Slashdot Mirror


User: Ungrounded+Lightning

Ungrounded+Lightning's activity in the archive.

Stories
0
Comments
8,936
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 8,936

  1. Or the malware might cover its tracks. on Ask Slashdot: How Does One Verify Hard Drive Firmware? · · Score: 1

    If you ask the drive to read out the whole flash.
    The maybe the firmware would have to go to the platter to get the real image.

    Or the malware could regenerate the un-attacked version.

    For instance: If it's a patch that loads into an otherwise cleared-to-known-vallue region it can detect that region while reporting flash content and report the cleared value, instead. Add a couple other tiny regions where it saved (or alread knew) the previous contents where it "sank it's hooks" and you can't tell it's there from its replies to dump requests.

    JTAG seems safer.

    Yep. JTAG, in principle, could be corrupted. But it would require substantial hardware support that almost certainly isn't there (yet!)

  2. Hashes can be useful. on Ask Slashdot: How Does One Verify Hard Drive Firmware? · · Score: 1

    Which is why I always laugh my ass off at all these people who use PGP to sign things and put a hash on the same website you download it from ... look you can verify this file you downloaded from the website hasn't changed because theres no way anyone would be smart enough to update the hash as well!

    That's why you SIGN the hash. Then only the public key needs to be published by a different route.

    And it doesn't HURT to publish it on the web site as well: Then someone tampering by substituting a different public key sets off alarm bells when that differs from the public key obtained from another site or by another path. Blocking that makes man-in-the-middle more complex: The attacker has to have essentially total control of the path to the victim and be able to recognize and substitute the public key whenever it shows up. One slip-up and somebody may raise the alarm.

    Meanwhile: Even if publishing hashes on the same site may not provide additional security against MITM, it DOES let you check the download wasnt corrupted in transit (in ways other than malicious substitution). With modern protocols that's less of a problem these days than it used to be, but a check would be comforting.

  3. &is "teal" blue with greenish tinge or vice-ve on Is That Dress White and Gold Or Blue and Black? · · Score: 1

    ... blue and brown. Just now, I opened the Washington Post link on my 24" screen in a sunlit room, and it was clearly white and gold.

    Though the sensations are vastly different, brown is really dark yellow. The underlying color of that part of this dress seems to be very near the perceptual boundary (probably just on the yellow side of it). This picture seems to have the dress in a non-obvious shadow, so when it is viewed by someone whose visual system doesn't adequately pick up the shadowing and compensate, it crosses the boundary and appears light brown rather than dark yellow.

    Another perceptual oddity is that a very slight bluish tinge to white makes it appear "whiter than white", especially in sunlight or other strong lighting. (I suspect this works by mimicing the differential response of the various color sensors in the eye when exposed to very bright light, though blue may also "cancel out" a bit of the yellowing of aging cloth.) Laundry products up through the 1950s or so included "bluing", a mild blue dye for producing the effect. (It fell out of use when it was replaced by a fluorescent dye that reradated energy from ultraviolet as blue, making the cloth literally "brighter than white" {where "white" is defined as diffuse reflection of 100% of the incoming light}, and which, if mixed with detergent products, would stick to the cloth while the surficant was rinsed away.) I suspect some of the "blueish is brighter" effect is going on here.

    When I view the picture straight-on on my LCD display, the light cloth on the upper part of the dress appears about white and the image appears somewhat washed out. Meanwhile the lower half has a bluish tinge. So I suspect the cloth is actually nearly-white with a bit of blue. (Viewed off-axis it's very blue, but the other colors are over-saturated and/or otherwise visibly off-color. So off-axis viewing makes it look more blue and this probably adds to the controversy.)

    Another color-perception issue is "teal", a color between blue and green. There are paint formulations of this color that give the sensation of "distinctly blue with a greenish tinge" to some people and "distinctly green with a bluish tinge" to others, even under the same lighting and viewed from the same angle. (I'm in the "slightly-bluish-green" camp.)

