One-space-shuttle-per-child: a project for the next generation.
These ideas aren't too far-fetched if you live in my Alabama hometown, the "Rocket City".
1: Can I hook up my current VGA or DVI to one of these, and display the content I can currently display?
I can only help answer your first question. I bought a 32" LCD with multiple inputs including HDMI for for my PC's. I have yet to find a graphics card that is HDMI compliant. Therefore, at this time I can not use the 1920 x 1080i @ 60Hz that the display can handle. I am using the RGB-PC inputs. There may be a card, but I have not found it yet.
I don't know if it was the.wmf exploit, but there was an exploit for sale on eBay during the first week of December, 2005. This was referenced in the Full-Disclosure mailing list, which is archived at seclists.org (among other places). the auction may have been a hoax, but eBay cancelled it anyway.
How can they block the outgoing ports? This isn't the incoming ports of the IRC server (usually 6667)
Without going into a long explanation, destination ports for outgoing connection attempts, such as port 6667, can be blocked from leaving the originating network. Even this method can be fine-tuned as to protocol/s, and so forth.
The worm probably use a random outgoing port to connect to the IRC server, so I don't see how this would work without blocking other valid services.
That random port is the port of the machine attempting the outgoing connection to a port such as 6667, to put it simply. The random outgoing port is irrelevant to blocking destination ports.
It is one of those commodity items that becomes cheaper to run on a per-customer basis the more customers you have.
Not exactly, because of the revenue-sharing contracts:
Vertical revenue-sharing contracts allow manufacturers and retailers, or rental companies, the ability to better manage their "coordination of inventory decisions where both firms separately maximize profits. Historically, the use of simple, linear pricing rules between manufacturers and retailers may lead to suboptimal supply of the good in that market. "Vertical" contracts, signed between an upstream manufacturer and a downstream retailer, offer more flexibility for coordinating supply decisions. Specifically, revenue-sharing contracts, in which the retailer pays the manufacturer a fee per unit of inventory as well as a percentage of the revenue generated from the inventory, allow firms greater flexibility than simple linear pricing (that is, a wholesale price per unit of inventory only)." It has been found that "firm profits decrease with the elimination of inventory restrictions, but consumers are generally better off. Eliminating both the inventory restrictions and the linear-pricing contracts generally improves consumer surplus and increases the upstream firm's profits for this set of retailers; however, it lowers downstream firms' profits.". Online video rental companies like Netflix determine profit on a per-subscriber basis. To be responsive to their customer's needs while competing on price and implementing a growth strategy they have to offer a compelling selection of products that are not readily available offline. Therefore, per Netflix CEO Reed Hastings, "So we might make slightly less per subscriber because people watch more movies, but they're happier with the service, and they tell their friends about it. Marketing is our biggest cost, so we look at it as a straight-ahead win, because doing that helps us to grow faster".
Most of this info is from here and here, respectively.
"We're studying our options about what to do about the patent, but our primary strategy doesn't rely on patents. Our primary strategy is to have a service that works better than any other service -- that consumers not only like but rave about to their friends -- and that's what's propelling our growth"
From this link to an interview with Netflix CEO, Reed Hastings.
True. A couple of years ago books with commercial and government applications and recommendation for asbestos use were selling for upwards of $2000.00 on eBay. Here is another example of some of the continued interest in collecting evidence in these lawsuits. One of the better selling books back then was "Naval Machinery" which detailed the use of asbestos in US battleships, etc.
An ebay search for "asbestos" sometimes yields some surprising results.
How did it "automagically" deploy on your box when MS isn't putting it on Windows Update until July? It can only be manually downloaded until then.
It is available through Windows Update right now. I don't know if it will work through Automatic Updates, but if you manually activate Windows Update the scan results page will inform you that it is one of the "Critical Updates and Service Packs".
IRC social network monitoring and visualization software here. Taken from the summary of this previous Slashdot story. Thought you might be interested.
Are the IP industry watchdogs going to keep an eye this comapny's (and others like them) activities for Antitrust and other reasons. I think we can all fathom the potential for massive abuse of the patent and legal systems that these types of companies possess.
Another real question is how many working test.jpg's were there released into the wild and downloaded in the days preceding this announcement? How many systems are already likely compromised?
I looked around their website and also did not see any mention of grading based on whether or not the code produced was secure/exploitable and such.
I believe that to be a valid measure of code worthy of a gold medal in any coding competition. Then again, it may be on the website and I just missed it.
p.s. I did read that the produced code was not allowed to access the network - so I guess that nulls out remote exploitability.
No one has been able to say with any certainty as to why, but this Google search for China and FDI (Foreign Direct investment) should be interesting.
DISCLAIMER: I am currently taking and Internation al Trade class right now and my professor is from China, so I've just recently starting keeping up with this stuff.
However, if anyone out there is running a honeypot as a hobby or are new to setting them up, some good advice on a more secure Windows configuration can be found here. Specifically, it details how to cripple DCOM using a hex editor and reconfiguring other networking services. Good advice, even if you don't use their product. Be careful, you may lose some desktop functionality.
Slashdot Mirror
And disable CB radios for all the truckers. That should go over well with them.
No, not really. How much do you have to drink to pass out so badly that you don't feel your dog eating your toe??
A lot. Link related.
There has been some comments on Animated Captchas here in the past.
Some people believe they would be rather easy to decipher.
I always liked the idea of animated captchas, but for some reason have not really seen much implementation.
Is November rain Purple or Chocolate ?
These ideas aren't too far-fetched if you live in my Alabama hometown, the "Rocket City".
1: Can I hook up my current VGA or DVI to one of these, and display the content I can currently display?
