Slashdot Mirror


User: Jherek+Carnelian

Jherek+Carnelian's activity in the archive.

Stories
0
Comments
1,789
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 1,789

  1. Re:pissed off customers, thats what it means on Amazon Invests In Dynamic Pricing Model For MP3s · · Score: 1, Insightful

    So eventually (at least in theory) the prices will hit some sort of equilibrium point. This could be a pretty interesting natural experiment. If not for the monopoly provided by copyright law, that equilibrium point would be independent of the music, it would equate to the value of the service providing the music, essentially how easy is it to use the service to get the music versus using the p2p flavor of the month to get the same music.
  2. Re:*sigh* on The Pirate Bay About To Relaunch Suprnova.org · · Score: 1

    Lol dummy.

    Free software as a business model is ALL about getting paid for the work you do. IBM, HP, Redhat, etc - they employ thousands of engineers. Tons of other developers are college-kids who reap the rewards of their work through increased knowledge and experience. Then there all the sysadmin/programmer types who work on tools that they use as part of their regular jobs.

    Really, you could not have picked a worse counter-example. Even RMS gets paid by working on contract for Free Software - used to be only as a developer, now mostly as a speaker. The Free software economy is ALL about self-interest, scratching that itch. Once the itch is scratched, it doesn't cost a dime to give away the work-product, that's not charity that's hoping that someone else will scratch their itch and improve upon your work so that you can reap the benefits.

    Calling Free software "charitable" is about as sophisticated an insight as calling it "socialist."

  3. Re:This sounds more like ... on Lenovo Aims $199 PC At China's Rural Population · · Score: 0

    everyone is forgetting about the Atari 800XL ... mine even had a tape drive! Anyone who had an atari 410 tape drive has already done their best to forget that experience!
  4. Re:Some More Speculation on Installation Methods on What We Know About the FBI's CIPAV Spyware · · Score: 1

    They've made trojan'd printers etc before for invasions of other countries networks. No they haven't. It's a hoax.
  5. Re:Worth springing for the 10" screen on In Search of the Cheap Linux Laptop · · Score: 0

    The smaller screen just has a giant black bezel around it, taking up the space where the larger screen would go. Although this brings up interesting upgrade possibilities, I think it's fairly obnoxious; When life gives you lemons - make lemonade. Think of all that extra bezel as a place to put those post-it notes with all your passwords written down.
  6. Re:Trolls and Orcs on 360 HD-DVD Add-on Dropped to $179 · · Score: 1

    $180 for just a tacky add-on drive in comparison doesn't do it for me. The benefit of the add-on drive is that it has been well and thoroughly hacked. If you want to rip HD-DVD's - the add-on drive, when added on to your PC, is the way to go.
  7. Re:GPL or nothing on Dell Asking ATI For Better Linux Drivers · · Score: 0, Flamebait

    However, in the real world, a lot of things won't get done unless someone is compensated in some way.
    ...
    Over 45 years, I've seen that most people who declare things should be free do not contribute a bit of their time to help things be free. They want to be compensated for their time but they want to get everything free. Gee, just what about the CURRENT drivers is not little-f free already?

    You've misconstrued the OP's point in an entirely non-sensical fashion.

    The FREE the OP was talking about wasn't the free-for-no-money kind of free, because we already have that with the current drivers. It was the free-as-in-freedom kind of free. Nothing about freedom requires that people go without compensation.

  8. Re:I guess I'm a pragmatist. on Dell Asking ATI For Better Linux Drivers · · Score: 0

    If the drivers do what I want them to do (i.e. not suck), I will use them, GPL or no GPL. And if they do suck, now you've got a $100+ piece of junk on your hands that you can't do anything with except run MS Windows.

    A good friend of mine encountered a bug in the nvidia drivers that prevented his dual-$300 card system from even displaying. Nvidia's *informal* support (they do not have a formal support system for linux - they want you to post on some web-forum) just blew off the problem report once they established that it was beyond the "did you plug it in level."

    My friend figured out what was wrong, and with source code he could have fixed it, probably with less than 5 lines of code. But he could not do a damn thing because the the drivers where not open source.

    Ironically, this is exactly the same situation that RMS found himself in all those years ago - he had a printer with a buggy driver and no source code. He knew what was wrong, could have probably fixed it with minimal effort, but without the source the printer was just an expensive hunk of junk.
  9. Re:Storage vs Price aka TiVo the Software Company on Tivo HD Released Into the Wild · · Score: 0, Offtopic

    The real question is - has anyone cracked the encryption so that you can just move that external drive over to your PC and do what you want with the recorded shows?

