>no batteries last long when you're regularly charge/discharge cycling them.
(quibble)
Batteries can last a long time in the face of repeated charge/discharge cycles. One approach is to design the battery for it, choosing materials and accepting extra weight. Forklift batteries are an example of batteries that will take many cycles.
The other approach is to limit depth of discharge. There's an impressive sharp drop in battery durability if you regularly discharge below 50% capacity. The reason a Prius main battery can last 200,000 miles (proven on the road) is that it never deep-cycles.
>she's just shifting the emissions to a power plant,
Correct, insightful, but it's still a good idea.
The power plant doesn't have to be optimized for variable output, low weight, or small size. It can have full-time people attending the pollution controls. The powerplant's smokestack isn't in the middle of a city a few feet from pedestrians.
I can't give you a cite, so take with your favorite grain of salt, but I've seen claims that by the time you take efficiency into account an electric car results in fewer greenhouse emissions than a gasoline car even if the electricity comes from coal.
A colleague where I live bought a set of routers from Goodwill and found not only default programming but a sheet of paper stuck inside with passwords.
The passwords were for a Department of Energy facility with nuclear activities.
I bet someone here has heard of an even weirder event.
Aren't backbone-speed routers still big-bucks items?
How much of the money for renting a pipe and for filling it up goes to o making payments on the routers o making payments on the DSLAMS/(whatever the cable acronym is)/edge routers o paying off the fiber o making a reasonable profit on the fiber o making an excess profit on the fiber ?
To put it another way, what would have to be bought and installed in order for US ISPs to be able to support the backhaul for a zillion residential subscribers at Japan-level connection speeds?
This is irresponsible advice. There are known-plaintext attacks on reduced-round variants of ROT13. Always use the full 16 rounds to be sure you're actually getting the security that double ROT-13 promises.
Someone in Arkansas sued the Devil once (along with the school board -- you may not want to know). It gave me the mental picture of a process server muttering "Hey, it's not the first time I've been told to go to Hell".
What about all the money various organizations collect and hold onto on God's behalf? Especially when they report that they're doing God's will, a skilled attorney should be able to come up with some agency, fiduciary or other theory to collect.
How do they break DNA if they're outside the cell nucleus?
Does the titanium dioxide in your sunscreen get taken up by skin cells? Does it even make it past the epidermis? (Not rhetorical questions, asking because I don't know).
Getting really weird, does this mean that if you're stuck without a first aid kit at the beach that you could substitute sunscreen for antibiotic ointment?
If your state elects the person who supervises elections, then donating to and volunteering for a reformist candidate can help.
In Washington State, an incumbent who has installed Diebold touch screens, optical scanners, and central tabulators is running against a software developer whose platform calls for transparency and integrity.
VoteHere had a solution to that, which was a tracking barcode on the ballot which a voter could use to check whether her ballot got scanned at the counting station. Cryptographic High Magic kept the ballot from being linked back to the voter, barring extensive collusion or some edge cases(*). This was field tested in one small county in Washington State, where it met with a lawsuit because state law does not permit any unique marking on a ballot at all and specifies "absolute" secrecy. King County, the big county that includes Seattle, decided against going with that system.
(*) The system limited the information you could get from someone's tracking code to "it's somewhere in the hundred ballots of batch N". Fine, except if processing is broken down by precinct, and if the precinct has only a few dozen people in it (common in Washington), and if only a fraction of those vote absentee, then the vote won't be lost in a batch of 100.
Levin was not the first to engineer an unauthorized wire transfer. Stanley Mark Rifkin stole 10.2 million dollars that way in 1978.
Frank Abagnale once committed a felony remarkable for its technical elegance. He printed some checks with contradictory routing and account information which, given the technology and human factors of the time, would go into an infinite loop in the clearinghouse system. He opened accounts with them, and closed the accounts after enough time elapsed that his victims figured the checks must have been good. Meanwhile the checks were running back and forth from coast to coast.
I've been playing with it in a Parallels virtual machine with 256M of RAM, on a 1.2GHz processor. It's functional and snappy, showing none of the problems you'd expect from a memory-constrained program.
>your browser will send Google a hashed, partial copy of the site's URL so that we can send more information about the risky URL. Google cannot determine the real URL
They're at least oversimplifying there.
At the very least they could store a watch list of hashes of particular URLs of interest, like say putinsucks.org. Someone with the resources of Google could store a hash of every commonly visited URL and compare it to the hash that Chrome sends to Google. I have no reason to believe they are doing that, or even that they'd be willing to, but something about the word "cannot" makes security people question any statement that contains it.
>If your machine's admin password is blank and you're not behind a NAT, you are completely exposed.
As of XP Service Pack 2, the built-in software firewall is on by default, and blank passwords disable network logins. Not that the security posture of the typical home machine is anything we'd consider decent, but it's not the same as running sshd with a blank root password would be.
Traffic analysis without cracking crypto is a huge and valuable source of intelligence. Knowing who's talking to whom is something spies really want to know, and it's something the people talking would often hate to have revealed. For a small-scale, down to earth example, look at the HP pretexting scandal.
