You just gave me a truely evil idea. Make a worm which copies and randomly encrypts files from the infected computer, then email a copy of the encrypted file along with a copy of the worm to random people in the address book. Would make life hell for sigint people and just might give someone plausible deniability against this type of idiotic law.
Not exactly. The original idea behind drug controll was that there was a federal tax on the substance and that the government merely failed to issue stamps for the tax. But with the Controll Substances Act of 1970 the legal justification was changed to the much more convoluted and assnine concept of the interstate commerce clause being applied even when there was no interstate commerce going on. In fact the 1903 Lottery Case is in direct conflict with later interpretations of the commerce clause and was the reason that the Harrison Act was a tax statute instead of a criminal one. For a VERY complete history of the history of prohibitionist laws in the US, and specifically how they led to modern anti-drug laws see this article from the Virginia Law Review.
Google did no evil. They were aproached by a bright individuakl who's current employer could not or would not satisfy his desires (that being to return to China) and offered him a position. They were then sued by Microsoft for breaching a contract that they did not sign and supposedly breaking trade secret laws even though this guy hasn't yet worked for Google (how can you show damage before a crime is commited?)
No, they should be nullified by the interstate commerce clause. Stopping me from changing jobs and working in my industry is obviously at least as injerous to interstate commerce as is drug trade which remains within the same state! (For those that don't know the reason that the federal government is allowed to block people in states with medical marijuana laws from growing their own pot is a far reaching interpretation of the interstate commerce clause)
Re:Top 10 Don'ts
on
Top 10 Web Fads
·
· Score: 4, Informative
Did you know that you can play mp3's as background music? It's true, simply give them the.wav extension and place them like any other audio component and almost all systems will gladly play them. Wav is simply a file format surrounding PCM audio, and most systems use a player associated with Wav files that can also decode MPEG2 Layer 3 audio =)
If you really ARE looking at agregate statistics then how does deleting the cookie really impact your analysis, other than slightly inflating your unique visitors numbers? I would think that things like best path through the site could be determined from session cookies, no need for them to be sustained. If you want to track return purchasers just associate their account with a cookie and if they return to purchase again just reassign them their original GUID or combine the GUIDs into one trackable metric. I don't think tracking me makes you evil, and in fact if I actually use a sites resources like customizable pages I am unlikely to remove their cookies. I personally only block cookies from cross site marketers that are trying to obtain some kind of privacy invading profile of me and my habits.
Sorry about the earlier post slashdot turned my less than or equal into the start of an html tag...
Hmm, that page talks about flaws in Microsoft's implementation of Java, not in SUN's JVM. In fact it specifically points you to the SUN JVM as a way to avoid the problem. There was also a system vulnerability in J2SE 1.4 below 1.4.2_06 that would allow javascript to instantiate a normally protected class which can access system resources, but that has been fixed for over a year. However I started checking the normal sources and I did find this somewhat cryptic post which says that all but the most current versions of the SUN JRE are vulnerable to an unspecified flaw which allows local file access, guess it's time to check to make sure everyones autoupdate for JRE is functioning correctly!
Hmm, that page talks about flaws in Microsoft's implementation of Java, not in SUN's JVM. In fact it specifically points you to the SUN JVM as a way to avoid the problem. There was also a system vulnerability in J2SE 1.4this somewhat cryptic post which says that all but the most current versions of the SUN JRE are vulnerable to an unspecified flaw which allows local file access, guess it's time to check to make sure everyones autoupdate for JRE is functioning correctly!
How the hell can you use JAVA to install something? There shouldn't be any way to get out of the sandbox, and if there is that's a major security issue that SUN should be made aware of ASAP. Not sure how Flash could be used either since I've never seen a bullitin about Flash remote code vulnerabilities.
They really need to fix autoupdate
on
Firefox 1.1 Scrapped
·
· Score: 5, Insightful
I was running 1.0.4 and just happened to notice the mozilla.org slashblurb about a new version. I checked and the new version was 1.0.6 which had major security updates, yet when I did Tools->Options->Advanced->Software update nothing was found (and this is simply a manual way to trigger the normal update mechanism). If the update software can't find a new version with major security updates then what good is it?
I do it all the time. Of course the fact that I hold both an MCSE and started on my RHCE might have something to do with it =) I will generally recomend the best solution for my client/employer. If they are already an all windows shop with an IT staff with windows experience then of course I will likely recomend the MS solution (ISA server excluded). On the other hand if they have Unix/Linux experience and some windows infrastructure then it's simply about what best fits their needs with the smallest amount of capital outlay.
