Clearly not! If the 787 had blow-out panels, batteries could burn and/or explode with little consequence. The news stories would be about the danger to people on the ground, not to the aircraft.
(it goes BOOM, you get a nice neat predetermined circular hole in the bottom, and chunks of flaming battery fall from the aircraft... meanwhile, the aircraft continues operating on the other battery packs)
The M1A2 Abrams tank has one for the shells. If they start to burn, the blow-out panel pops off and the whole mess exits the tank.
Factories that make vinyl have them. When the concoction goes boom, blow-out panels prevent total destruction of the building. Workers may even survive.
Meth labs don't have them.:-)
A reasonable design would have several battery compartments, each with a separate blow-out panel. These should be located so that debris will not enter the engines or get run over by the landing gear. The rear underside seems like a good location.
You're more like an "animal torturer" than you realize. You personify animals. The only difference is that the "animal torturer" enjoys the supposed suffering, while you are bothered by it. Either way is illogical.
In a serious war, there will be no satellites. They go bye-bye in a matter of minutes. There will be no GPS. There will be no drone video feeds. There will be no drone data links.
It is so comforting and innocent to imagine that world wars are a thing of the past, merely a part of distant history. Those who are unprepared will be the losers.
He is failing to serve his country. He'd rather let all the success go to lovely bastions of freedom and rightousness like China, Russia, North Korea, and Iran.
He won't lose control of his hardware unless the attacker finds an exploit for escaping the VM. With snapshots, the VM can even be reliably uninfected.
You're right that it boils down to just looking up the address, but see, this is a chicken-and-egg problem. You're wanting to determine addresses so you can run code, but you must run code in order to look up addresses!
You might as well say that it is easy to get a dinosaur and a dinosaur egg. To get the dinosaur, just wait for a dinosaur egg to hatch. To get the dinosaur egg, just wait for a dinosaur to lay one. Problem solved, right???
Make the edges thicker than the middle, kind of like a red blood cell. Squish away any cracks that form. Keep it cold before use, then don't try flipping it until it is cooked enough to firm up.
That USDA rating system is completely backwards. It gives the nice-sounding names to greasy meat riddled with fat. It gives the bad-sounding names to the leanest (most healthful and least disgusting) meat.
There is nothing good or desirable about Prime. If you want your meat soft and greasy, you can toss it in a grinder with some butter. Lean meat with a nice chewy texture is much harder to find or fake.
BTW, the best meat is rabbit. It's pretty much 100% fat-free.
You need a decent-quality drill press. Without that, you'll be snapping bits like crazy and you'll have the drill bit walk to the wrong spot before it catches the material enough to dig in. Even with a drill press, you'll wear through the bits at an annoying rate.
You need to do something about parts falling out while you solder them. This is because they are upside-down, unless you hold the board over your head with solder dripping on your face.
You need lots more heat because you have lots more solder and bigger leads. You may burn the board or component.
Suggestion: if you are stuck using through-hole components, go with dead-bug construction. This means you place the components upside-down on an unetched board, using the board only as a ground plane. You make point-to-point connections with insulated wires.
The big problem is that we need more of the right children.
We could do this by dividing your government money (taxes and welfare) by family size. High income earners would thus be encouraged to have kids, while welfare recipients would be discouraged.
A similar solution for China would be to offer 1-child-policy exemptions for women who do well on college entrance exams.
The size of a Planck unit should be exactly 1 by definition. The sizes of the meter and second are stupid. By adjusting just one of them, we could get rid of a factor of 3x10^8 that is totally arbitrary. By adjusting both, and a few other things, we can get rid of lots of ugly constants. We could get rid of G, etc.
Alternately, on a less cosmological scale, we could ditch g and R.
The only time a sandbox should be a way of life is when you can't fix the bugs.
Even if you had a hyper-intelligent alien life form to write bug-free code, the attacker still has a chance. We're running the code on hardware without ECC RAM or even parity bits. Every now and then, the code will jump to the wrong address. It happens.
So if I had 4 gigs of ram it would not matter if the OS is 32-bit or 64-bit.
