on a web site indeed. I saw the first "private chatrooms" in 1998 based on ugly PHP/js hacks. And it was the pornmaster who showed to me how to do them.
118 karma · joined September 10, 2014
The reason why it was not "pushed" is SUN edited it. It was internally competing with java, like oak that seems interesting too.
The illusion of security given by inputing and multiplying passwords might not beat having a central point of authentication handled by the OS. EDIT: and you have system accountability for free.
User sessions and applications are to be already limited by the OS why redo it?
And like it or not a browser is a millions sloc application that have access to everything potentially. You just trust mozilla, google, apple to not access everything. But have you audited their codebase?
Go on. I am no lemming I will watch you with all the other unicorned lemmings experience the explosion of the IT bubble while I can still adapt with 20 yo technologies.
And most people install firefox/chrome on windows rather than use IE.
Installing Tk/Tcl is easier than installing firefox/IE/chrome. Tk/Tcl does not require a lib to handle inconsistencies between different browsers and different versions of the same browsers (ff).
Btw : Tcl/Tk = 29Mb Firefox = 40Mb Chrome = 52Mb
Memory footprint: Tcl/Tk is low usable in embedded system // most browsers have memory leaks.
Tcl/Tk // browsers:
- Positioning elements: Tk/Tcl 3 geometry managers (grid, packing...) while W3C CSS box model is an inconsitent mess
- Canvas: native // can or cannot be there (old versions) requires js
- Vectorial: Native // SVG
- Async : observers on variable (bind) & is aync by nature // callback in js - Numbers : string coercion is sane // String coercion is inconsistent float by default (crypto does not like float)
- Functional : who cares? btw lists are lists not object
- Scopes : sane vs insane
- Modularity : Supports C binding AND module // $.getScript(url, callback)
- IO: accessing local files is possible // is not
- Widgets: you can make your own & reuse them by design
Tcl/Tk is way easier to learn than angular.
Why angular pop suddenly? Because angular bloated code aims at doing what tcl Tk does natively: makes UI components communicate together... without burning both CPU & RAM
So ... given the level of wtf in web development, tcl/tk seems pretty a smart choice nowadays ... if you care more about coding functionalities that works in a small footprint with less bugs than eye candying.
Edit: Bonus my C+tcl/tk code from 1996 with nice graphs still compile and work in 2016 ... 20 years stability.
Detection is always a business decision between true/false positive/negative, the costs of sensitivity that is non linear per stage (breakthrough are non predictable) and the costs of stealth.
And since science have improved at increasing detection by using distributed measures coupled with active correction the detection is getting easier and cheaper.
There is a pace at which technology are cheap and efficient. And money (especially when GPB is not growing) is really the nerve of war. Technologies should be used opportunistically according to their costs that can change faster than the design/delivery process.
The blindness on the cost efficiency and long term bets is taxing a lot the normal economy that in turns slow down and has difficulties feeding back military with useful cheap innovative realiable real innovations. We cannot predict the future. Especially when it comes to innovation.
And look: we rely on the best of our technology to build weapons, but these technologies don't seem to deliver.
Maybe the F35 story is an allegory of how our economies are in bad shape. And maybe the greatest military decision would be to diminish the defense/NASA budgets and fix the market and society.
PS I insist that these software problems are not unique to USA. Rafale, A400M, Typhoon, probably russian planes have been suffering "outstanding delays" & "budget slip" and software are often involved.
I do not think this is only a military problem. Something is rotten in the R&D department. Maybe the way we organize ourselves.
It is as smart as saying that by using a hammer heavy enough you can make a cube fit in a triangle. It is possible, but defeating the purpose of consistent API.
If we revamped the tk default look and coded directly in tcl/tk "apps" would more secure by default, less costly and doing the job a tad more correctly.
Instead of using UDP like stream over HTTP (webosckets) we could even use UDP or RTP or whatever native protocol that does the job. Even TCP. We could actually do the application without frameworks, without all these stacks, and with far less interoperability headaches (like testing for all browsers) and less vulnerabilities.
Not to say js is insane.
What is the competitive advantage for the web stack nowadays compared to tcl/tk after all?
You can't 'ls' your network connections.
And for tricky API that does not match the filesystem view we have the fnctls.
And I cannot find the UK articles from 1 year ago saying the exact problem with typhoon and why UK wanted to replace them with F35. I remembered something about costs, availability attrition and budget. Like typhoon were to expensive and that 24/7 battle readiness was kind of a joke given the budget.
