Slashdot Mirror


User: afabbro

afabbro's activity in the archive.

Stories
0
Comments
1,720
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 1,720

  1. Well... on Security Threats 3 Levels Beyond Kernel Rootkits · · Score: 5, Insightful

    She runs three separate virtual machines, designated Red, Yellow, and Green, each running a separate browser and used for increasingly sensitive tasks.

    And in the article:

    I totally don't care about a compromise of my "Red" machine--in fact I revert it to a known snapshot every week or so. I care much more about my "Yellow" machine. For example, I use NoScript in a browser I have there to only allow scripting from the few sites that I really want to visit (few online shops, blogger, etc). Sure, somebody might do a man-in-the-middle (MITM) attack against a plaintext HTTP connection that is whitelisted by NoScript and inject some malicious drive-by exploit, but then again, Yellow machine is only semi-sensitive and there would not be a big tragedy if somebody stole the information from it. Finally, the "Green" machine should be allowed to do only HTTPS connections to only my banking site.

    And as long as your bank is never hacked and serving up malware, that probably works well...

  2. Re:I wonder... on Red Hat Is Now Part of the S&P 500 · · Score: 2, Informative

    ...does the S&P 500 use Linux?

    "The" S&P 500 is a list of stocks published by Standard & Poor's, a division of McGraw-Hill.

    I seem to recall that NYSE does. Then again, I'm old.

    NYSE, AMEX, or NASDAQ might, but "The S&P 500" can't (except in the sense of "do the companies in the S&P 500 use Linux," in which case the answer is obviously "yes, some do").

  3. Admittedy Off-Topic on Typography On the Web Gets Different · · Score: 1

    What was the tech used to convert photos to black and white pseudo-pen-and-ink pictures used on that page for the author's pictures?

  4. Admittedly Off-Topic on Windows 7 Clean Install Only In Europe · · Score: 1

    What was the tech used to convert photos to black and white pseudo-pen-and-ink pictures used on that page for the author's pictures?

  5. Re:of course they didn't reverse interest charges. on Software Glitch Leads To $23,148,855,308,184,500 Visa Charges · · Score: 3, Funny

    But just think of the airline miles!

  6. Re:Problem with wind and solar? on Expanding the Electricity Grid May Be a Mistake · · Score: 1

    Yeah it's only brought up in every single /. discussion about wind power.

    I've never seen this specific consideration raised or addressed before.

    Grandparent is right. Every. Single. Discussion.

  7. Re:Yeah on Expanding the Electricity Grid May Be a Mistake · · Score: 1

    Yes, because we all know that every locale has magic electricity faeries just waiting to produce low-carbon-footprint electricity.

    Well come to think of it, if we hooked generators into the shoes of dancers at typical nightclubs, we could produce quite a bit of juice...

  8. Typical on US Postal Service Moves To GNU/Linux · · Score: 4, Interesting

    cost less than the last system, which was based on a Sun Solaris environment.

    Two thoughts:

    • This seems to be where Linux's strength is - replacing proprietary Unix.
    • How lame does the Sun salesman have to be? He couldn't get the USPS to replace their Sun boxes with Linux Sun boxes (Sun makes a complete line of x86 kit that runs Linux). Instead they went to HP. There's precious little difference between an HP x86 box and a Sun x86 box....all I can think is how lame the Sun salesman must have been.
  9. Re:Boy, what efficiency... on US Postal Service Moves To GNU/Linux · · Score: 1

    And that's handled on 45 linux boxes, and 12 more for the database, doing upwards of 6000 transactions per second during bursts.

    I'm sure they're delighted that you've posted details of their architecture on Slashdot.

  10. Re:Now? on US Postal Service Moves To GNU/Linux · · Score: 0, Troll

    For that price, you can send a standard letter anywhere in the US (including the non-continental US) usually arriving in less than 5 days with a loss rate of virtually zero.

    Oh man, you're killing me. Good one.

  11. Re:Now? on US Postal Service Moves To GNU/Linux · · Score: 1

    Actually, it's historically risen at a rate equal to the rate of inflation.

