Exactly, I was thinking maybe the negotiation was "Ok. we grant you assylum, but you destroy every Ecuador incriminating information you get". I personally do not like much Assange modus operandi (nothing against publishing things with care and not because you care about your personal image), but I will start to respect more Mr. Assange if he dare to publish things about Ecuador even inside the country
As others has said, there is no need for data connection, the common problem user experience with Google application (that implements the OATH standard) is that it requires a little of time synchronization, if your phone date and time is too far from the real one, the generated code will not work. Google application request the Internet connection permission in order to query the time from Google servers and store the offset with your phone time, in case it your phone time is wrong. It connect sometimes to update that offset when connectivity is available. If you have correct date and time (and Timezone) data connectivity is not needed ever
Adding more info about the application, the client is OSS so anyone can port it to Windows/Linux/Mac/Browser extension/you name it, there is nothing in Google solution that requires an smartphone nor data connection
Sorry John but successful people create a market, they don't wait for it to be ready for you. Valve working with GPU manufacturers is a signal that they want to create a market. It is sad to say this but Id was a market defining company, now a follower
The user is paying for their iCloud service (if use more than the free quota, if they need more moeny remove the low the free quota), why the developer must be forced to a store for that?. Do Google force developers using Google Drive APIs to use Google Play or Chrome Store? If I pay for Google Apps for domains, do every XMPP messaging client must distribute their app using the Google methods if they will connect to Google Talk server. There is no excuse for Apple blocking iCloud
Security enhancements should always be welcome. For now they still provide an option to install applications that do not follow the Apple signing requirements and that is good. The problem is when Apple is forbidding APIs to be used if you do not distribute the application on the Mac App Store. I am pretty sure if Google or Microsoft start blocking APIs and make the exclusive to their applications on their store, some people will get mad (with justification)
Exactly, it will only make difficult for normal users to play their games when they buy a new device and the developer is not working on the game anymore and never flags the application as compatible with another device. That happened to me, I wanted to play a game on my Xoom but the developer never updated the game to be able to run on it but the old one for phones worked perfectly, So I sideloaded it on my Xoom. As always DRM will punish honest users like me
I am sure it does not need to be ported, only packaged for any distribution, the problem with Unity is that Ubuntu had to patch many applications to use the new features that it provides, like the notifications API for example. That they are building it on OpenSUSE service and not directly on Fedora repositories is probably (I am guessing) because Fedora has an strict policy of not patching upstream projects, if you need new features, add those to the original project (if you convince the project managers that what you have done is good and needed)
It is simple, add to their legal binding document/contract that the OEM must not ship machines with locked keys and if that happens by accident the OEM must provide an updated firmware
Me too, but that worked because RAID 1 is just a mirror without stripping and/boot partition is only used for read. I don't know if you can use grub now for example on a small server using RAID 5 without the need to put/boot on RAID 1
I think this trend is being forced by proprietary OS vendors, Valve should be threatened by the Windows 8 Market that is locked (for Metro applications only, for now) and the prospect of a locked down OS X. If that future of entirely lock down stores arrive, Steam will be dead soon. That is the only reason they are looking for an exit on the Linux market.
