I were to try to force people to submit to either an AIT scanner or "enhanced pat downs" you and I both know I'd end up in jail.
If they bought the ticket knowing the scanning and pat-downs were part of your security, you would be able to justify their acceptance of your terms in court. They could plead ignorance, but in the case of the TSA ignorance is not an excuse.
On the street, where you have no contract, nobody from the government can search you. In a situation where you've entered an agreement, that is no longer true.
And by "street" I mean while walking the public ways. If you're in a car or on a toll-road, you've agreed to waive certain of your rights. Which rights is a bit of a hodgepodge. You can be forced to choose between taking a sobriety test and losing your license, but can't be stopped and forced to open your trunk without the stopper having probable cause; the latter, though, is the main reason cops look for a reason to stop you, since once they have you on a traffic violation the slope slips steeply. Good luck rectifying that before the Sun burns out.
The web server is way too high up the stack, and having it do the work is how the DDoS wants to hamstring you anyway.
I was thinking that it should be distributed.
See, in order to block incoming traffic, you have to accept the connection at the lower layers so you can decode it to determine that it's from the offending IP address. DoS long ago devolved to just doing SYN floods, since it's impossible to stop a SYN because you don't look at its contents before it's tied up your hardware almost as much as it can. A few thousand of those per second and you're not doing any business with anyone.
So you tell your router block(src, dest). But that just makes your router the bottleneck. You need to push it out to all the routers that feed your router, and so on.
And you need to do it for all the src addresses.
So, in a world where all routers can handle blocks of this sort, the blocks propagate outward to the nodes and it's their routers blocking any traffic to your dest address, and the D in DDoS is no longer a problem.
The people at the top of the income ladder are making an ever-increasing exponent more than the people at the bottom, and the people at the bottom are now trying to do the most basic of self-subsistence activities on land that can't be plowed by two laborers yoked to a ploughshare, and we rely on people who work for free to come to the rescue of humanity?
When a politician fronting for those at the top of the income tells you that you have the individual power to make yourself successful, strap them into the yoke.
There are cards involved, and your fortunes against an equally-skilled player are entirely down to them.
Just saying "but your skill makes a difference" is not enough. Your skill at blackjack makes a difference, too (with or without counting cards). Should blackjack not be called gambling? There are ways to make your luck better or worse at every table in the place by not having full command of the rules and the statistics. Same deal in poker.
Played perfectly, it's a game of chance. Played imperfectly, it's a game of here-take-all-my-money.
It's gambling.
Steve's going to need some king-hell lawyers to get around an argument so simple I can slam-dunk it on the Internet.
The online poker industry has been around for over 20 years.
That they have no clout despite making money faster than they can replace ink in a counterfeiting press is testament to the fact that they're fucking cunts.
The Wire Act, which is decades old, defines transmitting gambling information across state lines via wire (and by wire they mean any communications medium, even if it's radio or satellite or Aldis lamp) as a crime, and the borders of the nation are indeed state lines. Putting the servers offshore made it (nearly) impossible to prosecute the server operators, and it has always been a pain in the ass to detect the gambling information on the net and link it to the little fish who are playing, but the fact that it was unstoppable didn't make it legal.
In order to choke them, the feds changed the law to make it illegal to send them money (money and gambling information being different things, the Wire Act didn't make that illegal, and RICO and existing money-laundering laws apparently didn't apply). So the gambling sites, having operated with impunity, decided that the law just didn't apply to them if they could hide from it, and created these electronic bag-men, and a form of monetary bootlegging.
But they've been caught at it and indicted for it and insofar as they can be brought to trial they will pay for it.
It's because long ago when bookies were the only game in town, and organized crime was in charge of all bookies, it was another way to fight organized crime.
Still is. Just because the organization has a tax ID doesn't make it an honest company. These guys proved it in spades.
No, you're not doing any funky RF on-chip, unless someone is making specialized FPGAs with the RF goodies baked-in.
FPGAs are wizard for dev cycles, though, if your changes are only in the logical realm. No need to turn new boards; just reprogram the FPGA and get on with your life.
This guy's real problem is it's going to be as little as 1/N as fast as the N times bigger circuit he's replacing.
Sometimes making an FPGA is cheaper than building an equivalent board. You can get preprogrammed cells for entire microprocessors now. And lots of other library cells. Build an entire custom computer into a single package, if you want.
It's not dirt-cheap, but it's easy, and saves an assload on inventory.
Erm, no. This is kind of the opposite of delay lines. It's more like a pipeline, where each segment of the pipe is actually the same piece of silicon real-estate.
Your data goes through the entire pipeline, getting munged just as a pipeline would at each step, and comes out just how you want it.