    The first place I encountered this was on the guitar of the filksinger Clif Flint. (On which he played _Unreality Warp_: "... I'm being followed by maroon shadows ..." B-) ) Apparently his fans occasionally had arguments about whether his guitar was blue or green, so he sometimes headed this off (or started it off on a more friendly levl) by commenting on the effect.

  4. Re:do no evil on Google Taking Over New TLDs · · Score: 2

    Perhaps they should be asking for a ".google" gTLD, for that purpose, instead of trying to monopolize a generic identifier.

    I was about to suggest the same, but with ".goog", to make it shorter. (Can't think of a less-than-three-letter symbol that points to them as strongly.)

    (It's also their stock ticker symbol, so maybe it's not such a good idea - it could cause a land rush and litigation from all the other publicly traded companies.)

  5. Mostly Republicans trying to legalize. on Researchers: Alcohol Health Risks Underestimated, Marijuana Relatively Safe · · Score: 1

    This is only news to those who have had their head in the ground, listening to fox news and government shills.

    I've noticed that it seems to be mostly Republicans who are putting up the legalization legislation trial balloons.

    (Can't speak about Fox. I don't follow 'em all that much since, during the (especially the last) presidential campaigns, they proved the right-hand side of their claimed "fair and balanced" coverage consisted of flogging the Neocon faction and ignoring or slamming the others - especially the "Liberty" faction and Ron Paul.)

    But I haven't checked Thomas.gov to see whether this is accurate, or just an artifact of the media only covering it when a Republican does it, on the "man bites dog IS news" principle.

  6. Re:The Summary Claims Effect is Cause on Rocket Flown Through Northern Lights To Help Unlock Space Weather Mysteries · · Score: 1

    The Aurora Borealis are not "are an electromagnetic phenomena that can adversely affect ..."

    (Putting on my grammar policeman cap, and explicitly not addressing Rob's point...)

    I DO wish the author of TFA would correctly use the singular and plural
    of "Phenomenon".
      - Phenomenon: One (class of ...)
      - Phenomena: More than one (class of ...)

    The Aurora Borealis are a set of related phenomena, involving glows from ionization of various atmospheric elements at different altitudes, various of the Van Allen belts being pumped up with new particles and/or pushed down by magnetic field distortion from solar wind variations, upper-atmosphere currents, ground currents, and I don't know what all else. The author's apparently inconsistent use of the singular and plural makes it difficult to understand what he meant.

  7. What's "darker" about privizing services? on Does Open Data Have a Dark Side? · · Score: 0

    Forbes article last month explored some of the potentially darker sides of open data â" from ... to making an argument in favor of privatizing certain government services.

    What's "darker" about privatizing government services?

    Government is FORCE. When it "provides a service" it uses that force to make everybody using that sort of service use THEIR service, which they do THEIR way, and prevent anyone from providing the equivalent service in a possibly better and/or less expensive way.

    We're seeig this now with Obamacare. But this has been going on since there have been governments. One of the earliest examples with THIS government was the suppression of alternative mail services.

    Now there MAY be a FEW services where privatizing them are an issue. But we can discuss those on a case-by-case basis. For the bulk of them, why should the government even be involved?

  8. "Incredible" seems about right. on Flaw In Netgear Wi-Fi Routers Exposes Admin Password, WLAN Details · · Score: 1

    incredibly secure

    I think that qualifier demands you back this claim with some sort of source..

    Nah. Just use the literal meaning of "incredible". B-)

  9. Which means if they powned a machine on your LAN.. on Flaw In Netgear Wi-Fi Routers Exposes Admin Password, WLAN Details · · Score: 1

    Usually the only network interface UBoot is configured to use is on the local network side, on a wired interface and the IP address used is non-routable.

    Which means if they compromised a machine on your LAN you're hosed. They now have your router firmware firmly under their control.

    Who needs an intercept in the ISP, lawful or otherwise, when they can have your router send them copies of whatever they want. (Not to mention using it to attack any other devices behind it and cooperate with malware on them.)

