Slashdot Mirror


User: billstewart

billstewart's activity in the archive.

Stories
0
Comments
7,948
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 7,948

  1. Blog cred, and easier than Arduino on University of Cambridge Develops Potentially More Secure Password Storage System · · Score: 2

    RPi already comes with an ethernet port on it, and you don't have to bitbang USB like you would for the standard Arduinos (though there are libraries like V-USB that'll do that for you), and the CPU's a lot faster so you don't have to optimize crypto libraries yourself.) And you can easily attach a keyboard to it for inputting passphrases instead of using the PC, which is critical for doing the security right.

    This is an application where you don't need a lot of speed - if it takes a second to cough up a password, that's fine, so you don't need a $3 hardware crypto chip to go with the $1 ARM CPU, though of course you certainly could make a much cheaper piece of ARM hardware if you wanted.

  2. Words are MUCH less secure than random chars on University of Cambridge Develops Potentially More Secure Password Storage System · · Score: 2

    English words average between 1-2 bits per character. 10 random characters may be good for 80 bits if you can really use 2^8 values, or maybe 65 bits if you're only choosing randomly over 92 values per character, but if you choose actual words for your password, it's a lot less. The OED has about 200K words (~18 bits), so you get maybe 20-24 bits depending on word endings, l33t-spellings, capitalization variants, combinations of short words, etc.

    128 bits is theoretically sort of secure today, as long as it's used in ways that aren't susceptible to birthday attacks (probably not an issue here), and as long as there's enough real entropy used to generate those bits. Even that's a realistic problem here - are you going to remember a passphrase that has 8-10 random words from the OED? Or are you going to have to keep them written on a yellow sticky note in your office, or dogear the pages in your dictionary that have words highlighted in 7 different colors so you know what order they're in?

  3. Daleks and Stairs on iRobot CEO: Humanoid Robots Too Expensive To Be the Norm · · Score: 1

    The original Daleks couldn't go up stairs, so they'd be useless in my place. But they do have a plunger arm, which can be occasionally useful.

  4. Salaries are public records on Facebook To Pay City $200K-a-Year For a Neighborhood Cop · · Score: 1

    You can look them up; I saw them in the local newspaper a few years ago. I don't remember what the grunt officers made, but the police chiefs in Palo Alto and Mountain View make about $300K (and I think even the second most expensive cops were over $200K.) And that's in a town where almost all the crime is white collar.

    On the other hand, Facebook's closer to East Palo Alto, which is across the county line from Palo Alto, and is the town where the poor people were allowed to live back when there was racial segregation.

  5. Actually cheap for Palo Alto on Facebook To Pay City $200K-a-Year For a Neighborhood Cop · · Score: 1

    Not only is there the cost for insurance and pensions, and equipment like police cars, but also 1/N the cost of their boss, and 1/N**2 the cost of their boss's boss.
    And if you look up the salaries of Palo Alto employees (which are public record), you'll find that cops in Silicon Valley get paid a lot; I think the police chief makes $300K (which probably includes benefits), but I may be mixing that up with Mountain View's police chief. And yes, these are towns where almost all the crime is white collar. I doubt Menlo Park is cheaper.

  6. Turtles all the way down on Einstein's Lost Model of the Universe Discovered 'Hiding In Plain Sight' · · Score: 1

    That's really what Einstein's paper was about.

  7. Radio Shacks in Silicon Valley on RadioShack To Close 1,100 Stores · · Score: 1

    I started playing with Arduinos a couple of years ago (no, not "before it was cool", but before Radio Shack started carrying them ;-) While I've gotten many of the parts I use off the Internet, or at Fry's, it's been really convenient to be able to go to the neighborhood Radio Shack and pick up a couple of components (e.g., when I need some more resistors, or when I just fried the last green LED.) They all have a couple feet of cabinets with drawers full of components. Yeah, they cost more than Fry's, but the gas for driving an extra 5 miles will get you lots of green LEDs.

    (Of course, it's much more interesting to get components at Hal-Ted or Weird Stuff, but that's a much different market.)

  8. Army may be downsizing, War Machine not on US War Machine Downsizing? · · Score: 1

    No, lifehacksaur111, this doesn't mean that the military-industrial complex is being dismantled or that the war machine is being downsized. It just means that the military understands that they aren't going to be able to get enough budget to pay for both the important stuff (pork-barrel military-industrial-complex spending) and having lots of soldiers around needing pay, housing, and medical care, so they're prioritizing how they'll spend the money.

    And if later they need more soldiers for cannon-fodder in a large war, they'll see about cranking up a draft or something, but for now they don't want to lose the pork barrel.

  9. Shipping Obviously Untested Code on Apple Fixes Dangerous SSL Authentication Flaw In iOS · · Score: 1

    It's not like nobody's ever declared they're done and shipped code without testing it first, or without fixing all the bugs they found, but they obviously didn't test this one.

