Slashdot Mirror


User: Artem+S.+Tashkinov

Artem+S.+Tashkinov's activity in the archive.

Stories
0
Comments
651
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 651

  1. Flash must live on on Flash Will Soon Be 'Click-To-Run' in Microsoft Edge (bleepingcomputer.com) · · Score: 1

    This post will be hugely unpopular to the point of me being called stupid or moronic, but I'm gonna spell it out anyways.

    Even today HTML5 is nowhere near feature complete, fast and reliable as Adobe Flash is. In many ways ActionScript is better than JavaScript. Adobe Flash has powerful tools of dealing with streaming video/audio (including realtime bandwidth tuning), fast forwarding/rewinding and setting various video attributes. It's a lot easier to create complete solutions using Adobe Flash than to create a mishmash of SVGs, JavaScript, HTML, CSS and media. Adobe Flash just plays video/audio formats it's intended to play, vs. the dreaded HTML5 message, "Your browser doesn't support this media type" specially on platforms other than Windows. Adobe Flash, at least on Windows, seamlessly accelerates video decoding and rendering vs for instance royalty free VP9 codec which drains your battery several times faster because it's decoded using only the CPU.

    I have yet to see a library of rich content HTML5 games vs. literally thousands of Adobe Flash games which could be run on ancient hardware vs. modern web browsers which require at least a gig of RAM and a fast multicore CPU to render HTML5 demos.

    Adobe Flash has always been awful in regard to security but for what it's worth it's still indispensable.

  2. At least four easily exploitable local root on New Bug In Windows 10 Anniversary Update Brings Wi-Fi Disconnects (infoworld.com) · · Score: 1

    ... vulnerabilities have been found during this period. Have fun! Of course it might be theoretically possible that none of the websites that you host allow any form of code execution and your entire user space is up to date but that's just crazy - boasting about your uptime while keeping your kernel unsecured.

  3. Re:I guess there is demand on Bitcoin Hits Highest Levels In Almost Three Years (reuters.com) · · Score: 4, Informative

    Fake money? Who wants it?

    All money is fake by definition. We all agree those paper bills cost something when in fact it's just worthless paper. What's more, there's hugely more electronic money and various forms of money derivatives (like shares, debts, obligations, etc. etc. etc. read this article https://en.wikipedia.org/wiki/... ) right now than real banknotes. I guess it's 100 to 1 nowadays if not more.

    So real money is only 1% tangible while bitcoin is 0% tangible. Not a huge difference for me.

  4. Too bad it's volatile as hell on Bitcoin Hits Highest Levels In Almost Three Years (reuters.com) · · Score: 1

    Since there's no one standing behind it.

    Of course even major currencies sometimes go down (like it happened to the Russian ruble after 1991) but it's still a very rare occurrence, unlike Bitcoin where any major event can trigger a colossal loss in its value because a lot of bitcoin owners will rush to cash their bitcoins when they see something worrisome happening thus they will accelerate its fall even further.

    Also there are other purely technical reasons why Bitcoin is not a stable currency and most likely will never be. For instance it has long ceased to be purely decentralized. Nowadays you can easily say that it's directly and indirectly controlled by Chinese.

  5. Also I've been thinking that they left quite a glaring hole unprotected which is SSL (VPN/Tor can be filtered quite effectively, while filtering SSL makes no sense because it renders the Internet pretty much unusable).

    An extra law must be enacted which mandates the installation of a government issued SSL certificate to properly snoop on all your communications, otherwise a single Google query makes you more or less invisible: SSL web proxy.

    But then you realize that like with all dictatorships and oppressing governments it's not about law or security, it's all about total control.

  6. Now that the chance of this information being leaked is close to 100%, why not just release everything to the public?

  7. we have NoScript, though more and more retarded websites totally refuse to work without JS enabled. Luckily ./ is not one of them.

  8. Sometimes I've got a feeling that Google actively encourages security vulnerabilities considering that this particular local ROOT vulnerability affects at least 99% of all existing Android devices and Google skipped it in its latest security update.

    Welcome rootkits and unremovable trojans.

  9. Re:It's not secure at all on Microsoft Says Windows 10 Version 1607 is The Most Secure Windows Ever (thurrott.com) · · Score: 1

    I personally love this extract "automatic sample submission feature".

    We'll make you totally secure by downloading all your data!

  10. Re:Maybe true if you actually get updates on Google Security Engineer Claims Android Is Now As Secure As the iPhone (vice.com) · · Score: 1

    Due to the way Android works with SELinux that's enough to mitigate any problems we have seen so far. That's why we are not seeing vast Android botnets.

    False.

    There are already Android botnets, specially in China where US Google Play is not available and local Android stores don't properly check applications for malware.

    Also, in the three past years alone the Linux kernel itself has already seen at least three high profile local vulnerabilities which allow to get root even on fully restricted SeLinux enabled phone. SeLinux is not a panacea against kernel syscalls vulnerabilities.

  11. Aside from the fact that millions of Android apps contain native code which is very hard to find malware in and now we have a wonderful Dirty Cow vulnerability which affects almost 100% of Android devices, which means a new update or install from Google Play will automatically p0wn your device for good and will probably install an undetectable/unerasable rootkit.

    I'd love to think that Android is secure but Google chose to use the Linux kernel which doesn't fare that well vs. microkernels like QNX. Call me crazy but I believe the QNX kernel would have been a much better choice for Android.

  12. This is why DRM must die on EA Blocks 'Origin' Access In Six Countries, Citing US Embargoes (pcgamer.com) · · Score: 1

    Eventually all DRM servers on the net will go down, and your wonderful collection of games will not be accessible any longer.

