Slashdot Mirror


User: jd

jd's activity in the archive.

Stories
0
Comments
13,841
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 13,841

  1. Re: Cursory reading on Researchers Propose a Revocable Identity-Based Encryption Scheme · · Score: 1

    That was pretty much my interpretation as well. Which would be great for ad-hoc encrypted tunnels - the source and destination can have keys that are valid only until the tunnel's authentication expires (typically hourly) and where the encryption is based on the identity the other side is known by. Ad-hoc tunnels need to generate keys quickly and efficiently, but also don't need to be super-secure. In fact, they can't be.

    If RIBE isn't useful in ad-hoc, then you'd end up having to ask when it would be useful.

    Anything that depends on a third party, including PGP/GPG with keyservers, is vulnerable to some form of compromise, SSL/TLS certificates all have a third party signer and Kerberos depends on all kinds of behind-the-scenes work being secure. However, although they're imperfect, they're considered adequate for what they do. Well, except for SSL, perhaps.

    RIBE presumably therefore also has a niche where it's good. Rapid key turnover is what's wanted for conversation-based protocols with timeouts. That makes RIBE sound promissing for IPSec ad-hoc and SSL, as it makes store and crunch by attackers less likely to work. But is that the right niche?

  2. If Kip Thorne can win a year's worth of Playboys for his bet that Cygnus X1 was a Black Hole, when current theory from Professor Hawking says Black Holes don't really exist, then can Professor Thorne please give me a year's subscription to the porno of my choice due to the non-existent bet that this wasn't such a star?

  3. Re:10TB of RAM? on WD Announces 8TB, 10TB Helium Hard Drives · · Score: 1

    Memory transistors are about a thousand times larger than CPU transistors. Do try to keep up.

  4. Re:Sounds stupid. on WD Announces 8TB, 10TB Helium Hard Drives · · Score: 1

    I've a very good idea that RAM prices are artificially inflated, that the fab plants are poorly managed, that the overheads are unnecessarily high because of laziness and the mentality in the regions producing RAM.

    I'm absolutely certain that 15nm-scale RAM on sticks the same size as sticks used today would cost not one penny more but would have a capacity greater than I've outlined.

    It could be done tomorrow. The tools all exist since the scale is already used. The silicon wafers are good enough, if they can manage chips 4x and 9x the size of a current memory chip with next to zero discards, then creating the far smaller dies (so you can discard more chips and still get the same absolute yield) is not an issue. It would reduce idle time for fabs, as fabs are currently run semi-idled to avoid the feast/famine cycle of prior years but 15nm would let them produce other chips in high demand, soaking up all the extra capacity.

    What you end up with is less waste, therefore lower overheads, therefore higher profit. The chip companies like profit. They're not going to pass on discounts, you getting a thousand times the RAM for the same price is discount enough!

  5. Re:10TB of RAM? on WD Announces 8TB, 10TB Helium Hard Drives · · Score: 1

    Not really. RAM is only expensive because of the transistor size used. Fab plants are expensive. Packaging is expensive. Shipping is expensive. Silicon is expensive. If you add all that up, you end up with expensive products.

    Because fab plants are running very large transistor sizes, you get low yields and high overheads.

    Let's see what happens when you cut the transistor size by three orders of magnitude...

    For the same size of packaging, you get three orders of magnitude more RAM. So, per megabyte, packaging drops in cost also by three orders of magnitude.

    Now, that means your average block of RAM is now around 8 Tb, which is not a perfect fit but it's good enough. The same amount of silicon is used, so there's no extra cost there. The shipping cost doesn't change. As mentioned, the packaging doesn't change. So all your major costs don't change at all.

    Yield? The yield for microprocessors is just fine and they're on about the scale discussed here. In fact, you get better. A processor has to work completely. A memory chip also has to work completely, but it's much smaller. If the three round it fail testing, it doesn't affect that one. So you end up with around a quarter of the rejection rate per unit area of silicon to a full microprocessor.

    So you've got great yield, same overheads, but... yes... you can use the fab plant to produce ASICs and microprocessors when demand for memory is low, so you've not got idle plant. Ever.

    The cost of this memory is therefore exactly the same as the cost of a stick of conventional RAM of 1/1000th the capacity.

