So I read the spoiler for Matrix: Revolution, and now I have absolutely no desire to see it. This technique also works for execrable movie adaptations like Timeline.
This saves me: * a metric buttload of money; * from disappointment; * more time for my kids.
I'm not sure PKI needs to be part of the SPAM solution. Three reasons: 1) The same clueless ficktwizzles that set up their mail servers as open relays (224K of them? according to ORDB.org) will also be setting up their mail server certificates. No, this isn't fraught with peril.
2) There isn't a black market (that I'm aware of, doh) of private keys. Client certificates are useless, server certificates are useless unless you also own the domain name, code signing certificates, well, um, yeah I guess those are dangerous. But we've seen the lengths spammers will go, and I can easily foresee a huge market for stolen certificates, if now every domain has one to send mail.
3) The _last_ thing we need to do is get Verisign slobbering over using certificates for email. Over in the SPF discussion mailing list there are Verisign people who want certificates in the DNS records published by SPF.
A short while ago, Dijkstra's papers were made available online. Slashdot article here.
A pervasive theme was that managers don't like exceptional people... he decried "the collectivist desire to play down the potential role of the individual." Managers always scorn rugged individualists because they mess up the well ordered meetings.
This may be the reason, and the only reason, why open source is successful: because we've invented a system where brilliant individuals can work together.
I was at the ass-end of one of your break-ins...
on
Ask Kevin Mitnick
·
· Score: 2, Interesting
I was the one that discovered your presence on our network at Security Pacific.
Later one, one of the staff had a phone conversation with you. You only spoke with DTMF beeps, but the gist of the conversation was our asking you why you broke in...
and your answer was, apparently, to get the source code for the Supervisor Series, which BTW is now publicly available at DECUS.
So, I have two questions for you: 1. Was that really the reason for the break in? 2. Did you know that you had managed to get to the production machines, doing back-end securities processing? If so, what stopped you from doing more damage?
BTW... for what it's worth: I feel you deserved the jail time, you didn't deserve the unconstitutional railroading you got.
The acute accent U+00B4 is in the ISO latin-1 character set. Alternatively, the author might have used one of the Unicode characters:
U+2018 ‘ left single quotation mark U+2019 ’ right single quotation mark
But when it's posted without a character-encoding MIME type, the processor just sees a strange character, and replaces it with a default character, in this case a question mark.
This article paints the ShowEQ developers with a rather sympathetic brush. If these were aimbot developers for q3 or ut or cs, wouldn't we totally revile them? What is the difference?
Maybe there should be two sets of servers, one for all the ppl who want to play fair and play against ppl who are playing fair; and one for cheaters, and those who want to reverse engineer the protocol, etc.
Goddamnit. Nearly everyone gets this wrong. Things are *different* in orbit. If you plop 1000 8 foot lengths of ceramic-coated rebar out the back of a spaceship, you'll get... 1000 8 foot lengths of ceramic-coated rebar floating next to you. For a very very long time.
You'll need *energy* to move it into an orbit that will collide with the earth again. However, if you have enough energy to place 1000 8 foot Y.Y.Y. into orbit in the first place, you'll *already have* the big swinging dick in international politics, no need to get all biblical.
I get a T68i from T-Mobile (owned by Deutsche Telekom!). This is a tri-band GSM phone.
I go to Germany (my understanding is that this is where Deutsche Telekom is based:-). The phone doesn't work. It presents a very beautiful display of all the services available (O2, T-Mobile, etc) but of course I can't use these services.
I go to the t-mobile web site, and it tells me I need to dial a 1-800 number to activate international roaming! ARRRGGHH! Can't... dial... 1-800... overseas... The website gives me a pretty JSP error when I try to do it online.
So I rented a phone and swapped the SIM card. Heh.
Direct quote from the article:
"You cannot compete with large companies."
Yeah, sure. Asswipe.
Compare with Joel's advice to, if at all possible, get into a design war with a large company. You'll always win.
Do you have a reverse DNS entry?
http://postmaster.info.aol.com/info/rdns.html
AOL silently ignores mail from an SMTP connection that doesn't have the reverse DNS set up.
movies I know I'm going to like.
So I read the spoiler for Matrix: Revolution, and now I have absolutely no desire to see it. This technique also works for execrable movie adaptations like Timeline.
This saves me:
* a metric buttload of money;
* from disappointment;
* more time for my kids.
Agreed on most points.
I'm not sure PKI needs to be part of the SPAM solution. Three reasons:
1) The same clueless ficktwizzles that set up their mail servers as open relays (224K of them? according to ORDB.org) will also be setting up their mail server certificates. No, this isn't fraught with peril.
