Copying a barcode is a bit easier than copying a key, but he's got it on his keychain anyway (it's a little video store tag thing). So either way, they've got to get his keychain off of him somehow. Not really any more or less secure.
Admittedly, if you knew something about the system, you could bring along a book of preprinted barcodes to get in, but then you could also bring a lockpick set too. And the lockpick is probably faster to do.
Then again, I prefer the hard and fast brute force method.. A swift kick to the door to break the frame. Works most every time.:p
Imagine that the VOA was sued in, say, Iraq for example. Okay, so an Iraqi court decides that it's okay to sue VOA. Then what happens? VOA and America give them the collective middle finger and go on doing it anyway.
It's a matter of force. They don't have the force needed to stop VOA. They can sit there passing laws and judgements all they like, but in the end, you've got to back up those judgements to actually accomplish anything.
Now convert this to the present case. Assume the **AA wins. What do they do then? Where's the necessary force to back up said judgement? What, exactly, is to keep Sherman from giving them the collective middle finger and going on about their business?
That's the real question. There's a lot the **AA's can do, in fact, but in the end, can they *stop* Kazaa, or indeed P2P filesharing? Kazaa, maybe. P2P, not a chance in hell.
First, in order to get advertisers to put their ads on a Tivo, you have to convince them that people will look at them. Tivo is in the process of doing just that. Eventually, with any luck, they should be able to eliminate the subscription fees.
They're busily creating a market. That's what the "star" is all about.
I have a foosball table similar to that one, albeit larger and heavier. In any case, once you get the case open, the ball invariably rolls down a smaller chute, one per side, to get to the bottom again. Sticking a sensor in that chute which would detect 100% of the time would be damn near trivial.
Other than the fact that he said "MySQL" instead of "SQL", I see nothing wrong with what he said. He's got an ASP script on a box running, say, IIS. When you get the script through the webserver, it runs some SQL Queries on the database, and returns an XML document with the results. The Director program he wrote uses getNetText to run that HTTP query to the webserver and get the XML document back. It parses it, and displays it.
Simple and straightforward. There's easier ways, but that sounds like it was fairly easy to prototype and test quickly. You can test that the script is outputting the right data without having the Director crap done yet.
Yahoo could easily fix this. All they'd have to do is to setup their mailing lists like every other mailing list in the world, and auto remove subscribers whose messages bounce back X times.
Too bad they cheated in the credits. Many of the anagrams were wrong. For example, a bit of thought shows that "Universal Studios" could not be rearranged to "A Turnip Cures Elvis". It adds "p" and "c" and removes "d", for starters.
Good thing they rearranged the letters of "A Turnip Cures Elvis" into "Universal PICTURES" instead.:p
Robbie was something of an inspiration for Asimov's medium-length story "The Bicentennial Man". This later was revamped by Asimov and Silverberg into "The Positronic Man". The movie version was made using elements of both, but you're right, Robbie started the whole shebang, at least in the concept if not in actual fact.
Yes, it will be hacked, but the system will not dissolve and fade away. It will continue to get worse and worse and more draconian until the CD as we know it is replaced by something that simply cannot be read by a CD-ROM drive, and cannot be opened in a computer.
The bits are there. With enough effort and perhaps an older CD-Rom drive without broken firmware, there's no form of protection they can put on any CD playable disc that will make it impossible for me to rip it. Steps in this direction have been taken already.
And all it takes is one person capable of ripping the disc and encoding it to a standard format. Once it's on the P2P networks, nobody will bother with their DRM nonsense, they'll just download the music directly. Or, at least, the 2 good songs from it.:P
In another window I have a 40-page, 60,000 character business requirements document open which contains at least 10 or 15 charts and diagrams, miscellaneous graphics, and a whole bunch of formatting, and the DOC file is only 280K.
Fair enough. Now, where's the evidence than an XML formatted document would be more than 280K? Because that's what the original poster was complaining about and I was responding to.
60,000 characters.. hell, call it 60k. That leaves you with 220K for formatting and graphics and charts, etc. Seems like plenty of space to me, XML or not.
First, although XML seems more 'open', in reality it is simply a higher-level encoding that may or may not be easier to understand but is guaranteed to both take longer to parse and take up more space than the conventional.doc format because of the size of the tags, making this a downgrade 'optimization' of both speed and size -- where is the win here?
