From a brief trawl of the Android sources, it looks like Android's new-and-shiny OpenSSL-based SecureRandom only seeds the OpenSSL random generator if you open a TLS socket. If you don't - you will be using an unseeded OpenSSL RNG.
One thing that does stand out in Oracle's favor is the security record.
Oracle has real good internal processes for secure software design, implementation review, and emergency response. (I know this from people who have actually worked there and were subject to these processes– it's not just marketing fluff).
Postgres developers, on the other hand, willfully ignore security issues in their code on flimsy grounds.
My intro-to-CS professor (20 years ago... my, how time flies) used to illustrate sorting algorithms by sorting the students in class by height. Once someone participates in a sorting algorithm, they sure won't forget:)
For example, I used to work with a tool called BugTrapper from MuTek Solutions (it's now called AppSuite, and the company is now called Identify Software). It can record an application's runtime trace, replay it, rewind it and provide many more helpful debugging tools. Unfortunately it never caught on (maybe because of its price), and nobody has copied the idea to open-source tools:-(
Well, it's my business to know... (or actually predict;-)
I work on wireless games (I'm managing the games group at a wireless VLSI company). We already have a (proof-of-concept) DOOM port on a wireless device. It's already here.
Additionally, in Germany games by In-Fusio are a huge success; In-Fusio even signed a deal with Motorola to provide a (J2ME-based) game engine on all Motorola devices.
Wireless carriers see games as one of the driving forces for the adoption of next-generation (2.5G and 3G) devices.
So, wireless games (and SDKs) have great momentum. Which ones will succeed -- this is another question; I'd certainly bet on the Java-based ones, and ExEn (In-Fusio's offering) is already succeeding.
[ I know, I'm being sarcastic. So sue me. ]
Has anyone looked at the services offered in Nautilus?
They include:
Remote storage. Great, but it's integrated only within Nautilus; which means (a) no command-line access, (b) not even access from other desktop apps (esp. KDE ones!)
An installer. Haven't I seen something like that before? (Hint: Ximian...) Yes! We also have Red Carpet!
Slashdot Mirror
From a brief trawl of the Android sources, it looks like Android's new-and-shiny OpenSSL-based SecureRandom only seeds the OpenSSL random generator if you open a TLS socket. If you don't - you will be using an unseeded OpenSSL RNG.
One thing that does stand out in Oracle's favor is the security record.
Oracle has real good internal processes for secure software design, implementation review, and emergency response. (I know this from people who have actually worked there and were subject to these processes– it's not just marketing fluff).
Postgres developers, on the other hand, willfully ignore security issues in their code on flimsy grounds.
My intro-to-CS professor (20 years ago... my, how time flies) used to illustrate sorting algorithms by sorting the students in class by height. :)
Once someone participates in a sorting algorithm, they sure won't forget
Tarsnap (http://www.tarsnap.com) positions itself as an “online backup for paranoids”, but should be easily usable for simple web-based storage.
Life: an invariably fatal sexually transmitted disease.
... Only people are not adopting the new ideas.
:-(
For example, I used to work with a tool called BugTrapper from MuTek Solutions (it's now called AppSuite, and the company is now called Identify Software). It can record an application's runtime trace, replay it, rewind it and provide many more helpful debugging tools. Unfortunately it never caught on (maybe because of its price), and nobody has copied the idea to open-source tools
Well, it's my business to know... (or actually predict ;-)
I work on wireless games (I'm managing the games group at a wireless VLSI company). We already have a (proof-of-concept) DOOM port on a wireless device. It's already here.
Additionally, in Germany games by In-Fusio are a huge success; In-Fusio even signed a deal with Motorola to provide a (J2ME-based) game engine on all Motorola devices.
Wireless carriers see games as one of the driving forces for the adoption of next-generation (2.5G and 3G) devices.
So, wireless games (and SDKs) have great momentum. Which ones will succeed -- this is another question; I'd certainly bet on the Java-based ones, and ExEn (In-Fusio's offering) is already succeeding.
Has anyone looked at the services offered in Nautilus?
They include:
- Remote storage. Great, but it's integrated only within Nautilus; which means (a) no command-line access, (b) not even access from other desktop apps (esp. KDE ones!)
- An installer. Haven't I seen something like that before? (Hint: Ximian...) Yes! We also have Red Carpet!
So, frankly, what do we get from these services?Well, some are...
Some people are going to a scifi con to watch the end of the world starting...