Methane's melting point is -305.4 F. ie. It stops being a solid and becomes a liquid. It stops being a liquid and becomes a gas, the boiling point, at -260 F. I know parts of northern Russia are cold but that is colder than the average mother in law.
You seriously believe it will ever be economically recovered from such a disperse source?
Dispersed? Are you imagining little bubbles here and there, instead of "'I was most impressed by the sheer scale and the high density of the plumes", in those areas or something? Do you think that drilling a hole in one of those areas wouldn't tap into a large pocket of the gas below? Did your at least read the OP let alone TFA?
If they have your phone and have gained enough access to gather this information, why don't they just use your phone to empty your accounts? Why bother going through all the trouble to snarf data and social engineer the owner? The article should be more clear on if an installed application other than Google Wallet can access the Sqlite3 file. If that is the case, encrypted or not, it is broken. If that is not the case then they didn't find anything very useful. Who, that is capable of rooting a phone and installing alternative OS, is going to fall for social engineering attempt after loosing their phone. You would have to be the dumbest geek on earth.
I doubt HP is going to dump it on a git server and forget about it. They are going to continue to do with it what they want to do with it; that being the mysterious purpose they are wanting a buyer to give them a low cost license to use it. Opening it up to the OSS community will give people who find it interesting to port it to different hardware. There is no shortage of people out there rooting devices to put something that interests them on the device. Having a proprietary version hasn't helped Nokia sell interest in QT. If anything it has had a negative effect. There are those that worry about Nokia getting sold to Microsoft. After seeing what happened with Sun getting purchased by Oracle, I think the OSS community would be more hesitant if it were duel licensed.
This is a gold mine of resources. There are a lot of great things going on with methane studies, from fuel cells to low energy conversion methods.
Sen and postdoctoral associate Minren Lin announced a breakthrough. By dissolving a powder of rhodium chloride in water, along with carbon monoxide and oxygen, they had produced acetic acid from methane directly. The reaction took place at a relatively low temperature (100 degrees centigrade), required little energy, and left no environmentally harmful solvents to throw away. http://www.rps.psu.edu/sep98/methane.html
Colleagues of ours created a highly porous carbon-nitrogen polymer, which we realised had very similar structural motifs to the Periana catalyst,' Schüth says, 'so we wondered if we could incorporate platinum into the structure. If the mixture is then pressurised in an autoclave with methane, the methane is consumed and methanol formed at conversion rates comparable to Periana-based systems but with the solid catalyst easily recoverable at the end of the reaction. http://www.rsc.org/chemistryworld/News/2009/August/10080902.asp
An teh monstar I saws It iz layk big spotteded kitteh, an It can has pawz layk bear, an It can has mout layk big neck-fur kitteh. An Teh dragn gaved it teh powurz an teh chairz an teh autoritiez.Revalashunz 13:2
Nonsense! The U.S. doesn't have spots. It has stripes!
Broadband internet access enables higher speed when browsing and performing activities over the internet. The proportion of households with a broadband connection rose in all Member States in 2011 compared with 2006. Sweden (86%) registered the highest share of broadband connections in 2011, followed by Denmark (84%), the Netherlands and the United Kingdom (both 83%) and Finland (81%), while Romania (31%), Bulgaria (40%) and Greece (45%) had the lowest.
Soooo the places where connectivity sucks people don't bother getting on the net? Maybe there is something in the ratio between minimum wage and cost of getting on a slow as shit ISP.
Minimum Wage: Greece Euro 25.01 per day ($US 93.30/mo) Bulgaria: 150 Levs per month ($US 95.54/mo) Romania: 390 RON per month ($US 116.80/mo)
Encrypted data cannot be meaningfully differentiated from compressed data
It doesn't really need to be. If you use the method like Shane Alcock uses in protoident, check the first four bits against a vector of known L7 protocols, you can usually determine the L7 protocol. You have to completely tunnel over HTTPS to keep the L7 protocol indistinguishable. Of course looking for information in the body of the packet trace_get_payload_from_* for an SSL handshake works too; but, it takes a lot more code and slows down your sensor. ie. regex'ing and sorting and chomping until you get what you want on every packet that doesn't have the SYN, FIN, or RST flag set.
