Slashdot Mirror


User: Carnildo

Carnildo's activity in the archive.

Stories
0
Comments
2,487
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 2,487

  1. Re:PHP software apparently at fault YET AGAIN. on Wine HQ Password Database Compromised · · Score: 2

    It's not PHP that's the problem here, it's the specific software package phpMyAdmin. It's software that should never be deployed on an Internet-facing computer because of its security problems: about a third of the malicious traffic on my webserver is people probing for phpMyAdmin installations.

  2. Re:How secure... on Wine HQ Password Database Compromised · · Score: 3, Insightful

    How secure...is sending out passwords via mass email in plain text?

    Sending passwords in clear-text emails is only a minor security risk: in general, only network providers, system administrators, and three-letter agencies are in a position where they can intercept or read a user's email. If the people who attacked the WineHQ database don't fall into one of those categories, resetting passwords and sending the new ones in clear-text emails represents a dramatic reduction in the impact of the database compromise. If the attackers *do* fall into one of those categories, sending the emails does not increase the impact.

  3. Re:Oh that's secure on Wine HQ Password Database Compromised · · Score: 2

    So their solution to a security breach is to send out everyone's logins via clear text?

    It's much harder to intercept email than it is to decrypt an encrypted password: assuming that WineHQ users are typical in their password habits, about 75% of the passwords in the database are vulnerable to a dictionary attack and thus should be considered known to the attackers. By giving everyone a new password and emailing them in the clear to the users, they ensure that only those users who also have their email intercepted by the attackers are compromised.

    What the WineHQ admins have done is reduce the number of compromised users from approximately 75% to approximately 0%.

  4. Re:Catalyst or not? on Does Italian Demo Show Cold Fusion, or Snake Oil? · · Score: 1

    Comments like this make me think of the Frazier Lens. All the scientists and experts in optics that he talked to said it was impossible to make a lens (or system of lenses) that had perfect focus at infinite depth of field. (Not sure if I have the correct terms - Everything is in focus no matter the distance from the lens.) He tinkered away in his garage and figured it out. Frazier Ultimate Lens

    Except he didn't. He's got a lens with an exceptionally high depth of field, but it's not infinite. The only lens with a truly infinite depth of field is the pinhole lens, which has other problems that limit its use.

  5. Re:This is scientifically impossible on Does Italian Demo Show Cold Fusion, or Snake Oil? · · Score: 1

    If I'm doing the math right, nickel-58 + hydrogen is very slightly energy positive. The problem is that copper-59 is radioactive (half-life 81 seconds) and decays into nickel-59, which has a half-life of about 7600 years. You can then fuse the Ni-59 with hydrogen to get Cu-60 + a little bit of energy, which decays (half-life 23 minutes) into stable Ni-60. Yes, you can get energy out of it, but you also get copious amounts of beta radiation and unstable intermediate products to deal with -- hardly the "no radioactive byproducts" claimed.

    If you want to eliminate the radiation, you can fuse Ni-62 to Cu-63, but that reaction consumes energy rather than producing it.

  6. Re:Yes, of course on Climate Change Driving War? · · Score: 1

    Well, where do you think the water from the areas experiencing drought will end up? Droughts often coincide with increased precipitation elsewhere.

    That's not too helpful if the increased precipitation comes in the form of named storms dropping rain by the foot.

  7. Re:Climate Wars on Climate Change Driving War? · · Score: 1

    I'd disagree that WWI was an exception: one of the big causes of the war was tension between the Austro-Hungarian Empire and the Russian Empire over control of the Balkans (and the resources therein).

  8. Re:What's the problem? on Italian Wikipedia May Shut Down Due To New Legislation · · Score: 1

    Seriously - don't host in Italy, and who cares?

    The Italian editors care.

    97% of the people who edit the Italian Wikipedia live in Italy. If this law passes, it will become legally unwise to edit Wikipedia from Italy, as editors have no way to ensure that they are in compliance with the law.

  9. Re:Any sysadmins for large web servers out there? on Wikimedia Foundation Enables HTTPS For All Projects · · Score: 1

    It depends on your network infrastructure, especially how CPU-intensive your content is already.

    Google's numbers are a 2% increase in network traffic, a 1% increase in CPU usage, and 10kb RAM per connection. Your network numbers will go up if you've got SSL frontend servers talking to content backend servers (Wikipedia's solution), while your CPU numbers will go *way* up if most of what you're serving is static content (this is where SSL's reputation as a CPU hog came from; these days, almost everyone serves CPU-heavy dynamic content and won't notice much of an increase).

  10. Re:First step (or post) on Ask Slashdot: How to Exploit Post-Cataract Ultraviolet Vision? · · Score: 1

    A "black" light has a little bit of leakage into the "violet" end of the traditional visible spectrum: most people see them as having a dim purple glow.

    You've probably got a difference in the lenses in your eyes: rods and red and green cones all have a sensitivity cutoff around 400nm, while blue cones are sensitive well into the ultraviolet. With most people, the lenses filter out UV.

  11. Re:Dog and Pony Show on Boston Dynamics Unveils AlphaDog Quadruped Robot · · Score: 2

    Animals are cheaper and can self replicate.

    Horse production has a four-year lead time. To put this in perspective, if the United States had started ramping up horse breeding for a growing Army logistics need with the bombing of Pearl Harbor, the first horses would be available about four months after Japan surrendered.

