I agree with your sentiment, but NOT 8086, please. It's a bloody mess.
When I was in University they taught PDP11 instead. That's an amazingly clean architecture.
Shades of it appeared in 6809 and 68k, but PDP11 was the original.
Don't use the PalmOS security stuff; it doesn't work well (as you've found).
Instead, install a free 3d party app like "Secret!". It simply keeps memos in encrypted format with a configurable timeout.
Simple and effective.
Admittedly it's a bit awkward for phone numbers; you have to do copy/paste to dial the number. I prefer to just use the
normal phonebook but have very little information attached to the number itself.
If you're really paranoid, there are also third party apps that support a "poison pill" SMS message.
If you realize your phone has been lost, SMS it the special password and the phone will do a hard reset.
apparently it works only if you happen to have logged into an admin page on the router within the past few minutes, which is remarkably unlikely.
Ok, I see the problem now: although just about every setup page imaginable on the router uses a session cookie
to make sure you have logged in, the "set initial router password" page does not, and does not care
if an initial password has already been set (stupid!).
So the 'sploit is to first invoke the "set initial router password" page. It doesn't matter what it sets it
to, because completing that page logs you in, and so your browser gets the session cookie and now all the
other pages work. Such as the one that adds www.example.com to DNS.
Nice. Fortunately my home system doesn't use the 2wire DNS at all.
I'm sure that if I was already logged into my router, that link would work, because I know the 2wire uses cookie based authentication.
But why on earth would I be logged into it??? Its status pages do not require a login, so the only reason
to log in would be to change something, which happens maybe once a year. And the session times out after
a few minutes.
TFS (The Fine Summary) says "the 2Wire exploit bypasses any password set on the modem/router"
which is blatantly false: apparently it works only if you happen to have logged into an admin page
on the router within the past few minutes, which is remarkably unlikely.
My guess is that the "exploit" is fundamentally relying on people not having changed the default router password. That way, the initial URL to set the password will work, and after that the router is pwn3d.
Moral? Set your stupid default router password. Just like with any router.
Oh come on, there is nothing new here and it is very lacking in detail.
Look here for far, far more detail on How To Build Your Very Own Atomic Bomb.
They're really not very complicated conceptually.
The devil is in the details. The fuel and detonator timing are real showstoppers. That is what's keeping
every random nutbar dictator from building a bomb, not the lack of blueprints.
On BluRay disks, perhaps? The scratchproof coating was a key development for BluRay; originally they were to be delivered in
cartridges to protect the surface.
Descent3 is available for Linux. I bought it a few years back
You can turn off the dead spot via the --deadzone 0.0 option
You will want to do that if you use something like the Saitek X52 flight control system:
11 axes and 34 buttons, baby.
There is no game, none, like Descent3 in terms of motion control. With one hand on the joystick,
the other on the throttle, and some practice you end up comfortably doing full 6 degrees of freedom flight.
As in, being able to fly a slow helix backwards while forming a circle.
Re:We need this type of thing done in the classroo
on
Hand-Made Vacuum Tubes
·
· Score: 5, Insightful
You can learn a hell of a lot from vacuum tubes! They are far easier to understand than transistors.
There's a reason why they're called "valves" in the UK. It's like a valve controlling a powerful
stream of water; a small change on the valve leads to a very large change of current.
That change in current can, in turn, control a much bigger valve that controls an even larger current.
In this case, the "valve" is a control grid (that spiral thing) surrounding the cathode (the thin
hot wire in the middle). The big cylinder is the "plate". The cathode itself has a cloud of
electrons around it (because it's hot), and a small signal on the grid controls how much of that can
scoot across to the plate (which is positively charged due to a power supply putting a strong
positive voltage on it). So a weak sine wave signal on the plate will lead to a big sine wave
current from the plate.
There, now you know the basics of amplification (although I skipped some details).
I couldn't have done it by describing a BJT (transistor), because they're far weirder.
A perfect opportunity to build a laser-jammer tracking missile.
Why, as soon as the laser-jammer starts up, instead of tracking the now-lost IR signature, instead switch to a tracking system that uses that nice strong clear laser signal instead!
To be fair here, it has never been an 'all or nothing' model. Don't forget setgid. For example,
most mail related programs run setgid with the corresponding programs setgid rather than setuid.
One reason for the simplified security model in Unix was exactly because the more complicated
system of Multics (with ACLs etc) tended to lead to poorer security since the
security aspects were spread out all over the filesystem and ACLs instead of just being
entirely in the code. Or to put it another way, security auditing becomes a lot harder.
I would think it's because the dispersal characteristics of the retro-reflector is not well defined
(it is not perfect, and it is not known how degraded it is), so you don't know exactly how long a distance
you are simulating.
In other words, you'll only learn know that for a given laser power you can go at least
to the moon and back. They want to learn how far they can go for a given laser power,
so the whole path has to be under fairly reasonable control.
