As with TLS, I'd like to see any future revisions of these secure protocols trim more fat.
Dude, SSH is half a meg. Calm down.
I think buddy's point is that SSH should deprecate support for old crypto libs because no one uses them anymore, and they are sort of an Achilles Heal...look at how easily GSM can be subverted because it supports old cypher protocols (and even one that is "No Encryption" encryption!)...anyway, point is: get rid of the stuff no one uses anymore, use only strong crypto with no option for in-the-clear, to reduce the potential for security issues. Our good friend AC just isn't so verbose about his idea...
You open a SSH connection (client->server:22). This port is allowed on the firewall, it lets you through. But then the server decides to listen on UDP:(random port) and tells the client, back through the (encrypted) initial connection, which UDP port to contact. So you initiate a SSP UDP session on that port. How does the firewall knows it should let you through? Since the port number is communicated on an encrypted session, it doesn't have access to that information.
So how does this work in a secure environment? The paper doesn't mention any mean for the server to communicate with the network which port its listening on.
My guess is as good as anyone else's, but I surmise it does a bit of packet trickery. Once device A (behind firewall) is connected to device B (may/may not be behind firewall, but at least one port is open, 22 by default in this case), device A can create an SSH tunnel...they really are rather neat and VERY useful as a means of security. For example, I have webmin running on a server, but its port (10 000) is blocked by the firewall. Once I connect to SSH I can redirect packets to a certain IP:Port combo (device A's IP:Random Port#) to the servers local address (127.0.0.1) and new UDP port, and voila: hidden/secure/direct connection. One can even make a tunnel in the other direction, so that the server can connect to a remote device in the same manner, and any application won't realize that it's even connecting to anything outside of its network.
Whomever thought of and implemented SSH tunnels is a master genius. I would shake his/her hand if I ever saw them.
Yellow pages, 411.com, or perhaps the local legal aid. You can just call one and set an appointment. Trust me, they like to take new clients, it equals more money for them. "Having a lawyer" means you've been to one, and have agreed that you can call them on any particular matter (some lawyers know civil law, some know only criminal law, some family law...you get the point). If you are charged with a criminal offence, just ask for 'duty council'...it's the lawyer that's on the clock at that time...you can ask for advice and it's free.
It's not always the best advice though...pay for it yourself if you want decent advice.
Disclaimer: I am not a lawyer. But even if I was, I'd have a lawyer.
"She said she received an e-mail in January from a Toronto Police officer in 14 Division "asking me to contact them about an incident that occurred at The Piston (on Bloor St. W., Nov. 19, 2011)."
And then she did? WTF! That's the last thing anyone should do.
So...you received an Internet message from someone claiming to be a cop? Step #1: Ignore it. There's no way on god's green earth that anyone should respond to a frickin' electronic message from a cop. Clearly the cops didn't think it was important enough to send a car around to her place. If she ignored it, it probably would have went no where. The only possible first step is contact a lawyer. She believed she'd be cleared because that she is innocent? What?! Is she new? Since when has that ever happened? Cops are interested in closing the file...if your name is in it, or someone else's, it doesn't matter.
DO NOT TALK TO POLICE, especially on purpose. Talk to your lawyer, have your lawyer talk to police.
Seconded. Like you, there is 0% chance of me being mind and dollar fucked into oblivion. I own every toy and electronic I ever wanted. I go where I want, when I want. I work as much as I like (which is a lot), and I don't get guilt tripped. One day I will find a woman that is compatible with the above, and she will be goddamn amazing. Then I'll share everything I have with her. Until then, I carry on.
And ppl do not understand why I WANT us to continue drilling all over USA. I figure that once Americans start to get earthquakes, polluted waters esp. in our aquifiers, and see the repercussions of this 'clean' source of jobs, then MAYBE, JUST MAYBE, we will finally figure out that we need to change our policy. And I can not think of anything that would be better then to get the west off imported energy (other than to add that we quit importing bad goods and food from china).
