They're claiming that the commercial launch around 2010 will be able to make 52 lauches a year, meaning that they expect to be able to turn around one of these babies in a week from landing...
That will require some interesting reliability stats on the exposed surfaces...
Then I open up IE, shut my eyes, and run screaming from the room(usually right into the closed door.) Simple effects and a basic CSS driven menu system leave IE page renders in ruins. I then have to spend more timing trying to get it to work in IE then I spent writing the entire page.
Have you tried/considered using something like Dean Edwards's IE7 javascript library? It was designed to alleviate the scary situation you describe there... If you have tried it, what makes you not use it?
From the IE7 overview:
The lightweight script is a single-line inclusion in your HTML/XML document. No alteration of your original markup is necessary. Neither do you have to alter your CSS.
Which MySpace are you talking about? PlanetMirror's offering is the only thing I know of called MySpace which offers file hosting (100MB these days). I don't know if it's in any way related to what you're thinking about, but today's MySpace is in no way related to any file-hosting service I've ever heard of... Maybe the domain got recycled?
If you're happy enough to use something marked experimental, psi now has support for libjingle (Google Talk voice) in cvs (uhh, darcs). It's disabled by default, but it was simple enough to compile... A little sensitive with versions of stuff, but it seems to do the trick...
Also, Tapioca VoIP apparently has some support for Gtalk and libjingle...
in the real world the data you send does not has many possible outcomes and many of those very few are legitimate. If you try 600 times and you get the text:
oyioa2dsi5fuso nbvsouydgfvs4f attack at dawn 90s8 asd0shdks... etc
I think it's pretty clear which is the correct messae
The way that one-time-pads work, if "attack at dawn" is a possible result, then so are:
attack at dusk eat more veges Where's Waldo? hoist the sail What you say!! Zerowing Rules Do you get it? search google. Cryptonomicon. This is ending Game is ending Fire is ending Heat is ending What is ending Iraq is ending USAF is ending It isnt ending
Now, which one was the correct decryption?
The reason a one-time-pad is "completely unbreakable", even resisting brute-force cracking, is that every possible string of length X is a valid decryption result for some key. So without knowing the "correct" key, it is impossible to recover any part of the plaintext. The four character ciphertext "sjrw" could decrypt to any of the following strings, even if you found my working paper and were able to deduce that the first two letters were "go":
I thought you were saying that a every company should hire people to build their own implementations, but I think what you're saying is that *when* they make their own implementations, only security experts should be allowed to do it (or, they should at least be heavily involved). That makes much more sense.
I think Lord Ender is saying something slightly stronger than that... The way I read it, his point is that even when a company is using the well-known implementations of the algorithms, they should have a security expert involved in the design of how the crypto is used in the product... Like not just having your developers storing MD5 hashed passwords in the db, but having someone knowledgable to ensure that they use salted hashes...
As Schneier points out in his essay on security pitfalls in cryptography, "... just as it's possible to build a weak structure using strong materials, it's possible to build a weak cryptographic system using strong algorithms and protocols...." Thus, we need security experts to ensure we don't undermine the strength of our system with weak structures...
The simplest example of this is the escalator problem: economists had a hard time figuring out why anybody would walk on an escalator - their cost-benefit analysis didn't work out.
This comment intrigued me... I tried searching it down, and the only relevant hits were references to this Slate article about the economics of walking on stairs vs escalators. Steven Landsburg is an interesting guy, and has some nice articles on the pricing of coffee, popcorn and free internet... I'm surprised I hadn't come across this "Everyday Economics" secion before... Thanks for getting me onto them.
A side point, though; this article doesn't seem to be what you're mentioning, or at least, it seems to arrive at the opposite conclusion - that people do use a standard cost-benefit model, only with different benefits... Is there another reference which you were thinking of?
It's the one thing that made me install the adblock extension. I don't care if you're tracking me. I do care if you're ruining my browsing experience.
Ditto... For me it wasn't so much the delay, as it was the fact that if you selectively allow the slashdot authentication cookies, then block their urchin cookies, it forcably logs you out on all following pages... Most annoying for my slashdot browsing experience... (Yes, I did just say that my slashdot addiction made me block google analytics.)
Interestingly, though, some sites (sourceforge, for example) appear to have started hosting their urchin.js file locally... I don't know what effect that has on the system...
Realtime Rendering - the website associated with the book of the same name. I never really made it through the book, but the web page has an excellent collection of links to other sources of information....
... according to the chart, a #10 (6mm^2) wire (which, while by A/C standards is huge, isn't really that big at all) will get you 216 feet at 10 amps.