  10. Good for other things than tats? on Researcher Developing Tattoo Removal Cream · · Score: 2

    If the macrophages do this with tattoo ink, they no doubt do it with other things, as well.

    I wonder if using this cream to remove ALL the dead-macrophages-loaded-with-junk from the skin will result in effectively "younger" skin?

  11. Re:Nothing could possi on Researcher Developing Tattoo Removal Cream · · Score: 2

    So instead of having the tattoo ink spread out in a relatively benign part of my dermis, instead I'll concentrate it in my lymph nodes.

    I was under the impression that the macrophages would then be broken down and their contents recycled or disposed of - that this migration was just one step in the process. Is this not true?

    There are a lot of macrophages migrating to the lymph nodes over a lifetime. If they just went there, died, and left their contents the nodes would swell with age and never shrink - yet this doesn't seem to happen.

  12. No, it's chemistry. on Converting Sunlight Into Liquid Fuel With a Bionic Leaf · · Score: 2

    An enzyme takes the hydrogen back to protons and electrons...
    Isn't that nuclear fission?

    No, it's chemistry. Specificially, ionization.

    Monatomic hydrogen has a single proton (and very occasionally one or two neutrons) for its nucleus, "orbited" by a single electron. Molecular hydrogen has two atoms of hydrogen - two protons bound together into a molecule by sharing their associated electrons in a chemical bond.

    Separating the individual nuclei from their chemical bonds (typically dragging along all but one or all but a few of their electrons) is a chemical process, producing a dissolved positive ion. Because hydrogen has a single proton and electon per atom, a positive ion of (non-heavy) hydrogen, missing one electron, is a bare proton.

    Now if you wanted to change the number of protons and/or neutrons in the nucleus, change a proton to a neutron or vice-versa, or rearrange a multi-nucleon atom into or out of an excited state (say by adding or releasing a gamma ray), you WOULD be talking nuclear processes. If it cosisted of separating the nucleons of a single nucleus into two groups it would be nuclear fission. But separating the nuclei of different atoms from a molecular bond and/or removing electrons from them, is just chemistry. Energies per operation are measured in single-digit electron volts, rather than kilovolts or higher.

  13. Industrial Tectonics on Mystery Ash Clouds Rain In Parts of Washington, Oregon · · Score: 1

    Geo-engineering

    Back in the '60s and '70s a friend and I would occasionally take a back road from Ann Arbor to the "Dexter-Chelsea Industrial Complex" (a Vietnam War in-joke). We'd pass a small commercial site (always deserted on weekends) labeled "Industrial Tectonics".

    She made up a nice rant about how they're been hired by the "Committee to Reunite Gonwanaland" to adjust continental drift to re-merge the continents into a single supercontinent.

    (Later I found that "industrial tectonics" was about making fancy ball-shaped things of metal, ceramic, etc. for things like bearings, valves, and shot-peening (surface treating metals to create desired effects by tumbling them in an industrial-scale "cement mixer" with a bunch of ball bearings or other small, hard, objects.) Spheres, yes. Continental drift engineering, no. B-( Though I suppose you COULD speed up continental drift by injecting enough fancy ball bearings into faults, ala fracking.)

  14. Thank you. Looks like Reye's Syndrome... on New Jersey Gov. Christie: Parents Should Have Choice In Vaccinations · · Score: 4, Informative

    I searched your italicized quote there. First result.

    Thank you.

    It looks like he's talking about Reye's Syndrome, a pathology that can cause substantial brain damage (and/or other things: Liver damage, death, ...) in children - adults generally recover fully after a couple weeks. (I wanted to be sure he hadn't signed on to the immunization/autism claims, which have been thoroughly discredited.)

    Reye/Reye's is a reasonably rare side effect of several viral illnesses, including immunizations for them. Risk of it seems to be multiplied by a factor of something like five if aspirin is taken, but aspirin (or other salicylates) is not necessary for its occurrence. It seems also to be associated with pre-existing metabolic disorders, so some families might be at very high risk while others effectively immune.

