But then it is worth remembering that Mr. Gibson is an alarmist who talks an awful lot of self-indulgent crap.
Remember, if he were to be believed the Intarweb would no longer exist due to non-superuser raw sockets in Windows XP. Oh, and he still has the "next generation" DDoS attack article up, detailing the next generation attack and his wonderous solution. Even though the problem had been encountered and solved many moons ago, the solution being far more comprehensive and elegant.
I can't believe that Slashdot, who have been a staunch supporter of GNU/Linux for so long, would link to such an ill-informed and negative review.
Firstly the review advocates Windows users not bothering to switch unless they absolutely have to, but also the FUD about Linux + Apache being insecure due to the (now patched) OpenSSL vulnerability was ridiculous. Sounds like a MS shill to me...
Then, to cap it all, advocating choosing RH7.2 over RH8.0 was ludicrous. The reasoning goes along the lines that 7.2 has been in development longer than 8.0. WTF? That doesn't even make sense.
I've downloaded 8.0 for my home network and installed most services, and it all works fine for me. Whoever wrote that article doesn't know what they are talking about.
I think it is because they are obsessive. No, really - these people are the ones who think that Free Software (TM) is the only ethical way of producing software.
Don't agree? Fancy a giggle? Then read this question's answer. I found it most entertaining, whilst ensuring they get zero credibility.
Whilst there are cases where you are correct, the one you cited was a poor choice. I assume you are referring to 'shatter' as written by Fat^H^Hoon. The article was submitted to both slashdot and kuro5hin, and despite anti-MS bias (esp. on slashdot) the majority of people laughed at it.
Everyone agreed that the problem is with the application, not the messaging system. If I am a normal user, then why the fuck do I have a dialog window with root privileges? It's like creating a unix app that pipes commands to suid-root bash and granting execute permissions to all users. Then you can claim that the unix pipe commands are insecure because it allows you to pipe "rm -rf/" to this higher privilege process...
Incidentally, MS make no secret about this, and have acknowleged the possibilities way before Foon did - their stance I believe is "security ends at the desktop" which is exactly where it should end. If an app vendor chooses to give users a dialog running as root then it's clear who's to blame.
I and many people would disagree. This person's post quite nicely explains things, so there is no point me repeating it.
Yes, I'm all for enforcing grammar where it matters. I happen to think that correct usage of apostrophes is important, for example. In this case however, we are kowtowing to rules that have been outdated for centuries and have no impact on comprehension.
Split infinitives are a relic of old language and no longer of any importance. Slashdot makes so many terrible grammar gaffes that it seems a shame to waste corrections on such insignificant transgressions.
Do they use it only once? No. They use it every time verification is needed. Hence, not a one time pad, retard. (Different angles give different patterns, but since they need to be known about beforehand there is only a finite number, so the same patterns will be repeated)
Also, one time pads are for reversible cryptography. You know, when you write a message and someone has the audacity to expect to be able to read it at the other end. This is not reversible. It is a one way function, 'tard. You would be better comparing this with an md5 than a one time pad.
Jesus, do you actually know anything about cryptography, cock gobbler?
Well, I can't seem to find any of the really good ones, but this should give a good example of mass. Yeah, the top's baggy, but you can clearly see the outline of his gut pushing the fabric out front.
When someone releases a new car, other manufacturers don't sue them because it's better. I would give more analogies, but why bother? It's clear to anyone who'll actually think about it rather than just seeing the word 'sue' in the contect of 'this day and age' whilst nodding sagely.
Please try to keep posts on topic. Try to reply to other people comments instead of starting new threads. Read other people's messages before posting your own to avoid simply duplicating what has already been said. Use a clear subject that describes what your message is about. Offtopic, Inflammatory, Inappropriate, Illegal, or Offensive comments might be moderated. (You can read everything, even moderated posts, by adjusting your threshold on the User Preferences Page)
1 mole of gas at RTP fills 24 litres (or was it 12?) and there are 6.022*10^23 atoms in a mole. So, assuming a handful is 10ML, it'll be have in the order of 20-21 zeros.
Put another way, about 16 orders of magnitude over 50,000. But these are rough estimates from memory.
He's probably just a respected member of the company in a senior position, who politely asked the right people. MS don't have to be unreasonable just because you dislike them, you know...
picture NSA computer geeks running from one terminal to another with DLTs......such that data could only flow in one direction.
Strange though it may sound, that does still happen. OK, not necessarily NSA, but I know for certain that some defence installations in the UK do that - it's known as an 'air gap'. They are paranoid to the extent that they do not trust cryptography at all for really sensitive materials.
True, but I'd like to see you go to a new website and send your CC details to it via quantum encryption.
In those terms, quantum encryption sets us back to way before we had public key encryption. Except now it's not just key distribution that's the problem, but the actual comms link. I know I don't have the appropriate wire leaving my house to Amazon...
Even more important, wrt option 8: Unixy people are always going on about how applications should do a single small task, and just connect to other apps that do different tasks.
I believe the term they use for all-in-one clients is "bloatware".
Yes, people have always copied music to tapes. This is lossy and slow, and hard to distribute. Yeah, so you'll copy a CD a couple of times and give it to the two friends who wanted it.
Burning CDs. Not lossy, but slow and hard to distribute. Same sort of distribution as the tapes, but with the possibility of n+1th generation copies.
