2517 posts • joined 12 Oct 2007
Re: Race conditions?
The concept you're talking about exists everywhere (AFAIK), and it's called "pre-authorization". It's specifically used in CCs for the reason you've mentioned: open vouchers at hotels, and car rentals will do it as well.
For anything that makes us finally move off of the crappy x86 arch. If the car industry were like the PC one, we'd all still be driving VW Beetles, Kombis & Trabants.
Re: Well done that man!
So, we have a Portal reference and an H2G2 ref as well! Nice!
ooooh I'm not the only one thinking that the Space Core would definitely hitch a ride on that capsule...
You say CGN like something in the future...
Most cable co's over here (Mexico) have ALWAYS done CGN. Cablemodems are infamous over here for giving the 10.x.x.x addys, in so much that I learned about NAT because of this practice long before I ever even heard the term NAT, or the need for something like this.
Hopefully, IPv6 will kill these shady practices...
You're not the only one not on the iOS/Android bandwagon
The main reason I have stuck with Blackberry is precisely this: I don't trust either platform. Ok, that and BBM, and BB's security model/encrypted FS & stuff.
I have no guarantees that Google's Android won't slurp that data, and iOS well ... I don't like walled gardens.
WebOS is dead, though it might come back.
Nokia killed Symbian and all its alternate mobile OSes.
And I still don't like MS.
It seems that my next smartphone choice is going to be very, very hard.
Chernobyl != Fukushima
Chernobyl has left large areas of land uninhabitable for the next 1000 years or so. Fukushima hasn't, most of the estimates are "only" for 20 years or so. It isn't harmless, but it isn't "the next Chernobyl" either.
It is relevant that both Chernobyl and Fukushima were byproducts of bad management, and in Chernobyl's case it was reckless abuse of an unsafe reactor type (RBMK). On Fukushima, it was TEPCO's neglect to tsunami-proof their backup systems....
Re: Absolutely Wrong
"Anyone who disputes this should look at the state of smartphones prior to the launch of the iPhone."
Lots of Symbian smartphones that did a lot of awesome shit. As Nokia hadn't borged Symbian, most smartphone manufacturers embraced this and were working on a standard UI to be used on the whole platform (UIQ) so they did have something to aim for.
WinMo sucked, but then again WinMo always sucked donkey balls.
RIM had good security, but their specs sucked and the OS would start getting the "infinite clock of DOOM" issues when the shared memory ran out (which is sadly, *still* common on most BBs due to stupidly limited shared memory on the BBs). The first OS with decent features was 4.5, though I'd say that 6 would be the first one that actually looks nice enough to compete with the rest.
Maemo was nice.
Didn't even know about Android back then.
The iPhone killed most of these, so now we have to choose between secure-but-clunky-BB, grab-your-data-Android, or "my way or the highway" iOS. Neither looks pleasant. The Smartphone market looks uglier than pre-iPhone.
Oh so very true. The first gen iPhone in fact would actually fall into a feature phone category before the 3G's release. No apps aside from the ones given to you by Apple. In fact, probably worse than feature phones, as these can have third-party apps installed while the original iPhone couldn't.
Now I'm off to the obligatory Two Minutes of Hate against RFC 2663.
ICANN has always been at war with Eastasia.
The libel laws are broken
as demonstrated by that famous #superinjunction TT from last year. Jimbo is right on this one.
But he also fails to see stuff like the real-life H2G2, and that the Wikipedia *itself* is based on D. Adams' "Hitchhiker's Guide to the Galaxy" concept. Remember one of the reasons it sold better than the Encyclopaedia Galactica? ;)
Hollande won the elections, which means a Left-leaning party (Socialists) are now in power. Left-leaning parties are generally against SOPA/Hadopi/Sinde/ACTA-style laws, so I wouldn't be surprised if the entire law were to be taken down by the current French government.
On his defense
Starhawk looks interesting. The rest are meh, especially the ones that look like "AAA" titles (Spiderman! Olympics!).
Oh well, back to Assassin's Creed then.
Re: A sane
"Gmail, Hotmail, Flickr, online VMs for testing the list goes on. People are already using online services for many things.
Woz is old school, he's an electronics engineer and hardware hacker. Why does his opinion count in the world of software and online communications?"
Wait till someone hacks into a bank email account outsourced into Gmail. Given the stuff stored in bank employee e-mails, it's bound to be a blast!
Security in the cloud (or insecurity) is something that should be taken into account, but in a lot of cases, isn't. And it isn't like data loss or hacks haven't happened:
- MobileMe wiping iDevices clean if you cancelled your MobileMe trial but failed to unconfigure MobileMe on the iDevice.
- the Danger SideKick getting mass amnesia due to Oracle RAC replication corruption.
- The Amazon/iDevice hack mentioned in the same article.
Ah, so that was it
That explains the "Guru Meditation" I got this morning while searching some stuff in Wikipedia.
I'd like to point out that I distrust anything that smells like DES or uses DES at any point. That one has been cracked since the 20th century, I even distrust 3DES for this reason. Its only a matter of time that someone finds how to crack 3DES based on the DES crack.
