Slashdot Mirror


User: Seven+Spirals

Seven+Spirals's activity in the archive.

Stories
0
Comments
552
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 552

  1. Blade Runner vs Phillip K. Dick on 'Blade Runner 2049' Isn't the Movie Denis Villeneuve Wanted to Make (vice.com) · · Score: 4, Interesting

    I've read most of Phillip K. Dicks' works including "Do Androids Dream of Electric Sheep?" I have to say that the original Blade Runner was the very definition of "adaptation" when compared with the book that inspired it. The narrative is different on so many levels. They hardly resemble each other. The way the megacorporations are described in the book is much different than the way they are portrayed in the film. There are a large number of missing characters etc... All that aside, I liked both. They were both interesting to me. So is Blade Runner 2049, too. Just judge it on it's own merits. Don't worry about the problems the producers, directors, writers, and actors had. Screw them. They get enough undeserved attention already and will whine about their jobs just like anyone given the chance. I care about the story and the escapism. Don't bring me down telling me what a hard time the poor director had. Cry me a freakin' river. The guy is rich and probably getting laid right now.

  2. CISC is, ahem, WAY better than RISC for ASM coders on Linux Now Has its First Open Source RISC-V Processor (designnews.com) · · Score: 1

    RISC-V is cool insomuch that it's free as in freedom. However, as an ASM programmer, I won't be touching it. As others have already pointed out more eloquently, the RISC idea was to make up for lack of decent ISA with compilers. For the most part, it worked out. However, it doesn't change the fact that most RISC processors are freakin MISERABLE to program. I'm speaking from everyday experience. People might complain about x86 having some stupid addressing modes, but trust me, that's NOTHING compared to how austere the environment is when you are doing modern ASM on an RISC based system. I'm much more excited about the non-open source Apollo M68080 core for AmigaOS (and possibly Macs and Atari ST's soon). It's not going to excite the *nix crowd, and it's not free or open source. However, it's much fun & easy to write ASM on. I'm not dissing the RISC-V, it sounds like they already have compiler back ends lined up. So, that should be interesting, but as an ASM coder, I'm not especially interested in RISC-V. I could make a LONG post of the things I'd miss if I had to stay on a RISC platform. However, few others would, since almost everything is in C or C++ that matters nowadays.

  3. Pwn Congress and you to can rip off America on How Comcast is Shortchanging Customers In Vermont (wired.com) · · Score: 4, Informative

    They pwned congress. Game over. Maybe a new name is in order. I nominate one of these: Comca$t, ComCaste, ComAssed, Comlast. Someone else can do better, I'm sure.

  4. Stack Exchange already bad along w/Java security on Java Coders Are Getting Bad Security Advice From Stack Overflow (helpnetsecurity.com) · · Score: 1

    FTFY

  5. Re:Nasty incident at an automation software hut on Ask Slashdot: Share Your Security Review Tales · · Score: 1

    It was the most I'd ever made (and still is, honestly) before. I actually didn't want the job but this contracting firm was really desperate to find someone with actual "hacking" experience. I had previously had a job through them developing a test framework for network intrusion detection appliances. In many cases I was simply permuting already existing hacking/DDoS tools to try and evade detection or blind the NIDS sensors. Unfortunately, the test harness turned out to be a little too effective (the client was so disgusted with overall performance they put off the buying decision). Granted that was around 2006 things are MUCH better now. However, that apparently gave me the street cred. So, I told him $400/hr since it was two hours from my house etc... They didn't even bat an eyelash and agreed immediately. I was a bit shocked and left with further questions like "How much are *these* guys charging them?!?"

  6. Re:Buffer Overruns on Ask Slashdot: Share Your Security Review Tales · · Score: 2

    Man, I had the exact same experience nearly. I was a n00b C coder in an embedded shop. I thought "These guys are veteran coders who can put me up on some real design patterns." Turned out that was mostly right, I met some badass C++ and TCL coders (the TCL guy was hyper-smart, he wrote a huge part of the ATC code still out there in a lot of airports). However, the place had two bosses (Bob) and one of them was a self-proclaimed "20-year veteran". He really had been coding in C for most of that time, but MY GOD HE SUCKED. His code was a full of unchecked bounds as one could conceive of. I couldn't bake in that many buffer overflow exploits or string format problems if I tried. He was asking me to fix a munged pointer that was giving him problems. I found the problem immediately, but realized his code was a goddamn mine field waiting to kill us all. I showed the other boss and he was like "*sigh* don't say anything to him or he will just freak out. I'll fix the problems you found quietly." That made realize why he sucked so much. While I was on IRC asking idiotic questions and getting the turds knocked out of me by the Aussies on the #c channel on Freenode, I was improving. It was painful, but that's what code reviews with smart people will do to ya. This guy had never once submitted to someone else's opinion. His code showed it!

