Slashdot Mirror


User: pla

pla's activity in the archive.

Stories
0
Comments
6,765
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 6,765

  1. Re:Not useful on Time Dilation Drug Could Let Heinous Criminals Serve 1,000 Year Sentences · · Score: 3, Interesting

    Bottom line: drugs like this have no place in or penal system, regardless of the ethical ramifications of using them on prisoners.

    Our current penal system has no place in our penal system.

    What we have now amounts to a mockery of justice-as-rehabilitation, where we give otherwise-good people multi-year "we need to do something" sentences for obvious accidents (involuntary manslaughter, for example, or virtually all victimless "crimes"). They then come out as actual hardened criminals, far more likely to go on to commit real crimes (one well-studied population, nonviolent drug offenders, come out four times more likely to go on to commit a violent crime than the general population).

    That said, I have to admit that this woman strikes me as likely a dangerous psychopath herself. Sentencing someone to a thousand years of boredom? "A lot of people seem to get out of that punishment by dying"??? Holy shit, woman, what kind of sick fuck would come up with something like that??? And I say that as someone who supports the death penalty, and personally would rather we use straightforward and effective punishments like caning over merely wasting a decade of someone's life on the taxpayer dime.

    But hey, at least you would effectively reduce the cost of prison, since virtually everyone would resort to suicide after their first few "sessions".

  2. Re:Fuck that guy. on Jesse Jackson To Take On Silicon Valley's Lack of Diversity · · Score: 1

    racist, narcissistic, caste-based hiring practices to gain jobs they're in no way qualified for in a country thousands of miles from home

    Hmm... Iranian? Chinese? Slavic? Israeli? Strange, none of them seem to quite meet your description.


    Sounds like you are referring to people of one particular country.

    Hmm, yes. Yes, it does sound like you have one particular country in mind. Clearly, one of you has a race card in play, but you might want to check the instant replay before you stick your neck out too far on this one...

  3. Re:I have admin'ed such a server... on Malware Attack Infected 25,000 Linux/UNIX Servers · · Score: 1

    You should set it up so their only ingress is through a reverse ssh tunnel outward. Preferably secured with a key you send to them so their reused passwords aren't the only thing keeping people out. You should also restrict it by IP range to whatever machine they're coming from.

    I like to think I would do better today than I did back then - My primary role involves coding, not network hardening. I just tend to get ownership of Linux boxes because, surprisingly, not many folks in the business world (even in IT) know it all that well.

    That said, you have to understand the pure obstinacy of some of these vendors - As in, still using Telnet and actively refuse to use SSH (because they had a harder time pre-breaking it, and protested that most of their customers couldn't handle the idea of using preshared keys to authenticate). As in, threw a fit that required me to defend just blocking them at the firewall to not just my boss, but the owner of the company, and painted me as completely paranoid (at least that stopped and I got to gloat for a few days when we finally got hacked - Though I got to spend the 70-hour weekend rebuilding the machine so the company could function come Monday morning... yay).

  4. Re:Name and shame on Malware Attack Infected 25,000 Linux/UNIX Servers · · Score: 1

    Partially, no need - You can literally Google "linux $program root password" and get all the names you want.

    But more, because I sadly no longer consider this behavior unusual (it floored me the first time I saw it, as I said - I consider it almost standard procedure, now). Vendors look at Linux as an exploitable free resource, a base platform they don't need to license, complete with an impressive collection of development tools. Except Linux has all these pesky permissions, heck, it doesn't even like letting you in without a password, so the first "project" these jokers embark upon consists of gutting the security from Linux.

    So not much point in shaming individual companies, for a problem endemic to an entire industry.

  5. I have admin'ed such a server... on Malware Attack Infected 25,000 Linux/UNIX Servers · · Score: 4, Insightful

    I have (grudgingly) admin'ed such a server, and will readily admit it as a form of public shaming (though not of myself, as you'll soon learn).

    As TFS points out, the attackers didn't use a zero-day exploit. They didn't use an unpatched old exploit. They didn't even use the fact that huge "trusted" swaths of the filesystem, including standard executable paths (such as /usr/local/bin) had both the directory and everything contained within world-writable (no, I didn't have the option of fixing that - it would have broken "features" of the reason this box existed, as I'll soon explain).

    This system ran a fairly popular POS software suite, and absolutely depended on all its serious security flaws. The vendor had even installed what amount to pre-compromised binaries for "convenience" in diagnosing end-user problems (connect to the right port, bam, you can monitor any user's session). But even that egregious level of incompetence didn't cause the breach.

