The problem is that the advertisers are only tied into the search data.. not the purchase data. They don't know you actually made the purchase already. It's cheap enough for them to take the gamble and blast everybody with their search history.
That is their problem, not mine. I find things to buy by searching for them. If they want me to find their things and buy them then they need to work with the search people (google, amazon, bangood etc.) so that I find them when I search. Coming around like annoying little yippy dogs after every purchase, barking "Buy this too!!" is neither going to get them a sale nor get me to go to them for stuff in the future.
>One of the limiting factor is the way too thin copper wires in the USB cable. Too much resistance for such moderately high current.
The USB-C charging protocol allows the sink and source to negotiate a higher voltage. Increase the voltage by 4X (from 5 to 20V as allowed by the spec) , reduce the current by 4X, you are delivering the same power but the voltage across the wire is reduced by 4X and P=V*V/R so the losses in the wire are reduced by 16X, without changing the wire. This is one of the things that makes USB-C charging better.
>Side note: is battery efficiency why i users run around with external battery packs to play Pokemon go or similar?
The Pokemon app uses more power. Same with the Ingress app. 3D, GPS, sloppy coding and the screens always on while playing means you can run out in a morning on a fully charged, new device. Our grandkid uses my wife's phone for some 3D game and can empty the battery in an hour, while it'll go for 1.5 days in normal use.
annoyed that they didn't put a USB-C connector ON THE DAMN PHONE
This. I'm already not upgrading from my iPhone 7 plus to a new iPhone due to the headphone jack (back to Android for me). But to not put C on the phone as well is perplexing and counter to my interests. USB-C charging is simply better and messing with special cables for the phone, when I have computers, chargers, music devices (e.g. the Roli Blocks) and other things all with USB-C connectors is not something I will put up with in my near future.
If you mean what would I have done if I was Equifax the answer is I don't know. They are in the bizarre situation of their own making where they treat the same thing (your SS number and personal details) both the secret asset being protected and the authentication token you use to identify yourself. They also sell that information to people willing to pay. There's no fixing that mess.
If you mean more generally, I wouldn't put my protected assets in hands of a bunch of web app code on top of a framework on top of a JVM on top of another 15 layers. I would be thinking about making those things a conduit through which a simple and secure protocol can run that attached between simple and secure things at the endpoints. Assume the web server and web application is completely pwned and design a system that is still secure regardless. The hard part of getting started is identity verification in the enrollment stage. At some point there's a wet human and you're trying to uniquely identify them in order to bind to a cryptographic token.
Alternative interpretation: People will eat shit when shit is the only thing available to eat. People will still spend money on a mediocre film if there is nothing else to watch. This is why all the foreign films and artsy stuff steers clear of summer releases... otherwise they'd get trounced by DC, Marvel, et al. I'm pretty confident that if you control for the season of the release date, and the other films you compete with on release, you'd find the correlation you are looking for.
I'll watch foreign films and artsy stuff over DC or Marvel films any day.
>A properly designed & implemented MVC is far simpler to understand, develop and audit than a tangle of spaghetti code that mixes everything up into a unitary blob.
Yet you have many layers of code between you and the incoming packets where problems can lurk. Indeed a problem did lurk inside the Apache struts MVC framework software, in Java, running on a JVM. with a boatload of ancillary java libraries, in some execution context on top, or within Apache. I see nothing simple whatsoever and the 'simplicity' of MVC did not prevent a bug. That's because it's not remotely simple. Easy to think about the high level abstraction isn't the same thing as simple.
The alternative isn't a unitary blob. It's to know what asset's you are securing and to know and understand all the code touches that data on the path to and from the external interface and to minimize that attack surface. You can pretty up the web app all you like, but keep the secured assets in a place where it isn't touching the eye candy web app nonsense. A sprinkling of defense in depth might help also, so individual components can fail to be secure, without undermining the security of the system.
I assume none of that happened here. They just employed a multiple huge libraries of internet facing stuff with direct access to all the information that was supposed to be secret and of course, someone took it all.
There are journals explicitly for publishing ideas so they can't be patented later. Paying a fortune to patent something you are then going to patentleft is stupid. Just publish it.
Big companies are not an individual who decides to file ANS patents.
Big companies provide incentives for their employees to file patents and employees submit patent proposals to some review committee and the committee decides which ones to apply for, then a lawyer works with the employee to write the application.
This whole process can happen without anyone involved knowing what the patent status of ANS is. In particular, big companies ask their employees not to search patents, because that creates triple damages risk where a plaintiff can show you 'knew' you were infringing because for example you downloaded the patent onto your computer and that was shown in discovery.
The underlying reason for this behavior is the triple damages provisions for willful infringement.
