Your missing the point that they are the telco. I know they are selling the server at a loss on the DSL side of the house but the telco side is seeing profits from it and feeding that back to the DSL side. This is pretty classic monopalistic behaviour the telco side of the businees charges 40 a month or whatnot for DSL serviceto everybody. The DSL side sells at a loss but it paying back every cent they get to the telco side and then in turn getting more money from the telco side to support a nonprofitable segment. (IN SBC CT at least DSL and Telco are two different divisions so they dont have to pay union wages to the DSL guys.)
I think the problem with schemes like this is to many people will have to write them down to figure it out. Persoanly I learned a system at IBM to make passwords that you dont remember the letters but the finger positions. Great when your changing passwords weekly or monthly they are VERY quick to learn type them a few times and your set but you need a keyboard to remember the letters if you touch type.
Actualy from somebody that lives within SBC land SBC charges less for the first year than they charge another telco to resell the line. When you can get a 29.99 line from the telco or a 50 from an ISP there isn't any real compotition.
More importantly depending on how well the network is secured a DHCP address realy dosent mean much it could have simply been taken over modern DHCP servers ping the address before leasing it so if you just staic IP the box you might know what subnet they are on. That isolates you to the vlan but from there most switches dont log cam entries so there is no good way to say what port that address was on.
I think you should put the blame squarly where it belongs the applications that dont nat (pat) well are broken. UDP can easily be used to have two hosts behind a firewall talk assuming they can talk to a group of non natted servers first. There are protocals to request tcp ports be forwarded from specific hosts. Even with that being said I think everybodys issues are not with NAT devices but rather PAT devices NAT does not realy conserve IP addresses rather it translates them PAT translates ports unfortunatly low end devices incorectly call it NAT.
Well I havent had any issues just go login to your CCO account and grab the new IOS's actualy my local mirror updated yesterday automaticaly. As for going through TAC thats allways a PITA to say a couple hundred dollars a year.
I dont think it's a question of a man being braught to justice as a result of the DNA sample it's about collecting databases of these things. Fingerprints take time to gather and proccess I'm not persoanly a big fan of them in there current form people that are arrested and fingerprinted and go into the system. They have not nessicarily commited a crime just been accused of one. Even if they are release with a sorry it was a mistake sorry to inconvience you they now have a record in the system. If at a later date they happen to commit a crime or have just been a random person at a crime scene they will get pulled in and questioned as a suspect. Thorw this into a system were people confess to things just to stop the harrassment of poliece officers during questioning. And it become the frighning reality that we have now it dossent affect surburbia much so it's allowed.
Now comes DNA if it becomes easy to process and there are large databases avalible just begging for a court order to get at them say from every paternity test to genetic screening sfor illness that may start becomming more commonplace to simple collecting it from a trash bag on the curb. From this you can extrapalate a different society that crime may be down but if your DNA happens to be found your automaticaly suspect and DNA is not something you can avoid leaving around in public like fingerprints.
Better yet what part of GPS is jammable do people not understand? A ship is pretty safe it has a big margin of error. Now it's nice to use GPS to guide things what happens when the kid down the road starts messing up the system. Yes you can have a good inertial guidance as backup potentialy a good referance correction (DOT uses them plant a GPS on a known fixed point and tranmit how much it's off moment to moment to get sub centimeter accuracy)
Your talking about 20 years of difference in society. Hackers breaking into computers was something that happened 20 years ago because they were there. I would hazard to say that those same people today arent breaking into other peoples systems without consent anymore. Remember its a term about 30 years from before the days of home computers when unless you worked for or went to school someplace that had proccessing power you didn't have any means of using a computer with any apreciable power legaly.
And as a past system admin (back long long ago:), yes any signs of break should illicit a complete restore there are to many places to leave a nasty bit of code. In th modern age if you dont design your systems as pretty disposable you are realy engineering yourself into a corner.
