Slashdot Mirror


User: JesseMcDonald

JesseMcDonald's activity in the archive.

Stories
0
Comments
3,955
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 3,955

  1. Re:That's copyright for you on Georgia Lawmakers Sue Carl Malamud For Publishing Georgia Law · · Score: 1

    All the embedded links are relative, actually. The browser shows them as file:// URLs because they're in a local file. They do appear to be session-specific, and don't work for me, either, now that my session has timed out. I'd probably have to download the pages all over again to get updated links.

    Here is the script:

    #! /bin/bash
    BASE="http://web.lexisnexis.com"
    URL="... first page ..."
    N=1
    while :; do
    ___FNAME="$(printf "gacode%03d.html" $N)"
    ___wget -T5 -t3 --no-cookies --header "`<cookie-header.txt`" -O "$FNAME" "$URL" || break;
    ___NEXT="$(xmllint --html --xpath 'string(//a[img/@title="Next"]/@href)' "$FNAME" 2>/dev/null)"
    ___[ -z "$NEXT" ] && { echo "No next URL." 1>&2; break; }
    ___N=$[N+1]
    ___URL="$BASE$NEXT"
    done

    (Leading spaces were replaced with underscores to preserve layout.) The file "cookie-header.txt" needs to contain the contents of the header, including the "Cookie:" prefix, as transmitted by your browser. You can get this by using Wireshark and the "Follow TCP Stream" function, among other methods.

  2. Re:Mobile password entry; acting on user's behalf on A Plea For Websites To Stop Blocking Password Managers · · Score: 1

    How would the user get the long password into the mobile device's password manager in the first place?

    They would sync their encrypted password database to the mobile device. Alternatively, the password manager could generate the long password itself on the device if that is where the account is being created.

    Provided the user has an own PC. Good luck logging in at a public library or Internet cafe.

    The fundamental problem with this scenario is that you're proposing to place your trust in a public PC you can't control. At a minimum, that particular login session must be consider potentially compromised no matter what authentication scheme you use. Having said that, there are some options if you're forced into this scenario. An OTP hardware token would be preferred; at least that way an attacker can only hijack the current session, rather than having the means to sign in as you in the future. If you do use a traditional password then it must be considered compromised and should be changed from a secure PC as soon as possible.

    And store this "own distinct, revocable API key" in what secure manner? Client applications distributed as free software have already run into problems with how to store an OAuth 1.0a or 2.0 client ID and client secret.

    The problem you're referring to relates to application-level keys which are meant to identify the developer of the application rather than the user. The only real solution in such cases is to make your app communicate with one of your own servers, which holds the API keys and performs API access on behalf of the app. Any keys distributed with an app (whether open source or proprietary) must be considered compromised.

    In this case the API key is user-specific, not app-specific, so there is no distribution issue. The user logs in and generates an API key, which the application then stores for future use. The API key is the application's password, permitting limited access to the user's account. (For example, it should not be possible for an app to change the account password or generate additional API keys using an API key.)

  3. Re:Maybe I just don't "get it" on Google Studies How Bad Interstitials Are On Mobile · · Score: 1

    Now, ostensibly, we have a single browser on which I can do basic wordprocessing and spreadsheet work through google docs, edit websites, play fairly sophisticated games....all through the same browser.

    Google Docs is an app whether it's running natively under Android or from inside Chrome. The browser doesn't replace any apps; it's just another platform for apps to run on—one with a lot of historical baggage, overhead, and limitations compared to the native APIs. It's good to provide a mobile-optimized web site rather than requiring visitors to install an app, but a native app will always have the potential for more sophisticated integration, in terms of both functionality and the native look-and-feel of the host operating system.

  4. Re:Mobile password entry; acting on user's behalf on A Plea For Websites To Stop Blocking Password Managers · · Score: 1

    Other than that it's far harder to type a 60-character password on a mobile device...

    That should be the user's choice, and anyway, that's what password managers are for. If the system is implemented properly, the user won't need to type in that 60-character password on their mobile device. The user can just unlock the password manager and paste in the saved password.

    Unless you're storing the user's password in order to log on to a service on the user's behalf. A password manager is an example of such an application.

    The password manager should run on the user's own PC, and encrypt the passwords with a master password known only to the user. Plaintext passwords and private keys should never leave the local PC. If an app needs to perform an action on behalf of a user, it should get its own distinct, revocable API key. There is no justifiable reason for anyone but the user to have access to the user's password.

  5. Re:That's copyright for you on Georgia Lawmakers Sue Carl Malamud For Publishing Georgia Law · · Score: 1

    External references were omitted deliberately; the HTML file consists only of the pages included in the T.O.C. at the URL you provided. The notes are considered a separate document. Downloading additional documents and fixing up the URLs would be a bit out of scope for this proof-of-concept, which has taken enough time already. If you merely want to make the links work, without downloading them, just add this tag in the <head> section:

    <base href="http://web.lexisnexis.com/">

    I could send you my script, if you wish, but the only part you could really use for this directly is the part to set the Cookie: header (wget --no-cookies --header "Cookie: ...").

