No need for yet another connector to require we carry five different possible adapters and cables.
Not a valid reason; and the cost to replace cables is negligible. The manufacturers will ignore that. They do not care if tech-savvy/power users have to carry around more adapters or cables.
Indeed, if there is money to be made selling a new type of cable connector, manufacturers would probably jump on the opportunity.
I think the connector will not change, because there's no real commercial demand for a new connector, however; the consumers who get all excited about such things that need smaller profile connectors are not purchasing devices that have RJ45 connectors as it is.
The answer is, and probably always will be Wireless.
If Tablet/Phone manufacturers start wanting an Ethernet connector, then they will jus use the existing USB interface or make a device-specific proprietary one, which will be more profitable for the manufacturer.
Whether RJ45 8P8C for Ethernet changes or not has no influence on that.
A proprietary cable or wireless will still be required, so there is no point for a new standard.
There's no benefit to the consumers, and there's likely no money to be made from a new connector, so I don't think it's an option for those reasons alone.
If there were demand, then a new standard connector would happen, regardless of how inconvenient that might be for some people.
Sure; let's set up WIFI only for Corporations with 10,000 people on a campus! Great idea!!!
Schools around here have WiFi as the only network connection method for 20,000+ all with iPads, and it works fine.
WiFi is just fine, as long as you pick the right technology, the right infrastructure products, design the network appropriately (Do not underprovision or try to "save on costs" such as by purchasing too few APs per unit of space to cover Or trying to save $$$ by picking a cheaper AP, Or in some other manner that undermines the design objectives.), and Do implement the infrastructure correctly.
If the campus network is correctly implemented, then WiFi provides an excellent user experience.
If there are problems for such large deployment, then it is due to unauthorized devices interfering, incompetence by the designer, or people who configured the network equipment, or other implementation mistakes, not merely by the number of users.
Obviously, there are possible network demands that cannot be met (Ones that would not be acceptable with the wired network either), but they're not within the realm of reasonable usage for network users at a business or school campus.
No one in IT is going to splice up a 2 foot HDMI cable for you
Actually... making Mini-HDMI the new Ethernet connector would probably be a great idea --- HDMI already has provisions to carry Ethernet, and it's a 5-Pair Shielded Twisted Pair technology; use an existing connector to solve the problem.
Also if the 802.xxxx standards get updated to use all 5 twisted pairs, then it can probably support 10-Gigabits no problem......
Also, there is no inherent reason that IT cannot splice HDMI cables --- the only reason they can't
is they do not have the proper training and tools, but that could change very quickly.
Anything smaller and I'm certainly not running a length of cable out and crimping my own RJ45 heads on.
The possibility to make custom patch cables is not a design requirement for Ethernet. Companies buy pre-made patch cables..... the ones that really need to make their own cables are outliers..
For installation of cabling into buildings/datacenters; they just need to manufacture new punch-down jacks.
The replacing of hardware installed in buildings all over the country is not going to happen, so they would have to make adapters.
Also, the connector size is not really a problem --- space is not THAT much a premium on desktop machines.
For laptop computers, the best connector size is ZERO. They'll just drop the connector entirely, and use wireless.... which is a great solution.
For technical users that require a wired connection for special use cases, they can use a USB-C dongle.
But they're trying to place an order for a product that does not exist yet, and nobody's proven yet that they will be able to make that product any time soon.
Or that the product will be suitable for Uber's intended use, legal to operate driverless, and not a dud....
Most threats will come from the network, which means malware attacks.
The fact that 'most threats will come from the network'; does not necessarily mean that this is always your highest risk.
Malware is a risk, but it's not the only risk.
First you have to figure what your GPG key is protecting, how persistent and intelligent the attacker is, and what the benefits are for someone compromising it in the first place.
It's true, that some random malware flying around could infect your machine, but what are they going to do with your GPG key?
If you just use it to sign an occasional e-mail, and your key is not trusted to sign a version of some software, then not very much is the answer.... there is not a lot of value in compromising your GPG key.
