Look, the girl downstairs from me used to get really noisy during sex. 4 days a week. It sounded like there were different men too. I didn't call my landlord to report she was a hooker because I didn't see any evidence that she was a hooker. Well, besides that she had sex until 2am, wore heels, was black, and paid her rent. Obviously she paid her rent via illegal solicitation and I should have called the police and am now an accomplice to a crime.
See, I know she was a hooker. I saw her once in the halls, she had heels, obviously a hooker.
I know people who carry shit like that around. It's a side job for bounty hunters. Gold or large amounts of cash that need to be transported, sometimes it's a good way to do it. Seriously, criminals robbing a bounty hunter are just prey animals attacking a predator.
No, he didn't "know" shit. He had a bad feeling about his client, because his client seemed shady and not all that up-standing; but his client never showed up with hookers and blow, never chatted about the drug trade, never implied he was doing anything illegal. For all he knew the guy was a bounty hunter, which may occasionally get him side jobs to carry large amounts of cash from one place to another because uh... criminals take cash, and this guy hunts dangerous criminals, so dangerous criminals taking cash from him should be less of a problem.
He saw a massive amount of cash. He continued to have bad feelings based on a fantasy, not in any sort of fact. All he knew was his customer had a lot of cash. Shit, that's a lot of cash.
I don't want to know about your hauling $800,000 of cash because people will come to me asking about your $800,000 of cash they want to steal, with crowbars and pipe wrenches. I don't know shit about no $800,000 of cash, get that shit away from me.
He discovered a lot of money, but no drugs, and nobody mentioned loads of coke. I don't think "I think you're a drug dealer because you seem shady and you have a lot of money I can't account for because I'm not your personal ho-bag and not privy to your private affairs" should count as reasonable belief.
How the fuck is it anyone's business where I got $800k? I have $800k, fuck off. You can't just take it 'cause it's $800k. Now if the accounting says I shouldn't have $800k I need pay taxes on that, though it might come from a non-taxable asset shift (i.e. liquidation of gold...), except I have to pay taxes on gold received since it's considered non-taxable asset (i.e. I can convert it to cash without tax, therefor gold itself is income). Coming into ownership of a lot of things is taxable though.
Recycling PLA is harder, though. The polymer chains are permanently shortened, and you need to either heat or chemically dissolve the material and then re-extrude it. Wax works great in a hopper pot and is infinitely reusable and cheap.
I see lots of comments about needing to know the vulnerability right now, and even panic about taking servers down until it's fixed. I can't help feeling that if that's your reaction you're doing it wrong.
Jesus christ dude. Kepner-Tregoe Potential Problem Analysis. ORM charts. Decision Analysis (Pugh or Kepner-Tregoe; fuck Analytical Hierarchy, it sucks and requires tons of math for inaccurate results) followed with Adverse Consequence Analysis on ORM charts. Stop shitting yourself.
You're wrong. A small computer can be assembled from a few hundred vacuum tubes. I designed a CPU when I was in high school, on paper, turing complete. 4 bits, 16 instructions. Not a lot went into that.
Risk of being exploited versus risk of updating your software. If you decide the risk of updating is lower than the risk of exploitation, you update. OH WAIT, THERE'S NO UPDATE READY UNTIL NEXT WEEK.
My explanation accounts exactly for that and that was the point. The changes between [VULNERABLE] and [FIXED] are not public yet because the [FIXED] state is not ready for production deployment (it may be wrong, and need more work). That means you can't pop open your source tree, do a `git diff`, and go, "oh, in this code path?" and 20 minutes later have your exploit.
Now, a week from now, this stuff will all be public and fixes will be released. Then you can target exactly what's changed, while everyone else is running updates. This is different from targeting exactly what's changed and then running around buttfucking everyone while they have to wait a week to get production-ready code OR chance it with alpha-grade software in production.
