Slashdot Mirror


User: dominux

dominux's activity in the archive.

Stories
0
Comments
312
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 312

  1. Re:Don't run root on Linux on Windows Exposes a New Attack Surface (eweek.com) · · Score: 1

    I wouldn't be too sure about not running servers on this. Plenty of places really really want to have a standard build of windows on all their servers without exception. Plenty of developers want their stuff to run on a well understood LAMP stack that isn't a complete and utter pain in the arse to install and update. WSL lets everyone be happy - not sure it can run background services properly yet, but there is certainly a use-case for it running servers. Now whether such a machine is vulnerable to this kind of exploit is a bit of an open question. This seems to be describing a potential privilege escalation by writing into the memory of Linux applications, which seems like something that shouldn't be allowed by the windows kernel.

  2. Re:Punish the serf class. on Theresa May Becomes UK's 'Spy Queen' and New Prime Minister (arstechnica.co.uk) · · Score: 4, Interesting

    Well we can vote to rejoin the EU, sure, if all 27 other countries want us back, and if we join the Euro, and join the Shengen border free zone. And pay the full contribution without the rebates we negotiated. Personally I think we should do all that, and get over ourselves and stop being an awkward antagonistic special snowflake in Europe.
    Europe is massively more democratic than it is perceived in the UK. The commission is headed by 28 representatives appointed by their democratically elected governments (albeit appointed to act in the interests of Europe) https://en.wikipedia.org/wiki/... the European parliament is made up of MEPs voted in directly. The council is the elected heads of state of the member countries. Junker was the first president of the commission elected to the post by the elected European parliament.
    There is a reasonably plausible democratic path to everyone involved, naturally there are lots of civil service type staff employed by the whole thing, and it is a bloated gravy train of bureaucracy, but that in itself is reformable and not undemocratic.

  3. stop promoting guns and invisible friends on Ask Slashdot: Can Technology Prevent Shootings? · · Score: 2

    Bit of an innovative idea, but maybe lets try making it a little harder to get guns and stop promoting the idea that it is OK for an adult to have an invisible friend that talks to them and tells them who to hate. The current approach to the invisible friend problem seems to be to say "oh, I have the same invisible friend and they are totally nice" or "This bad person seems to have the wrong invisible friend, mine is totally nice". These are both unacceptable and fucking stupid responses to religious violence. It is not OK for an adult to abdicate their responsibility for their own ethical position to a supernatural entity and a book of hate. It is not OK to normalise those who do.
    It is not OK to hate LGBT people. It is not OK to say "hate the sin and love the sinner" that isn't anywhere near good enough. It is not OK to send "thoughts and prayers" because in doing that you are promoting and normalising the position of having an invisible friend that hates people.
    Yes, it should also be less trivial to obtain battlefield weapons, and we should stop normalising the ownership of guns, but we should do that in addition to challenging the ridiculous medieval beliefs that are distancing people from reality, gun control won't implement hate control but we should do it anyway.

  4. vertical descents might be a little hairy on Passenger-Carrying Drone Gets Symbolic Approval For Test Flights In Nevada (theverge.com) · · Score: 1

    whirlybirds can't safely descend vertically at speed, the rotors enter their own downwash and you end up in a Vortex Ring State https://en.wikipedia.org/wiki/... this is how real helicopters crash and drones too. You can put a drone into that state fairly easily on a still day, just drop fast in one spot, then apply power and note you are still dropping under full power for quite a long way until you apply some tilt or just manage to stop when you get near the ground. If they don't understand the dynamics of this then I am not going to be getting into one.

  5. no, they have no obligation to open it on Microsoft Urged to Open Source Classic Visual Basic (i-programmer.info) · · Score: 1

    the lesson here isn't that Microsoft should open source their old and unmaintained stuff. The lesson here is that if you are thinking of using a new tool, consider whether the publisher is in a position to abandon it and you in the future, or whether it is Free Software that can't be unilaterally withdrawn by the publisher leaving you without the freedom to continue it yourself or find someone else to work with it.
    I think we need to get out the world's smallest open source violin for those requesting the opening of visual basic.

  6. Re:woah, just a minute on Turns Out That Snaps Are Not Secure In Ubuntu With X11 (softpedia.com) · · Score: 1

    naturally, but this is about the packaging. If you install a deb with sudo then you are running executable code that lives inside the deb with root privileges. With snap installation there is no postinst script or anything that runs as root as part of the install. You might run the snap installer as root, and that might process some commands in the snap, but it isn't running arbitrary code as root I think.

