Errr, black is least radiant, it absorbs the largest EM spectrum (of the visible colors). Now given that it absorbs this energy the other side of the metal may have a better chance of dispersing the heat as it will have a higher temp gradient with respect to the outside air.
But the paint (most paints, there are exceptions) will degrade the thermal transfer performance.
The biggest reason Telus lost the bid is that they insisted on complete ownership of all resources, coupled with the fact that they wished to deply the whole network only as they see fit. Then you add in the fact that they only bid with a single vendor solution and it certainly wasn't one recognized as a leader. (oops that was confidential info.:) I was close enough to the process to see documents fly by and it was an interesting competition process.
But that really has nothing to do with the story as posted. Opensource has nothing to do with intelligent caution and care being taken. (Although it should) You don't patch a problem like this, you remain vigilant to prevent it. I mean you could hide this binary in any location under any name, have it listen to different IRC channels or even have it query a webpage at random times. How would you track that down?
But I do appreciate earlyish warnings like this. It can keep me from having the campus getting whacked later. I just monitor for inbound connections to that port. (Or look in IRC sessions for the appropriate channels.) and have our security people follow up. MUCH better than them running around CLEANING up.
Most childrens software (at that level at least) isn't that complex or complicated. It probably didn't require that much effort for them to have it ported to several OS varieties. It only makes sense after all, if it does run on all the platforms they listed then they really aren't locked out of any market segment.
Putting the license issue aside for a moment, I wonder how something like a/. model could woulk for rating the quality of code? Someone could submit an object/component to a team of people who would weed out (loosely) the duplication and plain useless things. These people could be picked by a vote of peers or some such method to establish a core of competence that the community at large trusts. Once it passes the initial quality check (one or more times) it could be up for a peer moderation style review. When searching for a particular object you could set a quality threshold on your search. The higher the threshold the less likely you may be to find something exactly like you want, but the code you do get should be of high enough quality to impress the people who used it and rated it, in fact may be built well enough to allow you to modify it to suit your needs, maybe even to the point of creating something which may be of value checked back into the moderation system as a new object.
You have a very good day of knowing who it it. EVERY ISP logs connections with at LEAST username logged in at such and such a time ang got such and such an address, some even log the source phone number.
IPV6 specs have been around for a while and many people chatted about this issue, but it is NO different than IPv4, there will always be a way to track it back to source. If it is through a non logging proxy then you know laws will be put in place to say that the owner can be liable for some actions originating from his box unless he can prove it wasn't him. Which means logs
I think that anyone who deals with large amounts of computer hardware (ie. enough to be a statistically sound sampling) could attest to the claim made. Certain failures and other occurences happen much more frequently than one expects from a straightforward analysis of uptimes and standard accepted failure rates.
The code audits are continually ongoing and very thorough. I run OpenBSD on a Sparc5 and an very happy with it. I know some people have been stating (from my point of view) bogus claims about instability and lack of apps, but how can there be a lack of apps when you can run Linux,BSDI and other emulations? I use Sunos emul on my box for netscape and it runs fine. The other fact about security is fairly clearly stated, It is secure if you don't mess with it. If a person has a clue then yes, they can effectively change things while keeping security. App security, things like sh and other main apps are included in the code review as well, if you look at the daily changelog at www.openbsd.org you can see what is being found and fixed. Why wouldn't you want someone script-kiddie-ish heading a secure OS development? YOu rather have some sedate individual who can't concieve of the varied ways in which a person might attach a system to get in?
I work at the University of Alberta and do work with the CanetII and CanetII syustems. While they are pulibc networks they are NOT commercial ones, check out the AUP on the site this link is for CanetII but will only change a little for CanetII to my understanding. Primarily access is given to educational institutions and research outfits which might benefit from and add quality to the the initiative. Although subject to change, it is a WDM GBE network connecting the different RANs (Regional Area Networks) together. Alberta is probably going to use dark fiber and light it up with multi-channel GBE as it's RAN backbone. All in all I feel this whole thing is pretty exciting and_I'M_ excited to be a part of it.
