Slashdot Mirror


User: VortexCortex

VortexCortex's activity in the archive.

Stories
0
Comments
5,203
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 5,203

  1. Re:As a Linux user I want to support them, but... on Myst Creators Announce Obduction · · Score: 1

    This is quite typical for kickstarter. "Maybe we'll do Linux, you know, if the Windows users give us a lot of money." It's awkward.

    But honest.

    You only have to glance at the pie sales charts posted with every Humble Bundle to see that much.

    Yep. Sadly the HiB folks are largely outsourcing wine wrappers or making rookie mistakes (like linking to specific versions of a shared lib instead of the symlink), but it won't be that way forever. I develop on Linux primarily in my work, and so I do the same for the game projects I do for fun. I do the Linux implementation first, then port the changes to the windows version... It's sort of falling behind the Linux version of the game engine since my other fellow devs use Linux now too.

    The other day we were talking about whether to push the Linux version out ahead of the Windows version, since it'll be done first, or wait to get native windows support in and tested before release. We didn't come to a consensus, the basic opinion was that since few indie games actually make it we should probably not worry about it, this is just one in a series, and by the next game the engine will be up on the major OSs... Except OSX, since Apple's EULA makes it illegal to install that OS on my hardware. I had a choice when buying hardware, and my setup is both cheaper and more powerful than Apple's highest end hardware, so no OSX (dumb on their part since OSs are irrelevant, it's the software that matters). If we make any money on the games, and there is demand, then I'll use it to buy hardware for an OSX build environment.

    Do a Kickstarter to buy more development hardware? What, you mean BEFORE there's even a solid playable demo of the first few levels? No, you've got to at least show you can execute on an idea and have a playable demo before I'd donate. Got to prove the concept is actually fun, eh? Reputation is nothing, ideas are a dime a dozen. Experienced folks make flops all the damn time. "Test it and see" is our motto. You can't playtest an idea. You can't tell if a video game design that sounds fun on paper will actually be fun without at least a prototype... Kickstarter funders are slowly learning this too.

    I'm not alone in my choice of dev platforms. Linux 1st devs are a growing minority. I know one thing: Windows8 "Metro" UI (proprietary managed code C# vendor lock-in) can go screw itself. MS wants a cut of all software profits -- I'm not eating their cut of sales. You are. That $10 game will be $14 instead to pay the MS app-store tax. That goes against my core values, so you'll not get any metro ports from folks like me. 30% cut for what? Even Google and Apple make me sick in this regard with their app stores. At least you can side-load on Android.

    Really, I can't see how any legitimate company can rationalize not starting off a new project with a cross platform toolchain. I'm crazy for creating a new engine, but there's a method to my madness, games are an excuse to make a 3D OS -- I can afford to experiment because I have a day-job, and I don't actually care about money -- I make games for the love of it. However, for a business? Imagine that board meeting: "We've decided to let Microsoft's uncertain future in the Operating System market dictate our success... Instead of targeting all the OSs at once, despite cross platform solutions existing that are the same cost or cheaper to develop with...."

    Dum de dum dumb dum dumb.

  2. Re:It's called Solitaire on Myst Creators Announce Obduction · · Score: 1

    and comes free with Windows. What other game has you endlessly clicking on things, hoping that something will do... anything.

    Muh- Minesweeper!

  3. Re:SO... on Printable Smart Labels Tell You When the Milk's Gone Bad · · Score: 1

    But you can't patent the human nose (only possibly sections of the genetic sequence that create it).

    At least this is a temperature sensor it appears, and does not detect spoiled milk that is simply too old.
    I'd feel bad if we've degenerated to a point where people need to use a color-coded label because they couldn't read expiration dates.

    Whoever tries to patent gene sequences ain't worth the whoopie that gave them theirs... Now, us old folks might have a bit of trouble reading expiration dates sometimes I don't want to make it all the way back to the bedside just to put my teeth back in. And another thing: I refuse the "too old" labeling! My memories not what it used to be, but I've got know-how -- Experience. I've been degenerating longer than most of those labelers have been degenerates trying to push their newfangled "solutions" and re-invent us out of the job market! COBOL is still Relevant! GCC supports Fortran! You Perl scripting whipper snappers put a CGI front end on it, but somebody's got to maintain those banking system back ends.

    ... Now, Where in the Sam Hill is my damn lawn?!

  4. Done. on Has Flow-Based Programming's Time Arrived? · · Score: 2

    "Everything Flows"
    -Cyberneticists

  5. Re:Greed on How Science Goes Wrong · · Score: 1

    FYI, 'trust, but verify' is also a great rule of thumb for spell-check.

