Interestingly enough, my wife works for the State of Georgia and the setup they have is pretty interesting.
They have this neat little timer that allows access for up to 15 minutes if you request it on a blocked page. They also have the option of having that site added for review. I think they review the list of "let me bypass for a while" sites.
With proxies it's more difficult to manage policies than a firewall.
Example: On my firewalls I can allow port 80, port 443 and any other relevant ports I need. I can restrict access for SMTP to our mail server.
With a proxy server, like Squid, I have to setup a whitelist of sites that are allowed. It gets to be a real problem with sites like akamai or microsoft that have multiple domains that they use (not just base names but something like www.mysite.com pulls images from img.mysiteimg.com). It's also difficult to manage whitelists because information is so disparate now. Wouldn't you hate to not be able to find the solution to a coding problem because the only answer you've found is on a blacklisted blog as "time waster"
The solution that appears to work best for general internet access as of late is this: 1) network segments based on job requirements (not just on access privileges. Not all users to ssh to external machines. But I can't imagine that a data entry person would ever need access to HTTP outside of any intranet sites 2) Require authentication at the application layer (i.e. squid using NTLM or just having an authenticated proxy) 3) HTTP AV scanning 4) A healthy category-based whitelist with a quick method for requesting unblocks from the blacklist. I think Dans Guardian provides a pretty good one.
There's not a perfect solution for web filtering but by not assuming a one size fits all for web access, you can mitigate a lot of the problems and keep most people happy.
I enjoy going to Fry's for an hour and wandering around. They have stuff I need and my wife actually enjoys it too since it's not JUST a geek store.
The amazing thing about Fry's is that I can find pretty much anything I need. I needed to bolt a 19" telco rack to a concrete floor the other day. Fry's had the bolts.
If you look at the history of Kazaa, the original developers were long gone by the time Sharman started pimping the spyware. These are the same long-gone guys who developed Skype and are long gone now working on YANNP (yet another new project)
"I assume that must be what playing real music is like, but I can't seem to get there on my keyboard"
At least in come instruments, that's exactly what it's like.
I played trombone all through school and alot of it was muscle memory in the sense of knowing exactly where on my slide to stop for a given note. Any guitar player will tell you alot of guitar playing (I play bass - poorly) is muscle memory as well.
It always felt like cheating to me that I was boiled down to a hand doing its own thing without even thinking about it but it just happens. It's actually kind of hard to untrain.
Have you actually watched the behind the scenes footage on the games? It's not a simple level editor setup. They have to recreate the songs in studio because of the sheer licensing costs associated with all the songs they put out (and because it's impossible to get the masters for alot of the older songs they cover).
I'm hoping this turns out well. I have never gotten more replay value out of a video game as I have the GH series. If I didn't have such an investment in PS2 gear for it, I'd be all over the 360 version because of the downloadable songs. I still swap between GH1 and GH2 weekly.
As one poster said earlier, I'd be one of those people who would buy a new song disc every single week. Of course I'm too busy trying to 5 star Expert on GH2 right now to play any new songs;)
While the wording may be so vague as to lead to this conclusion, it is not the intent of the GPLv3
Intent has nothing to do with it. How many times have we seen people only follow the letter of the law but not the spirit. There are such things as unintended consequences and even having that door is enough to make most people think twice.
I would honestly claim that even Israel is being restrained as well. When I mean stop pussy-footing I mean level an entire city. Like I said, not the right thing to do but If you're gonna do it....
I think you just shot down your own argument at the very end:
"So online gambling, If we can guarentee a fair game, good. If we cannot - bad. Over seas online gambling- outside our ability to even think about checking on it- shouldn't be allowed. Then we can say "buyer beware" without a bunch of "Wha..I lost my home"ers complaining they were cheated afterwards."
buyer beware. The government cannot and SHOULD not try to protect people from stupidity. People are stupid. I'm stupid and you're stupid. We do stupid shit everyday. The whole point of internet gambling is this:
1) The Religious right don't like it so no one else should be able to do it. 2) They can't TAX it so they don't like it. 3) Jack Abramof (probably misspelled his name)
Not to hijack, but reason 2 is one of the reasons I'm such a fan of a national retail sales tax. Let the stupid fuckers risk everything gambling online. If they DO happen to win, they'll end up buying some big expensive shit and paying taxes on it.
