"ALL current web servers comply with this RFC, which means they ALL are vulnerable to this newly named attack "
Not all current web servers are vulnerable. For various reasons. I've written some that do not support TRACE (on purpose). Others exist that do not support TRACE. Others exist that do support TRACE, but do so after first performing their usual security code.
How in the world did these jokers even think that they covered ALL current web servers? There are going to be many dozens that exist that they haven't even heard of. Just one example: at my last job they use a server known as "Remy Web Server". Oh, as well as one I wrote called "Chupacabra" (but that's internal only). Have you ever heard of either? No? Good. You should be so lucky to never hear about RWS.
The discussion on this vuln is important, but claiming that it affects ALL current web servers is naive and serves only as big glossy headline-catching words.
A buddy did an album 5 years ago. He got many things cheap (friends doing guitar, drums, production, etc for cheap...I did the graphics for free). His run was small...maybe 1000 CDs and 500 tapes. I seem to remember him saying the whole shmear cost him about $5k. Not just duplication...all of it. That's about the time he got married and so it was certainly not a huge cost.
It ended up being quite good. Also, that duplication included full-color silkscreen on the disc and a full-color 6 page trifold insert.
I remember he wanted to have a track without a number (kinda like on Tom Petty's Full Moon Fever), but at the cheaper price he went with the duplication house didn't offer that kind of thing.
that was a great many words more than necessary to show that you don't understand the issues.
while I did mention RIAA, in passing, I wasn't writing about music. so, who gives a dead porcupine what you will do to get low-quality cheesy recordings of music you didn't pay for.
I'll finish your brilliant statement for you: If I can hear it, I can copy it...really really poorly
What DRM strategies try to do is to make it so that the content is meaningless unless accessed through a proprietary system given the appropriate access. If the content is music, then outside of the system it would not be music but rather gibberish (something like your post). Through the system, it would be music. DVD does this (although it failed miserably). Supposing it did not fail, then it is only a movie once through the CSS system. But, you say, it does at some point become a movie...which you can then capture. Sure. Go ahead. Get yourself a recording that sucks as much as a copy of a VHS tape. That is exactly what you would be doing to capture the audio "if you can hear it".
What I stated was that the protection system through which you access the content in a way that makes sense is not in your computer (like DVD), but in a very small hardware/software package. The size alone will limit the number of hackers able to work with the technology.
But, you're right. Nothing will stop people from producing crappy copies.
I'll bet you're quite excited when you get a low-grade copy of a movie that comes with a B&W photocopy of the CD cover! ooooooohhhh.
This one might work. Unlike CD protection systems that can be defeated with Sharpie pens.
within the card is an on-board processor containing integrated software controls that can encrypt data securely in real time
The logic to read the data on the card doesn't take place in your PC. It takes place in the reader. So, that's where the hacking has to take place. That is, hack the reader, or make your own reader. Which leads to the real practical nature of the DRM in this thing...the tiny size. It may be impractical to expect many hackers with regular soldering irons to work with something very small. But, I suspect it'll still be done. It'll likely be a hacked up reader that only needs to have a single resistor removed, or something goofy like that.
If RIAA/MPAA really wants DRM that isn't defeatable (everything is theoretically defeatable...practice is another thing) then they need to promote technology that is too impractical and/or costly for people without sophisticated labs to deal with. Maybe a nanotechnology hard drive where nanobots manipulate molecules in a ball of jello the size of a marble.
Thinking like this is predicated on a person's sense of right-and-wrong. This guy believes something should be fixed on someone else's machine. He might be annoyed to know that someone else's machine is not as he'd prefer...but in practice all he has is an opinion.
I happen to believe that there is a universal morality. But it's a big step from believing that...and meddling with other people's private lives and personal property just because you might think they are wrong, or ignorant, or merely unaware and you're doing them a favor.
Obvious considerations fall out of this proposal. The RIAA might think it is right in it's preemptive meddling with my personal property. Or, what if the software designed to do us all a big favor was designed to roam the net like a bot looking for viruses? Would it always know what is a virus and what is not? Would it delete the wrong things? Would it delete harmless collections from some kind of museum of viruses?
Hutton Pulitzer's inventions and ideas were adopted by the American consumer at a rate that outpaced the combined first year growth of cell phones, pagers, personal computers, hand held computers and total Internet users in just the first 90 days of its heralded release.
Wow, that sure is something. The free Cuecat alledgedly outpaced a bunch of things that cost alot of money.
What do you think about computer games controlled by an exercise bike in your house?
What do I think? I think I saw this at the gym about 15 years ago.