    It's clear from even the soundbite posted: Rand's claim is that the decision to risk a child's health is properly the parents', and the government should not be able to force the child's exposure to a series of these risks over the parents' objections - informed or otherwise.

    Immunizations are partly about population immunity - reducing the density of people susceptible to a disease to the point that it peters out in a declining exponential rather than blowing up in an expanding exponential, thus also protecting those not (yet) immunized, for whom the immunization was ineffective, or who were at risk despite the availability of immunization (e.g. AIDS sufferers). So risk/benefit calculations are for populations as well. Accepting the risk of the immunization helps others as well as the immunized person, so being immunized is partly an altruistic act.

    Rand's point is that he believes the government shouldn't have the power to FORCE people to risk their lives for the benefit of others, that these life-critical decisions are personal and should be left up to the people in question (or their guardians if they're too young to make the choice themselves).

  15. Citation needed. on New Jersey Gov. Christie: Parents Should Have Choice In Vaccinations · · Score: 0

    Rand Paul says vaccines cause mental illnesses!

    Citation needed.

  16. No, they DO, if that's what the rules say. on NFL Asks Columbia University For Help With Deflate-Gate · · Score: 0

    Yet the Colts didn't deserve to be in it. The balls they played with on offense weren't altered or deflated and the still only scored 7 points to the eventual 45 that the patriots scored. The Colts offense was shut down by the Pats defence and that's that

    No, the Colts (or whomever the rules say) DO deserve to be in it, if that's what the rules say.

    The Patriots cheated and were caught cheating. Unless the rules explicitly prescribe some other punishment for that offence, this should be treated as a game forfeit. They LOSE. If that means a far weaker team that almost certainly would have been clobbered if they'd played by the rules gets a superbowl slot - that's just fine. Maybe next year the teams will be more careful to keep their people under control.

    If the rules are just advisory, who cares about the game? (They'll still get SOME fans. Like Pro Wrestling, for example, where the fans see it as a morality play entertainment, not a contest of strength and skill.) But $6,000 scalped seats won't be in their future.)

    Meanwhile, the Colts got all the way to that last playoff game, so they're not TOTAL klutzes. If they deserve the slot cause they got their by playing fairly (or at least MORE fairly) and the Patriots don't, it would still be a fine contest.

    As yourself this: Is Football about playing the game by the rules? Or is it about seeing how crooked you can be and get away with it?

  17. Much like AIDS ... on Telomere-Lengthening Procedure Turns Clock Back Years In Human Cells · · Score: 1

    People die of cancer. stroke, heart attack, emphysema. and countless other disease, but aging isn't one of them.

    With AIDS the HIV virus gradually destroys the immune system. Then some infection isn't successfully fought off. The immediate "cause of death" is the infection. But the underlying cause of death is the destruction of the immune system by HIV.

    Similarly, with aging, a host of systems gradually fail, through a number of mechanisms, of which telomere-shortening is the underlying cause of most. Eventually one of these systems failures results a disease process (or failure to reverse a disease process), and that disease process causes death. The recorded "cause of death" is the particular disease process. But the underlying cause is the system failure from aging.

    Take cancer: Accumulated errors in DNA replication, perhaps combined with a couple pre-errored codes inherited from the parents, result in a clone of cells that don't stop replicating when they should, and are able to evade the self-destruct mechanisms (including the hayflic. The accumulation of errors is one aspect of aging. The failure of the immune system to recognize, destroy, and clean out the clone of misprogrammed cells, more common in older people, is another.

  18. Re:Since when is AMT controversial? on FSF-Endorsed Libreboot X200 Laptop Comes With Intel's AMT Removed · · Score: 1

    All the 'Libre' crowd rants about the source code of the software, but somehow gives a pass about the hardware not being open ...

    You haven't been watching very closely.

    *I* have been ranting on slashdot about AMT for years. Look it up.

