Agreed, although not all the "vulnerabilities" listed in this so-called study do ship from Apple, many are third-party applications that just run on OS X. Also, OS X includes a lot of cool tools with their OS, because they are free. 99.99% of the time, these tools are never used, let alone exposed to the outside world. For example, almost a third of the first 30 CVE's listed in this study apply to the same Perl, regular expression evaluator.
I maintain, if Apple, Microsoft or any other company bundles flawed utilities with their OS it is their responsibility to provide support in the event vulnerabilities are found. It doesn't have to be written by Apple or Microsoft, if it was on the OS CD/DVD (or other distribution medium), they are responsible.
Put it this way, if Microsoft released a free copy of 'root kit for windows by l33t d00d' with Windows Server 2008, don't you think they would be held responsible?
Anecdote (n): a usually short narrative of an interesting, amusing, or biographical incident Data (n): factual information (as measurements or statistics) used as a basis for reasoning, discussion, or calculation Empirical (adj): originating in or based on observation or experience.
Source: Merriam-Webster
Sorry, what you're looking at is emperical data with a comment. Now if he were telling a story about the time he installed Vista on his computer, that would be an anecdote.
You're assuming that most people care about being banned by wikipedia.
What I'm trying to say, is there are always ways around IP bans, if someone really had it in for wikipedia, they would link a similar program to a botnet.
Heck, Congress could theoretically do that in a week if they really REALLY wanted to. It would be like using a sledgehammer on the executive branch and military, but it could be done.
Just set the military budget to $0 and legislate no troops permitted in Iraq.
(I did say sledgehammer, the results wouldn't be pretty)
It's antiquated partly because we are supposed to let the font designers design the look of the font, and not mess with it.
So, paragraph, line and page breaks are out too? Double spacing is a logical delimiter.
The two spaces after a period method is antiquated also because it prevents you from doing an efficient search for accidental typing of two spaces between words.
I'm guessing there's at least one person here who can do a regular expression to find accidental typing of two spaces where sentence delimiters are not the previous character. I would, but I'm lazy.
Isn't that not just bad and nasty but completely illegal?
That's a firm 'maybe'. It's not a real stretch to apply a law like criminal impersonation to this. (see above thread) The problem would be to get a decent AG to actually file the charges. It would be much easier to just file a fraud lawsuit and turn it into a class action.
NY Sec. 190.25
S 190.25 Criminal impersonation in the second degree.
A person is guilty of criminal impersonation in the second degree when he:
1. Impersonates another and does an act in such assumed character with intent to obtain a benefit or to injure or defraud another; Not a real stretch. If they just enforced QoS, then it wouldn't be an issue, the issue is pretending to be the end user's system.
There's a problem with the way things have been done, that's why we are having this discussion.
Actually, Twitter, this is more of a 'I have not personally seen or used your service, and you have not published detailed specs, so I will write some suggestions on how to fix the problems you have'
The other options are things like M$'s Live Desktop Rape Service
Yeah, you don't have too much free time on your hands. Tell your mom to stop sending the sugary snacks to your apartment over the garage, they're getting you too worked up.
I have some issues with DD-WRT closing parts of the source. (Last time I checked you couldn't build DD-WRT from the source given, FWIW I don't check often)
Of course you can't go to these places while on call, don't be dense.
So, unless the restaurant is in a bad signal area, on a plane sitting in a tunnel, you should expect service.
(I'm not arguing against passive jamming, if you never had service at the location, then you should know not to expect service at that location. Passive jamming doesn't show up during your appetizer.)
I'm not arguing against passive jamming, it's a fixed location that never had cell service. If you go to the movie theater and you never get service, you know not to expect it there.
My argument is purely against active jamming, creating dead spots that weren't there an hour ago. If you go to the movie theater where you always get serivce and today you don't get service, or better yet, you appear to have service but you don't, then you have a problem.
As for on-call, there was no such thing as on-call on the scale we see today before pagers were introduced. As a result we have better medical service, because we can keep more doctors available. Reliable cell/pager service is essential for a system like that to work.
If it's really that dangerous than you, as a surgeon, should be required to stay where you can be reached, by reliable means. Have you not noticed that pagers and cell phones don't work everywhere even if they're not jammed?
You can't be expected to always be in a cell/pager working zone 100% of the time. Some pagers/phones have guaranteed delivery, which means they will deliver after leaving a dead spot. Now, having created several artificial dead spots, the chance of delivery goes down. So, you've gone from a random situation to a willful act.
