Slashdot Mirror


User: temojen

temojen's activity in the archive.

Stories
0
Comments
1,851
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 1,851

  1. Re:Very interesting! on Australian Voting Software Goes Closed Source · · Score: 1

    I would never argue that proprietary, non-manually countable voting systems are a good idea. I think it's highly likely that there is malfeasance on the part of some who work in the industry.

    However, the parent of my post has made secific accusations about a specific person. He needs to back them up.

  2. Re:Oh well.... on FCC Rules VoIP Must Be Tappable · · Score: 2, Interesting
    Tell me how can they be sure in their efforts to sniff packets away merrily like the junkies of privacy invasion they are that all those packets belong to US citzens or are intend to for US citzens?

    My understanding is that there's no restriction on intercepting communications between non-citizens under american law.



    Disclaimer: I'm neither american nor a lawyer

  3. For more information: on FCC Rules VoIP Must Be Tappable · · Score: 5, Funny
  4. Re:It depends on what you mean... on Is Typing a Necessary Skill? · · Score: 1
    I don't see how using two fingers on a standard keyboard could ever be faster and more accurate than using ten.

    You must be assuming the typist has symetric hands with full moblity.

    I was injured in a traffic accident 2 years ago, and now cannot rotate my right hand palm down without sticking my elbow way out. Doing this puts my hand diagonally on the keyboard. Consequently I do type faster with two fingers than with ten. It's still pretty slow.

  5. Very interesting! on Australian Voting Software Goes Closed Source · · Score: 1

    I find this very interesting indeed, and I'd like to believe that it's true. Do you (or anyone else) have any corroborating evidence?

    Without some proof, it's probably just libel.

    If you do have some proof, I'd suggest you bring it to the attention of your atourney general.

  6. Annother advantage on Stored Procedures - Good or Bad? · · Score: 1

    Stored procedures can be created as having the rights of either the current user (eg. apache) or the person who wrote it (eg postmaster). Thus write a stored procedure that can access things the webserver normally can't, while doing some required security checks and not giving access to everything.

  7. Where I've used Stored Procedures: on Stored Procedures - Good or Bad? · · Score: 1

    If you have views set up to restrict which rows a user can select, but you don't want to restrict user creation (with a certain group, and with pre-defined rights) so that your webserver doesn't need administrative rights, a stored procedure fits the bill.

    (PL/PGSQL example)

    BEGIN WORK;

    CREATE GROUP "salespeople";
    CREATE GROUP "customers";

    CREATE TABLE customerAddresses (
    customername name references pg_users(usename) primary key,
    address varchar(50)
    )

    GRANT SELECT ON customerAddresses TO GROUP "salespeople";
    GRANT INSERT ON customerAddresses TO GROUP "salespeople";
    GRANT UPDATE ON customerAddresses TO GROUP "salespeople";
    GRANT DELETE ON customerAddresses TO GROUP "salespeople";

    CREATE VIEW myAddress as select address from customerAddresses where customername = current_user;

    CREATE RULE updateMyAddress as on update to myAddress do instead update customerAddresses set address = NEW.address where customerName=current_user;

    CREATE RULE insertMyAddress as on insert to myAddress do instead insert into customerAddresses values (current_user, NEW.address);

    GRANT INSERT ON myAddress to group "customers";
    GRANT UPDATE ON myAddress to group "customers";
    GRANT SELECT ON myAddress to group "customers";

    COMMIT;

    -- Now the problem becomes: How do un-privaledged users (ie salespeople or webserver) create all those customer accounts?
    -- It's easy to solve with a little PL/pgSQL.

    BEGIN WORK;

    CREATE GROUP authorizedtocreatecustomers;

    create or replace function makeuser (name,text) returns int4 as '
    BEGIN
    execute ''create user '' || quote_ident($1) || '' with password '' || quote_literal($2) || '' in group customers;'';
    return 0;
    END;
    ' language 'plpgsql' security definer;

    REVOKE EXECUTE ON function makeuser (name, text) FROM PUBLIC;
    grant execute on function makeuser (name,text) to group authorizedtocreatecustomers;

    COMMIT;

    -- Now, just make sure webserver and all your salespeople are in the group "authorizedtocreatecustomers"
  8. Re:Congrats! on System Administrator Appreciation Day · · Score: 5, Funny

    No.

  9. External Drives... on Terabyte Storage Solutions? · · Score: 1

    If you just use external USB2 drives you don't have to worry about case size or power supply capacity. (Assuming speed is not an issue)

  10. Re:Encrypted filesystems? on The Linux Filesystem Challenge · · Score: 1
    whatcha gonna do, have a different device for each user?

    Absolutely. It doesn't need to be a physical device. It can just as easily be a partition of a distributed or RAID block device, sized to the user's quota.

  11. "crashed Jet" on P2P Leaks Surprises · · Score: 1

    Looks a lot like a MIG that was bombed while it was on the ground.

  12. Weird... on Behind The Coolest Gadgets - Linux or Windows? · · Score: 1

    19 windows Thin Clients and No Linux models? Very odd!

    Wait.. VIA-EPIA series boards... never mind... they're just only counting the pre-installed ones.

  13. Re:Cat got your tongue Florida? on How To Lose An Election · · Score: 1
    Why the fuck can they not manually recount votes?

