I'm sure that the hundred of people who agreed on the fact that the weakest link in encrypted data transmission is the key exchange never thought of that. They only had to invent a protocol, IPSec, just for this, and even with an encrypted key exchange in Phase 2 some of them felt it wasn't safe enough, so they invented Client Certificates, Certificate Authority Servers with Revocation Lists, and decided the safest way to transmit these certificates and lists was to physically transport these keys in encrypted formats on encrypted drives. It's not like I invented the damn thing or pulled the comment from my hat.
Any good network engineer will tell you that if the data doesn't leave my computer, it's safer by several orders of magnitude.
I don't understand people. You could send your sync data to _any_ server, even your own, it will *never* be totally safe. Just *_don't_* send data that can potentially harm you if it's intercepted. Personally, I sync only my bookmarks, and I don't give a damn if anyone ever gets access to them.
"simply point to the same web IP address, which is presumably served by the same server. In my book this is hardly a mirror, which would imply it is somewhat fault tolerant."
Or the IP is, you know, a Virtual IP on server load balancers and they can host the website on one thousand different servers at the same time for all you know?
Could somebody explain to me the "flaws" of the office documents format? Besides not being open format, that is. This is a genuine question for a genuinely interested person.
VoIP doesn't "use UDP instead of TCP". VoIP (which is usually SIP+RTP, but there are other protocols out there used to carry voice over IP networks) can use UDP over TCP, and that configuration is the most common one. But not the only one possible as the article suggests.
Also, the article in the/. article kind of suggests that VoIP (which is a concept, not a protocol) can use only UDP, which is not true. It's like saying Internet is used only for HTTP.
The X360 is actually a pretty good product, software wise. Their Set-top box system, Media Room, is one of the best around. When most STB use a (poor) Web browser to navigate, they use a heavy client that only sends a couple of HTTP requests (instead of downloading a whole page). They are selling that to ISPs now to integrate in their own STB.
Anyway, I thought I'd mention there's one good Microsoft product around.
Wouldn't it be possible to efficiently capture and reuse the heat generated by data centers to convert it to some sort of power? Energy is not my specialty, but I spend a lot of time in rack bays and I can tell that even with good air conditioning, the amount of heat generated is huge. Can't we use some of it to generate power? Right now it's pretty much wasted : lots of hot air is compensated by sending even more cold air, so that the average temperature is acceptable (around 19 C). What if we properly extracted the hot air and made something useful with it?
MAC addresses don't go past the first network equipment (usually your router or switch). As far as I know there are only two ways of seeing the original MAC address : encapsulate the Ethernet frames, or directly ask the number from the NIC driver. Both are currently impossible to do in a passive way (ie: network probe or traffic filtering). You need a layer 7 tool to do that.
I don't think it's enforceable to require every single computer to have such a software (just to many of them, and too many versions). That is without even mentioning networks such as Tor which would remove the informations from the payload anyway.
I read my post again and I wasn't clear. I didn't mean that one firewall created implied several millisecond of latency (although this can be true when you reach some critical load). But every device adds some latency, lower than 1ms, and since packets go through a whole lot of these equipments, in the end you can't really drop below a certain amount of latency.
Some applications are natively sensitive to latency and jitter. Consider VOIP or teleconferencing, or algorithmic stock trading.
Most VoIP codecs can work with a maximum of 30ms Jitter. You can't drop below 1ms because of the latency implied by the network equipments (just to go through their hardware takes a few milliseconds - not to mention stateful equipment such as firewalls or load balancers, etc.)
Also, I wonder how they can passively measure latency or jitter - accurately, that is. Network Testing companies (such as Spirent, Ixxia or Agilent) do it in a much better way: you send a frame, and timestamp it. When it's received by the other side of the testing device, another timestamp is created. Then they compare the two timestamps and can accurately give you the one-way latency. When the two end-points are far away, you use two devices which you synchronize via GPS (down to the nanosecond precision). I don't see how you can measure latency (and, therefore, jitter) 100% passively.
In the iPlayer case, the DRM system is implemented, I think, to prevent non-UK citizens (hence not funding the BBC). The content itself would be, I believe, free. I don't mind the DRM in this case. It should be, however, in an open format (just require the BBC player to play it and make it OS-free).
I don't see anything wrong with this. If you don't like it, you should have immigrated into a different country.
When you're leaving your country - and you never leave your country for the kicks, it's usually because of poverty or war - you might not have the opportunity to learn french. In fact, immigrants are usually lower class with minimum education, so speaking an extra language is just not possible for them.
So I don't think you should speak french before applying for papers. They should set up language training programs or whatever, and if you didn't go/didn't pass/whatever, then you are asked to leave or given another chance to prove your motivation.
It is illegal in France to work more than 35 hours a week, which makes it difficult to successfully start a small business.