    No, the breach came from the fact that the vendor had their own company name as the root password (and had it hard-coded in literally dozens of (world-readable) scripts, so I couldn't just change it). And did I mention, the vendor required this box have a publicly facing IP or they'd refuse to honor their SLA?

    Needless to say, my first action on learning all this, I blocked it at the firewall and told the vendor that we'd let them in when, and only when, we needed assistance. That, amazingly, enough kept the box safe for about a year (and floored me that we hadn't gone down long before I got stuck with that albatross)...

    Until an upgrade. Took a total of half an hour. Didn't matter, because we had someone in as root in a tenth that time.


    But, distant past. Couldn't happen again, and no other vendor would ever have such an extreme level of cluelessness, right?

    So, currently, I work with (but thank Zeus, don't have to administer) a CRM system by an entirely different vendor, running on an outdated Linux distro. Pretty much everything I just said applies to this box. But hey the firewall keeps it safe, except the once-a-year the vendor demands access to audit our license compliance...


    So yeah, Linux systems get hacked - For reasons that wouldn't protect the otherwise-most-secure system on the planet. You want to make it stop? Tell your vendors to go fuck themselves when they rationalize having a weak root password, and piss-poor system-wide security, and ban patching known vulnerabilities because it "might" break something the vendor used. Really that simple.

  6. Re:How is this about technology Slashdot???? on Russian Army Spetsnaz Units Arrested Operating In Ukraine · · Score: 1

    How is this about technology Slashdot

    Because nuclear explosions at altitude tend to cause computer-destroying EMPs.

    That do it for ya?

  7. Re:I informed you thusly. I so informed you thusly on Russian Army Spetsnaz Units Arrested Operating In Ukraine · · Score: 1

    If you think Putin is stopping at Crimea, you're a fucking moron.

    This ain't the Sudetenland. Move along.

  8. Re:We need a US base in the Ukraine on Russian Army Spetsnaz Units Arrested Operating In Ukraine · · Score: 0, Troll

    Are you comparing defending of a sovereign state

    Sorry, come again? I would point out that not a whole month ago, a group of armed insurgents committed a coup against the legitimate, democratically-elected Ukrainian government. So exactly what "sovereign state" do you refer to here? A group of terrorists acting contrary to the legitimate Ukrainian constitution and the will of its people???

    And to add insult to injury, our own treasonous congress has approved an aid package for the insurgents, directly contravening US law that specifically bans such aid.

    And we think we have any moral right to complain about a landslide popular election by Crimea to secede from Ukraine and join the Russian Federation? Wow. We should have elected Kerry, that bastard's got balls of solid Neutronium!

  9. Re:Going bust not unique to drop-outs on Eric Schmidt On Why College Is Still Worth It · · Score: 1

    Neither does what you posted with your crack about "the financial luxury to spend years not toiling in the fields"

    "Crack"? Do you have any idea of timescale involved in your original assertion? The oldest still-existant universities predate the Middle Ages. Oxford, Cambridge, Sorbonne, Bologna, all founded by the early 13th century. Al-Karaouine, Al-Azhar University, and Nizamiyya predate the frickin' Battle of Hastings. So no, I didn't include the idea of not spending one's life working the soil as either a joke or rhetorical, I meant it quite literally.


    Practical education was scant because the things you scoff at as "arts" were meant to be practical education (I.E. training the mind to think and analyze). It wasn't really practical* by modern standards, but as with so much else, they weren't modern people and had different theories and standards.

    Well now, I don't quite know how to respond to that... You should go back and re-read what I said, because you just defended it as thoroughly as I would have. So um... Thanks, I guess?


    tldr: "the "college is for broadening the mind" meme is a fairly recent one" vs "the things you scoff at as "arts" were meant to be practical education (I.E. training the mind to think and analyze)". Pick one.

  10. Re:So they want a large scale UPS? on EU Project Aims To Switch Data Centers To Second Hand Car Batteries · · Score: 1

    So, because batteries are DC devices, you need to use them where you can use DC to avoid the conversion loss. Data Centers can utilize DC directly, which means that you would want to locate them at the data center.

    You realize, of course, that solar panels produce DC?

    You make a valid point that, as far as treating these as point-of-use devices, datacenters make a lot more sense than a typical pure-AC home installation. But you can't use that argument against buffering a variable DC supply, which works just as well (if not better, since our existing obsolete-and-decaying grid deals a lot better with variable large consumers than variable large producers).

