Maybe I didn't read the article carefully, but my mistaken(?) impression that key finding was "fraction of those stars that have planets" is lower than what we previously believed.
I am not conflating, I am providing an example of a trend.
I invite you to make high school only resume and try to get a full time job in your area. It is not as easy as you think. Even if you are driven, intelligent, and motivated, and many of the people in question are not.
While it would be ideal if it was possible for everyone to "just get a job", it is not for a number of reasons. First, automation and increased productivity drastically reduced locally-available jobs. Second, outsourcing and shrinking share of productivity going to bottom 10% of people put downward pressure of incomes. As such, there just not enough jobs for everyone, and jobs that are available do not get you out of poverty (fun fact: Wall Mart employees are also often on the dole, because forced part time does not pay survivable wage).
Merger is anti-market, anti-competitive and will result in shittier and more expensive internet for everyone. Also, there is no such thing as free, costs will be passed to existing paying customers, again making it more expensive.
Scenario A: MitM insert malware into download of Foo installer. If your only defense is to manually check published hash, and website where published hash is displayed is not protected, what would prevent MitM attacker from also altering published hash that you see? Convoluted attack, but feasible.
Scenario B: Now, if you use public-key signature to sign Foo installer it becomes much harder to compromise. MitM attacker could alter your download, and sign it with their own signature, but unless they also find a way to get you to trust their signature it will not succeed. The most attacker would be able to do is use compromised CA that you trust to issue doppelganger keys and hope that your revocation list is out of date. They can also prevent you from getting your revocation list updated, so this could be done for entire life of compromised CA's certificates. Still, this is a lot more complicated attack than Scenario A.
Moral of the story? Sign your code instead of relying on published hash. Otherwise make sure to protect published hash with https.
You could substitute hash, but if it is actually public-key signed then you'd have less luck. Your substitution would not originate from example.com OR would not belong to the same root CA.
You are not misremembering, at one point WSJ published a lot of insightful business and economic commentary, and kept politics contained in the opinion pages. Now political narrative dominates all aspects and as a result business and economic aspect suffer.
I stopped reading it for this reason - profit has no ideology, moment you view data through a lens of politics is the moment you stop noticing opportunities.
This goes further to demonstrate that automation will take over many menial jobs in my lifetime. This leaves us with a problem - what to do with all the unwanted and unskilled labor? Skilled worker's salaries have not kept up with productivity gains, as such there is no chance they could support service-based economy to offer unskilled workers a living wage.
Sadly, the likely outcome is drop in the quality of life for everyone involved.
On the Internet, nobody knows you are a dog. So how dog harassment numbers look like? Probably the same.
According to PA's Greater Internet Fuckward Theory (GIFT), it is gender-neutral and widespread. It is unfortunate, but that is the only way it could exists and still allow unauthenticated participation. To me, this unauthenticated quality that allows anonymity is a lot more valuable than eliminating GIFT asshatery.
Using your kitchen knives "example". How would you "just keep prosecuting" if stabbing could be done remotely, anonymously, on a large scale, and with nearly unlimited frequency?
That is, imagine that it could be possible for a group of individuals to remotely cause 1mil/second stabbings in all households in say New York. It is just like that.
Only liability insurance industry can force the change. Otherwise it will be impossible to put a monetary value on this effort.
When bad things happen, the liability is covered by the insurance. The insurance industry can accurately estimate the risk, and raise premiums accordingly. They generally don't reward greatly reducing marginal risks, as such expense of completely securing medical information systems would not meaningfully reduce premiums. It is only when prevalence of compromise increases, something (at much greater expense and urgency) will be done.
The underlying issue is that these types of risks seen as negligible. Historically, this is accurate view, but they have not experienced almost-none to all-the-time ramp up of incidences we have seen in say network security.
