跟老板套词模板 - 未名空间MITBBS历史存档

国际科技财经博客移民网络热点娱乐民生时事公众号

Redian新闻

>未名空间

>Biology - 生物学

跟老板套词模板

跟老板套词模板# Biology - 生物学

z*l2013-06-11 07:06

1 楼

☆─────────────────────────────────────☆
geon (真子) 于 (Mon Nov 21 21:21:43 2011, 美东) 提到:
。。这没头没脑的。。你说清楚点儿啊。。。
☆─────────────────────────────────────☆
Tina0929 (Tina0929) 于 (Mon Nov 21 21:24:26 2011, 美东) 提到:
几张CC credit limit 降了很多

☆─────────────────────────────────────☆
geon (真子) 于 (Mon Nov 21 21:25:36 2011, 美东) 提到:
。。。你觉得这就叫说清楚了？。。。
干啥坏事了先？。。。
☆─────────────────────────────────────☆
monosky (大头) 于 (Mon Nov 21 21:29:32 2011, 美东) 提到:
是不是消费太多了
或者，别人盗用你信息了，开了很多信用卡。。
☆─────────────────────────────────────☆
Tina0929 (Tina0929) 于 (Mon Nov 21 21:33:21 2011, 美东) 提到:
两个月前，卡被偷了
☆─────────────────────────────────────☆
geon (真子) 于 (Mon Nov 21 21:35:08 2011, 美东) 提到:
所以让lz说清楚先啊
什么卡，之前CL是多少，最近做了什么（比如是否有大额消费）。。etc
什么都不说，就让别人帮忙猜啊。。。
☆─────────────────────────────────────☆
Tina0929 (Tina0929) 于 (Mon Nov 21 21:35:28 2011, 美东) 提到:
2个月前一张CHASE卡被偷了，所以发了新卡
当时没什么，今天发现CREDTI LIMIT被降
主要是别的CHASE卡也降了
坏事真的一点都没干
没开卡，没LATE PAYMENT AND OVER LIMIT
☆─────────────────────────────────────☆
Tina0929 (Tina0929) 于 (Mon Nov 21 21:37:16 2011, 美东) 提到:
改了
☆─────────────────────────────────────☆
Tina0929 (Tina0929) 于 (Mon Nov 21 21:37:44 2011, 美东) 提到:
花的不多
☆─────────────────────────────────────☆
sapphirewing (Audrey的树) 于 (Mon Nov 21 23:06:04 2011, 美东) 提到:
说实话
降你CL的是chase
除了chase的客服没人能确切的回答你。。。
不过chase无厘头降CL是很常见的。。
☆─────────────────────────────────────☆
zhaoyi26 (猪八戒) 于 (Tue Nov 22 12:30:18 2011, 美东) 提到:
你的信用报告上看到你的balance/total credit line比例是多少？还有挂失信用卡也
是负面的，代表你管理不善。chase和amex属于喜欢FR的银行，所以一切都正常，坏事
不做他们全部关闭你的账户也是正常。chase, amex就是这样子的。所以你没看到这里
的老大们都是开卡吃bonus吃完立马关卡么？
☆─────────────────────────────────────☆
utran (Utran) 于 (Tue Nov 22 14:52:58 2011, 美东) 提到:
完了，最近大额消费很多，怎么办呢，估计要被chase关卡了，5555555
☆─────────────────────────────────────☆
IronGiant (没) 于 (Tue Nov 22 15:53:57 2011, 美东) 提到:
“挂失信用卡也是负面的”,这个能具体说说负面的影响是什么？
刚挂失了一张卡。卡没被盗用，估计是在家里哪个角落找不到了，为省事，直接amex网
站挂失了，今天收到新卡。
☆─────────────────────────────────────☆
zhaoyi26 (猪八戒) 于 (Tue Nov 22 20:22:43 2011, 美东) 提到:
信用报告里面会写卡片挂失，起码在人工审核的时候是作为负面的一个项目。其实降低
额度关帐户都是系统预警，人工审核的结果。其实最好的办法就是预防。对于amex,
chase最好的防范方法就是：其他卡总是保持非常低的债务。当我债务达到9万的时候，
chase 降低额度到了1000，减少到1张，美国运通则全部关闭。关于负面之说是银行审
批的时候告诉我的而已。
☆─────────────────────────────────────☆
bbaobbei (bbaobbei) 于 (Tue Nov 22 20:23:41 2011, 美东) 提到:
guan zhu

