The multiple streams idea seems risky to me. If you start splitting things up you might be opening yourself it unknown side attacks, timing attacks, and other leaks. As others have said the problems with SSL/TLS are not the encryption but the chain of trust. The best security you are going to get is to use it as designed.
If you are really worried about Authentication, then distribute a self signed certificate out of band. That way there are no chain of trust issues. The other thing you can do is used a CA signed certificate and distribute the thumb print out of band, but you have to insist clients check it. Thumbprints are a little easier to read over the phone though.:-)
Yes, but big government infringes peoples rights each and every day, they just might not happen to be infringing on yours today. The thing is from you post I can tell you are the type that will sit by and say nothing while I get shipped down the river without cause or justice on the side of those taking such action.
They only way to get you to stand up and do the VERY LEAST YOU COULD and VOTE to throw the bums out, is cause a little of the grief to come your way. The larger the part of the population the government can be teased into abusing at the same time, the great HOPE there is for REAL CHANGE.
Plenty of Slashdoter's supported the wikileaks cable release. I think you find a general distaste among Slashdoters for big governments doing oppressive things even when its their own. I don't see the "Western Hypocrisy" at least among the main stream Slashdot crowd, which I admit is not exactly main stream.
The reason the industry lobbies want to criminalize this stuff is to shift the burden of enforcement to the tax payer. If its a civil agreement it then its mostly their own responsibility to spot where their rights are being infringed and do something about it, send a take down notice, file a suit, whatever.
If they can criminalize it suddenly state enforcement agencies are burdened with detecting the crime, and state legal agencies are burdened with prosecuting it.
Actually Netflix allows two streams at a time, so that members of a house hold can watch different things. IE Mom and Dad can watch a movie while cartoons entertain the kids. Its pretty reasonable IMHO. After all with no limit then everyone would just give out their passwords. Two at time is fair given their reasonable rates.
Netflix is not selling my a physical item that I expect to have rights to do with what I like, they are selling a service and so far I have always felt they deliver reliably, good performance, fair terms, and a fair price. I remain a happy customer.
I use XFCE and have used it since its 3x days; I am running 4.6 now. I love it. Its a great desktop IMHO. My thanks and applause to anyone who has contributed the XFCE project who may read this. Its stable and its pretty. It might not be as flashy as OSX or even KDE but its still prettier then Windows 7 and the "eye candy" is actually useful.
I actually like the transparency effects quite a bit. 3D accelerated desktops let me see through menus, and inactive windows thru to what is underneath and that actually means I am not moving things around so much.
All you have to do to know how much "respect" for the Constitution, Rule of law in general, and the truth, the Obama administration has is to look at the way Chrysler was handled.
Do a little research it was completely criminal; complete with him making false statements, he almost certainly knew to be false at the time, to the public on television about what the bond holders were asking for.
If AZ wants to use their state resources to enforce Federal law, they will fight it if they don't like the law being enforced, If CA (and all its left leaning electoral votes) want to tax any business anywhere for any reason they will make it possible even if they have to stomp the rights of every individual and every other state flat and turn the Constitution into toilet paper.
I'll give you the fact that we don't have any major applications at this point that are going to revolutionize the industry and make people think "oh, I must have this"
Translation: We don't really understand how to market this, or the size of the market for this.
it's a big bet for us, and it's a bet that we're certain about.
Translation: We don't have any other promising R&D in the pipeline at the moment so if this fails to play out well for us we will still be number 2 but no longer a top line mark, it will be back to the K6 days for us.
The mistake was the British every giving it up. They had completely legal (bought and paid for ) control over the Iranian economy back in the 19th Century, the Monarchy their had essentially sold the country to them; so they could maintain their life style.
The entire world would be better off Iran was still / had stayed under British rule.
Stem Cell research is the perfect example of why the public should have a voice in what science is allowed to do. I have never met anyone who has an issue with it. Plenty of people have an issue with embryonic stem cell research. There are plenty of strong ethical arguments to support that position as well. Meanwhile despite the radical lefts success in protecting / obtaining more tax dollars ( read contributions at gun point ) and the legality of doing work with embryonic cells, all the major break through recently have come from using cord blood, skin and other body cells as sources.
If anything the evidence available shows not only is there no real need for embryonic cells they are probably not even the best candidates for most therapeutic applications.