These guys among others will be happy to sell you a commercial grade fuel cell stack for power generation today. Now whether or not that stack makes sense for all applications or is shrinkable to the size needed to power a vehicle are very different questions.
Mythbusters was stupid on that one. They used a vehicle with about the highest possible starting drag and a huge, inefficient A/C system. With modern cars the change in wind resistance is a MUCH higher %age change in overall efficiency then the small amount of power robbed by turning on the A/C. Heck almost half of the power loss from an A/C system happens whether you use it or not, the belt's already going over the compressors feed wheel.
Depends on the judge and the situation. I hit a woman several years ago, technically it was my fault, but logically it was hers. She had stopped at the top of an exit ramp, then proceded into the intersection, I had pulled up, looked for oncoming traffic, then proceded into said intersection. Only problem was she had stopped in the middle of the intersection for no reason! So I went to traffic court and pled no contest (she had retained a lawyer and sent out a letter about possible whiplash so a guilty plea through paying the ticket was not wise) and explained the situation as quickly and courtously as I could. The judge let me off with just court costs and no points.
Scotty: "Starfleet captains are like children. They want everything right now and they want it their way. But the secret is to give them only what they need, not what they want."
LaForge: "Yeah, well, I told the captain I'd have this analysis done in an hour."
Scotty: "How long will it really take?"
LaForge: "An hour."
Scotty: "You didn't tell him now long it would really take, did you?"
LaForge: "Of course I did."
Scotty: "Laddie, you got a lot to learn if you want people to think of you as a miracle worker!"
And those words are one of the guiding principles in everything I do professionally. I always undersell and overexecute. RIP good man, RIP.
That problem is easy to fix, just use random source URL's and ask the client to select their picture password from a block of pictures. Even if you were sucessfull in doing a MITM attack it would require a person to go over the pictures during the attack login, and if the bank merely used a smallish subset of all of the pictures in your book of pictures then a single phishing attempt would only allow sucessfull login in some small %age of attempts. The real answer is of course to simply use a proven two factor authentication mechanism like RSA SecureID.
Hmm, hate to reply to myself but Cisco says a max of 571 devices can be supported by dual 6KVA power supplies in the 6509-E, not sure where the descrepency between the numbers comes in. Still that's 72 ports per blade, which means you can fully populate the chassis with 48 port blades.
A cisco 6509-E chassis can supply ~1,000 devices with the full 350mA input power @ 42V described in the 802.3af spec. In other words you can fully populate the chassis with 8x96 port blades and it will provide full power to all of them. Info obtained from here which also has some useufull primer info on how 802.3af works as well a cisco pre-spec PoE.
WTF are you talking about? PoE as ratified by the IETF does a low voltage chat over the unused pairs to determine if the device needs power, the likelyhood of a device not needing power and randomly responding over the unused pair correctly to trigger power is essentially nill. Certain pre-standard PoE injectors (such as those shipped with certain Cisco/Aironet AP's) may cause damage when used on a port with other equipment attached, but anything which is compliant with the 802.3af standard should have an essentially zero percent chance of frying attached equipment.
Almost all modern tv's and settop boxes will allow you to remove a channel from their listing, and most have vchips so you can simply set the parentguard on the channels you don't want your kids seeing. While I was initially fairly scared of the vchip I have to say that it's final implementation was very banal and actually a usefull tool to empower proactive parents to help screen the content their children are watching. Of course nothing beats being in the room with them, but that's not practical 100% of the time, even if it's not a two income household.
The problem is that buying a duped item sets off a chain reaction, you usually vendor or disenchant your old weapon for instance. So how do you roll that back? Do you simply give them back the item they had prior to purchasing the duped item, if so which one? Many characters have more than one weapon either on them or in their packs. Basically reverting the entire world to before the bug is about the only way to do things because otherwise you are merely guessing at the players motiviation. Also how do you account for any additional advantage or edge (for PvP) that the duped item gave the buyer before you tried to undo things?
Unisys sells 32 CPU windows boxes, HP sells up to 128 CPU Superdomes capable of running Windows 2003 Datacenter edition, and there's probably some others I'm not aware of. Since quite a few companies have high end systems using Itanium 2 processor's there's very little reason not to support windows server, it just might sell some more units =)
Why is the vision processing so poor? I remember back in 1997 reading a paper on a system that could read American Sign Language in realtime using an Indigo Graphics Indy 2 workstation with builtin camera. Today's processing power is many times greater and better imaging can be accomplished by modern CCD's, so what is the fundamental problem? Are there just no algorithms capable of pulling the fundamental data like contour lines out of the image in real time, or can they do the basic but just get messed up by things like shadows or rock color changes?
