there are other places to put stuff in a JPEG file besides the image. there are the 15 (count ?) JPG_APPx markers where EXIF and IPTC data, among others, live, and then there's the JPEG_COM marker, too. you can store up to 64K in each of these and they have no effect on the image. if a buffer overrun exploit was found in code that uses these, there's a lot of potential for harm. but, it's still not a "virus".
For me this doesn't bring up the question of "live" vs "not live"; instead, it reminds me that authenticity is becoming more and more rare.
I understand that this is an intersting technical accomplishment, but I'm not looking forward to world of remote performances. Maybe it's just me, but I feel there's something inauthentic about it. I'd much rather see a person play a real piano and hear the sound of that piano directly (or amplified, by necessity). If that means I see fewer piano recitals (because of seating issues, time issues with the performers, etc), then that's OK - it makes those that I do see that much more special.
the US copyright laws ensure that an author (not someone else) gets the exclusive right to decide how his works are used. if you take it upon yourself to distribute copyrighted works, you deprive the author of the only thing the copyright laws give him.
When TimeWarnerAOL (or Disney or whoever else ends up as the big players) decides you shouldn't be seeing this or that website, or sending this or that data down the wire, you'll care.
Remember, these are the same companies who bought the DMCA - they do not have your interests in mind.
i too am a consumer willing to spend money to meet my needs. for instance, i'd really like a Boxster, but i think Porsche charges too much for one. so, i'll just take one off the lot and leave a $10 under the dealer's front door. i'm paying them for their merchandise, right? what's the big deal?
business is rarely a one-sided transaction - that's the big deal.
an industry with many small players suffers from the fact that none of the players can give very much and most of them don't want to give any at all, because a) they don't need any news laws or b) they figure someone else will fight the fight for the industry.
in an industry with a few large players, however, each of the players can give very large donations, and they tend to stick together to a) fix prices for mutual benefit and b) buy the legislation they need in order to self-perpetuate.
congress knows this and adjusts the industry accordingly. for instance, deregulation is just congress's way of allowing an industry to clump together, creating large generous conglomerates. it makes congress's job much easier: fewer checks to cash, and each check is larger.
and there are already laws on the books that punish people who steal.
if the *AA wants to come up with its own format for distribution of its precious content, and then make its own hardware to play that content, then fine, no big deal. but there's no reason that the government should legislate that everyone has to play by their rules.
many bars have recently put little ad stations right above the urinals. so, while you stand there trying to mind your own business, you can learn about the wonders of the latest Ford SUV.
When it first went up, about half of the "Mind Storms" were "Mind Springs". Then they fixed all but the one on the last line. Then they fixed the last one. And then i got modded down:)
A: because that's not what copyright in the US is supposed to do. the constitution clearly says "for a limited time". perpetual renewal is pretty much the opposite of "limited". copyright, like patent, is a temporary monopoly in exchange for eventual release into the public domain.
RT*A, the brief makes this point ten or twenty times.
Maynard rd in Cary is a horror; it's a circle, but there's no indication that it's a circle, you just end up back where you started. it took me a couple of laps to figure that one out. because everything in Cary looks the same (identical subdivisions and apartment complexes as far as the eye can see), you don't immediately notice that you're seeing the same thing again.
one other thing that bugs me: the horrible design of combining on ramps and off ramps into the same 1/8 mile stretch. the people trying to get on the highway have to sprint through this little strip of road that just might be occupied by someone trying to quickly slow down to get off the highway.
oh... and the horrible clusterfuck on Captial S. trying to get onto 440: it could be the busiest section of road in Raleigh... five lanes of traffic, most of them trying to get onto 440. if like most people, you're going west, after you've fought your way over to the right lane, because the signs have told you you need to be over there, you find yourself forced off of Capital, 200 feet before 440. why? because the right lane is a turn only lane for Highwoods Blvd.. so, now the people who didn't figure this out in time are trying to merge into the second lane while people from the leftmost lanes are trying to do the same. every morning, it's the same nightmare.
in the scenario he describes, the overall EXE will not change - it will still be IE. only the rendering engine has changed: a DLL or two that runs in the EXEs address space as part of the EXE. all internet accesses still appear to be coming from IE. the firewall doesn't know anything about which DLL within the EXE is making the call.
