That is, use as a password the hash value of your master password, something that identifies the site you're logging in at (say, "slashdot" for everything at slashdot.org), and a generation counter such that if your slashdot password gets stolen you can make a new one without changing your master password (and without changing password on your ~gazillion accounts).
There's a firefox plugin which does something like this, at http://crypto.stanford.edu/PwdHash/. It has the advantage that it doesn't require you to store any information [except your master password in your brain], and so you can compute your password on a friend's computer by visiting their webpage.
I think a solution based on this idea provides the best combination of usability and security. Note that you can of course still use different master passwords for different sites if you want.
I don't need to go there. I know the answer is "hunter2" (if you're the guy, I just copy-pasted the ***s from bash.org, that's why it shows up as hunter2 on your screen).
I've been running Gnome Do for a while; the completions change based on usage, and I find it to work quite well.... But don't tell anyone I only use it to launch pavucontrol;)
Brain Workshop is an implementation of the Dual N-back exercise which trains your short-term memory; a psychological study has shown that doing it increases your intelligence.
Yes the ISP's routers could get compromised, but that's the whole point of IPsec - so that someone in the middle can't read your traffic.
They can do traffic analysis to see which protocol(s) you're using. They can launch attacks against your boxes. They can start messing with BGP.
If someone wants to be evil towards you, having them break into your ISP routers is bad. Without encryption it's worse, but with encryption it's still bad.
What I found is that a machine that costs 10 megadollars can break 1024bit RSA in a year; I think it was key recovery, not just message recovery. Depending on who you think your adversary is, this might make you uneasy.
If you set it up right bittorrent will calculate the [hash value]s of all the chunks of the previous update and update only the chunks with different [hash value]s
So if you push_front a singe 0, every chunk will change (they all have the same size, which you can configure), so you have to download everything again.
If you do compression with an infinite window, it's likely that a single small change in the source will change a lot in the compression.
Computing the diff seems like it most reliably will limit your bandwidth usage.
with IPsec over DSL, and no access to the public internet.
Unless you have very long wires, some box is going to route them. Are those your own?
Otherwise, your ISP's router, diligent in separating traffic though it may be, can get hacked.
Why am I saying this? Not to make you don your tinfoil hat, certainly, but just to point out that if the scenario is as I describe, you're not 100% GUARANTEED to be invulnerable. Maybe a few tinfoil strips in your hair would look nice...;)
About the actual question: bit torrent would probably be fine, but if most of the data is unchanged between updates, you may want to compute the diff and then BT-share that. How do you store the data? If it's just a big tar(.gz|.bz2) archive, bsdiff might be your friend.
If you push from a single seeder to many clients, maybe multicast would be a good solution. But that's in the early design phase I think, which is not what you need:)
The in-game ads in Guitar Hero III were completely immersion-breaking for me. It's a small part of why I've stopped supporting that series.
I've gold-starred all of easy, all of medium except [tier 8, Don't Hold back, FCPREMIX, TTFAF], five-starred tier 1-6 on hard and at least half the bonus tracks with ~15 gold stars, and I'm only Raining Blood and Battle With Lou short of completing expert.
I haven't noticed any ads.
(except during startup; you pseudo-skip those by aggressively hitting the fret buttons, and they happen pre-immersion).
I could go look for them, but I prefer living in blissful ignorance. I hope I can even though I know they're there:)
In other news, the FSF has just released an educational game entitled "World of Freedom", a new MMORPG, in which you play the bearded katana warrior who must raid the same graveyard filled with zombie lobbyists, zombie politicians and chief zombie executives over and over again.
Beware of the zombies' most potent attack: the copyright extension! Our experimentation shows the three most effective counters to be:
A swift left swing
A hard frontal stab
A two-hour lecture about Copyright, Community and free Culture
Available freely for $60 at all good game shops. Get your copy today!
I don't want to control anybody, so why would I participate in a game where the prize is control (the special "right" to employ coercion as your means) over others?
Because you want you to control you; you don't want them to control you more than necessary to get the things you want in your life that they help provide: health and wealth.
(fighting crime and maintaining roads are two of the ways; public health service and free education are two others.)
Slashdot Mirror
Husband: (incredulous) You read Slashdot?? On your second day???
It only goes downhill from there.
http://xkcd.com/456/
I think the "real" solution, if you want good password security, is to use the following scheme:
pwd = hash(master_secret || site_id || site_counter).
That is, use as a password the hash value of your master password, something that identifies the site you're logging in at (say, "slashdot" for everything at slashdot.org), and a generation counter such that if your slashdot password gets stolen you can make a new one without changing your master password (and without changing password on your ~gazillion accounts).
There's a firefox plugin which does something like this, at http://crypto.stanford.edu/PwdHash/. It has the advantage that it doesn't require you to store any information [except your master password in your brain], and so you can compute your password on a friend's computer by visiting their webpage.
I think a solution based on this idea provides the best combination of usability and security. Note that you can of course still use different master passwords for different sites if you want.
http://www.bash.org/?244321
I don't need to go there. I know the answer is "hunter2" (if you're the guy, I just copy-pasted the ***s from bash.org, that's why it shows up as hunter2 on your screen).
Is that a sign I should get out more often? ;)
I've been running Gnome Do for a while; the completions change based on usage, and I find it to work quite well. ... But don't tell anyone I only use it to launch pavucontrol ;)
The baseline for smooth operating system performance should be a 4 year old stock dell value consumer desktop.