  13. Re:Thank but no thank you on Google Has Quietly Dropped Ban On Personally Identifiable Web Tracking (propublica.org) · · Score: 4, Informative

    Numerous: 1) You can set thunderbird to only show text by default (so no HTML/JS/etc madness, no ads, no nothing, except what's absolutely necessary) 2) Your cookies are not shared with your web browser 3) Less chance to enter your Google password somewhere where it doesn't belong (various scam websites/DNS injection/etc) Oh, and make sure you use OAuth authentication in Thunderbird - but at least the first initial connection must be made with real Google servers ;-) It will protect you against rogue SSL certificates/MITM attacks.

  14. And then you land on a website which has AdSense/Google Analytics/Google something else. Oh, and then they have countless social embeds (facebook/twitter/youtube/etc) spying on you as well.

    Yeah, this will totally work.

  15. Re: Thank but no thank you on Google Has Quietly Dropped Ban On Personally Identifiable Web Tracking (propublica.org) · · Score: 4, Informative

    Countless websites on the internet totally break if you block google IPs.

  16. Re:The data economy. on Google Has Quietly Dropped Ban On Personally Identifiable Web Tracking (propublica.org) · · Score: 1, Informative

    free Internet services

    Google is number one ad selling platform on the Internet. They are also number one search engine with no competitors in sight (bing is pretty useless for anything peculiar/professional/serious, yandex' cache is very small, baidu is only meant for Chinese). They are raking in cash even without selling users' data.

    It's the "greed" economy, not "data" economy.

  17. Thank but no thank you on Google Has Quietly Dropped Ban On Personally Identifiable Web Tracking (propublica.org) · · Score: 5, Informative

    I knew this day would be coming a long time ago so there's a very elegant solution to this madness.

    1) Use a separate IMAP/POP3 client (thunderbird is nice) to fetch your mail from Gmail
    2) Make your Firefox clean your session data on exit (cookies, web cache, offline website data - that's enough)
    3) Adbock+/Ublock Origin with anti tracking and anti social lists for good measure

    This still leaves your IP address unprotected but if you're concerned enough, use a provide which generates random IP addresses or VPN.

  18. Don't use Facebook on Facebook Bans Animated Breast Cancer Awareness Video Showing Circle-Shaped Breasts (theguardian.com) · · Score: 4, Insightful

    /thread

    Seriously. It's the Nth time we learn about that and the result is always the same.

    There are ways to publish such videos without such insane restrictions. Even youtube nowadays seems a better platform. Also we have vimeo and torrents.

  19. Re:This is why Pixels will fail on Google Unveils Pixel and Pixel XL, the First Phones It 'Designed Inside and Out' (www.bgr.in) · · Score: 5, Informative
    Here's an incomplete list of devices which our-Androided Google who used to say, "Nexus is the benchmark for Android at an affordable price". Nope, this is not a benchmark, this is pure greed which will fail just like Nexus 6 failed (it was introduced for $650 and proved to be wildly meh for people who wanted to buy a pure Android phablet).
    • OnePlus 3, $400
    • ZTE Axon 7, $400
    • Lenovo ZUK Z2 Pro, $389
  20. This is why Pixels will fail on Google Unveils Pixel and Pixel XL, the First Phones It 'Designed Inside and Out' (www.bgr.in) · · Score: 4, Interesting
    The features you'll get:
    • The biggest bezel to dollar ratio in the industry
    • Insane prices only rivaled by Apple which actually has a premium status
    • Very strange nerdy names, much much worse than Nexus
    • Look too much like iPhone 5(s)

    Now at the same price bracket as Note 7/SGS7 here's the list of features you will not get:

    • Wireless charging
    • Dual front speakers
    • Dual lens cameras
    • Optical image stabilization
    • Rapid laser focus/Dual Pixel autofocus
    • Hardware HDR
    • Dual SIM slot
    • SD card slot
    • Meaningful support of any kind: a phone line, brick and mortar stores to examine the device before buying, etc.

    Updates to new major Android versions will be ceased just 24 months after the release. Google is out of their minds.

  21. Re:WebExtensions API on Firefox 49 Postponed One Week Due To Unexpected Bugs (softpedia.com) · · Score: 5, Informative

    It's also a massive security problem, having no security model.

    LMAO. Pretty much all Chrome extensions require access to "all websites" and your "entire browser history" which means they can gather all your browser information, including keystrokes, aka passwords.

    So much security, my ass.

  22. Re:WebExtensions API on Firefox 49 Postponed One Week Due To Unexpected Bugs (softpedia.com) · · Score: 4, Insightful

    Yeah, this update kills thousands thousands of add ons, whiles many others will stop working properly.

    Next on their agenda is killing XUL off which means Firefox will become yet another Google Chrome with a tad better cache management.

    It looks like Google Chrome, it acts like Google Chrome, it is Google Chrome. Now tell me, what the reason for Firefox existence? Once a unique web browser with unique add-ons (NoScipt, Firebug, DownThemAll, etc), soon only a shadow of itself.

  23. Electronic pulse igniters could be bought for a lot less. And they do just the same to your electronics, though they are not as handy as this new gadget.

  24. WTF? on Linux Mint 18 KDE Now Available (betanews.com) · · Score: 0

    I downvoted this news but it wasn't enough. Will ./ announce various spins of various distros every day from now on? This will surely make ./ more popular ... except not. People who use certain distros are usually subscribed to distrowatch or their distro news website, while all others simply don't care and won't switch anyways.

      Is it a slow news day or what?