Slashdot Mirror


User: tlhIngan

tlhIngan's activity in the archive.

Stories
0
Comments
10,065
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 10,065

  1. Re:why are we cheering DRM? on Free Software Will Help Detect Faulty and Malicious USB-C Cables · · Score: 4, Informative

    People get tired of USB being affordable and pine for a more Firewire-type system?

    Why are we hoping for authenticated cables?

    It's not really DRM. The "authentication" information is more an informational block - like EDID in monitors, SPD in memory modules and such.

    The reason is it allows for smarter management. A USB-C charger can provide up to 100W of power, but you need some way of telling the device that it's available, and the current methods are generally quite... crappy. But you also don't want to have the charger implement a full USB stack. So you implement this mechanism and it tells you how much power you can draw. And if you use a crappy USB cable that doesn't put in the resistors correctly, you could detect that as well and charge at the agonizingly slow rate, while displaying a dialog to change the cable to a certified one because it's wired incorrectly.

    Basically this whole thing stemmed from that Google guy reviewing all the USB-C cables out there, and finding a huge number of them were pretty awful and resulting in crippled charger performance, if the devices could charge at all.

    It's less about tying products and accessories together and more about being able to tell the user that the $1 USB-C cable they bought is incorrectly manufactured and to expect problems like slow charging or slow data transfers.

  2. There are many ways to make phishing at non Windows users, but then some kind of vulnerability must be used (when opening a document), not a simple stupid trick of sending an executable and people confusing it for other thing. I think the most common one

    Not really. In Linux it's pretty easy to get a random user to run a random script. You just have to tell the user why'd they want to.

    Wasn't there recently a case where a botnet was shut down of Linux users? Sure it was only 2000 machines, but still - 2000 people installed it.

    The real reason is easy - software piracy. it's why Windows is usually attacked first - it has one of the largest proprietary software bases out there, so there are plenty of people looking for cracks, keygens, and downloads that you could apply a simple downloader wrapper to and infect them. It's easy.

    OS X comes next - smaller base, but still, a bunch of people looking to get paid software for free.

    Ditto Android, again, lots of people don't want to pay 99 cents for apps, so they pirate it and get all sorts of data stealing crap installed on their phones. Yes, you can stick with Google Play, but some people will just pirate software.

    Linux is last, because there isn't that much proprietary software for it right now. There's some, but not much. What usually infects them are pirated Wordpress themes since most Linux installations are server based. But if the popularity of SteamOS and such increases to the point where there's a decent selection of games, expect Linux to be a sharply rising target. (At least, if gamers on Linux are like their Windows counterparts where it's mostly pirated and thus a very handy way to infect a computer).

  3. Re:just curious on FBI Offers $25K Reward For Andy Warhol Campbell's Soup Painting Heist (networkworld.com) · · Score: 4, Informative

    where does the FBI think it has 25K to offer up?? I mean yes its a shame, but shouldnt reward money be paid for by the victim, not the taxpayer???

    They had $15k to spend on an iPhone, and that data was of far lower value than this would be. After all, if it's a tip that proves useful, then they'll pay you the $25k. So $25k gets them a guaranteed recovery and/or arrest, versus spending $15k on a dubious recovery.

    One could also argue the $25k to recover the art would be of far more value to society than the $15k they spent on the iPhone.

  4. Re:Another platform ain't the answer on Medium, Twitter Founder on Media: We Put Junk Food In Front Of Them and They Eat It (theguardian.com) · · Score: 1

    If you want good journalism, you'll have to run it as a non-profit. Normal profiteering capitalism rarely has the need to go beyond the lowest hanging fruit. Gossip is a bottomless pot of gold.

    There is nothing inherent in a non-profit that guarantees this. All a non-profit does is that expenses equal revenue at the end of the fiscal year.

    You can run a non-profit news agency just like a for-profit one, and then squirrel away the profits buying stuff. Many big non-profits own real estate and other things in order to spend the millions in money to bring their revenue down.

    Likewise, a nonproft has no way to save money for a rainy day - as revenues must match expenses, that means if something happens that requires more money than they normally have, then they need to go out and fundraise.

