Not the worst breach I've ever seen, but a couple of stupid things still. Not least, the reset email linked you to http://links.evernote.mkt5371.com/ctt?kn=4&ms=NTcwNzMxMwS2&r=blahblahblah. I actually presumed it was a high quality phishing attempt and flagged it as spam. Later down the same email they advised "Never click on 'reset password' requests in emails - instead go directly to the service"...
Yeah, I expect they had so many to notify they had to use a service, but if so why leave a link in the email?
I never even got notified by email, or if I did it was so spammy it got trapped and I'm too lazy to look.
My android app got an update, and the reason for the update was a security announcement. So I installed it, and it insisted I much change passwords, and took me to the web page to do so.
In our security investigation, we have found no evidence that any of the content you store in Evernote was accessed, changed or lost. We also have no evidence that any payment information for Evernote Premium or Evernote Business customers was accessed.
The investigation has shown, however, that the individual(s) responsible were able to gain access to Evernote user information, which includes usernames, email addresses associated with Evernote accounts and encrypted passwords.
Evernote has passwords, like just about every site. What you put on evernote is your business, but without additional layers of encryption most people don't put anything up there that is super secret. Most people use if for notes and stuff they need for quick reference on the go. Its a tool of convenience not a bank vault.
This is the crux of the problem. Not putting things in the recycle chain because you believe there is still a useful life for that 386 is exactly the problem. You save it, you pawn it off on some kid or some church and they leave it in a garage or something. Just take it to recycle. Maybe they do the right thing, but its almost certain that pawning it off on someone else does nothing good for anybody.
Get it in the recycle chain even if you have to take it apart and recycle the plastic, the chassis, the transformers etc separately. Your time is free to you, but if a recycler has to pay someone to sort ewaste, chances are they will just shred the whole mess and bury it somewhere.
Because a "ban on cellphone locking" is what we have, so its what it is necessary to examine the effects of.
Ok, I took a different english course than you.
We have a ban on cellphone unlocking since the librarian of congress terminated the exception to the DMCA. It is now illegal to unlock your phone. Unlocking your phone is banned.
There is no ban on locking your phone. Almost every carrier does it.
None of which indicates what legal recourse he can take in the instance. That's what he is talking about.
Well they seem to rewrite FCC regulations at will when they want to swap frequencies or ban certain devices. Usually with no change in the law.
Why are they investigating the effects of "ban on cell-phone unlocking." Why aren't they investigating a BAN on Celphone Locking? Several other countries have such a ban. Why do we allow such locking anyway? The carriers have your credit card, they have a contract, why do they need a lock on on your phone?
It's been pretty obvious from the start that Koh was in the tank for Apple. I suspect at this point, she's worried about what the appeals court might have to say about her conduct, especially if they can't find grounds to overturn her verdict.
The jury appears to have awarded damages for the Galaxy Tab 10.1 LTE infringing — $219,694 worth — but didn't find that it had actually infringed anything
.
And of course there was Lucy Koh shooting off her mouth about the Galaxy 10 being in obvious infringement (even imposed an injunction, since lifted), when in fact it was found not to infringe by the jury. Ooops, how embarrassing.
Koh is probably going to get overturned entirely on this trial. It hasn't even gotten to the appeal stage yet.
And most of those 7 billion have a huge variety of shoes to choose from, literally hundreds of choices. Lots of people making and selling shoes. Lots of people making shoe making machines.
Machines making shoe haven't reduced employment in the shoe industry.
There are multiple free electronic journals, but the costs associated with archiving, etc. are generally either borne from "page charges" to authors, various institutional support options, or private generosity.
One wonders about the actual costs involved in hosting electronic journals. Is the volume that high that this is a serious issue?
You can finding hosting companies for under $100/year (including an SSL cert) which will supply a mountain of storage and bandwidth. Documents simply aren't that big, 6 to 10 meg seems about the maximum size, and the volume is probably low. It would seem charging authors would serve primarily to keep the junk science quacks at bay.
It would see to me that website management would be the largest cost item. I imagine the largest job would be for someone to categorize, catalog, index, all of those documents or an automated process to do this at the time of submission, but someone has to be a gatekeeper. Who funds that employee? How do they even make payroll?
In ten years, everybody in manufacturing is going to be fired because everything will be done with machines. Then the manufacturing will be located everywhere to get around tariffs, yet it will employ nobody except a couple of engineers to watch over the plants.
Thats been predicted for decades. Granted, there aren't many cobblers in the world any more. But there are far more people involved in shoe manufacture these days than ever before. Lots of them make shoe making machines.
