Slashdot Mirror


User: kesuki

kesuki's activity in the archive.

Stories
0
Comments
3,013
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 3,013

  1. Re:But no https... on Security Flaw In Yahoo Mail Exposes Plaintext Authentication Info · · Score: 1

    if the government cant prevent users from doing remote logins using TOR network technology, then why do you assume anyone is going to prevent power users from finding ways to get remote e-mail access that is by policy denied? that was my point.

  2. Re:But no https... on Security Flaw In Yahoo Mail Exposes Plaintext Authentication Info · · Score: 4, Interesting

    "and who, besides the gov't and that ISP has the wherewithal to accomplish such a task?"

    a man by the name of dan egerstad http://it.slashdot.org/article.pl?sid=07/09/11/1730258

    apparently, because pop transactions are in the clear, sophisticated government users have used the onion router network to encrypt the traffic and allow remote pop logins.

    all you need is to get wireshark, and a nice high speed connection and start running yourself an onion router, it's amazing what you'll get...

    as far as the government being able to read e-mail, well, that doesn't sit well with me either. since when can we trust 'big brother' the government? the same government that wasted billions of dollars on haliburton no bid contracts that resulted in substandard work when anything was done at all?

  3. Re:E-Voting Machine made Easy & Secure on California Sec. of State Wants Open Source E-Voting Systems · · Score: 1

    whoops forgot number 2 on the only 1 vote... the second option was to say have unique bar codes scanned in that only work once, and the voting machine won't let you vote without scanning in a new bar code.

  4. Re:E-Voting Machine made Easy & Secure on California Sec. of State Wants Open Source E-Voting Systems · · Score: 1

    the easy part is only 1 vote. there are 2 options. 1. a second screen with a 'press to allow vote now' system kinda like the cashier pressing the 'credit' key at walmart. maybe even screen less, just an led... or something.

    not traceable back to you is harder, but not impossible ultimately this suggests that the poll workers don't get access to the voting machines ever, they're handled by someone else entirely etc.

    as for correct counting, that's not impossible either, you just have the machine have 2 copies of the voting record and perform all the math twice, on a dual core this isn't hard to do, and they're almost all dual core nowadays anyways. even on a single core it doesn't make it that horribly slow... and if the values don't match you re run the counting. until they match. worst case scenario you have a manual recount of the printed results, having the results printed twice is again easy... it may cost a bit more to have redundancy, but it's not hard.

  5. Re:But, a HUGE step backwards. on California Sec. of State Wants Open Source E-Voting Systems · · Score: 1

    it's called politics for a reason. only evil people are drawn to the field, so evil add-ons are part and parcel. i imagine with all the hullabaloo about providing wall street with a 700 billion dollar golden parachute to stabilize the markets, that to make it more evil they'll tie in some form of legislation mandating that the people overseeing the reforms at the companies that choose to be bailed out all have to be hand picked from dubba's hand picked circle of friends, kinda like the way no bid contracts were part and parcel of rebuilding iraq.

    i mean people used to $250,000+ salaries for reading the intarweb need golden parachutes making sure wall-street bailouts aren't say just shafting all american tax payers at the same time.

  6. Re:billionaires on Microsoft Documentation Declared Unfit For US Consumption · · Score: 1

    you don't understand. if you step back and look at the fundamental economics on a wider scale, the 1970's copyright act is a watershed event. there were tycoons in railroad who the government eventually broke up and created the mess known as amtrak.. but if you watch the value of the richest people through time lapse right around 1970 all of a sudden there are gains of stratospheric proportions in wealth that can't draw parallels with other watershed events like mechanization or the steam engine or the internal combustion engine..

    all of a sudden there was a way for massive numbers of people to make massive wealth year after year in good economies and bad, and suddenly instead of millionaires we had billionaires, without the kind of massive inflation normally tied to that kind of event. yeah inflation has been high compared to historic levels, but 5 cents to 50 cents in 50 years isn't the kind of inflation that turns $20,000,000 into $100,000,000,000.

    all because of one law and the way it changed the redistribution of wealth, as they say the 'rich get richer, while the poor get poorer' and that was what the 1970's copyright laws snowballed into.

    in 1960 would a below poverty line family spend $100 on cell phones, or the equivalent? or $50 on cable? would they own a typewriter? but now they own a computer... even the color of clothes has drastically changed.

    black dye was horribly expensive for most of the past 20,000 years of human existence, because it all came from rain forests, yet black is now a common dress clothes color, for funerals etc.

    without that 1970's law, buffet would be what? without that redistribution of wealth there would have been no stock market booms every 5 years for buffet to ride... so you see, one law changed the lay of the land.