I was in the french navy for my conscription. The aeronaval would have preferred F16 over rafale ~2000 for exactly this: 1 rafale = 10 F16 (at the time) and OPEX of rafale >> F16. And they could have had another diesel carrier thus france could have had a fully usable aeronaval task force for the same price.
Anyway: cellular grids where not that developed yet, but efficient distributed radar were. And every "refinment" is kind of another order of magnitude in the equation. Harder to measure, harder to counter, harder to build but it can be anticipated : every generations are almost an order of magnitude more expensive.
Can you see a pattern? Stealth like aircraft (Typhoon, Rafale, F35, F22) are hard to sell because they cost a lot due to complexity (in software notably). Thus government HAVE to subsidize them ...
Thus, people try to make them polyvalent BY DESIGN (waterfall model) and like any jack of all trades they tend to master none of them and inflates OPEX and KPEX with erosion of the benefits and a LONG development time that make them likely to be obsolete when delivered.
A lot can be said on the history of aircraft industry. I dare say we lost the art of being smart that requires some fast feedback loops (agile but correctly done) with minimal correct design (waterfall but correctly done) and cost efficiency.
That is the difference between the spitfire and the Me109.
Can a general purpose warbird be built during peace time?
I do not think so. They are like hammers built without knowing which nail will need to be hammered or may be screwed.
But simple cells (F4, mirage, F16) with awesome lines (ok, I am found of nice looking planes so it is not serious) that can sustain modifications (like the spitfire) have proven to be good planes ... on the long run when you have good workers, engineers, (tests) pilots, industrial able to make them evolve in a reasonable time and price constraint.
The quality of out warplanes reflect the actual problem with our civil economy : Quality and costs do not matter when industries relies on finance and not production for making benefits.
Bonus : This guy was amazing https://en.wikipedia.org/wiki/Jeffrey_Quill <== tests pilots. Kind of a badass QA man like most of the tests pilots in great planes history.
http://nationalinterest.org/blog/the-buzz/russias-su-35-figh... Air Force F-16s are not currently fitted with an AESA and are at a severe disadvantage versus the Su-35 or other advanced Flanker derivatives.
Modern F16 inferior to Mig29 ? Very likely. I don't have the time to search for the article about it, but it is a fact acknowledged by benchmarks that US air planes have been slowly gaining mass and loosing maneuverability since decades and they re-evaluated the F16 performance recently. Even F16 vs "old F16".
Anyway. Mig29 Su30 are pretty cheap compared to US air planes and roughly close in terms of performance. Maybe a 1v1 scenario favors F16. But in $v$ you can align more Su/Mig per F16. And surviving a 1v1 situation is easier than 3v1.
Have you ever seen a diffraction pattern caused by any discontinuities?
I have seen thousands of them ... the fourier transform of any discrete functions makes very nice detectable pattern that says : "NOT NATURAL". And that what radars are trained for spotting.
And the more symmetries the more the pattern reinforce itself saying: human made technology spotted. (Curie principle : symmetry in causes get propagated in the effects)
Have you seen a lot of natural object that are both discontinuous and symmetric and the size of a plane?
EDIT : I forgot to explain the relationship between convolution of signals and FT but I guess everyone is educated enough to know that convolution of signal is the base of radar detection and that Fourier transform are related to convolution.
Remember with turbine powered bombers the flight takes 5 hours crossing the aerial zone of at least 5 NATO countries with modern aircraft and radars. And we know it was loaded with nuclear weapons, because of radioactivity.
http://www.theguardian.com/politics/2014/dec/26/putin-raf-ty... The Typhoon is unable to engage the enemy said by David Cameron to pose the biggest threat to Britain’s security. And it will not be able to do so until 2019 at the earliest.
In fact, maybe the paradigm of airplanes is outdated since USSR giving cheap missiles and crude radar to the viet kong have proven that in terms of costs planes can be shot down with a 1/100 ratio in terms of costs. Plus aerian superiority paradigm (a WWII idea) works against developed countries relying on a dense industrial country. But, it does not work against people relying on AK47 and propane bottles coupled with a simple radio system.
Money is the nerve of war.
Angles: Sorry I can't find the article explaining how the DOD imposed using a software for B2 (and not F35) that limited the possibility to make nice curbs.
However just look at the plane. And remember any physics lessons you have been taught : sharp angles make discontinuities. Discontinuities are easy to spot.
