Does anyone at Microsoft understand that Macintosh line endings haven't been CR for over 15 years? Macintosh is now Unix. Has been since 2001. Please inform the Excel team too.
That's what they already do. Xcode has compilers that target both ARM and Intel. When you run the iPhone simulator it's running the version that came out of the x86 (x64 really) compilers.
Nice. If one were to look to Adam Smith as a spiritual guide (which isn't too far fetched), many people like to quote favorite bits from their spiritual guides which often corrupts the original intent of the guide in the first place.
Exactly. Pai has a deep ideological belief in free markets. I'd go so far as to say he has too much faith in free markets. I feel free markets are good when there's enough elasticity in the market for good old-fashioned supply and demand to function correctly. But the telecom industry has a natural tendency to be a monopoly due to the enormous physical plant required to prevent the supply side from reacting to the demand side. In the absence of strong regulatory action, the monopoly will... what's the euphemism?... maximize shareholder value.
The number is artificially high. Two are from acquisitions (instagram and whatsapp) and one is because they split one app into two separate apps (Facebook and Facebook Messenger)
“Computer Science is no more about computers than astronomy is about telescopes.” - commonly attributed to Edsger Dijkstra, but disputed.
I have sometimes compared those who have studied computer science (as opposed to learning how to program) with those who have studied music. You can be a very successful programmer without any computer science just as you can be a very successful musician without music theory.
Mastery of the advanced studies of your discipline will make you a better than merely someone who can just get the job done.
When Sequestration 2013 was threatening a project, the head of the project was speculating about what would happen to the data from the project. He said, "If we get all this data classified then someone has to pay to protect it."
Passive AV software is about eliminating malware AFTER it has taken root on a system. Active AV injects itself into critical checkpoints. Microsoft, to their credit, has taken proactive steps to close the exploits that malware have used enter a system. Steps like including Flash player updates with Windows updates. Is it perfect? Of course not. But it's gone a long way to the point of making AV software the "low hanging fruit" of attack surfaces.
I'll also echo what many have said - WSE and SPI Firewalls (Stateful Packet Inspection is the prerequisite of NAT is what actually protects you) have been the only thing I've been using for years.
OpenSolaris and its decedents: OpenIndiana, OmniOS, SmartOS have been all been great for me. I measure the uptime in years. I'm currently looking at 387 days since the last reboot.
Exactly. I use gotos as part of exception handling. You need to bail out of a function, but you need to clean up first...
{
goto cleanup;
cleanup:
free( whatever );
close( something );
}
The worry isn't the new processes. It's the systemd process itself. I'll grant that having systemd pre-reducing privileges is better than expecting the daemon process to reduce privileges on its own. At what point will running systemd without networking be essentially non-optional due to widespread community adoption? I feel many of the worries of the parent of your post are still valid.
Let's not forget that the Snowden documents are now a year and a half old. A year and a half ago, everyone thought the ciphers and protocols were good enough. Fast forward to the eve of 2015 and we know better. We have a new sense of what is state of the art. We know not to use ciphers with static keys that could be subject to subpoena requests and so on a so forth. I'm not so naïeve to believe that new ciphers will stop them in their tracks. The still have incredible resources to draw upon. We just have new speed bumps.
I suspected it was last straw. She was looking for an excuse.
That said, however, lawyers in good standing enjoy a legal privilege of being able to discuss matters with clients in confidence and be able to withhold those discussion from the government. If you can't communicate privately the privilege is eviscerated.
Perhaps she wasn't so much worried about herself than the confidential sources she used?
And don't forget to ask what language was that high level language written in?
Ruby - written in C
Erlang - written in C
Node.js - written in C with a few x86 and ARM assembler bits
Perl - written in C
Python - written in C
And the truly mind-numbing one: GNU C compiler - written in C.
I have worked with IT professionals at a military installation. Their improvisational talent is amazing when it comes to figuring out a way to get something done within the crazy rules they have to follow.
Lock Switch? Then you don't understand the problem. The problem is that in many USB Flash are two chips: a computer and memory. The host PC communicates with the USB controller and the controller talks to the memory. Most controllers are just a version of the 8051 CPU with USB logic bolted on. The lock switch would be a high-level function that returns an error on a generic block device write command. Hacking the USB device isn't hacking the flash memory, it's hacking the firmware on the 8051. The Device Firmware Update function of USB that allowed that 8051 computer to be reprogrammed should be disabled.
For example: Hong Kong Post Root; DoD Root CA 2; Federal Common Policy CA; Staat der Nederlanden Root CA - Any of these CA can mint a certificate for ANY website.
Keep in mind that any sufficiently powerful nation is better served sending lawyers rather than hackers. Step One: All it takes is to send a court ordered warrant with gag-order to get the private key for "Go Daddy Root Certificate Authority - G2". Step Two: Mint certificates
We should do two things. 1) Browsers should also start displaying the root CA. If I go to Google and I know it's Google because "Autoridad de Certificacion Raiz del Estado Venezolano" says so, I'd be suspicious. 2) Fix the all or nothing problem. Somehow limit the domain scope of a CA. "Google Internet Authority G2" mints certificates for Google.Com. What's to keep them from minting one for MyBank.com?
Slashdot Mirror
Does anyone at Microsoft understand that Macintosh line endings haven't been CR for over 15 years? Macintosh is now Unix. Has been since 2001. Please inform the Excel team too.
And Microsoft Excel for Mac still saves CSV files with $0D line endings.