l*n2013-06-11 07:06

2 楼

看了几集《白鹿原》，真是有点吃不消，虽然不是什么谍战悬疑剧，但是看着比谍战悬
疑剧更加烧脑，人物之间的关系真的太复杂了，必须很认真的看，否则都无法弄清楚人
物之间的各种纠葛。
看似无关的人，其实也有某种联系，这也是这种小说原著比较烧脑的部分，估计作者陈
忠实写这部小说就会累得不行不行的，人物关系太过于复杂了。
当然这部电视剧都是些老戏骨，演技肯定是没问题的，只是人物的复杂以及背后存在的
联系，简直比反腐大剧《人民的名义》更加扑朔迷离，毕竟《人民的名义》演的只是当
下社会背景的一些社会问题，而《白鹿原》还是经历了一些历史变更的。
祖孙三代人，经历了大几十年的事情，确实不是《人民的名义》这种短暂的历史可以相
提并论的，因此光是社会背景的复杂程度就高出了很多。
我说看得很累是因为，要想看懂所有的细节，还得明白当时的历史条件下，是什么样的
情况才能让这些人有什么样的做法，这也就是中国人才能看明白了，换成老外，能真正
看懂《白鹿原》这部剧的，那就是中国通了。

i*l2013-06-11 07:06

3 楼

尼玛，以后没有什么可靠的加密软件了。TrueCrypt看起来被勒令关闭，project终止解
散，连原来的老版本软件都没有了。操，N3A吃相太难看了吧。

z*32013-06-11 07:06

4 楼

想找research associate 或是 postdoctor，不知怎样跟PI套词。哪位大侠有套词模板
可供参考？

f*72013-06-11 07:06

5 楼

还好吧。一天两集。很容易消化

c*i2013-06-11 07:06

6 楼

网上议论一片，什么理论都有。
7.1a安全吗？

g*r2013-06-11 07:06

7 楼

首先把英语用词搞准确点 postdoctor不是一个词儿

【在 z****3 的大作中提到】

: 想找research associate 或是 postdoctor，不知怎样跟PI套词。哪位大侠有套词模板
: 可供参考？

o*e2013-06-11 07:06

8 楼

是有点累，主要有点沉重。烧脑完全谈不上。

i*l2013-06-11 07:06

9 楼

我用的是2012年download的7.1a，应该还是安全的。
好多人都用回2012年初的7.0a了，不过我觉得没必要。
不过现在它网站上的那个7.2就不知道安不安全了。

【在 c****i 的大作中提到】

: 网上议论一片，什么理论都有。
: 7.1a安全吗？

i*r2013-06-11 07:06

10 楼

又不是侦破推理剧，有啥烧脑的

【在 o********e 的大作中提到】

: 是有点累，主要有点沉重。烧脑完全谈不上。

a*o2013-06-11 07:06

11 楼

我有2009年的6.3，嘿嘿。

【在 i***l 的大作中提到】

: 我用的是2012年download的7.1a，应该还是安全的。
: 好多人都用回2012年初的7.0a了，不过我觉得没必要。
: 不过现在它网站上的那个7.2就不知道安不安全了。

o*e2013-06-11 07:06

12 楼

你没看懂我意思？

【在 i********r 的大作中提到】

: 又不是侦破推理剧，有啥烧脑的

n*12013-06-11 07:06

13 楼

早知如此，何不早早开源？如果已经开源了，NSL也拿它没办法。
Contrary to popular belief, TrueCrypt was not free open source. Different
parts of the program were licensed under different conditions by different
authors. Many parts of the code base are under source-available license
terms which means that the code is public for review, but modifications and
redistribution are not permitted. This means that a fork of the TrueCrypt
project isn't legally possible without the permission of the authors of the
non-free sections.