    Because with touch-screen voting machines there's nothing to count but database entries. The question before the courts is whether or not election officials should go back after the vote and make printouts of the database entries to count by hand.

    This is particularly useless because if the database is wrong, the printout will be too.

    The obvious solution is to have a paper ballot Whether it's counted by machine or by hand, there's always a recourse in case of error.

  14. Re:Old News Indeed on How Much Are You Paying For Electronics Labels? · · Score: 1

    I find the new colour scheme quite visually appealing.

    Unfortunately it's also REALLY hard to read.

  15. Re:More school yard fun on SCO Claims Linux Lifted ELF · · Score: 1
    The folks at SCO probably look like adults, they are adult-sized and wear nice clothes. However, they act like elementary school kids arguing over a ball on the playground. Whoever yells loud enough, pushes hard enough, and hold their breath the longest wins.

    Ever been involved in personal injury litigation? It's like that too.

  16. Re:it's the PULL,stupid on When RSS Traffic Looks Like a DDoS · · Score: 1
    Anyway, the trouble is pretty obvious: RSS is just a polling mechanism to do fakey Push. (Wired had an interesting retrospective on their infamous "PUSH IS THE FUTURE" hand cover about PointCast.) And that's expensive, the cyber equivalent of a hoarde of screaming children asking "Are we there yet? Are we there yet? How about now? Are we there yet now? Are we there yet?" It would be good if we had an equally widely used "true Push" standard, where remote clients would register as listeners, and then the server can actually publish new content to the remote sites. However, in today's heavily firewall'd internet, I dunno if that would work so well, especially for home users.

    Actually, it's more like someone saying over and over: "What's New?"

    How to make this work well, without overloading anything is the trick. I figgure there are two things to do.

    1. On the Server Side make the RSS feed a static file, updated automatically only when there are changes. Then serve it with a standard cache/webserver setup.
    2. On the client side make RSS readers properly use the If-Modified-Since header. It's important that this be a request for a static file because most webservers will always run the script if the URL refers to one.

    This changes the conversation in most cases from "What's New?"-"(thinking...thinking...)These Things are relatively new." to "What's New?"-"Nothing." most of the time.

  17. Condensed summary of grouphug.us on 32,000 "Why I'm Tired" Emails · · Score: 1

    From one of their posts, but neatly summing up almost all of them:

    i tend to do stupid shit wen im horny.
  18. Re:Gentoo rocks on servers! on Netcraft: Red Hat Still Top Linux Server Distro · · Score: 1

    Got a 2.6 kernel on the Gentoo box? it's probably the dependent-read disk scheduler that makes the difference.

  19. Re:This is good stuff on Open Source Geographic Information Systems · · Score: 3, Informative

    Indeed. I was glad to read of JUMP in this report because I was looking for something along the lines of ARCView for occasional use and had been very frustrated with GRASS. GRASS may be extremely powerful and flexible for geographers etc, but for occasional analysis (by non-experts) it really sucks. JUMP looks to be just the ticket.

    I guess I'll know a little while once the download completes.

  20. Or do what we do in western Canada... on Best Buy Says Customers Not Always Right · · Score: 3, Insightful

    Start a Co-op & own the store.

  21. Also of Note. on Reduce C/C++ Compile Time With distcc · · Score: 2, Informative

    Many programs that can use the SSE or MMX extensions (such as video codecs or Software OpenGL) will fail to compile with DistCC, reporting "Couldn't find a register of class BREG".

    If the failing package is one of many, you can emerge just the one package by changing make.conf FEATURES to not include distcc.

    FEATURES="ccache" emerge xine-libs
    emerge whateveryouwerebefore
    Note here I've used the ccache feature. It's really handy because it won't re-compile any parts that've already compiled sucessfully. When make quits on an error, emerge cleans out the sandbox so you can't just let make take care of the already compiled objects.
  22. Re:Alternatively... on Free Certificate Authority Unveiled by Aussies · · Score: 1

    Except the part where I got the Governor General confused with the Leutenant Governor. The Governor General is federal, the Leutenant Governors are provincial.

    The professional associations are under provincial jurisdiction for most matters.

    The Governor General should act as a CA for Federal Ministies, Agencies, etc. Then for Canada there would be 14 root CAs (13 Provinces/Territories, 1 Federal).

  23. Thanks on Free Certificate Authority Unveiled by Aussies · · Score: 1

    That's a really big help.

  24. How? on Free Certificate Authority Unveiled by Aussies · · Score: 1

    How? Really... I need to know (for IE) & can't figure it out, short of having the sers install a binary of OpenSSL.

  25. Alternatively... on Free Certificate Authority Unveiled by Aussies · · Score: 4, Informative

    Here's a summary of a proposal I wrote for canadian provinces...

    The Governor General's office acts as the root CA for Government Ministries & Crown Corporations and Professional Associations.

    Any professional association (Bar Association, College of Physicians & Surgeons, Engineers, etc) acts as a CA for it's members and corporations working in their field (Law firms (lawyers, paralegals, legal secretaries), Medical Clinics (Doctors, Nurses, X-Ray Techs, Appointment Clerks), etc)

    Certified Accountants act as a CA for Corporations, Societies, Partnerships, etc.

    The Notaries public act as a CA for individuals.