Slashdot Mirror


User: Compholio

Compholio's activity in the archive.

Stories
0
Comments
567
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 567

  1. Re:Let's blame Microsoft on ATI Driver Flaw Exposes Vista Kernel to Attackers · · Score: 1

    It is when they've been espousing this whole "we check signed drivers to make sure they're good!" thing.
    The driver IS SIGNED. Therefore, as far as the OS is concerned, its good. Just because a driver is signed doesn't mean it doesn't have a flaw. The OS cannot do a code audit and ensure that there are no exploitable holes!
    Then they shouldn't state directly in their literature that the point of the signed driver is to ensure quality:

    For device drivers and other kernel-mode software, drivers signed as part of the Windows Logo program increase end-user confidence in the quality of the software and improve the user experience, because a Windows Logo belonging to a driver indicates that the driver was tested and the digital signature that accompanies the Windows Logo confirms has not been altered since testing.
    Maybe your definition of quality doesn't include potential security flaws, but I would argue that is one of the most important things to check for in a driver audit.
  2. Re:Let's blame Microsoft on ATI Driver Flaw Exposes Vista Kernel to Attackers · · Score: 1

    Third parties write crap, exploitable code and it's MS's fault?
    It is when they've been espousing this whole "we check signed drivers to make sure they're good!" thing.

    You can write exploitable kernel modules for Linux as well, yet somehow I don't think you'd be blaming that on Linus.
    People do once they've been included in an official release of the kernel, which is equivalent to saying "we checked the driver to make sure it's good!".
  3. Re:Classic case of trade mark infringment. on American Red Cross Sued For Using a Red Cross · · Score: 1

    Not a *blue* cursive "Johnson and Johnson" ?
    Nope, you're probably thinking of some of the commercials where the "paper corner" pulls up to reveal a small blue "J&J".
  4. Re:Ummm.. on Replacing Atime With Relatime in the Kernel · · Score: 1

    How do I disable atime from USB disks? The fstab method does not work, not at least with Fedora Core 6.
    I have not tried to do that myself, but I see no reason why it should fail. Did you remount the drive? I'm wondering if Fedora auto-configuring the mount might mess things up, you could try:
    mount -o remount,noatime,nodiratime /media/usb
    How did you check to see if it worked? You can check to see the mount options of all mounted filesystems using:
    cat /etc/mtab
  5. Re:Classic case of trade mark infringment. on American Red Cross Sued For Using a Red Cross · · Score: 1

    The problem is, ask anybody on the street what symbol they associate with Johnson and Johnson, and 95% will say, "Beats the hell outta me."
    I would have answered "a red cursive 'Johnson & Johnson'": http://i28.photobucket.com/albums/c250/RossMarkClu b/jjred.jpg. That's what I've always seen on their products and in their commercials.
  6. Re:Ummm.. on Replacing Atime With Relatime in the Kernel · · Score: 5, Informative

    Most professional Unixes (Solaris springs to mind) have the option of disabling the access timestamps. I haven't read the article yet, so I'm not quite sure why Linux hasn't followed suit by now.
    Linux has had the capability to turn off access timestamps for a long time. "man mount" has details, but all you really have to do is edit /etc/fstab:
    /dev/hda3 / ext3 defaults 0 1
    becomes
    /dev/hda3 / ext3 defaults,noatime,nodiratime 0 1
  7. Re:Mostly OK on Charging the Unhealthy More For Insurance · · Score: 1

    Bullshit, your premiums will never ever go down. They may stay the same but insurance companies have absolutely no incentives to lower their rates.
    Yeah, if anything a couple people will drop because they don't want to pay more and then they'll double his rates just so they can maintain their profit margins.
  8. Re:Good for them on CA Game Bill Struck Down, Governor Vows Appeal · · Score: 5, Insightful

    the laws got one right for a change. Let parents and consumers decide what's right, not overly conservative right ring politicians. I have one set of parents, I don't need the Governator as another.
    Actually, the law got it wrong and it was corrected by the judicial branch. Note that people that disagree with judges doing things like this say that they're being "activist judges" and "going against the will of the people." Which, as it happens, is one of the purposes of the judicial branch as set forth by the constitution.
  9. Re:I, for one, welcome our... on Nukes Against Earth-Impacting Asteroids · · Score: 5, Funny