Well, you used them because they expire quickly. So you blow them off left and right. Just like I
and everybody else does.
I don't understand why/. doesn't have something like mod point credits. Often, I would gladly
use a mod point today for the price of five mod points next week. Soooo many times I've modded useless
crap simply because I knew the point would expire, and the next day when it's all expired something actually
modworthy appears buried deep in the comments and I can do nothing.
Blech. The given example is the painful way to do it.
The normal way to compose two functions and map them over a list in Python is a one-liner, like this:
Mythbusters fired guns underwater some time back, and much to my surprise the barrel did not burst, even on the long gun.
Maybe years from now we'll get to see them fire a pistol in a vacuum in zero-G to see what happens...
A typical lightning strike is around a thousand kWh. That'll keep a 100W light bulb lit for a few months, but given that your air turbine gizmo will likely only get a few strikes per month, it's hardly worth the effort to capture considering how much wind energy it'll be capturing during that time.
It's best to just treat the lightning a like a nuisance and try to dissipate it safely.
You missed a step. Before showing the final result, the computer will put up a big dialog box that says "ACCESS DENIED" in red blinking letters. The geek will then type in "override" and then the view will be revealed.
A cheap-ass charger overheats your batteries and drastically shortens their lifetime.
A negative delta-V charger (like a MH-C777PLUS or that ilk) detects the teeny teeny tiny
little voltage drops that NiCd and NiMH batteries do when they reach peak charge and stop
right there.
I've always just bought whatever high capacity stuff I can find that's on sale and use a nice
charger. I've had cells last nearly ten years by babying them this way.
As for the batteries, NiMH have higher capacity but a pretty horrible self-discharge rate.
NiCds are a bit better, but to get decent usage out of either you really need to make a habit
of topping them up before going off on your little expeditions. And always, always bring
some alkalines with you. Their shelf life is phenomenal.
I've got an eTrex Vista, which has a built in fluxgate compass and altimeter. The compass part
isn't actually that useful, because it sucks batteries like crazy. The only reasonable way
to use it is intermittently, namely:
Set "camp" as your waypoint destination.
Turn on the compass and rotate until the GPS says you are pointing towards camp
Turn off the compass (and perhaps GPS too) and just start walking.
So, yeah, I carry a normal compass too. A GPS is just too fragile to depend on.
Slashdot Mirror
I agree with your sentiment, but NOT 8086, please. It's a bloody mess.
When I was in University they taught PDP11 instead. That's an amazingly clean architecture. Shades of it appeared in 6809 and 68k, but PDP11 was the original.
Don't use the PalmOS security stuff; it doesn't work well (as you've found).
Instead, install a free 3d party app like "Secret!". It simply keeps memos in encrypted format with a configurable timeout. Simple and effective.
Admittedly it's a bit awkward for phone numbers; you have to do copy/paste to dial the number. I prefer to just use the normal phonebook but have very little information attached to the number itself.
If you're really paranoid, there are also third party apps that support a "poison pill" SMS message. If you realize your phone has been lost, SMS it the special password and the phone will do a hard reset.
(replying to myself...)
Ok, I see the problem now: although just about every setup page imaginable on the router uses a session cookie to make sure you have logged in, the "set initial router password" page does not, and does not care if an initial password has already been set (stupid!).
So the 'sploit is to first invoke the "set initial router password" page. It doesn't matter what it sets it to, because completing that page logs you in, and so your browser gets the session cookie and now all the other pages work. Such as the one that adds www.example.com to DNS.
Nice. Fortunately my home system doesn't use the 2wire DNS at all.
I'm sure that if I was already logged into my router, that link would work, because I know the 2wire uses cookie based authentication.
But why on earth would I be logged into it??? Its status pages do not require a login, so the only reason to log in would be to change something, which happens maybe once a year. And the session times out after a few minutes.
TFS (The Fine Summary) says "the 2Wire exploit bypasses any password set on the modem/router" which is blatantly false: apparently it works only if you happen to have logged into an admin page on the router within the past few minutes, which is remarkably unlikely.
My guess is that the "exploit" is fundamentally relying on people not having changed the default router password. That way, the initial URL to set the password will work, and after that the router is pwn3d.
Moral? Set your stupid default router password. Just like with any router.
Oh come on, there is nothing new here and it is very lacking in detail. Look here for far, far more detail on How To Build Your Very Own Atomic Bomb. They're really not very complicated conceptually.
The devil is in the details. The fuel and detonator timing are real showstoppers. That is what's keeping every random nutbar dictator from building a bomb, not the lack of blueprints.
On BluRay disks, perhaps? The scratchproof coating was a key development for BluRay; originally they were to be delivered in cartridges to protect the surface.
Correction; it's actually "--deadzone0 0.0" (note the extra 0). You might need a slightly larger value (like, 0.01) depending on your joystick slop.
