Slashdot Mirror


User: niftymitch

niftymitch's activity in the archive.

Stories
0
Comments
1,113
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 1,113

  1. Re: Remember - Apple is a hardware company. on Apple Tells US Judge It's 'Impossible' To Break Through Locks On New iPhones (reuters.com) · · Score: 1

    The key here is "somewhat". I specifically recall an article about a guy using an electron microscope to retrieve information like this. It would be extremely hard to do for average people though, and Apple is well within its rights to tell the Judge that if he wants this information, he can pony up the several million dollars it would take to extract the key.

    Or talk to the NSA, if it were a national security matter.

    Done correctly even if a million dollars was on the table extraction of data would be unlikely.

    Judges like the audience of CSI fail to grasp how difficult these requests are.
    Most importantly they fail to grock that some points of attack are being assaulted
    by bot-farms/botnet on the internet. Some of these collections of machines under the control
    of "bad" guys represent millions of machines (hundreds of millions of $$). The size of these
    botnets averages closer to 20,000 machines but that is a command and control thing. Still at $200
    per machine 20,000 = $4,000,000. Most interesting machines a closer to $1000 so $20million bucks
    of networked hardware.

    i.e The threat model that Apple, Microsoft and others are attempting to address is very real,
    very big and demands some of the strongest technology to address. This issue is global
    and larger than the single case in front of this judge. Not just national and corporate security but the
    security of all nations and corporations.

  2. Simple.

    1. Remove the flash.
    2. Mount it with a non Apple device.
    3. Run a dictionary attack on the password.

    With the right equipment, it would only take a few hours depending on the complexity of the user's password.

    Am I missing something?

    Yes you are missing a lot.
    https://www.apple.com/business...
    https://developer.apple.com/li...

    Apple has done a lot of work to improve their systems.
    So has Microsoft, FWIW.

    It was public knowledge even before the breach at Sony that system failures and
    the naive use of systems by customers would prove to be trouble. Those without
    their head up their exit port could read the writing on the wall.

    Another less discussed topic is IPv6 and the internet of things.
    Some minimum safety existed behind home NAT but with IPv6
    this little dirty sand box will get worse. The phones and tablets
    in my home all are lighting up IPv6 addresses.

    Who knows what the neighbors Nest is doing...

  3. Anyone who thinks that the NSA, CIA, FBI etc...would allow any device into the country (or any device to be built here) that they can't read the data from, you are extremely naive! The average geek may not be able to read the data, but you can bet your A** that these agencies that illegally spy on us CAN!

    This is a court attempting to compel Apple.. not the NSA, CIA, FBI.

    If by design the device is intended to be secure the only answer Apple can
    give in open court is "we cannot". Any other answer is to divulge flaws.
    Apple has rolled our a longish number of updates recently. It is moderately clear
    that Apple is fixing as many bugs as quickly as they can. Their market
    is not restricted to the US and in other jurisdictions the penalty and pain of
    privacy laws is quite the thing. This global perspective combined with
    liability that ApplePay might generate paints a strong need for enhanced
    security and aggressive bug fixes.

    Point of sale flaws for a tech company with big money in the bank
    are not to be ignored in thinking about this.

  4. Everybody things biometric ("fingerprint") security is everything! A fingerprint is one of the easiest thing for an attacker to obtain -- we leave them on everything we touch. It's a trivial matter to reproduce to the degree required by those cheap sensors. (Mythbusters did this years ago with a simple thumb scanner door lock. I've done the same with the optical scanner on many laptops -- without having to lick the paper, even.)

    The fingerprint vs. keypad/password is interesting.
    What you know is protected..
    What you are is not ... they can compel you to unlock the fingerprint but not compel you to divulge your pin (what you know).

    Bottom line... Q: "....do you understand these rights .... "
                                                A: No

  5. Revision control is important. on Ask Slashdot: Selecting a Version Control System For an Inexperienced Team · · Score: 1

    Perhaps the best choice is Mercurial running on a $500 server in house.
    Backed up with another $500 server perhaps in another building managed
    by second individual such that there are two sets of master pass words to
    two servers.

    Lots can be done with good desk top boxes today...

    My preference is to run Ubuntu, Centos or Fedora on the inexpensive hardware.

