tell ME, the user, so I can stop using the vulnerable software until it's fixed.
Yes, tell you the user that there's a problem in a piece of software, and what part of that software, but also give the vendor some amount of time to fix it before dumping the exploit into metasploit. I once called this Informed Disclosure for lack of a better term.
After all, Microsoft is handing over all of the zero-day exploits and they are free to peruse the source to the Linux and BSD kernels.
We don't think they're attacking every system - we think they're attacking the high-value targets where the largest number of people are (Google, Facebook, etc.) They're storing away all that information for later prosecution of political enemies.
If they were in every system in the world, we'd know about it. Lots of paranoid people run IDS's, some even with one-way isolated passive monitoring. NSA can't break that.
What the OP is proposing is that they may be in github, or if they aren't, it's a high-value target, so he wants to get out of the way of the spies (and the spies have spies, some of whom will sell his trade secrets to his competition).
The silver lining here is a potential resurgence for open source and end-to-end Internet solutions. Who wants to bet if they have taps on Amazon and Rackspace?
The USA kill millions of Indians outside of the USA. Those Indians were not US Citizens.
Imaginary titles (or lack thereof) do not justify murder either.
Let's take a concrete example. If Obama gets a secret court to revoke the citizenship of a political enemy, say Glen Greenwald, is it OK then to drone strike him?
He mostly lives outside the US due to some issue with federal marriage laws.
Almost entirely in agreement with your post, but this one:
Or you can just go download CentOS or Scientific Linux, which projects RH does nothing whatsoever to impede.
isn't so. Check out the Centos-devel list from 2010/2011 and/or KB's blog. Redhat does not release its build system, and it's not entirely self-building (in the GPL sense, and yes I know the distro in whole isn't under GPL). The CentOS guys had to do a tremendous amount of trial-and-error work in the build system to build CentOS 6 from the SRPM releases. SL just winged it and got out earlier but did not achieve binary compatibility that way.
I understand this is because of what Oracle does, and kinda get it, but SL and CentOS get caught in the turbulence of that spat.
Says the man that never in his life labored to create a new idea.
Says a man who can't think of another way to make a living on an idea but to threaten violence?
The GP post is wrong - he says, "ideas should be free". Ideas are free. They cannot be contained, and the very mention of them creates duplication of them. Nothing can change that, ever.
Trying to impose a commodity business model on ideas through force does not make them non-free. It just threatens violence against those who naturally reproduce those ideas in an effort to make money in a particular model that is contrary to the natural state of affairs. In the case of the US, it's one man threatening three hundred million for his private benefit.
Humans are hard-wired for mimicry - efforts to thwart that are doomed to eventual failure. Let's make money with non-zero-sum games instead.
Mozilla's been doing quite a bit of following in the past few years. Nice to see them take on something new and potentially significant. I don't know if they're the right folks for the job (they certainly have the cache') or if they'll succeed, but it's a good way for the Foundation to think that doesn't merely involve mimicking what Google does.
Have you read the recent press reports about reporters phones being tapped en masse by the Obama Administration and reporters threatened for reporting on certain stories? Sen. Peter King (NY), known supporter of terrorism (IRA donor), is calling for the arrest of (to hear him speak, he'd probably prefer a drone strike) Glen Greenwald.
The technology may have gotten past this hurdle. Consider this random $129 SSD with 175MB/s sustained write speeds. I don't think I have any spinning rust that can beat that.
Do be careful of manufacturers peddling 'max write speeds', though. If it's not sustained, it's effectively a buffer benchmark.
AMD wins the price/performance comparison. Intel wins the peak performance comparison.
AMD gets both price and cores per price, which is great under many workloads. But AMD chews more watts than Intel per work unit (which will eventually impact cost) and if you have to push that work through the fastest cores, Intel wins on that too.
I love my 12-core AMD VM server and my quad-core Intel laptop.
By making an explicit change to a classification, they are admitting to lower than expected successful fab yields for the areas of the CPU they are fusing off.
It's interesting that those two features would be more susceptible to higher-frequency faults than the rest of the trip. But, to your broader point, yeah, all the fabs are always working to improve their processes and get better yields from their parts - the new technology always has a limit at release and then those limits are raised over the products' lifetimes.
