Inevitably the XBox1 will get rooted and I wonder how far that penetration will go into the cloud? Maybe to other accounts, other Xboxes? There could be a lot of interesting outcomes from letting MS foot the power bill for some bitcoin mining to bringing down the cloud with a DoS attack, to being able to 'peek' through the Kinect of another Xbox, etc.
I've dabbled with a variety of solutions, but it really depends on what it is you are trying to secure, between whom, and where.
GPG/PGP has been around a while, but it usually requires some third party software/plugins. I seems a little clunky to me as most email clients already have S/MIME support built in which brings me to...
S/MIME requires you get a cert through a third party (Thawte used to provide free email certs). By just sending a signed email to somebody they will then have your public key.
If you are talking about securing email between two email relays, then you can just configure the relays to enforce TLS.
If you are talking about securing the link between clients and email sending/receiving, you can just configure the mail server (if it isn't already) to only accept connections on pop3s/imaps/smtps/etc.
Other ideas is setting up encrypted tunnels between relays (like how ssh can do port forwarding), etc.
I'm a professional programmer of 20 years now and not in my 30's any more. I've worked with some very good younger programmers that can run circles around me in terms of putting in 16 hour days when I'm basically toast after 8. What you probably have over the younger programmers is a maturity that employers appreciate. For example, younger programmers (imho) tend to be a bit more emotional, naive, insecure/defensive, not ask for help, obfuscate things trying to be 'clever', get a personal attachment to a project, etc. Older programmers tend to have checked their ego at the door a long time ago and have a healthy separation between personal/home life and work.
That said, sadly, there are many employers who won't hire an older programmer. They may see you as somebody trying to position yourself in an unwanted management role. They may also think they are getting two for the price of 1/2 if they hire that single kid just out of school who's willing to slave away for 16+ hours a day for peanuts.
Insurance/warranties/etc. are designed to make the companies money who provide them, full stop. They can be beneficial if you can't pay for the repair/replacement cost yourself if something goes wrong, but if you can otherwise afford to repair/replace the unit yourself then by all means, don't pay for insurance/warranties.
I've been on both sides of the fence on this over the years. I've had people rewrite my code without asking, and other times I've rewritten somebody else's code.
First of all, it just annoys people. It's not fixing a problem (at least not long term). I rewrote some code and fixed, perhaps, 10 problems but accidentally introduced a new problem. I was beaten up ad-nauseum in front of management over introducing that one problem into somebody else's code.
OTOH, a sloppy programmer might get used to you fixing their work. That can turn into a dangerous long term situation if people think it is normal for you to double your workload by cleaning up other people's work as well as doing your own.
As far as the business is concerned, they aren't paying two people to solve the same problem twice.
Make sure everyone knows where their responsibilities lie. Let everyone make their own mistakes. If somebody is 'sloppy' but there aren't any repercussions, then perhaps 'sloppy' really is good enough and you are the one wasting too much time and energy being nit picky.
If a coworker's sloppiness is actually really impacting your productivity, bring it up with the project manager in a pleasant way on specific issues. Keep the conversion focused on the work being done, not the individuals involved. Saying "Bob's work is sloppy" isn't going to help anybody. Say, "It would save me a lot of time if there were more consistent formatting and commenting in the code."
Don't criticize work that isn't intended for you. For example, those diagrams might only be intended for management, for example, and you might not know that there was a very good reason why they needed to be crammed all on one page (e.g. to be printed out large format to get hung up on a wall, say).
That said, it's good to have pride in your work and take the extra effort to polish it. Be the example. If nobody notices and appreciates your work, then perhaps you need to look for another job?
An odd thing for a CEO of all people to do unless he's lost the relative sense of what the value of money is. Does Musk think throwing money at the problem will solve it? Reminds me of 'trickle down' economics. You know what happens when you go to buy something and are willing to give more cash for it than the asking price? The seller takes the extra cash and sticks it in their pocket, plain and simple.
I don't get it (I'm not in the EU), but you might have thought more people would have noticed besides Google that the Browser Ballot was missing for 17-18 months? Seems odd.
Anybody poke around yet to see how they do the client-side encryption w/o a plugin? I suppose it could be done in Javascript. Another thought I had is maybe using the SSL stream its self and storing that. I would hope they are at least not using Java or Flash.
In any case, I would imagine that this would attract a lot of attention to see just how secure the mechanism is.
had a technique where he would pipe the audio from the recording studio down to a basement where loudspeakers played the audio and picked it back up on microphones and back to the control room. I always thought that it would be fun to try if I had access to a large warehouse or something.
Interesting, but beating a government at their own game by suing their interests simply isn't going to work. It takes arrogance to think you can beat another man's game when the other man gets to define the rules.