Port 80 is popular because it's far and away the most likely port to be open on a firewall, more so than 443.
More and more IPS devices are tuned to pick up on encrypted traffic over port 80 as a break in policy. If port 443 is used the number of connections would be the only thing left for those devices to pick up on. With sites serving all content over HTTPS, ie. images from image servers, ads from ad servers, etc... all encrypted connections, multiple SSL connections to legit web sites will get much harder to distinguish from P2P traffic. Then they will be left with relying on plain text info in the cert exchange and the amount of content being transferred. When decentralized CA gets here, IMHO, the game will be back in the user's favor. Making a decision based on the amount of traffic transferred is a false positive mine field.
So I was correct. You are talking about tracker communication used to keep track of participating clients. "The dictionary exchange", L7. Therefore the client must explicitly state its (external, routable) IP address to be given out to external peers. I'm talking about the process involved in sharing the files, L3. P2P can be set up over TCP but traditionally it is pretty rare. Though I do have to say I'm seeing more and more of it over TCP port 80. Why not over port 443 I don't know but...
Today almost all P2P applications using a decentralized structure have a built-in module to fulfill their interaction work, because there are many control purpose packets needed to be sent out to many destinations. A great deal of the modern P2P networks and protocols select UDP as the carrying protocol.
Why do they select UDP? UDP is simple, effect and low-cost. It does not need to provide guarantee for packet delivery, establish connection, or maintain connection state. All these features make UDP fit for fast delivery of data to many destinations. These are just what P2P applications need. Inspecting different P2P applications carefully, you will find most of the modern decentralized P2P applications adopt a similar network behavior. When they startup, they create one or several UDP sockets to listen, and then communicate with abundant outside addresses during their life by using these UDP ports to assist their interaction in the P2P world.
I think what your referring to is after the dictionary exchange. The GET in HTTP doesn't happen until the client's first ACK, usually the third packet.
Client sends SYN Server responds SYN-ACK Client sends ACK with HTTP headers in the body. Server sends the dict.
From that point the UDP connections are made to the seeds. Your probably thinking the switch is made here because some clients have an HTTP client separate from the P2P client. ie. like downloading the torrent file with your browser and "running" it with the torrent client. Yes you could have your browser set to spoof an IP address while the torrent client tells the truth. However, there would still need to be an outage at the original IP address for the HTTP connection to work. You would also need the two clients on separate machines or have multiple IP addresses aliased to your machine.
Another shit all stupid fucktard spewing forth shit from ignorance instead of commenting on the topic. When your ignorant of both it is best to shut the fuck up.
Gage Gage (g[=a]j), n. [F. gage, LL. gadium, wadium; of German
origin; cf. Goth. wadi, OHG. wetti, weti, akin to E. wed. See
Wed, and cf. Wage, n.]
The Collaborative International Dictionary of English v.0.48 (gcide) Gage Gage, v. t.
To measure.
[1913 Webster]
You shall not gage me
By what we do to-night. --Shak.
[1913 Webster]
Gage Gage, n.
A measure or standard. See Gauge, n.
[1913 Webster]
The Collaborative International Dictionary of English v.0.48 (gcide) Gauge Gauge (g[=a]j), v. t. [imp. & p. p. Gauged; p. pr. &
vb. n. Gauging] [OF. gaugier, F. jauger, cf. OF. gauge
gauge, measuring rod, F. jauge; of uncertain origin; perh.
fr. an assumed L. qualificare to determine the qualities of a
thing (see Qualify); but cf. also F. jalon a measuring
stake in surveying, and E. gallon.] [Written also gage.]
[1913 Webster]
1. To measure or determine with a gauge.
[1913 Webster]
In a response Buma/Stemra issued a press release stating that their IP-addresses were spoofed.