Not really. That is a common mythconception. Grow slowly and borrow instead of getting investors. That means you benefit more from your innovation. There is no better place for you to invest your own money, and time, than in your own creations where you have control.
But you have pretty much written off "Scaling Up" when you take this approach.
It may be a better long term practice for small business that wants to remain small business, but it is not a solution to meeting demand or or any of those other things that you typically expect when a product becomes popular and widely available. Its fine for a family business, more suited to the service industry than to manufacturing.
You also run the risk of leaving the door wide open for competitors, some of whom will be using your inventions, but none of whom you will have the money to fight, because you insist on growing slowly. It doesn't matter if you are seeking to replace the College Yearbook, and end up creating Facebook, or seeking a better PDA and end up creating the iPhone. If you don't scale quickly and massively, you will lose your market to the next guy who will go all in. Just ask Palm or Psion or My Space.
You have to scale, or forever remain a niche product. Tesla is facing this test as we speak. DeLorean failed it.
Oh, c'mon. Does Kobe Bryant drink Sprite? Did Robert Wagner get a reverse mortgage? Does Danica Patrick buy godaddy.com domains?
More to the point, does Kobe Bryant entice ME to drink sprite? Ah, No.
And yes, Danica Patrick (or someone claiming to be her official site) does indeed buy (get for free?) a domain from Go Daddy.
For a lot of us, having Al Gore or Clinton or Ashton Kutcher or similar clueless people pimping for a coding site is a clear signal to run away like our hair is on fire. Who pulled their strings to get them to jump on that bandwagon? It costs money to even get their attention. Where is that coming from, and what is their motivation?
The real question is though as always does Microsoft Office matter, as someone who has lived without it using then the answer is yes, and I think the lower priced chromebooks running ARM will will enterprise.
So you agree that Office matters, BUT you think Chrombooks will win out anyway? Is that what you said?
I'm not so sure.
If people are going to embrace cloud storage, Google is going to have to offer Zero Knowledge Encrypted storage, because big business, or sensitive business (medical, legal, etc) is not going to be able to use any hardware solution where they place their documents in another companies hands who in turn could hand them over to anyone with a National Security Letter.
You need a local storage capability or a secure storage where the cloud operator can't decrypt your files. (aka like SpiderOak).
The most amazing thing about this is not how it came about or that trekkies voted it in. No, the thing that amazes me most is that Shatner has twitter followers!!
There are alternatives to GPS, inertial navigation, dead reckoning, terrain following radar, etc.
Traveling was done before GPS and can be done without it. Assuming it maybe jammed durning a conflict is already an assumption many weapons systems make.
This is true to a certain extent.
Most military drones are not in fact drones at all, but simply Unmand airplanes. They are "piloted" from Creech Air Force Base. The video is good enough for the remote pilot to do the same sort of navigating that was done prior to GPS. Heading plus Time, Land Mark recognition, long wave radio direction finding, etc.
That Data Link to Creech is the vulnerable link. Taliban already captured UAV video transmissions (since encrypted), but a more capable enemy with something besides an 5th grade education would be able to disrupt or jam that control and feedback link as well as the GPS.
A weakness is a weakness, even if it was designed that way, that doesn't mean it isn't a weakness or that it shouldn't be fixed.
And it was fixed. So why the venom?
By the way, reading TFA would reveal that using this design flaw as an attack was a LOT harder than it first appears. You actually had to know three things, a username, a device Id, just to decrypt the ASP that you captured on your carefully crafted network with an intercepting proxy with fake credentials. However, if the session all happened under SSL, all bets were off. (Always using SSL is an option offered in many, but not all google services).
Slashdot Mirror
Aaron noted that it was time to 'close down The Web Standards Project.
That and the fact nobody paid them the slightest bit of attention anyway....
With that mindset we would never recycle anything and would all be living in a junk yard.
Recycling frees resources for others to users. Hording doesn't.
You apparently don't know how most cloud storage systems work.
And you apparently don't have a clue about Evernote. Its not a "cloud storage" system.
Run along now sonny. I've got work to do.
Not the worst breach I've ever seen, but a couple of stupid things still. Not least, the reset email linked you to http://links.evernote.mkt5371.com/ctt?kn=4&ms=NTcwNzMxMwS2&r=blahblahblah. I actually presumed it was a high quality phishing attempt and flagged it as spam. Later down the same email they advised "Never click on 'reset password' requests in emails - instead go directly to the service"...
Yeah, I expect they had so many to notify they had to use a service, but if so why leave a link in the email?