  19. They already did. on One In Five Developers Now Works On IoT Projects · · Score: 1

    Next you know the young whipper-snappers will take "variables" and call them "dynamic constants"

    In Bluetooth (especially Bluetoothe Low Energy (BLE)) they already reanamed them. They call one a "characteristic" (when you include the metadata describing it) or a "characteristic value" (when you mean just the the current value of the variable itself).

  20. I thought the point of the charge ... on Spider Spins Electrically Charged Silk · · Score: 3, Interesting

    I thought the point of the charge was to make the "wooly" side-fibers of the strands wrap around the prey's limbs and/or the microscopic irregularities in the exoskeleton, tangling to it. "Tying" the fibers to the prey would have a similar binding effect to gluing them to it, without the need for glue, and lots of little fibers could make a very strong attachment.

    (Stretching fibers made of long chains makes them stronger by aligning the chains along the direction of the stretch.)

  21. But can it play ... on Adobe's Latest Zero-Day Exploit Repurposed, Targeting Adult Websites · · Score: 1

    Youtube just switched to HTML5 video by default, so perhaps we can uninstall Flash for good now!

    But can it play "Badger Badger Badger"?

  22. Also: lots of code has been vetted for decades on Security-Focused BlackPhone Was Vulnerable To Simple Text Message Bug · · Score: 1

    Why are they still using C to deal with network protocol? Is the performance so critical that it's worth all the troubles?

    Also, because there's a lot of C code that has been in heavy use, and tested for correctness, for decades, suitable for reuse with substantial confidence that it's correct (though you check it anyhow...).

    Let's see you find code like THAT for a language that hasn't been AROUND for decades. B-)

  23. For starters, because it's transparent. on Security-Focused BlackPhone Was Vulnerable To Simple Text Message Bug · · Score: 1

    Why are they still using C to deal with network protocol?

    For starters, because it's transparent. The "K&R compliant assembly laguage", as one of my former colleagues once characterized it, translates to object in a clearly understandable way (especially if you turn optimization down or off). Though it gives you more opportunities to create bugs, it makes it hard for the bugs to hide from inspection.

    The "higher-level" the language, the more it takes over and inserts its own stuff between you and the metal, and the more opportunity for that to inject an invisible vulnerability - which you might have trouble removing even if you DO discover it.

    Meanwhile, many of the things "higher-level" languages protect you from can also be detected and flagged by both modern C compilers and code examination tools - starting with the venerable "lint".

  24. Re:CA requires commercial licenses for pickup truc on Calif. DMV Back-Pedals On Commercial-Plate Mandate For Ride-Share Drivers · · Score: 1

    I can guarantee you that if the Govt. left it up to drivers to get the proper training and instruction on how to operate vehicles safely, people wouldn't do it.

    Interesting claim - since it doen't work that way for guns.

    Where the government requires training, most gun purchasers take the minimum required, then stop. Where it doesn't, most people start with the course recommended by the gun stores (which is far more comprehensive - and more focussed, with less time spent on political indoctrination B-) ) and also do substantially more range time, until they feel adequately competent. (Then there are those that get interested in shooting as a hobby...)

    A similar effect is the reason police normally don't shoot at private ranges simultaneously with civilians. Most police are embarrassingly HORRIBLE shots and pistol-handlers - because they do only the minimum training and practice required by the department (which has lots of other stuff for them to do while they're being paid for their time), and almost never have to actually fire their gun during their work.

  25. Re:CA requires commercial licenses for pickup truc on Calif. DMV Back-Pedals On Commercial-Plate Mandate For Ride-Share Drivers · · Score: 1

    Ford F150 Lariat.

    For the 5 1/2 ton towing capacity (which also translates to "won't blow the engine head gasket towing a loaded trailer up CA 88 like the van did" - turns out they designed that vehicle's engine with the cylinders too close together so this one pair had a very thin piece of gasket between them,..).

    (No time to get the GVR before I have to get to work...)