    The question is...why!?!? Every year the automation is better and more prevalent, the systems better, the methods improved, etc. Postage should be getting cheaper. As it is, paralleling the rate of inflation was true from 1950 to 2000. One would think that computerization, zip codes, etc. would have had some effect.

  12. Re:olde tyme radio on Pandora Wants Radio Stations To Pay For Music, Too · · Score: 3, Insightful

    On the other hand, that also makes it harder for indie artists...

    Having heard the quality of most "indie artists," all I can say is thank God for that.

  13. Re:Nerdgasm on IronKey Unveils Self-Destructing USB Flash Drive · · Score: 1

    The lamest sig. ever? Really? Is this your first day on Slashdot?

    by afabbro (33948)

    Apparently not.

  14. Re:Encryption is just as good as self destruction on IronKey Unveils Self-Destructing USB Flash Drive · · Score: 2, Insightful

    Especially for students at larger universities where there are people who lurk in the 24 hour computer labs just looking for a USB flash drive to steal. With a stolen USB flash drive, they can either sell the done homework, or if someone has a paper for a popular class that isn't turned in, actually take the word processing document and call it theirs.

    Sorry, but I have to call nonsense on this. Sure, there are people who steal flash drives. They get the drive, and that's benefit enough - any electronic dividends are just icing.

    But to posit that there are people who specifically look to steal USB drives so they can sell the done homework (do they take orders? is there a clearinghouse?) or by wild coincidence exploit the tiny window between a paper being due and a student writing it (which is no more than 24 hours most of the time!) coupled with the coincidence of being in the same class, is pretty unlikely.

    I'm not saying it couldn't happen, or that perhaps it hasn't happened once in the past, but I am skeptical that there are organized rings of "lurkers" in every university's computer lab. I bet 99.99% of flash drives are stolen, looked over ("yawn, Art History notes - and dude, she listens to David Archuleta, LOL!") and formatted.

  15. Re:Nerdgasm on IronKey Unveils Self-Destructing USB Flash Drive · · Score: -1, Troll

    There are 4 boxes to use in the defense of liberty: soap, ballot, jury, ammo. Use in that order. Starting now.

    Lamest. Sig. Ever.

    Mainly because you're trying to be cute.

  16. Re:Windows 7 makes me excited on Windows 7 Hits Build 7600 (Possible RTM) · · Score: 4, Insightful

    Gaming.

    Wii.

    The Wii is great, if you're not into gaming. Or if you're 9.

  17. Re:I Hate War Rooms on What Would You Want In a Large-Scale Monitoring System? · · Score: 1

    Sounds like a lot of people think Nagios is capable of some of the things I outlined. I haven't looked at it in quite a while, so that could certainly be the case. Great news if that's so.

    Wait...I think I just witnessed a constructive exchange of information on Slashdot. What the heck is wrong with us!?!? Let's fix that ASAP and get back on track: Emacs sucks and only girly men use it.

  18. I Hate War Rooms on What Would You Want In a Large-Scale Monitoring System? · · Score: 4, Interesting

    I really don't like the "War Room" video wall concept. I suspect such walls are made to look cool rather than to monitor.

    What you want in large-scale monitoring is:

    • The ability to map complex relationships. I don't want 50 alerts that I can't reach host X, host Y, etc. I want one alert that I can't reach router A. Even better, I want to map things so that I can say "end user application XYZ is not accessible in Kansas due to X being down".
    • I want my monitoring solution to understand HA and service degredation. I want programmable rules about what happens when X is down or Y is down.
    • I want many options for escalation. If X doesn't acknowledge, try Y after 15 mins, etc.
    • I don't ever, ever want a pager to explode or be flooded. A problem should be noticed once and tracked. There should be no pager blizzards.
    • Of course, I don't want this thing relying on my mail system for paging because, of course, my mail system could go down. An ability to dial out if the mail system is down would be nice.
    • I want agents, hooks, interfaces, third-party add-ons, and every possible way of tying something into the monitoring system. I don't want dumb limitations like "you can only get an exit code from the OS and it acts on that" or something. For big monitoring, it's almost mandatory that some kind of API for agents is exposed.
    • I want "I'm working on it, stop paging" blackouts. I want to be reminded to lift them.
    • I want it to tie into my change-management system. If I open a ticket and say that server X is down for 2 hours on this date, I don't want to have to remember to black it out.
    • I want reports. I don't care about silly little charts and graphs, but a history of everything that has every gone wrong with device Y would be nice.
    • I want more info on my page-receiving device than just "HOST X IS DOWN". I want context so I can decide if I have to drop everything immediately.

