I think, looking forward, MS will make the CE kernel a lightweight bootstrap for a.NET JIT. It only benefits them to reduce the attack surface, memory footprint, and number of interfaces they'll have to maintain for backwards compatibility and delegate it to the CLR. Then you've got a sand box that can leak memory (and reclaim it!) all day, that has a single interface to the kernel that needs to be maintained, and as a bonus you don't alienate any developers in the process. The last thing they want is another v[bc]-6 or J# incident.
IIRC, you work on an open source project that deals with operating system internals (was it something to do with emulation?); in your educated opinion, do you think this is likely?
We can do this now. Drop mail from anything @aol.com. It's a shotgun method for fixing the problem. As such there is collateral damage... but you won't miss the "RE:RE:RE:RE:urban myth" email from Aunt Sally, anyways.
Better than where I work! Our policy is "no blood on the carpet". OTOH, your contract allows the beating of customers. They've both got their pros and cons, I guess.
I'd assume that the context of 'cheap' is different in both instances. On one hand, you want cheap per unit servers; OTOH, you want to buy many cheap units to be able to scale. Of course, that's just my interpretation...
Saying that you have a problem with it does nothing for me; someone, without an opinion on the topic, willing to consider both sides of the argument. Bring a bit of signal with that noise, will ya'?
[...] Not only that, but it's hitting the market early. AMD had originally planned to introduce this product in the October time frame, but the first spin of Istanbul silicon came back solid, so the firm pulled the launch forward into June. Even with the accelerated schedule, of course, Istanbul comes not a moment too soon, now that Nehalem Xeons are out in the wild.
Does anyone else think that this seems a little convenient? I'm really hoping that they didn't just tone down the testing to make it to market. I'm thinking they'll go to market and then quickly release a new revision to fix the corners that they cut the first time around. I hope I'm wrong, but AMD has been slipping lately.
Any EE's out there know the process well enough to confirm or deny my suspicions?
Homestead; just like etherape, but in a 3d environment where you can move nodes and your point of view. As a bonus, it's open source.
Its sourceforge blurb:
Homestead is a 3D real-time network visualizer, displaying hosts & packet traffic. Features: multiple sensor support, gather hostnames & services, configurable subnetwork layout, record/replay packet traffic, filter packets by host, protocol or port.
I stand corrected (you freakin' old hat;) ) and retract my previous statement. Apparently this exploit is only applicable for LANMAN hashes. I thought all DES ciphers suffered this weakness.
Although it is based on DES, a well-studied block cipher, the LM hash can easily be cracked due to two weaknesses in its implementation. First, passwords longer than 7 characters are divided into two pieces and each piece is hashed separately. Second, all lower case letters in the password are changed to upper case before the password is hashed. The first weakness allows each half of the password to be attacked separately. While there are 95^{14} \approx 2^{92} different passwords made of up to 14 printable ASCII characters, there would be only 95^{7} \approx 2^{46} different 7 character password pieces using the same character set. Restricting the character set by converting lowercase to uppercase further reduces the number of possibilities for each half to 69^{7} \approx 2^{43}. By mounting a brute force attack on each half separately, modern desktop machines can crack alphanumeric LM hashes in a few hours.
LM hash does not include salt, therefore a time-memory trade-off cryptanalysis attack, such as rainbow tables, is also feasible. In 2003, Ophcrack, an implementation of the rainbow table technique, was published. It specifically targets the weaknesses of LM encryption, and includes pre-computed data sufficient to crack virtually all alphanumeric LM hashes in a few seconds. Many cracking tools, e.g. RainbowCrack, L0phtCrack and Cain, now incorporate similar attacks and make cracking of LM hashes trivial. However, because LM hashing is not used for passwords of 15 characters or longer, these are relatively strong.
Well done geezer, I'll get you next time though!:)
Divide that in half again. You can break an 8 character password in to two 4 character passwords and crack them in parallel. This is why it takes longer to break a 7 character password than an 8 character password.
Just last night I installed a Java stack on my jailbroken iPod touch 2G. I got JamVM for a lightweight JVM, Jikes for a compiler, and JDBC drivers/JocStrap for libraries.
The JVM weighs in at around 2MB, and the libraries were about half a meg each, IIRC. JocStrap is described as a Java/Objective C connection library.
So far as JocStrap goes, I haven't had a chance to look at it; not sure if 'connection' means bindings or wrapper classes or what. However, the fact that the JVM is included makes me assume that you run native Java instead of interpreted java bytecode on top of objective-C.
I just found this the other day (I've got a mail server, ipod touch and blackberry storm - this is the only solution that looks like it might harmonize the three), and I think it might do what you want... icing on the cake, FOSS.
Teaser:
Learn About Funambol
Many people want quick and easy access to their email, contacts, calendars, tasks and notes, regardless of where that information is stored. Funambol syncs this data with 1.5 billion mobile devices and with thousands of applications and online services. It doesn't matter if you use Gmail, Yahoo!, AOL, Hotmail, Outlook or Thunderbird, with Funambol, you can sync your email & PIM on many mobile handsets.
Funambol is the leading provider of mobile 2.0 messaging, powered by open source. Funambol solutions include push email for the mass market, mobile backup & PIM sync, device management and a mobile open source platform to mobilize applications and data.
Slashdot Mirror
Parsing error.
Could you rephrase as a car analogy?
I think, looking forward, MS will make the CE kernel a lightweight bootstrap for a .NET JIT. It only benefits them to reduce the attack surface, memory footprint, and number of interfaces they'll have to maintain for backwards compatibility and delegate it to the CLR. Then you've got a sand box that can leak memory (and reclaim it!) all day, that has a single interface to the kernel that needs to be maintained, and as a bonus you don't alienate any developers in the process. The last thing they want is another v[bc]-6 or J# incident.