This is another stupid attempt by congress to control people's lives. I don't understand how someone gambling online affects my life or my liberty.
I base my interpretation of life on pretty much one quote from Thomas Jefferson:
"But it does me no injury for my neighbor to say there are twenty gods or no God. It neither picks my pocket nor breaks my leg."
-Thomas Jefferson, Notes on Virginia, 1782
What the hell do I care if someone gambles online? Sure there's the whole "greater good" argument but I never liked that one;) I don't care if someone is gay, smokes pot or pays for sex either.
I haven't looked at the link yet but my problem with the lottery was always that the funds would be used for education. Then of course the funds go into a general fund of which education gets a percentage. If the funds were in a (god help me here) "lock box", I would probably support it more. I think maybe the lottery money should go for the people who spend all thier money on the lottery. The stupid people.
Of course I get pissed because Georgia follows the same hipocracy of outlawing gambling while having a state-run lottery. No moral ground to stand on with THAT one.
While I don't support the war in Iraq, make no mistake that the US Military couldn't obliterate and occupy and country it really set its mind to. You might be occupying a sheet of glass after you nuked it but you're still occupying it;)
The thing that has blown me away is how "soft" the military has become. And I'm not regurgitating some stupid Michael Savage/Sean Hannity/Rush Limbaugh talking point here.
For all intents and purposes, we've been "gentle" in Iraq. We have much more firepower at our disposal but I think Rummy didn't have the stomach to deal with the consequences of dropping megaton bombs in a known insurgent city or outpost because of the collateral damage. I'm not saying it's the right thing to do but I'm making the point that if you're going to do something, right or wrong, do it all the way. You do much more damage by pussy-footing around. I think if I knew that my "liberators" were going to dump a bunker buster on any location that was suspected of harboring a terrorist, I'd fucking make sure my house didn't have a terrorist in it and make sure everyone knew it.
Interesting. I didn't realize the parade in question was just a gay pride parade. I would personally choose to not march in a parade that had the Klan or that stupid ass church that was protesting the funerals saying that homosexuality is the cause of 9/11 but I realize that NAMBLA is a far cry from two hate groups. Just making a point about who you choose to associate with and how it can reflect on you. My opinion on the whole gay marriage thing is that the government shouldn't recognize straight marriages either. Marriage is a religious institution and all the people bitching and moaning are somehow unable to link the fact that the government recognizing a union between two people (straight or gay) is NOT going to force thier church to have to perform gay marriages. It reminds me of the Bill Hicks rant about the Supreme Court and flag burning. God he would have a field day with the current politcal climate.
I will say this about Pelosi. Her overtones today and her statements about not impeaching the president are inetersting and honestly rather promising. I don't like W. but I think impeachment is a bit of stretch. In my mind this is not the time for Democrats to be screwing around with finger pointing and grandstanding. The voters have given them a chance (although my understanding is that this kind of power shift is typical, historically, of a 6th year election) and, while I probably won't like some of the things they try to pass through, at least we won't have to worry about stupid anti stemcell bills or bills against specific medical procedures or bills against two people wanting to share thier life together and get the same benefits as any other couple that makes the same decision.
I'm more worried about tax cuts being rolled back and government growth (not that the republicans did anything to prevent that while THEY were in office).
Actually if you think about it, Murtha would probably be a decent cross-the-aisle kind of candidate. And as far as Pelosi goes, I would consider anyone who marches with NAMBLA to be unstable. I'm all in support of gay marriage and have no problem with it but I do have a problem with NAMBLA.
I honestly have a feeling (and I'm no democrat mind you, registered libertarian) that Nancy Pelosi won't be House Majority leader. Sadly enough it will probably be Murtha.
Democrats know that Pelosi is to the far left of the majority of most democrats. Not even they want her third in line for the Oval office.
What I'm looking forward to is the excuse Republican's use for loosing.
It already started last night "Conservatives just aren't getting out and voting". If the Democrats had lost, they would be out screaming that there was election fraud.
Neither of these two parties can imagine or fathom that someone WOULDN'T vote for them. Last round, the democrats blamed it on voter stupidity and the overenergized religious right.
but you CAN'T sue the political campaigns. They exempted themselves when the DNC (do not call) was set up. The probably have the same loop hole in CANN SPAM as well.
