Slashdot Mirror


User: cbiltcliffe

cbiltcliffe's activity in the archive.

Stories
0
Comments
3,325
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 3,325

  1. Re:You mean ... on Car Glass Rules Could Impair Cell, GPS and Radio Signals In CA · · Score: 1

    Let's see.....picking fruit.....gay orgies in the street....

    Nope, still not seeing anybody driving.

    And both of these things fit into the "shit like that" category.
    Well...maybe not the Mexicans, but....

  2. Re:You mean ... on Car Glass Rules Could Impair Cell, GPS and Radio Signals In CA · · Score: 1

    That's what I'm trying to figure out... If you reflect 60 percent of the "sun's energy," doesn't that mean that only 40% of light from outside is let in? And if it's dark... doesn't that make night driving pretty damn dangerous?

    But you're forgetting...

    Californian's aren't ever on the road at night. They're all at ridiculously expensive parties in even more expensive clothes, snorting coke in the back room, and shit like that.

    At least....that's what Hollywood seems to think......

  3. Re:This what they for have the lowest cost IT work on Details Emerge of 2006 Wal-Mart Hack · · Score: 1

    I hope English isn't your first language.

    This what they for have....

    I assume you mean "This is what they get for having...."

    In which case, you're absolutely right.

  4. Re:$200,000 Cash Theft on Details Emerge of 2006 Wal-Mart Hack · · Score: 1

    The server hack took place in 2006.

    The $200K cash theft took place in 2009.

    You figure it out.

  5. Re:Eurosoft PC Check on Software To Diagnose Faulty PC Hardware? · · Score: 1

    This is bullshit.

    The large caps in a computer PSU are not charged up to mains voltage.

    They're on the secondary side of the transformer, so at most, they'll be at 24 volt, but usually 12 or 5.

    You won't even feel that if you grab both pins.

    It'd be like grabbing both terminals of a 12 volt car battery. It's capable of supplying probably 700 amps, but you won't feel it, because 12 volt across the resistance of the human body is on the order of microamps. On the other hand, if you do short these out with a screwdriver, you'll see an impressive fat spark, and could damage other components in the area, so it's still not a good idea.

  6. Re:Replace the integrated part on Software To Diagnose Faulty PC Hardware? · · Score: 1

    Tell me a piece of software that'll expose a dying capacitor, please?

    Windows. :)

  7. Re:it's the browser implementation on SSL Still Mostly Misunderstood, Even By the Pros · · Score: 1

    No you don't.

    Just set up your own CA, and generate your own certs for your servers. (Documentation abounds on the net about how to do this with Apache.)

    Then, import your CA cert into your browser's CA list.

    All of a sudden, all your servers are showing up as properly signed and encrypted, with a valid cert.

    Seriously, people....this shit isn't that difficult.

  8. Re:Mod up - Everyone buy one of these on Software To Diagnose Faulty PC Hardware? · · Score: 4, Funny

    With hardware its usually bad psu, then bad memory, then bad caps.

    Then bad karma, then bad mojo.

  9. Re:Are clicks still being sold? on Bahama Botnet Stealing Traffic From Google · · Score: 1

    So is there an extension for FF that makes it send a random user agent for each request?

    If not, there should be.

  10. Re:I've run across this.... on Bahama Botnet Stealing Traffic From Google · · Score: 1

    Nope. Hosted by an Ottawa computer company.

    Bastards.

    Or idiots.

    Not sure which.

  11. Re:Are clicks still being sold? on Bahama Botnet Stealing Traffic From Google · · Score: 1

    No, you are not committing click-fraud, what gave you that stupid idea?

    That wasn't a serious suggestion. It was quite sarcastic, directed to the parent who basically stated "Cookies will solve everything!!!yum!!1!"

    Loonies like you, who deny cookies, are still counted because the merchant can tell, when you make a purchase, whether you have an affiliate cookie set or not...

    Errmm...if I deny cookies, how can I be counted when the merchant sees that I have an affiliate cookie? I don't have an affiliate cookie. That's the whole point of denying them.

