as i posted it i realised that it really wouldn't be a very good security system; people would just steal the ipod and sod the laptop(/whatever). d'oh.
and i don't care if you mod me -1 offtopic, troll or flamebait. some things have to be said and i need to rant.
i run a small website, this website has a few user comment areas. the comments are in plain text only. if you enter html, it gets stripped. urls are not converted into links.
people have been automatically spamming the site with links to phentermine and god knows what else, so I implemented a CAPTCHA solution that I wrote in PHP. they now spam me with broken html to bypass the captcha*. never, ever has any of their spam actually turned into html. no users have ever clicked their links, because there are no links to click. these guys just don't get it.
My point is that they'll continue spamming uselessly forever, they won't care about this 'public shaming' because they're the lowest of the low already.
blargh. i give up, i really do.
* i only ask users to pass the captcha if it looks like a url they're entering; i think captchas are annoying so i try to allow people to comment without having to enter one.
unsure how touchscreeens work, but i wonder if you could turn one of these into a fingerprint ID system - attach a usb cable and you've got a funky looking, if only marginally secure, security system. w00t.
the real question is: will it have more than 3 hours playback time so we can actually watch films on it, unlike almost every other portable video player
with open source, it's easier to get trojaned code in, but harder for it to stay there. on the reverse, who knows what could be lurking in MS code? I quote:
"A senior Microsoft Corp. executive told a federal court last week that sharing information with competitors could damage national security and even threaten the U.S. war effort in Afghanistan. He later acknowledged that some Microsoft code was so flawed it could not be safely disclosed." (http://www.eweek.com/article2/0,3959,5264,00.asp)
Re:No raw sockets in XP?
on
Nmap 4.00 Released
·
· Score: 1, Informative
How did nmap work in Windows before? (Did it?)
Under XP SP2, it didn't, even with firewall disabled.*
with nmap4 it does.
(* in reply to later comment about disabling windows firewall)
some possibilities: Dangerous Reality Eats All Desktops Do Real Exploits Actually Do (this) Dirty Rude Exploits Always Devour Dominant Rats Eat Any Dinosaurs Don't Realise Every Application Does (this) Danger/Response-time/Enduser-impact/Actual-threat/ Dev-time?
Does Microsoft support Full-Disclosure?
Given that it is stated on the Microsoft website in specific regard to security that "We share our knowledge, learn from others, and collaborate at every stage, so each successive partnership makes technology environments stronger"(1), it would seem that if MS does not support full-disclosure we must draw the conclusion that sharing knowledge, learning from others and collaborating is only permissible between MS and its industry partners.
On the other hand, if Microsoft does support full-disclosure, this seems to be in direct contrast with facts such as that the average patch time is 46 days(2). If Microsoft really does support full-disclosure, why are patches not released sooner?(3)
1 http://www.microsoft.com/mscorp/twc/security/overv iew.mspx
2 http://www.washingtonpost.com/wp-dyn/content/artic le/2006/01/14/AR2006011400218.html
3 I realise this is a second question and hence may be ignored if you wish.
Slashdot Mirror
one of the best articles i've read in a long time.
Mod Article +5 Truly Entertaining.
.... i don't watch TV over the net..
the TV license is there to support the BBC because the BBC has no adverts (supposedly, but that's another issue).
so instead of assuming that everyone with a PC will be busy downloading BBC shows, why not just offer all the BBC shows for download, at a price.
seriously.. why?
thanks for the info.
as i posted it i realised that it really wouldn't be a very good security system; people would just steal the ipod and sod the laptop(/whatever). d'oh.
and i don't care if you mod me -1 offtopic, troll or flamebait. some things have to be said and i need to rant.
i run a small website, this website has a few user comment areas. the comments are in plain text only. if you enter html, it gets stripped. urls are not converted into links.
people have been automatically spamming the site with links to phentermine and god knows what else, so I implemented a CAPTCHA solution that I wrote in PHP. they now spam me with broken html to bypass the captcha*. never, ever has any of their spam actually turned into html. no users have ever clicked their links, because there are no links to click. these guys just don't get it.
My point is that they'll continue spamming uselessly forever, they won't care about this 'public shaming' because they're the lowest of the low already.
blargh. i give up, i really do.
* i only ask users to pass the captcha if it looks like a url they're entering; i think captchas are annoying so i try to allow people to comment without having to enter one.
unsure how touchscreeens work, but i wonder if you could turn one of these into a fingerprint ID system - attach a usb cable and you've got a funky looking, if only marginally secure, security system. w00t.
the real question is: will it have more than 3 hours playback time so we can actually watch films on it, unlike almost every other portable video player
From TA:
.... significant changes took place in the brains of these individuals"
"During the first year of college
- yeah, because it's the first year of college - they're all busy pickling their brains with newly found alcohol and drugs.
duh.
in all seriousness though - won't they need to keep upping the dose?
also the xbox and dreamcast.
some interesting stuff lurking in those nmap-xxxx files.
don't you mean ex-Soviet?
/. sometimes I *can* write a reply in less than 15 seconds.
---
and yes
Already tried - a little while ago someone tried to slip a backdoor into the linux kernel.
)
Fortunately, the backdoor was caught via exactly the kind of peer review that open source allows.
see http://kerneltrap.org/node/1584
with open source, it's easier to get trojaned code in, but harder for it to stay there. on the reverse, who knows what could be lurking in MS code? I quote:
"A senior Microsoft Corp. executive told a federal court last week that sharing information with competitors could damage national security and even threaten the U.S. war effort in Afghanistan. He later acknowledged that some Microsoft code was so flawed it could not be safely disclosed."
(http://www.eweek.com/article2/0,3959,5264,00.asp
with nmap4 it does.
(* in reply to later comment about disabling windows firewall)
so it's still just a bunch of useless freeware wrapped around a second-rate browser, eh?
Honestly, why are they even bothering?
the official standard (http://www.id3.org/) only defines 80 genres.
Nullsoft added a further 45 to the list, but these remain 'unofficial' additions.
you can see the whole list at http://puremango.co.uk/id3lib.txt
what on earth is a DREAD score?
/ Dev-time?
some possibilities:
Dangerous Reality Eats All Desktops
Do Real Exploits Actually Do (this)
Dirty Rude Exploits Always Devour
Dominant Rats Eat Any Dinosaurs
Don't Realise Every Application Does (this)
Danger/Response-time/Enduser-impact/Actual-threat
ah, i could go on all day...
Does Microsoft support Full-Disclosure? Given that it is stated on the Microsoft website in specific regard to security that "We share our knowledge, learn from others, and collaborate at every stage, so each successive partnership makes technology environments stronger"(1), it would seem that if MS does not support full-disclosure we must draw the conclusion that sharing knowledge, learning from others and collaborating is only permissible between MS and its industry partners. On the other hand, if Microsoft does support full-disclosure, this seems to be in direct contrast with facts such as that the average patch time is 46 days(2). If Microsoft really does support full-disclosure, why are patches not released sooner?(3) 1 http://www.microsoft.com/mscorp/twc/security/overv iew.mspx
2 http://www.washingtonpost.com/wp-dyn/content/artic le/2006/01/14/AR2006011400218.html
3 I realise this is a second question and hence may be ignored if you wish.