Slashdot Mirror


User: seifried

seifried's activity in the archive.

Stories
0
Comments
515
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 515

  1. RHEL / CentOS / Fedora updates now available on OpenSSL Bug Allows Attackers To Read Memory In 64k Chunks · · Score: 4, Informative
  2. Re:Not the sun on Solar Lull Could Cause Colder Winters In Europe · · Score: 1

    Or there could be something else causing global warming, like a decline in the number of beanie babies for sale on eBay, and at the same time the real cause of global climate change occurred (less beanie babies for sale) CO2 levels also happened to rise. This is why you need controls and multiple experiments, or ways to control for other factors.

  3. GetOnTracks on Ask Slashdot: Life Organization With Free Software? · · Score: 1

    Is pretty much exactly what you want, it's not great but it's not bad. I do wish it had offline capabilities. http://getontracks.org/

  4. To bad it's way less secure than chip and PIN on Startup Touts All-in-One Digital Credit Card · · Score: 3, Insightful

    To bad it's way less secure than chip and PIN. Mag stripes can be trivially copied and then used. In Canada a lot of the payment terminals are configured to not allow mag stripe usage if the card has a chip (I disabled the chip on one of my cards to see what happens, only place that would let me swipe is Home Depot, and even then the machine wouldn't accept it, they had to pull out an old physical ka-chunker machine and do it manually, haven't seen those in ages).

  5. Tomato, DD-WRT, or OpenWrt on D-Link Router Backdoor Vulnerability Allows Full Access To Settings · · Score: 4, Informative

    Because friends don't let friends run crappy firmware with back doors/known problems.

    http://www.linuxpromagazine.com/Issues/2010/119/Security-Lessons-Linux-WAP/(tagID)/337

  6. 97% participation, so what happened to the rest? on How DirecTV Overhauled Its 800-Person IT Group With a Game · · Score: 1

    So the people that didn't participate.. what happened to them?

  7. This is why I'm an EasyDNS customer on Police Demand Summary Domain Takedown, Traffic Redirection · · Score: 4, Insightful

    They have solid service, and not just the simple stuff, but the ugly bits as well (granted they did let a few porn/gambling sites go after a series of massive DDoS attacks, but they gave them time to move as I understand it, they didn't summarily boot them off). When picking a DNS registrar/provider make sure you pick one that won't just turn your DNS off if someone decides to send an angry email to the registrar.

  8. Wait... the internet has ads? on Google May Replace Cookies With Unique AdIDs · · Score: 1

    I've been surfing with ad blocking so long I sometimes forget the Internet is plastered with ads. I'm teaching my kids that any device showing ads is broken (TV, tablet, computer, you name it) because well, it is.

  9. Re:The future of driverless cars looks like a bus on Concern Mounts Over Self-Driving Cars Taking Away Freedom · · Score: 1

    What if someone slips a dead fish in under the seat and it doesn't start to smell for a day or two? I can see the potential for pranks, but luckily most people are sane and reasonably nice.

  10. Wrong questions, management tools already do it on Should OpenStack Embrace Amazon AWS? · · Score: 1

    Disclaimer: I work for Red Hat on the Security Response Team and I'm one of the cloud guys so I'm biased (but I also work with OpenStack upstream). I'm also the CVE guy (plug: remember kids, get your CVEs early and life is better for everyone! http://people.redhat.com/kseifrie/CVE-OpenSource-Request-HOWTO.html).

    Adding support for this into OpenStack for AWS EC2 is really the wrong layer, this makes a lot more sense in the Orchestration layer. We already have a product that supports this: CloudForms, it can manage systems via OpenStack, RHEV, AWS EC2, etc. referred to as Open Hybrid Cloud/. Another aspect of this is that many customers already have significant investments in virtualization infrastructure, asking them to throw it all out for OpenStack (so all the software, training, backup software, etc.) won't always happen (although many are quite happy to add OpenStack to the mix).

  11. CVEs assigned on Flaws In ZRTPCPP Library, Used In Secure Phone Apps · · Score: 1
  12. CVEs assigned on The Average Movie Theater Has Hundreds of Screens · · Score: 0
  13. Re:SSD on Seagate To Stop Making 7200rpm Laptop HDDs · · Score: 1

    So by your argument we should be using clay tablets I suppose, they have several thousand years of development behind them!

  14. Re:SSDs are a fad on Seagate To Stop Making 7200rpm Laptop HDDs · · Score: 4, Insightful

    This is true of any storage medium. Also what happens if you laptop gets lost or stolen? Catastrophic loss of data is always just around the corner, as such you need to be making backups, ideally off site in case your home/office/data center/whatever burns down/gets flooded/clobbered by a tornado/hurricane/whatever. Bad things happen to good data, so make copies!

  15. SSD on Seagate To Stop Making 7200rpm Laptop HDDs · · Score: 3, Insightful

    SSD's are definitely the way to go for 99% of laptop users (unless you need more than say half a terabyte of space), SSD == lower power, no vibration/shock issues, and waaaay lower latency. I've been replacing all the drives in my laptops with SSDs for a few years now, I can't imagine going back to spinning rust. As for large file storage in laptops I bet a lot of users can get away with USB sticks now rather than HDs anyways. About the only place for spinning rust now is as a tape like storage medium where latency isn't an issue.