    Fail: goto fail;

  10. Proof-of-Wasted-Work vs. Useful Work on Riecoin: A Cryptocurrency With a Scientific Proof of Work · · Score: 3, Interesting

    Most of the proof-of-work systems out there are really demanding that you waste some amount of money, time, or both, to prevent people from just generating arbitrarily high numbers of coins (as opposed to the Hitchhiker's Guide To The Galaxy use of leaves as coins.) Bitcoin number-crunching is purely wasteful potlatching. Dogecoin is such wow, so calculation!

    At least this one is doing a kind of work that's potentially valuable to the world, assuming the system collects all of it in a way that can be used to contribute to mathematical knowledge. (Yeah, yeah, this is /., and I'm commenting on the article without reading it :-) There may be other kinds of calculations that are both useful and verifiable out there. Unfortunately, protein folding and most other non-mathematical real-world applications probably aren't easily verifiable except by having N people redo the same calculation, which is a problem for currencies that need to prevent double-spending. (I ran Folding@Home for a while, as well as the GIMPS Mersenne Prime Search. For SETI@Home, which for some years was a far larger supercomputer than anything on the Top-500 list, sure, you can contend that there really aren't aliens in the chunk of sky your system was testing, but that's not the kind of verification we're looking for...)

  11. NIF was really for weapons research on What Would You Do With the World's Most Powerful Laser? · · Score: 1

    Hey, what's your serious response doing here, in between all the suggestions about sharks with frikkin' lasers?

    NIF was always really about fusion research for the nuclear weapons programs, just as almost everything else at Livermore Labs was either related to weapons research & development, or infrastructure for the R&D folks (e.g. they did some good development on email systems back in the 80s because their R&D folks needed good email.) Some of it's more direct development, some of it's more basic science, but even then it's basic science intended to help weapons research. They've occasionally done other things (some solar energy research or whatever), but that's a drop in the bucket, and a lot of the environmental research they did was either trying to figure out how to clean up the messes their weapons folks made or the messes left over from the previous Navy base at that location.

  12. Illegal Parking at Livermore Labs on What Would You Do With the World's Most Powerful Laser? · · Score: 1

    You really don't want to park in the wrong place at Livermore Labs. I don't know if they're still running the 5-story-high magnet they had back in the late 80s / early 90s when I went to some graphics conferences there, but if they can't just pick up your car and move it out of the way with the magnet, now they've got the Big Laser. Also don't go parking near the "No Parking - Spilled Plutonium" signs (though actually the nastier environmental problems they've had there have been leftover junk left over from WWII when the Navy was using the place - solvents that weren't yet known to cause cancer, or maybe they already were known to cause cancer but were still really effective solvents, the occasional leftover explosive, etc.)

  13. US Policy is the big limit to Cuban Internet on A Strategy For Attaining Cuban Internet Connectivity · · Score: 1

    The best way to keep a totalitarian ideological government in power is to limit communications with the outside and continue to give it enemies to justify the government's existence. The US government has been trying as hard as possible to keep doing this for decades.

    The US economic embargo has severely limited telephone communications with Cuba for decades, and more recently has limited Internet connectivity, and the travel policy has limited US tourism and family visits from "corrupting" Cubans by exposure to foreigners and foreign ideas. And the Cuban government has been just fine with that; it means that they get to control the limited amount of internet connectivity coming into their country and make sure that only the ideologically correct people get access. The embargo meant that the US telephone companies couldn't pay the Cuban telcos their share of the costs for the undersea cables to Cuba or for the phone calls from the US to Cubans, and they couldn't accept payments from the Cuban telcos even when the Cubans could acquire enough US dollars to pay them.

    Maybe that's started to loosen up under Obama, but realistically it's not going too get better until the Republicans and Democrats stop believing that support from Old Cuban Exiles is critical to maintaining Republican political control in Florida, and given the Bush/Gore election tie, that's not going to happen for a long time.

  14. It's actually about Software Engineering! on Background Javascript Compilation Boosts Chrome Performance · · Score: 1

    Yeah, it's worth a /. article, even if you don't like Google. It's an interesting analysis of an architectural change - what's the best way to do some complicated but common things.

  15. So they don't blink like LEDs? Good! on Laser Headlights Promise More Intense, Controllable Beams · · Score: 1

    What I really hate about LED lights on cars or road signs is that they're blinking fast enough that you don't notice it if you're looking at it straight on, but if you turn your head the blink turns into a trail of images because of the speed that your eyes and nervous system process such things. That would be really annoying to have in oncoming headlights.

  16. Re: Sharks with frickin' BMWs on Laser Headlights Promise More Intense, Controllable Beams · · Score: 1

    Lawyers seem to buy a lot of BMWs.