...the OS will soon be al wrapped up in the browser. Already, PDFs, Word docs, image files, FTP sites, audio, video clips and more all open directly into the browser window.
And, how convenient: as soon as.Net gets going for real, apps will be ditributed and you won't ever have to leave the browser to do anything.
klez forges the From address, so you'll end up blocking people who aren't infected. likewise, there's a decent chance that your own (you, yes you) email address is on some of the infected emails, because, like i just said, klez forges From lines with addresses from address books.
And if you were researching French wines of the 1970's, would you feel justified stealing bottles to taste, because as a broke grad student, there's no way you could afford to buy them?
WTF, this isn't even a desription of Klez. but the place you stole this from even has a description of the Klez virus. You couldn't even bother to plagarize the right stuff?
i'm getting literally dozens of copies of klez every day. luckily, Norton AV is set to screen incoming email, so they're all dead by the time i see them.
no, it doesn't sound like a movie. it sounds like a game. are barbies speech? they have characters, action and drama; so does D&D, so does paintball, so does monopoly.
when you play monopoly or Quake, do you get the sense that someone is trying to communicate something to you? no? then how the fuck can it be speech?
Slashdot Mirror
there are other places to put stuff in a JPEG file besides the image. there are the 15 (count ?) JPG_APPx markers where EXIF and IPTC data, among others, live, and then there's the JPEG_COM marker, too. you can store up to 64K in each of these and they have no effect on the image. if a buffer overrun exploit was found in code that uses these, there's a lot of potential for harm. but, it's still not a "virus".
-c
...implementations from Intel, LeadTools and Pegasus. and, i think Adobe has their own implementation, too.
-c
For me this doesn't bring up the question of "live" vs "not live"; instead, it reminds me that authenticity is becoming more and more rare.
I understand that this is an intersting technical accomplishment, but I'm not looking forward to world of remote performances. Maybe it's just me, but I feel there's something inauthentic about it. I'd much rather see a person play a real piano and hear the sound of that piano directly (or amplified, by necessity). If that means I see fewer piano recitals (because of seating issues, time issues with the performers, etc), then that's OK - it makes those that I do see that much more special.
-c
the US copyright laws ensure that an author (not someone else) gets the exclusive right to decide how his works are used. if you take it upon yourself to distribute copyrighted works, you deprive the author of the only thing the copyright laws give him.
-c
www.merriamwebster.com lists, as a definition of piracy, unauthorized copying of copyrighted works; and, i'm sure the OED does, too.
i know it's annoying to obey laws, but, until they're changed, the only other option is to break them - as in "Breaking The Law".
-c
When TimeWarnerAOL (or Disney or whoever else ends up as the big players) decides you shouldn't be seeing this or that website, or sending this or that data down the wire, you'll care.
Remember, these are the same companies who bought the DMCA - they do not have your interests in mind.
-c
There's a multi-page article on Salon right now that maybe you should take a few minutes to read.
-c
i too am a consumer willing to spend money to meet my needs. for instance, i'd really like a Boxster, but i think Porsche charges too much for one. so, i'll just take one off the lot and leave a $10 under the dealer's front door. i'm paying them for their merchandise, right? what's the big deal?
business is rarely a one-sided transaction - that's the big deal.
-c
the bar/dance club money goes to the artists via BMI or ASCAP. you need a license from those companies to play music in a club.
