One of the great features of a cookie that the article leaves out is the fact that servers don't need to set an Expiry date.
If you don't set an expiry date, the cookie is temporary, and will not be stored to disk. It will be deleted/destroyed when the browser is closed.
Cookies with SessionID information should ALWAYS be temporary, or no Expiry date. Anyone who sets a cookie with sensitive information with an expiry date is asking for trouble, plain and simple.
Well, thats closer, but I think in reality it would be a bit smaller.
So, you did 10 (Gbit/sec) * 8 (bits per byte) * 5 (seconds) = 62.5 Gbytes.
The 10Gb links are Ethernet links. Lets also assume HTTP is the transfer method, just to make it 'easy'. We could use FTP which is UDP but then we'd have to account for the TCP Control connection in the traffic. Heck, Lets even assume nice jumbo frames with a 9000 MTU. Also, lets assume the video is 'optimally' compressed.
14+20+20 = 54 bytes out of every 9000 transfered for header information.
On top of this, there will be HTTP headers at the start of the request, but since they are only transfered at the start (not every packet), lets factor them out as miniscule.
So, basically 62.5 is the maximum theoretical data of the circuits. 62.5Gbytes/9000 * 54 = 375Mbytes of packet overhead.
The Maximum possible transfered in 5 seconds would be 62.5Gbytes - 375Mbytes = 62.125Gbytes.
Yknow, Microsoft didn't get any millage out of SCO. So they thought, "Hey, lets butter up Novell. Partner with them and help them get some market share."
In 12 months, when Novell hasn't gotten much market traction, Microsoft may suggest "It's because of all the Linux companies competing against *your* UNIX business.. Don't you own the rights to that?"
*lawsuits ensue*
--Safe to remove Conspiracy-Tinfoil hat-- (or is it??)
Yknow, this makes me want to vent about the whole "Intellegent Design" argument.
Whether teaching Evolution, "Intellegent Design", or this Utah "4 out of 5 Dentists agree" crap, the problem is not the teaching of these theories. The key problem is teaching children to question conventional wisdom. Kids need to be taught to always question what they know. Kids need to know what your teacher teaches you is what everyone "thinks" to be right at the moment, but who knows what the future will bring. If you're going to lobby gangbusters to teach the kids of today something, teach them to evaluate what they are taught themselves. The world is many shades of grey, not black and white.
I originally thought of this, but with SSL, you have port information. AKA, you make a TCP connection on port 443 (or 6667 or whatever BT uses), then you negotiate SSL. So, by using SSL you would still have to do a port connection. This could be used to still help fingerprint BitTorrent.
You could use port 443, then it would look like a HTTPS connection. Sounds good, except that quite a few broadband ISPs block port 80 and 443 and 25 inbound, to prevent worms/viruses/abuse.
With IPSEC, you're operating at Layer3, so the ISP can't filter out at the port (TCP/UDP) level. They either allow IPSEC, or block it.
Now, granted there are some NAT traversal issues with IPSEC, but commercial VPNs have worked around those. I don't know how they work though, so I may be talking out of my arse;)
Why don't the clients create a simple IPSEC connection between clients and tracker (Or client-client in a trackerless version). Granted, I'm not an IPSEC expert, but wouldn't this better accomplish their goals?
This would keep the connection and communication private, and they could run the standard BT protocol on top of IPSEC. On top of that, ISPs won't shape IPSEC down like Bit torrent traffic - because they would anger corporate VPN users.
Dosen't Flash memory have a limited amount of writes?
I worked for a company that made a prototype network appliance, and they used flash memory for the filesystem. 3 months after beta started, all the devices failed due to the swap-space on the Flash chips writing too often, and causing the flash storage to fail.
I don't think this study shows learning processes as much as the poster says it does.
I think the real key here is communication and culture. The Chimps were 'shown' how to open the box to retrieve the food. The children were also 'shown', and told that they could do whatever they thought neccicary to retreive it.
