Slashdot Mirror


User: Zocalo

Zocalo's activity in the archive.

Stories
0
Comments
2,447
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 2,447

  1. Re:SpamAssassin & DKIM on Ask Slashdot: How Useful Are DMARC and DKIM? · · Score: 1

    I was talking about the *net* average score for DKIM signed emails as a whole, which does indeed seem to be positive - e.g. more likely to be spam - and pointing out that the one major reason for that being the case is actually Yahoo! because they put a *legimate* DKIM signature on their outbound email regardless of whether it's spam or not. The upshot of that is that a lot of spam from compromised accounts hits the net with a valid DKIM signature and so the probability of an email with a valid DKIM signature being spam is quite a bit lower than it probably ought to be, so SpamAssassin's analysis tool assigns a smaller score to seeing a valid DKIM signature than might otherwise be the case. A fake DKIM signature clearly is going to get a significant score, no matter what.

    An individual email will, of course, have a combination of positive and negative scores as you say, with the individual rule scores coming from a statistical analysis of test runs (you can do them yourself if you wish and have a decent corpus - the tool is known as "mass-check") against the team's accumulated email corpus.

  2. SpamAssassin & DKIM on Ask Slashdot: How Useful Are DMARC and DKIM? · · Score: 4, Informative

    Default scores in SpamAssassin have been assigned based on tests against a large corpus of both emails to obtain a statistical likelihood that a given email will be spam or not for ages, so I take the positive score (more likely to be spam) as a pretty solid indication that its use doesn't provide a good indicator of legitimate mail. Ironically, the biggest culprit for that is probably one of DKIM's biggest proponents, the sheer volume of spam from compromised Yahoo accounts and signed by Yahoo's outbound mail relays is largely responsible for that positive score in my experience - if only they'd do better spam filtering of their outbound email... Not that they are the only ESP with that failing, of course.

  3. Re:Is this the first death in commercial space exp on Virgin Galactic SpaceShipTwo Crashes · · Score: 5, Informative

    In flight, definitely. But sadly not the first fatality for commercial space flight, or for Virgin come to that, Scaled Composites had an explosion during a ground test that killed three people in 2007. That set back didn't halt development, and I hope this one doesn't either.

  4. Re:Only YEC denies it on Pope Francis Declares Evolution and Big Bang Theory Are Right · · Score: 1

    Sure, but having God's representative on Earth make the claim is meant to carry a little more weight than the concensus view of a bunch of Cardinals and Bishops, isn't it? Something about the Pope's word supposedly being infallible to Catholics, or some such? Between this, acknowledging the child abuse issue, and the more accepting view of non-heterosexuals he expressed a few days back we've possibly got one of the most progressive Christian leaders of all time leading the largest denomination of the same. Best of all, I don't think he's done yet, and even as an atheist I think that's a great thing. The more conservative members of the conclave are probably wondering if they might have made a huge mistake about now, and it does make a hugely refershing change to see that religion can be progressive after all the fundamentalist crap being used as a cloak for all sorts of personal agendas (because it sure isn't religion) that is nearly all we've been hearing about on that front for the last decade-and-change.

  5. Not in the slightest bit surprised on 3D-Printed Gun Earns Man Two Years In Japanese Prison · · Score: 4, Insightful

    Seriously, what did he expect? I'm sure there will be some debate from those who live in place where guns are legal and public gun ownership is common place, but in the jurisdiction in question (Japan) they are not. If he'd manufactured some other proscribed substance/object - hard drugs, say - he'd would likely expect to be punished if caught, so I can't imagine why his expectations here would be any different. Is there a statement somewhere justifying why he thought this would be acceptable, because I'm somewhat curious as to how anyone could rationalise this out in this manner other than the claimed "I didn't know"? (Which in any event seems like a very weak legal argument, given the nature of the anti-gun sentiment and any form of an "ignorance of the law is no defence" statute that Japan might have on the books).

  6. Re:Yeah So? on At CIA Starbucks, Even the Baristas Are Covert · · Score: 1

    Given that they apparently couldn't figure out how to work around the issue for themselves we might not be talking about the most imaginative bunch of case officers here. I can picture it now; they got a whole queue of people called "Bond, James Bond", "Jason Bourne" and "Jack Ryan". Hilarity ensues...

