Slashdot Mirror


User: Agripa

Agripa's activity in the archive.

Stories
0
Comments
4,282
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 4,282

  1. Re:File extensions? on Why We Should Stop Hiding File-Name Extensions · · Score: 1

    The icon of an executable is set by the executable. Enjoy your porn.jpg.exe with a thumbnail icon.

    Even worse, the file can also mask the .exe part in Windows Explorer so it just displays porn.jpg yet somehow Windows Explorer does show the file type as an application.

  2. Re: Well, I guess now we know... on 20-Year-Old Military Weather Satellite Explodes In Orbit · · Score: 1

    Oxidizers are not specific to just oxygen. Any species which accepts electrons in a redox reaction is an oxidizer. Chlorine and fluorine are good examples.

  3. Re:How is a HDD firmware written? on Ask Slashdot: How Does One Verify Hard Drive Firmware? · · Score: 1

    That sounds like a chicken-egg problem. If the drive can access the platters without firmware, what's the point of the firmware then? Or if the 'small bootloader' can actually access the platters, then what does it need to read the 'real thing' from the platters for?

    The Flash storage for the boot-loader may be too small or in the old days it would be in mask ROM. It is also likely more convenient to program the current firmware image onto the drive instead of into the Flash. The drive meta-data like the sector relocation tables have to be read in from the drive anyway.

  4. Re:The solution on Ask Slashdot: How Does One Verify Hard Drive Firmware? · · Score: 1

    How does making the firmware non-writable protect against the No Such Agency simply inserting their code into the original firmware in the first place - along with gagging the manufacturer and requiring them to keep the presence of this added code secret?

    Are they going to gag anybody who discovers that the manufacturer was complicit in allowing the NSA or any other agency to do this? Proof would be available to anybody capable to downloading the firmware image from the product and it only takes one person to discover and advertise the truth.

    Then what happens to the reputation of the manufacturer when faced with undeniable proof that they did this? The government can grant then immunity from civil lawsuits like they did with the telecommunication companies but are they going to mandate that others continue to buy their products?

  5. Re: Disable jumper on Ask Slashdot: How Does One Verify Hard Drive Firmware? · · Score: 1

    The simple solutions are the best a WP jumper for the flash. How hard could that be?

    This used to be easy because the write protect switch could operate either through the high voltage programming supply or the write strobe. Internal charge pumps have obviated the need for an external high voltage programming supply and embedded Flash has no write strobe to access.

  6. Re:Pretty pointless on Ask Slashdot: How Does One Verify Hard Drive Firmware? · · Score: 1

    NSLs can't do that. The law is quite specific about what an NSL can request. Not only can't it demand pro-active measures like backdoors, NSLs can't even demand the content of communications that the recipient already has. NSLs are limited by law to demanding communications metadata only.

    I assume the communication companies were handing over a lot more than the NSLs can demand in the spirit of cooperation and that is why the retroactive immunity was necessary. The safe bet is that everything including content is handed over where it can be used for parallel construction to avoid court review.

  7. Re:Hashes not useful on Ask Slashdot: How Does One Verify Hard Drive Firmware? · · Score: 1

    Being able to read the Flash image back over JTAG for comparison would be a good start.

    Better I think would be to add hardware write protection which for Flash used to be fail-safe since it relied on an external programming supply but those days are long gone. Now you would have to tie the write protection into the write strobe which assumed access to it.

  8. Re:Hashes not useful on Ask Slashdot: How Does One Verify Hard Drive Firmware? · · Score: 1

    There are many possible attacks. A hash on a website is not invulnerable to a rogue employee at Seagate (or one "just following orders").

    Even worse from Seagate's perspective, when the hash and website *are* compromised it just makes them look worse.

  9. Re:Hashes not useful on Ask Slashdot: How Does One Verify Hard Drive Firmware? · · Score: 1

    Seagate is correct. Putting a hash on the website doesn't improve security at all because anyone who can change the download can also change the web page containing the hash.

    More importantly Seagate has nothing to gain and much to lose if they provide a means to verify that their hardware has not be altered. Right now there is no way to know so Seagate can just deny it. Providing a means to prove it can only make them look bad and add to their already numerous customer service problems.

    In light of the above, I assume that *all* Seagate products have been compromised by the NSA from the factory.

  10. Re:Dubious premise . . . on Intel To Rebrand Atom Chips Along Lines of Core Processors · · Score: 1

    I noticed recently that AMD's AM1 processors support ECC and AES-NI as well. It seems odd that in AMD's case AM1 processors support ECC while their FM processors do not and in Intel's case the least expensive way to get ECC is now with Atom.

  11. Re: BS aside, is the K-XL a good thing or not? on Obama Vetoes Keystone XL Pipeline Bill · · Score: 1

    I suspect that the reason(s) Obama doesn't just deny the application are simple: to deny the project would alienate organized labor (that stands in support of the thousands of construction jobs the pipeline means, just for the construction phase), and once denied, the Canadian firm can appeal the denial and probably has the right to demand a justification for the denial, and a Presidential 'I don't wanna' won't stand up in court.

    Not issuing a denial prevents court review and the delay is equivalent to denying it anyway.

  12. Re:You reap what you sow... on NSA Director Wants Legal Right To Snoop On Encrypted Data · · Score: 1

    The damage the NSA has done will take a generation to repair and that would be a generation with the NSA not actively doing damage the entire time. Absent that, we're not going back to the way things were... possibly ever.

    I disagree. The damage will never be repaired if only because the NSA (and FBI and other law enforcement) will continue to cause further damage.

  13. Re:He can make the policy on NSA Director Wants Legal Right To Snoop On Encrypted Data · · Score: 1

    The rest of the world don't want products with official US backdoors though.

