Remote attestation will verify the trust all the way to the root platform key, be it Microsoft's or another vendor.
The power to install my *OWN* key, means *I* have the power to trust that *my* server, with *my* software has not been compromised. This is kind of a big deal, and helps protect against all sorts of rootkits.
A toggle that is simply "Use MS's Key" and "Use no key at all" is not an acceptable option.
Well, this is discussing a 'loan' program, not a 'grant' program, so the government is on the hook only if folks default on these loans.
That aside, how do you give folks who *are* motivated, and whose parents emphasize the important of education, but just aren't financially able to do so?
I have kids now, but between the loss of equity in my home, and the rising cost of living, I have no idea how I'm going to be able to afford the same opportunity my parents gave me to my kids.
I 100% agree with you though, there needs to be a emphasis on a culture of learning, and the unfunded NCLB crap forces schools to spend on these useless programs instead of programs to inspire children and parents.
The government collects money and redistributes it in a way that [supposedly] improves the nation and the people in it.
Do you want to live in a nation where there are no educated people to work alongside you? Where the only college-educated folks demand a salary that unnecessarily raises the cost of goods (further increasing inflation)?
The *real* problem is that you need to invest *more than you'll make* to acquire a job that pays a wage that has any hint of ever paying a living wage. And large companies are just moving labor to countries where it's cheaper to employ people, so the investment is proving to be worthless.
Fewer and fewer jobs remain that do not require college educations, and the quality of life for these folks are poor, with few options out. It's no longer sufficient to work hard and be successful, you have to get lucky, or come from money already.
I wondered the same thing -- I think it's because it's switching the video mode from 'regular' graphics to show the camera capture, to '3d' mode to show the opengl rendered cube based on the capture data.
I know that they OSSed it, but the value add is chasing all the current versions of software out there, and packaging them into silent installs.
I was not aware of Ninite, but as numerous replies to this post point out, it looks like it's a pretty nice replacement, with many more options, including software that we frequently used in our system
Google Pack: Due to the rapidly decreasing demand for downloadable software in favor of web apps, we will discontinue Google Pack today. People will still be able to access Googleâ(TM)s and our partnersâ(TM) software quickly and easily through direct links on the Google Pack website.
Of all these services, this upsets me the most. No where was I able to find a nice installer/packge manager for windows that installed all these packages automatically w/o any cruft or addons, and kept it all up-to-date.
Also, I seriously dispute their claim of "rapidly decreasing demand for downloadable software in favor of web apps". There are a whole host of benefits that downloadable software give, that web apps do not. (like, when the provider stops supporting the software, you still have access to it.....)
I missed that last bit, you highlighted. That is, at least, what I expected: using your own tools/code/whatever clearly will void whatever warranty they offered.
Typical Knee jerk reaction from me when I read "prohibited" in relation to a piece of hardware you buy/"own".
I noticed that the license terms for the Microsoft Kinect device allow the use of the device with the Xbox 360 and Xbox 360 S game consoles only. How can I use the Kinect device with the SDK Beta?
Even though the warranty and software license terms for the Kinect device prohibit the use of the device with any platform other than Xbox 360 and Xbox 360 S, the license agreement for the SDK Beta supplements the Kinect device warranty and software license terms to allow your use of the device with the SDK Beta on Windows computers as well.
I know that other drivers and development software for Kinect are available on the Web. Can I use the Kinect sensor device with these other drivers or software instead of the SDK Beta?
No. Use of the Kinect sensor device is subject to its own warranty and software license agreement that allow you to use it solely in connection with an Xbox 360 or Xbox 360 S console. Only Microsoft can grant you the additional rights that you need to use the Kinect sensor device with a personal computer. Microsoft grants these additional rights in the SDK Beta license, but only for uses of the Kinect sensor device in connection with the SDK Beta. If you use the Kinect sensor with a platform other than Xbox 360, Xbox 360 S, or Windows (with the SDK Beta), you void the warranty you received when you purchased the Kinect sensor device.
So, Even though you saw all those cool demos a few months ago using 'unlicensed' software, you're not allowed to run them, and they could be punished for software licence violations.
PS. Buy from our premium line, and we include less or no crap. Also, we'll include Bare-OS reinstallation disks. (since they only cost us a few pennies)
Also, Place a big enough order (more than 250 @ once), and we'll custom load the HD image of your choosing onto each and every machine.
