There will really be no fair benchmarks until a farmer in the back of beyond who doesnt normally touch computers wakes up one day and thinks
"Well, shucks, today im going to buy a new computer, Redhat9, Win2K3 and spend some time installing them, running the same sort of tasks on each, and jotting down the results. I have no idea why, but lets do it anyway."
Until someone who has no affiliation with either runs the benchmarks, you jsut cant rely on the results. Im not saying they would be messed with, but when you like one OS more than the other, its easy to introduce discrepancies.
Love Film is doing the same for the UK. 14.99 a month for 2 rentals at a time, no maximum limit on films per month or time held. Ive been using it for ~ 2 months now, and cant say Ive had any problems, turn around is pretty fast (mail one in, two days later get one back).
Why does it show lack of respect? You pay less to get less, hasnt that always been a part of marketing? They were aiming for the rental market without "returning the goods" fuss, but priced themselves too high. Does this mean you think the rental market shows a lack of respect for consumers?
If movies were only released in this format, then that would show a lack of respect, but in this case all the titles were available on unrestricted media. Good for them for attempting a new sales method.
Ive heard that said so many times to people who have expressed a desire to use GPL code but dislike the GPL license. Why doesnt that apply here? It doesnt have to be GPL compatable, and if anyone dislikes that, they are free to extend the GPL compatable version, or write their own implementation.
The RFC 1738 handles these standards, and contrary to popular belief, usernames and passwords are not permitted within http and https urls.
To quote:-
3.3. HTTP
The HTTP URL scheme is used to designate Internet resources
accessible using HTTP (HyperText Transfer Protocol).
The HTTP protocol is specified elsewhere. This specification only
describes the syntax of HTTP URLs.
An HTTP URL takes the form:
http://<host>:<port>/<path>?<searchpar t >
where and are as described in Section 3.1. If :
is omitted, the port defaults to 80. No user name or password is
allowed. is an HTTP selector, and is a query
string. The is optional, as is the and its
preceding "?". If neither nor is present, the "/"
may also be omitted.
Within the and components, "/", ";", "?" are
reserved. The "/" character may be used within HTTP to designate a
hierarchical structure.
In section 3.1 of the same document, it does allow usernames and passwords for the "Common Internet Scheme Syntax" but http and https do not belong to that category, which is why it is handled seperately within the same document.
So while it may be a generally accepted practice it isnt a standard.
The earlier reports were wrong. The reason the signal seemed to indicate that the lander was bouncing was because the arial ended up pointing down, and introduced an interference effect with the signal from earth. This led to a beating type signal which some interpreted to mean the lander was bouncing, when infact it wasnt.
One further thing to add. It seems IE isnt confused the first time you do it, but visit it subsequently and it displays it as you say. I have confirmed this on another 2 unpatched WinXP systems. First time loading that page and it has both urls displayed. Subsequent loads and it only shows slashdot. Wierd.
I was using PHP to sneak a ^A char into the stream, just forgot to mention it. Anyway, on your sample page, the second link works as advertisied, but the first link doesnt unless you visit it after the second link, and only then does it work:) Wierd or what? Again, unpatched IE6.
Both of these methods have been described on here as the way to do it, and were described as the method in the previous slashdot article on this. THe same behaviour happens whether or not I include a:foo (password) in the url before the %00@.
This is an unpatched IE6 install on XP. If im doing something wrong, please post a reply and I will test it.
And that, folks, was the scream of my DSL router ripping the bare molten telephone cables out of its socket.
The problem was that if you introduced a certain character just before the @ sign, the false url (eg the one that is actually the auth detail) will be the only one displayed. The real url would be left off, and thus people would be tricked. Its interesting to note that a similiar issue has been around a fair while, as there have been scams based on it (eg "banks" emailing you, asking you to click on a link and verify your login details. Page displayed looks real as its just a copy of your banks real site, but the url has @www.scammersurl.com at the end, after what looks like valid HTTP/GET data.
