"for those who have been in the industry for a long time?"
uh... the question isn't about people in the industry for a long time, it is about people that are older just coming into the industry. the thinking being that a company is willing to take on a fresh 22 year old graduate because it still sees 30 years of potential work from them after they learn the ropes for 10 years... a 35 year old hire isn't offering the same potential to them. editors shouldn't be allowed to comment on submissions up there cause i would have given this one -1 RTFC.
spam is in no way fraud. i make $50,000 a day posting to slashdot from home. you can too, email me back at ahk235hk2@yahoo.com. if that doesn't work, try my work email at 235hlj235hl2@hotmail.com.
it seriously looks like they are moving in the right direction.
HTTP handling in kernel mode... well... maybe they got drunk that day... but the rest sounds like they are making progress and fixing the legacy design issues that have been around since NT and 98.
too all the people said they are glad i don't vote...
you are the reason, not me, that america is going in the shitter.
my right to vote, however i want, as informed as i want, is just as important to america as free speech. if you don't understand that, god help you.
i noticed someone said the average person like me probably isn't up on issues... in my case i'm not in the average, but i agree. i am a libertarian, and actually host the local libertarian party meetings at my restaurant. i do vote, but not on every election. with online voting i would vote on every issue in every election. that is my only point.
dude, the ONLY reason you don't publish who people voted for is so politicians can't buy your vote.
the second there is a verifiable list of who you voted for, the politicians will just take all the money the corporations give them and give it to us! man you are dumb.... wait a minute... i guess you are pretty smart afterall.
automate purchasing domains such as myspamdomain0001.com myspamdomain0002.com my spamdomain0003.com myspamdomain0004.com... the same why they automate buying yahoo addresses.
the RBL's would become far LESS useful. because domains have so much value, spammers are going to do everything they can to send email through domains that are not blocked... and in doing that block everyones domain.
verifying headers is damn near impossible unless you have each server log every transaction and accept challenge requests. this overhead is almost impossible.
the protocol is correct in simply taking its output and displaying it. it isn't verified because it can't effective be done.
spammers will find ways around anything you put up.
THE ONLY WAY TO STOP SPAM: (bells and horns play) you maintain a list of people you accept email from. you set up a method for people to request admittence to that list (through existing protocol).
spam can not be stopped. period. if you believe otherwise you are misguided. the protocol does its jobs, and the verification of the headers and contect are to be done on the end systems. a challenge system at the backbone level is ignorant.
the only update the internet needs is more IP space and faster connections and Internet2 is already doing that.
i guess rules of physics still don't apply here...
on
Energy From Vibrations
·
· Score: 2, Insightful
i would think it would be obvious to this crowd, but it was mentioned twice in the summary alone.
the energy required to make the cell phone vibrate would be more than it could recoup from charging from vibrations. there is no perpetual cellphone.
i don't remember anything... my friend was getting a tivo for his HDTV, and was see-sawing between getting the $1000 tivo or the $500 one and adding on an HDTV decoder later in a sepearte unit.
they already have tivo's with HDTV tuners in them as well...
as for the digital cable dual tuner problem, tivo can never do that. you need the decoder from the cable company. if any 3rd party vendor could make digital cable decoders legally we would all own one.
you simply need a dual tuner tivo with HDTV built in. they don't have internal dvd burners, but with the home media edition you could network to your PC dvd-r and record there. you'll need to get a seperate digital cable box for each tuner, or get a digital cable box with dual tuners (if they exist)
expected next step...
on
Dial-A-Cam
·
· Score: 3, Insightful
this is how you would expect the technology to evolve. anything that can be done with existing technology will be done... and through that process new necessities will arise and new features will be implemented that will be joined with all of the exisiting features.
frank norris said something like imagination is only the combination of things not yet combined...
you have a phone... a phone calls another phone and asks to talk to it. that phones human operator can accept and talk.
you have picture phones where a phone operator can call another phone and offer a photo.
why not combine them (if the operator owns both pieces) and call a camera phone: and have it automatically accept, take a picture and send it back. that is really all this is. it automatically pushes a few buttons on the camera phone.
all it is is a scaled down camera phone with less functionality that automatically sends pictures. pretty simple to hack your own together i would think.
now i'll have to take the x10 camera hidded in my bathroom out and put my celly in there instead.
no, it would work. i don't want to go into too much detail though...
lets say the account is 1234 and unique key is 5678.
reader: account 1234 wants a coke server: transaction 5678 reader is now in challenge mode... it will have kept a record of all previous transactions locally and check for transaction 5678. if it does not exists it will challege reader: is it ok to charge account 1234 for transaction 5678 server: checks to see if it had initiated that transaction but it wasn't confirmed yet. if so, send back "confirmed".
