Slashdot Mirror


User: Jordy

Jordy's activity in the archive.

Stories
0
Comments
486
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 486

  1. Re:Mentioned on ntp.org mailing list a while ago.. on Netgear Routers DoS UWisc Time Server · · Score: 1

    Another way considered is to configure a subnet visible to BGP and convince the ISPs to punch holes in the routing fabric. Send money.

    Actually they could cheat a bit and break their subnet down into a couple pieces and only advertise routes for those pieces. This is wasteful and will cost them some IPs and administrative work, but it will make the IP unroutable without any cooperation from anyone else.

  2. Re:DNSSEC seems awful overblown on DNSSEC: Good Enough? · · Score: 1

    Yes, but if you are in the position to be compromised by a man-in-the-middle attack, DNS redirection is the least of your problems. Why bother redirecting when you already get all their traffic? :)

  3. DNSSEC seems awful overblown on DNSSEC: Good Enough? · · Score: 3, Interesting

    Maybe I'm missing something, but DNSSEC seems to go a bit overboard when trying to fix the major flaw in DNS today, the ability to falsify records.

    Now, there are two ways to falsify records that I know of.

    The first is a cross-zone caching issue where a DNS response contains records for a zone it doesn't control. This is a rather simple problem to fix and requires no changes to the protocol bitstream itself (though changes are required to how the protocol is handled). It basically involves applying a trust zone model and tossing some previously useful records.

    The second is an ID prediction attack where a response to a DNS query is falsified by guessing the ID number of the query made by the DNS server. With a decent ID generator, this becomes difficult and you have to brute force the thing basically making it a one-in-a-billion chance. This is still too high, so modifications to the protocol bitstream are required to enhance the size of the ID field or add a secondary one. It is possible to hack in this with minimal compatibility problems, but it wouldn't be pretty. Alternatively having the DNS server simply query twice or use TCP would accomplish the same thing, though that slows things down a bit.

    I fail to see how the leap to a full blown cryptographic PKI was made. Sure, technically it may be better, but it is also complex, intrusive and adds only slightly more security.

    Personally, I'm happier with 99.999% security with minimal work vs. 99.99999% security with a complete overhaul of the system.

    Maybe I'm missing something.

  4. Re:You just know... on New Transmeta Chip: "Efficeon" · · Score: 2, Informative

    Weird things you find on Google:

    Duron = durare (Latin) "to last" + -on "unit"
    Opteron = optimus (Latin) "best" + -on "unit"
    Athlon = athlon (Greek) "prize"
    Celeron = celere (Latin) "quick" + -on "unit"
    Radion = "radiare" (Latin) "to emit light" + -on "unit"
    Pentium = pente (Greek) "five" + (marketspeak?)

    I'm guessing about Efficeon.. but:
    Efficeon = "efficiens" (Latin) "to produce"? + -on "unit"

  5. Re:Techies, Slashdotters, and voting on The "Techie" Vote? · · Score: 1

    Our founding fathers saw significantly death and destruction with their little dinky low tech weapons. The Civil War claimed over half a million people. That was almost 2% of their entire population at the time.

    So please don't give me that crap about them not knowing how deadly weapons were. They essentially authorized civil wars in the constitution.

  6. Re:Solution on Virginia Begins to Worry About Voting Machines · · Score: 1

    Uh. Well ok, but today it is also impossible for an individual to verify that their vote was properly accounted for.

    If you are willing to give up the ability to do that with an electronic system, then simply skip the receipt step and you have a system nearly identical to the paper version with the added benefit of much faster results.

  7. Re:Solution on Virginia Begins to Worry About Voting Machines · · Score: 2, Interesting

    This problem has been beaten to death. It is not hard to keep votes anonymous while at the same time providing the ability for an individual to verify their vote was counted accurately.

    Step 1. Take random number generator.

    Step 2. Take name, social, etc. and tack on random number. Hash. Toss random number. Run through an algorithm with built in forward error correction or other conversion to allow machines to check the number is valid/accurate without connecting to a central server.

    Step 3. Mail number to individuals.

    Step 4. Have machines ask for number.

    Step 5. Hash the votes for an individual with the number. Cryptographically sign and print on a receipt for the voter.

    Step 6. Provide a database of number -> vote record so that individual can validate their result after the fact. The receipt number should match the one in the database. If it does not, you have verifyable proof that there was tampering (instead of relying on a person's word).

  8. Re:Common? on Flavor vs. Flavour · · Score: 1

    GoogleFight says 2.7 million references of flavor and 770,000 references of flavour.

    In fact, color/colour, humor/humour, etc. all seem to show American English winning 4 to 1.

  9. Re:I have one on Time Warner Cable NYC Begins DVR Distribution · · Score: 4, Interesting

    The digital cable channels look fantastic - you can really tell the difference, especially when you pause the picture.