I can only help answer your first question. I bought a 32" LCD with multiple inputs including HDMI for for my PC's. I have yet to find a graphics card that is HDMI compliant. Therefore, at this time I can not use the 1920 x 1080i @ 60Hz that the display can handle. I am using the RGB-PC inputs. There may be a card, but I have not found it yet.
I don't know if it was the .wmf exploit, but there was an exploit for sale on eBay during the first week of December, 2005. This was referenced in the Full-Disclosure mailing list, which is archived at seclists.org (among other places). the auction may have been a hoax, but eBay cancelled it anyway.
Without going into a long explanation, destination ports for outgoing connection attempts, such as port 6667, can be blocked from leaving the originating network. Even this method can be fine-tuned as to protocol/s, and so forth.
The worm probably use a random outgoing port to connect to the IRC server, so I don't see how this would work without blocking other valid services.
That random port is the port of the machine attempting the outgoing connection to a port such as 6667, to put it simply. The random outgoing port is irrelevant to blocking destination ports.
A quick Google search returned these code examples from a Redhat firewall how-to page using iptables:
and
I hope this helps. Here is a Google search to get you started.
didn't Netflix go into a partnership with Amazon a while ago?
... yet.
No, Amazon was shopping around for a partner but no final deal with anyone has been announced
Here is one of many links to similar stories.
It is one of those commodity items that becomes cheaper to run on a per-customer basis the more customers you have.
Not exactly, because of the revenue-sharing contracts:
Vertical revenue-sharing contracts allow manufacturers and retailers, or rental companies, the ability to better manage their "coordination of inventory decisions where both firms separately maximize profits. Historically, the use of simple, linear pricing rules between manufacturers and retailers may lead to suboptimal supply of the good in that market. "Vertical" contracts, signed between an upstream manufacturer and a downstream retailer, offer more flexibility for coordinating supply decisions. Specifically, revenue-sharing contracts, in which the retailer pays the manufacturer a fee per unit of inventory as well as a percentage of the revenue generated from the inventory, allow firms greater flexibility than simple linear pricing (that is, a wholesale price per unit of inventory only)." It has been found that "firm profits decrease with the elimination of inventory restrictions, but consumers are generally better off. Eliminating both the inventory restrictions and the linear-pricing contracts generally improves consumer surplus and increases the upstream firm's profits for this set of retailers; however, it lowers downstream firms' profits.". Online video rental companies like Netflix determine profit on a per-subscriber basis. To be responsive to their customer's needs while competing on price and implementing a growth strategy they have to offer a compelling selection of products that are not readily available offline. Therefore, per Netflix CEO Reed Hastings, "So we might make slightly less per subscriber because people watch more movies, but they're happier with the service, and they tell their friends about it. Marketing is our biggest cost, so we look at it as a straight-ahead win, because doing that helps us to grow faster".
Most of this info is from here and here, respectively.
Probably not:
"We're studying our options about what to do about the patent, but our primary strategy doesn't rely on patents. Our primary strategy is to have a service that works better than any other service -- that consumers not only like but rave about to their friends -- and that's what's propelling our growth"
From this link to an interview with Netflix CEO, Reed Hastings.
Here a link to radio interview with him as well.
I think a quick mention of Metcalfe's Law and Network Effects is in order here.
"key loggers in the keyboard"
Something similar to this: KeyGhost
True. A couple of years ago books with commercial and government applications and recommendation for asbestos use were selling for upwards of $2000.00 on eBay. Here is another example of some of the continued interest in collecting evidence in these lawsuits. One of the better selling books back then was "Naval Machinery" which detailed the use of asbestos in US battleships, etc.
An ebay search for "asbestos" sometimes yields some surprising results.
How did it "automagically" deploy on your box when MS isn't putting it on Windows Update until July? It can only be manually downloaded until then.
It is available through Windows Update right now. I don't know if it will work through Automatic Updates, but if you manually activate Windows Update the scan results page will inform you that it is one of the "Critical Updates and Service Packs".
I'm still waiting for them to invent the 'Orgasmatron.'
Your wait is over.
Last night I installed Windows 2000 SP4 onto a machine (not mine) connected to an NTL (British ISP) Cable set-top-box by ethernet.
I thought about submitting this as a story, but it works just as well here:
Microsoft scraps plans for Windows 2000 SP5.
IRC social network monitoring and visualization software here. Taken from the summary of this previous Slashdot story. Thought you might be interested.
Are the IP industry watchdogs going to keep an eye this comapny's (and others like them) activities for Antitrust and other reasons. I think we can all fathom the potential for massive abuse of the patent and legal systems that these types of companies possess.
Another real question is how many working test .jpg's were there released into the wild and downloaded in the days preceding this announcement? How many systems are already likely compromised?
I looked around their website and also did not see any mention of grading based on whether or not the code produced was secure/exploitable and such.
I believe that to be a valid measure of code worthy of a gold medal in any coding competition. Then again, it may be on the website and I just missed it.
p.s. I did read that the produced code was not allowed to access the network - so I guess that nulls out remote exploitability.
So are you treated better or worse over there as a research assistent than over here in the USA?
It depends on how you act.
Read the last two paragraphs over and over. Scary stuff.
No one has been able to say with any certainty as to why, but this Google search for China and FDI (Foreign Direct investment) should be interesting.
DISCLAIMER: I am currently taking and Internation al Trade class right now and my professor is from China, so I've just recently starting keeping up with this stuff.
True.
However, if anyone out there is running a honeypot as a hobby or are new to setting them up, some good advice on a more secure Windows configuration can be found here. Specifically, it details how to cripple DCOM using a hex editor and reconfiguring other networking services. Good advice, even if you don't use their product. Be careful, you may lose some desktop functionality.