Slashdot Mirror


User: Dr_Barnowl

Dr_Barnowl's activity in the archive.

Stories
0
Comments
2,799
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 2,799

  1. Re:Security by obscurity on Australian Electoral Commission Refuses To Release Vote Counting Source Code · · Score: 1

    It's true that there is no difference in security between

    * A closed source, perfect, crypto component
    * An open source, perfect, crypto component

    If it's perfectly secure, the privacy of the source code makes no technical difference.

    private encryption can be much more secure than public

    As above, if the security of your solution is perfect, privacy makes no difference - public can be much more secure than private.

    The privacy of your solution DOES make a difference to other factors.

    * Trust

    People are more inclined to trust something they can inspect. If someone says "my security system is PERFECT... but you can't look at how it works", my first impluse is to think that they have something to hide. And that something could be a super cool proprietary technology, but it could just as easily be a gaping security hole a script kiddie could exploit. Given the fact that if you patent your super cool technology, the detail of it is public anyway, but I still can't steal it, the bias is that it's far more likely to be that your solution has problems, whether they be stupid mistakes, back doors for the NSA to exploit, or rude comments in the source code.

    * Peer review

    Good security is hard. Even if you're some kind of security savant, people think differently and someone may spot a gaping hole in your solution that you just have a blind spot to. Open, standard security technologies have multiple people poring over them looking for holes. There are people who get their kicks that way. Exposing your technology to as many of them as possible and letting them tell you what their opinion is, is the best way to evaluate your solution.

    It's easy to come up with something YOU can't break. It's much harder to come up with something that no one can break. The difference between private and public is that you'll only get to find out AFTER something is depending on your solution not breaking.

    Skype make a pretty big deal out of the security of their solution, but the truth is that leaked documents have made it very obvious that intelligence agencies can trivially intercept Skype communications - and we don't know whether this is because there are back doors, or because the security of the protocol is just crap, because we can't inspect the source code and there is no public documentation of the protocol. It's most likely there are back doors, because properly implemented crypto is not trivial to break. So this is a private system that many people trust, yet it's obviously not worthy of that trust.

    So closed-source security solutions are not the best idea, for exactly the reason you propose that they ARE.. if you keep the source private, you keep the security holes private. It will just take longer for someone to exploit them, or it will be insiders that exploit them. If you open the source up, when holes get found... yes, some of them will be by bad actors. But some will be found by people with an interest in seeing them fixed.

  2. Re:wall-e on New Treatment Stops Type II Diabetes · · Score: 3, Interesting

    is caused by a combination of lifestyle and genetic factors

    That's the key right there - in the majority of cases, you need the combination.

    As many have posted, some people are huge fatties with low cholesterol and well controlled blood sugar. This concurs with the above - they are lucky enough not to have the genetic components.

    Type II diabetes is of low incidence in India, but of high incidence in those of Indian-Asian ethnicity living in Western cultures. What's the difference? In India, people eat differently and exercise more. Despite their increased genetic predilection to Type II diabetes, they don't get it from their genetics alone.

    The assertion that it has one root cause is false - the human metabolism is a complex system with many factors. The fact that you can't control many of these factors seems to be a vast comfort to some folk, as if it somehow absolves them of responsibility - but it remains true that you DO have control over factors that by themselves can prevent you getting the disease.

  3. Re:There's another treatment that stops most T2 on New Treatment Stops Type II Diabetes · · Score: 1, Insightful

    Only a half-wit conspiracy theorist dumbass would think they aren't trying to find a cure.

    I think this is one case where conspiracy theory is basically the truth. Big pharma has created one of the most systematic systems of scientific fraud on the planet - running multiple studies and carefully cherry picking only those that happen to produce positive results to promote their new drugs, over the old ones with expired patents being just one of the tricks they use. If you want to see an excellent discussion of it from a statistical epidemiologist, read Bad Pharma by Ben Goldacre.

    In some cases, the new drugs have actually been proven to be worse than nothing at all later on, a fact that the drug companies almost certainly knew when they released them onto the market.