That's funny. The dude posts a comment suggesting that folks here might not be interested in exercise...yet the evidence suggests he is the one that hasn't been interested (at least for decade).
the 2001 AP exam in computer science drew 19,000 boys and just 2,400 girls
Really? Suppose those numbers don't change much between the AP exam and the actual job world. That would mean that better than 1 in 10 coworkers are women...yet I've never seen that. I've never counted, either...but I would've guessed something like 1 in 15 people at any job I've had in 17 years were women (and that includes sales, admin-assistants, HR, etc...within just development maybe 1 in 25).
It would be interesting to see numbers broken down somehow. In my last job almost all of the tech-related women were Program Managers. Maybe 3 or 4 devs. 1000-person company.
I suspect I'll get flamebait for this...but honestly, my intention is simply to voice an opinion: I thought that movie was boring!
Granted, I think I only plodded through the first 4 minutes before deciding it probably wouldn't be going anywhere.
The whole movie could've been one third the length if only they had shown each clip once rather than doing that not-clever repetitive thing for every single stupid out-of-context scene.
Maybe if I was patient enough to view the whole movie I would've seen wonderfully insightful people singing the praises of Bin Laden, Patty Murray style.
Someday, maybe not too far in the future...I imagine we might read a story about an Airforce crew shot down because of spam. They'll be patrolling some no-fly-zone in some hot spot somewhere as part of a U.N. peace keeping mission. A bad guy will lock on radar and they'll want to shoot but need to get clearance from command. But, the clearance will come too late because the Airforce guys will be busy deleting spam in their inbox while looking for the message from command...
I used to use TurboTax each year. I always bought my own copy and I never shared it. A number of times I've needed to print my return out later on a different machine; but now I wouldn't be able to. Experts always suggest you save your return and papers and stuff forever...but now Intuit would expand that advice to "also save your old PCs and hope they continue to work years later". But, the main annoyance for me is simple: Intuit doesn't need to know I exist just because I might use their software. It should be as insignificant an event as if I used notepad.exe. I understand their troubles...but I don't care. So, I'll just find an alternative. Goodbye dear Intuit.
But...I might just ask a buddy who has bought the thing if I could please take a peek at his HD's sector 32 before and after the install. Just out of curiosity.
Horrible techniques used for coming up with the figures.
In particular for the Hotjobs data.
"VisualBasic" plus "VB"...nevermind that some hits will overlap.
I suppose it serves the purpose and gets you a general ballpark idea. But, I'd probably have written a Perl script to actually count the individual listings with some attempt and smart pattern matching. For example, how many jobs were specifically for "C++" but happened to say "Java experience would be nice"?
BSA wants you to "break the law" with their software watching to charge you after the fact.
hehe, and next we'll read about BSA becoming the new owners and distributors of such things as "Nero Burning ROM", "WinZip", etc. Heck, maybe they'll foot the bill for a pretty GUI DeCSS app. Of course, these will be special new versions which make handy use of your P4 serial number and your broadband connection back to their data warehouse.
With a couple of Perl scripts, their whole bully-fee-collection system could be automated.
I wonder if including shrink-wrap licenses wouldn't backfire for them. Wouldn't it give the consumer the privilege of returning the product even after opening it because you had to first open it to be able to read the license?
Well, software is supposed to work like that but I understand it's near impossible to return MS Windows when you buy it bundled with a machine.
moving cargo... wow, the technological advancements spurred on by the popularity of eBay
pinpointing traffic problems... here in seattle no drone necessary: the traffic problems for 2003 have already been reported- I5 and I405, all day everyday.
patrolling the border... that one might be something, maybe a drone could lead authorities to people dying in the desert night
searching for fugitives... face recognition at the entrance to a football game not enough? so, they'll have to have drones hovering in the stadium? It's interesting to see the technology of "future" sci-fi films as compared to actually possible. For example, would the Terminator use facial recognition to identify Sarah Conner? Apparently not, he killed her roommate first.
fighting forest fires... with 6 ounces of water at a time.
I'm going to go and ignore this thread now. You can pretend that your super duper debating skills scared me off. Feel free to tell your mom all about it.
Slashdot Mirror
Come on...there must be thousands of people chompin' at the bit to illegally copy "Kanagaroo Jack".
Something needs to be done...
hmmm, "banding together" sounds familiar...
Wouldn't all this "banding together" get them into more (small) trouble?
"ALL current web servers comply with this RFC, which means they ALL are vulnerable to this newly named attack "
Not all current web servers are vulnerable. For various reasons. I've written some that do not support TRACE (on purpose). Others exist that do not support TRACE. Others exist that do support TRACE, but do so after first performing their usual security code.
