1. I'm on a hill. I start the engine. I want to go uphill. Until the engine generates enough torque to move me forward, I have to keep the brakes engaged. What if the electric motors can't generate enough torque on their own?
2. Add a trailer with electric brakes to the scenario. Now it's even worse.
3. What if I'm backing up under the same scenario. The one-way (sprague) in the tranny doesn't do anything in that situation.
4. One wheel stuck against the curb and the opposing wheel slipping on ice. I can still move forward, even without a limited-slip differential, by lightly applying the brakes - the slipping wheel is now partly locked, some torque can now go to the wheel that's jammed against the curb, and I'm no longer stuck.
Your model fails. Completely. I hope you never have to write code.
Software verification is purely checking, whether the written code matches the algorithm
In the real world, software interacts with hardware. It also may interact with an environment that has other software running at the same time, creating issues of resource contention and starvation.
The total cost of the bail-out, past and going forward over the next decade, is now estimated at being in the area of 20 trillion to the US. That's a quarter-million per family of 4. This is, on a per capita basis, more than 4x the Iceland "Icesave" bailout that is threatening to bankkrupt Iceland.
It won't make the US lose it's AAA credit rating - the ratings companies will come up with an AAAA rating for some of the other countries instead, and AAA will become the new "A with negative outlook".
> Most problems in automatic verification are either undecidable, or intractable.
Who was speaking of automatic verification?
Some of these same problems are impossible for humans to verify simply because "solution space" is outside the combined lifetime of every human on the planet. That's why "automatic verification" and why even automatic (or more properly, automated) verification, becomes an intractable problem - simply not enough TIME.
If it will take 100 years to verify every possible code path and input, and the system is needed sometime in the next 50 years, forget it.
and if I kept a hard copy of a longer key in my wallet I'd almost certainly lose it sooner or later.
In that case, you need a purse (or a man-bag).
Even if someone at the local restaurant WERE to steal you wallet with a list of servers and passwords, they lack the other necessary ingredient - the account login names.
Change the passwords every 3 months, and write them down, along with one extra letter, along with the servers, and a "honeypot" login name with the longer password. Anyone logging into the bogus account, set their.rc file to send you an email notification to change all the passwords on all your sh*t. Then trace their IP back to where they are so you can hack into their box, find their personal info, and reclaim your wallet.
USA isn't perfect, but it's still one of the freest economies in the world.
The US is the least "free" economy in the world. Highest agricultural subsidies. Spends the most of ANY country in the world on bailing out private corporations. Gave Warren Buffets (largest stockholder in AIG and Moodys) enough of that "gubbimint cheese" to make Buffet the single largest welfare recipient in the known universe...
And you're "free" to pay for all this over the rest of your, and your kids, and your grandkids, lives.
Lumping Canada and the US together doesn't work. Canada is WAY ahead of the US in terms of broadband penetration, always has been, and will likely continue to maintain the lead over the next decade.
Aw, no more gmail? Tough shit - more than 95% of all the bogus registrations I see are from spammers using gmail.
Aw, no more search? Aw - guess we'll have to depend on good old word-of-mouth, and specialized sites that also cache searchable content from elsewhere. And distributed search.
Aw, no more podcasts and webinars? Nobody watches them anyways.
It's going to happen anyway - ad-blocking/security agents with enough intelligence to remove all ads. By 2020 the big Internet advertisers are all dead and gone, because change is chaotic, not gradual. Find another model, or FOAD.
You forget something - getting the password for a user account is only step 1.
So you now check into that account every day to see what comes up - and "damn - the passwords been changed!"
End result - unless it's a really interesting account, or you were able to exploit other flaws to escalate privileges and create a back-door account, you go elsewhere.
Say they get your password. So they start making their plans.
A week later, they're locked out again, and have to start over.
Plus, there's this really great tool for maintaining your password list - it's called "keep the ONLY hard copy in your wallet or purse - and NEVER let it out of your sight." You're already used to doing that in terms of your wallet or purse, so it doesn't add anything new that you have to adapt to - and it's not like you have to keep THAT in plain-text.
