Slashdot Mirror


User: AnotherBlackHat

AnotherBlackHat's activity in the archive.

Stories
0
Comments
1,115
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 1,115

  1. Re:With extreme prejudice? on IBM Puts Pressure On SCO · · Score: 3, Funny

    When a case is dismissed "with prejudice," it means the matter is considered decided, and the suit can't be filed again (although an appeal to a higher court might be possible).

    Dismissal "without prejudice" means that the matter is not decided, but some un-met condition (procedural or otherwise) prevents the suit from going forward. A suit dismissed without prejudice may be re-filed at a later date when conditions allow.

    IAAL, but I've never heard the term "extreme prejudice" outside of jokes and movies about assassination.


    So clearly, dismissing with "extreme prejudice" means they can't bring suit again,
    and judge orders the bailiff to shoot them.

  2. Re:How to generate a good 8 byte PSK on New Wireless Security Standard Has Old Problem? · · Score: 1

    hexdump -e "\"%04x%04x\n\"" -n 8 /dev/random

    I prefer;
    head /dev/urandom | md5sum

  3. Re:Good news! on Swedish ISP Blocks Computers That Send Spam · · Score: 1

    I'm willing to bet against that figure you 'pulled out of thin air'.


    That 85% comes from an analysis of the addresses that hit my 400 spamtraps over the course of three months.

    85% were from IPs I'd never seen before and that don't listen on port 25. It's entirely possible that they aren't DHCP clients, but they aren't open relays, or known main sleeze, and there's not a lot of other possibilities left. But there are other possibilities, hence my "less than 85%"
    comment.

    If you count viruses as spam, then it's a lot higher this month.

    Now 400 addresses is still a small amount when measured against the total volume of spam,
    and it could easily be off, but I be happy to take your bet.

    -- this is not a .sig
  4. Re:Good news! on Swedish ISP Blocks Computers That Send Spam · · Score: 2, Insightful

    Of course, this would have been easier if they just blocked egress port 25 traffic (which would not include their own SMTP server, of course!). Imagine all ISPs blocking egress port 25 traffic for their DHCP clients (e.g. most cable modem, dial-up, and DSL), and shutting off their corporate clients who spew spam! That would effectively eliminate spam, since IP addresses left still sending spam (directly or due to a trojan/virus) would quickly end up on DNSBLs.


    Eliminate spam? Spare me.
    Currently, less than 85% of spam comes from trojaned DHCP clients.

    I'm glad that Telia opted for a more targeted approach rather than a blanket "guilty until proven innocent".

    -- this is not a .sig
  5. Re:Botanical vs. Legal on Simpsons Fan Creates Real Tomacco Plant · · Score: 1

    Hmm... I guess the Supreme Court has the power to overrule the laws of nature.


    No, but the Supreme Court does have power over dictionaries.

    `The question is,' said Humpty Dumpty, `which is to be master-- that's all.'
  6. Re:Factoring in the effects of computational advan on Quantum Computing Breakthrough in Japan · · Score: 1

    From the article,

    That means calculations, such as working out the factors of prime numbers, which present problems for even the fastest supercomputers could be trivialized by a quantum computer.

    Once they get prime numbers licked, they'll move on to the composite ones. To live in such heady times!


    Gah - another reporter gets it wrong.
    Is it really so tough to say "RSA number" instead of "prime number"?

    -- this is not a .sig
  7. Re:Why whitelists won't work. on AT&T Moves Toward Mail-Server Whitelist · · Score: 1

    There are an estimated 10 million mail servers in operation right now.

    The average life time of an IP for a server is approximately 1 year.


    Please provide a source for your numbers.I find the above to be rather questionable.



    The 10,000,000 servers estimate was made by attempting to connect to 10,000,000 random non-bogon IPs on port 25.
    Approximately 50,000 responses were received.
    Ignoring bogons, there are approximately 2 billion IPs, for an estimated 10,000,000 servers.

    While not perfect, (a sending mail server doesn't necessarily listen and vica versa) It's a reasonable assumption that IPs listening == mail servers.

    Repeating the poll after one month later with the same set of IPs resulted in approximately 50,000 responses, but approximately 4,000 IPs that had previously responded didn't, and 4,000 new servers that did.

    Hence, I conclude that the average life of a server is 1 year.
    Obviously many servers will change more often, and many change less often.

    If you'd like to repeat the experiment, I recommend you set syn retries to 1
    (echo 1 > /proc/sys/net/ipv4/tcp_syn_retries on a linux system)
    since the vast majority of IPs (even discounting bogons) do not respond in any way.

    -- this is not a .sig
  8. Why whitelists won't work. on AT&T Moves Toward Mail-Server Whitelist · · Score: 1

    There are an estimated 10 million mail servers in operation right now.

    The average life time of an IP for a server is approximately 1 year.

    If the whitelist was comprehensive, it would require around 25,000 updates per day.

    If updates are automated, then spammers can add themselves.
    If updates are checked by a human, then you'd need a staff of about 100 people working full time doing nothing but verifying the IPs.

    In the AT&T case, they might limit the list to 10,000 servers or so.
    That's still a couple dozen updates per day, which means at least a part time employee who does nothing but update their white list.

