Slashdot Mirror


User: _merlin

_merlin's activity in the archive.

Stories
0
Comments
1,467
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 1,467

  1. Any time you do any text manipulation (searching, sorting, truncating...) you need to deal with the quirks of your encoding. That can slow you down a lot. Also Chinese, Japanese and Korean text is typically 50% bigger in UTF8 than in UTF16, so using the Windows implementation of wide characters gets you a significant saving in memory usage as well as the big performance boost.

  2. Re:Hands up on Magnitude of glibc Vulnerability Coming To Light (threatpost.com) · · Score: 1

    The source to MSVCRT is distributed with Visual Studio - it would be pretty hard to conceal a vulnerability like this.

  3. Re:Morality Police - coming soon to the USA... on Iranian App Helps Users Avoid Morality Police (reuters.com) · · Score: 2, Insightful

    You've already got your own morality police: the feminists, SJWs, etc. turning campuses into "safe spaces" and branding words and behaviours "problematic".

  4. Re:Again: Want to improve I/O to MODERN SSD? on The Linux Foundation Forms Open Source Effort To Advance IO Services (linuxfoundation.org) · · Score: 1

    What things would those be? SSDs have logical blocks, which are analogous to, and often larger than, hard disk sectors. If you don't allocate on logical block boundaries you'll wear through the SSD's write endurance far faster. The filesystem itself still needs to manage allocations and free space in some reasonable-sized unit. You're not going to be able to remove the need for "sectoring" from either direction.

  5. It doesn't phone home if you don't sign in to a Google account on your phone. Annoyingly it doesn't learn words if you don't allow it to phone home. Samsung replaced their internally developed predictive keyboard with one powered by SwiftKey. The net result for me was that it's more sluggish and doesn't learn words any more, since I don't have a Google account and wouldn't sign in to one even if I did.

  6. Re: Brought it on themselves on iOS App Update Technique Puts Users At Risk (csoonline.com) · · Score: 2

    Well you thought wrong. Google Play Services automatically and silently updates itself with no user interaction. The only way to stop it is to disable it completely, but this also breaks that use its APIs. Most Android apps don't/can't update update silently, but Play Services definitely can and does unless you go out of your way to stop it.

  7. Re:Who? on Flat-Earth Argument Results in Rap Battle (npr.org) · · Score: 2

    Yeah, but both those songs were years ago now. He seemed to be a bit of a one-hit wonder who (thankfully) disappeared. This is probably all a publicity stunt to try and get people to notice him again.

  8. B.o.B. WTF on Flat-Earth Argument Results in Rap Battle (npr.org) · · Score: 1

    Why is anyone paying attention to that goofball B.o.B. anyway? He's a boring rapper with weak rhymes as well as weak science. I mean, his stage name is an initialism for Battery Operated Boyfriend (i.e. a vibrating dildo). All this does is draw more attention to him and his shitty rap. No-one could possibly believe the flat earth theory these days anyway when you can easily fly or sail around the world.

  9. Re:The copy writes itself on The Trouble With Intel's Management Engine (hackaday.com) · · Score: 1

    If you're enabling IME with default password, you're doing it wrong. If you enable IME you should be installing your own certificates and using certificate-based authentication. If you aren't, you're stupid. I've never encountered hardware where IME is enabled by default (in fact my Dell Precision T3610 is buggy in such a way that it's impossible to enable, and there's no way to enable it on 13th-generation PowerEdge by design). There's a lot of FUD about IME, but it won't hurt you if you don't turn it on.

  10. Re:I code best while getting a BJ. on Code Reviews vs. Pair Programming (mavenhive.in) · · Score: 1

    It's s reference to the movie Swordfish.

  11. Re:Sweden worries about theirs too... on Belgium's Aging Nuclear Plants Worry Neighbors (phys.org) · · Score: 1, Informative

    Sweden is Germanic while Finland is Uralic. Why would you expect them to be the same? ;)

  12. Re:Easy Fix for the Paranoid: Cold Reboot on Nvidia Blames Apple For Bug That Exposes Browsing In Chrome's Incognito (venturebeat.com) · · Score: 3, Informative

    The thing is, for security the operating system should scrub memory before before supplying it to an application. Otherwise you get all kinds of data leakage. The virtual memory system does this when an application requests more pages. SPARC CPUs generate an interrupt when they run out of "clean" register windows. NTFS ensures sectors that are allocated but not written in a files read as zeroes (FAT32 on Windows 95 didn't, you'd read back whatever was there on the disk). By the same token, the OS should scrub GPU resources before supplying them to an application. You don't need to do this on every allocation, only when the allocation comes from RAM that was not previously assigned to that application.

  13. Re: Irony overload on Let's Encrypt Is Now In Public Beta (eff.org) · · Score: 1

    So much for certificate pinning.

  14. Re:Shared hosting on Let's Encrypt Is Now In Public Beta (eff.org) · · Score: 1

    So does that mean you have to take down your regular web server on port 80 while their server does that verification? That's pretty shitty.

  15. Re:Flabbergasted on China Blamed For Attack On Australian Bureau of Meteorology (abc.net.au) · · Score: 2

    Yeah, I'm sure the operators of the Great Firewall could identify sources of hacks and DDoS after the fact, but it's just not within the scope of their responsibilities. They're just there to enforce government policies that most of them don't even agree with, it's just a day job. They're not going to go out of their way to make China friendlier to the rest of the Internet.