    Etcetera. These are some of the things that make sane large monitoring systems. I don't think any open source product has all of them, alas.

  19. Re:iRex iLiad on Good PDF Reader Device With Internet Browsing? · · Score: 1

    Does it display PDFs? Last I heard you had to email the PDF docs to some conversion service run by Amazon, and they made no guarantees that any given PDF would render properly.

  20. Re:About time on Firefox To Get Multi-Process Browsing · · Score: 2, Informative

    It's not a question of multi-core architecture. No commercial program on earth takes advantage of more than two cores, not even the high-end drafting programs on mirrored quad Xeons.

    That is a ridiculously untrue statement. Oracle's database certainly uses more than two cores (yes, even the Windows version). A number of engineering and 3D/rendering packages I'm aware of can use more than two cores.

  21. Re:Skip as many songs as we want? on Pandora Stabilizes, No Longer Completely Free · · Score: 1

    Easy fix, be less picky

    If I was a less picky, I wouldn't need Pandora, eh?

  22. Re:Written Before Christianity Was PAGANIZED on British Library Puts Oldest Surviving Bible Online · · Score: 1

    This is a ridiculous post by someone who is completely ignorant of the Bible.

    The "longer ending" of Mark is indeed not found in all manuscripts. So what? The resurrection is clearly shown in Matthew, Luke, and John.

    The idea that the longer ending of Mark is missing in some manuscripts is hardly news to anyone who's troubled to read anything about the Bible.

    The incorporation of Osiris/Attys/Adonis/Mithras cultism

    This cute line about Christianity being derived from Mithras is pretty tired. It was popular among trendy intellectuals in the 1960s but has long since been discounted. Your professor needs to smoke less dope and read more.

  23. Aren't we going to run out of SSNs? on Social Security Numbers Can Be Guessed · · Score: 1

    Off-topic, but...

    Aren't we going to run out of SSNs? They are never reused (according to the Social Security Administration).

    They're nine digits, so theoretically they're good for a billion people, but in reality they're broken up by state. Most states have three or four sets of starting three-digit numbers (with bigger states having more), and there are prefixes reserved for immigrants, etc. So the nine-digit space is actually smaller.

    There are ~300 million Americans, so how many more generations can the current system support? Particularly as today, people get SSNs much earlier than they did in the past. You can't open a college savings account for a kid without one, for example.

    Yes, it would be easy to just add another digit, but I strongly suspect that is going to be another Y2K-style programming effort. Gov't will mandate that by Jan 1, 20XX, everyone must support 12-digit SSNs, industry will spend hundreds of millions of dollars, COBOL programmers will be in demand again, congressmen will introduce legislation repeatedly to delay introduction, etc...bleh.

  24. Re:Why guess? on Social Security Numbers Can Be Guessed · · Score: 2, Informative

    Pretty much every application I've ever filled out has asked for a social security number.

    This is why I've adopted the practice of simply writing "N/A", "-----", or just nothing when asked for a SSN. It's incredibly uncommon that they actually need that information

    Ahem...your employer definitely has a legitimate need for that information since they're taking money out of your paycheck to pay your Social Security. You won't get a job without an SSN, so write "N/A" all you like - makes the job market larger for the rest of us.

  25. Re:If I ever see.. on Bugatti's Latest Veyron, Most Ridiculous Car on the Planet? · · Score: 1

    go buy a Ferrari 308 you can get a good one for under $30K rip out the crappy Fararri engine and drivetrain and install a Pontiac 3.4 and you now have a reliable car that is cheap to work on and actually has some power unlike the raging crap that is the Ferrari Engine in the 308.

    But then you'd be driving a GM car, and who the hell wants that?