Have you heard of the concept of attack surface? HTML5 can do scripting, it can include remote files, with a lot of media types, and dozens of underlying handling libraries.
Asking for login credentials is a simple and security-critical task. Implementation should be kept as simple as possible IMO
Do you advocate making security component design decisions based on the existence of implementation exploits? i.e. like "I see a risk there, but I think nobody will try to exploit it so let us do it anyway."
In other countries it is common to see tearful government officials handcuffed and walked in front of tv cameras.
Sure, US justice is truly independent from executive power, and generally speaking, US separation of powers is quite good. But it does not address the lack of democracy, and the fact that citizen votes will have zero effect on many policies (because of a bipartisan system where both parties agree on many things, and because of the power of lobbying).
Perp walks gives you the illusion that the thing is under control, but the handcuffed government officials will be replaced by another one that will do exactly the same things.
Humans have two modes of interaction: cooperation and competition. Cooperation is at work when building societies, and it is always odd to see that competitive corporations is allowed by a legal framework (patent, private property) that is a byproduct of cooperation-built society.
Just to be informative, french legal work laws frame a 35 hours week, 5 weeks of hollidays, plus a maximum of 11 days bank holliday. This does not prevent France GDP per worker to be among the highest.
But this is not usually what is attacked when entrepreneurs complain about french work laws; Usually they are after social protection, which is funded by salaries. For 1 euro given to an employee, there is around 1 euro that goes to social welfare to pay unemployement, wealth and retirement insurances. This is mandatory and account for a quarter of France GDP.
Many entrepreneurs will tell you that this is an unbearable weight, but I am convinced that social welfare is a key ingredient to productivity. Workers freed from planning about unemployement, sickness and retirement may actually focus on their job.
France is also appreciated for workers education. Education remains affordable for student because it is funded through taxes (around 1/3 of government expenses). Infrastructures (also paid by taxes) are also often cited as a good reason for investing in France
In a nutshell, France work laws do bring strong worker protection, but this benefits to everyone. Taxes are indeed high, but the money is not wasted as some tend to tell us.
The company wants to "avoid France's notoriously onerous labor laws", but it still operates in France, rather than India or China. There must be some reason for that choice. Perhaps some reason paid by taxes, or even guaranteed by labor laws...
Never trust a salesman when he wants to make you buy something. He gets bonus based on how much you buy, which means he has an incentive to fool you. A good test is suggesting that if you replace gear now, you could switch to another supplier.
It is true for any enterprise, whether being an university or a corporation. Things are done well or badly by humans, not by the walls that surround them, or the uniforms they wear. Policy that try to turn individuals into disposable resource might succeed at industrialize something well known, but it will starve at being remarkable.
I'm not cut out to be a doctor. I'm probably smart enough to do the job, but I don't have the mindset for it, nor really the interest. So, I'd probably make a shitty doctor.
But you know enough about health to know when you have to see a doctor. And perhaps you know enough to detect a doctor that have not been up to date for a decade; If you do it can save you time and trouble.
Sure, but once the treaty is signed, if there is no judicial body to settle interpretation issues, sovereign nations are left able to interpret ambiguous sentences however they want. If the treaty requires strong protection but not explicitely requires software patent, then I see no obligation to add patents to copyright.
The Trans-Pacific Partnership agreement, to which New Zealand is a signatory, is set to mandate (among many trade "enabling" issues) a strong set of intellectual property rights homologation between involved countries.
Software is already strongly protected by copyright, hence removing software patents should not cause concerns, should it?
> with thestated aim usually to preserve social order
I do believe this is the reason dictators give.
While I am not convinced that central snooping is necessary for that, we have to admit that it may be a real challenge to keep social order in a country with multiple languages, religions and ethnic groups, and huge wealth differences. In fact I always admired that India managed to remain a democratic nation, given the challenges it faces.
All this stuff assume optical link cannot be taped. When I studied fibers at university, I recall being told about evanescent wave. Is it possible to infer some information from it without being detected? If not, how is it prevented?
I just red TFA, it seems there is a big scalability problem, as the network uses a central hub, and each node must have a direct optic fiber connection to the hub. The central hub security is critical, so we have a huge Single Point Of Failure.
Slashdot Mirror
Not many can manage that unfortunately.
I understand this is the point of TFA
Is it doomed to raise? If you build a datacenter with its own solar, wind and hydroelectric power supplies, why would the price raise?
Have you heard of the concept of attack surface? HTML5 can do scripting, it can include remote files, with a lot of media types, and dozens of underlying handling libraries.
Asking for login credentials is a simple and security-critical task. Implementation should be kept as simple as possible IMO
Do you advocate making security component design decisions based on the existence of implementation exploits? i.e. like "I see a risk there, but I think nobody will try to exploit it so let us do it anyway."
