I (read: anyone) can make an algorithm that fits any previous data
Unless it was an honest test where the sets of cases used to build and train the algorithm were required to be random samples, AND
the cases the prediction was tested against were also a random sample with no overlap with the cases used to build the algorithm
(with no training of the algorithm based on the cases supposedly being used to validate it).
Apple does not support their own 2 year old OSes, I have to upgrade my Mac to a more often than not crappier OS just to get things like Xcode running again
They won't however switch iCloud off access on you, so you can no longer get to your pictures, contacts, or calendar, just because your software version is a few years behind.
The large ISPs make you agree at signup to contractual language before you start.
There is a requirement that you settle disputes using binding arbitration.
There is language effectively prohibiting plaintiffs from joining together in a class action,
which the courts have upheld as disallowing any class action lawsuits on the matter.
Also, the fine print within the contractual agreement reserves rights to throttle and manage traffic,
so apparently breach of contract isn't something you can sue the provider for.
If userA leases a drive and fills it with illegal content (child pornography, Snowdon's files, whatever) and then leaves and the hosting company the re-leases the drive to userB without clearing out the drive properly, who gets arrested? Who should get arrested?
Possession of the hard drive containing illegal content is not a strict liability crime,
meaning those accused of the crime have to be charged under due process.
As long as userB is not aware of the content placed by userA and does not become aware of the inaccessible content placed by user A, then userA is the only party who has met both conditions, mens rea and actus rea, required for criminal liability.
Therefore, it is userA who could and should be arrested.
Neither userB nor the lease provider has any criminal liability, unless they became aware of the illegal material and committed a guilty act, such as illegally retaining the material and failing to report the matter.
I work for a hosting company and we wipe all drives using DBAN when a server is canceled.
That's one approach.... another is simply delete and re-create the hardware RAID10 (or RAID5), re-initialize, and install the new tenant's operating system.
The data has not been explicitly wiped, but the new leassee is not going to get anything meaningful out of it without physical access and a lot of trouble, anyways.
Something tells me you didn't make a copy of the last guy's data before you wiped it and installed your stuff. I'm betting no calls to the NSA,or even the local police were made
These days he might care.... never know when one might find a Bitcoin wallet carelessly left lying around complete with private keys.
If he didn't at least take a deep look at the data to see if there was anything there that he could "use", then it's because he's an honest person, perhaps. Not everyone is like that.
It's partially autonomous. And that's why it is so dangerous.
After watching the video, it's abundantly clear why people should be nervous about autonomous vehicles. It's not the cars and tech we need to worry about, it's idiots like this guy.
Once we actually have autonomous vehicles --- this won't be an issue as a human operator won't even be required
for safe operation; only to provide instructions about where to go.
This is nothing more than Get The Facts (version 3.0)
A followup to their anti-Linux campaign and anti-Firefox campaign and then their
anti-Google ("Scroogled") campaign saying "We're all open source and stuff".
Correct.... and ultimately... the reason for all their Open Source efforts is to promote the flagship closed source software such as Windows and IIS and help keep developers on their platform; they don't want popular "The Open Source Momvement" to mean that people who are onboard have to leave their closed expensive platforms.
In a way it is a difficult problem for Yelp. Almost all of those recent reviews were from people who had never stayed there and were just responding to the stories about the $500 fine. In other words, useless noise.
They should provide simply a system of "locking" the listing after the media attention, and
prompt users to complete "proof" of having been a guest there, before getting to enter their review.
Yes, if they are following the RFCs, they can use up to 4 packets
There are many cases where companies are varying slightly from the RFCs, when there is an apparent benefit of doing so.
www.Google.com has been known to send an IW of 8 packets before the first acknowledgement for their homepage.
Of course the latency and packet loss together are extremely important, and any significant losses create a performance issue ---- they are also definitive signs of a poor connection.
That's different from the throughput being driven by latency, however.
