In metrics_service.cc it sends everything you do in the toolbar to static const char kMetricsURL[] =
"https://toolbarqueries.google.com/firefox/metrics/collect"; It collects everything and sends it to google servers, on startup and on shutdown.
// Ongoing log typically // contain very detailed records of user activities (ex: opened tab, closed // tab, fetched URL, maximized window, etc.) In addition, just before an // ongoing log is closed out, a call is made to gather memory statistics. Those // memory statistics are deposited into a histogram, and the log finalization // code is then called. In the finalization, a call to a Histogram server // acquires a list of all local histograms that have been flagged for upload // to the UMA server. // // When the browser shuts down, there will typically be a fragment of an ongoing // log that has not yet been transmitted. At shutdown time, that fragment // is closed (including snapshotting histograms), and converted to text. Note // that memory stats are not gathered during shutdown, as gathering *might* be // too time consuming. The textual representation of the fragment of the // ongoing log is then stored persistently as a string in the PrefServices, for // potential transmission during a future run of the product.
WHAT THE FUCK. Keep ff ftw. If your privacy means nothing to you just use Chrome.
At least here in the EU, I don't know it it is the same in the US, but every nokia phone I bought (now I own a 6111) has had the capability of installing j2me apps from the memory card, vie USB or simply by copying them from the PC to the mobile over bluetooth. If you are a developer and would like to hack your mobile, maybe you could have a look at the Freerunner?
... than the NVidia ones. Intel has Open Source drivers, NVidia not. So, NVidia, even if your cards are from 2010, and Intels are from 2006, I'll buy theirs because they work better and out of the box on my home desktops. When you will be ready to release open drivers for your hardware you can start to compare your products to that of your competitors. Even AMD understood that.
Just because you ask: I think some of us don't like a 12MB encrypted binary executable file running on our system that nobody except the creators know what it does.
This happened to me too about a week ago, and I was as surprised as you. I am from Italy, and I got about 200 mails a day, about 5 of them not spam. Now I get about 80/day. They are not vanished, but the volume of Spam mails dropped significantly the last week or so.
I agree with you that not allowing sales through third parties would be a bad move, but who knows, maybe they have a good reason we don't know about.
But how can they get away with not honoring tickets already sold?
I am sure they have something in their Terms of use that says they are entitled to rescind the contract... blablablayaddayadd. They also say that those third parties where "scraping [the ryanair portal] activity is unlawful and in breach of both Ryanair.com's copyright and terms of use," so they ryanair may be a pissi company, but those "third parties" screen scraping their website are not really better anyway. IMHO
"The real issue here in our view is that Ryanair is concerned about losing out on the sale of other services such as travel insurance, hotels, car hire and to stop this they want to prevent consumers from using comparison websites" I think they have a point. Maybe not a good one, but who are we to decide for them? They want customers to buy Ryanair Tickets from the Ryanair Website, and it's their right to "enforce" this IMHO. Cancelling the bookings may piss of some users, but it makes their point. I think this is a bit like direct linking an image from a website, when the creator explicitly asked not to do it. And on top of it lastminute.com, v-tours, tui and Opodo usually charge more for the Tickets than what they would normally cost: "Mr O'Leary also stressed that passengers were "getting stiffed" by these websites as their prices were invariably higher than those available on ryanair.com".
You can authenticate from a linux machine to AD using the MIT kerberos client. There are plenty of HOWTOs about how to configure that. Plus you have SSO for webapps, databases, ssh and about anything you can think of. And on top of that, the identity of the user is propagated to all the machines you Single Sign In with forwardable tickets, and though the tiers of mult-tier applications (Frontend -> Middletier -> Database - every tier knows who the user is). Kerberos is definitively the way to go in an intranet.
America is more and more becoming like China. I hope I am wrong, but since September 11 all the news I read is pointing towards it. My 2c. Good luck Americans.
I think tracking changes should not be the job of the editor, but of something else that is good at it, like svn. I would let people use the editor they like, and add this script on their local machine to track changes. They can then commit the changes to the svn server and the Overlords can check out the changes (or any revision of them) from the main repo.
features like on-commit triggers that let you enforce constraints no other database will help you enforce (that I've seen -- Oracle certainly won't.)
