News for hackers. Stuff that matters.

bschlinker

> All domestic students have to pay AT MOST of 1 year of out of state tuition, because you establish in state residency in your first year here.

This isn't true in many cases. I was an out of state student attending a California university and was paying out of state tuition for all years. You can only establish residency if you demonstrate financial independence (e.g., you need a full time job). If you have someone else helping pay the tuition that is outside the state, or if you're using loans to fund yourself, you remain an out of stater.

> However, entering that IP address into your browser will give you the Google homepage, because unlike most sites, their servers check the hostname

I'm pretty sure that name-based hosting is fairly common, especially for smaller websites...

Re:Google set to acquire Waze for $1.3B on Sunday June 09, 2013 @08:47PM (#5851545)
TomTom includes carpool lanes in their planning for routes in the United States. I've seen it in California and Connecticut. A big red screen shows up and asks "Route uses carpool lanes -- is this ok?". If I am driving alone, then I just hit "No".
Less fuss? I remember plenty of talk going on about this -- it hit the front page of many newspapers including the NYT and the Washington Post. The administration even acknowledged it to a degree. People have just forgotten.
"Google's CalDAV page already lists the API as being "deprecated." A note on the page adds "If you think you have a compelling use case and would like to be whitelisted for the new version of CalDAV API, please fill out this form."

...

Google, however, confirmed this will not impact the agreement with Microsoft and that the Softies will still be able to implement CalDav support on Windows Phone."

http://www.zdnet.com/microsoft-in-the-clear-to-add-google-ca...

Re:Google Apps stops accepting free sign-ups on Friday December 07, 2012 @01:27AM (#4885799)
Increases complexity....
Re:Dropbox Introduces 2-Factor Authentication on Sunday August 26, 2012 @08:18PM (#4436785)
Get Boxcryptor.
Re:Garzik: An Andre To Remember on Sunday July 29, 2012 @01:44AM (#4307665)
I had the opportunity to meet Andre last summer while interning at Cisco. I had no idea who he was at first, until I looked him up on LinkedIn and "googled" his name.

Towards the end of my internship, I was there until 10 PM some days working on code. Andre would see my cube lights on and come over to talk to me. Considering how I was just working all alone when there that late, I really appreciated the brief talks, as they provided me when an opportunity to think about something other then the problems within my code for a few moments. He would often share a few technical tips or an interesting story with me during our conversations.

Although I didn't work with him much, it's disappointing to hear of his death. It seems like most of the comments in here (on HN) are regarding mental illness -- something which I never observed during the brief period of time that I knew him. Regardless of his reason for taking his life, I'm glad I had the opportunity to meet him and thank him for those brief conversations.

Re:New Dropbox Pro plans on Tuesday July 10, 2012 @02:03PM (#4225186)
Not true -- you must purchase pack-rat unlimited history ($39) to be able to go back beyond 30 days. This is not included in the paid accounts.

Both paid and free accounts have 30 days of deleted file history by default.

"Facebook is indeed intercepting messages -- the e-mail is clearly passing through Facebook's servers, but this seems to be where it stays, as neither sender nor receiver are getting a copy."

Is this really appropriate use of the word "intercepting"? Typically intercepting carries a negative meaning -- like "the FBI is intercepting my postal mail and opening it before it reaches me". However, with their use of the word, every email I send is "intercepted" by multiple servers before it reaches its destination....

Re:Going Colo on Tuesday June 26, 2012 @08:34PM (#4164928)
Interesting that the author chose to use a Kill-a-Watt for power consumption monitoring.. seems like a better idea to use the planning applications available from the major vendors to determine usage depending on workload, etc. Dell and HP both have a calculator where you set the system (RAM, CPU, # HDs, etc.) and the load and it will provide you with an approximate power use, along with a peak load.
I can't imagine why they decided email addresses now needed two layers of privacy controls. First layer = who can see this, second layer = is it visible on timeline. If I didn't want it visible on the timeline, why wouldn't I just select "Only me" on the first option...? Am I trying to keep my email private from myself?

