Slashdot Mirror


User: matfud

matfud's activity in the archive.

Stories
0
Comments
879
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 879

  1. Re:Why is the industry still using pseudo-randoms? on Google Admits Bitcoin Thieves Exploited Android Crypto PRNG Flaw · · Score: 1

    I am not disagreeing with the point the it should self seed securely. I was saying it is nigh on impossible to check a seed to ensure it is secure. So it is not really possible to throw an exception if an insecure seed is used. This should not affect the default constructor (which should be reasonably secure and seems to be on other platforms). The sun docs do suggest (as an example) that this seed should come from a entropy source such a /dev/(u)random for a psudo random number generator.

    but if you use a true random number generator under the hood (as many SOC's do have one) then a seed makes no sense

  2. Re:Java has gotten to obscure on Google Admits Bitcoin Thieves Exploited Android Crypto PRNG Flaw · · Score: 1

    No the docs for android java are from google and quite different from those from Sun/Orcle
    http://developer.android.com/reference/java/security/SecureRandom.html
    compare to
    http://http//docs.oracle.com/javase/6/docs/api/java/security/SecureRandom.html

  3. Re:Amateurs. OpenSSL is _not_ the problem. on Google Admits Bitcoin Thieves Exploited Android Crypto PRNG Flaw · · Score: 1

    Are you complaining about the api docs from SUN/Oracle or those from google as they are very different.

  4. Re:Why is the industry still using pseudo-randoms? on Google Admits Bitcoin Thieves Exploited Android Crypto PRNG Flaw · · Score: 1

    Sun/Oracle have very different documentation for SecureRandom to that in androids API docs.

    However the kind of guarentee you ask is not really possible as SecureRandom is part of a service api. That is it can be implemented by a variety of underlying random number generators (psudo or real).

    However wrote the service provider for the openSSL initialization on android made a mistake. The android javadocs make this mistake worse as they discourage the use of setSeed saying it may be insecure. Suns docs do not say that. However is is true in that if you provide a dodgy seed you will not have reasonable random numbers generated

  5. Re: Finally Fixing the Date stuff on Love and Hate For Java 8 · · Score: 1

    There certainly are more symbols and many are similar or used in place of the operators you know. Convolution can be expressed as a "*" or as a "x" with a containing circle.

    Just read APL code for an example of why so many operators are necessary to write code handling arrays let alone matracies.
    Is that readable (well yes for me it can be sometimes) is it ascii? nope.

    Simple operations on complex numbers can just about be coped with. Everything else makes the small number of over loadable operators in a language like C++ pitiful and more importantly painful.

  6. Re:Printers on Are We At the Limit of Screen Resolution Improvements? · · Score: 1

    Oh a feel like a rant now :)

    People can easily see the difference between things but that is not any way to measure the quality of what they are seeing. Just as people can tell the difference between a coat hanger and a 99% pure copper audio cable. Yes they may sound minisculy different but neither is better.

    sort of how you can measure something on a linear scale or a vernier scale. The instruments are the same but one lets you measure it more accurately by using our ability to notice tiny differences without judging them much. Neither is better or worse unless you can measure it. If you can not measure it it will be judged as a matter of preference.

  7. Re:Printers on Are We At the Limit of Screen Resolution Improvements? · · Score: 1

    A laser printers dpi is not directly comparable to a screen dpi. Printers have overlapping "dots" that are not always symmetrical. Even in black & white printers have for a long time been able to modify the size of the "pixels" they produce. This helps massively with handling aliasing artefacts.

    Colour laser printers tend also to print colours over earlier pigments to produce the required tone. This is unlike display tech that requires spacial separation for RGB element (possibly RGBY or RGBG) masks.

    A kindle can produce very high resolution as regards to seeing letters on a white background but it does not have a very high dpi. Could I tell the difference between one and a paper back? Yes the paperback would have paper bleed. (I still prefer holding a book)

  8. Re:Yummy Means Never Endangered on $375,000 Lab-Grown Beef Burger To Debut On Monday · · Score: 1

    Them bison who numbered in the many tens of millions would perhaps make me disagree that they need to be herded or farmed. Current cattle yes but humans parcelled off the land, restricted growth, stopped migrations and then hunted bison to near extinction.

    I do not totally disagree but bison are now only extant because they are profitable and it is because we made their land non-survivable. We made the species dependant on us.

    The animals we keep are for food are now dependent on us for survival as a species. We have breeded them to be that way. I think that is a strange concept. Oddly most pets have not been breeded that way (cats, dogs, ferrets can all live without humans (part of the reason they are such a problem wrt native wild life)

  9. Re:UK court jurisdiction... on Luxury Car Hacker To Speak At USENIX Despite Injunction · · Score: 1

    Many places like Thailand do have laws against under age sex. If found you will be prosecuted locally. If not then a request for extradition can be placed to the US (as an example). Many countries will not comply with the extradition request as they deem the punishment in the country the offence occurred in to be unacceptable.

    That does not mean the person will get away with the crime as it is often also a crime in their home country. Many countries expect their citizens to obey their own laws even while abroad (and the law of the country they are in). Hence they can be prosecuted for the offence under their own justice system.

    The US is actually a bit of a git about this as they tend to refuse any extradition requests and often do not prosecute the offender. And the US military will not extradite anyone for any crime.