But go on murdering babies on the chance you might help some Parkinson's or MS patient 50 years for now and calling yourself a humanitarian; I am libertarian and unlike I won't use guns to force my views on you.
Which to me, insinuated (intentionally, or otherwise) that the guy did what he did, not out of a sense of justice, but because his life was fucked up.
Which is a perfect reasonable conclusion one might reach from the facts available. They did not say he was so disturbed that his behavior was just irrational or anything like that ( I watched the show ) but its certainly possible to come away with that interpretation. They decided that facts about Manning's personal life might be relevant and presented them.
We can not know a man's heart only make guesses about it based on his words and deeds. What we do know is that he was venting to hackers in chats online, and in make spaces, about his troubles, and later about what to do with the information he had access too. Its not hard to image he was thinking real clearly.
The problem is getting beyond that local election. In local politics people are pretty willing to do a "re-think". I have family members who have held local offices ranging form school board all the way up to mayor. Getting elected in those elections is very possible even if you don't fall in line with DNC or RNC platform. Main reason is two things get you elected at the local level, the first being name recognition and the second being issues. To get elected locally you need to get more yard signs in the ground than the other guys and two be able to articulately discuss the issues the community is facing at any town halls or debates your community dose, to win the votes of those who attend.
You can win on ideas locally because people understand the issues. You can talk about budget items which are 100K and that's a sum of money regular folks understand. They are aware of the problems with the park, and the deteriorating condition of Vine Street, etc. They can think about tax law changes because the system is fairly simple usually and they understand how what you are suggesting will affect them almost immediately.
Move this up to the national level. You can't win just by being right. You have to win on sound bites and you have to get those heard, which takes money which either you have to already have or you need support from the conventions and that comes with strings. When you talk about your ideas they now pertain to things like medicare, energy policy, numbers with trillion after them, or the middle east, that most Americans do not really understand but have been taught to be really scared about.
If you dare take a position on any of these things you are done for, the establishment guy without having to offer any ideas of his own will run an add about how your are planning to kill everyone's grandmothers, let the terrorists win, bankrupt the nation, cost people their jobs, destroy the planet, etc. So even though anyone of any intelligence whatsoever can see we are are spiraling towards certain destruction on multiple fronts, even without understanding the details will vote for the status quo because they are scared and simply respond like a deer in the head lights.
I am anti-Net Neutrality ( because I am a libertarian and I don't think government should tell anyone how to run their IP network ). I am opposed to this because I don't think copyright infringement which is inherently a civil offense has any place in criminal code. I don't think the government has any place investigating civil matters between parties. If the *IAA has a problem with someone distributing materials owned by groups they represent, its up to them to discover it, its up to those groups to file a suit against that person, without any help from the FBI.
I am against this DNS crap because I don't government should be regulating anyones DNS. Is my position ideologically consistent enough for you? ICANN is a private company they should be free to publish any directory (thats what DNS is a directory ) they want. Its not a government asset they should have NO SAY, under the first amendment.
Like the average smuck was not going to be able to use dvdshrink? Come on you know some 1337 kid is going to read up on DNS just enough to learn how to set which server is used on Windows, whip out his intro to VB.net book and whip up a little single form program with all his code in the DoIt.OnClick() handler to set the value to some server in The Republic of North Bumfuck.
Then everyone moron on facebook will be sending it to each other and installing it. That is Week 1.
Week 2 is when everyones ISP just starts NAT'ing ever packet with a dst port 53 tcp or udp to their own DNS server.
Week 3 same kid who has now learned that port translation can be used for other things besides playing wow behind his Linksys router starts his Google quest for a COM object that implements SSH....
Model M's are for people who could not afford a better key board but still wanted something good. They are soght after today because they were good and they were common enough that people remember them. They don't like modern keyboards so they go back to what they knew.
If you really want a good keyboard that would put a model M to shame you want a Northgate Omni Key model from the late 80's to early 90s (maybe like 87 - 93 or so). The little 101s have a great feel but were a little light and could slide around on a desk, the Ultra-T models give you that all important numeric pad and were weighted, they also had a metal chassis. Now most were not lucky enough to have one of these. Keep in mind they were like $150 in 1990 money. Still its the best keyboard you will ever type on. Some company recently got the rights to manufacture them again and producing them from the original design. Avant? I think. Mine is now something like 18 years old and still works great, used daily.
