I've sliced myself open crushing cans before. You can twist them into pretty sharp points, or even get the aluminum to tear, and get a nice long sharp edge.
How about the first one to stand up with a gun gets his ass handed to him on a plate by everyone sitting next to him. He can't shoot them all at once. If theres more than one, now the non-terrorists have a gun to fight back with.
You can't even set your shoes on fire without getting everyone involved, these days, what makes you think that people are going to just let this happen?
If you could get some programming into the cash register, it would be easy to generate a password that prints on the receipt, and sets the AP to allow that password to work for N minutes.
The hard part is identifying the customer. It's unlikely most would know what their MAC address is, and you can't hand out encryption keys like this since you'd have to change the encryption key for everyone at the same time. Instead, you'd have to have something that determines whether a MAC is known, if its not known, then all the page requests get redirected to the buy-something-and-login site, where they enter their receipt key, it tells them how much time they have, and a URL to keep track of it. Then, a cron job makes the system forget expired MAC addresses.
Doing it this way seems to be the best balance of security, functionality, privacy, and not spending 20 minutes holding up the line while explaining how to log into their system.
there is no real incentive for the average user to convert to IPv6.
Good thing we have gamers and power users to lead the way! Who wants to share an IP with roommates when it means you can't frag each other on the same server because the server sees 4 connections from the same IP and drops them all?
The way I see it, gamers and businesses will lead the way. The first time a major company has to merge a 10.x.y.z network with a recent acquisition's 10.x.y.z network, they're going demand that their ISP makes it work or they'll find someone else who can. IPv4 backwards compatability will make sure that nobody loses touch with anyone else. Once IPv6 is out there, expect ISPs to start carrying it as an "advanced" option in the small print.
I suppose it just takes one jackass employee to start speculation.
Only if you make the same assumption these "experts" did: that ONLY people who worked with eEye could have POSSIBLY figured out that there was an exploitable hole, and that nobody else out there in the world had any idea how to go about looking for them.
The interesting thing is that I'll be starting my third year with this 3 year old startup in the fall. While I had intended what I had said before to apply to larger corporations, now that I think about it the fact that its a startup changes very little, only that when you only have 4 cogs, if one goes missing even for a minute, they all stop turning, so yes, you do in fact matter more. Without a large machine to provide the torque, replacing you with an inexact match won't prove as easy as in the giant corporation where your replacement would be bent into shape quickly.
As for where this viewpoint came from, I've seen family and friends who were chewed up and spit out by these machines (is it any wonder why drinking seems to be such a problem these days?). I've even had a brush or two with them myself before settling into a pattern of sticking to small companies where "I Matter". Of those, I've been to a few where I didn't matter as much as I thought I did, and others where it didn't really matter anyway, since those ventures failed to be the 1 in 5 companies that "make it", but despite that, I can come home every day without feeling like I need a stiff drink (though sometimes I take a look at some sub-contractor's code and wonder whether if I were drunk too, I'd understand it;).
Re:I'm not a Californian
on
Tinfoil Hat House
·
· Score: 4, Insightful
Any other state and they'd merely be shunned by their neighbors and harrassed by annoying teenagers.
Where the hell do you live? I want to move there so I can quit being harassed by my homeowners' association for having my antenna in the "wrong place". It was "hurting the value of their investment", not that the mandated ugly gray and brown houses are all that great anyway.
Anywhere where there are no associations has to be a better place to live than here, even if the house isn't a "great investment" without a bunch of old biddies who take hundreds of dollars of my money then can't even afford to pay a bored neighborhood kid $20 to mow the yard for the old woman down the street that they've been harassing as well.
There is/was a view out there that somehow you could do things like raise your kids while simultaneously working in a holistic fairyland where you live and work in the same place.
The view that people are desparately clinging to isn't some weird crap like this, though there was certainly a period of time where telecommuting was in vogue.
The view they want is "I Matter". They want to be in positions where they are irreplacable. They want to be recognized for that special thing they bring into the company. They want that special thing to bring them fame and fortune.
Unfortunately, in reality people don't matter. Labor is replacable. Skills are replacable. Everyone from the lowest position even to the CEO is merely a cog, spinning in place until they wear out and another cog comes along close enough in shape that a few turns wears it down to a correct match. CxOs are certainly larger cogs, but even executives turn in their own dance to their own tune, and even though their steps aren't familiar to the smaller cogs, one misstep can still lead to replacement.
