You should read the paper that the article you linked to references. Rieger et al had to do some incredible gymnastics to get from their data to their predetermined conclusion that male bisexuality doesn't exist. He was kind enough to send his original data to a friend who is also a professional psychologist, and any more straightforward analysis brings you to the conclusion that sexuality is a continuum and men lie all across it.
And that's only one of the flaws. Would research on female bisexuality assume that a women who didn't get turned on by watching gay male porn wasn't attracted to men? That's just the assumption Rieger's paper makes.
I don't think there can be any serious doubt that I'm attracted to both men and women, and I know lots of other counterexamples. In fact I've slept with them!
The point is that for every WoW in the world, there are thousands of casual vandals. Just because a strategy won't stop WoW doesn't mean it's not worth adopting.
Bulk-create your vandal accounts now, and then wait for them to mature into the sort that can attack heavily-vandalized pages.
In practice, on the other hand, there are probably two or three people worldwide who are prepared to put time, effort and forward planning into attacking Wikipedia, as opposed to the thousands of casual vandals who will be dissuaded by the loss of instant gratification. So despite its theoretical shortcomings this will probably work very well in practice.
Not everything you reference is to do with the very core of your subject. If I'm explaining an algorithm in a paper on cryptography, and I want to use an algorithm well-known from a distinct and related field, there's no problem with giving an encyclopaedia cite for the algorithm, since that's the one most useful to the person reading the paper who wants to understand that detail. The encyclopaedia in turn should have the primary references for someone who wants deeper information on that subject.
I'm guessing from your WP bio that you don't have any publications yet. If and when you come to write one, be careful about speaking in an authoritative tone about things that you're not authoritative on:-)
an ordinary md5 gives you more than enough for now.
No. First of all, why use an insecure hash function when a more secure one is just as convenient? MD5 should no longer be recommended for any use. Second, you have to salt before hashing. Thirdly, it's a good idea to iterate the hash function at least a few thousand times - this makes a dictionary attack computationally more expensive. This is all "key stretching" as described in Schneier et al's paper on low-entropy keys.
Where passwords are used for network authentication, you should ideally combine these measures with a protocol like SRP.
It's obvious that not one of the editors bothers to read this site, or they would notice the flood of complaints about this every time Beatles-Beatles posts a story. So we should use the one means at our disposal to get their attention - the story queue!
Let's all submit a story about google karma whoring via stupid and gullible Slashdot story editors. Then they might take notice.
(1) Calculate all the possibilities for the first five words (2) Calculate all the possibilities for the last five words (3) Look for a compatible pair
You can filter the possibilities down quite a lot before you start match-finding. And you can do this recursively to a certain extent.
Everyone at my work is very smart. Three of us decided to build ourselves MythTV boxes. Of the three, only I succeeded, and only because I had a friend who had already succeeded to help me finish the process. As things stood about six months ago, I could not recommend installing MythTV to anyone because they might simply never get it working.
It doesn't need a "skin" to fix this problem - in fact, I'd have been much happier if I'd been able to configure most of it with a text editor - it needs to rethink the fundamentals of how most things are configured.
This is basically the risk of the Blight from Vernor Vinge's "A Fire Upon The Deep". The idea is that even if you can't imagine how such a virus could be written, alien AIs sophisticated beyond our imagination might be able to.
Maybe Lego are running Mindstorms into a siding because it turns kids onto programming and thus away from building real things with Lego?
This is a bit of a reach, but I know that as a kid I soon lost interest in making real things once I learned to program. You can't save an earlier version of a Lego model before making a revision. And I know I'm not the only one.
Re:RMS wrote GCC to pursue software freedom.
on
GCC 4.1 Released
·
· Score: 1
Microsoft's "shared source" is not free software/Open Source software.
Re:RMS wrote GCC to pursue software freedom.
on
GCC 4.1 Released
·
· Score: 0, Troll
Open Source == free software. All open source software is free software and vice versa, and the philosophical goal of the open source movement is software freedom. The name "open source" was chosen because "free software" makes people think of price, not freedom, and they wanted to emphasize freedom. Stallman claims otherwise because he's in a personal fight with Raymond.
As I understand it prison rape is much less of a problem in this country than it is in the US. That's at least in part because our justice officials don't talk as if rape is a proper part of the criminal justice system. See Stop Prisoner Rape for more details.
Protocols that allow both ends to negotiate what algorithms they use are very hard to get right; they may allow an active attacker to force both ends to use whatever is least secure. The most secure thing is probably to choose good algorithms, and stick to them.
I have used both "in anger" (for Windows software development, it's handy to install the software on a virtual machine running whatever OS you want to test, then revert to the pre-installed state) and I much, much prefer VMWare. I'm very glad we persuaded our various partners to switch to it.
You should read the paper that the article you linked to references. Rieger et al had to do some incredible gymnastics to get from their data to their predetermined conclusion that male bisexuality doesn't exist. He was kind enough to send his original data to a friend who is also a professional psychologist, and any more straightforward analysis brings you to the conclusion that sexuality is a continuum and men lie all across it.