    Either employee's will start using their personal email addresses for work related email,
    or AT&T will give up on this PHB idea.

    -- this is not a .sig

  9. Re:Insanity! on France: No Google Text Ads For Trademarked Words · · Score: 1

    What do you mean by that?


    He probably means that if you counted everyone who wasn't employed as being unemployed,
    then all "unemployment" figures would be double digits - I'd guess in excess of 50%.

    The current definition of "unemployed" uses three categories. There's the "employed" the "unemployed" and "the rest".
    This wouldn't be so bad if, when they listed unemployment figures, they also listed "employment" figures, but they don't.

    Who counts in "the rest" has undergone several "refinements" with each administration.

    The definition of "unemployed" is politics at it's finest.

    -- this is not a .sig
  10. Overkill on Baffling the Spam Bots · · Score: 1

    Greylisting is based on the idea of sending a temporary failure code the first time you get email from a stranger (someone with a from and IP you haven't seen before.)

    It catches about 85% of spam.

    In other words, just requiring the spammers to have a mailer that can retry is more than most of them can manage.

    I've been running a challenge response system for a while now, and the challenge is nothing more than "please reply to this message".
    A machine could answer it without difficulty, yet the only spammers to get through are the 419 spammers.
    (I'm convinced that many of the 419 spammers actually have humans read the responses they get, so they would have no trouble dealing with CAPTCHA either)

    And if you're going to filter, why limit yourself to questions that a random human can answer?
    Why not a challenge like "Name two things I'm interested in."

    -- this is not a .sig

  11. Re:Just goes to show.. on 7th World Solar Challenge Underway · · Score: 1

    Well, for one, the cost per kilowatt-hour of electricity generated from traditional photovoltaic cells is still nowhere near competitive with standard line power generated mostly by coal, with some oil, nuclear and hydro here in the ole' USA. PV technology seems to improve here and there, and there are always some companies investing in it, but we just haven't seen anything (yet) at the production stage that is cost competitive when you amortize the costs of the cells over their expected lifespan.


    Solar cells can currently be purchased for about $3.00 per watt in quantity.
    Assuming an average life of 20 years, and 6 watt hours per day,
    they produce electricity for about 6-7 cents a kilowatt hour.

    Electricity from coal costs about half that, at 3-4 cents per kilowatt hour.

    Ok, 6 cents is more than 3 cents, but I think it's overstating things to say solar cells aren't near competitive pricing.
    If the Graetzel cell research pans out, we'll all be doing solar.

    -- this is not a .sig
  12. How about "none of the above?" on What Is The Most Popular OS in the World? · · Score: 1

    By far the most popular OS choice is "none", beating out all other OS choices more than 10 to 1.

    Sure there are a lot of phones, but there are a lot more VCRs, microwave ovens, toasters, printers, fax machines, street lights...
    The majority of the worlds electronic equipment runs on an embedded PC and has custom designed software written in the worlds most popular computer language - assembly.

    -- this is not a .sig

  13. That's nice, but I want the other side on Windows Drivers Under Linux? · · Score: 1

    How about making a windows wrapper for a linux driver?

    As a driver developer, I'd much rather write the driver once,
    then use wrappers for the windows95, windows98, windows2000, windowsME, and windowsXP versions.
    Oh and wrappers for the dozen Mac OS versions too.

    -- this is not a .sig

  14. Re:NO!!!! on VeriSign CEO on Commercializing the Internet · · Score: 1


    Check out who controls ICANN it started by the US government. It's the closest thing to an owner the internet as a whole has.


    Despite many claims to the contrary, they don't really have any power over the DNS system either.
    Ultimately, everything about the internet is decided by the people who use it.
    If we all said, "fuck ICANN", let's give control of the root to Linus Torvald", then that would be that.

    I'll grant you that today, we give control to ICANN.
    And they're likely to keep control, based on the "better the devil you know" principle.
    But if they do a bad enough job, we'll route around them like any other piece of damage.

    -- this is not a .sig

  15. Re:NO!!!! on VeriSign CEO on Commercializing the Internet · · Score: 1

    The US government technicaly owns the internet they paid for the research and the network


    They do not own it, technically or otherwise, and they sure as hell didn't pay for most of it.

    They not only didn't pay for most of it, they also didn't pay for most of the research that makes it work, they don't pay for it's ongoing operation and despite many claims to the contrary, they don't really have any power over the DNS system either.
    Ultimately, everything about the internet is decided by the people who use it.
    If we all said, "fuck Versign, let's give control of the root to Linus Torvald", then that would be that.

    -- this is not a .sig
  16. Re:No suprise on E-voting Patches Skew Election? · · Score: 1

    The standard response is that this would let people unfairly influence the voters.
    "If Guido and Nunzio tells ya to vote Black, then youse best be votin' black!"
    (Personally, I like the idea of being able to sell my vote,
    why should politicians be the only ones to profit from an election? but I digress...)

    I think before we can jump straight to accountable voting (as opposed to secret voting),
    when need a middle ground.