1. incentive for customers to sue for breach of contract
It's not breach of contract, because the contract and terms of use says they can do (basically)
whatever they like in terms of throttling.
It is deceptive advertising, because they are selling it as an Unlimited service.
The FTC should be on their ass for telling bold faced lies in the way they describe their service
marketingwise and in the ad material.
so they won't let you on the bus as an "incentive" to ride less.
They'll let you on the bus. But they will always force you to get off at the next stop and drive away, so you have to wait for
the next bus, in order to get to your destination.
Kinda like, getting into the car in the morning to go to work and being limited to 20mph as the roads are busy now.
No... it's like... the road sensor has detected that your vehicle has driven more miles in the past 30 days
than 98% of the other vehicles on this particular road, therefore, whenever you happen to be on a side road at
a junction, you will be given an automatic red light for an adjusted (increased) period of time in order to
incentivize you driving fewer miles during rush hour.
Even with TOTP or HOTP systems the secret has to be stored on both the token and the server. And like with the RSA attack, having all those secrets in one location is stupid.
TOTP is probably good enough for most.
It has a few things going for it that a password doesn't:
(1) HUMANS don't generate or control what the secret is, so it's actually a strong secret.
(2) With a TOTP system such as Google authenticator, the NORM is you will have a different secret for each site.
This is different from a human generated password where users commonly re-use the same password, OR
use a common theme to generate multiple similar or barely different passwords around a common theme or pattern.
My roof is the floor of the people upstairs. I can't install solar!
Ultimately... there has to be some top floor, where their "roof" really is a roof, and they should be able to install solar.
And then "share" a portion of it they decide with you downstairs, in exchange for an appropriate fee of course, which you will negotiate with them from a position of weakness (being that you can't get the solar from anyone but them or a neighbooring roof-level user) .
Of services that IT provides within your organization.
Next write down a list of 'what you are supporting with those services'.
Next write down a list of the most important software you use in the organization, for example: operating systems, application servers... E.g. "Linux" "VMware" "Microsoft Exchange" could be some examples.
Probably, each one of these has a conference.
Next write down a list of your job roles.... for example: what tasks do you on a daily basis.
Job roles have conferences.... for example: there are conferences for Security defense.
There are new technology conferences and IT Field days; there are multi-vendor storage conferences,
there are Open Source software conferences, etc.
Next you should prioritize your conferences, based on your goals for attending.
Do you need training in certain products?
Do you need to network and find potential experts to help you?
Perhaps you are looking for some 3rd party products to go with other products you use and improve productivity.
Or maybe you want to replace some product altogether..... in that case, you might want to make a new list of
"Potential competitors" and think of looking into their conference for some exposure networking and training.
I had one dispute on PayPal ever involving an eBay transaction with a PayPal verified user; piece of electronics the seller never shipped, paid using PayPal instant transfer which PayPal always touts as the best way to pay direct from bank account..... seller got a DHL tracking number, item never picked up, seller made various hoax claims about failed delivery, but shipper tracking always clear item never picked up from shipper..... PayPal ruled in my favor, but could recover less than $60 from the seller out of $120, seller "disappeared" and stopped responding, so I still lost a good bit of money.
Even when you "win" a PayPal or eBay dispute, you actually lose. Not happy with that at all...
Yelp automagically pulls (hides behind the curtain) reviews it deems are not representative.
How about we join some reviewers whose reviews were suppressed with some guests who had a bad experience in a lawsuit against Yelp over review suppression and some FTC complaints. We can claim that their suppression of negative reviews was deceptive and resulted in us staying there and not getting the experience we paid for and believed we would be getting according to the biased selection of reviews that Yelp chose to present and suppress.
Perhaps. However, signing a contract on someone else's behalf is questionable at best, and that seems to be the case here - the hotel is putting the contract signers on the hook for the actions of people who did not sign said contract.
This happens all the time. Companies sign non-disclosure agreements.