I think you need a bit of arrogance just to keep from washing out and having the balls to do some things in college that you might not normally feel comfortable with. Unless the source is from deeper seeded part of your psyche, it will temper its self once you've settled down in your job (or whatever you plan to do with your life) and don't feel like you have to prove yourself any more.
Reminds me of two things: A CS prof told us that we'll spend the first year of our career fighting to get 'root' and the rest of our career trying to get rid of it. Also, when I was involved in hiring I was reminded that a college degree doesn't necessarily mean you know what you are doing, but it does show that you can make a major commitment and follow through.
I was always a bit dubious of the infrared based wireless networking (like IrDA) for an office environment, but what about optical wireless in a data center? Seems like that would solve the potential security issues and you could isolate racks (or parts of racks) on their own wireless network and then do the traditional wired scheme to join those nodes together so that you weren't stretching the bandwidth too thin?
While, true, he is best known as an entertainer of sorts, he's an engineer that's worked in a number of fields (I won't bother posting links to various bios; you can google for those.)
I grew up watching Almost Live! Loved that show. I loved the Billy Quan segments... "Be Like Billy!" It was a sort of extreme spoof of fake looking staged martial arts fighting movies taken to the extreme.
Back but forgot to try hardwired ethernet, oh well. The Live Ubuntu works in a pinch, I would say, but I'd recommend using something like VirtualBox or installing on partition and taking the time to fiddle to get things tweaked out. No backlight on the keyboard and can't tell you about if the video was accelerated (probably not).
It was one of those quick 5-minute tests, but I'm willing to reboot and check some more things for giggles. I can tell you that audio worked, trackpad worked, keyboard, WiFi hardware was recognized but needed the firmware file downloaded and copied into place (been through that before with other Broadcom WiFi stuff), video wasn't horrible VGA res but I didn't try to up it. Let me reboot and post a reply in a few!:')
"Running linux on apple products is no longer an easy thing to do."
I just stuck in a vanilla Ubuntu Desktop 12.04 (32-bit) on a USB flash stick on a rMBP for the first time and it booted right up. I've also used VirtualBox with Ubuntu for years (which is probably more practical/useful in most cases).
Ubuntu is certainly easier and faster to run these days on a Mac than how I remember Yellowdog Linux was. (Ahh, those were the days.)
I call BS. I did a quick search here for "Amazon" on the iTunes Store and it comes up with a number of books related to publishing and marketing with Amazon including publishing eBooks for the Kindle.
I thought it was par for the course to have iffy WiFi on my MBP until I spent an afternoon testing each component. I found two culprits: A bad ethernet router which was effectively cycling one of its ethernet ports continuously, and elsewhere in the network, an old cat-3 cable that was trying to run at 100-baseT speeds.
Besides that, I used to have a wireless telephone that would kill the network each time I used it, but I have long since replaced that. Also beware that each WiFi channel spans two additional channels up and down (e.g. channel 5 is actually using 3,4,5,6,7) so beware of conflicts with other networks in the area.
In short, do your due diligence and find the source(s) of your problem. What you are experiencing isn't normal if everything is working and configured correctly. And I hate to sound like I am pushing Apple products, but you might be safest to use an Airport base station vs. a third party WiFi router. It at least is easier to configure with a Mac and gives the benefit of Airplay and printer sharing, if you need it.
I realize this is a bit of a tongue-in-cheek news item, but isn't government by definition above the law? I mean, if it actually got serious, wouldn't the president just pass an executive order making it exempt from copyright law?
In any case, the government isn't distributing it, it is self distributing!;')
It's obvious that the kid will need something age/experience appropriate, but don't discount buying a good college textbook or two. My parents used to let me buy the occasional college textbook while growing up and even though they were way over my head at the time, they turned out to be some of the most useful books I've ever used.
Also, BASIC and Pascal are still very good languages to start with. C might be a bit complex to start with, especially when dealing with pointers and such. Another language to consider is Javascript. A kid could have a lot of fun with interactivity working with JS (as well as sharing the work), although debugging can sometimes be a bit of a pita.
I don't buy the marketshare argument entirely. Back in the dark days of OS-9 our office used to get worms and such all the time. Once we migrated to OS-X, we haven't had an incident since. That said, it's pretty much common knowledge that drive-by exploits have existed for years, particularly against Flash and Adobe Acrobat. I suspect that Apple might do with Java what they did with Flash and not have it installed by default and not take the responsibility to push updates with Software Update.
Re:In defense of Rails...
on
GitHub Hacked
·
· Score: 0
As far as I can tell, you don't know RoR. A reasonable RoR programmer doesn't pass unfiltered input anywhere in the app, especially to something like update_attributes. I avoid update_attributes entirely for that reason.
