Not if generic manufacturers can't obtain the name brand product for bioequivalence studies.
Huh. That's actually a thing? Offhand, I can think of a handful of ways around it, most of which involve finding people who already take the name brand.
Presentations from Retrophin, a company formerly headed by Martin Shkreli, CEO of Turing, from which Turing acquired the rights to Daraprim, suggest that a closed distribution system could prevent generic competitors from legally obtaining the drugs for the bioequivalence studies required for FDA approval of a generic drug. [...] the necessary bioequivalence studies require a sample of the existing medication provided directly by the company, and not simply purchased from a pharmacy, which Turing could decline to provide.
Without bioequivalence studies, a generic medication is ineligible for the Abbreviated New Drug Application. Instead, as I understand it, the manufacturer must go through the process of a full New Drug Application. This requires clinical trials the same as those of a brand new drug.
Before you go on about liability, one would imagine there'd be less liability with a clinical trial of a "copy" of a known-safe drug than there was with the clinical trials of the name brand when it was first brought to market.
In order to establish to the FDA that your drug is "a 'copy' of a known-safe drug", you would first need to obtain samples of "a known-safe drug" against which to prove bioequivalence.
the drug patent is the only legal barrier to entry; once that expires, there is none.
Mylan still holds patents related to EpiPen. The company continually improves the safety and effectiveness of its autoinjector mechanism by making novel, useful, and non-obvious improvements and applying for patents on these improvements. So even if you've made a generic of EpiPen version X, that's not the approved medical device anymore; EpiPen version X+1 is. It's like in 1997 when the FDA banned Seldane (terfenadine) in favor of its successor Allegra (fexofenadine) the same month the generic for terfenadine was due to come out.
I can see two main reason why a site operator might try using HTTPS to connect to a web server over an otherwise secure channel, such as a hidden service on Tor or I2P.*
One reason is that not all parts of all browsers are aware that hidden services are secure channels. The W3C has published a spec titled Secure Contexts, which recommends that web browsers block use of sensitive JavaScript APIs by non-secure sites. Even script-free sites cause the browser to show a warning about an insecure context if a document contains a form, such as a login form or an editing form. Until user agents start treating hidden services (*.i2p and *.onion) as potentially trustworthy origins, sites using these APIs must use HTTPS to build a secure context.
Another reason relates to typosquatting. If a user mistypes a hidden service's hostname, such as facebookcorewwwi.onion, the user might end up connecting to a server controlled by an entity other than Facebook. To fight this, some certificate authorities have begun to offer Extended Validation certificates that apply to hidden services, assuring the user of the real-world identity of a hidden service's operator.
* The I2P community refers to hidden services as "eepsites".
Because Blu-ray Disc's bitrate is up to 54 Mbps, its picture quality can greatly exceed that of HD Internet streaming or HD cable TV. But 2K cinema can have an even cleaner picture than a 1080p Blu-ray Disc because DCP reels use Motion JPEG 2000 with high dynamic range at up to 250 Mbps.
Packets are unlike guns in that while people who carry guns legitimately usually don't have to carry their guns across Comcast property in order to get to work on time, people who telecommute and live in Comcast territory do have to carry their packets across Comcast property in order to get to work on time.
things which other people may not deem to have any value cannot be stolen.
If lawfully made copies of a work are not available now or in the near future, the work's copyright owner probably sees no value in making it available.
Basically, if you use Windows 10 non-server as a server and it fucks your data, you can't sue for damages.
It's worded not only as a liability disclaimer but also as a prohibition on such use in the first place. Not only can you not sue for damages, but if Microsoft discovers that you are running a home server as a hobbyist, it theoretically reserves the right to sue you for infringement of its copyrights in the Windows operating system.
A crapton of commercial software requires activation. Most games do too.
At least with games, there's less of a chance of using up your one Internet activation and having to resort to a (relatively expensive) phone call. Nor do single-player and local-multiplayer console games require activation.
"Class-action arbitration is forbidden" - is that even enforceable?
I'm from the EU and here it's definitely not enforceable.
Which EU country? And how much room does it have to admit refugees from a commerce regime in Slashdot's home country that recognizes hardly any rights of individual end users?