Yes it would. The amount of physical RAM has nothing to do with this issue. The "P" in PAE stands for "physical", which only matters to the hardware and the OS kernel. A 32-bit app will never be able to see more than 4 GB, even if you have PAE or a 64-bit OS.
On a 32-bit system, every process gets a 4 GB address space. (the OS may steal 1 or 2 GB) You may have only 512 MB of RAM installed, or you may have 16 GB of RAM installed, but every process still sees 4 GB. If the process uses more memory than the amount of RAM, the OS will cheat by swapping. If the computer has more than 4 GB of RAM, you can only use the extra by running multiple processes.
On a 64-bit system, every process gets... a ridiculous amount of address space. (and again the OS may steal half) Every process gets this amount of space even if you only have 512 MB of RAM. The process could actually use all the space if you had a big enough swap file, but this isn't needed from a security perspective. For security, the idea is to scatter memory allocations around in a huge area so that the attacker can not guess where they are. If anything, the fact that you don't have enough swap file space to actually use the address space is good; it means that the attacker can't fill it with something that will help him.
On normal PC hardware, the attacker's job becomes at least tens of thousands of times more difficult with a 64-bit app. Because of the way attacks work, the difficulty factor is often squared. (they need to make two correct guesses) The attack becomes darn near impossible.
IE 10 32-bit has ASLR and heap spraying protection sandboxing right in.
It barely works. There simply isn't enough address space to make it effective. This is like having a door using a 1-pin lock instead of a 7-pin lock. Picking a 1-pin lock is trivial.
You can still spray on a 64 bit system as well.
You can't usefully spray on a 64-bit system. To be useful, your spraying needs to cover a significant portion of the address space. (else you are unlikely to hit it when you trigger the bug) It also can't require more memory than the system has, and it can't need to run for months.
IE 9 is 32-bit by default and has all of this... 32 bit can be compiled for all of this as well.
Not really!
Security depends on random numbers. 64-bit systems generally provide enough to be effective, while 32-bit systems do not.
If I ask you to guess a number that I have picked, would you rather the range be 1 to 100 or maybe 1 to 100 million? You can reliably guess one of those if you try for a bit, but the other is kind of hopeless.
Haven't these people heard of ASLR and heap spraying Do they not understand the concepts?
Without 64-bit, you have two huge security problems. The first is that there simply isn't enough address space to randomize well. Attackers can guess things. They guess right often enough that the effort is worthwhile. The second huge security problem is that the address space is easy to fill with code-equivalent data for a ROP attack. Actually, with Firefox you could even use real code!
Using a 32-bit browser in 2012 is kind of insane. It's near-complete security FAIL.
Last I heard, Apple had clawed it's way back to the top in some fashion... maybe the most profitable PC vendor? Anyway, they are pretty big and successful. Do they have this sticker? I doubt it. I'm thinking that a bunch of stickers all over your product detracts from the styling. A PC covered in gaudy do-dads looks like shit next to a PC with nice clean styling.
low estimate: 1*15 is 15 years high estimate: 3*50 is 150 years
I don't know where you get the idea that I think intelligence is growing, because I believe the opposite. (ignoring temporary changes to the standard of living during the previous century) I certainly don't see any "greater gain" anywhere.
We have apparently reached and passed a plateau, but only because we are no longer being selected for intelligence. We could keep going with the right selection pressure.
Slashdot Mirror
Clearly not! If the 787 had blow-out panels, batteries could burn and/or explode with little consequence. The news stories would be about the danger to people on the ground, not to the aircraft.
(it goes BOOM, you get a nice neat predetermined circular hole in the bottom, and chunks of flaming battery fall from the aircraft... meanwhile, the aircraft continues operating on the other battery packs)
You need a blow-out panel.
The M1A2 Abrams tank has one for the shells. If they start to burn, the blow-out panel pops off and the whole mess exits the tank.
Factories that make vinyl have them. When the concoction goes boom, blow-out panels prevent total destruction of the building. Workers may even survive.