I would think that upbringing and communication would have a big impact on what the kids will do. Lots of times, when an 'adult' shows a child how to do something, they will take that as the 'correct' way to do it, and not deviate from that - because if there was another way to do it, why would the 'adult' show them incorrectly? Kids that have been taught or had the experiance to question authority would be more likely IMO to skip unneeded steps.
However, a chimp most likely does not have this 'follow what the adult says' mentality, so it seems obvious that they would do whatever is the easiest to get the desired result.
If I remember right, WPA2 natively supports 802.1x, via WPA2-Enterprise. All clients that support WPA2 should support it natively.
802.1x for Wired - yes, hell that sucks.
802.1x for Wifi - easy on client side. No supplicant issues because the supplicant is already used for the WPA2 stuff.
Hard part for WPA2-Enterprise is setting up auth database/RADIUS+TLS server/etc. If a home wifi vendor makes that easy/clouded/etc - could be nice!
Isn't it based off of this?
PowerShell/Win32-OpenSSH
Posting to remind me to quote this when we're all having discussions about the need to require 16,384bit keys.
Solidarity with my iPad/iPhone brothers!
*Poors 40 on the sand*
Yeah, this sadly makes me hope other solutions to kill flash take of a bit more..
"PIN" Number = "Personal Identification Number" Number
"ATM" Machine = "Automated Teller Machine" Machine
So, unless there was sarcasm I missed, I think the original post was correct.
One of the great features of a cookie that the article leaves out is the fact that servers don't need to set an Expiry date.
If you don't set an expiry date, the cookie is temporary, and will not be stored to disk. It will be deleted/destroyed when the browser is closed.
Cookies with SessionID information should ALWAYS be temporary, or no Expiry date. Anyone who sets a cookie with sensitive information with an expiry date is asking for trouble, plain and simple.
Yup, your right.
I was thinking 10(Gbits / Sec) * (1 byte / 8 bits) * 5 ( sec ) = 62.5 Gbytes
I noticed the units didn't cancel correctly, and didn't think it through.
Whoops, your right. I got the ftp-data channel mixed up in my head with TFTP (Which uses UDP).
r _Protocol
http://en.wikipedia.org/wiki/Trivial_File_Transfe
Well, thats closer, but I think in reality it would be a bit smaller.
/9000 * 54 = 375Mbytes of packet overhead.
So, you did 10 (Gbit/sec) * 8 (bits per byte) * 5 (seconds) = 62.5 Gbytes.
The 10Gb links are Ethernet links. Lets also assume HTTP is the transfer method, just to make it 'easy'. We could use FTP which is UDP but then we'd have to account for the TCP Control connection in the traffic. Heck, Lets even assume nice jumbo frames with a 9000 MTU. Also, lets assume the video is 'optimally' compressed.
Ethernet header = 14 bytes
IP header = 20 bytes
TCP Header = 20 bytes
14+20+20 = 54 bytes out of every 9000 transfered for header information.
On top of this, there will be HTTP headers at the start of the request, but since they are only transfered at the start (not every packet), lets factor them out as miniscule.
So, basically 62.5 is the maximum theoretical data of the circuits. 62.5Gbytes
The Maximum possible transfered in 5 seconds would be 62.5Gbytes - 375Mbytes = 62.125Gbytes.
--Conspiracy-Tinfoil hat required content--
Yknow, Microsoft didn't get any millage out of SCO. So they thought, "Hey, lets butter up Novell. Partner with them and help them get some market share."
In 12 months, when Novell hasn't gotten much market traction, Microsoft may suggest "It's because of all the Linux companies competing against *your* UNIX business.. Don't you own the rights to that?"
*lawsuits ensue*
--Safe to remove Conspiracy-Tinfoil hat--
(or is it??)
-ebob9
Well, in the past, Microsoft has had huge success with it's OS collaboration projects.. OS/2 anyone?
-ebob9
His post worked for me!
Merged the key into the Registry, right-click and display "Menu Bar", and its back to a semi-sane IE.
-ebob9
I agree with parent! If someone knows how to do this, please post. I'm surprised Microsoft didn't make this available or easy.
Well, ok. Maybe not *suprised*..
