If password recovery is the only instance where email is sent to users, this should work. Login checks for matching email hash and password hash, recovery email is sent to any address with matching email hash. Of course for recovery you still need to send the email address to the server in plaintext, and it will be hard to delete all traces of it on the server.
You really don't want to do that. Unless you have a perfect hash, you have the risk of hash collisions, i. e., false matches. Hash on password is relatively safe. Hash on user identity is not. You could end up sending information to the wrong person. The odds are against it, but Murphy sneers at odds.
Probably a more appropriate word than "fraud" would be "farce".
It's really amazing (and depressing) that a lot of blind apologists for corporations think that corporations are democracies. They're not, of course. And not just in the sense of "democratic republic".
Directors are elected Soviet-style, it's not one person one vote, it's one share one vote, and on top of everything else, if you don't vote at all, that usually gets counted as a "for" vote. At least in the Soviet Union you had to show up and cast your vote (emphasis on the word "had", though. With optional bayonets).
So it's unsurprising that he won the vote. Unless a fellow fat cat or raider has it in for you, you're pretty much guaranteed the seat. A 58% "for" count is more like a 13% in a truly democratic election.
Corporate hubris being what it is, though, his resignation is still noteworthy.
There were many years of opportunities to avoid that attack (if it was in fact from outside).
That had nothing to do with negotiating.
While it's no guarantee that 9/11 would have been averted, there had been an attempt to pound the terrorist training camps into the ground during the late '90's. They were derided as an attempt to "wag the dog" and interfere in the more vitally important matter of whether Clinton fooled around on his wife.
The concept of airliner kamikaze wasn't even novel. A similar plot out of the Philippines was headed off circa 1998.
This is really a commentary on how insecure the Internet is.
The Internet was born at MIT and places like it. MIT's forte is technology. Students at MIT can be expected to understand technology better than other people, because even in cases where they don't major in technology, they're still within easy reach of plenty of people who do.
And even with all that, the students can't make things safe enough.
What's really sad is that the IT professionals at MIT aren't going to be that much better at it. What they mostly do is provide a smaller, more tightly regulated target.
The actual process is called "trilateration", if I haven't botched the spelling. Sprint was claiming 1000 meter accuracy minimum.
If you can't get at least 3 towers, you have to fall back to less accurate options. I'm not sure if the 2-tower approach is employed or whether they simply take the easy way out and look for the tower with the strongest signal. I suppose it depends on provider and local equipment.
This just seems bizarre to me. I've never heard anyone refer to a tablet as a "pad", outside of Star Trek's PADDs, have you? That sounds like a bizarre ruling. Nor have I seen anyone attach i- to anything and not have it be a reference to Apple; there's e-commerce but not i-commerce, no one says "do you have an i-connection?", etc.
Am I missing something?
Circa 1964. The movie 2001, A Space Odyssey. The Astronauts aboard Discovery got their news and telephone (videophone) on a tablet device called the NewsPad. I'm not sure that it actually was supposed to have general tablet computing features, since it wasn't a major component of the story, just another prop to set the story "in the Future". Actually, for all we know, it was only intended to echo the main video network of the ship and have no native intelligence at all but still, for what it's worth, it was a "Pad".
I don't weep for Apple, though. I would grant them a trademark on "iPad Mini", but they're of the stripe that would then turn around and sue everyone and anyone who used the word "Mini", up to and including the Mini Cooper.
Automated incremental backup of the headless servers at home, every two days (and I check the backup logs regularly). The backup disks are cycled every 4 weeks: the existing set goes to an insulated box in the garage (a separate heated building), while the previous disks come in and start with a full backup. Our 4 workstations at home all get backed up to local USB disks, but these are merely for convenience - important files are always kept on the servers, where they belong.
You don't belong on this planet.
Seriously, I run RAID, cross-machine mirroring, then do daily backups, with the logs emailed to me each morning. Periodic external media copies to DVD and USB devices. In my case, I have incentive, though. I used to work for a big-name backup software company and knew of design flaws that meant that a certain percentage of backups would write out defective data. And got burned in later years when I was compelled to use the product for my later employer. Because the RAID arrays would blow a disk the minute I'd leave on vacation, then blow a second one before I got back to replace it. And the restore would fail.