  6. Re:That's copyright for you on Georgia Lawmakers Sue Carl Malamud For Publishing Georgia Law · · Score: 1

    As it happens, the script itself was very easy to write. It's about 30 lines of bash script, making use of wget for HTTP and xmllint to extract the link to the next page. Inputs consist of the URL of the first page and the contents of the Cookie: header as set by Chrome and captured through Wireshark. It took all night to run, though; there are over 30,000 separate pages.

    Anyway, in case anyone's interested, here are the main contents of each of those pages spliced together into a single HTML file: gacode.zip. The uncompressed HTML is 78 MiB; even compressed it comes to over 13 MiB. (The original 30,000 pages totaled to nearly 1 GiB.) There is some room for improvement, as I didn't strip out the redundant section headers.

  7. Re:Several reasons on What the GNOME Desktop Gets Right and KDE Gets Wrong · · Score: 1

    Online copies are very handy but they are not a "backup" by any useful definition. If it can be wiped by the same event that wipes the original it's not a backup adequate to deal with such an event.

    By that definition, backups don't exist. Any "backup" system on the planet is vulnerable to planet-destroying meteor impacts, for example. Online backups need not imply hard drives directly attached to the system being backed up, and while an online backup might not protect against certain things as well as an offline backup, it certainly does qualify as a backup.

    The only reason RAID isn't a form of backup is that it always mirrors the latest version of the data in real time. If a system preserves one or more historical snapshots of the original data for later retrieval, it's a backup system. RAID won't let you go back to a previous version; its main purpose (in combination with suitable backups) is to increase availability.

  8. Re: Yes I'm old.. on What the GNOME Desktop Gets Right and KDE Gets Wrong · · Score: 1

    Still more reliable than an optical disc. The real backup is on RAID6

    RAID isn't backup.

    No, it isn't, but there's no reason why a backup can't be stored on a RAID array, separate from the original data.

  9. Re:Get the terms straight on Samsung Releases First 2TB Consumer SSD For Laptops · · Score: 2

    "Triple Level" does not sound like three bits or eight levels.

    You're assuming that "levels" means "voltage levels". It's more like levels of a fractal; each level divides the range of voltages in half, yielding one additional bit of storage. This corresponds to the way the cells are actually programmed, shifting the voltage by 1/2 step relative to the previous bit, e.g.:

    111 = 0.5 -> 0.75 -> 0.825
    101 = 0.5 -> 0.5 -> 0.625
    011 = 0 -> 0.25 -> 0.375

    You could also visualize each cell as a three-level binary tree with eight leaf nodes.

  10. Re:Get the terms straight on Samsung Releases First 2TB Consumer SSD For Laptops · · Score: 1

    TLC means three bits per cell, not three voltages:

    Samsung has pioneered high-performance MLC technology with three bits per cell for eight total states. This is commonly referred to as Triple Level Cell (TLC) and was first seen in the 840 EVO Series SSDs. Link

  11. Re:Taxi licenses are crazy expensive on Uber France Leaders Arrested For Running Illegal Taxi Company · · Score: 1

    You miss the point, the state is the one guaranteeing the limited monopoly.

    When did the State ever guarantee that they would maintain the medallion program and/or refrain from issuing new medallions? Scarcity of medallions is hardly a natural right, and laws instituting artificial scarcity are subject to change. If anyone over-payed for a medallion under the false assumption that the current state of artificial scarcity was guaranteed to last they have no one but themselves to blame. The only compensation owed here is to those who were unjustly prohibited from operating taxis due to the State's medallion requirements.

  12. Re:Efficient allocation of capital on How Uber Takes Over a City · · Score: 1

    If the amount of labor needed to produce one person's worth of goods and services is less than one person's worth of effort, then you are going to have people sitting around doing nothing.

    Fortunately, there is no upper bound on "one person's worth of goods and services". If nothing else, leisure time (i.e. sitting around doing nothing, or at least nothing "productive") is a perfectly legitimate good and can expand to absorb any excess. Every time this has happened in the past, however, people managed to find other things to strive for—goods and services which were previously out of their reach, as well as new goods and services which they now have the leisure time to invent.

  13. Re:The Majority Still Has Follow the Constitution on Supreme Court Ruling Supports Same-Sex Marriage · · Score: 5, Insightful

    If they [rights] do not come from God, then they are simply a social construct...

