It might not be a Sphere itself, but my mind went there as well. If you have something 'refrigerator warm' in the middle of space, you can extract useful energy from it, and especially when the damn thing isn't on fire, materials. I'm thinking of some sort of sphere with millions of space elevators dangling down from the inside to the planet's surface, or something of that nature.
[insert hundreds of pages of math]
Perhaps a decent place for humans to do "My First Space Sphere" without all the stresses involved with a system-sized operation. Better get to work on those monoliths first, though - we'll have to build the sphere out of the planet's materials. We might have to send along the first elevator already made and lower the first factory down to the planet. I bet there's plenty of mass in orbit already for the counterbalance.
being fed propaganda about how US is behind everything
You're right, they're not behind everything but they are behind the operations that we *know* the CIA is directing/informing. Does somebody want to guess at a percentage now, last month, and next month?
Groups like anonymous think they are performing some social disobedience by DDoS the banks, Also DDoS the actual Data center. While it took a few minutes for the network to switch over there were a few hundred doctors who couldn't access their software, for that time.
I prefer means that don't do harm, but from an incentives perspective, Anonymous may be making some difference.
Is a datacenter contemplating taking on a shitty client like a bank that screws its customers? They're going to have to spend more time and money on DDoS protection.
Is a hospital contemplating the costs of doing a very douchy thing to a kid? They're going to have to include the cost of defending against online attacks.
One effective way to dissuade a bully is to fight back. Kicking him in the balls is not out of bounds. Anonymous may be behaving poorly _and_ getting results. Probably too soon to tell for sure.
And why, pray tell, would they do that? What's the mysterious incentive to file a spurious child abuse report that's worth risking malpractice, loss of medical license, and public shame?
Oh, there need not be a mystery. Idiots double down on their mistakes *all the time*. In fact, that's one of the things that defines an idiot.
Me, if I have a patch for production, it's going to take me better part of a month to go through the process.
That's going to limit your nimbleness and opportunity. Obviously that's a business decision that can go either way.
And, having worked on systems where lives could be at stake, I will stick with a more conservative approach.
If your architecture will put lives at risk when a bad firmware update for a subset of the servers comes in, then it's too brittle. If safety is paramount, fixing that should be pretty close to the top of the list.
Some of these towers have an upper lobby. So you take the express from 1 to 75, then a 'local' from 76 to 100.
Usually the 'important people' are on the top floors so the elevator ratio is better and there's little waiting in the upper lobby. Unless you stop at the bar.
Once in a blue moon there's an express to the penthouse, but to pay for an entire express elevator entirely in the rent of the penthouse apartment isn't feasible for all but the ultra-ultra rich.
It was the lack of altruistic eyes scrutinizing it.
That was a secondary effect. People who might want to analyze code want to do a good job, and there's a lot of code worth analyzing.
To do that job there are tools that help with that analysis. OpenSSL's use of non-standard internal memory management routines makes it resistant to use of such analysis tools.
Is it impossible for a code auditor to keep everything in his head? No, but it's tough and error-prone. Some people have found OpenSSL bugs before, of course, but there are ways to make it easier for auditors to stand a fighting chance.
That's largely what the OpenBSD team is doing - ripping out all of that unneeded memory management crap, killing OS/2, VMS, and MacOS7 support code, etc. The payoff should be more people looking at it, but it sure wouldn't hurt for some companies that save millions by using OpenSSL to throw the team a few bones once in a while to make it more regular. Or hire their own internal folks to do the same, if that would work out better.
$300 for the 16 GB model and $350 for a 64 GB model? Knowing what Samsung charges for comparable devices
Yes, but the recent build estimate based on tear-down for the S5 was $255 or so.
That gives these guys in China almost a hundred bucks, which is a good margin for any business. Samsung is just making money hand-over-fist, but there's plenty of long-tail to profit in.
Or more succinctly: incentives matter. What incentive does an employee have to keep data secret? Will he be demoted in rank and lose pay if he does something stupid?
What incentives do companies have to maintain a secure infrastructure? Will their insurance policy hold them liable if they do not?
I'm just in the middle of polishing up a puppet module to deploy a bunch of new certs on my infrastructure. My incentive is that my reputation looks pretty bad if I advise clients to be secure but my own infrastructure is not up to snuff. That's really an incentive to avoid lost opportunities, I suppose.
Google is talking about scoring up pages that are secure. Another very wise incentive.
Let's keep this ball rolling: what other incentives can we offer or explain?
Seriously, airplane security is clearly full of holes and the sham of passenger security checks is just that, a sham meant to make us 'feel' safe while wasting our time and shoveling tons of dollars to the TSA.
Well, any good government repression solves multiple problems, but the point of TSA is behavioral conditioning - giving away tons of money to political cronies is just a bonus.