Funny. I just made a "hello world" document using Word 2000 and it was 19 KB.;-)
Lack of features -- there's a reason people are still using.doc and.pdf instead of HTML, and giving HTML a fancier name for the new millenium isn't going to change it. Anything tougher than bold, italics, and tables has been proven to be an O(n^2) representation in HTML and has been neglected because nobody wants to download a meg of webpage.
If you seriously think that XML is just a fancy HTML, then there's no hope of you understanding why this open standard is a good thing in the first place.
I've been to Sydney and seen the monorail. It only goes in a loop around a relatively small area, which is filled with tourist attraction type stuff. It doesn't seem to be intended for wide city use.
What I did see getting widespread use in Sydney was the subway system. Takes you most anywhere in town. Very handy, useful, and relatively cheap. Clean too, unlike a lot of other subways I've been in.
What's to prevent you@bar.com from getting SPAM in his mailbox or spammers on his whitelist with this scheme? Basically, you have a box receiving an email, and then talking to the sender of the email to verify that the signature was his and correct.
But I (as a hypothetical spammer) can make a signature in any name, and I can set up any accounts on any hostname I like rather easily. So a spammer could get messages into your box and get a name (even if it's a throwaway name) onto your whitelist without any human intervention. He has his certify address always respond in the affirmative, and voila.
In this specific case, the choice was moving a website, a domain name, 400 email addresses etc, or telling half a dozen people to stick the next free CD ROM that drops through their door into their PC. They use email redirection, so changing their ISP was no big deal.
No, in this specific case, the choice was either moving your setup to a different ISP, or calling your ISP and telling them, "if this ever happens again, then by god we are switching ISP's and we'll tell every customer of yours that you obviously don't give a damn about them".
SPEWS did you no wrong. Your ISP did you much wrong, by not responding to spam complaints in a timely enough manner and by letting spammers use their section of network to the detriment of the rest of the network.
Your ISP's inaction is what caused your pain. Complain to them, it's, quite frankly, their fault. Threaten legal action if you like. Whatever, the point is to get them to change or annoy their customers enough to make them switch ISP's.
I mean, really what would it take to make you switch from these guys to someone else? Blocked for a week? A month? A year? How far does it have to go before you realize that your ISP is causing the problems here by not attempting to resolve their issues with spammers?
So just to get this straight, if my ISP sells 5,000 RaQs a day to spammers for $100, lets them send spam non-stop until someone complains, and then closes their account, that's OK, but if they fail to act immediately on one client on one of their x thousand machines, all their customers get blacklisted?
Yes. That's exactly right. When they find out that someone is using their network to send spam, then they need to cancel the account. If not, then those of us who don't want spam will ignore that ISP and everyone who uses it. And if they sell space to spammers knowingly, and it happens too often that we have to complain to them, then we'll blacklist their asses and never, ever remove them. It'd take a lot to come to that, admittedly.
But it's that simple. If you don't like getting blacklisted, complain to your ISP to get them to start responding to spam complaints more timely, or switch ISP's to one who will respond in a timely fashion.
The purpose is not to impact the customers of the ISP. The purpose is to impact the ISP financially so as to get them to change their policy and behavior. The network is used by everybody, and everyone damn well will behave when they're using it. If you don't behave nice on the network, then the rest of us will damn well cut you right out of it.
It's a great business idea, and I see them putting Tivo out of business in the larger markets. Tivo (and other pvr companies) will have to maneuver furiously to maintain their current customer base, nevermind a growing base.
It would be a great business idea, if someone hadn't already thought of it first. Tivo had this same business idea three years ago and had been trying to get exactly such a digital cable box device w/Tivo created. Cable companies weren't interested in buying from Tivo. They *are* interested in buying from existing cable box makers, like Scientific Atlanta.
SA's latest digital box has "Tivo-like" functionality, which basically means it can record to it's hard drive in much the same way you'd program a VCR. By time, with repeating recordings possible. In other words, it ain't too bright, but it does do minimal recording abilities.
Moxi has to compete with these heavily entrenched cable box manufacturers. Scientific Atlanta and thier ilk have been making cheap crappy boxes for cable headends for a long, long, long time, and have a product that is seemingly "good enough" to someone interested more in claiming "our cable company provides a PVR service!" than claiming "we provide a *good* PVR service".
