creating demand, crypto currency is generated by wasting huge amounts of electricity, why wouldn't want the energy companies want it to be more popular
Nobody mines bitcoins in Japan. There is no benefit to Japanese utilities when bitcoins are mined in Oregon or Iceland. Iceland has the lowest electricity rates, but Oregon is close and has no sales tax.
if somebody grabs a copy of it from the server they can still log in by sending that as the salted-crypted password.
Only if you use single-factor-auth. If you use a known-client cookie as a second factor, this problem goes away. If the user is logging in from an unknown client, then you ask a security question or send a code to their registered cellphone, or whatever.
Proper security is done in depth. Each level needs to be reasonably secure without compromising convenience. Client-side hashing is not a panacea that solves everything, but it is a simple common sense step that adds an extra layer of security.
So then the hash becomes a plain text password?....
... except that it is not plain text because it is salted and hashed, so even if it is later compromised, it is useless for logging into other sites.
If you transmit the plain text password to the server before hashing, you are open to multiple vulnerabilities. It is vulnerable in transit, it is vulnerable to memory side attacks on the server, it is vulnerable to VM compromises if it is swapped to disk, it is vulnerable to compromised software on your server, and it is vulnerable to disloyal employees. And all of that is even if neither you nor any of your employees are stupid enough to actually store it in a DB.
Plain text passwords should never leave the client.
None of this is of any value if you don't give your kids access to your credit card.
My 16 year old daughter has had her own card since she was 10.
And if you do, then you're already exposed to bigger threats.
Like kids who have learned responsibility and basic financial management? Just make sure the limit is low, and let kids make mistakes and learn from them. Your kids won't grow up to be capable and responsible adults if you shelter them from reality and make every decision for them.
The real problem was not SQL vulnerabilities. Plain text passwords should never be transmitted to servers. They should be salted and hashed on the client. It should have been clear to anyone that bothered to look at the data being transmitted that this website had major security problems and was developed by clueless amateurs.
So why aren't they teaching game modding in high school?
Because students are already learning modding in elementary school. I work in an after school program in San Jose, California, that teaches 5th and 6th graders how to write Minecraft mods in Python. They kids love it, and I certainly hope it gives them some of the basic skills that a hacker should have.
Many times. Not in America, of course, but in some other countries it is common for DOB, marital status, and sometimes even ethnicity, to be listed on a resume. It is also very common for a photo of the applicant to be included.
Of course, this makes discrimination easier and more prevalent. But in many countries discrimination is legal. For instance, many job ads in China will specify "Han only" to make it clear that they don't want to hire any Tibetans, Hui, Uighurs, etc.
I don't think the first amendment includes the right to post personal details about people without their permission.
With very few narrow and specific exceptions, the US Constitution does indeed give you the right to post personal details about people.
As a general rule, your right to speak trumps my right to privacy. The best way to protect your privacy is to be an extremely uninteresting person. At least that works for me. Nobody posts my personal details because nobody cares enough to read about them.
The map display in a Tesla already shows traffic congestion. I have heard that they get the data from aggregate cell phone data. The cell towers can tell when the cellphones bunch up and stop moving.
There were several problems with the Harrier. Most crashes occurred during the transition from vertical to horizontal flight, as the vents pivoted. A quadcopter drone doesn't have that problem, since the thrusters don't pivot. The Harrier crashes were also way more common with newbie pilots. A quadcopter doesn't have that problem either, since there is no pilot.
The Harrier problem was fixed with more powerful engines (AV-8B replacing AV8-A), and better pilot training. Newbie pilots were assigned to F18 squadrons, and were not trained on VTOL until after they had several years of flight experience.
Because if you don't use electricity, it doesn't really get generated in the first place.
Yes, it does get generated. Excess power can be dumped to the grid at a negative price of about -1 cent per kWh. At that price, someone will take it off your hands. So then why would you generate it and lose money? Answer: Subsidies. Wind producers receive a federal subsidy of about 2.3 cents per kWh. So it makes sense for them to continue to generate and push the power into an overloaded grid that has no use for it, because they make money doing that.
Often the utilities are forced to purchase electricity that they don't need and have to dump.
That may happen in Oregon, but not in Texas. In Texas electricity is priced in spot markets and updated many times per day. Texas utilities are not compelled to pay a fixed price, and occasionally the spot price even goes negative. Of course, the wind turbine operators still make money because of federal subsidies, but you can't blame that on Texas.