  7. Re:No Need on Is It Time To Split Linux Distros In Two? · · Score: 2

    I would say the same thing. The user can currently either choose a different "sub-distro" based on their primary flavour of choice, opt for a desktop/server specific spin, or just accept the current one distro to rule them all but just install the necessary packages for what they want approach. There really shouldn't be any need to split a Linux distro (or BSD distro for that matter) in two for this (and why stop there, why not a phone/tablet optimised version, or one for embedded devices...?) - just provide a specific spin for desktop that includes a selection of GUIs and another for servers that includes a broader selection of alternative server daemons and maybe a simple GUI for those that really need it. Apply some task specific optimizations to the default configuration files for bonus points and off we go.

  8. Re:Er? on GSOC Project Works To Emulate Systemd For OpenBSD · · Score: 2

    Where, exactly, do I state that I am putting a GUI on a server? Perhaps you got confused when I mentioned Gnome requiring SystemD as an example of how applications making SystemD a dependency was forcing distros into a Hobson's Choice of either adopting SystemD whether they want to or not, or going through a lot of pain to replace it with an alternative when it breaks major dependencies like Gnome? RHEL, like many distros, includes Gnome - but how many of those distros have adopted SystemD mostly as a result of this, not because it is better or worse than the alternatives?

    Note also that I point out that the dependencies work in *both* directions; as antientropic points out Gnome requiring SystemD is absolutely an issue with the Gnome team and nothing to do with SystemD, but it does have implications in that it helps build a mess of inter-dependencies that is making it increasingly hard to strip systems down to the minimum. RHEL's insistance on NetworkManager by default, with all the baggage that brings, doesn't inspire confidence either, as this is apparently one of the next daemon in SystemD's sights - maybe SystemD can improve it, but I'm not holding my breath.

    Anyway, regardless of that, we've made our choice and moved to BSD; SystemD played a significant part in that, but it definitely wasn't the only factor, as I noted in my OP. ?

  9. Re:Er? on GSOC Project Works To Emulate Systemd For OpenBSD · · Score: 4, Insightful

    I have three main issues with SystemD that might help you understand where some of us are coming from:

    1. It effectively works as a monolithic replacement for several daemons, contra to core UNIX design tenets, and even though some of those sub-daemons can be swapped out with an alternative, often that works by running the second daemon in parallel - you can't actually disable the SystemD equivalent, let alone remove it altogether. This makes troubleshooting much more complicated when something goes wrong, especially if you have booted a system from a recovery disk to troubleshoot after a crash, compromise, or whatever and can no longer directly access several of the key sources of information necessary to do that.

    2. Because of the growing number of packages that depend on SystemD, and vice-versa, it's creating a huge mess of package inter-dependencies that mean that it's getting almost impossible to build a stripped down and hardened server. Ballmer might have been right with his "Cancer" comment, he just wasn't specific enough: Gnome requires SystemD, $distro wants to bundle Gnome, therefore $distro adopts SystemD - and forces the default install of all the other package dependencies that go with it, thereby increasing the attack surface of the system. So much for hardening systems by removing all superflous code, huh?

    3. All that cruft seems to be bogging the system down. We are currently migrating a large number (much larger than planned after initial results) of systems from RHEL to BSD - a decision taken due to general unhappiness with RHEL6, but SystemD pushed us towards BSD rather than another Linux distro - and in some cases are seeing throughput gains of greater than 10% on what should be equivalent Linux and BSD server builds. The re-learning curve wasn't as steep as we expected, general system stability seems to be better too, and BSD's security reputation goes without saying.

    That said assuming that it "just works" a SystemD based desktop with everything from a desktop application down to the kernel talking through the same set of core services does sound like a nice idea. The problem is that most of us are not actually running Linux desktops; we're running servers and would just like the OS to mostly get the hell out of the way so we can get on with running whatever server daemons we are using. If SystemD were better architected - say a core PID1 init replacement, then a bunch of optional packages I don't even need to install if I want to use an alternative or not bother with at all, plus a massive clean up of the dependency hell that it has introduced - then I'd be a lot happier with it, but as it stands I just can't see including it on a hardened Internet facing server as being a remotely sane thing to do.