x*42013-06-11 07:06

14 楼

自己写一个rsa的code自用可以吗？

and

【在 n****1 的大作中提到】

: 早知如此，何不早早开源？如果已经开源了，NSL也拿它没办法。
: Contrary to popular belief, TrueCrypt was not free open source. Different
: parts of the program were licensed under different conditions by different
: authors. Many parts of the code base are under source-available license
: terms which means that the code is public for review, but modifications and
: redistribution are not permitted. This means that a fork of the TrueCrypt
: project isn't legally possible without the permission of the authors of the
: non-free sections.

n*12013-06-11 07:06

15 楼

干嘛自己写，直接用gpg/openpgp/openssl都可以对单个文件加密，而且都很容易跨平
台，连android上都有。
truecrypt牛逼在于block-level encryption，这个在windows上面很难实现。

【在 x***4 的大作中提到】

: 自己写一个rsa的code自用可以吗？
:
: and

l*b2013-06-11 07:06

16 楼

开源软件里nsa 不知道埋了多少bug呵呵。。。

【在 n****1 的大作中提到】

: 干嘛自己写，直接用gpg/openpgp/openssl都可以对单个文件加密，而且都很容易跨平
: 台，连android上都有。
: truecrypt牛逼在于block-level encryption，这个在windows上面很难实现。

i*l2013-06-11 07:06

17 楼

不至于吧。大家都看着呢。

【在 l*******b 的大作中提到】

: 开源软件里nsa 不知道埋了多少bug呵呵。。。

k*o2013-06-11 07:06

18 楼

truecrypt本来就不怎么样，神神秘秘的不知道在搞什么，也不开源，
bug也不少。不知道为啥最出名。可能是因为功能比较全，可以disk和
file加密，我看别的软件都是分开做这两个功能。

n*12013-06-11 07:06

19 楼

哪些软件能做disk加密啊？

【在 k**o 的大作中提到】

: truecrypt本来就不怎么样，神神秘秘的不知道在搞什么，也不开源，
: bug也不少。不知道为啥最出名。可能是因为功能比较全，可以disk和
: file加密，我看别的软件都是分开做这两个功能。

i*l2013-06-11 07:06

20 楼

是开源的，只不过source code不允许别人修改，所以不是一般意义上的开源软件，因
为一般开源的都是允许修改的。它的source code大家都是看的到的，没有问题。
唯一可能有问题的就是compiling过程中有没有猫腻。前一阵不是有个audit吗，好像第
一阶段没有发现问题。

【在 k**o 的大作中提到】

k*o2013-06-11 07:06

21 楼

diskcryptor

【在 n****1 的大作中提到】

: 哪些软件能做disk加密啊？

f*p2013-06-11 07:06

22 楼

http://truecrypt.sourceforge.net/
用bitlocker吧

i*l2013-06-11 07:06

23 楼

http://truecrypt.ch
老版本本身还是安全的。希望以后能有fork出来新的版本。
Bitlocker基本铁定有后门，反正我从来不用。你看看网上对这个的评价就知道了。

【在 f****p 的大作中提到】

: http://truecrypt.sourceforge.net/
: 用bitlocker吧

l*b2013-06-11 07:06

24 楼

是摆在那里，问题有几个人有去看几万行代码，几十万行代码的需求。去看了，能理清
里面的头绪。关键的地方人家不给你注释，更本看不明白。加密这样的事情，用上点算
法，基本和天书差不多了。都能整明白的估计没几个。然后基本都被nsa 这样的机构收
编了。呵呵呵
埋bug这种事情其实看能不能过作者这一关。最简单的办法就是收买作者。收买不了就
耍流氓，这才是此次事件的本质。
互联网时代是打着自由旗号的巨大洗脑运动。被不被洗，就看你自己了。freedom is
not for free