now the reader could only get into 'waiting for confirmed' command if it had gone through step 2 of receiving a transaction number that it had not seen before.
you simply encryt data transaction to replaying messages has no effect anymore, and unless you can crack their encryption and generate transaction numbers and fully emulate the main server you can't do anything.
this is simple network security. it does work but if you still have questions google.
current implementation: reader to NP: this guy says he wants a coke NP to reader: give him a coke
how it is hacked: intercept the NP to reader command and resend "give him a coke" to the reader. free coke.
fixed implementation: reader to NP: this guy says he wants a coke NP to reader: give him a coke, lets call it UNIQUE_KEY reader to NP: can i give this guy a coke and call it UNIQUE_KEY? NP to reader: if this challenge already occured respond "no, you already did", otherwise, respond "yes, give him a coke" and log the UNIQUE_KEY
problem is the current hardware can not be upgraded to do handshaking or challenges like that. if you have programmed for paypal's IPN, it works as correctly described above and seems like the obvious solution... i can't figure out what these guys were thinking **for 19 years**!
i was talking about real mail. for spam i was at 400 a day, then i decided to try unsubscribing... something that i told people to never do because then they know you are real. in the end it doesn't matter if they know you are real. if the mail went through that is good enough for them. after clicking remove links for a week i'm down to about 10 pieces of easily email filterable spam a day.
so i'm getting more snail mail spam than email spam!
some users of my website have gotten pissed when they lose the game and signed up the webmaster account for tons of email offers... it is basically harassment, but easy to turn off.
yesterday as i went through *35* pieces of junk mail from 3 days i was wondering if the USPS had an opt out from certain mailers form? i doubt it because spam is how they make most of their money.
Slashdot Mirror
why are you reading slashdot between 9 to 5 slacker?! maybe they should move *YOUR* job to india.
Where is UNISYS today?
last i saw in a big black building off 101 towards san francisco...
"for those who have been in the industry for a long time?"
uh... the question isn't about people in the industry for a long time, it is about people that are older just coming into the industry. the thinking being that a company is willing to take on a fresh 22 year old graduate because it still sees 30 years of potential work from them after they learn the ropes for 10 years... a 35 year old hire isn't offering the same potential to them. editors shouldn't be allowed to comment on submissions up there cause i would have given this one -1 RTFC.
but netscape doesn't have money... they want money... so why not sue the people that use the feature offered to them? welcome to america, party of 1.
spam is in no way fraud. i make $50,000 a day posting to slashdot from home. you can too, email me back at ahk235hk2@yahoo.com. if that doesn't work, try my work email at 235hlj235hl2@hotmail.com.
it seriously looks like they are moving in the right direction.
HTTP handling in kernel mode... well... maybe they got drunk that day... but the rest sounds like they are making progress and fixing the legacy design issues that have been around since NT and 98.
too all the people said they are glad i don't vote...
you are the reason, not me, that america is going in the shitter.
my right to vote, however i want, as informed as i want, is just as important to america as free speech. if you don't understand that, god help you.
i noticed someone said the average person like me probably isn't up on issues... in my case i'm not in the average, but i agree. i am a libertarian, and actually host the local libertarian party meetings at my restaurant. i do vote, but not on every election. with online voting i would vote on every issue in every election. that is my only point.
INSIGHTFUL +5?!
dude, the ONLY reason you don't publish who people voted for is so politicians can't buy your vote.
the second there is a verifiable list of who you voted for, the politicians will just take all the money the corporations give them and give it to us! man you are dumb.... wait a minute... i guess you are pretty smart afterall.
HERE'S TO THE VOTE LIST!
i am personally too lazy to figure out where i have to go, and generally don't like standing in long lines to fill out archaic forms.
online voting would indeed get this non-voter to the polls.
save all the 'you should vote' comments. i'm too lazy to even read them.
do like everyone else... fuck the zoning restrictions, start up the company and launder the money.
i have this cousin who used to be a crack head, he can help you.
DAMN. so much for hacking IIS anymore. maybe i'll take up golf.
ok, so as a spammer, my next step:
y spamdomain0003.com ...
automate purchasing domains such as
myspamdomain0001.com
myspamdomain0002.com
m
myspamdomain0004.com
the same why they automate buying yahoo addresses.
the RBL's would become far LESS useful. because domains have so much value, spammers are going to do everything they can to send email through domains that are not blocked... and in doing that block everyones domain.
verifying headers is damn near impossible unless you have each server log every transaction and accept challenge requests. this overhead is almost impossible.
the protocol is correct in simply taking its output and displaying it. it isn't verified because it can't effective be done.
spammers will find ways around anything you put up.
