Copyright Office, EFF wrestle with Kafkaesque royalty issue (12)
share
digg
by
nate@arstechnica.com (Nate Anderson) (242)
on
Ars Technica (1035)
6 days, 15 hours
ago
permalink
A consortium of consumer groups weighs in with the Copyright Office on the thorny question of buffer copies. Do music services need to license song copies stored in RAM on the server and client side?Read More...
-
Denny said:
Eventually they'll want me to buy a license for the music stored in my speaker cables.
-
GG said:
You can thank World of Warcraft for inspiring lawyers to even THINK about this.
MSI repells reporter with armed response team (1)
share
digg
Apple may be working with AT&T on iPhone tethering plan (7)
share
digg
on
AppleInsider (65)
6 days, 19 hours
ago
permalink
Apple is discussing with U.S. wireless carrier AT&T the possibility of offering iPhone 3G users the option to purchase an additional data plan that would allow the handset's 3G connection to be shared with notebook computers. A $10 application ...
They Always Look So Happy in the Commercials (2)
share
digg
by
Sarah (61)
on
Sarah and the Goon Squad (4)
6 days, 22 hours
ago
permalink
I don’t know why the people baking cookies with their kids on TV always look so happy. I thought it would be a good rainy day activity yesterday so The Goon Squad and I decided to make cookies. Well, technically we decided to make cupcakes, but I only had two eggs and the box recipe called for three eggs. And my neighbors weren’t home. And I had a package of sugar cookie mix, so cookies ...
Excessive IP protection causes economic gridlock, says expert (1)
share
digg
on
The Register (100)
6 days, 22 hours
ago
permalink
Too much protection = lack of innovation Intellectual property laws which were designed to protect inventors are actually stifling innovation, according to a leading US law academic.…
Judge: 1st Amendment allows posting SSNs of state officials (23)
share
digg
by
leex1008@umn.edu (Timothy B. Lee) (7)
on
Ars Technica (1035)
6 days, 22 hours
ago
permalink
A judge has ruled that a Virginia woman may continue to publish the Social Security numbers of public officials on her website as a protest against the Virginia government's failure to redact Social Security from its own public records.Read More...
BBEdit 9 (2)
share
digg
on
Gus's weblog, adventures in Flying Meat. (2)
1 week
ago
permalink
BBEdit 9 is out. It doesn't suck. One new cool feature is the Scratchpad, which is just a handy document that's always around and you don't have to worry about having to save and such. Here's a quick python / applescript tool to pipe text from the shell to this window: #!/usr/bin/python import sys, os open('/tmp/scratchpad.bbedit', 'w').write(sys.stdin.read()) script = '''tell application "BBEdit" set the contents of the scratchpad window to read (POSIX file "/tmp/scratchpad.bbedit" as ...
Protecting Your Cookies: HttpOnly (102)
share
digg
by
Jeff Atwood (128)
on
Coding Horror (304)
1 week
ago
permalink
So I have this friend. I've told him time and time again how dangerous XSS vulnerabilities are, and how XSS is now the most common of all publicly reported security vulnerabilities -- dwarfing old standards like buffer overruns and SQL injection. But will he listen? No. He's hard headed. He had to go and write his own HTML sanitizer. Because, well, how difficult can it be? How dangerous could this silly little toy scripting language ...
-
Mone said:
manca un punto, poter accedere ai cookie tramite javascript può servire a proteggersi da XSRF.HttpOnly cookies impediscono questa difesa ma non impediscono XSS, 'bloccano' (lui stesso parla dei buchi nelle attuali implementazioni) solo l'acceso a un'informazione delle tante disponibili a un javascript iniettato. Un esempio banale, il codice attaccante può sempre simulare una finestra di login falsa all'interno di una pagina valida...
-
jmvidal said:
Good tip.
-
dd said:
When you tag a cookie with the HttpOnly flag, it tells the browser that this particular cookie should only be accessed by the server. Any attempt to access the cookie from client script is strictly forbidden.
OmniPlan 1.6 Final Released! (1)
share
digg
by
Skwirl (0)
on
The Omni Mouth (4)
1 week, 1 day
ago
permalink
Great news everyone, OmniPlan 1.6 Final has been released! Awww yea! As always, we’d like to thank everyone who provided crash reports, bug reports, and feedback over the last couple of months. If you have not been following our betas there are a number of fixes in this release. Check out the highlights: Importing Microsoft Project 2007 files is now supported. Many fixes to improve the stability, completeness, and correctness of imports. Improved resource leveling ...
The Baby is Never Ugly (2)
share
digg
by
Rick Segal (7)
on
The Post Money Value (7)
1 week, 1 day
ago
permalink
One of the things I dislike the most about the Venture Capital business is the endless "Let's continue the dialog" nonsense that gets dumped on entrepreneurs. Instead of just saying pass, this isn't for us, we get into sounds interesting, send me some data, let me kick it around, could I see the data in another way, let's continue the dialog. It sucks and is brutal on you. The additional fallout from this is when ...