That's what they already do. Xcode has compilers that target both ARM and Intel. When you run the iPhone simulator it's running the version that came out of the x86 (x64 really) compilers.
Nice. If one were to look to Adam Smith as a spiritual guide (which isn't too far fetched), many people like to quote favorite bits from their spiritual guides which often corrupts the original intent of the guide in the first place.
Exactly. Pai has a deep ideological belief in free markets. I'd go so far as to say he has too much faith in free markets. I feel free markets are good when there's enough elasticity in the market for good old-fashioned supply and demand to function correctly. But the telecom industry has a natural tendency to be a monopoly due to the enormous physical plant required to prevent the supply side from reacting to the demand side. In the absence of strong regulatory action, the monopoly will ... what's the euphemism? ... maximize shareholder value.
Out
About
Tout
Gout
Flout
Route
The word that doesn't rhyme with the others is the word that ends with an E.
It's "Stand Your Ground" for nerds. Because that always works well ...
The number is artificially high. Two are from acquisitions (instagram and whatsapp) and one is because they split one app into two separate apps (Facebook and Facebook Messenger)
I have sometimes compared those who have studied computer science (as opposed to learning how to program) with those who have studied music. You can be a very successful programmer without any computer science just as you can be a very successful musician without music theory. Mastery of the advanced studies of your discipline will make you a better than merely someone who can just get the job done.
Oh for a mod-point right now.
When Sequestration 2013 was threatening a project, the head of the project was speculating about what would happen to the data from the project. He said, "If we get all this data classified then someone has to pay to protect it."
Passive AV software is about eliminating malware AFTER it has taken root on a system. Active AV injects itself into critical checkpoints. Microsoft, to their credit, has taken proactive steps to close the exploits that malware have used enter a system. Steps like including Flash player updates with Windows updates. Is it perfect? Of course not. But it's gone a long way to the point of making AV software the "low hanging fruit" of attack surfaces.
I'll also echo what many have said - WSE and SPI Firewalls (Stateful Packet Inspection is the prerequisite of NAT is what actually protects you) have been the only thing I've been using for years.
OpenSolaris and its decedents: OpenIndiana, OmniOS, SmartOS have been all been great for me. I measure the uptime in years. I'm currently looking at 387 days since the last reboot.
Exactly. I use gotos as part of exception handling. You need to bail out of a function, but you need to clean up first ...
{
goto cleanup;
cleanup:
free( whatever );
close( something );
}
The problem is that lab systems need to be specific to the academic domain being studied. Even in similar studies, the results can vary greatly.
The worry isn't the new processes. It's the systemd process itself. I'll grant that having systemd pre-reducing privileges is better than expecting the daemon process to reduce privileges on its own. At what point will running systemd without networking be essentially non-optional due to widespread community adoption? I feel many of the worries of the parent of your post are still valid.
Will no one think of the dying Dining Philosophers?
Let's not forget that the Snowden documents are now a year and a half old. A year and a half ago, everyone thought the ciphers and protocols were good enough. Fast forward to the eve of 2015 and we know better. We have a new sense of what is state of the art. We know not to use ciphers with static keys that could be subject to subpoena requests and so on a so forth. I'm not so naïeve to believe that new ciphers will stop them in their tracks. The still have incredible resources to draw upon. We just have new speed bumps.
I suspected it was last straw. She was looking for an excuse.
That said, however, lawyers in good standing enjoy a legal privilege of being able to discuss matters with clients in confidence and be able to withhold those discussion from the government. If you can't communicate privately the privilege is eviscerated.
Perhaps she wasn't so much worried about herself than the confidential sources she used?
And don't forget to ask what language was that high level language written in?
Ruby - written in C
Erlang - written in C
Node.js - written in C with a few x86 and ARM assembler bits
Perl - written in C
Python - written in C
And the truly mind-numbing one: GNU C compiler - written in C.
I add, ServerAliveInterval 60, to my $HOME/.ssh/config file just because of appliances that are too dumb to handle long TCP connections.
I have worked with IT professionals at a military installation. Their improvisational talent is amazing when it comes to figuring out a way to get something done within the crazy rules they have to follow.
Lock Switch? Then you don't understand the problem. The problem is that in many USB Flash are two chips: a computer and memory. The host PC communicates with the USB controller and the controller talks to the memory. Most controllers are just a version of the 8051 CPU with USB logic bolted on. The lock switch would be a high-level function that returns an error on a generic block device write command. Hacking the USB device isn't hacking the flash memory, it's hacking the firmware on the 8051. The Device Firmware Update function of USB that allowed that 8051 computer to be reprogrammed should be disabled.
For example: Hong Kong Post Root; DoD Root CA 2; Federal Common Policy CA; Staat der Nederlanden Root CA - Any of these CA can mint a certificate for ANY website.
Keep in mind that any sufficiently powerful nation is better served sending lawyers rather than hackers. Step One: All it takes is to send a court ordered warrant with gag-order to get the private key for "Go Daddy Root Certificate Authority - G2". Step Two: Mint certificates
We should do two things. 1) Browsers should also start displaying the root CA. If I go to Google and I know it's Google because "Autoridad de Certificacion Raiz del Estado Venezolano" says so, I'd be suspicious. 2) Fix the all or nothing problem. Somehow limit the domain scope of a CA. "Google Internet Authority G2" mints certificates for Google.Com. What's to keep them from minting one for MyBank.com?
I'd worry about people hacking my car about the same time as I'd worry about people cutting my brake lines.