Charities, political groups and "surveys" are exempt in addition to companies with which you have a "prior business relationship".
The part that ticks me off is the slew of "We're doing a survey about long distance rates...."
The problem with Atlanta is that some dumbass decided that taking two interstates and merging them together downtown was a grand old idea.
Then a new group of dumbasses decided that the problem wasn't fucked up enough and they decided to throw a major highway into that merge as well.
Depending on when I leave the house in the morning, it can take me 45 minutes to an hour to go from Northridge on 400 to 14th street where I exit. God forbid someone spills a coke on the road in which case that commute is now 2 hours;)
For those not familiar with Atlanta, that is a 21 mile commute.
My wife's is even worse as she has to get to the other side of the city (Aviation Blvd area).
I was pretty much thinking the same thing. Google has the financial backing to do this and software is not the company bread and butter. This attitude won't work in any medium sized or small development shop simply because they don't have the staff to have everyone decide to work on project B and let Project A float in the wind. Google doesn't have customer deadlines to deal with.
Read his rule more closely. No computer in the BEDROOM until the kid's 18. I plan on doing the same thing with my children.
I'm of the opinion that any computer a child uses should be in a commonly visible place. There's no better impetus to behaving than having everyone be able to see what you do.........for the most part;)
From Ken Womack (product manager at Earthlink for this whole fiasco): "But the bottom line is that the intent here is to improve the user experience around dead domains while at the same time generating some additional revenue for EarthLink."
There's no question it's an attempt at revenue.
Oh well. I'll be filling out the paperwork to switch to speakeasy on Tuesday. Until then, I'm having to build out a DNS server to work around this.
Slashdot Mirror
Interestingly enough, my wife works for the State of Georgia and the setup they have is pretty interesting.
They have this neat little timer that allows access for up to 15 minutes if you request it on a blocked page. They also have the option of having that site added for review. I think they review the list of "let me bypass for a while" sites.
With proxies it's more difficult to manage policies than a firewall.
Example:
On my firewalls I can allow port 80, port 443 and any other relevant ports I need. I can restrict access for SMTP to our mail server.
With a proxy server, like Squid, I have to setup a whitelist of sites that are allowed. It gets to be a real problem with sites like akamai or microsoft that have multiple domains that they use (not just base names but something like www.mysite.com pulls images from img.mysiteimg.com). It's also difficult to manage whitelists because information is so disparate now. Wouldn't you hate to not be able to find the solution to a coding problem because the only answer you've found is on a blacklisted blog as "time waster"
The solution that appears to work best for general internet access as of late is this:
1) network segments based on job requirements (not just on access privileges. Not all users to ssh to external machines. But I can't imagine that a data entry person would ever need access to HTTP outside of any intranet sites
2) Require authentication at the application layer (i.e. squid using NTLM or just having an authenticated proxy)
3) HTTP AV scanning
4) A healthy category-based whitelist with a quick method for requesting unblocks from the blacklist. I think Dans Guardian provides a pretty good one.
There's not a perfect solution for web filtering but by not assuming a one size fits all for web access, you can mitigate a lot of the problems and keep most people happy.
Actually there are now TWO Fry's in Atlanta.
Alpharetta (up 400)
Gwinnett (Near the mall)
I enjoy going to Fry's for an hour and wandering around. They have stuff I need and my wife actually enjoys it too since it's not JUST a geek store.
The amazing thing about Fry's is that I can find pretty much anything I need. I needed to bolt a 19" telco rack to a concrete floor the other day. Fry's had the bolts.
This is a basic security construct and I still get surprised when people try the other way around.
Remember kids:
Denied unless explicitly allowed.
Your network admin appreciates your cooperation.
If you look at the history of Kazaa, the original developers were long gone by the time Sharman started pimping the spyware. These are the same long-gone guys who developed Skype and are long gone now working on YANNP (yet another new project)
"I assume that must be what playing real music is like, but I can't seem to get there on my keyboard"
At least in come instruments, that's exactly what it's like.
I played trombone all through school and alot of it was muscle memory in the sense of knowing exactly where on my slide to stop for a given note. Any guitar player will tell you alot of guitar playing (I play bass - poorly) is muscle memory as well.
It always felt like cheating to me that I was boiled down to a hand doing its own thing without even thinking about it but it just happens. It's actually kind of hard to untrain.
was trying to accomplish.
