You have 3-4 monitors working with hardware acceleration without using Xinerama or TwinView?
I have 2x Quadros running with Xinerama - one monitor has hardware accelerated 3D graphics, but a 3D application cannot span nor cross a monitor boundary.
Derp, the TFA was talking about end service provider's private keys to their SSL certs. But with internal taps behind the SSL gateway, I don't see how it matters....
Except the DNSSEC root keys (and common gTLD keys like.com) have been compromised along with the CA keys. Now you just MITM the DNS request and forge the cert.
TFA is talking about the private keys to the Certificate Authorities, not the private keys of each individual SSL certificate.
Convergence.IO totally helps here -- assuming you can trust the end service provider to not give up their SSL cert keys. All the big providers have allowed internal taps into their data, so it doesn't matter if they shared their keys or not. But small providers and peers could be trusted with Convergence.
Sounds good, but what if they receive a Foreign Intelligence Surveillance Act (FISA) court order which prohibits them from telling anyone they had to hand over the private keys to their Certificate Authority?
Somehow the 4th and 1st amendments are violated without any public recourse.
Public Key Infrastructure (PKI) needs to be built into the APIs from day one. There shouldn't be a non-encrypted version available to developers or users.
Of course, anything using cryptography must be open source (and in a library available to my app, not only as a "cloud-based" API unless it only accepts encrypted data, no way can it have access to my private key).
There are lots of APIs available, but developers need to implement applications with them.
Modem-style data transfer between smartphones is a cool idea - but the software and protocol would need to be ubiquitous (read: open). If only a few apps or devices support this tech, it's no different from requiring hardware like NFC or software to support a bluetooth data sharing connection.
And DNS will continue to use Punycode in the foreseeable future. DNS is all that matters here as what is a "domain name" (read: hostname) other than a mapping of name to number?
As we cannot post unicode versions, here are the punycode versions:
.xn--ngbc5azd = International Domain Registry Pty. Ltd.'s Arabic for "Web or Network" .xn--80asehdb = Core Association's Russian for "Online" .xn--80aswg = Core Association's Russian for "Web site" .xn--unup4y = Spring Fields, LLC Chinese for "Game"
I do not know if it strips javascript or not. I'd be happy to try it on a script heavy PDF.
You can do the same PDF-> PS -> PDF as the summary suggested -- but with ghostscript and possibly control more options (like change the PDF version which might strip scripts), and perhaps use a different intermediary format than postscript.
(I also don't know about the libpng attack inside a PDF, but am aware of various remote code execution in poor png parsing/rendering libraries. Are people re-encoding PNGs at the mail gateway level to reduce exposure to malicious PNGs?)
I use Ghostscript when attempting to compress a "bloated" PDF (such as generated by Xsane). The input is a PDF, output is a PDF: # Use ghostscript to re-write the PDF gs -dBATCH -dNOPAUSE -q -sDEVICE=pdfwrite -sOutputFile=new.pdf old.pdf
Also handy to combine multiple PDFs into a single document, or copy out certain pages from a PDF: # Combine PDFs gs -dBATCH -dNOPAUSE -q -sDEVICE=pdfwrite -sOutputFile=combined.pdf 01.pdf 02.pdf 03.pdf
# Copy pages 3 & 4 from an existing PDF gs -dBATCH -dNOPAUSE -sDEVICE=pdfwrite -dFirstPage=3 -dLastPage=4 -sOutputFile=new.pdf current.pdf
The metadata stores the query:
https://www.google.com/search?q=my+search+string+is+in+the+http+header
They don't care about the results of the query.
On a search results page, you can click on "Search Tools" and then change the middle dropdown from "All Results" to "Verbatim".
You need to accept cookies for that to work...
Even https://encrypted.google.com/ won't save you!
I thought the same thing, WTF were those two red & blue maps of NYC?
You have 3-4 monitors working with hardware acceleration without using Xinerama or TwinView?
I have 2x Quadros running with Xinerama - one monitor has hardware accelerated 3D graphics, but a 3D application cannot span nor cross a monitor boundary.
Can you please post your "Device0" and "Monitor0" sections too? I'm confused by your MetaModes...