Meth labs don't have them. :-)
A reasonable design would have several battery compartments, each with a separate blow-out panel. These should be located so that debris will not enter the engines or get run over by the landing gear. The rear underside seems like a good location.
Any reasonable definition of "government" would include the Chinese Communist Party. The term "party" takes on different meaning in a 1-party state.
You're more like an "animal torturer" than you realize. You personify animals. The only difference is that the "animal torturer" enjoys the supposed suffering, while you are bothered by it. Either way is illogical.
In a serious war, there will be no satellites. They go bye-bye in a matter of minutes. There will be no GPS. There will be no drone video feeds. There will be no drone data links.
It is so comforting and innocent to imagine that world wars are a thing of the past, merely a part of distant history. Those who are unprepared will be the losers.
He is failing to serve his country. He'd rather let all the success go to lovely bastions of freedom and rightousness like China, Russia, North Korea, and Iran.
Just yesterday, lots of Slashdot readers claimed UPnP was totally reasonable for security. It's time for a wall of shame. Here is the story:
http://it.slashdot.org/story/13/01/29/0111238/58000-security-camera-systems-critically-vulnerable-to-attackers
I'll start.
adolf: http://it.slashdot.org/comments.pl?sid=3415287&cid=42722879
Miamicanes: http://it.slashdot.org/comments.pl?sid=3415287&cid=42723217
julesh: http://it.slashdot.org/comments.pl?sid=3415287&cid=42723393
He won't lose control of his hardware unless the attacker finds an exploit for escaping the VM. With snapshots, the VM can even be reliably uninfected.
You're right that it boils down to just looking up the address, but see, this is a chicken-and-egg problem. You're wanting to determine addresses so you can run code, but you must run code in order to look up addresses!
You might as well say that it is easy to get a dinosaur and a dinosaur egg. To get the dinosaur, just wait for a dinosaur egg to hatch. To get the dinosaur egg, just wait for a dinosaur to lay one. Problem solved, right???
Make the edges thicker than the middle, kind of like a red blood cell. Squish away any cracks that form. Keep it cold before use, then don't try flipping it until it is cooked enough to firm up.
That USDA rating system is completely backwards. It gives the nice-sounding names to greasy meat riddled with fat. It gives the bad-sounding names to the leanest (most healthful and least disgusting) meat.
There is nothing good or desirable about Prime. If you want your meat soft and greasy, you can toss it in a grinder with some butter. Lean meat with a nice chewy texture is much harder to find or fake.
BTW, the best meat is rabbit. It's pretty much 100% fat-free.
You need a decent-quality drill press. Without that, you'll be snapping bits like crazy and you'll have the drill bit walk to the wrong spot before it catches the material enough to dig in. Even with a drill press, you'll wear through the bits at an annoying rate.
You need to do something about parts falling out while you solder them. This is because they are upside-down, unless you hold the board over your head with solder dripping on your face.
You need lots more heat because you have lots more solder and bigger leads. You may burn the board or component.
Suggestion: if you are stuck using through-hole components, go with dead-bug construction. This means you place the components upside-down on an unetched board, using the board only as a ground plane. You make point-to-point connections with insulated wires.
The FCC won't let us run spark-gap transmitters.
The big problem is that we need more of the right children.
We could do this by dividing your government money (taxes and welfare) by family size. High income earners would thus be encouraged to have kids, while welfare recipients would be discouraged.
A similar solution for China would be to offer 1-child-policy exemptions for women who do well on college entrance exams.
And just why is c about 300 Mm/s instead of 1?
The size of a Planck unit should be exactly 1 by definition. The sizes of the meter and second are stupid. By adjusting just one of them, we could get rid of a factor of 3x10^8 that is totally arbitrary. By adjusting both, and a few other things, we can get rid of lots of ugly constants. We could get rid of G, etc.
Alternately, on a less cosmological scale, we could ditch g and R.
In a coherent system, the mass-energy system is just E = m. There is no c.
http://en.wikipedia.org/wiki/Planck_units
If we're going to change, we ought to change to something fundamentally correct. We could be the first nation using Plank units.