I was opposed to this legislation for the same reason I was opposed to McCain-Feingold - it's a restriction on freedom of speech.
I don't care if a campaign is astroturf or if a group wants to get together and pay for an advertisment for a candidate.
Sure SCOTUS disagrees with me on McC-F, but I still feel that way.
Have you actually watched the behind the scenes footage on the games? It's not a simple level editor setup. They have to recreate the songs in studio because of the sheer licensing costs associated with all the songs they put out (and because it's impossible to get the masters for alot of the older songs they cover).
;)
I'm hoping this turns out well. I have never gotten more replay value out of a video game as I have the GH series. If I didn't have such an investment in PS2 gear for it, I'd be all over the 360 version because of the downloadable songs. I still swap between GH1 and GH2 weekly.
As one poster said earlier, I'd be one of those people who would buy a new song disc every single week. Of course I'm too busy trying to 5 star Expert on GH2 right now to play any new songs
While the wording may be so vague as to lead to this conclusion, it is not the intent of the GPLv3
Intent has nothing to do with it. How many times have we seen people only follow the letter of the law but not the spirit. There are such things as unintended consequences and even having that door is enough to make most people think twice.
Always be wary of "vague"
Actually he should be saying Wife which is probably even harder ;) Not that I have any problem.
"My wife this..."
"My wife that..."
I would honestly claim that even Israel is being restrained as well. When I mean stop pussy-footing I mean level an entire city. Like I said, not the right thing to do but If you're gonna do it....
I think you just shot down your own argument at the very end:
"So online gambling, If we can guarentee a fair game, good. If we cannot - bad. Over seas online gambling- outside our ability to even think about checking on it- shouldn't be allowed. Then we can say "buyer beware" without a bunch of "Wha..I lost my home"ers complaining they were cheated afterwards."
buyer beware. The government cannot and SHOULD not try to protect people from stupidity. People are stupid. I'm stupid and you're stupid. We do stupid shit everyday. The whole point of internet gambling is this:
1) The Religious right don't like it so no one else should be able to do it.
2) They can't TAX it so they don't like it.
3) Jack Abramof (probably misspelled his name)
Not to hijack, but reason 2 is one of the reasons I'm such a fan of a national retail sales tax. Let the stupid fuckers risk everything gambling online. If they DO happen to win, they'll end up buying some big expensive shit and paying taxes on it.
THANK YOU!
;) I don't care if someone is gay, smokes pot or pays for sex either.
This is another stupid attempt by congress to control people's lives. I don't understand how someone gambling online affects my life or my liberty.
I base my interpretation of life on pretty much one quote from Thomas Jefferson:
"But it does me no injury for my neighbor to say there are twenty gods or no God. It neither picks my pocket nor breaks my leg."
-Thomas Jefferson, Notes on Virginia, 1782
What the hell do I care if someone gambles online? Sure there's the whole "greater good" argument but I never liked that one
I haven't looked at the link yet but my problem with the lottery was always that the funds would be used for education. Then of course the funds go into a general fund of which education gets a percentage. If the funds were in a (god help me here) "lock box", I would probably support it more. I think maybe the lottery money should go for the people who spend all thier money on the lottery. The stupid people.
Of course I get pissed because Georgia follows the same hipocracy of outlawing gambling while having a state-run lottery. No moral ground to stand on with THAT one.
While I don't support the war in Iraq, make no mistake that the US Military couldn't obliterate and occupy and country it really set its mind to. You might be occupying a sheet of glass after you nuked it but you're still occupying it ;)
The thing that has blown me away is how "soft" the military has become. And I'm not regurgitating some stupid Michael Savage/Sean Hannity/Rush Limbaugh talking point here.
For all intents and purposes, we've been "gentle" in Iraq. We have much more firepower at our disposal but I think Rummy didn't have the stomach to deal with the consequences of dropping megaton bombs in a known insurgent city or outpost because of the collateral damage. I'm not saying it's the right thing to do but I'm making the point that if you're going to do something, right or wrong, do it all the way. You do much more damage by pussy-footing around. I think if I knew that my "liberators" were going to dump a bunker buster on any location that was suspected of harboring a terrorist, I'd fucking make sure my house didn't have a terrorist in it and make sure everyone knew it.