And that's only one of the flaws. Would research on female bisexuality assume that a women who didn't get turned on by watching gay male porn wasn't attracted to men? That's just the assumption Rieger's paper makes.
I don't think there can be any serious doubt that I'm attracted to both men and women, and I know lots of other counterexamples. In fact I've slept with them!
The point is that for every WoW in the world, there are thousands of casual vandals. Just because a strategy won't stop WoW doesn't mean it's not worth adopting.
Bulk-create your vandal accounts now, and then wait for them to mature into the sort that can attack heavily-vandalized pages.
In practice, on the other hand, there are probably two or three people worldwide who are prepared to put time, effort and forward planning into attacking Wikipedia, as opposed to the thousands of casual vandals who will be dissuaded by the loss of instant gratification. So despite its theoretical shortcomings this will probably work very well in practice.
OK, you're already at four, but let me give that a hearty MOD PARENT UP! Nicely observed that man.
I wonder what percentage have the means to do so conveniently? Of those, I wonder what percentage actually do so weekly?
I just searched Wikipedia for an article on this guy, and couldn't find one. Maybe you could start one off?
Not everything you reference is to do with the very core of your subject. If I'm explaining an algorithm in a paper on cryptography, and I want to use an algorithm well-known from a distinct and related field, there's no problem with giving an encyclopaedia cite for the algorithm, since that's the one most useful to the person reading the paper who wants to understand that detail. The encyclopaedia in turn should have the primary references for someone who wants deeper information on that subject.
:-)
I'm guessing from your WP bio that you don't have any publications yet. If and when you come to write one, be careful about speaking in an authoritative tone about things that you're not authoritative on
And that Kilroy guy has lied out his ass millions of times...Let's hang him.
That would be a popular move here in the UK.
an ordinary md5 gives you more than enough for now.
No. First of all, why use an insecure hash function when a more secure one is just as convenient? MD5 should no longer be recommended for any use. Second, you have to salt before hashing. Thirdly, it's a good idea to iterate the hash function at least a few thousand times - this makes a dictionary attack computationally more expensive. This is all "key stretching" as described in Schneier et al's paper on low-entropy keys.
Where passwords are used for network authentication, you should ideally combine these measures with a protocol like SRP.
It's obvious that not one of the editors bothers to read this site, or they would notice the flood of complaints about this every time Beatles-Beatles posts a story. So we should use the one means at our disposal to get their attention - the story queue!
Let's all submit a story about google karma whoring via stupid and gullible Slashdot story editors. Then they might take notice.
Sweet - thanks!
It looks like it could set off in the wrong direction, or just rock back and forth. What decides which direction it moves in?
Green blackboards and other anomalies
Using a dictionary
(1) Calculate all the possibilities for the first five words
(2) Calculate all the possibilities for the last five words
(3) Look for a compatible pair
You can filter the possibilities down quite a lot before you start match-finding. And you can do this recursively to a certain extent.
Everyone at my work is very smart. Three of us decided to build ourselves MythTV boxes. Of the three, only I succeeded, and only because I had a friend who had already succeeded to help me finish the process. As things stood about six months ago, I could not recommend installing MythTV to anyone because they might simply never get it working.
It doesn't need a "skin" to fix this problem - in fact, I'd have been much happier if I'd been able to configure most of it with a text editor - it needs to rethink the fundamentals of how most things are configured.
everybody is dead, Dave
This is basically the risk of the Blight from Vernor Vinge's "A Fire Upon The Deep". The idea is that even if you can't imagine how such a virus could be written, alien AIs sophisticated beyond our imagination might be able to.
Maybe Lego are running Mindstorms into a siding because it turns kids onto programming and thus away from building real things with Lego?
This is a bit of a reach, but I know that as a kid I soon lost interest in making real things once I learned to program. You can't save an earlier version of a Lego model before making a revision. And I know I'm not the only one.
Microsoft's "shared source" is not free software/Open Source software.
Open Source == free software. All open source software is free software and vice versa, and the philosophical goal of the open source movement is software freedom. The name "open source" was chosen because "free software" makes people think of price, not freedom, and they wanted to emphasize freedom. Stallman claims otherwise because he's in a personal fight with Raymond.
When you make an assumption, you make an ass out of u amnd mption!
As I understand it prison rape is much less of a problem in this country than it is in the US. That's at least in part because our justice officials don't talk as if rape is a proper part of the criminal justice system. See Stop Prisoner Rape for more details.
Open64 appears to be moribund: it has been over two and a half years since they last made a release...
http://open64.sourceforge.net/news.html
Protocols that allow both ends to negotiate what algorithms they use are very hard to get right; they may allow an active attacker to force both ends to use whatever is least secure. The most secure thing is probably to choose good algorithms, and stick to them.
I have used both "in anger" (for Windows software development, it's handy to install the software on a virtual machine running whatever OS you want to test, then revert to the pre-installed state) and I much, much prefer VMWare. I'm very glad we persuaded our various partners to switch to it.
Thanks again - I didn't know that the Saarinen paper cites me, cool! (As do Halevi and Rogaway, but I knew that)