    Size - Exactly the same as the stick of RAM.

    Power budget - of no consequence. When the machine is running, you're drawing from mains power. When the machine is not running, you are refreshing the dirty bits of memory only, nothing else. And 99.9% of the time, there won't be any because sensible OS' like Linux sync before a shutdown. The 0.1% of the time, the time when your server has been hit by a power cut, the hard drive is spun down to save UPS and the main box is in the lowest possible energy mode, that's when this sort of system matters. Even on low energy mode, buffers will need flushing, housekeeping will need to be done, transactions will need to be completed. This system would give you all that.

    And the time when the machine is fully powered, fully up? Your hard drive spends most of its time still spun down. Not for power, although it'll chew through a fair bit - mechanical devices always do and the high-speed drives being proposed will chew through far, far more. They'll be spun down because a running hard drive suffers rapid deterioration. Can you believe hard drives only last 5 years??! Keep the damn thing switched off until last minute, then do continuous write. Minimizes read head movement (there's practically none), minimizes bearing wear-and-tear, eliminates read head misalignment (a lot of times, you can write the entire disk in one go, so what the hell do you care if the tracks are not perfectly in line with the ones they're replacing?) and (by minimizing read head time over the drive) minimizes the risk of a head crash.

    I reckon this strategy should double the expected lifetime of drives, so take the cost of one 10 Tb drive and calculate how much power you'd need to consume extra for the memory in order for the memory's power budget to exceed the value of what you're doing.

    Oh, and another thing. Because I'm talking memory sticks, you only need to buy one, subsequent drives of the same or lower capacity would not need to have memory there. You could simply migrate it. RAM seems to hold up ok on old computers, so you can probably say that the stick is good for the original drive and the replacement. That halves the cost of the memory per drive.

    So, no, I don't see anything unduly optimistic. I think your view of what the companies could be doing is unduly pessimistic and more in line with what the chip companies tell you that you should think than what the chip companies can actually do.

  6. Re:Uhh yeah on Why Google Is Pushing For a Web Free of SHA-1 · · Score: 1

    Agreed, which is why it should be there.

    Nonetheless, there needs to be a backup plan in case it does turn out that the NSA or GCHQ have a backdoor to it. If it's been deliberately compromised (and I'm not keen on changes made AFTER it had been approved as SHA3 for that very reason), then the more paranoid amongst us need to have a backup plan. I certainly wouldn't suggest HTTPS over TOR use algorithms that are considered three-letter-agency-unsafe for any part of the security protocol, for example, since they're the ones doing most of the attacking.

    There's no easy answer to this, but I think that having SHA3 and NESSIE as the two standard choices and limited support for some third algorithm for when approval simply isn't good enough is the only real solution. The first two can be standard on all browsers and by all certificate authorities, the third only needs support on special-purpose browsers and OpenCA/OpenSSL/LibreSSL (since most uber-secure sites will roll their own certs).

  7. Sounds stupid. on WD Announces 8TB, 10TB Helium Hard Drives · · Score: 0

    High capacity I can understand, but high speed is senseless. At current transistor sizes, you could easily have 10Tb of battery-backed RAM on a hard drive. You can then peel the data off the hard drive into RAM and write changes when there are enough or when a sync command is sent. RAM doesn't eat battery significantly, it only needs to maintain state and then only on dirty portions. That'll easily buy enough time to survive power outages and Windows crashes.

    If everything is in RAM, access times are insignificant for always-on machines (the ones likely to need 10Tb of disk space). Since writes can be postponed until critical, the disk can spend most of the time totally powered down.

    Now, if you're REALLY clever, you have twice that RAM. One lot for working space (which doesn't need battery backing) and one lot for writing to disk. This second set can be permanently defragmented, with writes designed to be compact on space and the hard drive spun to specifically provide for that.

  8. Re:Uhh yeah on Why Google Is Pushing For a Web Free of SHA-1 · · Score: 1

    Microsoft will probably implement SHA0. There's no value in SHA2 (and variants) now that SHA3 has been ratified, since SHA2 is just SHA1 with some lengthening. If SHA1 is brutally compromised, SHA2 will fall shortly after. Best to switch to NESSIE (Whirlpool) and SHA3 (something that sounds vulgar).

