Slashdot Mirror


User: mlts

mlts's activity in the archive.

Stories
0
Comments
5,534
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 5,534

  1. Re:Too bad on Toshiba, SanDisk Piloting 3D NAND That Doubles Previous Capacity · · Score: 3, Interesting

    What HDD makers really need to do is stop focusing on price and make a line of drives that is made to be archival grade. For example, there was a line of drives with two read/write heads that worked in an active/active configuration.

    What might be even better would be to make a standardized, rugged drive cartridge case, similar to iMation's RDX. Something that can handle drops, be gripped easily by a tape silo's robotic mechanism, can handle tens of thousands of mounts/dismounts, has built in encryption, the ability to have WORM functionality (similar to late gen DLT drives where the cartridge can be formatted as normal or WORM), and so on. The drive can be presented either as a tape volume, standalone JBOD hard disk, or part of a RAID set (and inserted/ejected at the same time with 2-3 companions.)

    Moving HDD to a backup/archive use as opposed to primary storage will keep this technology relevant, as opposed to trying to fight with SSD (which is a better primary storage technology [1].)

    [1]: In all ways but recovery. An SSD goes bad, there is no way to recover the data, period.

  2. Re:Too bad on Toshiba, SanDisk Piloting 3D NAND That Doubles Previous Capacity · · Score: 1

    XPoint 3D still has a ways to go with price (and the fact that it isn't out in the field yet.) It is still too expensive to be a 100% replacement for SSD, just like SSD is too expensive to replace HDDs everywhere.

    However, XPoint 3D does have its uses. Loading the core OS, application, and kernel come to mind as well as having a swap volume (pretty much the same concept as mainframe "external RAM" which was slower.)

  3. Re:What algorithm/primitive? on Microsoft Creates a Quantum Computer-Proof Version of TLS Encryption Protocol · · Score: 2

    Shor's algorithm only is usable with asymmetric algorithms, so AES isn't really affected. The part that is affected is only done during the handshaking process, so if the parent is right and long lived connections [1] are used, this might soften the blow somewhat.

    [1]: I've wondered about a trade-off of space for CPU and having the TLS protocol negotiate a master session keystream (pretty much a sequence of interim symmetric keys that gets consumed to make session keys, and when the last one gets consumed, perform another handshake and fill up both sides with temporary keys again.) The downside is that the web server would have to store about 1-4k worth of data per machine connecting for a short amount of time, but the upside is less time for negotiations.

  4. Re:No thinking needed, actually. This is just stup on Counterterrorism Expert: It's Time To Give Companies Offensive Cybercapabilities · · Score: 2

    I saw the same shit with spam. I used to receive a lot of backscatter from some spammer using my E-mail address as a fake from address. I received a ton of threats, random DoS attacks, mailbombs, ping-floods, and a lot of stuff because various dipshits couldn't understand the basics about what an open relay was.

    The more ironic thing was finding out that before the deluge happened, I got an extortion letter threatening that postmaster and other E-mail IDs on the web from the site would be used as fake originations.

    So some business with the absolute bargain-basement IT staff, chock full of bargain-basement novices is going to decide if a compromised workstation the receiving department at another company is sufficient cause enough to shut that firm down? This would be like carpet-bombing an entire office building because a bank robber ducked into the building's lobby.

    Here is where real/virtual separate and analogies doesn't work: It is not difficult to cover one's tracks, especially with how many botnets there are on dynamic IP address ranges.

  5. Re:What algorithm/primitive? on Microsoft Creates a Quantum Computer-Proof Version of TLS Encryption Protocol · · Score: 2

    High volume server farms doing lots of web transactions. A 20% addition might mean having to have that many more servers behind the load balancer to handle the algorithm's added CPU load.

    However, if it does protect against an up and coming attack, that penalty might not seem as bad compared to a protocol break.

  6. What algorithm/primitive? on Microsoft Creates a Quantum Computer-Proof Version of TLS Encryption Protocol · · Score: 2

    They went into Shor's Algorithm, ECC, and such... but the article doesn't seem to show what algorithm they decided to go with that is resistant to quantum factoring.

    Are they going with something lattice based?