I can. It's the reason that every country with half a brain and a little foresight would want to import all oil:
1. Import all oil, pay increasing prices (it's worth it)
2. Use/maintain local refinement infrastructure
3. Drain world of said oil (this is actually going to take a long time, long after everyone currently alive is dead)
4. Tap local wells, sell oil to foreign entities at insane prices
5. Hope alternative fuels haven't become viable In essence: use everyone else's before using your own.
What the US public needs to do is revolve before #3 happens (nationalize resources) so that -they- can recoup the money they've spent on all the other oil.
Yep, and I surmise it's because they don't want to stop giving you credit (everything would stop, then)...and when someone goes bankrupt, it's hard to justify giving them credit. If bankruptee repays something, they'll likely have some modicum of a credit score, and they can still get credit. Last I heard around here, they called it "a proposal"...but it's the same thing.
I think your period key is stuck (those aren't actual ellipses).
Also, it's Tourette's [syndrome].
Indeed it is! I told my tech that there's something wrong with my period. I got the strangest look. I thought I was being straight forward, and how hard can it be? Who knows what got into her.
Teeeeechnically I was going after the punctuation (is that a component of grammar, then? I'm asking)...really, it was just a dig at the weird locations of said hyphens. Like, did they just fall out of the sky and land there? Ellipses can also mean a trailing off, which is how I usually use them...bit I don't take Slashdot so seriously, so, it really doesn't matter...
Based on their website, if they did I would feel secure that it didn't work properly.
In my experience... everything Verizon offered worked well -at 2x the price of what I have now (MetroPCS -which works most of the time, but occasionally fails in frustrating ways.)
Quality is not their failing -price is.
I think your hyphen key is stuck...either that, or you have some sort of weird variation of turrets...you might want to check that out...
Personally, and I think this applies to anyone that has a real understanding of how the Internet works, I really...I mean REALLY...like status bars...because...well...it's an instant indication as to what is happening. Not so much needed when everything is running perfectly, but when something isn't right...which is more often than one might surmise is reasonable. Ok, so, to get to the heart of the matter, while a page is loading, or has loaded, if an error occurs, and you don't have a status bar, you'll never know. So, if some element, graphic, or other potentially important feature, isn't loaded, is taking a while to load/access, the status bar will declare an error or indicate the delay...and I will know instantly. I can hit refresh, or determine a course of action resulting in zero wasted time. If I don't have a status bar, and an error occurs, I'll...uhh...wait? (I haaaaate waiting)...or maybe I'll go digging through some menus somewhere to find out...what I could have know in less than 500ms. Move my eyes down, OH, there...it says...an error. Or no error. I can proceed without wasting my time. A 1/4" of persistent space lost is very, very much worth it to me.
Moving on, combining the progress meter with the URL bar...fine, but that's not a status replacement. Progress is one element of status. A pop-up window for status? Uhhh...naw, I strongly dislike pop-ups of ALL kinds (well, there is one that has its uses, but that's another topic, don't get me distracted)...morphing status bars, those are fine...display the information I need, and that's the end of it. Thanks. Enough said, Mr. Status Bar.
As for the progress bars prevalent in Vista/7/(OSX?) that tell the user NOTHING about how things are actually progressing...I spit on you, and cast a pox upon your houses. I hate you. You are a progress bar. Your sole purpose in life is to tell me how things are going, and when they are not. You don't do that anymore. So, why are you here? Marquee progress bar: Die! You should have been aborted before you were born for all the times us users think we are almost done a process, and WAIT, WTF IS THIS, the progress is emptying from the left...what the hell?! And now it's starting over again! (Seriously, the programmer knows what he has, where he is, and where he is going...TELL ME already! [or she...I'm not trying to be sexist here]). All you do is prove my console has not become unresponsive...THANKS, but my mouse cursor does that too...and so does my NumLock key/light. I don't need you.
Obviously, but it's also their legal base. As it legally stands now, they outsource their programming and datacenter jobs to US. How the world changes...:)
I'd disagree a little bit here. I'd say that 'outsourcing' as we all conceive it is almost gone. What we have now is sector-based fulfillment. Where something is done/created has more to do with the fact that it can't really be done somewhere else anymore...the infrastructure has been dismantled (by design). Natural resources come from X, production comes from Y, bits of service come from Z and only where required is service provided locally. Of course, this doesn't necessarily apply to small business, but, by in large this is the new state of employment.