    Having said that, SHA3 involved dubious mid-contest rule changes and spurrious rejection criteria that might well have been NSA-inspired. I'd take a very close look at the Hashing Lounge for any second or third round reject that shows greater resilience across the board (pre-image vulnerabilities, etc) as a backup in case NESSIE and SHA3 are seriously compromised.

  9. Re:What MS and Mozilla might be thinking on Why Google Is Pushing For a Web Free of SHA-1 · · Score: 1

    That's why you should never hire people, just small furry creatures from Alpha Centauri.

  10. Re:Developers prefer Ubuntu? on How Red Hat Can Recapture Developer Interest · · Score: 1

    Why would developers want/care about long-term support?

    There are a tonne of packages out there that will grab source from a repository and compile in a root jail. You now have binaries for every permutation of dependencies ever produced. Test harnesses (you remember those, the things developers are supposed to use) can give you a list of regressions and compatibility bugs within minutes of a commit.

    Long term support encourages developers to be lazy, to presuppose things that may not be true.

    Developers are best supposing nothing, testing everything and isolating the conditional (which they should be doing anyway, good software design). If you don't have time to be competent, then you certainly don't have time to be incompetent. So find time.

  11. Re:Developers prefer Ubuntu? on How Red Hat Can Recapture Developer Interest · · Score: 0

    As a developer, I categorically state I hate Ubuntu for development work. It is horribly sub-optimal, poorly organized and package management is unstable and space inefficient. It also doesn't run on several of my white box PCs. Very standard, old white boxes.

    Red Hat is only marginally better on efficiency, but recovery is ugly.

    Gentoo would be ok, except that compiler flags are a bother. I can't use utilities for using profiles to calculate optimal flags when those flags will vary down the dependency chain.

    Linux From Scratch is good, it's essentially how I put together my own systems between the last of the MCC builds and the first Red Hat I considered tolerable enough.

    Look, I don't expect miracles immediately. Only after the updates from the repository. There simply isn't any reason for so much broken code and suboptimal configs. Not when Ubuntu is run by a billionaire who can afford a few extra hard drives for high-end builds.

  12. Welcome to the free market on Comcast Tells Government That Its Data Caps Aren't Actually "Data Caps" · · Score: 1

    Where providers are free to gouge and customers are free to... well... complain on Slashdot, but that's about it.

    It's only actually free when there's freedom. Freedom to choose between genuinely different providers is a start. If they go to the same tier 2 provider, then the that will define the prices and services, so isn't a choice at all. If they ARE the tier 2, then they're the ultimate source of services and pricetag for all the tier 3s out there.

    But there has to be more, since bandwidth throttling dictates bandwidth availability downstream. You can't sell what isn't there - unless you're Time-Warner or Comcast, of course. Try that with a physical product ("It'll cost you $elebenty, payable now, no refund, and if it doesn't do what we claim, that's not a lemon, that's the fault of some unidentified someone doing something somewhere somehow and we'd rather screw you than bother them"). So, freedom to know what you're actually buying and freedom to use statuary rights to obtain that product or a refund.

    This is actually one reason I'm a little unhappy with free software. It has been telling vendors that it's ok to not provide what is offered. Not so much by actually doing that - free software has been, in general, superb about being up-front about what it can and cannot do, known defects and limitations, etc. More by saying in the license that the producer is entitled to lie through his teeth without consequence. A quick look at Oracle's conduct shows that vendors have paid very close attention to that clause.

    Free Software relies on there being a viable alternative, that users can go elsewhere if dissatisfied. The resilience to fixing bugs in GCC and GLibC, in present and prior administrations, demonstrate that when viable alternatives are scant, such software is too complex to fork or replace unless it gets really, really bad. Which it has occasionally done.

    When it comes to cable companies, it's infinitely worse. You're not in a position to run fibre from your home to an alternative tier 2 in another State. Partly because of expense, partly because laws governing interstate activities make it impossible for private individuals, and partly because the cable companies would raise all hell, three quarters of bloody murder and a dash of pint of high water to stop you. Which would not be hard for them, all they need to do is to persuade the tier 2 provider to not sell the capacity. If that failed, they could keep you tied up in knots with the FCC over whether you were an unlicensed telecom operator or not. Mind you, some of you might like knots. I dunno. If all else failed, they could SWAT the people running the cable, get you listed for suspected terrorist ties, or just repeatedly run a backhoe through your cable until you got the message.