A spoofed IP address does not receive return packets unless you hijack the address or PAT the specific traffic on the router/firewall responsible for the address. I doubt Buma/Stemra had an outage long enough for someone to snag some files. If someone malicious owns their router/firewall there would be more mischief than this.
Our client Trevor Eckhart (whose research set off the present firestorm) and his subsequent collaborator Ashkan Soltani have shown that on some phones, dialer keypresses and SMS text are being written to system logs by layer 4 code.
It doesn't matter the intent of the developers of the software. If it exposes private information by logging plain text information to a place where an application can access it, it is bad. Trevor Eckhart exposed a VERY dangerous effect of a software exposing private information. The developers should fix their shit and shut the fuck up.
Finally, there is an additional configuration file (called a "Profile") that controls the behavior of layer 2 and determines what information is actually sent from the phone to a carrier or other Carrier IQ client.
If the user does not have access, or even know there is access, to controlling the "Profile" it is spyware. If it can not be disabled or removed without rooting the phone it is a rootkit.
Why would they need to know the content of my SMS messages to make a better app?
Also. The ISPs are the first hop and can sniff your traffic all day long for content. They have no need for this application to give them detailed information like that. This application has to have been designed so that information can be seen by other people. I'm not saying it is designed to send content to the NSA, FBI, or OEMs because I don't have enough information. It could be argued that snarfing a message would show if a key is bad because none of the characters associated with that key show up in a message. However, I highly doubt that anyone would believe a keystroke recorder is there for that reason. There are several better ways to know if a key is dead. It is just too difficult to believe this software was designed for anything other than giving the people involved the ability to let someone else do the job of spying so they don't have to.
Slashdot Mirror
Nobody uses water any longer. Oil is silent and more efficient.
Methane's melting point is -305.4 F. ie. It stops being a solid and becomes a liquid. It stops being a liquid and becomes a gas, the boiling point, at -260 F. I know parts of northern Russia are cold but that is colder than the average mother in law.
You seriously believe it will ever be economically recovered from such a disperse source?
Dispersed? Are you imagining little bubbles here and there, instead of "'I was most impressed by the sheer scale and the high density of the plumes", in those areas or something? Do you think that drilling a hole in one of those areas wouldn't tap into a large pocket of the gas below? Did your at least read the OP let alone TFA?
May they burn in the furry hells!
If they have your phone and have gained enough access to gather this information, why don't they just use your phone to empty your accounts? Why bother going through all the trouble to snarf data and social engineer the owner? The article should be more clear on if an installed application other than Google Wallet can access the Sqlite3 file. If that is the case, encrypted or not, it is broken. If that is not the case then they didn't find anything very useful. Who, that is capable of rooting a phone and installing alternative OS, is going to fall for social engineering attempt after loosing their phone. You would have to be the dumbest geek on earth.
I doubt HP is going to dump it on a git server and forget about it. They are going to continue to do with it what they want to do with it; that being the mysterious purpose they are wanting a buyer to give them a low cost license to use it. Opening it up to the OSS community will give people who find it interesting to port it to different hardware. There is no shortage of people out there rooting devices to put something that interests them on the device. Having a proprietary version hasn't helped Nokia sell interest in QT. If anything it has had a negative effect. There are those that worry about Nokia getting sold to Microsoft. After seeing what happened with Sun getting purchased by Oracle, I think the OSS community would be more hesitant if it were duel licensed.
This is a gold mine of resources. There are a lot of great things going on with methane studies, from fuel cells to low energy conversion methods.
Sen and postdoctoral associate Minren Lin announced a breakthrough. By dissolving a powder of rhodium chloride in water, along with carbon monoxide and oxygen, they had produced acetic acid from methane directly. The reaction took place at a relatively low temperature (100 degrees centigrade), required little energy, and left no environmentally harmful solvents to throw away. http://www.rps.psu.edu/sep98/methane.html
Colleagues of ours created a highly porous carbon-nitrogen polymer, which we realised had very similar structural motifs to the Periana catalyst,' Schüth says, 'so we wondered if we could incorporate platinum into the structure.