  7. woah, just a minute on Turns Out That Snaps Are Not Secure In Ubuntu With X11 (softpedia.com) · · Score: 4, Insightful

    If you have some software in a deb, and put that software in a snap, then you have increased your security slightly, but not much. If that software is then put on a Wayland or Mir desktop then you have increased the isolation of it a lot.
    If your software is in a .deb then you ran it's installation script as root. If it was bad then you are toast already.
    Snaps can be installed without being root, into the user home directory. This is an increased level of ability to run untrustworthy software. This whole exercise is so that open source systems can run untrustworthy proprietary paid for apps without the untrustworthy apps being a huge risk to the peer-reviewed code and other proprietary apps.
    Snaps are *not* a step backwards, but they don't get all the way to the end goal by themselves. They may have been over-sold slightly by Canonical because they are mainly for the phone which runs Mir, plus things like Firefox on the desktop which are trustworthy.

  8. probably just a spider on NASA Feed 'Goes Down As Horseshoe UFO Appears On ISS Live Cam' (mirror.co.uk) · · Score: 1

    happens to me all the time, bit of spider web over the lens. Little buggers get everywhere.

  9. point of sale hardware on Google Developers Create API For Direct USB Access Via Web Pages (softpedia.com) · · Score: 1

    This enables you to write a till or cash register screen and get it to talk to an attached ESC/POS receipt printer and cash drawer and chip and pin terminal and have that run in a browser process with no locally installed proxy process to get access to it. It isn't for your mouse and webcam.

  10. next a bowl of petunias on Growing Flowers In Space (nasa.gov) · · Score: 1

    and perhaps a sperm whale

  11. Re:Nano straw to Earth on NASA Safety Panel Finds Concerns With the Journey To Mars (examiner.com) · · Score: 3, Informative

    no, and sticking nano on the front of it doesn't make much difference.

    You know how barometric pressure used to be given in inches of mercury? well that was the number of inches you could suck a pool of mercury up a straw (don't do that!) before you end up with a vacuum at the top of your straw and you are sucking away and nothing is rising any further because the pressure of the atmosphere won't push it up any more. Turns out you can't suck it up that far before it would rather not go any further. If you use other fluids the same kind of thing happens, but more so, because mercury is heavy. For water I think it is about 13 meters For the atmosphere itself the distance you can suck it up a straw is exactly the height of the atmosphere!

  12. they had one, they gave it up on Carly Fiorina Says Government Needs a Way To "Work Around" Encryption (dailydot.com) · · Score: 2

    it is patented, here it is https://www.google.co.uk/paten... differential workfactor encryption, as used in the International version of IBM Lotus Notes until the US government decided not to classify encryption as heavy munitions. It gives the US government 40 bits of encryption to crack and everyone else gets 128 bits. (and you can vary the assisted evesdropper and workfactors to taste). As far as I am aware they never once gave a single shit about it whilst they had it, and never wanted other products to implement it.

  13. it is about high frequency trading, or nothing. on Russian Presence Near Undersea Cables Concerns US (nytimes.com) · · Score: 1

    It could be an entirely meaningless coincidence, the ship killing a bit of time, or doing some maintenance or a drill whilst out at sea in an area that happened to have a cable two miles below it, that is my option #1. It could be a bit of Russian research into whether they can find and disrupt these cables, that is option #2.
    If we want to go down the fantasy route, and accept that the Russians would not just try to find a cable to see if they could, but would contemplate actually disrupting a cable, then that would adjust the ability of high frequency traders to play international stock markets, possibly allowing some kind of economic advantage to be taken somehow. In this fantasy, at some point in the future a cable mysteriously breaks due to a completely deniable cause, stock markets go into meltdown and someone in their Kremlin lair makes a lot of money. It is hard to describe the number of levels on which this fantasy makes no sense.

  14. Re:Alternative alternative medicine on UK Labour Party's Support For Homeopathy Grows · · Score: 3, Insightful

    Because they are selling for money stuff that doesn't work, and persuading people to not trust medicine that does work. Thus they are profiting off harming vulnerable people. This is obscene.

  15. Can we stop the bullshit reporting here please? on UK Labour Party's Support For Homeopathy Grows · · Score: 5, Informative

    Someone asked her about homeopathy, she ducked the question. She was far from enthusiastic about it, but said she would be open to hearing arguments about it - which is what politicians say when they have no clue what their policy is and don't want to answer the question. She should have been decisive and said that the NHS should not ever fund anything that does not outperform a placebo and has no plausible theory of action, but she didn't, yet. This failure to respond to the question is now being spun, and slashdot is getting in on the action too. Maybe if she ever actually takes a position on homeopathy then there will be a story to report, but right now, @heidi_mp has not really done anything other than duck a question.

  16. how low can it go? on Dawn Drops To 1470km Orbit, Snaps Sharper Pictures of Ceres · · Score: 1

    Clearly it is at a good height now for imaging the whole surface, but as there is no atmosphere could it get down to a mountain scraping orbit? Just high enough to get round the lumps and bumps and variability in the roundness of the object? Would that enable it to image things at a really small pixel size?