If you have more space and more money to throw at hardware than I do, getting a second machine - or indeed a games console - would achieve the same results with less hassle
Windows might be the better option because the console won't run game mods.
Unless it's from a small business that hasn't yet received enough revenue from license sales to buy enough Macs for testing. You would end up seeing something like this:
Windows: Buy Now Linux: Buy Now macOS: Sign Up to know when it becomes available
But then according to the EULA, you technically have to buy two Windows licenses: one for the host and one for the guest. This can get expensive at $199.99 each (source).
Why would I maintain an entire Windows installation when I can just use Wine?
Because the application raises an unhandled exception and writes a memory dump when you start it under Wine. And even if you manually write the registry keys whose absence causes the exception, it freezes up in the settings dialog. Or when you're editing an instrument, one of the controls starts flashing, causing the entire application to become unresponsive. All three of these problems are true of the application 0CC-FamiTracker 0.3.14.6 on Wine 1.8, the version of Wine shipped with Debian 9.
To the extent included with Windows, Word, Excel, PowerPoint and OneNote are licensed for your personal, non-commercial use, unless you have commercial use rights under a separate agreement.
this license does not give you any right to, and you may not: [...] work around any technical restrictions or limitations in the software; use the software as server software, [...] reverse engineer, decompile, or disassemble the software, or attempt to do so
Even the most basic telemetry in Windows 10 discloses the identity of every application and driver installed on the system to Microsoft:
By accepting this agreement and using the software you agree that Microsoft may collect, use, and disclose the information as described in the Microsoft Privacy Statement (aka.ms/privacy), and as may be described in the user interface associated with the software features.
The following provision appears to make it illegal for the second owner of a used PC with retail Windows to resell that PC and Windows license to a third person:
If you acquired the software as stand-alone software (and also if you upgraded from software you acquired as stand-alone software), you may transfer the software to another device that belongs to you. You may also transfer the software to a device owned by someone else if (i) you are the first licensed user of the software and (ii) the new user agrees to the terms of this agreement.
Windows also requires activation:
You can also activate the software manually by Internet or telephone. In either case, transmission of certain information will occur, and Internet, telephone and SMS service charges may apply.
I have seen Internet activation fail at my current employer, requiring the administrator to use the telephone activation means, which involves waiting on hold for several minutes. Unless the user subscribes to unmetered telephone service, waiting on hold costs 10 cents per minute (source: T-Mobile.com).
Windows downloads and installs semiannual updates unattended. It delays download on a metered connection, but there's no GUI to mark an Ethernet network as having a metered uplink (such as that of satellite Internet).
The softwareperiodically checks for system and app updates, and downloads and installs them for you. You may obtain updates only from Microsoft or authorized sources, and Microsoft may need to update your system to provide you with those updates. By accepting this agreement, you agree to receive these types of automatic updates without any additional notice.
Class-action arbitration is forbidden:
you and we agree to binding individual arbitration before the American Arbitration Association (“AAA”) under the Federal Arbitration Act (“FAA”), and not to sue in court in front of a judge or jury. Instead, a neutral arbitrator will decide and the arbitrator’s decision will be final except for a limited right of appeal under the FAA. Class action lawsuits, class-wide arbitrations, private attorney-general actions, and any other proceeding where someone acts in a representative capacity aren’t allowed.
The video portion of the software is for "PERSONAL AND NON-COMMERCIAL USE" only, and I haven't yet taken legal advice as to whether uploading a video to YouTube and allowing ads makes the use no longer "PERSONAL AND NON-COMMERCIAL USE".
THIS PRODUCT IS LICENSED UNDER THE AVC, THE VC-1, AND THE MPEG-4 PART 2 VISUAL PATENT PORTFOLIO LICENSES FOR THE PERSONAL AND NON-COMMERCIAL USE OF A CONSUMER TO (i) ENCODE VIDEO IN COMPLIANCE WITH THE ABOVE STANDARDS (“VIDEO S
There's a trade-off to consider if your code's to be shared (ever share your Matlab code with someone who doesn't use it)
Likewise, there's a trade-off to consider if your code's to be shared (ever share your Excel code with someone who doesn't use it). Or how good is recent LibreOffice Calc at running Excel macros?