    Believing that a company that is ostensibly devoted to improving the lives of people, but actually engages in this crap, just to make a buck, would deliberately withhold a cure for something in order to continue selling a repeat treatment? All too easy.

  4. Re:There's another treatment that stops most T2 on New Treatment Stops Type II Diabetes · · Score: 2

    No, but it does mean that some of you who would have gotten cancer, don't.

    As the original poster suggests, it's all about learned response to food.

    My daughter likes processed crap as much as any 10 year old, but she loves home cooked food with plenty of veggies. Last Friday she was literally using both hands to cram the broccoli into her face (it was tempura broccoli, deep fried but basically nearly raw with a very thin coating of batter on a large piece of broccoli).

    She was brought up with a wide variety of fruits and veggies in her life. Until she started dance lessons, where there is a little pocket money tuck shop, she thought that the only kind of sweeties was dried fruit. She has always received encouragement to try new things, and never been restricted from eating foods because they are "too good for children" or "too grown up".

    On one notable oocasion when we were driving home from the supermarket we heard a "scronch, scronch" from the back seat like someone was eating an apple. But we didn't buy any apples. It's my daughter, eating a yellow bell pepper straight from the shopping bag with every sign of enjoyment.

    I'd be inclined to agree with the sibling poster I see now as I write this ; you're not just stuck in a childhood, you're stuck in a childhood where your parents did you no favours from a food point of view. But I don't agree that healthy has to mean rough or tangy - even something as simple as lentil soup is very healthy but very consistent in texture.

  5. Re:Security by obscurity on Australian Electoral Commission Refuses To Release Vote Counting Source Code · · Score: 3, Interesting

    Actually it's easier to mess with paper ballots. Messing with software leaves a trail.

    I) Messing with software doesn't necessarily leave a trail. For example, a system by which your votes are tallied and the results placed in a file on an SD card for collation in a central location, relying purely on security by obscurity, means that you could mess with the data file in transit and no-one would be any the wiser.

    II) It's easier to mess with paper ballots, principally because comptuer systems are understood by fewer people than slips of paper. For precisely the same reason, it's much harder to audit voting systems involving computers. Widespread fraud in paper voting systems is difficult to pull off, because the manual nature requires a lot of observers, and most people can understand handling votes in a trustworthy manner. Voting systems based on computers can be manipulated by a single agent, often without a trace. And the pool of people capable of auditing them shrinks the more complex you make them - mickey-mouse ciphers included.

    Paper voting spreads trust over a large number of people. Computer voting concentrates it in the hands of a very small technically adept priesthood, much easier to buy off or intimidate. I'm the first to geek out about some cool new method of using crypto, but I've come to realise that as much enthusiasm I have for the technology, I'm not really comfortable trusting the election of my government to it because it's so easy to subvert.

  6. Re:"It's just metadata" on UK Gov't Plans To Push "Emergency" Surveillance Laws · · Score: 1

    I FOIA-ed the police to get the footage from their surveillance chopper. They fobbed me off for months and then palmed me off with some shitty lowres footage from CCTV cameras.

  7. Web of Trust on Peer Review Ring Broken - 60 Articles Retracted · · Score: 3, Interesting

    People should cryptographically sign peer reviews (and their papers). And journals should only trust signing keys that themselves have been signed by respected experts. The more respected you get, the more signatures your keys and papers get.

  8. Re:"It's just metadata" on UK Gov't Plans To Push "Emergency" Surveillance Laws · · Score: 1

    I thought so too, until recently, when their apparently inability to report many fairly significant events of social unrest has been very obvious.

    There have been anti-government protests with tens of thousands of people marching against the current regime, relegated to 2 minute slots on the local news shot from a low camera angle to conceal the fact that there were 50,000 marchers (by the estimates of the police observing).

    Coverage on the destructive privatization of our National Health Service is notable by it's absence.