It is NOT illegal in France to work more than 35 hours a week. If you've got a management job, or your job contract makes you a "cadre" (making you pay more taxes than the non-cadre, but the extra money goes to a retirement fund), there are no maximum hours a week you have to work.
Now THAT is funny. The world thanking the US. Heh. You've got quite an imagination.
Maybe if the world were more democratic and rational, that would happen. On the other hand, if the world were more rational, the US wouldn't have so much of a problem handing over control of the net.
A little bit paranoid aren't we? Why being sarcastic and say that I've got "quite an imagination" for thinking that, when it's due, people should give credit to the US? Do you think that you should instead go "Oh fuck it, the [rest of the world] will again find ways to blame us so why bother" ? Gee.
And get off your white horse. Saying the US doesn't want to hand over the control of a few root DNS servers because they are such a wonderful democracy just creates more animosity. I don't live in the US and guess what? We are a democracy here, too. All the countries next to mine are as well. We are called the Europe, we are quite content with the degree of freedom we have, and we are tired of hearing how the USA is the best place in the world to live in. Maybe if you people stopped thinking that way you'd be more popular.
that several countries will whine and whine and whine about not having Internet infrastructure and instead of investing their own resources in building out their own infrastructure will guilt and bludgeon the rest of the world into paying for it.
How this post reached a score of "4, interesting" is beyond me. Jeez if it's only a matter of money at least allow other countries to pay. But it's not even open for debate. That argument is stupid. As are all the "we invented teh interweb and we paied for it its ours lolz". Internet is not a patent or anything. It should belong to humanity. Humanity should thank the US for helping it start and invent many of the technologies related. This is a chance of the US to improve their image.
Happened to me a couple of time on Windows. The OS would crash while accessing some Firefox files (the bookmark.html file and possibly some others). You reboot, Windows "fixes" the file(s) that got corrupted during the crash. Bam, your profile is reset, including your bookmarks. I know the profile is reset because all the settings are changed back to default.
They offer $90.00 a month for 10mbps DSL, VOIP phone and HD/Digital cable.
Sweet deal, but here in SF they seem to be quite spotty as to what buildings have it.. to the point of being a joke.
Sweet deal? Jesus, in Europe this goes for 29,99. You can even 20Mbps if you are eligible (ie: the DSLAM near you is upgraded for ADSL2+).
"Beyond HD-TV, I wonder if very high speed Internet access, multi-core personnal PCs and virtualisation technologies (not sure for this one) will allow us to share our CPUs and our disks. What would you think?"
Well, if you consider that having a FTP is a share of CPU and disks, I'm pretty sure that a lot of people will "share" their 50Mb upstream line with people like RAZOR1911, L0L, XOR, RELOADED... Who needs P2P when you have an IPSEC FTP ? Not that I'd do that, of course.
Yeah, I'm wondering about that too. As I see it, we have these options:
Music is not downloadable, but streamed. You make your playlist online and listen to it from your browser (supposely with a crappy player IE-only compatible). Possible.
Music is downloadable, DRM'd, and you need to wait a while in front of ads in order to download. Hopefuly you can "pack" them in a RAR (or more likely ZIP..) file so you don't spend more time waiting than downloading. Unlikely
Music is downloadable in a proprietary format, and you can play them only in a proprietary player displaying ads. Will work only on Windows of course, and maybe on Mac OS. Likely
Music is downloadable, DRM'd in an open format, you can download a bunch at the same time after watching some ads, and you can play them on any platform because it's an open format. Unlikely.
I would suggest one of the SOHO product of Fortinet. They are firewall/IPS/IDS. That is, not only do they provide the basic routing and firewall protection (NAT, (D)DoS protection, etc..), but will also scan inbound and outbound traffic for virus, malware, spyware and spam. The dangerous data is blocked before it reaches your computer, and that is good.
Slashdot Mirror
I'm sure that the hundred of people who agreed on the fact that the weakest link in encrypted data transmission is the key exchange never thought of that. They only had to invent a protocol, IPSec, just for this, and even with an encrypted key exchange in Phase 2 some of them felt it wasn't safe enough, so they invented Client Certificates, Certificate Authority Servers with Revocation Lists, and decided the safest way to transmit these certificates and lists was to physically transport these keys in encrypted formats on encrypted drives. It's not like I invented the damn thing or pulled the comment from my hat.
Any good network engineer will tell you that if the data doesn't leave my computer, it's safer by several orders of magnitude.
I don't understand people. You could send your sync data to _any_ server, even your own, it will *never* be totally safe. Just *_don't_* send data that can potentially harm you if it's intercepted. Personally, I sync only my bookmarks, and I don't give a damn if anyone ever gets access to them.