One use case (and why amazon isn't all over this is beyond me) is to keep a big enough private 'cloud' for your system's base capacity. When you need extra capacity in a hurry you simply tell your management system to also add nodes from a 3rd party 'cloud', and your infrastructure is tested, and ready to go there. You can then grow your private cloud at your leisure.
It spread by usb drives, which Gleefully jump the "air gap".
It's slightly more complicated than simply keeping an air gap, and probably requires the consultation of someone who's had experience securing these types of networks.
We're going O/T here --- but Facebook will send email invites to email addresses that you don't have registered on Facebook, if the user (who stupidly gives Facebook their Email account username & password) elects.
I've received real (rather than spam/phishing) Facebook 'join us' messages @ my work email address, even though my work address has gone no where near my personal Facebook account.
Microsoft makes the best tools for managing large groups of Windows clients. Active Directory, Group Policy, Exchange. And the ecosystem of software that relies on those technologies being present.
If linux/foss can crack that nugget, it can start making inroads on internal servers.
The other alternative, is to break Microsoft on the desktop: Exchange + Office.
When I hand my phone to someone, I watch what their doing. It's as simple as that.
This scenario doesn't propagate in the way most malware and worms do. A handfull of people in 1 city get knocked off their connection when the phone sees them sending malicious traffic (which is already against ToS). A little investigation later, and the security camera he (or she) didn't notice nails him.
Or, it targets a specific user in a specific organization. If they're high-profile enough for this kind of attack to work, their IT department will probably be competent to give out locked down phones (that shoulden't be rooted by staff) and/or have other protections in place.
It seems that there's a segment of the population that want this feature, and it would do the carriers good to give us that option. if that means physical access is necessary to root the device, then that's a reasonable requirement, most computers howadays are vulnerable if you give an untrusted user physical access.
*EVERY* manufacturer that introduces a feature like this does so to lock down the device and prevent 'unauthorized' modifications. Unauthorized == Not made by them. Don't kid yourself. If that wasn't their intent, how does one install their own signing key? How does one authorize a new ROM or OS ? If they shipped those instructions on page 599 of the manual in fine print where it'll only be noticed by tech geeks, then perfect, I want *that* device, because *I* can determine what's unauthorized. I bet though, that you won't find it.
The only way to 'get root' on many of these devices is to attach a cable to the phone, invoke a special command to get a root shell, and only then can things be mucked with, by using a unix command shell.
How can malware get on the phone if 99% of the users will be only using it through the phone's on-screen menu system? On Android, arn't all apps sandboxed + running as non-root? If an app can break out of this process model, arn't there more serious problems @ stake here?
How can malware 'trick' the user into 'getting root' when that same 99% doesn't know wtf that is?
I want a portable data terminal. I want to run my own scripts and programs on my portable data terminal that do what I want. I want a computer I can keep in my pocket and have it's network interface linked up to the wireless tower. I want to pay a reasonable fee for this service. Why can't any of the US carriers deliver that in a straightforward package?
This is marked troll, and we may be too far off topic here, but poster's point is valid.
Would you rather have one image editor that contains everything you need? Or 520 different filters applications, all in different applications, all of which need to pipe data between each other? (Hint: the first one is superior in every way.)
I'd rather have both. One is far easier to script with standard issue tools since it's forced into a specific programmable interface. Can you imagine the insanity if every major application used their own method of scripting to control operations? --- No, you don't have to imagine. MS Office uses VBA. Flash uses Actionscript, What does Photoshop use? it's own scripting language/system? Autocad? it's own language again.
Think of a task like this, and how many different programming systems are needed:
Write a script that for each of our 1200 technical drawings creates a pdf with the drawings, includes highlights and text about the part, requirements + specifications, include a 3d render of that part, and puts a company logo watermark. Can this be done so a human only needs to say "GO?"
Re:Why do I need KDE?
on
KDE 4.5 Released
·
· Score: 2, Insightful
That philosophy is flawed. It prioritizes eye candy instead of guarantying desktop usability
While that may be debatable, I'm alluding to (IMHO) brilliant technical achievements of kio-slaves, kparts, dcop (which worked really well before dbus was widely adopted), and so on. The component architecture of KDE, when fully embraced, is a great modern interpretation of the old unix philosophy "Each tool should one thing, and do it well"
If they've lost sight of that, then I too would be saddened.