    Maybe you meant charity? A charity is a completely different entity from a non-profit...

  5. Re:Yes, but no. on Amazon Customers Sign Letter To Jeff Bezos To Dump Donald Trump (thestreet.com) · · Score: 1

    I'm firmly in the "I wouldn't vote for Trump as dogcatcher" camp, but why should Amazon take sides by denying the Donald a place to sell trinkets? Unless Amazon also stops selling all political junk. Just because he offends me to no end doesn't give me license to rid the world of Trump merchandise. Is political correctness invading the marketplace???

    Well, basically 13,000 customers of Amazon are going to boycott Amazon. That letter was just telling Amazon why.

    In a free-market system, you vote with your dollars. What this group did is just that - they're voting with their dollars that they would not spend anymore money at Amazon until they stop selling Trump's product.

    What Amazon does is up to Jeff Bezos and Amazon management. If they want to lose business from 13,000 customers because they sell more Trump product than 13,000 Amazon customers, that's up to Amazon.

    It's a free world. Boycotts may or may not work - usually the latter. This group simply let Amazon know why they aren't going to shop at Amazon anymore.

    And yes, this is what you do when a company does something you don't like. You don't like Apple's walled garden? You don't buy Apple. You can send a letter to Tim Cook saying why you will never ever buy an Apple product. If Tim Cook and Apple management think your group of geeks will generate more business for Apple by taking down the wall, then Apple will change. If not, then business as usual.

    It's just voting with your dollars.

  6. Re:Magnified stupidity on Internet Mapping Glitch Turned a Random Kansas Farm Into a Digital Hell (fusion.net) · · Score: 4, Insightful

    Even worse, they claim it's only good to the city/county level, in which case why are you returning exact GPS style coordinates?! People assume when you have exact coordinates, they're, well, exact.

    At least report an uncertainty circle in your result at the very minimum. If you're not sure, make it stupidly large, like the country or the earth, or the solar system.

    Though what you should do is simple - just return the zip code. You can convert zip codes to the approximate area quite easily, but they don't result in houses. Or just return it as city and state, since that's the resolution you're dealing with.

    Really, a huge sigfig problem.

  7. Re:and we solved global warming on Tiger Numbers Rise For First Time In a Century (nationalgeographic.com) · · Score: 1

    Fuck1ng cold here in the northeast and snowing out west in the USA

    It's why we call it "climate change" now more than "global warming" because the latter implies that everywhere gets hotter. While that is true, what you don't see is the methods that arise in attempting to bring the heat back down again.

    Hurricanes and tornadoes are easy to see (they're heat engines that get their power from the ocean warmth, that's why they die out over land pretty quickly), enough to drop the local temperature 3-5C (6-9F) of the water.

    The increased heat will also disrupt normal flows of weather causing the jet stream to whip down, causing summer like conditions out west and blizzards out east.

    What is generally true is the weather gets more extreme - hotter summers, colder winters, and seasons that extend way beyond their welcome (hotter summers that go well into fall and perhaps even giving balmy weather through the holidays, colder winters that last way into the beginning of summer) etc.

  8. If you are caught in battle now, be afraid, very afraid.

    Not just in battle, it's just "if you're caught" or "captured".

    Doesn't matter if you're an innocent bystander - if you're at the wrong place at the wrong time, you're fair game.

    It's one reason why ISIS is as violent as they are - they're emboldened by the fact that it's been done, so they need to escalate to beheadings and worse.

  9. Re:I don't want anything on my wrist on Slashdot Asks: It's Been a Year Since Apple Watch Release, What's Your Thought On It? · · Score: 1

    But then you're back to the 'why' question... If I were in a high-pressure job that required rapid response to incoming messages, this might be a useful tool. But for most purposes, most of the time, it's just not that big of a PITA to pull out the cell phone, just like everybody else I see on the bus, subway, etc..

    That's the problem with smartwatches in general.

    They were invented to solve a problem that smartphones had - they were too f'ing HUGE.

    You see, phones used to be smaller, so people put them in their pocket. Then there was this urgency to have bigger and bigger phones where we have 5-6" monsters. Of course, for some people, it makes sense. For a lot of others, it doesn't. (I've seen people with a 6"+ phone that they can barely hold onto with BOTH hands) But those people want a big screen phone, no matter how impractical it is - it won't fit in their pockets, and they can't carry it.