Hackers traditionaly hold to the ethic of do no harm. It's one thing to get into a box poke around get some evidence that you were there and not damamge anything besides covering your tracks (and thats a bit of a new thing due to the excessive laws against it) A script kiddie is just that a script kiddie lets try to not confuse the two. If they call themselves a hacker thats fine it dosent make it true. The hackers of the world know who they are and how to tell there own.
You still have to specify a distance for under 5 grand I can run to NYC from CT with a 192 point to point actauly I can run multiple 192's depending on how much one time cost for WDM gear I want to plunk down. Also remember that tapes realy have a finite bandwith of there read and write speed and thats not even close to a decent OC connection until you hit something newer like Ultrim. The latency stinks and the round trip delay with humans in the mix is awfull. Your TCO is pretty bad as well as tapes die and tape heads have maitnence issues assuming your running multiple tape heads thats nearly 4 full time staff positions to change tapes 24/7. Assuming they make a minimum living of 30k a year and you have a 1.5 multiplier thats 180k of personel costs or 15k a month in people. That 15k could be moved over to leased fiber costs and your talking about a link half way across the USA. If your a school and have dirt cheap aka nearly work for free grad students this changes the numbers. Always remember a leased line thats at OC classes is general more expensive and a fiber or a lambda due to tariff structures and in general the way things work. Now granted I'm a Net Arch so I'm biased towards networks.
RedHat 7.3 is older yes but it's been around the corprate world and is about the current level of support. I work with a lot of comercial linux software and for most redhat 7.3 is the latest supported version. As for rehat in general lets face it support bugets are only so big so you pick one release of Linux and go with it why redhat? Well for starters thats the version thats officialy supported on IBM Big iron. They have the RHCE program so you can at least get a person with some paperwork behind them. And finialy they have there server version with a slowed down release cycle. One of Linux's major program with big corprate acceptance is it's quick release cycle remember in a big corp envirnement it may be 3 months of testing before a new release is certified as production. Thats a lot of man hours that they only want to expend every now and again not every 6 months on the upgrade tredmill.
Now it would be nice if they took Nvidia's approach a chell script that does all the heavy lifting including a custom compile.
Power sizing is pretty easy a standard 6509 has two 1600 watt PSU's that are load sharing and redundant and guess what it just wont initilize power if it goes over its budget powerwise. If your UPS and Gen sets arent up to running the devices at RATED draw then whoever pluged the devices into the UPS is a moron that sould not be allowed to use a computer never mind enginerr a big switch like that. Spec calls for 2 20 amp connectors to power the unit each of thse connectors should be on it's own breaker perferably to different UPS's and gen sets. Thats basic power redundancy. If your not concerned about longer outages you just wire them into a pair of UPS's that last I checked were bigger than the 6509 if you wanted more than 3 minutes of run time. Generaly an eletrician comes in to do this wiring because you dot find the 30amp twist lock plugs the portable UPS's use on the wall or the 20 amp twist locks the 6509 uses (or those ugly 20 amp 110 plugs that I've seen people take a pare of pliers to and insert into a normal 5-15p wall socket again because the fire marshal should fine them and the eletrical inspector) Oh yea in general devices that use PoE are worthless without the switch functioning anyway.
Actualy it works VERY well for there voIP phones and a few other devices like intel AP's and mini managed switches. It' DC and nut much current enough the run a laptop and probably not enough for a full desktop replacement. Last I check it supplied 18 watts.
While your at it allwasy remember that the USA's freedom was one by a group of terrorists there is no real line between terrorist and freedom fighter.
As to invasion yup we did and will probably do it again. Personaly I see this as the right of any soverign nation to declare war and invade another if they are not doing what they want them to this is how politics used to get done. It all boils down to if you beleive that ultimatly the people have power or some body of law has power. The UN in a lot of ways was designed to keep less powerfull countries oppressed and give the powerfull nations of the time carte blanch.