    You have no choice. You have no freedom. The cable operators have been redefining "monopoly" and "telecommunications" to whatever serves their purpose, not yours, and on multiple occasions. They have been free to do so because everyone likes simplified services and nobody in the States is going to vehemently oppose the "market at work". Even when it clearly doesn't. Not until it is far, far too late to stop things happening.

    And we're way past it being too far. It was too far when telecos started replacing copper for fibre at select spots. Supposedly to improve service (which never improved). The reality was that DSL companies competing with the teleco all went out of business where this happened. No great surprise, you can't run DSL over fibre and everyone knew it. It was too late when telephonic "service of last resort" stopped being mandatory in many States. It was too late when ADSL was all private users could buy, SDSL was only sold to select businesses.

    It was too late when rival multistate networks got bought up by the Big Telecos with not a murmur from anyone.

    It was not because these were fatal in themselves, it's because people had become too stupid and too utterly dependent on being spoonfed by corporate giants (wh

  13. Denial of Service Atack on Uber Has a Playbook For Sabotaging Lyft, Says Report · · Score: 1

    False Representation
    Denial of Service
    Fraudulant Use/Misuse of Computer Resources
    Malicious Bypass of Security Protocols

    Illegal? Yes.
    Hanging offence? It should be.
    Grist for the London cab companies for unfair competition? Ohhhhhh, I hope they've been informed. That could be so fun to watch.

  14. The footage doesn't matter. on Put A Red Cross PSA In Front Of the ISIS Beheading Video · · Score: 1

    The publicity is everything to the terrorists. Censorship is, in some ways, even better for them, as rumours (which they can start) can make unseen footage far worse than reality and the Streisand Effect works just fine, bringing people into discussions.

    No, this isn't something you can fix in the middle. You have to fix the users, instead. You have to damp down emotional responses and increase rational duscussion. There is no terrorism without fear, there are no causes without fear.

    Eliminating the instinct (it's not an emotion, it's baser than that) of fear us impossible - and probably unwise if possible. But damping it, and raising calm rationality, is possible.

    And it will not only make video nasties unimportant, it will make the terrorists who make them an endangered species.

    You can't fight terror with blinkers or peril-sensitive sunglasses, or even with weapins. Because terror is in the mind, be it their mind or yours. And to fight in your mind the ghoulies and ghosties and things that go bump in the night, a warplane is a very messy, expensive and stupid solution. You can only fight mind with mind.

  15. Re:My opinion on the matter. on Choose Your Side On the Linux Divide · · Score: 2

    Skepticism != Cynicism.

    When the distinction becomes blurred, you no longer have skepticism.

    All things should be questioned. That doesn't mean forever.

    All things should be subject to scrutiny. That doesn't mean wasting cycles.

    Once an issue is settled, it's settled until new data brings it back into question.

    Things should be fixed before they break, not after, but only with something verifiably better. If it's not verified, it's not better.

    Enough of the common sense that you yung 'uns lack. Back to the boot process.

    The original boot process was never great. A very limited range of states, temperamental scripts, poorly documented behaviours, wide variation in precise behaviour between implementations, potential vulnerabilities, ghastly completion time, horrible dependencies, etc.

    This has been replaced with an alternative that is new, shiny and creates exactly the same problems but in a completely new way.

    A pox on both your houses.

    Still, six is better than the two runlevels offered by Windows, which are even slower, even less stable and even less secure. What's worse than pox. I know, Ebola on Windows.

    The lot of you are a disgrace. All three systems are less designed than congealed. And the Unix man pages were written by Vogons. Drunk Vogons. Practicing poetry whilst smashing snails with hammers.

  16. Well, that does it for Facebook. on Facebook Experimenting With Blu-ray As a Storage Medium · · Score: 1, Insightful

    Not that I had any trust in them anyway.

