anemic

As a pricing page its missing the Most Popular! -badge.

It's an amazing find to discover multiple different redacted versions of a single document and to reconstruct the original from these parts.

Very similar to encrypting different data with same key multiple times giving the messages 'depth' that can be exploited.

I tried this a while ago with libbirt-kvm and the most awesome thing was that I could live migrate VMs from AMD to Intel and vice versa. None of the other solutions, like vmware or xen do that, afaik.

On the not so good side is that disk cache needs to be disabled for live migration to work at all. This reduces the iops of the vm by 50-60%.

So you either get high performance or high uptime...

I don't think the market for this is to get the actual original code. It's more like understanding what a particular program does: when you see it on a higher level it's much easier to understand the code than reading raw assembly.

are the facial image and fingerprints only used for background check, are they stored (and for how long) and are they shared with different entities, such as police or foreign governments?

My dad collected some usb memory sticks from a trade show and he tried to empty them for his own use. One of the sticks he could't use: when plugged in, it sent keystrokes <windows key> + r + http://whatevermarketingsite.com + enter.

So it was just a dummy usb hid device that emulates a keyboard. No exploit or anything but a simple marketing gimmick that people take because of 'hey, a free usb stick!'.

Here's some more info: http://blog.opensecurityresearch.com/2012/10/hacking-usb-web...

no, ziggy just acts as a directory of public ip addresses. Once alice and bob know each other's public ip they can start communicating each other. Suppose alice is at A.A.A.A:1234 and bob is at B.B.B.B:5678. Alice sends

A.A.A.A:1234 -> B.B.B.B:5678

and bob simulataneously sends

B.B.B.B:5678 -> A.A.A.A:1234

When the packets arrive to the routers the NAT already has an opposite rule because of the sent packet. As this is UDP there is no SYN-ACK handshake or other state tracking information in the packets and they traverse the NAT.

looking at the file list most of the interesting stuff end with .gpg so if the key is not included it seems like a waste of bandwidth.

I like the fact that it scans a live system and reports back packages and files that are not in packages. This way one can quickly check the functionality of a server and could also be helpful in multitude of other situations such as decomissioning.

As this is currently only SUSE-specific I'd like to see a more general solution that produces a standardized output and this output could then be turned into puppet/chef etc. scripts automatically.

EDIT: blueprint seems to do just that, but the website is not as nice.

First, I think xcubed is right about #1. Not paying taxes should be considered a criminal negligence. All companies should operate within specified rules by the law and if one company does not it gets an unfair advantage over others. As a stakeholder in a company one should learn how to run the daily operations or hire some bookkeeper that can.

The other points (2-3) I don't see any problem as that's how all the companies that I know operate. Everybody sells half-ready products. I would even consider stupid not to do that.

Regarding the employees I think that every employee that joins a company is part of the and the team fails as a one. I have been a part of a failing team and I don't hold the company's owners resposible of my future career. I don't think Enron's owners were very much interested in the re-employment of their staff either.

I was once listening to a lecture by Monty Widenius and he said that statistically an enterpreneur succeeds in the third startup he/she gets going. Failures just teach us how to do things better. A culture where a failure is considered as our only lost chance of success does not lead to anybody succeeding.

In Fujitsu servers there is a remote console but that requires a licence to function. Of course a hacker can acquire (even pay?) for that license and get console access. This leads to leaving the management network unplugged and losing remote reboots and other management features.

I love sandboxie but an open source solution would be really nice to have.

Yes, and at least in Finland the merchant has to inspect the physical card to see that the name on the card matches the buyer's ID. (In practise it seldom happens.)

I like how the meeting minutes(1) from 1978 resemble software development meetings of today. Especially Paul (Laughton) did have the same mentality as programmers today:

  Nobody who has looked into the DOS is sure why bug #2 exists

  Paul felt that bug #3 was trivial and he already knew how to fix 
  it.

  Paul said that he could spend either3 to 4 days documenting the DOS, 
  or he could fix the bugs, and wanted to know which we wanted.

  Paul still expressed some doubt as to what was causing bug #5, and 
  bug #2 was a mystery.

(1)https://s3.amazonaws.com/s3data.computerhistory.org/atchm/do...

This is the thing that scares me the most. If the self driving cars need to cooperate for maximum efficiency what if there are some cars that don't do it and exploit that?

There is a book called Blind Man's Bluff that documents how this started during the cold war by NSA tapping soviet undersea communication cables.