Actually, I have yet to hear of any malware stealing GPG keys and doing anything meaningful with them.
So i'm going to say your suggested post-compromise abuse by malware is plausible but theoretical.
If it's a targeted attack, when malware would take specific actions to do with GPG, then why couldn't I target Qubes' hypervisor itself? Spawn some arbitrary code into the host node.... then seek out the disk image files, until I find ones that look like they have a bootsector, and infect those as well...
Commercial contracts have SLA. If they fail to even connect they can hardly claim you have 99.9% availability.
SLA does not apply until after service is turned up and you are being billed for service.
After you commit but before turnup, there are no service bills to pay, except possibly advance payment of installation costs, and you cannot claim a SLA violation.
The only way you can back out fine-free after the provider starts incurring installation costs;
is if your contract for service has a backout clause or dead date, and provider fails to meet that date.
The provider will not have allowed a way for you to just cancel at will.
Even if they miss the date; if the delay is due to permitting, government, issues with your site, unexpected construction obstacles, or the weather, for example,
the agreements will still bar the customer from cancelling fee-free, and the provider gets to make that decision.....
Where the IRS pursues people who have lived all their lives in other countries (And can apply extradition, legal sanctions, and asset seizures in the person's home country), because they had a parent born in America, making them a legal citizen?
Encode your secret keys as DNA sequences, then print them out,
multiply them on a petri dish, and have them sent out for cryo storage.
They'll last a lot longer than flash media, and there will be much internal redundancy.
You could also make a 3-Way mirror'd ZFS pool of USB sticks, and set NCOPIES to like 100000,
before writing the keys to disk and sending them out to storage.... repeat again for each of at least 3 offsite locations, so have at least
3 USB sticks per storage vault, and work out how many years before you need to refresh them all.
the so-often-used passphrases on private keys are pretty meaningless because the attacker can easily set up a simple backdoor which would wait until the user enters the passphrase and steal the key then.
If that's true, then why bothe with a Rube Goldberg machine such as 'Split GPG', rather than just use a Smartcard type solution?
No.... passphrases are still useful, as protection of data at rest. Without the passphrase, someone could potentially just copy the file when you're not looking or due to permissions issue, physical theft of equipment or media, or a procedural error on your part resulting in a copy of the file on discarded media -- no need to have admin access or ability to install a keylogger.
Harder solution: Use a smartcard, for instance a Yubikey.
Or a PivKey. If I recall correctly, the T800s have about 20 programmable keyslots, so there is a way to program multiple keys onto the unit.
I suggest having at least two offsite backup units, and check each unit at least once a year.
The harder part is having the discipline to securely update all 3 units, whenever you generate or change a key. (Never having more than 1 of the units at the same place at the same time)
More or less everyone accepts that ISPs, telcos, and the like can't possibly be held responsible for every last dumb or criminal thing that their customers do or we'd have to shut down basically everything
No... adult rational people accept this. Lawyers of media companies such as Sony do not accept this, and they would like to be able to sue ISPs over it, at least if they cannot easily "recover" $$$ and cease-and-decist from the end-user.
The problem is the keys CAN'T be updated. They're burned into real ROM (as opposed to OTP), the reason being the boot ROM will verify a signature using the key it has.
OK... then how about they provide an update modifying the firmware update procedure, so firmware updates have to additionally be signed by a new key.
Also, the phone encryption gets modified so that any update to the firmware will render the data on the phone unreadable, unless the phone is unlocked and clicking the "Update" button submits some device-specific hashcodes to Apple servers, which are then regurgitated to the phone in order to update the encryption after it boots into the new firmware, and then re-encrypts the phone (Generating new hashes which the phone has to already be unlocked to access and Apple servers will not be aware of until next boot).
And also, for all future firmware updates, the phone has to first be unlocked, to do a non-destructive update.