Stealth anyway is a scam.
B2 were spotted by US radars technologies bought by french since 1991 with networked radar (thomson). Validated during 1st iraki war while radar operator could put a name on the weired stuff they were seeing on screen they already saw flying over European space without authorization. (Spying allies is really not nice)
You can evade one radar by deflecting signal. But if in a network of radar the signal is reintercepted, then it is bad for the plane.
Also since 2000 it has been proven that the flight of a stealth plane above a normal "cellular phone grid" can be detected by the additional energy that it bounces back.
Still with networked radar, stealth planes can make "holes" of expected energy. (ionosphere does reflect a little part of energy, and stealth fighter makes "shadows/holes") it may require bigger wavelength though.
With IR detection, plane still leaves energy traces (like air friction).
Stealthiness only value is in plane vs plane fight to diminish the electronic signature, thus a frontal stealth is more than enough.
Stealth is a costly arm race. That is exactly what killed USSR that tried to fight USA IDS program (that was a scam).
Strategic thinking must address the costs problems.
- using guns could cause fire ... gun delivery was said rescheduled for 2019;
- senate asked for an evaluation of A10 vs F35 because A10 was to be retired and replaced by the F35 the marines where not eager for this;
- storm hit could cause fire on board;
- budget was drifting like hell;
- the 800K$ helmet full of software had a lot of malfunctioning...
And recently there is no more news.
Oh yes.
Canada pulled out. Australia is thinking the same.
There is a new problem in the tank and ...
https://www.rt.com/business/320487-f35-lockheed-martin-penta...
Heads begin to roll.
But what? LM was smart : every production units has been given to enough different states and organizations not to bribe the MPs (oh no) but to improve efficiency.
Airbus had trouble coordinating up to 4 countries and nearly died of it, 40+ states is logically way more complex.
EDIT : Did I said that the modern version F16 with all its "modern electronic warfare" get beaten bad by its 40 yo counterpart? USA industry is declining bad. The IT bubble has even contaminated the military production.
They even flew near UK exactly one year ago with a turbine powered bomber from the 50s and a nuke inside and no planes intercepted it during its 5 hours flight over "modern air farce" doted countries.
Notably the UK are lacking interceptors because they planned to replace theirs with the F35.... and the F35 is not there.
Does not it sound ridiculous?
And the stealth technology are nowhere to be stealth for long. It leaves heat signature, signal distortions.
And why do US stealth planes have so much sharp angles when we all know it is bad for being stealth?
Because their software don't let them do curbs...
To avoid software bugs remove software from where it is not useful
TZ are politics and politic is very bad at making stuff engineerable. Politics are inconsistent, unstable and lack of rigor in propagating the information to the coders.
The TZ definitions are handled by clerks that writes an XML files manually that are embedded in your libs and that no one cares to update.
TZ are not versioned. So if you want to know what was the local time 12years ago in any place of the world : good luck.
But international exchange are bound to delays workhours and SLA requiring delays to be measurable ... With arbitrary changes (EST shit).
Timezones are broken by design and all our applications too.
The only way to solve the problem is to forbid politics to come anywhere near science, history and standardization of measurement. Corporation don't do any better. I abide by International System (metric) and the idea that there should be a monotonic non disrupted absolute time whose origin IS NOT the birth of Christ but since when we are able to have continuous "rigorous" measurement of time.
Which is exactly the opposite of what people calls for.
The begining of the year should be the aphelia (3~4 jan) and not some religious bat shit conventions. Noon should be when the sun is at its top. And 13 month of 28 days (+intercalar days) would make our lives easier.
Time as a political and religious construct is shit.
https://fr.wikipedia.org/wiki/Tribunal_de_commerce_%28France...
Basically it is the most influential traders from your vicinity that decides how to settle your dispute.
Being judge and stake holder, what a nice idea of the independence of the justice. Bankruptcy in our country is being fed to vultures stripping you down to the core and making money out of your misery. Business in France requires way more bigger balls than in USA.
This joke is around untouched since 500 years. 2 times older than USA constitution. And socialist and liberal alike don't want to touch that.
EDIT: France is traditionally built on big corporations. Consular justice favors the most influential companies, that are often "represented" at the national assembly or founding politics. Not all "national" companies are equal. My great great grandfather was was shamed publicly in 1900 for having one of his employee presenting himself and him giving 5francs to the "société pour l'amitié franco allemande" and considered a dirty "fritz" working for the schleues. Big corporations are dynasty built (like Gates fortune and other US big corporations) but the catholic french long lineage dynasties are a tad more equal than the others.