How in the world did these jokers even think that they covered ALL current web servers? There are going to be many dozens that exist that they haven't even heard of. Just one example: at my last job they use a server known as "Remy Web Server". Oh, as well as one I wrote called "Chupacabra" (but that's internal only). Have you ever heard of either? No? Good. You should be so lucky to never hear about RWS.
The discussion on this vuln is important, but claiming that it affects ALL current web servers is naive and serves only as big glossy headline-catching words.
A buddy did an album 5 years ago. He got many things cheap (friends doing guitar, drums, production, etc for cheap...I did the graphics for free). His run was small...maybe 1000 CDs and 500 tapes. I seem to remember him saying the whole shmear cost him about $5k. Not just duplication...all of it. That's about the time he got married and so it was certainly not a huge cost.
It ended up being quite good. Also, that duplication included full-color silkscreen on the disc and a full-color 6 page trifold insert.
I remember he wanted to have a track without a number (kinda like on Tom Petty's Full Moon Fever), but at the cheaper price he went with the duplication house didn't offer that kind of thing.
wow!
that was a great many words more than necessary to show that you don't understand the issues.
while I did mention RIAA, in passing, I wasn't writing about music. so, who gives a dead porcupine what you will do to get low-quality cheesy recordings of music you didn't pay for.
I'll finish your brilliant statement for you:
If I can hear it, I can copy it...really really poorly
What DRM strategies try to do is to make it so that the content is meaningless unless accessed through a proprietary system given the appropriate access. If the content is music, then outside of the system it would not be music but rather gibberish (something like your post). Through the system, it would be music. DVD does this (although it failed miserably). Supposing it did not fail, then it is only a movie once through the CSS system. But, you say, it does at some point become a movie...which you can then capture. Sure. Go ahead. Get yourself a recording that sucks as much as a copy of a VHS tape. That is exactly what you would be doing to capture the audio "if you can hear it".
What I stated was that the protection system through which you access the content in a way that makes sense is not in your computer (like DVD), but in a very small hardware/software package. The size alone will limit the number of hackers able to work with the technology.
But, you're right. Nothing will stop people from producing crappy copies.
I'll bet you're quite excited when you get a low-grade copy of a movie that comes with a B&W photocopy of the CD cover! ooooooohhhh.
This one might work. Unlike CD protection systems that can be defeated with Sharpie pens.
within the card is an on-board processor containing integrated software controls that can encrypt data securely in real time
The logic to read the data on the card doesn't take place in your PC. It takes place in the reader. So, that's where the hacking has to take place. That is, hack the reader, or make your own reader. Which leads to the real practical nature of the DRM in this thing...the tiny size. It may be impractical to expect many hackers with regular soldering irons to work with something very small. But, I suspect it'll still be done. It'll likely be a hacked up reader that only needs to have a single resistor removed, or something goofy like that.
If RIAA/MPAA really wants DRM that isn't defeatable (everything is theoretically defeatable...practice is another thing) then they need to promote technology that is too impractical and/or costly for people without sophisticated labs to deal with. Maybe a nanotechnology hard drive where nanobots manipulate molecules in a ball of jello the size of a marble.
"What's the strangest thing readers have found, or left, on a hard drive?"
Couple of days ago I bought a used hard drive and the strangest thing I found on it was a duplicate of this story!
Slashdot -- for your daily duplicate news
Brilliant idea! Thanks for the tip.
Hey, suddenly I'm thinking...if 4 are better than 2, how about 1,000? Please advise.
Thinking like this is predicated on a person's sense of right-and-wrong. This guy believes something should be fixed on someone else's machine. He might be annoyed to know that someone else's machine is not as he'd prefer...but in practice all he has is an opinion.
I happen to believe that there is a universal morality. But it's a big step from believing that...and meddling with other people's private lives and personal property just because you might think they are wrong, or ignorant, or merely unaware and you're doing them a favor.
Obvious considerations fall out of this proposal. The RIAA might think it is right in it's preemptive meddling with my personal property. Or, what if the software designed to do us all a big favor was designed to roam the net like a bot looking for viruses? Would it always know what is a virus and what is not? Would it delete the wrong things? Would it delete harmless collections from some kind of museum of viruses?
If this is the book he's writing...kinda makes you wonder what he actually intended for that hand-held CueCat device...
Hutton Pulitzer's inventions and ideas were adopted by the American consumer at a rate that outpaced the combined first year growth of cell phones, pagers, personal computers, hand held computers and total Internet users in just the first 90 days of its heralded release.
Wow, that sure is something. The free Cuecat alledgedly outpaced a bunch of things that cost alot of money.
I doubt it's true anyhow.
What do you think about computer games controlled by an exercise bike in your house?
