sorry, this wasn't meant to say that wget did all that - it just showed the MIME-type.
The rest was leeched from different sources (my log files, ntbugtraq etc.)
I just wanted to quickly get the word out that disabling playing sounds in IE is not enough.
1. it uses many forms of attack
2. it attacks server _and_ clients
3. it propagates by tftping the load from altering hosts (probably from the host which
did the attack before)
4. it alters the content type for the client infection via http+IE
Looking at online stores I think it's a fair deal that they collect the information _they_need_ to do their business in a database - but only that bits they need and with a grant that they use this information only for their business.
So the problem remains with logging in to their site and people today seemingly unable to remember username&password. So what we need is a standardized login interface (xml-rpc, soap whatever) and a facility in the browser to talk to it.
The browser would hold a database with URIs (https of course) and login/pw. To add security, this database could be encrypted globally with a user password and per-site with a key the site transmits (or just with the URI said information gets POSTed to).
Let my first say that my thoughts are by the victims and their families and I'm still shocked by this inhumanity which were done there yesterday.
But:
Sorry, you are talking out of your ass. Do you have any idea about the terror such a regime like the taliban does to their people?
They are the only one having weapons, they are the only one having cars. The country has essentially no infrastructure and no industry.
What should the people do?
And really, they would have much stronger reasons to get rid of their government than the fact that it lets terrorists in their country. Check out www.rawa.org These taliban terrorize their own people in ways we cannot imagine (or have seen in history, try http://www.usatoday.com/news/world/2001-05-22-tali banids.htm)
Go, read something about the history of of Afghanistan. They are in war since USSR occupied them in _1979_. 6 Million people (1/3 of the population) fled the country to Iran or Pakistan. About 2 Million still are in Iran(!) today. That people flee to Iran might give you a picture how nice it has to be to live in Afghanistan.
And let's not forget that the taliban were supported by the USA, back before 1998, but when their totalitarean, women-repressing politic was still crystal clear. Sultan Amir, Pakistans chief of secret service, trained by green berets in Fort Brag, is said to be the founder of the the taliban. Even bin laden is said to have been supported by the usa back in his fight against the USSR in afghanistan.
Sony _has_ been in court for patent infringment before. The case was about the walkman which a german inventor named Andreas Pavel claimed to have a patent for (granted 1977!)
They stumped him with an armee of lawyers, court costs for him were abough 2.000.000 british pounds.
Note that before that sony actually had payed him appr. 50.000$ - while they sold walkmen for a couple of billion $s worldwide.
... an interview I read with Shaquille O'Neal in a local magazine (shoddy translation by me).
Obviously having a private jet can be topped by simply not using it:
[...]
O'Neal:[...] Be young, have fun!
Do you wanna know how I travelled to germany?
Reporter: In your private jet?
O'Neal: No, in a Boing 747. We bought all tickets and the front of the plane hang down somewhat, because we all sat in first-class and everything else was empty. That's the way I wanted to live and so I do.
How are the Linux and BSD IA-64 ports doing? I heard something about both of them awhile back. Both camps reported stuff is going well with kernels and compilers running but then the news just died away. Anything new an interesting to report? I would be interested in how much bloat going to a pure 64 bit kernel actually is
as for linux, it's as far from vapor as it can be. buy an ia64, download any stable 2.4.x kernel and go on.
See your local linux sources or
http://bitmover.com:8888//home/ppc/linux_2_4/src /a rch/ia64?nav=index.html|src/.|src/arch
For anything up to 8 CPU's, Intel hardware will be better most of the time. That covers all small servers, departmental servers, web servers, small/medium database servers and a stack of other stuff. Sure, 8 CPU intel machine's aren't great, but then 4 CPU ones go as fast as 8 CPU Suns.
maannn, you don't have any clue what you are talking about, are you? At least don't classify by the number of cpus. This is absolute bull...
IBM's S390 goes from 1 to 12 CPUs and that 41000+ linux instances they had running on one of that beasts was on a relativly small one - later david boyes had 97,943 instances of linux running on 12 CPUs (and 16 Gig). Show me any i386 based system capable of that.
This is not about raw processing power, but even there you have to look at the problem size because memory bandwidth can be pretty relevant there.
Oh, btw. you know who developed some innovative technologies for cpus like SOI and copper - where is intel in that game?
