If you're talking to a senior exec about database replication, you're doing it wrong. They don't care. They just want the text link to be green, and don't understand why these crazy-haired people underneath them keep banging on about unimportant things like database replication.
Interestingly, the comic isn't making a commentary on the usefulness (or not) of cryptography. It's making fun of people who don't properly evaluate all their threats when they design security systems.
The guy recording them gets copyright on the recording of the performance. Which he can't use for commercial purposes without explicit consent of those in the recording.
I'm thinking along this line, I've got a Nexenta box, but planning on migrating to Solaris 11 / OpenIndiana and running crashplan on it.
My issue is how to approach the ZFS block devices exposed as LUNs on FC. Solaris can't peek inside these (they're formatted as either VMFS-5 or NTFS), so crashplan can't do file-based backup on them. Short of getting a subscription for every client and the NAS as well, I can't see a better solution:(
"Gnu.org don't get to own the definition of 'software freedom'"
Yes, they do, since it was RMS who has coined this term.
Richard Stallman invented neither freedom nor software. Both are widely used generic Engliah words. You might like to think he owns the concept of 'freedoms as they pertain to software', but wishing it doesn't maker it so.
And now, in the spirit of this, I'm going to redefine 'conflake cake' to mean 'Richard Stallman'.
Gnu.org don't get to own the definition of 'software freedom' any more than I get to own the definition of 'cornflake cake'. GP's point is these things are inherently subjective. Referencing someone's opinion as a definition betrays a rather closed mind.
And that's brilliant, but what I'm saying is a private key is just a long password. They fall into the same password-factor space of 'something you know'. By thinking that a private key makes you any more secure than a password on the basis of anything other than password length is wishful thinking.
I believe you're also free to set your Gmail password to be 100 characters, making it effectively 'unguessable'.
It's a good idea, and Google already do this. Scroll to the bottom of gmail and on the right there's a link that opens a windows giving a list of current open logged in sessions, as well as a history of sessions, giving datetime, IP address and type (Mobile, browser, IMAP, etc.).
Given that a certificate is effectively just a very very long structured password, what stops me pinching the cert off the phone and using that to sign into the relevant service? A certificate doesn't solve the problem, it just changes the terminology slightly. It's still bits and bytes stored on the phone that can be used as a secret to access a service as a user.
Blackberry's do exactly this. It works well, but a lot of people argue against the convenience. The thing about security controls is that they're rarely convenient, so it's always a trade-off.
I dunno, while I don't have a Chromebook I *do* do serious work with Chrome (the browser) every day and I'm not talking about web development. All you need to do serious work, is a decent terminal program:
Gate One should be available for public consumption soon. I hope to make it the best damned terminal program/SSH client that ever existed. It is already superior to PuTTY (as long as you don't need port forwarding or X11).
Unfortunately, port forwarding (specifically dynamic - using putty as a SOCKS proxy) is 95% of what makes PuTTY useful to me. Hell, it's what makes SSH useful - an SSH client which doesn''t support these functions is, in my view, not a terribly useful piece of software.
Chiropractic has done all of this and more. Don't just take my word for it, ask ANY Chiropractor and they will tell you the same thing. Look at Chiro videos on YouTube, they have lots of Thumbs Up from other Chiros.
Ladies and Gentlemen, we have a brand new research technique!! Forget about all that time-wasting and expensive business of double-blinded randomized trials, and the complex process of producing 'evidence', lets just put videos of untested treatments on Youtube and see how many thumbs up votes they get. We could combine this revolutionary technique with that other ideal indicator of treatment performance called 'Just asking people'. Why we've bothered with complex trials for all these years is a true mystery.
I think his point was more subtly that people who want to kill themselves are considered insane by default, unless they can convince a judge that they're not.
You might very well disagree with that, but that's not the same thing as saying that *everyone* is considered insane by default. Which is the whole point. Catch-22.
Or, more likely, the IT guys don't have enough budget to spend on making wifi a little bit faster. Unless you want them to suddenly stop caring about the exchange server. Or the SAN. Or any backups - Actions on all of which might be as the result of legal requirements due to local law or ongoing legal cases involving the company.
But hey, better wifi. That's the most important thing, right?
Slashdot Mirror
Just unplug your internet connection. Voila, a private network.
If you're talking to a senior exec about database replication, you're doing it wrong. They don't care. They just want the text link to be green, and don't understand why these crazy-haired people underneath them keep banging on about unimportant things like database replication.
Interestingly, the comic isn't making a commentary on the usefulness (or not) of cryptography. It's making fun of people who don't properly evaluate all their threats when they design security systems.
The guy recording them gets copyright on the recording of the performance. Which he can't use for commercial purposes without explicit consent of those in the recording.
