Slashdot Mirror


User: DarkOx

DarkOx's activity in the archive.

Stories
0
Comments
6,020
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 6,020

  1. Re:That's a stretch on Lenovo To Wipe Superfish Off PCs · · Score: 4, Insightful

    The first followup question should be; did / do you have Superfish installed on YOUR computer? I would be really interested to hear how much he valued this 'enhanced shopping experience'.

    The simple fact is they willfully shipped spyware. Beyond that they willfully shipped spyware with the potential to compromise one of the most fundamental security mechanisms Internet users rely on, SSL/TSL by inserting itself into the authentication chain. Beyond that the Superfish spyware did compromise SSL/TLS because the private key it uses to generate proxy certificates was poorly protected.

    So on the first count we might excuse them, everybody does it although its still slimy. On the second count they should have know they were crossing a line and entering deep scumbag territory. On the third count well, again I guess everybody does it.

  2. Re:'Programmer' working with live data? on Scotland's Police Lose Data Because of Programmer's Error · · Score: 1

    Smaltalk...

  3. Re:hmmm... on Carnegie-Mellon Sends Hundreds of Acceptance Letters By Mistake · · Score: 4, Insightful

    Wait though, given its February I assume these are early acceptances for Fall 2015 semester? I don't recall ever "turning down other offers" of acceptance is that even a thing do people do that? I thought you just let the other offers expire. Those letters usually say you have until a certain date to contact the school about enrolling. Given that its still only February, I suspect most students still have the ability to exercise any other offers they might have gotten.

    Well unless they did something stupid like dial up the admissions office at $STATE to say "Suck-it fools I got accepted at Carnegie!"

  4. Re:IE once again kills innovation on HTTP/2 Finalized · · Score: 3, Funny

    The web is a different place than it used to be. Let me take you back to 199[345].

    There were four kinds of Internet Users:

    Group 1)
    Has just arrived at your GeoCities page with its "optimized for Netscape" banner after following several webring links. They had only recently finished unboxing their Packard Bell and working out the relationship between the mouse and the cursor.

    The were sitting in front of Windows 3.1x feeling a mix of awe and pride in their AOL dialing skills and terror they might some how break this machine having just spent nearly a months salary on it, because the kids teacher said they should get a PC. They were not about to download anything let alone install it. They still had the sakes from last time they tried something like that, and continue to wonder who this Gen. Protection Fault is and what he did to their computer.

    Group 2)
    Were practically experts by today's standards. They maybe had a 286 from a few years back and remembered some DOS commands. This and their command of cutting and pasting into notepad from "View Source" in Navigator has enabled them FTP their very own page to GeoCities that folks in group 1 are now viewing.

    Group 3)
    Has some professional or academic experience using a platform other than DOS and Netware. They are already frustrated back the lack of development the X11R2 edition of Navigator is seeing. Its fine they because all the stuff they think is really worth while is still available via BBS, and someone was good enough to install Lynx and internet gateway in case they do want to look at GeoCities. They had formed their opinion about what browser was good an proper and nothing was going to make them change, EVER.

    Group 4)
    Mac users, this group was small and mostly ashamed of themselves during this period. They clung to the belief their shitty platform was in someway superior to Microsoft's shitty platform running on Packard Bell (it wasn't). They really did not having anything to choose from besides Netscape, no matter what the banners indicated and they knew it.

    In short things were nothing like today; well actually group 3 hasn't change much. Groups 1 and 2 merged; but the fear is gone. These people will run anything now. Ask them to put their password in so they can run NoIreallyAmATrojanLookingToStealYourOnlineBankingPassword.exe and they probably will if you promise them some extra Facebook likes on their posts or something.

    Group 4) Is all self assured again. Some group 3 folks are joining them, although they still don't really mix at parties.

  5. Re:And so Linux has become a boring mess... on Torvalds: "People Who Start Writing Kernel Code Get Hired Really Quickly" · · Score: 4, Insightful

    So what if it gets pulled into the kernel, than its kernel coding; at least in Linux land because driver code can touch memory belonging to other parts of the the kernel. If we are talking about Minix or something it might not be.

    And So what if he did it to pad his resume. Drivers are useful to anyone who has the kit they are written for. Even if he abandons it quickly a working or mostly working driver is still useful because someone else can maintain it. Its way easier for me take your driver for 3.0.19 and tweak it build on 3.0.22 or whatever than it is to work out the hardware details.

    He wins and the community wins.

  6. Re:IE once again kills innovation on HTTP/2 Finalized · · Score: 5, Funny

    The masses will switch as soon as they see "Did you know Facebook could be faster --> Click Here ---"

  7. Re:IE once again kills innovation on HTTP/2 Finalized · · Score: 2, Insightful

    Which will mean one of three things:

    1) HTTP/2 will not be used in the wild for anything important. Due to the sheer number of Win7/8 machines out there with IE versions that don't support it.