    Clients work on WindowZ...

    For any system to work a policy is needed. Check text in each day
    perhaps on a "work-in-progress" (WIP) branch.

    Managers need to know how to use and monitor it.

    Also find a bug system to track progress, features, bugs.
    Some checked in changes will be tagged to a feature request
    or a bug.

    I am a fan of RCS for learning how revision control works.
    With NFS and some wrapper scripts it can be scaled to hundreds of engineers
    as long as they stick to their own projects.

    You also need a documentation system and plan.

    Any system can be modeled with colored 4x6" cards over an conference table.
    Pass cards.. into and out of piles to and from people.
    If you cannot model your system with colored cards across a table it is not understood
    or just too complex.

    Lots of folk begin to understand revision systems and live locks by sharing a check book.

  6. I would comment but.. on Artists Create a 1000-Year GIF Loop · · Score: 1

    I would comment more but I have yet to finish watching it.

  7. Re: Gun-free zone? on 10 Confirmed Dead In Shooting at Oregon's Umpqua Community College · · Score: 1

    What about those taking places on military bases? Those are technically gun-filled zones.

    A better phrase is gun fillable zone.
    It is the rare US military base that does not keep weapons under lock and key.
    There are many reasons but insane gunman is not the primary one.

    As for all of these killings there seems to be an issue well outside of
    guns and gun control going on.
    Too much hate... CNN vs. FoX is one crazy example.
    Suicide bombers, WTF.
    Suicide by cop, WTF.
    Suicide by train (too common near here), WTF.
    Religious mismatches generating murders, WTF.
    Bigots killing the other bigots, WTF.

    We have militarized our mind and the minds of officials:
    War on drugs, WTF.
    War on ...... everything imaginable.
    War on tolerance... all too common IMO, WTF.
    War on privacy..., WTF.
    War on public nudity, WTF we need more of that not less.
    War on women nursing hungry children in public. What ever happened to "Feed the Children" campaigns?

    Sadly this is making large parts of towns, cities, states, nations into war zones.

    Bottom line.
    Living in a war zone is hazardous to your health...

    The one WAR on ... we can make one go away: the war on drugs.
    Given the current budget of the War on Drugs we could finance
    outstanding health care for drug addicts. I am not a fan of drugs
    but the WOD has caused more harm worldwide than many are
    willing to tally.

    This and teach morality and ethics in class, K-forever.. even if we must resort
    to comparative classes.
    New movie and video game rating... NRV (no redeeming social value)
    NRVD (no redeeming social value drugs)
    NRVR (no redeeming social value rape)
    NRVS (no redeeming social value sex) ..... we have all see a WTF moment movie...

  8. Re:Excellent on East Texas Judge Throws Out 168 Patent Cases · · Score: 1

    I'm raising a glass of Resin as I write this.

    https://www.google.com/patents...
    "Random access information retrieval utilizing user-defined labels"
    with reference to tape cartridges and Faxes...
    Seems to be another patent based on class notes and white board disclosure.
    This seems less inventive than a multi sided needle card sort.

  9. Re:Oh, that's ironic on Treefinder Revokes Software License For Users In Immigrant-Friendly Nations · · Score: 1

    Yeah, you can always scrape the bottom of the barrel, ....

    And the age for cyber-war?
    Most interesting cyber abuses are at both ends of the boot chain.
    A generalization is that the old guys understand boot code and drivers better
    than the kids. Old guys have seem stuff fail more than any new kid so
    the old guys might be more defensive programmers.

    And then there is SciFi stuff that is perhaps to be true next week.
    https://www.goodreads.com/seri...

  10. Re:Oh, that's ironic on Treefinder Revokes Software License For Users In Immigrant-Friendly Nations · · Score: 1

    75% of these so-called refugees are military age men.

    I'll bet about 75% of Slashdot readers are military age men.

    Makes you think.

    This assertion needs data.
    Perhaps a /. poll. But first define military age.

    "As a last ditch effort to stave off defeat in October 1944, all males aged 16 to 60 were required to join the Volkssturm, or Home Guard."
    http://histclo.com/essay/war/w...
    The implication here is that 25% are over 60 and under 16 and this is just conscription.