Im going on what official reports of the bug say, because I have never actually been able to replicate the effect myself, on IE5.5, IE5.5sp1, IE6, IE6sp1 and IE6sp2, so it does seem that not all installs are vulnerable, as they all displayed the fake url and the real url as you would expect in the address bar. For the record, I tried this on WinXP (just the IE6 versions) and Win2k.
I agree. Recently I found Alastair Reynolds, and read three of his books (Revelation Space, Redemption Ark and Chasm City) two of which are the first of a trilogy.
I raved about this bloke and the series to everyone who would listen. And then his third book in the series came out. What a waste of money!!
The whole series is leading up to a massive climax which jsut never comes, the entire storyline is wrapped up in the epilogue after the end of the third book, which jsut seemed to be a secondary arc that got pulled to the front. If i could get my money back for it, I would (its hard back, nearly 15!). It blowed, seriously. The ending had the feel that the author had jsut given up writing it one day (it was 700 pages long at that point) and ended it. I was severely dissappointed.
They are implementing something on their own before a regulatory body tells them to implement it. Kudos to them. Basically they are implementing on cellphones exactly what a vast number of the public have been calling for in the internet, namely making the place safe for kids, and since pretty much every kid over here in the UK has a cellphone, I think this is going to be seen as a positive step forward. Yes, by all means shout the generic shout "but the parents should supervise the kids", but seriously, wap enabled cellphones are an epidemic with the under 18 population over here, and its trivial for someone to purchase one without a parents knowledge, so its a lot easier to supervise a kid on a PC than it is on one of these.
I get wierd rendering problems with Firebird 0.7, especially on Slashdot (article text is overlayed over the first few comments, huge gaps between comments, stuff like that), freshmeat (right hand content pane is off the screen, no matter how much i resize the window), and kuro5hin (right hand pane is off screen until i refresh a few times.) among others. Refreshing rarely helps.
Re:site is slashdotted, here's the 1st page
on
BSD For Linux Users
·
· Score: 2, Insightful
Uhm, its well known that the *BSD origional code was a direct-line descendant of the origional AT&T code, its documented in umpteen billion places in various *BSD history documents and there are court cases circa 1993 about it. He posted nothing that can harm either community.
My website has a few walkthroughs on IPv6 setup for a fair few OSes. If you need any more help, post back with contact details. I used to help run a UK based IPv6 tun broker.
OpenBSD also tries IPv6 before anything else. And it is incredibaly easy to get IPv6 setup in OpenBSD, jsut 3 commands using a/64 (or larger) prefix from a tunnel broker, and you have a tunnel up and running. Or you can set it native (and this works perfectly within Londons Redbus centers).
Pretty much every company on the earth takes a publically accessable resource, adds its own value added addition to it, and sells it on. The wood that makes your tables came from a public forest, cut down by a company who gained the forestry rights, who sold the wood to another company who put hard work into making it into something someone would buy. This happens because not everyone has a week to spare to go cut down a tree themselves, and fashion the wood into a table.
In this case, LexisNexis took publically available records and indexed, cross referenced and published the records in a easily accessable and searchable medium. They added some value to getting the information from them rather than researching it yourself.
You need to gain some intelligence someplace, and stop branding random companies as criminal for providing a service. If you want to argue your corner, why not ask "Why isnt the Government doing what LexisNexis provides, but for free?". You state that its coming, why hasnt the government already provided it? Oh, maybe you are bitching because the Government hasnt already provided the sort of service that LexisNexis has spent time and money providing? Or maybe its because you value your time doing something other than cross referencing legal cases, and thus want it provided for free.
LexisNexis is usefull to some people, and in no way obstructs the availability of the raw records to the people who do not wish to pay them for it. Go fuck yourself.
With physical breakins you have to fix the door. With electronic breakins you can no longer trust most of the accessable systems, and you have to rebuild them from scratch. It isnt as simple as applying a patch, as rootkits arent fixed by patches for exploits.
To me, what he got at was information that should be publically accessible without tresspass.
It is publically accessable without tresspass. But it isnt archived, indexed, cross referenced and made easily searchable, and that costs money. Thats what you pay for when you make LexisNexis searches, or you could do it yourself but it would take a lot more time to do.