  16. Re:does it work? on How Red Hat Hires · · Score: 3

    You also have to remember when it comes to technical talent red hat is an open source company and we tend to hire open source people. One huge advantage of open source is we can easily see what people have worked on and contributed. Meaning for most of my coworkers you can plug their name/alias into google and find the projects they work on. Also the communities we work within tend to be quite well connected, for example in the Linux security community we all know each other because we help each other and work on issues together constantly. It makes hiring a lot easier when you can actually see with strong evidence that the person you're hiring is actually capable of doing the job you want to hire them for and even better that they are already a cultural fit.

  17. Assigned CVE-2012-6084 for this issue on EFnet Paralyzed By Vulnerability · · Score: 2

    As per http://www.openwall.com/lists/oss-security/2013/01/01/3 this issue was assigned CVE-2012-6084. Remember folks, you can get your CVEs in advance which makes life easier for everyone. Please see http://people.redhat.com/kseifrie/CVE-OpenSource-Request-HOWTO.html for details.

  18. "no comment/contact legal/pr/investor relations" on SEC Investigates Netflix CEO Reed Hastings Over Facebook Posting · · Score: 2

    I work for [redacted] which is why I won't say anything about [redacted] or especially anything about the [redacted] incident that [redacted] 17,000 people and caused the entire town of [redacted] to go bald and [redacted] at 3 in the morning.

    Which is why anyone with an ounce of sense doesn't talk about their company (especially the higher up you go in the management chain). And especially never put it in writing. Duh.

  19. Re:Don't store it in the first place on Why Big Data Could Sink Europe's 'Right To Be Forgotten' · · Score: 5, Insightful

    But let's say I didn't share my data with Facebook, my friends and associates did. E.g. photos from an event I attended get posted, they tag me in the photos, now Facebook recognition tags me (well in theory..). Someone else enters my birthday in order to be notified a week in advance so they don't forget to email me a happy birthday. Someone enters my home town (actually happened on linkedin, grr). So now Facebook has my name, bday, address, photos of me, and I never logged into Facebook. That is why we need the right to be forgotten.

  20. Ted talk on this on Ask Slashdot: Best Incentives For IT Workers? · · Score: 1
    http://www.ted.com/talks/dan_pink_on_motivation.html

    Career analyst Dan Pink examines the puzzle of motivation, starting with a fact that social scientists know but most managers don't: Traditional rewards aren't always as effective as we think. Listen for illuminating stories -- and maybe, a way forward.

  21. Re:I was the only one who had any exposure to Linu on Ask Slashdot: How Did You Become a Linux Professional? · · Score: 1

    Not when you are using old cast off machine of unknown reliability and you whipped it up quickly to get running and didn't factor in clustering/failover (which back in the Slackware 6 days you wouldn't have been able to do without some serious hacking/coding). Nowadays it's a lot easier with software like gluster/etc. But back in Slackware 6 days we didn't have anything like that.

  22. Re:I was the only one who had any exposure to Linu on Ask Slashdot: How Did You Become a Linux Professional? · · Score: 1

    Well downtime for example, if our mail server was hosting say 5,000 users that means a few hours of downtime would easily run you $500,000 in costs, so hosting it on a cheap server/etc with no backup/fail over would be a really bad idea. Ditto for the file server, did it have backups? What happened it if crapped out and all the data went byebye? Sometimes spending money up front is a lot cheaper than using some cheap and having to spend a lot more money later.

  23. Linux security - easy, just do it. on Ask Slashdot: How Did You Become a Linux Professional? · · Score: 1

    I started using Linux at 17 or so (asj introduced me to it), connected to the Internet via dialup and realized that if I could connect to systems on the Internet they could connect to me (using SLIP/etc I had an actual IP). So I started learning about security, but basically no documentation/etc. existed back then (this would be 18 years ago). So I started keeping notes, back then stuff like disabling stuff in /etc/inetd.conf (remember that file?) was serious high end security, and using tcp_wrappers was Matrix style kung-foo. I then realized I couldn't be the only person with this problem (not knowing anything about security) so I started documenting it, in early 1998 I registered seifried.org and put the docs up (where they remain today, out of date but somewhat useful) at seifried.org/lasg/.

    This in turn got me a contract at SecurityPortal which got killed in the .com downfall, then I contracted for iDefense (then Verisign bought them) and then iSIGHT partners where I basically did information security analysis, focused heavily on Linux. But I wasn't super happy, I realized what I really enjoy is writing stuff for the public (not just paying customers). So I decided to go back to my Open Source roots and joined the Red Hat Security Response Team (https://access.redhat.com/security/team/) and CVE guy (e.g. http://people.redhat.com/kseifrie/CVE-OpenSource-Request-HOWTO.html).

    Basically in the security community the way (everyone I know) gets hired is they get into security on their own time, do something like build an IDS, or create a secure Linux distribution which is basically their portfolio/resume when it comes to getting hired. Much like the Linux Kernel we don't have a lot of volunteers in the Linux security space, if you're any good at this you tend to get hired quickly. In other words "just do it" and if you are any good at it, a job will not be a problem.

  24. Re:The real story: the Earth landings were a hoax on Astronaut Neil Armstrong Has Died · · Score: 1

    For people down voting this, you may want to have your humour/sarcasm glands checked.

  25. The real story: the Earth landings were a hoax on Astronaut Neil Armstrong Has Died · · Score: 5, Funny

    Everyone knows the real Neil Armstrong never left the moon, who do you think started building the first military moon base, and was later put in charge of it? In fact the entire Apollo program was designed to deliver astronauts to the moon, and then fake an Earth landing and use body double to replace them. Did you see how big the rocket needed to get all that crap to the moon was? And how small the lunar module was, no way did it have the power to escape to orbit and enough fuel to return to Earth. The Moon landings were real but the Earth landings are a HOAX!