  7. Re:Fair and balanced on Microsoft Documentation Declared Unfit For US Consumption · · Score: 1

    except there number of editors who are not named cmdrtaco who post to the blog... they follow tacos guidelines yeah, but it's more like a news organization with a biased dictator than a blog. kinda like newscorp, although newscorp is designed to appeal to a market segment, while slashdot is a minority opinion of whatever taco thinks is nerdy. eg: pre 1970 us copyright stance (which is vintage geek 'reason' for copyleft, the cathedral and the bazaar etc..) pro video game, pro massive computing systems, etc etc.

    i don't remember the days before 1970, but the library of congress was the ultimate repository of all copyright, the way the patent office was the repository of inventions patents. it was apparently a very cool time, but that wasn't where the money was. geek philosophy is a lot closer to socialism than laissez faire capitalism. i mean from open source, to star trek (i realize star trek was written by a socialist) a lot of hard science requires government support, so scientists don't have to 'think' of ways to make money but can think about pushing the boundaries of known physics like Albert Einstein, or such. that's why universities are the way they are.x

    billionaires are ALL making their money off off the 1970's copyright act and how it snowballed. look at the list of billionaires, investors and heads of companies like microsoft or heirs of a discount chain founded shortly before the 70's snowballed the economic booms in the 70's 80's and 90's and part of the 00's

    but in the 00s technology made a wonderful about face in copyright -- piracy. and the common man became aware of how to make 100 copies of 'the movie of the week' and sell them for $3 on the street... costing them maybe $30 for a net profit of $270 a week, instead of some giant media conglomerate making $20 a copy, in 10,000 cities, with say 10,000 copies per city, for a profit of $190,000,000. even if only 10% of the population is willing to pirate, that's 10% of their profits, nearly.

    but the telcos, cable companies etc are getting $50-$100 a month from online pirates, and hardware sales of new PCs are over half a billion a year now... all because suddenly computers can do something killer, like pirate dvd movies with a single click. so who wins out? the closet socialists pirating content? or the corporations making real profit off 'ideas' well, it hasn't played out in the courts, but i think the state of DRM and stuff indicates that even if hardware vendors can make a quick buck breaking copyright eventually the cost of piracy will be too high for corrupt politicians to ignore. in 20-30 years when legislators figure out how to do it, you won't be able to buy hardware that can do anything except what it's built in 'secure computing initiative' allows it to do with the hardware, and forget open source, it won't even run on processors because it failed to pass the verification in the on chip dies.

    laws will mandate SCI the way catalytic converters are mandated to create a market for platinum. no, it's not that catalytic converters do nothing, it's just that if SVO or biodiesel based compression engines were 'mandated' or god forbid, 'clean diesel technology' mandated... there would be no need for catalytic converters, but that would but exxon out of business, or for 'clean' diesel cost them trillions. so, screw laws that mandate clean fuel, we'll mandate catalytic converters and create a multi-billion world platinum mining market a 'win-win' for capitalism.

  8. Re:This is good. on Microsoft Documentation Declared Unfit For US Consumption · · Score: 1

    well, mysql was topdog once upon a time, until feature bloat ruined it... there is even a fork called drizzle, open source rarely forks, and usually the forks die off, and are the result of temporary instability issues... or in this case performance issues.

    performance issues are hard to do without cutting features. one of the nicest things about open source is that certain features can be disabled at compile time. and under used feature of open source imo, when i was a freebsd guy i always compiled from the ports tree... sometimes the projects needed their files modified to even compile. that seems weird you know a program offered in open source as source, but not compiling from the source provided without a little modification. makes me wonder, although most of the modifications were simple not having directories in the right spot.

  9. Re:Drop in the bucket on Nvidia Settles GPU Price-Fixing Antitrust Case · · Score: 1

    that's mainly because of a glut of buggy worthless quad core processors that don't end in '50s' and having trouble getting their dies shrunk. intel is down to 45nm and amd just finally got 65nm parts working right!

    but with benchmark makers rigging their tests who can tell if intel are really faster than amd. " A VIA Nano CPU has had its CPUID changed from the original VIA to fake GenuineAMD and GenuineIntel. An improvement of, respectively, 10% and 47% of the score was seen" http://hardware.slashdot.org/article.pl?sid=08/08/01/1152237

    although some posters there claimed that the discrepancy was the fault of Intel's compiler, which automatically optimizes programs for genuineIntel, the only weird bit is getting 10% faster as genuine AMD, which the intel compiler wouldn't normally do..