For a long time I used TAR scripts, because unlike the fancy expensive commercial products, I could always count on being able to use a tarball as long as the media itself was undamaged.
Ironically, this is the weekend I started learning Bacula. Tar is reliable, but it doesn't manage media catalogs.
No need to do anything. When disaster strikes just wait three days and it simply restores itself. Shortly afterwards the data ascends into The Cloud and becomes available forever and ever. Halleluiah!
I dunno. From what I hear, you can plead with it all you like after that, but it will only answer you if it feels like it.
Come to think of it, you saw metal next to an appliance where exposed conductors are all over the place inside?????
So? Gravity's pretty good about keeping metal dust from flying around the room. And the grounded metal enclosure is pretty good about dissipating any static charge on such conductive dust.
?????, etc.
One of the things that distinguishes actual metal dust from mere filings is the size/mass ratio of the particles. Dust is light enough to float in the air, at least briefly.
In the mean time, you have fans sucking air into the PC case which is chock full of little metal runways spaced very close together. Almost the size of a dust particle in some cases. So the race is between gravity and the fans.
[......] I am on slashdot now because I have to let the welds cool down so that I can move the work and then weld another section. If I don't wait for the weld to cool down, I will burn my finger off. [......]
That sounds like a feeble excuse! Have you ever thought of using tongs?
Don't be silly. When I use tongs to type, half the words come out misspelled.
I also watch movies and listen to music while working on stuff. I have my workbench next to my computer with DVD drive. I put on a movie and then go at it.
I can do stuff such as saw metal, engrave glass, grind and polish gemstones; all while watching and listening to a movie.
Er, you have a box with rotating devices (fans, DVD drive) sitting close to tools whose purpose is to modify objects made of hard stone and metal by lopping off them????
Come to think of it, you saw metal next to an appliance where exposed conductors are all over the place inside?????
displays of critical things like system loads and server alerts
I don't know the details of what you are talking about. But that sort of functionality should be handled via. the notifications system. That's the idea that notifications that are out of process are managed through a notifications manager. You would get the same kind of protections. That's part of applications needing to support the new Gnome 3 design.
Not the same thing. I'm talking about the "EKG" graphs. You don't want notifications popping up all the time for stuff like that, but I do want/need the ability to see if my CPU workload is starting to spiral out of control, memory is getting tight, or the network is getting congested and what the trends are.
I also miss the ability to keep both a UTC and local timeclock in the toolbar. Even Cinnamon doesn't give me that.
they already have injection molding machines that do that; they've had that for decades (since the 90s at least) i remember going to brookfield zoo, and having a gorilla made to order in '90 and then again in '03 i could probably go and get another one once the zoo opens
They've had them at rest stops on the Florida Turnpike since it was built (1960's, I think). I believe they had them at the local zoo, at least for a while.
But there's an essential difference. The injection molding machines each have the ability to manufacture ONE thing, which is whatever the dies installed on it shaped. And due to their construction, they made objects that were mostly hollow.
An actual 3D printer can make anything that you can provide viable blueprints for, hollow or not, subject to the limitations of color, material and topology.
Plus, the idea here was that the same machine could print both commercial product and walk-in projects.
Gnome 3 is very different than 90s style desktops. No question a transition is required. Worse is that most people really don't have the right hardware to make the transition terribly beneficial yet. Once the entire stack is in place: OS, hardware, apps then the superiority becomes obvious.
As for consistency. Nope there is going to be a messy transition period where you and many others will just be using two radically different systems. But that's happening to everyone. Same thing on Windows 8. Same thing on OSX vs. iOS....
There was no superiority when they took away all my toolbar applets. Yes, they were untidy little warts that detracted from a beautiful UI experience, but they were live displays of critical things like system loads and server alerts in places that were protected from being shifted around or buried under other windows. From what I am seeing, even the latest backwards-improvement to Gnome won't restore them. Moving to Cinnamon helped, but I still miss some of them.
