I must be able to play an audio CD or a DVD movie in my DVD/CDROM drive, because it is designed for that purpose.
Nuclear weapons are made to kill billions of people. That doesn't mean we have to use all of them because if we don't they're not fulfilling their designers' dreams.
There are loads of people with betamax players that put forward the same argument as you. If the record companies suddenly create CDs which won't run in CD-Recorders and put a warning on the front saying so, there's nothing anyone can do about it. Yup you heard me, recording companies can FUBAR all CD drives worldwide if they want and replace them with giga-minidiscs or something.
Off the top of my head the TOC track can be highly reflective to reflect laser energy back into the laser, a high power laser used for CDR writing would have a larger gas chamber for the extra power, causing a different reflection characteristic back to the CD than a cheapo laser, that CDR laser reflection frequency would blow the TOC, by making it go non-reflective if you're reading it in a CD recorder. This is a total hypothesis off the top of my head at 2 in the morning whilst watching lala land on mtv, the kills the frills, kill a million braincells, cool.
Yeah, the ads kept changing so it never worked and/or was too ambiguous to actually do it. I always got wrong username or password, except for once which was some guy that put username and password on his website just 'cos he had a big ego and wanted everyone to see his site. Audiogalaxy was supposed to exclude these, but nobody really bothered blowing the whistle. They didn't have a cgi form for submitting rogue FTP servers. *sigh* I'm not gonna reveal my email address to them, not then, and to nobody except close friends now.
And as for the "free market" economy BS - you forget, you're not purchasing a wrench here, you're purchasing creativity (though in some cases, with the current crap thats being produced, that could certainly be argued). This isn't something that's negotiable. If the process that brings an artist's creative inspiration and talented execution into your living room is too expensive for you, TO DAMN BAD
The price isn't set by the artist or the creator, it's set by a cartel of corrupt carrian-eating multinational megacorporation using Machiovellian underhanded tactics and corrupt politicians to maintain an artificial monopoly whilst stifling technological advancements, and then treat the creator (the artist) like crap and get him hooked on cocaine, etc. Plus inhibiting free trade through the DVD regions system. I have no problem with paying the artist.
The process that goes into making a Ferrari, executing the designs and producing the vehicle, and anything else that's involved makes the end product rather pricey, doesn't it? Well - apparently there are people out there willing to pay for it... AND, it can't just be downloaded from the Internet or cloned by another manufacturer w/o recourse. The recourse would land the clone manufacturer in court... period
This is an American view. Third word countries are unable to pay Glaxo Smithkleine and buddies $50 per pill unlike us privilieged people. So they clone them, and the multinational megacorps try to kick their asses, saying that America will "bomb Ethiopea like they did Afghanistan" unless starving Ethiopeans pay $50 per pill for advanced drugs. Just try to fit an entire country of >80 million people into Camp Xray.
Ferrari is simple - you buy raw materials, process them, construct a product using skilled labour, then sell it at market price ($500,000 dollars or whatever). *BUT* what if Ferrari had a patent on "Using a circular object between an elevated platform and the ground, which is driven thus propelling the platform". Then they'll have a patent on the car, so they'll be the only car company in the world. Ford, GM and friends would be illegal. With the mickey mouse precedents now, this patent on the wheel would be valid for 140 years.
I'm not entirely sure how saying I have higher ethics than the morons stealing music somehow translates into being closer to God, but considering I'm not religious, I'll have to politely say no, I don't believe that makes me closer to God.
I am glad to see you aren't in presumption of ambivelence.
In short, there is absolutely no way to make this request by the MPAA workable. None at all. Their execs wanting to control A/D conversion is just indicative of how far removed from reality they are
You are incorrect. If they get this blanket law passed they'll only enforce it on video cards, digital camcorder manufacturers, digital camera manufacturers and CD-ROM manufacturers ONLY (CD-ROM hardware detecting the watermark won't let any audio CD play if the EIDE/USB cable is connected).