If you're driving down a dangerous road, you don't need someone pouring oil on the road to make it more dangerous.
Gee, if there was a natural disaster of some sort, say a snow storm, flood, or heavy rain that caused you to not be able to get to the hospital then people would die!
I only see one solution. You should stay in the hospital at all times. Don't even go outside -- you might be hit by a car and people would die as a result.
Well, now you're just trolling.
Or, we could weigh the risks with some attention to reality and realize that the sequence of events required for one of these panic situations are pretty unlikely. If you're still worried about it, I do have two final, radical solutions. If you find yourself in a place where you don't get any cell reception and you believe your reception to be absolutely critical to life, limb and the continued functioning of society, you can a) go some place where you DO get reception or b) give the number of the landline where you're at to people who may need to reach you.
Good point. Now, what do you do about the portable jammer? Check your service every 30 seconds?
Either way it doesn't matter. The person jamming is not only responsible for the crime of jamming, they are liable for actions resulting from their jamming.
Very well written and thought out. You're right on pretty much all your points, except that CU and NGE didn't help kill SWG.
When the buff/armor fiasco started Sony could have simply nerfed the features and lost about a quarter of their userbase, instead they redid the entire game, twice. So they lost over three quarters of their userbase.
Not well planned.
Personally, I think if they re-introduced the original game today, people would play it. But it would have to start from scratch, and that's more work than SOE would ever put into a game.
Slashdot Mirror
Agreed, although not all the "vulnerabilities" listed in this so-called study do ship from Apple, many are third-party applications that just run on OS X. Also, OS X includes a lot of cool tools with their OS, because they are free. 99.99% of the time, these tools are never used, let alone exposed to the outside world. For example, almost a third of the first 30 CVE's listed in this study apply to the same Perl, regular expression evaluator.
I maintain, if Apple, Microsoft or any other company bundles flawed utilities with their OS it is their responsibility to provide support in the event vulnerabilities are found. It doesn't have to be written by Apple or Microsoft, if it was on the OS CD/DVD (or other distribution medium), they are responsible.
Put it this way, if Microsoft released a free copy of 'root kit for windows by l33t d00d' with Windows Server 2008, don't you think they would be held responsible?
If it ships with the OS it should be patched by the OS company. If Apple shipped something with a flaw, Apple gets to patch it. Same for Microsoft.
Or instead post an update and let the users actually read and think for themselves.
Just because you can delete a published story doesn't mean you should.
As soon as Slashdot becomes a peer reviewed scientific journal I'll get right on it.
So, one successful installation and usage report is bullshit and "Anecdotal data" is not data.
How many reports does it take to become valid data and not bullshit?
Anecdote (n): a usually short narrative of an interesting, amusing, or biographical incident
Data (n): factual information (as measurements or statistics) used as a basis for reasoning, discussion, or calculation
Empirical (adj): originating in or based on observation or experience.
Source: Merriam-Webster
Sorry, what you're looking at is emperical data with a comment. Now if he were telling a story about the time he installed Vista on his computer, that would be an anecdote.
Thank you for calling! Thank you for calling!
You're assuming that most people care about being banned by wikipedia.
What I'm trying to say, is there are always ways around IP bans, if someone really had it in for wikipedia, they would link a similar program to a botnet.
Designed properly, I think a random shifting list of proxy servers would be pretty hard to detect and could cause havoc.
A p2p app designed to bypass Wikipedia IP bans would destroy wikipedia a lot quicker from the outside and completely trash their method of tracking.
Simply, you run an app and whenever you go to wikipedia it routes through someone elses computer. I'll call it 'wikiproxia'.
He can bring the troops home.
Heck, Congress could theoretically do that in a week if they really REALLY wanted to. It would be like using a sledgehammer on the executive branch and military, but it could be done.
Just set the military budget to $0 and legislate no troops permitted in Iraq.
(I did say sledgehammer, the results wouldn't be pretty)
It's antiquated partly because we are supposed to let the font designers design the look of the font, and not mess with it.
So, paragraph, line and page breaks are out too? Double spacing is a logical delimiter.
The two spaces after a period method is antiquated also because it prevents you from doing an efficient search for accidental typing of two spaces between words.
I'm guessing there's at least one person here who can do a regular expression to find accidental typing of two spaces where sentence delimiters are not the previous character. I would, but I'm lazy.
Isn't that not just bad and nasty but completely illegal?