I said I write crypto code. My job isn't 'crypto coder' and I don't work for any government. Security it a constantly evolving space. The installed base of software is a nightmare of badly implement and badly designed crypto. Techy firms are having to build security into their products, both hardware and software and they need people who can work in that space without being clueless. The existing libraries are mostly useless when designing new things. Particularly when those things are embedded or in hardware. Most of the crypto algorithms that we need to improve things are not actually in existing libraries. They are in math papers written by cryptographers and getting that stuff from theory to practice is a lot of heavy lifting.
Just don't buy an iPhone you iTard morons, problem solved!
If you've been on the Apple upgrade program and don't like the 7 because of the headphone issue and don't care enough to spend several hundred dollars to fix it right now, then it's going to take a year to get to the point where you replace with an android that has a headphone jack and USB-C like nature intended.
That year isn't up yet. I'll be switching back to Android early next year probably.
Google used to offer revision control under the name Google Code. It no longer does. So which service do you recommend for hosting a private distributed revision control repository? Is $108 per year (source) a good deal?
Private paid Github works nicely if you aren't concerned about using someone else's machines. It's not very expensive and it works alright. I keep my local git repos in a Google drive for enhanced irony.
I get pissed whenever someone pulls working software from under my feet to replace it with something newer and "better" ( may GNOME3 burn in hell). Give me something static that stays out of my way and not an ever changing mess of "upgrades".
When GNOME 2 was pulled from under my bottom in Ubuntu 11.10 in favor of Un(usabil)ity, I did sudo apt-get install xubuntu-desktop and never looked back. It's been nearly six years since I switched to Xfce, and it has proven to be comfortably static in the way you describe.
This is true. I don't know how many years it has been, but my default action on any new install is to run Xfce. I don't remember it ever going funky on me.
Surely natural arsenic is healthy because it's natural. You could grind up apricot kernels and add it to the water to restore the natural arsenic balance.
Slashdot Mirror
The problem is that the advertisers are only tied into the search data.. not the purchase data. They don't know you actually made the purchase already. It's cheap enough for them to take the gamble and blast everybody with their search history.
That is their problem, not mine. I find things to buy by searching for them. If they want me to find their things and buy them then they need to work with the search people (google, amazon, bangood etc.) so that I find them when I search. Coming around like annoying little yippy dogs after every purchase, barking "Buy this too!!" is neither going to get them a sale nor get me to go to them for stuff in the future.
I constantly get ads for the thing I've recently purchased.
I can't imagine a less effective form of advertising.
>One of the limiting factor is the way too thin copper wires in the USB cable. Too much resistance for such moderately high current.
The USB-C charging protocol allows the sink and source to negotiate a higher voltage. Increase the voltage by 4X (from 5 to 20V as allowed by the spec) , reduce the current by 4X, you are delivering the same power but the voltage across the wire is reduced by 4X and P=V*V/R so the losses in the wire are reduced by 16X, without changing the wire. This is one of the things that makes USB-C charging better.
>Side note: is battery efficiency why i users run around with external battery packs to play Pokemon go or similar?
The Pokemon app uses more power. Same with the Ingress app. 3D, GPS, sloppy coding and the screens always on while playing means you can run out in a morning on a fully charged, new device. Our grandkid uses my wife's phone for some 3D game and can empty the battery in an hour, while it'll go for 1.5 days in normal use.
annoyed that they didn't put a USB-C connector ON THE DAMN PHONE
This. I'm already not upgrading from my iPhone 7 plus to a new iPhone due to the headphone jack (back to Android for me). But to not put C on the phone as well is perplexing and counter to my interests. USB-C charging is simply better and messing with special cables for the phone, when I have computers, chargers, music devices (e.g. the Roli Blocks) and other things all with USB-C connectors is not something I will put up with in my near future.
>When was the last time there was a Spaniard running one of these shops?
I saw some in Spain recently.
If you mean what would I have done if I was Equifax the answer is I don't know. They are in the bizarre situation of their own making where they treat the same thing (your SS number and personal details) both the secret asset being protected and the authentication token you use to identify yourself. They also sell that information to people willing to pay. There's no fixing that mess.
If you mean more generally, I wouldn't put my protected assets in hands of a bunch of web app code on top of a framework on top of a JVM on top of another 15 layers. I would be thinking about making those things a conduit through which a simple and secure protocol can run that attached between simple and secure things at the endpoints. Assume the web server and web application is completely pwned and design a system that is still secure regardless. The hard part of getting started is identity verification in the enrollment stage. At some point there's a wet human and you're trying to uniquely identify them in order to bind to a cryptographic token.
Alternative interpretation: People will eat shit when shit is the only thing available to eat. People will still spend money on a mediocre film if there is nothing else to watch. This is why all the foreign films and artsy stuff steers clear of summer releases... otherwise they'd get trounced by DC, Marvel, et al. I'm pretty confident that if you control for the season of the release date, and the other films you compete with on release, you'd find the correlation you are looking for.