    I, for one, welcome our... extinction-level-event nuke-shielded overlords!
    Kree Hol Mel.... Apophis!
  10. Re:Advanced Intelligence May Just Be Embarrassed on The Fermi Paradox is Back · · Score: 1

    Assuming they're smart enough to create signals that we can detect, they can most likely detect ours too.
    You assume that they care about things like radio waves. We're smart enough to produce smoke signals but we're not interested in trying to detect them anymore.
  11. Re:Just use paper counting on Diebold Voting Machines Audited by California · · Score: 1

    (The basic idea is that, since computer systems are never verifiable as such, verifiability would have to come from being able to recount the votes in some independent way, but one would have to violate the secrecy or make votes provable to do that.)
    Paper Printout:
    -------------
    Thank you for voting! Your democratic republic is at work!

    Your transaction ID is:
    wxC9!2@67Azs

    Your vote was counted toward:
    Bob

    Please keep this receipt and visit www.CheckYourVote.com or call 1-800-CHK-VOTE to confirm that your vote was properly counted. If your vote was not properly counted, or was improperly disqualified, then you will need to take this receipt to your local election office.
    -------------
  12. Re:Should it matter? on The Completely Fair Scheduler's Impact On Games · · Score: 1

    I would think that 3D games would be considered a 'real time task' (i.e. you must draw the next frame within 1/30th of a second or else it won't look right), and therefore you would want to run them using the real time scheduler (SCHED_FIFO or SCHED_RR).
    Absolutely not, you want your games to have a high priority but not that high of a priority. Real time tasks have a high potential for locking up the system, if there's a bad loop in a normal priority application then you can stop it - if there's one in a real time priority application then you have no way to spawn a task to stop it. In a perfect world this would obviously not be a problem, but play a few games and you'll see that it is a problem. I have found many games that lock up Windows will do Bad Things(tm) in Linux but at least you can still stop them without rebooting.
  13. Re:Brought peace? on Higher Tuition For an Engineering Degree · · Score: 1

    True, it ended one war. But what about future wars? I could have sworn the whole Iraq quagmire started because Bush thought they were importing yellow cakes from Niger. =\
    I would argue that we wouldn't have invaded if we actually thought they might have a viable weapon, see North Korea Where nuclear weapons act as an effective deterrent is where everyone has them. Someone with nuclear weapons can attack someone who doesn't, but they don't dare attack someone else who does (even traditionally) because if either side gets to the point where they have nothing left to lose then they would use nukes.
  14. Re:Brought peace? on Higher Tuition For an Engineering Degree · · Score: 1

    what have the engineers ever done for us?!
    Brought peace?
    No, that would be the physicists.
  15. Re:Kind of sad on Web Contracts Can't Be Changed Without Notice · · Score: 2, Insightful

    The whole idea of changing a contract after someone has already agreed it is ludicrous.
    No it's not, many contracts get changed after they have been agreed to. An example I've seen myself is lease agreements - when you renew your lease it can be a lot easier to revise the original contract (corrections are made and signed by both parties). I've also seen where the renewal is an "addendum" to the original contract (signed by both parties). Times change, contracts get renegotiated - you just need to be fair about the renegotiation and make sure both parties are aware of (and have agreed to) any changes.
  16. Re:Answers to questions in this thread on Tool Detects "In-Flight" Webpage Alterations · · Score: 2, Insightful

    ISPs can't distinguish between an AJAX request and a normal page request (i.e., they both look like normal HTTP requests), so they inject ads into both.
    Under normal circumstances AJAX and "normal" requests are the same; however, AJAX has a "setRequestHeader" parameter that can be used to set additional headers. This is significant in that HTTP/1.1 states:

    The Cache-Control general-header field is used to specify directives that MUST be obeyed by all caching mechanisms along the request/response chain.
    You've already proved that the cache is violating the HTTP/1.1 RFC by ignoring the response header, I am curious as to whether it ignores the request header as well.
  17. Re:Answers to questions in this thread on Tool Detects "In-Flight" Webpage Alterations · · Score: 1

    Have you found that these services are applying modifications to requested pages that specifically state not be cached with the no-cache option? Have you found these modifications to also apply to AJAX requests?

