they deflect attention from painful decisions that need to be taken in regards to fishery policy by focusing attention on whaling which is essentially free for them - as they do not have a whaling fleet or culture of whaling.
This has nothing to do with fishing stocks. For a start, whales are mammals, not fish. The whale watching industry in Australia is worth more than 31 million dollars a year, worlwide the value is in billions.
The humpback whales now travelling up the East Coast of Australia once numbered 500 and now, due to the whaling ban now number over 18,000.
Do you think that the humpbacks would come anywhere near a boat if the Japanese whalers once again start harpooning them as they've been planning to do? You'd see a multi-billion dollar industry destroyed.
Actually, Australian fisheries are in a far better condition than many around the world. They do especially well when compared to Japanese fisheries, if there are any left.
I really hate to defend the TSA but there is a legitimate infiltration vector that this does address - that employees beyond the checkpoint can being in substances and transfer them to passengers
The simple solution is to put the employees through the same process as the passengers. Everyone who enters the area gets the same security treatment, even the head of Airport Security.
This is much simpler than randomly accosting passengers in the departure lounge. Wouldn't it be safer to not disturb the passengers even further?
I struck an annoyance similar to this in Manila Airport. Once we were through the security checks, scanning, frisking, etc we were herded into a roped off area only after again having our baggage and ourselves scanned and frisked, etc. This was because we were going to Australia, apparently.
Jet travel is stressful enough without these extra annoyances. Make a secure area and scan everyone who passes in through the barrier once only. It would be nice to wear lace-up shoes again while travelling by air
You are essentially describing "NAT". There is no "NAT" in ipv6.
There can be NAT in ipv6 if that is what you want, but really, NAT is only essential in the ip address starved ipv4. NAT in ipv6 is an unnecessary complexity and an abomination. It doesn't add anything to security and it takes away from network interconnectivity.
has a warrant and asks you to open the trunk of you car? Do you feel police is forcing you do to self-incrimination? I don't think they're forcing you to say you are guilty of anything, they want to check your property to see if you actually are guilty of anything.
If a policeman has a warrant to open the boot of my car then I will assume that if I don't comply then the policeman will break it open and damage my car in the process. There's no point to resistance in this situation but in the case of an encrypted file they won't be able to break in without your assistance. It's a matter of practicality, not legality.
Keep in mind please that no filter has yet come to pass... if you're in Australia, write to your MP. If not... wish us luck:)
(Note: I work at an ISP, but I speak for myself, not my employer)
I live in Australia and I wrote to Senator on this matter back in November 2008. I'm yet to receive a reply. I don't really expect a reply. Senator Conroy simply doesn't care about opposition to the net filter.
They're passing a law that's going to make extensive long-term data storage mandatory, and it's the companies who get to pay for it. Isn't the government generous?
It won't be the companies who pay for data retention. It will be the poor customers. We'll pay for our own surveillance. Isn't the government generous?
Remember these people are guests in the United States. Like any other situation where a person is a guest, they don't get to come in and make themselves at home, sleep on your sofa and eat out of your fridge.
If you wish to treat guests to your country in such a manner then I guess I'll choose somewhere more welcoming when I go on holidays or business.
They can't (although looking at your startup scripts and seeing dmcrypt in there may be a clue), but if I remember correctly, under the UK RIP act it's up to the defendent to prove that it's NOT encrypted - not sure exactly how you'd do that - and you'll be done, and probably sent down, for refusing to hand the key over if you can't.
They can't (although looking at your startup scripts and seeing dmcrypt in there may be a clue), but if I remember correctly, under the UK RIP act it's up to the defendent to prove that it's NOT encrypted - not sure exactly how you'd do that - and you'll be done, and probably sent down, for refusing to hand the key over if you can't.
Well, I've only got my swap partitions encrypted. I cannot supply the key to decrypt the swap partition because it is randomly generated at boot time. I do keep a few secrets (passwords etc) in an encrypted file (which is loop mounted as an encrypted partition). The file is not specially named and would look like a binary data file if examined.
