Slashdot Mirror


User: cloudmaster

cloudmaster's activity in the archive.

Stories
0
Comments
2,312
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 2,312

  1. Re: User land == not kernel on Zip Slip Vulnerability Affects Thousands of Projects (theregister.co.uk) · · Score: 1

    So many people post without having any creativity... Here's a helpful example:

    Unzip to ../../.bash_profile knowing that this is run in $HOME/.programrc/modules/
    Include "sudo runstuff" in new file
    Profit

  2. Re: so how do you prevent from scanning your plate on Repo Men Scan Billions of License Plates -- For the Government (washingtonpost.com) · · Score: 1

    While the joke isn't lost on me, it misses the point. Your home address is already known from several other databases. The risk here is more in identifying your travel patterns. If you're being scanned often enough in "public," logic can identify that you must be at home when you're not found somewhere else.

  3. Re:Pay: Apple vs Samsung use on Ask Slashdot: Are There Any Good Smartwatches Or Fitness Trackers? · · Score: 1

    Samsung Pay gets 100% of the mobile transactions made with my phone. And Apple Pay has zero percent of the mag stripe reader transactions.

  4. Re: How do I actually "upgrade" my Linux. on 'Stack Clash' Linux Flaw Enables Root Access. Patch Now (threatpost.com) · · Score: 1

    This being a kernel issue, the kernel package is what gets updated. You use the same apt upgrade command to update linux-image as everything else. You've probably already done so several times without even noticing - aside from the need to reboot afterwards.

    Here's the Ubuntu page on the defect, along with instructions if you need them.
    https://www.ubuntu.com/usn/usn...

  5. Re:Some odd discoveries from working at home. on WSJ: There's An 'Inexorable' Trend Towards Working Remotely (foxbusiness.com) · · Score: 1

    The drink machine and snack/supply closet is a fantastic idea; suddenly I feel like reading Slashdot was actually worth it today. :)

  6. Re: By "synchronize", you mean "backup" on A Database of Thousands of Credit Cards Was Left Exposed on the Open Internet (zdnet.com) · · Score: 1

    You allow remote root login? Doh.

    Set up a nopasswd sudo rule for rsync and add this to your rsync command: `--rsync-path="sudo rsync".` Then connect as a regular user.

  7. Blocking signatures was one of the best options Slashdot added. For every good one, there were quite a few bad ones. Honestly, I had forgotten that signatures even exist on /. until now. :)

  8. Re: Industrial accident on A Rogue Robot Is Blamed For a Human Colleague's Gruesome Death (qz.com) · · Score: 2

    If only it had been connected to the Internet...

  9. I use "storename.or.website@catchall.domain" pretty consistently here in the US, and I've found a huge number of stores which apparently do provide their mailing lists to anyone and everyone. Equifax - the "reputable" credit reporting company - seems to be among the worst; I get a ton of spam to equifax@catchall.domain.

    I should probably publish a list online somewhere from my spam logs... :)

  10. Re: Basic ettiquette pays I guess on Ending Emails With Certain Variation Of Thank You Vastly Improves Response Rate, Study Finds (inc.com) · · Score: 1

    Wait, people actually say "ecks-muss"? They're poorly informed.

    The "X" is used because it looks similar to the Greek "Chi," and is the closest letter chosen to represent "Christ." In the early to mid nineteen hundreds, it was suggested by several style guudes that "Xmas" be used as an abbreviated way to /write/ "Christmas" in places where space was limited, like store sign boards and such. It's been used that way for centuries, though. And it's not pronounced as an "x"; the word is still pronounced "Christmas."

    There's a better, more detailed write up at Wikipedia: https://en.m.wikipedia.org/wik...

  11. Re: Trump is requesting an amendment on US Finalizes Rules That Require Quiet Hyrbid and Electric Cars To Make Noise At Low Speeds (reuters.com) · · Score: 2

    They tried, but ultimately failed.
    http://articles.latimes.com/20...

  12. Re: At least my pin 8068 is safe on How Common Is Your PIN? (datagenetics.com) · · Score: 4, Funny

    I have a Post-It stuck to the bottom of my keyboard with the word "pa$$word1" written on it, and have for years. I like to imagine that one day someone will try logging in to my account with that, thinking to themselves "wow, the sysadmin has a terrible password" just before it doesn't work.

    It's the little things that get you through the day...

  13. Re: Oh, they're a big company, on Windows Telemetry Rolls Out · · Score: 1

    I also installed Windows 10 through the early adopter / developer program thing, and have not seen any of that crap (though the start tiles sure show enough other garbage that I don't care about). It's presumably an OEM load thing? /logging in for the first time in months just to avoid the anon post

  14. Re: open source 2 factor authentication? on JP Morgan Breach Tied To Two-Factor Authentication Slip · · Score: 3, Interesting

    Google Authenticator is an open source, easy to use TOTP (and HOTP) implementation which is not bad at all. The pam module is decent, and the smart phone (androit, ios, and blackberry support) client's QR Code enrollment is very convenient. Because [TH]OTP are standards, it's compatible with any other implementation of those standards, such as http://www.nongnu.org/oath-too... and the Yubikey tokens.

    Personally, I use the Google Auth client with pam_krb5 / mit kerberos using a custom preauth plugin with totp keys generated by oath and stored in an LDAP backend. It's pretty neat. I mostly went with TOTP because that allows me to more easily pre-generate keys for automation jobs, btw.

