I got the same message on the AT&T site after the keynote when people were checking to see if they qualified for the upgrade. Somebody should tell them that message makes them look incompetent; I mean, it's one thing to have a server go down under extremely heavy load. But it would be far stupider to choose such a peak time for scheduled maintenance. Just say "Sor
Actually, all of the devices in the platform do allow app upgrades over their own connection. You *can* use iTunes and USB, but apps 10MB or you don't have carrier data you can upgrade them over wifi. The app store icon will even notify you when there are upgrades available.
I just read the text of the law (IANAL) and it doesn't seem that this law is restricted to network transmissions and data storage - in fact it explicitly mentions paper records. How would one even go about encrypting paper? I'd think it would even affect newspapers which listed a reporter's name, or the name of somebody in the news. What if that newspaper was just left on a bench somewhere? Data breach.
I actually hope they don't. I've started using a Mac and I also miss (or can't find) the insert, home, end, backspace, and printscreen buttons. It's a real pain when I run vmware or RDC.
I'll second that. I have a 5200 as well and it's been reliable and convenient. A big plus is the GB ethernet, 5 bays, and iSCSI. As far as I can tell, Samba is limited to 32bit filesizes but iSCSI fixes that.
Can anyone else confirm that Samba has a 2GB file limit? Maybe it was just the implementation that is put on many of the NAS boxes.
I followed the SDK and store announcement online in real time and I believe that for the most part Apple has provided a tool that we can use - but there was no discussion of "try before you buy." There's a wide variance in software quality - usually if software is not ubiquitous I will not buy it without testing it first.
Hopefully this will be handled in some so-far unspecified way.
I disagree slightly with your deduction that if I'm wearing protective gear then I mean to attack. If I was planning to be in a peaceful protest and I suspected that this device would be used against me, then why wouldn't I plan to wear armor? Peaceful demonstrations are planned and organized too. I hope that doesn't mean that they'd fall back to using a machinegun on demonstrators!
The proofs are not meaningless. Remember that all of geometric shapes that they are using must be rendered to dots on the printer because that is what the printer prints and what the scanner scans. Calculating the number of dots available is a straightforward way to approach the problem because the number of dots that can be printed directly corresponds to the number of distinct states that the paper can have. It's a basic fact that you can't store more information in a medium than can be represented by the number of distinct states that the medium has.
Consider this. "Pen" is an ok word, "Island" is ok too. So I want to celebrate Pen Island with a domain name... penisland.com? Oops?
I came across this problem when I looked at starting a restaurant named Saladipity (which rhymes with Serendipity). Later I realized it could be read as Salad I Pity. Oops again... less appetizing.
That is why this is such a dangerous vulnerablities. Since this is a vulnerability in the graphics engine (metafile playback) it can be exploited through a web page that contains a malicous graphic. That will come right in through port 80 on your firewall.
I agree with the author that the length prefix is something of a smoking gun. It begs the question of "how do we know it was fixed..." For example, they could change it to execute the datastream when length is set to a new trigger value; or a stronger backdoor would ignore any unsigned code. Still there, but harder to test for.
It's a straightforward way to add a backdoor that will bypass firewalls, etc. It can be triggered by a browsed page, email, etc. It's better than gif/jpeg encoding because those are more "platform independent." and the payload would be more likely noticed by a 3rd party decoder.
On the other hand, isn't this flagged as an attempt to execute code on a data page?
Also, if it were official, doesn't MS have easier ways into a general box - say through security updates, or even the entire existing code base?
Actually - that's what the "AT" in the old hayes modem command set was for. It was so that the modem could triangulate your signal to know where the DTE was. The "A" was used to locate DTE, the "T" would allow for the estimation of DTE's velocity.
I'm curious to know how much effort/man hours is put into studying this kind of phenomena. Do NASA folks just say "That's cool, look at that." like I do, or do they assign a team to spend a month trying to extrapolate airspeed, volume, spin direction, lifespan, and other attributes that I can't even think of?
I guess I mean: does this really mean anything important to a scientist, or is it just eyecandy for the taxpayers?
The difference between cell phone providers and cable companies is that the cable companies are local monopolies. In my area (and yours too) you have to buy from whichever cable company is in your market. I think it's entirely reasonable to expect some regulation in exchange for a protected market.