  17. Re:They should have concentrated on desktop on Ubuntu Phones Now Available Worldwide (On Some Networks) · · Score: 1

    in theory, one day the desktop will run the phone operating system. I think this is what they mean by convergence, it will all be the same and it will all be QML. You might still be able to run GTK things on a desktop, but I am not 100% sure of that, I just can't see a viable desktop based on just QML things if it is supposed to be a successor to Ubuntu desktop.

  18. Re:Any useful reviews? on Ubuntu Phones Now Available Worldwide (On Some Networks) · · Score: 1

    no, you don't need to have an account to use the phone, you need a SIM card. If you want to use various googley (alphabetty) features like gmail then you need a google account. If you want to use telegram then you need a telegram account, same for facebook and ebay and various other things. Your phone will collect accounts, get over it. If you want to install things from the store then I think you need a launchpad/ubuntu account in order to leave feedback, fairly sure you can install apps one way or another without having that - but your phone will collect accounts, get over it.

  19. Re:What software? on Ubuntu Phones Now Available Worldwide (On Some Networks) · · Score: 4, Informative

    it runs various QML programs and there are a bunch of web based things mildly optimised for it.
    Yes, you can run a terminal out of the box.
    No, you can't run KDE or a different GUI (well you probably can, but if you were going there this isn't a good starting place)
    The scopes are equally pointless with or without privacy violating things (and really, that is almost entirely bogus FUD anyway based on the misunderstanding that the global search box in Unity was an application launcher, those concerns don't apply on the phone (there is no global multi-scope search)). Scopes are just categories of things you can search for, they are not that exciting.
    It uses a browser based on QML and Webkit, it is called Oxide and they ripped off the Safari icon for it (compass needle pointing north east).
    If you know Ubuntu and have been using it avidly since 2006 and know Unity 7 really well, then forget all that you have learned because this isn't the same at all. It is a new phone platform, bit like Android or iOS with no clearly defined market. I have one, it is my one and only phone, it is OK, but really I am not very demanding and completely anti-social so I don't really need to have a phone at all :)

  20. Betteridges law of headlines is wrong! on Does Using an AOL Email Address Suggest You're a Tech Dinosaur? · · Score: 1

    "Any headline that ends in a question mark can be answered by the word no." and this is a clear exception to that rule.

  21. Re:My God! on UK Forces Microsoft To Adopt Open Document Standards · · Score: 4, Interesting

    it is a result of quite a few years of lobbying by organisations such as Open Forum Europe and internal pressure from certain folk within the civil service. The government is reasonably receptive to well made arguments. They have a big love-hate thing going on with Microsoft. They know they are being screwed over by an American company that doesn't pay it's full share of UK taxes, so they like to kick back a bit now and then.

  22. stop doing stupid shit with VAT then on EU Commission Divided Over Nation-Specific Content Blocking · · Score: 4, Interesting

    At the start of this year VAT changed so that for digital online sales the place of supply is where the consumer belongs. This means if you sell an app/ebook/knitting pattern/recipe/tune then you have to collect two bits of non-conflicting evidence of the place of belonging of the consumer, then figure out which of the 70 or so rates of VAT across 27 countries applies for the specific product (several have special ebook rates) then you add VAT to the price and remit it to HMRC through the mini one stop shop (VATMOSS). There is no threshold for this and you can get penalties each quarter from 27 different countries if you get it wrong. Or, you can geoblock and say "screw you, I can't cope with this shit." to potential customers outside the UK.
    Geoblocking is about the only sane response to VATMOSS.

  23. training!=teaching on Finland's Education System Supersedes "Subjects" With "Topics" · · Score: 1

    this "preparing for the workplace" mantra is the thing that ripped computing out of primary and secondary schools and replaced it with Microsoft Office training. The assorted coding in schools initiatives (Codeclub, the Barclays code playground, Rewired State Codecademy and so on) are the rest of the industry trying to put teaching back into schools. Even Microsoft know they went too far pushing training and want to get teaching of coding back into schools.
    I have a suspicion that Finland will make this work (they have a good track record of making stuff work) but I think it is important to distinguish between training and teaching.

  24. why 10 years? on Hubble Discovers Quadruple Lensed Ancient Supernova · · Score: 1

    Is this something that is going away and will come back in 10 years? why? or is it something that is expected to last for 10 years?

  25. it solves the bit that isn't a problem on 3D Printers Making Inroads In Kitchens · · Score: 1

    so you have to make the pasta, make the filling, then load the machine with dough and filling, then wait two minutes per ravioli, then apply pressure to each one to check it is sealed and waterproof then drop them in the water to cook them. Or, seeing as you have made the dough already, roll it out, pop it over a ravioli tray http://www.amazon.co.uk/World-... put a spoonfull of filling in each bit and roll over another sheet of pasta, job done 12 at a time.
    I can see 3d printing as being interesting for high end intricate and decorative chocolate/sugar creations. Most pasta is formed by extrusion anyway, and you probably could do something interesting with 3d printing pasta, but not ravioli.