But does it matter? For every person who says "wow, what a great bookshop, I'll buy something" there'll be one who says "hey, what is this law and what is it doing in my country?"
In windows XP, WindowBlinds is integrated, someone got hooked, and the situation is reversed. You'd be hard pressed to find a theme that would make it *less* usable than the default shiny blue:-/
I want grub in my BIOS, and I want each OS to write to the partition's boot record, not the master boot record. This way, you wouldn't have to worry about windows overwriting your MBR etc.
The article was very vague, but knowing Rivest is behind this, and knowing how good crypto is at creating trustless protocols, I would bet that they don't have to.
When i am doing a fresh install of WIN2K and REDHAT on my comps (a once-in-6-months exercise) i make sure the machine is not even physically hooked up to the net untill i have a software firewall configured, up and running.
having TCP/IP built into the bios,... is a very bad idea
Well, if you're "not even physically hooked up" while installing, then how exactly is someone meant to break in when you're fiddling with the bios? Not to mention that a software firewall is neccesary (excepting trojans, which won't install on the bios) if you have open ports, which the bios won't, or if there is a problem with the tcp/ip stack, which a software firewall won't help with.
BTW, why are you reinstalling OSes every 6 months? Windows 2000 is a lot better at not getting gummed up like 9x used to be, but perhaps you might want to reinstall anyway, but redhat? You DO know that you don't have to reinstall both at once, don't you?
Did I miss something, or is this entirely false? Just because moving first *seems* to give an advantage, does not mean that white must win. There is much scope for draws in chess, often when one player seems to have an advantage. I don't know if this problem has been seriously attacked, finding the solution by solving chess is certainly far from computationally feasible.
What may be a more realistic and quite interesting problem is proving that white can at least draw (ie black can't force a win). A black win is considered highly unlikely and may be vulnerable to some sort of (complicated) strategy-stealing proof.
The only issue here, that Timothy hit on in a follow-up comment, is that there'd have to be mechanisms for valid mass-email to be sent out. Banks sending statements, Organizations sending email-newsletters, etc. Perhaps there'd be a way to give them a pool with a million tickets, and rely on whatever mechanism was used by the receiver to credit them back after the newsletter was read/received..something like that.
Use a whitelist of senders that do not require tags to send you mail. This can be done at the user's mail server, or via crypto certificates issued by the client to the authorised mailer, which could be revoked if they abused/distributed it. (I think, my crypto is a bit rusty). The certs would have to be verified at the user's mail server i think.
This does result in the spam still travelling across the network, but spammers will give up if their messages are not going to be received.
I think that the biggest problem is going to be implementing these mechanisms while maintaining backwards compatibility.
Offtopic, but i just installed gentoo on my new compaq laptop (n1015v) and noticed it mapped left-windows-key to previous-virtual-terminal, right-windows-key to next-virtual-terminal, and context-menu-key to switch-to-last-use-terminal. (the other two might have been the other way round, i forget). I thought that was kinda neat, although it might just have been a weird coincidence.
California is considering a proposal by the state Public Utilities Commission
Proposed by the "Utilities": the power people. "Considering" could just mean they are deciding whether to laugh milk or coke out their nose. Then again, it might not...
If you can handle living at 128k, get JetStart. My isp (Quicksilver, no astroturf, just satisfied customer) hasn't given me any problems with caps, and if you don't need your data *right now*, you can have 1.5 gigs per day for $60:)
By the Single Transferable Vote (also known as Instant Runoff Vote) system, used in Australia since 1919, the voters rank the candidates. If one candidate gets more than 50% of the first place votes, they win. Otherwise, the candidate who got the fewest first votes is eliminated, and removed from everyone's rankings.
In your example, assuming Nader voters had Gore as second choice and that Nader got slightly less votes than Gore (dead heats are always a problem), since no candidate has a majority, after eliminating the minor candidates, Nader is eliminated. Nader is removed from all the rankings, and thus Gore slides up to #1 for all those voters that voted for Nader first, Gore second. This gives Gore 66%, a majority. Notice that he won because the majority (66%) preferred him to bush, and the majority (67%) preferred him to Nader.
And I can't remember of any president of any country in Europe after WW II who became president through court decisions.
You have to cut them some slack here. Sure, the system was quirky, but the election was essentially a dead heat. That possibility cannot be avoided in a fair system, having telepathic voting and intelligent voters cannot preclude the possibility that the number of donkeys will equal the number of elephants.
... they need to lower the cost of their consoles. Dramatically. Even if it means reducing the functionality of the box. When TiVo costs $50, and you can buy it at Wallgreens...
Um, unless you expect them to sell them for $50 and eat another $50 on each box, this can't be done. The things *need* hard drives, reduced functionality or no.
When Rob and ARI hacked up CGI it was done as an overnight hack in about 18 hours total. It was not a protocol change so it got no security review.
But it should have, because it clearly gave the user more access (command line equivalence) to a (presumably) privileged account.
All this is doing is taking the (well tested) non-interactive command line we already have, and making it interactive, using tools that everyone with a CGI account has.