If there's no IRC client currently installed on a particular device, there isn't much other option.
Yes, there is. Especially with the current plethora of platforms which do rather similar stuff.
Say you're logged into a PC owned by a public library using the patron ID on your library card, and you want to use this PC to connect to an IRC server. Without administrative access to this PC, how do you arrange for the installation of a native client?
Say you've received a FaceTime invitation from a person with whom you wish to communicate, but you don't own a sufficiently recent Mac, iPhone, iPad, or iPod touch. Instead, your primary PC runs X11/Linux or Windows, and your primary mobile device runs Android. How do you communicate with this person?
The D2 system on Slashdot uses JavaScript.
Thats a prime example. Why (does it use JS) ? Composing a reply is a rather non-interactive activity.
Choosing which replies to expand and collapse is interactive.
And maybe you should not be buying devices which cannot do what you cannot do without ?:-)
If you had a good reason to run six applications, each exclusive to a different operating system, would you buy six devices, one to run the operating system for each of these applications? Many operating systems cannot be installed on generic hardware for legal or technical reasons, such as macOS and mobile phone operating systems.
You're warned everywhere not to open random email attachments and/or running executables from unknow sources, but in the case of JS there still is an "just download everything and run it" attitude (pushed by website designers).
There's more sandboxing with JavaScript than with the native executables that email worms used.
Most users would find a seconds-long throbber for only the part of the document that has changed less jarring than a seconds-long throbber for the entire document.
I think you are mixing up latency with bandwith there...
Not necessarily. As long as the rest of the user interface of a single-page web application remains visible during loading, the user is more likely to accept the latency than if the application's interface were to disappear during loading (which is the case for script-free navigation and forms). In addition, TCP's slow start keeps a new connection at low bandwidth until it has received a few packet acknowledgments (or "acks"), and these acks take a while to come back on a high-latency connection. In the terminology of RFC 2488, satellite has a high "delay*bandwidth product" (DBP), which standard TCP limits to 65.5 kB (64 KiB).
Even on a 10Mbit line you would be able to download a respectable HTML page (below a meg) in less than a second.
A lot of the data links to which I refer are far slower than 10 Mbit. A single TCP connection with the standard 64 KiB window and the 560 ms minimum ping of satellite won't be able to exceed 0.9 Mbit. On a 1 Mbit link, 100 kB of changes load in 1 second, but 100 kB of changes and 900 kB of redundant unchanged data load in about 10 seconds. In addition, at a typical cellular data transfer price of $10 per GB, it costs one cent to load a 1 MB document, but ten 100 kB change sets fit in the same cent.
Maybe someone should not try to transpose native aps like IRC to force it to work in HTML ?
If there's no IRC client currently installed on a particular device, there isn't much other option. This is even more true of a protocol whose native client is not ported to a particular combination of architecture and operating system at all, such as Discord on 32-bit X11/Linux devices.
And that takes care of... what, a handful of websites outof the gazillion which abuse JS ?
A handful here, a handful there, and soon it adds up to a substantial amount of use cases.
Bandwidth inefficiency
Already answered too.
I don't see where it was. Though the images and CSS are cached, the HTML markup for the comments that were already sent is not because the query string portion of the URL has changed to reflect the comments that the user has chosen to expand.
And just take a look at how this very website does it. A nice trade-off between bandwidth and providing info.
The D2 system on Slashdot uses JavaScript. I was describing the contortion that a web application would have to make if a website were to provide functionality identical to that of D2 without JavaScript.
Same answer as the first: If you want to do something HTML is not made for, you should maybe just stick with the/a native application.
Same objection to the answer as the first: Not all native applications are available for all significant platforms. Please find me a complete Discord client for 32-bit X11/Linux.
A script which allows such a dragging motion to be send so collaboration is possible ? Doesn't sound too bad. But wat does sound bad is that I have no way to allow only that script to run (and limit it to only that function).
One possibility is LibreJS, which allows all scripts to run so long as auditable source code is available to the public under a free software license.