"simply point to the same web IP address, which is presumably served by the same server. In my book this is hardly a mirror, which would imply it is somewhat fault tolerant."
Or the IP is, you know, a Virtual IP on server load balancers and they can host the website on one thousand different servers at the same time for all you know?
Could somebody explain to me the "flaws" of the office documents format? Besides not being open format, that is. This is a genuine question for a genuinely interested person.
VoIP doesn't "use UDP instead of TCP". VoIP (which is usually SIP+RTP, but there are other protocols out there used to carry voice over IP networks) can use UDP over TCP, and that configuration is the most common one. But not the only one possible as the article suggests.
Also, the article in the /. article kind of suggests that VoIP (which is a concept, not a protocol) can use only UDP, which is not true. It's like saying Internet is used only for HTTP.
The X360 is actually a pretty good product, software wise. Their Set-top box system, Media Room, is one of the best around. When most STB use a (poor) Web browser to navigate, they use a heavy client that only sends a couple of HTTP requests (instead of downloading a whole page). They are selling that to ISPs now to integrate in their own STB. Anyway, I thought I'd mention there's one good Microsoft product around.
Wouldn't it be possible to efficiently capture and reuse the heat generated by data centers to convert it to some sort of power? Energy is not my specialty, but I spend a lot of time in rack bays and I can tell that even with good air conditioning, the amount of heat generated is huge. Can't we use some of it to generate power? Right now it's pretty much wasted : lots of hot air is compensated by sending even more cold air, so that the average temperature is acceptable (around 19 C). What if we properly extracted the hot air and made something useful with it?
MAC addresses don't go past the first network equipment (usually your router or switch). As far as I know there are only two ways of seeing the original MAC address : encapsulate the Ethernet frames, or directly ask the number from the NIC driver. Both are currently impossible to do in a passive way (ie: network probe or traffic filtering). You need a layer 7 tool to do that.
I don't think it's enforceable to require every single computer to have such a software (just to many of them, and too many versions). That is without even mentioning networks such as Tor which would remove the informations from the payload anyway.
I read my post again and I wasn't clear. I didn't mean that one firewall created implied several millisecond of latency (although this can be true when you reach some critical load). But every device adds some latency, lower than 1ms, and since packets go through a whole lot of these equipments, in the end you can't really drop below a certain amount of latency.
Also, I wonder how they can passively measure latency or jitter - accurately, that is. Network Testing companies (such as Spirent, Ixxia or Agilent) do it in a much better way: you send a frame, and timestamp it. When it's received by the other side of the testing device, another timestamp is created. Then they compare the two timestamps and can accurately give you the one-way latency. When the two end-points are far away, you use two devices which you synchronize via GPS (down to the nanosecond precision). I don't see how you can measure latency (and, therefore, jitter) 100% passively.
In the iPlayer case, the DRM system is implemented, I think, to prevent non-UK citizens (hence not funding the BBC). The content itself would be, I believe, free. I don't mind the DRM in this case. It should be, however, in an open format (just require the BBC player to play it and make it OS-free).
So I don't think you should speak french before applying for papers. They should set up language training programs or whatever, and if you didn't go/didn't pass/whatever, then you are asked to leave or given another chance to prove your motivation.
It is illegal in France to work more than 35 hours a week, which makes it difficult to successfully start a small business. It is NOT illegal in France to work more than 35 hours a week. If you've got a management job, or your job contract makes you a "cadre" (making you pay more taxes than the non-cadre, but the extra money goes to a retirement fund), there are no maximum hours a week you have to work.
I, for one, welcome our new iceberg overlords.
Internet is for pr0n.
And get off your white horse. Saying the US doesn't want to hand over the control of a few root DNS servers because they are such a wonderful democracy just creates more animosity. I don't live in the US and guess what? We are a democracy here, too. All the countries next to mine are as well. We are called the Europe, we are quite content with the degree of freedom we have, and we are tired of hearing how the USA is the best place in the world to live in. Maybe if you people stopped thinking that way you'd be more popular.
Here goes my karma.
Aah, you all know I meant layer 7 not level, stop making fun of me because I posted before my 3rd coffee.
You use an IPS/IDS appliance that goes up to level 7.
Happened to me a couple of time on Windows. The OS would crash while accessing some Firefox files (the bookmark.html file and possibly some others). You reboot, Windows "fixes" the file(s) that got corrupted during the crash. Bam, your profile is reset, including your bookmarks. I know the profile is reset because all the settings are changed back to default.
I would suggest one of the SOHO product of Fortinet. They are firewall/IPS/IDS. That is, not only do they provide the basic routing and firewall protection (NAT, (D)DoS protection, etc..), but will also scan inbound and outbound traffic for virus, malware, spyware and spam. The dangerous data is blocked before it reaches your computer, and that is good.