    2) Users on windows will move away from IE. Once people leave they don't typically come back so IE will eventually become an also ran.

    3) Microsoft will fear loosing to much browser market share, will back pedal and backport spartan.

  8. Re:This is politics, not technology on What To Do After Robots Take Your Job · · Score: 1

    the push for a 40-hour week goes all the way back to the 19th Century

    Well I am glad you agree but I am confused by your comment. The industrial revolution took place in the late 18th thru the begging of the early 19th century. While industrialization was still expanding into new areas of life the "revolution" aspect of it was largely over by 1820 or so. Pushes for limits on the work day, i believe started in Britain around the same time.

    So I think we also agree that 40-hour week dates to the 19th Century and near to the start of it, even if we don't see its broad implementation until the 1860's and as late as the 1930's in many places we would nominally consider to have been the developed world at the time.

    To that end you may be entirely correct about your 1980's target for the 40 hour weeks obsolescence in terms of the economic need. That is heartening, perhaps we are on the cusp of change. Its clear form the amount of time it took for the 40 hour weeks implementation to become most peoples reality there is some lag on working less due to social norms and other economic dislocations occurring simultaneously like the full realization of globalism.

  9. Re:This is politics, not technology on What To Do After Robots Take Your Job · · Score: 1

    Likewise, it's just as unrealistic and simplistic to believe that just because all of the preceding revolutions in labor have led to job creation that the trend can continue ad infinitum. The real world is just not a simple place.

    I don't think its simplistic or unrealistic. There will always be scarcities and things people wish they could have more of even as the stuff of our basic needs is present in ever greater abundance. The more efficient our technology allows us to be the more activity we can engage in. When you no longer have to dedicate all your human resources to hunting and gathering because you have agriculture you free up time for people to do other things, like weave carpets for your huts etc, improve your standard of living. People talk about the wealth gap getting bigger and it is but on the other hand our generations mode life style is better than that of our parents unless we start making false comparisons (which people do all the time).

    You probably live in a home which is less drafty, drive a car that is smoother and safer, have the luxury of a stupifing selection of entertainment products, you sit in front of a machine that allows you to discuss topics like this with others from around the globe at almost no variable cost, spend less time cooking and cleaning, etc.

    The trick is when do these additional activities decrease in value below the point it makes sense for us to invest the one truly scarce thing we have, time, into. The 40 hour work week was the post industrial answer, enough people realized that as a society we needed more leisure time, more than we needed a better standard of living in terms of goods. If anything people needed time to consume all this great stuff we were producing so we could continue to sell it to one another.

    We are hitting that wall again in the "developed world" a 35 hour work week would make sense. Have all the office an shift workers do 9-5 with lunch rather than 8-5. Companies can either higher more workers or pay over time 5 hours sooner.

    Its going to take some market protections though. We need to shitcan this idea of free trade with unequal partners. Workers in developed countries need economic protection for trade partners that lack similar labor, safety and environmental regulations. Foreign labor needs to be tariff-ed just like goods. That is we need to create a tax liability for salary expenditures payed to "overseas" workers.

  10. Re:But, but, you're using logic and science on Federal Study: Marijuana Use Doesn't Increase Auto Crash Rates · · Score: 4, Funny

    PJ Orourke had the best answer to drunk driving ever:

    The answer isn't more cops. The answer is more drugs. Give those young men some peyote and mescaline and LSD with their beer and watch their bravery vanish. Mile markers jump out from the berm, hopping on their single legs and forming into packs. Their rectangular, numbered heads flash with green reflective menace. The centerline rises from the pavement. The giant yellow-striped serpent coils to strike. Meanwhile, a highway overpass gapes-the jaws of hell. Abandon all joyriding ye who enter here. Those young men will be crawling down I-40 at fifteen miles an hour the way I was forty years ago.

  11. Re:No on Should We Really Try To Teach Everyone To Code? · · Score: 1

    I think the problem is drivers license requirements simply are not high enough. Take the train wreck a couple weeks ago.

    Never should have happen! Its entirely the drivers fault too. The DOT will do back flips to state otherwise because the woman was attractive and a mother but the facts are simple. She did not know how to drive.

    A properly educated driver should have known.
    1) You do not enter a rail road corssing unless you can clear it. Even when the gates are not down and the lights are not on. If there is not sufficient room on the other side due to backup traffic or anything else, for you to immediately clear the crossing you do not enter.

    2) Once she was already in trouble she tried to backup. Its ALMOST NEVER correct to backup while on the public road way. That should be common knowledge. If you think the correct action involves using reverse in a situation where you are not parked, you are problem wrong, and should reassess. If you still think you need to backup, reassess again, and only after that do you actually do it. -- She should have pulled forward and off the road.