English can, and should be, logically structured. Is its complexity that is holding back from the use by the masses?
English can be precise if you choose your words carefully. But you will soon find that you are saying or typing WAY more than if you used a real programming language to do the same thing.
Would you rather type: for (int i = 0; i < 10; ++i) {
Or: Using an integer with at least 32 bit precision initialized to zero, test if the integer is less than 10, and if so perform the specified task, and then increment the integer, and repeat the test.
Which would you rather debug?
Do you think mathematicians should also eschew mathematical notation?
Do you think chemists should describe molecules in English, rather than using formula or diagrams?
Also, "demand" is not fixed. With variable pricing, consumers and companies can be incentivized to use power when it is cheap, and conserve when it is not. Many appliances, such as dishwashers, clothes washers, and dryers, have a delay feature. ACs and refrigerators can be pre-chill when power is cheap, and idle their compressors when prices spike.
My city (San Jose, California) has smart meters, and my AC will automatically shutdown if there is a power shortage. I get discounted power at other times for allowing the power company to install the cutoff switch.
My wife has a Tesla, and it is preprogrammed to start charging at 2:30am, when power is cheapest. As electric cars are more widely adopted, they can act like a sponge to soak up surplus power whenever it is available. There are also proposals to have idle electric cars feed power back to the grid during shortages.
Texas is not connected to the national grid, so it's not really going to be used exclusively by Amazon or any tech.
Who cares? It is all fungible. CO2 avoided anywhere helps everywhere. It is all a silly PR stunt, so it is silly to complain that it isn't slightly less silly in some meaningless way.
Does anyone actually know a programmer who want such a thing?
I do. I have an Amazon Echo in my kitchen, and I use the voice recognition all the time. If I am cooking dinner, and I notice we are low on milk, I can say "Alexa, add milk to the shopping list" without washing my hands or touching my phone or laptop. I can use voice to turn lights on or off, request specific music, ask for news or information on specific topics, etc. The voice recognition works well, and it is a useful service.
if you own a piece of property, do you own the airspace above it?
The FAA allows aircraft to fly over your property without your permission as long as they maintain a minimum altitude. Over congested areas, I think the minimum is 1000 ft (300m) above ground level.
A pizza drone is a pro tool for making money, you expect it to be more regulated than a "fun" drone.
No, you should not expect that. Drones should be regulated based on size, location, method of control (line-of-sight or not), and payload (camera, machinegun, etc.). Whether the pilot is a "hobbyist" or a guy trying to support his family is irrelevant. "Profit" doesn't make it any more or less dangerous.
This link shows the relative cost of operating a fossil vs nuclear plant through 2014.
Those are operating costs. Of course nukes are cheaper to run, but they are far more expensive to build. They are also more expensive to insure and to decommission.
When fuel and O&M costs are considered, nuclear comes out cheaper.
When ALL costs are considered, nuclear comes out more expensive.
... or United Way (both often cited as "bad" or "misleading" charities)
The United Way is not considered "bad" just because of where their money goes, but also where it comes from. Every year they run a "Federal Campaign", to collect money from government employees. When I was in the military, each unit had a quota of contributions to collect, and commanders were judged on their ability to collect. This led to a lot of coercion and abuse. Anyone who didn't agree to sign up for a monthly payroll deduction was assigned to clean latrines or given guard duty when everyone else had a 4 day pass. There were privates with families to support, barely making enough to survive, getting their pay docked every month despite needing the money far more than most United Way recipients. United Way collects contributions, skims administrative fees off the top, and then passes the rest on to the actual charities. It is far better to contribute directly to deserving charities, and leave United Way out of the loop.
Slashdot Mirror
creating demand, crypto currency is generated by wasting huge amounts of electricity, why wouldn't want the energy companies want it to be more popular
Nobody mines bitcoins in Japan. There is no benefit to Japanese utilities when bitcoins are mined in Oregon or Iceland. Iceland has the lowest electricity rates, but Oregon is close and has no sales tax.
There's one problem with it though: it requires storing the plaintext password on the server
No it doesn't. You can store a salted hash and then perform the challenge/response against a regenerated hash on the client.
I don't know of any challenge/response algorithm that works with one-way hashes of passwords.
