This was a mandatory assignment.
And some of the students had been effected by terrorism.
According to the article, one of the students had lost her mother in the Bali bombings.
The teacher could probably have devised an assignment that would have accomplished the same objectives without showing so much disrespect / insensitivity to the feelings of her own students.
Say a 2 hour video interrupted by a paid ad playing every 2 minutes, so the total required viewing time (with ads) becomes 4 hours, and when it's playing you get an additional ad at the bottom, and product placements in the video player.
This way the video is "free". Maybe you require the user to register, complete a captcha, respond to an e-mail confirmation message, make a password, fill out a huge form/survey with lots of annoying questions, or pay something (to bypass some of the questions/headache required to see the video for free)
If you complete a paid offer before the video starts, you get an option to auto skip all the ads, remove or make ads less frequent.
Example subscription / pricing model:
Free Member - (requires registration and consent to receive spam - a confirmation code will be e-mailed) - ability to see the video. Requires watching 10 minutes of ads pre-video, and answering 2 trivia questions correctly, otherwise the sequence of ads will be repeated. Every 2 minutes while playing the video, it will be interrupted for 1 minutes of ads. Every 30 minutes of video, there will be another 10 minutes ad sequence and trivia questions (requiring knowledge of the product). There will also be another interrupting 10 minutes ad sequence 15 minutes before the video ends.
A La Cart Ad Break - Reduces ads seen for one viewing of a certain video. No trivia questions required to continue viewing. Access to higher resolution, HD versions of Video. Enables ability to rewind and fast-forward video (which are disabled in Free accounts): can pause Ads, but cannot fast forward through ads. Requires spending $10 from a declining balance, available by pre-paying with credit card, having a 'Free Member' account and adding the cash, gift card, or paid offer. Removes "10 minute ad interruption sequences". Makes ads every 10 minutes instead of every 2 minutes, allows you to skip interrupting ads in the video 5 times. Leading ad is only 2 minutes long, no trivia.
A La Cart Ad Break Plus - Requires spending $20 from declining balance per viewing of a video. Or by completing a paid offer and paying $10. No interrupting ads. However, there are still embedded / transparent / overlay ads; overlay ads can be dismissed 5 times, but a new overlay/embedded at the bottom ad will appear every 10 - 20 minutes. Additional dismisses require $0.10 or upgrading the viewing to Deluxe, while viewing it.
A La Cart Ad Break Deluxe - $30 per video this is applied to, lasts 24 hours (maximum of 15 complete viewings of the video). No interrupting ads. Unlimited dismisses of embedded ads, appear at most once every 30 minutes. Leading and trailing ads are reduced to 30 seconds.
Access to special versions, deleted scenes, outtakes, etc, other 'bonus sections'
(presumably not encoded using H.264).
Ability to download the file, but DRM is used.
A La Cart Ad Break Pro - $40 per video, can watch the same video up to 50 times, lasts 72 hours. No ads, period. Ability to actually download the file with no DRM.
Subscription Plans (12 months minimum, all plans, or 50% * (remaining months) early term fee). Unused viewings or viewing-level privilege time expire at the end of each month.
Basic Member - $30/month. 100 Ad-break viewings per month included, 10 complete Ad-Break plus viewings included, 50% discount on purchasing all A La Cart Ad-Break levels, 4 hours of Ad Break Deluxe privileges per month*.
[*] Ad Break Deluxe is applied per-video, if included hours are exceeded on plan-provided Deluxe viewing, per-hour overage charges apply with a minimum of 1 hour
Silver Member - $60/month. 100 Ad-Break plus viewings, 50 Ad-Break Deluxe viewings, 10 hours of Ad-Break privileges. 75% discount on a-la cart Ad-Breaks at Basic and Plus level (max of 20 additional per month).
Gold Member - $100/month - 100 Ad-Break Deluxe viewing
Actually, yes it is. A state may not charge a tariff for transactions made in or through another state. It's right there in the document. That's why we have "use taxes".
And the supreme court determined that clause doesn't apply to taxes, but only actual tarrifs.
A tarrif is a charge that is laid only upon imports or exports to or from outside the US or between states.
For example: applying a tax to a certain product when sold only by out of state dealers.
For example: taxing all of a type of product sold in a state, and making a subsidy to local producers of the product determined by amount of product sold.
Not entirely true. I could be incorporated in Nevada, but if I have an office in Oregon, then Oregon can tax me for the transactions that take place through that office.