If an employee violates the terms of the NDA, then the company is liable.
To help protect themselves, the company's lawyers draft their own NDA and make the employee sign it, so if an employee discloses information that the company's NDA says cannot be disclosed, then the Company is still liable, but the Employee is liable to indemnify the company from all the liability.
Similarly.... you can sign a contract where you will be liable if a 3rd party doesn't do something.
Before you sign that contract, you better make sure you get that 3rd party to sign a contract with you to indemnify you in case they do that thing, otherwise you will still bear all the liability!
Please also accept my offer of a 10% discount on a visit to Union Street Guest House within the next three months as further apology. Just mention this letter. And I encourage you to leave a review about your experience (positive or negative) after your stay.
Not what I want to see. After all... if it's so bad you had to have a 'fine for negative review policy', why the heck would I want to stay there in response to this?
The only way you will win me over is if you show that YOU RETURNED any fines you collected from any guests or past guests under this policy,
PLUS a 100% bonus for their troubles.
Under HIPAA and PCI you are also supposed to disclose information on breaches (and yes, this is considered a breach).
I think you are living in an imaginary world, if you believe that enterprises perform disclosures of "breach", in the event that some sensitive record happens to be inadvertently revealed to an administrator, operator, helpdesk person, or other staff, who is not committing a privilege misuse --- this is not a security breach in the accepted sense.
This is likely a quite common thing to occur, and yet, we don't see daily disclosures of supposed breaches of this nature.
My fundamental argument here, is that what you are saying is not aligned with the real world.
Slashdot Mirror
I (read: anyone) can make an algorithm that fits any previous data
Unless it was an honest test where the sets of cases used to build and train the algorithm were required to be random samples, AND the cases the prediction was tested against were also a random sample with no overlap with the cases used to build the algorithm (with no training of the algorithm based on the cases supposedly being used to validate it).
Apple does not support their own 2 year old OSes, I have to upgrade my Mac to a more often than not crappier OS just to get things like Xcode running again
They won't however switch iCloud off access on you, so you can no longer get to your pictures, contacts, or calendar, just because your software version is a few years behind.
The large ISPs make you agree at signup to contractual language before you start. There is a requirement that you settle disputes using binding arbitration. There is language effectively prohibiting plaintiffs from joining together in a class action, which the courts have upheld as disallowing any class action lawsuits on the matter.
Also, the fine print within the contractual agreement reserves rights to throttle and manage traffic, so apparently breach of contract isn't something you can sue the provider for.
If userA leases a drive and fills it with illegal content (child pornography, Snowdon's files, whatever) and then leaves and the hosting company the re-leases the drive to userB without clearing out the drive properly, who gets arrested? Who should get arrested?
Possession of the hard drive containing illegal content is not a strict liability crime, meaning those accused of the crime have to be charged under due process.
As long as userB is not aware of the content placed by userA and does not become aware of the inaccessible content placed by user A, then userA is the only party who has met both conditions, mens rea and actus rea, required for criminal liability.
Therefore, it is userA who could and should be arrested.
Neither userB nor the lease provider has any criminal liability, unless they became aware of the illegal material and committed a guilty act, such as illegally retaining the material and failing to report the matter.
I work for a hosting company and we wipe all drives using DBAN when a server is canceled.
That's one approach.... another is simply delete and re-create the hardware RAID10 (or RAID5), re-initialize, and install the new tenant's operating system. The data has not been explicitly wiped, but the new leassee is not going to get anything meaningful out of it without physical access and a lot of trouble, anyways.
Something tells me you didn't make a copy of the last guy's data before you wiped it and installed your stuff. I'm betting no calls to the NSA,or even the local police were made
These days he might care.... never know when one might find a Bitcoin wallet carelessly left lying around complete with private keys.
If he didn't at least take a deep look at the data to see if there was anything there that he could "use", then it's because he's an honest person, perhaps. Not everyone is like that.