It's possible to construct A/D converters using BC108 signal transistors if necessary, you don't need ASIC, but it'll be illegal to retrofit a TV or CDROM device with it under this law. Just like DVD drives can be chipped, the industry knows that, but that didn't stop them from implementing it. They know the vast majority of people won't bother and will just pay up
Please everyone, they won't be so anal as to put A/D DRM into every single A/D converter, just the ones that threaten their revenue stream. The dinosaurs also tried to resist evolution.
I'm only 24, but I have quite a bit more ethics and much more of a sense of responsibility when it comes to music piracy
So you think you have high ethics? So you think you are closer to God? Well how about this...
The (RI|MP)AA are trying to set a precedent here that they can corner a market and then litigate more advanced technology out of business or cripple it.
If they succeed, then this precedent will be used in future by the oil companies to litigate advanced vehicle technology out of business (electric vehicles, hybrid vehicles, hydrogen-powered vehicles). They will say that millions of workers employed by Shell/Amoco will be fired, massive supertankers would have to be scrapped. The entire distribution network would be crippled (like record companies' physical CD distribution network). Shell owns the drill platform and therefore how you use *our* oil is *our* business, where are you going? Why? What's your address? What's your job? If you have a Ford pay $10 per gallon, if you have a GM pay $5 per gallon. Result: All major cities underwater, global warming, locusts everywhere, water shortages, harsher weather.
Worse, Amoco could make their gas incompatible with Shell, your car would either work with one or the other. Shell knows they're losing business by not doing this, but it's their oil, their product so surely they can do whatever they want with it. Music actually belonging to the record companies doesn't seem so cool now does it?
The whole reason the free market system was invented was because consumers requested products, and companies would provide these products for a fee. PERIOD. The fact that they're ignoring the Internet as a more efficient distribution network is an abomination to the free market system. RI|MPAA are therefore anti-capitalist organisation and should be banned by the WTO, especially in the light of the DVD region system which is a non-WTO-ratified barrier to free trade, and is thus discriminatory. As a citizen I demand this product as copyable mp3, it's the companies' job to supply me with it, not stick it in jail.
This is indicative of the whole general state of America. WE ARE THE CONSUMERS, how dare they try to screw us (apart from financially).
This is flatly unconstitutional. It *can* be used to destroy the means of dissemination of free speech such as news stories and can destroy the emergency public broadcast system (used in the event of a disaster) by allowing an adversary to piggyback a watermark signal on top, thus making the signal unviewable on all DRM systems (TVs), therefore causing a danger to national security.
An adversary can probably interfere with news broadcasts by inserting interference that would lock out the affected channels from viewing, creating widespread panic.
You are right that the MPAA (et. al.) do not stop. But they DO learn. In fact, they have learned all to well. They have learned that sufficiently large donations to politicians result in legislation that protects their interests at the expense of the puble, and past legal precedants be damned
They don't expect it to pass, same as CDPBBTA didn't pass. They're checking for weaknesses, seeing which senators vote which way, and then they'll pay them off one by one until all important votes have been taken out. This law will pass eventually, maybe after 10 iterations.
MPAA knows the game plan all too well. One day you'll pick up the phone to your senator one time too many and he'll send you to jail for harrassment. The MPAA knows this and so will keep hammering at the legislators' door with variations on the CDBPPTA until this passes. Same as sysadmins gets pissed when one user calls for tech support 5 times a day. People bitch about that guy that has trouble inserting a floppy disk so calls tech support all the time, that's exactly how all our congressmen will look at us IT people and EFF if we constantly bug them.
We've already got a taste of MPAA tactics with how they treat Kazaa, only unorthodox and semi-legal tactics succeed (like selling a system under litigation for the purpose of evading this litigation).
... and I'd hate it when the logon was finally succesful, but then by habit I had already clicked the mouse again - pasting in the logon request again, which would log me off first, *sigh*, so I'd have to keep going for another half hour.
One man's troll is another man's insightful (see the mod points of my parent post)
CuteFTP is a late piece of software.
