Well, it is a laptop too. If you were in the market for a $1000 laptop, and assuming this machine has similar specs to what a similarly-priced laptop could do (seems like it does), why wouldn't you buy one of these?
The "attack" in TFA doesn't mention anything necessarily specific to the iPhone. The attackers got Verisign to sign a cert with the name "Apple Computer." That is a social engineering problem, not a security implementation flaw of the iPhone.
I bet the headline would get even more pageviews if they claimed this was an iPad flaw instead of iPhone.
I have an unmodified 2008 Hyundai Tiburon. It does not have a light sensor so the headlights are fully manual. When I park and turn the key to the off position, the headlights turn off immediately. The parking lights do stay on for a little while though. Of course, I haven't tried this while moving...
because it's my preference to install some software packages that way because it's faster/easier than going into Symantec since I know the exact program name
I hope the authors of Synaptic never see this post as they would probably hang themselves after being mistaken for that monster...
Unlike in America where it's common to accidentally (or something intentionally) misspell certain words, and tian/tien is a good example of something that might be overlooked in English, it's not something Chinese people will do because (1) there's no alphabet and (2) if you mess something up you get a totally different word
Also, tien isn't a valid Chinese word. So my point is that, unlike what we might do in the West, Chinese people aren't going to misspell it to get the results they want.
Microsofts version of open source is that i develop and they take the code, the credit and the ownership.
Yes, because Microsoft's mode of operation is to steal GPL code and try to claim it's theirs until they get caught, at which point they fess up and pretend it was a mistake. Right... I mean, just look at all the other times they stole GPL code!
If in fact that tool used GPL code, it was just some lazy or dishonest developer who used a bunch of code from the Internet and pretended it was his. No proprietary software company would let that slide. Yes, that includes the company we all love to hate.
For $6/mo with Skype, you get "unlimited" calls (10000 minutes) to the US/Canada, a real phone number that rings your Skype, caller ID (both ways), and free incoming calls. You don't get any hardware for that amount of money, though.
Also, to the guy calling his gf in China, Skype charges a connection fee. Google is 2.0c/min with no connection fee.
I agree with your post if only one person needs access to the box (and i agree with PermitRootLogin no always). But while public key auth is great, it just isn't feasible for many applications. For example, imagine you're a cheap webhost that provides ssh, scp, sftp access to your users, Do you require them all to use public keys auth? 90% of them don't even know what that means. What a support headache.
And public keys aren't always that secure either. There are probably still plenty of servers with weak keys from the Debian debacle. What do you do with those users if password authentication is disallowed? Just lock them out and make them call you for a key reset?
To be fair, the version of Outlook Web Access that goes with Office 14 (2010) is pretty slick... vastly improved over the previous one. I haven't used it on Windows yet, but on Firefox in Linux it does pretty much everything that I do in the native Outlook 2007 interface and does it well. Rather than cripple itself in Firefox like it did it versions before, this one is actually worth using in Linux.
Yet, a Chinese dropout can get a manufacturing job, make enough money in ten years to retire in the lifestyle they are accustomed to and call it a life.
Yes, China the land of opportunity. That's why so many Americans are flocking to China to work in shoe factories, and why there are no longer any Chinese immigrants looking for a better life in America.
I used to use Skype, but they charge 2.1 cents/min to China, plus a 3.9 cent connection fee. Google Voice is 2 cents a minute with no connection fee, so it's better for that purpose.
Actually, this was one of my favorite things about using Linux at Duke. The Pharos client is just another piece of bloat that the typical Linux user hates, so why would you want it? Most distros these days come with some sort of CUPS configuration tool. Even the first time I set this up it probably took less than 5 minutes. Just follow the instructions:
I've done this on Kubuntu and Fedora. system-config-printer makes this really easy. The only other thing I should mention is that by default, the username sent to the printer is your Linux login name. If you make your Linux login name the same as your netid, you won't have to type in a user name when you print.