Are there any known problems having both USB ether and digital cable? I understand that some of the older network options conflicted with digital cable boxes, not quite sure how...
Don't think so. I have a Series 1 Tivo with a "TivoNet" card (as opposed to a newer TurboNet card). It gets an address from my Linksys Cable/DSL 4 port router via DHCP. Then it connects to its homebase via my cable modem (connected to the WAN side of the router). The router uses NAT to do this, and I had to make no config changes. No ports needed to be opened/forwarded, that sort of thing. I do have digital cable, using a Scientific Atlanta Explorer 2000 box.
The USB adapter thing on the Series 2 units works more or less exactly the same way. The USB adapter is recognized on boot and the kernel module is loaded. Then DHCP is done if it loads. Straightforward and simple. The only downside to series 2 boxes is that you really gotta have DHCP. Hacking the box to let you make modifications (like setting a static IP, for example) is, frankly, a pain in the ass at the moment. But if you have DHCP on your network somewhere, you're golden.
Note that, currently, all this really does is to let you eliminate the phone connection with regards to it calling home for guide data. Future benefits like sharing shows between two machines or something are rumored. Nothing really confirmed. And as it's still unofficial and unsupported, don't expect any help from Tivo customer support on it. However, it does work, it works well for what it does, and there's plenty of people willing to help you get it up and going at the Tivo Community Forums.
Theoretically, yes, but I'm guessing that that is probably intentionally inconvenient to transfer. Just a guess, but...
For a Tivo with lifetime, you give the box to someone else. Then.. well.. you're done. Oh, you can call Tivo to tell them that the box is now owned by Bob Downthestreet, but you don't have to. The Tivo identifies itself on every connection by means of the unique serial number burned into a chip on the motherboard. The lifetime subscription is tied to that number.
I suspect it won't. While research is being diligently done, right now it's sort of a battle between "TiVO is cheaper, and my friend Scott has one" versus "Damnit, I didn't run Ethernet into the family room so that we could buy a box that uses a @$%^ing serial modem."
The Series 2 Tivo's can connect to an ethernet for their connectivity by means of a cheap $10 USB->Ethernet adapter. It's "unofficial" but it does indeed work. The main requirement is that your LAN has a DHCP server on it to hand the Tivo an address and a gateway, so that it can connect to the internet. Nearly all home router type boxes (like the Linksys, for example) do this job just fine. My Tivo calls home via my cable modem, for example.
Series 1 boxes have no USB connector, but ethernet cards can be purchased for them nonetheless, at www.9thtee.com.
Seems simple enough. I mean, if you're not going to pay the bill, then you're quite right in that they have no real way to make you pay except to resort to a collection agency, and even then you could get by without paying, most likely.
But once they discover their error and you laugh at their demand for payment, where's the rule that says they must then continue providing you service?
As I see it, this woman was quite free to not pay. But the ISP was quite free to cancel her account and decline to provide her further service as well. They could tell her to get stuffed, delete all her piled up email, and remove her name from their system entirely.
A company is under no obligation to provide service against its will. As it probably says in their TOS: "We reserve the right to cancel your account for any damn reason we please." (paraphrased, of course).
First off, if you really want backdoors enabled, that thread on tivocommunity.com details how to do it by changing the hash yourself. You can change the hash it's checking on the disk and voila, no problem.
So this search is basically pointless, but again, it's only for the hell of it.
How it works: 1. Tivo changed the backdoor code in 3.0 to be an SHA1 hash. So when you input the backdoor code, it hashes it, compares the hashes, and enables backdoors if it matches.
2. The hash for 3.0 was reasonably simple to crack. It was short (6 characters) and so was found quickly. 3.2 is longer (everything up to and including 8 characters has been searched already). That's really all there is to it and why it's now a distributed client.
3. The slashdotting I now expect will probably take the server down. I really wish this hadn't been posted. In any case, too late now.
Copying a barcode is a bit easier than copying a key, but he's got it on his keychain anyway (it's a little video store tag thing). So either way, they've got to get his keychain off of him somehow. Not really any more or less secure.
:p
Admittedly, if you knew something about the system, you could bring along a book of preprinted barcodes to get in, but then you could also bring a lockpick set too. And the lockpick is probably faster to do.