I wasn't aware that my $50 set of linesman's pliers could be considered a hacking tool,
or that anyone would use locks chitzy enough for them to cut.....
should I worry about the TSA confiscating them --- if I put the pliers among the "just in case" items within my luggage?
Well, if the FBI tries this tack, can there be any doubt the Apple will darken the skies with so many lawyers
Well... it's possible the FBI will just have a judge sign off on a search and seizure order, then send police agents to raid all of Apple's offices and facilities and cart away any storage media, computers, or other devices that could possibly contain a signing key.....
Then just totally disrupt all Apple's premises implementing the order, until such time as someone agrees to provide them what they are requesting.
The phrase "well regulated" does not refer to legal regulations, it means "in proper working order".
Correct.... and the militia itself does not necessarily exist at all times, BUT the right of the people to form well-regulated militia and to keep and bear arms does exist at all times, and the government is forbidden from interfering or encroaching upon that right by the 2nd amendment.
"well regulated" at the time of writing didnt mean what you think it does...educate yourself
'Well regulated' means well-organized internally; implying training of members and practice in the use of firearms.
Practice with firearms is necessary to have a well-organized militia, therefore, people have a right to bear them which is protected.
Within the constitution, this is specified as a reason or rational basis for the amendment.
"Well regulated" within the meaning of the amendment is not a legal requirement, And the amendment does
not allow congress to restrict the right to 'well regulated militia' ---- the amendment prohibits congress from
infringing upon the right to bear arms in any form.
And what are the power requirements for those 4TB drives again?
There is not a substantial change in power consumption relative to capacity of a 2.5" disk drive.
Power consumption is mainly affected by what RPM rate the platter is driven at.
The Seagate Momentus ST4000LM016 2.5" Laptop HDD 4TB is reported to have datasheet Power consumption values: 0.85 Watt (Idle), 1.9 Watt (Read), 2.1 Watt (Write)
I think that's a datasheet power consumption for a 4TB disk less than the PiDrive what other Slashdot posters have listed as the WDPI Power Specs:
- low power (5VDC @ 0.55A = 2.75 watts)
Also, if you are really concerned about power consumption, and don't need all that capacity then consider a SSD such as $40 SSD, which should have more than 100GB.
Actually..... I doubt if the PI has sufficient CPU power to fill up 100GB very quickly with simple data logging.
the government should take steps to prevent other companies from doing short term dumping in an attempt to run them out of business.
Yes.... IMO the government should impose capital costs on these businesses.
I would suggest a tax paid upfront based on the number of unique vehicles used.
Example: $315 per Month per unique vehicle used with the service during that month.
It would probably be most useful if the registration and administration for this can only be done by the driver;
go to the local DMV: Cashiers check only. Then you get your sticker; Which the laws should be set up so the
"Ride sharing company" must then verify, scan, and track the status of.
Unless they paid $4000 for the whole year, with an extra $210 convenience fee, then next month, they must repeat
the same manual steps.
Essentially, a disincentive to bringing on contractors who will only make a part-time commitment.
Since they no longer get to enlist vehicles nearly for free and only pay driving labor.
The tax proceeds should be reserved for the purposes of covering damage claims: in case the
company becomes insolvent, and the taxing authority would also have the option later to use
proceeds to rebuild the local market, or to help provide new job-reeducation assistance for former commercial drivers
displaced from their jobs.
It's an old market manipulation technique: give your product away to increase market share, and then cash in when you drive as many competitors as possible out of the market.
It's something that should have been made illegal a long time ago.
You Must Not/May Not as a For-Profit entity come to market and offer services or goods in
a competitive market for less than it costs you to provide that particular service or manufacture that good.
The cost to provide a service is at minimum the cost of any labor, materials, energy, supplies to provide, manage, support, bill, account for that service, and a proportionate share of all costs required to develop the service.
The cost of a good is at a minimum the sum of the fair market value of its materials plus the cost of any supplies, labor, services obtained required to assemble the good, and a proportionate share of all costs required to engineer, design, and execution of all manufacturing processes for the product.
