This could save billions of people. And it's one kind of threat -- that in principle: we should be able to see coming, if we are just looking
We could also do well to have solar flare early warning and harden the power grid against the next Carrington event;
which is overdue and expected every couple hundred years.
However.... what happens when there is an Asteroid that will threaten earth... in between the time the telescope is developed,
but before the asteroid diversion tech is developed?
you don't "help" a company or technology by buying their stock since the said stock is owned by some other dude and the sale does not bring a single more dollar to the company
This is not quite true. Most companies dilute their stock regularly, to compensate management and founders with stock or option grants.
The collection of buyers of those shares set the price for the stock -- which is ultimately being used to provide
the company's equity financing.
Now it's true if you bought a share of stock for $1000.... well it's not $1000 that goes directly or indirectly to the company.
But you are trading places with someone who ultimately up the chain bought into their offering.
In the event the buying volume ran out... the stock price could easily fall by a few %.
Even a $0.01 price decrease is significant.
So it's not that you aren' "giving" to the company --- it's just that the relative proportions of what
you are giving are probably very very small, for a multi-billion$$ company.
What is very disappointing is the heavyhanded regulators have blocked this kind of market in the US,
the supposed "land of the free"? What happened to our economic freedom??
Indeed. If you stand to lose financially -- in case the technology DOES succeed,
then you could make a Bet that it will succeed, in order to offset your losses.
If the technology succeeds, you win your bet, AND your winnings offset the financial harm.
If the technology doesn't succeed, then you lose your bet, BUT you are not financially harmed.
Investing would help finance its success, which you definitely don't want.
Instead... in the US you are banned from placing the bet.
So you can't protect yourself --- except from a narrow band of risks by purchasing insurance:-(
"Naah...How about we build a huge floating light water reactor out in the ocean?"
So say the government and the regulators who only recognize the existence of one kind of reactor operation.
So say the companies that produce power from coal, whose vitality would be threatened by a cheaper abundant power source. So say the companies heavily fested in uranium-fed solid-fuel water-cooled reactors.... and manufacturers that also are in the business of manufacturing the uranium fuels for traditional nuclear reactors.
What the market is essentially saying is they don't agree with Bloomberg analyst's or others' evaluation
of the value of these other companies. The natural conclusion is the market says THE ANALYSTS ARE WRONG
in their estimates of the worth of Yahoo Japan/Alibaba.
It is the analysts, not the public that assume it is the US portion of Yahoo's operations that are being valued at $0.
By the way.... just because some Alibaba stock or some Yahoo Japan stock is available on other exchanges
at a certain price; does not mean the entire company is valued at the current marginal price of stock trades.
That is a form of extrapolation which is subject to large errors. The market valuation of Yahoo US based on price of individual shares is also an extrapolation.
One should not assume that all the outstanding shares in Yahoo are available for the same price,
to an investor possessing current marginal trading price in $ per share times number of shares, in cash.
That doesn't really tell you what the market will value the company at, perhaps as a rough estimate with errors between 10x and 100x.
It is just the analyst/reporter's underhanded way of saying -- since we're infallible about the proper valuation
of these quickly growing portions, and nobody else could possibly ever see any differently -----
any difference in US stock price must be attributed to negative value from the slower growing portion of the business.
Maybe it's just that their other non-US operations are being assigned a discount,
for various reasons, below what the analyst wants to value them at.
If there's anything that a consultant craves, it's billable hours...
Not billable hours at the cost of doing a crappy job, and most certainly going to get blamed,
when the customer blames his company;
when the failures caused by consultant's CAB causes downtime.
That particular outage cost several million given what the server did.
The problem is not the admin actions it's "what the server did"
The application the business was dependant on to generate millions of dollars was designed
in such a fragile way, that it could fail as a result of whatever happened to just one server....
You see... this is bad architecture. Servers are prone to failure, even when designed with redundant components.
It is improper for a business application that generates revenue to be sensitive to a single or double server failure.
Critical applications should be architected with a level of robustness that reflects their level of importance.
The auditor does not care if the patch may cause a work stoppage, if they are not fully patched, they are not in compliance, if they are not in compliance they get written up
Sounds like they need to fire and hire new auditors.
like this will just make you look stupid and change averse to your employer.