Ahh, which makes me reminisce again - in my day, before CuteFTP, using Windows command-line FTP (ftp.exe) to hammer FTP servers by hand by copying say "ftp xxx.xxx.xxx.xxx" \n "anonymous" \n "downloader@anon.com" to the clipboard, and continuously clicking the paste button. This was before linux was a viable operating system.
You whining retard... I don't think anyone wants to hear your self-gratifying tale about your journey for warez... It's as bad as hearing old senile folk talk about "When I was your age".
Whining retard, hey that's cool. From FTP scourers to Kazaa. It's like rags to riches. I'm only 23, the fact that I'm talking like an old man shows how quickly technology changes;-)
Without knowing more, I can't give you a thesis, but if you have a stable network topology and certain people only need a certain view of the data, and these people only access it from certain IP addresses, you can do compartmentalisation. If you want something heavyweight with the best protection, put the data on a seperate subnet (accessible via a Cisco 6500 or something or possibly a linux ipchains) in effect firewalling it. Set the rules. This will set the base for further protection by writing a proprietary app to encrypt the data at source, and decrypt at the end, perhaps using kerberos, although since only your users access the data, you can use a proprietary app using strong encryption and the user's private key compiled inline in the code, although that would mean that user-level breaches would become serious as if they steal your bespoke app they can find the private key inside it, although this would only break the datastream's security if he figures out which IP addresses IP chains will let through to the system. Or perhaps you have a clustered system storing this important data making things complicated. Of course if you need bidirectional data transfer this complicates matters. Instead of a full app to handle everything, you can just write a client script to set up port forwarding automatically over ssh and the client software would use this tunnel. Without more info to narrow the possibilities I'm afraid I'm gonna have to leave it there and watch Airwolf.
Re:Don't worry, our hands are clean!
on
KaZaA Collapses
·
· Score: 2
Technological change has always been opposed. I remember reading that when automobiles were first invented, the horse'n'cart lobby were opposed to allowing cars on the road because they would take away their business. The Government argued it was their road, but the horse'n'cart lobby said that cars on the road would scare horses, causing them to bolt, resulting in a runaway carriage and the harm of people.
There's nothing that any Government as a whole would be more scared of than endagerment of the public. So the introduction of automobiles was delayed. Is P2P worldwide filesharing in the same predicament?
They just have to bend/break one of your daemons running as root, or a higher privelige than what they've got, and they are out of that users account, and installing their own backdoor somewhere as root.
Hmmmmm, good point, I can't guarantee that the daemons running as root are unexploitable but uhhhh, yeah there's probably some daemon somewhere that's exploitable somewhere. Aw man, you've ruined my day, I'm gonna go smoke some pot so I don't worry about HaXoRs. Then I'll get around to minimising the number of services I have running sometime. But I'll admit it's fun when someone gets in. I better read the HOWTOs, find out how to check for a rootkit. Thanks dude.
Re:"In a related story...
on
KaZaA Collapses
·
· Score: 5, Funny
set up an ftp server, give the address out to your friends, and have them set up ftps and give the address to you. simple
This is exactly how it was done in the past, friend - FTP. Oh man, I've been trading files since you were just a twinkle in your parents' eyes kiddo. 5 years ago in my day it used to be www.audiogalaxy.com as the search engine (like Fast Networks www.alltheweb.com FTP search). It spidered FTP servers. You'd type in the song you want and get a list of FTP servers matchig with their IP address and login/pass (usualy mp3:mp3). They'd usually be running warftp daemon, have an upload:download of 1:3 usually so you MUST upload a song to be able to download a song. Unlike Kazaa if you upload a song the guy doesn't want he takes it personal and *kicks* you from his ftp server. In other words you spent 1 hour uploading a song over a dialup connection just to get kicked after 1/4 of your download, and maybe get your IP address shitlisted (if the song you up'ed was that bad). This is why in my winamp 40% of songs are incomplete, ftp server admin kicked me. Sometimes you'd do a reverse-DNS and see the FTP server is in Russia, where it's 5am, so the FTP server is unmanned. This is when you have fun and upload win386.swp and kernel32.dll to get download credits. If you want to download a 5 Meg song, and the FTP server has a 1:3 ratio, you have to upload at least a 1.8 Meg song so you'd always have your mp3 portfolio in windows explorer arranged in size order. FTP admins got pissed off that only small songs get uploaded, but in dial-up days this still took an eternity.