You seem to understand the basics after that it's mostly the normal PBX functions that are very propriatary. VoIP realy just replaces the well know analog and digital point to point circuts to run over a packet switched network besides ATM. On the network side QOS becomes very important as jitter can be a killer as it means more and more buffer and latency. Pretty much all the fancy stuff happens inside the VoIP PBX/server/router right now. Realy a headset on a PC is a realy poor method to make VoIP work at the worst end there are voice over IP blasters that is a USB device that makes an FXO (or the other one dont remember it's an inside line) that you connect a stanard phone to. This makes the VoIP transparent to normal use and thats important as it needs to just work. VoIP is pushing things like power over ethernet because the phones cant go off when the power dies but little UPS's and generator hoopups isn't an option to every extension but keeping the switch going is normaly allready taken care of.
Buildings have been providing services like this to the internet for years now. I worked with a company back in the mid 90's that braught a DS3 into a building then sold it off to tennants handing them off ethernet and managed firewalls. Even at a DS3 that costs about 10 times as much as a T1 and has 30 times to carring capacity it's a decent return.
FedEx is more cost effective if latency and manpower are not issues. Though if your still using T1's for data your probably dont have much in the way of data transfer needs T1's are horidly expensive compared to there carring capacity. Often for 10-20 times the cost of a T1 I can get an OC3 link thats have 100 times the carring capacity only usefull if you need the move data all the time. There is also the use of Satalites they can get OC3 speeds at a cost of about 500 an hour assuming all the office are visiable under one footprint (domestic). Very rarely will it be cheaper to have remote data father out than a MAN setting.
I think there not surrently going after people that DL music as much as those at UL it. Proof is pretty easy just download a few songs as they know everybody that has the rights to distribute those songs it's pretty easy for them to figure out you dont. One of the problems of Kazza Napster etc is they are public and unprotected, technicaly a little ELUA verbage and you can make a closed system but by doing so you allmost instatly loose any pretense of being a public service.
No it's taking that long because Mulicast is imposible to get paid for in todays pricing structures. Thik of it this way I get a DSL connections with 128k up pretty sandard pay 40 bucks a month for it. OK now comes IPv6 multicast is REQUIRED to work so I can send a file at 128k all day to as many people wanted to retreive it and loop the file so it never ends in case you started late. Now remember this 128k up is using 128k a sec at each active endpoint of the ISP for many single homed ISP's this wont matter but for multihomed ones it will you could potentialy suck up many times that bandwith in peering connections potentialy statement bandwith. It's not the RIAA slowing things down it's the ISP's that cant figure out how to bill yet.
Let me guess and release it all open source? You have the big problem that people with programming experience dont have a buring need for POS software. Granted there are quite a few vendors out there that would love it for the support contract. But your seeing one of the flaws of open source you have to find an interested group of programmers to write one for free generaly.
Assuming the Proxy is in a country the US can touch legaly they will have the same issues as the ISP. Also remember were talking about a LOT of data being moved here thats a lot harder to proxy than some web transactions. One of the bad things about the DCMA is it's pretty much carte blanche to just send a letter fishing to the first person you have evidence to they either give up the info of they get sued. Just wait till IP6 with multicast and they you can have real anonimity as a file server it can be made very hard to trace and can easy traverse countries that are legal firewalls.
Send a letter tot he required contact field citing the DMCA demanding all the info for who was logged in on IP address at date/time
Receive responce file suit to owner of the account. Or collect and wait you have time to file after all.
It's a pretty straight forward the DCMA abusing the right to due proccess. Yea having to go to civil court to get a supena for the info wasent much harder but at least it was another step. Oh yea I can do this as I own copyrighted (just about everybody does) and just need to be reasonably sure of infringment with no oversite isnt it great you can look up people on IRC etc now?
