Since the record with liquid CO2 AFAIK is less than 4GHz, I somehow doubt it. Otherwise an interesting idea of moving your hot computing equipment to a cold environment and access it through the internet.
Maybe that's the reason behind using a 3-key combo??
Of course the reason to use a 3-key combination is to avoid hitting it by accident. However keyboards with a single Ctrl+Alt+Delete key does exist. It is fortunately not located in a place where it is that easilly hit by accident. The one I saw had it located in the upper right corner of the keyboard, to the right of the three leds.
We often see viruses and spam being send with spoofed sender address, and some spammers are clever enough to even use sender addresses from the same domain, which would be more likely to be on the whitelist. It would be nice to combine the whitelist with signature checking, if you know the senders public key, you simply filter anything unsigned.
Is it possible to encrypt the Crypto-Gram article with Schneier's private key
Then it would not be an encryption but a signature. A poorly implemented signature that is. I'd rather use a more decent signature implementation like hashing the message and attaching a signature of the hash. I think signatures is one of the tools we can use against spam. In particular spam with forged sender address.
Indeed, that was also my first thought. The graphs I have seen over the activity for the first minutes looked like exponential growth with a doubling time of less than one minute. That would give at most half an hour between the very first infection and worldwide spread. If Symantec notified their customers hours before, that would be before the worm was released. Of course it is theoretically possible, that the author notified Symantec prior to release.
show other businesses that you can't make money developing software for Linux because someone will undercut you with a Free solution.
I don't see why developing the software for Linux would that anymore likely than developing the software for another platform. If you developed the software only for Windows, and people really wanted it for Linux, they would have more reason to implement it themselves than if the product have been implemented for Linux in the first place.
Instead of only asking what developers can make from this. Ask what users can make from this. If users see that when somebody makes a good product, somebody makes an even better free product. Go figure.
Not that I believe Plex86/bochs is yet as good as VMWare, but I see no reason why it shouldn't become so in the future. The IA32 architecture was not designed with easy virtualization in mind, this gives you problems that plex86 as well as VMWare has equal chances of defeating.
The major drawback of an open source virtualization is that it might be easier for Microsoft to find flaws they can use to make their OS incompatible with the virtualization. (Not that I see any reason why Microsoft would want to do that, except from their usual habit of course.)
Last time I heard the Swedish Chef from the Muppet Show, it did not at all sound like he spoke Swedish. And the language used on those Opera screenshots is not Swedish either.
so coding the equivalent of an FTP client's "mget" command becomes a new job for every site.
Not if you do it right the first time. Surely directory listnings generated by different servers looks different, but all of those I have seen had one thing in common: They contains links to the files in the directory. So to produce a directory listning from the HTML file is not really a problem if you only need filenames. Just parse the HTML documents and find all links. Remove those links not pointing to files in the directory in question, and remove doubles if any. And once you actually get the files, be prepared to handle nonexisting files correctly.
you can't spin a CD much faster than 52x without it disintegrating
The last article I read about the subject said that a scratched CD could break at an even smaller speed. And splinters comming out the front of the drive at 48x speed can be dangerous.
Kenwood has made faster CDROM drives using multiple lasers to read
That certainly sounds like a nice idea. To achieve anything they must of course read different positions. For sequential reads that would require reading into a buffer fir a few rounds and then moving the head outwards. The seeking is not free, so doubling the number of lasers does not double the sequential read speed. Multiple lasers could however have other nice usages. Imagine the improvement they could give you on random access to a CDROM. Or simultaneous audio playback and reading of CDROM on a media with tracks of both types, you just dedicate one laser for CDDA when doing this. Or imagine riping all the tracks on a CDDA with different lasers. Multilaser recording is however something I don't exepct to see anytime soon. But maybe you could read the already recorded part with one laser while another was still burning.
The HTTP protocol may or may not recommend DIR listings by default
No, the HTTP protocol does not even specify the concept of a directory listning. Some servers can generate an HTML file from the directory listning, but that is all up to the server, it can generate that file as it likes or even just serve an error.