Or maybe they are just calling a spade a spade. What does one do at a dump? They store waste. Its a correct word. I bet your local municipality calls their "dump" a "waste management facility" or something similar. I guess the connotations are less negative so the people who live near or work at it don't feel as bad?
"dump" has an undesirable connotation and I think that its fair use of the term, this is objectively not something you want in your back yard; so I don't "dump" is pejorative here.
Well the problem you are most likely to have is SSL. I suspect these devices pull at least some resources via SSL and expect a valid certificate for *.youtube.com. Before you spend any more time on this break out wireshark and make sure its all sent in the clear.
You know I can't say I am really bothered by these cyber-criminals. Its fun to have an Internet based on mob rule and vigilante justice. Keep some perspective, its only computer nobody really gets hurt.
I still have not seen any shred of evidence that any of these attacks are in response to the removal of the other OS feature or the lawsuit against Geh0t(or whatever his handle was). I think if these attacks were retaliatory the people behind them would find some way of making that publicly and certainly known. It would do more for their cause.
Its just as likely possibly more likely that the first big attack on PSN was entirely opportunistic somebody spotted a hole and figured it was good change to get hold of some info to use for spaming or ID theft. The rest of the attacks might be being done by others for the same reasons now that its clear that Sony corporate does not have a strong security team doing any real policy enforcement across the org, so other Sony targets are likely to be soft.
I have to agree you don't spend your time talking best case or worst case, you spend your time talking about the most likely case. I think its pretty clear TEPCO went best case on just about every issue.
You see this often when companies face these sorts of disasters, somehow they think its better to keep having to revise. All that does is make them look they not only don't have control over the situation but don't even understand it. BP did with the spill, its only leaking 20K barrels, well ok it might be 50K, oops my bad its 100K. Stupid.
China actually could shitcan the US economy in 24 hours, either using currency manipulation, calling in the debt, or even military means
If they did any of those things to the extremes that would "shitcan" the US economy we would not be buying any electronics anyway. At that point it would simply be a matter of "if I am going down, I am taking you down with me."
China can't really call in the debt. These bonds they be sold on the market or redeemed. Redeemed is pretty close to "calling in the debt" but if the instruments are not mature something less than face value would be paid. The market lacks enough buys to absorb the assets if they were dumped at anything beyond firesale prices. China would lose a huge portion of their own savings, but it would turn the dollar into paper. They can't redeem them all at once at the Treasury either as they don't have the cash on hand to pay, and can't borrow it because we are in excess of the debt ceiling already. So we would default. That would again destroy China's savings and turn the dollar in to paper. With the even greater side effect of destroying our ability to borrow. T-Bills being reduced to a JUNK rateing would be a much bigger problem for our banks and private sector than those bogus valued CDO/CDS/MBS ever were, and still remain.
The DEFLATION that would trigger would be so incredible that nobody could find a dollar spend and few would have anything of enough value to trade for one if such a dollar was found. The ONLY spending that would be happening is completely on inelastic products like staple foods.
No US money would be purchasing electronics from China through intermediaries or otherwise.
Meanwhile in China FoxCon and friends have a problem. Their biggest market has vanished overnight. The only markets large enough in population to replace it (their own domestic and India) don't have a standard of living which would permit many to buy these products. The only way to fix that overnight would be a sudden and extreme revaluation of currency which would alter the political landscape so rapidly their governments could not survive. If they don't revalue until most citizens can buy and IPad, well everything grinds to halt. Workers go home because there is no need to build more inventory, wages are not paid to workers not working, farm products don't get bought even though people are starving, the farms collapse and then everyone is starving.
So yea its essentially a non-nuclear MAD arrangement.
That sounds great, that way nobody can logon to any site from a machine that is not theirs because they won't have the password safe on that machine and don't know any of the passwords. We might as well just forget this whole cloud thing and go back to fat clients for every service. Oh and before you say lastpass, we all know how well that worked out for people recently; also a service like that presents to valuable a target, even if its a hard one it will be attacked often.
Slashdot Mirror
The multiple streams idea seems risky to me. If you start splitting things up you might be opening yourself it unknown side attacks, timing attacks, and other leaks. As others have said the problems with SSL/TLS are not the encryption but the chain of trust. The best security you are going to get is to use it as designed.