Waiting for it to be a service at e.g. my local Walgreen's (as lab-quality photo printing is today). Doesn't need to be in my house, just convenient.
That actually might be a double-plus for them. Get rid of the cheap plastic gimmicks that they sell and put some 3-D printers there. With quick-access buttons to print out the cheap plastic gimmicks.
No need for inventory or shipping them in from China!
People could also stop responding to any and all APK posts, real or forged.
What we really need is a "tl;dr" rating so that this interminable tripe can be independently displayed pre-collapsed without censoring others who are merely -1. It's a pain to scroll past this stuff and all the moreso since it's double-spaced, which apparently games the "view more" mechanism.
IBM was allegedly working on the equivalent of "software on silicon" as far back as the late 1970s ("Future Systems"). Didn't happen, although some of the extremely CISC-y instructions in the current zSeries set aren't too far removed.
One problem with doing database in hardware is that it's a lot faster and easier to modify software than it is to modify hardware. Especially once it's commodity stuff out in the field.
How much truly high-performance stuff is done on Oracle DB is unclear to me. A lot of the biggest of the big-data projects are running on noSQL or MySQL server farms. The merely "big" databases that run on IBM mainframes may run Oracle, but they may run DB2.
But really, how much rapid progress would you have expected from an organization which believed (at the time) that an effective way to spread the love of Jesus was torturing people to death? I mean, I've read the Bible and the words of Christ -- I couldn't find "hold an Inquisition" or "torture your neighbor" anywhere in it.
The key oxymoron there, however is "organization" and "rapid progress". The fact that the organization in question was religious definitely comes in second.
Yes, God loves you so much that he has prepared a place of perpetual torment for you if you don't love him back, and killed Himself to save you from it without asking you if that's the solution you wanted. So says Christianity. The rationale behind the torture was "better that the person suffer a little pain now than a lot of pain eternally". And while expecting a forced "conversion" to mean anything is about as realistic as expecting nothing but the truth from a forced "confession", some people can't be convinced otherwise.
Why should the USA's taxpayers be funding the weather data collection for the entire globe (which is basically what happens right now)? The cost should be spread among all countries that use the data. This is one very logical means of doing so.
For the record, I am not an American, but I appreciate the amount of free data my government gets at the expense of US taxpayers.
Thank you.
But if I'm not mistaken, a lot of those satellites are not US satellites. I'm pretty sure that the European ones are courtesy of ESA or somebody like that.
Actually I never unstood why you have VMs on a system that you don't have to emulate. Ie, I use VMware on a Mac to run Windows stuff, but I can't figure out why run Windows on top of Windows? Sure there's the issue of making a sandbox, but surely there's more to it than that, it's an expensive and slow way to get something simple done. Some people have virtual servers, but what's the point of that if you end up with two servers on one machine that run more than twice as slow than if you just had the same server do both jobs directly.
Because they don't run twice as slow. One of the MAJOR Sun servers in a shop I used to work in normally ran at 14% CPU capacity. Add a few more virtual servers to the box and you can get a lot more for your hardware buck. And, incidentally, save electricity - they were blowing breakers because of all those mostly-idle boxes each pulling power.
With a suitable high-performance host, which can be hardware-optimized or simply running para-virtualized, the actual VM overhead is quite low. In the mean time, you're saving hardware while still isolating services. And if you need to load-balance VMs, many systems support box-to-box migration while the VM is still up and running.
VM appliances are wonderful things. I can clone and boot one up in a lot less time than it takes to provision a general-purpose stand-alone machine. I can sandbox a sensitive machine. There are lots of good reasons for virtualization.
Slashdot Mirror
If password recovery is the only instance where email is sent to users, this should work. Login checks for matching email hash and password hash, recovery email is sent to any address with matching email hash. Of course for recovery you still need to send the email address to the server in plaintext, and it will be hard to delete all traces of it on the server.
You really don't want to do that. Unless you have a perfect hash, you have the risk of hash collisions, i. e., false matches. Hash on password is relatively safe. Hash on user identity is not. You could end up sending information to the wrong person. The odds are against it, but Murphy sneers at odds.
