Back in 2000 Netscape did a despo gamble like this
and its implementation of some java classes was
bad. It allowed websites to create classes derived from the server side of the browser and access all
the info in the hard disk.
Google for Netscape and Brown Orifice for more details.
Such a security hole is waiting to happen. It is really a dumb idea from Apple. One of the biggest plus point of MacOS is that, it is safe and it does not have vulnerabilities. To put that reputation at risk by allowing the browser to dish out data to the outside world is really really a dumb idea.
Yes, there are security features. Yes there are things the user must enable for it to work. Despite all this, having server code loaded up in the memory of a browser is stupid.
Not in my state. School budgets, county and local services come out of property taxes. State Sales Tax and State Income Tax goes to big feeding troth in Trenton.
You don't get it, do you? Even if the sales tax goes to the state rather than the city, it is still a government closer than Washington DC. And people evade that tax. The piano teacher, the landscaper, the handy man, the mechanic... how many people you know who work for cash only? Have you helped anyone evade taxes by paying in cash because you get a 5% discount? How many people you know routinely buy cigarettes and liquor from out of state to evade sales taxes? Now imaging how many more people will evade taxes when it hits 22%. Then imagine what mechanisms we will create to catch the scofflaws. Now why do you think this system is going to be less intrusive or more fair than the current system?
You have no clue of what you should really be asking for. Have you thought about asking for a inflation adjustment for the cost basis of long term investments?
Well, then unregistered fly-by-night operators will undercut legitimate tax paying businesses by 20%. Consumers with no legal responsibility to pay the tax are now saddled with the responsibility of verifying the authenticity of businesses for the privilege of paying 20% extra. It will be a race to the bottom and next to no time you will have a cash economy.
Communism does not work because it is assumes an ideal behavior of the workers and the government. Your flat tax, sales tax, consumption tax, simplified income tax etc do not work because they too assume ideal behavior on the part of citizens and businesses.
With real people, real businesses on the ground, every one will minimize their tax burden. Some using legal methods and some using illegal methods. Unless your solution thinks about the ways in which people escape taxes, the mechanisms to counter that etc, your solutions are as likely to founder as did communism.
Now imagine how willing they will be to pay a 17% or 22% tax to distant Washington DC?
That's a feature, not a bug.
So you are advocating for an intentionally crippled system and would cheer on wide spread tax evasion. You are not fit to live in a Democracy. Do you know how Democracy will die? Not with bullets and guns. It will die because of people like you who keep granting themselves benefits of Democracy without the willingness to pay for them.
I am a rugged independent fella living out in Arizona and I want the federal government off my back. Just go build Hoover Dam and give me my electricity. Just regulate the utilities so that they don't over charge me. Regulate the stock market so that I know safe companies to invest. Just build roads and administer the air traffic. And then just go away, I am not paying any taxes. I am a rugged independent fella living out in Arizona.
You are a clueless idiot who had the luck of being born in the USA due to some kind of good karma you got in your previous birth. Just enjoy the life here and pass away without mucking it up for all the future generations.
You have absolutely no idea of what corruption is till you see how things get done in Pakistan and Bangladesh. High sales/consumption taxes and no record keeping of income and wealth will lead to that scenario.
I am not arguing there is no corruption in Obama's administration or Bush's. But this pales in comparison to what happens in a cash economy. But go ahead drink your cool aid. The one positive thing about USA is that the demographic shift is taking power away from the people who feed cool aid to people like you. So stew in your own perceived injustices and self declared victimhood.
Cool down buddy. Consumption tax flat tax etc are all stupid ideas sold to people like you who are easily persuaded that the grass is greener on the other side. Have you lived in economies that tax goods and services at more than 10%? Can you imagine the kind of tax evasion that goes on, and the parallel cash economy that springs up immediately? How many people you know who evade the simple 5% or 6% local sales tax on the services by the landscaper or the handy man? That is the tax that goes to pay for your own local neighbourhood schools and snow removal. Now imagine how willing they will be to pay a 17% or 22% tax to distant Washington DC? Can you imagine the kind of intrusive systems needed to catch the scofflaws? If you think IRS is intrusive looking at your pay slip, wait till you get IRS demanding you show documentation for having paid tax on your wrist watch and shaving blades.