But POWER4 is not just about CMP. Both of POWER4's two cores are 64-bit, five-issue, superscalar processors that will operate at more than 1 GHz, making each one more powerful than any single CPU in existence today. And unlike most companies that just moan and complain about the problems of memory latency and bandwidth, IBM did something about them. POWER4's two cores share a large on-chip L2 cache with 100 GB/s of combined bandwidth. The chip also provides 45 GB/s of off-chip bandwidth to other POWER4 chips, memory, and I/O. These bandwidths are an order of magnitude higher than found on typical processors today. IBM used wave pipelining to allow POWER4's wide expansion bus to operate at 500 MHz over long distances with good signal integrity.
And more about that here:
http://mdronline.com/mpr/h/2000/1120/144703.html
an indepth view about the new ibm puppies.
Intel is as far away from that territory as mssql from oracle on an e10000.
I was a regular reader of LT (20-30 times "refresh" a day).
I just deleted my bookmark and I think that is what all people should do (YMMV). When there comes a reaction to that petition, I'll see what to do.
But untill then, no more hits from me.
Actually, I have a ping of 40-50ms to the next hop, and reportedly people with Fast Path at my provider (german telecom) have about 15ms. And at www.adsl.com one can read about "up to 60ms".
And interleaving and FEC are independent AFAIK, because IIRC FEC is mandatory and interleaving is optional. See also http://www.adsl.com/adsl_tutorial.html, where they say that
"As a real time signal, digital video cannot use link or network level error control procedures commonly found in data communications systems. ADSL modems therefore incorporate forward error correction that dramatically reduces errors caused by impulse noise. "
and,
"The receiver then corrects errors that occur during transmission up to the limits implied by the code and the block length. The unit may, at the users option, also create superblocks by interleaving data within subblocks; this allows the receiver to correct any combination of errors within a specific span of bits."
aahhh, finally a voice of reason.
One thing to note though:
Expect ping times to go up. (Sorry, gamers, if you really want good ping time you will be forced to a T1 type solution.) Throughput will be affected, too, although I don't know by how much.
Ping times are often strongly affected by dsl (vs. cable), not by pppoe per se. For dsl, some providers use "interleaving" on the way to the DSLAM, i.e. the data bits of one block are interleaved across several data packets. This "kills" latency, one gets around 50ms across 768/128 kb/s connections (vs 10ms). The additional PPPoE overhad might be only around 1-5ms. IIRC, there was a paper somewhere, one can calculate it, it's a bigger factor for smaller packets like for VoIP or video conferencing than for gaming.
Let's see, lower bandwidth Hmm, the provider I use sells 768kb/s downstream and has just upped the real downstream so with pppoe "overhead" I get that number.
btw. do you have the slightest idea how much that overhead really is? (hint: 20% is blatantly wrong)
more connection problems How you know that without having used it? I have PPPoE and none problems.
no support for my OS
don't you have that anyway?
and more cpu cycles...
Uhh, yeah, what are you running, an amiga 500 (that would fit to the OS-support statement)?
The real reason that PPPoE is used is so you can chose your ISP while maintianing the same DSL, just change your PPPoE settings to point to a different ISP. Personally, I'd sacrifice choice for the use of
standard protocols.
Ever heard of rfc 2516.
Check your facts. You have a standard and choice. PPPoE isn't bad.
But will it always be impossible? Or do we just think it is impossible because we lack information and understanding?
This is always the question with scientific theories. I used some sort of shortcut with the word fundamental, read this as "fundamental following the state of todays physics".
Your "lack of information" is called hidden variables and is in itself subject to some theories. And a general consensus is that, yes, that "fundamental" is fundamental.
I did a quick search on google for:
hidden variables quantum mechanics
and found the following nice and short thread which deals with this theme:
If you want to read more, just peruse google, there are a lot of nice essays out there - but don't believe everything you read one the internet;), this is an area which seems to have a strong attractivity for, hmm, exotic people and ideas.
Oh, btw., in the light of this laplace citatiton, when I think of the consequences this would have on such nice ideas as "free will", I'm really positive that I like the uncertainty of quantum mechanics more.
Deterministical Chaos is exactly that what you described, i.e. the outcome of a process depends in a non-continous manner from the input data.
prominent examples are
- three body problem
- weather (all see Lorentz (sp?) equations)
- mandelbrodt set
etc.
Alle this problems have in common that a very small modification to the input may lead to drastic changes on the output.
For instance the three body problem descibes the motion of three bodies (sic!) under mutual gravitational force. Algorithms which want to "predict" the motion of these three bodies have to be very precise, i.e. you have to calculate with something like 100 decimal digits.