  11. Re:Going bust not unique to drop-outs on Eric Schmidt On Why College Is Still Worth It · · Score: 1

    Why not? That's exactly what was for centuries, and it worked well enough. Folks don't seem to realize this, or that the "college is for broadening the mind" meme is a fairly recent one.

    First, that doesn't exactly count as historically accurate. Suffice it to say the earliest universities did offer what they would have called "vocational" education (by which they would have meant theology) with a hefty dose of the "arts" (by which they would have meant the seven classics - Grammar, Logic, Rhetoric, Arithmetic, Geometry, Music, and Astronomy) to produce a generally well-rounded individual. What little practical instruction they offered tended to focused on skills useful to those with the financial luxury to spend years not toiling in the fields, such as law and accounting

    That said, I agree with you to the extent that any modern college not forcing students to take a core STEM curriculum have cheated them out of the skills required to produce a well-rounded individual in our world. Sure, you can major in Medieval French Lit, but you'd damned well better know how to apply Newton's laws, how to balance a chemical equation, how to calculate the risk and return on investment of your 401k allocation. But stressing basic STEM skills doesn't mean every uni should turn into a vo-tech school. If you want that, feel free to attend one; given the choice of "be one or compete with one", however, I'll take the latter.

  12. Re:They don't know you. Two resumes, one degree on Eric Schmidt On Why College Is Still Worth It · · Score: 1

    If I saw a resume that was a page it would go right in the trash.

    Welcome to either "what not to do on a resume 101", or "how to spot a professional academic".

    You describe a CV, not a resume - And no, not the same thing.

    A resume should have a statement of intent that basically mirrors the job listing, and should focus on your relevant skills, your relevant education, your relevant certs, your relevant and most recent work experience, and nothing else. If you can't get to the point in one, maybe two pages, I hate to break it to you but HR has no interest in actually reading your mini-essay on all your hobbies and how working as a burger flipper 20 years ago made you a better person and how you found French Lit so wonderful you minored in it.

    Now, for a CV, yes, you can describe everything you ever did. You have extra sections relevant to academics, such as publications. But for a resume, no. Cut it to just the bones.

  13. Re:Going bust not unique to drop-outs on Eric Schmidt On Why College Is Still Worth It · · Score: 4, Insightful

    There are people smarter than myself without degrees. There are morons who have master degrees who I had to let go because they are book smarts but can't do shit in the real world without the deer in the headlights look when independent analysis and goals are needed.

    You can always find people both better and worse than you at everything, both from the pool of "amateurs" and from supposed experts. Just a fact of life.

    I'll take a bold stance and say right up front that you get out of college what you put into it - If you want, you really can get a solid education even from a crap college; and on the flip side of that, you can sleep your way through quite a few majors and still end up with a degree. That said - On average, I would say a college degree proves one, and only one, thing about you - That you had the ability to learn enough, and follow directions enough, to complete the basic requirements of that degree... And that already puts you in the top third of applicants, even if you smoked your way through a humanities major.

    Now, as watered down as that may sound, I don't mean it as quite that weak of a stance - In practice, the real world will never require 90% of what you learned in college, and college didn't teach you 90% of what you need for a real job. College does not, and should not, equal vocational training. It (can) give you the foundation you need to excel, and demonstrates to employers that you at least don't count as a complete waste of flesh. Anything more than that - Pure cake.

  14. Re:Denied Areas on Harsh Wireless Conditions? Send In the Drone Hot Spot · · Score: 1

    The only way this could possibly work is point to point LOS between the nodes.

    A flying WAP 800ft up has line of sight to pretty much anything in the area.

    That said, while TFA doesn't mention it, the intended use of this likely involves a (ground) base station with a satellite uplink established in a clearing, which then uses WDS or similar to provide access to one or more flying relay nodes.

    Interestingly, though, I don't see the advantage of "drone" in this situation. Tethered weather balloons can already do the job admirably, and don't require an active propulsion system (and fuel) to remain aloft. That means you can allocate more of your load to batteries for the router, rather than fuel just to fight gravity.

  15. Re:Being forced to submit... on Religion Is Good For Your Brain · · Score: 1

    Um, no, the Bible itself says that, which most Christians ignore out of convenience. The JW's count as one of the few sects that actually accepts Revelations 7:4 as relevant to their interests.