If the mixture is then pressurised in an autoclave with methane, the methane is consumed and methanol formed at conversion rates comparable to Periana-based systems but with the solid catalyst easily recoverable at the end of the reaction. http://www.rsc.org/chemistryworld/News/2009/August/10080902.asp
Only if you call it what it really is.
doh!
An teh monstar I saws It iz layk big spotteded kitteh, an It can has pawz layk bear, an It can has mout layk big neck-fur kitteh. An Teh dragn gaved it teh powurz an teh chairz an teh autoritiez. Revalashunz 13:2
Nonsense! The U.S. doesn't have spots. It has stripes!
Broadband internet access enables higher speed when browsing and performing activities over the internet. The proportion of households with a broadband connection rose in all Member States in 2011 compared with 2006. Sweden (86%) registered the highest share of broadband connections in 2011, followed by Denmark (84%), the Netherlands and the United Kingdom (both 83%) and Finland (81%), while Romania (31%), Bulgaria (40%) and Greece (45%) had the lowest.
Soooo the places where connectivity sucks people don't bother getting on the net? Maybe there is something in the ratio between minimum wage and cost of getting on a slow as shit ISP.
Minimum Wage:
Greece Euro 25.01 per day ($US 93.30/mo)
Bulgaria: 150 Levs per month ($US 95.54/mo)
Romania: 390 RON per month ($US 116.80/mo)
Encrypted data cannot be meaningfully differentiated from compressed data
It doesn't really need to be. If you use the method like Shane Alcock uses in protoident, check the first four bits against a vector of known L7 protocols, you can usually determine the L7 protocol. You have to completely tunnel over HTTPS to keep the L7 protocol indistinguishable. Of course looking for information in the body of the packet trace_get_payload_from_* for an SSL handshake works too; but, it takes a lot more code and slows down your sensor. ie. regex'ing and sorting and chomping until you get what you want on every packet that doesn't have the SYN, FIN, or RST flag set.
Port 80 is popular because it's far and away the most likely port to be open on a firewall, more so than 443.
More and more IPS devices are tuned to pick up on encrypted traffic over port 80 as a break in policy. If port 443 is used the number of connections would be the only thing left for those devices to pick up on. With sites serving all content over HTTPS, ie. images from image servers, ads from ad servers, etc... all encrypted connections, multiple SSL connections to legit web sites will get much harder to distinguish from P2P traffic. Then they will be left with relying on plain text info in the cert exchange and the amount of content being transferred. When decentralized CA gets here, IMHO, the game will be back in the user's favor. Making a decision based on the amount of traffic transferred is a false positive mine field.
1) Do i have to give up my "wifes"?
2) Do robots count?
So I was correct. You are talking about tracker communication used to keep track of participating clients. "The dictionary exchange", L7. Therefore the client must explicitly state its (external, routable) IP address to be given out to external peers. I'm talking about the process involved in sharing the files, L3. P2P can be set up over TCP but traditionally it is pretty rare. Though I do have to say I'm seeing more and more of it over TCP port 80. Why not over port 443 I don't know but...
http://www.symantec.com/connect/articles/identifying-p2p-users-using-traffic-analysis
Today almost all P2P applications using a decentralized structure have a built-in module to fulfill their interaction work, because there are many control purpose packets needed to be sent out to many destinations. A great deal of the modern P2P networks and protocols select UDP as the carrying protocol.
Why do they select UDP? UDP is simple, effect and low-cost. It does not need to provide guarantee for packet delivery, establish connection, or maintain connection state. All these features make UDP fit for fast delivery of data to many destinations. These are just what P2P applications need. Inspecting different P2P applications carefully, you will find most of the modern decentralized P2P applications adopt a similar network behavior. When they startup, they create one or several UDP sockets to listen, and then communicate with abundant outside addresses during their life by using these UDP ports to assist their interaction in the P2P world.
I think what your referring to is after the dictionary exchange. The GET in HTTP doesn't happen until the client's first ACK, usually the third packet.
