Slashdot Mirror


User: FeelGood314

FeelGood314's activity in the archive.

Stories
0
Comments
497
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 497

  1. How are these laws worded? on US Charges Iranians For Global Cyber Attacks on Behalf of Tehran (reuters.com) · · Score: 1

    The USA, NSA and Five Eyes regularly intercepts traffic, hacks communication, puts back doors in commercial devices and even modifies other countries hardware. I find it hard to charge intelligence operatives of other countries for doing something we do ourselves. Your morals have to be pretty messed up to make one a crime and encourage the other.

  2. Evaluation Problem - I worked there on Cutting 'Old Heads' at IBM (propublica.org) · · Score: 5, Interesting

    IBM couldn't evaluate the value of it's workers. In a lot of places senior management really didn't understand what groups did so they came up with different metrics. Unfortunately the metrics often didn't make sense and were eventually gamed. One metric, the amount of time people spent on billable work got totally out of control. Secretaries were all fired because they never did work directly billable against a customer. Company meetings were held at lunch so they wouldn't count against total time. Training budgets were left unspent. IT was internally outsourced, sort of. IT became so incompetent each group had to maintain there computers on their own in spite of it. Older workers had more vacation time which would lower the billable percentage of a group. You could be the most amazing worker in the company but if you had 5 weeks of vacation you were toxic to your groups metrics.

    I worked in a secure lab in Ottawa. We were screwed because we didn't fit in the metrics correctly. We billed up to $6000 USD an hour but lost money according to IBM accounting. We had to do our own sales but since we were classified as a delivery group had to give half our revenue to another sales group so that the sales could be counted by a sales group. When we made a sale in another geographic region we would give half the sale to a local sales group and half to the one in the other region. 4 guys, 1 weeks worth of work, bill the customer $250K and we are getting grilled for losing money. Oh, and the grilling counted against our billable hours.

  3. It won't be bitcoin - f*#k the banks on Twitter CEO Says Bitcoin Will Be the World's 'Single Currency' In 10 Years (theverge.com) · · Score: 2

    Crypto currencies are so much easier to use than regular FIAT currency that there will be a crypto currency that will be used for at least 10% of all world wide transactions in the next 10 or 15 years. It just won't be bitcoin. There are just to many problems with it. The supply is limited, the transaction times are too long, the number of transactions per second is far to low, and the governing group on policy is not the people using it but the miners. Oh and the cost of the mining in terms of electrical usage is just nuts.

  4. Not secure against physical attack - duh! on A 15-Year-Old Hacked the Secure Ledger Crypto Wallet (techcrunch.com) · · Score: 3, Insightful

    Unless you mined the sand yourself, built the lithography machine and pretty much did every other step in building the device you can't be secure against an attack where someone physically substitutes part of the product on you. If the Pseudo Random Number Generator has a seed the attacker knows, or the program in the device is completely rewritten by the attacker or the entire device is counter fit, the bad guy will win and there is nothing that the makers of the Crypto Ledger Wallet can do.

    These aren't the attacks I need to worry about. Crypto Ledger Wallet was polite in even responding to this kid. John Biggs (writer for Tech Crunch) is an idiot for even writing the story.

  5. SFTP to Godaddy from Rogers blocked on Ask Slashdot: How Can I Prove My ISP Slows Certain Traffic? · · Score: 1

    I can't use SFTP to access my Godaddy account over Roger's infrastructure in Canada. I have ISP accounts with Carrytel and Tecksavvy both using Rogers cable infrastructure and my traffic is blocked. However when I use Bell everything works fine. Godaddy support was good, Tecksavvy is always amazing but we couldn't resolve it and rogers was completely unhelpful.

    Has anyone else experienced this and been able to resolve it?

  6. Didn't know what they didn't know on Jewelry Site Leaks Personal Details, Plaintext Passwords of 1.3 Million Users (thenextweb.com) · · Score: 1

    The company was incompetent but they likely didn't know they were incompetent. People who are good cost a lot of money and someone for half the wage will likely bang out something that looks great using the latest web platform of the month in half the time the high priced guy will take. A CEO, who doesn't know how to program can't evaluate who is good and who isn't. This was a screw up and combined with the fact that almost everyone reuses passwords potentially a major expense for a few people. Bankrupting this company won't make any difference. Other companies like this won't change their behaviour. There are lots of bigger companies that should know better that do worse. There are very few companies that will even change their behaviour when security flaws are pointed out. (they will patch the very specific flaw but not the behaviour that led to it). The only exception to this rule is companies that know they will be the ones that bare the cost of the security breach. Your password IS NOT valuable to a company like this. It generally costs them nothing if they lose it, so they don't count it as an asset worth securing.