Ogg/MP3/WMA - initial, insignificant quality loss, with no further loss on generational copies. Seriously easy to distribute. When I am on Gnutella, I usually limit to between 4 and 6 simultaneous uploads. They are always maxed out, with a queue of people waiting for the slots to become free. If I left my computer on the network for 24 hours, I could reasonably expect to have uploaded a couple of hundred songs. See the difference?
Now, I've already admitted to pirating music - the important fact is that I realise it is wrong, rather than trying to claim I have a God given right to so so.
Slashdot Mirror
Makes me jizz.
Remember, if he were to be believed the Intarweb would no longer exist due to non-superuser raw sockets in Windows XP. Oh, and he still has the "next generation" DDoS attack article up, detailing the next generation attack and his wonderous solution. Even though the problem had been encountered and solved many moons ago, the solution being far more comprehensive and elegant.
With your fucking translucent fucking case motherfuckers.
Firstly the review advocates Windows users not bothering to switch unless they absolutely have to, but also the FUD about Linux + Apache being insecure due to the (now patched) OpenSSL vulnerability was ridiculous. Sounds like a MS shill to me...
Then, to cap it all, advocating choosing RH7.2 over RH8.0 was ludicrous. The reasoning goes along the lines that 7.2 has been in development longer than 8.0. WTF? That doesn't even make sense.
I've downloaded 8.0 for my home network and installed most services, and it all works fine for me. Whoever wrote that article doesn't know what they are talking about.
Don't agree? Fancy a giggle? Then read this question's answer. I found it most entertaining, whilst ensuring they get zero credibility.
Everyone agreed that the problem is with the application, not the messaging system. If I am a normal user, then why the fuck do I have a dialog window with root privileges? It's like creating a unix app that pipes commands to suid-root bash and granting execute permissions to all users. Then you can claim that the unix pipe commands are insecure because it allows you to pipe "rm -rf /" to this higher privilege process...
Incidentally, MS make no secret about this, and have acknowleged the possibilities way before Foon did - their stance I believe is "security ends at the desktop" which is exactly where it should end. If an app vendor chooses to give users a dialog running as root then it's clear who's to blame.
I assume you want to be the giver - do you have a large volume of erectile tissue in your penis with which to ravage my anus?
Oh yeah, because after all everyone else on Slashdot is technically competent.
Maybe I need those pills I get emailed about?
Yes, I'm all for enforcing grammar where it matters. I happen to think that correct usage of apostrophes is important, for example. In this case however, we are kowtowing to rules that have been outdated for centuries and have no impact on comprehension.
Split infinitives are a relic of old language and no longer of any importance. Slashdot makes so many terrible grammar gaffes that it seems a shame to waste corrections on such insignificant transgressions.
That is all.
Also, one time pads are for reversible cryptography. You know, when you write a message and someone has the audacity to expect to be able to read it at the other end. This is not reversible. It is a one way function, 'tard. You would be better comparing this with an md5 than a one time pad.
Jesus, do you actually know anything about cryptography, cock gobbler?
A good 110kg I reckon.
Have you seen any pictures of him?
When someone releases a new car, other manufacturers don't sue them because it's better. I would give more analogies, but why bother? It's clear to anyone who'll actually think about it rather than just seeing the word 'sue' in the contect of 'this day and age' whilst nodding sagely.
Important Stuff:
Please try to keep posts on topic.
Try to reply to other people comments instead of starting new threads.
Read other people's messages before posting your own to avoid simply duplicating what has already been said.
Use a clear subject that describes what your message is about.
Offtopic, Inflammatory, Inappropriate, Illegal, or Offensive comments might be moderated. (You can read everything, even moderated posts, by adjusting your threshold on the User Preferences Page)
1 mole of gas at RTP fills 24 litres (or was it 12?) and there are 6.022*10^23 atoms in a mole. So, assuming a handful is 10ML, it'll be have in the order of 20-21 zeros.
Put another way, about 16 orders of magnitude over 50,000. But these are rough estimates from memory.
He's probably just a respected member of the company in a senior position, who politely asked the right people. MS don't have to be unreasonable just because you dislike them, you know...
Strange though it may sound, that does still happen. OK, not necessarily NSA, but I know for certain that some defence installations in the UK do that - it's known as an 'air gap'. They are paranoid to the extent that they do not trust cryptography at all for really sensitive materials.
Either way, it still seems to me that the age old key distribution problem is back. Unless there's any other tech you'd like to inform me about...
Maybe it's talking about asymmetric crypto - then the statement is true. It's not really any news that symmetric crypto can be unbreakable.
In those terms, quantum encryption sets us back to way before we had public key encryption. Except now it's not just key distribution that's the problem, but the actual comms link. I know I don't have the appropriate wire leaving my house to Amazon...
I believe the term they use for all-in-one clients is "bloatware".
Burning CDs. Not lossy, but slow and hard to distribute. Same sort of distribution as the tapes, but with the possibility of n+1th generation copies.
Ogg/MP3/WMA - initial, insignificant quality loss, with no further loss on generational copies. Seriously easy to distribute. When I am on Gnutella, I usually limit to between 4 and 6 simultaneous uploads. They are always maxed out, with a queue of people waiting for the slots to become free. If I left my computer on the network for 24 hours, I could reasonably expect to have uploaded a couple of hundred songs. See the difference?
Now, I've already admitted to pirating music - the important fact is that I realise it is wrong, rather than trying to claim I have a God given right to so so.