    So they do the next best thing, put it into their purse or other bag. But this negates one of the most useful reasons for having a phone - instant accessibility because now it has to be dug out from wherever it was buried.

    And once buried, people got a ton of FOMO (fear of missing out), so they get annoyed at having to dig through their bag for their phone to see what that text ding was or other thing. Or just by compulsion they need to check it every 5 minutes.

    Hence, the smartwatch - it's not for "rapid response", it's to address the "problem" of FOMO for people who buy phones too large for them practically speaking. Instead of having to dig out their phone to view and possibly answer every text, they can simply use their smartwatch instead

    Yes, there are some legitimate reasons for a large screen - some people use it to watch videos all the time or play games, or some have fat fingers and need a larger keyboard. But those people probably already have a way to keep such a large phone in easy reach.

    The main reason people want large screen phones is just ... status. "Your phone only has 5.5 inches? Mine has 5.6 and is better!" Then they realize they can't handle it and it goes into less accessible places than their "puny" phone they could easily use. But then it's hard to text or call when you have to dig your phone out constantly, so you have the smartwatch.

    No surprise that the proportion of sales of big screen phones is quite large in Asia. (Someone said the iPhone SE sales were "lackluster" despite selling 3.4M units in China and probably a ton elsewhere, and being generally sold out everywhere. I'm guessing Apple thinks people don't want a 4" phone...).

  10. Re:Fixable by phone-side installation prompt on Academics Claim Google Android 2FA Is Breakable (theregister.co.uk) · · Score: 1

    How is this different from someone who manages to get a RAT on a victim's computer and control iTunes, installing/buying/removing apps at will? iOS is pretty much "vulnerable" to the same thing.

    Except you can't do that unless the phone is present - either on the same WiFi (with WiFI sync enabled) or via cable.

    You can buy apps, but they cannot be remotely installed. The only way is if the user is syncing with iTunes to then wait for the phone to be connected and then alter the sync settings to sync your app over.

    Also, those apps have to be approved. If you want to try load your own app, that would require a mobile provisioning file which the user has to manually approve to install (this is for enterprise signing)

    So yes, iTunes/iOS is vulnerable, but the attack surface is a lot more complex.

  11. Re:Because... on Free Lightsaber Event Now Battling Lucasfilm's Lawyers (siliconbeat.com) · · Score: 2

    design patents for things that would barely qualify for copyright protection.

    You do realize copyright and design patents are completely different things, right?

    A design patent covers things that aren't copyrightable - they're for ornamental features of an object. You can't copyright a physical object by definition, but you can protect the look and feel of a physical object with a design patent.

    Copyright affects creative works - typically music, movies, books, etc. As the "design" of this doesn't really apply (you can't really apply for a design patent on the on the way the page is laid out, though you could if the book was shaped oddly - say you put a hole in the middle and some other things).

    What's with IT educated people wanting everyone to have a computer education and failing to learn about IP law? It's not hard (most of what you need to know can be covered in a short book)...

  12. Re:I thought most intelligent people did that on The FBI Director Puts Tape Over His Webcam (npr.org) · · Score: 1

    I love mechanical switches - sure, they wear out and are a pain to replace, but unless you have teleporting electrons, they kill the attached devices.

    Except those switches for WiFi just send a signal to the WiFi card. That's it. It's up to the WiFi card to actually do something with that signal. The mini PCIe slot has a line for that switch - the switch just brings the line high or low and it's up to the card and firmware/driver to actually do something with it.

  13. Re:Toldja so, you morons! on Variation in Depiction of Same Emoji on Different Platforms Can Lead To Miscommunication · · Score: 1

    This is exactly what I said would happen when I wrote to the Unicode Consortium asking them not to adopt emoji into the standard. Their response was that rendering differences in alphabetic/ideographic symbols with well-defined *objective* meanings never posed such a problem, so rendering differences for entirely *subjective* symbols wouldn't, either. /facepalm

    '
    The only reason Unicode is adopting emojis is because Unicode is supposed to be that - a universal code. *every* character set in the world is supposed to be mappable to a Unicode codepoint in some way. Given Japan's innovation of emojis as characters, that means Unicode is forced to adopt them, otherwise it makes Unicode irrelevant as you can't just use Unicode and immediately inherit the ability to record every text in the world.