They also only made the change for email addresses -- not IM usernames, etc. If the two layers were to help with privacy somehow, why not apply it to everything?

Perhaps his Google+ experience is different then yours? I'm inclined to agree -- most people who I know have Google+ accounts, have added me to their circles (and vice-versa) but chose to keep all of their interaction on Facebook.

The groups of people you communicate with are different. Just like during the 90s, some groups used AIM, some MSN, some ICQ...

Re:Ubuntu's Plans To Implement UEFI SecureBoot: No GRUB2 on Friday June 22, 2012 @11:20AM (#4147129)
The same reason why browsers are now making it so tough to get to a website without a "valid" SSL certificate -- the average user will ignore the warnings and accept anything to get to their objective. This is one of the reasons why Google Chrome now prevents users from accepting invalid SSL certificates for some Google properties.
Re:Ubuntu's Plans To Implement UEFI SecureBoot: No GRUB2 on Friday June 22, 2012 @11:15AM (#4147100)
You think Microsoft believes that a 99$ fee (as described in the article) will hinder their competitors?
Yeah, I was under the impression that it would be illegal also, but apparently the FCC hasn't concluded whether it should be allowed.

MagicJack was planning to offer similar functionality in the past:

"YMAX [makers of MagicJack] says it doesn’t need permission to use the carriers’ operating frequencies in the home and that it’s protected under Part 15 of FCC regulation. This stipulation allows a device to operate without a license if it uses very low power, and doesn’t cause interference."

"In 2007, the CTIA requested the FCC regulate in-home wireless network signal boosters. The CTIA believes it should be illegal to boost any signal without the consent of the spectrum licensee. This contentious issue is still being debated, and YMAX is likely watching very closely for any signs of a decision."

http://www.audioholics.com/news/industry-news/magicjack-cell...

Re:Fax Your Representatives to stop SOPA / PIPA on Wednesday January 18, 2012 @01:56PM (#3481231)
Looks like hellofax couldn't handle the surge in traffic -- site is now down for me.

Whenever I see a site down like this due to a surge in traffic for a "free" opportunity, I always question whether it is in the site's best interest. For instance, if I was a hellofax customer attempting to send a fax right now, I would be unhappy -- I pay to be able to send / receive faxes, and an (perhaps from the customers perspective) "unnecessary event" has prevented me from doing that.

Brings up another question -- whenever companies do these types of "promotions" / "events", should they be hosted on a separate system to minimize impact on existing customers / site activity? I believe this year, Sparkfun use a separate system for free day to ensure the surge in traffic did not impact the main site (and paying customers).

(Edited to add further discussion)

Re:Rent a Mac in the cloud for development on Thursday October 27, 2011 @01:52PM (#3164508)
I'm confused as well by this. From my perspective, in order to keep your business and personal lives separate (and private) you need two separate systems to work on. I have no interest in IT possibly being able to log or monitor my interactions with my personal GMail, bank accounts, etc. Since most companies Acceptable Use Policies provides them with the right to monitor all of this and more, it seems necessary.

Other people though don't seem to feel as strongly about keeping their work and personal lives separate...

Looks like on the "people" page, someone was attempting to see if the Register input is sanitized? There is one name which appears to include some scripting..?
I'm not sure I see what the big issue is with VPN access.

The author complains that VPN connections choke the user's bandwidth, but I am not sure I know many examples of this. Typically through a VPN connection I will see higher latency to external internet point if the company does not allow split-tunnel routing. However, decreases in the user's bandwidth only occur if the company does not have the appropriate bandwidth available for the number of VPN users logged in. Perhaps I am just lucky, but I've never had this problem.

Regarding the pain of logging in, Cisco's new Cisco AnyConnect VPN automatically re-authenticates you to the VPN session so you don't need to keep signing in as you shift locations. Microsoft's DirectAccess allows you to have a VPN session automatically established with no additional authentication necessary whenever it finds a network connection available.