  10. Re:I'm not a Google Fanboy, but... on Google Pledging to Bid $4.6bn to Open Spectrum · · Score: 5, Insightful

    I think there are two points here:

    1) The requirement that the highest bidder open part of their spectrum is not part of Google's business plan beyond the fact the open access is good for the net in general. That's why the claim is false.

    2) Almost all of the tariffs in telco land are custom-fit goverment regulation tailored to their business plans. That makes the claim very hypocritical.

  11. Re:Stealing passwords? Hardly... on Password Vulnerability In Firefox 2.0.0.5 · · Score: 0

    This isn't theft, it's liberation! Information (including passwords) wants to be free! Presumably you are trying to make a didactic point discrediting the slashdot hive mind's belief that 'piracy' is the natural order of things.

    But all you've really done is to re-enforce that belief, not discredit it. The whole foundation of the "information wants to be free" meme is that in making something public, you relinquish all control over it. In this case, Firefox's password manager has a flaw that causes it to make passwords public, thus causing the 'owner' to relinquish all control over them.

    So, just as the standard advice to publishers afraid of piracy is, "don't publish it if you don't want it pirated" the same thing goes in this case, "don't use the buggy password manager if you don't want your passwords published."
  12. Re:After all those on Custom Trojan Creation Tool Sold Online · · Score: 2, Funny

    1NCRE@SE Y0UR PEN1S S1ZE 25% 1N 2 WEEKS!" programs I definitely need custom Trojans.

    Ah, that is unless you've followed the instructions from this oldie but goodie:

    --

    Follow these instructions EXACTLY, and in 3 to 6 weeks you will have received well over 50,000 inches of penis, all yours. This program has remained successful because of the inadequacy and vanity of the participants. Please continue its success by carefully adhering to the instructions.

    Welcome to the world of Mail Order Penis Enlargement! This little business is a little different than most cosmetic surgery. Your product is not solid (sic) and tangible, but rather a service. You are in the business of extending penii. Many small of endowment are happy to pay big bucks for this service.

    (The money made from the penis enlargement is secondary to the income which is made from people like yourself requesting that they be included in that list.)
    # Immediately cut off your penis at the base.
    # Cut off the head of your penis, and pack it in ice.
    # Take the remaining midsection of your penis, and cut it into 5 pieces of equal length.
    # Immediately mail each piece to the first 5 names listed below starting at number 1 through number 5. Send penis only please (total investment your penis). Enclose a note with each piece stating: "Please add my name to your mailing list." (This is a legitimate service that you are requesting and you are paying your penis for this service).
    # Remove the name that appears number 1 on the list. Move the other 9 names up one position. (Number 2 will become number 1 and number 3 will become number 2, etc.) Place your name, address and zip code in the number 10 position.
    # Post the new letter with your name in the number 10 position into 10 (Ten) separate bulletin boards in the message base or to the file section, call the file, MAKE.PENIS.FAST.
    # Within 60 days you will receive over 50,000 inches of PENIS. Keep a copy of this file for yourself so that you can use it again and again whenever you need penis enlargement. As soon as you mail out these letters you are automatically in the mail order business and people are sending you their penis to be placed on your mailing list. This list can then be rented to a reconstructive cosmetic surgeon that can be found in the Yellow Pages for additional income on a regular basis. The list will become more valuable as it grows in size. This is a service. This is perfectly legal. If you have any doubts, refer to Title 18, Sec. 1302 & 1341 of the postal lottery laws.

    NOTE: Make sure you retain EVERY Name and Address sent to you, either on computer or hard copy, but do not discard the names and notes they send you. This is PROOF that you are truly providing a service and should the AMA, FDA, or some other Government Agency question you, you can provide them with this proof!