Irony part of my family was protestant and being sacked from france in 1750. They tried to come back after some persecutions, and they almost all fled to the USA after 1900. Basically my family is consistently emigrating since 350 years.
So I am too like my family before a refugee of some kind and we have a tradition to build back our fortune. But actual immigration laws are a pain in the ass in every countries for business men with nothing but "know how" and no capitals. Emigrants are more and more second rank citizens nowadays in every countries.
I do not. It has a cost. If you do not check you have the perfect tool for a MITM.
Then is https more expensive than http?
Of course you idiot. Have you never seen your CPU burn under https? With TLS the load is on the first connection. Meaning it is around x% (x said to be 1 by google) for long sessions IF and only IF you have a costly engineer optimizing your stack. And I know by experience that google cipher suite are sometimes close to be ridicusly weak in order to achieve this. (I saw an RC4 while playing with gmail). And that is servers side. Add the client side.
So what about no "engineer". What about an SSL2.0 cipher suite having RC4 MD5 ... and all the default weak settings recommended you can see on the internet?
Well, the illusion of security is no security. the S of https is for security. Having a tag saying I am secure if any government or criminal organisation can break your ciphering in a matter of seconds is no actual security. And it defeats the purpose of TRUST granted by security.
Then way pay the extra x% of https in this case?
Oh! I just read your last paragraph.
Can someone explain to this person why HTTPS cannot be cached? Oh! It can it : has been sold to Tunisia by MS in 2007, France to lybia circa 2005, China is doing it ... for intercepting and deciphering citizens conversation.
Caching HTTPS is basically doing a Man In The Middle attack. It requires a "joker" certificate nicely given by a root authority. Doing so (as microsoft did) normaly induce "the death penalty" of security firms. MS is alive, hence anyway we cannot trust https ... since snowden revelations.
The proxy would still have to do the handshake anyway to have the https => cpu load.
The premise of security are trust. https nowadays is a costly joke.
For the record operators especially when IP routing goes through shared tunnel of collects (3G) have been traditionnaly using a protocol called WCCP to cache transparently your http content. And 4G is deployed substantially in USA & wealthy European countries, but not everywhere.
So even if you don't have a proxy your operator may.
And if you think all USA is at 1Mb/sec for 50$/months read this http://seclists.org/nanog/2015/Oct/337
Last and least : I worked in an ISP 10 years ago. One of the datacenter was 5% of france global traffic, the electricity used was as much as a city of 40K inhabitants.
It makes internet as an industry the biggest user of fossil energies. According to my approximation we should be around 2%[+1%?] of the global national consumption. Very near transport industry (plane + trucks). And https will not help.
So I see no other arguments for https than being sheeps.
And competence in terms of spending is way more than the certificate.
Outsourcing security without knowledge is praying for being abused.
So sometimes you are better in terms of costs and efficiency without.
And HTTPS cost more for rural users because you cannot cache SSL contents.
So in africa, alaska, yukon, peta ouchnok people with small providers have to pay a tax.
And it increases also the 95th percentile.
So basically everybody except google will pay for this but it will impact more the poorest content provider & users.
Not everything on the internet is privacy.
And even with https any proxy (WCCP) already knows which URL I went to.
When people deal with live samples more ethic and certifications than for IT scaming techs is expected by the stake holders .
And the cohorts of bad news on theranos, the misdoings and also the handling of PR with spin doctors does not inspire "an ethical empathy" with theranos.
VC funded startups really don't seem to be able to have any ethic. They look like psychopaths right now that use their so called hard work as an excuse for their lack in the fundamental of trustable business and respect of consumers.
Vae Victis.
Theranos may pay for a little more than their own share of wrongdoings. They may pay a tad for a broader distrust of so called "new tech" scams also known as unicorns.
The bigger you try to manipulate opinions, the more the opinion may resent you.
For now I have a solid hammer against them, I am waiting for sharp factual nails to seal their coffin.
Why hurry? It is clear they cheated the wrong people (investors) and investors are gonna provide us the nails. Polished, sharp, hurtful provided by audits and leaks.
Let's get some popcorn and tomatoes and watch the world of some selfish aristocrats burn.
Why would money from libraries gutenberg project, NGOs informations go to more expansive OPEX for web hosting when an information is clearly designed and OK to be public?
And does not require adds or payment.