Isn't Office included on Windows RT? I think that is the reason of that higher price, some big corporations have so disconnected divisions that each one demands their cut to meet their yearly quota and do not see the big picture
And let me add: don't use hardware that only have one manufacturer for something important. This is something I always tell to some management people whet they try to bring a change to Apple devices in their enterprises. You have no option to switch to another manufacturer if for some reason Apple is not able to match your needs, be it there is a shortage in the country, some ban (stupid patents lawsuits) prohibits it from selling here,...... and more
I don't think the update must be the same key, unless someone really messed up the UEFI requirements. If the Windows key is compromised each manufacturer could distribute a firmware update signed with their private keys, unless UEFI compliance requirements says that the firmware updates must be signed with the same SecureBoot key, there is no circular logic
UEFI requires firmware updates to be signed too (I presume not using the same chain of trust of the SecureBoot key, some private manufacturer key). If MS key is breached, the obvious method to me is that the manufacturer release a firmware update with new embedded default keys
Using to the UEFI settings in your firmware. there is no automated way to do it, the 'attack vector' possibility is the reason. Red Hat will use this method of signing the bootloader using Microsoft signing services to help the common user to install a Linux distribution without messing with scary UEFI screens. The real problem now is: Will hardware vendors always provide a screen to add/change the keys?. Unless it is enforced by Microsoft Windows OEM licensing rules (not know about this) or government regulation, The answer is not every manufacturer will provide that
I am not sure about the current status of the work of the Red Hat team behind FreeIPA, that integrate Samba 4 with other FreeIPA base technologies like 389 LDAP Server (I remember Simo Sorce was working in Samba integration), there is outdated documentation about using Samba 4 alphas with 389 LDAP server backed, so there is interest in that kind of integration
The devices are tablets to be used inside the premises of the (Healthcare) institution and they aren't for personal use, only for applications that are build for that usage
I think the parent want a little more than a lock screen policy. I want:
1) disable outside market instalation of apps 2) disable installation of market apps or restrict them to a whitelist 3) Be able to setup a corporate store for internal developed apps, this could work but you must enable installation of outside market applications (see 2) 4) Lock Google accounts addition and removal
Or a platform with only one browser engine with a security vulnerability (like the one that allowed to rootkit your phone after opening a web page) and you need to wait weeks for a fix, and not being able to use other browser engine in that time. Or other platform thatallows you to install another "real" browser meanwhile the embeeded one is fixed. Choice is always good, nobody is forcing the user to use another one, but the option must exist
As much as I dislike being left behind for the first version, pleople forget that the same happens on Google side, Google Talk plugin, Drive client, even the initial version of Chrome where Windows and Mac only, We are always left behind by Google, There is no Drive sync client for Linux yet (but it will come).
The PS3 had an awful port of old Netfront (dumb phone browser engine) to the PS3. Some months ago they upgraded it to a more recent version of Netfront that is based on Webkit. It is a modern engine but still very slow on the PS3
Exactly, I was thinking maybe the negotiation was "Ok. we grant you assylum, but you destroy every Ecuador incriminating information you get". I personally do not like much Assange modus operandi (nothing against publishing things with care and not because you care about your personal image), but I will start to respect more Mr. Assange if he dare to publish things about Ecuador even inside the country
As others has said, there is no need for data connection, the common problem user experience with Google application (that implements the OATH standard) is that it requires a little of time synchronization, if your phone date and time is too far from the real one, the generated code will not work. Google application request the Internet connection permission in order to query the time from Google servers and store the offset with your phone time, in case it your phone time is wrong. It connect sometimes to update that offset when connectivity is available. If you have correct date and time (and Timezone) data connectivity is not needed ever
Adding more info about the application, the client is OSS so anyone can port it to Windows/Linux/Mac/Browser extension/you name it, there is nothing in Google solution that requires an smartphone nor data connection
Sorry John but successful people create a market, they don't wait for it to be ready for you. Valve working with GPU manufacturers is a signal that they want to create a market. It is sad to say this but Id was a market defining company, now a follower
This is software installed by the user on purpose
True, it is a Troyan, software that disguise as something you want but do things or allow others to do things you don't granted permission
The user is paying for their iCloud service (if use more than the free quota, if they need more moeny remove the low the free quota), why the developer must be forced to a store for that?. Do Google force developers using Google Drive APIs to use Google Play or Chrome Store? If I pay for Google Apps for domains, do every XMPP messaging client must distribute their app using the Google methods if they will connect to Google Talk server. There is no excuse for Apple blocking iCloud
Security enhancements should always be welcome. For now they still provide an option to install applications that do not follow the Apple signing requirements and that is good. The problem is when Apple is forbidding APIs to be used if you do not distribute the application on the Mac App Store. I am pretty sure if Google or Microsoft start blocking APIs and make the exclusive to their applications on their store, some people will get mad (with justification)
Exactly, it will only make difficult for normal users to play their games when they buy a new device and the developer is not working on the game anymore and never flags the application as compatible with another device. That happened to me, I wanted to play a game on my Xoom but the developer never updated the game to be able to run on it but the old one for phones worked perfectly, So I sideloaded it on my Xoom. As always DRM will punish honest users like me
I am sure it does not need to be ported, only packaged for any distribution, the problem with Unity is that Ubuntu had to patch many applications to use the new features that it provides, like the notifications API for example. That they are building it on OpenSUSE service and not directly on Fedora repositories is probably (I am guessing) because Fedora has an strict policy of not patching upstream projects, if you need new features, add those to the original project (if you convince the project managers that what you have done is good and needed)
Specifically, he saw Windows Store (locked for Metro apps... for now)
It is simple, add to their legal binding document/contract that the OEM must not ship machines with locked keys and if that happens by accident the OEM must provide an updated firmware
Me too, but that worked because RAID 1 is just a mirror without stripping and /boot partition is only used for read. I don't know if you can use grub now for example on a small server using RAID 5 without the need to put /boot on RAID 1
I think this trend is being forced by proprietary OS vendors, Valve should be threatened by the Windows 8 Market that is locked (for Metro applications only, for now) and the prospect of a locked down OS X. If that future of entirely lock down stores arrive, Steam will be dead soon. That is the only reason they are looking for an exit on the Linux market.
