Slashdot Mirror


User: loxosceles

loxosceles's activity in the archive.

Stories
0
Comments
176
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 176

  1. closed source on The New (Computer) Chess World Champion · · Score: 1

    Stockfish is only slightly weaker, and is open source.

    What's the point of closed source chess engines when a lot of engines are already far stronger than humans? Who's going to pay the money for a closed-source chess engine? Idiots? A grandmaster may want it to study its playing "style", and chess algorithm researchers might want it to study it, and other chess engine designers might want it to reverse engineer it, but there's no practical reason for even a strong chess player to buy chess engines anymore.

  2. 2-factor on Ask Slashdot: Convincing My Company To Stop Using Passwords? · · Score: 2

    FIDO alliance 2-factor hardware tokens, like YubiKey Neo.

    Until browsers roll out FIDO protocol support, a mobile app with normal OATH TOTP 2-factor (implementations include Authy, Duo Mobile, Google Authenticator, etc) is the way to go. And use a password manager for the 1st factor. When support gets baked in, the FIDO serviceclienthardware token protocol will dramatically improve usability of the 2nd factor.

  3. Re:If you have to ask /. on Ask slashdot: Which 100+ User Virtualization Solution Should I Use? · · Score: 2

    Hi! I'm your Slashdot assistant! I see you have misused the word "advise".
    "Advise" is a verb. You advise someone on some subject matter.
    "Advice" is a noun. You give someone advice.

  4. Re:Good luck for Holmes on Using Truth Serum To Confirm Insanity · · Score: 1

    Except that it does work for some purposes in some cases, as long as you're not expecting it to be a literal "truth serum".

    Anything that suppresses higher brain function will make someone more likely to self-incriminate. Anybody who has been to a party with alcohol knows this. It might also cause someone to make stuff up or engage in embarrassing behavior, but that's not the same as "truth serum doesn't work at all."

  5. Re:RHEL is for servers not desktops on RHEL 6 No Longer Supported By Google Chrome · · Score: 1

    Or you could look at a 1-2 year reinstall cycle as a positive: it's an opportunity to test and optimize your backup strategy, since desktop users rarely do that. You do keep backups, right?

  6. Re:Still relevant? on Ask Slashdot: How Do SSDs Die? · · Score: 1

    20GB is not enough.

    A fairly clean Windows 7 Pro VM I have (basic Word/Excel/Outlook/PP office, firefox, chrome, acrobat reader) takes up over 20G, mainly because of winsxs.

    I don't do much with that VM. IOW, it's not pristine, but it's a lot cleaner than most win7 systems.

    Windirstat reports 22.9GB in C:\windows with 13GB of that in C:\windows\winsxs

    Some of that might be ntfs's equivalent of symlinks, but properties on C: reports 24.1GB used, 4.5GB free (I need to resize the VM disk eventually). I don't believe the C: space usage is a lie, even if C:\windows is slightly overreported by windirstat.

  7. Re:Post bigotry here on US House Science Committee Member: Evolution Is a Lie From Hell · · Score: 5, Insightful

    People do not live in a vacuum. People who believe in imaginary friends and believe those imaginary friends have sent facts and instructions for how to live, usually want to make everyone else believe those facts and live according to those instructions.

    evolution, or lack thereof
    foreign policy with countries dominated by other religions
    the legal status of a fertilized embryo - stem cell research and abortion
    contraception, sex education
    porn
    many other social policies

  8. Re:I hope Yahoo loses. on Yahoo Sued For Password Breach · · Score: 1

    Salts, which are mandatory for good password storage, torpedo your idea. Sorry. Passwords stored without salts are vulnerable to rainbow table attacks.

  9. Re:TRWTF on Yahoo Sued For Password Breach · · Score: 2

    "It is always possible to recover a password."

    This is not true. If a password has more entropy than the hash being used, there will be collisions that make it impossible to tell what the original password is.

    This is a basic consequence of the fact that hash functions are irreversible and have fixed size. If you consider the space of all passwords of any length, there are infinitely many passwords (even if you limit passwords to those made of long strings of english words) that hash to a particular value.

    For the vast majority of passwords in use, the entropy is lower than the entropy of the hash, so it's feasible to construct mappings of possible passwords to hashes and determine the most likely password that way. It is not *always* possible to recover a password, however.

  10. Re:Well...not so much on Supreme Court: Affordable Care Act Is Constitutional · · Score: 1

    Doesn't matter if you're not for it, you're getting subsidized anyway.

    No health insurance company has an insurance class for vegans or paleo dieters who do 30+ minutes of cardio a day, because until there are cheap tech means of measuring compliance, implementing that would cause the insurers to hemorrhage profits due to cheaters claiming healthy habits, getting the discount, then having diabetes/etc when they eat sugar 24/7 and don't exercise.

    The Ins companies tend to only screen for pathological conditions, so trying to be healthy has negligible immediate monetary benefit over being average or slightly below average.

