Slashdot Mirror


User: Harik

Harik's activity in the archive.

Stories
0
Comments
494
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 494

  1. Re:well what ISPs released the info? i want to avo on Even My Mom Could Hack These Sites · · Score: 1, Offtopic

    Wow, isn't that an exploit of the moderation system?   That's pretty awful.

    Did you bring it up with the admins?   "Hey, some jackasses gamed a single post of mine to
    get me banned."

    Then again, this is the slashdot moderation system we're talking about here.

  2. Re:Well on Two US States Restrict Used CD Sales · · Score: 4, Interesting

    Eh. CDs and DVDs are so light and cash-dense that they were commonly ripped off and pawned.

    Basically, you run into the average house, what's the most valuable stuff you can steal in a few seconds? If you think "The TV!" ... yeah, what pawnshop is going to take a TV missing the remote and half the cables? Obviously hot. On the other hand, right next to it is a nice big media rack with tens (hundreds?) of light, portable $20 bills.

    If they've got time, they'll clean you out entirely, but for quick petty theft, they go for the easy score. And, given college students pawning their CDs all the time anyway, it's not too unusal to see it happen.

    So, MAFIAA influence and some crime numbers made this happen. I think it's stupid, but used-CD stores were becoming fences, and that's not good for anyone.

  3. Re:There is no free lunch, kids on Mercury Contamination Vs. Energy-Efficient Lightbulbs · · Score: 1

    What we have, then, amounts to a legislated loss of quality of life because we won't take the easy steps. This hasn't come as a surprise - The granola crowd have pointed out the damage we do for decades if not centuries. Only now, and only by threat of legal force, have we started to change our behavior.

    That's actually a lie. It means I have to suffer with shitty showerheads and low-flow toilets that use MORE water because you don't turn them off and you have to flush twice or three times.

    Of course, I immediately put in the high-pressure nozzle replacements (SO MUCH NICER) and better toilets, but everyone else still wastes more then they did before the horribly misguided regulation.

    Whee!

    So what have we learned? Aside from the obvious "nothing", it's that you can't legislate efficiency very well at all. CFLs take too long to warm up? They get left on 24/7. Cataletic Converter in your car clogged and killing performance? Ram it out to a straightpipe, who cares about the environment? New environmentaly-friendly freon replacement? Crank the AC on longer and spew more mercury into the air instead.

    Also, who the fuck brings cloth shopping bags to the grocery store? I mean, seriously? You really do? 90% of my shopping doesn't result in bags, at all. Go to a warehouse store. Shelf->cart->scanner->cart->car. And each product has less waste because I buy a decent amount at a time. Cooking from-ingredients has a much higher food:waste ratio than microwave dinners. With a family of four, I take out a single can of trash every ten days (on average). My neighbors put out two cans twice a week. (Yegads, HOW DO YOU GO THROUGH THAT MUCH JUNK?!?) Our recycling program went kaput after Katrina as well, who knows if it'll start up again. I'm sure as hell not going to go hunting for a dropoff point for the few things I need to deal with.

    Count me in the crew that likes the ultra-white "blueish" CFLs, for whatever reason the 'colder' colors look 'bright', and my remaining incandescents and 'soft white' CFLs look dirty yellow. For those playing at home, that's NuVision ultra-bright (or true-bright) and a higher wattage rating then the incandescent they replace. I don't like the 60w CFLs, but 75 or 100 look fine to me.

    So there, I'm doing my bit to assist with the environment, save myself money and headaches at the same time. Now to get the 5 grand set aside to replace all my windows with double-pane argon for more savings.

  4. slashdotted on A Look at the Compiz and Beryl Merger · · Score: 4, Informative

    corel cache is up here.

  5. Re:That's not the case here on The Air Car Nears Completion · · Score: 4, Insightful

    I really hate this myth.

    Fossil fuels _ARE_ extremely energy dense and thus good for cars. But if we could loslessly transmit that energy from a big honking power plant to vehicles, it wouldn't "shift the polution", it'd OVERALL REDUCE IT. A fixed-speed generation engine with millions of users to spread load out and cost-effective pollution scrubbing is going to put out a lot less crap into the air then the equivilant number of small, badly maintained, stop and go vehicles.

    Just because our current power generation comes from badly maintained coal plants doesn't mean it HAS to be that way. There are a lot of benefits to efficiences of scale.

