I remember downloading things from LegalTorrents a while back (at least one year).
If you go to http://beta.legaltorrents.com/, you'll see a lot of items listed with a date. I claim that this is the date the item was uploaded.
It's clearly not the date the item was published; for instance, if you go to http://orange.blender.org/, you'll learn that "Elephants Dream will be shown on the German TV channel 3sat, apparently right about now, 13 August 2006." Note that the elephants dream is tagged with the date of may 11th, 2008.
Note also that Free Culture is date to 2004.
Submitter is wrong, summary is right; "a while now" is probably four years, as I suspect Lawrence Lessig had a guiding hand in the making of LegalTorrents. Also, no works earlier than 2004 could be found be me.
every programmer should work with something like this at least once
Agreed. My pet project of this sort is a wiimote hack, whereby you can play music with the wiimote. And no, it isn't just playing loops, it's indicating a tone with the angle of the wiimote (and nunchuck).
So, it's really simple, right? - You steal the code that gives you the vertical angle of the wiimote from wmgui, - quantize it to [-12, 12], - raises the twelfth root of two to that power (or do a lookup into a temperament table), - multiply it onto the base frequency (say, 441 Hz), - generate a wave of that frequency, - copy it to the sound card (or the wiimote speaker, if your library supports it).
Right.
+ Now add two more tones generated similarly; how do you mix them without sounding like shit? + Also, when making a wave, you want to start at the last seen elongation to avoid clicky noises. + When stopping a wave, you want to cheat and continue the wave with constant frequency until the elongation hits zero, again to avoid clicky noises. + And this is assuming that the transfer delay from the wiimote to your code (and from there to the sound card) is essentially zero. Now make some good use of the timestamp value on wiimote events; say, having a fixed small delay on everything. + Oh, and minimize battery usage please;)
It's an interesting project, to say the least. So far I've learned that I know and remember the necessary bits of physics and music theory; I haven't the faintest clue about the psychology of auditory perception and what would be a reasonable delay, but I can use myself as a test subject.
I'd recommend doing something like this to everyone who has a wiimote and a bluetooth interface on their box. And if you don't have a wii, buy a wiimote anyways: it's great fun playing tetris, kobo deluxe, mu-cade and other arcade'ish games with a game controller. Especially on the university's big projector screens. Instead of studying.
The Freerunner is about freedom; free software, free hardware designs. Launch date is 4th of July. I hear there was some freedom going on at the 4th of july some 232 years ago.
I'd recommend you to read The Pirate's Dilemma, and see how piracy is beneficial to EVERYONE.
I couldn't find a download link on that page. The author must surely mean to benefit a lot of people, and himself---imagine the terrible losses if he had just given the book away;)
Kinda useless. Also, kinda not new: go to http://www.shmoocon.org/2007/presentations.html and look for "Rob King and Rohlt Dhamankar - Encrypted Protocol Identification via Statistical Methods".
Upon observing a flow (as it is going on), they can identify which encrypted protocol is being used. I imagine tunneling things through ssh would only change the entropy (it's a different encryption), not how big the packets are or when they're being sent; at least not by much.
Whether King and Dhamankar generate training data for ssh+$PROTO is a different question, but I think it should be fairly easy to do.
They saved the money on not buying the licenses they had intended to buy. So says a Sun employee when interviewed by lugradio. I can't remember which episode, but grep for sun on http://www.lugradio.org/episodes/ and filter out the obvious non-sun related items. I'm thinking it's in season three or four.
(Yeah, crummy reference; I don't have the time to make it better than that, though).
How can the "seller" even theoretically afford to produce before being paid? Obviously if he does, copyright has done exactly zip zero stingy with deniro contributory effect to the creation of that art.
He could borrow some money, invest it in developing a product he believes in, and try to recoup his investment later when he's done. I hear there's a lot of that going on. For some types of investment, copyright makes recouping the cost practically feasible.
Now, copyright of course isn't without cost to society: it cuts off people from using the work for some time. The trick is to find a way that gets the most benefit for the least cost. I don't believe the way is to have our current copyright with our current terms. It may be with copyright in its current form and a reduced duration, or copyright with a different form, or mandating the GPL on everything; I don't know, and I don't know how to convince those who decide for me that they should (1) find out; and (2) base public policy on their findings.