That was also what I thought until I read section 9.6 in the HTTP/1.0 specification about the PUT method.
If that method is not intended for uploading files, what is the purpose? Of course many HTTP servers does not allow you to use that method.
That is hardly surprising, in fact that is what I would expect. I don't know the details of the FTP protocol, but I know The HTTP protocol pretty well, and it is not possible to do anything much faster than HTTP. As soon as the HTTP headers has been sent, the file is sent raw over the TCP connection, and it can even be gzipped while in transit if client and server supports that. HTTP is optimal for large files, but since I do not know the details of FTP it could be as good as HTTP, but it cannot be any better.
The fact that FTP is tricky to get working through firewall and/or nat is my main reason to prefer HTTP. Of course it might be, that you can find an FTP client or server with some features you like, but I believe it could all be done at least as good over HTTP. (Except perhaps from getting a directory listning from the server)
It can't if the only copy of the EULA is inside the shrink-wrapped box.
Reminds me of the OS/2 box on which there was a note saying:
IMPORTANT MESSAGE
This softwarepackage is delivered under
the "Terms of use", which
are enclosed in the box. These terms must
be read carefully before
you open the box.
I have seen another oddity. I frequently do a search for more own name on google (with quotes). Going through the pages I have found that another person has the same name, but a lastname more than me. So I do another search for my own name and minus the full name on the other guy I found, and then get ten hits more. I have repeated this test and seen consistent results. Every time it was two searches done right after each other from the same computer.
Loans introduce money that doesn't exist onto the market. Then people go and make money off of it, and pay back the loans. Now there's new money on the market.
There is a difference between making money and making money. If you do a good job and make a lot of money to pay back your loans, somebody has got to pay you those money, so all in all the amount of money in the market would end up being the same. On the other hand if you were making your money yourself, it would be illegal.
does any other manufacturer use the PS/2 keyboard cord?
AFAIK it is possible to use PS/2 keyboards on some Amiga models. And our NCD boxes (X-terminals) also use PS/2 keyboard and mouse. One of our happens to have a PS/2 keyboard from SGI, though I don't know if that one is identical to the keyboards connected to the SGI. I have noticed one functional difference on the keybards connected to the SGI though they look exactly like a standard PC keyboard. The software can see when the Pause/Break key is released, normally a PS/2 keyboard sends the key release code for that key already when it is being pressed.
Someone could just probably figure out how money is "stored" and just keep on replenishing. Note the card is anonymous.
There might be a feature making the card not 100% anonymous, but such that it will be anonymous only if you do not reuse the same money again. Of course that introduces another problem if you loose the card.
I wouldn't be surprised to see illegal spammers using these lists as a source for their spamming.
Neither would I, in fact I was wondering how to get a test address on the list just to see how much spam it would get.
However there might be ways to deal with this situation. Imagine that 300 very subtle test addresses were created, and every version of the list would include a different subset with 200 of those. Now from the subset of the addresses being spammed you will know who abused the list.
You know as well as I do that User-Agent strings are optional
The exact words from the HTTP/1.1 specification are: User agents SHOULD include this field with requests. So it is indeed optional, but you are recomended to include it. Of course sites should give the same answers no matter what the user agent is. But a lot of sites does give different results. For example google refuses to send some pages to wget.
The most extreme misuse I have seen was however grc which appeared to block my IP in their firewall when I sent an http request without user-agent header. (I got a lot of IPs blocked before I found the cause.)
You really have no sense of humour whatsoever do you?
Of course I do. You didn't notice I was joking????
won't crash of overheating at 36Ghz.
Since the record with liquid CO2 AFAIK is less than 4GHz, I somehow doubt it. Otherwise an interesting idea of moving your hot computing equipment to a cold environment and access it through the internet.
Maybe that's the reason behind using a 3-key combo??