  7. Nasty incident at an automation software hut on Ask Slashdot: Share Your Security Review Tales · · Score: 5, Interesting

    I was summoned by a contract firm to a 500 person company that had been a victim of an inside job. They wanted a security review and fixes for "whatever that guy did". Turns out the guy was a half-assed developer. The client had spotty and in some cases non-existent backups. They wanted to pass a SOX audit (hahahaha!) while 20-30 machines were completely pwned and backdoored. He'd used everything from sub7 to more modern remote access & control tools. Some of the tools looked like ones he'd cobbled together himself from other tools. He'd also got in and falsified and buried a bunch of code hacks in their version control repo. Luckily, I was able to get that off tape and they only lost about a MONTH of code/work. The FBI got involved because the guy was out of state. I spent about 3 weeks gathering evidence and rebuilding servers, routers, print-servers, and other devices he'd hacked or otherwise tainted. My fees amounted to around $30k. A federal DA charged him with about 10 different hacking related and felony vandalism charges. After a pretty short trial (no jury) he was found guilty and he's still in the same federal prison in Louisiana. He actually has a cell near Bernie Ebbers. I had to talk to him once while he was in prison to get some passwords. The whole thing was surreal. Now get this, on the SOX audit? They passed! They got dinged for the hack but they still passed even before I was done cleaning up. That's when I realized that CISSP/SOX/GLBA/PCI security and *actual* IT security aren't always aligned. Audit all you like, but ... "stay frosty and alert. You can't afford to let one of those bastards in here."

  8. No good deed goes unpunished. on Unselfish People Are More Likely to Wind Up With Depression (vice.com) · · Score: 2

    Nice guys appear to not only finish last, but end up homeless and needing anti-depression drugs, too. Greeeaaaaattt. CEO psychopaths will inherit the Earth!

  9. Re:2017 will be the year of the Linux desktop! *YA on System76 Pop!_OS Beta Ubuntu-based Linux Distribution Now Available To Download (betanews.com) · · Score: 1

    There's a whole lot of subjective "me" in that comment but very little objective "fact". Look if Linux doesn't work for you, okay. You found something else to use? Great! I think we've all moved past the idea that there will ever be a year of the Linux Desktop.

    Well, given that early 1990's now-defunct operating systems showed more integration and functionality, I'd say 20-something years of failure ought to tell you something is wrong.

    They seem to me like 20-something bearded hipsters trying to Python-script their way to Linux desktop glory.

    Really?! These people look like 20-something hipsters? Have you ever worked in a programming job? Because these folks look exactly like the last three groups of folks I've worked with which is typically a pretty diverse mix of folks.

    Yes. Really. Did you even *look* at the link you posted. Just like I said, pudgy bearded hipsters abound. The receptionist is nearly the only exception. Like I said I work close by. What's up, did that hit too close to home? You work there or something?

    I give up. I declare the Linux desktop fragmentation thoroughly fatal.

    Well I'm sure we're all glad that you've finally declared that. We have all been waiting with bated breath for you to go one way or the other. We can all now rest easy knowing for sure which way you lean on the matter.

    You're welcome. Now that Python IDE is calling, you'd better get those DBUS scripts finished and make sure they integrate with Systemd, brah.

  10. 2017 will be the year of the Linux desktop! *YAWN* on System76 Pop!_OS Beta Ubuntu-based Linux Distribution Now Available To Download (betanews.com) · · Score: 2, Interesting

    Been using Linux off and on since 1993 with the now-defunct SLS distro. I drank the kool-aid back then. Now it's been 24 years now. The closet thing to a fun and attractive (to me personally) desktop there has ever been was using Enlightenment v14 (not the new phone-canvas garbage). In my opinion and experience, GNOME and KDE are big buggy jokes filled with Pottering-like personalities, lame half-working applications, and dozens of abortive ideas piled quickly on top of each other.