Wouldn't you rather believe the first? That someone out there other than your direct family cares about you, not merely how well the machine turns this quarter?
I often wonder in these massive union/company disputes - does the company ever approach the unions *first* to discuss these kind of issues?
In fairness to both sides, the answer is usually yes. After all, these disputes don't materialize out of thin air, and we don't hear about the vast majority of "less massive" disputes because they get solved without involving the public.
Is this old hat, or would there be good value to open-sourcing it? I'll likely never commercialize it on my own.
This actually sounds pretty interesting to me. I'd be interested in learning how to do this, though I'd probably never get around to doing anything with your code either;)
The amusing thing is that even if he did spell it wrong, Xen is still quite useful.
Lets say I have a webserver running that MUST NOT STOP. Except that, horror of horrors, someone discovers a buffer overflow in Apache, and someone exploiting that would most definitely stop the webserver. So I clone the running VM's drive space, start a new VM, patch its apache, perform rigorous testing, and then redirect new connections from the old VM to the new VM, wait for existing connections to dry up, then close down the old VM.
Sure, this takes more effort, and probably isn't something a cheap MCSE would figure out on their own, but your online investment site remains up and nobody sues you because they couldn't execute their stock sell order in the 2 minute window that your server was down and the stock price hit all time highs before dropping off.
Man, I open one little hole in the firewall so I can see this cool attachment my new friend in Ubuntsuwala sent me, and I'll never hear the end of it. Microsoft got their source code stolen and nobody goes around calling them insecure!
Didn't your mother tell you never to microwave eggs? You should only do that when you have an emergency like needing to distract the flight attendant so you can grab an oxygen tank!
Wouldn't they have to download it to actually check that it is what they think it is?
Yes, they would.
(And thereby upload to others themselves at the same time.)
Not if they set it up behind a firewall. Sure, it'll be slow as hell, but they only need to request enough of an uncompressed ISO to confirm that it is what it says it is (ie, if they know where on the ISO their installer is, they can grab that chunk of data and prove that the file being distributed contains their installer, which is, of course, copyrighted.)
pretty hilarious to see a slashdot reader questioning the qualifications of a bank's security
Man, all these people questioning security specialits just ruin it for the rest of us. Just think, everyone's American passports would have been perfectly secure because nobody would know that the new RFID design would not use encryption at all. If everyone had simply assumed that the homeland security office actually understood what security means, and had never questioned them about it.
Odd, when I was at TAMU there, I moved into an apartment with no service and I could ge a dial tone. Attempting to call anyone got me SBC. Dialing 911 probably would have gotten me 911.
I suspect there's a difference between "no service" and "chainsaw wielding maniac cut the line".
the CSIRO actually use patents the way they were intended to be used. They invent something
Their patent reads like someone wrote the sentence "A system for connecting computers together using" and then merged that with an excel spreadsheet with dozens of buzzwords. If this is the shining example of how patents should be done, we are all doomed.
I'm going by RMS's idea of "free", in that he believes that all information should be world-viewable, regardless of one's possible desire to not show everything to the world. It's Stallman that said "Down with security!" since he wants access to *everything*.
And? The only thing you get across here is that it's obvious that you're not a believer in the "many eyes" model of debugging.
Other than the fact that you don't believe in it, do you care to explain why you think this is tripe?
This "I have a right to YOUR source code" nonsense goes past what "free" really means.
I suspect you don't understand what exactly is "free" in this situation.
The GPL makes sure the code stays free. Remember "information wants to be free"? The FSF doesn't care about the programmers, as long as the code remains free.
If you don't like it, don't use the GPL, don't contribute code to a GPL project, and for heaven's sake don't use the Linux kernel because you're too cheap to come up with an OS of your own or buy a ready-made one for your dvd player then whine when people bitch at you.
I tried snorting that angle dust once. You have to be careful, the good stuff is nothing but right angles. If you get the cheap shit, you end up with nothing but obtuse angles that don't even fit in your nose, or worse, acute angles that scratch and sting like hell.
Slashdot Mirror
I've sliced myself open crushing cans before. You can twist them into pretty sharp points, or even get the aluminum to tear, and get a nice long sharp edge.
How about the first one to stand up with a gun gets his ass handed to him on a plate by everyone sitting next to him. He can't shoot them all at once. If theres more than one, now the non-terrorists have a gun to fight back with.
You can't even set your shoes on fire without getting everyone involved, these days, what makes you think that people are going to just let this happen?