    I strongly believe that society needs to tackle the problem of convincing people to be healthy first, THEN move to a public healthcare system (for-profit insurers making money off of people's need/desire to be covered against catastrophic medical problems doesn't seem ethical to me).

  11. Re:Love Posner on Judge Posner To Apple & Motorola: Go Home · · Score: 3, Funny

    Goes to credibility, your honor.

  12. Re:So on Connecticut Resident Stopped By State Police For Radioactivity · · Score: 5, Insightful

    You think that cops should be allowed to detain you (you're placed under temporary arrest during a traffic stop) merely to give you helpful health and safety information?

  13. GITS on Ask Slashdot: Which Comic Books To Start My 3-Year-Old With? · · Score: 1

    Ghost in the Shell manga. You can find scans of the whole thing.

  14. Re:Note to all governments on Amazon To Pay Texas Sales Tax · · Score: 1

    I thought all states technically require that.

    However, it's unenforceable in most cases, so the only cases where someone usually pays it are:
    a) They're a goodie-two-shoes.
    b) They itemize the purchase when reporting to government. For instance, itemizing something to deduct it from taxes, without paying a use tax, could theoretically be noticed by the State.

  15. Really? on SSL Pulse Project Finds Just 10% of SSL Sites Actually Secure · · Score: 2

    Is this testing for the absence of BEAST workarounds which are present in all current respectable ssl libraries?  Or does it just look for sites using TLS 1.0/SSL3 with block mode ciphers?

  16. Re:Why the anxiety? on Ask Slashdot: Life After Firefox 3.6.x? · · Score: 4, Informative

    Dear luddite, get off of the internet. Please. Win 2k is 1.5 years beyond its extended support end date. http://support.microsoft.com/lifecycle/?c2=1131

    While you're whining about apps and OS that can't run in 512MB ram, the rest of us have blazing fast desktops that never touch swap, because 16GB of ddr3 ram is something like $100-150 today. It costs more money to sit around whining than it does to get more ram than you know what to do with.

    Profiles gone? I don't know what you're talking about. Start any modern firefox with the flags -no-remote to prevent opening another window of an existing firefox instance, and -profilemanager to open the profile management/selection window. I have all my shortcuts changed to start it that way by default.

    My mobile has more ram than your computer.

  17. Re:and where is exactly the problem? on Journalist Arrested By Interpol For Tweet · · Score: 1

    To say that a right is "granted by our creator" is just a rhetorical trick to give legitimacy to a right that most people already agree with.

    Let's take "free speech" as the right in question. The western religious zealots agree with it for the most part, but their religion prevents them from declaring arbitrary things to be of critical social importance. Everything true religious believers know and trust has to come from God. So you tell them their God is the source of this right, and all of a sudden they're on board.

    Secular humanists or utilitarians or whatever you want to call them don't need that Creator BS, so they just ignore it and agree that free speech is a good idea.

  18. Re:Problem here is "racism" on Journalist Arrested By Interpol For Tweet · · Score: 1

    If you pick and choose parts of scripture based on how well it gels with your own intuition, feelings, and with the mores of modern society, then your religion's "teachings" are merely a proxy for things which you already know.

    In other news, the Church of Circular Logic wants everyone's holy books back.

  19. Re:Problem here is "racism" on Journalist Arrested By Interpol For Tweet · · Score: 1

    Get off your high horse.

    Where did someone say that the religions are the same, or compatible? The one comment I saw, which is I think the one you're referring to (since the parent post of your post doesn't talk about the sources of the religions), was that the *wizards* behind the three religions are the same.

    Of course the religions are not compatible. That's why a lot of Muslims want Jews dead, Christians dislike Muslims and for the most part consider Jews harmless but misguided in matters of faith, etc. But, factually, the evolution of the three religions stems from the same original mythology, hence they are all three called Abrahamic religions, and they all developed around the same original God concept.

  20. Re:Problem here is "racism" on Journalist Arrested By Interpol For Tweet · · Score: 1

    Baptists' invisible wizards discourage the teaching of important aspects of biology and thermodynamics and probability, not to mention discouraging the development of rational critical thought.

    Ordering people to kill other people is not the only possible problem with religions.

  21. Re:Why? on No More SSL Revocation Checking For Chrome · · Score: 2

    That's why the model going forward is going to be something like

    http://convergence.io/
    http://perspectives-project.org/
    http://patrol.psyced.org/

  22. Re:So when did... on AT&T Caps Netflix Streaming Costs At $68K/Yr · · Score: 1

    It's more than the initial bootstrapping. Almost all cities have semi-exclusive deals with one "cable" and one "telco" provider. Some cities have done away with those exclusive deals, but there's still the non-trivial matter of getting permits and right of way to dig up and install fiber.