The only surprise is that catastrophes are not commonplace. As an information security professional I can tell you based on a first-hand experience that we are metasploit module away from a major disaster. Industrial automation, medical, automotive and many other industries simply do not get information security. Chances are, your municipal water treatment system, you office building's elevators and heating, your glucose monitoring system, your car's infotainment system, your neighborhood's stoplights are trivially hackable. The only good news is that there is no money (but plenty of mayhem) to be made from compromising these systems. As such, people who can ether don't have a motivation or a conscientious enough to do that. Such miniscule margin of safety keeps me up at night.
Neckbeard/RTFM culture passively discourage everyone, regardless of gender, from pursuing that career. If you don't believe me, just read a random Linus rant. Lots of encouragement to work elsewhere in every reply.
I realize that it is all about advertising, but where do these outrageous cable fees go? If it is all about advertising, why do cable providers charge substantial fees for channel packages? Clearly, you can show more adds if you let everyone with a cable watch it.
You could also decrease speed limit to something unreasonable. For example, 15mph and issue tickets at 21mph.
You can also hide a max speed sign behind something, like a bush, and install it in otherwise higher speed zone.
You can also install speed trap on the down-slope road, where drivers would naturally speed up without any conscious input.
You can also offer "early payment" discounts on tickets, where if you pay and plead guilty your fine reduced to the point of not worth the time fighting it.
You can establish a ticket challenge procedure that would conflict with working hours, making it logistically difficult for people to challenge.
You can intentionally mail tickets to old addresses, then rake up late fees and interest.
Oh, all of these happened in one or another municipality at some point in time.
Slashdot Mirror
If you have less planets that previously assumed, it follows that there would be less planets that contain civilizations, and less civilizations.
Maybe I didn't read the article carefully, but my mistaken(?) impression that key finding was "fraction of those stars that have planets" is lower than what we previously believed.
This impacts Drake equation and might shed light as to why we have not detected any other sentient life in the universe.
I am not conflating, I am providing an example of a trend.
I invite you to make high school only resume and try to get a full time job in your area. It is not as easy as you think. Even if you are driven, intelligent, and motivated, and many of the people in question are not.
Paying for car videos? No thanks, I have my own cat. So are most readers here.
While it would be ideal if it was possible for everyone to "just get a job", it is not for a number of reasons. First, automation and increased productivity drastically reduced locally-available jobs. Second, outsourcing and shrinking share of productivity going to bottom 10% of people put downward pressure of incomes. As such, there just not enough jobs for everyone, and jobs that are available do not get you out of poverty (fun fact: Wall Mart employees are also often on the dole, because forced part time does not pay survivable wage).
Merger is anti-market, anti-competitive and will result in shittier and more expensive internet for everyone. Also, there is no such thing as free, costs will be passed to existing paying customers, again making it more expensive.
To clarify:
Scenario A: MitM insert malware into download of Foo installer. If your only defense is to manually check published hash, and website where published hash is displayed is not protected, what would prevent MitM attacker from also altering published hash that you see? Convoluted attack, but feasible.
Scenario B: Now, if you use public-key signature to sign Foo installer it becomes much harder to compromise. MitM attacker could alter your download, and sign it with their own signature, but unless they also find a way to get you to trust their signature it will not succeed. The most attacker would be able to do is use compromised CA that you trust to issue doppelganger keys and hope that your revocation list is out of date. They can also prevent you from getting your revocation list updated, so this could be done for entire life of compromised CA's certificates. Still, this is a lot more complicated attack than Scenario A.
Moral of the story? Sign your code instead of relying on published hash. Otherwise make sure to protect published hash with https.
Yes and no.
You could substitute hash, but if it is actually public-key signed then you'd have less luck. Your substitution would not originate from example.com OR would not belong to the same root CA.
You are not misremembering, at one point WSJ published a lot of insightful business and economic commentary, and kept politics contained in the opinion pages. Now political narrative dominates all aspects and as a result business and economic aspect suffer.
I stopped reading it for this reason - profit has no ideology, moment you view data through a lens of politics is the moment you stop noticing opportunities.