    Even if they are not wholeheartedly supporting the Tories, they would appear to be under their thumb.

  9. Re:Normal humans exlcuded from practicing law/medi on Normal Humans Effectively Excluded From Developing Software · · Score: 1

    Or the marathon race of medical residency where 100 hours is a normal week and 36 hours straight is a standard shift?

    That's because people are cheap bastards. They'd rather have medical residents who are tired to the point where they make decisions like they are three times over the legal alcohol limit, than pay to have more doctors. Hilariously, the USA spends nearly double what we do in the UK, but a lot of it goes on administration staff because of the whole insurance and billing thing. This is why you guys have such a hard-on for electronic health records ; automate all that shit and things get a lot cheaper. In the UK we just avoided most of it by having a single-payer system.

    I used to work those marathon weeks (here in the UK, where they are similarly cheap), but I quit due to stress. So the vast sums spent on training me went largely to waste ; although I do still make use of my medical background in my day job which is writing software for medical purposes.

  10. Re:And in other news on Uber Is Now Cheaper Than a New York City Taxi · · Score: 2

    That's only for one limited elite class of taxi drivers, the London Black Cab driver.

    The exam you're referring to is called "The Knowledge". Minicab (pre-booked hire car) drivers in London do not need "The Knowledge", but driving a black cab has a certain cachet that means they can charge higher fares - you know you're getting a driver that knows his way around beyond the cold and unadorned data that a GPS navigator can provide. The privilege for this differentiation is that only licensed taxi drivers are allowed to pick up fares off the street - all other hire cars have to be booked through their controller.

    The main problem that folks like the Black Cab drivers have with Uber is that the technology makes booking an Uber essentially as immediate as raising your hand and yelling "Taxi!", which erodes a substantial part of their competitive advantage. But as you point out, the same technology also makes their principal unique selling point (being able to navigate London without embarrassing pauses to flick through an A-Z) rather less relevant as well.

  11. Re:Misused? Murder is intrinsic in communism. on Foxconn Replacing Workers With Robots · · Score: 1

    Arrgh, meant to include this link to a short webcomic biography of Ayn Rand

  12. Re:Misused? Murder is intrinsic in communism. on Foxconn Replacing Workers With Robots · · Score: 1

    Ayn Rand's observations about human nature are heavily skewed toward broken people, such as she was.

    This is a woman who's mother didn't love her, who lied to her to take her toys away just so she could gain some social capital by giving them to charity.

    Her observations are thus very pertinent in the light of a capitalist society such as we have, because capitalism is a system that treats people like that - as something to exploit for profit, regardless of their need. This is justified by the accurate observation that the striving that results creates wealth, but it is not shared appropriately - the "out for what I can get" mentality perpetuates the notion that, for example, the selling of a product is intrinsically more worthy than the manufacture of the product, when without the manufacture of the product, both the seller and the maker would be in equal penury.

    Children naturally have a sense of fairness and sharing. The main reason humans developed big brains was not to figure out the world, but to figure out other people - cooperation was the "secret sauce" that elevated us above the other monkeys. I don't think the kind of human nature that Ayn Rand observes is our actual "natural" nature, but merely something that emerges from the interaction of humans with the capitalist system, a system which is observably dominated by those who do NOT have these basic human traits - corporate officers having more than their fair share of sociopaths.

  13. Re:Faith in God on Site of 1976 "Atomic Man" Accident To Be Cleaned · · Score: 1

    I think it's fairly certain that it hasn't happened, or the church who had best claim to it would never stop braying about it. A verifiable spontaneous limb regeneration would be like religious gold.

  14. Re:This is stupid and dangerous on Microsoft Opens 'Transparency Center' For Governments To Review Source Code · · Score: 1

    Both EULAs I think, but also from the POV of the projects involved, they don't want to take the risk of contributions from someone with any significant chance of having MS code in their head, because it could open them up to a potential lawsuit later.

  15. Re:Freely view the source code? on Microsoft Opens 'Transparency Center' For Governments To Review Source Code · · Score: 1

    The real cost is the inability to contribute to any open-source project that covers similar ground.