【在 i***l 的大作中提到】

: 不至于吧。大家都看着呢。

i*l2013-06-11 07:06

25 楼

好多人都是你这么想的，所以才有人要audit truecrypt的code。好像是一个Johns
Hopkins的教授带头搞得。第一阶段结束了，没有发现后门。现在正在搞第二阶段的分
析，就是算法分析。
我觉得这次Truecrypt被关掉，就是因为作者不肯屈服于N3A让他们加入后门的压力，所
以决定毁掉自己的作品。
现在都是臆测，等最终audit结果吧。觉得truecrypt不安全，就去用替代品。照你的说
法，所有的open source的软件都是极有可能有后门的。我觉得这个基本不可能。美欧
还是有很多软件作者又奉献精神的。

【在 l*******b 的大作中提到】

: 是摆在那里，问题有几个人有去看几万行代码，几十万行代码的需求。去看了，能理清
: 里面的头绪。关键的地方人家不给你注释，更本看不明白。加密这样的事情，用上点算
: 法，基本和天书差不多了。都能整明白的估计没几个。然后基本都被nsa 这样的机构收
: 编了。呵呵呵
: 埋bug这种事情其实看能不能过作者这一关。最简单的办法就是收买作者。收买不了就
: 耍流氓，这才是此次事件的本质。
: 互联网时代是打着自由旗号的巨大洗脑运动。被不被洗，就看你自己了。freedom is
: not for free

l*b2013-06-11 07:06

26 楼

有后门不妨碍用呀，一个系统上跑那么多软件，后门只要一个就够了。nsa想看看就是
了，随便看。
用google 搜索不也一样么，google 不但知道你会什么也知道你不会什么，层次明显很
高，那你就不用google了。。。

【在 i***l 的大作中提到】

: 好多人都是你这么想的，所以才有人要audit truecrypt的code。好像是一个Johns
: Hopkins的教授带头搞得。第一阶段结束了，没有发现后门。现在正在搞第二阶段的分
: 析，就是算法分析。
: 我觉得这次Truecrypt被关掉，就是因为作者不肯屈服于N3A让他们加入后门的压力，所
: 以决定毁掉自己的作品。
: 现在都是臆测，等最终audit结果吧。觉得truecrypt不安全，就去用替代品。照你的说
: 法，所有的open source的软件都是极有可能有后门的。我觉得这个基本不可能。美欧
: 还是有很多软件作者又奉献精神的。