  12. Re:Are clicks still being sold? on Bahama Botnet Stealing Traffic From Google · · Score: 1

    I have cookies enabled for the payment system, yes. But unless the advertising network placed the cookie, they would have no way to correlate clicks to sales. They'd just have to trust the customer. If the customer's code was buggy, and didn't properly place the cookie, or didn't properly check the cookie, or didn't properly ......fill in the blank, the advertising network would get bupkis. And that doesn't even get into companies who would just hide some of their click sales so their advertising budget was lower....

  13. Re:Are clicks still being sold? on Bahama Botnet Stealing Traffic From Google · · Score: 4, Insightful

    So then people like me, who deny all cookies from advertising networks, are then committing click-fraud by not allowing the ad to be traced?

    It doesn't matter how you do it; if it's on the Internet, there will be an edge case of some type that doesn't fit, and breaks your model. Whether it's criminal click-fraudsters, paranoid anti-cookie loons, or some guy who's surfing on their friend's computer. They click an ad, their friend makes a purchase a week later, and the advertiser gets paid for......what, exactly?

  14. I've run across this.... on Bahama Botnet Stealing Traffic From Google · · Score: 2, Informative

    I've run across this beast before. Being Canadian, and used to all this crap being hosted in Russia, China, and various other places like that, imagine my surprise when I found the hosts file redirected all Google searches to a webhost in Ottawa.

    However, it might be somewhat easy to detect. When you try to log in to Google, Youtube, or any other Google service, the browser throws a security warning, because the secure Google login website is using a self-signed certificate.
    Although this may only apply after the active component of this malware is removed....I'm not sure. Didn't try to log in to Google before removal to try, because I didn't realize what I was dealing with a the time....

  15. Re:Seems low on 72% of Banks Say Their Employees Committed Fraud · · Score: 1

    I would think with enough of the first two things on the list, you could open cans pretty easily, too.....

  16. Re:2400 pages? on Ministry of Defense's "How To Stop Leaks" Document Is Leaked · · Score: 1

    Doesn't quite excuse 2400 pages, but it does make it seem more like "we've mashed what could have been lots of documents in to one".

    So essentially, they're making the document leak process more efficient?

    Instead of having to leak 15 different documents, you can do it all in one fell swoop?

  17. Re:Outward facing systems ... on Sloppy Linux Admins Enable Slow Brute-Force Attacks · · Score: 1

    If I were to plug a vulnerable machine in, it's still a switched network, which means sniffing is impossible -- they'd have to actively MITM me, somehow without my server noticing. (DNS tricks are right out, as I refer to the server by IP.)

    Do you have static ARP tables set up in both machines?

    No?

    Then ARP poisoning will make mincemeat out of your "it's impossible to sniff a switched network" security before you have the time to say "Oh, shit."

  18. Re:Outward facing systems ... on Sloppy Linux Admins Enable Slow Brute-Force Attacks · · Score: 1

    You know why it's ignored? Because it would be very difficult to take an open-source client, which by design, must have the decryption code for the password, and the encrypted password stored on your computer, and NOT have an attacker able to get the password.

    The only easy way to do it is if you had to enter another password when starting up your subversion client, which kind of defeats the entire purpose of stored passwords.

    I suppose it could use your login password, but that would mean either a token or the password itself would have to stay in memory for your entire login session, which brings up other security problems.

    You could do it with a file that stored the encryption key, but that would either have to be manually loaded, which would nuke the point of stored passwords, or somehow configured to automatically load, which would nuke the security benefit again.

    Unless you had an extension to the login mechanism which decrypted your home directory on the fly. Such things do exist, but they're not in any linux distro that I know of by default, so we're stuck with the situation that we have now.

    Now, getting around the "NFS available to anyone with a live CD" problem is easy, but it requires a network admin that knows what the heck they're doing. IPsec would take care of this completely, if it were set up properly.
    But if you're using something like NFS to share home folders on the network, then you should certainly be taking precautions regarding security of what's flowing over the network.