An alternate theory of "punishment" is that we protect society by keeping the offender in prison. They can't do another DUI in the prison cell.
BTW, the penalties are not harsh in the USA. Russia takes away a license for life. Saudi Arabia chops off the driver's head.
The only time a sandbox should be a way of life is when you can't fix the bugs.
Even if you had a hyper-intelligent alien life form to write bug-free code, the attacker still has a chance. We're running the code on hardware without ECC RAM or even parity bits. Every now and then, the code will jump to the wrong address. It happens.
We aren't even using Ada.
So if I had 4 gigs of ram it would not matter if the OS is 32-bit or 64-bit.
Yes it would. The amount of physical RAM has nothing to do with this issue. The "P" in PAE stands for "physical", which only matters to the hardware and the OS kernel. A 32-bit app will never be able to see more than 4 GB, even if you have PAE or a 64-bit OS.
On a 32-bit system, every process gets a 4 GB address space. (the OS may steal 1 or 2 GB) You may have only 512 MB of RAM installed, or you may have 16 GB of RAM installed, but every process still sees 4 GB. If the process uses more memory than the amount of RAM, the OS will cheat by swapping. If the computer has more than 4 GB of RAM, you can only use the extra by running multiple processes.
On a 64-bit system, every process gets... a ridiculous amount of address space. (and again the OS may steal half) Every process gets this amount of space even if you only have 512 MB of RAM. The process could actually use all the space if you had a big enough swap file, but this isn't needed from a security perspective. For security, the idea is to scatter memory allocations around in a huge area so that the attacker can not guess where they are. If anything, the fact that you don't have enough swap file space to actually use the address space is good; it means that the attacker can't fill it with something that will help him.
On normal PC hardware, the attacker's job becomes at least tens of thousands of times more difficult with a 64-bit app. Because of the way attacks work, the difficulty factor is often squared. (they need to make two correct guesses) The attack becomes darn near impossible.
IE 10 32-bit has ASLR and heap spraying protection sandboxing right in.
It barely works. There simply isn't enough address space to make it effective. This is like having a door using a 1-pin lock instead of a 7-pin lock. Picking a 1-pin lock is trivial.
You can still spray on a 64 bit system as well.
You can't usefully spray on a 64-bit system. To be useful, your spraying needs to cover a significant portion of the address space. (else you are unlikely to hit it when you trigger the bug) It also can't require more memory than the system has, and it can't need to run for months.
IE 9 is 32-bit by default and has all of this ... 32 bit can be compiled for all of this as well.
Not really!
Security depends on random numbers. 64-bit systems generally provide enough to be effective, while 32-bit systems do not.
If I ask you to guess a number that I have picked, would you rather the range be 1 to 100 or maybe 1 to 100 million? You can reliably guess one of those if you try for a bit, but the other is kind of hopeless.
Haven't these people heard of ASLR and heap spraying Do they not understand the concepts?
Without 64-bit, you have two huge security problems. The first is that there simply isn't enough address space to randomize well. Attackers can guess things. They guess right often enough that the effort is worthwhile. The second huge security problem is that the address space is easy to fill with code-equivalent data for a ROP attack. Actually, with Firefox you could even use real code!
Using a 32-bit browser in 2012 is kind of insane. It's near-complete security FAIL.
It makes good meat taste like ham.
BTW, that 155 better be Celsius. It seems high, but any other 155 (K, F, or R) would be horrid.
Last I heard, Apple had clawed it's way back to the top in some fashion... maybe the most profitable PC vendor? Anyway, they are pretty big and successful. Do they have this sticker? I doubt it. I'm thinking that a bunch of stickers all over your product detracts from the styling. A PC covered in gaudy do-dads looks like shit next to a PC with nice clean styling.
low estimate: 1*15 is 15 years
high estimate: 3*50 is 150 years
I don't know where you get the idea that I think intelligence is growing, because I believe the opposite. (ignoring temporary changes to the standard of living during the previous century) I certainly don't see any "greater gain" anywhere.
We have apparently reached and passed a plateau, but only because we are no longer being selected for intelligence. We could keep going with the right selection pressure.