Then again, I prefer the hard and fast brute force method.. A swift kick to the door to break the frame. Works most every time.
Imagine that the VOA was sued in, say, Iraq for example. Okay, so an Iraqi court decides that it's okay to sue VOA. Then what happens? VOA and America give them the collective middle finger and go on doing it anyway.
It's a matter of force. They don't have the force needed to stop VOA. They can sit there passing laws and judgements all they like, but in the end, you've got to back up those judgements to actually accomplish anything.
Now convert this to the present case. Assume the **AA wins. What do they do then? Where's the necessary force to back up said judgement? What, exactly, is to keep Sherman from giving them the collective middle finger and going on about their business?
That's the real question. There's a lot the **AA's can do, in fact, but in the end, can they *stop* Kazaa, or indeed P2P filesharing? Kazaa, maybe. P2P, not a chance in hell.
6 oz. of any colored alcohol of your choice (blue curacao, etc).
Neat. In a square glass.
First, in order to get advertisers to put their ads on a Tivo, you have to convince them that people will look at them. Tivo is in the process of doing just that. Eventually, with any luck, they should be able to eliminate the subscription fees.
They're busily creating a market. That's what the "star" is all about.
I have a foosball table similar to that one, albeit larger and heavier. In any case, once you get the case open, the ball invariably rolls down a smaller chute, one per side, to get to the bottom again. Sticking a sensor in that chute which would detect 100% of the time would be damn near trivial.
He should have spent the time to open it.
Other than the fact that he said "MySQL" instead of "SQL", I see nothing wrong with what he said. He's got an ASP script on a box running, say, IIS. When you get the script through the webserver, it runs some SQL Queries on the database, and returns an XML document with the results. The Director program he wrote uses getNetText to run that HTTP query to the webserver and get the XML document back. It parses it, and displays it.
Simple and straightforward. There's easier ways, but that sounds like it was fairly easy to prototype and test quickly. You can test that the script is outputting the right data without having the Director crap done yet.
Yahoo could easily fix this. All they'd have to do is to setup their mailing lists like every other mailing list in the world, and auto remove subscribers whose messages bounce back X times.
Too bad they cheated in the credits. Many of the anagrams were wrong. For example, a bit of thought shows that "Universal Studios" could not be rearranged to "A Turnip Cures Elvis". It adds "p" and "c" and removes "d", for starters.
:p
Good thing they rearranged the letters of "A Turnip Cures Elvis" into "Universal PICTURES" instead.
Robbie was something of an inspiration for Asimov's medium-length story "The Bicentennial Man". This later was revamped by Asimov and Silverberg into "The Positronic Man". The movie version was made using elements of both, but you're right, Robbie started the whole shebang, at least in the concept if not in actual fact.
Yes, it will be hacked, but the system will not dissolve and fade away. It will continue to get worse and worse and more draconian until the CD as we know it is replaced by something that simply cannot be read by a CD-ROM drive, and cannot be opened in a computer.
:P
The bits are there. With enough effort and perhaps an older CD-Rom drive without broken firmware, there's no form of protection they can put on any CD playable disc that will make it impossible for me to rip it. Steps in this direction have been taken already.
And all it takes is one person capable of ripping the disc and encoding it to a standard format. Once it's on the P2P networks, nobody will bother with their DRM nonsense, they'll just download the music directly. Or, at least, the 2 good songs from it.
XML is just as easy to reverse engineer as 8bit binary. .DOC is 8bit binary.
;)
XML is human readable. And usually descriptive in the tags themselves. Makes it a *little* easier, don't you think?
In another window I have a 40-page, 60,000 character business requirements document open which contains at least 10 or 15 charts and diagrams, miscellaneous graphics, and a whole bunch of formatting, and the DOC file is only 280K.
Fair enough. Now, where's the evidence than an XML formatted document would be more than 280K? Because that's what the original poster was complaining about and I was responding to.
60,000 characters.. hell, call it 60k. That leaves you with 220K for formatting and graphics and charts, etc. Seems like plenty of space to me, XML or not.
First, although XML seems more 'open', in reality it is simply a higher-level encoding that may or may not be easier to understand but is guaranteed to both take longer to parse and take up more space than the conventional .doc format because of the size of the tags, making this a downgrade 'optimization' of both speed and size -- where is the win here?