Of course the reason to use a 3-key combination is to avoid hitting it by accident. However keyboards with a single Ctrl+Alt+Delete key does exist. It is fortunately not located in a place where it is that easilly hit by accident. The one I saw had it located in the upper right corner of the keyboard, to the right of the three leds.
Unfortunately, I have executed a virus
We often see viruses and spam being send with spoofed sender address, and some spammers are clever enough to even use sender addresses from the same domain, which would be more likely to be on the whitelist. It would be nice to combine the whitelist with signature checking, if you know the senders public key, you simply filter anything unsigned.
Is it possible to encrypt the Crypto-Gram article with Schneier's private key
Then it would not be an encryption but a signature. A poorly implemented signature that is. I'd rather use a more decent signature implementation like hashing the message and attaching a signature of the hash. I think signatures is one of the tools we can use against spam. In particular spam with forged sender address.
I get about 500 a day (across 12 accounts)
I once got 36 million in 4 days. The spammer thought I had an open relay... I didn't. I hope the intended recipients do not miss their spam.
Less then 5 minutes later we're seeing 100 or 1000x the usual traffic.
But that is not the way it happened, they say, they knew about it before.
Unless they helped the Korean program the thing.
Indeed, that was also my first thought. The graphs I have seen over the activity for the first minutes looked like exponential growth with a doubling time of less than one minute. That would give at most half an hour between the very first infection and worldwide spread. If Symantec notified their customers hours before, that would be before the worm was released. Of course it is theoretically possible, that the author notified Symantec prior to release.
The virtual machine monitor itself must run on the bare hardware
Sounds like a design flaw to me. But is it a flaw in the CPU, Linux, or VMWare?
show other businesses that you can't make money developing software for Linux because someone will undercut you with a Free solution.
I don't see why developing the software for Linux would that anymore likely than developing the software for another platform. If you developed the software only for Windows, and people really wanted it for Linux, they would have more reason to implement it themselves than if the product have been implemented for Linux in the first place.
Instead of only asking what developers can make from this. Ask what users can make from this. If users see that when somebody makes a good product, somebody makes an even better free product. Go figure.
Not that I believe Plex86/bochs is yet as good as VMWare, but I see no reason why it shouldn't become so in the future. The IA32 architecture was not designed with easy virtualization in mind, this gives you problems that plex86 as well as VMWare has equal chances of defeating.
The major drawback of an open source virtualization is that it might be easier for Microsoft to find flaws they can use to make their OS incompatible with the virtualization. (Not that I see any reason why Microsoft would want to do that, except from their usual habit of course.)
Which one is the real plex86?
Interesting question? And what happened to plex86.org?
Last time I heard the Swedish Chef from the Muppet Show, it did not at all sound like he spoke Swedish. And the language used on those Opera screenshots is not Swedish either.
so coding the equivalent of an FTP client's "mget" command becomes a new job for every site.
Not if you do it right the first time. Surely directory listnings generated by different servers looks different, but all of those I have seen had one thing in common: They contains links to the files in the directory. So to produce a directory listning from the HTML file is not really a problem if you only need filenames. Just parse the HTML documents and find all links. Remove those links not pointing to files in the directory in question, and remove doubles if any. And once you actually get the files, be prepared to handle nonexisting files correctly.
you can't spin a CD much faster than 52x without it disintegrating
The last article I read about the subject said that a scratched CD could break at an even smaller speed. And splinters comming out the front of the drive at 48x speed can be dangerous.
Kenwood has made faster CDROM drives using multiple lasers to read
That certainly sounds like a nice idea. To achieve anything they must of course read different positions. For sequential reads that would require reading into a buffer fir a few rounds and then moving the head outwards. The seeking is not free, so doubling the number of lasers does not double the sequential read speed. Multiple lasers could however have other nice usages. Imagine the improvement they could give you on random access to a CDROM. Or simultaneous audio playback and reading of CDROM on a media with tracks of both types, you just dedicate one laser for CDDA when doing this. Or imagine riping all the tracks on a CDDA with different lasers. Multilaser recording is however something I don't exepct to see anytime soon. But maybe you could read the already recorded part with one laser while another was still burning.