Do these right wing nutties have any idea of the dangers of a cash economy? Today, in USA, 1$ in cash is worth 1$ in bank. But 1 million dollars in cash is worth lot less than 1 million dollars properly accounted for in the bank. Black money is worth lot less in USA than white money. That is not the case in Mexico, Phillipines, Pakistan, Bangladesh etc. Once unaccounted money gets decent buying power, then corruption sets in. We are paying pittance for our judges, police chiefs,
auditors and law enforcers in general. Once cash economy takes root, corrupt people will work their way into every crevice of power and it would exceedingly difficult to get rid of them.
The source of cash economy is tax evasion. Purely on that account, we should stop drinking the cool aid about consumption tax and such stupid ideas.
Just yeterday NPR had a bit about some kind of tax in Britain called "the license fee" that runs for about 200$ a year for every TV set owned by the Brits. And the money apparently goes to fund BBC. Once you pay 15$ a month to get Brit version of PBS, why not 50$ for all of the internet at full speed?
The question is, what does the bacteria have to live for?
Why are you people so eukaryotocentric? Equal treatment for all should be our creed. Prokaryotes of the World, Unite!! You have nothing to lose but your inability to form cell membranes!
In the early days Netscape came with some such functionality. And the websites were able to derive an object from one of the server classes. Some of the private/public/protected interfaces were messed up. So a malicious site could promote that object and essentially ask for anything in the computer and get it.
Acid test tests only the compatibility with the standards. It says nothing about how vulnerable the executable is in the hands of malicious web masters.
'If you're IBM, Microsoft and Oracle, your worst nightmare is now visible.'
Really? It probably threatens slashdot's business model more than it does corporate IT vendors. Imagine a new mash up that delivers all the content of slashdot without any of the ads nor the frequent fiddling with message filter UIs.
Amusingly, you also get to see all the comments left by the devs in the code, guaranteeing a few good chuckles from others who can relate
Really? How many people could relate to finding just one comment in an assembly language module?
MOV 1750 # RIP JSB
That is the end of Twitter
on
One-Tweet Wonders
·
· Score: 4, Interesting
Once it makes to the cover of Time, it is a sure sign it has peaked.
If you see the bull (or bear) dressed in a suit on the cover of Time or Newsweek that will be a 3 year high (or low) and if both mags have the bull (or bear) in the same week, it will be a five year high (or low).
It is much like that apocryphal story about a shoeshine boy (or a taxi driver) telling JFK's Dad (Patrick Kennedy?) to get into the stock market and JKF's dad figuring, if these guys are in, it is time to get out.
Some people's vote is double counted. For others, only 0.2 extra votes were added. (0.6 original vote and another 0.6 double counted vote). Looks like they followed the constitution a little too strictly and counted *some* people as only 3/5 people.
I mean, why do we still have to have the black box in the aircraft? Is it possible to radio the parameters continuously and record it on land? Thus even when the plane is lost, the data is safe. What kind of bandwidth is needed to transmit that level of data?
I don't know what the assumptions were, but it seems to be an over estimate by orders of magnitude. Space, 3D space is really really huge, unimaginably huge.
In WW-II they had to protect the lumbering bombers from the swift fighters. So they tried arming a few bombers with very high number of machine guns. Short Sudeland flying boat was actually called a "Flying Porcupine" because of the number of gun barrels sticking out of it. With guns firing at 1000 to 3000 rounds a minute, with tracer bullets, with trained gunners aiming the guns, they still could not reliably hit the fighters. Both Luftwaffe and RAF and USAF independently had to learn the same lesson with very high cost.
Yes, meteors could hit an airplane. But if their calculations shows odds of 1 in 20 for the last 20 year period, I am very sure they have over estimated the odds.
