Just like the myth of the lone genius, business success does not come alone, it is built on deals. Without partners to build good deals with, no business will succeed.
The problem is that this transaction should have failed even basic Domain Validation.
A validation request for *.google.com should have landed at a technical contact inside Google. So how did this come into the hands of the Iranian government?
The only thing I can think of is that Diginotar has fallen for the 'Domain Validation is not secure enough' scam, and has therefore used another out-of-band validation technique that was easily socially engineered.
What eyewitness accounts? I haven't seen a single trustworthy link to one yet. The best we got was TFA, which was a secondhand retelling of Verizon allegations.
Wanting evidence for what someone with a stake in the dispute alleges is now a conspiracy theory? You are beyond submoronic. Calling you a moron would be an insult to morons world-wide.
Of course, the possibility that Verizon has been cutting costs on maintenance, like any corporation led by blind MBAs, and that this bites them in the ass when the qualified people who have been keeping their services running on spit and baling wire walk out, that is not a possibility that crosses your mind.
No, it must be those eeeevil Union activists whut done it.
You Americans really are easily brainwashed sheep, aren't you?
Yeah, one parent who has his kid with him in the picket line. And that story is making the rounds as if this is the norm.
And that second video shows no violence, unless you think those poor managers are so traumatised from having a few signs shoved under their noses that they need counselling.
Wake up and smell the coffee. There is (so far) no proof of massive sabotage, like Verizon alleges, and all you can do is repeat the echo chamber.
Compared to their overal revenue? Yes, only. Apple is good at keeping costs down, which is why R&D is a fairly big hit out of their expenses. However compared to their revenues, they invest very little.
It's a nice narrative, but the numbers don't hold up.
Apple invests an enormous amount of resources into R&D
Actually, R&D is only about a third of Apple's expenses. And compared to their revenues, the sum gets even smaller. Don't fall for the narrative: check the 10-Q and 10-K for yourself.
Worse, the python docs are often full of the wrong sort of information. Look at that DB API 2.0 PEP: it spends a full page listing and describing possible exceptions, right at the start of the document.
I don't want to know that. When I'm scripting something against a database, I want to know how to connect, and how to safely build a parametrized query. List the exceptions at the point where they make sense, not right in front of the real material.
It's the same disease visible in the sudoers manpage. Instead of giving a short summary explanation with examples first, you get a theoretical treatise on their particular modified Backus-Naur form. Python devs seem to like theorising, as their documentation shows the same model.
And to make things worse (also answering the guy below): the docs that do exist are not in a standard place. You either need an active HTTP connection to look things up on the web, or it is somewhere in/usr/doc/ or/usr/share/doc, or you have to print the docstrings of every member of __dict__ yourself.
Perl module documentation gets built as manpages as a standard. Install a Perl module, you get the docs in one go. I'm willing to suffer a little of Perls warts (like the references syntax for complex data structures) for the ease of use of its modules.
I must disagree. The python documentation is by and large awful. It is often not more than a summation of available objects and methods, with very little explanation and few examples.
And I suspect it's a cultural thing, as the documentation of third-party modules is often not any better than this mere boilerplate style.
For shits and giggles, try to compare the docs of the DB API 2.0 (a single short PEP) to Perl's DBI (extensive and with examples).
I really like Python, but for daily work I've given up on the constant struggle to find just how the heck to use a certain module.
Doesn't help. You forget what SSL verifies: that the server you're connecting to holds the private key belonging to the certificate with the servername in the the DN. Nothing more.
If I register paypa1.com for my phishing operation and register a business in some Caucasian nation, I can cough up the papers that I am the righful owner of the domain. I am, according to your idea, completely identifiable. How are you going to stop Verisign from selling me a certificate?
Are you willing to give the power to vet domain registrations to yet another agency with a commercial incentive to not veto too much?
Actually, Jonathan Rockway's book on Catalyst was pretty good; I've definitely picked up a lot of useful Catalyst and Perl knowledge from it.
My second Packt purchase was less good though; their book on Cacti is mostly a long, redundant explanation on how to install cacti on various distributions, both from packages and source.
Slashdot Mirror
And Apple would have been nowhere without VisiOn.
Just like the myth of the lone genius, business success does not come alone, it is built on deals. Without partners to build good deals with, no business will succeed.
Mart
And yet you're posting on a network funded by US government dollars, using a protocol devised using money from multiple international governments.
Of course, you being a completely-round-the-bend loony, you're going to fabricate reasons why this is not blatant hypocrisy.
Mart
Which is surprising, as Mrs. Smit-Kroes is surrounded with a lot of suspicion of being on the take and inappropriate lobbying.
Her record on housing and construction is particularly shaky, given that most of her decisions seem to favour her friends in the real-estate industry.
Mart
The problem is that this transaction should have failed even basic Domain Validation.
A validation request for *.google.com should have landed at a technical contact inside Google. So how did this come into the hands of the Iranian government?
The only thing I can think of is that Diginotar has fallen for the 'Domain Validation is not secure enough' scam, and has therefore used another out-of-band validation technique that was easily socially engineered.
Mart
If it isn't any different, then what is the justification for the ribbon?
I would like to see a reliable X proxy server, so I can detach and reattach my session at will from different locations.