The HTTP protocol may or may not recommend DIR listings by default
No, the HTTP protocol does not even specify the concept of a directory listning. Some servers can generate an HTML file from the directory listning, but that is all up to the server, it can generate that file as it likes or even just serve an error.
download-only policies (ie. just like HTTP)
That was also what I thought until I read section 9.6 in the HTTP/1.0 specification about the PUT method. If that method is not intended for uploading files, what is the purpose? Of course many HTTP servers does not allow you to use that method.
HTTP for whatever reason goes faster
That is hardly surprising, in fact that is what I would expect. I don't know the details of the FTP protocol, but I know The HTTP protocol pretty well, and it is not possible to do anything much faster than HTTP. As soon as the HTTP headers has been sent, the file is sent raw over the TCP connection, and it can even be gzipped while in transit if client and server supports that. HTTP is optimal for large files, but since I do not know the details of FTP it could be as good as HTTP, but it cannot be any better.
The fact that FTP is tricky to get working through firewall and/or nat is my main reason to prefer HTTP. Of course it might be, that you can find an FTP client or server with some features you like, but I believe it could all be done at least as good over HTTP. (Except perhaps from getting a directory listning from the server)
Reminds me of the OS/2 box on which there was a note saying: Didn't they feel stupid when writing that?
Yeah, I'm twice as cool as I think I am.
If you think so, it just proves you are not cool at all. Because the only solution for c=2c happens to be c=0.
I have seen another oddity. I frequently do a search for more own name on google (with quotes). Going through the pages I have found that another person has the same name, but a lastname more than me. So I do another search for my own name and minus the full name on the other guy I found, and then get ten hits more. I have repeated this test and seen consistent results. Every time it was two searches done right after each other from the same computer.
Loans introduce money that doesn't exist onto the market. Then people go and make money off of it, and pay back the loans. Now there's new money on the market.
There is a difference between making money and making money. If you do a good job and make a lot of money to pay back your loans, somebody has got to pay you those money, so all in all the amount of money in the market would end up being the same. On the other hand if you were making your money yourself, it would be illegal.
does any other manufacturer use the PS/2 keyboard cord?
AFAIK it is possible to use PS/2 keyboards on some Amiga models. And our NCD boxes (X-terminals) also use PS/2 keyboard and mouse. One of our happens to have a PS/2 keyboard from SGI, though I don't know if that one is identical to the keyboards connected to the SGI. I have noticed one functional difference on the keybards connected to the SGI though they look exactly like a standard PC keyboard. The software can see when the Pause/Break key is released, normally a PS/2 keyboard sends the key release code for that key already when it is being pressed.
Someone could just probably figure out how money is "stored" and just keep on replenishing. Note the card is anonymous.
There might be a feature making the card not 100% anonymous, but such that it will be anonymous only if you do not reuse the same money again. Of course that introduces another problem if you loose the card.
I wouldn't be surprised to see illegal spammers using these lists as a source for their spamming.
Neither would I, in fact I was wondering how to get a test address on the list just to see how much spam it would get.
However there might be ways to deal with this situation. Imagine that 300 very subtle test addresses were created, and every version of the list would include a different subset with 200 of those. Now from the subset of the addresses being spammed you will know who abused the list.
You know as well as I do that User-Agent strings are optional
The exact words from the HTTP/1.1 specification are: User agents SHOULD include this field with requests. So it is indeed optional, but you are recomended to include it. Of course sites should give the same answers no matter what the user agent is. But a lot of sites does give different results. For example google refuses to send some pages to wget.
The most extreme misuse I have seen was however grc which appeared to block my IP in their firewall when I sent an http request without user-agent header. (I got a lot of IPs blocked before I found the cause.)