  10. Re:The Onion said it best on Qualcomm Says Eight-Core Processors Are Dumb · · Score: 1

    They have higher end models that cost $100000 I don't think that is really saving a lot of money

  11. Re:I've seen this before on Same Programs + Different Computers = Different Weather Forecasts · · Score: 1

    As an additional comment:

    There are reasons why people will pay a lot of money to use a POWER 6 and later processors

  12. Re:I've seen this before on Same Programs + Different Computers = Different Weather Forecasts · · Score: 3, Interesting

    Trig functions are nasty. CPU's (FPU's) tend to use lookup tables to get a starting point and then iteratively refine that to provide more accuracy. How they do this depends on the precision and rounding of the intermediate steps and how many iterations they will undertake. Very few FPUs produce IEEE compliant results for trig. Multiple simple math operations also tend to be rounded and kept at different precisions on different processors (let alone instruction reordering done by the cpu and compiler.

    GPU's are great performance wise at float (sometimes double) math but tend to be poor at giving the result you expect. Now IEEE-754 does not remove these issues it just ensures that the issues are always the same.

    It is why languages like Java have java.lang.Math and java.lang.FastMath for trig and the strictfp keyword for float and double natives. (FastMath tends to just delegate to Math but does not have to). strictfp can kill performance as a lot of fixups have to be done in software in the better cases (also hotspot compilation can be hindered by it) and in the worst cases the entire simple operation (+,-,*,/) has to be performed in software.

  13. Re:Here's the reason... on Tim Cook May Not Know Why, But Samsung Is Winning in China · · Score: 3, Interesting

    The US supplied funds and aid and instruction during WWII to what would become the National Liberation Front (Viet Cong) when the war ended. That conflict started against the british when soldiers where sent in to accept the surrender of the Japanese troops and police the region until france could handle it them selves. This started the First Indochina War.

    There are lots of reasons for this. The primary being that not all allies had quite the same goals in the second world war. America was working towards undermining the european colonial powers (post war). Other of the allies wanted to resume their empires. This partially determined which insurgents where sponsored by various allied powers during the war.

    History is never simple.

  14. Re:Because they will kill AND torture Snowden on US Promises Not To Kill Or Torture Snowden · · Score: 1

    Even EU countries will refuse a US extradition request unless the US prosecutors rule out the death penalty. This is still done on a case by case basis

  15. Re:Finally Fixing the Date stuff on Love and Hate For Java 8 · · Score: 1

    No JodaTime is the preferred way to handle date/time related things in java. a version of which is part of JDK1.8

  16. Re: Finally Fixing the Date stuff on Love and Hate For Java 8 · · Score: 3, Insightful

    As soon as you get beyond complex numbers you rapidly find out that there are not enough operators to overload for operator overloading to make much sense.
    is "*" the dot or cross product or is it convolution or is it correlation or autocorrelation?

    There are not enough operators to make it useful so you have to have method calls anyway. If you are calling methods then it is clearer to always call methods

  17. Re:And what most folks are missing... on Global Warming 5 Million Years Ago In Antarctic Drastically Raised Sea Levels · · Score: 5, Insightful

    The interglacial periods coincide with variations in the earths orbit.
    eccentricity, tilt and precession all interacting. So yes it is pretty well understood why glaciation occurs. Yes it has been taken into account. No it does no account for the current changes being seen.

  18. Re:Little known fact on New Thermocell Could Turn 'Waste Heat' Into Electricity · · Score: 2

    They can't as during Spring there is to much water behind the damns due to snow melt and rain. They are full. Also many of them are not designed for this mode of operation (such as having large resevoirs of water to "pump up"

  19. Re:Smart guns... on Hardly Anyone Is Buying 'Smart Guns' · · Score: 4, Interesting

    Perhaps the information is not available for the entire US population but it the FBI does very accurately track the information for officers. It turns out about 1 in 10 get thier gun stolen in the incident in which they are killed. About 1 in 20 are killed with thier own weapon.

    http://www.fbi.gov/about-us/cjis/ucr/leoka/2011/officers-feloniously-killed/officers-feloniously-killed

  20. Re:Smart guns... on Hardly Anyone Is Buying 'Smart Guns' · · Score: 1

    I don't know where you get that idea from.
    CDC says that of 16,000 total homicides i the US over 11,000 of them were caused by firearms

  21. Re:Burying the lede on MS Handed NSA Access To Encrypted Chat & Email · · Score: 1

    Leave the cat long enough and it will be dead. Sort of says a lot about National security.

  22. Re: Open airplanes on Boeing 777 Crashes At San Francisco Airport · · Score: 1

    As far as anyone knows flight 990 crashed deliberatly. The voice recorder does hint that it was not accidental. Still it was a pile of wreakage at the bottom of the atlantic so years later there was no conclusive decision.

    Even a simple failure in pitio tubes can be fatal. Hence an unfortunate incident. When the aircraft provides incorrect information it confuses the pilots.

  23. Re:Open airplanes on Boeing 777 Crashes At San Francisco Airport · · Score: 1

    Try C Stross, Glasshouse

  24. Re:News? on Patching Software on Another Planet · · Score: 1

    Far far older than that. It is not a new problem but it it a very persistent one. There are many ways to try and avoid the problem. Most do not work in practice. Priority inversion is quite tricky to deal with.

  25. Re:It's about cost on Ikea Foundation Introduces Better Refugee Shelter · · Score: 1

    I am sure I know less about it than you. The current tents are not designed for long or even medium term living. Unfortunately long term housing is what they end up being used for. Yes it costs more up front but so do adding sewers and water supplies. They are all a requirement for living healthily and reasonably.
    The problem with permanent or semi-permanent structures is that in many cases the "host" country does not want them. In disaster situations this idea is known to work. There are still people living in WWII prefabs in the UK.