Aug. 27, 2003: The Lights Will Stay On in Fairbanks (2)
share
digg
by
Tony Long (17)
on
Wired Top Stories (819)
1 week, 2 days
ago
permalink
2003: Fairbanks is connected to the world's largest storage battery, built to provide Alaska's second-biggest city with an uninterrupted power supply. Fairbanks' remote location and sub-Arctic climate makes supplying reliable power to the city of 32,000 difficult. In deep winter, the temperature in Fairbanks is almost constantly subzero, dropping as low as minus 60 degrees Fahrenheit The situation is complicated by the fact that Alaska isn't connected to the power grid that keeps the lower ...
Colonel: Bowman army comms 'astonishingly bad' (1)
share
digg
on
The Register (100)
1 week, 2 days
ago
permalink
Battery life & range crap - but at least it's heavy The long-bedevilled Bowman digital comms infrastructure for the British army is continuing to enrage and frustrate its users - a British commander in Afghanistan has described Bowman as "broken" and "astonishingly bad". Bowman was finally forced through acceptance trials in 2004, after a nightmare 14-year gestation period.…
Full Disclosure and the Boston Farecard Hack (21)
share
digg
by
schneier (163)
on
Schneier on Security (185)
1 week, 2 days
ago
permalink
In eerily similar cases in the Netherlands and the United States, courts have recently grappled with the computer-security norm of "full disclosure," asking whether researchers should be permitted to disclose details of a fare-card vulnerability that allows people to ride the subway for free. The "Oyster card" used on the London Tube was at issue in the Dutch case, and a similar fare card used on the Boston "T" was the center of the U.S. ...
-
trygve said:
Excellent essay on full & responsible disclosure of security vulnerabilities.
-
fmavituna said:
Awesome writeup,-Companies will only design security as good as what their customers know to ask for.This preference for secrecy comes from confusing a vulnerability with information about that vulnerability. Using secrecy as a security measure is fundamentally fragile. It assumes that the bad guys don't do their own security research. It assumes that no one else will find the same vulnerability. It assumes that information won't leak out even if the research results are suppressed. These assumptions are all incorrect.
Richard Feynman’s Modest Science (8)
share
digg
by
Gustavo Duarte (2)
on
Gustavo Duarte (2)
1 week, 3 days
ago
permalink
When I was 18 and newly arrived in the US, I used to wonder around enjoying new features like the rule of law and great libraries everywhere. Once while bumming out in North Denver I went into the Regis University library determined to read about physics. I had tried that once before, back in my high school, with poor results. As a teenager I had been obsessed with “understanding” physics and chemistry, especially atomic and ...
-
Dan Stowell said:
"I had been hoping for a better explanation - a masterful analogy of weights on springs that would allow me to really understand physics. Instead, here was a Nobel laureate telling me that he didn’t really understand it either - not in the definite, make-believe fashion of high school science."
-
Denny said:
I read Feynman's Lectures on Physics two years after college. I wish I'd read them IN college, they are astonishingly good.
Red Light Cameras Don't Work (31)
share
digg
by
schneier (163)
on
Schneier on Security (185)
1 week, 3 days
ago
permalink
Interesting: the solution to one problem causes another. "The rigorous studies clearly show red-light cameras don't work," said lead author Barbara Langland-Orban, professor and chair of health policy and management at the USF College of Public Health. "Instead, they increase crashes and injuries as drivers attempt to abruptly stop at camera intersections." Comprehensive studies from North Carolina, Virginia, and Ontario have all reported cameras are associated with increases in crashes. The study by the Virginia ...
-
Wolfger said:
Gotta love capitalism, eh? Screw public safety! Let's make us some money!
Deadlocked! (39)
share
digg
by
Jeff Atwood (128)
on
Coding Horror (304)
1 week, 3 days
ago
permalink
You may have noticed that my posting frequency has declined over the last three weeks. That's because I've been busy building that Stack Overflow thing we talked about. It's going well so far. Joel Spolsky also seems to think it's going well, but he's one of the founders so he's clearly biased. For what it's worth, Robert Scoble was enthused about Stack Overflow, though it did not make him cry. Still, I was humbled by ...
-
Bill said:
Maybe if you get a real dev stack, like Apache/MySQL/Django, you wouldn't have these problems.
-
David said:
Wow. Loads speculation and misinformation over a simple example. By chasing down some of the links, I actually learned a good bit.
Tim Foster's Weblog (0) permalink
I'm just about done with this release of the ZFS Automatic Snapshot SMF service and have just pushed some changes to the mercurial repository on opensolaris.org. This is a pretty important release, in terms of fixing stuff that's been bugging me about the service since I initially released it. But inevitably, with lots of change comes the possibility of lots of bugs - so, I was hoping to get some feedback on how it's looking ...Shared by Denny (3) Stephen (0)Contribute comment