Slashdot Mirror
Errr, black is least radiant, it absorbs the largest EM spectrum (of the visible colors). Now given that it absorbs this energy the other side of the metal may have a better chance of dispersing the heat as it will have a higher temp gradient with respect to the outside air.
But the paint (most paints, there are exceptions) will degrade the thermal transfer performance.
There are several designs there that are wonderful depending on your usage profile.
Look at the leg holster, and tek sling
designs in particular.
The biggest reason Telus lost the bid is that they insisted on complete ownership of all resources, coupled with the fact that they wished to deply the whole network only as they see fit. Then you add in the fact that they only bid with a single vendor solution and it certainly wasn't one recognized as a leader. (oops that was confidential info. :) I was close enough to the process to see documents fly by and it was an interesting competition process.
But that really has nothing to do with the story as posted.
Opensource has nothing to do with intelligent caution and care being taken. (Although it should) You don't patch a problem like this, you remain vigilant to prevent it. I mean you could hide this binary in any location under any name, have it listen to different IRC channels or even have it query a webpage at random times. How would you track that down?
But I do appreciate earlyish warnings like this.
It can keep me from having the campus getting whacked later. I just monitor for inbound connections to that port. (Or look in IRC sessions for the appropriate channels.) and have our security people follow up. MUCH better than them running around CLEANING up.
Most childrens software (at that level at least) isn't that complex or complicated. It probably didn't require that much effort for them to have it ported to several OS varieties. It only makes sense after all, if it does run on all the platforms they listed then they really aren't locked out of any market segment.
Putting the license issue aside for a moment, I wonder how something like a /. model could woulk for rating the quality of code?
Someone could submit an object/component to a team of people who would weed out (loosely) the duplication and plain useless things. These people could be picked by a vote of peers or some such method to establish a core of competence that the community at large trusts. Once it passes the initial quality check (one or more times) it could be up for a peer moderation style review.
When searching for a particular object you could set a quality threshold on your search. The higher the threshold the less likely you may be to find something exactly like you want, but the code you do get should be of high enough quality to impress the people who used it and rated it, in fact may be built well enough to allow you to modify it to suit your needs, maybe even to the point of creating something which may be of value checked back into the moderation system as a new object.
You have a very good day of knowing who it it.
EVERY ISP logs connections with at LEAST username logged in at such and such a time ang got such and such an address, some even log the source phone number.
IPV6 specs have been around for a while and many people chatted about this issue, but it is NO different than IPv4, there will always be a way to track it back to source. If it is through a non logging proxy then you know laws will be put in place to say that the owner can be liable for some actions originating from his box unless he can prove it wasn't him. Which means logs
I think that anyone who deals with large amounts of computer hardware (ie. enough to be a statistically sound sampling) could attest to the claim made.
Certain failures and other occurences happen much more frequently than one expects from a straightforward analysis of uptimes and standard accepted failure rates.
The code audits are continually ongoing and very thorough.
I run OpenBSD on a Sparc5 and an very happy with it. I know some people have been stating (from my point of view) bogus claims about instability and lack of apps, but how can there be a lack of apps when you can run Linux,BSDI and other emulations? I use Sunos emul on my box for netscape and it runs fine.
The other fact about security is fairly clearly stated, It is secure if you don't mess with it. If a person has a clue then yes, they can effectively change things while keeping security. App security, things like sh and other main apps are included in the code review as well, if you look at the daily changelog at www.openbsd.org you can see what is being found and fixed. Why wouldn't you want someone script-kiddie-ish heading a secure OS development? YOu rather have some sedate individual who can't concieve of the varied ways in which a person might attach a system to get in?
I work at the University of Alberta and do work with the CanetII and CanetII syustems. While they are pulibc networks they are NOT commercial ones, check out the AUP on the site this link is for CanetII but will only change a little for CanetII to my understanding. Primarily access is given to educational institutions and research outfits which might benefit from and add quality to the the initiative. Although subject to change, it is a WDM GBE network connecting the different RANs (Regional Area Networks) together. Alberta is probably going to use dark fiber and light it up with multi-channel GBE as it's RAN backbone. All in all I feel this whole thing is pretty exciting and_I'M_ excited to be a part of it.