Don't most Big Box stores charge manufacturers for shelf space already? I'm not saying I dislike your idea, just wondering what the difference would be in the case of a Sony, with the giant TV's and stereo components (vs. a Microsoft where the rent would likely increase for more floor space).
I didn't know I was a slave until I found out I couldn't do the things I wanted. - Frederick Douglass
How many university professors will now change their mind about imaginary property and how many will still claim, "but if only we can tweak it thusly, for my benefit, it'll be all better?"
I love SSD's in servers and they don't burn me because I always expect them to fail. Sure, one MLC SSD is fine for a ZFS L2ARC, because if it fails reads just slow down, but for a ZFS ZIL, that gets a mirror of SLC drives, because a failure is going to be catastrophic.
If I'm using Facebook's FlashCache, two drives get mirrored by linux md and treated as a cache device and smartd lets me know when one of them goes TU. Another advantage here is linux md is hot-replaceable while pure FlashCache isn't. I just got linux 3.9 on my first server this weekend (thanks, ElRepo) and haven't yet tried Redhat's dm-cache, but the same logic ought to apply; it's only the abstraction and syntax that differs.
Yeah, there's a write penalty with mirrors, but SSD mirror writes are way faster than the best pure spinning-rust RAID (no rotational latency), so it's way better than other options.
Clustering can help too. The other strategy is to make nothing redundant except for a massive cluster of servers. I haven't benchmarked the two strategies (I tend to work with smaller clusters in small businesses) but tech time isn't free either. I suspect at Megalocorp scales where there are several people whose job it is to replace failing disks all day (this is a real thing), going redundant on the compute node scale is a better option. My systems tend to be remote in far-away data centers and nobody wants to have to touch them more than every few months.
And encrypting it screams "hey look at me look at me I'm saying something I don't want you to know about!"
Huh? My mail server has been opportunistically encrypting all MTA traffic for the past decade and all of my remote access is via OpenVPN or ssh. My work involves conversations with clients that include, but are not limited to trade secrets, personally-identifiable medical records, and financial information. Damn right I don't want other people to know about that stuff, and the NSA is near the bottom of that list.
The only change I'm going to make over this NSA tussle is to stop accepting plain HTTP on my own infrastructure. Sorry, IE on XP users - you're out of luck. The other 95% of the web will be better off if everybody makes the same change.
I'll have to look through my logs to see if the same change can be made for mail yet.
It almost certainly varies by jurisdiction. Here it's also 'on-road' vs. 'off-road', which makes sense since the difference is the road tax. I believe a tractor that's briefly using a road and has plates can be exempt, though.
As far as taxes go, a road tax is actually among the most fair - you pay for what you use, for the most part. You still pay too much because they're run inefficiently, but that's a separate issue.
That must be a U.S. special. In Europe, agricultural ('red') diesel has the same composition (and hence sulphur content) as normal diesel fuel, except for the addition of a red dye.
Same here in the Northeast US. Perhaps in the farm belt (midwest) they have enough volume to produce different formulations. The only other major formulation here is biodiesel, of which there is a fair amount.
Yeah, me too - but that's really encouraging. Look at that Synaptics board - it's freaking huge for what it needs to be. It could be instantly half the height, as-is, but it's made to be the same height as the Sandisk flash chip.
That this thing looks like a prototype is great, though. The 'real' versions should be able to easily fit inside 50's nerd / 00's hipster-thickness black plastic frames, which many people find to be actually comfortable to wear.
Slashdot Mirror
tell ME, the user, so I can stop using the vulnerable software until it's fixed.
Yes, tell you the user that there's a problem in a piece of software, and what part of that software, but also give the vendor some amount of time to fix it before dumping the exploit into metasploit. I once called this Informed Disclosure for lack of a better term.
After all, Microsoft is handing over all of the zero-day exploits and they are free to peruse the source to the Linux and BSD kernels.
We don't think they're attacking every system - we think they're attacking the high-value targets where the largest number of people are (Google, Facebook, etc.) They're storing away all that information for later prosecution of political enemies.
If they were in every system in the world, we'd know about it. Lots of paranoid people run IDS's, some even with one-way isolated passive monitoring. NSA can't break that.