    This is where you are wrong. There are formulations of rights which are neither mere social constructs nor based on religion—which is, in the end, just another variety of social construct. My preference is the one based on the legal concept of estoppel, which can be summarized as the logical principle that one cannot rely on incompatible claims within the same argument. For example, one cannot consistently argue that one has the right to act in a certain way toward others while simultaneously claiming that those affected lack the right to reciprocate. Either everyone has the right or no one does. If the right exists then the first party infringed on it and deserves the punishment; if not, then neither the original action nor the response infringes on anyone's rights.

    In this case there is the additional complication that "the right to marry" is really referring to a number of different aspects of the law, not simply the right to hold a marriage ceremony and consider oneself married but also power of attorney, visitation rights, joint taxation, common ownership of property, etc. However, the gender of the two parties is irrelevant to all of these legal considerations; there is no reason whatsoever that the law should permit e.g. visitation rights to a couple composed of a male and a female, but deny them to a couple composed of two males or two females.

    If certain individuals of a religious persuasion wish to consider homosexuality a sin, fine. They don't have to practice it themselves, or even associate with those who do. But there is certainly nothing in the Bible which would require anyone to deny that the relationship exists, or to refuse such couples equal rights under the law. This ruling is about the law, not religion.

  14. Re:Absurd idea on 3D Printing Might Save the Rhinoceros · · Score: 1

    Really? It's fraud to sell something better, and cheaper?

    Regardless of how much "better" or "cheaper" your product might be, it's fraudulent to make claims about it which aren't true—including labeling it as "rhino horn" when it didn't actually come from a rhino.

  15. Re:Better get those lobbyists ready, Comcast on SpaceX Wants Permission To Test Satellite Internet · · Score: 3, Insightful

    The latency would be ridiculous for most use cases.

    Are you sure? A round-trip latency of 13ms to the base station(s) seems fairly reasonable to me. These are Low Earth Orbit satellites with an altitude between 99 and 1,200 miles, not geostationary ones at 22,236 miles; that's 1/18th the distance, and thus latency, of existing satellite Internet providers like WildBlue or HughesNet. At the minimum LEO altitude the latency would be another order of magnitude lower still (around 1ms). Even the high-LEO delay is significantly less than the 20-40ms time to the first router reported by traceroute for my Qwest DSL connection.

    The trade-offs of LEO include a requirement for many more satellites for the same coverage, the necessity of hand-offs as the satellites pass overhead, and lower orbital lifetimes / higher fuel consumption due to increased atmospheric drag.

  16. Re: Hiding behind anonymity on Feds Want To Unmask Internet Commenters Writing About the Silk Road Trial Judge · · Score: 1

    If you are being interrogated in court you're forced to swear to tell the truth. You're FORCED to do it. And it carries a LOT of weight.

    Legal weight, perhaps, under an unjust legal system, but not moral weight; an oath given only under duress is no oath at all. For an oath to be morally binding there must be consent, and there cannot be consent when the oath is coerced. Of course, even worse than the prospect of being punished for violating an oath extracted under duress is that fact that you're being compelled to testify against your will in the first place. Without compulsory testimony, the oath would be voluntary and thus actually mean something.

  17. Re:Hiding behind anonymity on Feds Want To Unmask Internet Commenters Writing About the Silk Road Trial Judge · · Score: 2

    Ultimately, the act of nullification requires one to go against the juror's oath.

    Serious question: what if you refuse to take the juror's oath? If you'd be punished for refusing then the oath is given under duress and carries no moral weight. If not, then either you can serve on a jury without taking the oath (and thus with no qualms regarding nullification), or else refusing the oath would make a perfect "get out of jury duty free" card.

  18. Re:Don't try this at home on Writer: "Why I Defaulted On My Student Loans" · · Score: 1

    The rates on your loans are set under the premise that some people will be eligible to discharge in bankruptcy. You've already paid for the privilege so not using it is just a waste. It isn't a moral issue.

    On the contrary, it is a moral issue. Quite apart from the basic personal morality of honoring one's word, those who default become part of the statistics used to set the interest rates, so they're still raising the rates for everyone else. Worse, since you can't sign away the ability to discharge the loan in bankruptcy, those who would not attempt to evade repayment of a loan they voluntarily agreed to are penalized along with the rest.

  19. Re:Sunset provisions are good. on The Bizarre Process Used For Approving Exemptions To the DMCA · · Score: 1

    Shouting fire in a theatre is not covered under your right to free speech, as it impinges on the rights of others' safety and security.

    It does no such thing. Now, panicking and trampling others in your haste to escape the "fire" does infringe others' rights, but that isn't directly caused by shouting "fire" and would not be justified even if the fire were real. The responsibility for that harm lies squarely with those who panic.

    If someone fraudulently claims that there's a fire, and you take justifiable action based on a reasonable belief that they're telling you the truth, then they would be responsible for any harm that results from their fraud. That harm resulted from their choice, not yours. That isn't the case here; panicking and trampling others are not justifiable responses to a fire.