Problem is, with a pipeline I can have a different datum in each segment. With this, one datum has to go through all the steps before I can feed another datum into the pipeline.
The pipeline gives me an N:1 speedup due to, well, pipelining. This gives me a 1:N cost reduction vs. that pipeline, but at the cost of all that pipelined speedup.
Just take that 1.6 GHz and divide it by N and you get his data throughput rate vs. a pipelined processor with N stages and a 1.6 GHz clock.
And if the original design only had 1 stage, but it filled up N squares of silicon, and his chip only takes 1 square, now it takes N cycles just to do the work of that original design. Again, divide that 1.6 GHz by N and you get his effective data rate.
So it's cheaper to fabricate, about the same price to program, makes your boards a hair cheaper (smaller packaging we'd hope), but it makes your stuff run hyper-slow.
Shell scripting lets you turn things you do on a shell command-line into scripts, without changing them.
That you can then cruft them up with reams of flow-of-control syntax, variables out the wazoo, optargs for days, and trap statements, is just a bonus.
Sure you would have done it better in Python. But if you don't know Python you take what you type into the shell more than once, and make a script out of it.
If you still have your right and your ability to vote, you are, indeed, the government of the United States of America. Plus all smaller jurisdictions enclosing your home.
However, I did mention semantics, and your interpretation of my statement is backwards. I didn't say "all people are government", I said "government is all people". It happens to be true both ways, in this country, sort of (as I said there are some who are legally disenfranchised), but you got it the other way around anyway.
Governments create plenty of wealth. Particularly by buying things that otherwise have no utility, or building things that no non-goverment entity is capable of building. And by being a source and sink of corruption. Government is a human activity and just as wealth-building as any other service or manufacturing industry.
Hydrogen, when exposed to oxygen, combusts.
No, something has to raise it above its autoignition temperature, which is over 500C in air.
But, since it was in a nuclear reactor that was probably still that hot...
Really, all they have to do is keep saying what they're going to do, and the problem is going to go away on its own, eventually...
I were to try to force people to submit to either an AIT scanner or "enhanced pat downs" you and I both know I'd end up in jail.
If they bought the ticket knowing the scanning and pat-downs were part of your security, you would be able to justify their acceptance of your terms in court. They could plead ignorance, but in the case of the TSA ignorance is not an excuse.
On the street, where you have no contract, nobody from the government can search you. In a situation where you've entered an agreement, that is no longer true.
And by "street" I mean while walking the public ways. If you're in a car or on a toll-road, you've agreed to waive certain of your rights. Which rights is a bit of a hodgepodge. You can be forced to choose between taking a sobriety test and losing your license, but can't be stopped and forced to open your trunk without the stopper having probable cause; the latter, though, is the main reason cops look for a reason to stop you, since once they have you on a traffic violation the slope slips steeply. Good luck rectifying that before the Sun burns out.
The web server is way too high up the stack, and having it do the work is how the DDoS wants to hamstring you anyway.
I was thinking that it should be distributed.
See, in order to block incoming traffic, you have to accept the connection at the lower layers so you can decode it to determine that it's from the offending IP address. DoS long ago devolved to just doing SYN floods, since it's impossible to stop a SYN because you don't look at its contents before it's tied up your hardware almost as much as it can. A few thousand of those per second and you're not doing any business with anyone.
So you tell your router block(src, dest). But that just makes your router the bottleneck. You need to push it out to all the routers that feed your router, and so on.
And you need to do it for all the src addresses.
So, in a world where all routers can handle blocks of this sort, the blocks propagate outward to the nodes and it's their routers blocking any traffic to your dest address, and the D in DDoS is no longer a problem.
i've been turning down jobs in software-defined radio since...jeebus...1999?
Let's see how they muck it up now.
By overselling the concept.
It's a good way to keep one brand of browser from crapping on a website if something about it runs amok.
But it's going to have almost no measurable effect on the incidence and severity of actual DDoS attacks.
daps. you got there before i did.
i wonder if posting a link to /. could be prosecutable as harassment by proxy.
I have an interesting way to stop muggers. I just don't mug anyone.
Wait...
So, let me get this straight.
The people at the top of the income ladder are making an ever-increasing exponent more than the people at the bottom, and the people at the bottom are now trying to do the most basic of self-subsistence activities on land that can't be plowed by two laborers yoked to a ploughshare, and we rely on people who work for free to come to the rescue of humanity?
When a politician fronting for those at the top of the income tells you that you have the individual power to make yourself successful, strap them into the yoke.
The game was up when ICANN took over for IANA. Making ICANN a department of the UN is like throwing another chicken bone on the compost heap.
There are cards involved, and your fortunes against an equally-skilled player are entirely down to them.