Interesting. I didn't realize the parade in question was just a gay pride parade. I would personally choose to not march in a parade that had the Klan or that stupid ass church that was protesting the funerals saying that homosexuality is the cause of 9/11 but I realize that NAMBLA is a far cry from two hate groups. Just making a point about who you choose to associate with and how it can reflect on you. My opinion on the whole gay marriage thing is that the government shouldn't recognize straight marriages either. Marriage is a religious institution and all the people bitching and moaning are somehow unable to link the fact that the government recognizing a union between two people (straight or gay) is NOT going to force thier church to have to perform gay marriages. It reminds me of the Bill Hicks rant about the Supreme Court and flag burning. God he would have a field day with the current politcal climate.
I will say this about Pelosi. Her overtones today and her statements about not impeaching the president are inetersting and honestly rather promising. I don't like W. but I think impeachment is a bit of stretch. In my mind this is not the time for Democrats to be screwing around with finger pointing and grandstanding. The voters have given them a chance (although my understanding is that this kind of power shift is typical, historically, of a 6th year election) and, while I probably won't like some of the things they try to pass through, at least we won't have to worry about stupid anti stemcell bills or bills against specific medical procedures or bills against two people wanting to share thier life together and get the same benefits as any other couple that makes the same decision.
I'm more worried about tax cuts being rolled back and government growth (not that the republicans did anything to prevent that while THEY were in office).
Actually if you think about it, Murtha would probably be a decent cross-the-aisle kind of candidate. And as far as Pelosi goes, I would consider anyone who marches with NAMBLA to be unstable. I'm all in support of gay marriage and have no problem with it but I do have a problem with NAMBLA.
I honestly have a feeling (and I'm no democrat mind you, registered libertarian) that Nancy Pelosi won't be House Majority leader. Sadly enough it will probably be Murtha.
Democrats know that Pelosi is to the far left of the majority of most democrats. Not even they want her third in line for the Oval office.
What I'm looking forward to is the excuse Republican's use for loosing.
It already started last night "Conservatives just aren't getting out and voting". If the Democrats had lost, they would be out screaming that there was election fraud.
Neither of these two parties can imagine or fathom that someone WOULDN'T vote for them. Last round, the democrats blamed it on voter stupidity and the overenergized religious right.
but you CAN'T sue the political campaigns. They exempted themselves when the DNC (do not call) was set up. The probably have the same loop hole in CANN SPAM as well.
Charities, political groups and "surveys" are exempt in addition to companies with which you have a "prior business relationship".
The part that ticks me off is the slew of "We're doing a survey about long distance rates...."
fuckign loopholes.
The problem with Atlanta is that some dumbass decided that taking two interstates and merging them together downtown was a grand old idea.
;)
Then a new group of dumbasses decided that the problem wasn't fucked up enough and they decided to throw a major highway into that merge as well.
Depending on when I leave the house in the morning, it can take me 45 minutes to an hour to go from Northridge on 400 to 14th street where I exit. God forbid someone spills a coke on the road in which case that commute is now 2 hours
For those not familiar with Atlanta, that is a 21 mile commute.
My wife's is even worse as she has to get to the other side of the city (Aviation Blvd area).
I was pretty much thinking the same thing. Google has the financial backing to do this and software is not the company bread and butter. This attitude won't work in any medium sized or small development shop simply because they don't have the staff to have everyone decide to work on project B and let Project A float in the wind. Google doesn't have customer deadlines to deal with.
I had the same idea. I'm like "I wonder if they'll switch to JBoss or Geronimo"
Read his rule more closely. No computer in the BEDROOM until the kid's 18. I plan on doing the same thing with my children.
;)
I'm of the opinion that any computer a child uses should be in a commonly visible place. There's no better impetus to behaving than having everyone be able to see what you do.........for the most part
Thank you for making me laugh this morning. Seriously. That rocks.
In all fairness xcdroast was all that was around for a while. It does look dated now and k3b is much nicer but I remember when that's all we had ;)
"This is a money grab plain and simple."
The said as much on the blog entry:
From Ken Womack (product manager at Earthlink for this whole fiasco):
"But the bottom line is that the intent here is to improve the user experience around dead domains while at the same time generating some additional revenue for EarthLink."
There's no question it's an attempt at revenue.
Oh well. I'll be filling out the paperwork to switch to speakeasy on Tuesday. Until then, I'm having to build out a DNS server to work around this.