Slashdot Mirror


User: incense

incense's activity in the archive.

Stories
0
Comments
16
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 16

  1. Re:Randomness is like Magic on Physicist Uses Laser Light As Fast, True-Random Number Generator · · Score: 1

    Randomness is often considered to be an unpredictable pattern, but what is and isnt predictable is dependent on knowledge, so its not an absolute truth.

    According to quantum theory, you're wrong. The point of using this technology is that the results cannot be predicted, however knowledgeable you may be. That's why there's a fuzz.

    Now, what's needed is some mechanism to ensure no tampering with the diamond can be done.

  2. Re:But its NOT centralized trust... on Rogue SSL Certs Issued For CIA, MI6, Mossad · · Score: 1

    The root of the problem (pun intended) is NOT that the SSL/TLS certificate hierarchy is a centralized trust, but that there are hundreds of roots of trust, any one of which may be compromised,

    The problem is the consequences when a centralized trust is broken. In principle, the number of roots does not matter (even if in real life, it makes it easier to find a viable attack route), because the root of the evil is that it will suffice to break a single point.

    A proper design would make sure that even in the case of successful hackers, rogue employees, silent break-and-entry by foreign intelligence agencies or hostile government take-overs, the consequences would not be dire.

    This is why some people like the idea of using DNSSEC for distributing key material: there exists only a single valid path of trust to a single root for a key associated with any given name: its actually more centralized than SSL/TLS, which is what is desired.

    Even though based on false premises (IMHO), your conclusion is intriguing. Would you kindly explain which threats dnssec will remove?

  3. Re:They're all apeing OSX on Linus Torvalds Ditches GNOME 3 For Xfce · · Score: 2

    One thing Windows did right was the Taskbar. It is, in all seriousness, an extremely good metaphor. It separates the acts of launching programs from managing which ones are running, because, dammit, those are different things.

    The importance of this difference is entirely in the eye of the beholder. At the moment, I'm still stuck in the same world as you, I'm used to a better feeling of control. But the iOS and OSX users certainly don't care if the application is starting or is already started - what they want is to use it where they left it.

    OSX, with its Dock, conflates launching a program with looking at a window that it has opened. The implicit metaphor is that all programs are always "running,"

    I don't agree. The implicit metaphore is that the tool should be where you left it in the state that you left it. It's just a different approach. I think it's better for most people. Linux kernel developers and sysadmins are not most people in this sense.

  4. Re:Money on Belgian Newspapers Delisted On Google · · Score: 1

    Are you sure that it's common in Belguim to "ask for clarification"?
    And if it is, do we know that Google did not?

  5. Re:The question nobody is asking on How Investigators Deciphered Stuxnet · · Score: 1

    Why is it that Iran had thousands of replacement centrifuges? Thousands? Of Replacements?

    IIRC, retiring about 800 centrifuges a year is expected under normal operation.

  6. Illusion of dark matter on New Theory of Gravity Decouples Space & Time · · Score: 1

    "Horava’s graviton fluctuates as it interacts with normal matter, making gravity pull a bit more strongly than expected in general relativity."

    Now that's what sounds promising. Dark matter always seemed like an ad hoc explanaition. How would you (try to) falsify that dark matter exist under the current theories that are predicting it?

  7. Re:X11 has never been a problem. on X11 Chrome Reportedly Outperforms Windows and Mac Versions · · Score: 1

    RDP best? Something must've happened since I quit being a sysadmin some years ago. RDP used to be a security disaster.

    X forwarding in SSH works well on ADSL (enable persistent connections on your ssh client if your ADSL modem insists on disconnecting inactive connections).

  8. No hit-by-bus protection on Judge Won't Lower $5M Bail For Jailed SF IT Admin · · Score: 3, Interesting

    While it seems the prosecutors in this case are overreacting (why's this even a criminal case?), what I find curious is that there was no scheme to retrieve the passwords if Childs were to pass away accidentally (no HBB protection). Passwords written on paper in a safe, safety deposit box or similar, or the passphrase to Password Safe written down somewhere secure.

    It's pretty stupid to have to physically access all the routers to reset passwords in the event that the network admin dies or quits in fury. Just write the procedure into the admin's job description.

  9. Photographer maintains copyright on Why the Photos On Wikipedia Are So Bad · · Score: 5, Insightful

    If I'm not entirely mistaken, the photographer maintains the copyright, but the publishing on wikipedia under the creative commons allows everybody to use the photography as long as the photographer is credited.

    If photographers want to help, but are worried they'll lose control, why not upload lower than mint quality images?

  10. Re:What now? on The Amazing World of Software Version Numbers · · Score: 1

    Disclaimer: I'm one of the designated maintainers of IOS version numbering, but I don't get to set the rules.

    Understandable disclaimer. Cisco's version numbering scheme is not for the uninitiated, e.g.
    Version 11.3(2)XA4, RELEASE SOFTWARE (fc1)

  11. Re:Whining on 6 Reasons To License Software Under the (A/L)GPL · · Score: 3, Funny

    Oh God! I hate whining bastards! They just WHINE WHINE WHINE!

    STOP WHINING!

  12. Re:Apple viral marketing campaign on Korean DDoS Bots To Self-Destruct · · Score: 1

    Escaping North Korea: Secrets of the World's Most Isolated Country by Mike Kim

    I have no idea if you would consider this trustworthy or not, but it comes from that book.

    Interesting, thanks. I'll read the book.

    Two, preferably three, independent sources would be the minimum requirement of thrustworthyness. Especially when the intel is from a closed country that has a reputation that makes it trivially easy to make things up and have people believe in it.

    Note that I think Kim's goals are very worthy; he's holding speeches etc. raising money to finance helping North Koreans escape.

  13. Re:Apple viral marketing campaign on Korean DDoS Bots To Self-Destruct · · Score: 1

    EdIII wrote:

    When interviewed, these people state beliefs in the most outlandish and bizarre pieces of propaganda. Situations like women absolutely convinced that if they touch dropped pamphlets from the South (through air campaigns to spread information to the people) that their hands will rot off . When asked, if they really felt it was true, they state that they really believed it. That's just one example.

    I'm not saying you're wrong, but: Trustworthy sources or it didn't happen.

  14. The fastest production car... on Bugatti's Latest Veyron, Most Ridiculous Car on the Planet? · · Score: 3, Informative

    The fastest production car is not the Bugatti, but the SSC Ultimate Aero TT. According to http://en.wikipedia.org/wiki/Fastest_car

  15. Re:Changed or not? on What's New in Blade Runner - The Final Cut? · · Score: 1
    According to Charles de Lauzirika over at BladeZone, there were three versions of this line:

    "I want more life, father." - Workprint, Final Cut
    "I want more life, fucker." - Theatrical, International, Director's Cuts
    "I want more life." - Alt. broadcast version (shown in Dangerous Days.)

    So, in a sense father predates fucker.
  16. Re:I'm Not Sure I Buy His Analysis on Virtualization Decreases Security · · Score: 1

    Say you have two operating systems, A and B with a couple of services serving the public. By using virtualization, you're allowing an additional attack vector into the OS'es: To get into OS B, I could break OS A, then break the virtualization, and thereby own your OS B without breaking it.

    This, of course, is less secure than placing OS A and B on different physical boxes.