No. Entirely true. The corporation exists in Nevada then, but also has nexus in Oregon, due to having an office there.
Both states have the possibility of regulating and taxing certain activities of the corporation, then.
That's true here. But what about in other countries? What if I have a site hosted in Sweden, and I'm doing business in Germany? My point was that we do not have a consistent set of such rules that work everywhere. And we may never. Who knows?
If your corporation is in Sweden and you are hosted in Germany, then it is up to Sweden what laws to apply to you.
Probably your site will have to follow certain laws of Germany also, to avoid being taken down by your hosting provider there, if the government asks them to, and if they would be required to.
I would think so. But again, which laws do they obey? It's pretty much a gray area, I think. We have long-established rules within the US because of such things like mail order. But internationally? I don't know.
I mean that the hosting provider has to obey laws of the country and state that the hosting provider's facilities are located in.
If the hosting provider is a multi-national, they probably have separate subsidiaries for separate countries.
It seems to fly in the face of civility and is kind of creepy, to ask students to "plan" a criminal act. While this can definitely have educational value.
It is outside of societal norms, and is of a nature that some people would criticize it.
Professional educators should respect that and not attempt to conduct this kind of activity with children, at least not without specific prior parental consent.
Unless of course this is a university, in which case, there should be no problem with this activity, as long as the educator is clear they aren't condoning executing a plan,
and their overall effect is not to condone terrorism.
It is also possibly dangerous, in that, some people have bad intentions and they might be facilitated, or later claim this lesson convinced them to go ahead.
The activity might be regarded as less harmful if the lesson included not only "plan a terrorist attack", But also
"make a plan that could be used by law enforcement to thwart or prevent terrorist attacks of that type"
I don't think the executive branch is deciding how money will be spent.
They're just you know, intentionally failing to fully and correctly implement congress' decision about how money is to be spent.
That is their right... but it is also the supreme court's right to call them on this, and issue orders that $X is not to happen, or that $Y is to be done to correct the executive's failure.
This is why companies need to have an IT-savvy IT manager and know their employees well, and have multiple IT workers watching each other, much like accountants and finance officers are supposed to watch each other
and have separated powers.
Know your employees, their abilities, and their personality.
Without knowing the person, it's difficult to assess the risk as to whether or not they might or might not do or attempt to do certain things.
And what things are even possible for them to attempt.
The easiest way to avoid running around in circles is to know what they are capable of exactly.
If their personality is psychopathic super-programmer, you might have good reason to look for hand-coded hidden kernel drivers, or little binary blobs in a proprietary tampered-with program, containing custom logic bombs, and exploits for bugs in other programs (automated privilege elevation and exploitation).
If not, well, more mundane audits should be fine.
If the person is familiar with scripting, then, well, you'll have to check all the scripts extra carefully.
Even if not, they might have found something on the web, and it doesn't take rocket science to cron "rm -rf".
Which should not be that much a concern if you have solid frequent backups and take additional precautions to secure those.
(Probably) the worst case scenario is they are conspiring with skilled outside hackers, who are providing expertise and assistance.
Once the outsiders have enough information, they may get the IT admin to "run some code" from somewhere obscure, which will lay the playing field, and then later the outsiders will infiltrate the network.
However, that implies premeditation.
If an IT admin is going to forcibly lose their job for serious disciplinary reasons, and anything is suspected to be a risk, they should be escorted by security and not allowed to touch any computers until they are gone for good.
Make them stay on premise during working hours, and have them use pen and paper to fill out some paperwork and answer questions.
This way they will not have a lot of "free time" until all your new IT admins' audits and password changes are established.
I know, it's convoluted. But the actual answer to that is "no". The reason is that the Constitution does not allow one state to tax a transaction that "takes place" in another state.
The constitution is no more restrictive of a state taxing a transaction that takes place in another state, than it is against states regulating other business that goes on in a different state.
One issue, though, is that in the case of an online company, where actually is its "location"?
Companies exist where they are incorporated.
Companies have a "presence" at any place that they have an office.
Whether a company really has a presence at the location where the site is hosted, depends on whether or not they own any of the hosting facility, or any of the equipment there, OR if they are paying someone else to host their site.