    Blu-Ray, and indeed any modern optical storage, is very short-lived precisely because it's designed to be cheap. The laser disks used to store the Doomsday Project in Britain were still readable after 20 years. Modern optical storage decays typically within 5. Less, as the density goes up. And failures take out far larger percentages of the storage.

    Magnetic tape is still the only trusted long-term backup medium. I wouldn't suggest it for something like Facebook purely because of seek times, but it's hard to think of any viable alternative.

    With Blu-Ray, to guarantee to avoid complete disk loss, you'd have to be re-archiving the entire archive annually. That adds an enormous invisible cost to the project. They're not going to do that. Which means there's guaranteed loss of backups. How much depends on the exact storage conditions but it won't be pretty.

    As for better ability to withstand conditions, it again comes down to the nature of the storage. Optical disks are highly vulnerable to a lot of things that hard drives are not. Overall, optical storage usually performs very badly in comparison, as the things hard drives are vulnerable to are cheaply avoided but the things optical storage can be attacked by are usually a lot harder to deal with.

    I'm sure you're aware that none of the above formats (tape included) are considered "archival quality" - they just don't have the sort of durability required by that categorization. No known digital format does and there's nothing you can do to stabilize them. It's a big research area. For now, tape is considered the only method that is economic and durable, with the lowest loss of data per failure.

  17. Re:Raptor? on Air Force Requests Info For Replacement Atlas 5 Engine · · Score: 1

    They often do. Before, they always did. Absolutely standard practice.

    It would be better if the government wouldn't buy anything, even from vendors of vendors, without full accounting. If you can game the system with shells, you might as well not have a system.

    Having said that, there's a lot of creative billing because of the specifics of how the paperwork is done, and there's a lot of creative bidding where costs are deliberately deflated or ignored (all for the very best of reasons, I'm sure) with the upshot that the actual cheapest bid isn't necessarily the one that's cheapest on paper, and where actual costs can be 2-3 times the provisional guesstimates.

    And, no, contractors actually don't charge a lot. People get out of government work and into purely private enterprise not because the jobs are better (they're usually far worse) but because the pay can be double. That's why government contractors get such a bad image. That's not where the talent pool is. The "get up and go" got up and went. The brain drain is not pretty.

    If government wanted people with skills doing the skilled jobs required, they need to outbid the Googles of the world. They need talent with the calibre to get the job done right. The first time. Talent that doesn't have fighter pilots blanking out from lack of oxygen because they actually bothered to design things that work. Talent that doesn't have glass-cockpit aircraft carriers dead in the water because of a division by zero error in a Windows application.

    The starting price needs to be higher. Much, much higher. Not only to be realistic, but to be realistic with the people needed to MAKE it realistic.

  18. Re:Fuck Lockheed on Air Force Requests Info For Replacement Atlas 5 Engine · · Score: 1

    Nobody is going to increase their expenses voluntarily. Especially on something like a rocket, where local disasters are very public and very expensive. And doubly not in a situation where increasing the cost of the contract would be a political nightmare likely solved by the contract moving to someone else buying from Russia.

    When money talks, nobody asks questions.

  19. Re:Fuck Lockheed on Air Force Requests Info For Replacement Atlas 5 Engine · · Score: 2

    It's what you get in a market economy. Sorry, but outsourcing is cheaper and the cheaper product will win over the better product 99 times out of 100. Especially when it comes to government, where they're legally obliged to go with the cheapest bid.

    That's just the way the country is set up. Anyone with a brain would tell you that outsourcing even across State lines, never mind international boundaries, carries political risk. The nation decided, rightly or wrongly, that saving money was more important. If the roll of the dice is against you, well, too bad. That happens.

    It also carries geological risks. Putting all the chip factories in one earthquake-prone zone in Asia - and, indeed, along the same bloody faultline, was a marvelous piece of risk management. Penny wise, pound foolish, as us Brits usually say. After the fact and rarely before.

    That brings me to the related point of putting vital infrastructure in dangerous locations.

    Silicon Valley (a highly polluted zone that exports contaminated water at vast expense to places that dump the water back into Silicon Valley's water sources) is a remarkable piece of stupidity, being as it is, situated on one fault line and close enough to another. Silicon Forest (Oregon/Washington State) has taken up some of the IT load, but given that the locations are still on the Ring of Fire and thus still in dangerously unstable territory, the industry has successfully doubled the chances of catastrophe.