;-)
.doc and .pdf instead of HTML, and giving HTML a fancier name for the new millenium isn't going to change it. Anything tougher than bold, italics, and tables has been proven to be an O(n^2) representation in HTML and has been neglected because nobody wants to download a meg of webpage.
Funny. I just made a "hello world" document using Word 2000 and it was 19 KB.
Lack of features -- there's a reason people are still using
If you seriously think that XML is just a fancy HTML, then there's no hope of you understanding why this open standard is a good thing in the first place.
I've been to Sydney and seen the monorail. It only goes in a loop around a relatively small area, which is filled with tourist attraction type stuff. It doesn't seem to be intended for wide city use.
What I did see getting widespread use in Sydney was the subway system. Takes you most anywhere in town. Very handy, useful, and relatively cheap. Clean too, unlike a lot of other subways I've been in.
the opponent has opened with a classical Harvey the Wonder Hamster attack in slots 4,5, and 6!!
Honestly, I'm not sure I want to know...
You know, /. has gotten things wrong before, but mixing up Checkers with Connect Four is a first.
What's to prevent you@bar.com from getting SPAM in his mailbox or spammers on his whitelist with this scheme? Basically, you have a box receiving an email, and then talking to the sender of the email to verify that the signature was his and correct.
But I (as a hypothetical spammer) can make a signature in any name, and I can set up any accounts on any hostname I like rather easily. So a spammer could get messages into your box and get a name (even if it's a throwaway name) onto your whitelist without any human intervention. He has his certify address always respond in the affirmative, and voila.
Then they need to hire a better staff for their abuse department.
If they can't stay in business because of their own stupidity, then it's no skin off anyone else's nose.
In this specific case, the choice was moving a website, a domain name, 400 email addresses etc, or telling half a dozen people to stick the next free CD ROM that drops through their door into their PC. They use email redirection, so changing their ISP was no big deal.
No, in this specific case, the choice was either moving your setup to a different ISP, or calling your ISP and telling them, "if this ever happens again, then by god we are switching ISP's and we'll tell every customer of yours that you obviously don't give a damn about them".
SPEWS did you no wrong. Your ISP did you much wrong, by not responding to spam complaints in a timely enough manner and by letting spammers use their section of network to the detriment of the rest of the network.
Your ISP's inaction is what caused your pain. Complain to them, it's, quite frankly, their fault. Threaten legal action if you like. Whatever, the point is to get them to change or annoy their customers enough to make them switch ISP's.
I mean, really what would it take to make you switch from these guys to someone else? Blocked for a week? A month? A year? How far does it have to go before you realize that your ISP is causing the problems here by not attempting to resolve their issues with spammers?
So just to get this straight, if my ISP sells 5,000 RaQs a day to spammers for $100, lets them send spam non-stop until someone complains, and then closes their account, that's OK, but if they fail to act immediately on one client on one of their x thousand machines, all their customers get blacklisted?
Yes. That's exactly right. When they find out that someone is using their network to send spam, then they need to cancel the account. If not, then those of us who don't want spam will ignore that ISP and everyone who uses it. And if they sell space to spammers knowingly, and it happens too often that we have to complain to them, then we'll blacklist their asses and never, ever remove them. It'd take a lot to come to that, admittedly.
But it's that simple. If you don't like getting blacklisted, complain to your ISP to get them to start responding to spam complaints more timely, or switch ISP's to one who will respond in a timely fashion.
The purpose is not to impact the customers of the ISP. The purpose is to impact the ISP financially so as to get them to change their policy and behavior. The network is used by everybody, and everyone damn well will behave when they're using it. If you don't behave nice on the network, then the rest of us will damn well cut you right out of it.
Simple.
It's a great business idea, and I see them putting Tivo out of business in the larger markets. Tivo (and other pvr companies) will have to maneuver furiously to maintain their current customer base, nevermind a growing base.
It would be a great business idea, if someone hadn't already thought of it first. Tivo had this same business idea three years ago and had been trying to get exactly such a digital cable box device w/Tivo created. Cable companies weren't interested in buying from Tivo. They *are* interested in buying from existing cable box makers, like Scientific Atlanta.
SA's latest digital box has "Tivo-like" functionality, which basically means it can record to it's hard drive in much the same way you'd program a VCR. By time, with repeating recordings possible. In other words, it ain't too bright, but it does do minimal recording abilities.