  16. Re:This is stupid and dangerous on Microsoft Opens 'Transparency Center' For Governments To Review Source Code · · Score: 1

    No-one involved can reasonably ever work on a comparable OSS project again either.

    For example, contributing to Mono isn't really allowed if you view the sources that MS provide for their .NET runtimes (to help with debugging).

  17. Re:What's the point? on Microsoft Opens 'Transparency Center' For Governments To Review Source Code · · Score: 4, Interesting

    If you ask any IT team lead, the real reason is the usability and it-just-works qualities of the software.

    If you ask most IT team leads, the real reason is that they know that users in general treat computers like voodoo - perform a particular ritual a particular way, and you get the desired outcome. This lack of mental flexibility means that when someone learns a particular GUI they are not keen to change to a new one - which is the reason you get exactly the same inertia about switching to a new version of MS Office (vis: all that Ribbon hoo-hah) that you do for switching to another OS (with it's other applications with other GUIs).

    This is the "usability" part of that statement. That's the reason that people railed so heaviliy against Windows 8. Why do you think MS invest so heavily in giving copies of their software to schools? Get those GUI rituals in peoples heads.

    As for it-just-works... MS software does plenty of infuriating and irritating does-not-just-work things.

    * Linux : I can move a file while I have it open in an editor, and saving the file in the editor saves to the new location
    * Windows : Won't let you move the file

    Microsoft would solely have to lean on selling support and consultation services after that.

    I can imagine that terrifies them ; presently, even if you pay for support, you get very little. You get better support for Windows and other MS software from the community. With popular OSS projects, you typically get good support from both the community and the authors, AND you get the ability to look at the source code to understand your problem better or even fix it (or hire a contractor to do this). This is one of the cornerstones of why I use OSS wherever possible in my technology stack - the larger the software company gets, the less my problems matter to them. IBM manages just fine in this model.

    Windows works today, out of the box.

    This is so untrue on so many levels.

    When I install Linux, it usually takes about 20 minutes, with no driver downloads (because I do my homework and buy compatible hardware). Most distro's leave you with a machine that has a bunch of useful applications, out of the box.

    With Windows, I've had to hunt for drivers, download drivers, slipstream special drivers into special install disk images (so that the install can proceed far enough for the real drivers to be installed...). This is for machines that were sold with Windows and provided with install images. It literally took me all night to reinstall my wife's laptop (reboot! reboot! reboot!) after her office decided that because the Linux install didn't support their proprietary disk encryption program it wasn't suitable (never mind that it had perfectly good encryption on it anyway). And that's just for the core OS, never mind the vast list of applications that you have to add to make it even marginally useful.

    At that moment, the Linux guy will still be applying various fancy patches and trying out different distro and desktop environment combinations to see which works best.

    I use Linux for all my real, productive work on a daily basis, use stock packages for the vast majority of things, use the standard Ubuntu image, again, out of the box, without doing anything to it bar installing packages and configuring a few of the options a little.

    Unlike Windows, I don't need to tweak my install ; If I move to another machine (say, a hardware replacement cycle), I can literally move the disk from one machine to another and keep on trucking - Windows throws the most epic tantrum imaginable if you try that. If I want to go crazy and upgrade to a new version of the OS, I back up my home folder, install the new OS, install the packages I had before with a single command, restore my home folder and move over most of my files and config folders... and I'm off again. Again, if you try that on Windows, you're screwed, because mo

  18. It wouldn't work at all - there's nothing magic about them numbers.

    The only way to be sure that you got a copy of binaries that corresponded to the source code would be for each agency concerned to get it's own copy of the source, and build Windows for itself, using it's own audited compiler toolchain. This is not something that MS will allow to happen.

  19. Re:Better way for Microsoft to earn trust on Microsoft Opens 'Transparency Center' For Governments To Review Source Code · · Score: 2

    Hundreds of legacy code developed for Windows platform using Windows development tools run only on XP and are not supported by 7 or 8.