I have had a similar experience with Postini, but from a different point of view. I usually use my own mailserver to send emails, and in the beginning I was greylisted and occasionally blocked by a few servers here and there, but after just a few quick emails here and there to ask why I was blocked, I was always promptly unblocked. I just use it for personal email so I'm not sending commercial or bulk emails. And before someone asks, no it's not on a dynamic IP or anything, it's in a fairly large colocation facility.
Google is the only mail service that I know of who still just won't accept my emails. They make it very difficult to contact them. There is a form buried somewhere in their help system, but it says that they won't respond unless they need additional info from you, which leads me to believe that they never actually read anything submitted through that form. (I have tried a few times.) They also specifically say they don't take whitelist requests. I have SPF records, I have correct reverse DNS, I'm not on any blacklists, etc.
This means when I send emails to my friends who use Gmail, or comparies who use Postini, I get blocked without cause. Then I have to use a different server. It's kind of annoying.
(Why do I use my own email server? Because I can. This is/., after all.)
It also works for me. I bank with Capital One, and in fact the link in the summary is the exact link I have stored in my bookmarks. I have never had certificate trouble with that link. I'd watch that account closely if I were you, and perhaps change your passwords if you use the same password elsewhere.
They had my name, address, SSN, and DOB, but got my mother's maiden name wrong. Capital One approved the card anyway.
What did you expect Capital One to do? Reject the seemingly valid app because they got your mother's maiden name wrong? That question is there for verifications purposes after the account's already open and you call customer service. How would Capital One know your mother's maiden name to verify that for account opening purposes?
I do agree that trying to change the address before card activation and getting a cash advance so early should raise red flags, however.
I don't know anything about SMM, but it sounds from TFAs that the OS can't interact with SMM. If I am understanding this correctly, then what steps must occur for me to be infected? How does the exploit load itself into my machine?
Slashdot Mirror
Honest question: Which of the common IM protocols are encrypted, excluding things like OTR?
What happens if you don't have an SD card? Does it store it on internal memory? If so, does that persist through the reset?
Coefficient of rolling friction on concrete is 1.0? I think you mean sliding friction. There's a reason wheels were invented in the first place...
Well, it is a laptop too. If you were in the market for a $1000 laptop, and assuming this machine has similar specs to what a similarly-priced laptop could do (seems like it does), why wouldn't you buy one of these?
The "attack" in TFA doesn't mention anything necessarily specific to the iPhone. The attackers got Verisign to sign a cert with the name "Apple Computer." That is a social engineering problem, not a security implementation flaw of the iPhone.
I bet the headline would get even more pageviews if they claimed this was an iPad flaw instead of iPhone.
I have an unmodified 2008 Hyundai Tiburon. It does not have a light sensor so the headlights are fully manual. When I park and turn the key to the off position, the headlights turn off immediately. The parking lights do stay on for a little while though. Of course, I haven't tried this while moving...
I hope the authors of Synaptic never see this post as they would probably hang themselves after being mistaken for that monster...
Unlike in America where it's common to accidentally (or something intentionally) misspell certain words, and tian/tien is a good example of something that might be overlooked in English, it's not something Chinese people will do because (1) there's no alphabet and (2) if you mess something up you get a totally different word
Also, tien isn't a valid Chinese word. So my point is that, unlike what we might do in the West, Chinese people aren't going to misspell it to get the results they want.
Yes, because Microsoft's mode of operation is to steal GPL code and try to claim it's theirs until they get caught, at which point they fess up and pretend it was a mistake. Right... I mean, just look at all the other times they stole GPL code!
If in fact that tool used GPL code, it was just some lazy or dishonest developer who used a bunch of code from the Internet and pretended it was his. No proprietary software company would let that slide. Yes, that includes the company we all love to hate.
For $6/mo with Skype, you get "unlimited" calls (10000 minutes) to the US/Canada, a real phone number that rings your Skype, caller ID (both ways), and free incoming calls. You don't get any hardware for that amount of money, though. Also, to the guy calling his gf in China, Skype charges a connection fee. Google is 2.0c/min with no connection fee.