Despite all that scare flags the linked article is triggering, basically it does not say how the ATM is compromised. Can any ATM be compromised by the hacker without any inside help? Or does it require some help from the maintenance people who open the machine provide access to the innards? Unless the method works on the ATM without any inside help it might not be as scary as it sounds.
The Android based hand held device does not pose a direct threat to MSFT. But all it needs is just large enough market share to force MSFT to be standards compliant. MSFT cant keep changing internal file formats, APIs and other tricks to be eternally non standards compliant. If enough people use Android to check email, it will force MSExchange to be more open.
Remember Firefox? Once it reached a 10% market share most websites started abandoning MSFT's walled garden and adopt standards. Same way if enough people migrate to Google docs, Open Office, Android etc etc, it will nail MSFT's underhanded tactics. If 10% of the people are using OpenOffice, they will interact with some 20% of the MsOffice market, and start demanding smooth file transfers. If 10% of the people use Android net book to take a quick look at MsOffice powerpoint it will force MSFT to at least allow a standard compliant export or standard compliant view only mode.
That is all it takes to start shaking the monopoly. Once MSFT market share in Office and OS starts to dip below 80% it will get into a avalanche mode and drop to 40% in just 4 or 5 years.
I always wondered how Luke figured out where the secret entrance to the nuclear reactor providing power to the shield to the Death Star during construction. Now there is a plausible scenario how he got it.
'It is a major stretch beyond case law to assert that authority with respect to a private home, which is at the heart of the Fourth Amendment's protection against unreasonable search and seizure,' says Electronic Frontier Foundation lawyer Lee Tien
What is so unreasonable in locating a device that is interfering with Air traffic control or FM radio broadcasts or GPS recievers? FCC does not have the right to go on fishing expedition in private homes, I agree. But if it has a quadrifiler antenna beeping away and pointing to a home that has RF emitter out of compliance, why should it not enter the property and disable it?
What about a private property from which you see diesel draining away? Or you smell catavarine around it indicating a leaking propane tank? You think the fire department needs a warrant to enter the property and plug the leak?
CAR ANALOGY: Can the fire department break the window and extract the injured accident victim from a car? Or do they have to file for a warrant and wait for a judge to grant it?
All that talk about warrantless search and unconstitutionality etc are bogus. If you don't emit any detectable radiation then you can claim FCC can't enter your premises. But if you have a device that emits radiation beyond your home, FCC has the right to inspect, if necessary disable that device. It is just common sense.
You could argue this power is limited, and any evidence of any other illegal activity uncovered by FCC during this process of disabling non-compliant radiation emitter is not admissable in cases etc etc. That is all fine and good. But it is a stretch to claim the right to pollute the EM spectrum just because the device is inside a private property perimeter.
It is very easy to give FCC this power to enter premises in a constitutional way. The ability to detect RF emissions coming from the property itself is probably cause.
Dont like that? You dont want FCC to ever enter your home? Just build a Faraday's Cage around your home and you will be fine. Or may be upgrade your tin-foil hat to a tin-foil home.
And more than just a logo. We need the equivalent of acid test. Round trip testing. Great opp for non programmers who have been enjoying Open Source software for so long. Test the ODF export/import in MSWord and submit bugs.
If you have been saying, "I support Open Source, but since I am not a coder, I cant do much", this is your chance to contribute positively and advance the cause for open standards.
Why the hell were they sticking with that rotten MsOffice which is not even standard compliant? They would not had this problem had the used OpenOffice.
Wait...
oops. Wrong rant. What a waste of a perfectly good troll. Sad.
Slashdot Mirror
Google for Netscape and Brown Orifice for more details.
http://www.securityfocus.com/news/70
Such a security hole is waiting to happen. It is really a dumb idea from Apple. One of the biggest plus point of MacOS is that, it is safe and it does not have vulnerabilities. To put that reputation at risk by allowing the browser to dish out data to the outside world is really really a dumb idea.
Yes, there are security features. Yes there are things the user must enable for it to work. Despite all this, having server code loaded up in the memory of a browser is stupid.
Not in my state. School budgets, county and local services come out of property taxes. State Sales Tax and State Income Tax goes to big feeding troth in Trenton.