I've been wanting to get this off my chest for a while now, and what better forum for this than slashdot.
We have an election system here in the US that attempts to count every vote. At some point they stop counting and announce the final results.
Anyway, we learned 4 years ago (and are learning this time too) that the vote is not accurate. It is error prone and sometimes subjective. But I haven't seen anyone attempt to quantify the level of error in the voting process? Why hasn't there been some academic or impartial attempt to measure the margin of error in our polling.
Why is this important? Because if you don't know the margin of error, then you don't know what the outcome is. Period. If Bush reports 51% to Kerry 49% and the margin of error is 5%, then we don't know who won the election. It's a statistical tie and anyone who announces a winner is at best foolish.
You didn't say much about your application, but you might want to look at using vmware instead of a stack of hardware. I've been using it since 1.0 and it has completely quenched my need to buy and maintain a suite of servers for testing my distributed apps.
Why would you understand 10 or 5? They're pretty arbitrary (other than being the number of fingers on a hand).
They were probably encoding other symbols and they had between (2^5) 32 and (2^6) 64. So, 7 was the logical choice. If we wanted to encode the letters (A-Z), the numbers (0-9), and some basic punctuation (.,-;) we'd need exactly 7 bits too.
It's not a real dog. It's a robotic dog. And it's smarter than I am - not that that's saying much. Also, it's loaded with weapons; it can destroy a city just by lifting it's leg.
I've been meaning to suggest that all websites with a .mobi TLD should be hosted on mobile devices.
Consistency is key.
I got the same message on the AT&T site after the keynote when people were checking to see if they qualified for the upgrade. Somebody should tell them that message makes them look incompetent; I mean, it's one thing to have a server go down under extremely heavy load. But it would be far stupider to choose such a peak time for scheduled maintenance. Just say "Sor
Actually, all of the devices in the platform do allow app upgrades over their own connection. You *can* use iTunes and USB, but apps 10MB or you don't have carrier data you can upgrade them over wifi. The app store icon will even notify you when there are upgrades available.
I just read the text of the law (IANAL) and it doesn't seem that this law is restricted to network transmissions and data storage - in fact it explicitly mentions paper records. How would one even go about encrypting paper? I'd think it would even affect newspapers which listed a reporter's name, or the name of somebody in the news. What if that newspaper was just left on a bench somewhere? Data breach.
I actually hope they don't. I've started using a Mac and I also miss (or can't find) the insert, home, end, backspace, and printscreen buttons. It's a real pain when I run vmware or RDC.
I'll second that. I have a 5200 as well and it's been reliable and convenient. A big plus is the GB ethernet, 5 bays, and iSCSI. As far as I can tell, Samba is limited to 32bit filesizes but iSCSI fixes that.
Can anyone else confirm that Samba has a 2GB file limit? Maybe it was just the implementation that is put on many of the NAS boxes.
I followed the SDK and store announcement online in real time and I believe that for the most part Apple has provided a tool that we can use - but there was no discussion of "try before you buy." There's a wide variance in software quality - usually if software is not ubiquitous I will not buy it without testing it first.
Hopefully this will be handled in some so-far unspecified way.
I disagree slightly with your deduction that if I'm wearing protective gear then I mean to attack. If I was planning to be in a peaceful protest and I suspected that this device would be used against me, then why wouldn't I plan to wear armor? Peaceful demonstrations are planned and organized too. I hope that doesn't mean that they'd fall back to using a machinegun on demonstrators!
The proofs are not meaningless. Remember that all of geometric shapes that they are using must be rendered to dots on the printer because that is what the printer prints and what the scanner scans. Calculating the number of dots available is a straightforward way to approach the problem because the number of dots that can be printed directly corresponds to the number of distinct states that the paper can have. It's a basic fact that you can't store more information in a medium than can be represented by the number of distinct states that the medium has.
Secondary filters don't work either.
Consider this. "Pen" is an ok word, "Island" is ok too. So I want to celebrate Pen Island with a domain name... penisland.com? Oops?
I came across this problem when I looked at starting a restaurant named Saladipity (which rhymes with Serendipity). Later I realized it could be read as Salad I Pity. Oops again... less appetizing.