    I imagine that Time Warner NYC is just like every other cable company in the US and the first 60 channels give or take are analog.

    If so, how do those channels look with this device?

  10. Re:Evolution Screenshots cache / mirror of mockups on Ximian Evolution's New Clothes · · Score: 3, Interesting

    As I said in another thread. This interface is *very* similar to Microsoft Entourage. Not that there is anything wrong with that, but Entourage does a few other nice things to refine it a bit. Some screen shots of Entourage:

    Address Book w/ small buttons

    Mail

    Calendar

  11. Re:Outlook 2003 on Ximian Evolution's New Clothes · · Score: 1

    Woops. Forgot to add an image with small buttons of the address book. All the panes work with small buttons.

    Address Book w/ Small buttons

    As you can see this is very similar. I like the Entourage UI to be honest.

  12. Re:Outlook 2003 on Ximian Evolution's New Clothes · · Score: 1

    This interface is *very* similar to Microsoft Entourage (Outlook for Mac). The biggest difference is the buttons exist at the top instead of the bottom in Entourage. Even the order of the top row of buttons is the same: Mail, Address book (contact), Calendar.

    Here are some screenshots of Entourage:

    Calendar

    Mail

  13. Re:Big numbers... on U.S. DoD Commits To IPv6 · · Score: 1

    IP addresses currently take up 32 bits for the four octets. IP address will take up 128 bits. This means that any time you're storing an address it will take four times as much memory. A 32 bit processor will have to do eight loads and four compares to compare two IPv6 addresses;

    Most routers and OS's store IPs used for routing data in hash or trie data structures which will keep it from quadrupling the amount of RAM used. Since they are already using these data structures, the number of loads/compare ops is already fairly high and the larger IPs don't significantly impact their performance.

    The structure of IPv6 addresses (geographic dispersal with large chunks) can actually reduce the size border router BGP tables compared to the random variable width networks we have today.

    That isn't to say that the dedicated processors high end routers have for doing routing lookups won't slow down with the larger IPs, but often the router won't have to go beyond the first 32 or 64 bits before deciding which interface to throw a packet over.

  14. Public domain is the way to go on UK Govt Warned: Don't Buy GPL · · Score: 4, Insightful

    The most sensible license for government contracts is no license at all. In other words, public domain.

    There is no reason why publically funded IP should be copyrighted by a corporate entity.

    I could understand BSD if it was only partially government funded, but for anything paid for by the taxpayers... PD is it.

  15. Re:You Own the Bits, Not the Music on Sweden To Outlaw File Sharing, Crypto Breaking? · · Score: 4, Informative

    In the US at least, this is quite wrong in the case of all media except for software. Here you are sold music and books, not licensed except for digital distribution, but even then I've yet to see a license agreement stuck in front of all but a few instances.

    In the case of an audio CD, you own the bits itself. You can hand your CD to anyone else or sell it without contacting the copyright holder. You are restricted by law against copying it and using it in public performances.

    More importantly, with a license the company handing you the media can restrict how you use copyrighted media. A record label can not mandate that you can only play a CD on weekends no more than a book publisher can say you can only read a book once.

    One might argue that the government is issuing an implicit license for copyrighted media on behalf of the copyright holders, but even then the contract contains only things you can't do, not things you can.

  16. Re:why a chilling effect? on Europe To Force Right of Reply On Internet Communication · · Score: 1

    Since this requires knowledge of the owner of speech or at least the forum to reply, it would suggest the elimination of anonymous critism which is something rather sacred in the US.

    For example, I can get up on my anonymous soap box taking the form of a flyer I tack onto people's doors at night and claim that I believe Ashcroft to be the reincarnation of Hoover without the risque wardrobe. I can do this without fear that the government won't force anyone to give up my identity (though with Ashcroft running things I might be labeled as a terrorist as an excuse to do it anyway).

    Of course I may be misinterpreting this and heck, for all I know Europe doesn't have anonymous free speech.

  17. Re:Fossil Fuels on Widespread Use of Hydrogen May Hurt Ozone Layer · · Score: 1

    Hydrogen has to be produced. Currently, most of it comes from fossil fuels in a process that releases CO2. Some if it comes from electrolosis, which requires energy which comes from sources like burning fossil fuels.

    Putting aside the fact that hydrogen is a naturally occuring element and doesn't actually need to be "produced" except if you want it in large quantities and you don't feel like traveling to the Sun to get it, hydrogen is as much an "energy source" as gasoline (note: energy source is not a scientific term as energy is never created but rather transformed).

    Since I already brought up the Sun, let's take that as an example. The Sun is nothing more than a fusion plant running on hydrogen.

    Heck you don't even need to get as fancy as fusion. You can just burn hydrogen straight, add some water and a turbine and you have yourself a steam power plant using hydrogen as its primary fuel.