    She and I think now 6 other people are dead because she was not competent to be behind the wheel.

  12. Re:skynet on Should We Really Try To Teach Everyone To Code? · · Score: 1

    True but its often hard to know what you want until you have something you don't.

    Its one thing to automate an existing process. You have a pretty good idea of everything that needs to happen. Most people *could* not saying do, develop a decent spec for that sort of thing. There are few input output problems that don't have known good enough solutions, and the I/Os are all predictable.

    Trouble is most existing processes are designed with constraints computers don't suffer from. So make an app to do what you all ready doing today. Be it processing financial forms or placing personal ads to hook up won't always yield the best solution.

    To extend Fords analogy though early cars sort of prove the point. Its hard to design a good car when all you know are horses and carriages. You have this vague notion of an engine driven self propelled vehicle. Its only after you bolt a one lunger to the underside of buggy that you discover things like a steering wheel might work better than a tiller etc.

    If you are doing some other than "what I was doing yesterday but WITH A COMPUTER" than it probably makes some sense to describe and build a few turds to discard because you need to learn some lessons from doing that before you can spec and design something truly good.

  13. Umm No! on Tech Industry In Search of Leadership At White House Cyber Summit · · Score: 4, Insightful

    "They need to articulate what amount of access to private information is 'appropriate and legal' for law enforcement and the government,"

    No I think we the people need to do that. We should get out in front of government by designing systems that keep private information private. The best way to ensure rights like privacy survive is to create a public expectation of it.

    Right now the public expects government can just backdoor anything it wants, and THAT IS THE PROBLEM.

  14. Re:Yes on Is Modern Linux Becoming Too Complex? · · Score: 2

    libvirt doesn't use /etc/network/interfaces

    My distro does not use /etc/network/insterfaces either so this is probably a good thing. Keep your debianisms to yourself.

  15. Re:Proportionality on HSBC Banking Leak Shows Tax Avoidance, Dealings With Criminals · · Score: 4, Insightful

    Steal ten thousand dollars and you go to jail for decades. Steal ten billion and you get a slap on the wrist and an engraved invitation to the next campaign fundraising dinner.

    This is unfortunately the nature of the world. I am afraid the only moral is go big or go home. There is another eerily similar adage about banking. "Borrow a hundred thousand you can't pay back and you have a problem, borrow 100 million you can't pay back and they have a problem." Although you have to adjust the sums for inflation somewhat the basic principle is: rules are only for the little guy.

  16. Re:How do we know this is not parallel constructio on The Technologies That Betrayed Silk Road's Anonymity · · Score: 1

    Cover up the methods to stop people defending against it.

    That's my point thought defendants have right to defend themselves. When does covering up evidence gathering methods serve a legitimate judicial use? Why would hiding the methods used to gather evidence be necessary unless for example the government did something illegal?

    Conducted a search without cause, hacked a system in violation of the CFAA, inserted a mole acting as an agent of the state who induced you to commit the crime which would make it entrapment; etc.

    Protecting the identity of whiteness etc, makes sense but there are really very few situations where I can see secrecy around evidence gathering methods doing anything other than violating the rights of defendants to challenge the evidence against them and allowing the sate to cover up its own misdeeds in the course of the investigation.

  17. Re:How do we know this is not parallel constructio on The Technologies That Betrayed Silk Road's Anonymity · · Score: 2

    My understanding is that most parallel construction (supposedly) isn't for the sake of using illegally obtained evidence but simply to protect the method or person by which the evidence was obtained.

    May I inquire as to why you think this? Do you have any interesting evidence or even anecdotes that lead you to this conclusion or is this just what the nice man from the DOJ told you?

    Additionally I can see virtue in protecting the persons evidence was obtained from in *some* cases, but the methods? In a free society with an adversarial justice system based on the presumption of innocence, what legitimate goals are furthered by secrecy around evidence gathering methods?

  18. Re:Thanks Obama on US Health Insurer Anthem Suffers Massive Data Breach · · Score: 2, Insightful

    Its not just naked hypocrisy though. The situation is more like you have a gun on someone, who wants you to put it down; but you are like 99% certain the moment you do they are going to run over pick it up and point it at you.

    Dems have use gerrymandering in the past, they would again if positioned to do so; or resort to some other dirty trick like trying to limit corporate donations while leaving the door open for unlimited union contributions. Or for that matter attaching a major heal care overhaul to the budget reconciliation process for the express cause of preventing the other side from having a floor vote or the opportunity to propose amendments they were sure would cause the legislation to fail.

    No you can't expect one side to unilaterally disarm. It would be political suicide for those who are in it for the power, and needless surrender for those who are actually fighting for something on principle. The problem is our political system does not really allow for the creation of an enforceable bilateral agreement to "cut the crap" and actually behave democratically rather than seeing what you can get away with via process tricks and legal wrangling. In short there really is no solution until one side manages to suppress the other entirely (where we all lose).