What the OP is proposing is that they may be in github, or if they aren't, it's a high-value target, so he wants to get out of the way of the spies (and the spies have spies, some of whom will sell his trade secrets to his competition).
The silver lining here is a potential resurgence for open source and end-to-end Internet solutions. Who wants to bet if they have taps on Amazon and Rackspace?
The USA kill millions of Indians outside of the USA. Those Indians were not US Citizens.
Imaginary titles (or lack thereof) do not justify murder either.
Let's take a concrete example. If Obama gets a secret court to revoke the citizenship of a political enemy, say Glen Greenwald, is it OK then to drone strike him?
He mostly lives outside the US due to some issue with federal marriage laws.
Almost entirely in agreement with your post, but this one:
Or you can just go download CentOS or Scientific Linux, which projects RH does nothing whatsoever to impede.
isn't so. Check out the Centos-devel list from 2010/2011 and/or KB's blog. Redhat does not release its build system, and it's not entirely self-building (in the GPL sense, and yes I know the distro in whole isn't under GPL). The CentOS guys had to do a tremendous amount of trial-and-error work in the build system to build CentOS 6 from the SRPM releases. SL just winged it and got out earlier but did not achieve binary compatibility that way.
I understand this is because of what Oracle does, and kinda get it, but SL and CentOS get caught in the turbulence of that spat.
Says the man that never in his life labored to create a new idea.
Says a man who can't think of another way to make a living on an idea but to threaten violence?
The GP post is wrong - he says, "ideas should be free". Ideas are free. They cannot be contained, and the very mention of them creates duplication of them. Nothing can change that, ever.
Trying to impose a commodity business model on ideas through force does not make them non-free. It just threatens violence against those who naturally reproduce those ideas in an effort to make money in a particular model that is contrary to the natural state of affairs. In the case of the US, it's one man threatening three hundred million for his private benefit.
Humans are hard-wired for mimicry - efforts to thwart that are doomed to eventual failure. Let's make money with non-zero-sum games instead.
I have tried to escape the US, but there is a big wall there now
No, it's not to keep us in, it's to keep the brown people out. I heard a politician say so!
What's that about liberty dying with thunderous applause?
Of course, if you're willing to do this, you can easily grab a newer Linux kernel from kernel.org yourself on regular RHEL, too.
Even better, install elrepo.repo and enable the elrepo-kernel repo and install the package 'kernel-ml'.
I just build a CentOS 6-based Xen server last weekend with kernel-ml and mayoung's xen packages, and it's a beautiful thing.
Mozilla's been doing quite a bit of following in the past few years. Nice to see them take on something new and potentially significant. I don't know if they're the right folks for the job (they certainly have the cache') or if they'll succeed, but it's a good way for the Foundation to think that doesn't merely involve mimicking what Google does.
Let's hope that always stays true.
Have you read the recent press reports about reporters phones being tapped en masse by the Obama Administration and reporters threatened for reporting on certain stories? Sen. Peter King (NY), known supporter of terrorism (IRA donor), is calling for the arrest of (to hear him speak, he'd probably prefer a drone strike) Glen Greenwald.
A great number of those "American Indians" were not actually in "America" at the time they were killed. Something to consider...
Imaginary lines on maps never justify murder.
I have a 4x2TB SATA II array in RAID 5
Sure, an array of one type can beat a single part of another. But then an array of that other type can beat an array of the first.
Right tool for the job and all, but the idea that SSD has slower sustained write than hard drives seems to be an old one.
SSD is an absolute DOG for extended writes
The technology may have gotten past this hurdle. Consider this random $129 SSD with 175MB/s sustained write speeds. I don't think I have any spinning rust that can beat that.
Do be careful of manufacturers peddling 'max write speeds', though. If it's not sustained, it's effectively a buffer benchmark.
AMD wins the price/performance comparison. Intel wins the peak performance comparison.
AMD gets both price and cores per price, which is great under many workloads. But AMD chews more watts than Intel per work unit (which will eventually impact cost) and if you have to push that work through the fastest cores, Intel wins on that too.
I love my 12-core AMD VM server and my quad-core Intel laptop.
By making an explicit change to a classification, they are admitting to lower than expected successful fab yields for the areas of the CPU they are fusing off.