Of course a Saitek X52 has no slop :-).
- Descent3 is available for Linux. I bought it a few years back
- You can turn off the dead spot via the --deadzone 0.0 option
- You will want to do that if you use something like the Saitek X52 flight control system:
11 axes and 34 buttons, baby.
There is no game, none, like Descent3 in terms of motion control. With one hand on the joystick, the other on the throttle, and some practice you end up comfortably doing full 6 degrees of freedom flight. As in, being able to fly a slow helix backwards while forming a circle.You can learn a hell of a lot from vacuum tubes! They are far easier to understand than transistors.
There's a reason why they're called "valves" in the UK. It's like a valve controlling a powerful stream of water; a small change on the valve leads to a very large change of current. That change in current can, in turn, control a much bigger valve that controls an even larger current.
In this case, the "valve" is a control grid (that spiral thing) surrounding the cathode (the thin hot wire in the middle). The big cylinder is the "plate". The cathode itself has a cloud of electrons around it (because it's hot), and a small signal on the grid controls how much of that can scoot across to the plate (which is positively charged due to a power supply putting a strong positive voltage on it). So a weak sine wave signal on the plate will lead to a big sine wave current from the plate.
There, now you know the basics of amplification (although I skipped some details). I couldn't have done it by describing a BJT (transistor), because they're far weirder.
But you need that thermal noise in your audiophile setup. That's to give the music that "warm" sound.
A perfect opportunity to build a laser-jammer tracking missile.
Why, as soon as the laser-jammer starts up, instead of tracking the now-lost IR signature, instead switch to a tracking system that uses that nice strong clear laser signal instead!
I'm eagerly awaiting the unit "arrhabyte". I propose that it should stand for the amount of software you can pirate in a 24 hour period.
"Dude", I've got a whopping sixteen arrhabytes of warez here in my backpack!"
To be fair here, it has never been an 'all or nothing' model. Don't forget setgid. For example, most mail related programs run setgid with the corresponding programs setgid rather than setuid.
One reason for the simplified security model in Unix was exactly because the more complicated system of Multics (with ACLs etc) tended to lead to poorer security since the security aspects were spread out all over the filesystem and ACLs instead of just being entirely in the code. Or to put it another way, security auditing becomes a lot harder.
I would think it's because the dispersal characteristics of the retro-reflector is not well defined (it is not perfect, and it is not known how degraded it is), so you don't know exactly how long a distance you are simulating.
In other words, you'll only learn know that for a given laser power you can go at least to the moon and back. They want to learn how far they can go for a given laser power, so the whole path has to be under fairly reasonable control.
NTP does not deal with DST. It's sole purpose is to synchronize the machine clock with UTC.
DST is a presentation issue, and is handled solely by the Olsen tzdata database.
Well, you used them because they expire quickly. So you blow them off left and right. Just like I and everybody else does.
I don't understand why /. doesn't have something like mod point credits. Often, I would gladly
use a mod point today for the price of five mod points next week. Soooo many times I've modded useless
crap simply because I knew the point would expire, and the next day when it's all expired something actually
modworthy appears buried deep in the comments and I can do nothing.
What about surgical steel implants? There are probably millions of people on Earth walking around with those.
Mythbusters fired guns underwater some time back, and much to my surprise the barrel did not burst, even on the long gun. Maybe years from now we'll get to see them fire a pistol in a vacuum in zero-G to see what happens...
Speaking of Emotional Distress, is it a coincidence that this is being posted right after the story about goatse.cx being up for sale?
I think not.
Whenever there's a nice meteor shower coming, it's always cloudy where I am. So clearly, meteors bring bad weather.
And don't get me started on eclipses...
A typical lightning strike is around a thousand kWh. That'll keep a 100W light bulb lit for a few months, but given that your air turbine gizmo will likely only get a few strikes per month, it's hardly worth the effort to capture considering how much wind energy it'll be capturing during that time.
It's best to just treat the lightning a like a nuisance and try to dissipate it safely.
You missed a step. Before showing the final result, the computer will put up a big dialog box that says "ACCESS DENIED" in red blinking letters. The geek will then type in "override" and then the view will be revealed.
I've always just bought whatever high capacity stuff I can find that's on sale and use a nice charger. I've had cells last nearly ten years by babying them this way.
As for the batteries, NiMH have higher capacity but a pretty horrible self-discharge rate. NiCds are a bit better, but to get decent usage out of either you really need to make a habit of topping them up before going off on your little expeditions. And always, always bring some alkalines with you. Their shelf life is phenomenal.
Oh, and don't forget that the NiCd memory effect is a myth. Let it die, already.
- Set "camp" as your waypoint destination.
- Turn on the compass and rotate until the GPS says you are pointing towards camp
- Turn off the compass (and perhaps GPS too) and just start walking.
So, yeah, I carry a normal compass too. A GPS is just too fragile to depend on.