The author proposes cloud services? Those don't work too well for large companies in my opinion. In fact, I don't think they work well for small companies yet either. Google Docs just doesn't have the functionality required and STILL lacks the idea of having centralized repositories of information. If you want to share a document with your entire Google Apps organization, you can "share it" but the people in your organization must know to search for it in order to discover it. There is no way to browse "All Documents in My Company" which creates a huge pain.

Most companies and their employees, especially Fortune 100 companies, utilize "Network Volumes". Go into one of these company's and talk to the employees. "Oh, that is on my U drive, and the other documents, those are in the company wide public share on my P drive". They browse to these files seamlessly over the VPN, edit them, and they are updated on the remote server.

VPNs also HELP ensure compliance (though they definitely don't guarantee it). You no longer need to worry whether every single cloud service you are using has the proper security configuration. There may be some wiggle room here, but I know that with Active Directory Group Policies, I can really lock things down on users through one centralized management interface. If I have 10 cloud services, I have 10 different things I need to worry about locking down.

Re:Stop asking me for my phone number on Thursday October 13, 2011 @01:43AM (#3106261)
This is the reason why most online relay services, such as i711, provide their users with free inbound numbers.

When a call is received, the user is notified via a variety of mediums, including instant message, SMS, and I think some other desktop/mobile apps they have. If the deaf user accepts the call, the relay informs the caller that the other individual is deaf and begins to transcribe the call.

2-way conversation (text<----->relay<----->caller)

In addition, these services provide transcriptions of voicemail / etc and are completely FREE (sponsored by individual state tax dollars in US). I'm really surprised that the post makes no note of these services, since I have known about them for years and am not hard of hearing.

Re:Color.com Pivots to Live Personal Broadcasting on Sunday October 02, 2011 @03:21PM (#3063717)
This doesn't make much sense -- other audio/video sharing systems (GTalk / etc) would experience the same problem then.

I believe you are referring to the one-party / all-party telephone recording laws, where in some states all parties to the call must know the call is being recorded. This is not relevant for this software program (unless it is being used to stream audio from a phone call...)

We live near each other -- according to their website, their business is right next to where I live.

Yet, the address is of a parking lot... (10 E 3rd Street in San Jose). Strange.

Re:Death to the 'noreply' mailbox on Thursday August 11, 2011 @01:51AM (#2871607)
And when that filtering fails, causing an email to be filtered out as an auto-response even when it was written by a "real person"? What happens then?
How was it registered initially if it is prohibited under Verisign rules?
“I once told my girlfriend I had AIDS,” Mr. White said. “Then I broke up with her.” They laughed.

-- Don't bother reading the article. The above line says everything you need to know about the "pranksters" involved.

Re:The Time I Accidentally Destroyed a Production Server on Saturday April 30, 2011 @01:52AM (#2499998)
How do you know that production environment and development environment are exact mirrors? I recognize you could image the production environment, but when setting up new applications I will make a variety of changes, especially during testing, which may require testing on the production server also.. especially since the production server is active and may not tolerate the changes the same way the development server will.

My point is, your method of "never logging into a production server" is extreme. You could have easily written a script for this and then by accident, executed it on the production server instead of on a testing server. Same problem manifests itself in a different manner.

Re:The Time I Accidentally Destroyed a Production Server on Friday April 29, 2011 @08:06PM (#2499487)
Never log into your production servers via shell? This seems a tad over the top.. especially if you are planning on writing a script to perform operations and need to discover dependencies / etc.
Title of the article is ridiculous. The article states that the FCC requires that devices be locatable when 911 is called, not continuously "trackable". There is no law which states that...
If true, you could pretty easily take down a call center simply by calling up and leaving the lines open with no caller. Managers would need to be running all over the place.

Since call center employees commonly have the ability to perform call transfers, I can only imagine they have the ability to hang up on calls. Otherwise, I imagine they could simply transfer the call to an invalid extension to "hangup".

Older »