-c
because they can give larger campaign donations.
an industry with many small players suffers from the fact that none of the players can give very much and most of them don't want to give any at all, because a) they don't need any news laws or b) they figure someone else will fight the fight for the industry.
in an industry with a few large players, however, each of the players can give very large donations, and they tend to stick together to a) fix prices for mutual benefit and b) buy the legislation they need in order to self-perpetuate.
congress knows this and adjusts the industry accordingly. for instance, deregulation is just congress's way of allowing an industry to clump together, creating large generous conglomerates. it makes congress's job much easier: fewer checks to cash, and each check is larger.
-c
and there are already laws on the books that punish people who steal.
if the *AA wants to come up with its own format for distribution of its precious content, and then make its own hardware to play that content, then fine, no big deal. but there's no reason that the government should legislate that everyone has to play by their rules.
-c
many bars have recently put little ad stations right above the urinals. so, while you stand there trying to mind your own business, you can learn about the wonders of the latest Ford SUV.
-c
When it first went up, about half of the "Mind Storms" were "Mind Springs". Then they fixed all but the one on the last line. Then they fixed the last one. And then i got modded down :)
-c
Do the editors even read the articles??
We know the answer.
-c
A: because that's not what copyright in the US is supposed to do. the constitution clearly says "for a limited time". perpetual renewal is pretty much the opposite of "limited". copyright, like patent, is a temporary monopoly in exchange for eventual release into the public domain.
RT*A, the brief makes this point ten or twenty times.
-c
it just doesn't have quite the ring that "Silicon Valley" has, does it?
-c
it could be that the other even numbered x40s are taken, in NC.
-c
Maynard rd in Cary is a horror; it's a circle, but there's no indication that it's a circle, you just end up back where you started. it took me a couple of laps to figure that one out. because everything in Cary looks the same (identical subdivisions and apartment complexes as far as the eye can see), you don't immediately notice that you're seeing the same thing again.
one other thing that bugs me: the horrible design of combining on ramps and off ramps into the same 1/8 mile stretch. the people trying to get on the highway have to sprint through this little strip of road that just might be occupied by someone trying to quickly slow down to get off the highway.
oh... and the horrible clusterfuck on Captial S. trying to get onto 440: it could be the busiest section of road in Raleigh... five lanes of traffic, most of them trying to get onto 440. if like most people, you're going west, after you've fought your way over to the right lane, because the signs have told you you need to be over there, you find yourself forced off of Capital, 200 feet before 440. why? because the right lane is a turn only lane for Highwoods Blvd.. so, now the people who didn't figure this out in time are trying to merge into the second lane while people from the leftmost lanes are trying to do the same. every morning, it's the same nightmare.
designed by monkeys, i always say.
-c
in the scenario he describes, the overall EXE will not change - it will still be IE. only the rendering engine has changed: a DLL or two that runs in the EXEs address space as part of the EXE. all internet accesses still appear to be coming from IE. the firewall doesn't know anything about which DLL within the EXE is making the call.
-c
...the OS will soon be al wrapped up in the browser. Already, PDFs, Word docs, image files, FTP sites, audio, video clips and more all open directly into the browser window.
.Net gets going for real, apps will be ditributed and you won't ever have to leave the browser to do anything.
And, how convenient: as soon as
-c
klez forges the From address, so you'll end up blocking people who aren't infected. likewise, there's a decent chance that your own (you, yes you) email address is on some of the infected emails, because, like i just said, klez forges From lines with addresses from address books.
PITA.
-c
And if you were researching French wines of the 1970's, would you feel justified stealing bottles to taste, because as a broke grad student, there's no way you could afford to buy them?
-c
-c
i'm getting literally dozens of copies of klez every day. luckily, Norton AV is set to screen incoming email, so they're all dead by the time i see them.
-c
no, it doesn't sound like a movie. it sounds like a game. are barbies speech? they have characters, action and drama; so does D&D, so does paintball, so does monopoly.
when you play monopoly or Quake, do you get the sense that someone is trying to communicate something to you? no? then how the fuck can it be speech?
-c