No... it's obviously just aversity to excessive, unnecessary and crippling micromanagement. It's obviously some idiots in suits who are change averse and feel they need to justify their existence by "approving" or "disapproving" of each and every required security update or patch or system admin action.
Which involves real costs. With this kind of bullshit, they need to hire additional system admins for systems to approach proper management just to deal with the reduced time efficiency and increased waste caused by bureaucracy.
That's not true. There are people who can do that.
You need enough money to be allowed to freely invest in private firms and such though.
And you need to have not so much money, as well.
Too little money OR too much money, and you cannot make good returns.
It is not as if your potential return is independent from the amount of money you have, there, so it is a bit meaningless to throw around numbers such as 18%.
If you have too little money -- then you don't get access to investments (except ones that have already become public companies, which suck) ---- if you have too much money, then you actually exhaust what good options are available.
which is stopping people feel sympathy towards people living on the street as it's easier to have 'less feelings when you're typing something' than looking at them in the eye"
It looks like you skipped over the part, "that doesn't rely primarily on luck".
It doesn't depend primarily on luck. It depends on your ability to select a sequence of investments that will have an average payout of more than twice what they cost. You don't know the outcome of any one investment (success or failure), but your ability to pick a sequence of investments that are expected to offset each other's random risks and have sufficient average payout when taken together (expected total gain minus loss averaged more than twice cost), is one of skill, and it relies on decision making abilities.
Good luck is when the average payout turns out to be twice as much as expected and happens less than 1% of the time.
Bad luck is when the payout is half or less, and happens less than 1% of the time.
This is assuming a skilled selection.
When we say "high risk"; we do not mean visiting a casino and placing bets,
where you have an expected loss of 10% due to the house edge, (assuming you had infinite cash and placed bets forever).
Open Source is not perfect.
It also does not help when you have large commercial institutions RELYING on the source code in a security critical role under constant attack by well-funded adversaries,
AND the developers of said open source code are so pitifully underfunded, AND the commercial proprietors
that cause said open source library to become a high-value target are only willing to invest in features, and not improvements that would lead to better quality and lesser likelihood of serious bugs.
I never saw a C program with a remote file inclusion bug or a C code injection bug caused by an eval().
Pretty much all the errors caused by C fall into two buckets: reading an improper memory location and writing an improper memory location (including double-free'ing an invalid memory address).
As long as you can be certain to avoid those two conditions, C is just as safe as other languages.
There are ways you can design your C programs, and rules you can follow which make it unlikely for you to include such errors.
For non-trivial programs, there are plenty of advantages of managing your own memory: which you cannot do in other languages such as Python or Java.
The other languages' use of garbage collection results in great space and runtime inefficiencies.
$30,949 is how much the OpenBSD Foundation received in donations in 2013.
And yet... I heard OpenSSL itself gets at most $2000 in a typical year.
Despite tens of thousands of banks, retailers, hardware manufacturers, software manufacturers, all relying on their code in a security critical fashion to support their business activities. The MOST the OpenSSL project gets in contributions is a mere shilling?
And no real support for high quality code review, maintenance, and release management.
Just support for adding feature bloat.
Oh... Redhat lover..... Actually, there's a problem with that:
It will only upgrade packages within a release, AND you can't upgrade to the new release.
It's like being stuck at Windows XP Service Pack 1, and having to go do an offline boot from CD update from
CD install media to go to SP2.
So it's really "Insert RHEL 6 CD"; Go through installer again; Windows has a much better experience....
No... they SAID they cancelled this policy, immediately after it was brought to light.
if they quietly reinstate in whole or in part... who would be the wiser?:)
Slashdot Mirror
This could save billions of people. And it's one kind of threat -- that in principle: we should be able to see coming, if we are just looking
We could also do well to have solar flare early warning and harden the power grid against the next Carrington event; which is overdue and expected every couple hundred years.
However.... what happens when there is an Asteroid that will threaten earth... in between the time the telescope is developed, but before the asteroid diversion tech is developed?
you don't "help" a company or technology by buying their stock since the said stock is owned by some other dude and the sale does not bring a single more dollar to the company
This is not quite true. Most companies dilute their stock regularly, to compensate management and founders with stock or option grants.
The collection of buyers of those shares set the price for the stock -- which is ultimately being used to provide the company's equity financing.
Now it's true if you bought a share of stock for $1000.... well it's not $1000 that goes directly or indirectly to the company.