The market stopped being fair once money came into it. THe market stopped being fair when businesses stopped being locality driven. The market stopped being fair when the business owner stopped knowing all the customers who came into his store. The market stopped being fair a long long time ago.
Slashdot Mirror
There will really be no fair benchmarks until a farmer in the back of beyond who doesnt normally touch computers wakes up one day and thinks
"Well, shucks, today im going to buy a new computer, Redhat9, Win2K3 and spend some time installing them, running the same sort of tasks on each, and jotting down the results. I have no idea why, but lets do it anyway."
Until someone who has no affiliation with either runs the benchmarks, you jsut cant rely on the results. Im not saying they would be messed with, but when you like one OS more than the other, its easy to introduce discrepancies.
Tony Blair, John Prescott, George W Bush and Colin Powell first please.
Love Film is doing the same for the UK. 14.99 a month for 2 rentals at a time, no maximum limit on films per month or time held. Ive been using it for ~ 2 months now, and cant say Ive had any problems, turn around is pretty fast (mail one in, two days later get one back).
Why does it show lack of respect? You pay less to get less, hasnt that always been a part of marketing? They were aiming for the rental market without "returning the goods" fuss, but priced themselves too high. Does this mean you think the rental market shows a lack of respect for consumers?
If movies were only released in this format, then that would show a lack of respect, but in this case all the titles were available on unrestricted media. Good for them for attempting a new sales method.
...Write your own code.
Ive heard that said so many times to people who have expressed a desire to use GPL code but dislike the GPL license. Why doesnt that apply here? It doesnt have to be GPL compatable, and if anyone dislikes that, they are free to extend the GPL compatable version, or write their own implementation.
To quote
In section 3.1 of the same document, it does allow usernames and passwords for the "Common Internet Scheme Syntax" but http and https do not belong to that category, which is why it is handled seperately within the same document.
So while it may be a generally accepted practice it isnt a standard.
The earlier reports were wrong. The reason the signal seemed to indicate that the lander was bouncing was because the arial ended up pointing down, and introduced an interference effect with the signal from earth. This led to a beating type signal which some interpreted to mean the lander was bouncing, when infact it wasnt.
One further thing to add. It seems IE isnt confused the first time you do it, but visit it subsequently and it displays it as you say. I have confirmed this on another 2 unpatched WinXP systems. First time loading that page and it has both urls displayed. Subsequent loads and it only shows slashdot. Wierd.
I was using PHP to sneak a ^A char into the stream, just forgot to mention it. Anyway, on your sample page, the second link works as advertisied, but the first link doesnt unless you visit it after the second link, and only then does it work :) Wierd or what? Again, unpatched IE6.
Nope, GNU seems to think they need info pages more tho :(
- %01 method
- %00 method
Both of these methods have been described on here as the way to do it, and were described as the method in the previous slashdot article on this. THe same behaviour happens whether or not I include aThis is an unpatched IE6 install on XP. If im doing something wrong, please post a reply and I will test it.
And that, folks, was the scream of my DSL router ripping the bare molten telephone cables out of its socket.
The problem was that if you introduced a certain character just before the @ sign, the false url (eg the one that is actually the auth detail) will be the only one displayed. The real url would be left off, and thus people would be tricked. Its interesting to note that a similiar issue has been around a fair while, as there have been scams based on it (eg "banks" emailing you, asking you to click on a link and verify your login details. Page displayed looks real as its just a copy of your banks real site, but the url has @www.scammersurl.com at the end, after what looks like valid HTTP/GET data.
Im going on what official reports of the bug say, because I have never actually been able to replicate the effect myself, on IE5.5, IE5.5sp1, IE6, IE6sp1 and IE6sp2, so it does seem that not all installs are vulnerable, as they all displayed the fake url and the real url as you would expect in the address bar. For the record, I tried this on WinXP (just the IE6 versions) and Win2k.
I agree. Recently I found Alastair Reynolds, and read three of his books (Revelation Space, Redemption Ark and Chasm City) two of which are the first of a trilogy.