If you're willing to pay you can hire good people. It's just that the big publicly-owned Silicon Valley companies can use their funny money to pay more than you can.
If you go to places where people are living for quality-of-life and not just money, you'll find more of the competent folks. The competent folks in sucky-places-to-live have all moved to the aforementioned corporations or nicer places to live.
Please justify the $5 cost to rent your film. I can rent your latest superhero blockbuster over the weekend for $2 from Redbox. I can own Louis CK's latest show forever for $5. Why is your content so much more expensive?
Because people are willing to pay $5 to watch it now. If Whedon's company is smart, the price will go down over time to pick up the folks who won't pay $5 to watch it out of the gate.
If it goes down to $2 in a year, then to me that's better than 100% RoI in 1 year, so it's a great deal to me to watch it next year. But some people value being able to be the first to blog about it, chat about it over the water cooler, etc. I watch TV on Netflix 2-3 years after it's been on a network (because cable & satellite are way too much money), but I realize I'm very atypical in that view.
Check out some stuff from Menger if you want a more academic treatment.
I get breakups all the time from home (DSL) on Vimeo but Youtube's Flash Player works, even in hi-def.
Just tried this trailer from work with a 40meg fiber (same telco) and it worked fine. Maybe it's just time of day, maybe Google has better peering, I dunno.
Show your dog three biscuits. Give him two. See if he goes and lays down or if he calculates the number of biscuits in your hand to be larger than zero.
Right, ethics classes won't help. I left a good career at a major medical center when I was told that we were going with the technology that would likely create medication errors because the correct software was too expensive and it would be cheaper to settle the lawsuits.
Nobody needs an ethics class to know that that's wrong behavior, and taking an ethics class would not have changed that behavior. And it certainly wasn't the programming staff that needed ethical correction.
The lawyers are powerless without the courts. It's the Court orders, backed by... wait for it... men with guns that make this environment possible.
Do you know why everybody is so jumpy and the cops are doing summary executions now? Because everybody is a criminal, everybody is a suspect, and the cops and the courts enforce these absurd laws rather than than defend the Constitution as a co-equal branch.
Hell, the Constitution didn't even make it past 1803 intact in design, and FDR accepted the Supreme Court's final surrender in 1937 from Chief Justice Hughes as a settlement to his plan to expand the Court with its cronies. Overnight, SCOTUS began finding all of Roosevelt's programs suddenly Constitutional even concluding that growing wheat for your family farm is part of "Interstate Commerce" and suddenly of Federal providence.
The problem now is that it's impossible for the People to know what the Constitution says because (supposedly) it doesn't mean anything until SCOTUS tells us what it means, which might well be the opposite of what we "think" it means (that is, the plain English meaning). The catch is that the Constitution is what authorizes the government in the first place. If the People aren't competent to understand their agreement with that government, then they weren't competent to create it in the first place and the grant of power is void.
This is not about science, it is about tje progressive anti-gun stance.
Seriously - stop spreading their propaganda. They explicitly want those in power to have all the guns they need. They just want the People to be disarmed and figure their friends will be in power.
This is not at all an anti-gun stance, it's a central-control stance. This gives them a sense of security, like those living under Mao or Pol Pot.
Can boken be overdone? Sure. A 1mm think depth of field is overdoing it, but so is shooting at f/16 everywhere. But even a thin DoF and the right can result in some magical results
Just because you know what you're talking about, and we're among friends:
It's bokeh, with an 'h'. And it refers to the character of the blur, not the blur itself. If you've got an image, say f/3.4, a hipster might say "nice bokeh" to you, but he means that you have a good lens, not that you've selected a good aperture. And then he might also suggest you make a "glisse" print.;)
And, of course, shallow depth of field is a huge fad, and there's an entire generation of kids who won't ever be able to tell where they were in any of their childhood pictures. *That* will seem very "early 21st century" in a couple decades.
There's no one-size fits all solution. I've made the argument for informed disclosure here in the past, but in this case it probably wouldn't work. The DTLS code is so small and self-contained and the code so obvious to an auditor that just saying that there's an exploit in DTLS or to compile without heartbeat is probably enough to give the blackhats a running start. But there are other situations where informed disclosure is better than responsible disclosure.
Did Google do the right thing here? I'm not sure, but it's not completely clear that they didn't. There are several factors that bridge the gap between theoretical ideal and what can work in every situation in the real world.
Slashdot Mirror
It might not be a Sphere itself, but my mind went there as well. If you have something 'refrigerator warm' in the middle of space, you can extract useful energy from it, and especially when the damn thing isn't on fire, materials. I'm thinking of some sort of sphere with millions of space elevators dangling down from the inside to the planet's surface, or something of that nature.