i*l2013-06-11 07:06

27 楼

https://www.grc.com/misc/truecrypt/truecrypt.htm

l*b2013-06-11 07:06

28 楼

不可信呀，软件安全audit 有靠谱过么

【在 i***l 的大作中提到】

: https://www.grc.com/misc/truecrypt/truecrypt.htm

i*l2013-06-11 07:06

29 楼

你拿到source code，一行一行的audit，还信不过，要如何你才能信呢？

【在 l*******b 的大作中提到】

: 不可信呀，软件安全audit 有靠谱过么

l*b2013-06-11 07:06

30 楼

自己写的，不超过几百行，一两年actively maintained, 过过5 6遍以上，没有发现过
漏洞的。。。
是不是强迫症了。。。

【在 i***l 的大作中提到】

: 你拿到source code，一行一行的audit，还信不过，要如何你才能信呢？

D*r2013-06-11 07:06

31 楼

这么折腾就为了藏几部毛片？

【在 l*******b 的大作中提到】

: 自己写的，不超过几百行，一两年actively maintained, 过过5 6遍以上，没有发现过
: 漏洞的。。。
: 是不是强迫症了。。。

l*b2013-06-11 07:06

32 楼

毛片用得着藏么。。。

【在 D*******r 的大作中提到】

: 这么折腾就为了藏几部毛片？

L*s2013-06-11 07:06

33 楼

编译器也可能有后门，所以发布的二进制文件也可能是不可靠的。
除非你自己audit源码，然后用自己信任的编译器自己编译。

【在 i***l 的大作中提到】

: 你拿到source code，一行一行的audit，还信不过，要如何你才能信呢？

L*s2013-06-11 07:06

34 楼

http://www.reddit.com/r/sysadmin/comments/26pxol/truecrypt_is_d
这个推测比较靠谱：
Would be almost too obvious, right?
Here's a fun scenario:
1. Audit shows there are no vulnerabilities
2. NSA pressures the developers into halting the project and putting up a
website with detailed instructions on how to switch to software with
approved backdoors
3. Developers follow the instructions as closely as possible but make
absolutely no effort to make it seem believable, knowing that everyone with
so much as a passing interest in cryptography isn't going to buy it
Edit: I'm torn between that and a hack. Many people would need to be
silenced in order to make this crap believable at all.