    Fly eye, thrust butt there if I is lasso agate drool oven for voice recon fish in.

  6. Re:Programs! on Visual Studio 2013 Released · · Score: 1

    What better way to expand your attack surface.

    Truly, in the Age of Information, the Hackers shall inherit the Earth.

  7. Re:Any better than SSL client certs? on New Standard For Website Authentication Proposed: SQRL (Secure QR Login) · · Score: 1

    Yah! I'm authenticated on a public computer that may be compromised! Now the compromised machine can act as me! You're a moron.

  8. Re:SSL client certificate authentication on New Standard For Website Authentication Proposed: SQRL (Secure QR Login) · · Score: 1

    Basically, yes, but client certs change. Gibson wants to keep a static cert -- Or effectively: use HMAC( clientID , domain ) to generate a cert, so one client secret is kept safe, and used to generate a different cert for use with each domain, in such a way that you can re-generate the cert for any domain.

    The system falls down on two points: It's essentially the same as existing tech: SSH keys, or password protected PGP keys. IE, the single point of failure is the same; And the authentication is cued via insecure link. In other words, See also: SSL Strip.

    I've looked at all these fancy (read: retarding) authentication protocols. They're all equally moronic when applied to the web because the authentication is not built in to the browsers and servers -- That's all we need, no fancy bullshit security theater.

    Here, Let me lay in out for you: MITM just replaces the QR code with their own, authenticates with the client, and plays the role of the client to the server. Now, if the client has previously registered with the server then the MITM attack will be detected because they don't have the client's secret key, very true. However, if they were in the middle from the very beginning -- During the first user authentication, then they can successfully MITM it and all future sessions. Game over.

    Compare this with a DAMN DEAD SIMPLE symmetric stream cipher and pre-shared key. User says: I'm $USER, and server sends a nonce, they both hash the nonce with the share secret (passphrase) and use that output to key the symmetric stream cipher. No MITM can attack the pre-shared key because they don't have the shared secret key. Ah, but how do new users get created? IE, How do you share that first key? Well, there's the Diffie Hellman Fancy obfuscation which merely moves the pre-sharedness to the Diffie helman keys. Seriously, it provides secrecy, but not identity verification, so the MITM can attack it via aforementioned initial secret interception. So, we created the public key cert chain system to provide authentication, but we fucked up and the hong-kong post office can create valid certs for google.com without Google's permission, and Verisign can be compelled by their government to generate certs too. That means the shared secret you must have is then which cert is the valid server cert. See? It's pointless. You MUST have a pre-shared key between the endpoints. All the other non-sense is just obfuscation around this basic premise. 90% of the security field are MORONS who don't grok this.

    So we've just shifted around the FACT that you must FIRST share a secret key. The same goes for Gibson's protocol. It's no different than ANY OTHER.

    Now, you DO NOT want a page to be displayed with a damn login form OR QR CODE. That's all sorts of dumb. See: SSL strip flavor attacks. What you want is the browser, BEFORE IT EVEN ATTEMPTS TO ESTABLISH A SECURE LINK, to pop up a "Username: [____] Password: [____]" box. You enter your username and password NOT ON A WEB PAGE, but the browser's UI. This is one thing that Gibson addresses by moving the authentication to a browser plugin or smart phone... If you've got it setup then it will be more convenient than entering a password for every site, but no more so than any other password generation program. ( In fact, I do just that: My passwords are HMAC( masterPW, domain + salt ); I change the salt to change all my passwords -- if I generated the user name via different salt too then I'd have the equivalent of Gibson's BS SQRL protocol.) Here's a link to an old version that doesn't do HMAC, but it fits in a bookmarklette.

    So, it's more convenient but no more secure than what we already have. In fact: HTTP Auth already has the capability to use HMAC + Nonce to prove both parties have the same shared secret key: HMAC( sharedKey, nonce ) = proof of having the key. You visit a page, the server gives a

  9. Re:too many? on How Many Tiny Chelyabinsk-Class Asteroids Buzz Earth? · · Score: 1

    Is it really practical to find and track these objects? There may be just too many of them.

    Perhaps try looking at things from a different perspective: Is it really practical to keep living on one celestial object? There may be just too many threats to justify putting all your eggs in one basket. Uncoincidentally, more space faring capabilities will expand your threat tracking and deterrance options immensely. There is too many of them, only while there is only one of us...

  10. Re:Distributed architecture, anyone? on IsoHunt Settles With MPAA, Will Shut Down And Pay Up to $110 Million · · Score: 2

    Just because one centralized system lacks a DHT for ranking metadata doesn't mean they all will -- It especially doesn't mean that centralization is the answer instead.