Slashdot Mirror
Inevitably the XBox1 will get rooted and I wonder how far that penetration will go into the cloud? Maybe to other accounts, other Xboxes? There could be a lot of interesting outcomes from letting MS foot the power bill for some bitcoin mining to bringing down the cloud with a DoS attack, to being able to 'peek' through the Kinect of another Xbox, etc.
I've dabbled with a variety of solutions, but it really depends on what it is you are trying to secure, between whom, and where.
GPG/PGP has been around a while, but it usually requires some third party software/plugins. I seems a little clunky to me as most email clients already have S/MIME support built in which brings me to...
S/MIME requires you get a cert through a third party (Thawte used to provide free email certs). By just sending a signed email to somebody they will then have your public key.
If you are talking about securing email between two email relays, then you can just configure the relays to enforce TLS.
If you are talking about securing the link between clients and email sending/receiving, you can just configure the mail server (if it isn't already) to only accept connections on pop3s/imaps/smtps/etc.
Other ideas is setting up encrypted tunnels between relays (like how ssh can do port forwarding), etc.
I'm a professional programmer of 20 years now and not in my 30's any more. I've worked with some very good younger programmers that can run circles around me in terms of putting in 16 hour days when I'm basically toast after 8. What you probably have over the younger programmers is a maturity that employers appreciate. For example, younger programmers (imho) tend to be a bit more emotional, naive, insecure/defensive, not ask for help, obfuscate things trying to be 'clever', get a personal attachment to a project, etc. Older programmers tend to have checked their ego at the door a long time ago and have a healthy separation between personal/home life and work.
That said, sadly, there are many employers who won't hire an older programmer. They may see you as somebody trying to position yourself in an unwanted management role. They may also think they are getting two for the price of 1/2 if they hire that single kid just out of school who's willing to slave away for 16+ hours a day for peanuts.
Insurance/warranties/etc. are designed to make the companies money who provide them, full stop. They can be beneficial if you can't pay for the repair/replacement cost yourself if something goes wrong, but if you can otherwise afford to repair/replace the unit yourself then by all means, don't pay for insurance/warranties.
I've been on both sides of the fence on this over the years. I've had people rewrite my code without asking, and other times I've rewritten somebody else's code.
First of all, it just annoys people. It's not fixing a problem (at least not long term). I rewrote some code and fixed, perhaps, 10 problems but accidentally introduced a new problem. I was beaten up ad-nauseum in front of management over introducing that one problem into somebody else's code.
OTOH, a sloppy programmer might get used to you fixing their work. That can turn into a dangerous long term situation if people think it is normal for you to double your workload by cleaning up other people's work as well as doing your own.
As far as the business is concerned, they aren't paying two people to solve the same problem twice.
Make sure everyone knows where their responsibilities lie. Let everyone make their own mistakes. If somebody is 'sloppy' but there aren't any repercussions, then perhaps 'sloppy' really is good enough and you are the one wasting too much time and energy being nit picky.
If a coworker's sloppiness is actually really impacting your productivity, bring it up with the project manager in a pleasant way on specific issues. Keep the conversion focused on the work being done, not the individuals involved. Saying "Bob's work is sloppy" isn't going to help anybody. Say, "It would save me a lot of time if there were more consistent formatting and commenting in the code."
Don't criticize work that isn't intended for you. For example, those diagrams might only be intended for management, for example, and you might not know that there was a very good reason why they needed to be crammed all on one page (e.g. to be printed out large format to get hung up on a wall, say).
That said, it's good to have pride in your work and take the extra effort to polish it. Be the example. If nobody notices and appreciates your work, then perhaps you need to look for another job?
An odd thing for a CEO of all people to do unless he's lost the relative sense of what the value of money is. Does Musk think throwing money at the problem will solve it? Reminds me of 'trickle down' economics. You know what happens when you go to buy something and are willing to give more cash for it than the asking price? The seller takes the extra cash and sticks it in their pocket, plain and simple.
I don't get it (I'm not in the EU), but you might have thought more people would have noticed besides Google that the Browser Ballot was missing for 17-18 months? Seems odd.
Anybody poke around yet to see how they do the client-side encryption w/o a plugin? I suppose it could be done in Javascript. Another thought I had is maybe using the SSL stream its self and storing that. I would hope they are at least not using Java or Flash.
In any case, I would imagine that this would attract a lot of attention to see just how secure the mechanism is.
Don't joke! It leaves us only an inch away from shit for brains.
had a technique where he would pipe the audio from the recording studio down to a basement where loudspeakers played the audio and picked it back up on microphones and back to the control room. I always thought that it would be fun to try if I had access to a large warehouse or something.
Interesting, but beating a government at their own game by suing their interests simply isn't going to work. It takes arrogance to think you can beat another man's game when the other man gets to define the rules.