  6. Re:Disruptive technologies... on Five Things You Can't Discuss about Linux · · Score: 1

    for the same reason we get flash banner ads telling us to "Make the Switch - To Vista" on slashdot.

    Taco sold out.

  7. Re:"Web Developer" on Demystifying Salary Information · · Score: 1

    The sites are bullshit, though. I threw in a completely bogus job description (no formal education, 2 years experience, bla bla bla) and it told me that it was worth... 85k a year.

    In central Florida.

    Um, yeah. Nobody's paying 85k a year for inexperienced highschool dropouts. I think they're falling prey to e-bragging "Oh yeah, well _I_ make 120k a year and get to use the company porche!" and don't have any real numbers. Because if it were true, the IRS would wonder where all that payroll tax was going to...

    Around here, "tech jobs" are 25k a year outsourced callcenters. "Senior Management" means someone who didn't get fired on their 90 day probationary period, and is now in charge of answering phones AND training newhires.

    No, that's not the majority of Central Florida positions, but this isn't San Fran during the dotcom craze, either. Anyone using this site is a complete retard and hopefully gets fired for asking 20-50% more then they're actually worth.

  8. Re:How is this "news for nerds"? on Major Broadcasters Hit With $12M Payola Fine · · Score: 2, Insightful

    Wow, that was rather dumb.

    Even more so that OH NOES they had to pay a 12 million fine... Yeah, I'm sure clearchannel is crying all the way to the bank over that. 120m, they might notice. 1.2 billion would be an actual fine and a reminder to not fucking break the law.

    But 12m? Oh well, I guess we'll just have to ask Sony to "advertise" their music a bit more next year.

  9. Re:Protected memory on Secure Private Key Storage for UNIX? · · Score: 3, Interesting

    Er, Lots of stuff lives in ring0, and any vulnerability in ANY of it removes your "protected memory".

    You can play games with hypervisors (can protect memory even from 'ring 0') or treacherous computing chips, or things like USB keystores with biometric authentication. But on vanilla 80386 machines, the best you're going to get is the OS to memlock() a few pages so they can't get swapped out to disk.

  10. Re:Illogical on Couple Who Catch Cop Speeding Could Face Charges · · Score: 1

    Some people are not cops.
    Cops are people.
    Therefore, some cops are not cops.

  11. Re:You know, you have to laugh. on HD-DVD and Blu-Ray Protections Fully Broken · · Score: 1

    Since I can't edit: Whoops! I'm wrong. Duh. While the production key does make the disk cracking processes easier, I realized that DURR there can be only one content key, no matter how many player keys. So if the pirates simply release the content key it also hides the compromised player key used to achieve it.

  12. Re:It's not the software. on "Very Severe Hole" In Vista UAC Design · · Score: 1

    It's not sudo. Sudo is utterly useless on a single-user machine.

    Hint: Do I care about the OS files that come on a CD in the back of every linux magazine, or my personal documents? Sudo protects one of them, and not the right one.

    Linux and OSX have the same problem, a simple rm -rf $HOME snuck in, say a ./Configure script from a server compromise would royally fuck a lot of users.

    The IDEA of LUAs is great. Microsoft's implementation, as usual, is horrible.

  13. Re:The fact that he's a blogger is beside the poin on Interview With Jailed Video Blogger Josh Wolf · · Score: 1

    Actually, the press was an arm of law enforcement. The protections the mainstream media has now are mostly post-watergate. Before that, talking to a reporter was equivilant to talking to a cop in the eyes of the law.

    There's a reason it changed to the current status, and if maintaining this requires changes to the way we handle compelling testimony, it may be required.

    But who am I kidding? Like there's any chance of that happening. It's more likely that every recording device will have to be licensed and every second of footage submitted to a government agency for 'review' before the judicial system changes its ways.

  14. Re:BD+ anybody? on HD-DVD and Blu-Ray Protections Fully Broken · · Score: 1

    BD+ is just a method of small-batching production. Hundreds or thousands of disks per content key rather then millions. If I buy two copies of King Kong, they may not have the same key... but it doesn't help, since content ripped once is content ripped forever.

  15. You know, you have to laugh. on HD-DVD and Blu-Ray Protections Fully Broken · · Score: 4, Insightful

    AACS/CSS/Security through telling people "don't do that" is trivial to implement, for as good as you can possibly get it (fundamental flaw in the design) and they STILL managed to fuck it up.