    Or unofficial backdoors with the NSA and FBI intercepting shipments of equipment through UPS, Fedex, and USPS to install their own. Since the warrants for such are not publicly available after any amount of time, I assume no warrants are needed and that there is no court review.

  14. Re:The Devil is in the Implementation. on NSA Director Wants Legal Right To Snoop On Encrypted Data · · Score: 1

    The Government cannot compel you to incriminate yourself (give up the key) (5th Amendment).....If that doesn't work, who says you can recall the password or didn't lose the key

    For fixed installations like a private NAS or workstation, it is possible to arrange for the key to be stored physically in a way such that a seizure would presumably destroy it.

  15. Re:Of course on Fedcoin Rising? · · Score: 1

    Civil assets forfeiture says otherwise.

  16. Re:Who uses any of that crap anyway? on Gadgets That Spy On Us: Way More Than TVs · · Score: 1

    At some point disabling the radio will result in loss of functionality like the engine for your protection of course.

  17. Re:Who uses any of that crap anyway? on Gadgets That Spy On Us: Way More Than TVs · · Score: 1

    maybe "rare" within your specific locale and amongst your peers, but general motors sells a lot of cars,

    And having owned one GM pickup and worked on other GM vehicles, I can say through personal experience that they are all junk and have been junk for at least 2 decades.

  18. Re:NAND is for chumps on Samsung's Portable SSD T1 Tested · · Score: 1

    It only is a matter of time before external SSDs become the storage medium of choice, just like USB flash drives are for small scale storage.

    The problem with this is that external storage is often not powered for considerable time and high density Flash retention time is abysmal compared to other media types. I have already had USB flash drives "forget" their contents within months unless continuously scrubbed which annoyingly they do not even do if left powered but not accessed.

    Samsung's 3D NAND Flash should be better in this respect but I notice that like the other manufacturers of low retention time Flash, they do not give a specification for this so I have to assume it is no better.

  19. Re: About right on In Florida, Secrecy Around Stingray Leads To Plea Bargain For a Robber · · Score: 1

    You don't consider the threat of being shot and then having your property taken a violent crime?

    Discussions of civil assets forfeiture by the government are off-topic in this discussion.

  20. Re:From Mall of America visitor rules: on Al-Shabaab Video Threat Means Heightened Security at Mall of America · · Score: 1

    You might possibly have had a point if we were considering an armed robbery of the mall, although the fact that countries with strict gun control laws have murder rates [wikipedia.org] that are a tiny fraction of the US suggests that the downsides far, far outweigh any small benefit.

    The US also has a proportionally high rate of homicide with knives and blunt objects. How is it that our lack of gun prohibition raised those as well?

    One problem with the naive "murder rate" statistic is that different countries have different reporting criteria. Many countries only record a murder after disposition of the accused which artificially lowers their count in comparison to the US where it counts as a homicide no matter who kills them.

  21. Re:From Mall of America visitor rules: on Al-Shabaab Video Threat Means Heightened Security at Mall of America · · Score: 1

    I don't see how that good guy scenario is supposed to play out. If the bad guy finds a crowd, he can get off 20 rounds, and kill a large number of people, before the good guy can do anything. So having good guys with guns can limit the damage to 10 victims. Unless the bad guy can get a bigger clip.

    I doubt detachable magazine capacity matters. One can always carry more magazines and with practice, changing one is not time consuming. Civilians on the other hand are unlikely to carry lots of magazines so standard capacity magazines matter more for them.

    Most spree shooters stop one way or another once armed resistance presents itself. Fortunately such incidents are rare despite what mass media would have us believe but this also means that it is difficult to determine what affect a good guy with a firearm will have versus the effect of law enforcement which is well known. There is an added complication in that if a civilian successfully stops a spree shooter, then there could be no mass shooting in which case they did not stop one. A similar issue crops up measuring DGUs (defensive gun uses) when it only counts if the suspect is shot or killed.

    The incident at the Clackamas Town Center comes to mind:

    http://en.wikipedia.org/wiki/C...

  22. Re:Seagate on Nvidia Faces Suit Over GTX970 Performance Claims · · Score: 1

    1 million bits is a megabit. 1 million bytes is a megabyte.

    So systems advertised with 17.179869184 GBytes of RAM should be appearing any time now. That will be a lot simpler than labeling them 16 GBytes and no doubt appeal to marketing.

  23. Re:Seagate on Nvidia Faces Suit Over GTX970 Performance Claims · · Score: 1

    Then most people are stupid. Stop trying to bastardize the SI prefixes for your hard drive edge case, in every other measure Mega is a base 10 power, not base 2.

    Bit and byte are not SI units. Let me know when I can buy computers with 17.179869184 GBytes of RAM.

    Take up your argument with JEDEC.

  24. Re:Not anti-science, anti-authority on Low Vaccination Rates At Silicon Valley Daycare Facilities · · Score: 1

    There's a particularly rabid strain of libertarianism that seems to hold anything related to authority in contempt, even when it's bound on sound science.

    Maybe those with the most authority over us should have set a better example.

  25. Re:Heck, I'll settle for white light on Polymers Brighten Hopes For Visible Light Communication · · Score: 1

    We'll round that up to an even thirty hours a week, since 10 hours of operating a 100 watt lightbulb is, conveniently, 1 kw-hour. On average that would cost you $0.375/week. Over the course of a year you $19.50 for the incandescent, and $2.95 for the LED. So you're about even after a year.

    The economics for the more expensive bulb fall apart when replacement costs are considered when they both fail considerably before their rated lifetime do to dirty power. Bulbs where I am have a half-life measured in months. The only bulbs that last are on an online UPS.

    Even California noticed that this was a problem because the high efficiency bulbs did not last nearly as long as marketing predicted.