  10. Re:Price drops on Nvidia Settles GPU Price-Fixing Antitrust Case · · Score: 1

    thanks, newegg is fresh out of those. if you had said 'online' i probably could have inferred newegg, and gotten one myself! if only you had obfuscated your source!

  11. Re:Not Proven Innocent?? on Nvidia Settles GPU Price-Fixing Antitrust Case · · Score: 1

    in this case, the price of the lawyers was $1.7 million for writing a letter, and getting a court date.

    not bad for what 4 billable hours? in this economy who can beat getting paid $425,000 an hour?

  12. Re:Fine, now go after the petroleum companies, on Nvidia Settles GPU Price-Fixing Antitrust Case · · Score: 1

    the collusion on the price of gasoline is the minor issue, the collusion on the price of a barrel of oil is absolutely crazy, and is causing riots in countries that can't afford the price of oil and still put food on the table.

    for most of the history major governments have leaned heavily on oil suppliers to keep a low, affordable price, there are all kinds of laws about this all over the world, but all of a sudden, since USA invaded iraq, one of the worst offenders for breaking opec rules, causing iran to also break opec rules... to keep pace. well the price of oil has gone up 375% in just 5 and a half years. http://www.wtrg.com/oil_graphs/oilprice1947.gif note: the graph has the date of the iraq war wrong http://en.wikipedia.org/wiki/Iraq_War march 20th 2003 not 2004 as shown... sorry first graph i could find. putting the start of the iraq war in 2004 is misleading, suggesting the price went up for all of 2003 without reason.

    notice the price spike starts the EXACT YEAR the iraq war starts. sounds like exxon started the war by their proxy, gw bush, a texas oil man from way back. iraq didn't have weapons of mass destruction, they had violated exxons principals by creating artificially high supply for a quick buck instead of following opec production goals.

  13. Re:Fine, now go after the petroleum companies, on Nvidia Settles GPU Price-Fixing Antitrust Case · · Score: 1

    it's worse where i live. they actually have a state law mandating that gas stations aren't allowed to sell gas at a loss, and they have the same law for retail stores. now this sounds like protection for mom and pop stores, but only small towns below 4000 people have 'mom and pop' gas stations, and right now we're 50 cents a gallon more than the state next to us.

    the reason the law doesn't work? well the rest of the country doesn't have loss leader laws, so all the big distribution systems are all regional anyways, you can't buy gas cheap from anyone else, and thus your price winds up being higher than the regional brands anyways. mom and pop thrift stores haven't done any better than wal-mart for the loss leader laws, although some boutique small town shopping districts have survived wal-martification. so loss leader laws definitely can save small town America from the wal-marts of the world. just not from the exxons of the world.

  14. Re:Camera phones on Mobile Phone Users Struggle With Hardware Adoption · · Score: 1

    well, my cellular provider doesn't cover those phones, i had no idea they'd gotten up to 5 megapixel camera phones because the ones i see in stores here suck.

    so there are decent camera phones. nice to know.

    as for memory cards and the effect of battery life, in my old 4 megapixel camera there is a huge battery life difference between say my 32/64 mb cards vs my 1 gb card. it's an old phone, though. as for the less power used, that is true the smaller the die the less the power used, and since cameras are high drain already, reducing the drain even by 5% is significant in battery life.

  15. Re:Summary wrong on Alarm Raised For "Clickjacking" Browser Exploit · · Score: 1

    slashcode ate your [iframe] paste because it used '>' carrots.

    iframe is not blocked by default. so noscript does not block this by default if a determined hacker is targeting noscript users.

  16. Re:Wow. on State of Kentucky Seizes Control of 141 Domain Names · · Score: 1

    well, that's the oldest trick in the book, if you and a few friends know sign language and you're playing poker around a table in a crowded place, they can sign the hands of each player to you, so you know what to bet, and when to fold.

    like they say, if you're playing cards and you can't tell who the mark is, then the mark is you.

    most likely the people in your link didn't even hack the site, they just reverse engineered the packets coming from the poker site, to reveal everyone's hands because they coded it sloppy and fed that data early and then cached it to memory for the 'reveal' at the end.

    and online gambling also brings into play card counting programs, because they can't possibly know what software you're running. that's why you don't gamble online. too easy to cheat.