These were the days when CuteFTP was unstable and kept crashing. Ahhhh, those were the days when song-swapping was personal. Some people with me got kicked from the FTP server in mid-download, got pissed off and ping-flooded the FTP server for 10 minutes. It was all so personal.
Usually the FTP servers would be busy with >50 simultaneous users so you;d have to hammer the FTP server with a 3-second wait timeout. Sometimes I'd use my own PC to hammer, and I'd ssh into my friend's linux box and use it's ftp to hammer also, and then use the first one to connect. Trouble is if you hammered to hard they'd ban your IP address for 15 minutes to 1 day. With DHCP just hang up and dial up again to get a new IP address. These were the days when a static IP address (like with ADSL) was something to be avoided at all costs.
Sometimes I reminisce about the good old days by downloading from Kazaa and opening up an MSDOS prompt and typing netstat to get the reverse-DNS, makes things feel a little personal again for a few seconds. But I suppose old-timers like me with the personal touch aren't wanted any more *sniff sniff*.
So when you kids point and double-click on Kazaa, remember us, the pioneers who did things the hard way.
Score:5 Historic, pre-P2P era dinosaur, modded up out of feeling of respect for your elders, when everything wasn't as automatic as Kazaa
Being on the Internet does not make one immune to copyright laws!
Copyright is an artifical concept. Many lawyers think intellectual *property*. Property being 90% of the law. In actuality it should be *intellectual* <font size=-3>property</font> which is completely seperate.
Copyright laws can change tomorrow. Some artists and all record companies will want 100% control of their product - the DVD regions system is racist as it discriminates against people in other countries and thus inhibits free trade, violating WTO regulations, even if you're willing to pay full price for the product, they still want to control who buys it, where and when. This shows me there's no middle ground with these people - it's CDBPPTA or nothing, and they'll use the most expensive lawyers available. The outcome of legal action is a combination of Poker (cheaper to fold instead of raise, even if your own hand is better), luck and who's right and wrong.
Everybody that I know that went to court "on principle" has lost their house, car and life savings as a result, despite the fact they were right. Losing everything to lawyer fees when you are 60 years old is NOT funny. This system is just plain wrong.
I wish binLaden smashed planes into the Supreme court instead of WTC. Amen.
Honestly, when I look at Sharia law I can see why the Middle East supports it, looked at objectively it as a whole at least gives the impression of love and caring for the average citizen, together with the accruing of large amounts of money being an abominational and disgusting act of selfishness. I dunno man, I can't help feeling that there's something there that we've lost.
Sharman networks should move to Dubai in UAE, Towry Law is based there and it's a beautiful place, everybody has a Mercedes. The servers can be housed in Saudi Arabia, they have no IP laws there, but they'll need one big air conditioning unit. Why don't people locate server farms in Greenland, Norway or in the Arctic? No air conditioning costs whatsoever, just a few fans.
Cheapest model in IT: Servers in cold countries (e.g. Norway) Coders in cheap countries (e.g. India, China) Consumers in rich countries (e.g. America)
We process and store confidential information from millions of our customers and partners, not to mention our employees
Ah, now that's a problem, lots of important data must be accessed by lots of people as quickly as possible, as easily as possible (no password preferable). Catch-22 if everyone with a PC and something superficial like a password can access all your data, and more security is unacceptale to management, then you're screwed. Don't worry, it's the same everywhere, now that everyone's forgetting 9/11 you'll see cockpit door reinforcement projects will be delayed then cancelled, etc.
People only care about security when there's a breach, if you force them to put security into everyday stuff they'll just regard it as an impediment to business. Heck most people don't even lock their car doors and have a laptop on the passeneger seat.