    Basic concept: Encrypt a disk with a key that only the player has. If the player key is compromised, all disks are cracked.

    "fix" #1: Encrypt the disk content a random key, encrypt that disk thousands of times with a library of pre-generated keys. Assign each player a key, quit putting that key on the disk when it's found to be compromised. Of course, you now have to re-encrypt thousands of keys for every title released, leading to possible exposure of the master database.

    "fix the fix": Randomly create a single "production key", encrypt it with every player key, and give the 'blob' to every HD-DVD production facility. Now exposure is limited to one key that can be changed without exposing the master keylist.

    Except someone was terminally lazy, and only did it ONCE. So EVERYONE USES THE SAME PRODUCTION KEY. Way to go! If you gave each studio their own, then compromises would be limited to a single studio's works (that were produced before the key was changed).

    Worse, you introduce an attack vector to your management that effectively hides it's origin. Any hardware or software player could be compromised, or you could have an inside leak of the key. As long as the exploiter doesn't say "I got this key from Sony's HD-501 player" you have no idea how they aquired it. Basically, they completely and utterly shat on the key-revocation scheme, with no possible solution.

    Whoops.

    Dear MPAA: Please contact me before starting your next hairbrained content protection scheme. You can pay me millions rather then billions and I'll give you one that's not so embarassingly horrible. I'm no cryptogropher, but goddamn, it's not like you hired any security people for anything you've done yet anyway.

  16. Re:Oblig. on Fight Spam With Nolisting · · Score: 1

    Agreed. Who is stupid enough to delay mail for an hour? I use graylisting for all incoming mail. It adds 5 minutes to first-time-senders (by MX, not email address), and after that they're whitelisted for a month.

    Costs:

    Guaranteed 2 delivery attempts from RFC compliant software (for the first message). While this does shift some cost off of your machine unto other's servers, each server only has to bear it ONCE. As long as they keep delivering mail at least once every 30 days, email behaves normally. In this case, it's no different then having a single mailserver outage for 5 minutes one day, then back to normal uptime.

    Some sites have a fastpath/slowpath mail delivery system, where mail is tried exactly ONCE from
    their primary server, and anything that can't be instantly delivered is dumped to a slower queue on a seperate server. For those, fastpath will always fail.

    Some mail lost: There ARE some legitimate mail sources that do not retry, notably high-traffic mailing lists. They are categorized in a hardcoded whitelist to mitigate that problem.

    Pros:
    Spammers don't retry. No, they don't. It makes no economic sense for them to attempt to defeat graylisting. A) They don't know if they were graylisted or blocked. B) When you're trying to deliver 10 million emails, that's a fuckton of retries to queue. C) You have to use the same sender/mailer/recipient combo exactly to get past it. That's a bunch of state to manage when normally they just randomly generate one as they fire off.

    The only ones who bother are the image-based stock pump & dump scams, because if they can get their mails through at all, they get to profit from idiots buying their penny stock.

  17. Re:The size will be the limiting factor not DRM. on The First HD DVD Movie Hits BitTorrent · · Score: 1

    Er, no. Currently HD standards are DVD5 for 720p and DVD9 for 1080i/p. Most movies fit well into those container sizes using x264 2-pass compression.

    Until saturday, the High-def source was capturing HBO-HD and other channels and saving them as raw transport stream files. See: Usenet. Raw filesize for mpeg2 .ts is between 12 and 20gb depending on bitrate and movie runlength.

    The main issue with transport streams is glitches, and shoddy compression. You end up with fairly bad artifacting on "high-def" movies, even with very high bitrates. This is usually due to one-pass fixed bitrate compression just to 'get it out there' quickly. The pleebs don't notice, but the quality-concious do. Lots of work is required to clean up the atrocious HBO encode to make is look decently. Then, a 2 or 3-pass x264 is done, and you end up with a higher-quality image on a much smaller storage size.

    HBO-HD also broadcasts horrible audio quality, so you have to demux the DTS5.1 audio from the DVD release, then remux it into the HD encode. Any alternate cuts between the DVD and HD releases have to be carefully worked around via either removing bits of the DTS5.1 audio, or upmixing stereo into 5.1.