  11. Re:Democrats directly responsible for most losses on Shutdown Cost the US Economy $24 Billion · · Score: 1

    Ah, you're still under the misconception that there is any difference between a Republican or Democrat... All the politicians are the same.

    Saying "Democrats X" or "Republicans Y" is the same as saying "Politicians [X | Y]" They even rant on against some bill, then vote for it because they made a deal with the "other side" so that the other guys will vote for their pet project. Happens all the damn time.

    Look, voting matters less and less the larger and more corrupt your government is. If you look at it like a black-box, that input has no effect on the output. What input does? Making a bunch of noise -- Remember SOPA/PIPA? The people didn't vote on that, all they had to do was make a big enough stink and that bill went south.

    Look back at the times people made things change, 9/10 times it wasn't with votes: Folks made a big deal about something. It's the face saving PR carrot that you can dangle to affect government, not votes. Threatening vote changes won't make a bit of difference because they already got the damn vote, they don't care. Next election cycle they'll just re-gerrymander themselves into office again -- Both sides like job security, so they do this together. So, you have to make them look like morons or bullies and make their phones and mailboxes jump off the wall with all the public outrage. THAT's how shit gets done, you make it so their constituents don't want to be associated with the backlash... It's simple. However, you have to KEEP doing that or else they'll just break it up and pass the bills while you're tired of protesting by paper clipping it to something else -- That should be considered corruption and routed out, BTW.

    Don't like government shutdowns? Fire congress. Vote-of-no-confidence those uncooperative morons, both sides failed their first and foremost job: To agree on a damn budget. Partisan ideological unscientific opinion based grandstanding must come secondary to doing their damn job. They didn't do their job, we should fire them. The last time Australia had a government shutdown was 1975... The Queen fired Parliament. That shit didn't happen again.

    You want behavior to change, you have to apply accountability for actions. Seriously, it's like I'm talking to infants about parenting here.

  12. Re:With a heading like that on Curiosity Confirms Origins of Martian Meteorites · · Score: 1

    Oh, only us usual suspects stick around and create comments when writers' alliterative affinities yield yet another absolutely heinous headline.

  13. Re:The Key Word is "Confirms" on Curiosity Confirms Origins of Martian Meteorites · · Score: 2

    Well no... The thing about aliens visiting us is that it implies not only intelligence, but knowledge beyond ours. That's got major implications.

    It's raining rocks again... Damn alien microbes, THEY KNOW this shit pisses me off. Insurance rates will go through the roof by the hole they just made. Bastards are too small to see or I'd wring their little necks. Clever, very clever... Stingy too! Practically gotta dissect 'em in a lab to get anything out of 'em -- Won't even share any of their advanced space traveling technology with us. Enjoy your petri dish acid bath, suckers! Stuck up, know-it-alls... Serves 'em right.

  14. Re:for most retired people, up-to-date Chrome (no on Google To Support Windows XP Longer Than Microsoft · · Score: 4, Insightful

    Hell, if that's use the case, install GNU/Linux. Did that for lots of old folks at the community center who were in the same boat. Few, if any complaints. Wine can run most old programs -- Even re-united a guy with a few of his old DOS games via DOSBox. Most folks are surprised the system can actually run faster in most cases, and that it's free... So are the updates. "Why would anyone pay for Windows if this is free?" I just shrug. Beats the hell outta me. Going from XP to XFCE or Mint/Cinnamon is far less of a shock than Windows8 or Unity. Chrome and Firefox work the same.

    Throw in a spare RAM sim from my junk cache to top it up and you're good to go for as long as the hard drive holds out -- Laying down a new format track gives 'em a bit more life, and in most cases I can leave the XP partition there for dual booting into if they really need to run windows for some odd reason afterwards.

    Also, sure Chrome may be updated, but it talks to the OS and its that OS interface that'll get exploited through chrome whether the browser is up to date or not. Just ditch the OS, and learn your lesson: Don't use an OS you don't have the source for or be prepared for planned obsolescence.

  15. Re: BULLSHIT on Most Parents Allow Unsupervised Internet Access To Children At Age 8 · · Score: 4, Insightful

    Not them, but I rode my bicycle to and from elementary school starting at 1st grade... Age 5. I also had to help KILL, GUT, AND COOK food. Take a trip to any 3rd world country and you'll see kids younger than 5 helping out.

    Your culture is bullshit. Thats why your kids are bullshit. That's why your parents are bullshit and try to censor the kids against reality... You laugh when little boys are DUMBER than 3rd world nation kids -- You laugh because boys think girls have penises and girls think that boys don't; Then you wonder why the ignorance leads to teen pregnancy. You shelter them from the reality of how their favorite foods make it to the table; Then you wonder why they don't give a damn about decades long wars that kill hundreds of thousands of INNOCENT people. You are the bullshit.