If you bundle and provide multiple services or products together, then you MUST also
facilitate the purchase of every product and every component of every individually, And You
may NOT provide for free or sell a bundle of products and/or services to consumers for
less than the total price of each item: Except you do not have to offer components you purchased
entirely from another supplier, so long as they are commodity parts generally available on the market
for the duration of time you sell your goods, And do not have to offer every component of
an intangible work individually, for example, you do not have to offer Pages 1 through 5 of
a Book or Manuscript as a separate purchasable product.
For the exception to be valid; the components bundled together must be entirely software, or
entirely information, and the maker of the product formally declares in writing that each
bundled discrete component or product part is incapable of being made to have independent function;
And only Informational or entertainment value on its own.
For example: Chapter 6 of your new book on its own has only Entertainment value; contents of a book do not
provide functional value, therefore, there is no reason they cannot be bundled.
For example: The Apple iOS Mobile operating system is software, But the iPhone 5 is a piece of hardware.
Because hardware is tangible, the two products cannot be forcefully bundled together.
The two products must be available for separate purchase, and the software cannot artificially prohibit its use with
alternative hardware components.
The Windows Operating System and Calculator program provide functional value,
a Calculator program C:\windows\system32\calc.exe can be written or modified to function independent of the operating system,
therefore, the two components cannot be forcefully bundled.
Slashdot Mirror
Even tax return has a box right near the end that says "contribute extra to US/state treasury". Use it.
I think their reasoning is disingenuous.... they want to compel others to pay.
The 1% payers probably include business interests.
Also, somehow, the money will probably spent in a way that profits the ones who are supporting it and hurts others.
No need for yet another connector to require we carry five different possible adapters and cables.
Not a valid reason; and the cost to replace cables is negligible. The manufacturers will ignore that. They do not care if tech-savvy/power users have to carry around more adapters or cables.
Indeed, if there is money to be made selling a new type of cable connector, manufacturers would probably jump on the opportunity.
I think the connector will not change, because there's no real commercial demand for a new connector, however; the consumers who get all excited about such things that need smaller profile connectors are not purchasing devices that have RJ45 connectors as it is.
The answer is, and probably always will be Wireless.
If Tablet/Phone manufacturers start wanting an Ethernet connector, then they will jus use the existing USB interface or make a device-specific proprietary one, which will be more profitable for the manufacturer.
Whether RJ45 8P8C for Ethernet changes or not has no influence on that.
A proprietary cable or wireless will still be required, so there is no point for a new standard.
There's no benefit to the consumers, and there's likely no money to be made from a new connector, so I don't think it's an option for those reasons alone.
If there were demand, then a new standard connector would happen, regardless of how inconvenient that might be for some people.
Sure; let's set up WIFI only for Corporations with 10,000 people on a campus! Great idea!!!
Schools around here have WiFi as the only network connection method for 20,000+ all with iPads, and it works fine.
WiFi is just fine, as long as you pick the right technology, the right infrastructure products, design the network appropriately (Do not underprovision or try to "save on costs" such as by purchasing too few APs per unit of space to cover Or trying to save $$$ by picking a cheaper AP, Or in some other manner that undermines the design objectives.), and Do implement the infrastructure correctly.
If the campus network is correctly implemented, then WiFi provides an excellent user experience.
If there are problems for such large deployment, then it is due to unauthorized devices interfering, incompetence by the designer, or people who configured the network equipment, or other implementation mistakes, not merely by the number of users.
Obviously, there are possible network demands that cannot be met (Ones that would not be acceptable with the wired network either), but they're not within the realm of reasonable usage for network users at a business or school campus.
No one in IT is going to splice up a 2 foot HDMI cable for you
Actually... making Mini-HDMI the new Ethernet connector would probably be a great idea --- HDMI already has provisions to carry Ethernet, and it's a 5-Pair Shielded Twisted Pair technology; use an existing connector to solve the problem.