    Enter HD-DVD (and BluRay as well) Now you have a high-quality source without artifacting, and high-quality audio. It can be released as-is, made into an x264 transcode for some savings (20% without any quality loss) or taken all the way down to DVD9 1080p with DTS5.1. The upshot is that you end up with MUCH better source quality then digital cable, so you move more bits unto real details and less on re-encoding artifacts.

    Nobody's (seriously) talking about making a CD-sized xvid rip from HD-DVD. There's no point, the DVD Xvid rips have been out for years already.

  18. Re:Another reason I won't upgrade on Some 'Next-Gen' DVDs May Not Work With Vista · · Score: 1


    Last count, I owned nearly 500 DVDs.

    And that's about as far as my relationship with these companies go. I--a legitimate, paying customer--am unwilling to be inconvenienced one single second, or pay a single extra dollar, to be treated like a criminal.

    I'd like to point out that people like YOU are the reason the studios know they can get away with this shit. "Wah wah I won't be inconvieninced", except for those 5-10 minutes of unskippable "previews" to movies that are already in-theater, into dollar theater, HBO, DVD+rentals, daytime TV movie, discount bin at the dolar-store.

    Won't pay a single cent more? So you bought all your DVDs from the Indian region code for 20 rupees? No, you spent $15-$25 USD on each and every one for Region 1 disks.

    Won't be treated like a criminal? So I take it you've never seen the 60 second unskippable THIS IS THE FBI YOU ARE A CRIMINAL FOR WATCHING THIS MOVIE?

    Now that I've tromped on all of your points, I'd invite you to attempt to rebut any one of them. The fact is, I don't buy DVDs. The last media format I purchased with any regularity was laserdisk. It had it's problems, but draconian DRM for profiteering wasn't one of them.

    Keep bending over and taking it in the pooper like you've always done. The studios need good cattle like you to keep their business trips to thailand well-supplied with underage prostitutes.

  19. Blacklists are (nearly) useless. on SORBS - Is There a Better Spam Blacklist? · · Score: 1
    Breakdown of a single day at one of my servers:

    91 Relay access denied
    135 http://www.spamhaus.org/SBL/sbl.lasso?
    2306 http://www.spamcop.net/bl.shtml?
    4364 greylist expired 6007 Sender address rejected
    41144 Helo command rejected
    117479 Recipient address rejected

    As you can see, the most common hit is trawling for valid names. Second most common hit is people claiming to be the domain they're sending to. we've got postfix set to say 'F off' to any machine that lies in HELO, fails to use a FQDN or a ton of other mistakes.

    After that, we've got the 400 series errors of cannot lookup sender addresses, followed by greylisting expirations, and finally, the two RBLs actually used on this machine, and finally open relay probes.

    What's not listed is the multiplicitive effect of HELO and greylisting blocking, and that's pretty hard to determine. Someone will have to honeypot that one to get some numbers, but a HELO block stops a host from sending ANY spam to you. How many mailadmins out there see their (decently populated) servers only get a single email when a spamrun is in progress? Exactly. Same with greylisting. Spammers consider any error a permenant fail (for that run) because it's more time-efficient to just go on to the next email then to keep a retry queue. Since they never try to send the same email again, they never get through the greylist (since it's based on host:sender:recipient) tuples.

    On my personal server, I don't even use RBLs anymore, they are too prone to false-positives for the tiny amount of spam they do catch. And politically, while vengance and retribution seems like a cunning plan, in reality the only people who ever suffer are the collateral damage. Deep-pocket ISPs with 2-3 year downstream contracts and painful early termination clauses keep a lot of collateral damage from being able to vote with their wallet. Plus, thanks to ARIN's inability to move forward with IPv6 in a reasonable fashion, or give portable netblocks to people, moving is exceptionally painful for basically everyone except the largest players (who are not generally colatteral damage). The big losers here are the joejob victims who get blacklisted, small businesses who lose contracts due to having their email blocked, medium buisnesses and small ISPs who have to play whack-a-mole on customer servers trying to find the exploit-of-the-week that allows formmail/mail relay/postmaster bounce spam. The winners are big fat companies like MCI, since they get spammer buisness, and lock their non-spamming customers into contracts that don't let them move when their service is impaired. (Nobody considers being on a blacklist grounds for early termination, or even downtime. OBVIOUSLY you did something wrong to get on it.) And of course, dedicated mail-hosts who are the last resort when you're locked into listed netblocks.