I raved about this bloke and the series to everyone who would listen. And then his third book in the series came out. What a waste of money!!
The whole series is leading up to a massive climax which jsut never comes, the entire storyline is wrapped up in the epilogue after the end of the third book, which jsut seemed to be a secondary arc that got pulled to the front. If i could get my money back for it, I would (its hard back, nearly 15!). It blowed, seriously. The ending had the feel that the author had jsut given up writing it one day (it was 700 pages long at that point) and ended it. I was severely dissappointed.
They are implementing something on their own before a regulatory body tells them to implement it. Kudos to them. Basically they are implementing on cellphones exactly what a vast number of the public have been calling for in the internet, namely making the place safe for kids, and since pretty much every kid over here in the UK has a cellphone, I think this is going to be seen as a positive step forward. Yes, by all means shout the generic shout "but the parents should supervise the kids", but seriously, wap enabled cellphones are an epidemic with the under 18 population over here, and its trivial for someone to purchase one without a parents knowledge, so its a lot easier to supervise a kid on a PC than it is on one of these.
I get wierd rendering problems with Firebird 0.7, especially on Slashdot (article text is overlayed over the first few comments, huge gaps between comments, stuff like that), freshmeat (right hand content pane is off the screen, no matter how much i resize the window), and kuro5hin (right hand pane is off screen until i refresh a few times.) among others. Refreshing rarely helps.
And yet we are still here, fancy that eh?
Uhm, its well known that the *BSD origional code was a direct-line descendant of the origional AT&T code, its documented in umpteen billion places in various *BSD history documents and there are court cases circa 1993 about it. He posted nothing that can harm either community.
As does pretty much any modern OS. So dont say it like its a bad thing.
My website has a few walkthroughs on IPv6 setup for a fair few OSes. If you need any more help, post back with contact details. I used to help run a UK based IPv6 tun broker.
OpenBSD also tries IPv6 before anything else. And it is incredibaly easy to get IPv6 setup in OpenBSD, jsut 3 commands using a /64 (or larger) prefix from a tunnel broker, and you have a tunnel up and running. Or you can set it native (and this works perfectly within Londons Redbus centers).
A large hosting company started using IIS for the "Coming Soon" pages you see on registered domains.
Pretty much every company on the earth takes a publically accessable resource, adds its own value added addition to it, and sells it on. The wood that makes your tables came from a public forest, cut down by a company who gained the forestry rights, who sold the wood to another company who put hard work into making it into something someone would buy. This happens because not everyone has a week to spare to go cut down a tree themselves, and fashion the wood into a table.
In this case, LexisNexis took publically available records and indexed, cross referenced and published the records in a easily accessable and searchable medium. They added some value to getting the information from them rather than researching it yourself.
You need to gain some intelligence someplace, and stop branding random companies as criminal for providing a service. If you want to argue your corner, why not ask "Why isnt the Government doing what LexisNexis provides, but for free?". You state that its coming, why hasnt the government already provided it? Oh, maybe you are bitching because the Government hasnt already provided the sort of service that LexisNexis has spent time and money providing? Or maybe its because you value your time doing something other than cross referencing legal cases, and thus want it provided for free.
LexisNexis is usefull to some people, and in no way obstructs the availability of the raw records to the people who do not wish to pay them for it. Go fuck yourself.
With physical breakins you have to fix the door. With electronic breakins you can no longer trust most of the accessable systems, and you have to rebuild them from scratch. It isnt as simple as applying a patch, as rootkits arent fixed by patches for exploits.
To me, what he got at was information that should be publically accessible without tresspass.
It is publically accessable without tresspass. But it isnt archived, indexed, cross referenced and made easily searchable, and that costs money. Thats what you pay for when you make LexisNexis searches, or you could do it yourself but it would take a lot more time to do.
The market stopped being fair once money came into it. THe market stopped being fair when businesses stopped being locality driven. The market stopped being fair when the business owner stopped knowing all the customers who came into his store. The market stopped being fair a long long time ago.