    In the US enlistment has bounds but once in service age can be as old as
    they wish as long as they can meet standards. One reserve unit doctor is 66.
    http://dopma-ropma.rand.org/re...
    " Mandatory retirement age is age 62 for all officers other than general or flag officers. Service Secretaries may defer the retirement of health professional officers and chaplains until the age of 68."
    So 68 is a US military upper bound ... and I assert less than 25% of /. is over 68 but I could be wrong.

  11. Re:Nobody mentioned it to me. on Study: Man-Made Global Warming First Became Evident In the Mid 20th Century · · Score: 1

    I'm not surprised that a meteorology course would concentrate on water. It's the only greenhouse gas whose level changes significantly on the time scales that weather is forecast on. Water vapor is what they call a condensing greenhouse gas. .....

    Interesting and worthy "Water vapor is what they call a condensing greenhouse gas."

    Jungles, forests, grasslands, ice fields... oceans... All are modified by water.
    Remember the great Sahara Forest http://www.blueoregon.com/2007...
    makes it clear that man's impact on the environment was big (put a time frame on that
    bit of knowledge)...

  12. Re:One question on Study: Man-Made Global Warming First Became Evident In the Mid 20th Century · · Score: 1

    Nevertheless, according to model evidence,

    Models are not evidence. Measurements are evidence, models are an attempt to draw conclusions from evidence.

    -jcr

    Obligatory addition that:
    Correlation does not imply causation....
    https://en.wikipedia.org/wiki/...
    .
    This climate thing is important. No mater where I stand on the science it
    is an issue worthy of great attention. Too many hair brained plans...

    The cap and trade carbon tax gang stands to make too much money brokering
    the exchange game to allow any discussion. The issue is real, their approach
    at addressing it seems selfish.

  13. Re:More nope on Study: Man-Made Global Warming First Became Evident In the Mid 20th Century · · Score: 1

    CO2 has risen substantially in the last decade or two - with very little corresponding warming.
    Last year was the hottest in recorded history ... so you are simply: wrong.
    Also keep in mind: when you open the valve of your heating, it takes a few minutes until the radiator is hot, and it takes hours until your room is significantly warmer. ......

    One also needs to look at a bucket of ice and water on a stove with a thermometer in it.
    What is the initial temp and what is the temp at about the time the last bit of ice melts.
    ----- Nice sale at Thermapen BTW.----
    The point too many miss is energy budget and balance.
    The astounding thing about water is the enormous energy budget changes
    as water changes phases. It takes 80 calories to melt 1 gram of ice and
    the heat of vaporization of water is 540 calories/gram. What is the energy
    of the monsoon rains in India? What is the energy budget of a Katrina?
    Combine this with partitioned masses of water in the ocean and
    the impact of local, regional, global climate changes is much more
    complex than all but a rare few climate models work with.
    Altitude and the big 540 cal/g transition is very important....

    Climate models, especially the old ones are absolute examples of
    dusty deck mad-scientist with gray hair baggage. I have seem some FORTRAN
    code that might be F66 and contains PI=3.14 .. I got to look at the
    deck because the keeper and user of the code complained that
    he was seeing instability in the 19th digit in parallel processing runs.

    I mentioned that setting PI=3.14 and complaining about the 19th digit
    was "anonymolous". He responded that the code was unstable when
    a better value from math.h was used.

    These researchers are not making strong enough demands on their
    code foundations and are not making strong enough demands on
    hardware vendors and perhaps more importantly not making demands
    on IEEE hardware math standards and absolutely not making foundational
    demands on math libraries. Rounding and overflow rules are a train
    wreck in many of these programs. Almost none catch divide by zero.

    Some researchers in France (IIRC) are working on an improved math
    library. Since benchmarks are part of the procurement process
    no vendor wants to play with better libraries for fear they might
    not win the procurement. Code authors need to pay attention...

    I quibble about 3.14 and PI at the same time that I know instrumentation
    and historic records have their limits at about three significant digits. But
    numerical methods can be applied. Modern instruments can be improved.

  14. Re:Pulling that off was a major conspiracy on Volkswagen Diesel Scandal Spreads To Porsche and Audi · · Score: 1

    That depends if the low emission mode was already coded and used in some other circumstances. If for example the engine enters that mode after idling for 30s. ..... But it is at least theoretically possible.