    I also work very nearby the System76 folks. They seem to me like 20-something bearded hipsters trying to Python-script their way to Linux desktop glory. Good luck with that. At this point, after 24 years of crap-on-crap, I give up. I declare the Linux desktop fragmentation thoroughly fatal. At least it keeps these lamers all in one place, though. There is that!

  11. I'm actually not sure at all. All I know is that, whatever it is they do, they couldn't do it to my ancient Phillips Xenium. I presume they steal your address book to see if you know any "terrorists" and probably try to crack/hack any apps like Telegram they believe might be a juicy pile of ISIS communique.

  12. This is exactly what I do, also. I use a Symbian phone (an Early Phillips Xenium) that simply doesn't have the ability to run "apps". It doesn't support bluetooth for anything but headsets (but I turn that off anyway). So yeah, like you, I go out of my way to be on an obscure platform nobody cares about. Guess what they did with the phone last time I went through customs? Handed it back saying "We can't read this." Inside I was playing a little violin for Big Brother and cheering for the phone.

  13. Never bet on the apocalypse on Mathematical Formula Predicts Global Mass Extinction Event in 2100 (vice.com) · · Score: 1

    "Nobody gets rich betting on the apocalypse." At least that's what my dad would say whenever I start spouting tinfoil-hat end-of-the-world chicken little BS. I don't really care though, I'll be long dead by then. In the meantime, you guys can pave the planet. *shrug*

  14. tl;dr after HTML 1.1 - Content code on HTML5 DRM Standard Is a Go (arstechnica.com) · · Score: 1

    The whole appeal of the web to me as as an information source, not a bunch of assholes begging me to run their crappy code or carry around their tracking devices (cookies et al). I could personally care less about CSS, Javascript, etc.. I ain't the one, guys. Run your malware ad-code and CSS dancing reindeer on *your* browser. Mine says no-habla. If that means I can't watch Netflix on my *nix boxes, oh well. I can do that on my 3DS or Playstation. This DRM "standard" will just become another attack surface full of exploits, mark my words.

  15. Re:By all means do on Equifax Stock Sales Are the Focus of US Criminal Probe (bloomberg.com) · · Score: 1, Insightful

    Aww C'mon, they haven't replaced everyone with H1B's, pushed mandatory overtime on the survivors, thrown a million-dollar hookers & blow party, pumped and dumped the stock (much), bought a Ferrari with company funds, looted the 401k, laughed at hapless investors on "private" concalls, or properly sexually harassed all their admins.

    So, they have lots of executive stunts left to pull.

  16. Psychiatry is medieval on Researchers Find Antidepressants Increase Risk of Death (medicalxpress.com) · · Score: 2

    About three years ago my wife started hearing voices. It got progressively worse until it was happening 22 hours a day or so. She went through all kinds of hell trying to get help and when she did they put her on a huge panoply of drugs. The drugs never helped. Some did make her into a zombie so she couldn't scream at the voices as much, but they didn't really help her. She'd struggled with depression, anxiety, and other less severe mental illness for about 15 years before the voices. She took SSRI's, Trycyclics, a few novel drugs, and if they ever did anything it was just a negative side effect. After dozens of doctors visits, 20 years of struggle, and trying just about ever treatment under the Sun, drugs have never worked. The only thing that ever showed any promise was when she was doing Cognitive Behavior Therapy. That actually had some incredibly good results, but the problem is that it's real work. For someone who can't concentrate, is clinically disorganized, and simply can't think without being interrupted by voices, CBT is too hard.

    I haven't given up trying to help, but I have given up all hope that any of these doctors have clue about what they are doing. It doesn't help that you normally get super-short appointments with them (10 minutes is a long one). It also doesn't help that it's super-expensive.

  17. Countermeasures available to non-Apple users on Every Major Advertising Group Is Blasting Apple for Blocking Cookies in the Safari Browser (adweek.com) · · Score: 1

    Self-Destructing Cookies is a great Firefox plugin that sandboxes cookies and deletes them with a configurable interval. Thus, you can still use sites that break when you disable cookies. It also supports deletion of Adobe Flash ghost cookies, you probably have *never* cleared out.

    Personally, I also use NoScript and Ublock Origin to further make life hard on the blackhats trying to pwn my browser, use me to gather data, or track me constantly. I prefer my web with passive content. Once you ask me to run code, I'm off the bus unless you have a really, really good reason, and let's be honest - you fsking don't have one.