I agree with your post if only one person needs access to the box (and i agree with PermitRootLogin no always). But while public key auth is great, it just isn't feasible for many applications. For example, imagine you're a cheap webhost that provides ssh, scp, sftp access to your users, Do you require them all to use public keys auth? 90% of them don't even know what that means. What a support headache.
And public keys aren't always that secure either. There are probably still plenty of servers with weak keys from the Debian debacle. What do you do with those users if password authentication is disallowed? Just lock them out and make them call you for a key reset?
How is salting relevant to over-the-network, slow brute force attacks that don't involve seeing the hashes?
To be fair, the version of Outlook Web Access that goes with Office 14 (2010) is pretty slick... vastly improved over the previous one. I haven't used it on Windows yet, but on Firefox in Linux it does pretty much everything that I do in the native Outlook 2007 interface and does it well. Rather than cripple itself in Firefox like it did it versions before, this one is actually worth using in Linux.
Yes, China the land of opportunity. That's why so many Americans are flocking to China to work in shoe factories, and why there are no longer any Chinese immigrants looking for a better life in America.
I used to use Skype, but they charge 2.1 cents/min to China, plus a 3.9 cent connection fee. Google Voice is 2 cents a minute with no connection fee, so it's better for that purpose.
I was until I graduated 4 months ago.
Dear Sir/Madam:
No, that's too formal.
Might be worth mentioning that Redhat happens to be right in the middle of NCSU campus =)
Actually, this was one of my favorite things about using Linux at Duke. The Pharos client is just another piece of bloat that the typical Linux user hates, so why would you want it? Most distros these days come with some sort of CUPS configuration tool. Even the first time I set this up it probably took less than 5 minutes. Just follow the instructions:
http://www.oit.duke.edu/comp-print/printing/faq.php#faq-3
I've done this on Kubuntu and Fedora. system-config-printer makes this really easy. The only other thing I should mention is that by default, the username sent to the printer is your Linux login name. If you make your Linux login name the same as your netid, you won't have to type in a user name when you print.
I have had a similar experience with Postini, but from a different point of view. I usually use my own mailserver to send emails, and in the beginning I was greylisted and occasionally blocked by a few servers here and there, but after just a few quick emails here and there to ask why I was blocked, I was always promptly unblocked. I just use it for personal email so I'm not sending commercial or bulk emails. And before someone asks, no it's not on a dynamic IP or anything, it's in a fairly large colocation facility.
/., after all.)
Google is the only mail service that I know of who still just won't accept my emails. They make it very difficult to contact them. There is a form buried somewhere in their help system, but it says that they won't respond unless they need additional info from you, which leads me to believe that they never actually read anything submitted through that form. (I have tried a few times.) They also specifically say they don't take whitelist requests. I have SPF records, I have correct reverse DNS, I'm not on any blacklists, etc.
This means when I send emails to my friends who use Gmail, or comparies who use Postini, I get blocked without cause. Then I have to use a different server. It's kind of annoying.
(Why do I use my own email server? Because I can. This is
A jpeg encoded onto punched cards? Why not just use a photo?
Does "infer" mean in English what "imply" means in Amerikin?
It also works for me. I bank with Capital One, and in fact the link in the summary is the exact link I have stored in my bookmarks. I have never had certificate trouble with that link. I'd watch that account closely if I were you, and perhaps change your passwords if you use the same password elsewhere.
What did you expect Capital One to do? Reject the seemingly valid app because they got your mother's maiden name wrong? That question is there for verifications purposes after the account's already open and you call customer service. How would Capital One know your mother's maiden name to verify that for account opening purposes?
I do agree that trying to change the address before card activation and getting a cash advance so early should raise red flags, however.
I don't know anything about SMM, but it sounds from TFAs that the OS can't interact with SMM. If I am understanding this correctly, then what steps must occur for me to be infected? How does the exploit load itself into my machine?