Google has some godwin point very authoritative views on the internet and the protocols that make me dislike them.
Especially that their business model it is to not pay transit for distributing their contents. Basically every fucking internet users pay the 95th percentile transit to google products even if they don't watch videos on youtube, don't use gmail or else.
These people are like ... catholic priests. Do as I say, not as I act and be good members of the community.
Not to mention Biot Savart Law that says a long wire generates B ~= I/r
So where the electric current on average nullifies the Magnetic field in AC (other a period), on DC you would have to build with a constant F = qv vect I/r which means a constant magnetic field appearing and inducing resilient constant forces for every other charges in movement. 1/r decrease way less than 1/r² // 1/r3. That is what CE norms on electro pollution wants to avoid. A strong electromagnetical residual signal that can interfere with other electromagnetic devices.
I understand the concerns of persons that never had to learn electricity about the complexity of using Z (impedance) other R (resistance). But Fresnel law makes AC quite easy to grok.
In some countries it is accepted since a long time that the bug in AC is the side effect of loosing the phase (hence introducing peaks up/down phase). That is the reason why companies have to pay not only for the whattage but also for the disruption of phase. Some companies even get discount to regulate the phases (like train companies that uses a lot of electricity in peak fashion at trains start/stop and can accumulate energy selectively to charge huge capacitors and use them to correct a shift of phase).
I sometimes look at the electric cable in my cities. The way they are plugged anarchically and the transformers looking like not maintained, the electric boards with expensive gross protection, the corrosion at the connection points (yes surface effect with rust and water sure it does do weired loss) the fuse used in electricity/electronic devices .... And I feel like I was in Cuba in the 1986 in the middle of embargo.
I don't live in Cuba, this I see in Montréal, SF, miami ...
In supposed developed countries and I wonder if my eyes telling me it is broche à foin are right or my brain listening to all the assertive geeks and citizens telling me the opposite.
You know what, I do not know. I still have a strong feeling technology on the new continent is not as good as it is publicized.
The short list/affacturation scam. Software can only support safely at most 10 providers ... for RA.. facturing ... limitations.
Thus I had between 1 and 4 mans in the middle for the purpose of "factoring, risks assessments" and shits.
I usually was paid 300€ to 400€ / days when customers were billed between 1000€ and more. Each companies adding delays and free to use and recycle my specs, my codes, my works to compete against me next time. Added value : negative.
Have you ever been 38 yo, back at your mum's place, honoring a contract and eating ramen while waiting 18 months for the magic of "affacturation" to work and discovering that the men in the middle are now making money from YOUR creation ?
Fuck rotten so called capitalism.
Only the kids born rich gets the money and they scam people like me to have the job done.
This business is very close to both scam and extortion.
Made my startup worked hard. Got contracts. Customers forgot to pay. It sucked.
And in my country it was normal. It was not Africa. It was France.
Big corporations do whatever the fuck want even if it is illegal. Trades dispute are regulated by "peers" tribunal dating from middle age that are crooked.
And newspapers, teachers and politics that never had a job were pointing fingers randomly at problems.
Why would we need https?
Who is gonna tamper the "advertisement less" schedules of the swimming pool from rue st Hubert (montréal)? Why would they?
Why would the swimming pool care to pay X$/month for this? And why could I care that anyone knows I am looking at the opening and closing of my swimming pool?
I am an old man, I don't watch porn or pick up on girls anymore or think of revolutions.
I clearly need no https ... Why should I pay directly or indirectly for it?
Sound on linux is a mess. And pulse audio is vastly blamed for it. Complex circonvoluted architecture that overpromised and under delivered..
The guy loves to brag about how he is the messiah of a problem and will fixt it, make galaxy like software that are unstable and leave a mess after his doing saying my job is done, let's work on another project where my genius is needed.
But, after utterly messing up once, notably at the (lack of) design level, he has been entrusted to no overpromise again and make the ultimate revolution for the init process. A lot of coders did not believe in his repentance for the mess in pulse audio : he may be as arrogant as linus torvalds he is as smart and a good coder as rasmus lerdorf.
The PID1 on linux is now known as a solar system of processes with nice chaotic trajectories and astronomers are seriously planning to use systemd alone as a nth body interaction simulator.. unexpected .
Maybe the culprits since the beginning are the adult being more and more stupid and having their IQ declining and blaming it on the youth?
Isn't searching for a third part accidental cause to an essential problem already a proof that IQ decline faster with responsibilities?