You don't get it, do you? Even if the sales tax goes to the state rather than the city, it is still a government closer than Washington DC. And people evade that tax. The piano teacher, the landscaper, the handy man, the mechanic... how many people you know who work for cash only? Have you helped anyone evade taxes by paying in cash because you get a 5% discount? How many people you know routinely buy cigarettes and liquor from out of state to evade sales taxes? Now imaging how many more people will evade taxes when it hits 22%. Then imagine what mechanisms we will create to catch the scofflaws. Now why do you think this system is going to be less intrusive or more fair than the current system?
You have no clue of what you should really be asking for. Have you thought about asking for a inflation adjustment for the cost basis of long term investments?
The balloons will/should carry a transponder that identifies them on all radars pinging them.
Communism does not work because it is assumes an ideal behavior of the workers and the government. Your flat tax, sales tax, consumption tax, simplified income tax etc do not work because they too assume ideal behavior on the part of citizens and businesses.
With real people, real businesses on the ground, every one will minimize their tax burden. Some using legal methods and some using illegal methods. Unless your solution thinks about the ways in which people escape taxes, the mechanisms to counter that etc, your solutions are as likely to founder as did communism.
Now imagine how willing they will be to pay a 17% or 22% tax to distant Washington DC?
That's a feature, not a bug.
So you are advocating for an intentionally crippled system and would cheer on wide spread tax evasion. You are not fit to live in a Democracy. Do you know how Democracy will die? Not with bullets and guns. It will die because of people like you who keep granting themselves benefits of Democracy without the willingness to pay for them.
I am a rugged independent fella living out in Arizona and I want the federal government off my back. Just go build Hoover Dam and give me my electricity. Just regulate the utilities so that they don't over charge me. Regulate the stock market so that I know safe companies to invest. Just build roads and administer the air traffic. And then just go away, I am not paying any taxes. I am a rugged independent fella living out in Arizona.
You are a clueless idiot who had the luck of being born in the USA due to some kind of good karma you got in your previous birth. Just enjoy the life here and pass away without mucking it up for all the future generations.
I am not arguing there is no corruption in Obama's administration or Bush's. But this pales in comparison to what happens in a cash economy. But go ahead drink your cool aid. The one positive thing about USA is that the demographic shift is taking power away from the people who feed cool aid to people like you. So stew in your own perceived injustices and self declared victimhood.
Do these right wing nutties have any idea of the dangers of a cash economy? Today, in USA, 1$ in cash is worth 1$ in bank. But 1 million dollars in cash is worth lot less than 1 million dollars properly accounted for in the bank. Black money is worth lot less in USA than white money. That is not the case in Mexico, Phillipines, Pakistan, Bangladesh etc. Once unaccounted money gets decent buying power, then corruption sets in. We are paying pittance for our judges, police chiefs, auditors and law enforcers in general. Once cash economy takes root, corrupt people will work their way into every crevice of power and it would exceedingly difficult to get rid of them. The source of cash economy is tax evasion. Purely on that account, we should stop drinking the cool aid about consumption tax and such stupid ideas.
Just yeterday NPR had a bit about some kind of tax in Britain called "the license fee" that runs for about 200$ a year for every TV set owned by the Brits. And the money apparently goes to fund BBC. Once you pay 15$ a month to get Brit version of PBS, why not 50$ for all of the internet at full speed?
Why are you people so eukaryotocentric? Equal treatment for all should be our creed. Prokaryotes of the World, Unite!! You have nothing to lose but your inability to form cell membranes!
Acid test tests only the compatibility with the standards. It says nothing about how vulnerable the executable is in the hands of malicious web masters.
Really? It probably threatens slashdot's business model more than it does corporate IT vendors. Imagine a new mash up that delivers all the content of slashdot without any of the ads nor the frequent fiddling with message filter UIs.
Yeah, the standard dumbing down units is how many football fields long or how many libraries of congress worth of information. Nuclear bombs? meh!
Really? How many people could relate to finding just one comment in an assembly language module?