McCain's Vietnam experience does show grit and character, but your main point is sound.
Obama is not qualified. McCain is not qualified. Nobody who has a chance of getting to run is qualified.
There's a science fiction story called "2066: Election Day" by Michael Shaara. In it, the master computer chooses the President, because the voters have proven to do such a bad job. It is programmed to select the "best qualified man". The story hinges on a constitutional crisis that came up because the programmers coded "best qualified man" not as the expected "Select max(qualified) from candidates" but as "select max(good) from candidates where qualified=true". The computer refused to select a President.
Being a citizen is hard work if you do it right, and if you do it right you can have influence beyond your own vote.
Which doesn't mean waste your time arguing and confronting people, it means drawing them out about what matters to them and pointing out how the candidate you back can help. It means researching the under-reported local races and sharing the results with neighbors who want to vote but don't know the candidates. It means making get-out-the-vote phone calls, and registration drives in friendly territory.
>It's a guarantee that someone else will not listen in on the conversation.
More precisely, it changes the vulnerability landscape so that an attacker has to install keylogging hardware or software. Since keylogging spyware exists in the wild, that's the first place to add safeguards.
Which is the more common threat in practice, passive sniffing or active man in the middle attacks? Which is more important to guard against?
What is the best precaution against man in the middle: trusting a third party to have a CPS adequate for your security needs, to honor it in practice, to protect their signing key, and not to be controlled by organized crime (and trusting a fourth party, your browser supplier, to include only trustworthy root CA public keys); or to check the self-signed cert's fingerprint against the previous session, as ssh does? The latter reduces the vulnerability window to the first time you visit a site, and even then you'll find out something went wrong when the phishing site goes away.
>Again, see article and peaceful oriented groups have already been infiltrated. Okay, my source is Roger Moore so a grain of salt the size of Canada is needed.
Here's a MSM source about the military spying on Quakers. In the Pentagon's favor, they admitted it was a mistake and said they'd purged nonviolent protest groups from their database. On the other hand, that was after they got caught.
Slashdot Mirror
Do you mean retrovirus?
Hantaviruses and HIV are both RNA viruses but they're different otherwise.
>no batteries last long when you're regularly charge/discharge cycling them.
(quibble)
Batteries can last a long time in the face of repeated charge/discharge cycles. One approach is to design the battery for it, choosing materials and accepting extra weight. Forklift batteries are an example of batteries that will take many cycles.
The other approach is to limit depth of discharge. There's an impressive sharp drop in battery durability if you regularly discharge below 50% capacity. The reason a Prius main battery can last 200,000 miles (proven on the road) is that it never deep-cycles.
(/quibble)
>she's just shifting the emissions to a power plant,
Correct, insightful, but it's still a good idea.
The power plant doesn't have to be optimized for variable output, low weight, or small size. It can have full-time people attending the pollution controls. The powerplant's smokestack isn't in the middle of a city a few feet from pedestrians.
I can't give you a cite, so take with your favorite grain of salt, but I've seen claims that by the time you take efficiency into account an electric car results in fewer greenhouse emissions than a gasoline car even if the electricity comes from coal.
Someone could resurrect the Anonym.os project, an OpenBSD live CD with anonymity tools.
A colleague where I live bought a set of routers from Goodwill and found not only default programming but a sheet of paper stuck inside with passwords.
The passwords were for a Department of Energy facility with nuclear activities.
I bet someone here has heard of an even weirder event.
I'd like to know more about this.
Aren't backbone-speed routers still big-bucks items?
How much of the money for renting a pipe and for filling it up goes to
o making payments on the routers
o making payments on the DSLAMS/(whatever the cable acronym is)/edge routers
o paying off the fiber
o making a reasonable profit on the fiber
o making an excess profit on the fiber
?
To put it another way, what would have to be bought and installed in order for US ISPs to be able to support the backhaul for a zillion residential subscribers at Japan-level connection speeds?
This is irresponsible advice. There are known-plaintext attacks on reduced-round variants of ROT13. Always use the full 16 rounds to be sure you're actually getting the security that double ROT-13 promises.
Someone in Arkansas sued the Devil once (along with the school board -- you may not want to know). It gave me the mental picture of a process server muttering "Hey, it's not the first time I've been told to go to Hell".
What about all the money various organizations collect and hold onto on God's behalf? Especially when they report that they're doing God's will, a skilled attorney should be able to come up with some agency, fiduciary or other theory to collect.
I sense a story idea here.
How do they break DNA if they're outside the cell nucleus?
Does the titanium dioxide in your sunscreen get taken up by skin cells? Does it even make it past the epidermis? (Not rhetorical questions, asking because I don't know).
Getting really weird, does this mean that if you're stuck without a first aid kit at the beach that you could substitute sunscreen for antibiotic ointment?
Aren't the magnetic fields in a Tokamak pretty intense? As in, you wouldn't want something ferromagnetic inside?
I thought the leading candidate was vanadium, for its low neutron capture cross section and quickly decaying activation products.