Re:Why do I need KDE?
on
KDE 4.5 Released
·
· Score: 5, Informative
Because for every one of you, there are 10 (or more) folks that are not techy's and appreciate the richer UI.
You can probably get by w/ e16/fvwm/fluxbox, and be extremely productive. Users who have used Win32 will appreciate a similar UI to help them ease into the power of a linux desktop.
KDE is more than just a desktop Environment, it's a whole programming library and philosophy that unifies a family of applications, so they can interoperate, exchange data, and work together as well as you do.
Slashdot Mirror
Remote attestation will verify the trust all the way to the root platform key, be it Microsoft's or another vendor.
The power to install my *OWN* key, means *I* have the power to trust that *my* server, with *my* software has not been compromised. This is kind of a big deal, and helps protect against all sorts of rootkits.
A toggle that is simply "Use MS's Key" and "Use no key at all" is not an acceptable option.
Well, this is discussing a 'loan' program, not a 'grant' program, so the government is on the hook only if folks default on these loans.
That aside, how do you give folks who *are* motivated, and whose parents emphasize the important of education, but just aren't financially able to do so?
I have kids now, but between the loss of equity in my home, and the rising cost of living, I have no idea how I'm going to be able to afford the same opportunity my parents gave me to my kids.
I 100% agree with you though, there needs to be a emphasis on a culture of learning, and the unfunded NCLB crap forces schools to spend on these useless programs instead of programs to inspire children and parents.
The government collects money and redistributes it in a way that [supposedly] improves the nation and the people in it.
Do you want to live in a nation where there are no educated people to work alongside you? Where the only college-educated folks demand a salary that unnecessarily raises the cost of goods (further increasing inflation)?
The *real* problem is that you need to invest *more than you'll make* to acquire a job that pays a wage that has any hint of ever paying a living wage. And large companies are just moving labor to countries where it's cheaper to employ people, so the investment is proving to be worthless.
Fewer and fewer jobs remain that do not require college educations, and the quality of life for these folks are poor, with few options out. It's no longer sufficient to work hard and be successful, you have to get lucky, or come from money already.
I wondered the same thing -- I think it's because it's switching the video mode from 'regular' graphics to show the camera capture, to '3d' mode to show the opengl rendered cube based on the capture data.
I know that they OSSed it, but the value add is chasing all the current versions of software out there, and packaging them into silent installs.
I was not aware of Ninite, but as numerous replies to this post point out, it looks like it's a pretty nice replacement, with many more options, including software that we frequently used in our system
Of all these services, this upsets me the most. No where was I able to find a nice installer/packge manager for windows that installed all these packages automatically w/o any cruft or addons, and kept it all up-to-date.
Also, I seriously dispute their claim of "rapidly decreasing demand for downloadable software in favor of web apps". There are a whole host of benefits that downloadable software give, that web apps do not. (like, when the provider stops supporting the software, you still have access to it .....)
I missed that last bit, you highlighted. That is, at least, what I expected: using your own tools/code/whatever clearly will void whatever warranty they offered.
Typical Knee jerk reaction from me when I read "prohibited" in relation to a piece of hardware you buy/"own".
So, Even though you saw all those cool demos a few months ago using 'unlicensed' software, you're not allowed to run them, and they could be punished for software licence violations.
A hardware device requires a software license?
http://blog.lizdenys.com/about/
Delivered :)
Did you RTFA? Did you notice that the *creator* of said game is girl named Elizabeth Denys? A real live girl?
PS. Buy from our premium line, and we include less or no crap. Also, we'll include Bare-OS reinstallation disks. (since they only cost us a few pennies)
Also, Place a big enough order (more than 250 @ once), and we'll custom load the HD image of your choosing onto each and every machine.
One use case (and why amazon isn't all over this is beyond me) is to keep a big enough private 'cloud' for your system's base capacity. When you need extra capacity in a hurry you simply tell your management system to also add nodes from a 3rd party 'cloud', and your infrastructure is tested, and ready to go there. You can then grow your private cloud at your leisure.
And oddly enough, so has their $100+ price tag.
Remember Suxtnet? Not too long ago?
It spread by usb drives, which Gleefully jump the "air gap".
It's slightly more complicated than simply keeping an air gap, and probably requires the consultation of someone who's had experience securing these types of networks.