Just imagine a website using AJAX requests over such a connection [with a ping near 1000 ms]
It would still be painful, but importantly it's less painful than the alternative. Most users would find a seconds-long throbber for only the part of the document that has changed less jarring than a seconds-long throbber for the entire document.
Slashdot Mirror
It's possible to convert any Chromebook to a real laptop by opening it up, turning a screw, and reflashing real laptop firmware.
I met so many people with masters degrees that had no idea how to actually turn a Windows server into a domain controller
Benefit of doubt: Were they Solaris, *BSD, or GNU/Linux admins who had never been in front of a licensed copy of Windows Server before?
That means kick those programs off public school campuses.
What? Private for-profit colleges have a way worse track record than public colleges.
Then split the difference with private non-profit colleges, like Rose-Hulman Institute of Technology or University of Notre Dame.
(and in tech not having a formal degree isn't all that uncommon anyways, compared to most [science, tech, engineering, and math] fields)
HUH? The T in STEM stands for 'tech(nology)'. Parsefail
It makes more sense if you read the first "tech" as information technology as opposed to other technology.
Not if generic manufacturers can't obtain the name brand product for bioequivalence studies.
Huh. That's actually a thing? Offhand, I can think of a handful of ways around it, most of which involve finding people who already take the name brand.
From "Daraprim" on Wikipedia:
Without bioequivalence studies, a generic medication is ineligible for the Abbreviated New Drug Application. Instead, as I understand it, the manufacturer must go through the process of a full New Drug Application. This requires clinical trials the same as those of a brand new drug.
Before you go on about liability, one would imagine there'd be less liability with a clinical trial of a "copy" of a known-safe drug than there was with the clinical trials of the name brand when it was first brought to market.
In order to establish to the FDA that your drug is "a 'copy' of a known-safe drug", you would first need to obtain samples of "a known-safe drug" against which to prove bioequivalence.
the drug patent is the only legal barrier to entry; once that expires, there is none.
Mylan still holds patents related to EpiPen. The company continually improves the safety and effectiveness of its autoinjector mechanism by making novel, useful, and non-obvious improvements and applying for patents on these improvements. So even if you've made a generic of EpiPen version X, that's not the approved medical device anymore; EpiPen version X+1 is. It's like in 1997 when the FDA banned Seldane (terfenadine) in favor of its successor Allegra (fexofenadine) the same month the generic for terfenadine was due to come out.
The drug market is not like the broadband "market"; there's actual competition once the patents expire.
Not if generic manufacturers can't obtain the name brand product for bioequivalence studies.
using https over tor is just stupid.
I can see two main reason why a site operator might try using HTTPS to connect to a web server over an otherwise secure channel, such as a hidden service on Tor or I2P.*
One reason is that not all parts of all browsers are aware that hidden services are secure channels. The W3C has published a spec titled Secure Contexts, which recommends that web browsers block use of sensitive JavaScript APIs by non-secure sites. Even script-free sites cause the browser to show a warning about an insecure context if a document contains a form, such as a login form or an editing form. Until user agents start treating hidden services (*.i2p and *.onion) as potentially trustworthy origins, sites using these APIs must use HTTPS to build a secure context.
Another reason relates to typosquatting. If a user mistypes a hidden service's hostname, such as facebookcorewwwi.onion, the user might end up connecting to a server controlled by an entity other than Facebook. To fight this, some certificate authorities have begun to offer Extended Validation certificates that apply to hidden services, assuring the user of the real-world identity of a hidden service's operator.
* The I2P community refers to hidden services as "eepsites".
What we need is a Wikipedia that can’t be reverted.
Such a site would quickly fill with spam. What measure would you recommend to prevent that?
Disc requires no internet access (which is important to many who have no, limited, slow, or capped Internet)
True of DVD. But don't players require occasional firmware updates to play new titles on Blu-ray Disc?
Disc rentals cover almost ALL movies out there
Still a big "almost". There are movies that haven't been rereleased on home video since the VHS days.
Because Blu-ray Disc's bitrate is up to 54 Mbps, its picture quality can greatly exceed that of HD Internet streaming or HD cable TV. But 2K cinema can have an even cleaner picture than a 1080p Blu-ray Disc because DCP reels use Motion JPEG 2000 with high dynamic range at up to 250 Mbps.