If your state elects the person who supervises elections, then donating to and volunteering for a reformist candidate can help.
In Washington State, an incumbent who has installed Diebold touch screens, optical scanners, and central tabulators is running against a software developer whose platform calls for transparency and integrity.
The challenger is Jason Osgood, and you can donate at Jason Osgood's contributions page.
VoteHere had a solution to that, which was a tracking barcode on the ballot which a voter could use to check whether her ballot got scanned at the counting station. Cryptographic High Magic kept the ballot from being linked back to the voter, barring extensive collusion or some edge cases(*). This was field tested in one small county in Washington State, where it met with a lawsuit because state law does not permit any unique marking on a ballot at all and specifies "absolute" secrecy. King County, the big county that includes Seattle, decided against going with that system.
(*) The system limited the information you could get from someone's tracking code to "it's somewhere in the hundred ballots of batch N". Fine, except if processing is broken down by precinct, and if the precinct has only a few dozen people in it (common in Washington), and if only a fraction of those vote absentee, then the vote won't be lost in a batch of 100.
Levin was not the first to engineer an unauthorized wire transfer. Stanley Mark Rifkin stole 10.2 million dollars that way in 1978.
Frank Abagnale once committed a felony remarkable for its technical elegance. He printed some checks with contradictory routing and account information which, given the technology and human factors of the time, would go into an infinite loop in the clearinghouse system. He opened accounts with them, and closed the accounts after enough time elapsed that his victims figured the checks must have been good. Meanwhile the checks were running back and forth from coast to coast.
I've been playing with it in a Parallels virtual machine with 256M of RAM, on a 1.2GHz processor. It's functional and snappy, showing none of the problems you'd expect from a memory-constrained program.
>your browser will send Google a hashed, partial copy of the site's URL so that we can send more information about the risky URL. Google cannot determine the real URL
They're at least oversimplifying there.
At the very least they could store a watch list of hashes of particular URLs of interest, like say putinsucks.org. Someone with the resources of Google could store a hash of every commonly visited URL and compare it to the hash that Chrome sends to Google. I have no reason to believe they are doing that, or even that they'd be willing to, but something about the word "cannot" makes security people question any statement that contains it.
>If your machine's admin password is blank and you're not behind a NAT, you are completely exposed.
As of XP Service Pack 2, the built-in software firewall is on by default, and blank passwords disable network logins. Not that the security posture of the typical home machine is anything we'd consider decent, but it's not the same as running sshd with a blank root password would be.
There's also what looks like an 11-year cycle in direct satellite measurements of solar output. Wikipedia's article "Solar Variation" has some more curves to peruse.
Traffic analysis without cracking crypto is a huge and valuable source of intelligence. Knowing who's talking to whom is something spies really want to know, and it's something the people talking would often hate to have revealed. For a small-scale, down to earth example, look at the HP pretexting scandal.
Bruce Schneier once chatted with the president of Verisign about how much it would cost to compromise Verisign's root signing key.
They figured that organized crime could swing a leveraged buyout for USD15 million.
(Any errors in the above are my fault).
McCain's Vietnam experience does show grit and character, but your main point is sound.
Obama is not qualified. McCain is not qualified. Nobody who has a chance of getting to run is qualified.
There's a science fiction story called "2066: Election Day" by Michael Shaara. In it, the master computer chooses the President, because the voters have proven to do such a bad job. It is programmed to select the "best qualified man". The story hinges on a constitutional crisis that came up because the programmers coded "best qualified man" not as the expected "Select max(qualified) from candidates" but as "select max(good) from candidates where qualified=true". The computer refused to select a President.
Being a citizen is hard work if you do it right, and if you do it right you can have influence beyond your own vote.
Which doesn't mean waste your time arguing and confronting people, it means drawing them out about what matters to them and pointing out how the candidate you back can help. It means researching the under-reported local races and sharing the results with neighbors who want to vote but don't know the candidates. It means making get-out-the-vote phone calls, and registration drives in friendly territory.
>It's a guarantee that someone else will not listen in on the conversation.
More precisely, it changes the vulnerability landscape so that an attacker has to install keylogging hardware or software. Since keylogging spyware exists in the wild, that's the first place to add safeguards.
Which is the more common threat in practice, passive sniffing or active man in the middle attacks? Which is more important to guard against?
What is the best precaution against man in the middle: trusting a third party to have a CPS adequate for your security needs, to honor it in practice, to protect their signing key, and not to be controlled by organized crime (and trusting a fourth party, your browser supplier, to include only trustworthy root CA public keys); or to check the self-signed cert's fingerprint against the previous session, as ssh does? The latter reduces the vulnerability window to the first time you visit a site, and even then you'll find out something went wrong when the phishing site goes away.
>Again, see article and peaceful oriented groups have already been infiltrated. Okay, my source is Roger Moore so a grain of salt the size of Canada is needed.
Here's a MSM source about the military spying on Quakers. In the Pentagon's favor, they admitted it was a mistake and said they'd purged nonviolent protest groups from their database. On the other hand, that was after they got caught.