That's a firm 'maybe'. It's not a real stretch to apply a law like criminal impersonation to this. (see above thread) The problem would be to get a decent AG to actually file the charges. It would be much easier to just file a fraud lawsuit and turn it into a class action.
Ryan Singel at Wired has some notes about this as well. http://blog.wired.com/27bstroke6/2007/09/are-comcasts-al.html
A person is guilty of criminal impersonation in the second degree when
he:
1. Impersonates another and does an act in such assumed character with
intent to obtain a benefit or to injure or defraud another; Not a real stretch. If they just enforced QoS, then it wouldn't be an issue, the issue is pretending to be the end user's system.
There's a problem with the way things have been done, that's why we are having this discussion.
Actually, Twitter, this is more of a 'I have not personally seen or used your service, and you have not published detailed specs, so I will write some suggestions on how to fix the problems you have'
The other options are things like M$'s Live Desktop Rape Service
Yeah, you don't have too much free time on your hands. Tell your mom to stop sending the sugary snacks to your apartment over the garage, they're getting you too worked up.
Actually, that's not a bad idea. I'll add Amazon to my list too.
Happy holiday shopping season Eidos, sorry your game sales tanked thanks to your marketing department.
I have some issues with DD-WRT closing parts of the source. (Last time I checked you couldn't build DD-WRT from the source given, FWIW I don't check often)
Penguin Lust
Because the driver's license has been a de-facto state ID since forever, and changing that would upset a lot of social convenience.
Translation:
The system is broken, I don't want to fix it because that would require work.
Only complete bastards would be happy that someone, somewhere lost important data.
It's a Mac, kinda like saying your 'speak and spell' lost data.
And in tunnels? on planes? In bad signal areas?
Of course you can't go to these places while on call, don't be dense.
So, unless the restaurant is in a bad signal area, on a plane sitting in a tunnel, you should expect service.
(I'm not arguing against passive jamming, if you never had service at the location, then you should know not to expect service at that location. Passive jamming doesn't show up during your appetizer.)
I'm not arguing against passive jamming, it's a fixed location that never had cell service. If you go to the movie theater and you never get service, you know not to expect it there.
My argument is purely against active jamming, creating dead spots that weren't there an hour ago. If you go to the movie theater where you always get serivce and today you don't get service, or better yet, you appear to have service but you don't, then you have a problem.
As for on-call, there was no such thing as on-call on the scale we see today before pagers were introduced. As a result we have better medical service, because we can keep more doctors available. Reliable cell/pager service is essential for a system like that to work.
If it's really that dangerous than you, as a surgeon, should be required to stay where you can be reached, by reliable means. Have you not noticed that pagers and cell phones don't work everywhere even if they're not jammed?
You can't be expected to always be in a cell/pager working zone 100% of the time. Some pagers/phones have guaranteed delivery, which means they will deliver after leaving a dead spot. Now, having created several artificial dead spots, the chance of delivery goes down. So, you've gone from a random situation to a willful act.
If you're driving down a dangerous road, you don't need someone pouring oil on the road to make it more dangerous.
Gee, if there was a natural disaster of some sort, say a snow storm, flood, or heavy rain that caused you to not be able to get to the hospital then people would die!
I only see one solution. You should stay in the hospital at all times. Don't even go outside -- you might be hit by a car and people would die as a result.
Well, now you're just trolling.
Or, we could weigh the risks with some attention to reality and realize that the sequence of events required for one of these panic situations are pretty unlikely. If you're still worried about it, I do have two final, radical solutions. If you find yourself in a place where you don't get any cell reception and you believe your reception to be absolutely critical to life, limb and the continued functioning of society, you can a) go some place where you DO get reception or b) give the number of the landline where you're at to people who may need to reach you.
Good point. Now, what do you do about the portable jammer? Check your service every 30 seconds?
Either way it doesn't matter. The person jamming is not only responsible for the crime of jamming, they are liable for actions resulting from their jamming.
15 car pileup on the interstate means if the on-call staff never get paged, people will die.
If we're lucky, the deaths would be limited to the familes of those with cell jammers. Unlikely, but a nice thought.
As long as you don't draw the non-ascii version, it's OK.
Very well written and thought out. You're right on pretty much all your points, except that CU and NGE didn't help kill SWG.
When the buff/armor fiasco started Sony could have simply nerfed the features and lost about a quarter of their userbase, instead they redid the entire game, twice. So they lost over three quarters of their userbase.
Not well planned.
Personally, I think if they re-introduced the original game today, people would play it. But it would have to start from scratch, and that's more work than SOE would ever put into a game.