And if you meant 2017, why not just say 2017?
Because 2K Games finds it easier to obtain and enforce exclusive rights in the "2K17" mark.
Packets are unlike guns in that while people who carry guns legitimately usually don't have to carry their guns across Comcast property in order to get to work on time, people who telecommute and live in Comcast territory do have to carry their packets across Comcast property in order to get to work on time.
things which other people may not deem to have any value cannot be stolen.
If lawfully made copies of a work are not available now or in the near future, the work's copyright owner probably sees no value in making it available.
Comcast won't gain business by providing an inferior service.
It will when Comcast charges $60 for 1000 GB/mo while its cellular competitors are charging $60 for 10 GB/mo.
I guess the extent to which $280 is worth it depends on the exchange rate between your country's currency and the United States dollar.
Basically, if you use Windows 10 non-server as a server and it fucks your data, you can't sue for damages.
It's worded not only as a liability disclaimer but also as a prohibition on such use in the first place. Not only can you not sue for damages, but if Microsoft discovers that you are running a home server as a hobbyist, it theoretically reserves the right to sue you for infringement of its copyrights in the Windows operating system.
A crapton of commercial software requires activation. Most games do too.
At least with games, there's less of a chance of using up your one Internet activation and having to resort to a (relatively expensive) phone call. Nor do single-player and local-multiplayer console games require activation.
"Class-action arbitration is forbidden" - is that even enforceable?
It is in Slashdot's home country. AT&T Mobility LLC v. Concepcion, 563 U.S. 333 (2011).
I'm from the EU and here it's definitely not enforceable.
Which EU country? And how much room does it have to admit refugees from a commerce regime in Slashdot's home country that recognizes hardly any rights of individual end users?
If you have more space and more money to throw at hardware than I do, getting a second machine - or indeed a games console - would achieve the same results with less hassle
Windows might be the better option because the console won't run game mods.
most modern software nowadays has an OSX version.
Unless it's from a small business that hasn't yet received enough revenue from license sales to buy enough Macs for testing. You would end up seeing something like this:
The other option is use a VM
But then according to the EULA, you technically have to buy two Windows licenses: one for the host and one for the guest. This can get expensive at $199.99 each (source).
I guess it's a matter of whether your employer is willing to expense $200 for Windows and $80 for Parallels Desktop.
Why would I maintain an entire Windows installation when I can just use Wine?
Because the application raises an unhandled exception and writes a memory dump when you start it under Wine. And even if you manually write the registry keys whose absence causes the exception, it freezes up in the settings dialog. Or when you're editing an instrument, one of the controls starts flashing, causing the entire application to become unresponsive. All three of these problems are true of the application 0CC-FamiTracker 0.3.14.6 on Wine 1.8, the version of Wine shipped with Debian 9.
These terms in the Windows 10 EULA worry me:
Even the most basic telemetry in Windows 10 discloses the identity of every application and driver installed on the system to Microsoft:
The following provision appears to make it illegal for the second owner of a used PC with retail Windows to resell that PC and Windows license to a third person:
Windows also requires activation:
I have seen Internet activation fail at my current employer, requiring the administrator to use the telephone activation means, which involves waiting on hold for several minutes. Unless the user subscribes to unmetered telephone service, waiting on hold costs 10 cents per minute (source: T-Mobile.com).
Windows downloads and installs semiannual updates unattended. It delays download on a metered connection, but there's no GUI to mark an Ethernet network as having a metered uplink (such as that of satellite Internet).
Class-action arbitration is forbidden:
The video portion of the software is for "PERSONAL AND NON-COMMERCIAL USE" only, and I haven't yet taken legal advice as to whether uploading a video to YouTube and allowing ads makes the use no longer "PERSONAL AND NON-COMMERCIAL USE".
There's a trade-off to consider if your code's to be shared (ever share your Matlab code with someone who doesn't use it)
Likewise, there's a trade-off to consider if your code's to be shared (ever share your Excel code with someone who doesn't use it). Or how good is recent LibreOffice Calc at running Excel macros?
If there's no IRC client currently installed on a particular device, there isn't much other option.