Also, don't get me wrong: I like free music (thanks, Jamendo); one would possibly have more of that without copyright, or without upholding it. I also like free software (thanks, cat AUTHORS), in both senses; currently copyleft relies on copyright. But let's not distort reality because we are blinded by our love, okay?
What is the balance sheet for Sun with respect to Star/Open Office?
When they bought StarOffice, it saved them a ton of money versus buying licenses for their employees. Whether those savings are now spent, or how the community good-will from giving out OpenOffice has paid for the pretty cars and fast women I do not know though.
That's certainly a nice anecdote, which points out my unstated premise (which I thought was obvious): that I'm talking about differing levels of quality of work done in the same amount of time.
five million individual transactions [...] you can contract that out to someone else.
True, but it doesn't escape the problem I'm trying to point out: it's sometimes beneficial to not ask for the money before you start working.
How does the seller benefit by not knowing who's going to pay him?
In no way. However, he does benefit from not having to know who's going to pay him. For instance, he can base his decisions based on statistical market research (i.e. 95% of people who wear orange sunglasses want to buy ipods) without having to get the buyers' money first (something that's unlikely to happen).
Everybody, please laugh at the subject of my post which has no relation to its contents;)
What I meant to write when I wrote the subject is that, from the point of view external to the organization developing insecure software, you are, according to the wisdom of the/. masses, supposed to vote with your wallet.
Yet, how's that expected to take place? To apply some of Schneier's observations, you have multiple parties, each with their own security agenda; the sysadmin might want the most secure option because anything less will be a nightmare to maintain, whereas the phb will want the cheapest because that'll make him look good in the eyes of those who set his salary.
Guess who makes the purchasing decision. Guess which security agenda will be reflected in that decision. Sometimes, the insecure option will be the cheapest even when the cost of bad security has been factored in.
Also, consider the fact that writing "perfectly secure code" is hard and time-consuming, and thus expensive. Given that it's hard enough to write reasonably non-buggy code when there's enough of us, what does that predict for security issues? Now add in the variability in skill level of the developers, and the varying experience with the particular code base they work on.
Vendors should make their developers work more on security (via money)
Meh. How often are the developers free to choose which parts and aspects of their companies' software they want to work on? As long as the companies tell their developers what to work on, here's the easy way: tell the devs to work on security testing and fixing. Letting the developers manage themselves is not going to sit well with management types, so you almost always have developers who are told what to work on.
Also, if anything external to the way you work (i.e. the promise of more money) can make you work better, you're slacking off in your daily work: why don't you deliver peak performance without the extra money?
I'm not sure whether you mean process in the generic sense or in the specific sense of a running program. If the latter, totally agree (but that would be somewhat OT).
If you mean this as a justification for my ISP dropping my P2P traffic in favor of your HTTP traffic, then no. I paid for connectivity, you paid for connectivity. If there's oversubscription-related contention, provide per-customer fairness: at the choke point, drop traffic such that you in effect multiply the per-user bit rate by a fixed, shared constant. I lose 10%, you lose 10%, everybody does, but just enough to keep the packets flowing.
Now, shaping each user's traffic to favor interactivity without changing the size of the user's bandwidth slice, that sounds like a fair game. Especially if they do it by looking at the QoS parts of the IP header that was put there for a reason.
How can you tell if someone is using a secure SSL connection for work related purposes (Email, large file transfers, terminal services) and someone that is using SSL for bit torrent?
You look and the mean and variance of packet sizes and interpacket time delays going in each direction, plus the entropy of the data and the server-to-client traffic ratio (or difference, forget which). That's what these guys (warning: mp4 video) did.
And as an ISP and not just a man in the very middle, you can count the number of connections which have a similar set of values for these ten parameters.
Slashdot Mirror
And the winner faces Bisu in Starcrwondo
I have to deal with one group of servers that are all named by Star Trek
I'm guessing that seven-of-nine was used as a... "media" server ;)
I remember downloading things from LegalTorrents a while back (at least one year).
If you go to http://beta.legaltorrents.com/, you'll see a lot of items listed with a date. I claim that this is the date the item was uploaded.
It's clearly not the date the item was published; for instance, if you go to http://orange.blender.org/, you'll learn that "Elephants Dream will be shown on the German TV channel 3sat, apparently right about now, 13 August 2006." Note that the elephants dream is tagged with the date of may 11th, 2008.
Note also that Free Culture is date to 2004.