Now to the question of randomness. Well, it really isn't easy to find and your believe that it doesn't exist was actually shared by Laplace (mathematican/physician) end of 19th century (I believe). He said something like:
"Give me the state/position of all particles in the universe at one time and I can calculate the state/position at any time in the future or past."
But - later on quantum mechanics was discovered/developed, and still today every scientist belives that there lies real randomness.
This is for instance deductible from Heisenbergs uncertainty principle (sp?).
It's fundamentally _impossible_ to precisely predict speed and position of a given electron. It's fundamentelly impossible to predict when and in which direction an alpha particle will be emitted from a collapsing atom nucleus.
That's why there is the notion of half-life period, thats just the time when the probability is 50% that the alpha particle has been emitted.
People think that randomness is this impersonal force that makes things happen for no reason at all.
What it really is, is an explanation when the factors involved in the outcome are too complicated to grasp.
Nope,
there's just a difference between deterministical chaos and randomness.
That doesn't mean the the latter doesn't exist.
Many web companies maintain sites for clients and will be faced with the question who will pay for inserting that tag into each and every page.
Yeah, many sites are template driven, yeah, most work might be done with a perl one-liner, but it's easy to imagine cases where this job will be quite painfull. (CGI-scripts where the page is dynamically created etc.)
Someone should sue microsoft over that (just kidding... class action suit?)
The redirects are defined in a client-side file called msdnodc.xml with a clearly defined and well-documented DTD and plenty of documentation on the MSDN website.
Certainly, there will be a default set of redirects installed with XP, and I have no doubt that these will be chosen to M$'s advantage.
You are aware that the default installation of any software under windows is the same case and that it is of enormous value even for a company like AOL that its software is part of that default?
We are talking of a unprecedent editorial power over the majority of internet users, not about the fairly competent minority
The advantage over credit cards is not that evident, except (possibly) that people can't steal over 100 German marks (at present, about $42 or 48) by stealing your number.
One word:
anonymity
Re:Good riddance to yet another bad business model
on
Eazel Come, Eazel Go?
·
· Score: 2
But in this situation the obvious choice would be MSVC and MFC platform considering the windows user share.
Hmm,I know at least two (relativly big) companies which use QT on windows just because the think it's better than MFC.
Portability was never an argument for them, just quality of the libs and ease of development.
Slashdot Mirror
uups,
sorry, this wasn't meant to say that wget did all that - it just showed the MIME-type.
The rest was leeched from different sources (my log files, ntbugtraq etc.)
I just wanted to quickly get the word out that disabling playing sounds in IE is not enough.
NO! Here's what wget showed me for one host:
[message/rfc822]
So this thing is really evil:
1. it uses many forms of attack
2. it attacks server _and_ clients
3. it propagates by tftping the load from altering hosts (probably from the host which
did the attack before)
4. it alters the content type for the client infection via http+IE
Looking at online stores I think it's a fair deal that they collect the information _they_need_ to do their business in a database - but only that bits they need and with a grant that they use this information only for their business.
So the problem remains with logging in to their site and people today seemingly unable to remember username&password. So what we need is a standardized login interface (xml-rpc, soap whatever) and a facility in the browser to talk to it.
The browser would hold a database with URIs (https of course) and login/pw. To add security, this database could be encrypted globally with a user password and per-site with a key the site transmits (or just with the URI said information gets POSTed to).
Let my first say that my thoughts are by the victims and their families and I'm still shocked by this inhumanity which were done there yesterday.
i banids.htm)
But:
Sorry, you are talking out of your ass. Do you have any idea about the terror such a regime like the taliban does to their people?
They are the only one having weapons, they are the only one having cars. The country has essentially no infrastructure and no industry.
What should the people do?
And really, they would have much stronger reasons to get rid of their government than the fact that it lets terrorists in their country. Check out www.rawa.org
These taliban terrorize their own people in ways we cannot imagine (or have seen in history, try http://www.usatoday.com/news/world/2001-05-22-tal
Go, read something about the history of of Afghanistan. They are in war since USSR occupied them in _1979_. 6 Million people (1/3 of the population) fled the country to Iran or Pakistan. About 2 Million still are in Iran(!) today. That people flee to Iran might give you a picture how nice it has to be to live in Afghanistan.
And let's not forget that the taliban were supported by the USA, back before 1998, but when their totalitarean, women-repressing politic was still crystal clear. Sultan Amir, Pakistans chief of secret service, trained by green berets in Fort Brag, is said to be the founder of the the taliban. Even bin laden is said to have been supported by the usa back in his fight against the USSR in afghanistan.