  7. This is both an attack on AMD (and possibly their stock price) and a way for the researchers to get publicity. This happens way to often, just this time it got more publicity than usual. What happens is researchers looking to make a name for themselves finds what they think could sound like exploit, the fact that it might already be public knowledge or hell even the way a device is supposed to work (e.g. exploit needs signed drivers and physical access) doesn't matter. Usually the "researchers" aren't very good. They use automated tools to scan for a vulnerability that they don't really understand and when you respond that "yeah, that 32 bit signed/unsign error might be exploitable if you send me a buffer with 2^31 + 7 bytes of data to a processes on an old 32 bit server but since the process only has 2GB of memory good luck.* The researches intentionally published right away so that the organization they are attacking doesn't have time to respond. The researchers didn't want a response because they knew the response would be "fuck off, this isn't a vulnerability!"

    *yes, I had this conversation.

  8. There has to be a better way on Data Breach Victims Can Sue Yahoo in the United States, Federal Judge Rules (reuters.com) · · Score: 2

    Yahoo treated security as just an expense and an inconvenience. They gave security lips service but when some new shiny tool came along security was always the last thing slapped on at the end. Except I can't just say that about Yahoo, I can say it about just about every company.* Even if individuals in organizations care about security it really doesn't make sense to invest time and money to make things secure. Just role the dice and hope for the best. Make money now and then apologies later. From society's standpoint maybe that's what we want. A few tens of thousands of people might have been badly inconvenienced by yahoo's lack of diligence. Are we, as a society willing to pay more for our goods and services to make them more secure? I think most of us are willing to put up with the crappy security and just hope we aren't one of the victims. So let yahoo get away with it and not pay anything. It's not like equifax paid that much of a fine.

    *Note: I am a security expert, I do consulting, I get paid very well but I'm almost always frustrated. Every morning I wake up and I'm amazed the lights still come on.

  9. Urban Planning - solving the wrong problem on Elon Musk Changes 'Boring Company' Vision To Reward Cyclists and Pedestrians (techcrunch.com) · · Score: 1

    Canadian writer here. Poor urban planning is the reason we have traffic congestion in the first place. It's the reason I need a car. It's there reason I consume much of my energy. In Ottawa, Canada, a four bedroom house where I can walk to work and walk to a store is 1.3 million CAD. Same house plus a yard, in the suburbs is $350,000 CAD. No one in my neighbourhood uses their yard except to pile the snow from our driveways. Based on the prices of houses, most people would like to live packed together. I do like Musk's idea but it is solving a problem that is only there because of politicians and the morons who vote them in. In Canada, a non-trivial amount of a cities budget comes from building permits. If the city doesn't approve new sub divisions it would have to raise taxes. Multi dwelling unit permits in the city core don't generate anywhere near enough money. Also the city has to pay for the services and infrastructure for the subdivisions that it approved last decade but spent the building permit money on something else.

  10. Re:Relevant requirements on Ask Slashdot: Best To-Do/Task List Software? · · Score: 1

    Sorry to comment here - this is just for "Actually, I do RTFA" - Who ask a question about rural suicide rates and Simpson's paradox. Suicide rates are much higher in low density areas of Canada because native Canadians make up a higher percentage of the low density areas. Native Canadians have an extremely high suicide rate compared to the non-native population. If you really wanted to compare rural to urban suicide you have to compare it by demographic subgroups.

  11. Great now we can't discuss the topic on Facebook Asks Users: Should We Allow Men To Ask Children For Sexual Images? (theguardian.com) · · Score: 1

    How to solve a problem:
    1. Identify the problem
    2. Gather facts
    3. Discuss how bad the problem is
    4. Think of various solutions
    5. Evaluate each solution based on cost and side effects

    Unless the topic is race, sex, any oppressed group or the environment. Then just stop at 1, allow everyone's opinions to have equal merit (if they agree with you) and scream for punishment. We have had these problems for a very long time. There is a reason we haven't solved them and most of the blame goes to the people yelling the loudest. If you want to look at how to actually solve a problem look at the gay rights activists who were inclusive, engaging and non-confrontational.

  12. Securely joining a network isn't easy. Doing it over a protocol that needs agreement from a large number of people is almost impossible. 3/4 of the people in the meeting will think all you need is privacy. Those who understand authentication will then insist on something that only authenticates the network or the joining phones but not both. Then you get the push back against having any kind of centralized trust authority, so every one signs certs and validating them becomes a waste of time (the new passport system). Even if you avoid all that, someone will try and add more and more features because, insert stupid reason, or protocol X does it (Even if protocol X doesn't ever use it or protocol X is solving a completely different problem). Then you will get two features that can't be used securely at the same time and the group will vote that interoperability is more important than security. All this and more before we even get to the individual implementations.

    Security is the red haired step child. Everyone pretends to care about him but he gets shafted every time.