L*s2013-06-11 07:06

35 楼

没人贴这个？
http://lavabit.com/
May 20th, 2014
My Fellow Citizens,
My legal saga started last summer with a knock at the door, behind which
stood two federal agents ready to serve me with a court order requiring the
installation of surveillance equipment on my company’s network.
My company, Lavabit, provided email services to 410,000 people, and thrived
by offering features specifically designed to protect the privacy and
security of its customers. I had no choice but to consent to the
installation of their device, which would have provided the government with
access to all of the messages, for all of my customers, as they travelled to
and from other providers on the Internet.
But that wasn’t enough. The federal agents also said their court order
required me to surrender the company’s private encryption keys, and I
balked. What they claimed to need were customer passwords, which were sent
securely, so they could access the plain-text of messages for users taking
advantage of my company’s encrypted storage feature. (The government would
later claim they only demanded the encryption keys because of my "
noncompliance".) I didn’t realize until I retained an attorney that what
the agents proposed would have exceeded their authority.
Bothered by what the agents were saying, I informed them I would first need
to read the order they had just delivered and then consult with an attorney.
The feds seemed surprised by my hesitation.
What ensued was a flurry of legal proceedings that would last 38 days. When
the dust settled I found myself the owner of a $10,000 civil contempt fine,
my business shut down, and bit by bit, the very principle upon which I
founded it – that we all have a right to personal privacy, slipping quickly
away. (To appreciate just how fast the case moved, consider the median
timeframe for a similar proceedings was 9.7 months in 2012.)
The government lawyers tried to overwhelm me. In the first two weeks, I was
served court orders a total of seven times – leading to contact with the
FBI every other day. (This was the stretch a prosecutor would later
characterize as the "long period of silence".) It took a week for me to
identify an attorney who could adequately represent me given the complex
issues involved – and we were in contact for less than a day when agents
served me with a summons ordering me to appear in a Virginia courtroom (over
1,000 miles from home). Two days later, after admitting their demand to my
lawyer, I was served a subpoena for the encryption keys – also marking the
first time they put their demand in writing.
With such short notice, my first attorney was unable to appear alongside me
in court. Because the whole case was under seal, I couldn't admit to anyone
who wasn't a lawyer that I needed help, let alone why. In the days before my
appearance I would spend hours repeating the facts of the case to a dozen
attorneys, as I sought someone else that was qualified to represent me. I
also discovered that as a third party in a federal criminal indictment, I
had no right to counsel. Thus my pleas for more time were denied. After all,
only my property was in jeopardy – not my liberty. My right to a “fair
hearing” was treated as a nuisance, easily trampled by a team of determined
prosecutors. In the end, I was forced to choose between appearing alone, or
face a bench warrant for my arrest.
When I appeared in Virginia, the government replaced their subpoena for the
encryption key with a search warrant and a new court date. I retained a
small local law firm before returning home, and they took on the task of
assembling a legal strategy and filing briefs in the few short days
available. The court barred them from consulting outside experts, making it
difficult to understand the complex legal and technological issues involved.
Even a request to discuss the case with members of Congress was denied. To
make matters worse, the court wouldn’t deliver transcripts for my first
appearance for another two months. My legal team was forced to proceed
without access to information they needed.
Then, a federal judge entered an order of contempt against me – without
even a hearing. Let me be clear. I did not devoted 10 years of my life to
building Lavabit, with its focus on privacy, only to become complicit in a
plan which would have meant the wholesale violation of my customers’ right
to privacy. Thus with my options in court exhausted, the decision was easy.
I had to shut down my service. Placing my faith in the integrity of the
appeals process.
When the judge granted the contempt charge unopposed – ignoring my attorney
’s request to dispute the government’s claims – he created a loophole. I
was never given an opportunity to object, let alone provide a meaningful
defense. An important point, since the contempt charge endorsed new legal
claims – reversing what the court had previously indicated. Without an
objection on the record, the appellate court would rule that my right to an
appeal had been waived – since the charges hadn’t been disputed in
district court. Given the Supreme Court’s tradition of declining to review
cases decided on procedural grounds, I will likely be denied justice,
forever.
The most important question raised by my appeal was what constitutes a "
search," i.e., whether law enforcement may demand the encryption keys of a
business and use those keys to inspect the private communications of every
customer, when they are only authorized to access information belonging to a
select few.
The problem here is technological: until a communication has been decrypted
and the contents parsed, it is impossible for a surveillance device to
determine which network connections belong to the targeted accounts. The
government argued that since the "inspection" would be carried out by a
machine, they were exempt from the normal search-and-seizure protections of
the fourth amendment.
More importantly, the prosecution argued the exemption was because my users
had no expectation of privacy, even though the encryption they were trying
to break was created specifically to ensure a users' privacy.
If my experience serves any purpose, it is to illustrate what most already
know: our courts must not be allowed to consider matters of great importance
in secret, lest we find ourselves summarily deprived of meaningful due
process. If we allow our government to continue operating in secret, it is
only a matter of time before you or a loved one find yourself in a position
like I was – standing in a secret courtroom, alone, and without any of the
unalienable rights that are supposed to protect us from an abuse of the
state’s authority.
Sincerely,
Ladar Levison
Owner and Operator, Lavabit LLC
With my fight in court all but lost, I am focusing my attention on a
technical fix. Help me put control over who reads your email back into your
hands. Donate to the Lavabit Dark Mail Development Initiative today. Because
keeping your business your business is our business.

N*m2013-06-11 07:06

36 楼

好奇，如果程序员在国外网站开发，nsa还管得着吗？

the
thrived

【在 L***s 的大作中提到】

: 没人贴这个？
: http://lavabit.com/
: May 20th, 2014
: My Fellow Citizens,
: My legal saga started last summer with a knock at the door, behind which
: stood two federal agents ready to serve me with a court order requiring the
: installation of surveillance equipment on my company’s network.
: My company, Lavabit, provided email services to 410,000 people, and thrived
: by offering features specifically designed to protect the privacy and
: security of its customers. I had no choice but to consent to the

J*n2013-06-11 07:06

37 楼

政府太无耻了，天灭土共。

B*D2013-06-11 07:06

38 楼

如果是盟国，那么通过程序
如果是敌国，麻烦一些，小国家，估计收买收购不行，就直接派人到公司内部服务器上
安装后门，遇到类似中国这样的对等国家，那么只能DOJ打嘴炮

【在 N*****m 的大作中提到】

: 好奇，如果程序员在国外网站开发，nsa还管得着吗？
:
: the
: thrived