking about non-elephant biology".
Yeah, but when you're sitting in traffic in an electric, you're just sitting in traffic.
When you're sitting in traffic in a gas-powered car, you're burning fuel, getting zero mileage, and pumping hydrocarbons into the atmosphere for no reason.
Unless you're watching TV in a Nielsen household, your viewing habits have absolutely no effect whatsoever on ratings or advertising revenues.
This meteor shower just rocked! I went up into the hills at Henry Coe State Park near Morgan Hill, CA to escape the skyglow, and the show was just incredible. I can't even estimate how many I saw (hundreds?), but at the peak they seemed to be coming down like a light rain (a meteor "shower", if you will). Many fireballs died with a bright flash and left a trail that lasted for 10 or 15 seconds.
What was especially fun was that it was so dark in the hills you couldn't tell if anyone else was there, until a fireball streaked across the sky and a hundred voices from the mountain said "oooooooh".
Probably because WEP encryption has been completely broken, regardless of key-length. Nothing to see here, move along.
I ordinarily wouldn't reveal something like this, but since you think you know me I'll just point out that I wanted to vote for Nader but when it got down to the wire and looked like Bush really had a chance, I voted for Gore. Imagine that one of us naive idealists could possibly have worked that one out!
There's nothing to stop you from voting "realistically" and still working for electoral change. I cast my vote for Gore because the straight plurality system had a gun to my head.
Oh, and to anyone who says that a vote for Nader is wasted: as it turns out my vote for Gore was wasted - it didn't keep Bush out of the White House and it blew my chance to show support for a third party.
Look up the name "Condorcet" if you think things like this are inevitable. Popular elections can't be perfect, but the way we do them now is almost the worst way possible.
"The enemy of my enemy is my friend" only applies if you can't count higher than two.
How useful is the book a year later? Useful enough to be CRC's best selling math title, according to them.
I upgraded the motherboard/CPU on my dual-boot box from an Abit P2/300 to a Soyo P3/1000. My Linux installation just recognized the new chipsets properly at the next reboot without any complaints.
Windows had a shit-fit. Claimed to have found all new EVERYthing - hard disks, sound cards, modems, cd drives, video, mice. Sometimes it found two or three of each kind, and it kept on finding new stuff at every reboot. Ended up having to do a complete reinstall, which was no real hardship since I only use that partition for games. But even with a clean re-install it doesn't seem to be able to shutdown or reboot from Windows anymore.
A quick google search will yield some interesting articles on the subject - I can't vouch for their authenticity.
I heard Harlan Ellison opine that this saying is backwards. He said "of course you can have your cake and eat it -- what you can't do is eat your cake and still have it."