MOV 1750 # RIP JSB
It is much like that apocryphal story about a shoeshine boy (or a taxi driver) telling JFK's Dad (Patrick Kennedy?) to get into the stock market and JKF's dad figuring, if these guys are in, it is time to get out.
Some people's vote is double counted. For others, only 0.2 extra votes were added. (0.6 original vote and another 0.6 double counted vote). Looks like they followed the constitution a little too strictly and counted *some* people as only 3/5 people.
I mean, why do we still have to have the black box in the aircraft? Is it possible to radio the parameters continuously and record it on land? Thus even when the plane is lost, the data is safe. What kind of bandwidth is needed to transmit that level of data?
I don't know what the assumptions were, but it seems to be an over estimate by orders of magnitude. Space, 3D space is really really huge, unimaginably huge. In WW-II they had to protect the lumbering bombers from the swift fighters. So they tried arming a few bombers with very high number of machine guns. Short Sudeland flying boat was actually called a "Flying Porcupine" because of the number of gun barrels sticking out of it. With guns firing at 1000 to 3000 rounds a minute, with tracer bullets, with trained gunners aiming the guns, they still could not reliably hit the fighters. Both Luftwaffe and RAF and USAF independently had to learn the same lesson with very high cost. Yes, meteors could hit an airplane. But if their calculations shows odds of 1 in 20 for the last 20 year period, I am very sure they have over estimated the odds.
Despite all that scare flags the linked article is triggering, basically it does not say how the ATM is compromised. Can any ATM be compromised by the hacker without any inside help? Or does it require some help from the maintenance people who open the machine provide access to the innards? Unless the method works on the ATM without any inside help it might not be as scary as it sounds.
Remember Firefox? Once it reached a 10% market share most websites started abandoning MSFT's walled garden and adopt standards. Same way if enough people migrate to Google docs, Open Office, Android etc etc, it will nail MSFT's underhanded tactics. If 10% of the people are using OpenOffice, they will interact with some 20% of the MsOffice market, and start demanding smooth file transfers. If 10% of the people use Android net book to take a quick look at MsOffice powerpoint it will force MSFT to at least allow a standard compliant export or standard compliant view only mode.
That is all it takes to start shaking the monopoly. Once MSFT market share in Office and OS starts to dip below 80% it will get into a avalanche mode and drop to 40% in just 4 or 5 years.
I always wondered how Luke figured out where the secret entrance to the nuclear reactor providing power to the shield to the Death Star during construction. Now there is a plausible scenario how he got it.
Wow! Open an argument with Nazi reference. Godwin's law closes the discussion and you have the last word!
What is so unreasonable in locating a device that is interfering with Air traffic control or FM radio broadcasts or GPS recievers? FCC does not have the right to go on fishing expedition in private homes, I agree. But if it has a quadrifiler antenna beeping away and pointing to a home that has RF emitter out of compliance, why should it not enter the property and disable it?
What about a private property from which you see diesel draining away? Or you smell catavarine around it indicating a leaking propane tank? You think the fire department needs a warrant to enter the property and plug the leak?
CAR ANALOGY: Can the fire department break the window and extract the injured accident victim from a car? Or do they have to file for a warrant and wait for a judge to grant it?
You could argue this power is limited, and any evidence of any other illegal activity uncovered by FCC during this process of disabling non-compliant radiation emitter is not admissable in cases etc etc. That is all fine and good. But it is a stretch to claim the right to pollute the EM spectrum just because the device is inside a private property perimeter.
It is very easy to give FCC this power to enter premises in a constitutional way. The ability to detect RF emissions coming from the property itself is probably cause.
Dont like that? You dont want FCC to ever enter your home? Just build a Faraday's Cage around your home and you will be fine. Or may be upgrade your tin-foil hat to a tin-foil home.
If you have been saying, "I support Open Source, but since I am not a coder, I cant do much", this is your chance to contribute positively and advance the cause for open standards.
Wait...
oops. Wrong rant. What a waste of a perfectly good troll. Sad.