I'll watch foreign films and artsy stuff over DC or Marvel films any day.
>A properly designed & implemented MVC is far simpler to understand, develop and audit than a tangle of spaghetti code that mixes everything up into a unitary blob.
Yet you have many layers of code between you and the incoming packets where problems can lurk. Indeed a problem did lurk inside the Apache struts MVC framework software, in Java, running on a JVM. with a boatload of ancillary java libraries, in some execution context on top, or within Apache. I see nothing simple whatsoever and the 'simplicity' of MVC did not prevent a bug. That's because it's not remotely simple. Easy to think about the high level abstraction isn't the same thing as simple.
The alternative isn't a unitary blob. It's to know what asset's you are securing and to know and understand all the code touches that data on the path to and from the external interface and to minimize that attack surface. You can pretty up the web app all you like, but keep the secured assets in a place where it isn't touching the eye candy web app nonsense. A sprinkling of defense in depth might help also, so individual components can fail to be secure, without undermining the security of the system.
I assume none of that happened here. They just employed a multiple huge libraries of internet facing stuff with direct access to all the information that was supposed to be secret and of course, someone took it all.
>Model-View-Controller (MVC) framework for Java
There's your problem right there.
Security demands simplicity.
There are journals explicitly for publishing ideas so they can't be patented later. Paying a fortune to patent something you are then going to patentleft is stupid. Just publish it.
It's a big place. How do you know it's the same engineers?
Big companies are not an individual who decides to file ANS patents.
Big companies provide incentives for their employees to file patents and employees submit patent proposals to some review committee and the committee decides which ones to apply for, then a lawyer works with the employee to write the application.
This whole process can happen without anyone involved knowing what the patent status of ANS is. In particular, big companies ask their employees not to search patents, because that creates triple damages risk where a plaintiff can show you 'knew' you were infringing because for example you downloaded the patent onto your computer and that was shown in discovery.
The underlying reason for this behavior is the triple damages provisions for willful infringement.
I still don't see why the AT&T workers would feel this is Apples fault though.
It's not about 'fault.' It's about eyeballs. They're trying to hijack an Apple product launch and get some media attention.
It seems to be working.
I said I write crypto code. My job isn't 'crypto coder' and I don't work for any government. Security it a constantly evolving space. The installed base of software is a nightmare of badly implement and badly designed crypto. Techy firms are having to build security into their products, both hardware and software and they need people who can work in that space without being clueless. The existing libraries are mostly useless when designing new things. Particularly when those things are embedded or in hardware. Most of the crypto algorithms that we need to improve things are not actually in existing libraries. They are in math papers written by cryptographers and getting that stuff from theory to practice is a lot of heavy lifting.
Well no. It's not like that at all.
So stop writing code that everyone else can write.
I make my living writing Python and Matlab. I have a Mechanical Engineering degree and there's little to no competition on job sites.
This. I write cryptography code. I've found it very difficult to be unemployed.
I just figured LTS had acquired a new name while I wasn't looking. I guess not.
To LTE, or not to LTE, that is the question.
It is kind of a new distribution right?.
3G should be good enough for anyone.
Just don't buy an iPhone you iTard morons, problem solved!
If you've been on the Apple upgrade program and don't like the 7 because of the headphone issue and don't care enough to spend several hundred dollars to fix it right now, then it's going to take a year to get to the point where you replace with an android that has a headphone jack and USB-C like nature intended.
That year isn't up yet. I'll be switching back to Android early next year probably.
Aside from that, a hobbyist modded his phone so that he didn't need to carry around a converter.
Technically he's carrying the converter around inside his phone.
As an exposition of hardware hacking, the video is superb.
Reasons are weightless, so it's a tautology.
Google used to offer revision control under the name Google Code. It no longer does. So which service do you recommend for hosting a private distributed revision control repository? Is $108 per year (source) a good deal?
Private paid Github works nicely if you aren't concerned about using someone else's machines. It's not very expensive and it works alright. I keep my local git repos in a Google drive for enhanced irony.
I get pissed whenever someone pulls working software from under my feet to replace it with something newer and "better" ( may GNOME3 burn in hell). Give me something static that stays out of my way and not an ever changing mess of "upgrades".
When GNOME 2 was pulled from under my bottom in Ubuntu 11.10 in favor of Un(usabil)ity, I did sudo apt-get install xubuntu-desktop and never looked back. It's been nearly six years since I switched to Xfce, and it has proven to be comfortably static in the way you describe.
This is true. I don't know how many years it has been, but my default action on any new install is to run Xfce. I don't remember it ever going funky on me.
Surely natural arsenic is healthy because it's natural. You could grind up apricot kernels and add it to the water to restore the natural arsenic balance.