According to the book one of the captured tapping devices is on display in Moscow and on the side it says "Property of the United States Government". No point in hiding it...

http://en.wikipedia.org/wiki/Blind_Man%27s_Bluff:_The_Untold...

any thoughts how you would implement this? To apply the sepia filter to the street view images would double the storage used for all the images, which is huge! Alternatively to apply the sepia filter each time a image is loaded would add a lot of load to the servers, especially if the joke is spread around the world? So some kind of caching would be in place? Or is it done in browser with the flash plugin which would be the most boring option, but also the most plausible... (that would also explain why the webgl version does not work)

The world map is just images at different zoom levels with an algorithm that adds trees, that would not be a problem I guess?

I just love reading ████████ documents. The ████████ parts just keep me guessing

what's in them. I think that

████████████████████████████████████████████████

████████████████████████████████████████████████

████████████████████████████████████████████████

███████████████████████. Would that just make my day!

I tried to look where the claim "Research shows that nearly 70 percent of chimney smoke reenters nearby buildings." comes from as I find it interesting. In the "woodsmoke health effects" paper it references this:

Pierson, W. E., Koenig, J. Q., and Bardana, E. J., 1989. Potential adverse health effects of wood smoke. West J. Med. 151: 339-342.

which is found here: http://www.ncbi.nlm.nih.gov/pmc/articles/PMC1026893/pdf/west...

And it says:

> Also, about 70% of the outdoor wood smoke reenters the house (T. V. Larson, PhD, University of Washington, Department of Civil Engineering, unpublished data).

First, the article is from 1989 and it's not known when the T.V. Larsons data is collected. Also wouldn't for example the density of the houses or the type of the houses and their ventilation and filtering affect this result? How much?

Secondly somehow the original article mentions that the smoke reenters the house, which I understand is the same house with the stove/fireplace, but in the "woodsmoke health effects" paper it has transformed to "can actually reenter the home and neighborhood dwellings"?

I did find the results I got but without any further explanation they are not very useful: http://pastebin.com/WjiZNiSg

But interpreting those results indicates to me that there are possible problems with this platform where f.ex. file copy performance is ~50% faster on 32bit than 64bit.

To me just assuming that there is no difference and go with instinct without anything concrete evidence is the wrong way to go.

you're absolutely correct there. it might be that the performance difference I'm seeing is caused by the hypervisor or something else.

I'm running several debian i386 virtual machines. I don't see a point running 64-bit os if the memory usage stays well below 3G. And last time I ran UnixBench on squeeze i386 was still faster than amd64.

On bare metal it's a different story, though, but I still would think that there are more virtual servers than real ones.

relevant onion article: http://www.theonion.com/articles/metric-system-thriving-in-n...

At around 3:50 we also learn that CERN uses the MULTI PASS system from Fifth Element!

with my pi/raspbmc the 1080p movie playback is indeed smooth but the menus stutter awfully. But the reason for that might be that the menus doesn't fully utilize the opengl es of the pi or something else (bad skin?) so I wouldn't blame the pi yet.

I hope the /root/ refers to the site's root directory and not root user's home directory.

At least this confirms that it's actually running socketstream...

I have one reader connected to my ipad. Got it for free so I had to try it. I have accepted only one payment so far so not much experience about it, but some comments:

For private individuals a facebook account is needed to accept payments.

The legal agreement is a mess, they even warn that your data can be transferred to countries where privacy laws are not in par with european standards and data is stored for 7 years

Location of the transaction is stored and cannot be turned off, it's unclear why this is needed.

They seem to comply with PCI data security standards but are not audited (yet?)

The customer must sign the transaction on the ipad screen with finger (even harder with iphone). it's very hard to check that to the signature on the back of the card. also the customer must type his/her email on the screen if they want a receipt (there is no receipt printer). So each transaction takes a long time.

So it's good for selling at fleamarkets and such but for serious business it's no match for a payment terminal. Also if you don't already own iphone/ipad then it's also more expensive.

Yes, none are show stoppers. Lua suits perfectly for for the use it was designed: small embeddable scripting. I hope no one is writing millions of lines of lua code! For me even small amount just does not "feel right" the way for example ruby does. That's why I've been eagerly waiting for mruby but unfortunately it does not (yet) fill the void.

oh yeah, the array indexing starting with one is the one I forgot from my list!

I'm developing for an arm processor with no floating point support. so it's best to avoid the software fallback at all costs.

I'm aware of luajit but "plain" lua is still fast enough for my uses. FFI is definitely a killer and beats SWIG hands down.

need to upgrade to 5.2 asap...

Just a quick list of annoying things:

  - comments start with --
  - no bitwise operations in language
  - default numeric data type is floating-point. it's possible to change it to
    integer but it raises uncertainty with compatibility of external libraries
  - OOP in lua is quite programmer-specific: everyone seems to have their own
    best practises

Of course lua has good features too, like coroutines and good C API. Squirrel (http://squirrel-lang.org/) also seems like a nicer alternative to lua but it requires a C++ compiler.

IMHO lua's best asset is the small and fast VM. I wish there would be other good, modern languages that target it.