I take it that your data has to be open to everyone on your network, no limitations (including therefore anyone that can hack your network).
OK, balloon's gone up. Let's quit bitchin' and get that open source Russian Kazaa client and build an open source Kazaa server, maybe merge it with Gnutella or Freenet. Kazaa is closer to true P2P than Napster was. I think in the meantime a quick change in your HOSTS file stating Kazaa's login server IP address is in Russia someplace.
As an aside about the G-forces, I read in a magazine that the Air Force has developed a new anti-G-force suit that has a bunch of water-filled bladders in it. The same G-forces that force blood down toward your legs will also force water down there as well, which will in effect push back and lessen the amont of blood that leaves your upper body
<Krusty the Clown> Bwa ha ha, ha, ha, huh, huhhhhhhhhhhhh </Krusty the Clown> Oh man, great for pulling up, but how about pulling down, sudden descent, you'll get a haemorrage. You can't force blood out of the brain without fracturing your skull in some way.
I don't get why the air force are researching G-forces. Everyone just uses missiles, phoenixes, exocets and the like. The US has so much money that US pilots should just be told to turn tail and eject over friendly territory if they run out of missiles. The Mig-29 has combined InfraRed+Radar automatically targetted guns, there is no way some US flyboy is going to be able to outmanouver that, no matter how many Top Gun movies they spew out. So what's the point teaching violent manouvers?
Plus if you play Mig-29 you'll notice the targetting system locks immediately, whereas the F-14, , F-16 F/A-18 and friends go beep beep beep beep for like 10 minutes.
Security simply requires thought and effort on the part of end-users, and until we can beat it into their tiny little heads then we're going to be stuck with stupid end users making our systems insecure.
Dude, that is totally not the way to do it. It's like a vicous circle against your own users. Your problem is lack of compartmentalisation. I don't care if anyone hacks into our accounts, because our most important data is stored on a system that only has a keyboard, monitor and Zip drive, NO ethernet card. The computer's in a lock cupboard. I have the key, my comrade in Japan has another in case I get run over or something. I suppose a locksmith can always break in.
In summary, there's too much automation making us Borg-like, having the key to the company's most impoartant data makes system administration feel exciting and important, I like it.
LOL, jeez, no wonder you think passwords are sufficient -- people hacking into your systems seems to be an everyday occurance for you
Not quite everyday, but I admit this would be a boring job if people didn't hack in every now and again, and then I'd lose my excuse for a marijuana smoking break.
Then after a short time they go away
Think again. They install root kits to hide their presence from you and then use your machine to launch attacks on others
Ah no, I delete the files belonging to that user when they're gone, and restore from a backup. I don't allow anybody, not even my users write access to/lib or anything, they may only write to/tmp and their home directory. These hackers are unlikely to be able to compromise root, I've got a > 25 characters in length password of upper+lowercase+alphanumeric+numbers
Passwords are not meant to provide an audit trail, they're meant to do only one thing -- provide security. Since you say "when (not if)", you obviously agree that they don't even sufficiently serve that purpose. Point proven
You should watch the movie Gattaca - DNA checks faked by cleanliness and sprinkling skin fragments and nail filings from imposters. Blood tests faked by human engineering (falling off the chair in the middle of the injection and then placing it in a false reservoir). Retina scans in Pamela Andersen's movie - faked by reflctive contacts. Everything can be faked. No security measure is perfect. Sorry.
I don't have a firewall (unless you consider a Cisco router is a firewall), only IPChains, TCP wrappers, kerberos, latest patches. Even if they do get in, sometimes I get worried, but then I just smoke some marijuana and that's it. No point having work-related stress. I let him do his worst and then that's it. They usually just do a bit of exploring, so I copy a few interesting files into the breached account when I spot a cracker, some of Management's word documents which I rename to TOPSECRETCOMPANYSECRETS.doc or MANAGERSMINUTES.doc or CONFERENCENOTES.doc and chgrp and chown it to make it look like it belings to that account. Then after a short time they go away. When adminning linux I dunno I have this sense that it's made by Linus and his gang so it's indestructible, but I suppose race conditions and buffer-underruns appear all the time..... Hmmmm maybe I should pre-empt this stuff by compiling with one of those anti-stack-smashing malloc drop-in replacements in/lib.... Hmmmm..