SSDs may expose logically overwritten data to anyone with firmware or hardware level access.
Not if it's an encrypted SSD and you replace the crypto keys with new ones.
It's partially autonomous. And that's why it is so dangerous.
After watching the video, it's abundantly clear why people should be nervous about autonomous vehicles. It's not the cars and tech we need to worry about, it's idiots like this guy.
Once we actually have autonomous vehicles --- this won't be an issue as a human operator won't even be required for safe operation; only to provide instructions about where to go.
Look at this. And this and this and even this
This is nothing more than Get The Facts (version 3.0)
A followup to their anti-Linux campaign and anti-Firefox campaign and then their anti-Google ("Scroogled") campaign saying "We're all open source and stuff".
Correct.... and ultimately... the reason for all their Open Source efforts is to promote the flagship closed source software such as Windows and IIS and help keep developers on their platform; they don't want popular "The Open Source Momvement" to mean that people who are onboard have to leave their closed expensive platforms.
In a way it is a difficult problem for Yelp. Almost all of those recent reviews were from people who had never stayed there and were just responding to the stories about the $500 fine. In other words, useless noise.
They should provide simply a system of "locking" the listing after the media attention, and prompt users to complete "proof" of having been a guest there, before getting to enter their review.
Yes, if they are following the RFCs, they can use up to 4 packets
There are many cases where companies are varying slightly from the RFCs, when there is an apparent benefit of doing so.
www.Google.com has been known to send an IW of 8 packets before the first acknowledgement for their homepage.
Of course the latency and packet loss together are extremely important, and any significant losses create a performance issue ---- they are also definitive signs of a poor connection. That's different from the throughput being driven by latency, however.
1. incentive for customers to sue for breach of contract
It's not breach of contract, because the contract and terms of use says they can do (basically) whatever they like in terms of throttling.
It is deceptive advertising, because they are selling it as an Unlimited service. The FTC should be on their ass for telling bold faced lies in the way they describe their service marketingwise and in the ad material.
so they won't let you on the bus as an "incentive" to ride less.
They'll let you on the bus. But they will always force you to get off at the next stop and drive away, so you have to wait for the next bus, in order to get to your destination.
Kinda like, getting into the car in the morning to go to work and being limited to 20mph as the roads are busy now.
No... it's like... the road sensor has detected that your vehicle has driven more miles in the past 30 days than 98% of the other vehicles on this particular road, therefore, whenever you happen to be on a side road at a junction, you will be given an automatic red light for an adjusted (increased) period of time in order to incentivize you driving fewer miles during rush hour.
Even with TOTP or HOTP systems the secret has to be stored on both the token and the server. And like with the RSA attack, having all those secrets in one location is stupid.
TOTP is probably good enough for most. It has a few things going for it that a password doesn't: (1) HUMANS don't generate or control what the secret is, so it's actually a strong secret.
(2) With a TOTP system such as Google authenticator, the NORM is you will have a different secret for each site. This is different from a human generated password where users commonly re-use the same password, OR use a common theme to generate multiple similar or barely different passwords around a common theme or pattern.
My roof is the floor of the people upstairs. I can't install solar!
Ultimately... there has to be some top floor, where their "roof" really is a roof, and they should be able to install solar. And then "share" a portion of it they decide with you downstairs, in exchange for an appropriate fee of course, which you will negotiate with them from a position of weakness (being that you can't get the solar from anyone but them or a neighbooring roof-level user) .
Of services that IT provides within your organization.
Next write down a list of 'what you are supporting with those services'.
Next write down a list of the most important software you use in the organization, for example: operating systems, application servers... E.g. "Linux" "VMware" "Microsoft Exchange" could be some examples.
Probably, each one of these has a conference.
Next write down a list of your job roles.... for example: what tasks do you on a daily basis.