  18. Exactly. SSL seems to be one money grubbing corporate shill back-slapping another. It's web-of-trust requires trusting entities that nobody in their right mind could or should trust.

    As far as FTP goes, there is no analog to something like proftpd which has all kinds of cool options (like upload download ratios, advanced per-user chroot support, encryption, or RADIUS accounting support. You aren't going to find a WebDAV service that supports all that. It's not a valid replacement for FTP.

  19. Re:That's not how it will work on Windows 10 Will Soon Give Users More Control Over App Permissions (engadget.com) · · Score: 2

    This. That's exactly what I've noticed. The last time I used IOS and Android, neither will let you assign granular/discrete permissions. It's all or nothing. Interestingly, Blackberry 10 already has this feature. The commenter's statement turns out to be exactly what happened to the native Blackberry 10 applications. You can refuse to grant the app this or that permissions, and in turn it'll simply re-display the permissions dialog or rage-quit because you won't grant 100% of everything it asked for. I've used IOS, Android, and BB10. Now, I've gone back to Symbian on a phone that is incapable of installing apps. It's a Phillips Xenium and the battery life is about three weeks.

  20. Re:The Linux community attacks itself the worst. on Torvalds Wants Attackers To Join Linux Before They Turn To the "Dark Side" (eweek.com) · · Score: 3, Insightful

    Agreed. Someone forgot to tell Linus that hacks == cash. Few are going to help out him and Pottering out of goodness of their hearts and devalue their zero-day bug bounties. That's goes 2x now that systemd is a standard. With all the systemd security bugs and crashes, it makes me wonder how much undiscovered zero-day is in the wild already.

  21. Linus check yourself before you wreck Linux on Torvalds Wants Attackers To Join Linux Before They Turn To the "Dark Side" (eweek.com) · · Score: 0, Troll

    Pottering is the #1 reason why smart people leave Linux for the "dark side". If Linus wasn't keeping company with GNOME zealots and Windows-coders his argument might make sense. Best I can tell, BSD is a bigger brain drain on Linux than Windows or OSX. Witness the ZFS-on-FreeBSD beating seven shades of snot out of BTRFS as an example.

    Sorry Linus but in the face of all the hard feelings over systemd and other Pottering-style stunts the "attacks" are simply a sign that Linux is no longer the cool OS for 37337 H0x0x0rs, white security researchers, or folks with good intentions wanting to help you hack together your franken-OS. They moved to BSD a long long time ago.

  22. Can I have your bandwidth when you die? on Traditional Radio Faces a Grim Future, New Study Says (variety.com) · · Score: 2

    Netkids don't "get" commericals. That's because they suck and contrary to popular believe, the kids on your lawn aren't as dumb as the media likes to act. Nothing can save their business model, but it's likely that if we moved the tech beyond HD radio and streaming titles, new opportunities would open up to a mixed-mode digital & analog radio that had more interactivity between listener and DJ, fan ratings, show movie previews, etc.. Even if you don't use the FM band to transmit, there is an awful lot of bandwidth there to receive. There are soo many possibilities there.

  23. The best language, methodology, algorithm, compiler, toolchain, and design pattern is the one you *know*. I swear, there is more "gimme a shortcut to a $$$ job in IT" than I've ever seen (even in bodybuilding people don't lie as egregiously). People always want to find a shortcut. The truth is that the worthy pursuits that build your earning potential and coder-cred require mucho effort. Generally speaking, the folks with the most enthusiasm win because that gives them the most sticking power when they encounter all the crappy parts of being a coder &&|| a student. People who got into programming because they wanted a stable job are usually not the rockstar coders. In short, it pays to be passionate about it. If you can't be: think twice about doing it for a career.

  24. IOS vs Android vs Blackberry 10 vs Symbian: perms on Hit App Sarahah Quietly Uploads Your Address Book (theintercept.com) · · Score: 1

    I owned phones with IOS, Android, and Blackberry 10. Android and IOS (at least the versions I had) would only allow you to accept *all* of the permissions the application wants (all or nothing). At least Blackberry 10 would let you refuse individual permissions while accepting others. It rarely works, though. On Blackberry, the apps will double-check that they are getting whatever permissions they want and will refuse to start if you selectively disallow a few.

    Today I use an early Symbian phone (Phillips Xenium) that won't even run apps at all.

  25. High five. Exactly.