While Australia's wired access in rural areas is lacking, we have pretty much ubiquitous access to fast mobile (wireless) broadband. In fact, you can get 7.2mbit access pretty much everywhere in the country.
That's soon going to be 21mbit, the first large scale roll-out in the world of that particular mobile technology.
Really? The best Telstra can do is 3mbps download. If you want to pay $125 a month you can get a 10Gb shaped download plan (shaped to 64kbps if you exceed this). Sounds expensive.
Most of the plans are capped at 1Gb or less (25c a MB if exceeded).
Damn, you beat me to it. I'll elaborate for you though:
Simpsons started in 1987 as a spot on the Tracey Ullman show. Barts character has always been 10. That would make him 31 years old now, and it would make Lisa a LEGAL 29 year old. Heck, even Maggie would be a legal (at least) 21 year old.
Unfortunately, that's irrelevant. Under Australian law it is illegal even if the "actors" are over the age of consent (16 years in New South Wales) but made to look like they are under age.
These "child protection" laws are absurd in a way that is frightening.
He was only fined A$3000 and required to behave himself, and no costs were awarded. So there isn't really a heavy hand here.
However, I do think the resources could be far better spent.
His name will also appear on a sex offenders register as a known pedophile. He won't be able to work in a very large number of jobs including teaching and aged care work (yes, seriously).
He won't be able to live anywhere near a school or anywhere there are children, and he'll be lucky if he won't be hounded out of his community or severely beaten by vigilantes.
In short, his life is now ruined because he had a silly cartoon on his computer.
I'm thinking of moving out of this insane country.
But seriously. I can understand the possibility of a civil lawsuit if i mod a picture and spread it with the intent to hard someone. If some mods a picture of me and i never even see it, how am i a victim? How is my life altered it it never comes to my attention or to someone i interact with? You probably didn't mean to write "hard someone", but it works really well.
Linux is fast in the server space, and perhaps in the CLI, sometimes, but for anything else, there's a reason the linux on the desktop enthusiasts are refered to as hobbists. s/hobbists/hobbits/
In school I used WordPerfect 5.1, Quattro Pro, MS Works, Filemaker Pro, QBasic, MS-Dos, and CorelDraw, along with a bunch of programs that were so obscure, I can't even remember the name of them. Up until high school, the only computer I had ever used at school was an ICON. I don't use any of that anymore.
When I was at high school, there was one computer shared between 3 schools, a WANG. You used basic to program it (stored on audio cassettes.). When we didn't have the computer, we used to transfer our programs (FORTRAN) onto punch cards, sent them away to a mainframe to run, then got the paper run sent back to us for debugging.
At University we had the VAX/VMS Minicomputer and at home I had an old PC-Clone 80286 (cost me a fortune!) running MS-DOS 3.3, which I used to dial up my university account on the VAX via a 2400 baud modem for access to the internet (such as it was in the late 1980s, early 90s). It was the most stable Microsoft OS I've ever run. Now I run Gentoo Linux.
Kids have it easy these days. Up until midway through High School we didn't even have pocket calculators. All computations had to be made by pencil, paper and brain (we didn't even have ballpoint pens until I was ten years old).
The world changes and we have to change with it or die.
Yep; Gentoo is a distribution that makes no sense at all. Mostly a whole bunch of people who think burning CPU time to compile stuff, verses stuff compiled by someone else, is actually going to benefit them somehow.
You don't think so? Why do you need support for EVERY language compiled into your applications? Why do you need MYSQL support compiled into your applications when you use postgresql?
It isn't. Compiling code isn't magick. It is just a boring, tedious, and fantastically consistent, process. The "fantastically consistent" means it doesn't much matter where, or by who, some chunk of code gets compiled. And, yes, I know about compiler options, etc... In reality, "-O2" verses "-O1" ain't going to buy you anything noticable, and there are reasons not to use "-O2"; if you don't know what those are.... you shouldn't be diddling with compiler options.
