Slashdot Mirror


User: spinkham

spinkham's activity in the archive.

Stories
0
Comments
975
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 975

  1. Re:The vulnerability on Flash Vulnerability Found, Adobe Says No Fix Forthcoming · · Score: 1

    Adobe does have a fix for this behavoir, and it's Flash Meta Policies.
    http://www.adobe.com/devnet/flashplayer/articles/fplayer9_security_03.html

    Of course, they're only available to flash 9 and 10, but the people running Flash 8 still have worse security problems to worry about.

  2. Re:Hackers Diet FTW. on Why Doesn't Exercise Lead To Weight Loss? · · Score: 1

    We go to a larger "family" oriented gym in our area which has a good mix of people. Some of the other gyms in our town are "meathead only", but if you shop around you can probably find a nice fit for you.

  3. Re:.01 and the TV Myth on MythTV 0.22 Released · · Score: 1

    Mythbuntu. MythTV done Easy.

  4. Works for me on Some Early Adopters Stung By Ubuntu's Karmic Koala · · Score: 1

    I have 2 fresh installs and 1 upgraded from jaunty, and they all work fine for me.. In fact, they work much better then the previous version on my laptop with Intel x4500 integrated video.

  5. Re:More reason to be a ZFS fanboy on ZFS Gets Built-In Deduplication · · Score: 1

    Linux md softraid lets you add and remove disks, change raid levels, and generally do other awesome stuff.

  6. Re:Lenovo on Who Installs the Most Crapware? · · Score: 4, Insightful

    Or anyone in the security community. MS used to be the industries' vulnerable software whipping boy, but they've cleaned that up to a large degree and outsourced the job to Adobe...

  7. Re:BS? on Reliability of PC Flash SSDs? · · Score: 1

    The one in my shower light only got turned on once or twice a day, and would be on for 30 minutes or so. Yet it would die in a few months, even with an exhaust fan running in the room. The same bulbs in other areas of the house have lasted for years with more light cycles and other abuse.

    See also the EPA energy start faq: http://energystar.custhelp.com/cgi-bin/energystar.cfg/php/enduser/std_adp.php?p_faqid=2567

  8. Re:BS? on Reliability of PC Flash SSDs? · · Score: 1

    Also, don't use in rooms with showers.
    I use CFL, and the ones in dry rooms last a long time, but the ones I put in my bathrooms kept dying. Humidity shortening the life of CFLs is a known problem.
    I've since switched to halogen bulbs in the bathroom and they work better for me with some power savings over normal incandescents.

  9. Virtualforge has really good XSS and CSRF vids on Impressing Security Upon End-Users Visually? · · Score: 1

    http://www.virtualforge.de/vmovie.php

    the XSS and CSRF videos are very good visualizations for the common user using simple examples.

  10. Summary misleading on 1/3 of People Can't Tell 48Kbps Audio From 160Kbps · · Score: 4, Insightful

    The summary is quite misleading.
    It sounds like 100% of the participants could tell the difference between the two encodings, just 1/3 of the people thought the more simple, clean, highly compressed version sounded better. 2/3 of people thought the high bitrate version sounded better.

    When choosing compression, the better way to go is to shoot for transparency versus the uncompressed source, not which audio sounds better to your ears.

    That's why ABX is the industry standard for compression comparison, not a simple AB test as in this experiment.

  11. Re:I wish my state was like New Hampshire.... on FBI Bringing Biometric Photo Scanning To North Carolina, Via DMV · · Score: 2, Informative

    Yeah, I didn't mean to imply that you were required to say those things over and over, just don't say much else. Most police officers are decent enough people, and just trying to offend them doesn't do anyone much good. Endeavor to be as polite as possible, but don't respond to questions that start with "May I?" in the affirmative. Avoiding saying yes is much harder then you would think as police practice how to get you to say yes without really thinking through what you've done.

    Also, if you do end up saying those things a number of times, by all means rephrase them. "Am I allowed to leave now?" "May I go now?".. Etc.. Don't be a jerk, or the courts might accept your actions as probable cause. But also realize they're trying to manipulate you, and get away as soon as you are allowed.

    Especially with drug enforcement being what it is in some districts, all it takes is an officer planting (or truly accidentally dropping) a single seed on you or your car, and your whole life can be upended. 99% of cops are decent people, but our laws are what they are to protect the abuse by the minority.

    Also, note none of this applies to border crossings or airports. The courts have mostly held that you have pretty much no rights in those places.. But even so, you can still fly without ID, just expect a rigorous search and possible short detention first.

  12. Re:I wish my state was like New Hampshire.... on FBI Bringing Biometric Photo Scanning To North Carolina, Via DMV · · Score: 5, Insightful

    Any interaction with police not involving a motor vehicle should involve primarily these phrases:
    "Am I being detained?" "Am I free to go?"

    If you are being detained, stop and identify laws in about 1/2 of the states allow officers to demand identification. See http://en.wikipedia.org/wiki/Stop_and_Identify_statutes#States_with_.E2.80.9Cstop-and-identify.E2.80.9D_statutes Even in most of those states, you are only required to state your name, not provide documents or any further information besides your name.

    You new script is now:

    "I do not consent to a search" "I do not wish to answer questions without a layer present"

    See http://www.flexyourrights.org/street_stop_scenario for the slightly more complicated automobile case.