Just saying "but your skill makes a difference" is not enough. Your skill at blackjack makes a difference, too (with or without counting cards). Should blackjack not be called gambling? There are ways to make your luck better or worse at every table in the place by not having full command of the rules and the statistics. Same deal in poker.
Played perfectly, it's a game of chance. Played imperfectly, it's a game of here-take-all-my-money.
It's gambling.
Steve's going to need some king-hell lawyers to get around an argument so simple I can slam-dunk it on the Internet.
Reasonable. Offshore sites act illegally, so fuck 'em. Bring the business home.
The online poker industry has been around for over 20 years.
That they have no clout despite making money faster than they can replace ink in a counterfeiting press is testament to the fact that they're fucking cunts.
Dude. Indictment = charge.
No, it's illegal.
The Wire Act, which is decades old, defines transmitting gambling information across state lines via wire (and by wire they mean any communications medium, even if it's radio or satellite or Aldis lamp) as a crime, and the borders of the nation are indeed state lines. Putting the servers offshore made it (nearly) impossible to prosecute the server operators, and it has always been a pain in the ass to detect the gambling information on the net and link it to the little fish who are playing, but the fact that it was unstoppable didn't make it legal.
In order to choke them, the feds changed the law to make it illegal to send them money (money and gambling information being different things, the Wire Act didn't make that illegal, and RICO and existing money-laundering laws apparently didn't apply). So the gambling sites, having operated with impunity, decided that the law just didn't apply to them if they could hide from it, and created these electronic bag-men, and a form of monetary bootlegging.
But they've been caught at it and indicted for it and insofar as they can be brought to trial they will pay for it.
No.
Online gambling has been illegal for decades.
It's because long ago when bookies were the only game in town, and organized crime was in charge of all bookies, it was another way to fight organized crime.
Still is. Just because the organization has a tax ID doesn't make it an honest company. These guys proved it in spades.
read
your
fucking
ticket
the airport is not the street
No, you're not doing any funky RF on-chip, unless someone is making specialized FPGAs with the RF goodies baked-in.
FPGAs are wizard for dev cycles, though, if your changes are only in the logical realm. No need to turn new boards; just reprogram the FPGA and get on with your life.
This guy's real problem is it's going to be as little as 1/N as fast as the N times bigger circuit he's replacing.
Yup. Especially write-once FPGAs.
Sometimes making an FPGA is cheaper than building an equivalent board. You can get preprogrammed cells for entire microprocessors now. And lots of other library cells. Build an entire custom computer into a single package, if you want.
It's not dirt-cheap, but it's easy, and saves an assload on inventory.
Erm, no. This is kind of the opposite of delay lines. It's more like a pipeline, where each segment of the pipe is actually the same piece of silicon real-estate.
Your data goes through the entire pipeline, getting munged just as a pipeline would at each step, and comes out just how you want it.
Problem is, with a pipeline I can have a different datum in each segment. With this, one datum has to go through all the steps before I can feed another datum into the pipeline.
The pipeline gives me an N:1 speedup due to, well, pipelining. This gives me a 1:N cost reduction vs. that pipeline, but at the cost of all that pipelined speedup.
Just take that 1.6 GHz and divide it by N and you get his data throughput rate vs. a pipelined processor with N stages and a 1.6 GHz clock.
And if the original design only had 1 stage, but it filled up N squares of silicon, and his chip only takes 1 square, now it takes N cycles just to do the work of that original design. Again, divide that 1.6 GHz by N and you get his effective data rate.
So it's cheaper to fabricate, about the same price to program, makes your boards a hair cheaper (smaller packaging we'd hope), but it makes your stuff run hyper-slow.
Cheap chips for cheap toys.
Next!
Shell scripting lets you turn things you do on a shell command-line into scripts, without changing them.
That you can then cruft them up with reams of flow-of-control syntax, variables out the wazoo, optargs for days, and trap statements, is just a bonus.
Sure you would have done it better in Python. But if you don't know Python you take what you type into the shell more than once, and make a script out of it.
So you're saying it's not just native, it's savage?
And neither FF nor IE implement enough to pass the HTML5 test "completely".
and am in no way, shape, or form, government.
Lost your right to vote, huh?
If you still have your right and your ability to vote, you are, indeed, the government of the United States of America. Plus all smaller jurisdictions enclosing your home.
However, I did mention semantics, and your interpretation of my statement is backwards. I didn't say "all people are government", I said "government is all people". It happens to be true both ways, in this country, sort of (as I said there are some who are legally disenfranchised), but you got it the other way around anyway.
QED
Governments create plenty of wealth. Particularly by buying things that otherwise have no utility, or building things that no non-goverment entity is capable of building. And by being a source and sink of corruption. Government is a human activity and just as wealth-building as any other service or manufacturing industry.