Slashdot Mirror


User: Vintermann

Vintermann's activity in the archive.

Stories
0
Comments
2,688
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 2,688

  1. Re:And they found that... on Chords To 1300 Songs Analyzed Statistically For Patterns · · Score: 1

    Obviously, more variation in music makes for superior music. With this simple, uncontroversial assertion, we can prove with mathematical information theory that this is the perfect musical composer.

  2. Re:Governments can't inflate the currency on With Euro Zone Problems, Bitcoin Experiencing Boost In Legitimacy · · Score: 1

    As I understand it, inflation is when the government prints more money than the value of goods and services produced.

    You understand it wrongly. Inflation is when the value of older claims on future production (i.e, money) sinks relative to the value of recent ones.

    Picture this: grandpa saved his monthly wage of $10.000 ten years ago, he thought it would buy a swimming pool. When he retired, and time came to use that money, swimming pools were more expensive, so he couldn't afford one. But monthly wages were also up.

    Government printing more money is certainly one way this can happen. But it's far from the only one. Maybe today, people are more reluctant to work as swimming pool builders, and demand more pay for it, while at the same time a worker at the factory where grandpa worked can produce far more. Poof, inflation, without government being involved at all.

    On a more philosophical level, it comes down the nature of promises, and obligations. A person who isn't God can't ever make promises about the world of outcomes. You can't really promise "There will be a package containing your goods delivered to your doorstep at 9:00 next monday", because that's a statement about the world of outcomes. In reality, when you say such a thing, what you promise is really to make a good faith effort to bring the outcome about.

    So if we see money, then, as a way of packaging and transfering obligations, we can state inflation in more intuitive terms. Inflation is when we gradually, collectively, adjust down what constitutes "good faith efforts" over time. It is not tax. It it not theft. If grandpa's employer paid him directly with a promise to build him a swimming pool, you see why it may be harder to keep that promise over 10 years than over 1 year. Practically for grandpa, instead of an either-or (either he gets a swimming pool, or he gets nothing but an apologetic employer), he gets somewhere in between.

  3. Re:You've taken the bait of the red herring on With Euro Zone Problems, Bitcoin Experiencing Boost In Legitimacy · · Score: 1

    Yes? If I offer a "lottery with a steadily decreasing pace in which anyone can take part" in any other form, why would you not call it a Ponzi scheme, other than perhaps on a technicality?

    Essentially, that seems what it is. Especially since the lottery is so mathematically predictable; if you know the computing power you have, you should be able to predict your "lottery winnings" fairly reliably.

  4. Re:broken glass all over the road on LinkedIn Password Hashes Leaked Online · · Score: 1

    Nope, if you password was strong (say, like the one an anonymous coward posted below: GiwwEeEaT520) it would not have been broken. The likes of qwe123QWE!"# may fool password policies, but they're very, very common and crackers know it.

  5. Re:So, if you have a Linked-in account, what now? on LinkedIn Password Hashes Leaked Online · · Score: 1

    I'm fond of 16+ random characters including numbers, caps, specials, etc.

    It doesn't hurt to come up with a more memorable format. As XKCD pointed out, these passwords are hard for humans, and comparatively easier for computers. I've written a script which produces fairly memorable passphrases, which should be safe even if the script becomes public. No point in revealing the exact scheme, but I can say it's a modest customization of a simple random password generation snippet.

  6. Re:So, if you have a Linked-in account, what now? on LinkedIn Password Hashes Leaked Online · · Score: 1

    Yes, I know, ideally we have a different password for every single site ... it's just not practical.

    It is. Most of these sites offer password reset options. If your mail account is protected by two-factor authentication (as is easy to set up with GMail), you can use secure passwords on each individual site, use your browser to remember it, and just reset it to something else random if you forget it and need to log in somewhere it isn't stored.

    You keep all the security of your mail account - which is a weak point in all these sites' security anyway, since it can be used to reset passwords.

    I used to do your scheme with a "low security" password, but it was lazy. After Google got two-factor authentication (and yes, there are emergency methods if you should lose your token/phone), and my security-conscious big brother got an account cracked, I didn't have any excuse any more.

  7. Re:Hashes list link on LinkedIn Password Hashes Leaked Online · · Score: 1

    Thanks for sacrificing your password for verification purposes :) I can attest it was there. First digits were not zeroed out though, so this can stand as an example of the general kind of password that aren't immediately cracked.

  8. Re:Analysis... on LinkedIn Password Hashes Leaked Online · · Score: 1

    You are woefully misinformed. No, SHA has not been broken nearly that badly. They've managed to generate some collisions with a birthday attack, but that's a far cry from reversing a hash.

    And yes, leaking the hashes this way is bad, and it IS the problem. Especially when they aren't salted, which is just a security WTF.

  9. Re:broken glass all over the road on LinkedIn Password Hashes Leaked Online · · Score: 1

    123qwe!@#QWE

    Just to inform you, that password was in the dump (or at least, in the file I downloaded that claimed to be the dump).

    $ echo -n '123qwe!@#QWE' | sha1sum
    cc2afe5029cf4ae9189c91d7454c7671a6612078 *-

    Just for fun, I googled that hash.

  10. Re:So what? on LinkedIn Password Hashes Leaked Online · · Score: 1

    Little Rainbow Tables, we call him.

  11. Re:SALT YOUR HASHES! on LinkedIn Password Hashes Leaked Online · · Score: 1

    What surprises me almost as much as Linkedin not salting their passwords, is Linkedin rolling their own password authentication system. I'm not really a web developer myself, but shouldn't they have standard (and well-tested) modules and libraries for this sort of stuff?