Isn't Office included on Windows RT? I think that is the reason of that higher price, some big corporations have so disconnected divisions that each one demands their cut to meet their yearly quota and do not see the big picture
And let me add: don't use hardware that only have one manufacturer for something important. This is something I always tell to some management people whet they try to bring a change to Apple devices in their enterprises. You have no option to switch to another manufacturer if for some reason Apple is not able to match your needs, be it there is a shortage in the country, some ban (stupid patents lawsuits) prohibits it from selling here, ...... and more
I don't think the update must be the same key, unless someone really messed up the UEFI requirements. If the Windows key is compromised each manufacturer could distribute a firmware update signed with their private keys, unless UEFI compliance requirements says that the firmware updates must be signed with the same SecureBoot key, there is no circular logic
Did you read? the firmware must be signed, and the hardware will only allow updates if it is trusted
UEFI requires firmware updates to be signed too (I presume not using the same chain of trust of the SecureBoot key, some private manufacturer key). If MS key is breached, the obvious method to me is that the manufacturer release a firmware update with new embedded default keys
Using to the UEFI settings in your firmware. there is no automated way to do it, the 'attack vector' possibility is the reason. Red Hat will use this method of signing the bootloader using Microsoft signing services to help the common user to install a Linux distribution without messing with scary UEFI screens. The real problem now is: Will hardware vendors always provide a screen to add/change the keys?. Unless it is enforced by Microsoft Windows OEM licensing rules (not know about this) or government regulation, The answer is not every manufacturer will provide that
I am not sure about the current status of the work of the Red Hat team behind FreeIPA, that integrate Samba 4 with other FreeIPA base technologies like 389 LDAP Server (I remember Simo Sorce was working in Samba integration), there is outdated documentation about using Samba 4 alphas with 389 LDAP server backed, so there is interest in that kind of integration
Do all your users want to carry two devices?
The devices are tablets to be used inside the premises of the (Healthcare) institution and they aren't for personal use, only for applications that are build for that usage
I think the parent want a little more than a lock screen policy. I want:
1) disable outside market instalation of apps
2) disable installation of market apps or restrict them to a whitelist
3) Be able to setup a corporate store for internal developed apps, this could work but you must enable installation of outside market applications (see 2)
4) Lock Google accounts addition and removal
Or a platform with only one browser engine with a security vulnerability (like the one that allowed to rootkit your phone after opening a web page) and you need to wait weeks for a fix, and not being able to use other browser engine in that time. Or other platform thatallows you to install another "real" browser meanwhile the embeeded one is fixed. Choice is always good, nobody is forcing the user to use another one, but the option must exist
As much as I dislike being left behind for the first version, pleople forget that the same happens on Google side, Google Talk plugin, Drive client, even the initial version of Chrome where Windows and Mac only, We are always left behind by Google, There is no Drive sync client for Linux yet (but it will come).
The PS3 had an awful port of old Netfront (dumb phone browser engine) to the PS3. Some months ago they upgraded it to a more recent version of Netfront that is based on Webkit. It is a modern engine but still very slow on the PS3