That is why this is such a dangerous vulnerablities. Since this is a vulnerability in the graphics engine (metafile playback) it can be exploited through a web page that contains a malicous graphic. That will come right in through port 80 on your firewall.
I agree with the author that the length prefix is something of a smoking gun. It begs the question of "how do we know it was fixed..." For example, they could change it to execute the datastream when length is set to a new trigger value; or a stronger backdoor would ignore any unsigned code. Still there, but harder to test for.
It's a straightforward way to add a backdoor that will bypass firewalls, etc. It can be triggered by a browsed page, email, etc. It's better than gif/jpeg encoding because those are more "platform independent." and the payload would be more likely noticed by a 3rd party decoder.
On the other hand, isn't this flagged as an attempt to execute code on a data page?
Also, if it were official, doesn't MS have easier ways into a general box - say through security updates, or even the entire existing code base?
Actually - that's what the "AT" in the old hayes modem command set was for. It was so that the modem could triangulate your signal to know where the DTE was. The "A" was used to locate DTE, the "T" would allow for the estimation of DTE's velocity.
I'm curious to know how much effort/man hours is put into studying this kind of phenomena. Do NASA folks just say "That's cool, look at that." like I do, or do they assign a team to spend a month trying to extrapolate airspeed, volume, spin direction, lifespan, and other attributes that I can't even think of?
I guess I mean: does this really mean anything important to a scientist, or is it just eyecandy for the taxpayers?
The difference between cell phone providers and cable companies is that the cable companies are local monopolies. In my area (and yours too) you have to buy from whichever cable company is in your market. I think it's entirely reasonable to expect some regulation in exchange for a protected market.
I've been wanting to get this off my chest for a while now, and what better forum for this than slashdot.
We have an election system here in the US that attempts to count every vote. At some point they stop counting and announce the final results.
Anyway, we learned 4 years ago (and are learning this time too) that the vote is not accurate. It is error prone and sometimes subjective. But I haven't seen anyone attempt to quantify the level of error in the voting process? Why hasn't there been some academic or impartial attempt to measure the margin of error in our polling.
Why is this important? Because if you don't know the margin of error, then you don't know what the outcome is. Period. If Bush reports 51% to Kerry 49% and the margin of error is 5%, then we don't know who won the election. It's a statistical tie and anyone who announces a winner is at best foolish.
I went to my usual store's site and put together the cheapest pc possible:
1. MidTower CodeGen with 300W ps $24
2. Hitachi 40GB ATA100 hard drive w/cable $50.40
3. EVS KM400 mobo with via chipset, 128MB DDR266 ram, AMD Sempron 2200+, cpu cooler $105.50
The mobo has integrated sound, vga, lan, usb, and audio. VIA chipsets are reasonably well supported.
At $179+shipping, it's not at the $99 price point. However I thought *damn* that's a nice pc for $179.
Well, I'm using spamassassin on my server (and have been for the past 2 years). Unfiltered, I get around 200 spam per day. 1 or 2 get through.
It's been that way since the day I installed it. and it doesn't appear that the spammers are using any substantially "smarter methods"
Maybe it really is easier to write a filter than it is to write filter-proof spam.
We heard earlier that solaris 10 will be open source.
I wonder if that means that this filesystem can be included in other kernels.
PC/104 is a form factor and external bus specification, not a CPU type. It could have had any of many embeddable cpus on it.
You didn't say much about your application, but you might want to look at using vmware instead of a stack of hardware. I've been using it since 1.0 and it has completely quenched my need to buy and maintain a suite of servers for testing my distributed apps.
I would like to read an omniscient article. Alas, that one is only prescient.
Why would you understand 10 or 5? They're pretty arbitrary (other than being the number of fingers on a hand).
They were probably encoding other symbols and they had between (2^5) 32 and (2^6) 64. So, 7 was the logical choice. If we wanted to encode the letters (A-Z), the numbers (0-9), and some basic punctuation (.,-;) we'd need exactly 7 bits too.
That's a pretty strong statement. Is the current thinking these days that we find liquid water, then life *must* also be present?
It's not a real dog. It's a robotic dog. And it's smarter than I am - not that that's saying much. Also, it's loaded with weapons; it can destroy a city just by lifting it's leg.