It's interesting that those two features would be more susceptible to higher-frequency faults than the rest of the trip. But, to your broader point, yeah, all the fabs are always working to improve their processes and get better yields from their parts - the new technology always has a limit at release and then those limits are raised over the products' lifetimes.
So many signs that population is expected to peak around the year 2011 and start decreasing.
I think you meant "population growth rate". Anyway, ob. TED Talk.
Short version: the population will continue to increase due to longevity, but the births have already slowed.
Short-short version: don't worry, be happy.
they get to charge them rent
Don't most Big Box stores charge manufacturers for shelf space already? I'm not saying I dislike your idea, just wondering what the difference would be in the case of a Sony, with the giant TV's and stereo components (vs. a Microsoft where the rent would likely increase for more floor space).
How many university professors will now change their mind about imaginary property and how many will still claim, "but if only we can tweak it thusly, for my benefit, it'll be all better?"
Are you suggesting that Wonka released the Wangdoodle? That's dark, man.
Two years on and this is still relevant: The Hot/Crazy Solid State Drive Scale.
I love SSD's in servers and they don't burn me because I always expect them to fail. Sure, one MLC SSD is fine for a ZFS L2ARC, because if it fails reads just slow down, but for a ZFS ZIL, that gets a mirror of SLC drives, because a failure is going to be catastrophic.
If I'm using Facebook's FlashCache, two drives get mirrored by linux md and treated as a cache device and smartd lets me know when one of them goes TU. Another advantage here is linux md is hot-replaceable while pure FlashCache isn't. I just got linux 3.9 on my first server this weekend (thanks, ElRepo) and haven't yet tried Redhat's dm-cache, but the same logic ought to apply; it's only the abstraction and syntax that differs.
Yeah, there's a write penalty with mirrors, but SSD mirror writes are way faster than the best pure spinning-rust RAID (no rotational latency), so it's way better than other options.
Clustering can help too. The other strategy is to make nothing redundant except for a massive cluster of servers. I haven't benchmarked the two strategies (I tend to work with smaller clusters in small businesses) but tech time isn't free either. I suspect at Megalocorp scales where there are several people whose job it is to replace failing disks all day (this is a real thing), going redundant on the compute node scale is a better option. My systems tend to be remote in far-away data centers and nobody wants to have to touch them more than every few months.
that's a decision that all mankind should make together
Good luck getting a unanimous vote. Aside from that's it's still one group imposing their will on another.
I still don't think opening it up for every message is a great way to run it, though.
Default: public domain
not in any jurisdictions that are party to the Berne Convention.
And encrypting it screams "hey look at me look at me I'm saying something I don't want you to know about!"
Huh? My mail server has been opportunistically encrypting all MTA traffic for the past decade and all of my remote access is via OpenVPN or ssh. My work involves conversations with clients that include, but are not limited to trade secrets, personally-identifiable medical records, and financial information. Damn right I don't want other people to know about that stuff, and the NSA is near the bottom of that list.
The only change I'm going to make over this NSA tussle is to stop accepting plain HTTP on my own infrastructure. Sorry, IE on XP users - you're out of luck. The other 95% of the web will be better off if everybody makes the same change.
I'll have to look through my logs to see if the same change can be made for mail yet.
It almost certainly varies by jurisdiction. Here it's also 'on-road' vs. 'off-road', which makes sense since the difference is the road tax. I believe a tractor that's briefly using a road and has plates can be exempt, though.
As far as taxes go, a road tax is actually among the most fair - you pay for what you use, for the most part. You still pay too much because they're run inefficiently, but that's a separate issue.
That must be a U.S. special. In Europe, agricultural ('red') diesel has the same composition (and hence sulphur content) as normal diesel fuel, except for the addition of a red dye.
Same here in the Northeast US. Perhaps in the farm belt (midwest) they have enough volume to produce different formulations. The only other major formulation here is biodiesel, of which there is a fair amount.
I'm surprised it's not smaller!
Yeah, me too - but that's really encouraging. Look at that Synaptics board - it's freaking huge for what it needs to be. It could be instantly half the height, as-is, but it's made to be the same height as the Sandisk flash chip.
That this thing looks like a prototype is great, though. The 'real' versions should be able to easily fit inside 50's nerd / 00's hipster-thickness black plastic frames, which many people find to be actually comfortable to wear.