Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×
Google

Hiding From Google 228

penguinrecorder writes "Google offers Web users a simple trade-off: Let the search giant track a substantial portion of your comings and goings around the Web, and it will offer you a free, superior online experience. Now independent security researcher Moxie Marlinspike is making Web users a counter-offer: take Google's giveaways and keep your privacy too. On Tuesday, Marlinspike launched a service he calls GoogleSharing, a plug-in for Firefox designed to give users access to Google's online offerings while cloaking their identity from the company's data collection tools. By hosting a proxy server with a collection of Google 'identities,' the privacy software will allow users temporarily to route their traffic through another computer that masks their identity by mixing their online actions with those of other users. The system is totally transparent, with no special 'alternative' websites to visit. Your normal work flow should be exactly the same." GoogleSharing only works for those services not requiring a Google login; for the latter, no proxying is done.
Microsoft

Microsoft To Delete Bing IP Data After 6 Months 101

adeelarshad82 writes "Bowing to pressure from the EU, Microsoft said it would discard all data collected via its Bing search engine after six months. (Microsoft's announcement contains a timeline for what data gets anonymized or deleted when.) Until now, the software giant has retained the data for 18 months. Over the past two years, however, Internet companies such as Microsoft, Yahoo, and Google have made efforts to reduce the amount of time that information is stored. Microsoft's policies will remain the same, but now, the company will delete the IP address and other info after six months. Back in December 2008, Microsoft said it would reduce its retention time to six months, but only if its rivals followed suit. At the time, Yahoo anonymized its data after 13 months, and Google did the same after 9 months. A week later, Yahoo cut that time down to three months, but Google said its decisions are not conditioned on what competitors do."

Comment Re:Eternal game of catch-up (Score 4, Informative) 443

As the other poster said, the fact that we do not have 1:1 parity has never been a problem.

Some other technologies that are subsets and are wildly successful:

* Android's Java is not a 1:1 mapping to Java either, and that has not prevented it from being successful.
* iPhoneOS is not MacOS 1:1, and yet, it is incredibly successful.
* Chrome the browser, does not have every feature of Firefox, that did not stop it either.
* JBoss is a subset of the full J2EE stack, and for years it has been wildly successful.
* Linux for years was not even POSIX compliant, and yet, many of us jumped on it, and it became wildly successful.

In Mono we implement what makes sense, and what people are actually using in day to day applications, we do this using metrics that we obtain from our Mono Migration Analysis that helps us identify which APIs are used, by how many applications and we have collected this data from some 10,000 applications:

http://go-mono.com/momareports/

Call this the data-driven prioritization of development.

Mono was born as a technology to bring the best that .NET had to offer to Linux, this was initially the c# language and the core libraries. As time went by, Mono evolved in two directions:

(a) Organica growth: as the Mono community grew, we identify missing features, we envisioned better ways of doing something and created tools, APIs, languages and extensions that mattered to us. In this category you can find things like Gtk#, Taglib#, Cairo#, Cecil, Mono.Options, Mono.Security, Mono.Data, Mono.Math, Mono.Management, Mono's C# REPL, Mono's SIMD extensions, Mono's large array support. Mono's dynamic JIT extensions, Mono's static compiler and much more.

For instance, today, more than 350 applications on the AppStore and 10 of the top 100 apps in there are built using Mono.

(b) Better compatibility with .NET: this is a simpler process than coming up with our own APIs. The .NET APIs are documented, there are thousands of applications to test the implementation against, the community is fed directly from the largest middleware stack in the world, so it made sense for us to implement these pieces.

Is it correct that we do not have a full implementation of .NET, there are a few reasons for this, now with numerals:

(i) Some APIs are Windows specific, and makes no sense to bring to Linux, in particular things like System.Management which is a thin wrapper around WMI. Our advise: replace that code with Linux and MacOS specific code and use one or the other at runtime.

(ii) Some APIs are too larger for us to take with our current community. This includes things like WPF and Workflow. If someone steps up, we will embrace them, but until that happens, we are focused on improving the other areas that have more users and that we have more requests to implement. Additionally, the WPF "lite" is a killer stack (also known as Silverlight).

(iii) Focus, we do not want to spread ourselves too thin.

As for .NET 4.0: we are not too far from having the core be 4.0 compliant, it is a nice upgrade to the solid 3.5 release. For instance, our C# compiler is already a full C# 4.0 compiler, and we already provide features that Microsoft wont offer until 5.0 (embeddable, reusable compiler, see C# REPL).

Moonlight is behind Silverlight, but I am not driven by despair, I am driven by the world of possibility. If I were driven by despair, I would not have written a single line of code.

If Silverlight never succeeds, then who cares how behind Moonlight is. But if Silverlight succeeds, and Linux users want to access that content, but the feature is either broken, not implemented or missing in Moonlight, those users will be in a position to contribute the code, and everyone wins.

Comment Removing the GPL code. (Score 5, Informative) 443

We removed the GPL code in MonoDevelop for a couple of reasons:

(a) to allow it to become a platform that third-party plugin and add-in developers can target.
(b) to allow us to consume open source code that would otherwise conflict with the GPL (MS-PL licensed code, Apache licensed code, and original BSD licensed code).