What do I think? I think I saw this at the gym about 15 years ago.
That's funny. The dude posts a comment suggesting that folks here might not be interested in exercise...yet the evidence suggests he is the one that hasn't been interested (at least for decade).
Pretty much anything is tasty to me...when smothered with enough sugar. But that's an off-topic problem between me and my dentist.
The ones up the bung that you speak off are likely all dead. The value in counting is debatable...
I kinda got the idea that the dude wrote that statement tongue-in-cheek. Which never seems to work on /.
...is to find and sample one of each of these tasty species within 20 years.
the 2001 AP exam in computer science drew 19,000 boys and just 2,400 girls
Really? Suppose those numbers don't change much between the AP exam and the actual job world. That would mean that better than 1 in 10 coworkers are women...yet I've never seen that. I've never counted, either...but I would've guessed something like 1 in 15 people at any job I've had in 17 years were women (and that includes sales, admin-assistants, HR, etc...within just development maybe 1 in 25).
It would be interesting to see numbers broken down somehow. In my last job almost all of the tech-related women were Program Managers. Maybe 3 or 4 devs. 1000-person company.
I suspect I'll get flamebait for this...but honestly, my intention is simply to voice an opinion: I thought that movie was boring!
Granted, I think I only plodded through the first 4 minutes before deciding it probably wouldn't be going anywhere.
The whole movie could've been one third the length if only they had shown each clip once rather than doing that not-clever repetitive thing for every single stupid out-of-context scene.
Maybe if I was patient enough to view the whole movie I would've seen wonderfully insightful people singing the praises of Bin Laden, Patty Murray style.
Pure Krunk.
Someday, maybe not too far in the future...I imagine we might read a story about an Airforce crew shot down because of spam. They'll be patrolling some no-fly-zone in some hot spot somewhere as part of a U.N. peace keeping mission. A bad guy will lock on radar and they'll want to shoot but need to get clearance from command. But, the clearance will come too late because the Airforce guys will be busy deleting spam in their inbox while looking for the message from command...
Nah...
somewhere to start reading about the issue: the tech they use and a few words on how it works.
I used to use TurboTax each year. I always bought my own copy and I never shared it. A number of times I've needed to print my return out later on a different machine; but now I wouldn't be able to. Experts always suggest you save your return and papers and stuff forever...but now Intuit would expand that advice to "also save your old PCs and hope they continue to work years later". But, the main annoyance for me is simple: Intuit doesn't need to know I exist just because I might use their software. It should be as insignificant an event as if I used notepad.exe. I understand their troubles...but I don't care. So, I'll just find an alternative. Goodbye dear Intuit.
But...I might just ask a buddy who has bought the thing if I could please take a peek at his HD's sector 32 before and after the install. Just out of curiosity.
Horrible techniques used for coming up with the figures.
In particular for the Hotjobs data.
"VisualBasic" plus "VB"...nevermind that some hits will overlap.
I suppose it serves the purpose and gets you a general ballpark idea. But, I'd probably have written a Perl script to actually count the individual listings with some attempt and smart pattern matching. For example, how many jobs were specifically for "C++" but happened to say "Java experience would be nice"?
oh well...
BSA wants you to "break the law" with their software watching to charge you after the fact.
hehe, and next we'll read about BSA becoming the new owners and distributors of such things as "Nero Burning ROM", "WinZip", etc. Heck, maybe they'll foot the bill for a pretty GUI DeCSS app. Of course, these will be special new versions which make handy use of your P4 serial number and your broadband connection back to their data warehouse.
With a couple of Perl scripts, their whole bully-fee-collection system could be automated.
I wonder if including shrink-wrap licenses wouldn't backfire for them. Wouldn't it give the consumer the privilege of returning the product even after opening it because you had to first open it to be able to read the license?
Well, software is supposed to work like that but I understand it's near impossible to return MS Windows when you buy it bundled with a machine.
moving cargo ... wow, the technological advancements spurred on by the popularity of eBay
... here in seattle no drone necessary: the traffic problems for 2003 have already been reported- I5 and I405, all day everyday.
... that one might be something, maybe a drone could lead authorities to people dying in the desert night
... face recognition at the entrance to a football game not enough? so, they'll have to have drones hovering in the stadium? It's interesting to see the technology of "future" sci-fi films as compared to actually possible. For example, would the Terminator use facial recognition to identify Sarah Conner? Apparently not, he killed her roommate first.
... with 6 ounces of water at a time.
pinpointing traffic problems
patrolling the border
searching for fugitives
fighting forest fires
I'm going to go and ignore this thread now. You can pretend that your super duper debating skills scared me off. Feel free to tell your mom all about it.