Slashdot Mirror


User: sjames

sjames's activity in the archive.

Stories
0
Comments
34,276
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 34,276

  1. Re:What benefit to announcing it? on 'Stagefright' Flaw: Compromise Android With Just a Text · · Score: 1

    Apple is the best of the bad, Google is slipping and breaking promises and as usual, the carriers are making squishy sounds in the slime pit.

    But since the entire concept of the free market depends on well educated consumers, the FTC should make the market stronger by forcing them all to state the service life up front and stick to it. For the good of the market.

  2. Re:What benefit to announcing it? on 'Stagefright' Flaw: Compromise Android With Just a Text · · Score: 1

    But the devices won't last forever, so that's not what is being asked of vendors. Support as long as the hardware can reasonably be expected to last in significant numbers is a much shorter period of time and probably not so much of an ask.

    If they don't want to commit for that long, perhaps they should advertise their product as disposable.

  3. Re:Valasek and Miller are assholes and should be a on Remote Exploit On a Production Chrysler To Be Presented At BlackHat · · Score: 1

    Your brother in law was killed by hitting a moose TWICE? Resilient fellow, isn't he? :-)

    We all take 'unnecessary' risks daily. Is the food network horribly irresponsible for encouraging me to use a sharp knife? After all, if I just buy the frozen dinners I need not expose myself to the minuscule risk of a fatal injury. Some of those psychos even suggest a blender! I could order the frozen dinners online to avoid the risk of driving to the grocery store.

  4. Re:No kidding. on Google Studies How Bad Interstitials Are On Mobile · · Score: 1

    That's because it gets shoved in there by the OEM and can't be removed without rooting the phone.

  5. Re:There might be a reason on A Plea For Websites To Stop Blocking Password Managers · · Score: 1

    Doubtful. People doing password guessing attacks don't use an actual browser to do it.

  6. Re:Ironic on Police Shut Down Anti-Violence Fundraiser Over Rapper's Hologram · · Score: 3, Insightful

    The government was not asked to give him a microphone. The promoters did that. Meanwhile, he was never at the park.

    The KKK and Neo Nazis march all the time with permits in hand because the government DOES have to let them. They are often jeered by bystanders when they do.

    I presume your sig is meant ironically?

  7. Re:Under what authority? on Police Shut Down Anti-Violence Fundraiser Over Rapper's Hologram · · Score: 1

    And then the cops will snap the leash, the dog will bark, and they will claim that means you have narcotics on you. Then off to jail you go, having never breached the peace.

    This happens because they 'happen' to know that selling narcotics is illegal, not from any function of maintaining the peace.

  8. Re:Since when is a video a "hologram"? on Police Shut Down Anti-Violence Fundraiser Over Rapper's Hologram · · Score: 1

    As long as we're being pedantic, Pepper's Ghost is actually limited 3D. If you move your head, you can see around obstructions in the projected image. It's more 3D than a 3D movie is.

  9. Re:Ironic on Police Shut Down Anti-Violence Fundraiser Over Rapper's Hologram · · Score: 1

    If the court that wants him is part of the government that blatantly violates the 1st Amendment, he may be justified in questioning if his other rights will be honored should he appear.

    Like it or not, once the government starts sliding down the slippery slope, those questions become justifiable.

  10. Re:Under what authority? on Police Shut Down Anti-Violence Fundraiser Over Rapper's Hologram · · Score: 1

    Then they should limit themselves to that. If one guy hands another money and the second guy gives the first guy a nondescript envelope, the peace has not been broken at all. But you better believe the cops will be questioning you about it in intense detail if they see it.

  11. Re:Under what authority? on Police Shut Down Anti-Violence Fundraiser Over Rapper's Hologram · · Score: 2

    It's a pretty straightforward ban on free speech. The supposed purpose of a permit on public land is to allow for appropriate planning on the government's part for the added crowd, avoiding conflict with other people's free speech when they have an event (by making them not happen on top of each other), and making sure the non-speech activities are legal (no smoke ins, narcotics sales, etc). That's all it is supposed to be. A permit that restricts speech is unconstitutional on it's face.

  12. Re:You didn't get far in reading on The OpenSSH Bug That Wasn't · · Score: 1

    Really, it depends on the environment. If you have servers in a lights out environment rather than 24/7 on-site staff, less moving parts is good.

    It's a shame if where you are asking HR to do all of their job is too much, especially with employees identified as security sensitive.

    If the machine normally doesn't need to allow ssh, you can always choke it down to a pair of very reliable admin servers (Perhaps atom based systems with no moving parts) that authorized users can use as a jumping off point using the ssh-agent (so that the admin servers contain no private keys).