    Of the winners and losers, who do you see posting to NANAE? What sides do they take on the RBL issue? Isn't it interesting to follow the money?

  20. Re:knowing verizon... on Verizon Can't Do Math · · Score: 2, Insightful

    actually, as a verizon wireless customer, I pay ZERO dollars per megabyte on my cellphone. Unlimited data plan. So, going from ZERO in the states to 'nearly zero' in Canada (You know, NOT a third world country) isn't exactly a giant leap to make.

  21. Re:PG question. on PostgreSQL 8.2 Released · · Score: 1

    from my reading of it, it updates y=(serial counter), ordered by z

    An iteration on set data.

    so for
    y, z
    0, 1
    0, 2
    0, 3
    0, 5

    you end up with
    1, 1
    2, 2
    3, 3
    4, 5

  22. Re:www.vmware.com on Novell CEO Gives Behind the Scenes Account of Microsoft Deal · · Score: 1
    Now you are just making stuff up. If there's a reason to do that, it's only because of the applications (i.e. third party service) running on the box and pretty has nothing to do with Windows. It's very much possible to write a service for Linux that would basically bring the system to it's knees.

    I mean, I hate to be defending freaking M$ here, but who are you guys trying to fool? Do you think you are doing the Linux community a service? Because I can guarantee you that avid/competent Windows users are not going to read this and go "ah! we switcheth the boxen to Linux!"

    See, here's the difference. You CAN'T defend windows on that ground. The OS is incredibly fragile and third party apps really fuck it up. Sure, if you just run a stock install with no third party apps (including "third parties" like Microsoft Exchange, or Microsoft SQL server), windows will happily keep running and accumulating a queue of criticial updates.

    While a third party app can bring linux to a crawl, a reboot doesn't "fix" it, because the problem is generally that the application's load is requiring more resources then the hardware has available. Rather then the microsoft case where the cause is generally massively leaked memory/other resources that is solved by a reboot. Hence the 'Rebbot exchange server at least once a week, once a day for busy sites.' doctrine. I've never heard anyone advocate regular reboots for a linux box. (Well, except from Windows admins.)

  23. Re:Asshats on Russia Agrees To Shut Down AllOfMP3.com · · Score: 1

    Geez. "Production costs", what a joke. "Production Costs" are an accounting trick where you subtract your profits (from your wholly owned subsidiary production studio) from the profits on an album/movie to make sure you can claim it made no money. Yeah, major labels will front you a quarter mil, which goes directly back to their studio time, producer time, promotoer time.... and comes out of your royalties. SO GENEROUS OF THEM.

  24. Re:This is consumer America on The PlayStation 3 Launches In the U.S. · · Score: 1

    If you read the G-GP post, someone who pays cash for a car like that is probably _NOT_ just stuffing the money in his mattress in the meantime. A monthly payment into a compound-interest earning investment can generate you 20k within 5-6 years trivially.

    As a quick example. If I buy a 20k car now, 5 years at 5% APR, my monthly payment will be 377.42.
    If I buy a 20k car 5 years from now and invest at 5% APR, my monthly payment will be 294.09. That takes 5 grand off the price of the car. You only have to do it once with a beater for 5 years and you can have nice cars the rest of your life.

    _AND_ I can skip payments if I'm having problems WITHOUT losing my transportation.

    If I buy a used car, they only run 10-12k for a 2-3 year old off-lease in very good condition. Good luck getting 5% financing
    on a 3 year old car.

  25. Re:But they were cheating! on Blizzard Unbans Linux World of Warcraft Players · · Score: 1

    Bah, stupid AC. I can burn my Karma, so can you.

    I don't have everybody. I think the Wine/Cedaga team is pretty cool. I think the standalone Blizzard games were fun to play. I think WoW was a great game... when I played it in 1992. When it was called "DikuMUD". But static classes, continual grind and trivially automatable gaming (But banned if you do!)? That's hardly 'fun'.

    If we're trying to see who's the best at something a computer can trivially do, let's have a game where you just get two numbers and add or multiply them! It'd be FUN! You get 1 point for each correct answer, and 0 for each incorrect answer, and there's a leaderboard that shows how many you did. Throw in a horribly bloated but graphically pretty client, and draconian anti-cheating measures. Require a webcam to prove you're not using a calculator or getting help... or outsourcing to china.

    It sounds like FUN!