Slashdot Mirror
You just gave me a truely evil idea. Make a worm which copies and randomly encrypts files from the infected computer, then email a copy of the encrypted file along with a copy of the worm to random people in the address book. Would make life hell for sigint people and just might give someone plausible deniability against this type of idiotic law.
Not exactly. The original idea behind drug controll was that there was a federal tax on the substance and that the government merely failed to issue stamps for the tax. But with the Controll Substances Act of 1970 the legal justification was changed to the much more convoluted and assnine concept of the interstate commerce clause being applied even when there was no interstate commerce going on. In fact the 1903 Lottery Case is in direct conflict with later interpretations of the commerce clause and was the reason that the Harrison Act was a tax statute instead of a criminal one. For a VERY complete history of the history of prohibitionist laws in the US, and specifically how they led to modern anti-drug laws see this article from the Virginia Law Review.
Google did no evil. They were aproached by a bright individuakl who's current employer could not or would not satisfy his desires (that being to return to China) and offered him a position. They were then sued by Microsoft for breaching a contract that they did not sign and supposedly breaking trade secret laws even though this guy hasn't yet worked for Google (how can you show damage before a crime is commited?)
No, they should be nullified by the interstate commerce clause. Stopping me from changing jobs and working in my industry is obviously at least as injerous to interstate commerce as is drug trade which remains within the same state! (For those that don't know the reason that the federal government is allowed to block people in states with medical marijuana laws from growing their own pot is a far reaching interpretation of the interstate commerce clause)
Did you know that you can play mp3's as background music? It's true, simply give them the .wav extension and place them like any other audio component and almost all systems will gladly play them. Wav is simply a file format surrounding PCM audio, and most systems use a player associated with Wav files that can also decode MPEG2 Layer 3 audio =)
If you really ARE looking at agregate statistics then how does deleting the cookie really impact your analysis, other than slightly inflating your unique visitors numbers? I would think that things like best path through the site could be determined from session cookies, no need for them to be sustained. If you want to track return purchasers just associate their account with a cookie and if they return to purchase again just reassign them their original GUID or combine the GUIDs into one trackable metric. I don't think tracking me makes you evil, and in fact if I actually use a sites resources like customizable pages I am unlikely to remove their cookies. I personally only block cookies from cross site marketers that are trying to obtain some kind of privacy invading profile of me and my habits.
Yes, but 1.0.5 WAS a security fix, and 1.0.6 is just a fixup release to undo some inadvertant damage done with 1.0.5 to legit plugins.
Sorry about the earlier post slashdot turned my less than or equal into the start of an html tag...
Hmm, that page talks about flaws in Microsoft's implementation of Java, not in SUN's JVM. In fact it specifically points you to the SUN JVM as a way to avoid the problem. There was also a system vulnerability in J2SE 1.4 below 1.4.2_06 that would allow javascript to instantiate a normally protected class which can access system resources, but that has been fixed for over a year. However I started checking the normal sources and I did find this somewhat cryptic post which says that all but the most current versions of the SUN JRE are vulnerable to an unspecified flaw which allows local file access, guess it's time to check to make sure everyones autoupdate for JRE is functioning correctly!
Hmm, that page talks about flaws in Microsoft's implementation of Java, not in SUN's JVM. In fact it specifically points you to the SUN JVM as a way to avoid the problem. There was also a system vulnerability in J2SE 1.4this somewhat cryptic post which says that all but the most current versions of the SUN JRE are vulnerable to an unspecified flaw which allows local file access, guess it's time to check to make sure everyones autoupdate for JRE is functioning correctly!
How the hell can you use JAVA to install something? There shouldn't be any way to get out of the sandbox, and if there is that's a major security issue that SUN should be made aware of ASAP. Not sure how Flash could be used either since I've never seen a bullitin about Flash remote code vulnerabilities.
I was running 1.0.4 and just happened to notice the mozilla.org slashblurb about a new version. I checked and the new version was 1.0.6 which had major security updates, yet when I did Tools->Options->Advanced->Software update nothing was found (and this is simply a manual way to trigger the normal update mechanism). If the update software can't find a new version with major security updates then what good is it?
I do it all the time. Of course the fact that I hold both an MCSE and started on my RHCE might have something to do with it =) I will generally recomend the best solution for my client/employer. If they are already an all windows shop with an IT staff with windows experience then of course I will likely recomend the MS solution (ISA server excluded). On the other hand if they have Unix/Linux experience and some windows infrastructure then it's simply about what best fits their needs with the smallest amount of capital outlay.
These guys among others will be happy to sell you a commercial grade fuel cell stack for power generation today. Now whether or not that stack makes sense for all applications or is shrinkable to the size needed to power a vehicle are very different questions.