Notice that (a) is the norm for Eclipse and Visual Studio, and that the ecosystem of third party plugins relies on this, both Eclipse and Visual Studio would be severely limited if they limited the plugins to be all GPL licensed. As I explained on the blog post, there are current users that need to run their non-GPL code inside the IDE.

We want more third party developers to target MonoDevelop, and we want these third parties to consider MonoDevelop a platform that they can target without forcing a license on them. Similar to how the Linux operating system can run code licensed under any license.

The second reason is just a practical one. In the .NET open source ecosystem there are plenty of libraries and tools available under the MS-PL, Old and New BSD and Apache 2 licenses and we want to be in a position to use those libraries without rewriting it. We already do, and it has saved us a lot of time.

Comment Re:spending time on opportunities ? (Score 5, Informative) 747

I work on Mono, because I like it. If you want to learn more about my goals, you can read this old post:

http://www.mono-project.com/Mailpost:longreply

As for CodePlex: it turns out that there are two entities: CodePlex.ORG (owned by the Foundation) and CodePlex.Com (Owned by Microsoft, and has no affiliation with the foundation).

It is beyond unfortunate that the Foundation adopted the name from the hosting site. The logic apparently was "It is already a known brand". In my opinion, moving ahead with this name was a terrible decision as it is incredibly confusing, a point that I have raised with the board of directors.

The CodePlex foundation has no control over the contents of CodePlex.com.

Comment Voting needs to be transparent (Score 5, Interesting) 207

Here is the solution to all voting problems.

Goals:
1. Confirm your vote is collected correctly.
2. Try to assure the people that no votes were added.
3. Don't hide results.
4. Keep votes anonymous.

Solution:
1. Keep a large public vote database.
2. Be able to Look up votes by voter id, county, polling location and time.
3. Keep large visible clock and voter count at each polling station. Every time a person goes into the voting room, the count goes up. Voter counts can be confirmed online. Maybe even in a graph over time.

The voter should be able to go online and see his own vote. Since every voter can see every vote counted up in every polling location in the country and know that everyone else can, they'll be assured of the results. If they're paranoid, they can watch their local polling station's voter count and confirm the published results don't have added votes.

Note: Maybe instead of voter id's, it should be a random confirmation code thats generated on the spot. That should be even more anonymous.

Problems: Some people actually vote for the wrong person on accident. That's unfortunate, but the solution isn't to hide it from them.
If vote online doesn't match your vote, have a dispute process. Keep track of dispute counts over time, for the public to see.

Comment Re:Hogwash (Score 1) 817

The initial version of IE sucked, but, in the end, they beat the snot out of Netscape.

Why do people actually think that IE "beat" Netscape?! It was just made default and installed on every new computer. You had to use IE to go download Netscape. Ever since then, it's had a majority.

Comment Re:Well the only fool proof way... (Score 1) 491

Are we assuming that the packets will be obvious IRC packets or something? It would be suggestive of a botnet if lots of traffic was moving while the computer was idle, but that could always be background programs downloading updates or whatever. If a botnet used any sort of encryption, or even a binary protocol instead of ascii, it could be extremely difficult to tell it's a botnet by just looking at packets.

Comment Re:H.264 licensing (Score 3, Interesting) 335

Not many sites used Silverlight 1.0, because to begin with, barely any sites used Silverlight 1.0.

1.0 did not include the .NET runtime, for most people it was just a javascript plugin that did audio and video. Silverlight only became interesting with 2.0 (this is what we were drawn to when Silverlight 1.1 was announced).

Folks have three options for Silverlight on Linux:
(a) Hope that Microsoft supports it.
(b) Ignore it altogether and hope it vanishes.
(c) Support Moonlight.

We have taken the third step as we believe it will gain adoption and Silverlight will be required to access certain web sites in the future. You might disagree and hope for (a) or (b). In the meantime, we have initiated a collaboration with Microsoft where they provide us with licensed codecs and test suites for all of Silverlight (.NET, GUI, video, audio, streaming) to make sure that the open source version of Silverlight is compatible.

Although we had early access to 2.0 and 3.0, we only use this knowledge for planning. Once they go beta, we have used the public information to add some of those features to Moonlight as we go. For example Moonlight 1.9.5 is actually a mix of Silverlight 2.0 and 3.0, it already supports some four or five features from Silverlight 3.

But Silverlight is a large project, and we are a small team compared to the task at hand, so you are right that we will continue to lag behind Silverlight. This trend in my opinion will change when the fundamental principle of open source kicks in: the need to scratch and itch.

Most Linux users have not had a compelling reason to use Moonlight other than for example Moonshine, but as Silverlight continues to gain adoption and more sites require it, we expect open source contributors to join our effort to tune, improve, bug fix and implement the features on time.

Although you might want to portray having an open source version of Silverlight as a "a losing game", we see this as fundamentally important for Linux to continue to have access to the best technologies.

Slashdot Top Deals

2.4 statute miles of surgical tubing at Yale U. = 1 I.V.League

Working...