Also if the 802.xxxx standards get updated to use all 5 twisted pairs, then it can probably support 10-Gigabits no problem......
Also, there is no inherent reason that IT cannot splice HDMI cables --- the only reason they can't is they do not have the proper training and tools, but that could change very quickly.
Anything smaller and I'm certainly not running a length of cable out and crimping my own RJ45 heads on.
The possibility to make custom patch cables is not a design requirement for Ethernet. Companies buy pre-made patch cables..... the ones that really need to make their own cables are outliers..
For installation of cabling into buildings/datacenters; they just need to manufacture new punch-down jacks.
The replacing of hardware installed in buildings all over the country is not going to happen, so they would have to make adapters.
Also, the connector size is not really a problem --- space is not THAT much a premium on desktop machines.
For laptop computers, the best connector size is ZERO. They'll just drop the connector entirely, and use wireless.... which is a great solution.
For technical users that require a wired connection for special use cases, they can use a USB-C dongle.
The problem is the 0 to 30 Mhz range is too limiting to be useful.
But they're trying to place an order for a product that does not exist yet, and nobody's proven yet that they will be able to make that product any time soon.
Or that the product will be suitable for Uber's intended use, legal to operate driverless, and not a dud....
Most threats will come from the network, which means malware attacks.
The fact that 'most threats will come from the network'; does not necessarily mean that this is always your highest risk.
Malware is a risk, but it's not the only risk.
First you have to figure what your GPG key is protecting, how persistent and intelligent the attacker is, and what the benefits are for someone compromising it in the first place.
It's true, that some random malware flying around could infect your machine, but what are they going to do with your GPG key?
If you just use it to sign an occasional e-mail, and your key is not trusted to sign a version of some software, then not very much is the answer.... there is not a lot of value in compromising your GPG key.
Actually, I have yet to hear of any malware stealing GPG keys and doing anything meaningful with them. So i'm going to say your suggested post-compromise abuse by malware is plausible but theoretical.
If it's a targeted attack, when malware would take specific actions to do with GPG, then why couldn't I target Qubes' hypervisor itself? Spawn some arbitrary code into the host node.... then seek out the disk image files, until I find ones that look like they have a bootsector, and infect those as well...
Commercial contracts have SLA. If they fail to even connect they can hardly claim you have 99.9% availability.
SLA does not apply until after service is turned up and you are being billed for service.
After you commit but before turnup, there are no service bills to pay, except possibly advance payment of installation costs, and you cannot claim a SLA violation.
The only way you can back out fine-free after the provider starts incurring installation costs; is if your contract for service has a backout clause or dead date, and provider fails to meet that date.
The provider will not have allowed a way for you to just cancel at will. Even if they miss the date; if the delay is due to permitting, government, issues with your site, unexpected construction obstacles, or the weather, for example, the agreements will still bar the customer from cancelling fee-free, and the provider gets to make that decision.....
Apple says something along the lines of "OK, we're leaving.
You think Apple's going to go somewhere and find better legal protections than in the US?
Also, wherever they go, government demands will follow them. And they'll still have to do the US government's bidding, regardless of where they move
The US has Extraterritorial jurisdiction pretty much across the whole world.
Have you never heard of the phrase: Accidental American ?
Where the IRS pursues people who have lived all their lives in other countries (And can apply extradition, legal sanctions, and asset seizures in the person's home country), because they had a parent born in America, making them a legal citizen?
Encode your secret keys as DNA sequences, then print them out, multiply them on a petri dish, and have them sent out for cryo storage.
They'll last a lot longer than flash media, and there will be much internal redundancy.
You could also make a 3-Way mirror'd ZFS pool of USB sticks, and set NCOPIES to like 100000, before writing the keys to disk and sending them out to storage.... repeat again for each of at least 3 offsite locations, so have at least 3 USB sticks per storage vault, and work out how many years before you need to refresh them all.
the so-often-used passphrases on private keys are pretty meaningless because the attacker can easily set up a simple backdoor which would wait until the user enters the passphrase and steal the key then.