I predict that even close-contact sorts of jobs (e.g. doctors, sales staff) will be replaced by mechanical devices controlled remotely by off-site personnel...imagine your doctor is in another country controlling a robot (oh wait, that already exists).
Can people mod me up or have the summary corrected?
Oh man...you must be new...so I'll go easy.
1. Can people mod me up...
Never ask for a mod...it'll never happen. In fact, moderators tend to mod down people who ask (probably due to some latent aversion to narcissists?)...do like what (I assume) others here do: create another account, reply to your own message with it asking to "mod parent up"...that way it seems like someone else agrees with you...all egos satisfied.
2....have the summary corrected?
HAH! That only happens on stuff that the editors care about...like when Apple takes a poop, or when Twitter goes down...
With a pretty high degree of certainty I can say that you did not have a substantial sales staff. Even in the very small companies where I have worked, sales staff drives the cost of support through the roof. Easily the least useful/self-sufficient group on the planet.
This isn't really news...I imagine this 'flaw' will be found in every version of iOS until it dies. Not only that, but we should be suspicious of app producers...they say "only install apps from trusted publishers"...yeah...ok...so, no one? If I did that, I'd have only the pre-loaded apps.
Slashdot Mirror
As with TLS, I'd like to see any future revisions of these secure protocols trim more fat.
Dude, SSH is half a meg. Calm down.
I think buddy's point is that SSH should deprecate support for old crypto libs because no one uses them anymore, and they are sort of an Achilles Heal...look at how easily GSM can be subverted because it supports old cypher protocols (and even one that is "No Encryption" encryption!)...anyway, point is: get rid of the stuff no one uses anymore, use only strong crypto with no option for in-the-clear, to reduce the potential for security issues. Our good friend AC just isn't so verbose about his idea...
When you're operating on a slow wireless connection with an already high amount of traffic on it, every bit counts.
Aw man! Nerdiest double-entendre ever! I'm jealous.
You open a SSH connection (client->server:22). This port is allowed on the firewall, it lets you through. But then the server decides to listen on UDP:(random port) and tells the client, back through the (encrypted) initial connection, which UDP port to contact. So you initiate a SSP UDP session on that port. How does the firewall knows it should let you through? Since the port number is communicated on an encrypted session, it doesn't have access to that information. So how does this work in a secure environment? The paper doesn't mention any mean for the server to communicate with the network which port its listening on.
My guess is as good as anyone else's, but I surmise it does a bit of packet trickery. Once device A (behind firewall) is connected to device B (may/may not be behind firewall, but at least one port is open, 22 by default in this case), device A can create an SSH tunnel...they really are rather neat and VERY useful as a means of security. For example, I have webmin running on a server, but its port (10 000) is blocked by the firewall. Once I connect to SSH I can redirect packets to a certain IP:Port combo (device A's IP:Random Port#) to the servers local address (127.0.0.1) and new UDP port, and voila: hidden/secure/direct connection. One can even make a tunnel in the other direction, so that the server can connect to a remote device in the same manner, and any application won't realize that it's even connecting to anything outside of its network.
Whomever thought of and implemented SSH tunnels is a master genius. I would shake his/her hand if I ever saw them.
Yellow pages, 411.com, or perhaps the local legal aid. You can just call one and set an appointment. Trust me, they like to take new clients, it equals more money for them. "Having a lawyer" means you've been to one, and have agreed that you can call them on any particular matter (some lawyers know civil law, some know only criminal law, some family law...you get the point). If you are charged with a criminal offence, just ask for 'duty council'...it's the lawyer that's on the clock at that time...you can ask for advice and it's free.
It's not always the best advice though...pay for it yourself if you want decent advice.
Disclaimer: I am not a lawyer. But even if I was, I'd have a lawyer.
FTFA:
"She said she received an e-mail in January from a Toronto Police officer in 14 Division "asking me to contact them about an incident that occurred at The Piston (on Bloor St. W., Nov. 19, 2011)."
And then she did? WTF! That's the last thing anyone should do.