IIRC, you work on an open source project that deals with operating system internals (was it something to do with emulation?); in your educated opinion, do you think this is likely?
We can do this now.
Drop mail from anything @aol.com. It's a shotgun method for fixing the problem. As such there is collateral damage... but you won't miss the "RE:RE:RE:RE:urban myth" email from Aunt Sally, anyways.
And much the same the other way, eh?
Better than where I work! Our policy is "no blood on the carpet".
OTOH, your contract allows the beating of customers. They've both got their pros and cons, I guess.
Self defense?
No, friend, that was a suicide/homicide. If only more devices would give their PCBs to stop Celine Dion...
Really? Don't leave me hanging.... How do they go about doing this?!
..whether because you think your project will make the world a better place or just cause you think your coding style is gonna get you laid.[...]
So, I take it you're new to software development...
Any thoughts on rims? I thinking gold (plated) spinners are in order...
I'd assume that the context of 'cheap' is different in both instances. On one hand, you want cheap per unit servers; OTOH, you want to buy many cheap units to be able to scale.
Of course, that's just my interpretation...
I have no idea why this is modded funny. The correct moderation for this is +1 "We feel your pain, please revoke the user's privs. Immediately"
Crap. Reading comprehension, FTW!
I need some caffeine, sixty seconds ago.
Care to expand upon that?
Saying that you have a problem with it does nothing for me; someone, without an opinion on the topic, willing to consider both sides of the argument. Bring a bit of signal with that noise, will ya'?
Social!? It's barely civil!
You shut your mouth! You shut your stupid mouth!
[...] Not only that, but it's hitting the market early. AMD had originally planned to introduce this product in the October time frame, but the first spin of Istanbul silicon came back solid, so the firm pulled the launch forward into June. Even with the accelerated schedule, of course, Istanbul comes not a moment too soon, now that Nehalem Xeons are out in the wild.
Does anyone else think that this seems a little convenient? I'm really hoping that they didn't just tone down the testing to make it to market. I'm thinking they'll go to market and then quickly release a new revision to fix the corners that they cut the first time around. I hope I'm wrong, but AMD has been slipping lately.
Any EE's out there know the process well enough to confirm or deny my suspicions?
Poseidon Adventure?
I think that's an emacs thing. :D
Homestead is a 3D real-time network visualizer, displaying hosts & packet traffic. Features: multiple sensor support, gather hostnames & services, configurable subnetwork layout, record/replay packet traffic, filter packets by host, protocol or port.
Yeah, but it only takes one person with access, opportunity, and a death wish to take everyone with them.
Quotith the freakin' wikipedia page:
Although it is based on DES, a well-studied block cipher, the LM hash can easily be cracked due to two weaknesses in its implementation. First, passwords longer than 7 characters are divided into two pieces and each piece is hashed separately. Second, all lower case letters in the password are changed to upper case before the password is hashed. The first weakness allows each half of the password to be attacked separately. While there are 95^{14} \approx 2^{92} different passwords made of up to 14 printable ASCII characters, there would be only 95^{7} \approx 2^{46} different 7 character password pieces using the same character set. Restricting the character set by converting lowercase to uppercase further reduces the number of possibilities for each half to 69^{7} \approx 2^{43}. By mounting a brute force attack on each half separately, modern desktop machines can crack alphanumeric LM hashes in a few hours.
LM hash does not include salt, therefore a time-memory trade-off cryptanalysis attack, such as rainbow tables, is also feasible. In 2003, Ophcrack, an implementation of the rainbow table technique, was published. It specifically targets the weaknesses of LM encryption, and includes pre-computed data sufficient to crack virtually all alphanumeric LM hashes in a few seconds. Many cracking tools, e.g. RainbowCrack, L0phtCrack and Cain, now incorporate similar attacks and make cracking of LM hashes trivial. However, because LM hashing is not used for passwords of 15 characters or longer, these are relatively strong.
Well done geezer, I'll get you next time though! :)
Divide that in half again. You can break an 8 character password in to two 4 character passwords and crack them in parallel. This is why it takes longer to break a 7 character password than an 8 character password.
Just last night I installed a Java stack on my jailbroken iPod touch 2G. I got JamVM for a lightweight JVM, Jikes for a compiler, and JDBC drivers/JocStrap for libraries.
The JVM weighs in at around 2MB, and the libraries were about half a meg each, IIRC. JocStrap is described as a Java/Objective C connection library.
So far as JocStrap goes, I haven't had a chance to look at it; not sure if 'connection' means bindings or wrapper classes or what. However, the fact that the JVM is included makes me assume that you run native Java instead of interpreted java bytecode on top of objective-C.
funambol server
Teaser:
Learn About Funambol
Many people want quick and easy access to their email, contacts, calendars, tasks and notes, regardless of where that information is stored. Funambol syncs this data with 1.5 billion mobile devices and with thousands of applications and online services. It doesn't matter if you use Gmail, Yahoo!, AOL, Hotmail, Outlook or Thunderbird, with Funambol, you can sync your email & PIM on many mobile handsets.
Funambol is the leading provider of mobile 2.0 messaging, powered by open source. Funambol solutions include push email for the mass market, mobile backup & PIM sync, device management and a mobile open source platform to mobilize applications and data.
for the impatient, link to download page
Ref: Kutztown Pennsylvania.
I'm sending this over 10 mbit fiber from the town that costs less than your 4 mbit cable.
Twice.