THE ONLY WAY TO STOP SPAM: (bells and horns play)
you maintain a list of people you accept email from. you set up a method for people to request admittence to that list (through existing protocol).
wow. so easy.
spam can not be stopped. period. if you believe otherwise you are misguided. the protocol does its jobs, and the verification of the headers and contect are to be done on the end systems. a challenge system at the backbone level is ignorant.
the only update the internet needs is more IP space and faster connections and Internet2 is already doing that.
i would think it would be obvious to this crowd, but it was mentioned twice in the summary alone.
the energy required to make the cell phone vibrate would be more than it could recoup from charging from vibrations. there is no perpetual cellphone.
i don't remember anything... my friend was getting a tivo for his HDTV, and was see-sawing between getting the $1000 tivo or the $500 one and adding on an HDTV decoder later in a sepearte unit.
i did a quick google and found these links:
link 1
link 2
previous slashdot story
next thing you'll tell me is that /. is actually making money.
they already have tivo's with HDTV tuners in them as well...
as for the digital cable dual tuner problem, tivo can never do that. you need the decoder from the cable company. if any 3rd party vendor could make digital cable decoders legally we would all own one.
you simply need a dual tuner tivo with HDTV built in. they don't have internal dvd burners, but with the home media edition you could network to your PC dvd-r and record there. you'll need to get a seperate digital cable box for each tuner, or get a digital cable box with dual tuners (if they exist)
this is how you would expect the technology to evolve. anything that can be done with existing technology will be done... and through that process new necessities will arise and new features will be implemented that will be joined with all of the exisiting features.
frank norris said something like imagination is only the combination of things not yet combined...
you have a phone... a phone calls another phone and asks to talk to it. that phones human operator can accept and talk.
you have picture phones where a phone operator can call another phone and offer a photo.
why not combine them (if the operator owns both pieces) and call a camera phone: and have it automatically accept, take a picture and send it back. that is really all this is. it automatically pushes a few buttons on the camera phone.
all it is is a scaled down camera phone with less functionality that automatically sends pictures. pretty simple to hack your own together i would think.
now i'll have to take the x10 camera hidded in my bathroom out and put my celly in there instead.
... are belong to us.
and it is spelled "cooties"
no, it would work. i don't want to go into too much detail though...
lets say the account is 1234 and unique key is 5678.
reader: account 1234 wants a coke
server: transaction 5678
reader is now in challenge mode... it will have kept a record of all previous transactions locally and check for transaction 5678. if it does not exists it will challege
reader: is it ok to charge account 1234 for transaction 5678
server: checks to see if it had initiated that transaction but it wasn't confirmed yet. if so, send back "confirmed".
now the reader could only get into 'waiting for confirmed' command if it had gone through step 2 of receiving a transaction number that it had not seen before.
you simply encryt data transaction to replaying messages has no effect anymore, and unless you can crack their encryption and generate transaction numbers and fully emulate the main server you can't do anything.
this is simple network security. it does work but if you still have questions google.
maybe sakila could have helped them?
this is so simple to fix...
current implementation:
reader to NP: this guy says he wants a coke
NP to reader: give him a coke
how it is hacked:
intercept the NP to reader command and resend "give him a coke" to the reader. free coke.
fixed implementation:
reader to NP: this guy says he wants a coke
NP to reader: give him a coke, lets call it UNIQUE_KEY
reader to NP: can i give this guy a coke and call it UNIQUE_KEY?
NP to reader: if this challenge already occured respond "no, you already did", otherwise, respond "yes, give him a coke" and log the UNIQUE_KEY
problem is the current hardware can not be upgraded to do handshaking or challenges like that. if you have programmed for paypal's IPN, it works as correctly described above and seems like the obvious solution... i can't figure out what these guys were thinking **for 19 years**!
i was talking about real mail. for spam i was at 400 a day, then i decided to try unsubscribing... something that i told people to never do because then they know you are real. in the end it doesn't matter if they know you are real. if the mail went through that is good enough for them. after clicking remove links for a week i'm down to about 10 pieces of easily email filterable spam a day.
so i'm getting more snail mail spam than email spam!
some users of my website have gotten pissed when they lose the game and signed up the webmaster account for tons of email offers... it is basically harassment, but easy to turn off.
yesterday as i went through *35* pieces of junk mail from 3 days i was wondering if the USPS had an opt out from certain mailers form? i doubt it because spam is how they make most of their money.
any input here?
its not their choice... the internet has rules, and running a mail server means you have to accept mail and deliver it according to the protocol.