If you are really worried about Authentication, then distribute a self signed certificate out of band. That way there are no chain of trust issues. The other thing you can do is used a CA signed certificate and distribute the thumb print out of band, but you have to insist clients check it. Thumbprints are a little easier to read over the phone though. :-)
Yes, but big government infringes peoples rights each and every day, they just might not happen to be infringing on yours today. The thing is from you post I can tell you are the type that will sit by and say nothing while I get shipped down the river without cause or justice on the side of those taking such action.
They only way to get you to stand up and do the VERY LEAST YOU COULD and VOTE to throw the bums out, is cause a little of the grief to come your way. The larger the part of the population the government can be teased into abusing at the same time, the great HOPE there is for REAL CHANGE.
Plenty of Slashdoter's supported the wikileaks cable release. I think you find a general distaste among Slashdoters for big governments doing oppressive things even when its their own. I don't see the "Western Hypocrisy" at least among the main stream Slashdot crowd, which I admit is not exactly main stream.
The reason the industry lobbies want to criminalize this stuff is to shift the burden of enforcement to the tax payer. If its a civil agreement it then its mostly their own responsibility to spot where their rights are being infringed and do something about it, send a take down notice, file a suit, whatever.
If they can criminalize it suddenly state enforcement agencies are burdened with detecting the crime, and state legal agencies are burdened with prosecuting it.
Actually Netflix allows two streams at a time, so that members of a house hold can watch different things. IE Mom and Dad can watch a movie while cartoons entertain the kids. Its pretty reasonable IMHO. After all with no limit then everyone would just give out their passwords. Two at time is fair given their reasonable rates.
Netflix is not selling my a physical item that I expect to have rights to do with what I like, they are selling a service and so far I have always felt they deliver reliably, good performance, fair terms, and a fair price. I remain a happy customer.
I use XFCE and have used it since its 3x days; I am running 4.6 now. I love it. Its a great desktop IMHO. My thanks and applause to anyone who has contributed the XFCE project who may read this. Its stable and its pretty. It might not be as flashy as OSX or even KDE but its still prettier then Windows 7 and the "eye candy" is actually useful.
I actually like the transparency effects quite a bit. 3D accelerated desktops let me see through menus, and inactive windows thru to what is underneath and that actually means I am not moving things around so much.
All you have to do to know how much "respect" for the Constitution, Rule of law in general, and the truth, the Obama administration has is to look at the way Chrysler was handled.
Do a little research it was completely criminal; complete with him making false statements, he almost certainly knew to be false at the time, to the public on television about what the bond holders were asking for.
If AZ wants to use their state resources to enforce Federal law, they will fight it if they don't like the law being enforced, If CA (and all its left leaning electoral votes) want to tax any business anywhere for any reason they will make it possible even if they have to stomp the rights of every individual and every other state flat and turn the Constitution into toilet paper.
I'll give you the fact that we don't have any major applications at this point that are going to revolutionize the industry and make people think "oh, I must have this"
Translation: We don't really understand how to market this, or the size of the market for this.
it's a big bet for us, and it's a bet that we're certain about.
Translation: We don't have any other promising R&D in the pipeline at the moment so if this fails to play out well for us we will still be number 2 but no longer a top line mark, it will be back to the K6 days for us.
The mistake was the British every giving it up. They had completely legal (bought and paid for ) control over the Iranian economy back in the 19th Century, the Monarchy their had essentially sold the country to them; so they could maintain their life style.
The entire world would be better off Iran was still / had stayed under British rule.
Stem Cell research is the perfect example of why the public should have a voice in what science is allowed to do. I have never met anyone who has an issue with it. Plenty of people have an issue with embryonic stem cell research. There are plenty of strong ethical arguments to support that position as well. Meanwhile despite the radical lefts success in protecting / obtaining more tax dollars ( read contributions at gun point ) and the legality of doing work with embryonic cells, all the major break through recently have come from using cord blood, skin and other body cells as sources.
If anything the evidence available shows not only is there no real need for embryonic cells they are probably not even the best candidates for most therapeutic applications.
But go on murdering babies on the chance you might help some Parkinson's or MS patient 50 years for now and calling yourself a humanitarian; I am libertarian and unlike I won't use guns to force my views on you.