Sony _has_ been in court for patent infringment before. The case was about the walkman which a german inventor named Andreas Pavel claimed to have a patent for (granted 1977!)
They stumped him with an armee of lawyers, court costs for him were abough 2.000.000 british pounds.
Note that before that sony actually had payed him appr. 50.000$ - while they sold walkmen for a couple of billion $s worldwide.
... an interview I read with Shaquille O'Neal in a local magazine (shoddy translation by me).
Obviously having a private jet can be topped by simply not using it:
[...]
O'Neal:[...] Be young, have fun!
Do you wanna know how I travelled to germany?
Reporter: In your private jet?
O'Neal: No, in a Boing 747. We bought all tickets and the front of the plane hang down somewhat, because we all sat in first-class and everything else was empty. That's the way I wanted to live and so I do.
How are the Linux and BSD IA-64 ports doing? I heard something about both of them awhile back. Both camps reported stuff is going well with kernels and compilers running but then the news just died away. Anything new an interesting to report? I would be interested in how much bloat going to a pure 64 bit kernel actually is
c /a rch/ia64?nav=index.html|src/.|src/arch
as for linux, it's as far from vapor as it can be. buy an ia64, download any stable 2.4.x kernel and go on.
See your local linux sources or
http://bitmover.com:8888//home/ppc/linux_2_4/sr
Kenneth Colby and Joseph Weizenbaum amazed the academic world by demonstrating a electrical typewriter capable of fooling leading psychiatrists into believing it is a human patient suffering from infantile autism..
Oh dear, everything repeats....
maannn, you don't have any clue what you are talking about, are you? At least don't classify by the number of cpus. This is absolute bull...
IBM's S390 goes from 1 to 12 CPUs and that 41000+ linux instances they had running on one of that beasts was on a relativly small one - later david boyes had 97,943 instances of linux running on 12 CPUs (and 16 Gig). Show me any i386 based system capable of that.
This is not about raw processing power, but even there you have to look at the problem size because memory bandwidth can be pretty relevant there.
Oh, btw. you know who developed some innovative technologies for cpus like SOI and copper - where is intel in that game?
Read for instance
Microdesign Resources, I cite:
But POWER4 is not just about CMP. Both of POWER4's two cores are 64-bit, five-issue, superscalar processors that will operate at more than 1 GHz, making each one more powerful than any single CPU in existence today. And unlike most companies that just moan and complain about the problems of memory latency and bandwidth, IBM did something about them. POWER4's two cores share a large on-chip L2 cache with 100 GB/s of combined bandwidth. The chip also provides 45 GB/s of off-chip bandwidth to other POWER4 chips, memory, and I/O. These bandwidths are an order of magnitude higher than found on typical processors today. IBM used wave pipelining to allow POWER4's wide expansion bus to operate at 500 MHz over long distances with good signal integrity.
And more about that here:
http://mdronline.com/mpr/h/2000/1120/144703.htm
an indepth view about the new ibm puppies.
Intel is as far away from that territory as mssql from oracle on an e10000.
lwn.net/daily should be a good replacement. they carry fewer links, but very well chosen.
hehe, thanks, that is indeed my choosen alternative
I was a regular reader of LT (20-30 times "refresh" a day).
I just deleted my bookmark and I think that is what all people should do (YMMV). When there comes a reaction to that petition, I'll see what to do.
But untill then, no more hits from me.
Good by LT.
And interleaving and FEC are independent AFAIK, because IIRC FEC is mandatory and interleaving is optional. See also http://www.adsl.com/adsl_tutorial.html, where they say that and,
aahhh, finally a voice of reason.
One thing to note though:
Expect ping times to go up. (Sorry, gamers, if you really want good ping time you will be forced to a T1 type solution.) Throughput will be affected, too, although I don't know by how much.
Ping times are often strongly affected by dsl (vs. cable), not by pppoe per se. For dsl, some providers use "interleaving" on the way to the DSLAM, i.e. the data bits of one block are interleaved across several data packets. This "kills" latency, one gets around 50ms across 768/128 kb/s connections (vs 10ms). The additional PPPoE overhad might be only around 1-5ms. IIRC, there was a paper somewhere, one can calculate it, it's a bigger factor for smaller packets like for VoIP or video conferencing than for gaming.