Thanks for the informative reply. I've been a long time md user, but not yet experimented with btrfs - I'll definitely try its native raid.
I'm very excited for the checksum-on-read process to alert on corrupted data.
Do you lose any functionality by using btrfs on top of an md device? (vs btrfs' own raid)
Agreed, it would be better to boot from another device (usb) and then use mdadm to rebuild the array (sync disk1 to the replaced disk0).
Just curious, why do you require access time? I set 'noatime' on all partitions.
Why would Samsung want to create it's own appstore when it can leverage Google's to sell more devices?
Derp, the TFA was talking about end service provider's private keys to their SSL certs. But with internal taps behind the SSL gateway, I don't see how it matters....
Except the DNSSEC root keys (and common gTLD keys like .com) have been compromised along with the CA keys. Now you just MITM the DNS request and forge the cert.
TFA is talking about the private keys to the Certificate Authorities, not the private keys of each individual SSL certificate.
Convergence.IO totally helps here -- assuming you can trust the end service provider to not give up their SSL cert keys. All the big providers have allowed internal taps into their data, so it doesn't matter if they shared their keys or not. But small providers and peers could be trusted with Convergence.
Sounds good, but what if they receive a Foreign Intelligence Surveillance Act (FISA) court order which prohibits them from telling anyone they had to hand over the private keys to their Certificate Authority?
Somehow the 4th and 1st amendments are violated without any public recourse.
Public Key Infrastructure (PKI) needs to be built into the APIs from day one. There shouldn't be a non-encrypted version available to developers or users.
Of course, anything using cryptography must be open source (and in a library available to my app, not only as a "cloud-based" API unless it only accepts encrypted data, no way can it have access to my private key).
There are lots of APIs available, but developers need to implement applications with them.
I knew there was a slashdot story about this! I failed in my quick search. Thanks for the link.
Near_sound_data_transfer is already implemented and sold by TagAttitude.
Audio data transfer in Android is discussed in this stackoverflow post which mentions this slideshow.
This dude posted his same idea over a year ago.
Modem-style data transfer between smartphones is a cool idea - but the software and protocol would need to be ubiquitous (read: open). If only a few apps or devices support this tech, it's no different from requiring hardware like NFC or software to support a bluetooth data sharing connection.
These are all uncontested applications (except for .sucks) and will all be new gTLDs within the next year or so:
(Listed in order of application prioritization by ICANN.)
There is an application for .WTF (as well as .FOO and .DOT, etc etc)
And DNS will continue to use Punycode in the foreseeable future. DNS is all that matters here as what is a "domain name" (read: hostname) other than a mapping of name to number?
As we cannot post unicode versions, here are the punycode versions:
I do not know if it strips javascript or not. I'd be happy to try it on a script heavy PDF.
You can do the same PDF-> PS -> PDF as the summary suggested -- but with ghostscript and possibly control more options (like change the PDF version which might strip scripts), and perhaps use a different intermediary format than postscript.
(I also don't know about the libpng attack inside a PDF, but am aware of various remote code execution in poor png parsing/rendering libraries. Are people re-encoding PNGs at the mail gateway level to reduce exposure to malicious PNGs?)
I use Ghostscript when attempting to compress a "bloated" PDF (such as generated by Xsane). The input is a PDF, output is a PDF:
# Use ghostscript to re-write the PDF
gs -dBATCH -dNOPAUSE -q -sDEVICE=pdfwrite -sOutputFile=new.pdf old.pdf
Also handy to combine multiple PDFs into a single document, or copy out certain pages from a PDF:
# Combine PDFs
gs -dBATCH -dNOPAUSE -q -sDEVICE=pdfwrite -sOutputFile=combined.pdf 01.pdf 02.pdf 03.pdf
# Copy pages 3 & 4 from an existing PDF
gs -dBATCH -dNOPAUSE -sDEVICE=pdfwrite -dFirstPage=3 -dLastPage=4 -sOutputFile=new.pdf current.pdf
If you're using HTTP instead of HTTPS, then the NSA has all your traffic already.
See: http://www.wired.com/threatlevel/2013/06/snowden-powerpoint/#slideid-57990