Client sends SYN
Server responds SYN-ACK
Client sends ACK with HTTP headers in the body.
Server sends the dict.
From that point the UDP connections are made to the seeds. Your probably thinking the switch is made here because some clients have an HTTP client separate from the P2P client. ie. like downloading the torrent file with your browser and "running" it with the torrent client. Yes you could have your browser set to spoof an IP address while the torrent client tells the truth. However, there would still need to be an outage at the original IP address for the HTTP connection to work. You would also need the two clients on separate machines or have multiple IP addresses aliased to your machine.
Another shit all stupid fucktard spewing forth shit from ignorance instead of commenting on the topic. When your ignorant of both it is best to shut the fuck up.
Gage Gage (g[=a]j), n. [F. gage, LL. gadium, wadium; of German
origin; cf. Goth. wadi, OHG. wetti, weti, akin to E. wed. See
Wed, and cf. Wage, n.]
The Collaborative International Dictionary of English v.0.48 (gcide)
Gage Gage, v. t.
To measure.
[1913 Webster]
You shall not gage me
By what we do to-night. --Shak.
[1913 Webster]
Gage Gage, n.
A measure or standard. See Gauge, n.
[1913 Webster]
The Collaborative International Dictionary of English v.0.48 (gcide)
Gauge Gauge (g[=a]j), v. t. [imp. & p. p. Gauged; p. pr. &
vb. n. Gauging] [OF. gaugier, F. jauger, cf. OF. gauge
gauge, measuring rod, F. jauge; of uncertain origin; perh.
fr. an assumed L. qualificare to determine the qualities of a
thing (see Qualify); but cf. also F. jalon a measuring
stake in surveying, and E. gallon.] [Written also gage.]
[1913 Webster]
1. To measure or determine with a gauge.
[1913 Webster]
They have to make money off me visiting their site somehow. I only use them for gaging prices before buying something from somebody else.
What Microsoft Should and Shouldn't Do For the Xbox 720
Pump out stories about what they should do so people will have it on their mind while buying christmas presents.
In a response Buma/Stemra issued a press release stating that their IP-addresses were spoofed.
A spoofed IP address does not receive return packets unless you hijack the address or PAT the specific traffic on the router/firewall responsible for the address. I doubt Buma/Stemra had an outage long enough for someone to snag some files. If someone malicious owns their router/firewall there would be more mischief than this.
Our client Trevor Eckhart (whose research set off the present firestorm) and his subsequent collaborator Ashkan Soltani have shown that on some phones, dialer keypresses and SMS text are being written to system logs by layer 4 code.
It doesn't matter the intent of the developers of the software. If it exposes private information by logging plain text information to a place where an application can access it, it is bad. Trevor Eckhart exposed a VERY dangerous effect of a software exposing private information. The developers should fix their shit and shut the fuck up.
Finally, there is an additional configuration file (called a "Profile") that controls the behavior of layer 2 and determines what information is actually sent from the phone to a carrier or other Carrier IQ client.
If the user does not have access, or even know there is access, to controlling the "Profile" it is spyware. If it can not be disabled or removed without rooting the phone it is a rootkit.
Why would they need to know the content of my SMS messages to make a better app?
Also. The ISPs are the first hop and can sniff your traffic all day long for content. They have no need for this application to give them detailed information like that. This application has to have been designed so that information can be seen by other people. I'm not saying it is designed to send content to the NSA, FBI, or OEMs because I don't have enough information. It could be argued that snarfing a message would show if a key is bad because none of the characters associated with that key show up in a message. However, I highly doubt that anyone would believe a keystroke recorder is there for that reason. There are several better ways to know if a key is dead. It is just too difficult to believe this software was designed for anything other than giving the people involved the ability to let someone else do the job of spying so they don't have to.
You should look up some time what "in poverty" actually means.
uh huh huh. I doubt it is anywhere in them there documents on that there website someplace. Fucking moron.
There isn't a gui interface to apt-get?
lol