    (Yes, I have red hair, and for some reason a lot of security protocol people seem to as well)

  13. Uber driver could be a doctor on Passengers Who Call Uber Instead Of An Ambulance Put Drivers At Risk (buzzfeed.com) · · Score: 3, Interesting

    At least in Canada there is a good chance your driver is a doctor from the Caribbean or Eastern Europe. Our Ambulance service is pretty good here in Canada but you would be shocked at how many Uber drivers are doctors from poorer countries.

  14. Energy gradient, way of storing information on Microbes Found in Earth's Deep Ocean Might Grow on Saturn's Moon Enceladus (theverge.com) · · Score: 1

    Those are the two minimal requirements for life. You have to have some means of storing "genetic information" and copying it. And there has to be an energy difference that life can harness to do meaningful work. Does Enceladus have enough of an energy gradient to actually drive chemical reactions?

  15. The Green Virtue Signaling / Politics on Relying on Renewables Alone Significantly Inflates the Cost of Overhauling Energy (technologyreview.com) · · Score: 3, Insightful

    Coal should have died in the 60s but groups like Green Peace saved it by driving the cost of nuclear through the roof. 60s nuclear technology was safe, we even knew how to safely dispose of waste in the 60s. We couldn't dispose of it with zero radiation leak but guess what the world is mildly radio active anyway and coal, that thing that replace nuclear, spreads radio active material more than nuclear does.

    Ten years ago we solved a lot of the problems with renewables, it was called variable pricing for electricity. People and their appliances can be incentivized to use electricity when it is produced by changing less when the wind blows or the sun is shinning and charging over $0.70/kwh when it isn't. This saved consumers money and saved the utilities even more. Unfortunately the utilities that took a risk and tried this got fucked over by their public utility commissions. (Oklahoma public utility commission almost single handedly set back renewable energy by 5 years)

    Last it will never make sense for urban homes to have battery back up. It is always better to share your capacity among several houses, or several thousand houses. Like maybe make it a public utility to store and deliver electricity

    Also get white roof shingles!!!

    These are all easy things, things that could have already done with a little leadership and maybe getting some of these Green groups to actually think instead of parade around trying to get attention for themselves.

    Lastly fuck the pro-rail crude oil transportation advocates. They often go by the anti pipeline crusade.

  16. It's a capital gain on Coinbase: We Will Send Data On 13,000 Users To IRS (arstechnica.com) · · Score: 1

    Or likely will be in Canada. I've always known that the exchange where I put my CAD in and take it out was reporting to Revenue Canada. I'm pretty sure most people with a large amount of crypto currency now it and are expecting to eventually be taxed. Now I also know enough people with enough money to make it worth their while to move somewhere with a lower tax rate when they do take the money out. Also most people with a large amount of crypto currency are holding it in wallets and multi exchanges.

  17. Most crypto currencies are developed by anonymous volunteers. They aren't going to fill out any regulatory paper work. If Monero doesn't bother obeying a regulation what are the regulators going to do?

    Oh, you don't mean the currencies, you mean the exchanges. Well many currencies now allow swaps between currencies, so exchanges aren't always needed.

    Oh, but we will regulate when the money moves between fiat and crypto. Yeah, because the regulators have had so much success regulation money going to off shore tax havens and numbered anonymous companies. Also in the future I might buy a portion of my yearly spending in crypto currencies and not even need fiat currency.

  18. Poor Urban Planning on Studies Are Increasingly Clear: Uber, Lyft Congest Cities (apnews.com) · · Score: 1

    Ottawa, Canada might be the worst example of this. People are willing to pay 1M CAD for a house in a high density, grid layout neighbourhood that is walking distance to shops, cafes and on an express bus to work. The city though constantly approves new subdivisions that are 15km away from where anyone works, full of winding roads, are completely unwalkable, and could never be efficiently serviced with public transit. The city is clueless about bicycle traffic, regularly putting bike lanes on high traffic dangerous roads. (there new downtown bike lane had it's first cyclist hit the day they opened it and we had a bike safety instructor killed in the bike lane near my house, plus the separated bike paths aren't connected, have sharp blind corners and aren't maintained 4 months of the year). Part of the problem is the city gets a non-trivial amount of revenue from new building permits, so to balance the budget the city has to sprawl.

    The fact that Uber is so popular in this city is more a sign of out right incompetence at city hall than anything else.

  19. Create a female profile and test it out on Silicon Valley Singles Are Giving Up On the Algorithms of Love (washingtonpost.com) · · Score: 2

    It does suck for women. Create a female profile on POF and test it out. Men come across as undesirable on these sites. A woman who doesn't have something seriously wrong with her will get 10 messages a day and probably one every 5 minutes when she is logged in. A guy has to stand out in this noise and keep a woman's attention for 3 or 4 messages over a span of 15 minutes. Stand out to much and she will reject you as not being normal enough. Stand out just the right amount and you seem to needy and too easy to be worth her effort. Women don't want a guy who sounds like he is chasing them. If one of her messages is only 6 words long, she might still be interested but was lazy but now the guy is screwed because he can't respond with a short message because then the conversation will die.