Oracle has deferrable constraints, that are checked on commit, and you can do almost everything you would do with an on commit trigger with deferrable constraints. Postgresql has deferrable triggers, that trigger on commit, and that's probably the same feature you call "on commit trigger" in firebird.
Why do you have to ask this yourself? Can't you live together, respecting eachother and use this cool new tech to live better? As a hacker myself I can understand that the first thing you would like to do is take it apart and understand exactly how it works to make it work in ways it's not supposed to, but "reserving an empty spot by convincing a sensor that a car is actually parked there" instead of respectfully reserve it the legal, correct and respectful way is just wrong. In an ideal place, where people respect eachother that would not be necessary. Maybe SF is not an "ideal place", I don't know, never been there, but you could try to make it become one by not hacking cool stuff like this, and use it the proper way instead.
I haven't taken the time to see what this new recommended fix does. Anyone have details on how it makes the query response harder to fake?
Sure. The security update addresses the vulnerabilities by using strongly random DNS transaction IDs, using random sockets for UDP queries, and updating the logic used to manage the DNS cache.
I am actually surprised to read this on Slashdot. I thought this was already common practise in the US? I really thought that the police can get a court order and install bugs, microcameras and trojans and whatnot on a suspects computer.
Do you really think a landlord should spy on his customers to make sure they aren't criminals?
It's not the same. If you think that eBay does not know that a lot of the auctions ore rip-offs you are being naive. eBay knows exactly what is going on. Just like the apartment renter who knows that in some of his apartments counterfeit items are sold. Do you think that the landlord should just keep cashing the rent without doing anything? Well, that's what eBay is doing. And if you think it is impossible for them do do anything (I am not saying *resolving* the issue now and forever, but do *something* about it) you are being naive again. Actually eBay makes quite a lot of money out of the "rent" they get, and they should start spending some on making their own "apartments" a nicer place to make business in. But eBay actually did nothing (of course not, why should they?). Hopfully after being sued they start doing something about it.
I don't think it's at all like the street corner with the counterfeit goods. In your analogy, you would be holding whomever is the owner of said street corner, presumably the local government, responsible for the sale of the counterfeit goods. They provided the corner for the crooks to sell on.
You are right. It's more like renting a room to some criminals for them to sell their counterfeit goods and holding the renter accountable for what happens. I am sure eBay knows exactly what is going on on their site, but the don't do anything (or very little) against it, because they get money for the "rent" the criminals pay to put auctions on their site. Anyway, my point is still valid: eBay has to actually spend some real cash to at least *try* to avoid scammers selling rip-offs, and I hope this court ruling will make that happen.
Want to resell your Corrola? Sorry, you have to get Toyota's permission first.
Not really. As I understand it this is because "a user sold fake goods on the website", not legitimate stuff. This is like selling a counterfeit Toyota, witch is illegal, IRL AND on eBay. I am pleased to see that eBay is being held accountable for all the rip-offs users sell on that Website. It's like a street corner with all kinds of criminals who sell counterfeit fake goods, making buyers believe they are original "genuine" (TM by Microsoft).
I agree with you: Javascript is not technically the best solution to write such an application (for now, let's see when JS2 comes out and will be implemented by all major browsers).
Why?
Because rich GUI apps are IMHO quicker to write, more responsive, have more features, are better maintainable with a GUI toolkit like for example SWING, GTK, QT, Winforms or wx instead of HTML + Javascript. I have nothing against Javascript, but I really would not like to work with a Javascript CAD application. Or Maya. Or a programming IDE. For now. Maybe in a few years things will be different, but as things are today Javascript apps just feel very sluggish and "incomplete" to their non-javascript antagonists.