  12. Re:Plain text on LinkedIn Password Hashes Leaked Online · · Score: 1

    passwordNaN is not in the dump. We can conclude that appending an IEEE float to even a very bad password makes it secure.

  13. Re:which distros? on Steam For Linux Will Launch In 2012 · · Score: 1

    All Linux distros are binary compatible. Games get around compatibility issues by not trying to integrate themselves too deeply into the distro, and they typically use static linking. You can fire up old Loki games just fine in recent Ubuntu - yeah, even in 64-bit Ubuntu, for 32-bit games. It may take a little effort to get the sound to work, since the old OSS system has been deprecated for so long now, but there are no insurmountable obstacles.

  14. Re:Developers, developers, developers on Steam For Linux Will Launch In 2012 · · Score: 1

    > you speak of a number of distributions that do not agree about a number of different things

    Fuddy fuddy fuddy. I suggest finding a Humble Indie Bundle game that won't run on the 50 most popular distros out of the box.

    Binary compatibility, man. Linux distros have it. As long as developers are willing to statically link in libraries - that's not the Linux way, but it's done all the time on Windows anyway - they can offer binaries to all Linux distros with equal ease.

  15. Re:Developers, developers, developers on Steam For Linux Will Launch In 2012 · · Score: 2

    Multi-platform yes. Linux only, what on earth would be the point of that? It's hardly an ideal gaming system - my Nvidia drivers crash on me every week - but if you're supporting Android and OSX already, why not offer it too?

    I notice that multiplatform games have done much better on Kickstarter. Probably a lot of gamers are pro-Linux in principle, but will buy the Windows/OSX version anyway if that's all that exists - and the companies know that. That logic does not apply for Kickstarter funding, though - there buyers' enthusiasm is absolutely crucial.

  16. Re:Developers, developers, developers on Steam For Linux Will Launch In 2012 · · Score: 2

    Whoa, that reminds me! I actually bought that one when I saw that it had Psychonauts, but never got around to playing it.

    Yeah, the HIB ought to put to rest the notion that Linux users won't pay for software (at least not software of an artistic character). We're on average paying more than both Apple and MS users.

    I think it's owed to the success of Android and desktop Apple (but NOT iOS, due to its oppressive restrictions on programmers). Portability has become a big selling point for middleware, and once you're supporting three platforms, it's not so hard to add support to the fourth (which is similar to the second and third anyway).

  17. Re:Hard to insure on NC Planners May Be Barred From Using Speculative Sea Level Rise Predictions · · Score: 1

    Climate models aren't opaque, and they aren't untested. They're based on physical realities and tested against the climate - both past and present.

    Measuring temperature via satellites is not really that different from measuring it with tree rings, or measuring it with the thermal expansion of quicksilver. Some measurements are more direct, some are less, but the uncertainties can (and must) be dealt with anyway. They are. Until recently, satellite measurements were poorer than ground-based measurements due to problems with resolution, calibration, etc. If you have been told that mainstream climate science "sorely misses" the fact that we've only had satellites for a few decades, you have been sorely (and deliberately) misinformed.

    The harm is not "over the horizon of proof". There is plenty of short-term danger and costs, from storms, heat waves and sea level rise in particular. It just won't reach a directly civilization-destroying level in our time (well, not for us in the rich world at least).

  18. Re:Hard to insure on NC Planners May Be Barred From Using Speculative Sea Level Rise Predictions · · Score: 1

    We'll see? I don't know about you, but I doubt I will. in 2100 I will be 119 years old if I'm still alive.

    The time perspectives we are talking about are unfortunately what permits denialism to keep existing.

  19. Re:Hard to insure on NC Planners May Be Barred From Using Speculative Sea Level Rise Predictions · · Score: 1

    Yeah, mass murder and sequestration is easy! But reducing emissions, that's just crazy talk!

  20. Re:Hard to insure on NC Planners May Be Barred From Using Speculative Sea Level Rise Predictions · · Score: 1

    Until? Reinsurance companies (the ones selling insurance to insurance companies against really big disasters) have been worried about global warming for a long time. People who think it's just alarmism could make a killing by offering reinsurance at lower rates.

  21. Re:FLAC and MP3 format? on "Open Source Bach" Project Completed; Score and Recording Now Online · · Score: 4, Informative

    FLAC is lossless, so go ahead and encode it yourself. You've got one format of quality, and one format that plays on even the dumbest of devices - makes sense to me.

  22. Re:free != easy on "Open Source Bach" Project Completed; Score and Recording Now Online · · Score: 1

    So, what you get is the ability to import it to non-free notation software? And... inferior ones at that? (Or so I hear. I haven't used Finale since its pre-OSX days, but I've heard no one claim it made prettier scores than Lilypond).

    Lilypond does of course give PDF and midi exports as well.

  23. Re:free != easy on "Open Source Bach" Project Completed; Score and Recording Now Online · · Score: 4, Insightful

    It seems a little backwards, though. Lilypond may be hard to use, but it's very powerful and produces gorgeous scores - and all the variations are on Mutopia already.

  24. Re:He doesn't get it on Free News Unsustainable, Says Warren Buffett · · Score: 1

    I'm not saying he's buying newspaper in order to buy political power. I'm saying if he isn't, he's needlessly buying them at a premium, because less scrupulous investors are certainly pricing this into the stock.

  25. Re:..came on.. on Iran Reverse Engineers Cobra Attack Helicopter · · Score: 1

    Human beings are actually more important than ever,

    Yeah. At least, those behind the controls.