    This is generally because they were really badly written and do things that have been recommended against for years - like storing settings in the same folder as the program, which means that in some cases non-admin users can't even use the program because they don't have permission to create the initial settings file. I'd like to say this is generally confined to amateur developers but I've seen it so many times from so-called professionals that it's sad.

    It's not something specific to Windows, but not something you tend to see as much in the POSIX world because there is such a long-standing culture of *nix machines being multi-user machines - programmers tend to grok from the outset that user programs need to store user settings in a user's home folder.

    In general, Windows 7 is impressively compatible with code written for Windows XP (and Windows 2000, etc.). The difference is that IT departments have started locking Windows 7 machines more than they have done in the past.

  20. Re:What's the point? on Microsoft Opens 'Transparency Center' For Governments To Review Source Code · · Score: 4, Insightful

    And who says they build their binaries from those sources? The backdoors are probably kept in a separate branch and merged with the release branch at build time...

  21. Horses for courses. on Ask Slashdot: Correlation Between Text Editor and Programming Language? · · Score: 1

    Eclipse :

    * Java
    * XSLT
    * XML (mostly Maven POM files)

    I use the Vrapper plugin for Vim key binding. It's not perfect, alas.

    Komodo Edit:

    * Python
    * Ruby
    * HTML
    * Text
    * XML

    In particular, it's "Fast Open" option is really useful for large folder trees full of many files that you know the names of.

    And it has a Vim keybinding, which isn't perfect, alas.

    Notepad2 :

    For a general fast-open general Notepad replacement on Windows.

    Vim :

    Vim is of course, awesome. I'll be quite pleased if the Neovim project actually succeeds and makes it into a library, and other editors can integrate it properly.

    Vim gets used for most of the text files I edit at one time or another, particularly in concert with shell operations like find and grep.

  22. Re:This is the final nail in the coffin of Fuel Ce on Toyota's Fuel Cell Car To Launch In Japan Next March · · Score: 1

    In the case of fuel cells, they are expensive because they contain platinum. That isn't going to get any cheaper.

    And the current generation of fuel cells can only use hydrogen as fuel, which is still a fossil fuel (as another poster points out, produced from natural gas). Just because they conveniently removed all the carbon for you centrally and you can feel better about none of it coming out of the tail pipe, doesn't make it less of a fossil fuel.

  23. Re:Why? on It's Not a Car, It's a Self-Balancing Electric Motorcycle (Video) · · Score: 1

    The gyros are under computer control, and the vehicle leans into turns as you would expect a motorcycle to.

  24. Re:Grow up on EU's Top Court May Define Obesity As a Disability · · Score: 1

    I started doing the 5/2 fasting.

    The first two weeks are hell - hunger pangs, cold sweats. Then you get used to it. Metabolic pathways that have fallen into disuse start to work properly again. The pangs go away and you are aware of your hunger but not ruled by it.

    I agree, people who eat too often have a broken hunger drive. They broke it, because when you eat to regulate your blood sugar, your body stops having to do it for you. If those parts of your metabolism don't get the exercise, they seize up. But the good news is that it only takes a few fast days to get them working again ; your liver is extremely good at adapting.

    Instead of regulating your blood sugar by putting a twinkie into your face when you feel a hunger pang, your body starts to be able to regulate it on it's own again, and you are once again in charge of how often you eat.

    The next thing to do is to break the little-and-often habit - since it usually involves opening a wrapper, because who cooks that often? Anything in a wrapper is probably high in sugar, because it prolongs the shelf life. Use those fast days to fantasize long and hard about the delicious home-cooked meal you're going to break your fast with, and it tastes all the better and feels like a real reward.

  25. Re:Food science + MBAs = profit on EU's Top Court May Define Obesity As a Disability · · Score: 1

    The difference is that heroin isn't relatively cheap, legal, easy to obtain, and necesary for continued life (addiction notwithstanding).