But you are trading places with someone who ultimately up the chain bought into their offering.
In the event the buying volume ran out... the stock price could easily fall by a few %. Even a $0.01 price decrease is significant.
So it's not that you aren' "giving" to the company --- it's just that the relative proportions of what you are giving are probably very very small, for a multi-billion$$ company.
What is very disappointing is the heavyhanded regulators have blocked this kind of market in the US, the supposed "land of the free"? What happened to our economic freedom??
Indeed. If you stand to lose financially -- in case the technology DOES succeed, then you could make a Bet that it will succeed, in order to offset your losses.
If the technology succeeds, you win your bet, AND your winnings offset the financial harm. If the technology doesn't succeed, then you lose your bet, BUT you are not financially harmed.
Investing would help finance its success, which you definitely don't want.
Instead... in the US you are banned from placing the bet. So you can't protect yourself --- except from a narrow band of risks by purchasing insurance :-(
"Naah...How about we build a huge floating light water reactor out in the ocean?"
So say the government and the regulators who only recognize the existence of one kind of reactor operation.
So say the companies that produce power from coal, whose vitality would be threatened by a cheaper abundant power source. So say the companies heavily fested in uranium-fed solid-fuel water-cooled reactors.... and manufacturers that also are in the business of manufacturing the uranium fuels for traditional nuclear reactors.
What the market is essentially saying is they don't agree with Bloomberg analyst's or others' evaluation of the value of these other companies. The natural conclusion is the market says THE ANALYSTS ARE WRONG in their estimates of the worth of Yahoo Japan/Alibaba.
It is the analysts, not the public that assume it is the US portion of Yahoo's operations that are being valued at $0.
By the way.... just because some Alibaba stock or some Yahoo Japan stock is available on other exchanges at a certain price; does not mean the entire company is valued at the current marginal price of stock trades. That is a form of extrapolation which is subject to large errors. The market valuation of Yahoo US based on price of individual shares is also an extrapolation.
One should not assume that all the outstanding shares in Yahoo are available for the same price, to an investor possessing current marginal trading price in $ per share times number of shares, in cash.
That doesn't really tell you what the market will value the company at, perhaps as a rough estimate with errors between 10x and 100x.
It is just the analyst/reporter's underhanded way of saying -- since we're infallible about the proper valuation of these quickly growing portions, and nobody else could possibly ever see any differently ----- any difference in US stock price must be attributed to negative value from the slower growing portion of the business.
Maybe it's just that their other non-US operations are being assigned a discount, for various reasons, below what the analyst wants to value them at.
melt downs like Fukushima, Chernobyl, and Three Mile Island — would be virtually impossible at sea."
And the Titanic was an unsinkable ship.
Fundamental inescapable facts:
(1) Anything fragile can break, no matter how many backup systems and safeties you install, because
(2) Everything that can fail will eventually fail, and,
(3) When you have multiple things that can fail, eventually, they will all fail at the same time or the least opportune moment, and
(4) At sea, there is no such thing as a large man-made structure or boat that is not fragile.
This is why we need to switch to LFTRs
No pressure vessel to worry about.
If there's anything that a consultant craves, it's billable hours...
Not billable hours at the cost of doing a crappy job, and most certainly going to get blamed, when the customer blames his company; when the failures caused by consultant's CAB causes downtime.
That particular outage cost several million given what the server did.
The problem is not the admin actions it's "what the server did"
The application the business was dependant on to generate millions of dollars was designed in such a fragile way, that it could fail as a result of whatever happened to just one server....
You see... this is bad architecture. Servers are prone to failure, even when designed with redundant components.
It is improper for a business application that generates revenue to be sensitive to a single or double server failure. Critical applications should be architected with a level of robustness that reflects their level of importance.
The auditor does not care if the patch may cause a work stoppage, if they are not fully patched, they are not in compliance, if they are not in compliance they get written up
Sounds like they need to fire and hire new auditors.
like this will just make you look stupid and change averse to your employer.
No... it's obviously just aversity to excessive, unnecessary and crippling micromanagement. It's obviously some idiots in suits who are change averse and feel they need to justify their existence by "approving" or "disapproving" of each and every required security update or patch or system admin action.
Which involves real costs. With this kind of bullshit, they need to hire additional system admins for systems to approach proper management just to deal with the reduced time efficiency and increased waste caused by bureaucracy.