I don't know of any that don't. Why would an algorithm care if the "password" was plaintext or a hash?
if somebody grabs a copy of it from the server they can still log in by sending that as the salted-crypted password.
Only if you use single-factor-auth. If you use a known-client cookie as a second factor, this problem goes away. If the user is logging in from an unknown client, then you ask a security question or send a code to their registered cellphone, or whatever.
Proper security is done in depth. Each level needs to be reasonably secure without compromising convenience. Client-side hashing is not a panacea that solves everything, but it is a simple common sense step that adds an extra layer of security.
So then the hash becomes a plain text password?....
... except that it is not plain text because it is salted and hashed, so even if it is later compromised, it is useless for logging into other sites.
If you transmit the plain text password to the server before hashing, you are open to multiple vulnerabilities. It is vulnerable in transit, it is vulnerable to memory side attacks on the server, it is vulnerable to VM compromises if it is swapped to disk, it is vulnerable to compromised software on your server, and it is vulnerable to disloyal employees. And all of that is even if neither you nor any of your employees are stupid enough to actually store it in a DB.
Plain text passwords should never leave the client.
None of this is of any value if you don't give your kids access to your credit card.
My 16 year old daughter has had her own card since she was 10.
And if you do, then you're already exposed to bigger threats.
Like kids who have learned responsibility and basic financial management? Just make sure the limit is low, and let kids make mistakes and learn from them. Your kids won't grow up to be capable and responsible adults if you shelter them from reality and make every decision for them.
The real problem was not SQL vulnerabilities. Plain text passwords should never be transmitted to servers. They should be salted and hashed on the client. It should have been clear to anyone that bothered to look at the data being transmitted that this website had major security problems and was developed by clueless amateurs.
So why aren't they teaching game modding in high school?
Because students are already learning modding in elementary school. I work in an after school program in San Jose, California, that teaches 5th and 6th graders how to write Minecraft mods in Python. They kids love it, and I certainly hope it gives them some of the basic skills that a hacker should have.
You've seen DOB on a job application form?
Many times. Not in America, of course, but in some other countries it is common for DOB, marital status, and sometimes even ethnicity, to be listed on a resume. It is also very common for a photo of the applicant to be included.
Of course, this makes discrimination easier and more prevalent. But in many countries discrimination is legal. For instance, many job ads in China will specify "Han only" to make it clear that they don't want to hire any Tibetans, Hui, Uighurs, etc.
I don't think the first amendment includes the right to post personal details about people without their permission.
With very few narrow and specific exceptions, the US Constitution does indeed give you the right to post personal details about people.
As a general rule, your right to speak trumps my right to privacy. The best way to protect your privacy is to be an extremely uninteresting person. At least that works for me. Nobody posts my personal details because nobody cares enough to read about them.
The map display in a Tesla already shows traffic congestion. I have heard that they get the data from aggregate cell phone data. The cell towers can tell when the cellphones bunch up and stop moving.
There were several problems with the Harrier. Most crashes occurred during the transition from vertical to horizontal flight, as the vents pivoted. A quadcopter drone doesn't have that problem, since the thrusters don't pivot. The Harrier crashes were also way more common with newbie pilots. A quadcopter doesn't have that problem either, since there is no pilot.
The Harrier problem was fixed with more powerful engines (AV-8B replacing AV8-A), and better pilot training. Newbie pilots were assigned to F18 squadrons, and were not trained on VTOL until after they had several years of flight experience.
And while wind companies are doing that, what are the coal/gas/oil plants doing?
Gas turbines shutdown.
Coal continues to generate, because the latency is too long to be worth shutting them down for a price dip only lasting an hour or two.
Nobody uses oil for grid connected power generation.
Because if you don't use electricity, it doesn't really get generated in the first place.
Yes, it does get generated. Excess power can be dumped to the grid at a negative price of about -1 cent per kWh. At that price, someone will take it off your hands. So then why would you generate it and lose money? Answer: Subsidies. Wind producers receive a federal subsidy of about 2.3 cents per kWh. So it makes sense for them to continue to generate and push the power into an overloaded grid that has no use for it, because they make money doing that.
Often the utilities are forced to purchase electricity that they don't need and have to dump.