  13. Re:How much is an AG these days? on Plan To Run Anti-Google Smear Campaign Revealed In MPAA Emails · · Score: 4, Insightful

    This is WAYYYYYYY beyond lobbying. This is a state AG committing state resources to a private business vendetta.

  14. Re:They should change the EULA on Twitter Yanks Tweets That Repeat Copyrighted Joke · · Score: 1

    Arguably, by publishing on Twitter, a medium well known for re-tweeting being normal behavior, you have implicitly granted permission.

  15. Re:You didn't get far in reading on The OpenSSH Bug That Wasn't · · Score: 1

    If HR fails to notify IT to remove an account for someone who has access to root in any way, the same problem happens. That's why I leave it accessible through RSA authentication.

    That same old script would have worked if you used sudo or an IP KVM.

  16. Re:Let me see if I have the meeting right on HP R&D Starts Enforcing a Business Casual Dress Code · · Score: 2

    That's why calling someone a 'suit' is not a complement.

  17. Re:um...yay? on HP R&D Starts Enforcing a Business Casual Dress Code · · Score: 1

    This. When the dress code gets strict and the SciFi posters and paraphernalia come down, the company is sinking. When I see that happen at a vendor's place of business, I start looking for a new vendor.

  18. Re:Meta data? on Georgia Lawmakers Sue Carl Malamud For Publishing Georgia Law · · Score: 2

    However, because the state itself is filing suit, it is claiming ownership of those annotations. That's fine, but the state is not permitted to hold copyrights because it is a body of the people.

    So, either Georgia owns the annotations and so they're free for all or Georgia does not, and so has no standing to sue.

  19. Re:However the attitude above is broken on The OpenSSH Bug That Wasn't · · Score: 1

    Set PermitRootLogin without-password

    Then control access with authorized_keys. If someone leaves, remove his key from authorized_keys.

    Next step, laugh at the 'hackers' wasting all that effort trying to guess the root password.

  20. Re:Valasek and Miller are assholes and should be a on Remote Exploit On a Production Chrysler To Be Presented At BlackHat · · Score: 1

    Less than 1% is an understatement. You haven't even shown that it's more likely than a moose related fatality or a deer attack. (look up man killed by moose and see how many hits you get despite the extreme unlikelihood of the event).

    Even when you do see a fatality related to a stalled car, it's a car that wouldn't re-start and where someone got out of the car.

    I will point out that if we're down to the range of inconvenience being enough to justify a risk, we're already far away from the screeching about being extremely irresponsible that started this thread. It's very likely the author accepted a larger risk of an accident in the process of going to see Valasek and Miller than he did during the test.

  21. Re:Focus! on Study: Push Notifications As Distracting As Taking a Call · · Score: 0

    Apparently we do considering all the multitasking devotees running around with an effective IQ of 80 or less.

  22. Re:Arm chair quarterbacking on Remote Control of a Car, With No Phone Or Network Connection Required · · Score: 1

    And experts in security have been warning them repeatedly that something like this was inevitable for many years.

  23. Re:Arm chair quarterbacking on Remote Control of a Car, With No Phone Or Network Connection Required · · Score: 2

    I don't think the idea that hackers might have excessive fun with a computer controlled system is such an obscure thought to have in the 21st century. Especially since they have been REPEATEDLY warned in public and in private about the risk for over a decade.

    This wasn't just ignorance, it was WILLFUL ignorance.

    Hey, look out for that piano! It's about to fall on your head!!! MOVE!!!...RUN FOR YOUR LIFE!!!!!!!!!!!

    (5 seconds later) CRASH! Well, to be realistic, how could he possibly have anticipated a piano falling on him?

  24. Re:Why?? on Remote Control of a Car, With No Phone Or Network Connection Required · · Score: 1

    It wouldn't be so bad if they would place a proxy between the critical systems and the infotainment such that the critical systems were effectively read only (so long as the proxy was a separate box that NEVER accepts commands from the infotainment side), but HEY, what's a few fatal brake failures when they can save 5 bucks?

  25. Re:They're worthless. on Why Certifications Are Necessary (Even If Aggravating To Earn) · · Score: 1

    During post, the keyboard lights will tell you if the BIOS did/did not get far enough to reset the keyboard controller or enumerate the USB tree (depending on the keyboaard). I have seen some BIOS that will output diagnostic info deliberately on the keyboard lights if it can't get video up.

    It's enough that answering A and B shouldn't be considered wrong.