As for tunnelling, ssh with port forwarding suits my apps fine, I don't need any of this fancy new stuff like GED or JED thru IPSEC or whatever although I might look at it sometime. Should pre-empt those buffer overflows now.... Hmmmm....
Two members of staff said to me within a week or two of starting that I was confident enough with the customers that I'd do well there, and I'd like to think I could pull that off in an interview situation, though the two situations really are worlds apart.
No they're not, you just need confidence and balls. Both being the same thing more or less. Just remember the interviewer isn't your Mother, sometimes you have to treat him like a bit of a geysa, sometimes with total respect if they're older (because chances are they'll have 4 impudent kids giving him crap all day so he'll want professionalism from you)
The company I work for (large, national insurance company with over 50,000 users) has a "strong" password policy that is enforced by the system. A password for our domain must be a minimum of 8 characters with a mix of upper and lower case letters plus numbers. Password changes are forced every 2 months, and a previously used password is not able to be reused for the next dozen password changes.
Dude, hate to break it to you, but with difficult passwords like that I'd estimate that 95% of people you admin have their password written down in 10 places including on post-it notes stuck to their monitors.
Slashdot Mirror
My advice: If when you graduate you don't get a job with a big company (e.g. BT) then do a PhD. Take a year out at your discretion.
There are loads of people with betamax players that put forward the same argument as you. If the record companies suddenly create CDs which won't run in CD-Recorders and put a warning on the front saying so, there's nothing anyone can do about it. Yup you heard me, recording companies can FUBAR all CD drives worldwide if they want and replace them with giga-minidiscs or something.
Off the top of my head the TOC track can be highly reflective to reflect laser energy back into the laser, a high power laser used for CDR writing would have a larger gas chamber for the extra power, causing a different reflection characteristic back to the CD than a cheapo laser, that CDR laser reflection frequency would blow the TOC, by making it go non-reflective if you're reading it in a CD recorder. This is a total hypothesis off the top of my head at 2 in the morning whilst watching lala land on mtv, the kills the frills, kill a million braincells, cool.
Yeah, the ads kept changing so it never worked and/or was too ambiguous to actually do it. I always got wrong username or password, except for once which was some guy that put username and password on his website just 'cos he had a big ego and wanted everyone to see his site. Audiogalaxy was supposed to exclude these, but nobody really bothered blowing the whistle. They didn't have a cgi form for submitting rogue FTP servers. *sigh* I'm not gonna reveal my email address to them, not then, and to nobody except close friends now.
Ferrari is simple - you buy raw materials, process them, construct a product using skilled labour, then sell it at market price ($500,000 dollars or whatever). *BUT* what if Ferrari had a patent on "Using a circular object between an elevated platform and the ground, which is driven thus propelling the platform". Then they'll have a patent on the car, so they'll be the only car company in the world. Ford, GM and friends would be illegal. With the mickey mouse precedents now, this patent on the wheel would be valid for 140 years.
I am glad to see you aren't in presumption of ambivelence.It's possible to construct A/D converters using BC108 signal transistors if necessary, you don't need ASIC, but it'll be illegal to retrofit a TV or CDROM device with it under this law. Just like DVD drives can be chipped, the industry knows that, but that didn't stop them from implementing it. They know the vast majority of people won't bother and will just pay up
Please everyone, they won't be so anal as to put A/D DRM into every single A/D converter, just the ones that threaten their revenue stream. The dinosaurs also tried to resist evolution.
The (RI|MP)AA are trying to set a precedent here that they can corner a market and then litigate more advanced technology out of business or cripple it.