Claiming that this is a security risk is like condemning a proof-of-concept exploit for "creating" a security risk.
Another comparison I thought of is the board game Diplomacy
But would a story about using board games to study game theory make slashdot? Where's the gimmick?
hfbyu.y++.bfh eb xb,*,ea+y.ag,*
But does it matter? For every person who says "wow, what a great bookshop, I'll buy something" there'll be one who says "hey, what is this law and what is it doing in my country?"
In windows XP, WindowBlinds is integrated, someone got hooked, and the situation is reversed. You'd be hard pressed to find a theme that would make it *less* usable than the default shiny blue :-/
I want grub in my BIOS, and I want each OS to write to the partition's boot record, not the master boot record. This way, you wouldn't have to worry about windows overwriting your MBR etc.
Blue screen of rest? This uptime has ceased to be, it has shuffled off this mortal core! This, is an ex-PC!
No, no, it's pining for the fjords...
Listen, this computer wouldn't pine if you installed 4.3BSD on it and set fjord CNAME mail in named!
Guess i better replace it then... I got a PocketPC...
Does it work?
Not really...
Well it's scarcely a replacement then is it?
I want to know what super-duper advanced bug system they use. Bugzilla.
Somehow I think the old ones would have been pleased if processing payments got to be a big load ;)
The article was very vague, but knowing Rivest is behind this, and knowing how good crypto is at creating trustless protocols, I would bet that they don't have to.
having TCP/IP built into the bios, ... is a very bad idea
Well, if you're "not even physically hooked up" while installing, then how exactly is someone meant to break in when you're fiddling with the bios? Not to mention that a software firewall is neccesary (excepting trojans, which won't install on the bios) if you have open ports, which the bios won't, or if there is a problem with the tcp/ip stack, which a software firewall won't help with.
BTW, why are you reinstalling OSes every 6 months? Windows 2000 is a lot better at not getting gummed up like 9x used to be, but perhaps you might want to reinstall anyway, but redhat? You DO know that you don't have to reinstall both at once, don't you?
Did I miss something, or is this entirely false? Just because moving first *seems* to give an advantage, does not mean that white must win. There is much scope for draws in chess, often when one player seems to have an advantage. I don't know if this problem has been seriously attacked, finding the solution by solving chess is certainly far from computationally feasible.
What may be a more realistic and quite interesting problem is proving that white can at least draw (ie black can't force a win). A black win is considered highly unlikely and may be vulnerable to some sort of (complicated) strategy-stealing proof.
Use a whitelist of senders that do not require tags to send you mail. This can be done at the user's mail server, or via crypto certificates issued by the client to the authorised mailer, which could be revoked if they abused/distributed it. (I think, my crypto is a bit rusty). The certs would have to be verified at the user's mail server i think.
This does result in the spam still travelling across the network, but spammers will give up if their messages are not going to be received.
I think that the biggest problem is going to be implementing these mechanisms while maintaining backwards compatibility.
Offtopic, but i just installed gentoo on my new compaq laptop (n1015v) and noticed it mapped left-windows-key to previous-virtual-terminal, right-windows-key to next-virtual-terminal, and context-menu-key to switch-to-last-use-terminal. (the other two might have been the other way round, i forget). I thought that was kinda neat, although it might just have been a weird coincidence.
Did that hurt so much?
Heh... I saw the link, and assumed it was to the judgement ;-)
Just block all connections to the authorisation/logon server. Problem solved?
Proposed by the "Utilities": the power people. "Considering" could just mean they are deciding whether to laugh milk or coke out their nose. Then again, it might not...
If you can handle living at 128k, get JetStart. My isp (Quicksilver, no astroturf, just satisfied customer) hasn't given me any problems with caps, and if you don't need your data *right now*, you can have 1.5 gigs per day for $60 :)
Other possible exploits include taking money off without making a purchase, and using Linux on the card rather than money.
In your example, assuming Nader voters had Gore as second choice and that Nader got slightly less votes than Gore (dead heats are always a problem), since no candidate has a majority, after eliminating the minor candidates, Nader is eliminated. Nader is removed from all the rankings, and thus Gore slides up to #1 for all those voters that voted for Nader first, Gore second. This gives Gore 66%, a majority. Notice that he won because the majority (66%) preferred him to bush, and the majority (67%) preferred him to Nader.
You have to cut them some slack here. Sure, the system was quirky, but the election was essentially a dead heat. That possibility cannot be avoided in a fair system, having telepathic voting and intelligent voters cannot preclude the possibility that the number of donkeys will equal the number of elephants.
I thought the obvious candidate would have been IN SOVIET RUSSIA, Glenda does it for YOU!...
Um, unless you expect them to sell them for $50 and eat another $50 on each box, this can't be done. The things *need* hard drives, reduced functionality or no.
But it should have, because it clearly gave the user more access (command line equivalence) to a (presumably) privileged account.
All this is doing is taking the (well tested) non-interactive command line we already have, and making it interactive, using tools that everyone with a CGI account has.
Claiming that this is a security risk is like condemning a proof-of-concept exploit for "creating" a security risk.