Submitter is wrong, summary is right; "a while now" is probably four years, as I suspect Lawrence Lessig had a guiding hand in the making of LegalTorrents. Also, no works earlier than 2004 could be found be me.
every programmer should work with something like this at least once
Agreed. My pet project of this sort is a wiimote hack, whereby you can play music with the wiimote. And no, it isn't just playing loops, it's indicating a tone with the angle of the wiimote (and nunchuck).
So, it's really simple, right?
- You steal the code that gives you the vertical angle of the wiimote from wmgui,
- quantize it to [-12, 12],
- raises the twelfth root of two to that power (or do a lookup into a temperament table),
- multiply it onto the base frequency (say, 441 Hz),
- generate a wave of that frequency,
- copy it to the sound card (or the wiimote speaker, if your library supports it).
Right.
+ Now add two more tones generated similarly; how do you mix them without sounding like shit? ;)
+ Also, when making a wave, you want to start at the last seen elongation to avoid clicky noises.
+ When stopping a wave, you want to cheat and continue the wave with constant frequency until the elongation hits zero, again to avoid clicky noises.
+ And this is assuming that the transfer delay from the wiimote to your code (and from there to the sound card) is essentially zero. Now make some good use of the timestamp value on wiimote events; say, having a fixed small delay on everything.
+ Oh, and minimize battery usage please
It's an interesting project, to say the least. So far I've learned that I know and remember the necessary bits of physics and music theory; I haven't the faintest clue about the psychology of auditory perception and what would be a reasonable delay, but I can use myself as a test subject.
I'd recommend doing something like this to everyone who has a wiimote and a bluetooth interface on their box. And if you don't have a wii, buy a wiimote anyways: it's great fun playing tetris, kobo deluxe, mu-cade and other arcade'ish games with a game controller. Especially on the university's big projector screens. Instead of studying.
Could be worse. It could be IP over Evil Bit.
they are more savage with computers
I think you're confusing the 15- to 29-year-olds with the german 8- to 14-year-olds. Savvy?
Doesn't anyone find it kind of funny?
The Freerunner is about freedom; free software, free hardware designs. Launch date is 4th of July. I hear there was some freedom going on at the 4th of july some 232 years ago.
(sinister voice) Coincidence? I think not...
there's asbolutely no viable evidence of the geek species prior to the 20th century
Common sense also says that to be older than that, you need a breeding population.
(Captcha is "epaulet", which happens to be a type of mate position in chess).
I'd recommend you to read The Pirate's Dilemma, and see how piracy is beneficial to EVERYONE.
I couldn't find a download link on that page. The author must surely mean to benefit a lot of people, and himself---imagine the terrible losses if he had just given the book away ;)
And then they'll need to calculate the number of atoms using Pi, an irrational number!
Could be worse. They could have used Chaitin's constant.
Kinda useless. Also, kinda not new: go to http://www.shmoocon.org/2007/presentations.html and look for "Rob King and Rohlt Dhamankar - Encrypted Protocol Identification via Statistical Methods".
Upon observing a flow (as it is going on), they can identify which encrypted protocol is being used. I imagine tunneling things through ssh would only change the entropy (it's a different encryption), not how big the packets are or when they're being sent; at least not by much.
Whether King and Dhamankar generate training data for ssh+$PROTO is a different question, but I think it should be fairly easy to do.
there were no licenses to save money on.
They saved the money on not buying the licenses they had intended to buy. So says a Sun employee when interviewed by lugradio. I can't remember which episode, but grep for sun on http://www.lugradio.org/episodes/ and filter out the obvious non-sun related items. I'm thinking it's in season three or four.
(Yeah, crummy reference; I don't have the time to make it better than that, though).
How can the "seller" even theoretically afford to produce before being paid? Obviously if he does, copyright has done exactly zip zero stingy with deniro contributory effect to the creation of that art.
He could borrow some money, invest it in developing a product he believes in, and try to recoup his investment later when he's done. I hear there's a lot of that going on. For some types of investment, copyright makes recouping the cost practically feasible.
Now, copyright of course isn't without cost to society: it cuts off people from using the work for some time. The trick is to find a way that gets the most benefit for the least cost. I don't believe the way is to have our current copyright with our current terms. It may be with copyright in its current form and a reduced duration, or copyright with a different form, or mandating the GPL on everything; I don't know, and I don't know how to convince those who decide for me that they should (1) find out; and (2) base public policy on their findings.