  12. Re:I have a cheaper/better/faster alternative to t on Boston Dynamics Unveils AlphaDog Quadruped Robot · · Score: 1
  13. Re:Google Maps and Firefox vs. Chrome on Chrome Set To Take No. 2 Spot From Firefox · · Score: 1

    It makes me wonder whether it's Firefox's fault, or if Google Maps has been tweaked to work better in Chrome, or perhaps both.

    As I understand it, it's the other way around: Chrome has been tweaked to work better with Google Maps.

  14. Re:10% on HIV Vaccine Trial Shows 90% Immune Response · · Score: 1

    If 90% of a population becomes immune, the chances of the disease spreading within it diminishes accordingly. Eventually, all live carriers die of old age or the disease, and no new carriers are produced, thus eliminating the disease from the population. Heck, even a 55 % successful vaccine could do this, it would just take longer.

    What you're describing is herd immunity, and the required effectiveness of the vaccination effort depends on the specific disease. For smallpox, with a short infectious asymptomatic period and easy transmission, the threshold is around 85%: a vaccine that is less than 85% effective cannot be used to eradicate smallpox. HIV has a very long period (years) when someone can infect others but has no symptoms, so I'd expect the herd immunity threshold to be very high -- possibly 99% or higher.

  15. Re:It was a very Japanese game on Square Enix Admits Final Fantasy XIV Damaged Brand · · Score: 1

    All that said, I love the FF settings (usually), but FF7 & FF8 for PC should have long ago proved they cannot handle a PC game... Which is ironic since I can run both in emulation better than the PC builds Square made...

    If you look closely at FF7 for PC, it's obvious that the PC "port" is simply a Windows compatibility layer wrapped around a Playstation game. Modern Playstation emulators provide a much better compatibility layer than Square did, and since they're separate from the game, they can keep improving.

  16. Re:Not a huge surprise on Power Demand From US Homes Expected To Fall For a Decade · · Score: 1

    Toaster ovens have their drawbacks, though: if you're cooking for a long time (say, hours to roast a turkey), a full-sized oven's insulation gives it the edge in energy efficiency. Additionally, that insulation means a full-sized oven has better control over temperature, if you need precise temperature control to drive certain chemical reactions in the food.

  17. Re:Good for insurance on Medical Billing Codes For Injury Via Turtle Among Thousands Created by New Law · · Score: 1

    Water skis are treated as a type of boat, so they get all the standard code variations for boat-caused injuries. Compare the water-ski list to the beginning of http://graphicsweb.wsj.com/documents/MEDICALCODES0911/#term=fishing_boat

  18. Re:Then again... on Steve Jobs, Before the iPad, On Why Tablets Suck · · Score: 1

    Opening an iPod Touch is easy. Took me about 15 minutes to swap out the battery. That included making tea.

    I can replace the batteries in my camera in 15 seconds.

  19. Re:It's a shame... on Measles Resurgent Due To Fear of Vaccination · · Score: 1

    Secondly, not all people can be immunized. Children too young to have a fully working immune system...

    This is especially true for whooping cough: once you're old enough to be vaccinated against it, you're old enough to be almost certain to survive it. It's mainly infants who die from whooping cough, and they're too young for the vaccine to work.

  20. Re:US is still mostly Feudal on Canadian Judge Rules Domain Names Are Property · · Score: 1

    Actually we still have feudalism in the US. In most States, most property is owned 'in fee simple'. You only ever own a title to the land, you don't own the land itself (in allodium, historically available in Nevada and a few other States). Most often, the State is the landowner, and effectively he can take it back whenever he wants to. If you don't pay him rent on his land, he'll seize the title and throw you off his land.

    We never really made much progress - we just instituted State feudalism instead of Lording feudalism.

    Allodial title may sound like a solution to an overbearing government, but it's got a major problem of its own. Since it can't be seized, you can't use the property as security for a loan: transactions involving the property must be paid in full at the time of sale, contractors must be paid in advance (since they can't get a lien on the property, they've got limited recourse if someone refuses to pay for work done), the property owner can't get an equity loan to finance a project, and so on.

  21. Re:Three points on Fake Names On Social Networks, a Fake Problem · · Score: 1

    Facebook is not The Internet. Thankfully. Facebook and G+ both require real names for the majority in order for people's social networks to be able to mirror real life, which is the point of FB.

    If I were to sign up for Facebook using my real name, the resulting social network would bear no resemblance to my actual social network. The only people who refer to me by the name on my birth certificate are relatives and co-workers -- everyone else uses one pseudonym or another.

  22. Re:In other news... on Black Hat Talk Demonstrates New Document Exploits · · Score: 1

    Nobody designing data file formats is actually putting in official ways to run executable code.

    Nobody?

  23. Re:Attractive Nuisance on Defcon Hacks Defeat Card-And-Code Locks In Seconds · · Score: 1

    Easy.

  24. Re:What's next? on Apple Patents Portrait-Landscape Flipping · · Score: 2

    As far as I can tell, both the "prior art" monitors used a contact switch rather than multiple accelerometers to determine orientation. Apple's patent is on figuring out which way is "down" based on accelerometer readings and selecting "portrait" or "landscape" based on that.

  25. Re:Other interesting things on Undersea Cable Map Shows Where The Data Pipes Are · · Score: 1

    If you're referring to ATLANTIS-2, it's a cable connecting South America to Europe, and the specific routing is because it's paid for by a consortium of companies from Argentina, Brazil, Senegal, Spain, and Portugal. By crossing the Atlantic where it does, it takes a route that minimizes the amount of deep-water cable needed.