Yes, there is. Especially with the current plethora of platforms which do rather similar stuff.
Say you're logged into a PC owned by a public library using the patron ID on your library card, and you want to use this PC to connect to an IRC server. Without administrative access to this PC, how do you arrange for the installation of a native client?
Say you've received a FaceTime invitation from a person with whom you wish to communicate, but you don't own a sufficiently recent Mac, iPhone, iPad, or iPod touch. Instead, your primary PC runs X11/Linux or Windows, and your primary mobile device runs Android. How do you communicate with this person?
The D2 system on Slashdot uses JavaScript.
Thats a prime example. Why (does it use JS) ? Composing a reply is a rather non-interactive activity.
Choosing which replies to expand and collapse is interactive.
And maybe you should not be buying devices which cannot do what you cannot do without ? :-)
If you had a good reason to run six applications, each exclusive to a different operating system, would you buy six devices, one to run the operating system for each of these applications? Many operating systems cannot be installed on generic hardware for legal or technical reasons, such as macOS and mobile phone operating systems.
You're warned everywhere not to open random email attachments and/or running executables from unknow sources, but in the case of JS there still is an "just download everything and run it" attitude (pushed by website designers).
There's more sandboxing with JavaScript than with the native executables that email worms used.
Most users would find a seconds-long throbber for only the part of the document that has changed less jarring than a seconds-long throbber for the entire document.
I think you are mixing up latency with bandwith there ...
Not necessarily. As long as the rest of the user interface of a single-page web application remains visible during loading, the user is more likely to accept the latency than if the application's interface were to disappear during loading (which is the case for script-free navigation and forms). In addition, TCP's slow start keeps a new connection at low bandwidth until it has received a few packet acknowledgments (or "acks"), and these acks take a while to come back on a high-latency connection. In the terminology of RFC 2488, satellite has a high "delay*bandwidth product" (DBP), which standard TCP limits to 65.5 kB (64 KiB).
Even on a 10Mbit line you would be able to download a respectable HTML page (below a meg) in less than a second.
A lot of the data links to which I refer are far slower than 10 Mbit. A single TCP connection with the standard 64 KiB window and the 560 ms minimum ping of satellite won't be able to exceed 0.9 Mbit. On a 1 Mbit link, 100 kB of changes load in 1 second, but 100 kB of changes and 900 kB of redundant unchanged data load in about 10 seconds. In addition, at a typical cellular data transfer price of $10 per GB, it costs one cent to load a 1 MB document, but ten 100 kB change sets fit in the same cent.
Maybe someone should not try to transpose native aps like IRC to force it to work in HTML ?
If there's no IRC client currently installed on a particular device, there isn't much other option. This is even more true of a protocol whose native client is not ported to a particular combination of architecture and operating system at all, such as Discord on 32-bit X11/Linux devices.
And that takes care of ... what, a handful of websites outof the gazillion which abuse JS ?
A handful here, a handful there, and soon it adds up to a substantial amount of use cases.
Bandwidth inefficiency
Already answered too.
I don't see where it was. Though the images and CSS are cached, the HTML markup for the comments that were already sent is not because the query string portion of the URL has changed to reflect the comments that the user has chosen to expand.
And just take a look at how this very website does it. A nice trade-off between bandwidth and providing info.
The D2 system on Slashdot uses JavaScript. I was describing the contortion that a web application would have to make if a website were to provide functionality identical to that of D2 without JavaScript.
Same answer as the first: If you want to do something HTML is not made for, you should maybe just stick with the/a native application.
Same objection to the answer as the first: Not all native applications are available for all significant platforms. Please find me a complete Discord client for 32-bit X11/Linux.
A script which allows such a dragging motion to be send so collaboration is possible ? Doesn't sound too bad. But wat does sound bad is that I have no way to allow only that script to run (and limit it to only that function).
One possibility is LibreJS, which allows all scripts to run so long as auditable source code is available to the public under a free software license.
Just imagine a website using AJAX requests over such a connection [with a ping near 1000 ms]
It would still be painful, but importantly it's less painful than the alternative. Most users would find a seconds-long throbber for only the part of the document that has changed less jarring than a seconds-long throbber for the entire document.