    I find it hard to believe that so many people are willing to defend this bizarre ruling, which besides being unjust in its own right was also clearly politically motivated with the specific purpose of circumventing the First Amendment and permitting the suppression of political speech opposed to the draft (Schenck v. United States).

  20. Re:Stupid reasoning. on Los Angeles Raises Minimum Wage To $15 an Hour · · Score: 1

    For an individual business, you're right: you always set your prices to maximize revenues, regardless of costs. For the market as a whole, however, costs obviously do play a part in determining prices. It's an indirect effect; increasing costs drive the marginal producers out of business, which decreases the supply. A decreased supply and no change in effective demand results in higher prices (or shortages). The change in price does not necessarily match the change in cost, however; the extra cost is split between higher prices and decreased profitability for the remaining suppliers, with the ratio depending on price elasticity.

  21. Re:Buttfucking disabled people for money on Prenda's Old Copyright Trolls Are Suing People Again · · Score: 1

    Now the company no longer has to fix the ADA violation and can't get sued for it again?

    I'm no lawyer, but I don't see how they could prevent anyone else from suing over the same issue so long as the company remains non-compliant. If you take an action which harms a group of people, you can't make up for it by settling with just one of them; the rest would retain the right to sue for their own portions of the damages. I imagine the same applies to violations of the ADA, even though there is no actual damage on which to base a legitimate lawsuit.

  22. Re:Voting is a responsibility on Online Voting Should Be Verifiable -- But It's a Hard Problem · · Score: 1

    I don't want people who aren't invested enough* to go to a poll to decide policies that affect my life.

    I (especially!) don't want the people who are personally invested enough to go to a poll to decide policies that affect my life. The only one with the right to make those decisions is me. The only "voting" system with any moral authority to speak of is Unanimous Consent: every single individual whose person or property is impacted by an action has the right to veto that action.

  23. Re:Corrects multipath problem. on Centimeter-Resolution GPS For Smartphones, VR, Drones · · Score: 1

    Most smartphones do have "real" GPS receivers in addition to Assisted GPS. How long it takes to get an initial GPS fix depends, in part, on how well the device can predict your location, as well as up-to-date knowledge of the satellite orbits; A-GPS takes advantage of cell tower data to provide an approximate starting point for the GPS and a faster way to download the orbital information and thus get a quicker fix. A GPS receiver is still necessary for a precise location, and my Nexus 5, to pick one example, can be set to enable A-GPS or to rely exclusively on the phone's internal GPS.

  24. Re:Warrant after probable cause established? on FBI Accuses Researcher of Hacking Plane, Seizes Equipment · · Score: 1

    They need a warrant to perform any search or seizure—the warrant is the authorization to perform the search or seizure; you can't have one without the other. It isn't "either the search is 'reasonable' or you have a warrant", applying for a warrant is how you document that the search was reasonable in the first place, by providing probable cause supported by oath or affirmation. A blanket authorization for so-called 'reasonable' searches and/or seizures is just another way of issuing an unconstitutionally broad warrant which fails to document the probable cause or to particularly describe the place to be searched or the persons or things to be seized.

    However, you are correct that they probably wouldn't have any trouble getting a warrant after his comments. If you make a credible threat, even if your intent was humorous or sarcastic, you shouldn't act surprised when people take you seriously.

  25. Re:Just get rid of democracy instead on Gyro-Copter Lands On West Lawn of US Capitol, Pilot Arrested · · Score: 1

    Perhaps, just get rid of districts. If someone from across my state represents me better than someone local, then perhaps my appointment should not be limited by borders drawn for an election system that would no longer be in place.

    Why even restrict the choice of representative to someone in your state? I'd just let anyone interest in the job apply to serve as a representative, provided they could meet some minimum number of votes nation-wide—perhaps 0.1% of the eligible voting population, so there could be at most 1,000 representatives. In practice it would probably be much less than 1,000, with a few individuals representing the major factions but plenty of room for minority positions. Each eligible voter gets three votes, and thus up to three representatives, which they are given the opportunity to change at regular intervals (e.g. quarterly, or when one of their representatives steps down). The votes are persistent until changed, and can be concentrated or spread out according to the voter's preference. A representative's influence in the House is determined by how many votes he or she currently holds.

    This would, of course, be separate from the states' representatives in the Senate, to be appointed by the state legislatures. Popular representation is all well and good, but someone has to look out for the long term. Under my system the House would be able to approve any short-term (discretionary) expenditures unilaterally out of existing savings, but a 2/3 super-majority in the Senate would be required for anything requiring new debt (to include any increase in the money supply), speculation on future revenues, or a commitment of more than a few years. Finally, all laws would be required to maintain the approval of a simple majority in both the House and the Senate or face immediate repeal following a call for a vote.