  10. Re:Not the end... on Invasion of Ukraine Continues As Russia Begins Nuclear Weapons Sabre Rattling · · Score: 1

    Also, since both sides are talking via the UN and elsewhere neither side appears to have breached 6 either.

  11. Re:Sigh... on Invasion of Ukraine Continues As Russia Begins Nuclear Weapons Sabre Rattling · · Score: 4, Interesting

    Well, the like-for-like retaliation from Ukraine won't happen. One of the terms of Ukraine's independance was that they give up the nukes they had left over from the break up of the USSR, but their supposed pay back from that would be protection from NATO if Russia were to invade. Now that a full scale invasion of Eastern Ukraine is clearly underway that comment was almost certainly aimed at NATO in an attempt to give them pause while the Russians consolidate their position and get dug-in.

    At this point in time, with almost no response by NATO/the West other than some obviously ineffectual sanctions, my money is on Russia successfully annexing enough of Eastern Ukraine and the Crimea (albeit as an "independant" state with its capital in Donetsk or Sevastopol) that it can resupply the Crimea via land from mainland Russia.

  12. Re:Too late, we already bailed. on You Got Your Windows In My Linux · · Score: 4, Interesting

    Likewise. In the process of migrating a considerable proportion of a large RHEL estate over to BSD here. A general lack of satisfaction with RHEL6 started our look at alternatives - including other Linux distros - but SystemD was our deciding factor in the making the slightly more drastic leap from Linux to BSD. Despite the dream of Linux on the Desktop, most of us are actually running Linux on servers with (hopefully) competent personnel, so we don't really need some cuddly desktop OS that needs to pander to the lowest level of luser or the additional cruft and abstraction layers that brings, let alone the mess of package dependencies that seems to be afflicting Linux at present. In some cases we're seeing significant perfomance gains for what, in theory, should be the same basic set of code so for us it's more performance for less cost, and possibly an interesting call with our RHEL rep when the first tranche of RHEL licenses come up a renewal we are not going to need...

    The King is dead, long live the King!

  13. Re:Wait.... what? on Ukraine Asks Zuckerberg to Discipline Kremlin Facebook Bots · · Score: 1

    Hmm, the plot thickens. I suspected it might just be a regional office based in Russia covering a large area of Eastern Europe that happens to include both Russia and The Ukraine that just happens to be located in Russia, which would have been a fairly sensible choice given that it has a both a larger on-line population and better technology infrastructure. That however does not appear to be the case at all. A quick search on Google shows that FB has been looking into opening a Russian office since early 2010, well before the conflict started, but while some of the stories from 2010 talk about it in the past tense, there is speculation in the future tense about it happening from 2012, and a map of FB offices around the world shows nothing in Russia. My guess is when they say "office", they really mean "department" or "desk", and it's actually most likely based either in the EU or the US.

  14. Re:Maybe, but maybe not... on Ukraine Asks Zuckerberg to Discipline Kremlin Facebook Bots · · Score: 4, Interesting

    That would be why I wrote "Ukrainians believe", but given the obvious bias shown by certain elements of the media on both sides of the conflict I don't think it much of a stretch that this could actually be happening. My point though was more about the general problem here in that most tend to be local enough to fall within the territory of the same regional office for a given company, and that office is within a country with a stake in the conflict, let alone one that has a track record for having poor freedom of the press, then accusations like this are probably inevitable. Now that the issue has been highlighted, we can only hope that FB et al think about how they might deal with such potential censorship in the future.

  15. Re:Maybe, but maybe not... on Ukraine Asks Zuckerberg to Discipline Kremlin Facebook Bots · · Score: 5, Interesting
    Reading between the lines of the article I think you probably got the gist of what happens, but missed the crux of the complaint. I get the impression that Ukrainians believe something like this is happening:
    1. 1. Pro-Ukraine poster makes a post.
    2. 2. Pro-Russian bots generate complaints into Facebook's automated systems.
    3. 3. The post gets automatically blocked.
    4. 4. OP appeals to the Ukrainian office to get it re-instated.
    5. 5. OP's appeal is denied because the Ukrainian office is actually in Russia and headed by an alledgedly non-neutral Russian.