If they succeed, then this precedent will be used in future by the oil companies to litigate advanced vehicle technology out of business (electric vehicles, hybrid vehicles, hydrogen-powered vehicles). They will say that millions of workers employed by Shell/Amoco will be fired, massive supertankers would have to be scrapped. The entire distribution network would be crippled (like record companies' physical CD distribution network). Shell owns the drill platform and therefore how you use *our* oil is *our* business, where are you going? Why? What's your address? What's your job? If you have a Ford pay $10 per gallon, if you have a GM pay $5 per gallon. Result: All major cities underwater, global warming, locusts everywhere, water shortages, harsher weather.
Worse, Amoco could make their gas incompatible with Shell, your car would either work with one or the other. Shell knows they're losing business by not doing this, but it's their oil, their product so surely they can do whatever they want with it. Music actually belonging to the record companies doesn't seem so cool now does it?
The whole reason the free market system was invented was because consumers requested products, and companies would provide these products for a fee. PERIOD. The fact that they're ignoring the Internet as a more efficient distribution network is an abomination to the free market system. RI|MPAA are therefore anti-capitalist organisation and should be banned by the WTO, especially in the light of the DVD region system which is a non-WTO-ratified barrier to free trade, and is thus discriminatory. As a citizen I demand this product as copyable mp3, it's the companies' job to supply me with it, not stick it in jail.
This is indicative of the whole general state of America. WE ARE THE CONSUMERS, how dare they try to screw us (apart from financially).
An adversary can probably interfere with news broadcasts by inserting interference that would lock out the affected channels from viewing, creating widespread panic.
MPAA knows the game plan all too well. One day you'll pick up the phone to your senator one time too many and he'll send you to jail for harrassment. The MPAA knows this and so will keep hammering at the legislators' door with variations on the CDBPPTA until this passes. Same as sysadmins gets pissed when one user calls for tech support 5 times a day. People bitch about that guy that has trouble inserting a floppy disk so calls tech support all the time, that's exactly how all our congressmen will look at us IT people and EFF if we constantly bug them.
We've already got a taste of MPAA tactics with how they treat Kazaa, only unorthodox and semi-legal tactics succeed (like selling a system under litigation for the purpose of evading this litigation).
... and I'd hate it when the logon was finally succesful, but then by habit I had already clicked the mouse again - pasting in the logon request again, which would log me off first, *sigh*, so I'd have to keep going for another half hour.
Without knowing more, I can't give you a thesis, but if you have a stable network topology and certain people only need a certain view of the data, and these people only access it from certain IP addresses, you can do compartmentalisation. If you want something heavyweight with the best protection, put the data on a seperate subnet (accessible via a Cisco 6500 or something or possibly a linux ipchains) in effect firewalling it. Set the rules. This will set the base for further protection by writing a proprietary app to encrypt the data at source, and decrypt at the end, perhaps using kerberos, although since only your users access the data, you can use a proprietary app using strong encryption and the user's private key compiled inline in the code, although that would mean that user-level breaches would become serious as if they steal your bespoke app they can find the private key inside it, although this would only break the datastream's security if he figures out which IP addresses IP chains will let through to the system. Or perhaps you have a clustered system storing this important data making things complicated. Of course if you need bidirectional data transfer this complicates matters. Instead of a full app to handle everything, you can just write a client script to set up port forwarding automatically over ssh and the client software would use this tunnel. Without more info to narrow the possibilities I'm afraid I'm gonna have to leave it there and watch Airwolf.
There's nothing that any Government as a whole would be more scared of than endagerment of the public. So the introduction of automobiles was delayed. Is P2P worldwide filesharing in the same predicament?
These were the days when CuteFTP was unstable and kept crashing. Ahhhh, those were the days when song-swapping was personal. Some people with me got kicked from the FTP server in mid-download, got pissed off and ping-flooded the FTP server for 10 minutes. It was all so personal.