Presumably, if they pay someone to host it, whoever hosts their site has to obey the local laws though.
and the extra ethernet wire running to a cantenna'd WAP lets the bad guy back in
That's why enterprises install Wireless LAN Controllers which detect and kill rogue APs.
or the main database server accepts a normal looking connection from a normal employee workstation, that isn't a workstation but actually is a wall wart computer mounted inside the wall masquerading to the network as a workstation.
That's why switches have 802.1x support, and only actual workstations in AD have a SSL certificate can authenticate, send packets through the switch to the intranet, and have the IPsec packets to the DB server accepted
by the Windows 2008 Network Access Protection policies.
Thanks to NAP, things that aren't a member of the domain, can't pretend to be a workstation and talk to any of the servers, even if physically plugged into the LAN.
The difference between OOB management and a malicious backdoor, is OOB management is documented very clearly, as essential documentation for accessing the system.
And it's on the "list of security sensitive services" that need to have creds changed when an admin leaves
If the backdoor is not documented, and nobody else is told about it, then you have a problem (potential liability on your part).
The Janitor has the keys to your building too, and your most sensitive offices.
But they are just disposable, what you do when they leave is really simple.... you make them hand in their badge, so they can no longer get through the front gate.
The IT admin equivallent is the changing of the passwords to the firewall.
And manually verifying the firewall is indeed properly configured so no access to the inside network is possible,
except through authorized personnel's VPN credentials.
Then you force all VPN users to change their VPN passwords immediately.
Posting to slashdot may be as bad as posting to Facebook.
Here's waiting to hear about the retired teacher getting busted for sleeping with students 40 years ago.
Hm.. that's hardly fair. Their parents did not suggest that they do this.
What happens to the kids when they don't pay the fine, because they don't have the cash, and they are being punished, so the last thing the parents will do is lend the money?
Earth would have been half frozen and half cooked all the time, with a narrow, possibly habitable zone at the meeting point.
Unless say the earth's atmosphere was different at the time.
The earth didn't have to be habitable for anything until the fifth "day", anyways.
The archaeological record is questionable at best and a wild guess at worst.
there is no natural mechanism I'm aware of that could impart the necessary rotational energy to said slowly spinning Earth that wouldn't also tear it apart in the process
However, maybe earth's rotation was at a different speed at the time.
One "day" in Adam and Eve's time might have been a lot longer than it is today, if the rate of earth's rotation massively increased at some point.
Also... how do you define a "day" before earth existed?
Isn't a day defined as the sun seeming to rise and fall, but not a specific amount of time?
Because your moral concerns are your moral concerns and not mine?
Maybe I have moral concerns about people whose name starts with the letter J posting to slashdot?
Posting to an internet forum with a username that starts with the letter J is immoral. We need to pass a law to stop this at once.
And why does your thinking you should be able to post override moral concerns?
Perhaps we should just let JavedIqbal post here on slashdot bragging about 100 babies killed by him
Because you know... allowing research on embryos SO Implies that a living person's body will be intentionally damaged for the benefit of research,
and is equivalent in every way to Nazi-style medical tests and experiments involving live animal mutilation and subjecting of animals to needless and extreme pain/discomfort. Yeah right.....
Slashdot Mirror
No part of it. However, charging for removal of ads is not charging for viewing video.
Yes... but noone forced you to do this, did you?
This was a mandatory assignment. And some of the students had been effected by terrorism.
According to the article, one of the students had lost her mother in the Bali bombings.
The teacher could probably have devised an assignment that would have accomplished the same objectives without showing so much disrespect / insensitivity to the feelings of her own students.
Say a 2 hour video interrupted by a paid ad playing every 2 minutes, so the total required viewing time (with ads) becomes 4 hours, and when it's playing you get an additional ad at the bottom, and product placements in the video player.
This way the video is "free". Maybe you require the user to register, complete a captcha, respond to an e-mail confirmation message, make a password, fill out a huge form/survey with lots of annoying questions, or pay something (to bypass some of the questions/headache required to see the video for free)
If you complete a paid offer before the video starts, you get an option to auto skip all the ads, remove or make ads less frequent. Example subscription / pricing model:
Subscription Plans (12 months minimum, all plans, or 50% * (remaining months) early term fee). Unused viewings or viewing-level privilege time expire at the end of each month.
Gold Member - $100/month - 100 Ad-Break Deluxe viewing
What about Ad Supported, possibly chock full of annoying ads, with an option of paying a fee to remove ads?