The intent of the Columbus voyage was to find a new commercial trading route to reduce time and resource expenditures involved in acquiring lucrative goods. It was an attempt to corner a market and become very, very rich.
They'll have to hunt through all the code. Since a viable, production-ready fix won't be available for a week, but a new piece of code in the vulnerable body is available now, leaving the repo public would result in a week of free exploitation--they've gone and highlighted the exact bit of code the problem is in. The repos are closed, so only contributors and any downstream distribution providers that are working with them to build and test the fixed code are privy to this.
This temporary closure greatly reduces the risk of an attacker tearing down the code and finding the precise vulnerability they're trying to mitigate.
That's exactly the point. They've locked out and shrouded the changes that are being made as they're happening, because of wide-spread collaboration causing changes, tests, etc to occur. It's going to be a week before the fix is ready, but as soon as the first bits of test code go in you can quickly target that body of code and figure out the problem, then exploit it. As-is, you now have to rummage through the whole body of vulnerable code and try to guess what's actually broke.
When the repos are opened back up, the fix will be ready. It might (probably) even be shared with the major distros, who will simultaneously have an updated package published. This greatly reduces the likelihood and window of a zero-day exploit with no fix.
So throw away the entire appliance market, glassware market, automotive technology market, video games market etc media market, fine clothing market--Lands' End isn't just style, but actually well-made clothes unlike the garbage from Wal-Mart that falls apart first washing--and change their entire business model to "Plastic Shit for Rednecks"? Because K-Mart says "fat slob shop here" and Sears kind of says "stuck-up, haughty salesmen who think they're better than you trying to sell you rich-boy shit."
Slashdot Mirror
Look, the girl downstairs from me used to get really noisy during sex. 4 days a week. It sounded like there were different men too. I didn't call my landlord to report she was a hooker because I didn't see any evidence that she was a hooker. Well, besides that she had sex until 2am, wore heels, was black, and paid her rent. Obviously she paid her rent via illegal solicitation and I should have called the police and am now an accomplice to a crime.
See, I know she was a hooker. I saw her once in the halls, she had heels, obviously a hooker.
Did you trace those cash reserves to anything illegal, Mr. DuBoise?
I know people who carry shit like that around. It's a side job for bounty hunters. Gold or large amounts of cash that need to be transported, sometimes it's a good way to do it. Seriously, criminals robbing a bounty hunter are just prey animals attacking a predator.
No, he didn't "know" shit. He had a bad feeling about his client, because his client seemed shady and not all that up-standing; but his client never showed up with hookers and blow, never chatted about the drug trade, never implied he was doing anything illegal. For all he knew the guy was a bounty hunter, which may occasionally get him side jobs to carry large amounts of cash from one place to another because uh... criminals take cash, and this guy hunts dangerous criminals, so dangerous criminals taking cash from him should be less of a problem.
He saw a massive amount of cash. He continued to have bad feelings based on a fantasy, not in any sort of fact. All he knew was his customer had a lot of cash. Shit, that's a lot of cash.
Because you're in the safe business and holy hell you do not want stupid shit like this falling on you.
Money is drugs.
It's illegal to have money unless you're the 1%, dirty prole.
Money is evidence? You socialist whore. Should we throw all the Wall Street bankers and CEOs in jail?
I don't want to know about your hauling $800,000 of cash because people will come to me asking about your $800,000 of cash they want to steal, with crowbars and pipe wrenches. I don't know shit about no $800,000 of cash, get that shit away from me.
He discovered a lot of money, but no drugs, and nobody mentioned loads of coke. I don't think "I think you're a drug dealer because you seem shady and you have a lot of money I can't account for because I'm not your personal ho-bag and not privy to your private affairs" should count as reasonable belief.