Slashdot Mirror
Your missing the point that they are the telco. I know they are selling the server at a loss on the DSL side of the house but the telco side is seeing profits from it and feeding that back to the DSL side. This is pretty classic monopalistic behaviour the telco side of the businees charges 40 a month or whatnot for DSL serviceto everybody. The DSL side sells at a loss but it paying back every cent they get to the telco side and then in turn getting more money from the telco side to support a nonprofitable segment. (IN SBC CT at least DSL and Telco are two different divisions so they dont have to pay union wages to the DSL guys.)
I think the problem with schemes like this is to many people will have to write them down to figure it out. Persoanly I learned a system at IBM to make passwords that you dont remember the letters but the finger positions. Great when your changing passwords weekly or monthly they are VERY quick to learn type them a few times and your set but you need a keyboard to remember the letters if you touch type.
Actualy from somebody that lives within SBC land SBC charges less for the first year than they charge another telco to resell the line. When you can get a 29.99 line from the telco or a 50 from an ISP there isn't any real compotition.
Well first off they would have to find real interfierence and a HAm thats unscrupulious enough to do it.
More importantly depending on how well the network is secured a DHCP address realy dosent mean much it could have simply been taken over modern DHCP servers ping the address before leasing it so if you just staic IP the box you might know what subnet they are on. That isolates you to the vlan but from there most switches dont log cam entries so there is no good way to say what port that address was on.
In your case it would seem a VPN setup would aleviate the issues.
I think you should put the blame squarly where it belongs the applications that dont nat (pat) well are broken. UDP can easily be used to have two hosts behind a firewall talk assuming they can talk to a group of non natted servers first. There are protocals to request tcp ports be forwarded from specific hosts. Even with that being said I think everybodys issues are not with NAT devices but rather PAT devices NAT does not realy conserve IP addresses rather it translates them PAT translates ports unfortunatly low end devices incorectly call it NAT.
Well I havent had any issues just go login to your CCO account and grab the new IOS's actualy my local mirror updated yesterday automaticaly. As for going through TAC thats allways a PITA to say a couple hundred dollars a year.
I dont think it's a question of a man being braught to justice as a result of the DNA sample it's about collecting databases of these things. Fingerprints take time to gather and proccess I'm not persoanly a big fan of them in there current form people that are arrested and fingerprinted and go into the system. They have not nessicarily commited a crime just been accused of one. Even if they are release with a sorry it was a mistake sorry to inconvience you they now have a record in the system. If at a later date they happen to commit a crime or have just been a random person at a crime scene they will get pulled in and questioned as a suspect. Thorw this into a system were people confess to things just to stop the harrassment of poliece officers during questioning. And it become the frighning reality that we have now it dossent affect surburbia much so it's allowed.
Now comes DNA if it becomes easy to process and there are large databases avalible just begging for a court order to get at them say from every paternity test to genetic screening sfor illness that may start becomming more commonplace to simple collecting it from a trash bag on the curb. From this you can extrapalate a different society that crime may be down but if your DNA happens to be found your automaticaly suspect and DNA is not something you can avoid leaving around in public like fingerprints.
Better yet what part of GPS is jammable do people not understand? A ship is pretty safe it has a big margin of error. Now it's nice to use GPS to guide things what happens when the kid down the road starts messing up the system. Yes you can have a good inertial guidance as backup potentialy a good referance correction (DOT uses them plant a GPS on a known fixed point and tranmit how much it's off moment to moment to get sub centimeter accuracy)
Your talking about 20 years of difference in society. Hackers breaking into computers was something that happened 20 years ago because they were there. I would hazard to say that those same people today arent breaking into other peoples systems without consent anymore. Remember its a term about 30 years from before the days of home computers when unless you worked for or went to school someplace that had proccessing power you didn't have any means of using a computer with any apreciable power legaly.
:), yes any signs of break should illicit a complete restore there are to many places to leave a nasty bit of code. In th modern age if you dont design your systems as pretty disposable you are realy engineering yourself into a corner.