You might note that that applies at 120 Volts, not 12V - at the lower voltage your #10 gets you a whopping 22 feet. For 200 feet at 12V you need 1/0 gauge wire, which is ten times the cross-section, and three-and-a-half times the diameter...
Again, not huge in real-world terms, but bigger than you imagine...
I think the biggest pitfall is making sure you don't deliver too much (or little) current to the devices you plug in. It would be very bad to deliver 10 amps to a device which is expecting 300 milliamps, or 300mA to a device expecting 2A.
And thus your power source would be a fixed-voltage source, not a fixed current one. Technically, only raw components need to be protected from over-current situations - any (properly-designed) circuit should account for the max current going across any component within it, and prevent it from going overspec. Consider that most wall-warts do not limit the current being drawn from it - draw enough current, and you'll simply make the adapter overheat and melt down.
You don't need IPv6 to have global reachability for VoIP and P2P. Teredo actually proves, that you can contact anyone with a private address if you really want. You just need some form of global addressing...... which is what IPv6 provides. The problem with IPv4/NAT is that there is no global addressing scheme. What scheme would you suggest?
Skype and other P2P networks that work with private addresses also prove, that it is easy to contact anyone globally, know matter how private addressing they use.
Skype and P2P work by responding to people behind NATs who contact them first. It does not enable to contact people behind NATs who have not connected to them. They get messages through because the software sits there contacting some central host over and over again, asking "Any calls for me?" repeatedly.
Skype and P2P only work behind NAT because they are able to contact non-NATed machines. Their whole success depends on a significant amount of bandwidth being available on non-NAT addresses, which they can piggyback off. What's the point in bandwidth-economical distributed protocols, if you have to route all the connections through non-NAT choke-points?
Re-checking your security infrastructure (firewalls, IDS, whatever) for IPv6, and for half a dozen clever tunneling tricks is something your security guys will NEVER do.
Because people never use clever tunneling tricks over IPv4, right?
If you wanted to be more forceful, Windows is vulnerable to viruses and viruses can install software - including TCP/IP stacks. (Mind you, I wouldn't recommend doing the latter, but technically it would be possible and it would defeat the laziness issue.)
Actually, you just gave me an idea... If the contents of my inbox are anything to go by, most of these home users cannot resist forwarding on cutesy crap that they receive... So make a fancy web-game-thingy with cute sounds and dancing kittens or something, and have an ActiveX control on the page which activates IPv6 (they'll click through the dialog boxes without consideration, if past behaviour is any indication...)
As people forward on the email (or post the link in their blogs, or put it on their MySpace page, etc) they will slowly activate the whole (Windows-using) world for IPv6!
"The survey found that 93% of parents were in favour of filtering out pornography available on the home computer, let alone those in public buildings. The survey also drew a link between prolonged exposure to this material and tolerance of sexual aggression," Senator Barnett said.
Could one assume then, that 93% of parents are therefore using some form of filtering currently available to achieve that goal?
1.... provided that you conspicuously and appropriately publish on each copy an appropriate copyright notice...
Actually, having just read through that in order to quote it, I've realised that no-where does it REQUIRE that the "appropriate copyright notice" include the original copyright owner's details... so you're probably right about the requirement being "iffy". But I don't believe that the CC-BY attribution clause is in the same line as the "obnoxious" BSD Advertising clause...
Hmm... I don't have a windows machine handy at the moment, but I believe that it's something like "Shift-F10, N, Enter", or something similar... But yeah, you're basically right...
Neither was I until I read Joel's take on it... After that, the correct use of Hungarian Notation seems to be a much better idea... I can also see how pointless the dark-side of Hungarian is...
I think there should be more style-guides emphasizing the appropriate use of Hungarian...
Slashdot is not a normal news site. Never has been.
I especially liked the way you phrased it to The Screen Savers last year...
... You can go to CNN and see very straight-laced, spell-checked, fact-checked summary of the day's events. Or you can go somewhere like Slashdot...
(Yeah, selective quoting is fun... But I mean it with admiration, really.:-))
Since we have your ear, Rob, I'd probably like to make some insightful comment about the kinds of things we as a community would appreciate seeing... To be honest, I don't think that I could achieve that, but at least, I'll make an inane comment, and we'll see if anyone else feels like interjecting...
You've said elsewhere in this thread that you don't have time to comment here because you guys are so busy with running the site... I know that some of us would be happy with a couple fewer stories per day, in exchange from a few comments from you guys... It makes a world of difference when you can see that those at the top of the pile still act and feel like the rest of us...