Also, anything with "MS" in the name is usually a half-assed security implementation, and this is proof of it.
Re: So they didn't create the name or symbolism...
Given how many dudes in Mexico are wearing Anon paraphernalia (ie Guy Fawkes masks, which are trademarked for other reasons) but aren't actually part of the Anonymous HC group, I doubt that would work.
Unless the Apple troll patents get the S3 banned in Europe. The snarkiness in most of the commenters in here is lampshading this, that the iPhones are up in the market because their competitors are suddenly banned based on stupid patents.
"They've designed a quite secure mobile ecosystem from day-one."
Nope, the suff they're announcing is new; full-device crypto since 2009, but the iThingys have been out there for longer than that.
There's another platform that *did* get built with security from the ground up, and it ain't Apple, it's BB. If Apple is going to get that distinctive, maybe Symbian should deserve is as well, even if they added it later?
Only an iZombie...
Only an iZombie would think that Android is the only other smartphone platform out there. Full device encryption on Blackberry predates both of those, and has been built with security from the ground up sonce day one.
Which was years before either platform was even in the drawing board.
Maybe that's why BB has FIPS certification and the iSlab doesn't ... Those certs take years to get...
The former Sun employees were relegated to second-class citizens in Oracle. Quite a lot of them got tired of getting pushed aside and threw the towel. You'll find quite a bunch of consultants out there that have Sun Microsystems in their CV...
In fact, any "favoured nation" contract should be deemed illegal anywhere; it's a nice obscuring way to prop up a monopoly.
Re: Actually it's true
Blackberry has always been Java; the BB stack is an extension of J2ME. It's part of what made it non-sucky. :)
Re: another PS3?
It ain't the PS3 dragging down your games... it's the xbox360. Games taking full advantage of the PS3's arch aren't looking that outdated...
Re: Public Recognition
Maybe the public perception on CompSci and math folks would be more appreciative if they knew that thanks to those 'eggheads' the Allies had much less casualties than they would've had if GCHQ hadn't been able to read the Wehrmacht 'secure' comms.
But the real reason would've been that they didn't want the world+dog to know they had cracked Enigma; instead they gave away Enigma machines to the Commonwealth countries, so they would be able to read their stuff. Also, the Enigma itself came to be after the Germans' previous cypher was directly involved with a real bad case of pwnage: the Mexico City / Zimmerman telegram. When the fact that GCHQ had cracked their cypher went public, the German gov't took Arthur Scherbius seriously with his newfangled crypto machine...
Re: In congratulation I would like to say
Ah, the Enigma Cypher. Now all I need is one of Turing's bombes to read your message... ;)
Ayn Rand called, Figgus
She wants her arguments back.
You got it wrong?
You realize that the problem isn't really the copyright infringement, but that FunnyJunk's owner is suing Inman for defamation?
Inman has stated he could care less about the copyright infringement. But what really ticks him off is the frivolous lawsuit he's been served. If you are going to criticize the guy, do it on grounds that he shouldn't just ignore that lawsuit!
@Andrew Jones 2
You didn't count on Andrew Orlowski being the first one getting this story. The irony is that the problem *isn't* the DMCA. The real problem is that FunnyJunk is pulling off a frivolous lawsuit; that the site is using the demanded's content on its site is just adding insult to injury.
Its probably the real-world case of that urban legend where a robber sues the home owner because he got injured while breaking in to rob his house.
Re: 'A popular internet cartoonist'
Oh come on, you haven't? You must've seen at least the "What it means to be an Apple User", or the also popular one explaining why so many girls like Twilight.
Maybe not XKCD-popular, but some of his stuff is pretty known everywhere...
Looks like I'm not the only one complaining about this, and I *work* as an IT Security Consultant. In fact, I recommend against having retarded password policies that encourage bad practices, like the ones having corny restrictions like "password must have 4 different letters not swapped more than 3 times with the previous password, not look alike when crosseyed to your last 7 passwords" and similar stuff. The zillion password problem should be solved for a large organization using LDAP and syncing that to the oh-so-awful AD. But few to none companies do that, so it gets annoying...
Ayn Rand called. She wants her arguments back.
The day BlackBerry goes down
... is the day I'm switching back to feature phones. None of the options left are secure enough to trust my mobile stuff on it. Symbian? Dead, thanks to MS' mole. Android? It's got Google's info scraper. iOS? No walled gardens, thank you very much. WebOS? Killed by HP.
We really need a decent option, and if we lose BB, there's nothing left.
a 2011 SCOTUS decision, backed by that infamous Scalia guy, allowing companies to force customers into opting for arbitration instead of class-action. Probably the closest thing to a Dredd Scott ruling in the 21st century...
Someone will later botch the Google search and we'll get to see the UN Spacy logo the next time the BBC talks about the UN...
Don't all US companies simply grab the USD price tag, and swap the $ for an £ or an € and call it a day? Switching prices to EUR should be a net *drop* in product prices!