    Would be nice to have more details on what they came up with... 20% performance can be important, but what is more important is how the algorithm resists different attacks.

  7. A VM... on Privacy Alert: Your Laptop Or Phone Battery Could Track You Online · · Score: 1

    Probably the best fix for these shenanigans is a VM. Since the VM has no clue what battery status it is running on, nor CPU (especially if you use CPU masking), there is a lot less an advertiser can go on, especially if the VM is rolled back to a clean snapshot after each browsing session.

    However, this does nothing against browser fingerprinting (actually nothing really does help here.)

  8. Hasn't this been done before (read P3P) on EFF Coalition Announces New 'Do Not Track' Standard For Web Browsing · · Score: 2

    We already has a privacy initiative, something called P3P which fizzled. DNT went nowhere, and this project is probably going to go nowhere as well.

    The reason is that there are many, many companies whose basis of existence is to intrude as much as they can on the user browsing a site. If they can inject adware/malware, they would.

    Real DNT consists of AdBlock, click-to-play or FlashBlock, then keeping the Web browser separated from anything vital, be it in a VM, sandboxed, or both. That way, LSOs or other "super-cookies" left behind are dealt with.

  9. I'd add a Windows VM, sandboxIE and a VPN onto the list. It isn't as secure as TOR, but it does at least put a speed bump in place if someone is on your LAN trying to do shenanigans.

    Eventually, I might put the VM on a vSwitch with a PFSense firewall, so I can set up a router ACL to drop all the bad sites there, but keeping the web browser running as a non admin user and in a sandbox will do a lot, and if there is some API calls that the sandbox program doesn't catch, it still has to get out of the VM.

  10. YouMail does this quite well... on Apple Testing Service That Allows Siri to Answer Calls and Transcribe Voicemail · · Score: 1

    I've been quite happy with YouMail for exactly this. It not just transcribes messages, but allows you to save the voice mails, not to mention ditch problem callers, either those on the robocall lists or people you don't want to deal with.

    Plus, it can play a different voice mail greeting per caller if you want.

    Of course, this works regardless of phone. If I'm using my iPhone, it works. I swapped the SIM to my HTC device? Still works. No platform lockdown.

  11. This is an issue of "won't", or "not worth bothering with" as oppose to "can't". What it boils down to, is the "security has no ROI" philosophy. If a machine gets hacked? The maker can just throw up their hands and said the bad guys would have gotten into it anyway. This seems like how the entire IoT ecosystem is designed

    We started down that road in the 1990s, as PCs went from being in physically sturdy, secure, lockable cases with real locks (Medeco, not just those four-pin cylinder keys), to machines that don't even sport a Kensington lock slot.

    Companies can make secure products. It took five years for the PS3 to be cracked, and the latest generation consoles are being attacked by the world's best and brightest, and still not even a mention of a break has been seen. Satellite piracy is at 0% now. Even speed-hacking in WoW has been effectively stomped out.

    If just a little bit of effort was put in, such as only allowing firmware to be flashed with signed packages, and enforcing that on the device itself, this wouldn't be an issue.

    Of course, keeping malware away from hardware is a solved problem. Maybe it is time for all computers to have a built in hypervisor and run everything in VMs, which provides isolation from the hardware, and keeps firmware flashing attacks from happening.

  12. Re:Maybe someday on Researchers Create Mac "Firmworm" That Spreads Via Thunderbolt Ethernet Adapters · · Score: 2

    I'm reminded of the "frozen" state with hard drives where the only time one can set or erase a password with them is just after boot, and before the OS loads.

    Maybe this should be passed to other devices as well? UEFI or the BIOS passes the same "freeze" command to all devices on the machine, which makes them ignore any requests for firmware updates until the machine is powered off. This way, upgrades are doable, but it takes the user doing something specific to do them.

    As an added bonus, the upgrades would be doable via iLO, so this would be a hair-puller for the enterprise.

  13. Re:How is this even possible? on One In Four Indiana Residents' E-Record Data Exposed in Hack · · Score: 1

    That is the same principle how a proper BOFH does backups. Everything goes to /dev/null, and is properly "encrypted" with the above table. Fast, few I/O errors, and properly secure.