I never even got notified by email, or if I did it was so spammy it got trapped and I'm too lazy to look.
My android app got an update, and the reason for the update was a security announcement. So I installed it, and it insisted I much change passwords, and took me to the web page to do so.
They are log in keys. You already have those keys. They are your login passwords.
So go in, delete everything you've entered, then empty the trash and deactivate your account.
Like everybody else, they probably have off-line backup, and your account may dwell on some
tape media somewhere until that cycles out of existence.
Good luck getting something like that passed into law, since it runs directly contrary to what your government (every government) wants.
What keys are you speaking about?
From TFA
In our security investigation, we have found no evidence that any of the content you store in Evernote was accessed, changed or lost. We also have no evidence that any payment information for Evernote Premium or Evernote Business customers was accessed.
The investigation has shown, however, that the individual(s) responsible were able to gain access to Evernote user information, which includes usernames, email addresses associated with Evernote accounts and encrypted passwords.
Evernote has passwords, like just about every site. What you put on evernote is your business, but without additional layers of encryption most people don't put anything up there that is super secret. Most people use if for notes and stuff they need for quick reference on the go. Its a tool of convenience not a bank vault.
Wait, Why was this modded down?
This is the crux of the problem. Not putting things in the recycle chain because you believe there is still a useful life for that 386 is exactly the problem. You save it, you pawn it off on some kid or some church and they leave it in a garage or something. Just take it to recycle. Maybe they do the right thing, but its almost certain that pawning it off on someone else does nothing good for anybody.
Get it in the recycle chain even if you have to take it apart and recycle the plastic, the chassis, the transformers etc separately. Your time is free to you, but if a recycler has to pay someone to sort ewaste, chances are they will just shred the whole mess and bury it somewhere.
Because a "ban on cellphone locking" is what we have, so its what it is necessary to examine the effects of.
Ok, I took a different english course than you.
We have a ban on cellphone unlocking since the librarian of congress terminated the exception to the DMCA. It is now illegal to unlock your phone. Unlocking your phone is banned.
There is no ban on locking your phone. Almost every carrier does it.
None of which indicates what legal recourse he can take in the instance.
That's what he is talking about.
Well they seem to rewrite FCC regulations at will when they want to swap frequencies or ban certain devices. Usually with no change in the law.
Why are they investigating the effects of "ban on cell-phone unlocking." Why aren't they investigating a BAN on Celphone Locking? Several other countries have such a ban. Why do we allow such locking anyway? The carriers have your credit card, they have a contract, why do they need a lock on on your phone?
It's "Death from Above due to incompetence" too? That makes me feel so much better.
The study was done in 2004, nearly a decade ago, and most of the flights during that time were with much earlier
models than available today.
Still you have to worry about what happens when every Barney Fife from your local sheriff department can run one of these
with 10 hours training.
It's been pretty obvious from the start that Koh was in the tank for Apple. I suspect at this point, she's worried about what the appeals court might have to say about her conduct, especially if they can't find grounds to overturn her verdict.
I suspect that Koh pretty much handed Samsung grounds for appeal when she ruled the Court has identified an impermissible legal theory on which the jury based its award, and cannot reasonably calculate the amount of excess while effectuating the intent of the jury. Groklaw saw this coming from day one.
Further Groklaw noted months ago that
The jury appears to have awarded damages for the Galaxy Tab 10.1 LTE infringing — $219,694 worth — but didn't find that it had actually infringed anything
.
And of course there was Lucy Koh shooting off her mouth about the Galaxy 10 being in obvious infringement (even imposed an injunction, since lifted), when in fact it was found not to infringe by the jury. Ooops, how embarrassing.
Koh is probably going to get overturned entirely on this trial. It hasn't even gotten to the appeal stage yet.
And most of those 7 billion have a huge variety of shoes to choose from, literally hundreds of choices.
Lots of people making and selling shoes.
Lots of people making shoe making machines.
Machines making shoe haven't reduced employment in the shoe industry.
You sort of missed the part about losing your entire market because you refuse to grow.
80k for hosting?
Tell me you forgot a decimal point!
8k would be overkill!
Very informative.
There are multiple free electronic journals, but the costs associated with archiving, etc. are generally either borne from "page charges" to authors, various institutional support options, or private generosity.
One wonders about the actual costs involved in hosting electronic journals. Is the volume that high that this is a serious issue?
You can finding hosting companies for under $100/year (including an SSL cert) which will supply a mountain of storage and bandwidth.
Documents simply aren't that big, 6 to 10 meg seems about the maximum size, and the volume is probably low. It would seem charging authors would serve primarily to keep the junk science quacks at bay.