Imagine the typo: s/base/vase/. ;)
Brain Workshop is an implementation of the Dual N-back exercise which trains your short-term memory; a psychological study has shown that doing it increases your intelligence.
See http://brainworkshop.sourceforge.net/ for more.
In South Korea, training your brain with Starcraft is for old people... ;)
Yes the ISP's routers could get compromised, but that's the whole point of IPsec - so that someone in the middle can't read your traffic.
They can do traffic analysis to see which protocol(s) you're using. They can launch attacks against your boxes. They can start messing with BGP.
If someone wants to be evil towards you, having them break into your ISP routers is bad. Without encryption it's worse, but with encryption it's still bad.
What I found is that a machine that costs 10 megadollars can break 1024bit RSA in a year; I think it was key recovery, not just message recovery. Depending on who you think your adversary is, this might make you uneasy.
You don't even have to calculate the difference between updates to push just the difference
I think it'd help
bittorrent automatically splits the files up into chunks which it calculates the md5 to.
It uses sha1, not md5: http://en.wikipedia.org/wiki/BitTorrent_(protocol)
If you set it up right bittorrent will calculate the [hash value]s of all the chunks of the previous update and update only the chunks with different [hash value]s
So if you push_front a singe 0, every chunk will change (they all have the same size, which you can configure), so you have to download everything again.
If you do compression with an infinite window, it's likely that a single small change in the source will change a lot in the compression.
Computing the diff seems like it most reliably will limit your bandwidth usage.
I've seen far worse things get paste a full blown QA team.
Or a copy editor ;)
with IPsec over DSL, and no access to the public internet.
Unless you have very long wires, some box is going to route them. Are those your own?
Otherwise, your ISP's router, diligent in separating traffic though it may be, can get hacked.
Why am I saying this? Not to make you don your tinfoil hat, certainly, but just to point out that if the scenario is as I describe, you're not 100% GUARANTEED to be invulnerable. Maybe a few tinfoil strips in your hair would look nice... ;)
About the actual question: bit torrent would probably be fine, but if most of the data is unchanged between updates, you may want to compute the diff and then BT-share that. How do you store the data? If it's just a big tar(.gz|.bz2) archive, bsdiff might be your friend.
If you push from a single seeder to many clients, maybe multicast would be a good solution. But that's in the early design phase I think, which is not what you need :)
Best of luck!
someone who purports to be a PhD researcher, [...] using capitalization and punctuation correctly
I think you're mixing up physics and linguistics ;)
The in-game ads in Guitar Hero III were completely immersion-breaking for me. It's a small part of why I've stopped supporting that series.
I've gold-starred all of easy, all of medium except [tier 8, Don't Hold back, FCPREMIX, TTFAF], five-starred tier 1-6 on hard and at least half the bonus tracks with ~15 gold stars, and I'm only Raining Blood and Battle With Lou short of completing expert.
I haven't noticed any ads.
(except during startup; you pseudo-skip those by aggressively hitting the fret buttons, and they happen pre-immersion).
I could go look for them, but I prefer living in blissful ignorance. I hope I can even though I know they're there :)
> When I have something interesting to paste or write down, and am too lazy to start up my text editor, I use Google Notebook.
;)
Let's see: (C-M-c is xterm, thanks to xbindkeys)
C-M-c v i C-j i S-ins ESC : w q
1 2 3 4 5 6 7 8 9 A
C-t n o t e b o o k . g o o g l e . c o m
1 2 3 4 5 6 7 8 9 A FAIL
Do the math
Odd; I always thought most people would rather have a PDF than a Word doc
Back when I was a happy^Wcontent windows user, I didn't like PDFs.
The main reason was the viewing application (I only knew of Adobe's); it didn't feel nice to use.
you'd want to use a format that specifies the rendered output exactly
And you expect "most people" to know which do and which don't? I sure as hell didn't.
LaTeX
Typesetting system well-suited for typesetting math
This is a package you can install on ubuntu to add support for typesetting math-rich documents. Havee you tried this?
Finally, the big breakthrough.
This time it's definitely true: 2009 is the year of Linux on the deskt... netbook!
In other news, the FSF has just released an educational game entitled "World of Freedom", a new MMORPG, in which you play the bearded katana warrior who must raid the same graveyard filled with zombie lobbyists, zombie politicians and chief zombie executives over and over again.
Beware of the zombies' most potent attack: the copyright extension! Our experimentation shows the three most effective counters to be:
Available freely for $60 at all good game shops. Get your copy today!
Try to find a laptop that doesn't have a webcam.
I have two of those, you insensitive clod! An IBM T43p and a non-name El Cheapo (Zartego SW1, if memory serves).
I don't want to control anybody, so why would I participate in a game where the prize is control (the special "right" to employ coercion as your means) over others?
Because you want you to control you; you don't want them to control you more than necessary to get the things you want in your life that they help provide: health and wealth.
(fighting crime and maintaining roads are two of the ways; public health service and free education are two others.)
20 years ago, I was writing to 1600 and 6250bpi tapes.
Does anyone else smile when they think of capacity measured as "bits per inch"? ;)
Get it right. It's "loose a turn".
Oh, the iroony!
The bluff that might exist in Cisco's mind: that the FSF really can't or won't file a lawsuit and won't put their money where their mouth is.
I think the problem some people have with abortion is that it IS a living mass of cells
I think everybody agree that the blob of cells is alive: if it was dead, how could it become a person?
What people disagree on is when there's one individual and when there's two.
"That's a nice virus-free computer you have there. It'd be a shame if anything happened to it."
That's okay, you undid it. Sorry you lost a mod point :(