Probably a more appropriate word than "fraud" would be "farce".
It's really amazing (and depressing) that a lot of blind apologists for corporations think that corporations are democracies. They're not, of course. And not just in the sense of "democratic republic".
Directors are elected Soviet-style, it's not one person one vote, it's one share one vote, and on top of everything else, if you don't vote at all, that usually gets counted as a "for" vote. At least in the Soviet Union you had to show up and cast your vote (emphasis on the word "had", though. With optional bayonets).
So it's unsurprising that he won the vote. Unless a fellow fat cat or raider has it in for you, you're pretty much guaranteed the seat. A 58% "for" count is more like a 13% in a truly democratic election.
Corporate hubris being what it is, though, his resignation is still noteworthy.
You could even have it just boot straight into Firefox. No-one would even know it was Linux.
Just tell them that it's the new version of Windows.
And when they decide that the GUI is all F-d up compared to what they're used to, they'll figure yup, it's a new version of Windows all right.
There was no opportunity at all for negotiations.
There were many years of opportunities to avoid that attack (if it was in fact from outside).
That had nothing to do with negotiating.
While it's no guarantee that 9/11 would have been averted, there had been an attempt to pound the terrorist training camps into the ground during the late '90's. They were derided as an attempt to "wag the dog" and interfere in the more vitally important matter of whether Clinton fooled around on his wife.
The concept of airliner kamikaze wasn't even novel. A similar plot out of the Philippines was headed off circa 1998.
This is really a commentary on how insecure the Internet is.
The Internet was born at MIT and places like it. MIT's forte is technology. Students at MIT can be expected to understand technology better than other people, because even in cases where they don't major in technology, they're still within easy reach of plenty of people who do.
And even with all that, the students can't make things safe enough.
What's really sad is that the IT professionals at MIT aren't going to be that much better at it. What they mostly do is provide a smaller, more tightly regulated target.
Only on Slashdot does someone who's anti-Google has to be pro-Microsoft.
There's not a single Microsoft thing in my house, and I'm concerned with everything Google is doing.
You're either with us, or you're with the Googlists!
21st Century thinking, Yeah!
The actual process is called "trilateration", if I haven't botched the spelling. Sprint was claiming 1000 meter accuracy minimum.
If you can't get at least 3 towers, you have to fall back to less accurate options. I'm not sure if the 2-tower approach is employed or whether they simply take the easy way out and look for the tower with the strongest signal. I suppose it depends on provider and local equipment.
oh, I figured on it being a ZX81 BASIC Frogger clone...
Considering their reputation for running 1950's automobiles, I vote Autocoder. Or maybe FORTRAN.
This just seems bizarre to me. I've never heard anyone refer to a tablet as a "pad", outside of Star Trek's PADDs, have you? That sounds like a bizarre ruling. Nor have I seen anyone attach i- to anything and not have it be a reference to Apple; there's e-commerce but not i-commerce, no one says "do you have an i-connection?", etc.
Am I missing something?
Circa 1964. The movie 2001, A Space Odyssey. The Astronauts aboard Discovery got their news and telephone (videophone) on a tablet device called the NewsPad. I'm not sure that it actually was supposed to have general tablet computing features, since it wasn't a major component of the story, just another prop to set the story "in the Future". Actually, for all we know, it was only intended to echo the main video network of the ship and have no native intelligence at all but still, for what it's worth, it was a "Pad".
I don't weep for Apple, though. I would grant them a trademark on "iPad Mini", but they're of the stripe that would then turn around and sue everyone and anyone who used the word "Mini", up to and including the Mini Cooper.
"My linux systems require constant patching for them not to be p0wned by script kiddies. Therefore it follows that every other system is the same.".
Love that logic.
If you find an OS that doesn't sooner or later turn up something exploitable, please let us know.
Especially if it jacks into a network.
Automated incremental backup of the headless servers at home, every two days (and I check the backup logs regularly). The backup disks are cycled every 4 weeks: the existing set goes to an insulated box in the garage (a separate heated building), while the previous disks come in and start with a full backup. Our 4 workstations at home all get backed up to local USB disks, but these are merely for convenience - important files are always kept on the servers, where they belong.