    Further more as you noted, hydrogen can be extracted from fossil fuels. What you failed to note is that the process of extraction can be powered by hydrogen as well. This is the case with methanol reformers in a number of fuel cell buses.

    Hydrogen is a battery full of stored energy just like the ocean, the air, hydrocarbons and every other atom in the universe. There is no such thing as an "energy source." Doesn't exist. Put it out of your head.

  18. Re:My own bets on PPC 970 Powerbooks and Powermacs in Production? · · Score: 1

    I'm confused. If Pixar is using Racksaver Intel/Linux boxes, aren't they 32 bit machines as well?

    64 bit machines aren't inheriently better for rendering. I mean, Intel's FPU is already at 80 bit precision.

    The only real benefit would be to stick more RAM in the machines.

  19. Re:New pseudonym? on 802.11g... It's Official · · Score: 1

    We've had too many Supers and Ultras lately. It is time for: Hyper Wi-Fi!.

    New Hyper Wi-Fi with super speed and ultra spiffy powers is destined for greatness.

    Ok. I'm done.

  20. Re:And still no Java on FreeBSD 5.1 Released · · Score: 1

    Repeat after me:

    "OS X is not a *BSD-based OS. I will no longer refer to OS X as a *BSD-based OS."

    Sure, there was some FreeBSD code pulled into OS X and quite a few of the utils themselves are the same as those in FreeBSD, but the kernel itself is in no way derived from *BSD. It is mach-based with a BSD personality tacked on.

  21. Re:NETCRAFT NOW CONFIRMS: *BSD IS DYING!!! on FreeBSD 5.1 Released · · Score: 1

    www.google.com, slashdot.org, www.amazon.com, www.redhat.com, www.cnn.com and any other major Linux host I can think of have no uptime charts whatsoever while www.freebsd.org does.

    The only Linux uptime host I could find was www.debian.org with about a year uptime.

    Besides that, their FAQ says that Linux boxes will cycle whatever number they measure after 497 days, so it is impossible for Linux to be in the top 50 since all of the hosts on there have been up greater than 497 days.

  22. Re:There's nobody stoping... on Researchers Looking at Alternatives to Palladium · · Score: 4, Insightful

    No, corporations want to control what you do with the works they sell you, something copyright nor first sale doctrine does not give them the right to do.

    For instance, a book publisher can not sell you a book you're not allowed to resell. They also can not forbid you from reading a book more than once or reading the book to your child.

    DRM enables copyright holders to completely eliminate used sales and move the entire world to a pay-per-view world. Even more, it allows the copyright holders to have a perpetual copyright; one that will never expire for as long as the work is encrypted.

    You will not "own" anything. Sure technically you own your DRM'ed digital music downloads, but just try to resell them.

    The "value" of DRM'ed goods is significantly less than physical goods, but people won't realize that until laws get put in place forcing retailers to mark these goods as such.

  23. Re:what wrong with the original? on Universal Alphanumeric Postal Code Proposed · · Score: 1

    ZIP codes are quite useful for postal carriers without computers. You must realize that ZIP code borders follow streets and aren't square areas.

    Every time they add a ZIP code it is to filter down the amount of mail coming into a particular area to make it easier to deliver.

    You are also guaranteed that two streets with the same name are never in the same ZIP code. A fairly useful feature whereas with this system, each code is a 1 square mile block and there is one case I can think of off the top of my head where two streets with the same name exist in the same one square mile block, but aren't the same street (on a city border).

    Also, the ZIP code does in fact map to a geographical area (very broad). The first digit is broad geographical area (0 is north east to 9 which is far west). The next two digits map to high population centers with main roads. The next two digits actually map to post offices (or postal zones in larger cities).

  24. Re:Some facts about our President on President Of India Advocates OSS · · Score: 1

    4. Dr. Kalam has been very supportive of humanitarian work. His team developed an ultra-light carbon composite for heat shields of ICBM Agni missile

    That statement made my day. I didn't realize building missiles meant to carry nuclear warheads was humanitarian work though. :)

  25. Re:Revival of a Program on Nucular Hydrogen Economy · · Score: 1

    Try 3mile island and chernobyl.

    Please don't bring up three mile island. Three mile island was the most overblown event of the decade. There has never been any proof that three mile island caused any health problems for anyone living in the area. Heck, in 1996 a judge dismissed 2,100 lawsuits because the plaintiffs had two decades to come up with proof of harm and could not.

    Chernobyl on the other hand is a different story. Just goes to show that you shouldn't let completely irresponsible people run poorly designed nuclear power plants.

    On the other hand, the original poster is correct. Nuclear power plant designs today are significantly safer to live next to than coal or oil power plants and significantly quieter to live next to than wind, far more ecologically friendly than hydro and a whole lot more ecologically friendly to build than photovoltaic cells.