In other countries it is common to see tearful government officials handcuffed and walked in front of tv cameras.
Sure, US justice is truly independent from executive power, and generally speaking, US separation of powers is quite good. But it does not address the lack of democracy, and the fact that citizen votes will have zero effect on many policies (because of a bipartisan system where both parties agree on many things, and because of the power of lobbying).
Perp walks gives you the illusion that the thing is under control, but the handcuffed government officials will be replaced by another one that will do exactly the same things.
Humans have two modes of interaction: cooperation and competition. Cooperation is at work when building societies, and it is always odd to see that competitive corporations is allowed by a legal framework (patent, private property) that is a byproduct of cooperation-built society.
As opposed to another country that has free speech, but citizen votes have no effect at all on most outcome.
HTML 5 support at the login manager seems an horrible idea, which will be exploited at some time to steal authentication credentials.
But that method is an offense, and therefore it is not workable for a law abiding site or corporation.
Who can they know that password is not reused from another service such as gmail, facebook, or whatever?
Just to be informative, french legal work laws frame a 35 hours week, 5 weeks of hollidays, plus a maximum of 11 days bank holliday. This does not prevent France GDP per worker to be among the highest.
But this is not usually what is attacked when entrepreneurs complain about french work laws; Usually they are after social protection, which is funded by salaries. For 1 euro given to an employee, there is around 1 euro that goes to social welfare to pay unemployement, wealth and retirement insurances. This is mandatory and account for a quarter of France GDP.
Many entrepreneurs will tell you that this is an unbearable weight, but I am convinced that social welfare is a key ingredient to productivity. Workers freed from planning about unemployement, sickness and retirement may actually focus on their job.
France is also appreciated for workers education. Education remains affordable for student because it is funded through taxes (around 1/3 of government expenses). Infrastructures (also paid by taxes) are also often cited as a good reason for investing in France
In a nutshell, France work laws do bring strong worker protection, but this benefits to everyone. Taxes are indeed high, but the money is not wasted as some tend to tell us.
The company wants to "avoid France's notoriously onerous labor laws", but it still operates in France, rather than India or China. There must be some reason for that choice. Perhaps some reason paid by taxes, or even guaranteed by labor laws...
Never trust a salesman when he wants to make you buy something. He gets bonus based on how much you buy, which means he has an incentive to fool you. A good test is suggesting that if you replace gear now, you could switch to another supplier.
They forgot to specify the unit. Is it 0.5 hundredth of pounds per gallon?
It is true for any enterprise, whether being an university or a corporation. Things are done well or badly by humans, not by the walls that surround them, or the uniforms they wear. Policy that try to turn individuals into disposable resource might succeed at industrialize something well known, but it will starve at being remarkable.
His point could have been made better.
I'm not cut out to be a doctor. I'm probably smart enough to do the job, but I don't have the mindset for it, nor really the interest. So, I'd probably make a shitty doctor.
But you know enough about health to know when you have to see a doctor. And perhaps you know enough to detect a doctor that have not been up to date for a decade; If you do it can save you time and trouble.
I've never thought the people at M$ were stupid, or incapable. Their problem is that the company's run by marketers instead of engineers.
Which is bad for product quality, but at least it is better than a company run by financial people: buy, resell intellectual property, go bankurpt.
Those odd factor-60 minutes and hours should die
There has been an attempt at decimal time during the french revolution, but it did not catch up
Sure, but once the treaty is signed, if there is no judicial body to settle interpretation issues, sovereign nations are left able to interpret ambiguous sentences however they want. If the treaty requires strong protection but not explicitely requires software patent, then I see no obligation to add patents to copyright.
The Trans-Pacific Partnership agreement, to which New Zealand is a signatory, is set to mandate (among many trade "enabling" issues) a strong set of intellectual property rights homologation between involved countries.
Software is already strongly protected by copyright, hence removing software patents should not cause concerns, should it?
> with thestated aim usually to preserve social order
I do believe this is the reason dictators give.
While I am not convinced that central snooping is necessary for that, we have to admit that it may be a real challenge to keep social order in a country with multiple languages, religions and ethnic groups, and huge wealth differences. In fact I always admired that India managed to remain a democratic nation, given the challenges it faces.
it (...) is to 'open up personal aviation to all of humanity.'
all of humanity... that is wealthy enough to afford it.
All this stuff assume optical link cannot be taped. When I studied fibers at university, I recall being told about evanescent wave. Is it possible to infer some information from it without being detected? If not, how is it prevented?
I just red TFA, it seems there is a big scalability problem, as the network uses a central hub, and each node must have a direct optic fiber connection to the hub. The central hub security is critical, so we have a huge Single Point Of Failure.
Perhaps one day I will purchase goods from grocery over internet and have them delivered by a drone directly in my kitchen?