And as a past system admin (back long long ago
Hackers traditionaly hold to the ethic of do no harm. It's one thing to get into a box poke around get some evidence that you were there and not damamge anything besides covering your tracks (and thats a bit of a new thing due to the excessive laws against it) A script kiddie is just that a script kiddie lets try to not confuse the two. If they call themselves a hacker thats fine it dosent make it true. The hackers of the world know who they are and how to tell there own.
You still have to specify a distance for under 5 grand I can run to NYC from CT with a 192 point to point actauly I can run multiple 192's depending on how much one time cost for WDM gear I want to plunk down. Also remember that tapes realy have a finite bandwith of there read and write speed and thats not even close to a decent OC connection until you hit something newer like Ultrim. The latency stinks and the round trip delay with humans in the mix is awfull. Your TCO is pretty bad as well as tapes die and tape heads have maitnence issues assuming your running multiple tape heads thats nearly 4 full time staff positions to change tapes 24/7. Assuming they make a minimum living of 30k a year and you have a 1.5 multiplier thats 180k of personel costs or 15k a month in people. That 15k could be moved over to leased fiber costs and your talking about a link half way across the USA. If your a school and have dirt cheap aka nearly work for free grad students this changes the numbers. Always remember a leased line thats at OC classes is general more expensive and a fiber or a lambda due to tariff structures and in general the way things work. Now granted I'm a Net Arch so I'm biased towards networks.
RedHat 7.3 is older yes but it's been around the corprate world and is about the current level of support. I work with a lot of comercial linux software and for most redhat 7.3 is the latest supported version. As for rehat in general lets face it support bugets are only so big so you pick one release of Linux and go with it why redhat? Well for starters thats the version thats officialy supported on IBM Big iron. They have the RHCE program so you can at least get a person with some paperwork behind them. And finialy they have there server version with a slowed down release cycle. One of Linux's major program with big corprate acceptance is it's quick release cycle remember in a big corp envirnement it may be 3 months of testing before a new release is certified as production. Thats a lot of man hours that they only want to expend every now and again not every 6 months on the upgrade tredmill.
Now it would be nice if they took Nvidia's approach a chell script that does all the heavy lifting including a custom compile.
Power sizing is pretty easy a standard 6509 has two 1600 watt PSU's that are load sharing and redundant and guess what it just wont initilize power if it goes over its budget powerwise. If your UPS and Gen sets arent up to running the devices at RATED draw then whoever pluged the devices into the UPS is a moron that sould not be allowed to use a computer never mind enginerr a big switch like that. Spec calls for 2 20 amp connectors to power the unit each of thse connectors should be on it's own breaker perferably to different UPS's and gen sets. Thats basic power redundancy. If your not concerned about longer outages you just wire them into a pair of UPS's that last I checked were bigger than the 6509 if you wanted more than 3 minutes of run time. Generaly an eletrician comes in to do this wiring because you dot find the 30amp twist lock plugs the portable UPS's use on the wall or the 20 amp twist locks the 6509 uses (or those ugly 20 amp 110 plugs that I've seen people take a pare of pliers to and insert into a normal 5-15p wall socket again because the fire marshal should fine them and the eletrical inspector) Oh yea in general devices that use PoE are worthless without the switch functioning anyway.
Actualy it works VERY well for there voIP phones and a few other devices like intel AP's and mini managed switches. It' DC and nut much current enough the run a laptop and probably not enough for a full desktop replacement. Last I check it supplied 18 watts.
While your at it allwasy remember that the USA's freedom was one by a group of terrorists there is no real line between terrorist and freedom fighter.
As to invasion yup we did and will probably do it again. Personaly I see this as the right of any soverign nation to declare war and invade another if they are not doing what they want them to this is how politics used to get done. It all boils down to if you beleive that ultimatly the people have power or some body of law has power. The UN in a lot of ways was designed to keep less powerfull countries oppressed and give the powerfull nations of the time carte blanch.