    The only reason it's an issue is OS developers are letting users use them - they used to be a Japan only thing and you could view them, but not type them.

    Easiest way is to let things like this happen and then have people lose their jobs over it or some other big misunderstanding to shy people away from using them.

  14. Re:Anti-Trump insults masquerading as "jokes". on Donald Trump's 'Nuclear' Uncle (newyorker.com) · · Score: 1

    Look, I don't support Donald Trump, and I don't particularly like his policies. But the last thing I want to read when I come to Slashdot is some snide swipe at him.

    Especially when it's not direct family. I mean, really, you can say the Trump family made their money running a brothel, which is being resurrected in Canada.

    Yes, Frederick Trump (Donald's great-grandfather) made their fortune running brothels, hotels and restaurants.

    So now you know where the Trump family fortune came about. Uncle? Nah. Direct family lineage is better.

  15. Re:hoo boy this article. on Apple's Fight With US Over Privacy Enters a New Round (bloomberg.com) · · Score: 4, Interesting

    Apple provided assistance in accessing such devices earlier.

    this took place largely through secret FISA court orders and wasnt a huge problem until the FBI pulled the wig off the fat lady. Apple would love to continue secretly unlocking phones, but its no longer an option when americas darling tech company has been directly implicated in bed with the US intelligence community. the biggest threat to the cloud based sharing model of internetworked gadgets and services that companies like Apple offer is the inability to keep the devices secure and away from prying eyes. It doesnt matter how many surveys come out declaring $countrymen dont care about privacy, the proof is in the pudding. Apple understands losing this mark of privacy could mean the death of the brands top sellers.

    Actually, Apple also stopped providing decryption services when iOS 8 was released that cranked up the encryption usage and made even less stuff accessible.

    Because it's almost impossible to tell which version of iOS is running and Apple knows they can't break into an iOS 8 and above phone. Explaining to LEOs why one phone can be decrypted but another can't is an exercise in futility, and it's quite likely Apple will try and fail after having spent a week attempting it only to discover it was updated to the latest iOS.

  16. Re:Not anymore :( on Fallout 4 Wins Best Game At Bafta Awards (bbc.com) · · Score: 1

    I think that used to be true. In the 80s and 90s perhaps, you could start small.

    The "evidence" we have here is if you started in the 90s and were popular, then you can have the necessary multi-million budget to make successful games now.

    Still true today, actually - a small one or two person shop can make a great game. We call them "indie games" and there are millions of them. Most of them are crap, and really do reflect the fact that it was done by a one or two person shop, but there are a few gems the pop up now and again.

    And heck, mobile development brought back indies, big time

  17. Re:But what if it was too late already on White House Declines To Support Bill That Would Let Judges Order Tech Companies To Break Encryption (reuters.com) · · Score: 1

    I'm tired of hearing that a backdoor can't be done securely. Of course people have been doing dual access secure control for a long time. Essentially, you have one key used to encrypt the phone, which is normal for single access, but you have two key decryption methods, which is what makes it dual access. It means you have to secure the second method, which can be done by breaking it into multiple parts and putting that control under different agencies. For example you might have the manufacturer in control of one part and the FBI in control of a second part and if you're especially paranoid, a third part is in the control of a court local to the manufacturer.

    The problem is, the parts leak out.

    For an example, see the TSA keys. If you travel via air, you'd like to lock your luggage. Problem is, the TSA, if they want to inspect your baggage will cut away any straps or locks keeping them from your baggage. (And if it's too tough, the baggage stays at the airport). Problem is, they cut the lock off, so they can't put it back. They may tape your bag up to re-seal it but it already defeated one of the reasons for having a lock.

    To get around this, they designed a set of "TSA Keys" that the TSA could use to unlock your lock, inspect your bag, and then relock it.