You don't belong on this planet.
Seriously, I run RAID, cross-machine mirroring, then do daily backups, with the logs emailed to me each morning. Periodic external media copies to DVD and USB devices. In my case, I have incentive, though. I used to work for a big-name backup software company and knew of design flaws that meant that a certain percentage of backups would write out defective data. And got burned in later years when I was compelled to use the product for my later employer. Because the RAID arrays would blow a disk the minute I'd leave on vacation, then blow a second one before I got back to replace it. And the restore would fail.
For a long time I used TAR scripts, because unlike the fancy expensive commercial products, I could always count on being able to use a tarball as long as the media itself was undamaged.
Ironically, this is the weekend I started learning Bacula. Tar is reliable, but it doesn't manage media catalogs.
No need to do anything. When disaster strikes just wait three days and it simply restores itself. Shortly afterwards the data ascends into The Cloud and becomes available forever and ever. Halleluiah!
I dunno. From what I hear, you can plead with it all you like after that, but it will only answer you if it feels like it.
So? Gravity's pretty good about keeping metal dust from flying around the room. And the grounded metal enclosure is pretty good about dissipating any static charge on such conductive dust.
?????, etc.
One of the things that distinguishes actual metal dust from mere filings is the size/mass ratio of the particles. Dust is light enough to float in the air, at least briefly.
In the mean time, you have fans sucking air into the PC case which is chock full of little metal runways spaced very close together. Almost the size of a dust particle in some cases. So the race is between gravity and the fans.
Folks:
[......] I am on slashdot now because I have to let the welds cool down so that I can move the work and then weld another section. If I don't wait for the weld to cool down, I will burn my finger off. [......]
That sounds like a feeble excuse! Have you ever thought of using tongs?
Don't be silly. When I use tongs to type, half the words come out misspelled.
I also watch movies and listen to music while working on stuff. I have my workbench next to my computer with DVD drive. I put on a movie and then go at it.
I can do stuff such as saw metal, engrave glass, grind and polish gemstones; all while watching and listening to a movie.
Er, you have a box with rotating devices (fans, DVD drive) sitting close to tools whose purpose is to modify objects made of hard stone and metal by lopping off them????
Come to think of it, you saw metal next to an appliance where exposed conductors are all over the place inside?????
displays of critical things like system loads and server alerts
I don't know the details of what you are talking about. But that sort of functionality should be handled via. the notifications system. That's the idea that notifications that are out of process are managed through a notifications manager. You would get the same kind of protections. That's part of applications needing to support the new Gnome 3 design.
Not the same thing. I'm talking about the "EKG" graphs. You don't want notifications popping up all the time for stuff like that, but I do want/need the ability to see if my CPU workload is starting to spiral out of control, memory is getting tight, or the network is getting congested and what the trends are.
I also miss the ability to keep both a UTC and local timeclock in the toolbar. Even Cinnamon doesn't give me that.
they already have injection molding machines that do that; they've had that for decades (since the 90s at least)
i remember going to brookfield zoo, and having a gorilla made to order in '90 and then again in '03
i could probably go and get another one once the zoo opens
They've had them at rest stops on the Florida Turnpike since it was built (1960's, I think). I believe they had them at the local zoo, at least for a while.
But there's an essential difference. The injection molding machines each have the ability to manufacture ONE thing, which is whatever the dies installed on it shaped. And due to their construction, they made objects that were mostly hollow.
An actual 3D printer can make anything that you can provide viable blueprints for, hollow or not, subject to the limitations of color, material and topology.
Plus, the idea here was that the same machine could print both commercial product and walk-in projects.
Gnome 3 is very different than 90s style desktops. No question a transition is required. Worse is that most people really don't have the right hardware to make the transition terribly beneficial yet. Once the entire stack is in place: OS, hardware, apps then the superiority becomes obvious.
As for consistency. Nope there is going to be a messy transition period where you and many others will just be using two radically different systems. But that's happening to everyone. Same thing on Windows 8. Same thing on OSX vs. iOS....
