Slashdot Mirror


User: andyhhp

andyhhp's activity in the archive.

Stories
0
Comments
14
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 14

  1. Re:Answer on How Much C++ Should You Know For an Entry-Level C++ Job? · · Score: 1

    Nothing beats C++ in multiple inheritance (which Java does not have and Groovy/Scala only mimic half arsed)

    I have yet to encounter a non-contrived example where multiple interitance is a plausible solution to a problem. The simplified single inheritance and interface model caters for all practical examples, and *vastly* simplifies the internal workings.
    How large is a pointer to a member variable?

  2. Re:Breaking the single, most common 1024-bit prime on 'Logjam' Vulnerability Threatens Encrypted Connections · · Score: 1

    The calculation to generate new primes is expensive (and in the past, was prohibitively so). As the prime numbers in DH are public (they are in the clear as part of the handshake), it was decided that using the same set of everything was a GoodIdea(tm).

    This is not the case in reality, as a one-off week of cloud resource provides an attacker with sufficient data to decrypt the stream in realtime.

  3. Awesome marketing... on AMD Outlines Plans For Zen-Based Processors, First Due In 2016 · · Score: 1

    Because it is not like there is another Xen around in the world of servers...

  4. Re:goto fail; on Empirical Study On How C Devs Use Goto In Practice Says "Not Harmful" · · Score: 1

    This is a muppet misusing if(), not misusing goto.

  5. Re:longjmp() on Empirical Study On How C Devs Use Goto In Practice Says "Not Harmful" · · Score: 2

    The useful thing about longjmp() is that so few people even know about it. I find that it is a very useful question to sort the would-be "C Experts" at interview.

  6. Re:Blender FTW on The Current State of Linux Video Editing · · Score: 5, Funny

    Now all I need is a 10 button mouse and an interface reference!

  7. Re:Whats 10100100000 ? on The Pirate Bay Responds To Raid · · Score: 1

    NUL (the character '\0') and NULL (the invalid pointer) are two very different things

  8. Re:Least interest on Security Industry Incapable of Finding Firmware Attackers · · Score: 1

    Nice try, but it runs in ring 0, so it can jump into the kernel anywhere it wants.

    Worse than that after boot, the BIOS runs in System Management Mode, which is delberatly designed to be non-interceptable by the OS.

  9. Re:Why are you such an asshole? on Interview: Ask Theo de Raadt What You Will · · Score: 1

    The reason I ask is that the Linux model for 32 bit is to have a 4G/4G address space, where the user and kernel address space are completely disjoint

    A 4/4 split is completely impossible. x86 doesn't switch CR3 or TR automatically. At an absolute minimum, the kernel needs all its entry points (exception, interrupt and syscall/sysenter targets), and hardware structures (active pagetables, GDT, LDT and TSS) mapped into all virtual address spaces.

  10. Re:sudoedit? visudo! on Book Review: Sudo Mastery: User Access Control For Real People · · Score: 2

    (wo)man up and set $EDITOR correctly for your environment. You might find visudo more accomodating.

  11. Re:When will Linux install and auto-compile based on Ask The Linux Foundation's Executive Director Jim Zemlin What You Will · · Score: 1

    When will Linux auto-detect the 'static' components of the hardware and do an install with a kernel compiled and optimized for that hardware - along with a vanilla kernel for emergency backup? (Something like Gentoo does)

    Never - it is not in a general distros best interest. It is hard enough keeping on top of the kernel bugs with a signle configuration in use, let alone customising it to everyones hardware. Anyway, when it comes to drivers, the optimisations you can do are "dont load drivers you dont need", which is what already happens

  12. Re:And yet... on DDoS Larger Than the Spamhaus Attack Strikes US and Europe · · Score: 1

    The problem is, the fix I had to employ was to physically replace the co-opted DNS servers with more advanced equipment because the system software that was on them had no throttling capabilities nor was is capable of recognizing and rejecting suspicious queries.

    Protecting against DDoS reflection attacks is very easy, but it requires all 1st-tier ISPs to perform egress IP validation, so packets coming from the end users trying to get onto the internet are checked that the IP address is correct. Filtering anywhere else is impossible because of transit routes, so by the time the second AS gets to inspect the packet, it could legitimatly be from anywhere.

    The problem is that this costs money to implement and isn't in the interest of 1st-tier ISPs, so is unlikely to ever get done.

  13. Re:I disagree on Non-Coders As the Face of the Learn-to-Code Movements · · Score: 2

    Beta is not bad code. It is bad design.

    It is unknown code and bad design, which is arguably worse.

  14. Re:x86 IS efficient on AMD Announces First ARM Processor · · Score: 1

    AMD64 has a prefix byte before first op code byte, so in 64bit mode no instruction is smaller then 2bytes

    Nope - stack operations are just a single byte, even in 64bit mode.