    There's definitely a potential problem there, and one that will probably be repeated in similar circumstances in the future. Seems to me that the best thing FB (or anyone else) can do in this situation is to remove oversight for posts made by both sides from regional offices in the area in question and hand them off to more neutral offices, at least for posts concerning the conflict.

  16. Re:Irreversible? on Climate Damage 'Irreversible' According Leaked Climate Report · · Score: 1

    Nope, just pointing out that using an absolute like "irreversible" isn't perhaps the smartest thing for the IPCC to do as it will almost certainly be seized on by the climate change deniers. Doubly so since it's demonstrably not the case except in our ability to use current science to resolve the problem.

    Frankly the only things left in doubt for me about GW is just how much of a contribution mankind has made (it's certainly not zero, but I don't think it's 100% either), and whether the changes we *can* make to reduce the symptoms will have a worthwhile effect. Given enough will we can obviously reduce our GHG emissions significantly, migrate to cleaner fuels and generally move closer to living in balance with nature, but is that enough? The irony is that the more the AGW deniers are wrong about the level of our involvement, the greater the difference that we can make by changing our ways, but if they are right then we are all doomed to ride this out, wherever nature is taking us.

  17. Re:Irreversible? on Climate Damage 'Irreversible' According Leaked Climate Report · · Score: 1

    "Irreversible" is a very strong word, and clearly incorrect. We're not so much talking about unscrambling eggs here as something than *can* be corrected, and in all likelihood *will* be corrected, just by leaving it alone and waiting long enough. The problem for us humans here today, of course, is that we won't we around that long and in all probability neither will many generations of our decendants. I fully expect the naysayers to latch on to this in combination with the historical record showing that the earth has been warmer than this in the past as further "evidence" that the IPCC has no clue in their rebuttals over the next few days.

  18. Re:Choosing Sides on Choose Your Side On the Linux Divide · · Score: 5, Interesting

    Not just the Registry, but it's also rapidly becoming the equivalent of "svchost.exe". I probably wouldn't have a problem with SystemD if it were designed to be *much* more modular, but the design goals for the package seem to be to embrace, extend and extinguish a significant number of other processes essential to the Linux boot process and to bring most of it straight into PID1. That's just asking for major problems if/when anything goes wrong, and makes troubleshooting a nightmare because you have one huge black box instead of a bunch of daemons. If the SystemD team want to manage network startup, system logging, firewalls and whatever else takes their fancy, then fine, go right ahead; just do it in a way that makes it easier for system admins to disable it and plug in a more fully featured and/or stable alternative, and do it as a child of PID1 so if/when it does crash it doesn't bring the whole system down with it.

    If you want an eye opener take a look at the dependency list for SystemD and those packages that depend on SystemD some time, note how entries appear in both lists, then consider the following questions: Bearing in mind that SystemD is the first thing that is loaded after the Kernel; does that look like a good design to you? Does it explain why so many distros have adopted it, given that many of those dependencies either won't work without SystemD underneath or require a considerable amount of customisation to use any alternative?

    Still, there's always BSD.

  19. You missed my point, I think, I wasn't saying there was any connection with Eyjafjallajökull other than it might have prompted a slightly over cautious reaction in closing airspace before any actual airbourne dust became apparent. Sub-glacial volcanoes don't tend to throw huge volumes of ash into the atmosphere, so the main danger in the event of an eruption is far more likely to be flash floods than airbourne ash, although predicting the nature of a volcanic eruption is hardly an exact science so only time will tell. Of course, if Bardarbunga does manage to erupt with enough power to throw a sufficient volume of ash high enough into the atmosphere to cause chaos on a par with 2010 then an awful lot of ice is going to have to have been melted in the process, so there could still be a combination of physical damage from the hlaup and economic damage from disruption to air travel.