I agree with you: Javascript is not technically the best solution to write such an application (for now, let's see when JS2 comes out and will be implemented by all major browsers). It would be much better written with a non-HTML GUI toolkit, but porting all kind of applications to the Web has some advantages that locally executed apps don't have. Thus we have to see if the benefits outweight the downcomes, and for some the "bloat" is acceptable if the application is online, does not need to be installed and so on. One of the other, not so obvious benefits (imho) of having all kinds of apps online in javascript is that those applications usually are cross-platform, pushing the OS every day a bit more in the background, and forcing windows on less and less people (if you remember the Netscape days, that was exactly the reason Microsoft tried (and succeeded) to crush them - or at least that was what the press was saying at the time). I think most people that run windows still have to run it because of some arcane app that only runs on that platform, and locking that user right in. If this becomes a trend, more and more applications will become cross-platform and less and less users will be forced to use one specific platform. And if that day comes, maybe javascript v3 will become better suited for rich GUI Apps.
I use the same on my home box. I setup kdm to automatically log my default user in right after startup, and put this s2@fresh:~$ cat.kde/Autostart/x11vnc #!/bin/bash (while true; do/usr/bin/x11vnc -forever -nopw; sleep 10; done) & s2@fresh:~$
autostart file in as well, so I have a vnc server listening and sharing that desktop. The vnc port (5900) is firewalled from outside the lan, so it's relatively secure. To access it I use an ssh tunnel, so traffic is encrypted, and when I close my vncviewer window and reconnect later everything is still there and running. For the terminal I use screen, and I usually have one window open with an irc client, one that tails some log files, one with mutt, and so on. You could run your number-crunching stuff. It's really a nice setup, I work like this every day and I am really pleased with how good it works.
As I understand it, that is one point they still have to agree on:
"The negotiators are trying to agree on minimum standards to protect privacy rights, such as limiting access to the information to âoeauthorized individuals with an identified purposeâ for looking at it. If a governmentâ(TM)s policies are âoeeffectiveâ in meeting all standards, any transfer of personal data to that government would be presumed lawful."
But that is just a technical point they have to discuss. The main point of "sharing data" is still valid.
The Times does not say that the EU is going to hand over private information to US authorities.
Actually,
"The United States and the European Union are nearing completion of an agreement allowing law enforcement and security agencies to obtain private information â" like credit card transactions, travel histories and Internet browsing habits â" about people on the other side of the Atlantic Ocean."
Slashdot Mirror
In metrics_service.cc
it sends everything you do in the toolbar to
static const char kMetricsURL[] =
"https://toolbarqueries.google.com/firefox/metrics/collect";
It collects everything and sends it to google servers, on startup and on shutdown.
WHAT THE FUCK. Keep ff ftw.
If your privacy means nothing to you just use Chrome.
At least here in the EU, I don't know it it is the same in the US, but every nokia phone I bought (now I own a 6111) has had the capability of installing j2me apps from the memory card, vie USB or simply by copying them from the PC to the mobile over bluetooth.
If you are a developer and would like to hack your mobile, maybe you could have a look at the Freerunner?
SOAP (Simple Object Access Protocol)
Actually no: since SOAP version 1.2 SOAP is not an acronym anymore because it has nothing that is "simple".
... than the NVidia ones. Intel has Open Source drivers, NVidia not. So, NVidia, even if your cards are from 2010, and Intels are from 2006, I'll buy theirs because they work better and out of the box on my home desktops. When you will be ready to release open drivers for your hardware you can start to compare your products to that of your competitors. Even AMD understood that.
Why not Skype
Just because you ask: I think some of us don't like a 12MB encrypted binary executable file running on our system that nobody except the creators know what it does.
This happened to me too about a week ago, and I was as surprised as you. I am from Italy, and I got about 200 mails a day, about 5 of them not spam. Now I get about 80/day. They are not vanished, but the volume of Spam mails dropped significantly the last week or so.
I agree with you that not allowing sales through third parties would be a bad move, but who knows, maybe they have a good reason we don't know about.
But how can they get away with not honoring tickets already sold?
I am sure they have something in their Terms of use that says they are entitled to rescind the contract ... blablablayaddayadd.