    It can be astoundingly important to look at incentives, rewards and bonuses.

    Management may set a goal and never check to see how it was achieved.
    The more aggressive and inflexible the goal the more incentive there is to cheat.

    My expectation is that some corner of the process was tasked with software
    driven optimizations in a set of unlabeled operating profiles gathered by others.

    There are many optimization processes driven by modern statistics that
    can generate results and answers based on test data inputs alone.

    I was astounded in my first interactions with Bayesian statistics to learn that none
    of the inputs needed to be labeled yet an optimized result was still generated
    and easy to test. There are limits but anonymous data can drive results better
    than intent and purpose driven analysis based on specific knowledge. Consider
    spam filters... all the feedback is binary: spam/ not-spam. There is no specific
    input for viagra, no input or dear sirs my Nigerian... , no input for funky language
    constructs.

    My guess is less forgiving. A single individual could have framed and gamed this
    and once a performance test result was established it would never have been
    looked at. Perhaps it was as simple as "scenario 567a" failed testing re-optimize it.
    At no time would "scenario 567a" have been labeled scam the EPA test program.
    The profile for "scenario 567a" would have been gathered no different than
    stopped at light, climbing long hill, descending short hill... Once the profile
    was gathered and a simple "go, no-go" result tagged to testing it the game
    of hyper optimizing begins.

    This will cost VW.
    It is a lesson to look beyond simple metrics and simple test goals.

  15. Re:Science! on A Call To RICO Climate Change Science Deniers · · Score: 1

    Because arresting people is what science is about now.

    One real problem with "climate science" is the science is new and evolving.
    At best some of the weather codes can get the correct answer in hindsight.
    Some of the data and codes are so bad that using the word science hardly applies.

    Missing is all the discussion is not the issue of right and wrong but the
    astounding impact of the worst case scenarios. We do not need carbon tax
    we need to invest in better science. Carbon tax in the form of cap & trade is simply
    a way for "brokers" and "markets" to make money. It changes costs. Costs
    are always passed through and born by the market.

    Californians are looking hard at the El Niño impact risk. None of the weather services
    can settle on a model that can tell the water managers of the west coast
    anything of value. An inability to predict weather a year in advance makes it
    very difficult to believe a weather model that reaches 20, 50, 75+ years in the future.

    The CNN/Fox hybrid on TV that is is the Weather Channel is too busy
    gathering eyeballs that it is busy playing Chicken Little with weather.
    Social deniers like CNN revisit Katrina and ignore the reality that homes with
    foundations below sea level like many in the 9th ward is foolish. They ignore
    the reality that most are rental. They ignore the reality that flood insurance
    for homes that are under water in the sense of Noah does not exist.
    FoX is denying the whole thing when they can and blame the problem
    on the Democrats.

    Imposing law on top of evolving science is just foolish.

    Weather and Climate Science is one place very much in need of open source codes
    and open source data.

    Weather and Climate Science is very much data starved. Domestic, International
    and ocean wide data collection needs to be invested in. All surface ships and
    aircraft need a weather data collection pod. Data transfer from ships to aircraft
    to land, to aircraft to... can be done with classic store and forward tech like uucico
    and need not incur expensive satellite bandwidth.

    Darn I was going to not say climate science is bunk... but it is.
    I will say that it is too important an issue for the nations of the world
    to not invest and change my mind.

  16. Re:Israel hasn't vowed to "wipe Iran off the map" on Flash From the Past: Why an Apparent Israeli Nuclear Test In 1979 Matters Today · · Score: 1

    Yeah, a lot of people don't understand even the basics of the situation.

    The Japanese public had been fed, and believed, propaganda.....

    “Those who fail to learn from history are doomed to repeat it”.
    But what lessons are there to take away...

    I fear we are skipping over the almost necessary dehumanization of the other guys
    to allow previously sane people to engage in the horrendous prosecution of war.
    It needs to be temporary....

    What we cannot allow is some politically motivated dehumanization of the other guys
    in order to justify some future action.

    Sadly the almost necessary dehumanization of the other guys in the context of
    resource starved desert dwellers necessary for survival was written down most
    likely out of context witnessed by multiple scribes and compiled into the documented
    social fabric of society.