  20. Re:OMG on Iceland Stands Down On Travel Alert: From Orange To Red and Back Again · · Score: 4, Interesting

    Probably just erring on the side of caution after Eyjafjallajökull in 2010. There are a whole number of ways the potential eruption, if it happens all, could go but most of them are probably not going to result in massive volumes of ash being pumped into the atmosphere; the most likely outcome being that the melting ice will cool the magma and prevent anything hazardous reaching the atmosphere. The main danger from Iceland's sub-glacial eruptions is actually the hlaup, or outflow of water from beneath the glacier in the form of a potentially devastating flash flood, which is why people have already been evacuated from the highlands. If there is an eruption, I suspect the priority with be evacuating whichever sections of the coastal lowlands are going to be in the path of any outflow (somewhere along the South coast, I suspect), rather than rerouting aircraft in the area.

  21. Re:Anyone know what, exactly, was the issue? on BBC and FACT Shut Down Doctor Who Fansite · · Score: 2

    Thanks for the clarification, I was leaning towards that being that case, but as others have noted that *really* need to be in the summary as it sets the tone of the entire story from "fan site shut down" to the far more accurate and far less newsworthy "site hosting lots of copyright infringing content shutdown". There's a big difference between the BBC exercising its rights to shutter outright copyright infringement and the BBC strong-arming a legit fan site for using too much content, and it's not that the latter gets DICE more page views and ad impressions.

  22. Anyone know what, exactly, was the issue? on BBC and FACT Shut Down Doctor Who Fansite · · Score: 5, Insightful

    FACT was involved, so my first guess was that they were hosting full episodes, or perhaps links to torrents, but according to TFA DWM had refused to carry any of the leaked episodes from the new series which seems unlikely for a site turning a blind eye to copyright, yet further up is the following quote: "Often times, having watched stuff there led to me purchasing the exact same content on iTunes as well as all the various other content available for Doctor Who", which implies they were hosting episodes, or at least extensive clips.

    So, is this a case of major fansite being shutdown for using a more copyrighted material than the BBC was prepared to stomach (in which case where was the friendly letter asking them to "tone it down a bit, please"), a copyright infringement portal being shuttered for hosting/linking to aired episodes and other content, some kind of trademark issue, or just a domain grab by the BBC ("doctorwhomedia.co.uk" is a fairly nice domain name, afterall)?

  23. Re:missing the point on Study: Ad-Free Internet Would Cost Everyone $230-a-Year · · Score: 1

    I was thinking more of the sites that shutdown due to lack of funds, but yes, they could burn it all down when they shutter the site if they really wanted to be dicks about it. If they go to a subscription only model, then the content is still available, even if you have to pay the sub - it's just a personal call whether you think their version of the content is worth paying for of one of the free alternative sites meets your needs.

  24. Re:missing the point on Study: Ad-Free Internet Would Cost Everyone $230-a-Year · · Score: 4, Insightful

    Quite. Also, even when a site is using ads there are usually alternatives that provide similar content for free. If we were able to wave a wand and magically remove all advertising companies from the Internet (or better still, existance in general), I suspect most ad-funded sites would try and transition to Tip Jars or subscriptions, the browsing public would re-distribute to different sites, and a number of sites would ultimately fold, including most of the ad-laden SEO landing pages. No actual content of value would be lost (although some might only continue to exist in the Wayback Machine) and life would go on, only without the ads and malware attack vectors that piggyback on it.

    Where do I sign up?

  25. Re:That's it? on Study: Ad-Free Internet Would Cost Everyone $230-a-Year · · Score: 5, Interesting

    Adblock and no script do more to keep viruses out of your stuff than antivirus.

    That's actually a very good point. I haven't had a single alert from the AV component of my security suite (software on PC, host and hardware firewalls, etc.) for longer than I can remember, and that was a false positive from an installer. Then again, I whitelist cookies, JavaScript, Flash, etc., block all ads, treat all links/files I get sent with a healthy degree of skepticism, and don't tend to visit sites usually regarded as "suspect" (compromised is another matter, of course), so even the likes of SpyBot S&D and CCleaner seldom flag anything. Given how ineffectual AV is against the latest 0-day vulnerabilites and drive-bys, I'm giving serious thought to just switching off the real-time scanner and running a manual scan every week or so for peace of mind.