Which to me, insinuated (intentionally, or otherwise) that the guy did what he did, not out of a sense of justice, but because his life was fucked up.
Which is a perfect reasonable conclusion one might reach from the facts available. They did not say he was so disturbed that his behavior was just irrational or anything like that ( I watched the show ) but its certainly possible to come away with that interpretation. They decided that facts about Manning's personal life might be relevant and presented them.
We can not know a man's heart only make guesses about it based on his words and deeds. What we do know is that he was venting to hackers in chats online, and in make spaces, about his troubles, and later about what to do with the information he had access too. Its not hard to image he was thinking real clearly.
Hopefully anonymous will DDOS these senators re-election sites off the web!
The problem is getting beyond that local election. In local politics people are pretty willing to do a "re-think". I have family members who have held local offices ranging form school board all the way up to mayor. Getting elected in those elections is very possible even if you don't fall in line with DNC or RNC platform. Main reason is two things get you elected at the local level, the first being name recognition and the second being issues. To get elected locally you need to get more yard signs in the ground than the other guys and two be able to articulately discuss the issues the community is facing at any town halls or debates your community dose, to win the votes of those who attend.
You can win on ideas locally because people understand the issues. You can talk about budget items which are 100K and that's a sum of money regular folks understand. They are aware of the problems with the park, and the deteriorating condition of Vine Street, etc. They can think about tax law changes because the system is fairly simple usually and they understand how what you are suggesting will affect them almost immediately.
Move this up to the national level. You can't win just by being right. You have to win on sound bites and you have to get those heard, which takes money which either you have to already have or you need support from the conventions and that comes with strings. When you talk about your ideas they now pertain to things like medicare, energy policy, numbers with trillion after them, or the middle east, that most Americans do not really understand but have been taught to be really scared about.
If you dare take a position on any of these things you are done for, the establishment guy without having to offer any ideas of his own will run an add about how your are planning to kill everyone's grandmothers, let the terrorists win, bankrupt the nation, cost people their jobs, destroy the planet, etc. So even though anyone of any intelligence whatsoever can see we are are spiraling towards certain destruction on multiple fronts, even without understanding the details will vote for the status quo because they are scared and simply respond like a deer in the head lights.
I am anti-Net Neutrality ( because I am a libertarian and I don't think government should tell anyone how to run their IP network ). I am opposed to this because I don't think copyright infringement which is inherently a civil offense has any place in criminal code. I don't think the government has any place investigating civil matters between parties. If the *IAA has a problem with someone distributing materials owned by groups they represent, its up to them to discover it, its up to those groups to file a suit against that person, without any help from the FBI.
I am against this DNS crap because I don't government should be regulating anyones DNS. Is my position ideologically consistent enough for you? ICANN is a private company they should be free to publish any directory (thats what DNS is a directory ) they want. Its not a government asset they should have NO SAY, under the first amendment.
Like the average smuck was not going to be able to use dvdshrink? Come on you know some 1337 kid is going to read up on DNS just enough to learn how to set which server is used on Windows, whip out his intro to VB.net book and whip up a little single form program with all his code in the DoIt.OnClick() handler to set the value to some server in The Republic of North Bumfuck.
Then everyone moron on facebook will be sending it to each other and installing it. That is Week 1.
Week 2 is when everyones ISP just starts NAT'ing ever packet with a dst port 53 tcp or udp to their own DNS server.
Week 3 same kid who has now learned that port translation can be used for other things besides playing wow behind his Linksys router starts his Google quest for a COM object that implements SSH....
Week 4... Frustration ensues
Week 5 ... A new VB.net app is published!
Model M's are for people who could not afford a better key board but still wanted something good. They are soght after today because they were good and they were common enough that people remember them. They don't like modern keyboards so they go back to what they knew.
If you really want a good keyboard that would put a model M to shame you want a Northgate Omni Key model from the late 80's to early 90s (maybe like 87 - 93 or so). The little 101s have a great feel but were a little light and could slide around on a desk, the Ultra-T models give you that all important numeric pad and were weighted, they also had a metal chassis. Now most were not lucky enough to have one of these. Keep in mind they were like $150 in 1990 money. Still its the best keyboard you will ever type on. Some company recently got the rights to manufacture them again and producing them from the original design. Avant? I think. Mine is now something like 18 years old and still works great, used daily.