Job roles have conferences.... for example: there are conferences for Security defense. There are new technology conferences and IT Field days; there are multi-vendor storage conferences, there are Open Source software conferences, etc.
Next you should prioritize your conferences, based on your goals for attending.
Do you need training in certain products?
Do you need to network and find potential experts to help you?
Perhaps you are looking for some 3rd party products to go with other products you use and improve productivity.
Or maybe you want to replace some product altogether..... in that case, you might want to make a new list of "Potential competitors" and think of looking into their conference for some exposure networking and training.
because they didn't exist prior to his fleeing the USA and he couldn't possibly have accessed them.
That's what someone thins....
You think the NSA would know a few things about security.
Rule 1. Change all passwords when a privileged user leaves the organization, especially to accounts with access to confidential files.
Rule 2. Close all the covert backdoors they opened up before leaving.
I had one dispute on PayPal ever involving an eBay transaction with a PayPal verified user; piece of electronics the seller never shipped, paid using PayPal instant transfer which PayPal always touts as the best way to pay direct from bank account..... seller got a DHL tracking number, item never picked up, seller made various hoax claims about failed delivery, but shipper tracking always clear item never picked up from shipper..... PayPal ruled in my favor, but could recover less than $60 from the seller out of $120, seller "disappeared" and stopped responding, so I still lost a good bit of money.
Even when you "win" a PayPal or eBay dispute, you actually lose. Not happy with that at all...
Yelp automagically pulls (hides behind the curtain) reviews it deems are not representative.
How about we join some reviewers whose reviews were suppressed with some guests who had a bad experience in a lawsuit against Yelp over review suppression and some FTC complaints. We can claim that their suppression of negative reviews was deceptive and resulted in us staying there and not getting the experience we paid for and believed we would be getting according to the biased selection of reviews that Yelp chose to present and suppress.
Perhaps. However, signing a contract on someone else's behalf is questionable at best, and that seems to be the case here - the hotel is putting the contract signers on the hook for the actions of people who did not sign said contract.
This happens all the time. Companies sign non-disclosure agreements. If an employee violates the terms of the NDA, then the company is liable.
To help protect themselves, the company's lawyers draft their own NDA and make the employee sign it, so if an employee discloses information that the company's NDA says cannot be disclosed, then the Company is still liable, but the Employee is liable to indemnify the company from all the liability.
Similarly.... you can sign a contract where you will be liable if a 3rd party doesn't do something. Before you sign that contract, you better make sure you get that 3rd party to sign a contract with you to indemnify you in case they do that thing, otherwise you will still bear all the liability!
Please also accept my offer of a 10% discount on a visit to Union Street Guest House within the next three months as further apology. Just mention this letter. And I encourage you to leave a review about your experience (positive or negative) after your stay.
Not what I want to see. After all... if it's so bad you had to have a 'fine for negative review policy', why the heck would I want to stay there in response to this?
The only way you will win me over is if you show that YOU RETURNED any fines you collected from any guests or past guests under this policy, PLUS a 100% bonus for their troubles.
Large window sizes only help when there is absolutely no packet loss (which is not the Internet) and even then it takes a long time to scale up.
When packet loss is significant, it will indicate congestion or a network issue and be a more important factor than latency.
Large windows still help. Packet losses are usually less than 0.01%. Anything above approximately .1% is a strong indication of a possible issue.
Often websites are bypassing slow start by starting with an expanded initial congestion window.
Under HIPAA and PCI you are also supposed to disclose information on breaches (and yes, this is considered a breach).
I think you are living in an imaginary world, if you believe that enterprises perform disclosures of "breach", in the event that some sensitive record happens to be inadvertently revealed to an administrator, operator, helpdesk person, or other staff, who is not committing a privilege misuse --- this is not a security breach in the accepted sense.
This is likely a quite common thing to occur, and yet, we don't see daily disclosures of supposed breaches of this nature.
My fundamental argument here, is that what you are saying is not aligned with the real world.