  18. Desktop Responsiveness on Why Linux Has Failed on the Desktop · · Score: 4, Informative

    The article really focuses on how quickly the desktop responds to user operations. I haven't personally found this to be a problem on the 2.6 kernels; however, to say that work is not being done in this area is unfair. Kernel Trap has had several articles on people working on CPU schedulers to address this problem, recently the Completely Fair Scheduler was merged to potentially solve this problem: http://kerneltrap.org/node/11773.

  19. Re:Is this OS independent? on Password Vulnerability In Firefox 2.0.0.5 · · Score: 5, Informative

    I haven't RTFA (after all, this is Slashdot), but are all OSes equally vulnerable?
    I can confirm that it works on Linux.
  20. Re:Am I the only one on Wireless Networks Causing Headaches For Businesses · · Score: 1

    Lawyers, Doctors and Accountants all have an entrance exam. Why do we in IT think we're different.
    Maybe because we figured out that it didn't work for fixing their problems, so it won't work for ours. People will "game" the system no matter what field they're going into, so why make it so difficult for everyone honest when the dishonest people will find a way around anyway? It's like DRM or (some) gun laws - it only hurts the people who play by the rules.
  21. Re:this is trivial on Vista Games Cracked to Run on XP · · Score: 2, Informative

    I meant that it shouldn't be possible to hack MS's DX10 to run on XP, but it's probably possible to write a port from the ground up. OTOH, if there are no XP DX10 drivers, there won't be much point.
    Direct3D 10 (the most important part of DirectX 10, XInput being the other significant change) is still built upon much of the technology used in Direct3D 9. So, a port of Direct3D 10 is within the grasp of the Wine project and would not require special drivers since it uses OpenGL for rendering.

    WWN Issue #325:

    Wine's DirectX implementation contains enough features that we can begin working on DirectX10. Part of the recent rewrite of DirectX moved 3D rendering code into a common library shared by all versions of Direct3D.
  22. Re:Not surprising on School's Out Forever at SV High Tech High · · Score: 4, Interesting

    There were 2 types of classes in college. Those that handed us out notes and went through a slide show and had us fill in some blanks and those that handed out nothing and wrote on the blackboard.
    My university has recently implemented a third type, which the GP appears to be familiar with, where instructors use a tablet pc and a projector instead of a blackboard. I am actually on the committee for helping to introduce this technology and I can tell you that it is significantly different from using a slide show. There are several major advantages to using a tablet (writing on it, not as a slideshow) over using a blackboard:
    • Ability to easily erase
    • Ability to reposition text at will
    • Ability to move on without erasing the board
    • Ability to save the entire lecture as a PDF
    In addition to that we have been experimenting with giving entire classes of students tablets. This then allows the instructor to ask students questions about the lecture (like "clickers"). However, by using open-ended questions where students respond in paragraph form, or by drawing out their answer, the professor can much more effectively gauge how students are learning.
  23. Re:Skool... on Good Ways To Join an Open Source Project? · · Score: 1

    I apologize for having offending you, I have no experience with the community college experience and therefore am only able to relay what I have been told. In that vein, I did my best to convey a sense of skepticism by placing certain key words in quotations and making the statement in an incredulous manner ("Some of our professors even suggest..."). The point of the post was that some institutions, and departments, take educating their students in how to learn very seriously, sometimes codifying such intentions and making the policy well-known. Please forgive my inability to convey this message by way of an example.

  24. Re:Skool... on Good Ways To Join an Open Source Project? · · Score: 2, Informative

    Professors are, IMHO, under obligation to ensure you get an education, not training.
    Our department actually states that one of three "missions" is to educate students in how to go out and figure things out for themselves. Some of our professors even suggest that this mission is the fundamental difference between a community college and a university - that community colleges attempt to "train" you to do a particular task while universities attempt to "educate" you in figuring out how to learn on your own.
  25. xkcd Annoying Internet Terms Grid on Top Irritating Words Spawned by Internet · · Score: 4, Funny