  14. Re:1 Gbps on In Korea, Smartphones Use Multipath TCP To Reach 1 Gbps · · Score: 2

    With multipath TCP, I can hit my quota on the DSL link, the DOCSIS based link, and the cellular link, all simultaneously.

    I'll sign up for that newsletter.

  15. Re:HAHAHAHA! on Will Autonomous Cars Be the Insurance Industry's Napster Moment? · · Score: 1

    Texas, one can be self-insured by ponying up a $55,000 bond to the state, or posting a bond that a lien can be placed on one's real estate.

    Honestly, I'll just take the insurance. $55k isn't a lot, relatively. Tap a car, and that is often less than the medical bills of the driver + the vehicle (which likely would wind up having to be replaced.) Plus, insurance companies provide lawyers while without them, you have to provide your own and fight all court cases yourself, which can be a major time waster.

    As for insurance and autonomous cars, I would be genuinely surprised if rates drop, mainly for one simple fact: The first gen of these vehicles will need to have a manual override, especially for vehicles that go into rural areas or on farmland. So, insurance on those will stay the same. Vehicles only used in cities, and subsequent generations that never require driver interaction? Who knows. I wouldn't be surprised to see rates dropped, only to be raised on some other facet of life, such as health insurance.

  16. Re:How timely... on Oracle To Debut Low-Cost SPARC Chip Next Month · · Score: 3, Interesting

    SPARC and POWER still have a place. There are some computing tasks that can't really be split up among multiple nodes, so they still require gigantic CPU requirements. Usually this is related to legacy databases which cost less to keep on the legacy architecture than spend the time to try to move it to PC clusters.

    Another use for SPARC and POWER (and to a lesser extent, ARM) are security applications. In theory (and this is theory, mind you), if another F0 0F bug is found on the x86 platform, perhaps giving attackers remote access to ring 0, having multiple architectures will help mitigate the effects of it.

    Of course, with SPARC and POWER, virtualization is an integral component of both platforms, and for some tasks, it just might be the case that slicing off a lot of LPARS and zones may be cheaper than buying a lot of PCs and using a VMWare cluster, due to the license fees involved.

  17. Re:Electric is Evolution. Driverless is Revolution on Are We Reaching the Electric Car Tipping Point? · · Score: 1

    Light rail does make sense, but the problem (especially here in the US) is getting right of way and having it be placed where it is the must usable. For example, Austin has light rail proposed every few years... but it would only connects the most affluent communities to each other, doing no benefit where it is truly needed. The places where it could do the most good to alleviate congestion, it never gets proposed, just because there are not the lobbyists to drive it forward.

  18. Re:Doubtful on Are We Reaching the Electric Car Tipping Point? · · Score: 1

    Depends on area. Here in Austin where tenants actually are forced to bid for their rent price when their lease expires, just having an apartment for under $2000/month is a nice thing.

    Until the economy tanks and apartments are extremely desperate to find renters, I really don't see EV charging stations going mainstream. Some "luxury" apartments, sure... it is a good way to have a reason to raise rent. However, there just isn't any incentive in this economy (which belongs to the landlord, especially with mortgages being so hard to come by for most people) for anything to be added to an apartment except more fees.

  19. Re:Error 1 on Are We Reaching the Electric Car Tipping Point? · · Score: 1

    At the other end, there are Pacific Pride cardlock stations that are a set of pumps and card readers, and nothing else. One pulls up, swipes the card, fills up, and heads out. No attendant on duty. The advantage of these places is that you don't have to wait in line at a pump while someone goes in and grabs lunch.

    I can see this being useful for a no-frills way of charging or swapping batteries, where someone wants to be on the road, and not pissing away time in line waiting for someone to stop looking at their phone long enough to pay for their bag of Doritos and their 160 ounce soft drink.

  20. Re:Not competition for steam machines. on Windows 10 App For Xbox One Could Render Steam Machines Useless · · Score: 0

    If Microsoft created a render server (think OnLive on the LAN) where I can have a box stuffed full of GPUs, and machines on the LAN send it the graphics commends, and get real time streaming video back, then I'd be worried about Steam machines.

    This setup? Not so much.