(PS, to all those actually care: yes, that is the same article as in my.sig, and the paraphrasing there was done to fit in the 120 char limit, as well as to target the haters who complain about dupes, spelling and grammar.)
They're claiming that the commercial launch around 2010 will be able to make 52 lauches a year, meaning that they expect to be able to turn around one of these babies in a week from landing...
That will require some interesting reliability stats on the exposed surfaces...
From the IE7 overview:
Never mind, I am an idiot... (memo to self: do research before submitting comment...)
The old Myspace.com closed it's doors back in 2001. The new MySpace beast is unrelated to that old site. (Google link doesn't require soul-sucking registration...)
Which MySpace are you talking about? PlanetMirror's offering is the only thing I know of called MySpace which offers file hosting (100MB these days). I don't know if it's in any way related to what you're thinking about, but today's MySpace is in no way related to any file-hosting service I've ever heard of... Maybe the domain got recycled?
If you're happy enough to use something marked experimental, psi now has support for libjingle (Google Talk voice) in cvs (uhh, darcs). It's disabled by default, but it was simple enough to compile... A little sensitive with versions of stuff, but it seems to do the trick...
Also, Tapioca VoIP apparently has some support for Gtalk and libjingle...
The way that one-time-pads work, if "attack at dawn" is a possible result, then so are:
attack at dusk
eat more veges
Where's Waldo?
hoist the sail
What you say!!
Zerowing Rules
Do you get it?
search google.
Cryptonomicon.
This is ending
Game is ending
Fire is ending
Heat is ending
What is ending
Iraq is ending
USAF is ending
It isnt ending
Now, which one was the correct decryption?
The reason a one-time-pad is "completely unbreakable", even resisting brute-force cracking, is that every possible string of length X is a valid decryption result for some key. So without knowing the "correct" key, it is impossible to recover any part of the plaintext. The four character ciphertext "sjrw" could decrypt to any of the following strings, even if you found my working paper and were able to deduce that the first two letters were "go":
golf, gods, gore, gold, gone, gout, goal, goad, goat, gosh, goog, go.., go??
No plaintext has higher probability than any other of being correct...
That sounds like the first part of Wright's First Law of Gender Discernment:
However, you are ignoring Faydra's Exception to the First Law of Gender Discernment:
HTH. HAND.
I think Lord Ender is saying something slightly stronger than that... The way I read it, his point is that even when a company is using the well-known implementations of the algorithms, they should have a security expert involved in the design of how the crypto is used in the product... Like not just having your developers storing MD5 hashed passwords in the db, but having someone knowledgable to ensure that they use salted hashes...
As Schneier points out in his essay on security pitfalls in cryptography, "... just as it's possible to build a weak structure using strong materials, it's possible to build a weak cryptographic system using strong algorithms and protocols...." Thus, we need security experts to ensure we don't undermine the strength of our system with weak structures...
The simplest example of this is the escalator problem: economists had a hard time figuring out why anybody would walk on an escalator - their cost-benefit analysis didn't work out.
This comment intrigued me... I tried searching it down, and the only relevant hits were references to this Slate article about the economics of walking on stairs vs escalators. Steven Landsburg is an interesting guy, and has some nice articles on the pricing of coffee, popcorn and free internet... I'm surprised I hadn't come across this "Everyday Economics" secion before... Thanks for getting me onto them.
A side point, though; this article doesn't seem to be what you're mentioning, or at least, it seems to arrive at the opposite conclusion - that people do use a standard cost-benefit model, only with different benefits... Is there another reference which you were thinking of?
It's the one thing that made me install the adblock extension. I don't care if you're tracking me. I do care if you're ruining my browsing experience.
Ditto... For me it wasn't so much the delay, as it was the fact that if you selectively allow the slashdot authentication cookies, then block their urchin cookies, it forcably logs you out on all following pages... Most annoying for my slashdot browsing experience... (Yes, I did just say that my slashdot addiction made me block google analytics.)
Interestingly, though, some sites (sourceforge, for example) appear to have started hosting their urchin.js file locally... I don't know what effect that has on the system...
It sounds like you're thinking of the Underhanded C Contest... The 2005 results look something like what you're describing... :-)
HTH. Cheers.
Nevertheless, Here are some starters:
And if you like the library, the Dewey Decimal codes for game programming are something like 005.1 and 794.8
HTH. Cheers.