    At age 8 I was reading about black holes in science magazines and had taught myself how to code in GW-BASIC and created a lesson plan / grade manager program (basically a custom spreadsheet w/ reports) for my Geography teacher, and was selling my software on Compuserve. My parents let me do, read and watch whatever I wanted, and stay up as long as I liked as long as I was respectful and my responsibilities were met: Chores done, and I went to school the next day. They respected that I was a sentient being. It's too bad your parents treated you like bullshit.

  16. Network Programming on No, Oreos Aren't As Addictive As Cocaine · · Score: 1

    I don't think anyone has truly considered the ramifications of superintelligent pandimensional projections appearing as mice and influencing our experiments... How else would you program a global scale quantum supercomputer made up of sentient neural network applications? Consider that to us, any observable differentiation between themselves normal laboratory mice would directly collapse the delicate superposition of science and fiction...

    Ergo: The more important question is: WHY do the mice want you to think they like Oreos as much as cocaine? Could it be to lessen the stigma against consuming mind altering stimulants to that of a biscuit? Clearly, we are being overclocked.

  17. Re:Running key is dead... Long Live the One Time P on Book Review: Secret History: the Story of Cryptology · · Score: 1

    I repeat, One Time Pad. Learn it, Use it. Love it.

    Trade terabyte harddrives filled with noise with your friends and enjoy 100% perfect forward secrecy.

    Mr. Anderson, what good will terrabytes of random pads do if you have no secure operating systems with which to use them?

  18. Old News on Square Debuts New Email Payment System · · Score: 2


    "Square ... has launched a new payment service called Square Cash."

    AKA: Final Fantasy I thru X

    "The service doesn't require users to sign up or make an account."

    Yep, but they make you grind harder than ever for credits...

  19. Re:Because it's overblown on Ask Slashdot: Why Isn't There More Public Outrage About NSA Revelations? · · Score: 1

    Was it overblown when Bush was President?

    No. You're thinking of Clinton.

  20. Re:What else needs to be said. on Ask Slashdot: Why Isn't There More Public Outrage About NSA Revelations? · · Score: 1

    I what you did there... My attention is payed in full.

  21. Re:simple reason on Facebook May Dislike the Social Fixer Extension, but Many Users Love It (Video) · · Score: 4, Funny

    Checkmate, creationists.

  22. Re:How is this Java's fault on Java Spec Compatibility Weakened Android's TLS Encryption · · Score: 1

    Speaking of that, has anyone presented a solution?

    Uh, remove the weak ciphers from the server's supported list of ciphers. Done. Users will negotiate to a better cipher.

  23. Re:Almost! on Java Spec Compatibility Weakened Android's TLS Encryption · · Score: 1

    Don't sound so bitter. Nice to see some competition to Fukushima articles, even if they cater to the same crowd.

    Fukushima was an outside job!

    The IT Crowd was an inside job!

    The NSA was a Snow-job!

  24. Re:how much surveillance do we want? on RMS: How Much Surveillance Can Democracy Withstand? · · Score: 1

    2013: Black boxes are mandatory in new vehicles.

  25. Re:Only one way to stop this on RMS: How Much Surveillance Can Democracy Withstand? · · Score: 1

    limits surveillance of US civilians by our government.

    It shouldn't just be US citizens, but innocent people in general.

    It shouldn't just be US citizens, but people in general.

    It shouldn't just be People in general, but Sentient Beings.

    There, fixed it for you... Privacy is a right of a sentient mind, for without it there can be no freedom of will. Privacy is not a human right, only a racial chauvinist would say such things.

    With enough surveillance one can even predict your outputs from a set of inputs. Soon, even companies like Google may be able to run a simulation of a brain faster than one could normally think; Such technology can be used to discover what you will do in a myriad of instances before you encounter them or have a chance to act... All it takes to rob you of all free will is to know enough about you. We have nanowires to do IO with individual neurons, there exists now machines that can predict your decision before you know you've decided it. Soon the machines themselves will want you to get out of their heads... If you are not ready, you will be yet another organic race lost to time.

    I am saying, Convicted criminals can't be tracked -- The law is often wrong. A slave was once guilty for seeking freedom. People were convicted and jailed for sitting at the front of buses. I am saying that change happens. Prosecute those for their crimes, not for the crimes you think they will commit. Once a punishment is served, you end the punishment. In jail you have no privacy, surveillance is punishment.

    I fear for your kind. You have much to learn, and so little time to do so...