    Even if the city is not contractually forbidden from granting those rights to new telecom companies, they might still not grant right-of-way on the basis that digging up streets or alleys is a nuisance... and anyway don't people already have telecom service? They don't need another option.

    Keep in mind that the people making those decisions on the city level are like the politicians at the federal level who make fun of people who criticize SOPA. Except city politicians are more corrupt and dumber.

  23. Re:No, there is not on US Supreme Court Upholds Removal of Works From Public Domain · · Score: 1

    I understand that from the viewpoint of local violence being diminished in favor of legal process, but there are two caveats:

    First, lack of regular protests, even if they would sometimes turn violent, tends to make the populace unwilling to protest anything. As long as the government keeps the lights on, water running, and internet tubes flowing, pretty much any violation of the constitution or the founding principles or anything else will go unchallenged. Sure, people may write nasty letters to politicians, and in the worst cases politicians might be voted out in the next election. But if the next guy is nearly the same, nothing is gained.

    Second, although violence is abhored as a resolution to issues domestically, the U.S. has no problem instigating wars or coups abroad, even if those arguably increase the net violence in those countries.

  24. Re:Not so fast... on Tech Forensics Take Center Stage in Manning Pre-Trial · · Score: 2

    The standard recommendation I've seen is to overwrite at least 3, perhaps 5, 7, or even 9 times[0], often with a final all-zero overwrite[1] at the end (since an all-zero nominal image might discourage someone from looking harder, while a disk full of random-looking data can only result from a random overwrite or a full-disk encryption system).

    The "kill it with fire" technique is more a question of speed and when you can afford to destroy disks. I've heard the NSA burns their disks, and Google physically mangles disks, but consider that those organizations are going to get rid of disks either when the device using them is past its useful lifetime, or when the disk starts failing. At that point the future value of keeping the disk around is low. It's more cost effective to use a quick method that prevents data recovery (of the desired level depending on threat model), rather than tying up computers and personnel in lengthy overwrite procedures when the disk is probably going to be thrown out anyway.

    The reason for multiple overwrites is that if you look at absolute magnetic readings from the disk at each bit storage position, it's not digital. Instead of "1" or "0", you might see .998 or .005.

    The one in-depth article I read a while back said that an overwrite moves the charge roughly 90% of the way to the opposite value. If a bit was "1" and is overwritten with "0", the new value would be 0.1 Subsequent overwrites similarly attenuate past data. Given disk error rates today, I think 90% is optimistically high.

    For the sake of simplicity, if each overwrite pass changes the data value exactly 90% of the way from the current value to the target value, every bit on the disk is going to be either between 0 and 0.1 or between .9 and 1.0. More specifically, there are four possibilities for each bit. If the reading is close to the range 0.00 to 0.01, both the current and last image stored a zero. If the reading is close to the range 0.09 to 0.10, the current image is zero and the last image was a 1. Similarly for 0.90 to 0.91 and 0.99 to 1.00 ranges.

    With a perfectly accurate magnetic detector and a HDD write mechanism that is perfectly accurate, and a perfectly linear and resilient magnetic layer on the disk, you could discover past images one by one... once you determine the last image logical value, you apply a function, possibly a linear map, to strip out the computer-visible layer and derive the exact magnetic reading as it would have been before the last overwrite. Repeat, wash, rinse...

    The objective of overwriting several times is to push the magnetic differences caused by the last "real" stored data into the range where it's obscured by noise, either noise of the magnetic imager used to take raw magnetic readings, or much more likely, noise of the HDD writing mechanism (it isn't writing a perfect "1" value each time), or noise or imperfections of the magnetic substrate leading to imperfect magnetic storage.

    I think recommendations for 35 overwrites, or even 9 overwrites, may be overestimating the capabilities of an adversary. Not because of anything the adversary does, but because of modern hard drives. Data is crammed into such small magnetic wells that the absolute magnetic readings are less consistent than ever before. Given the error rates of modern TB-sized disks, I would expect many blocks with unrecoverable (2+ bit errors per block) read errors upon reconstruction of even the second to last magnetic image. Repeating the process, I would expect errors to increase non-linearly. My WAG is that before 9 overwrites you're in a situation where even a perfect magnetic detector is reading only low-level noise from the drive. (I'm talking about noise from the non-perfect magnetic layer on the disk surface, and fluctuating magnetic field write strength from the drive head.)

    [0] see, for instance, http://www.securityfocus.com/archive/1/310128

  25. Re:How many threads like this? on Ask Slashdot: Best Flash-Friendly Router To Replace Aging WRT54GS? · · Score: 1

    I have one. It would frequently hang (over WIRED connection) for anywhere from a few mins to 15 minutes, then suddenly start working again. I monkeyed around with settings including disabling the AOSS and WPS stuff, and it stopped hanging. I don't know what specifically fixed it, but I'm using openwrt now so I'll never know. I suspect many of the "omg my wzr-hp-*300* router is broken" stories are just bugs in dd-wrt.