They also say that those third parties where "scraping [the ryanair portal] activity is unlawful and in breach of both Ryanair.com's copyright and terms of use," so they ryanair may be a pissi company, but those "third parties" screen scraping their website are not really better anyway. IMHO
Buy the tickets from their website directly?
"The real issue here in our view is that Ryanair is concerned about losing out on the sale of other services such as travel insurance, hotels, car hire and to stop this they want to prevent consumers from using comparison websites"
I think they have a point. Maybe not a good one, but who are we to decide for them? They want customers to buy Ryanair Tickets from the Ryanair Website, and it's their right to "enforce" this IMHO. Cancelling the bookings may piss of some users, but it makes their point.
I think this is a bit like direct linking an image from a website, when the creator explicitly asked not to do it.
And on top of it lastminute.com, v-tours, tui and Opodo usually charge more for the Tickets than what they would normally cost: "Mr O'Leary also stressed that passengers were "getting stiffed" by these websites as their prices were invariably higher than those available on ryanair.com".
You can authenticate from a linux machine to AD using the MIT kerberos client. There are plenty of HOWTOs about how to configure that. Plus you have SSO for webapps, databases, ssh and about anything you can think of. And on top of that, the identity of the user is propagated to all the machines you Single Sign In with forwardable tickets, and though the tiers of mult-tier applications (Frontend -> Middletier -> Database - every tier knows who the user is). Kerberos is definitively the way to go in an intranet.
America is more and more becoming like China. I hope I am wrong, but since September 11 all the news I read is pointing towards it.
My 2c. Good luck Americans.
If anybody else knows your password it's your own damn fault, not Skype's.
Skype knows your password too.
I think tracking changes should not be the job of the editor, but of something else that is good at it, like svn. I would let people use the editor they like, and add this script on their local machine to track changes. They can then commit the changes to the svn server and the Overlords can check out the changes (or any revision of them) from the main repo.
features like on-commit triggers that let you enforce constraints no other database will help you enforce (that I've seen -- Oracle certainly won't.)
Oracle has deferrable constraints, that are checked on commit, and you can do almost everything you would do with an on commit trigger with deferrable constraints.
Postgresql has deferrable triggers, that trigger on commit, and that's probably the same feature you call "on commit trigger" in firebird.
Any guesses on the when this will be hacked?
Why do you have to ask this yourself? Can't you live together, respecting eachother and use this cool new tech to live better? As a hacker myself I can understand that the first thing you would like to do is take it apart and understand exactly how it works to make it work in ways it's not supposed to, but "reserving an empty spot by convincing a sensor that a car is actually parked there" instead of respectfully reserve it the legal, correct and respectful way is just wrong.
In an ideal place, where people respect eachother that would not be necessary. Maybe SF is not an "ideal place", I don't know, never been there, but you could try to make it become one by not hacking cool stuff like this, and use it the proper way instead.
I haven't taken the time to see what this new recommended fix does. Anyone have details on how it makes the query response harder to fake?
Sure. The security update addresses the vulnerabilities by using strongly random DNS transaction IDs, using random sockets for UDP queries, and updating the logic used to manage the DNS cache.
I am actually surprised to read this on Slashdot. I thought this was already common practise in the US? I really thought that the police can get a court order and install bugs, microcameras and trojans and whatnot on a suspects computer.
Do you really think a landlord should spy on his customers to make sure they aren't criminals?
It's not the same. If you think that eBay does not know that a lot of the auctions ore rip-offs you are being naive. eBay knows exactly what is going on. Just like the apartment renter who knows that in some of his apartments counterfeit items are sold. Do you think that the landlord should just keep cashing the rent without doing anything? Well, that's what eBay is doing. And if you think it is impossible for them do do anything (I am not saying *resolving* the issue now and forever, but do *something* about it) you are being naive again. Actually eBay makes quite a lot of money out of the "rent" they get, and they should start spending some on making their own "apartments" a nicer place to make business in.
But eBay actually did nothing (of course not, why should they?). Hopfully after being sued they start doing something about it.
I don't think it's at all like the street corner with the counterfeit goods. In your analogy, you would be holding whomever is the owner of said street corner, presumably the local government, responsible for the sale of the counterfeit goods. They provided the corner for the crooks to sell on.