Or maybe they are just calling a spade a spade. What does one do at a dump? They store waste. Its a correct word. I bet your local municipality calls their "dump" a "waste management facility" or something similar. I guess the connotations are less negative so the people who live near or work at it don't feel as bad?
"dump" has an undesirable connotation and I think that its fair use of the term, this is objectively not something you want in your back yard; so I don't "dump" is pejorative here.
Well the problem you are most likely to have is SSL. I suspect these devices pull at least some resources via SSL and expect a valid certificate for *.youtube.com. Before you spend any more time on this break out wireshark and make sure its all sent in the clear.
You know I can't say I am really bothered by these cyber-criminals. Its fun to have an Internet based on mob rule and vigilante justice. Keep some perspective, its only computer nobody really gets hurt.
I still have not seen any shred of evidence that any of these attacks are in response to the removal of the other OS feature or the lawsuit against Geh0t(or whatever his handle was). I think if these attacks were retaliatory the people behind them would find some way of making that publicly and certainly known. It would do more for their cause.
Its just as likely possibly more likely that the first big attack on PSN was entirely opportunistic somebody spotted a hole and figured it was good change to get hold of some info to use for spaming or ID theft. The rest of the attacks might be being done by others for the same reasons now that its clear that Sony corporate does not have a strong security team doing any real policy enforcement across the org, so other Sony targets are likely to be soft.
I have to agree you don't spend your time talking best case or worst case, you spend your time talking about the most likely case. I think its pretty clear TEPCO went best case on just about every issue.
You see this often when companies face these sorts of disasters, somehow they think its better to keep having to revise. All that does is make them look they not only don't have control over the situation but don't even understand it. BP did with the spill, its only leaking 20K barrels, well ok it might be 50K, oops my bad its 100K. Stupid.
Not the point; I was responding to
China actually could shitcan the US economy in 24 hours, either using currency manipulation, calling in the debt, or even military means
If they did any of those things to the extremes that would "shitcan" the US economy we would not be buying any electronics anyway. At that point it would simply be a matter of "if I am going down, I am taking you down with me."
China can't really call in the debt. These bonds they be sold on the market or redeemed. Redeemed is pretty close to "calling in the debt" but if the instruments are not mature something less than face value would be paid. The market lacks enough buys to absorb the assets if they were dumped at anything beyond firesale prices. China would lose a huge portion of their own savings, but it would turn the dollar into paper. They can't redeem them all at once at the Treasury either as they don't have the cash on hand to pay, and can't borrow it because we are in excess of the debt ceiling already. So we would default. That would again destroy China's savings and turn the dollar in to paper. With the even greater side effect of destroying our ability to borrow. T-Bills being reduced to a JUNK rateing would be a much bigger problem for our banks and private sector than those bogus valued CDO/CDS/MBS ever were, and still remain.
The DEFLATION that would trigger would be so incredible that nobody could find a dollar spend and few would have anything of enough value to trade for one if such a dollar was found. The ONLY spending that would be happening is completely on inelastic products like staple foods.
No US money would be purchasing electronics from China through intermediaries or otherwise.
Meanwhile in China FoxCon and friends have a problem. Their biggest market has vanished overnight. The only markets large enough in population to replace it (their own domestic and India) don't have a standard of living which would permit many to buy these products. The only way to fix that overnight would be a sudden and extreme revaluation of currency which would alter the political landscape so rapidly their governments could not survive. If they don't revalue until most citizens can buy and IPad, well everything grinds to halt. Workers go home because there is no need to build more inventory, wages are not paid to workers not working, farm products don't get bought even though people are starving, the farms collapse and then everyone is starving.
So yea its essentially a non-nuclear MAD arrangement.
and we could shitcan the Chinese economy in 24 secs announcing our intent to default on that debt, and stopping the purchase of their exports.
That sounds great, that way nobody can logon to any site from a machine that is not theirs because they won't have the password safe on that machine and don't know any of the passwords. We might as well just forget this whole cloud thing and go back to fat clients for every service. Oh and before you say lastpass, we all know how well that worked out for people recently; also a service like that presents to valuable a target, even if its a hard one it will be attacked often.
True but there are really only three channels that don't over lap. Doing very high density wifi is trouble.