Actually, yes it is. A state may not charge a tariff for transactions made in or through another state. It's right there in the document. That's why we have "use taxes".
And the supreme court determined that clause doesn't apply to taxes, but only actual tarrifs.
A tarrif is a charge that is laid only upon imports or exports to or from outside the US or between states.
For example: applying a tax to a certain product when sold only by out of state dealers.
For example: taxing all of a type of product sold in a state, and making a subsidy to local producers of the product determined by amount of product sold.
No. Entirely true. The corporation exists in Nevada then, but also has nexus in Oregon, due to having an office there. Both states have the possibility of regulating and taxing certain activities of the corporation, then.
If your corporation is in Sweden and you are hosted in Germany, then it is up to Sweden what laws to apply to you.
Probably your site will have to follow certain laws of Germany also, to avoid being taken down by your hosting provider there, if the government asks them to, and if they would be required to.
I would think so. But again, which laws do they obey? It's pretty much a gray area, I think. We have long-established rules within the US because of such things like mail order. But internationally? I don't know.
I mean that the hosting provider has to obey laws of the country and state that the hosting provider's facilities are located in.
If the hosting provider is a multi-national, they probably have separate subsidiaries for separate countries.
It seems to fly in the face of civility and is kind of creepy, to ask students to "plan" a criminal act. While this can definitely have educational value. It is outside of societal norms, and is of a nature that some people would criticize it.
Professional educators should respect that and not attempt to conduct this kind of activity with children, at least not without specific prior parental consent.
Unless of course this is a university, in which case, there should be no problem with this activity, as long as the educator is clear they aren't condoning executing a plan, and their overall effect is not to condone terrorism.
It is also possibly dangerous, in that, some people have bad intentions and they might be facilitated, or later claim this lesson convinced them to go ahead. The activity might be regarded as less harmful if the lesson included not only "plan a terrorist attack", But also "make a plan that could be used by law enforcement to thwart or prevent terrorist attacks of that type"
I don't think the executive branch is deciding how money will be spent.
They're just you know, intentionally failing to fully and correctly implement congress' decision about how money is to be spent.
That is their right... but it is also the supreme court's right to call them on this, and issue orders that $X is not to happen, or that $Y is to be done to correct the executive's failure.
This is why companies need to have an IT-savvy IT manager and know their employees well, and have multiple IT workers watching each other, much like accountants and finance officers are supposed to watch each other and have separated powers.
Know your employees, their abilities, and their personality. Without knowing the person, it's difficult to assess the risk as to whether or not they might or might not do or attempt to do certain things. And what things are even possible for them to attempt.
The easiest way to avoid running around in circles is to know what they are capable of exactly. If their personality is psychopathic super-programmer, you might have good reason to look for hand-coded hidden kernel drivers, or little binary blobs in a proprietary tampered-with program, containing custom logic bombs, and exploits for bugs in other programs (automated privilege elevation and exploitation).
If not, well, more mundane audits should be fine.
If the person is familiar with scripting, then, well, you'll have to check all the scripts extra carefully. Even if not, they might have found something on the web, and it doesn't take rocket science to cron "rm -rf". Which should not be that much a concern if you have solid frequent backups and take additional precautions to secure those.
(Probably) the worst case scenario is they are conspiring with skilled outside hackers, who are providing expertise and assistance.
Once the outsiders have enough information, they may get the IT admin to "run some code" from somewhere obscure, which will lay the playing field, and then later the outsiders will infiltrate the network.
However, that implies premeditation. If an IT admin is going to forcibly lose their job for serious disciplinary reasons, and anything is suspected to be a risk, they should be escorted by security and not allowed to touch any computers until they are gone for good.
Make them stay on premise during working hours, and have them use pen and paper to fill out some paperwork and answer questions.
This way they will not have a lot of "free time" until all your new IT admins' audits and password changes are established.
No, but it will go away when you upgrade PHP and all your PHP modules, which should be at least twice a month.
I wonder, that... if you had no way of getting back through the firewall... I wonder how you could know the credentials weren't deleted? :)
So where would you be if he had "touch"ed the .class file to have a believable timestamp, I wonder?
I am surprised a "make clean" or your internal equivalent and full rebuild wasn't done if frequently code was still being updated and fixed...
I know, it's convoluted. But the actual answer to that is "no". The reason is that the Constitution does not allow one state to tax a transaction that "takes place" in another state.