There was no superiority when they took away all my toolbar applets. Yes, they were untidy little warts that detracted from a beautiful UI experience, but they were live displays of critical things like system loads and server alerts in places that were protected from being shifted around or buried under other windows. From what I am seeing, even the latest backwards-improvement to Gnome won't restore them. Moving to Cinnamon helped, but I still miss some of them.
Waiting for it to be a service at e.g. my local Walgreen's (as lab-quality photo printing is today). Doesn't need to be in my house, just convenient.
That actually might be a double-plus for them. Get rid of the cheap plastic gimmicks that they sell and put some 3-D printers there. With quick-access buttons to print out the cheap plastic gimmicks.
No need for inventory or shipping them in from China!
People could also stop responding to any and all APK posts, real or forged.
What we really need is a "tl;dr" rating so that this interminable tripe can be independently displayed pre-collapsed without censoring others who are merely -1. It's a pain to scroll past this stuff and all the moreso since it's double-spaced, which apparently games the "view more" mechanism.
IBM was allegedly working on the equivalent of "software on silicon" as far back as the late 1970s ("Future Systems"). Didn't happen, although some of the extremely CISC-y instructions in the current zSeries set aren't too far removed.
One problem with doing database in hardware is that it's a lot faster and easier to modify software than it is to modify hardware. Especially once it's commodity stuff out in the field.
How much truly high-performance stuff is done on Oracle DB is unclear to me. A lot of the biggest of the big-data projects are running on noSQL or MySQL server farms. The merely "big" databases that run on IBM mainframes may run Oracle, but they may run DB2.
But really, how much rapid progress would you have expected from an organization which believed (at the time) that an effective way to spread the love of Jesus was torturing people to death? I mean, I've read the Bible and the words of Christ -- I couldn't find "hold an Inquisition" or "torture your neighbor" anywhere in it.
The key oxymoron there, however is "organization" and "rapid progress". The fact that the organization in question was religious definitely comes in second.
Yes, God loves you so much that he has prepared a place of perpetual torment for you if you don't love him back, and killed Himself to save you from it without asking you if that's the solution you wanted. So says Christianity. The rationale behind the torture was "better that the person suffer a little pain now than a lot of pain eternally". And while expecting a forced "conversion" to mean anything is about as realistic as expecting nothing but the truth from a forced "confession", some people can't be convinced otherwise.
Why should the USA's taxpayers be funding the weather data collection for the entire globe (which is basically what happens right now)? The cost should be spread among all countries that use the data. This is one very logical means of doing so.
For the record, I am not an American, but I appreciate the amount of free data my government gets at the expense of US taxpayers.
Thank you.
But if I'm not mistaken, a lot of those satellites are not US satellites. I'm pretty sure that the European ones are courtesy of ESA or somebody like that.
Actually I never unstood why you have VMs on a system that you don't have to emulate. Ie, I use VMware on a Mac to run Windows stuff, but I can't figure out why run Windows on top of Windows? Sure there's the issue of making a sandbox, but surely there's more to it than that, it's an expensive and slow way to get something simple done. Some people have virtual servers, but what's the point of that if you end up with two servers on one machine that run more than twice as slow than if you just had the same server do both jobs directly.
Because they don't run twice as slow. One of the MAJOR Sun servers in a shop I used to work in normally ran at 14% CPU capacity. Add a few more virtual servers to the box and you can get a lot more for your hardware buck. And, incidentally, save electricity - they were blowing breakers because of all those mostly-idle boxes each pulling power.
With a suitable high-performance host, which can be hardware-optimized or simply running para-virtualized, the actual VM overhead is quite low. In the mean time, you're saving hardware while still isolating services. And if you need to load-balance VMs, many systems support box-to-box migration while the VM is still up and running.
VM appliances are wonderful things. I can clone and boot one up in a lot less time than it takes to provision a general-purpose stand-alone machine. I can sandbox a sensitive machine. There are lots of good reasons for virtualization.
Good point, you can use a rapberry pi for that board.
Or you can see my other suggestion, which was a catalog page for a USB-to-GPIO board.