    A challenge I see is how to deprogram centuries of them vs. us inflexible
    near insane troubles in society and find a way we on this shared commons
    blue marble in space can move forward with.

    There are complexities involving resources, water, food, CO2, global warming, sea levels, fisheries in the sea, emigration and immigration and more..
    Silicon Valley is the best and worst example... what was one productive sustainable agriculture is now paved over and imports stuff from the globe.
    At some point too much pavement will put us in a tipping point vastly more troubling and sooner than seal level changes.

  17. Re:Israel hasn't vowed to "wipe Iran off the map" on Flash From the Past: Why an Apparent Israeli Nuclear Test In 1979 Matters Today · · Score: 1

    Are you old enough to remember the fighting between the Catholics and Protestants in Ireland?

    To be more precise the Catholics and Protestants in Ireland that you make reference to are political handles more than
    religious agenda driven activities.
        https://en.wikipedia.org/wiki/...

    Quite a distraction for Americans that had no clue (past tense may be very wrong).

    It is very necessary to look at political discussions with the eyes of a trained psychologist.
    One interesting thing that seems to be happening is splitting.
        https://en.wikipedia.org/wiki/...
    This all or nothing thinking is manipulated and abused by all manner of agenda driven
    groups. It may explain swings in poll results and more.

  18. Re:(intentionally blank) on Epson's 'Empty' Professional-Grade Cartridges Can Have 20 Per Cent of Their Ink Remaining · · Score: 1

    Except the printer refuses to print when the cartridge is 'empty'. It'd be like your car refusing to start or automatically turning off as soon as it hit empty no matter what. You'd then have to disconnect the tank, throw away that 20% of fuel, and buy a new gas tank from the manufacturer and only from the manufacturer.

    The article is unclear on that... it says it gives a notice but then also says that notice is that it must change... whether that notice to change prevents it from operating is not really stated. On consumer grade printers, the notice pops up but you just ignore it until things start printing poorly.

    There are consumer issues very much like the Tuna payout games of recent times.
    If the sensor system incorrectly reports levels and sales decisions are made from these sensors
    it seems consumer are being bilked out of product.
    It is easy to weigh to a gram the full and the empty cart and do the math.
    A 750ml cart should be lighter by ~750g*density_correction when the machine
    reports it empty.

    Some cost accountant may quibble that close without running out is good enough
    because they have dedicated walk about staff for service doing the replacement.

    Businesses should simply put the binders on color printers.
    It makes sense to send spamo-grams to any vendor that has
    printable documentation that abuses color for the sake of logo-vanity.

  19. How does blunting one help when they are trained . on New Tech Puts the Brakes On Bullets Fired From Police Sidearms · · Score: 1

    How does blunting one help when they are trained to empty
    the weapon and then reload.

    Does not pass this mans sniff test!
    I call it BS.

  20. Re:and what stops on 10 Major Automakers Agree To Include Automatic Emergency Braking On New Vehicles · · Score: 1

    they guy with the older car behind you from rear ending you instead? Or are these systems going to optimize between the risk of crashing into the guy in front of you vs the risk it will stop too quickly for the guy behind you to respond (yeah I know we all leave sufficient space between us and the car in front to brake)?

    I have taken to larger and larger gaps up to the point that fool slip in and remove the gap.
    Break horsepower on some vehicles is astounding today. This one reason I sold
    my old Ford 71' 4x4 truck. I do miss the visibility... If auto drivers could see what even small
    truck drivers see many car lengths ahead they would drive with more care.

  21. Re:To What Medium on Testing Old Tapes To Save Them · · Score: 1

    Pressed CD / DVD Roms seem to have a decent shelf life. Of course, building a die is cost prohibitive, and it is possible to store them in adverse conditions that eventually destroy the silver layer (but the depth could theoretically still be probed by other means, I imagine)

    Burnt CD Roms have issues with the dye decomposing. Some of them won't even last ten years, while others might make it to the 20 year mark.

    There is a Blu-Ray tech that boasts +200 year life expectancy. One example:
    "Verbatim M-Disc optical media is the new standard for digital archival storage. Unlike traditional optical media, which utilize dyes that can break down over time, data stored on an M-Disc is engraved on a patented inorganic write layer – it will not fade or deteriorate. This unique engraving process renders these archival grade discs practically impervious to environmental exposure, including light, temperature and humidity."