You seem to understand the basics after that it's mostly the normal PBX functions that are very propriatary. VoIP realy just replaces the well know analog and digital point to point circuts to run over a packet switched network besides ATM. On the network side QOS becomes very important as jitter can be a killer as it means more and more buffer and latency. Pretty much all the fancy stuff happens inside the VoIP PBX/server/router right now. Realy a headset on a PC is a realy poor method to make VoIP work at the worst end there are voice over IP blasters that is a USB device that makes an FXO (or the other one dont remember it's an inside line) that you connect a stanard phone to. This makes the VoIP transparent to normal use and thats important as it needs to just work. VoIP is pushing things like power over ethernet because the phones cant go off when the power dies but little UPS's and generator hoopups isn't an option to every extension but keeping the switch going is normaly allready taken care of.
Buildings have been providing services like this to the internet for years now. I worked with a company back in the mid 90's that braught a DS3 into a building then sold it off to tennants handing them off ethernet and managed firewalls. Even at a DS3 that costs about 10 times as much as a T1 and has 30 times to carring capacity it's a decent return.
FedEx is more cost effective if latency and manpower are not issues. Though if your still using T1's for data your probably dont have much in the way of data transfer needs T1's are horidly expensive compared to there carring capacity. Often for 10-20 times the cost of a T1 I can get an OC3 link thats have 100 times the carring capacity only usefull if you need the move data all the time. There is also the use of Satalites they can get OC3 speeds at a cost of about 500 an hour assuming all the office are visiable under one footprint (domestic). Very rarely will it be cheaper to have remote data father out than a MAN setting.
I think there not surrently going after people that DL music as much as those at UL it. Proof is pretty easy just download a few songs as they know everybody that has the rights to distribute those songs it's pretty easy for them to figure out you dont. One of the problems of Kazza Napster etc is they are public and unprotected, technicaly a little ELUA verbage and you can make a closed system but by doing so you allmost instatly loose any pretense of being a public service.
No it's taking that long because Mulicast is imposible to get paid for in todays pricing structures. Thik of it this way I get a DSL connections with 128k up pretty sandard pay 40 bucks a month for it. OK now comes IPv6 multicast is REQUIRED to work so I can send a file at 128k all day to as many people wanted to retreive it and loop the file so it never ends in case you started late. Now remember this 128k up is using 128k a sec at each active endpoint of the ISP for many single homed ISP's this wont matter but for multihomed ones it will you could potentialy suck up many times that bandwith in peering connections potentialy statement bandwith. It's not the RIAA slowing things down it's the ISP's that cant figure out how to bill yet.
Let me guess and release it all open source? You have the big problem that people with programming experience dont have a buring need for POS software. Granted there are quite a few vendors out there that would love it for the support contract. But your seeing one of the flaws of open source you have to find an interested group of programmers to write one for free generaly.
Assuming the Proxy is in a country the US can touch legaly they will have the same issues as the ISP. Also remember were talking about a LOT of data being moved here thats a lot harder to proxy than some web transactions. One of the bad things about the DCMA is it's pretty much carte blanche to just send a letter fishing to the first person you have evidence to they either give up the info of they get sued. Just wait till IP6 with multicast and they you can have real anonimity as a file server it can be made very hard to trace and can easy traverse countries that are legal firewalls.
Get an IP address
Look up Address with whois
Send a letter tot he required contact field citing the DMCA demanding all the info for who was logged in on IP address at date/time
Receive responce file suit to owner of the account. Or collect and wait you have time to file after all.
It's a pretty straight forward the DCMA abusing the right to due proccess. Yea having to go to civil court to get a supena for the info wasent much harder but at least it was another step. Oh yea I can do this as I own copyrighted (just about everybody does) and just need to be reasonably sure of infringment with no oversite isnt it great you can look up people on IRC etc now?