So...you received an Internet message from someone claiming to be a cop? Step #1: Ignore it. There's no way on god's green earth that anyone should respond to a frickin' electronic message from a cop. Clearly the cops didn't think it was important enough to send a car around to her place. If she ignored it, it probably would have went no where. The only possible first step is contact a lawyer. She believed she'd be cleared because that she is innocent? What?! Is she new? Since when has that ever happened? Cops are interested in closing the file...if your name is in it, or someone else's, it doesn't matter.
DO NOT TALK TO POLICE, especially on purpose. Talk to your lawyer, have your lawyer talk to police.
Seconded. Like you, there is 0% chance of me being mind and dollar fucked into oblivion. I own every toy and electronic I ever wanted. I go where I want, when I want. I work as much as I like (which is a lot), and I don't get guilt tripped. One day I will find a woman that is compatible with the above, and she will be goddamn amazing. Then I'll share everything I have with her. Until then, I carry on.
A "change of rate of speed" is more often referred to as acceleration or deceleration.
FTFY.
What were you talking about, anyway?
And ppl do not understand why I WANT us to continue drilling all over USA. I figure that once Americans start to get earthquakes, polluted waters esp. in our aquifiers, and see the repercussions of this 'clean' source of jobs, then MAYBE, JUST MAYBE, we will finally figure out that we need to change our policy. And I can not think of anything that would be better then to get the west off imported energy (other than to add that we quit importing bad goods and food from china).
I can. It's the reason that every country with half a brain and a little foresight would want to import all oil:
1. Import all oil, pay increasing prices (it's worth it)
2. Use/maintain local refinement infrastructure
3. Drain world of said oil (this is actually going to take a long time, long after everyone currently alive is dead)
4. Tap local wells, sell oil to foreign entities at insane prices
5. Hope alternative fuels haven't become viable
In essence: use everyone else's before using your own.
What the US public needs to do is revolve before #3 happens (nationalize resources) so that -they- can recoup the money they've spent on all the other oil.
I'm just going to throw this out there:
Your LP collection is graced by some dude named Ogre.
Jesus built my car. It's a love affair. Mainly Jesus, and my hot rod.
I bet. So you must be intimately aware that he was an architect previous to his career as a profit...and that Jerry Lee Lewis is the devil...btw
Yep, and I surmise it's because they don't want to stop giving you credit (everything would stop, then)...and when someone goes bankrupt, it's hard to justify giving them credit. If bankruptee repays something, they'll likely have some modicum of a credit score, and they can still get credit. Last I heard around here, they called it "a proposal"...but it's the same thing.
I think you misread the post...he didn't say VHS...
(Sorry, that was ripe for the picking)
I think your period key is stuck (those aren't actual ellipses).
Also, it's Tourette's [syndrome].
Indeed it is! I told my tech that there's something wrong with my period. I got the strangest look. I thought I was being straight forward, and how hard can it be? Who knows what got into her.
Teeeeechnically I was going after the punctuation (is that a component of grammar, then? I'm asking)...really, it was just a dig at the weird locations of said hyphens. Like, did they just fall out of the sky and land there? Ellipses can also mean a trailing off, which is how I usually use them...bit I don't take Slashdot so seriously, so, it really doesn't matter...
Oh, oh, what did you hit, what did you hit?
(and you are quite welcome. Pay it forward, my man, pay it forward)
No! I actually meant he had a small tower that projects vertically from the wall of a building such as a medieval castle, but that works too!
Naw, he's just the idiot type...(or at least, that's what his name/email address says).
(and btw, I was just joking around mr. idiot loser)
Based on their website, if they did I would feel secure that it didn't work properly.
In my experience... everything Verizon offered worked well -at 2x the price of what I have now (MetroPCS -which works most of the time, but occasionally fails in frustrating ways.)
Quality is not their failing -price is.
I think your hyphen key is stuck...either that, or you have some sort of weird variation of turrets...you might want to check that out...