-ebob9
If you actually find a GameStop with pre-orders left, THEN it's useful. However, sadly - I don't think you'll have much luck.
(from someone who was the last person at a GameStop at 8:20 am to get one).
-ebob9
Great idea, but aren't they just giving us another device to lose? At least I can call my Blackberry when I lose it.
Hopefully they've thought of this, but the article seems to be lacking details on this new device.
ebob9
Here's something I've always wondered:
If you've got a super-neat bundle of UTP Ethernet cables like this, won't that increase cross-talk? Especially for long-distances?
If nothing else, this theory works great as an excuse for my messy wiring!
ebob9
Did the Wiimote work? That's 90% of the point and feature of the Wii's system right there. So, big frickin deal.
It's not like the goal of the machines was better graphics and processor power, and they had them running on PCs.
Anyone else notice that the language that searched for 'Sex' the most is Arabic? There's a joke there somewhere, but I'm not doing it..
l &geo=all
http://www.google.com/trends?q=sex&ctab=3&date=al
This is good, maybe it might prevent a future upgrade of the flight control systems to Windows -- Talk about a Blue Screen of Death!
ebob9
Yknow, this makes me want to vent about the whole "Intellegent Design" argument.
Whether teaching Evolution, "Intellegent Design", or this Utah "4 out of 5 Dentists agree" crap, the problem is not the teaching of these theories. The key problem is teaching children to question conventional wisdom. Kids need to be taught to always question what they know. Kids need to know what your teacher teaches you is what everyone "thinks" to be right at the moment, but who knows what the future will bring. If you're going to lobby gangbusters to teach the kids of today something, teach them to evaluate what they are taught themselves. The world is many shades of grey, not black and white.
P.S. - I always slept through English class
I originally thought of this, but with SSL, you have port information. AKA, you make a TCP connection on port 443 (or 6667 or whatever BT uses), then you negotiate SSL. So, by using SSL you would still have to do a port connection. This could be used to still help fingerprint BitTorrent.
;)
You could use port 443, then it would look like a HTTPS connection. Sounds good, except that quite a few broadband ISPs block port 80 and 443 and 25 inbound, to prevent worms/viruses/abuse.
With IPSEC, you're operating at Layer3, so the ISP can't filter out at the port (TCP/UDP) level. They either allow IPSEC, or block it.
Now, granted there are some NAT traversal issues with IPSEC, but commercial VPNs have worked around those. I don't know how they work though, so I may be talking out of my arse
ebob
Why don't the clients create a simple IPSEC connection between clients and tracker (Or client-client in a trackerless version). Granted, I'm not an IPSEC expert, but wouldn't this better accomplish their goals?
This would keep the connection and communication private, and they could run the standard BT protocol on top of IPSEC. On top of that, ISPs won't shape IPSEC down like Bit torrent traffic - because they would anger corporate VPN users.
ebob
Dosen't Flash memory have a limited amount of writes?
I worked for a company that made a prototype network appliance, and they used flash memory for the filesystem. 3 months after beta started, all the devices failed due to the swap-space on the Flash chips writing too often, and causing the flash storage to fail.
I don't think this study shows learning processes as much as the poster says it does.
I think the real key here is communication and culture. The Chimps were 'shown' how to open the box to retrieve the food. The children were also 'shown', and told that they could do whatever they thought neccicary to retreive it.
I would think that upbringing and communication would have a big impact on what the kids will do. Lots of times, when an 'adult' shows a child how to do something, they will take that as the 'correct' way to do it, and not deviate from that - because if there was another way to do it, why would the 'adult' show them incorrectly? Kids that have been taught or had the experiance to question authority would be more likely IMO to skip unneeded steps.
However, a chimp most likely does not have this 'follow what the adult says' mentality, so it seems obvious that they would do whatever is the easiest to get the desired result.
I've been watching this guy's profile. He's been making these semi-related Web 2.0 posts on topics for the last couple of days.
I saw this topic, and figured it was right up his alley. He didn't dissapoint.. (well, ok, maybe just a little..)