A weak password can eventually be cracked by a slow, dispersed dictionary attack;
This way, you don't have to worry about someone you gave the password to a year ago, or who otherwise found out about it (post-it, etc.) and now decides to do something about it because you p*ssed them off;
Also, you're right - a "system' for your password will definitely decrease security, no question about it, since any system is by definition non-random.
There's no "brute forcing" going on. Look at the numbers.
1 million per year over 50 sites == 20,000 per year per site, or 54 per day per site. Change the passwords every few months (and use different ones for each site).
Further - 1,200 different remote hosts means what, 17 attempts per remote host per site per year. Probably randomly p0wned PCs that hit addresses at random, make a few attempts using default or ocmmon passwords, then move on.
Or you can just get the digital signal directly over the air - that's what I do with an old pair of pre-digital rabbit-ears, and it works fine. HDVT@1920x1080.
Screw the cable companies.
Where I control the server I leave these uncompiled, but if I'm transferring them to the client's server I will compile or obfuscate their code so that it still works but is uneditable. Unfortunately, this whole area can become very difficult to handle with some clients.
In other words, he wants to lock them in to using only HI to extend the application. There is no reason he can't deliver it completely unobfuscated, yet still protected by copyright. Explain to them that they have a license to use it, that but they can't give or sell copies to anyone else because of copyright.
This guy should be avoided like the plague. He's like the people how "help" you by registering your domain for you, but put their name as the administrator, so you can't move it somewhere else when you're pissed off with their childish - and VERY UNPROFESSIONAL - tactics.
The entire purpose of the registry is to continue punishing the people on them by passing laws banning registered people from living in certain places, requiring them to check in with the cops on a regular basis as if they were on parole, requiring them to update their address, etc.
The purpose is to keep them from running puppy mills, hoarding 127 cats, etc.
There are no-kill shelters out there. Why not go adopt a dog or cat this weekend, and be part of the solution, instead of complaining about the problem? Dogs especially seem to understand when they've been given an extra lease on life, and they give back a lot more than they take.
Offshore sites will not be immune from the crackdown: almost all of them depend on banner ads served by US-based services, and the DMCA requires the ad service to act against any violator.
Attributor says it can interdict the revenue lifeline at any offending site in the world."
[X] My web site doesn't have ads, you insensitive clod!
... though I do smell an opportunity here for non-US-based adservers. In Soviet Russia, ads serve YOU!
Slashdot Mirror
Your code has a serious bug.
1. I'm on a hill. I start the engine. I want to go uphill. Until the engine generates enough torque to move me forward, I have to keep the brakes engaged. What if the electric motors can't generate enough torque on their own?
2. Add a trailer with electric brakes to the scenario. Now it's even worse.
3. What if I'm backing up under the same scenario. The one-way (sprague) in the tranny doesn't do anything in that situation.
4. One wheel stuck against the curb and the opposing wheel slipping on ice. I can still move forward, even without a limited-slip differential, by lightly applying the brakes - the slipping wheel is now partly locked, some torque can now go to the wheel that's jammed against the curb, and I'm no longer stuck.
In the real world, software interacts with hardware. It also may interact with an environment that has other software running at the same time, creating issues of resource contention and starvation.
"See, it repels water .." STOMP! SQUISH! "... used to repel water."
So much for the self-cleaning materials idea.
The total cost of the bail-out, past and going forward over the next decade, is now estimated at being in the area of 20 trillion to the US. That's a quarter-million per family of 4. This is, on a per capita basis, more than 4x the Iceland "Icesave" bailout that is threatening to bankkrupt Iceland.
It won't make the US lose it's AAA credit rating - the ratings companies will come up with an AAAA rating for some of the other countries instead, and AAA will become the new "A with negative outlook".
Some of these same problems are impossible for humans to verify simply because "solution space" is outside the combined lifetime of every human on the planet. That's why "automatic verification" and why even automatic (or more properly, automated) verification, becomes an intractable problem - simply not enough TIME.
If it will take 100 years to verify every possible code path and input, and the system is needed sometime in the next 50 years, forget it.
In that case, you need a purse (or a man-bag).
Even if someone at the local restaurant WERE to steal you wallet with a list of servers and passwords, they lack the other necessary ingredient - the account login names.