So, compiling specifically for my laptop, my P4 desktop and my P3 router doesn't matter?
My applications contain support for ONLY what I require.
True that, but think it, - what was the original purpose for chroot? How did this "feature" come to be? Ever tried to update your glibc by hand? binutils? This is where one would get the most use of it. Given a chance won't you test something new before pitching? Installation of a Gentoo system requires chroot. You boot from your live CD, untar your basic directory setup (and toolchain) onto your hard drive then chroot into your new system to install (emerge) programs, setup the bootloader and build your new kernel (among other things).
I've never really thought about chroot as a security feature. I think of it as a necessary tool for moving from one filesystem hierarchy to another, for the purpose of building a new system.
which i let my firewall worry about. If you're running an X session on it, you're not terribly security minded. So why not just have it firewalled to crap and not worry. Firewalls only stop traffic based on source/destination IP (among other identifiers) in packets. They won't stop a cracker taking advantage of an exploit in an installed library, say in a web server.
It is more secure to only install what you really need.
I did a brief bit of consulting for a company developing cell phone apps. They had ties to some Korean cell phone manufacturers. Somehow they had gotten a hold of some Korean arcade systems as a trial to see if they would want to market them in the USA. One was called something like "Butt Smacker" and it was an upright arcade console with a screen and a recreation of a person's butt (made out of foam and plastic) protruding just below the screen. There was a paddle attached to the side of the cabinet.
I never saw the machine turned on but I can only imagine what the "game" was... Maybe the machine got turned on by latex, rather than having its butt whacked.
Yes, it will install dependencies for you, but with broadband, and 100G hard drives, I just don't care.:) It isn't a matter of disk space, it is a matter of installing what you don't need and installing a potential security hole via an unnecessary dependency.
You setup all programs as if you were operating solely on the current machine. If an experienced user wishes to bypass that default, they can use the current process to define a different CPUID when they compile. You do this instead of forcing everyone to enter the CPUID (when it's readily available on the local machine) and the average user will likely not be so turned off by forcing them to compile. If they can click an icon or a button and have it use default values and predefined values on their PC, you've increased the user experience ten-fold. As I stated earlier, this doesn't alienate the power user because they still have all those tricks, but the common user will still be able to perform the task. It won't be as precise or perform as well, but most users just want it to work. The power users could even sell their talent and knowledge (or give it away free if they wanted) on making the machine perform better. In this way, you don't alienate anyone in the process. Pressing a button or icon? A gentoo install doesn't work that way. When you are setting up your compile defaults you have no kernel, no desktop and almost no applications beyond the toolchain used for installing new applications (gcc, binutils, automake, autoconf, perl, python, etc). You are usually chrooted into your newly installed filesystem and setting things up with nano ( the default gentoo text editor - yuk!). I use a stage 3 Gentoo install - I'm not a masochist.
The "user-experience" for a gentoo user is enhanced by having all configuration of the machine in your own hands.... not being guessed for you "behind your back".
Gentoo is obviously not for the "user" you are talking about. They should try one of the many other distributions catering for ease of installation and use. Gentoo is for enthusiasts, the "tweakers" and the "fiddlers". I love it, but I wouldn't recommend it to anyone who isn't interested in tweaking and refining their OS.
Slashdot Mirror
The Japanese whalers are planning to hunt humpback whales http://www.smh.com.au/national/hunt-threatens-300m-whalewatching-industry-20111223-1p7rz.html and these are classified as threatened.
This has nothing to do with fishing stocks. For a start, whales are mammals, not fish. The whale watching industry in Australia is worth more than 31 million dollars a year, worlwide the value is in billions.
The humpback whales now travelling up the East Coast of Australia once numbered 500 and now, due to the whaling ban now number over 18,000.
Do you think that the humpbacks would come anywhere near a boat if the Japanese whalers once again start harpooning them as they've been planning to do? You'd see a multi-billion dollar industry destroyed.