Ah, the people who miss off the most important part of the 2nd law. They're a fun bunch of illiterate idiots.
I'm thinking along this line, I've got a Nexenta box, but planning on migrating to Solaris 11 / OpenIndiana and running crashplan on it.
:(
My issue is how to approach the ZFS block devices exposed as LUNs on FC. Solaris can't peek inside these (they're formatted as either VMFS-5 or NTFS), so crashplan can't do file-based backup on them. Short of getting a subscription for every client and the NAS as well, I can't see a better solution
Yes, they do, since it was RMS who has coined this term.
Richard Stallman invented neither freedom nor software. Both are widely used generic Engliah words. You might like to think he owns the concept of 'freedoms as they pertain to software', but wishing it doesn't maker it so.
And now, in the spirit of this, I'm going to redefine 'conflake cake' to mean 'Richard Stallman'.
They've got plenty of choice for the stuff that isn't under the GPL.
They've already released the GPL components I believe.
Gnu.org don't get to own the definition of 'software freedom' any more than I get to own the definition of 'cornflake cake'. GP's point is these things are inherently subjective. Referencing someone's opinion as a definition betrays a rather closed mind.
How is the wrapper based on a GNU GPL'd source?
Why would they sanitise their inputs, gIven that XSS is caused by output content encoding bugs?
You appear to fail to understand networking, IPv6, IPv4, routing and the scale of the problem that IPv6 is solving.
But I like swearing at my computer!
Post to undo mistaken mod. Doh.
Apps can't read the database on non-rooted phones. So yes, you need physical access so you can root the phone first to get at the data.
And that's brilliant, but what I'm saying is a private key is just a long password. They fall into the same password-factor space of 'something you know'. By thinking that a private key makes you any more secure than a password on the basis of anything other than password length is wishful thinking.
I believe you're also free to set your Gmail password to be 100 characters, making it effectively 'unguessable'.
It's a good idea, and Google already do this. Scroll to the bottom of gmail and on the right there's a link that opens a windows giving a list of current open logged in sessions, as well as a history of sessions, giving datetime, IP address and type (Mobile, browser, IMAP, etc.).
And where does the iPhone store the encryption key protecting those passwords? On the device? Makes it a little bit useless then.
Go look at a blackberry to see disk encryption done properly - the key is not stored on the device, it's the derived from the user passphrase.
Given that a certificate is effectively just a very very long structured password, what stops me pinching the cert off the phone and using that to sign into the relevant service? A certificate doesn't solve the problem, it just changes the terminology slightly. It's still bits and bytes stored on the phone that can be used as a secret to access a service as a user.
If you want a device-specific password, Google already support that for their services through their two-factor authentication with application specific passwords.
Blackberry's do exactly this. It works well, but a lot of people argue against the convenience. The thing about security controls is that they're rarely convenient, so it's always a trade-off.
I think you fundamentally misunderstand what's going on here.
I dunno, while I don't have a Chromebook I *do* do serious work with Chrome (the browser) every day and I'm not talking about web development. All you need to do serious work, is a decent terminal program:
http://vimeo.com/24857127
Gate One should be available for public consumption soon. I hope to make it the best damned terminal program/SSH client that ever existed. It is already superior to PuTTY (as long as you don't need port forwarding or X11).
Unfortunately, port forwarding (specifically dynamic - using putty as a SOCKS proxy) is 95% of what makes PuTTY useful to me. Hell, it's what makes SSH useful - an SSH client which doesn''t support these functions is, in my view, not a terribly useful piece of software.
Chiropractic has done all of this and more. Don't just take my word for it, ask ANY Chiropractor and they will tell you the same thing. Look at Chiro videos on YouTube, they have lots of Thumbs Up from other Chiros.
Ladies and Gentlemen, we have a brand new research technique!! Forget about all that time-wasting and expensive business of double-blinded randomized trials, and the complex process of producing 'evidence', lets just put videos of untested treatments on Youtube and see how many thumbs up votes they get. We could combine this revolutionary technique with that other ideal indicator of treatment performance called 'Just asking people'. Why we've bothered with complex trials for all these years is a true mystery.
Brilliant!
I think his point was more subtly that people who want to kill themselves are considered insane by default, unless they can convince a judge that they're not.
You might very well disagree with that, but that's not the same thing as saying that *everyone* is considered insane by default. Which is the whole point. Catch-22.
Or, more likely, the IT guys don't have enough budget to spend on making wifi a little bit faster. Unless you want them to suddenly stop caring about the exchange server. Or the SAN. Or any backups - Actions on all of which might be as the result of legal requirements due to local law or ongoing legal cases involving the company.
But hey, better wifi. That's the most important thing, right?