If that's true, then why bothe with a Rube Goldberg machine such as 'Split GPG', rather than just use a Smartcard type solution?
No.... passphrases are still useful, as protection of data at rest. Without the passphrase, someone could potentially just copy the file when you're not looking or due to permissions issue, physical theft of equipment or media, or a procedural error on your part resulting in a copy of the file on discarded media -- no need to have admin access or ability to install a keylogger.
Harder solution: Use a smartcard, for instance a Yubikey.
Or a PivKey. If I recall correctly, the T800s have about 20 programmable keyslots, so there is a way to program multiple keys onto the unit.
I suggest having at least two offsite backup units, and check each unit at least once a year.
The harder part is having the discipline to securely update all 3 units, whenever you generate or change a key. (Never having more than 1 of the units at the same place at the same time)
More or less everyone accepts that ISPs, telcos, and the like can't possibly be held responsible for every last dumb or criminal thing that their customers do or we'd have to shut down basically everything
No... adult rational people accept this. Lawyers of media companies such as Sony do not accept this, and they would like to be able to sue ISPs over it, at least if they cannot easily "recover" $$$ and cease-and-decist from the end-user.
Catching speeders.... since vehicle radar detectors won't work for attempting to detect the the encrypted radar signal.
The problem is the keys CAN'T be updated. They're burned into real ROM (as opposed to OTP), the reason being the boot ROM will verify a signature using the key it has.
OK... then how about they provide an update modifying the firmware update procedure, so firmware updates have to additionally be signed by a new key.
Also, the phone encryption gets modified so that any update to the firmware will render the data on the phone unreadable, unless the phone is unlocked and clicking the "Update" button submits some device-specific hashcodes to Apple servers, which are then regurgitated to the phone in order to update the encryption after it boots into the new firmware, and then re-encrypts the phone (Generating new hashes which the phone has to already be unlocked to access and Apple servers will not be aware of until next boot).
And also, for all future firmware updates, the phone has to first be unlocked, to do a non-destructive update.
I wasn't aware that my $50 set of linesman's pliers could be considered a hacking tool, or that anyone would use locks chitzy enough for them to cut..... should I worry about the TSA confiscating them --- if I put the pliers among the "just in case" items within my luggage?
Well, if the FBI tries this tack, can there be any doubt the Apple will darken the skies with so many lawyers
Well... it's possible the FBI will just have a judge sign off on a search and seizure order, then send police agents to raid all of Apple's offices and facilities and cart away any storage media, computers, or other devices that could possibly contain a signing key.....
Then just totally disrupt all Apple's premises implementing the order, until such time as someone agrees to provide them what they are requesting.
The phrase "well regulated" does not refer to legal regulations, it means "in proper working order".
Correct.... and the militia itself does not necessarily exist at all times, BUT the right of the people to form well-regulated militia and to keep and bear arms does exist at all times, and the government is forbidden from interfering or encroaching upon that right by the 2nd amendment.
"well regulated" at the time of writing didnt mean what you think it does...educate yourself
'Well regulated' means well-organized internally; implying training of members and practice in the use of firearms. Practice with firearms is necessary to have a well-organized militia, therefore, people have a right to bear them which is protected.
Within the constitution, this is specified as a reason or rational basis for the amendment. "Well regulated" within the meaning of the amendment is not a legal requirement, And the amendment does not allow congress to restrict the right to 'well regulated militia' ---- the amendment prohibits congress from infringing upon the right to bear arms in any form.
What's this, then? You haven't heard of the ST4000LM016 and Spinpoint M10P ?
And what are the power requirements for those 4TB drives again?
There is not a substantial change in power consumption relative to capacity of a 2.5" disk drive. Power consumption is mainly affected by what RPM rate the platter is driven at.