    Most of the design engineers not located in these places are in India (a nice, stable location with no deadly diseases rampaging through the countryside and no risk of religious civil war or war with any neighbouring country), Israel (ditto except for the disease AFAIK), China (great choice, no problems there!) and Jaan (not the least bit likely to get into a conflict with neighbours, have power stations explode, suffer earthquakes or tsunamis, or lunatic politicians hell-bent on causing a crisis).

  20. Sure, no problem. on Air Force Requests Info For Replacement Atlas 5 Engine · · Score: 1

    It'll cost $(cost of ESA equiv + import license + 10%) for a basic launcher.

    For anything more complex or powerful, let me check my Kerbel designs to see what I have.

  21. Almost forgot. on Slashdot Asks: Cheap But Reasonable Telescopes for Kids? · · Score: 0

    DO NOT BOTHER WITH REFRACTORS!

    (Yes, that was intentionally shouted. If anyone actually needs to be told that, they're not to be trusted with gentleness.)

    Refractors will always produce low-quality images. A good pair of binoculars will cost less and show you more. Seriously. Refractors are for the gullible. Powerful binoculars will not only be cheaper, they will collect more light, they will be far more rugged, they will be easier to align, and they will be easier for kids to look through.

  22. Interesting question on Slashdot Asks: Cheap But Reasonable Telescopes for Kids? · · Score: 1

    Reflectors with an effective collecting area under 4" are worthless. That's everything from the aperture to mirror. That's going to put you well over $50. Adequate reflectors don't exist under $250, except on special clearance.

    You are better off buying a remotely controllable reflector with a webcam fitted to the eyepiece and having a group of kids take turns steering it. Firstly, it's cheaper overall. Secondly, you don't have breakages to worry about. Third, kids prefer nice, warm rooms to freezing pitch-black country parks well away from light pollution, hot drinks, facilities, ...

    Not only is this more likely to be attractive to kids, parents who invest $50 in a group effort are much more likely to make sure they get their money's worth than if they spent the same amount just on their kid. It's all about the attitude of not wanting to pay for someone else's stuff. It's a vulgar, uncouth attitude, but that makes it easily exploitable for everyone's gain.

  23. Meh. James Lovelock's idea is better. on Spot ET's Waste Heat For Chance To Find Alien Life · · Score: 2

    It's a very simple, even lower-tech approach. Unstable molecules are unstable, stable ones aren't. Life isn't capable of producing stable molecules from stable molecules. Something, somewhere down the line, therefore must produce unstable molecules.

    If you use spectrometry and find a planet that has two or more highly reactive molecules (especially if they cannot coexist naturally), that planet has complex life. If you have one reactive molecule that breaks down in sunlight but is being refreshed, that planet must have at least simple life. If the planet has highly reactive molecules that don't readily form naturally, you have life that is nominally intelligent.

    No requirement for any technology capable of generating a specific signature. No requirement for the absence of metamaterials. No requirement for a telescope big enough to detect the signature against natural variation.

    SKA would be capable of detecting an alien civilization using Lovelock's method anywhere inside of 1,000 light years, given the size and sensitivity currently being proposed. How big would the James Webb telescope need to be to get an IR signature on the industrialized part of the US at that range?

  24. Ooops! on Google Wants To Test Driverless Cars In a Simulation · · Score: 3, Funny

    Found a bug in physics.c, those cars we mass produced last year will spontaneously explode after 367 days of exposure to an atmosphere containing oxygen, or when white lines are painted rather than vinyl, or when attempting a corner of a prime number of degrees when speeding on a cambered road.

    Why wasn't this spotted sooner?

    Because we hadn't expected to need chemistry or non-Euclidian geometry in a physics engine.

  25. Re:Perhaps this won't be a popular view... on "MythBusters" Drops Kari Byron, Grant Imahara, Tory Belleci · · Score: 1

    Then make the episodes longer. Or have one set of presenters on the first show (they're usually paired) and the others on the second show. Or eliminate redundant footage so that you can have two or three times the content. Or eliminate the advertisers, sorry adverts, and get three times the running length.