    Problem is, the keys are leaked and photos and 3D designs of it are all over the 'net so you can print yourself a set of TSA keys good for opening any baggage lock.

    Any key held by the government is subject to the same thing - maybe not immediately, but it will eventually leak. And there are strong commercial reasons to get those keys - I mean, if people are willing to pay a million dollars for an iOS vulnerability, then paying off people to get at the key gets tempting.

    Even worse, the more those keys are used, the more they are handled and the more likely they will also result in accidental disclosure - either because someone left the key out for a few minutes on a desk, or someone inadvertently submitted it as unsealed evidence.

  18. Re:In other news.. on Siemens and Airbus To Push Electric Aviation Engines (networkworld.com) · · Score: 1

    Why bother? Siemens admitted their electric motors for aircraft are unsafe and unsuitable for flights over water.

    So you can use it over land only, and you don't need a big extension cord when you can land and charge right up again...

  19. Re:we do not even know IF the phone was hacked on FBI Telling Congress How It Hacked iPhone (theverge.com) · · Score: 2

    But Apple can certainly take measures to 'fix its security issues' Their main problem is their lack of ANY bug bounty program. Apple should give researchers some incentive to disclose vulnerabilities... No they aren't going to be able to compete price-wise with the bad guys. Zero-Days will still be sold on the black market. But by offering bounties they show the community at-large that they at least appreciate the effort involved in finding, reproducing, documenting and disclosing exploits. A well-planned bug bounty program also gives ethical hackers the permission, guidelines and communication channels required to 'do the right thing'. Without an explicit policy those who disclose exploits to vendors could be accused of attempting to 'hack' the system even if the bug was discovered accidentally.

    You know how much Apple bugs go for? Apple can offer a bug bounty, but third parties and governments pay more.

    Last December, an offer closed - $1M (yes, a million dollars) for an iOS9 bug and the offer was good for THREE bugs. Of the 3, only one was claimed.

    The richest bug bounties are barely in the 5 digit range. If you found a bug, would you report it to Apple for $10,000, the darknet for $50,000, or the government vulnerability who will pay $1,000,000 for it?

    And hell, $1,000,000 for a bug, if you can charge out at $15K a pop is only 67 iPhones. If you can crack more than 67 iPhones with this bug, you've made a profit. Last I heard there were over 200 waiting to be cracked in the US.

  20. Re:Err on the side of caution on White House Redirects $589M In Funds To Fight Zika Virus (reuters.com) · · Score: 2

    Most parts of the USA that have mosquitoes also have measures in place to control and/or eliminate them, some more effective than others. I would hope that those measures would help control this, along with other mosquito born diseases.

    The key word is "control". Sure the US isn't overrun with mosquitos, but you can't get rid of every single one of them because they breed wherever there's stagnant water.

    And there's plenty of mosquito-borne illnesses - west nile is a common one that keeps rebounding every summer through the entire US. Doesn't help that it's carried by birds, too.

    Zika requires the mosquito bite an infected human, then bit more humans later on. Given mosquitos are still pests everywhere, well, just like computer security, it only takes one.

  21. Re:trumpet winsock:win95:cygwin bash:win10 on New Windows 10 Preview For PCs With Bash, Cross-Device Cortana Released · · Score: 1

    The Redstone builds of Windows 10 (14295 onwards) have added ANSI emulation too - only 30-odd years after DOS brought us ansi.sys.

    That actually was the precursor to the whole Linux subsystem being brought over - otherwise things that use ncurses or terminfo would break horribly since the old conhost.exe didn't support it. Native Win32 console applications could control the cursor and get mouse events, but not Linux command line applications, at least not without some shim Microsoft writes to replace ncurses and terminfo.

    So it was easier to add ANSI support to conhost than to write a bunch of Linux libraries (and more compatible).

  22. Every law firm I have ever had tangential contact in an IT role has always been stupid cheap cheap cheap and self-righteous and arrogant about it. I don't do business with law firms just because of the headaches they cause friends and acquaintances about not paying, wanting the moon for a buck, etc.

    Not just law firms, but doctors and accountants as well. Basically it's as if the degree on the wall means they're more intelligent than the rest of the world, and unless you have a comparable degree, you're an idiot. (Hrm... doesn't that sound familiar?)