The Seagate Momentus ST4000LM016 2.5" Laptop HDD 4TB is reported to have datasheet Power consumption values: 0.85 Watt (Idle), 1.9 Watt (Read), 2.1 Watt (Write)
I think that's a datasheet power consumption for a 4TB disk less than the PiDrive what other Slashdot posters have listed as the WDPI Power Specs:
- low power (5VDC @ 0.55A = 2.75 watts)
Also, if you are really concerned about power consumption, and don't need all that capacity then consider a SSD such as $40 SSD, which should have more than 100GB.
Actually..... I doubt if the PI has sufficient CPU power to fill up 100GB very quickly with simple data logging.
The 314GB drive, released on Pi Day (3/14), costs $31.42 for a limited time
Considering it's only 314GB, and you can get 4TB 2.5" disks for $150.
The PiDrive gives you 10 GB per $1, versus 27 GB per $1 by purchasing 4TB conventional hard disks.
They have an interesting definition of 'data hungry'
the government should take steps to prevent other companies from doing short term dumping in an attempt to run them out of business.
Yes.... IMO the government should impose capital costs on these businesses.
I would suggest a tax paid upfront based on the number of unique vehicles used.
Example: $315 per Month per unique vehicle used with the service during that month.
It would probably be most useful if the registration and administration for this can only be done by the driver; go to the local DMV: Cashiers check only. Then you get your sticker; Which the laws should be set up so the "Ride sharing company" must then verify, scan, and track the status of.
Unless they paid $4000 for the whole year, with an extra $210 convenience fee, then next month, they must repeat the same manual steps.
Essentially, a disincentive to bringing on contractors who will only make a part-time commitment. Since they no longer get to enlist vehicles nearly for free and only pay driving labor.
The tax proceeds should be reserved for the purposes of covering damage claims: in case the company becomes insolvent, and the taxing authority would also have the option later to use proceeds to rebuild the local market, or to help provide new job-reeducation assistance for former commercial drivers displaced from their jobs.
It's an old market manipulation technique: give your product away to increase market share, and then cash in when you drive as many competitors as possible out of the market.
It's something that should have been made illegal a long time ago.
You Must Not/May Not as a For-Profit entity come to market and offer services or goods in a competitive market for less than it costs you to provide that particular service or manufacture that good.
The cost to provide a service is at minimum the cost of any labor, materials, energy, supplies to provide, manage, support, bill, account for that service, and a proportionate share of all costs required to develop the service.
The cost of a good is at a minimum the sum of the fair market value of its materials plus the cost of any supplies, labor, services obtained required to assemble the good, and a proportionate share of all costs required to engineer, design, and execution of all manufacturing processes for the product.
If you bundle and provide multiple services or products together, then you MUST also facilitate the purchase of every product and every component of every individually, And You may NOT provide for free or sell a bundle of products and/or services to consumers for less than the total price of each item: Except you do not have to offer components you purchased entirely from another supplier, so long as they are commodity parts generally available on the market for the duration of time you sell your goods, And do not have to offer every component of an intangible work individually, for example, you do not have to offer Pages 1 through 5 of a Book or Manuscript as a separate purchasable product.
For the exception to be valid; the components bundled together must be entirely software, or entirely information, and the maker of the product formally declares in writing that each bundled discrete component or product part is incapable of being made to have independent function; And only Informational or entertainment value on its own.
For example: Chapter 6 of your new book on its own has only Entertainment value; contents of a book do not provide functional value, therefore, there is no reason they cannot be bundled.
For example: The Apple iOS Mobile operating system is software, But the iPhone 5 is a piece of hardware. Because hardware is tangible, the two products cannot be forcefully bundled together. The two products must be available for separate purchase, and the software cannot artificially prohibit its use with alternative hardware components.
The Windows Operating System and Calculator program provide functional value, a Calculator program C:\windows\system32\calc.exe can be written or modified to function independent of the operating system, therefore, the two components cannot be forcefully bundled.