    Remember as each post is downloaded and the instructions carefully followed, five members will be reimbursed for their participation as a Penis Enlarger with one inch of penis each. Your name will move up the list geometrically so that when your name reaches the number five position you will be receiving thousands of inches in penis.
    # Daniel J. Karnes, 6394-B Tawney Bloom Mogi Donuts, MD 21045
    # Newt Gingrich, Speaker of the House of Misrepresentatives, Washington, DC 20515
    # Emil T. Chuck 6394-A Tawney Bloom, Mogi Donuts, MD 21045
    # Charles Wilson 7690 Karnesville Road, Phobic, MI 48348
    # William Davenant 8295 Hiding Closet Rd, Clarkston, MI 48348
    # Peter Ruckman 14805 Rivercrest, Sterling Hts., MI 48312
    # Steven Crisp 3718 Kings Point, Troy, MI 48083
    # Mark Gengler 5748 Patterson, Troy, MI 48098
    # Pat Robertson 666 God's Little Homophobe Road, Anti-Christ Hills, VA 48307
    # Jesse Helms 20840 Tobacco Mercenary Street, Lung Cancer Hacks., VA 48038

    Dear Friend,

    My name is Daniel J. Karnes. In September 1988 my life was repressed and the bible thumpers were hounding me like you wouldn't believe. I

  13. Re:Even the editors don't RTFA on Slot Machine with Bad Software Sends Players To Jail · · Score: 2, Informative
    Apparently YOU didn't RTFA either.

    If someone came up to a machine, and stuck a buck in and got back $10 without doing anything...
    But when people are lining up and (some of them) shoving $100 in to get $1000 out, that's not "luck" or "the way it goes", that's called "theft". The article says nothing of the kind. What it does say is:

    Prosecutors are considering criminal charges against casino gamblers who won big "Won big" implies they PLAYED the game, not simply put money in and then cashed out "without doing anything."

    More than two dozen people played the machine before one gambler alerted Caesars employees. Again, more than two dozen people PLAYED the machine.

    Nowhere in the article does it even suggest that people just put money in and cashed out 10x what they put in "without doing anything."
  14. Re:Mixed feelings on Slot Machine with Bad Software Sends Players To Jail · · Score: 4, Insightful

    On the other hand, if a slot machine has the fact that it costs one dollar to play prominently displayed, and you get ten dollars' worth of credit when you insert your dollar, it's painfully obvious to any reasonable person that the machine is messed up. I disagree, there are lots of scenarios that could legitimately account for the situation, two I thought of in just 30 seconds:
    1. a promotion available on multiple machines with signage about it somewhere else in the casino
    2. an 'easter egg' only mentioned in advertising - like radio commercials - designed to lure people into coming to the casino to try to hit the 'jackpot'

    What makes it so reasonable to believe that the 'error' was really by design is the level of micromanagement that goes on at a typical casino. First the state is involved with highly stringent verification and validation of all electronic games of chance. Then there is the level of observation that goes on - cameras all over the place watching everybody. Then there the actual people on the floor watching everything - keeping track of who wins and who loses, deciding who to comp with free drinks, free rooms, etc.

    Given all that, the chance of a broken machine lasting very long on the floor is so small that it is entirely reasonable to expect that it would be the last thing someone might expect when faced with the described behaviour. This is certainly the first time I've ever heard of such an event, despite there being hundreds of thousands of such machines in use for decades now.
  15. Re:I don't know... on The Desktop -- Time to Start Saying Goodbye? · · Score: 1

    It'd be a bitch to try and install two or three PCI tuner cards in one for a mythtv setup Why do it at all when there are better and easier options like the HDHomeRun ethernet tuner?
  16. Re:In the United States... on Optimum Copyright Period Decided by Math · · Score: 1

    That list of extensions belongs in wikipedia, where did you get it from?

  17. Re:In the United States... on Optimum Copyright Period Decided by Math · · Score: 1

    Disney sought out stories he believed were ripe for animation. That would appeal to his audience. Bambi, Dumbo, 101 Dalmatians... None of these were in the public domain. That's nice.

    Here is an incomplete list of Disney movies that either draw completely from the public domain or make use of it in large proportion.

    Cinderella
    Pinocchio
    Treasure Island
    Snow White and the Seven Dwarfs
    20,000 Leagues Under the Sea
    The Reluctant Dragon
    Mickey and the Beanstalk (Jack and the Beanstalk)
    Melody Time (folk music)
    The Adventures of Ichabod and Mr. Toad (Wind in the Willows and Legend of Sleepy Hollow)
    Alice in Wonderland
    The Story of Robin Hood and His Merrie Men (live-action)
    Robin Hood (animated)
    The Sword and the Rose (based on an 1898 novel)
    Rob Roy, the Highland Rogue (historical fiction about Rob Roy's life)
    Davy Crockett, King of the Wild Frontier (historical fiction about Davy Crockett's life)
    Sleeping Beauty
    The Little Mermaid
    Return to Oz
    Aladdin (The Book of One Thousand and One Nights)
    Beauty and the Beast
    The Jungle Book
    Swiss Family Robinson
    Kidnapped