No one can do that reliably. It's luck.
That's not true. There are people who can do that. You need enough money to be allowed to freely invest in private firms and such though.
And you need to have not so much money, as well. Too little money OR too much money, and you cannot make good returns. It is not as if your potential return is independent from the amount of money you have, there, so it is a bit meaningless to throw around numbers such as 18%.
If you have too little money -- then you don't get access to investments (except ones that have already become public companies, which suck) ---- if you have too much money, then you actually exhaust what good options are available.
which is stopping people feel sympathy towards people living on the street as it's easier to have 'less feelings when you're typing something' than looking at them in the eye"
If you are not looking them in the eye, then you are not experiencing the Identifiable Victim effect.
An amazing annual return is considered > 10%.
This is true: only until you have access to accredited investor status and hedge funds.
It looks like you skipped over the part, "that doesn't rely primarily on luck".
It doesn't depend primarily on luck. It depends on your ability to select a sequence of investments that will have an average payout of more than twice what they cost. You don't know the outcome of any one investment (success or failure), but your ability to pick a sequence of investments that are expected to offset each other's random risks and have sufficient average payout when taken together (expected total gain minus loss averaged more than twice cost), is one of skill, and it relies on decision making abilities.
Good luck is when the average payout turns out to be twice as much as expected and happens less than 1% of the time. Bad luck is when the payout is half or less, and happens less than 1% of the time.
This is assuming a skilled selection.
When we say "high risk"; we do not mean visiting a casino and placing bets, where you have an expected loss of 10% due to the house edge, (assuming you had infinite cash and placed bets forever).
Sure becoming a multimillionaire is (theoretically) easy. But nothing I do will make me a billionaire that doesn't rely primarily on luck
You just need to become a millionaire and then double your money 10 times.
Once you have the millions, there are plenty of high-risk investments to pick from that are likely to do just that.
Mark Karpeles will not be attending the bankruptcy court hearing in the United States scheduled for April 17th.
Extradite him. He's probably not coming to the US for the hearing, because he could be arrested on the spot.
I would be fed up with FedUp... if I were you
Wake me, when there's a RHELUp available to go from RHEL5 to RHEL6.
More seriously.... I don't run production systems on Fedora, and I don't think anyone should.
Fedora is more of a developer desktop OS; that gives an idea of what the future version of RHEL might look like in the future.
Safer != Perfect
Open Source is not perfect. It also does not help when you have large commercial institutions RELYING on the source code in a security critical role under constant attack by well-funded adversaries, AND the developers of said open source code are so pitifully underfunded, AND the commercial proprietors that cause said open source library to become a high-value target are only willing to invest in features, and not improvements that would lead to better quality and lesser likelihood of serious bugs.
I never saw a C program with a remote file inclusion bug or a C code injection bug caused by an eval().
Pretty much all the errors caused by C fall into two buckets: reading an improper memory location and writing an improper memory location (including double-free'ing an invalid memory address).
As long as you can be certain to avoid those two conditions, C is just as safe as other languages. There are ways you can design your C programs, and rules you can follow which make it unlikely for you to include such errors.
For non-trivial programs, there are plenty of advantages of managing your own memory: which you cannot do in other languages such as Python or Java.
The other languages' use of garbage collection results in great space and runtime inefficiencies.
$30,949 is how much the OpenBSD Foundation received in donations in 2013.
And yet... I heard OpenSSL itself gets at most $2000 in a typical year. Despite tens of thousands of banks, retailers, hardware manufacturers, software manufacturers, all relying on their code in a security critical fashion to support their business activities. The MOST the OpenSSL project gets in contributions is a mere shilling?
And no real support for high quality code review, maintenance, and release management. Just support for adding feature bloat.
yawn apt-get update && apt-get dist-upgrade -y
Oh... Redhat lover..... Actually, there's a problem with that: It will only upgrade packages within a release, AND you can't upgrade to the new release.
It's like being stuck at Windows XP Service Pack 1, and having to go do an offline boot from CD update from CD install media to go to SP2.
So it's really "Insert RHEL 6 CD"; Go through installer again; Windows has a much better experience....
Ubuntu's release upgrade process is also OK
do-release-upgrade
No... they SAID they cancelled this policy, immediately after it was brought to light. if they quietly reinstate in whole or in part... who would be the wiser? :)