    Police officers script many of their interactions because of the legal requirements.. You should also.

    Note, much of this advice I've received from police officer friends. Endeavor to be polite, but don't give up your rights voluntarily. If the officer has probable cause to hold you or search your belongings, they will make that clear and won't ask for your permission. If they're asking, not telling, say no.

  13. Re:It's 1996 again? on FCC Chairman Warns of Wireless Spectrum Gap · · Score: 2, Insightful

    So you're saying it wasn't a physical limitation of the broadcast medium at all, it was a hardware limitation of the receiver.

  14. Re:Outward facing systems ... on Sloppy Linux Admins Enable Slow Brute-Force Attacks · · Score: 2, Insightful

    Right, what doesn't stop a targeted attack can still be quite useful against random opportunists/bots, which make up the lions share of attacks.

    There's at least 3 levels of security: defense against worms and opportunists, defence against target attacks from script kiddies, and defense against targeted attacks from skilled attackers. Against a skilled attacker, you will lose if they want to dedicate enough time to attacking you.

    However, 99.99% of attacks are of the opportunists and script kiddie level.

  15. THC? Thought that was myspace... on Is Cloud Computing the Hotel California of Tech? · · Score: 1

    Myspace reminds me of THC, and I kinda get the munchies when going there too.. Face book, not so much...

    Wait, we were talking about personally identifiable information here, not drug songs? My bad..

  16. Re:Terrible on First Look At Wild New "Level 10" Concept PC Case · · Score: 1

    Yeah, much rather have a decent sized case with oversized fans like this one for $54 bucks:
    http://www.newegg.com/Product/Product.aspx?Item=N82E16811129042

    I'd spend the extra $646 and, you know, buy the rest of the parts for a pretty good machine..

  17. Re:Screw "nonviolent" resistance... on Revisiting DIY HERF Guns · · Score: 1

    Strangely, many in the US are willing to die for freedom, but so few are willing to live for it.
    Write your congressmen. Vote, in elections both large and small. Local elections and national primaries effect you so much more then the final national elections.

  18. Re:is there any other way to prevent crowd dispers on Revisiting DIY HERF Guns · · Score: 1

    In the US, the primaries are where the real democracy happens, and most people only vote in the final election if at all. It's easier to complain and buy guns I guess.

  19. Re:Streisand Effect on TI vs. Calculator Hackers · · Score: 4, Informative

    And just in case you forget how badly that went down, here's a reminder...
    http://www.youtube.com/watch?v=bSQIoXf294E

  20. Re:Mandatory? on Security / Privacy Advice? · · Score: 4, Informative

    Good idea, but you'd have to dial it back a notch for most corporations.
    Try these:

    MI6 head outed on facebook by his wife, with many details. Viewable by all of the "London" network.
    http://www.mailonsunday.co.uk/news/article-1197562/MI6-chief-blows-cover-wifes-Facebook-account-reveals-family-holidays-showbiz-friends-links-David-Irving.html

    Bank intern fired for lying about a family emergency, then pasting party pics of him dressed up as a fairy on facebook:
    http://valleywag.gawker.com/tech/your-privacy-is-an-illusion/bank-intern-busted-by-facebook-321802.php

    Another example of being fired for putting dumb stuff on facebook:
    http://www.liquidmatrix.org/blog/2009/08/13/social-networking-fail-fail-fail/

    Plenty of fail, Safe for work.

  21. Re:rdiff-backup: like rsync with versioning on Best Backup Server Option For University TV Station? · · Score: 1

    Does it store diffs of large files with small changes, instead of storing the whole file? If you have a 2 TB file with a small 1K metadata change in it, your solution will take 4TB, and rdiff-backup will take 2TB + 1K + a few more K for dir overhead.

    rdiff-backup is a huge win if you have large files with small changes, such is often the case with virtual machines.
    Otherwise, backuppc or backula or other simple link based replication deduping would be better.

  22. Re:He'll stop complaining when... on Snow Leopard Missed a Security Opportunity · · Score: 1

    Oh no! Security researchers will continue researching security! Who would have guessed?

    There's a difference in finding flaws in the state of the art, and talking about a product that is 3-5 years behind the state of the art. I would say his complaining is directed at the latter.

  23. Re:The problem is in job responsibility on SANS Report Says Organizations Focusing On the Wrong Security Threats · · Score: 1

    Of course, none of the above finds publicly unknown bugs such as you'd have in custom apps, that's a whole different suite of tools/professionals..

  24. Re:The problem is in job responsibility on SANS Report Says Organizations Focusing On the Wrong Security Threats · · Score: 2, Informative

    Cassandra is probably the best resource for that, you can build a profile of the software you use, and it will alert you when a vulnerability is fixed in that software.

    Secunia of course offers commercial tools, but I've never used them, so not sure how useful they are.
    http://secunia.com/advisories/business_solutions/

    Also, vulnerability management/discovery software like NeXpose or Nessus also can find many similar problems, especially if you give them access credentials.

  25. From the "No Duh" department... on SANS Report Says Organizations Focusing On the Wrong Security Threats · · Score: 4, Funny

    Wait, let me get this straight... Attackers are going after the things that aren't getting fixed as quickly? Who would have guessed!