Mythbusters was stupid on that one. They used a vehicle with about the highest possible starting drag and a huge, inefficient A/C system. With modern cars the change in wind resistance is a MUCH higher %age change in overall efficiency then the small amount of power robbed by turning on the A/C. Heck almost half of the power loss from an A/C system happens whether you use it or not, the belt's already going over the compressors feed wheel.
Cop and judge both agreed with me, didn't change the fact that I was guilty of not keeping an assured clear distance though.
Depends on the judge and the situation. I hit a woman several years ago, technically it was my fault, but logically it was hers. She had stopped at the top of an exit ramp, then proceded into the intersection, I had pulled up, looked for oncoming traffic, then proceded into said intersection. Only problem was she had stopped in the middle of the intersection for no reason! So I went to traffic court and pled no contest (she had retained a lawyer and sent out a letter about possible whiplash so a guilty plea through paying the ticket was not wise) and explained the situation as quickly and courtously as I could. The judge let me off with just court costs and no points.
Here's the lines from the TNG episode "Relics":
Scotty: "Starfleet captains are like children. They want everything right now and they want it their way. But the secret is to give them only what they need, not what they want."
LaForge: "Yeah, well, I told the captain I'd have this analysis done in an hour."
Scotty: "How long will it really take?"
LaForge: "An hour."
Scotty: "You didn't tell him now long it would really take, did you?"
LaForge: "Of course I did."
Scotty: "Laddie, you got a lot to learn if you want people to think of you as a miracle worker!"
And those words are one of the guiding principles in everything I do professionally. I always undersell and overexecute. RIP good man, RIP.
That problem is easy to fix, just use random source URL's and ask the client to select their picture password from a block of pictures. Even if you were sucessfull in doing a MITM attack it would require a person to go over the pictures during the attack login, and if the bank merely used a smallish subset of all of the pictures in your book of pictures then a single phishing attempt would only allow sucessfull login in some small %age of attempts. The real answer is of course to simply use a proven two factor authentication mechanism like RSA SecureID.
Hmm, hate to reply to myself but Cisco says a max of 571 devices can be supported by dual 6KVA power supplies in the 6509-E, not sure where the descrepency between the numbers comes in. Still that's 72 ports per blade, which means you can fully populate the chassis with 48 port blades.
A cisco 6509-E chassis can supply ~1,000 devices with the full 350mA input power @ 42V described in the 802.3af spec. In other words you can fully populate the chassis with 8x96 port blades and it will provide full power to all of them. Info obtained from here which also has some useufull primer info on how 802.3af works as well a cisco pre-spec PoE.
WTF are you talking about? PoE as ratified by the IETF does a low voltage chat over the unused pairs to determine if the device needs power, the likelyhood of a device not needing power and randomly responding over the unused pair correctly to trigger power is essentially nill. Certain pre-standard PoE injectors (such as those shipped with certain Cisco/Aironet AP's) may cause damage when used on a port with other equipment attached, but anything which is compliant with the 802.3af standard should have an essentially zero percent chance of frying attached equipment.
Almost all modern tv's and settop boxes will allow you to remove a channel from their listing, and most have vchips so you can simply set the parentguard on the channels you don't want your kids seeing. While I was initially fairly scared of the vchip I have to say that it's final implementation was very banal and actually a usefull tool to empower proactive parents to help screen the content their children are watching. Of course nothing beats being in the room with them, but that's not practical 100% of the time, even if it's not a two income household.
The problem is that buying a duped item sets off a chain reaction, you usually vendor or disenchant your old weapon for instance. So how do you roll that back? Do you simply give them back the item they had prior to purchasing the duped item, if so which one? Many characters have more than one weapon either on them or in their packs. Basically reverting the entire world to before the bug is about the only way to do things because otherwise you are merely guessing at the players motiviation. Also how do you account for any additional advantage or edge (for PvP) that the duped item gave the buyer before you tried to undo things?
Unisys sells 32 CPU windows boxes, HP sells up to 128 CPU Superdomes capable of running Windows 2003 Datacenter edition, and there's probably some others I'm not aware of. Since quite a few companies have high end systems using Itanium 2 processor's there's very little reason not to support windows server, it just might sell some more units =)
Why is the vision processing so poor? I remember back in 1997 reading a paper on a system that could read American Sign Language in realtime using an Indigo Graphics Indy 2 workstation with builtin camera. Today's processing power is many times greater and better imaging can be accomplished by modern CCD's, so what is the fundamental problem? Are there just no algorithms capable of pulling the fundamental data like contour lines out of the image in real time, or can they do the basic but just get messed up by things like shadows or rock color changes?