  19. Re:Oh no! on IT Security Breaches Soar In 2009 · · Score: 1

    A few reasons:

    1. Canada has no mandatory notification law, so they frequently won't be published.
    2. People who are still using WEP for their wireless security aren't going to be looking for attempted attacks.

    This is probably a worst possible case scenario, like "all the data that could have been breached, but we don't necessarily know it was", but I would think it's probably realistic.

  20. Re:I lock my computer when I walk away on Schneier On Un-Authentication · · Score: 1

    I use my right little finger to hit the left Ctrl key, turn my hand upside down and use my right thumb to hit the right Alt key, then use my left thumb to hit the Del key.

    That puts my left little finger right about where the K key is. :)

    Seriously, though, I frequently hit the Del key with my ring finger, and my thumb is just nicely over the K key if I do.

    Not that I really need to worry about this, because none of my computers are on a Windows domain, so hitting Ctrl-Alt-Del just brings up the task manager.

    If I'm working on a client's computer that is on a domain, I'm not leaving it while I'm logged in. At all.

  21. Re:I lock my computer when I walk away on Schneier On Un-Authentication · · Score: 1

    Other than Win-L, you can save yourself a hunt for the 'K' key and realize that "Lock Computer" is the first button in the "security dialog" that pops up.

    Errm....
    How crappy a typist do you have to be to have to "hunt" for the K key? It's not like it moves around on a frequent basis.....

  22. Re:Effective way to keep screens locked on Schneier On Un-Authentication · · Score: 5, Insightful

    How is using physical paper and toner paid for by someone else with their money the same as downloading a digital version of a movie that you already have the VHS for, but it got chewed up when your VCR died?

    There's a very good reason why the laws of virtually every country in the world DO NOT consider downloading data to be theft.

    Because it's not.

    It's copyright infringement.

    I'm not saying it's right, or justified, or anything to do with the moral right or wrong of it. If you come out with a comment about how I'm a scofflaw just because I don't think it's stealing, you've just shown your own immaturity, and complete lack of awareness of the situation, as well as sheer arrogance in putting words in my mouth.

    The simple legal fact is, the two are not connected in any way, regardless of entertainment industry propaganda.

  23. Re:$8000 for a single processor on SGI Rolls Out "Personal Supercomputers" · · Score: 1

    I realize Gb network would be too slow.
    But would commodity hardware have an expansion slot quick enough to take advantage of Infiniband?
    I don't know much about it, but I assume you'd need at least a PCIe 16x slot, and even that would probably be too slow.
    Considering a lot of the cheaper commodity hardware (I'm looking at you, Compaq!!) doesn't have anything other than 32-bit PCI expansion slots, or maybe a PCIe 1x on their newer stuff, it's pretty much impossible to use commodity hardware to come in cheap enough for this, even if all the network hardware was free.

  24. Re:$8000 for a single processor on SGI Rolls Out "Personal Supercomputers" · · Score: 1

    The 5550 is a quad core. So for 80 cores, you only need 20 procs.

    That makes the 80 core experience $8000 + ($2000 * 19) = $46,000.

    For commodity hardware, you'd have to be getting your computers for $575 for single core machines, or $1150 for dual core. And that doesn't count the discount you'd probably get on the CPUs for buying 19 at once.
    Although you might get a similar discount on commodity machines, but it's certainly not guaranteed....

    Then there's all the hardware necessary to connect up 40 or 80 machines. Have you priced out a 40+ port Gigabit switch lately? Plus the 40 Cat6 cables, plus all the screwing around trying to get the clustering working, since the target market for this will probably rarely, or never have done it before...

    Then there's the extra wiring your house/business is going to need to plug in 40 computers.
    Sure, this thing will probably need a 50 amp circuit if it's loaded with CPUs, but a single high current circuit is much easier and safer than a 40 outlet octopus that would be needed for a cluster.

  25. Re:Shifting Standards on SGI Rolls Out "Personal Supercomputers" · · Score: 1

    But if Best Buy did sell these, some sales monkey would undoubtedly be trying to sell one to a little old lady who wants it for web browsing and email, because "Email needs a pretty fast computer."