How the fuck is it anyone's business where I got $800k? I have $800k, fuck off. You can't just take it 'cause it's $800k. Now if the accounting says I shouldn't have $800k I need pay taxes on that, though it might come from a non-taxable asset shift (i.e. liquidation of gold...), except I have to pay taxes on gold received since it's considered non-taxable asset (i.e. I can convert it to cash without tax, therefor gold itself is income). Coming into ownership of a lot of things is taxable though.
It's impossible for them to top OMG PONIES so they don't even try.
Recycling PLA is harder, though. The polymer chains are permanently shortened, and you need to either heat or chemically dissolve the material and then re-extrude it. Wax works great in a hopper pot and is infinitely reusable and cheap.
I see lots of comments about needing to know the vulnerability right now, and even panic about taking servers down until it's fixed. I can't help feeling that if that's your reaction you're doing it wrong.
That a reaction exists right now is wrong to begin with. They need a book and some training.
Jesus christ dude. Kepner-Tregoe Potential Problem Analysis. ORM charts. Decision Analysis (Pugh or Kepner-Tregoe; fuck Analytical Hierarchy, it sucks and requires tons of math for inaccurate results) followed with Adverse Consequence Analysis on ORM charts. Stop shitting yourself.
You're wrong. A small computer can be assembled from a few hundred vacuum tubes. I designed a CPU when I was in high school, on paper, turing complete. 4 bits, 16 instructions. Not a lot went into that.
The term is "venture". It was a venture project. It had a monetizing plan, whereas this has no monetizing plan.
Risk of being exploited versus risk of updating your software. If you decide the risk of updating is lower than the risk of exploitation, you update. OH WAIT, THERE'S NO UPDATE READY UNTIL NEXT WEEK.
At least you have the option. And people who are exploiting shit are using Metasploit and playing around on Milw0rm anyway, seriously.
My explanation accounts exactly for that and that was the point. The changes between [VULNERABLE] and [FIXED] are not public yet because the [FIXED] state is not ready for production deployment (it may be wrong, and need more work). That means you can't pop open your source tree, do a `git diff`, and go, "oh, in this code path?" and 20 minutes later have your exploit.
Now, a week from now, this stuff will all be public and fixes will be released. Then you can target exactly what's changed, while everyone else is running updates. This is different from targeting exactly what's changed and then running around buttfucking everyone while they have to wait a week to get production-ready code OR chance it with alpha-grade software in production.
The intent of the Columbus voyage was to find a new commercial trading route to reduce time and resource expenditures involved in acquiring lucrative goods. It was an attempt to corner a market and become very, very rich.
They'll have to hunt through all the code. Since a viable, production-ready fix won't be available for a week, but a new piece of code in the vulnerable body is available now, leaving the repo public would result in a week of free exploitation--they've gone and highlighted the exact bit of code the problem is in. The repos are closed, so only contributors and any downstream distribution providers that are working with them to build and test the fixed code are privy to this.
This temporary closure greatly reduces the risk of an attacker tearing down the code and finding the precise vulnerability they're trying to mitigate.
That's exactly the point. They've locked out and shrouded the changes that are being made as they're happening, because of wide-spread collaboration causing changes, tests, etc to occur. It's going to be a week before the fix is ready, but as soon as the first bits of test code go in you can quickly target that body of code and figure out the problem, then exploit it. As-is, you now have to rummage through the whole body of vulnerable code and try to guess what's actually broke.
When the repos are opened back up, the fix will be ready. It might (probably) even be shared with the major distros, who will simultaneously have an updated package published. This greatly reduces the likelihood and window of a zero-day exploit with no fix.
Why not teach the 3D printer to extrude wax????
So throw away the entire appliance market, glassware market, automotive technology market, video games market etc media market, fine clothing market--Lands' End isn't just style, but actually well-made clothes unlike the garbage from Wal-Mart that falls apart first washing--and change their entire business model to "Plastic Shit for Rednecks"? Because K-Mart says "fat slob shop here" and Sears kind of says "stuck-up, haughty salesmen who think they're better than you trying to sell you rich-boy shit."