2) There isn't a black market (that I'm aware of, doh) of private keys. Client certificates are useless, server certificates are useless unless you also own the domain name, code signing certificates, well, um, yeah I guess those are dangerous. But we've seen the lengths spammers will go, and I can easily foresee a huge market for stolen certificates, if now every domain has one to send mail.
3) The _last_ thing we need to do is get Verisign slobbering over using certificates for email. Over in the SPF discussion mailing list there are Verisign people who want certificates in the DNS records published by SPF.
What's worse than finding a worm in your applet?
Having your genitals wired to the mains.
--
Actually, it does work like a charm.
But hey, let's not cloud the issue with facts.
The facts say that it is *FAR EASIER* for school kids to get pot than alcohol or tobacco.
FreeBSD jails rock. Root access to your own logical partition which looks and smells just like a dedicated machine, with no overhead.
Virtual host providers can do it for free with FreeBSD, or with ~10% CPU load using User-Mode Linux.
But I'm not sure that's a kernel issue. Virtual server providers use FreeBSD jails (no CPU cost), or User-Mode Linux (10% CPU cost)
A friendly reminder about it's and its:
itsits.gif (safe for work)
A short while ago, Dijkstra's papers were made available online. Slashdot article here.
A pervasive theme was that managers don't like exceptional people... he decried "the collectivist desire to play down the potential role of the individual." Managers always scorn rugged individualists because they mess up the well ordered meetings.
This may be the reason, and the only reason, why open source is successful: because we've invented a system where brilliant individuals can work together.
...as if a million incoming HTTP requests were suddently silenced.
"That's no moon... it's a slashdotting!"
Media organizations know they get eyeballs when their audience is afraid.
Ignorant and afraid of terrorists? Watch Fox News.
Ignorant and afraid of hackers? Read Wired, or WinInformant.
Maybe we should be afraid of ignorance, instead.
Elevators == Muzak
Muzak == Craziness
Moderators == On Crack
#8, #9 omfg
I was the one that discovered your presence on our network at Security Pacific.
Later one, one of the staff had a phone conversation with you. You only spoke with DTMF beeps, but the gist of the conversation was our asking you why you broke in...
and your answer was, apparently, to get the source code for the Supervisor Series, which BTW is now publicly available at DECUS.
So, I have two questions for you:
1. Was that really the reason for the break in?
2. Did you know that you had managed to get to the production machines, doing back-end securities processing? If so, what stopped you from doing more damage?
BTW... for what it's worth: I feel you deserved the jail time, you didn't deserve the unconstitutional railroading you got.
The acute accent U+00B4 is in the ISO latin-1 character set. Alternatively, the author might have used one of the Unicode characters:
U+2018 ‘ left single quotation mark
U+2019 ’ right single quotation mark
But when it's posted without a character-encoding MIME type, the processor just sees a strange character, and replaces it with a default character, in this case a question mark.
This article paints the ShowEQ developers with a rather sympathetic brush. If these were aimbot developers for q3 or ut or cs, wouldn't we totally revile them? What is the difference?
Maybe there should be two sets of servers, one for all the ppl who want to play fair and play against ppl who are playing fair; and one for cheaters, and those who want to reverse engineer the protocol, etc.
Goddamnit. Nearly everyone gets this wrong. Things are *different* in orbit. If you plop 1000 8 foot lengths of ceramic-coated rebar out the back of a spaceship, you'll get...
1000 8 foot lengths of ceramic-coated rebar floating next to you. For a very very long time.
You'll need *energy* to move it into an orbit that will collide with the earth again. However, if you have enough energy to place 1000 8 foot Y.Y.Y. into orbit in the first place, you'll *already have* the big swinging dick in international politics, no need to get all biblical.
Funny Ha Ha:
:-). The phone doesn't work. It presents a very beautiful display of all the services available (O2, T-Mobile, etc) but of course I can't use these services.
I get a T68i from T-Mobile (owned by Deutsche Telekom!). This is a tri-band GSM phone.
I go to Germany (my understanding is that this is where Deutsche Telekom is based
I go to the t-mobile web site, and it tells me I need to dial a 1-800 number to activate international roaming! ARRRGGHH! Can't... dial... 1-800... overseas... The website gives me a pretty JSP error when I try to do it online.
So I rented a phone and swapped the SIM card. Heh.
The problem is that the high-grade servers are running enterprise applications, which typically are licen$ed per CPU.
I'd be major-league pissed if I get twice the software bill for +10% performance improvement