  15. A million times THIS.

  16. Re: Quite possibly the stupidest vulnerability eve on Grinch Vulnerability Could Put a Hole In Your Linux Stocking · · Score: 1

    Krampus, obviously.

  17. Re: YES !! on Is Enterprise IT More Difficult To Manage Now Than Ever? · · Score: 1

    Everyone hates Clear Case, except for the joker above who clearly works for them. If the mvfs implementation which implements a recursive loop (don't ever blindly use find on an mvfs volume) isn't bad enough to convince someone, the lack of granular access control and the incredibly clunky interface should be.

  18. Re: Live in a cave on Stack Overflow Could Explain Toyota Vehicles' Unintended Acceleration · · Score: 2

    Weird. The stock brakes on both the '95 Caprice and '96 Impala SS sitting in my driveway can hold the car in place. That was true when the engine was stock, and is still true after adding a shift kit, PCM tune, cat-back, intake, and valve train upgrades. It's been true on both the factory tires and the substantially wider aftermarket tires. It might be time for you to replace your brake material; you're seemingly endangering the other cars on the road.

    When you're trying to power brake, BTW, you'll want to let up on the brakes just a little, and mash the gas. Don't ease in to it. ;)

  19. Re: Live in a cave on Stack Overflow Could Explain Toyota Vehicles' Unintended Acceleration · · Score: 2

    Well, if it was in article comments on the Internet, that's a whole new story... ;)

    No one sells a car in the US with exclusive brake-by-wire, because nearly every state mandates the existence of a second braking system independent of the primary braking system. That's often the thing people call the "emergency brake," as compared to the "service brake." For IL, look at Article III at http://www.ilga.gov/legislatio.... They must be separated such that a failure in any one part does not leave the vehicle without brakes. IL also prescribes a maximum stopping distance from a couple of speeds.

  20. Re:They probably don't want to burn affiliates on ABC Kills Next-Day Streaming For Non-Subscribers · · Score: 2

    It's not really "free" to watch OTA - you have the show interrupted every few minutes by commercials, which cost you time. The problem here is that OTA broadcasting costs pretty much the same whether it goes to one TV or one million. All they pay to do is vibrate the air[1]. Cable's not that different. With Internet streaming, however, each individual connection typically costs more.

    The solution is to fix the medium, IMHO. Big networks and content producers should be pushing for less expensive bandwidth or, even better, for working multicasting. :)

    [1] yeah, I know how radio actually works, but I'm trying to make a point here.

  21. That's backwards on Ask Slashdot: Do You Run a Copy-Cat Installation At Home? · · Score: 1

    The premise is backwards. Computer geekery is my hobby, so of course I do it at home. I have a job doing something that I love, so I've roughly duplicated my hobby environment at work. ;)

  22. Re:Ethanol is a crock nobody wants on Can the US Be Weaned Off Ethanol? · · Score: 1

    Here in the US, most new cars have fuel systems which are just fine with E85 (or more) as well. They just lack the appropriate sensors to identify the varying ethanol mix, and like the parent noted, lack adequate injector flow to handle the increased volume needed - 'cause that stuff costs money. :)

  23. Re:And in the process .... drop 10mpg on Can the US Be Weaned Off Ethanol? · · Score: 4, Informative

    So, by replacing 10% of the gasoline with ethanol, you lose 20% of the energy? Man, ethanol really sucks! Does E85 reduce a flex fuel vehicle's mileage by 170%, then?

    Since "anonymous coward" clearly doesn't know the answer, I'll help. People typically report losing about 20% of the mileage with E85 v/s gasoline, assuming no other changes (it's actually closer to 34%, but E85 is only 85% max, and then only in the summer; it's way less in cold weather, so that's probably why people see an average of 20-ish percent). Running E10 costs around 3% of your mileage, which is 1MPG in a 30 MPG car - or about the difference you'd see if you accelerate briskly from a couple more stoplights than usual.

  24. Re:List of alternatives to facebook? on Facebook To Overhaul Data Use Policy · · Score: 1

    Anything big enough to be a relevant general-use competitor will have a difficult time resisting the "suggestions" made by the NSA that "it would be for the best" if the data were made available to the government. You could easily set up a restricted access Word Press blog on your own server and give your friends author access, though. Then you can all write about your days on your own site, get emails when new posts are made, and generally keep in touch without everything being logged.

    Or set up Majordomo and email each other. Or whatever else. ...Assuming you can set up good enough encryption, anyway. Otherwise, Prism has your number anyway. :)

  25. Re:What The Fuck? on Facebook To Overhaul Data Use Policy · · Score: 2

    So, the article at the top there is about selling advertising, which is a way to facilitate business people to communicate with their customers via Facebook. And you're suggesting that the idea of doctors communicating with their customers via Facebook is a ridiculous proposition which would have no application in the real world? Please come back when you're put a tad more thought into this, Anonymous Coward.

    PS: I personally know at least two doctors treating chronically ill patients with whom they regularly communicate via Facebook. I might know more, but this is not a topic that I discuss with everyone I know. :) Normally, anecdote is not the sigular of data, but in this case I'm pretty sure that there has been "protected health information" recorded in Facebook's data centers.

    Which bring up the question as to whether they're doing enough to comply with HIPAA laws. And PCI laws, as some bone head has probably sent credit card numbers through "private messages" at some point. With sufficient creativity, it'd probably be possible to shut Facebook down through regulatory compliance audits, unless their TOS is equally creative. ;)