Actually, Australian fisheries are in a far better condition than many around the world. They do especially well when compared to Japanese fisheries, if there are any left.
I really hate to defend the TSA but there is a legitimate infiltration vector that this does address - that employees beyond the checkpoint can being in substances and transfer them to passengers
The simple solution is to put the employees through the same process as the passengers. Everyone who enters the area gets the same security treatment, even the head of Airport Security. This is much simpler than randomly accosting passengers in the departure lounge. Wouldn't it be safer to not disturb the passengers even further?
I struck an annoyance similar to this in Manila Airport. Once we were through the security checks, scanning, frisking, etc we were herded into a roped off area only after again having our baggage and ourselves scanned and frisked, etc. This was because we were going to Australia, apparently.
Jet travel is stressful enough without these extra annoyances. Make a secure area and scan everyone who passes in through the barrier once only. It would be nice to wear lace-up shoes again while travelling by air
Please, proper terminology. They're not stepping up to the plate, they're... uh, what is it they call 'em in krikkit?
Stepping up to the pitch. Yeah. Go UK!
The correct term in cricket is "walking to the the crease".
You are essentially describing "NAT". There is no "NAT" in ipv6.
There can be NAT in ipv6 if that is what you want, but really, NAT is only essential in the ip address starved ipv4. NAT in ipv6 is an unnecessary complexity and an abomination. It doesn't add anything to security and it takes away from network interconnectivity.
has a warrant and asks you to open the trunk of you car? Do you feel police is forcing you do to self-incrimination? I don't think they're forcing you to say you are guilty of anything, they want to check your property to see if you actually are guilty of anything.
If a policeman has a warrant to open the boot of my car then I will assume that if I don't comply then the policeman will break it open and damage my car in the process. There's no point to resistance in this situation but in the case of an encrypted file they won't be able to break in without your assistance. It's a matter of practicality, not legality.
Keep in mind please that no filter has yet come to pass... if you're in Australia, write to your MP. If not... wish us luck :)
(Note: I work at an ISP, but I speak for myself, not my employer)
I live in Australia and I wrote to Senator on this matter back in November 2008. I'm yet to receive a reply. I don't really expect a reply. Senator Conroy simply doesn't care about opposition to the net filter.
They're passing a law that's going to make extensive long-term data storage mandatory, and it's the companies who get to pay for it. Isn't the government generous?
It won't be the companies who pay for data retention. It will be the poor customers. We'll pay for our own surveillance. Isn't the government generous?
Um, we're a democratic republic, somewhat similar to your own country
No, Australia is a constitutional monarchy, the Queen of England is Australia's monarch.
Remember these people are guests in the United States. Like any other situation where a person is a guest, they don't get to come in and make themselves at home, sleep on your sofa and eat out of your fridge.
If you wish to treat guests to your country in such a manner then I guess I'll choose somewhere more welcoming when I go on holidays or business.
The "best" Telstra can do is 8mbps download speed over cable,
We were talking wireless broadband, not cable.
I provided information from telstra's own wireless broadband web page, but I suppose you know better than telstra.
They can't (although looking at your startup scripts and seeing dmcrypt in there may be a clue), but if I remember correctly, under the UK RIP act it's up to the defendent to prove that it's NOT encrypted - not sure exactly how you'd do that - and you'll be done, and probably sent down, for refusing to hand the key over if you can't.
They can't (although looking at your startup scripts and seeing dmcrypt in there may be a clue), but if I remember correctly, under the UK RIP act it's up to the defendent to prove that it's NOT encrypted - not sure exactly how you'd do that - and you'll be done, and probably sent down, for refusing to hand the key over if you can't.
Well, I've only got my swap partitions encrypted. I cannot supply the key to decrypt the swap partition because it is randomly generated at boot time. I do keep a few secrets (passwords etc) in an encrypted file (which is loop mounted as an encrypted partition). The file is not specially named and would look like a binary data file if examined.