The constitution is no more restrictive of a state taxing a transaction that takes place in another state, than it is against states regulating other business that goes on in a different state.
One issue, though, is that in the case of an online company, where actually is its "location"?
Companies exist where they are incorporated.
Companies have a "presence" at any place that they have an office.
Whether a company really has a presence at the location where the site is hosted, depends on whether or not they own any of the hosting facility, or any of the equipment there, OR if they are paying someone else to host their site.
Presumably, if they pay someone to host it, whoever hosts their site has to obey the local laws though.
and the extra ethernet wire running to a cantenna'd WAP lets the bad guy back in
That's why enterprises install Wireless LAN Controllers which detect and kill rogue APs.
or the main database server accepts a normal looking connection from a normal employee workstation, that isn't a workstation but actually is a wall wart computer mounted inside the wall masquerading to the network as a workstation.
That's why switches have 802.1x support, and only actual workstations in AD have a SSL certificate can authenticate, send packets through the switch to the intranet, and have the IPsec packets to the DB server accepted by the Windows 2008 Network Access Protection policies.
Thanks to NAP, things that aren't a member of the domain, can't pretend to be a workstation and talk to any of the servers, even if physically plugged into the LAN.
The difference between OOB management and a malicious backdoor, is OOB management is documented very clearly, as essential documentation for accessing the system.
And it's on the "list of security sensitive services" that need to have creds changed when an admin leaves
If the backdoor is not documented, and nobody else is told about it, then you have a problem (potential liability on your part).
But George, don't we have the firewall for that?
The Janitor has the keys to your building too, and your most sensitive offices.
But they are just disposable, what you do when they leave is really simple.... you make them hand in their badge, so they can no longer get through the front gate.
The IT admin equivallent is the changing of the passwords to the firewall.
And manually verifying the firewall is indeed properly configured so no access to the inside network is possible, except through authorized personnel's VPN credentials.
Then you force all VPN users to change their VPN passwords immediately.
How about not disgruntling the employee in the first place?
I suppose this could be used against Terrorists and suicide bombers as well.
Don't make people dissatisfied with your country. Oh wait, you only have limited control of that, oh well....
Posting to slashdot may be as bad as posting to Facebook. Here's waiting to hear about the retired teacher getting busted for sleeping with students 40 years ago.
Hm.. that's hardly fair. Their parents did not suggest that they do this.
What happens to the kids when they don't pay the fine, because they don't have the cash, and they are being punished, so the last thing the parents will do is lend the money?
Earth would have been half frozen and half cooked all the time, with a narrow, possibly habitable zone at the meeting point.
Unless say the earth's atmosphere was different at the time. The earth didn't have to be habitable for anything until the fifth "day", anyways. The archaeological record is questionable at best and a wild guess at worst.
there is no natural mechanism I'm aware of that could impart the necessary rotational energy to said slowly spinning Earth that wouldn't also tear it apart in the process
Divine intervention
Definitely. Oracle is not so big that even time itself should bend to their will.
Leap seconds have value in that they keep the UTC consistent with localtime, having only a number of hours offset.
Can you imagine how complicated things will get when we need to define time zones as -0X000+5seconds UTC?
Oh right... I forgot to mention I don't ever Watch TV, and as a software engineer, I hardly ever get to sleep.
Admiral.... If we go by the book, like, days would seem like hours.
However, maybe earth's rotation was at a different speed at the time. One "day" in Adam and Eve's time might have been a lot longer than it is today, if the rate of earth's rotation massively increased at some point.
Also... how do you define a "day" before earth existed?
Isn't a day defined as the sun seeming to rise and fall, but not a specific amount of time?
If decay slows down, doesn't this suggest earth could be Older than previously calculated, not younger?
And why does that override moral concerns?
Because your moral concerns are your moral concerns and not mine?
Maybe I have moral concerns about people whose name starts with the letter J posting to slashdot? Posting to an internet forum with a username that starts with the letter J is immoral. We need to pass a law to stop this at once.
And why does your thinking you should be able to post override moral concerns?
Perhaps we should just let JavedIqbal post here on slashdot bragging about 100 babies killed by him
Because you know... allowing research on embryos SO Implies that a living person's body will be intentionally damaged for the benefit of research, and is equivalent in every way to Nazi-style medical tests and experiments involving live animal mutilation and subjecting of animals to needless and extreme pain/discomfort. Yeah right.....