  22. I like John... on John McAfee Pondering Presidential Bid · · Score: 1

    I like John... but my vote would hinge on his selection of a VP.

    Sadly the VP selection is so late in the game that I cannot convince myself
    that knowing what I need to know when I need to know it is very much
    in doubt.

    I would like to keep the Electoral College and change primary laws to
    address a team from the get go.

    The EC may prove to to be out best check and balance in this upcoming popularity poll.

  23. Re:Oh, they're a big company, on Windows Telemetry Rolls Out · · Score: 1

    surely they know what they're doing and it's all for a better customer experience.

    Oh, absolutely! Windows 10 is great!

    So far, Windows 10 has reminded me repeatedly that I should: (1) Consider getting Office 365! (2) Consider installing Skype! (3) Should collect and use Bing Rewards! ..... *sigh*

    This lazy roll out of invasive features is interesting.
    There is a bait and switch aspect to it and I need to look a lot harder
    at the EULA.

    Tied to hardware and a dynamic EULA could be foundations for a class action
    based on time and effort at the going rate. With a minimum wage and a requirement
    to pay healthcare benefits after 30 some hours that adds up a lot. Another class of
    engineers and companies billed at $200+/hour for jumping through hoops that were
    not ordered.

    For me as an early access person I can see a lot of cruft.
    For me as an engineer I can see a lot of reason for a company IT department
    to require rather invasive introspective tools.

    So far all I have seen from MS is the beginning of something that could prove
    very interesting.

    Some here will recall the roll out of SELinux and that the initial policy was too
    darn hobbling. Then targeted policy surfaced and a lot more folk use that.

    Others may disagree but since Win-NT MS has had a technical foundation
    to deliver a reasonably security model that could be liked by industry.
    Business folk did like VMS for the security and audit model. End users did not
    except where the IT department payed attention and responded to alarms
    and requests. Not so much for home PC users...

    The last Win-10 insider update did have a plethora of new things. The internals
    are opaque and changes to policy vs. mechanism could prove interesting. Designing
    and delivering a solid policy that end users can live with is a challenge.

    I have always enabled SELinux... sometimes permissive, sometimes targeted, sometimes full standard policy.
    Security policy is difficult....

  24. Re:The weight of 200 garden variety digital camera on World's Most Powerful Digital Camera Sees Construction Green Light · · Score: 1

    In a consumer product based price comparison start from this
        https://www.cinema5d.com/canon...
    The Canon ME20F-SH – A Lowlight Camera with 4 Million ISO is closer to the design
    needs of this telescope.
    This telescope will have low temperature sensors (heavy) to increase the IR side and
    reduce over all signal to noise problems.

    As for the Defense Department ... I recall a discussion of a program to detect and track rocks in space
    that might impact the earth. Then there was DARPA and TCP/IP without which this forum might never
    have happened.

    BTW: this telescope is COOL. The data may be public inside of hours and all the backyard astronomers
    will be accessing it from their tablet computers. I was given a half six pack into to this a year ago by
    some that know and it is COOL.

     

  25. Re:If they would FIX bugs, this would not happen on Bugzilla Breached, Private Vulnerability Data Stolen · · Score: 0

    Mozilla has a nasty habit of warehousing bugs that can't get fixed with the wave of a hand. that's why I quit the thing for Chrome a long time ago.

    There is a rumor that the hack was from a couple personal residences
    commuting distance from NATIONAL SECURITY AGENCY (NSA) HEADQUARTERS.

    But that could be someone pulling yer leg.

    It does tell me that layers of authentication and security for
    companies and agencies very much needs attention.

    We have an Email server that apparently contained email
    at multiple levels. We have Snowden sitting at a desk able to
    take screen shots of anything he cared to. We have hacks
    of federal personnel files, Target and more...

    Sadly Windows 10 could be an improvement but it does put
    critical keys in the hands of a single company. But early inspection
    of policy enforcement has discovered nothing to scream about.
    News at 11:00 on the MS thing....

    This is fire season on the Calif West coast and there are many many bells ringing
    up and down Silicon valley. There is also a run on ear plugs.