[insert hundreds of pages of math]
Perhaps a decent place for humans to do "My First Space Sphere" without all the stresses involved with a system-sized operation. Better get to work on those monoliths first, though - we'll have to build the sphere out of the planet's materials. We might have to send along the first elevator already made and lower the first factory down to the planet. I bet there's plenty of mass in orbit already for the counterbalance.
being fed propaganda about how US is behind everything
You're right, they're not behind everything but they are behind the operations that we *know* the CIA is directing/informing. Does somebody want to guess at a percentage now, last month, and next month?
Groups like anonymous think they are performing some social disobedience by DDoS the banks, Also DDoS the actual Data center. While it took a few minutes for the network to switch over there were a few hundred doctors who couldn't access their software, for that time.
I prefer means that don't do harm, but from an incentives perspective, Anonymous may be making some difference.
Is a datacenter contemplating taking on a shitty client like a bank that screws its customers? They're going to have to spend more time and money on DDoS protection.
Is a hospital contemplating the costs of doing a very douchy thing to a kid? They're going to have to include the cost of defending against online attacks.
One effective way to dissuade a bully is to fight back. Kicking him in the balls is not out of bounds. Anonymous may be behaving poorly _and_ getting results. Probably too soon to tell for sure.
And why, pray tell, would they do that? What's the mysterious incentive to file a spurious child abuse report that's worth risking malpractice, loss of medical license, and public shame?
Oh, there need not be a mystery. Idiots double down on their mistakes *all the time*. In fact, that's one of the things that defines an idiot.
Me, if I have a patch for production, it's going to take me better part of a month to go through the process.
That's going to limit your nimbleness and opportunity. Obviously that's a business decision that can go either way.
And, having worked on systems where lives could be at stake, I will stick with a more conservative approach.
If your architecture will put lives at risk when a bad firmware update for a subset of the servers comes in, then it's too brittle. If safety is paramount, fixing that should be pretty close to the top of the list.
Some of these towers have an upper lobby. So you take the express from 1 to 75, then a 'local' from 76 to 100.
Usually the 'important people' are on the top floors so the elevator ratio is better and there's little waiting in the upper lobby. Unless you stop at the bar.
Once in a blue moon there's an express to the penthouse, but to pay for an entire express elevator entirely in the rent of the penthouse apartment isn't feasible for all but the ultra-ultra rich.
It was the lack of altruistic eyes scrutinizing it.
That was a secondary effect. People who might want to analyze code want to do a good job, and there's a lot of code worth analyzing.
To do that job there are tools that help with that analysis. OpenSSL's use of non-standard internal memory management routines makes it resistant to use of such analysis tools.
Is it impossible for a code auditor to keep everything in his head? No, but it's tough and error-prone. Some people have found OpenSSL bugs before, of course, but there are ways to make it easier for auditors to stand a fighting chance.
That's largely what the OpenBSD team is doing - ripping out all of that unneeded memory management crap, killing OS/2, VMS, and MacOS7 support code, etc. The payoff should be more people looking at it, but it sure wouldn't hurt for some companies that save millions by using OpenSSL to throw the team a few bones once in a while to make it more regular. Or hire their own internal folks to do the same, if that would work out better.
$300 for the 16 GB model and $350 for a 64 GB model? Knowing what Samsung charges for comparable devices
Yes, but the recent build estimate based on tear-down for the S5 was $255 or so.
That gives these guys in China almost a hundred bucks, which is a good margin for any business. Samsung is just making money hand-over-fist, but there's plenty of long-tail to profit in.
Scalia never met a search he considers unreasonable ...
Except for this one? Did you miss that Scalia wrote the dissent while Thomas wrote the majority opinion?
Too bad they didn't make it to 8Mp. That would give video producers a bunch of creative options while working in 4K. Next rev!
Or more succinctly: incentives matter. What incentive does an employee have to keep data secret? Will he be demoted in rank and lose pay if he does something stupid?
What incentives do companies have to maintain a secure infrastructure? Will their insurance policy hold them liable if they do not?
I'm just in the middle of polishing up a puppet module to deploy a bunch of new certs on my infrastructure. My incentive is that my reputation looks pretty bad if I advise clients to be secure but my own infrastructure is not up to snuff. That's really an incentive to avoid lost opportunities, I suppose.
Google is talking about scoring up pages that are secure. Another very wise incentive.
Let's keep this ball rolling: what other incentives can we offer or explain?
Seriously, airplane security is clearly full of holes and the sham of passenger security checks is just that, a sham meant to make us 'feel' safe while wasting our time and shoveling tons of dollars to the TSA.
Well, any good government repression solves multiple problems, but the point of TSA is behavioral conditioning - giving away tons of money to political cronies is just a bonus.
If you're willing to pay you can hire good people. It's just that the big publicly-owned Silicon Valley companies can use their funny money to pay more than you can.