Thats all you need if you prevent people from taking too many guesses.
Two problems. First, the receipt numbers are usually sequential. Once you've bought your cup of coffee, you just keep using bigger numbers.
Also, how do you get the transaction number from the register to the AP/firewall/whatever?
If you could get some programming into the cash register, it would be easy to generate a password that prints on the receipt, and sets the AP to allow that password to work for N minutes.
The hard part is identifying the customer. It's unlikely most would know what their MAC address is, and you can't hand out encryption keys like this since you'd have to change the encryption key for everyone at the same time. Instead, you'd have to have something that determines whether a MAC is known, if its not known, then all the page requests get redirected to the buy-something-and-login site, where they enter their receipt key, it tells them how much time they have, and a URL to keep track of it. Then, a cron job makes the system forget expired MAC addresses.
Doing it this way seems to be the best balance of security, functionality, privacy, and not spending 20 minutes holding up the line while explaining how to log into their system.
there is no real incentive for the average user to convert to IPv6.
Good thing we have gamers and power users to lead the way! Who wants to share an IP with roommates when it means you can't frag each other on the same server because the server sees 4 connections from the same IP and drops them all?
The way I see it, gamers and businesses will lead the way. The first time a major company has to merge a 10.x.y.z network with a recent acquisition's 10.x.y.z network, they're going demand that their ISP makes it work or they'll find someone else who can. IPv4 backwards compatability will make sure that nobody loses touch with anyone else. Once IPv6 is out there, expect ISPs to start carrying it as an "advanced" option in the small print.
I telnet into his too, though I just capture his traffic.
When they get around to rebuilding their kernel and hitting Y next to ip6tables.
I suppose it just takes one jackass employee to start speculation.
Only if you make the same assumption these "experts" did: that ONLY people who worked with eEye could have POSSIBLY figured out that there was an exploitable hole, and that nobody else out there in the world had any idea how to go about looking for them.
I'm three years into employment with a startup
;).
The interesting thing is that I'll be starting my third year with this 3 year old startup in the fall. While I had intended what I had said before to apply to larger corporations, now that I think about it the fact that its a startup changes very little, only that when you only have 4 cogs, if one goes missing even for a minute, they all stop turning, so yes, you do in fact matter more. Without a large machine to provide the torque, replacing you with an inexact match won't prove as easy as in the giant corporation where your replacement would be bent into shape quickly.
As for where this viewpoint came from, I've seen family and friends who were chewed up and spit out by these machines (is it any wonder why drinking seems to be such a problem these days?). I've even had a brush or two with them myself before settling into a pattern of sticking to small companies where "I Matter". Of those, I've been to a few where I didn't matter as much as I thought I did, and others where it didn't really matter anyway, since those ventures failed to be the 1 in 5 companies that "make it", but despite that, I can come home every day without feeling like I need a stiff drink (though sometimes I take a look at some sub-contractor's code and wonder whether if I were drunk too, I'd understand it
Any other state and they'd merely be shunned by their neighbors and harrassed by annoying teenagers.
Where the hell do you live? I want to move there so I can quit being harassed by my homeowners' association for having my antenna in the "wrong place". It was "hurting the value of their investment", not that the mandated ugly gray and brown houses are all that great anyway.
Anywhere where there are no associations has to be a better place to live than here, even if the house isn't a "great investment" without a bunch of old biddies who take hundreds of dollars of my money then can't even afford to pay a bored neighborhood kid $20 to mow the yard for the old woman down the street that they've been harassing as well.
Isn't it just as bad for IBM to lay me off mid-stream on my mortage/rent/car payment/etc as it is bad of me to quit mid-stream on their project?
/. I'd say IBM is taking a reputation hit too.
Judging from the response on
There is/was a view out there that somehow you could do things like raise your kids while simultaneously working in a holistic fairyland where you live and work in the same place.
The view that people are desparately clinging to isn't some weird crap like this, though there was certainly a period of time where telecommuting was in vogue.
The view they want is "I Matter". They want to be in positions where they are irreplacable. They want to be recognized for that special thing they bring into the company. They want that special thing to bring them fame and fortune.
Unfortunately, in reality people don't matter. Labor is replacable. Skills are replacable. Everyone from the lowest position even to the CEO is merely a cog, spinning in place until they wear out and another cog comes along close enough in shape that a few turns wears it down to a correct match. CxOs are certainly larger cogs, but even executives turn in their own dance to their own tune, and even though their steps aren't familiar to the smaller cogs, one misstep can still lead to replacement.