Change the passwords every 3 months, and write them down, along with one extra letter, along with the servers, and a "honeypot" login name with the longer password. Anyone logging into the bogus account, set their .rc file to send you an email notification to change all the passwords on all your sh*t. Then trace their IP back to where they are so you can hack into their box, find their personal info, and reclaim your wallet.
The US is the least "free" economy in the world. Highest agricultural subsidies. Spends the most of ANY country in the world on bailing out private corporations. Gave Warren Buffets (largest stockholder in AIG and Moodys) enough of that "gubbimint cheese" to make Buffet the single largest welfare recipient in the known universe ...
And you're "free" to pay for all this over the rest of your, and your kids, and your grandkids, lives.
Lumping Canada and the US together doesn't work. Canada is WAY ahead of the US in terms of broadband penetration, always has been, and will likely continue to maintain the lead over the next decade.
Aw, no more ars technica? Not missed anyways.
Aw, no more gmail? Tough shit - more than 95% of all the bogus registrations I see are from spammers using gmail.
Aw, no more search? Aw - guess we'll have to depend on good old word-of-mouth, and specialized sites that also cache searchable content from elsewhere. And distributed search.
Aw, no more podcasts and webinars? Nobody watches them anyways.
It's going to happen anyway - ad-blocking/security agents with enough intelligence to remove all ads. By 2020 the big Internet advertisers are all dead and gone, because change is chaotic, not gradual. Find another model, or FOAD.
A million attempts over the course of 1 year can easily be defeated by changing the password every 3 months.
You forget something - getting the password for a user account is only step 1.
So you now check into that account every day to see what comes up - and "damn - the passwords been changed!"
End result - unless it's a really interesting account, or you were able to exploit other flaws to escalate privileges and create a back-door account, you go elsewhere.
And what's wrong with writing them down and keeping them on you all the time? You know, like what you do with your folding money?
You're a lot less likely to lose your wallet or purse than your cell phone or a usb key with all the keys stored in it.
A week later, they're locked out again, and have to start over.
Plus, there's this really great tool for maintaining your password list - it's called "keep the ONLY hard copy in your wallet or purse - and NEVER let it out of your sight." You're already used to doing that in terms of your wallet or purse, so it doesn't add anything new that you have to adapt to - and it's not like you have to keep THAT in plain-text.
If you can remember the password, it's too weak.
It isn't even a question of faster ... a lot of those "glued-together solutions" don't scale and are impossible to debug and maintain.
Two reasons:
Also, you're right - a "system' for your password will definitely decrease security, no question about it, since any system is by definition non-random.
1 million per year over 50 sites == 20,000 per year per site, or 54 per day per site. Change the passwords every few months (and use different ones for each site).
Further - 1,200 different remote hosts means what, 17 attempts per remote host per site per year. Probably randomly p0wned PCs that hit addresses at random, make a few attempts using default or ocmmon passwords, then move on.
Or you can just get the digital signal directly over the air - that's what I do with an old pair of pre-digital rabbit-ears, and it works fine. HDVT@1920x1080. Screw the cable companies.
Don't worry, nothing will go wrong go wrong row grong rogue gone rogue gone rogue gone
In other words, he wants to lock them in to using only HI to extend the application. There is no reason he can't deliver it completely unobfuscated, yet still protected by copyright. Explain to them that they have a license to use it, that but they can't give or sell copies to anyone else because of copyright.
This guy should be avoided like the plague. He's like the people how "help" you by registering your domain for you, but put their name as the administrator, so you can't move it somewhere else when you're pissed off with their childish - and VERY UNPROFESSIONAL - tactics.
Actually, you don't. Not for things like communications theft. It's in the statute.
Just nuke it from orbit. It's the only way to be sure.
The purpose is to keep them from running puppy mills, hoarding 127 cats, etc.
There are no-kill shelters out there. Why not go adopt a dog or cat this weekend, and be part of the solution, instead of complaining about the problem? Dogs especially seem to understand when they've been given an extra lease on life, and they give back a lot more than they take.
Right - because cat torturers don't become sex offenders - they go on to kill people.
Torturing animals is something many murderers did before they "graduated" to killing humans.
[X] My web site doesn't have ads, you insensitive clod!