You are right. It's more like renting a room to some criminals for them to sell their counterfeit goods and holding the renter accountable for what happens.
I am sure eBay knows exactly what is going on on their site, but the don't do anything (or very little) against it, because they get money for the "rent" the criminals pay to put auctions on their site.
Anyway, my point is still valid: eBay has to actually spend some real cash to at least *try* to avoid scammers selling rip-offs, and I hope this court ruling will make that happen.
Want to resell your Corrola? Sorry, you have to get Toyota's permission first.
Not really. As I understand it this is because "a user sold fake goods on the website", not legitimate stuff. This is like selling a counterfeit Toyota, witch is illegal, IRL AND on eBay. I am pleased to see that eBay is being held accountable for all the rip-offs users sell on that Website. It's like a street corner with all kinds of criminals who sell counterfeit fake goods, making buyers believe they are original "genuine" (TM by Microsoft).
I agree with you: Javascript is not technically the best solution to write such an application (for now, let's see when JS2 comes out and will be implemented by all major browsers).
Why?
Because rich GUI apps are IMHO quicker to write, more responsive, have more features, are better maintainable with a GUI toolkit like for example SWING, GTK, QT, Winforms or wx instead of HTML + Javascript. I have nothing against Javascript, but I really would not like to work with a Javascript CAD application. Or Maya. Or a programming IDE. For now. Maybe in a few years things will be different, but as things are today Javascript apps just feel very sluggish and "incomplete" to their non-javascript antagonists.
I agree with you: Javascript is not technically the best solution to write such an application (for now, let's see when JS2 comes out and will be implemented by all major browsers).
It would be much better written with a non-HTML GUI toolkit, but porting all kind of applications to the Web has some advantages that locally executed apps don't have. Thus we have to see if the benefits outweight the downcomes, and for some the "bloat" is acceptable if the application is online, does not need to be installed and so on.
One of the other, not so obvious benefits (imho) of having all kinds of apps online in javascript is that those applications usually are cross-platform, pushing the OS every day a bit more in the background, and forcing windows on less and less people (if you remember the Netscape days, that was exactly the reason Microsoft tried (and succeeded) to crush them - or at least that was what the press was saying at the time). I think most people that run windows still have to run it because of some arcane app that only runs on that platform, and locking that user right in. If this becomes a trend, more and more applications will become cross-platform and less and less users will be forced to use one specific platform. And if that day comes, maybe javascript v3 will become better suited for rich GUI Apps.
I use the same on my home box. I setup kdm to automatically log my default user in right after startup, and put this
.kde/Autostart/x11vnc /usr/bin/x11vnc -forever -nopw; sleep 10; done) &
s2@fresh:~$ cat
#!/bin/bash
(while true; do
s2@fresh:~$
autostart file in as well, so I have a vnc server listening and sharing that desktop. The vnc port (5900) is firewalled from outside the lan, so it's relatively secure. To access it I use an ssh tunnel, so traffic is encrypted, and when I close my vncviewer window and reconnect later everything is still there and running.
For the terminal I use screen, and I usually have one window open with an irc client, one that tails some log files, one with mutt, and so on. You could run your number-crunching stuff.
It's really a nice setup, I work like this every day and I am really pleased with how good it works.
As I understand it, that is one point they still have to agree on:
"The negotiators are trying to agree on minimum standards to protect privacy rights, such as limiting access to the information to âoeauthorized individuals with an identified purposeâ for looking at it. If a governmentâ(TM)s policies are âoeeffectiveâ in meeting all standards, any transfer of personal data to that government would be presumed lawful."
But that is just a technical point they have to discuss. The main point of "sharing data" is still valid.
I RTFA.
I did.
The Times does not say that the EU is going to hand over private information to US authorities.
Actually,
"The United States and the European Union are nearing completion of an agreement allowing law enforcement and security agencies to obtain private information â" like credit card transactions, travel histories and Internet browsing habits â" about people on the other side of the Atlantic Ocean."
to me, means exactly that.