    It makes no difference to me whether or not you personally chose to ignore 603 of God's 613 commandments; whether or not you choose to play the odds at getting into the Silver City (currently 50,000 to 1 against winning, even if you perfectly follow the rules); whether you even pay attention to the 10 commandments you do claim to accept (cooking on Sunday? Straight to hell with you!). But you can't argue that the defining book of the Christian faith doesn't explicitly say as much.

  16. Ter'rists... or ALIEMS? on Malaysian Flight Disappearance 'Deliberate' · · Score: 3, Funny

    Damnit Scully, we had it this time! We had it, had them, and those bastards took it away from us!

    They landed on any of a hundred small island airstrips with the full knowledge of the Malay government, and by now that alien's body has made it back to the Pentagon and out of our reach.

  17. Re:Being forced to submit... on Religion Is Good For Your Brain · · Score: 1

    So heaven is available to anyone whether or not they follow your God's law?

    No. Even according to their own doctrine, "many are called but few are chosen". Funny, really, how people can find it comforting to believe a book that tells them that, out of the billions of people on the planet, a mere 144k of them get into heaven.

    Then again, plenty of suckers play the lottery, too, so, what do I know?

  18. Re:for comparison on Why San Francisco Is the New Renaissance Florence · · Score: 1

    I live in Portland & often people mistake *problems inherent to any big city* with problems of the specific city, or even neighborhood they visit.

    Oh, no mistake there - I apologize if I suggested that as a problem unique to SF.

    I meant only that SF, despite its reputation, doesn't get a pass on the "cities suck" vibe. It did have a few nice neighborhoods; and I'll even admit I felt relatively safe walking around at night (though I stayed on the "good" side of the hill). But beyond that, it has the qualities all cities necessarily have - Too damned many people, too little public transit, too many beggars, too much traffic, too loud, too bright, too expensive (I've never understood that last one - Supposedly, dense populations reduce the cost of living, so why does everything cost more?).

    But no, nothing against SF itself. Mostly just disappointed it doesn't live up to its reputation.

  19. Re: Humble as always on Why San Francisco Is the New Renaissance Florence · · Score: 2

    WOW, just WOW, I'm sure they believe all this too.

    Having recently experienced SF as an outsider on vacation... Honestly, after a week, I got used to some of its quirks. I could see it as more or less basically habitable as a permanent resident.

    But my impression for the first half of that week? "You fucking savages call this shithole home??? Google couldn't pay me enough to put up with this!"

    In hindsight, yes, Google could pay me enough - But for similar money, they could also pay me enough to take a private jet in every day from further North.

    Jus' sayin'...


    / I did find the guy spraypainted gold amusing, though - Especially when a scab stole his usual spot. Like watching monkeys fling poo at each other.

  20. Re:Reply to Comment - Beta, why no default subject on Mt. Gox Knew It Was Selling Phantom Bitcoin 2 Weeks Before Collapse · · Score: 1

    They can proclaim whatever the hell they want to; they themselves state, on their website in multiple places, that bitcoin transactions are routed through coinbase or similar.

    I know, right? Such frauds... Kinda like how Mom n' Popco claim to take Visa, but in reality the transactions are routed through Network Merchants or Fiscorp or authorize.net. A bunch of lying liars! What does it matter that I can give them a credit card and they send me product, if they didn't personally wave the magic wand of money creation to turn that into USD?

    Seriously, lose the hate-on (sorry, this irrational fear of BTC doesn't quite rank all the way up to the level of monkeys flinging poo... more like sheep running away from the rising sun every morning) for Bitcoin. Step back and think about what you believe about Bitcoin, and before posting more garbage, ask yourself: Could you say the same thing about the US financial system?

    Ponzi schemes... Like Madoff? More SEC oversight... Like Enron? Useful for money laundering... Like a briefcase of USD$100s? Early adopters have an edge... Like the Rockefellers or Carnegies or Vanderbilts?

    I know, you don't really care what I have to say about this, because you lost a few bucks trying to game a sytem you didn't understand, and no one can ever explain that away for you. But really, a great many of us use Bitcoin, for legal purposes, and find it extremely convenient. And like it or not, you can't do a damned thing about that.

  21. Re:Reply to Comment - Beta, why no default subject on Mt. Gox Knew It Was Selling Phantom Bitcoin 2 Weeks Before Collapse · · Score: 1

    Why is this lie perpetually getting repeated? Hell, some moron even modded it up. Overstock (and Tigerdirect, etc) do not accept bitcoins as payment.