    VPN exit points in China are most useful for businesses outside China doing business with Chinese customers or suppliers. It lets you check what your web presence looks like from inside China. Many things that people take for granted don't work from inside China, e.g. lots of sites suck in JavaScript frameworks from Google APIs, but this doesn't work from China because Google APIs servers are blocked. You can test for these kinds of issues by browsing via the Chinese VPN exit point.

    I'd say the Great Firewall does more now that it used to. A decade ago, there wasn't really a Great Firewall as such, and ISPs were responsible for blocking what the government told them to, so you got different behaviour on different ISPs. Some ISPs would redirect you to a "this is blocked" page, others would give "connection reset by peer", while still others would black-hole traffic. At least now the government deploys the filtering and sets the policies now, so you get consistent behaviour across ISPs.

    Yeah, some hacking comes from China. Some of it is just botnets of pwned PCs that could be operated from anywhere. That part of it isn't any worse per capita than anywhere else in the world. The Chinese government probably has some offensive hacking capability, and I wouldn't want to be on the receiving end of it. It's probably used for very targeted attacks on high-value targets. But I don't think half the things blamed on China really come from China at all.

  16. Re:Flabbergasted on China Blamed For Attack On Australian Bureau of Meteorology (abc.net.au) · · Score: 1

    It does packet inspection of incoming DNS response packets, i.e. if a client in China makes a DNS request to a server outside China the result may be intercepted/modified. I think it also does some kind of deep packet inspection to flag possible SSL VPNs becoming popular, but that isn't used for real-time blocking, only to give the administrators potential addresses to blacklist. For all the talk about it, the Great Firewall doesn't really do a lot of blocking at all.

    Chinese ISPs often block more than the Great Firewall itself. For example on of my friends is on an ISP that blocks egress to foreign residential broadband IP address ranges by default. This is supposedly so that when one of their customers gets infected with malware it can't attack residential broadband customers outside China. They will turn this off for a customer on request, though.

  17. Re:Flabbergasted on China Blamed For Attack On Australian Bureau of Meteorology (abc.net.au) · · Score: 1

    All the Great Firewall does is black-hole IP traffic to certain addresses/ranges. If you're sending data to/from an address range that isn't blocked, anything goes. The only people protected from hack attempts by the Great Firewall are the people they're blocking all access to (Google, English wikipedia, Facebook and the rest of that crap).

  18. Re:Real nerd news. Reminds me of me. on Experimental Study of 29 Polyhedral Dice Using Rolling Machine, OpenCV Analysis (markfickett.com) · · Score: 1

    White noise generators aren't analog, they're digital LFSR circuits. They produce a pseudo-random bitstream, but it's quite predictable.

  19. Re:Real nerd news. Reminds me of me. on Experimental Study of 29 Polyhedral Dice Using Rolling Machine, OpenCV Analysis (markfickett.com) · · Score: 1

    A dedicated device should include a dedicated source of randomness. Circuitry to measure thermal noise from a reverse-biased zener diode is pretty cheap, so it's not like it would be prohibitive. Of course lazy designer might not bother.

  20. Re: Not replaced: serial and parallel ports. on What USB Has Replaced (And What it Hasn't) (arstechnica.co.uk) · · Score: 1

    It wasn't designed to be daisy-chained, but some peripherals like scanners and Zip drives provided pass-through functionality. They would attempt to detect when they were being addressed by the driver and pass other traffic through to/from a printer attached to the daisy chain port. It often worked unreliably, and parallel port storage devices always had poor performance. Parallel SCSI was designed as a daisy-chain bus and worked fairly reliably as long as you used good cables and terminated it properly.

  21. You know the duplicate AC posts makes it really obvious that's you, APK. Why don't you just give up? Even the trolls are mocking you now.

  22. Re:Numbers don't add up. on VTech Hack Gets Worse: Chat Logs, Kids' Photos Taken In Breach (vice.com) · · Score: 1

    A parent needs to register in order to purchase and/or download apps. I expect a lot of parents register just to browse the catalogue and look at prices. Some applications require you to register a child's information to enable certain functionality, but many parents wouldn't download any of these apps, and if they do, they may not enter information for any children.

    Essentially, for every family with at least one of these devices where they want to browse/download/purchase apps, at least one parent will be registered, but zero or more children may be registered. You'd only get more parents than children registered in rare cases when a family that has more than one child using these devices, the parent installs an app that can use children's data, and they register multiple children. That isn't going to outweigh the cases where no children are registered.

  23. Re: The latest version as well? on Critical Zen Cart Vulnerability Could Spell Black Friday Disaster For Shoppers (htbridge.com) · · Score: 1

    Thanks for taking the time to answer in detail about your thoughts on the issue.

  24. Re:Not replaced: serial and parallel ports. on What USB Has Replaced (And What it Hasn't) (arstechnica.co.uk) · · Score: 1

    Yeah, if I'm walking up to a rack I'll just take my MBP and a USB-serial adaptor. I wouldn't buy a notebook just for having a serial port.

  25. Re:Not replaced: serial and parallel ports. on What USB Has Replaced (And What it Hasn't) (arstechnica.co.uk) · · Score: 1

    What? I have a Dell Precision T3610 as my workstation which has a serial port, which happens to be convenient for pre-configuring network switches before deploying them. I also use it to get stuff on and off my old HP49G calculator. I'd use a USB adaptor if I didn't have a built-in serial port.