Otherwise modern X is pretty much up to par with the competition.
Mart
That's nowhere near what I wrote. Moron.
What eyewitness accounts? I haven't seen a single trustworthy link to one yet. The best we got was TFA, which was a secondhand retelling of Verizon allegations.
Wanting evidence for what someone with a stake in the dispute alleges is now a conspiracy theory? You are beyond submoronic. Calling you a moron would be an insult to morons world-wide.
Mart
I never said that bad maintenance is the only explanation. You however seem to want to believe the sabotage story to be a priori right.
Yes, you're a sheep.
Mart
Of course, the possibility that Verizon has been cutting costs on maintenance, like any corporation led by blind MBAs, and that this bites them in the ass when the qualified people who have been keeping their services running on spit and baling wire walk out, that is not a possibility that crosses your mind.
No, it must be those eeeevil Union activists whut done it.
You Americans really are easily brainwashed sheep, aren't you?
Mart
I wondered the same thing. Their expenses are awfully low.
On the other hand, Apple are masters at marketing high-margin luxury goods, so that might explain their high overall margin.
Mart
Yeah, one parent who has his kid with him in the picket line. And that story is making the rounds as if this is the norm.
And that second video shows no violence, unless you think those poor managers are so traumatised from having a few signs shoved under their noses that they need counselling.
Wake up and smell the coffee. There is (so far) no proof of massive sabotage, like Verizon alleges, and all you can do is repeat the echo chamber.
Mart
Are you blind? The majority of the comments at +1 or higher are Union-bashing, taking TFA entirely at face value.
Mart
Compared to their overal revenue? Yes, only. Apple is good at keeping costs down, which is why R&D is a fairly big hit out of their expenses. However compared to their revenues, they invest very little.
It's a nice narrative, but the numbers don't hold up.
Mart
Actually, R&D is only about a third of Apple's expenses. And compared to their revenues, the sum gets even smaller. Don't fall for the narrative: check the 10-Q and 10-K for yourself.
Mart
TFA does not post any corroboration and nothing from the the side of the strikers.
Without further evidence, I'm going to write this article off as anti-union propaganda.
Mart
Worse, the python docs are often full of the wrong sort of information. Look at that DB API 2.0 PEP: it spends a full page listing and describing possible exceptions, right at the start of the document.
I don't want to know that. When I'm scripting something against a database, I want to know how to connect, and how to safely build a parametrized query. List the exceptions at the point where they make sense, not right in front of the real material.
It's the same disease visible in the sudoers manpage. Instead of giving a short summary explanation with examples first, you get a theoretical treatise on their particular modified Backus-Naur form. Python devs seem to like theorising, as their documentation shows the same model.
And to make things worse (also answering the guy below): the docs that do exist are not in a standard place. You either need an active HTTP connection to look things up on the web, or it is somewhere in /usr/doc/ or /usr/share/doc, or you have to print the docstrings of every member of __dict__ yourself.
Perl module documentation gets built as manpages as a standard. Install a Perl module, you get the docs in one go. I'm willing to suffer a little of Perls warts (like the references syntax for complex data structures) for the ease of use of its modules.
Mart
I must disagree. The python documentation is by and large awful. It is often not more than a summation of available objects and methods, with very little explanation and few examples.
And I suspect it's a cultural thing, as the documentation of third-party modules is often not any better than this mere boilerplate style.
For shits and giggles, try to compare the docs of the DB API 2.0 (a single short PEP) to Perl's DBI (extensive and with examples).
I really like Python, but for daily work I've given up on the constant struggle to find just how the heck to use a certain module.
Mart
And the reason they can charge it is because they can keep the composition of the price a secret.
Free trade is predicated on equality of information. This is not capitalism; it is close to fraud.
Mart
How many years of users just clicking away warnings have we had now? Let me put it strongly: throwing up a warning is not a security solution.
Mart
Doesn't help. You forget what SSL verifies: that the server you're connecting to holds the private key belonging to the certificate with the servername in the the DN. Nothing more.
If I register paypa1.com for my phishing operation and register a business in some Caucasian nation, I can cough up the papers that I am the righful owner of the domain. I am, according to your idea, completely identifiable. How are you going to stop Verisign from selling me a certificate?
Are you willing to give the power to vet domain registrations to yet another agency with a commercial incentive to not veto too much?
Mart
Actually, Jonathan Rockway's book on Catalyst was pretty good; I've definitely picked up a lot of useful Catalyst and Perl knowledge from it.
My second Packt purchase was less good though; their book on Cacti is mostly a long, redundant explanation on how to install cacti on various distributions, both from packages and source.
I count one, maybe two supporters in this thread. And at least twice that of true believers who feel slighted.
So fuck off with your victim complex. Another thing you have in common with the fundamentalist Christians, BTW.
Mart
And when Christians pray to God, and Muslims pray to Allah, they are testing the hypothesis that someone is listening to them.
See? Perfectly analogous.
And like all true believers confronted with uncomfortable truths, you just refuse to listen.
I claimed it to be unscientific to believe in something out there with no better basis than the Drake Equation.
Actually reading the argument and addressing it next time, instead of burning down a strawman, would help your case.