While Australia's wired access in rural areas is lacking, we have pretty much ubiquitous access to fast mobile (wireless) broadband. In fact, you can get 7.2mbit access pretty much everywhere in the country.
That's soon going to be 21mbit, the first large scale roll-out in the world of that particular mobile technology.
Really? The best Telstra can do is 3mbps download. If you want to pay $125 a month you can get a 10Gb shaped download plan (shaped to 64kbps if you exceed this). Sounds expensive.
Most of the plans are capped at 1Gb or less (25c a MB if exceeded).
Which is exactly why we'll code our application to flag any encrypted files or hidden partitions, plus a full scan of your unencrypted swap file.
I don't have swap files. I have swap partitions and they are encrypted with a random key at boot time using dmcrypt.
How can forensics easily tell the difference between an encrypted file and a file filled with either random or binary data?
Damn, you beat me to it. I'll elaborate for you though:
Simpsons started in 1987 as a spot on the Tracey Ullman show. Barts character has always been 10. That would make him 31 years old now, and it would make Lisa a LEGAL 29 year old. Heck, even Maggie would be a legal (at least) 21 year old.
Unfortunately, that's irrelevant. Under Australian law it is illegal even if the "actors" are over the age of consent (16 years in New South Wales) but made to look like they are under age.
These "child protection" laws are absurd in a way that is frightening.
He was only fined A$3000 and required to behave himself, and no costs were awarded. So there isn't really a heavy hand here. However, I do think the resources could be far better spent.
His name will also appear on a sex offenders register as a known pedophile. He won't be able to work in a very large number of jobs including teaching and aged care work (yes, seriously).
He won't be able to live anywhere near a school or anywhere there are children, and he'll be lucky if he won't be hounded out of his community or severely beaten by vigilantes.
In short, his life is now ruined because he had a silly cartoon on his computer.
I'm thinking of moving out of this insane country.
When I was at high school, there was one computer shared between 3 schools, a WANG. You used basic to program it (stored on audio cassettes.). When we didn't have the computer, we used to transfer our programs (FORTRAN) onto punch cards, sent them away to a mainframe to run, then got the paper run sent back to us for debugging.
At University we had the VAX/VMS Minicomputer and at home I had an old PC-Clone 80286 (cost me a fortune!) running MS-DOS 3.3, which I used to dial up my university account on the VAX via a 2400 baud modem for access to the internet (such as it was in the late 1980s, early 90s). It was the most stable Microsoft OS I've ever run. Now I run Gentoo Linux.
Kids have it easy these days. Up until midway through High School we didn't even have pocket calculators. All computations had to be made by pencil, paper and brain (we didn't even have ballpoint pens until I was ten years old).
The world changes and we have to change with it or die.
You don't think so? Why do you need support for EVERY language compiled into your applications? Why do you need MYSQL support compiled into your applications when you use postgresql?
It isn't. Compiling code isn't magick. It is just a boring, tedious, and fantastically consistent, process. The "fantastically consistent" means it doesn't much matter where, or by who, some chunk of code gets compiled. And, yes, I know about compiler options, etc... In reality, "-O2" verses "-O1" ain't going to buy you anything noticable, and there are reasons not to use "-O2"; if you don't know what those are.... you shouldn't be diddling with compiler options.
So, compiling specifically for my laptop, my P4 desktop and my P3 router doesn't matter? My applications contain support for ONLY what I require.
I've never really thought about chroot as a security feature. I think of it as a necessary tool for moving from one filesystem hierarchy to another, for the purpose of building a new system.
It is more secure to only install what you really need.
I never saw the machine turned on but I can only imagine what the "game" was
The "user-experience" for a gentoo user is enhanced by having all configuration of the machine in your own hands.... not being guessed for you "behind your back".
Gentoo is obviously not for the "user" you are talking about. They should try one of the many other distributions catering for ease of installation and use. Gentoo is for enthusiasts, the "tweakers" and the "fiddlers". I love it, but I wouldn't recommend it to anyone who isn't interested in tweaking and refining their OS.