Let's see, lower bandwidth
Hmm, the provider I use sells 768kb/s downstream and has just upped the real downstream so with pppoe "overhead" I get that number.
btw. do you have the slightest idea how much that overhead really is? (hint: 20% is blatantly wrong)
more connection problems
How you know that without having used it? I have PPPoE and none problems.
no support for my OS
don't you have that anyway?
and more cpu cycles...
Uhh, yeah, what are you running, an amiga 500 (that would fit to the OS-support statement)?
What would be nice is if people would just calm down a little about the PPPoE thing, and give a valid reason why it's bad.
Forget it, people can bitch about cable/dsl monopolies and PPPoE at the same time, no problem for them.
Ever heard of rfc 2516.
Check your facts. You have a standard and choice. PPPoE isn't bad.
But will it always be impossible? Or do we just think it is impossible because we lack information and understanding?
0 00 /posts/topic37229.shtm
;), this is an area which seems to have a strong attractivity for, hmm, exotic people and ideas.
This is always the question with scientific theories. I used some sort of shortcut with the word fundamental, read this as "fundamental following the state of todays physics".
Your "lack of information" is called hidden variables and is in itself subject to some theories. And a general consensus is that, yes, that "fundamental" is fundamental.
I did a quick search on google for:
hidden variables quantum mechanics
and found the following nice and short thread which deals with this theme:
http://www2.abc.net.au/science/k2/stn/february2
If you want to read more, just peruse google, there are a lot of nice essays out there - but don't believe everything you read one the internet
Oh, btw., in the light of this laplace citatiton, when I think of the consequences this would have on such nice ideas as "free will", I'm really positive that I like the uncertainty of quantum mechanics more.
Deterministical Chaos is exactly that what you described, i.e. the outcome of a process depends in a non-continous manner from the input data.
prominent examples are
- three body problem
- weather (all see Lorentz (sp?) equations)
- mandelbrodt set
etc.
Alle this problems have in common that a very small modification to the input may lead to drastic changes on the output.
For instance the three body problem descibes the motion of three bodies (sic!) under mutual gravitational force. Algorithms which want to "predict" the motion of these three bodies have to be very precise, i.e. you have to calculate with something like 100 decimal digits.
Now to the question of randomness. Well, it really isn't easy to find and your believe that it doesn't exist was actually shared by Laplace (mathematican/physician) end of 19th century (I believe). He said something like:
"Give me the state/position of all particles in the universe at one time and I can calculate the state/position at any time in the future or past."
But - later on quantum mechanics was discovered/developed, and still today every scientist belives that there lies real randomness.
This is for instance deductible from Heisenbergs uncertainty principle (sp?).
It's fundamentally _impossible_ to precisely predict speed and position of a given electron. It's fundamentelly impossible to predict when and in which direction an alpha particle will be emitted from a collapsing atom nucleus.
That's why there is the notion of half-life period, thats just the time when the probability is 50% that the alpha particle has been emitted.
People think that randomness is this impersonal force that makes things happen for no reason at all.
What it really is, is an explanation when the factors involved in the outcome are too complicated to grasp.
Nope,
there's just a difference between deterministical chaos and randomness.
That doesn't mean the the latter doesn't exist.
Many web companies maintain sites for clients and will be faced with the question who will pay for inserting that tag into each and every page. ... class action suit?)
Yeah, many sites are template driven, yeah, most work might be done with a perl one-liner, but it's easy to imagine cases where this job will be quite painfull. (CGI-scripts where the page is dynamically created etc.)
Someone should sue microsoft over that (just kidding
The redirects are defined in a client-side file called msdnodc.xml with a clearly defined and well-documented DTD and plenty of documentation on the MSDN website.
Certainly, there will be a default set of redirects installed with XP, and I have no doubt that these will be chosen to M$'s advantage.
You are aware that the default installation of any software under windows is the same case and that it is of enormous value even for a company like AOL that its software is part of that default?
We are talking of a unprecedent editorial power over the majority of internet users, not about the fairly competent minority
The advantage over credit cards is not that evident, except (possibly) that people can't steal over 100 German marks (at present, about $42 or 48) by stealing your number.
One word:
anonymity
But in this situation the obvious choice would be MSVC and MFC platform considering the windows user share.
Hmm,I know at least two (relativly big) companies which use QT on windows just because the think it's better than MFC.
Portability was never an argument for them, just quality of the libs and ease of development.
... and it's used in ESR's CML2 the new kernel config system to come in 2.5.
In fact, zope's OODBMS, the ZODB is usable without zope, see
http://sourceforge.net/projects/zodb/