Also, don't get me wrong: I like free music (thanks, Jamendo); one would possibly have more of that without copyright, or without upholding it. I also like free software (thanks, cat AUTHORS), in both senses; currently copyleft relies on copyright. But let's not distort reality because we are blinded by our love, okay?
You know you should go out more when you've read about flash crowds in Nevinyrral's Tome :)
What is the balance sheet for Sun with respect to Star/Open Office?
When they bought StarOffice, it saved them a ton of money versus buying licenses for their employees. Whether those savings are now spent, or how the community good-will from giving out OpenOffice has paid for the pretty cars and fast women I do not know though.
So, what are you trying to say? Take off every cig?
Then I suggest you start in Denmark: we sell both porn and beer in vending machines ;) ... much to the detriment of my economy :(
And I'm sure there's a lot more WoW players who would give anything for the prerequisites of a first born son.
If that is found to be the case
I'm waiting for you to google up someone to cite on a verdict ;)
Seriously, that would be interesting to know: how well does cash make people work better, and how does it depend on the "price structure"...
That's certainly a nice anecdote, which points out my unstated premise (which I thought was obvious): that I'm talking about differing levels of quality of work done in the same amount of time.
five million individual transactions [...] you can contract that out to someone else.
True, but it doesn't escape the problem I'm trying to point out: it's sometimes beneficial to not ask for the money before you start working.
How does the seller benefit by not knowing who's going to pay him?
In no way. However, he does benefit from not having to know who's going to pay him. For instance, he can base his decisions based on statistical market research (i.e. 95% of people who wear orange sunglasses want to buy ipods) without having to get the buyers' money first (something that's unlikely to happen).
Everybody, please laugh at the subject of my post which has no relation to its contents ;)
What I meant to write when I wrote the subject is that, from the point of view external to the organization developing insecure software, you are, according to the wisdom of the /. masses, supposed to vote with your wallet.
Yet, how's that expected to take place? To apply some of Schneier's observations, you have multiple parties, each with their own security agenda; the sysadmin might want the most secure option because anything less will be a nightmare to maintain, whereas the phb will want the cheapest because that'll make him look good in the eyes of those who set his salary.
Guess who makes the purchasing decision. Guess which security agenda will be reflected in that decision. Sometimes, the insecure option will be the cheapest even when the cost of bad security has been factored in.
Also, consider the fact that writing "perfectly secure code" is hard and time-consuming, and thus expensive. Given that it's hard enough to write reasonably non-buggy code when there's enough of us, what does that predict for security issues? Now add in the variability in skill level of the developers, and the varying experience with the particular code base they work on.
Here's a summary of the article:
Vendors should make their developers work more on security (via money)
Meh. How often are the developers free to choose which parts and aspects of their companies' software they want to work on? As long as the companies tell their developers what to work on, here's the easy way: tell the devs to work on security testing and fixing. Letting the developers manage themselves is not going to sit well with management types, so you almost always have developers who are told what to work on.
Also, if anything external to the way you work (i.e. the promise of more money) can make you work better, you're slacking off in your daily work: why don't you deliver peak performance without the extra money?
I'm not sure whether you mean process in the generic sense or in the specific sense of a running program. If the latter, totally agree (but that would be somewhat OT).
If you mean this as a justification for my ISP dropping my P2P traffic in favor of your HTTP traffic, then no. I paid for connectivity, you paid for connectivity. If there's oversubscription-related contention, provide per-customer fairness: at the choke point, drop traffic such that you in effect multiply the per-user bit rate by a fixed, shared constant. I lose 10%, you lose 10%, everybody does, but just enough to keep the packets flowing.
Now, shaping each user's traffic to favor interactivity without changing the size of the user's bandwidth slice, that sounds like a fair game. Especially if they do it by looking at the QoS parts of the IP header that was put there for a reason.
How can you tell if someone is using a secure SSL connection for work related purposes (Email, large file transfers, terminal services) and someone that is using SSL for bit torrent?
You look and the mean and variance of packet sizes and interpacket time delays going in each direction, plus the entropy of the data and the server-to-client traffic ratio (or difference, forget which). That's what these guys (warning: mp4 video) did.
And as an ISP and not just a man in the very middle, you can count the number of connections which have a similar set of values for these ten parameters.