Wouldn't you rather believe the first? That someone out there other than your direct family cares about you, not merely how well the machine turns this quarter?
I often wonder in these massive union/company disputes - does the company ever approach the unions *first* to discuss these kind of issues?
In fairness to both sides, the answer is usually yes. After all, these disputes don't materialize out of thin air, and we don't hear about the vast majority of "less massive" disputes because they get solved without involving the public.
Is this old hat, or would there be good value to open-sourcing it? I'll likely never commercialize it on my own.
;)
This actually sounds pretty interesting to me. I'd be interested in learning how to do this, though I'd probably never get around to doing anything with your code either
The amusing thing is that even if he did spell it wrong, Xen is still quite useful.
Lets say I have a webserver running that MUST NOT STOP. Except that, horror of horrors, someone discovers a buffer overflow in Apache, and someone exploiting that would most definitely stop the webserver. So I clone the running VM's drive space, start a new VM, patch its apache, perform rigorous testing, and then redirect new connections from the old VM to the new VM, wait for existing connections to dry up, then close down the old VM.
Sure, this takes more effort, and probably isn't something a cheap MCSE would figure out on their own, but your online investment site remains up and nobody sues you because they couldn't execute their stock sell order in the 2 minute window that your server was down and the stock price hit all time highs before dropping off.
but their source code itself was stolen, correct?
Man, I open one little hole in the firewall so I can see this cool attachment my new friend in Ubuntsuwala sent me, and I'll never hear the end of it. Microsoft got their source code stolen and nobody goes around calling them insecure!
eggs in the microwave first.
Didn't your mother tell you never to microwave eggs? You should only do that when you have an emergency like needing to distract the flight attendant so you can grab an oxygen tank!
Wouldn't they have to download it to actually check that it is what they think it is?
Yes, they would.
(And thereby upload to others themselves at the same time.)
Not if they set it up behind a firewall. Sure, it'll be slow as hell, but they only need to request enough of an uncompressed ISO to confirm that it is what it says it is (ie, if they know where on the ISO their installer is, they can grab that chunk of data and prove that the file being distributed contains their installer, which is, of course, copyrighted.)
can they prove someone has the infringing file, if they only transmit PART of the file?
Yes, because the clients broadcast how much of the file they have.
If you don't think thats enough for a warrant, go down to the local police station and start shouting that you're carrying a pound of crack.
pretty hilarious to see a slashdot reader questioning the qualifications of a bank's security
Man, all these people questioning security specialits just ruin it for the rest of us. Just think, everyone's American passports would have been perfectly secure because nobody would know that the new RFID design would not use encryption at all. If everyone had simply assumed that the homeland security office actually understood what security means, and had never questioned them about it.
Odd, when I was at TAMU there, I moved into an apartment with no service and I could ge a dial tone. Attempting to call anyone got me SBC. Dialing 911 probably would have gotten me 911.
I suspect there's a difference between "no service" and "chainsaw wielding maniac cut the line".
the CSIRO actually use patents the way they were intended to be used. They invent something
Their patent reads like someone wrote the sentence "A system for connecting computers together using" and then merged that with an excel spreadsheet with dozens of buzzwords. If this is the shining example of how patents should be done, we are all doomed.
I'm going by RMS's idea of "free", in that he believes that all information should be world-viewable, regardless of one's possible desire to not show everything to the world. It's Stallman that said "Down with security!" since he wants access to *everything*.
And? The only thing you get across here is that it's obvious that you're not a believer in the "many eyes" model of debugging.
Other than the fact that you don't believe in it, do you care to explain why you think this is tripe?
This "I have a right to YOUR source code" nonsense goes past what "free" really means.
I suspect you don't understand what exactly is "free" in this situation.
The GPL makes sure the code stays free. Remember "information wants to be free"? The FSF doesn't care about the programmers, as long as the code remains free.
If you don't like it, don't use the GPL, don't contribute code to a GPL project, and for heaven's sake don't use the Linux kernel because you're too cheap to come up with an OS of your own or buy a ready-made one for your dvd player then whine when people bitch at you.
angle dust
I tried snorting that angle dust once. You have to be careful, the good stuff is nothing but right angles. If you get the cheap shit, you end up with nothing but obtuse angles that don't even fit in your nose, or worse, acute angles that scratch and sting like hell.