  17. Re:Summary wrong on Alarm Raised For "Clickjacking" Browser Exploit · · Score: 1

    actually, i have capital one, so when a charge for $1.43 cents showed up they called me. but, it seemed like a valid little estore, i got my merchandise, they e-mailed me a tracking number.. nothing suspicious except that my card then was sold on the black market.

    and remember, there are a lot of people who use debit cards, debit cards directly charge a bank account, and you don't have protection. some people chose not to get credit cards, or simply can't get credit cards.

    even if i'm not liable for the fraud, there is still someone making money off my stolen credit card, and everyone who get credit cards stolen costs the global economy billions of dollars a year.

    and imagine, if they had designed a site to steal my whole identity and not just my credit card... i would have been suspicious, because i've used online stores before... but how many people would stupidly enter their social security number at an online store if it asked for it and required it?

  18. Re:Summary wrong on Alarm Raised For "Clickjacking" Browser Exploit · · Score: 1

    and what do you do when it's a highly page ranked, 'google' shopping store, that is actually a phishing site on a 'build a estore site' that transfers your data to a legitimate store and simultaneously harvests your cc data to sell on the black market?

    hrm smarty pants what do you do then. happened to me, buying a cell phone data cable on the internet instead of in store where they charge triple the value of a data transfer cable...

    those 'build a estore' sites all look like legit domains... and on the surface google shopping can't tell the difference between a 'real' store and a 'phishing' store... and hackers know how to page rank spam, with free porn sites.

  19. Re:Premature claim on Alarm Raised For "Clickjacking" Browser Exploit · · Score: 1

    actually, i wiki'ed Dhtml and that is where you get the 'cross browser' information http://en.wikipedia.org/wiki/Dynamic_HTML

    seems like it's a fundamental flaw in CSS files, after adding noscript https://addons.mozilla.org/addon/722 to firefox add cssviewer https://addons.mozilla.org/en-US/firefox/addon/2104

    this allows you to find in the css the code that causes the clicking, and FWIW javascript does make the exploit massively easier, but is not needed, all one needs is to design a css file that does the desired clicks in a 0 pixel frame, and attach it to a nice little dancing pig flash game on that people will forward to all their friends.

  20. Re:Summary wrong on Alarm Raised For "Clickjacking" Browser Exploit · · Score: 5, Informative

    the problem is actually in dhtml, but javascript makes the exploit 'much easier'

    hence, the attack sites will all be using javascript, because it's easier than writing it entirely in dhtml just to score and extra 1 click from the guy who disabled javascript because he doesn't trust it.

    BTW: in theory even sites like slashdot can be infected because the attack applies to all CSS coded sites. nice.

    oh, BTW, is you have noscript installed, this vulnerability can only force clicks within the same domain, since cross site code is automatically disabled.. AFAIK the only way to disable CSS is to use obsolete browses like lynx.

  21. Re:Mac vs. PC on Run Mac OS X On Non-Apple Hardware, With a Dongle · · Score: 1

    well they could always do a commercial about churros in a shoe store with a famous comedian and a little butt wiggle from the 3rd richest person in the world.

    but people still wouldn't buy vista, clearly if there is a $160 add on to make a PC a mac, then microsoft is doing something wrong.

  22. Re:I just ordered one!! on Run Mac OS X On Non-Apple Hardware, With a Dongle · · Score: 1

    but people just buy vista for the downgrade rights to xp.

    so the price of vista premium is moot.

  23. Re:What happens to windows vista now ? on Developers Will Get Windows 7 Alpha On Oct. 28 · · Score: 1

    or doing the robot.

    vista isn't going to get adopted by businesses so windows 7 is important. so for right now they need to pretend like vista is all happy fun stuff for consumers, and eventually windows 7 will fix stuff.

     

  24. Re:ÐzÑÐнÑOE Ñ. on Russian Town Puts Giant Smiley On Google Maps · · Score: 1

    sadly, it's the lameness filter. hop over to slashdot.jp sometime, full utf-8 support. apparently the japanese don't have problems with lameness filters.

  25. Re:Wow. on State of Kentucky Seizes Control of 141 Domain Names · · Score: 4, Interesting

    well it helps if you know the 'rest' of the story. not only are these offshore gambling sites using rigged double dealing programs, so that nobody ever wins 'big' prizes... but some of them are so dishonest that they then sell your CC info to credit card pirates, or even double or triple bill people.

    so basically they're a reverse ATM you spend hours and hours giving these sites your money, so they can put it in a bank.

    there is no way to win, which is why people should only play casino games online if they're 'free' to play with no membership fees or prizes...

    if you want to wager money go to a a reputable casino, avoid bar units, gambling rooms, and some Indian casinos. or at the least, play a real card game with real cards where they use a machine shuffler.

    las vegas is generally clean, but there have been times that corruption in the state gambling agency that grants licenses that have allowed machines to be 'chipped' to avoid the big prize.

    online gambling is the biggest set of crooks since the mob learned that reel machines could be mechanically rigged to mint money.