    The real question is can the DNC run out the clock until such time the GOP demographically can't win; or with GOP first succeed in sufficiently controlling participation and eligibility such that it won't matter. I am pretty pessimistic that the idea of "government by and for the people" has much chance for survival. So I say choose your sides folks, you can have the socialist boot in your face, or the fascist boot up your ass, its mostly likely going to be one or the other.

  19. Re:its not about the ring, its just a lesson. on Texas Boy Suspended For "Threatening" Classmate With the One Ring · · Score: 2

    I think its the other child that needs a talking to.

    Its not clear from the article that Aiden had any intent in the way of assault, "the putting in of fear". As far as I can tell he was playing make believe after seeing a movie.

    The fact that another 9 year old feels 'threatened' by any action which might be taken using the "magic" ring other than perhaps it being thrown at him should be of greater concern.

  20. Re:This is Texas! on Texas Boy Suspended For "Threatening" Classmate With the One Ring · · Score: 1

    What's really sad is that neither the teacher or the principle at this school could be arsed to explain to the other child who was apparently having some sort of crisis as result this boys assertion about his magic ring, that:

    1) magic isn't real.

    -Or- if they are to craven to have that conversation

    2) that their class mates are not capable of doing magic.

    I mean all you have to say to the kid is, look the other guy is fibbing, if he could make you invisible he would have demonstrated this power on himself or some object to prove it to you! So obviously its an empty threat.

    Seriously if the staff at our schools can't handle teaching 3rd and 4th graders invisibility spells are not real Its no wonder the whole fractions thing does not go well...

  21. Re:I would think on The "Cool Brick" Can Cool Off an Entire Room Using Nothing But Water · · Score: 3, Insightful

    Trouble with that is across most of the western US the aquifer keeps going down and down. We are depleting it by pumping it dry.

      If you build reservoirs, that means damning rivers which has consequences for ecosystem for thousands of miles up and down the river, to say nothing of the nearby effect of flooding in many cases several thousand sq miles, and the effects on the surrounding vegetation that had been living in a fully arid climate and now finds itself next to a large pool of evaporating and seeping surface water. Finally its been shown for the first decade at least while all the vegetation under the reservoir decomposes there are massive releases of greenhouse gases both carbon dioxide and methane.

    Short answer there is no free lunch! We are still probably better off with a closed circuit refrigeration cycle powered with that cheap abundant nuclear energy they have been promising for 60 years.
       

  22. Re:NSA would have loved this ! on OpenSSH Will Feature Key Discovery and Rotation For Easier Switching To Ed25519 · · Score: 1

    Right, I don't see much risk here, and probably loads of to gain in terms of replacing old DSA keys. The only place where I see something like this complicating things in terms of security is now the key store might be changing without user awareness so if you are doing something like having the key store monitored with tripwire or the like you might have an issue.

    I suspect people who are going to those kind of lengths probably parse the change logs to security central items like openssh pretty carefully before updating and have the knowledge to develop appropriate solutions to cope with the change, even if that means a patch to reverse the behavior. I am not worried, I think this will make most folks better off.

  23. This is great. This is the sort of thing a safety force should be doing. I hope more police organizations will consider actually providing useful public services like this!

  24. Re:Pot meet Kettel on Fixing Verizon's Supercookie · · Score: 2

    The real question is how are multiple headers interpreted for the tracking code. Is the first UID header the verizon one or the last? What if my client inserts a random one before and after every other header etc. Sure if its the NSA or whatever than you're the guy whose got the UID header that changes with each request or the guy with multiple headers etc. Even if lots of people do it a weak PRNG used to generate those headers and $AGENCY might still be able to identify you.

    Advertisers though I am going to guess not so much. Hell half of them are probably used web application frameworks that don't even make explicit commitments to ordering of headers in the collection their high level code is interfacing with.

    The other thing is the system was/is designed for 1 person : 1 uid header mapping. If enough people start changing UID headers that are a per request nonce that is going to be lots and lots of entities in the key space. Just ask the big data guys how much memory and storage can get burned just on keys; hint its a lot. Might be able to make the entire system fall over if enough people participate.

  25. Re:Thanks NSA and others on Tech Companies Worried Over China's New Rules For Selling To Banks · · Score: -1, Offtopic

    Yep, By allowing our government to get so large and violate or principles of freedom we have forever lost trust, and you can't have an economy without trust.

    The "deep state" has just killed our golden goose. Which might be the kind of thing that wakes up the public enough to vote for some heads of state that might actually route out these vipers. In the mean time say bye bye to real economic growth.

    If there is any it will be in the industries of yesterday like oil & gas, and basic bread stuffs for export. More and more will turn their backs on American Hi-tech.