"Stealing" and calling this guy a thief is a bit harsh on the guy. A lot of this kit is usually decomissioned and thrown away to the bin (or to recycling centers) despite being in perfect working order. This bloke saw an opportunity and nicked the equipment to get a profit. While it is dishonest to nick/profit on company stuff, it isn't quite like stealing brand-new equipment. Most of the stuff had been already written off as a loss or as having chump change value, which even the judge pointed out.
Company garbage products is a lot more common than you might think of. We once built an entire server out of scrap parts in the office "junkyard"!
"Doesn't explain how it'' be propelled though."
Easy, slap a couple of VASIMRs on the nacelles! No warp drive, but at least we could get impulse power!
The fun thing on the nuke-powered Enterprise is that the design can actually harbor a nuclear reactor safely. Put it where the "warp core" would usually be; if it threatens to melt down, just do the separation thingy done in Star Trek Generations. Ta-da!
Set up an LDAP server in said separate box. Make the app auth against that, and set up all lockout policies on the LDAP server.
Poof! Done! Easy as cake.
There is a use, kinda.
It's useful for mobile banking apps; the seed will be encrypted using a key derived by a PIN given by the user. On a phone, it's harder to get malware if you're using a secure mobile OS, especially one that's got FIPS 140-2 lvl 2 certification.
But on Windows? You deserve to have your token pwned. Bad idea! Bad!
I suppose it is easier to encode an 1/0 value that survives random mutations than trying to do more complex data on that. Every time a cell reproduces, there's a probability that mutation will happen. These boffins were able to make said value survive these mutations. That's a pretty good achievement for them...
I had the distinct idea that this was an id job. Looks like it was outsourced then ....
Team Fortress originated as a Quake1 mod. CTF started the whole modding craze on Quake1, but TF was probably the magnum opus of Q1 mods! So much that they actually managed to make up a standalone game out of that mod :)
Who's this Florian Mueller guy? No, really. Never heard of him before, yet it seems he has some infamy attached to him....
Re: I like how in China...
Asian countries actually value good grades instead of rooting for the dumb sports dudes. Check out Jackie Chan's comments on bullying; in a stunning reversal of what happens in the average US school, you only get bullied around if you are a good-for-nothing kid. That is, the average US bully would actually find himself being bullied by *the rest of the school* if he were in a country like China.
I know they suck on other stuff like censorship, but at least their educational values seem to be right on.
Lots of reasons to love and hate Sony.
As Captain Underpants said, Bad Sony has been on the rise and the general public has noticed it. 12 years ago, my parents' home was a 100% Sony shop: Sony Stereo, Sony CD Player, Sony TV, Sony VCR, Playstation, my (still working) Walkman. Currently my home has 2 PS3s (which I'll explain later), the aforementioned stereo which I rescued from my mom's attic, a Walkman, and my probably still functional SE W300i I used back in 2007.
Sony lost the hardware edge, and then went on being dicks on the whole PS3 OtherOS issue. I was bitten by their OtherOS axing; I refused to dole out money for a new PS3 so I remained offline until I found a compromise option: buying a phat PS3 with the BC support and updating *that* one to the OtherOS-killing Firmware. They turned from the freedom-fighting Sony that fought the MAFIAA on fair use rights for VCRs to the one installing rootkits on PCs and going after people trying to re-enable OtherOS instead of simply switching OtherOS back on. Probably the only good thing to come in recent years besides the PS3 would be the BD standard, which has been superior to HDDVD since forever, and unencumbered by MS crappy tech.
Maybe Sony should get rid of its Music branch and get back to treating well their customers and doing awesome consumer products. It seems the Media stuff is the root of all Sony's evil...
Re: Storing IPs
I present to you, the 'inet' datatype in PostgreSQL. Fully IPv6 compatible.
Nice to find out that my age-old log analytics software I developed waaay back in 2006 will still work after we're all using IPv6.
NAT breaks a lot of shit; the reason everything hasn't broken down yet is because a lot of current applications have the patchwork to wade through the problems caused by NAT. What is really happening is that NAT endpoints are processing a lot of crap they wouldn't usually be doing, while building up a generation of IT folks that think NAT = security. It isn't. If your firewall is badly configured, its just a matter of time before someone manages to get traffic routed *into* your NATting device and you'll be screwed.
NAT is also causing problems in other areas; some residential ISPs now give you a 10.0.0.0/8 NATted IP, and will charge 10x or 100x the regular cost for your broadband if you want the "privilege" of having a publicly routeable IP. This practice will increase, pimping off power users until IPv6 gets fully deployed. Hopefully, the fallacy of NAT will die by then. Now, if the site-scope addy space were to be re-implemented, that would be nice...
Andrew Ryan's dream lives on
- Updated Zucker punched: Google gobbles Facebook-wooed Titan Aerospace
- Elon Musk's LEAKY THRUSTER gas stalls Space Station supply run
- Windows 8.1, which you probably haven't upgraded to yet, ALREADY OBSOLETE
- FOUR DAYS: That's how long it took to crack Galaxy S5 fingerscanner
- VMware reveals 27-patch Heartbleed fix plan