2400x1586 JPEG of Z
Ummm.... How about these for categories? http://directory.google.com/
... according to the chart, a #10 (6mm^2) wire (which, while by A/C standards is huge, isn't really that big at all) will get you 216 feet at 10 amps.
You might note that that applies at 120 Volts, not 12V - at the lower voltage your #10 gets you a whopping 22 feet. For 200 feet at 12V you need 1/0 gauge wire, which is ten times the cross-section, and three-and-a-half times the diameter...
Again, not huge in real-world terms, but bigger than you imagine...
I think the biggest pitfall is making sure you don't deliver too much (or little) current to the devices you plug in. It would be very bad to deliver 10 amps to a device which is expecting 300 milliamps, or 300mA to a device expecting 2A.
And thus your power source would be a fixed-voltage source, not a fixed current one. Technically, only raw components need to be protected from over-current situations - any (properly-designed) circuit should account for the max current going across any component within it, and prevent it from going overspec. Consider that most wall-warts do not limit the current being drawn from it - draw enough current, and you'll simply make the adapter overheat and melt down.
You don't need IPv6 to have global reachability for VoIP and P2P. Teredo actually proves, that you can contact anyone with a private address if you really want. You just need some form of global addressing... ... which is what IPv6 provides. The problem with IPv4/NAT is that there is no global addressing scheme. What scheme would you suggest?
Skype and other P2P networks that work with private addresses also prove, that it is easy to contact anyone globally, know matter how private addressing they use.
Skype and P2P work by responding to people behind NATs who contact them first. It does not enable to contact people behind NATs who have not connected to them. They get messages through because the software sits there contacting some central host over and over again, asking "Any calls for me?" repeatedly.
Skype and P2P only work behind NAT because they are able to contact non-NATed machines. Their whole success depends on a significant amount of bandwidth being available on non-NAT addresses, which they can piggyback off. What's the point in bandwidth-economical distributed protocols, if you have to route all the connections through non-NAT choke-points?
Re-checking your security infrastructure (firewalls, IDS, whatever) for IPv6, and for half a dozen clever tunneling tricks is something your security guys will NEVER do.
Because people never use clever tunneling tricks over IPv4, right?
As people forward on the email (or post the link in their blogs, or put it on their MySpace page, etc) they will slowly activate the whole (Windows-using) world for IPv6!
Mwahahahah-ummm, yeah. *innocent whistle*
If I read it right, Wine didn't finish 15 of the tests, and Windows XP didn't finish 3, leading to 18 "no-comparsion" blue results...
But yeah - that Wine should crash out on a DivX compression or a Web Page Rendering(??!!?) test is
(assuming ... a common framerate)
Ah, but NTSC and PAL have differing framerates; NTSC is 30 fps, while PAL is 25...
All is not lost, however... Telecine techniques could be used to effect the matchup...
Could one assume then, that 93% of parents are therefore using some form of filtering currently available to achieve that goal?
Also: It appears to me (IANAL, etc...) that the attribution requirement of the CC-BY-SA is not fundamentally different from the GPL's
Actually, having just read through that in order to quote it, I've realised that no-where does it REQUIRE that the "appropriate copyright notice" include the original copyright owner's details... so you're probably right about the requirement being "iffy". But I don't believe that the CC-BY attribution clause is in the same line as the "obnoxious" BSD Advertising clause...
Just guessing, but I suppose 1.2 GHz/core * 8 cores/chip = 9.6 GHz/chip in some marketing exec's mind, or somesuch... :-S
Hmm... I don't have a windows machine handy at the moment, but I believe that it's something like "Shift-F10, N, Enter", or something similar... But yeah, you're basically right...
I'm not a friend of a hungarian notation.
Neither was I until I read Joel's take on it... After that, the correct use of Hungarian Notation seems to be a much better idea... I can also see how pointless the dark-side of Hungarian is...
I think there should be more style-guides emphasizing the appropriate use of Hungarian...
I especially liked the way you phrased it to The Screen Savers last year...
(Yeah, selective quoting is fun... But I mean it with admiration, really.
Since we have your ear, Rob, I'd probably like to make some insightful comment about the kinds of things we as a community would appreciate seeing... To be honest, I don't think that I could achieve that, but at least, I'll make an inane comment, and we'll see if anyone else feels like interjecting...
You've said elsewhere in this thread that you don't have time to comment here because you guys are so busy with running the site... I know that some of us would be happy with a couple fewer stories per day, in exchange from a few comments from you guys... It makes a world of difference when you can see that those at the top of the pile still act and feel like the rest of us...
(PS, to all those actually care: yes, that is the same article as in my