    How about everyone votes twice?
    Once in secret, and once with a printed reciept.
    (The two votes need not be the same of course)

    Then we can compare the two results and see if anything peculiar is going on.
    I'd bet that the two totals would match almost 100% in the vast majority of elections.
    Certainly if they did match, no one would cry foul.

    If they don't match, then we should be investigating something, though maybe it's not the machines at fault.

    -- this is not a .sig

  17. Obligitory Gattaca quote on US Senate Backs Genetic Privacy · · Score: 1

    Of course, it's illegal to discriminate. 'Genoism' it's called. But no one takes the law seriously.

    If you refused to discolse, they can always take a sample from a door handle, or a handshake, even the saliva on your application form. If in doubt, a legal drug test can just as easily become an illegal peek at your future in the company.

  18. Re:This is beyond ridiculous on Parents Sue School Over Use of Wi-Fi Network · · Score: 1

    Let's stick with, only in "this country" do handguns kill 11,000+ people per year. Now we're on to something.

    Only in this country are the odds of not being killed by a gun %99.994

    Compare that with Brazil, where your chances of avoiding gun violence is only %99.975,
    or Italy, where it's %99.999.

    Yep, neither of those is %99.994. Truly this is a unique country.

    -- this is not a .sig
  19. Contact the owners? on Spammers Using Hacked Machines as Decoys · · Score: 1

    Seems to me that one of the biggest problems is that there's no way to contact the end user of an IP.
    (there's a secondary problem - who should be allowed to contact them)

    Most of these trojaned machines wouldn't be if the owner of the machine was aware that they were trojaned.

    Perhaps the standard response to an abuse complaint should be;
    redirect all outbound connection attempts to an explanation of the complaint,
    and an explanation of how to fix a trojaned machine.

    -- this is not a .sig

  20. Re:Firewall on Spammers Using Hacked Machines as Decoys · · Score: 1

    Of course if broadband ISPs were to implementing a simple inbound firewall
    for every user then they'd eliminate most of these problems overnight:
    trojaned machines would be unreachable, worms like CodeRed that scan for
    vulnerabilities would be halted.


    It's already pretty common -
    My DSL provider requires everyone to use a router/firewall/dsl-modem.
    (It's part of the installation package)

    Suppose you get 99% of the users behind a firewall.
    That still leaves over a million computers vulnerable.

    How did you plan on bringing that last 1% into compliance?

    -- this is not a .sig
  21. Bah! on Spoofed From: Prevention · · Score: 1

    Bah!

    Bah! I say.

    This is a piss poor substitute for digitally signing your email,
    with the added disadvantage that there isn't even a finished draft of a spec.
    Maybe it will be the cat's meow, but right now it's just so much hype.
    At least DMP has a draft (four drafts actually).

    I fully expect PGP signed emails to catch on before this does.

    -- this is not a .sig

  22. Re:VoIP doesn't manage physical wires on California PUC Calls For A Public Hearing On VoIP · · Score: 1

    But allowing Vonage to poach the the phone customers in the bandwidth-fortunate territories will be the death of the USF...


    And this is bad because?

    Maybe the idea that one price fits all should be discarded in favor of something that more closely fits reality.

    Or maybe not.

    I haven't seen much arguement/evidence either way.

    -- this is not a .sig
  23. Re:Why this is important.. on New Solar Cells 20 Times Cheaper · · Score: 1

    Throwing out a couple more numbers;

    Sunlight is about 1 Kilowatt per square meter.
    They're hoping for 10% efficiency, so a 100 watt panel would be 1 meter square.

    You could power your house, but that requires a DC/AC 60 cycle converter, some way to store energy at night, or a line power/solar power hybrid switching system.

    I think a solar powered air conditioner is a lot more practical.

    -- this is not a .sig

  24. Re:At that price... $4/watt?? WTF on New Solar Cells 20 Times Cheaper · · Score: 4, Informative

    Where did the $4 / watt come from? I can currently buy a 75 watt solar panel for my RV, with all the hardware (mounting, converter, charging, etc) for about $1000 (CDN) with a 20 warranty on the panel: 1000 / 75 / 20 = 0.6667 dollars per watt.


    I made the same mistake at first,
    but if you read the article carefully,
    you'll see they aren't amortizing the price.

    If STMicroelectronics can reach their target,
    that 75 watt panel would cost fifteen bucks.
    (But probably $115 with the mounting hardware.)

    When you amortize the cost,
    they're hoping to produce electricy for 1/4 cent per kilowatt hour.
    Even at five times the price it's cost competitive with fossile fuel generation (unlike current solar panels.)

    -- this is not a .sig
  25. Re:Constitution on States Push for Net Sales Taxes · · Score: 2, Informative

    And don't forget Article I, Section 10.2

    "No State shall, without the Consent of the Congress, lay any Imposts or Duties on Imports or Exports, except what may be absolutely necessary for executing it's inspection Laws: and the net Produce of all Duties and Imposts, laid by any State on Imports or Exports, shall be for the Use of the Treasury of the United States; and all such Laws shall be subject to the Revision and Controul of the Congress."

    On second though, go ahead and forget it - the people arguing in favor of interstate sales taxes clearly have.

    -- this is not a .sig