That may happen in Oregon, but not in Texas. In Texas electricity is priced in spot markets and updated many times per day. Texas utilities are not compelled to pay a fixed price, and occasionally the spot price even goes negative. Of course, the wind turbine operators still make money because of federal subsidies, but you can't blame that on Texas.
How do you dump electricity you don't need?
Sell it at a discount to people that need to charge their electric cars.
English can, and should be, logically structured. Is its complexity that is holding back from the use by the masses?
English can be precise if you choose your words carefully. But you will soon find that you are saying or typing WAY more than if you used a real programming language to do the same thing.
Would you rather type: for (int i = 0; i < 10; ++i) {
Or: Using an integer with at least 32 bit precision initialized to zero, test if the integer is less than 10, and if so perform the specified task, and then increment the integer, and repeat the test.
Which would you rather debug?
Do you think mathematicians should also eschew mathematical notation?
Do you think chemists should describe molecules in English, rather than using formula or diagrams?
Also, "demand" is not fixed. With variable pricing, consumers and companies can be incentivized to use power when it is cheap, and conserve when it is not. Many appliances, such as dishwashers, clothes washers, and dryers, have a delay feature. ACs and refrigerators can be pre-chill when power is cheap, and idle their compressors when prices spike.
My city (San Jose, California) has smart meters, and my AC will automatically shutdown if there is a power shortage. I get discounted power at other times for allowing the power company to install the cutoff switch.
My wife has a Tesla, and it is preprogrammed to start charging at 2:30am, when power is cheapest. As electric cars are more widely adopted, they can act like a sponge to soak up surplus power whenever it is available. There are also proposals to have idle electric cars feed power back to the grid during shortages.
Texas is not connected to the national grid, so it's not really going to be used exclusively by Amazon or any tech.
Who cares? It is all fungible. CO2 avoided anywhere helps everywhere. It is all a silly PR stunt, so it is silly to complain that it isn't slightly less silly in some meaningless way.
Insurance and decommissioning and cost of debt are included in O&M costs.
NO THEY AREN'T. For a nuclear plant, the debt incurred for construction dwarfs O&M. Debt is neither "operations" nor "maintenance".
Does anyone actually know a programmer who want such a thing?
I do. I have an Amazon Echo in my kitchen, and I use the voice recognition all the time. If I am cooking dinner, and I notice we are low on milk, I can say "Alexa, add milk to the shopping list" without washing my hands or touching my phone or laptop. I can use voice to turn lights on or off, request specific music, ask for news or information on specific topics, etc. The voice recognition works well, and it is a useful service.
if you own a piece of property, do you own the airspace above it?
The FAA allows aircraft to fly over your property without your permission as long as they maintain a minimum altitude. Over congested areas, I think the minimum is 1000 ft (300m) above ground level.
A neighbor's property isn't one of them.
My neighbor's kid has a quadcopter drone, and it crashes in my backyard occasionally. I don't mind at all. It is just kids having fun.
A pizza drone is a pro tool for making money, you expect it to be more regulated than a "fun" drone.
No, you should not expect that. Drones should be regulated based on size, location, method of control (line-of-sight or not), and payload (camera, machinegun, etc.). Whether the pilot is a "hobbyist" or a guy trying to support his family is irrelevant. "Profit" doesn't make it any more or less dangerous.
This link shows the relative cost of operating a fossil vs nuclear plant through 2014.
Those are operating costs. Of course nukes are cheaper to run, but they are far more expensive to build. They are also more expensive to insure and to decommission.
When fuel and O&M costs are considered, nuclear comes out cheaper.
When ALL costs are considered, nuclear comes out more expensive.
... or United Way (both often cited as "bad" or "misleading" charities)
The United Way is not considered "bad" just because of where their money goes, but also where it comes from. Every year they run a "Federal Campaign", to collect money from government employees. When I was in the military, each unit had a quota of contributions to collect, and commanders were judged on their ability to collect. This led to a lot of coercion and abuse. Anyone who didn't agree to sign up for a monthly payroll deduction was assigned to clean latrines or given guard duty when everyone else had a 4 day pass. There were privates with families to support, barely making enough to survive, getting their pay docked every month despite needing the money far more than most United Way recipients. United Way collects contributions, skims administrative fees off the top, and then passes the rest on to the actual charities. It is far better to contribute directly to deserving charities, and leave United Way out of the loop.