    Sites like POF let you do a fair bit of mining. In Ottawa, Canada - age range 30 to 50, excluding BBW - Active men on a given day outnumbered women 3.5 to 1*. The median time before a woman's account becomes inactive or deleted was 88 weeks (that blew me away). Seeking "a relationship" or "marriage" makes your profile significantly more attractive.

    *Ottawa has a lot more single women than men due to the federal government being here.

  20. Math contest results vs high school results on Labor Board Says Google Could Fire James Damore For Anti-Diversity Memo (theverge.com) · · Score: 2

    My son's grade 12 teacher lined the kids up based on how well they did in their last year of high school math class. The top 5 were all girls and 3 more were in the top ten. This is based on a fairly standardized curriculum. Next he lined them up based on their results from the university of Waterloo math contest. 22 kids in the class and the top 8 were all boys. The girls new how to write the tests and give the answers expected but it was obvious that the boys actually understood the math better. (the teacher is no longer teaching)

    Here are the math contest results http://www.cemc.uwaterloo.ca/c... you will see a Cynthia on the 6th page of the results. That's the first woman's name I recognized

  21. The article is crap on New Horizons Probe Captures Images At Record Distance From Earth (engadget.com) · · Score: 1

    Beating a 3.75 Billion mile record by 0.04 Billion miles is not smashing a record. The language in the linked article doesn't get much better after that.

  22. I worked in a hospital on Hospitals May Turn To Algorithms To Fight Fatal Infections (scientificamerican.com) · · Score: 2

    They aren't clean. It was a while ago but I doubt the attitudes have changed. I worked in the laundry and we failed our health inspection every time. Management didn't care. The inspector would come in and we wouldn't have fixed any of the things he sited us for the last time. We were a critical resource or some bullshit like that so the health inspector couldn't shut us down. The mopping of the floors and cleaning of the beds was superficial. Spraying disinfectant isn't cleaning, you actually have to remove the human excrement and fluids so the bacteria doesn't have a place to immediately repopulate.
    Details:
    KW Hospital - Kitchener, Ontario, Canada, laundry department
    Years - 1987 -1989
    Faulty practices - putting clean laundry on dirty laundry carts, staff covered in filth handling clean laundry, staff covered in filth delivering laundry, no fire or safety training (7 high school students got left in the building during a fire), no metal detector for sharp objects.

  23. Re:Population levels and social media on US Suicides Spiked 10 Percent After Robin Williams's Death, Study Finds (bbc.com) · · Score: 2

    Suicide rates are studied for correlations to just about everything. In Canada the lowest density areas of our country have a suicide rate slightly more than 7 times greater than our cities. However it is far more complicated than that. The 7 times greater may not actually mean rural is worse for you, it's actually a little bit like a simpson's paradox https://en.wikipedia.org/wiki/... . I'll leave it to the reader to figure out why.

  24. All those Hawaiian people he kicked off their own island probably care.

    Talk about fake news. He never kicked anyone off. His property surrounded a bunch of other properties. Mark owed these people access rights across his property. With one exception, no one had been using these properties or paying taxes on them. It appears that most of the owners never even knew they owned the properties. Mark didn't force anyone to sell. He offered people money for something they didn't know they even owned. We are talking about plots of land that haven't been used in 2 or 3 generations. I'd be grateful if someone gave me $200 for 1/25 of a plot of land that my grand parents abandoned, before I was born, in a place I'll never visit. The worst he did was force the tax office and land registry office to clean up their act.

  25. Phone customers want poor security on Man Sues T-Mobile For Allegedly Failing To Stop Hackers From Stealing His Cryptocurrency (theverge.com) · · Score: 1

    Do you really think the phone company enjoys your grandmother calling them and saying she lost her phone and then trying to get her new phone working with her old number? That is the typical phone customer. You can't have good security with most people because they have no good way of authenticating themselves. I spend an hour on the phone with Revenue Canada last week and the first 3 people I spoke to couldn't authenticate themselves, the first thought giving me a number to call them back at was good enough. (My MP is looking into it)

    T-mobile knew this so they claimed to add a real layer of security, except according to the plaintiff they never followed through in enforcing it.

    As for the price of bitcoin, it is hard to sell OmiseGo tokens for cash but easy to sell them for bitcoin. The thieves stole the OmiseGo, converted them to bitcoin and then sold the bitcoin. That is why the plaintiff is claiming the value of the bitcoin sold.