  21. Bingo. People are throwing up their hands and surrendering, when in reality, the bad guys tend to use fairly simple means to get their data.

    A few things that help privacy for me:

    1: Visit people, and have face to face conversations. Phones should go off, or in a pocket.

    2: Have 2FA. This right here stops all but targeted attacks where an attacker is spending resources just to nail one certain person. To help with recovery, buy the new iPod Touch and copy your 2FA info onto that as well, so more than one device has the 2FA apps and codes.

    3: Separate boot authentication from user authentication. My Windows box requires a hefty password to boot with BitLocker. Similar with my Linux machines and LUKS.

    4: AdBlock, FlashBlock/ClickToPlay, and run your Web browser in a VM. Also work on dealing with Web fingerprinting (visit EFF's Panopticlick for more details.)

    5: Avoid social networks. Once stuff goes there, it stays there.

    6: Virtualize everything. Using Quickbooks or Peachtree? Put it in an encrypted VM.

    7: Since some games will autoban you if you run them in a VM, perhaps consider a dedicated Windows partition just for those.

    8: Here in the US? Go with EMV credit cards with no stripe. Banks are slowly rolling them out. This way, a credit card number can be grabbed, but it would be a card not present transaction, as opposed to slurping the info off the magstripe.

    9: Minimize use of IoT devices. No Wi-Fi deadbolts, etc.

    10: Have a smart firewall. One that blocks outgoing traffic. I used to have one that used a cheap remote that would raise/drop a voltage on a serial port, so when I left, I could hit the remote, and the machine handling the routing duty would insert an "away" ACL set (which basically blocked outgoing traffic except for OS updates.)

  22. Re:cost per bit... on Intel and Micron Unveil 3D XPoint Memory, 1000x Speed and Endurance Over Flash · · Score: 4, Interesting

    I can see this being used two ways:

    A fast SSD.

    A swap device/slow RAM.

    This can make things interesting for SANs, especially because it adds another tier to the disk type hierarchy.

    I'd like to see it used as a cache, as well for swap and the core OS files so booting is made quicker. However, it would be useful for database index volumes as well.

  23. Re: So what? on HP R&D Starts Enforcing a Business Casual Dress Code · · Score: 2

    I've found that "business casual" means a lot of different things as per workplace.

    When I first started at a call center ages ago, "business casual" meant the people on the phones had to wear a suit, tie and jacket, but there was the relative luxury that the top button could be unbuttoned.

    Another startup, "business casual" meant just three layers of food in your beard.

    Still another place used the expression to mean that wearing a decent golf shirt tucked in is OK.

  24. Re:EMC Isilon on Ask Slashdot: How Do You Store a Half-Petabyte of Data? (And Back It Up?) · · Score: 1

    Isilons are a cool technology. Take FreeBSD, add a custom filesystem (OneFS), link individual nodes via Infiniband, and let the custom code automatically select which nodes/drives to fetch data from. If a hard drive blows, it shrinks the array in order to maintain redundancy.

    Of course, Isilons support deduplication, iSCSI (you create a disk image and mount that), and your NAS protocols of choice. If you set a hard quota, the presented directory can be configured to show the quota as the disk space present. Very nifty, and not that expensive for an enterprise array. Need more space? Add drives or more nodes.

    For long term backups, Isilons support NDMP [1].

    [1]: Of course, you can always connect a tape silo to a UNIX machine, write a script that SSHes into an Isilon node and pulls off /ifs/data.

  25. Re: Talk to Vendors on Ask Slashdot: How Do You Store a Half-Petabyte of Data? (And Back It Up?) · · Score: 1

    Unless I'm completely hallucinating, I have set up MPIO on ESXi for iSCSI, as well as a LAG (link aggregate) for a NFS based backing store.

    iSCSI has its place in the enterprise, and it can be used in production. If the NIC supports it, it can even be used for booting. How does it fare against 8GB FC? In reality, there are a few tasks which will saturate a 10GB iSCSI link or an 8GB FC link, but not that many.

    All of these are just tools in the toolbox. iSCSI is easier to get going ad-hoc (but still be useful with MPIO), FC is well known and well used, and FCoE seems to be popping up because it works well with Cisco Nexus architecture.