We're going O/T here --- but Facebook will send email invites to email addresses that you don't have registered on Facebook, if the user (who stupidly gives Facebook their Email account username & password) elects.
I've received real (rather than spam/phishing) Facebook 'join us' messages @ my work email address, even though my work address has gone no where near my personal Facebook account.
And you validate that the address facebook now has on record is real, legit, and interested in privacy.
If you ignore, filter, and/or delete the message, they really can't confirm.
Just follow the same procedure you use for SPAM/UCE
There's a good reason for this:
Microsoft makes the best tools for managing large groups of Windows clients. Active Directory, Group Policy, Exchange. And the ecosystem of software that relies on those technologies being present.
If linux/foss can crack that nugget, it can start making inroads on internal servers.
The other alternative, is to break Microsoft on the desktop: Exchange + Office.
It's like the Mutually-Assured-Destruction scenario in the mobile/wireless world!
When I hand my phone to someone, I watch what their doing. It's as simple as that.
This scenario doesn't propagate in the way most malware and worms do. A handfull of people in 1 city get knocked off their connection when the phone sees them sending malicious traffic (which is already against ToS). A little investigation later, and the security camera he (or she) didn't notice nails him.
Or, it targets a specific user in a specific organization. If they're high-profile enough for this kind of attack to work, their IT department will probably be competent to give out locked down phones (that shoulden't be rooted by staff) and/or have other protections in place.
It seems that there's a segment of the population that want this feature, and it would do the carriers good to give us that option. if that means physical access is necessary to root the device, then that's a reasonable requirement, most computers howadays are vulnerable if you give an untrusted user physical access.
*EVERY* manufacturer that introduces a feature like this does so to lock down the device and prevent 'unauthorized' modifications. Unauthorized == Not made by them. Don't kid yourself. If that wasn't their intent, how does one install their own signing key? How does one authorize a new ROM or OS ? If they shipped those instructions on page 599 of the manual in fine print where it'll only be noticed by tech geeks, then perfect, I want *that* device, because *I* can determine what's unauthorized. I bet though, that you won't find it.
This is a crap argument.
The only way to 'get root' on many of these devices is to attach a cable to the phone, invoke a special command to get a root shell, and only then can things be mucked with, by using a unix command shell.
How can malware get on the phone if 99% of the users will be only using it through the phone's on-screen menu system? On Android, arn't all apps sandboxed + running as non-root? If an app can break out of this process model, arn't there more serious problems @ stake here?
How can malware 'trick' the user into 'getting root' when that same 99% doesn't know wtf that is?
I want a portable data terminal. I want to run my own scripts and programs on my portable data terminal that do what I want. I want a computer I can keep in my pocket and have it's network interface linked up to the wireless tower. I want to pay a reasonable fee for this service. Why can't any of the US carriers deliver that in a straightforward package?
keep ink in glass pellets or something in the safe too, so any kind of violent movement marks all the bills?
Unicorn meat is an Excellent Source of Sparkles!
I bet you don't get that from your bacon!
This is marked troll, and we may be too far off topic here, but poster's point is valid.
I'd rather have both. One is far easier to script with standard issue tools since it's forced into a specific programmable interface. Can you imagine the insanity if every major application used their own method of scripting to control operations? --- No, you don't have to imagine. MS Office uses VBA. Flash uses Actionscript, What does Photoshop use? it's own scripting language/system? Autocad? it's own language again.
Think of a task like this, and how many different programming systems are needed:
Write a script that for each of our 1200 technical drawings creates a pdf with the drawings, includes highlights and text about the part, requirements + specifications, include a 3d render of that part, and puts a company logo watermark. Can this be done so a human only needs to say "GO?"
While that may be debatable, I'm alluding to (IMHO) brilliant technical achievements of kio-slaves, kparts, dcop (which worked really well before dbus was widely adopted), and so on. The component architecture of KDE, when fully embraced, is a great modern interpretation of the old unix philosophy "Each tool should one thing, and do it well"
If they've lost sight of that, then I too would be saddened.
Because for every one of you, there are 10 (or more) folks that are not techy's and appreciate the richer UI.
You can probably get by w/ e16/fvwm/fluxbox, and be extremely productive. Users who have used Win32 will appreciate a similar UI to help them ease into the power of a linux desktop.
KDE is more than just a desktop Environment, it's a whole programming library and philosophy that unifies a family of applications, so they can interoperate, exchange data, and work together as well as you do.