If you go to places where people are living for quality-of-life and not just money, you'll find more of the competent folks. The competent folks in sucky-places-to-live have all moved to the aforementioned corporations or nicer places to live.
Please justify the $5 cost to rent your film. I can rent your latest superhero blockbuster over the weekend for $2 from Redbox. I can own Louis CK's latest show forever for $5. Why is your content so much more expensive?
Because people are willing to pay $5 to watch it now. If Whedon's company is smart, the price will go down over time to pick up the folks who won't pay $5 to watch it out of the gate.
If it goes down to $2 in a year, then to me that's better than 100% RoI in 1 year, so it's a great deal to me to watch it next year. But some people value being able to be the first to blog about it, chat about it over the water cooler, etc. I watch TV on Netflix 2-3 years after it's been on a network (because cable & satellite are way too much money), but I realize I'm very atypical in that view.
Check out some stuff from Menger if you want a more academic treatment.
I get breakups all the time from home (DSL) on Vimeo but Youtube's Flash Player works, even in hi-def.
Just tried this trailer from work with a 40meg fiber (same telco) and it worked fine. Maybe it's just time of day, maybe Google has better peering, I dunno.
Show your dog three biscuits. Give him two. See if he goes and lays down or if he calculates the number of biscuits in your hand to be larger than zero.
Right, ethics classes won't help. I left a good career at a major medical center when I was told that we were going with the technology that would likely create medication errors because the correct software was too expensive and it would be cheaper to settle the lawsuits.
Nobody needs an ethics class to know that that's wrong behavior, and taking an ethics class would not have changed that behavior. And it certainly wasn't the programming staff that needed ethical correction.
I use ErrorZilla Mod. It lets me 'wayback' with one click, and then I get to choose which dates make sense.
Lets burn the lawyers offices down.
The lawyers are powerless without the courts. It's the Court orders, backed by ... wait for it ... men with guns that make this environment possible.
Do you know why everybody is so jumpy and the cops are doing summary executions now? Because everybody is a criminal, everybody is a suspect, and the cops and the courts enforce these absurd laws rather than than defend the Constitution as a co-equal branch.
Hell, the Constitution didn't even make it past 1803 intact in design, and FDR accepted the Supreme Court's final surrender in 1937 from Chief Justice Hughes as a settlement to his plan to expand the Court with its cronies. Overnight, SCOTUS began finding all of Roosevelt's programs suddenly Constitutional even concluding that growing wheat for your family farm is part of "Interstate Commerce" and suddenly of Federal providence.
The problem now is that it's impossible for the People to know what the Constitution says because (supposedly) it doesn't mean anything until SCOTUS tells us what it means, which might well be the opposite of what we "think" it means (that is, the plain English meaning). The catch is that the Constitution is what authorizes the government in the first place. If the People aren't competent to understand their agreement with that government, then they weren't competent to create it in the first place and the grant of power is void.
This is not about science, it is about tje progressive anti-gun stance.
Seriously - stop spreading their propaganda. They explicitly want those in power to have all the guns they need. They just want the People to be disarmed and figure their friends will be in power.
This is not at all an anti-gun stance, it's a central-control stance. This gives them a sense of security, like those living under Mao or Pol Pot.
Somebody tell the Georgists that there's lots of land on Mars to not own and let's see them beat Musk to the stars. The more the merrier!
yep. This may be a case of "medicine that tastes awful".
Seriously, wtf is up with people thinking that they should get everything they want all the time?
That's what we call 'entitlement'. It's the confusion of cause and effect when applied to societal systems.
Can boken be overdone? Sure. A 1mm think depth of field is overdoing it, but so is shooting at f/16 everywhere. But even a thin DoF and the right can result in some magical results
Just because you know what you're talking about, and we're among friends:
It's bokeh, with an 'h'. And it refers to the character of the blur, not the blur itself. If you've got an image, say f/3.4, a hipster might say "nice bokeh" to you, but he means that you have a good lens, not that you've selected a good aperture. And then he might also suggest you make a "glisse" print. ;)
And, of course, shallow depth of field is a huge fad, and there's an entire generation of kids who won't ever be able to tell where they were in any of their childhood pictures. *That* will seem very "early 21st century" in a couple decades.
There's no one-size fits all solution. I've made the argument for informed disclosure here in the past, but in this case it probably wouldn't work. The DTLS code is so small and self-contained and the code so obvious to an auditor that just saying that there's an exploit in DTLS or to compile without heartbeat is probably enough to give the blackhats a running start. But there are other situations where informed disclosure is better than responsible disclosure.
Did Google do the right thing here? I'm not sure, but it's not completely clear that they didn't. There are several factors that bridge the gap between theoretical ideal and what can work in every situation in the real world.