I think you need a bit of arrogance just to keep from washing out and having the balls to do some things in college that you might not normally feel comfortable with. Unless the source is from deeper seeded part of your psyche, it will temper its self once you've settled down in your job (or whatever you plan to do with your life) and don't feel like you have to prove yourself any more.
Reminds me of two things: A CS prof told us that we'll spend the first year of our career fighting to get 'root' and the rest of our career trying to get rid of it. Also, when I was involved in hiring I was reminded that a college degree doesn't necessarily mean you know what you are doing, but it does show that you can make a major commitment and follow through.
I was always a bit dubious of the infrared based wireless networking (like IrDA) for an office environment, but what about optical wireless in a data center? Seems like that would solve the potential security issues and you could isolate racks (or parts of racks) on their own wireless network and then do the traditional wired scheme to join those nodes together so that you weren't stretching the bandwidth too thin?
While, true, he is best known as an entertainer of sorts, he's an engineer that's worked in a number of fields (I won't bother posting links to various bios; you can google for those.)
I grew up watching Almost Live! Loved that show. I loved the Billy Quan segments... "Be Like Billy!" It was a sort of extreme spoof of fake looking staged martial arts fighting movies taken to the extreme.
Back but forgot to try hardwired ethernet, oh well. The Live Ubuntu works in a pinch, I would say, but I'd recommend using something like VirtualBox or installing on partition and taking the time to fiddle to get things tweaked out. No backlight on the keyboard and can't tell you about if the video was accelerated (probably not).
It was one of those quick 5-minute tests, but I'm willing to reboot and check some more things for giggles. I can tell you that audio worked, trackpad worked, keyboard, WiFi hardware was recognized but needed the firmware file downloaded and copied into place (been through that before with other Broadcom WiFi stuff), video wasn't horrible VGA res but I didn't try to up it. Let me reboot and post a reply in a few! :')
"Running linux on apple products is no longer an easy thing to do."
I just stuck in a vanilla Ubuntu Desktop 12.04 (32-bit) on a USB flash stick on a rMBP for the first time and it booted right up. I've also used VirtualBox with Ubuntu for years (which is probably more practical/useful in most cases).
Ubuntu is certainly easier and faster to run these days on a Mac than how I remember Yellowdog Linux was. (Ahh, those were the days.)
I call BS. I did a quick search here for "Amazon" on the iTunes Store and it comes up with a number of books related to publishing and marketing with Amazon including publishing eBooks for the Kindle.
I thought it was par for the course to have iffy WiFi on my MBP until I spent an afternoon testing each component. I found two culprits: A bad ethernet router which was effectively cycling one of its ethernet ports continuously, and elsewhere in the network, an old cat-3 cable that was trying to run at 100-baseT speeds.
Besides that, I used to have a wireless telephone that would kill the network each time I used it, but I have long since replaced that. Also beware that each WiFi channel spans two additional channels up and down (e.g. channel 5 is actually using 3,4,5,6,7) so beware of conflicts with other networks in the area.
In short, do your due diligence and find the source(s) of your problem. What you are experiencing isn't normal if everything is working and configured correctly. And I hate to sound like I am pushing Apple products, but you might be safest to use an Airport base station vs. a third party WiFi router. It at least is easier to configure with a Mac and gives the benefit of Airplay and printer sharing, if you need it.
I realize this is a bit of a tongue-in-cheek news item, but isn't government by definition above the law? I mean, if it actually got serious, wouldn't the president just pass an executive order making it exempt from copyright law?
In any case, the government isn't distributing it, it is self distributing! ;')
I see what you did there...
It's obvious that the kid will need something age/experience appropriate, but don't discount buying a good college textbook or two. My parents used to let me buy the occasional college textbook while growing up and even though they were way over my head at the time, they turned out to be some of the most useful books I've ever used.
Also, BASIC and Pascal are still very good languages to start with. C might be a bit complex to start with, especially when dealing with pointers and such. Another language to consider is Javascript. A kid could have a lot of fun with interactivity working with JS (as well as sharing the work), although debugging can sometimes be a bit of a pita.
And for a medical opinion, at that! ;')
I don't buy the marketshare argument entirely. Back in the dark days of OS-9 our office used to get worms and such all the time. Once we migrated to OS-X, we haven't had an incident since. That said, it's pretty much common knowledge that drive-by exploits have existed for years, particularly against Flash and Adobe Acrobat. I suspect that Apple might do with Java what they did with Flash and not have it installed by default and not take the responsibility to push updates with Software Update.
As far as I can tell, you don't know RoR. A reasonable RoR programmer doesn't pass unfiltered input anywhere in the app, especially to something like update_attributes. I avoid update_attributes entirely for that reason.