It would see to me that website management would be the largest cost item. I imagine the largest job would be for someone to categorize, catalog, index, all of those documents or an automated process to do this at the time of submission, but someone has to be a gatekeeper. Who funds that employee? How do they even make payroll?
I see you've also introduced a new plan of text layout, without first having it reviewed.
My review would have hinted that the content was lost in the layout, but I wasn't asked.
In ten years, everybody in manufacturing is going to be fired because everything will be done with machines. Then the manufacturing will be located everywhere to get around tariffs, yet it will employ nobody except a couple of engineers to watch over the plants.
Thats been predicted for decades. Granted, there aren't many cobblers in the world any more. But there are far more people involved in shoe manufacture these days than ever before. Lots of them make shoe making machines.
"a company needs investors."
Not really. That is a common mythconception. Grow slowly and borrow instead of getting investors. That means you benefit more from your innovation. There is no better place for you to invest your own money, and time, than in your own creations where you have control.
But you have pretty much written off "Scaling Up" when you take this approach.
It may be a better long term practice for small business that wants to remain small business, but it is not a solution to meeting demand
or or any of those other things that you typically expect when a product becomes popular and widely available. Its fine for a family business, more suited to the service industry than to manufacturing.
You also run the risk of leaving the door wide open for competitors, some of whom will be using your inventions, but none of whom you will have the money to fight, because you insist on growing slowly. It doesn't matter if you are seeking to replace the College Yearbook, and end up creating Facebook, or seeking a better PDA and end up creating the iPhone. If you don't scale quickly and massively, you will lose your market to the next guy who will go all in. Just ask Palm or Psion or My Space.
You have to scale, or forever remain a niche product. Tesla is facing this test as we speak. DeLorean failed it.
Oh, c'mon. Does Kobe Bryant drink Sprite? Did Robert Wagner get a reverse mortgage? Does Danica Patrick buy godaddy.com domains?
More to the point, does Kobe Bryant entice ME to drink sprite? Ah, No.
And yes, Danica Patrick (or someone claiming to be her official site) does indeed buy (get for free?) a domain from Go Daddy.
For a lot of us, having Al Gore or Clinton or Ashton Kutcher or similar clueless people pimping for a coding site is a clear signal to run away like our hair is on fire.
Who pulled their strings to get them to jump on that bandwagon? It costs money to even get their attention. Where is that coming from, and what is their motivation?
The real question is though as always does Microsoft Office matter, as someone who has lived without it using then the answer is yes, and I think the lower priced chromebooks running ARM will will enterprise.
So you agree that Office matters, BUT you think Chrombooks will win out anyway? Is that what you said?
I'm not so sure.
If people are going to embrace cloud storage, Google is going to have to offer Zero Knowledge Encrypted storage, because big business, or sensitive business (medical, legal, etc) is not going to be able to use any hardware solution where they place their documents in another companies hands who in turn could hand them over to anyone with a National Security Letter.
You need a local storage capability or a secure storage where the cloud operator can't decrypt your files. (aka like SpiderOak).
There is no planet under discussion here. Didn't you get the memo?
But if you are going to go that way, name one moon Natalie and the other Portman.
The most amazing thing about this is not how it came about or that trekkies voted it in.
No, the thing that amazes me most is that Shatner has twitter followers!!
There are alternatives to GPS, inertial navigation, dead reckoning, terrain following radar, etc.
Traveling was done before GPS and can be done without it. Assuming it maybe jammed durning a conflict is already an assumption many weapons systems make.
This is true to a certain extent.
Most military drones are not in fact drones at all, but simply Unmand airplanes. They are "piloted" from Creech Air Force Base. The video is good enough for the remote pilot to do the same sort of navigating that was done prior to GPS. Heading plus Time, Land Mark recognition, long wave radio direction finding, etc.
That Data Link to Creech is the vulnerable link. Taliban already captured UAV video transmissions (since encrypted), but a more capable enemy with something besides an 5th grade education would be able to disrupt or jam that control and feedback link as well as the GPS.
A weakness is a weakness, even if it was designed that way, that doesn't mean it isn't a weakness or that it shouldn't be fixed.
And it was fixed. So why the venom?
By the way, reading TFA would reveal that using this design flaw as an attack was a LOT harder than it first appears. You actually had to know three things, a username, a device Id, just to decrypt the ASP that you captured on your carefully crafted network with an intercepting proxy with fake credentials. However, if the session all happened under SSL, all bets were off. (Always using SSL is an option offered in many, but not all google services).