    And yes, they also subscribe to the "control costs" thing - they know that to make more profit, you reduce costs, so IT gets cut cut cut. Plus, they will cheap out and cut any corner they can, and try to stiff any service provider they can as long as they can - so getting paid is pulling teeth. Again, they're smarter than you and if you spend enough money to go to court, they'll pay up after you spent time and money trying to collect.

    And yes, if it works, they don't believe in updates or anything that costs money. If you're lucky, you'll have a server that was the best buy special on sale, but will probably also be the secretary's or receptionist's PC.

  23. Re:alternate email address on Phishing Email That Knows Your Address (bbc.com) · · Score: 1

    I remember a while back I read about an interesting way to identify where this info is coming from. If you have your own domain, there are people out there who will append the site name to their email address when they sign up.... e.g. kenneth.facebook@yourdomain.com - then as you receive spam you can see where it orignated from...due to them sharing your email ( or if it was stolen ). Would be interesting to know if anyone has done this and identified the original source of the data.

    I do this, but the spam I get comes from a completely made up address I've never used. Even more interesting is apparently some scrapers have bugs because the address gets chopped. For example, I never used example@example.com, but then I get a lot of spam to it. Then I notice spam gets sent to "xample@example.com" and "ample@example.com".

    I've gotten actual business correspondence too - some guy signed up for BT telephone and ADSL account, some other guy has a USBank card, etc. Funny thing is, I can't ever log in using that email. Even the "forget password" link doesn't claim it's valid. These are real emails to the real location, too.

  24. Re: Ew on HP's New Logo Is the Awesome One It Never Used (theverge.com) · · Score: 2

    Try upgrading an SSD on the early 2015 macbook pro... No third parties have made one compatible yet.

    Well, that's just a supply issue - NVMe/PCIe SSDs aren't a terribly big part of the market right now either. I mean, you can buy a PCIe SSD for your PC and chances are it won't boot from it. So things are still in flux for NVMe/PCIe SSDs. Apple of course, controls the entire chain so they can make their OS boot from PCIe/NVMe easily enough, and the performance is easily triple that of SATA3 (1.5GB/sec vs SATA's 540MB/sec), which is why Apple went with it.

    Of course, as one of the few computers on the market supporting NVMe/PCIe, there just isn't a big enough market for most providers to bother. Even M2 SSDs aren't as easy to find, ignoring the fact that M2 allows for it to be on either the SATA (slower) or PCIe (faster) busses.

    So it's hard to find a third party replacement because most third parties aren't making them. Those that do charge more.

    100% compatible with common standards

    Not quite. OS X refuses to enable TRIM on a non-Apple SSD and you need 3rd-party software to make it work.

    It can be manually enabled in the newer versions. Which is not a sane default, especially when there is no easy way to notice.

    Well, the user could easily stick in an SSD with a buggy TRIM implementation, so if the OS enabled it, it would corrupt itself and the user's files.

    Apple enables it automatically on their SSDs because they verify that TRIM works on their hardware. Since there are tons of other SSDs out there, Apple couldn't test them all and the disable TRIM because it's the safest option that will protect the user's data.

    El Capitan added the ability to enable it natively in the OS but with big caveats that there could be data loss, so it displays a nice warning.

    Samsung drives are fine, but there are dozens of others not as reliable.

  25. Re:RAM on HP Says It Made the World's Thinnest Laptop (time.com) · · Score: 1

    The thing still tops out at 8GiB RAM? I still don't understand why mobile devices have such low amounts of maximum RAM. I purchased a cheap ass 10" netbook some 3-4 years ago for only $300 and was able to effortlessly upgrade it to 8GiB of RAM. Surely a 13" system with more horizontal space could pack more RAM, especially with the increase in memory density?

    I think the limit is defined by the CPU in use since the modern Core series have the memory controller onboard. Here I think i5s are limited to 8GB of RAM, while i7s do have a secondary controller that can be used to give 16GB. However, it's likely to save design variances, both the i5 and i7 use the same motherboard, so while the i5 has one controller for all 8GB, the i7 will have each controller managing 4GB each.