This goes further to demonstrate that automation will take over many menial jobs in my lifetime. This leaves us with a problem - what to do with all the unwanted and unskilled labor? Skilled worker's salaries have not kept up with productivity gains, as such there is no chance they could support service-based economy to offer unskilled workers a living wage.
Sadly, the likely outcome is drop in the quality of life for everyone involved.
On the Internet, nobody knows you are a dog. So how dog harassment numbers look like? Probably the same.
According to PA's Greater Internet Fuckward Theory (GIFT), it is gender-neutral and widespread. It is unfortunate, but that is the only way it could exists and still allow unauthenticated participation. To me, this unauthenticated quality that allows anonymity is a lot more valuable than eliminating GIFT asshatery.
>>> It's time to deal with radical Islamist extremists.
How? Declare Islam a thought-crime?
Using your kitchen knives "example". How would you "just keep prosecuting" if stabbing could be done remotely, anonymously, on a large scale, and with nearly unlimited frequency?
That is, imagine that it could be possible for a group of individuals to remotely cause 1mil/second stabbings in all households in say New York. It is just like that.
Only liability insurance industry can force the change. Otherwise it will be impossible to put a monetary value on this effort.
When bad things happen, the liability is covered by the insurance. The insurance industry can accurately estimate the risk, and raise premiums accordingly. They generally don't reward greatly reducing marginal risks, as such expense of completely securing medical information systems would not meaningfully reduce premiums. It is only when prevalence of compromise increases, something (at much greater expense and urgency) will be done.
The underlying issue is that these types of risks seen as negligible. Historically, this is accurate view, but they have not experienced almost-none to all-the-time ramp up of incidences we have seen in say network security.
The only surprise is that catastrophes are not commonplace. As an information security professional I can tell you based on a first-hand experience that we are metasploit module away from a major disaster. Industrial automation, medical, automotive and many other industries simply do not get information security. Chances are, your municipal water treatment system, you office building's elevators and heating, your glucose monitoring system, your car's infotainment system, your neighborhood's stoplights are trivially hackable. The only good news is that there is no money (but plenty of mayhem) to be made from compromising these systems. As such, people who can ether don't have a motivation or a conscientious enough to do that. Such miniscule margin of safety keeps me up at night.
Assigning guilt/blame to a group of people based on a characteristic outside of their control tends to do that.
Neckbeard/RTFM culture passively discourage everyone, regardless of gender, from pursuing that career. If you don't believe me, just read a random Linus rant. Lots of encouragement to work elsewhere in every reply.
In before SJW brigade comes in demanding everyone involved apologized.
We need a randomized controlled trial to be sure the procedure is effective.
Most promising EBOLA vaccine currently in human trials was developed in Canada, another single-payer country.
For-profit medicine is indisputably good at generating profit. Various outrageously priced targeted cancer treatments are ample evidence of this.
I would gladly trade money for time, but often in case of TV this is simply not offered in a timely manner.
I realize that it is all about advertising, but where do these outrageous cable fees go? If it is all about advertising, why do cable providers charge substantial fees for channel packages? Clearly, you can show more adds if you let everyone with a cable watch it.
So it must be not that simple.
This isn't dotcom bubble days, if /. can crash a website they are doing something majorly wrong.
Now lets proceed to share "up the hill both ways" stories and lament how ACs these days don't know what is good for them.
You could also decrease speed limit to something unreasonable. For example, 15mph and issue tickets at 21mph.
You can also hide a max speed sign behind something, like a bush, and install it in otherwise higher speed zone.
You can also install speed trap on the down-slope road, where drivers would naturally speed up without any conscious input.
You can also offer "early payment" discounts on tickets, where if you pay and plead guilty your fine reduced to the point of not worth the time fighting it.
You can establish a ticket challenge procedure that would conflict with working hours, making it logistically difficult for people to challenge.
You can intentionally mail tickets to old addresses, then rake up late fees and interest.
Oh, all of these happened in one or another municipality at some point in time.