Moxi has to compete with these heavily entrenched cable box manufacturers. Scientific Atlanta and thier ilk have been making cheap crappy boxes for cable headends for a long, long, long time, and have a product that is seemingly "good enough" to someone interested more in claiming "our cable company provides a PVR service!" than claiming "we provide a *good* PVR service".
Are there any known problems having both USB ether and digital cable? I understand that some of the older network options conflicted with digital cable boxes, not quite sure how...
Don't think so. I have a Series 1 Tivo with a "TivoNet" card (as opposed to a newer TurboNet card). It gets an address from my Linksys Cable/DSL 4 port router via DHCP. Then it connects to its homebase via my cable modem (connected to the WAN side of the router). The router uses NAT to do this, and I had to make no config changes. No ports needed to be opened/forwarded, that sort of thing. I do have digital cable, using a Scientific Atlanta Explorer 2000 box.
The USB adapter thing on the Series 2 units works more or less exactly the same way. The USB adapter is recognized on boot and the kernel module is loaded. Then DHCP is done if it loads. Straightforward and simple. The only downside to series 2 boxes is that you really gotta have DHCP. Hacking the box to let you make modifications (like setting a static IP, for example) is, frankly, a pain in the ass at the moment. But if you have DHCP on your network somewhere, you're golden.
Note that, currently, all this really does is to let you eliminate the phone connection with regards to it calling home for guide data. Future benefits like sharing shows between two machines or something are rumored. Nothing really confirmed. And as it's still unofficial and unsupported, don't expect any help from Tivo customer support on it. However, it does work, it works well for what it does, and there's plenty of people willing to help you get it up and going at the Tivo Community Forums.
Theoretically, yes, but I'm guessing that that is probably intentionally inconvenient to transfer. Just a guess, but...
For a Tivo with lifetime, you give the box to someone else. Then.. well.. you're done. Oh, you can call Tivo to tell them that the box is now owned by Bob Downthestreet, but you don't have to. The Tivo identifies itself on every connection by means of the unique serial number burned into a chip on the motherboard. The lifetime subscription is tied to that number.
I suspect it won't. While research is being diligently done, right now it's sort of a battle between "TiVO is cheaper, and my friend Scott has one" versus "Damnit, I didn't run Ethernet into the family room so that we could buy a box that uses a @$%^ing serial modem."
The Series 2 Tivo's can connect to an ethernet for their connectivity by means of a cheap $10 USB->Ethernet adapter. It's "unofficial" but it does indeed work. The main requirement is that your LAN has a DHCP server on it to hand the Tivo an address and a gateway, so that it can connect to the internet. Nearly all home router type boxes (like the Linksys, for example) do this job just fine. My Tivo calls home via my cable modem, for example.
Series 1 boxes have no USB connector, but ethernet cards can be purchased for them nonetheless, at www.9thtee.com.
Seems simple enough. I mean, if you're not going to pay the bill, then you're quite right in that they have no real way to make you pay except to resort to a collection agency, and even then you could get by without paying, most likely.
But once they discover their error and you laugh at their demand for payment, where's the rule that says they must then continue providing you service?
As I see it, this woman was quite free to not pay. But the ISP was quite free to cancel her account and decline to provide her further service as well. They could tell her to get stuffed, delete all her piled up email, and remove her name from their system entirely.
A company is under no obligation to provide service against its will. As it probably says in their TOS: "We reserve the right to cancel your account for any damn reason we please." (paraphrased, of course).
First off, if you really want backdoors enabled, that thread on tivocommunity.com details how to do it by changing the hash yourself. You can change the hash it's checking on the disk and voila, no problem.
So this search is basically pointless, but again, it's only for the hell of it.
How it works:
1. Tivo changed the backdoor code in 3.0 to be an SHA1 hash. So when you input the backdoor code, it hashes it, compares the hashes, and enables backdoors if it matches.
2. The hash for 3.0 was reasonably simple to crack. It was short (6 characters) and so was found quickly. 3.2 is longer (everything up to and including 8 characters has been searched already). That's really all there is to it and why it's now a distributed client.
3. The slashdotting I now expect will probably take the server down. I really wish this hadn't been posted. In any case, too late now.
For more info about Tivo backdoors, see here.
For more info about the 3.0 hash crack (the easy one), see here.