    You might want to tell that to Overstock and Tiger Direct, then, who both proudly proclaim that they do accept BTC as payment.

    But no doubt, you know better than they do, so carry on with the Bitcoin hate.

  22. Re: Gambler's Fallacy on Mt. Gox Knew It Was Selling Phantom Bitcoin 2 Weeks Before Collapse · · Score: 1

    I don't think that means what you think it means.

    First problem, the gambler's fallacy refers to a mistaken belief that a random process that has locally shifted away from its mean somehow "owes" the universe a return to its mean. After a long losing streak, the gambler erroneously believes he has a better chance of a win.

    Second, for the gambler's fallacy to apply, you need an independent random process. Specifically, if the randomness in question has a history to it, the gambler's fallacy doesn't apply as a fallacy - The deck of cards with all the non-face cards played out really does "owe" you a 20 or a blackjack (Hmm, do aces count as face cards? Whatever - You get the point).

    In this case, you want something more like confirmation bias or a sunk cost fallacy - Though neither of those quite properly applies to what I described, because I haven't ignored evidence contrary to my opinion (quite the opposite, I've weighed it heavily), and I haven't needed to keep pumping more money into my BTC position to keep it afloat (again, contrary to that, I've steadily syphoned money out and what remains just keeps going up in value).


    It's a zero sum game, their gain will be matched by the losses of ordinary punters like you.

    You have the first clause right, though you use it as though you don't realize that makes it 2.5% per year better than USD, which systematically loses value over time.

    As for the second half of that - If BTC entirely collapsed tomorrow, I've already done better than break even on my original investment. Except, haters like you don't seem to get that my "investment" consists of having fun (and $50 in electricity, but hell, I've paid more for a single concert ticket). I got to play a part in the success of the first viable non-commodity non-government currency. I got to learn OpenCL as a result of tweaking miners to squeeze every possible hash out of my GPU. I got to watch my "just for laughs" investment turn into the price of a new car (if I hadn't slowly spent most of what I had over time) - And no, I don't regret spending it at $4/BTC, at $30/BTC, at $200/BTC, because I got involved for the idea, not because I someday hoped to get rich fleecing morons out of their dollars in exchange for worthless ($0.10 each, when I started) bits in a shared transaction record.

  23. Re:Still worth it on Amazon Hikes Prime Membership Fee · · Score: 1

    This. Over the course of a year, Amazon's free (normal) shipping easily saves me a few hundred bucks. Last year, I bought one especially large item that would have cost that in shipping by itself (and perhaps not entirely coincidentally, Amazon's price beat every local brick-and-mortar for that item by very nearly the cost of shipping). Then for some bulkier items, hey, I'd rather have something like a sofa delivered to my doorstep than try to figure out how to squeeze it into a subcompact car. ;)

    That said, I don't pay for prime, because seriously, people can't wait a whoooole week to get their stuff (anything I need now, I simply buy locally)?

  24. Re: No Symapthy for BETA SUCKING on Mt. Gox Knew It Was Selling Phantom Bitcoin 2 Weeks Before Collapse · · Score: 2

    The only reason people were into this was to either trade in illegal goods and services or be cutting edge with something that only really served to facilitate illegal activity.

    Fuck you very much, sir.

    I, and the vast majority of Bitcoin users, engage in entirely legitimate commerce with BTC as the medium of exchange. Heck, I even declared my BTC gains on my taxes last year, fer chrissakes.

    Now, when I want to score a quarter of weed - You ever actually try to buy anything with BTC, or just mindlessly parroting the FUD about Silk Road? My dealer takes USD only, thanks.

  25. Reply to Comment - Beta, why no default subject li on Mt. Gox Knew It Was Selling Phantom Bitcoin 2 Weeks Before Collapse · · Score: 2

    If you hold your own Bitcoins in a local wallet, then yes, a handful of confirmations adequately proves you really do have those coins.

    As soon as you entrust them to someone else to store in a pooled account, bam, confirmability lost.

    A key philosophy behind the BTC protocol assumes direct person-to-person transactions. If you adhere to that, you don't get screwed by a failed exchange; for that matter, you don't even care about the existence of an exchange... Except insofar as they help define the "worth" of a Bitcoin as a medium of trade. Though, with the likes of Overstock accepting BTC now, the marketplace itself might soon serve that function without needing an external point of reference.