  18. Re:I hope it's published anyway on Controversial Security Paper Nixed From Black Hat · · Score: 1

    Not if the AES key is generated per-session, and the contents is encrypted with that session-unique key, based on random tokens supplied by the other end of the connection (i.e. the source of your media file). And, with AACS, that's a fundamental flaw. Since said source of the media file is not anywhere nearly as well protected and can easily be (and has been) subverted, thus the entropy of the session-unique can easily be eliminated.
  19. Re:Money on New York Plans Surveillance Veil For Downtown · · Score: 0

    If they want me to spend my money there, they will not do this. We are already seeing similar effects on a broader level.
    Tourism to the USA is down by 17% this year compared to 2000.
    That's roughly 26M visitors down to under 22M. Meanwhile, tourism rates to every other country in the world are up remarkably. A large part of this situation is due to the draconian, but amazingly ineffective, security process for tourists entering the USA.

    So what does the government decide to do about? Learn their lesson that bogus security is costing this country billions of dollars with little to no return? No, instead they decide to spend yet more money on advertising...

    http://www.thestar.com/Business/article/233005
  20. Re:safety first on New York Plans Surveillance Veil For Downtown · · Score: 0

    I'm pretty sure that there at least 100x more traffic stops then there are drug busts, SWAT actions, etc. Probably closer to 1000x.

    With that in mind, are you still sure that traffic stops are the #1 most dangerous thing? That not just more cops get hurt doing traffic stops than anything else, but that more cops get hurt as a percentage of stops than as a percentage of any other action?

    Because I really doubt it.

  21. Re:I hope it's published anyway on Controversial Security Paper Nixed From Black Hat · · Score: 1

    TPM can also be used in one of its modes of operation to do on the fly decryption of any stream, instead of the CPU. That statement is misleading. The TPM standard only defines on-the-fly asymmetric decryption, i.e. with public/private keys. Symmetric, like AES, operations are not externally accessible.

    So you've got a choice if you have a large amount of data to decrypt, like say a movie. Either you use the TPM's asymmetric algorithms and wait forever because they are so slow, or you use symmetric algorithms like AES outside the TPM and in the host and just the TPM for key mgmt. That's the approach that a system like AACS must use, and thus the #1 public use for TPM is vulnerable to the attack that I originally described.
  22. Re:I hope it's published anyway on Controversial Security Paper Nixed From Black Hat · · Score: 0

    Clearly such equipment is used to debug almost any kind of chip with a lot of i/o lines. It would be hard to outlaw that kind of test equipment and capturing large data traces is easy-peasy, that's what computers are for. Even requiring some sort of silly "professional certification" to buy or own such equipment would be ineffective because the places where such equipment is used -- EE grad programs for example -- are likely to have plenty of subversives who will make use of the equipment in off hours.

    Since the TPM doesn't do actual encryption on its own, all it would take is one grad student with the right equipment about an afternoon of work to fully compromise (as in extract the keys from) any wide-spread DRM system that relies on TPM. And once the keys are extracted, the test equipment is no longer necessary.

  23. Re:A signature is completely insecure too on Are Contactless Payments Really Secure? · · Score: 0

    The signature is not authentication, it is for proof validation after the fact. If a charge is disputed as fraudulent, but the charge slip contains your signature, then the bank is going to rule against you.

    Thus the people who sign all kinds of funny stuff instead of their actual name would probably be able to dispute any of those charges and get away with it. At least once or twice until the bank started to realize that maybe they are really the ones signing as "princess leia."

  24. Re:I hope it's published anyway on Controversial Security Paper Nixed From Black Hat · · Score: 0

    So add some wires.

    Seriously, hook up the probes and watch/control all of the input to the chip. Once you have control of what the TPM chip sees as "hardware CPU oprations" then you have the ability to virtualize the system. So what if it takes a little bit of harwdare hacking? If the goal is to decrypt certain pieces of information, all it takes is for one person to do so and post it to the net.

  25. Re:Having had the crap beat out of me by cops... on Citizens Given Video Cameras To Monitor Police · · Score: 0

    Woosh!!!