Personally, and I think this applies to anyone that has a real understanding of how the Internet works, I really...I mean REALLY...like status bars...because...well...it's an instant indication as to what is happening. Not so much needed when everything is running perfectly, but when something isn't right...which is more often than one might surmise is reasonable. Ok, so, to get to the heart of the matter, while a page is loading, or has loaded, if an error occurs, and you don't have a status bar, you'll never know. So, if some element, graphic, or other potentially important feature, isn't loaded, is taking a while to load/access, the status bar will declare an error or indicate the delay...and I will know instantly. I can hit refresh, or determine a course of action resulting in zero wasted time. If I don't have a status bar, and an error occurs, I'll...uhh...wait? (I haaaaate waiting)...or maybe I'll go digging through some menus somewhere to find out...what I could have know in less than 500ms. Move my eyes down, OH, there...it says...an error. Or no error. I can proceed without wasting my time. A 1/4" of persistent space lost is very, very much worth it to me.
Moving on, combining the progress meter with the URL bar...fine, but that's not a status replacement. Progress is one element of status. A pop-up window for status? Uhhh...naw, I strongly dislike pop-ups of ALL kinds (well, there is one that has its uses, but that's another topic, don't get me distracted)...morphing status bars, those are fine...display the information I need, and that's the end of it. Thanks. Enough said, Mr. Status Bar.
As for the progress bars prevalent in Vista/7/(OSX?) that tell the user NOTHING about how things are actually progressing...I spit on you, and cast a pox upon your houses. I hate you. You are a progress bar. Your sole purpose in life is to tell me how things are going, and when they are not. You don't do that anymore. So, why are you here? Marquee progress bar: Die! You should have been aborted before you were born for all the times us users think we are almost done a process, and WAIT, WTF IS THIS, the progress is emptying from the left...what the hell?! And now it's starting over again! (Seriously, the programmer knows what he has, where he is, and where he is going...TELL ME already! [or she...I'm not trying to be sexist here]). All you do is prove my console has not become unresponsive...THANKS, but my mouse cursor does that too...and so does my NumLock key/light. I don't need you.
(Sorry, I don't get out that much)
In our town, recycling is both free and mandatory, and trash is relatively expensive. Seems like a good way to fund trash pickup.
As a result, it annoys me to no end when people mail me packages padded withstyrofoam peanuts or other nonrecycleable materials.
What's wrong with packaging material? Just burn it, it'll shrivel away to nothing!
(j/k)
Obviously, but it's also their legal base. As it legally stands now, they outsource their programming and datacenter jobs to US. How the world changes... :)
I'd disagree a little bit here. I'd say that 'outsourcing' as we all conceive it is almost gone. What we have now is sector-based fulfillment. Where something is done/created has more to do with the fact that it can't really be done somewhere else anymore...the infrastructure has been dismantled (by design). Natural resources come from X, production comes from Y, bits of service come from Z and only where required is service provided locally. Of course, this doesn't necessarily apply to small business, but, by in large this is the new state of employment.
I predict that even close-contact sorts of jobs (e.g. doctors, sales staff) will be replaced by mechanical devices controlled remotely by off-site personnel...imagine your doctor is in another country controlling a robot (oh wait, that already exists).
Can people mod me up or have the summary corrected?
Oh man...you must be new...so I'll go easy.
...have the summary corrected?
1. Can people mod me up...
Never ask for a mod...it'll never happen. In fact, moderators tend to mod down people who ask (probably due to some latent aversion to narcissists?)...do like what (I assume) others here do: create another account, reply to your own message with it asking to "mod parent up"...that way it seems like someone else agrees with you...all egos satisfied.
2.
HAH! That only happens on stuff that the editors care about...like when Apple takes a poop, or when Twitter goes down...
/pedantry
I welcome our new master of batteries! Our lives our saved! All ye hail King...
...hold on, what was his name again? Ah, here it is...
...King Kung!
(I know, I know, terrible...sorry, I'm a bit of a nerd...I couldn't resist)
With a pretty high degree of certainty I can say that you did not have a substantial sales staff. Even in the very small companies where I have worked, sales staff drives the cost of support through the roof. Easily the least useful/self-sufficient group on the planet.
There, fixed that for you.
This isn't really news...I imagine this 'flaw' will be found in every version of iOS until it dies. Not only that, but we should be suspicious of app producers...they say "only install apps from trusted publishers"...yeah...ok...so, no one? If I did that, I'd have only the pre-loaded apps.
Joy...oh joy...oh rapture.