Usually the FTP servers would be busy with >50 simultaneous users so you;d have to hammer the FTP server with a 3-second wait timeout. Sometimes I'd use my own PC to hammer, and I'd ssh into my friend's linux box and use it's ftp to hammer also, and then use the first one to connect. Trouble is if you hammered to hard they'd ban your IP address for 15 minutes to 1 day. With DHCP just hang up and dial up again to get a new IP address. These were the days when a static IP address (like with ADSL) was something to be avoided at all costs.
Sometimes I reminisce about the good old days by downloading from Kazaa and opening up an MSDOS prompt and typing netstat to get the reverse-DNS, makes things feel a little personal again for a few seconds. But I suppose old-timers like me with the personal touch aren't wanted any more *sniff sniff*.
So when you kids point and double-click on Kazaa, remember us, the pioneers who did things the hard way.
Score:5 Historic, pre-P2P era dinosaur, modded up out of feeling of respect for your elders, when everything wasn't as automatic as Kazaa
Copyright laws can change tomorrow. Some artists and all record companies will want 100% control of their product - the DVD regions system is racist as it discriminates against people in other countries and thus inhibits free trade, violating WTO regulations, even if you're willing to pay full price for the product, they still want to control who buys it, where and when. This shows me there's no middle ground with these people - it's CDBPPTA or nothing, and they'll use the most expensive lawyers available. The outcome of legal action is a combination of Poker (cheaper to fold instead of raise, even if your own hand is better), luck and who's right and wrong.
Everybody that I know that went to court "on principle" has lost their house, car and life savings as a result, despite the fact they were right. Losing everything to lawyer fees when you are 60 years old is NOT funny. This system is just plain wrong.
I wish binLaden smashed planes into the Supreme court instead of WTC. Amen.
Honestly, when I look at Sharia law I can see why the Middle East supports it, looked at objectively it as a whole at least gives the impression of love and caring for the average citizen, together with the accruing of large amounts of money being an abominational and disgusting act of selfishness. I dunno man, I can't help feeling that there's something there that we've lost.
Sharman networks should move to Dubai in UAE, Towry Law is based there and it's a beautiful place, everybody has a Mercedes. The servers can be housed in Saudi Arabia, they have no IP laws there, but they'll need one big air conditioning unit. Why don't people locate server farms in Greenland, Norway or in the Arctic? No air conditioning costs whatsoever, just a few fans.
Cheapest model in IT:
Servers in cold countries (e.g. Norway)
Coders in cheap countries (e.g. India, China)
Consumers in rich countries (e.g. America)
People only care about security when there's a breach, if you force them to put security into everyday stuff they'll just regard it as an impediment to business. Heck most people don't even lock their car doors and have a laptop on the passeneger seat.
I take it that your data has to be open to everyone on your network, no limitations (including therefore anyone that can hack your network).
OK, balloon's gone up. Let's quit bitchin' and get that open source Russian Kazaa client and build an open source Kazaa server, maybe merge it with Gnutella or Freenet. Kazaa is closer to true P2P than Napster was. I think in the meantime a quick change in your HOSTS file stating Kazaa's login server IP address is in Russia someplace.
Oh man, great for pulling up, but how about pulling down, sudden descent, you'll get a haemorrage. You can't force blood out of the brain without fracturing your skull in some way.
I don't get why the air force are researching G-forces. Everyone just uses missiles, phoenixes, exocets and the like. The US has so much money that US pilots should just be told to turn tail and eject over friendly territory if they run out of missiles. The Mig-29 has combined InfraRed+Radar automatically targetted guns, there is no way some US flyboy is going to be able to outmanouver that, no matter how many Top Gun movies they spew out. So what's the point teaching violent manouvers?
Plus if you play Mig-29 you'll notice the targetting system locks immediately, whereas the F-14, , F-16 F/A-18 and friends go beep beep beep beep for like 10 minutes.
In summary, there's too much automation making us Borg-like, having the key to the company's most impoartant data makes system administration feel exciting and important, I like it.
As for tunnelling, ssh with port forwarding suits my apps fine, I don't need any of this fancy new stuff like GED or JED thru IPSEC or whatever although I might look at it sometime. Should pre-empt those buffer overflows now.... Hmmmm....