  17. It's mostly immigrants that get poisoned on The Death Cap Mushroom Is Spreading Across the US · · Score: 2

    We've got the problem in California that there are lots of people who've come from places where mushroom hunting is a common occupation, and where there are local tasty mushrooms back in the old country which look a lot like our poisonous ones. And it's often not just one victim, it's a whole family who've been out in the woods for the day, picked the mushrooms, and cooked them for dinner. And now they all need liver transplants.

  18. Flashing Lights to say "Turn On Your Headlights" on Judge Says You Can Warn Others About Speed Traps · · Score: 1

    If it's night time, I'll flash my headlights at people to tell them they forgot to turn on their headlights, or to tell them to turn off their brights.

    If it's daytime, I usually have my headlights on for increased visibility, and because my car has an "automatic" headlight setting that's smart enough to turn off the lights a minute after I get out of the car so I don't have to worry about whether I left the lights on.

  19. Asset forfeiture happens all the time on Judge Says You Can Warn Others About Speed Traps · · Score: 1

    There are some places where the police are individually corrupt and find ways to take forfeited assets for personal gain (I remember a case in New Jersey where the police chief's girlfriend kept winning auctions for forfeited property at amazingly low prices because nobody else knew it was up for bid), but there are a lot more places where the police departments are organizationally corrupt. So cops driving the cool sports cars they seized, or using seized money to justify more overtime for cops, or cops getting the cool guns from drug or gun dealers, yeah, happens all the time.

  20. Enough RAM vs. crashes? on Firefox 27 Released: TLS 1.2 Support, SPDY 3.1, SocialAPI Improvements · · Score: 1

    Last year I was running Firefox on Win7-32, on a machine with 4GB RAM, and it would crash five times a day. Now that I'm running Win7-64, on the same hardware but with a lot more swap space enabled, it still crashes occasionally, but maybe once or twice a week.

  21. Back under the bridge...

  22. D-Wave Seems to do Some Stuff Fast on First Evidence That Google's Quantum Computer May Not Be Quantum After All · · Score: 1

    Yeah, I've never been clear on exactly what stuff D-Wave does fast, or how it does it, in spite of having been to a few of their presentations, and D-Wave has always been clear upfront that their machine works differently from Shor's proposed quantum computers that sparked all the "It'll let you break crypto" interest.

    But they apparently at least run some kinds of demos faster than you'd expect them to be able to do with conventional computers, and do it in ways that are interesting enough for a few big players to invest the money in more research which might lead to discovering ways to apply it to their real-world problems and not just lab demos.

    Nobody doing "traditional" quantum computing has built anything that can solve problems bigger than factoring 15 = 3x5, or maybe somebody's gotten up to 21 by now. But it's still not close enough to sell anything to anybody; it's still just pure research.

  23. Re:Prairie home companion. on NPR Labs is Working on Emergency Alerts for the Deaf (Video) · · Score: 1

    I'm under 60, and I've been listening to PHC for almost 30 years. And yeah, it's not for everybody, and it takes some attention span and some familiarity with the culture that it's coming from. I'm originally an Easterner, and my family was from the Midwest rather than the North Central area, and none of them were still farmers by the time I was around.

    The church I went to in Berkeley in the 70s was about half grad students and about half old-time Swedish immigrant families; Pastor Anderson was from Minnesota, and his accent was about like a typical Lake Wobegone resident, and the potluck dinners would have lots of baked goods and casseroles and the occasional lutefisk. They weren't Lutherans, but you could recognize a lot of Keillor's memes, though of course these were the folks who, after moving South from Sweden to Minnesota, decided that that was enough of that moved somewhere warm.

  24. Conservative Media Coverage on NPR Labs is Working on Emergency Alerts for the Deaf (Video) · · Score: 2

    Oh, Right-WIng Media will happily spend 20 minutes of in-depth coverage on the Left's War On Christmas, or how clean Clean Coal is.

    I did once fill out a survey on "where do you get your news" - I checked the "Conservative talk radio" box, and filled in the "Station" box with KQED, which is my local public radio station. It's Establishment Media, which is conservative, as opposed to crazy right-wing media.

  25. NPR is Establishment Media, not left-wing at all on NPR Labs is Working on Emergency Alerts for the Deaf (Video) · · Score: 1

    If I want to listen to left-wing media, I'll turn to KPFA (here in the San Francisco area, or other Pacifica stations elsewhere, like WBAI in NYC or KPFK in LA), for a mixture of news, culture, interesting music, etc.

    NPR isn't left-wing at all. It's Establishment Media, putting out the government's news as well as cultural programming. Think about any time they've talked about the war - how long was it before you heard anybody on public radio use the term "torture", except for Terry Gross interviewing book authors who use the word? For me it was about 10 years of hearing them say "Enhanced interrogation" or "Harsh interrogation techniques", because that was the language the government wants used. For that matter, how much analysis was there about whether the war was a good idea, as opposed to government-friendly discussions about whether it's going well or not.

    Yes, most of the journalists on public radio are probably Democrats, but even so, it's still typically one pro-government talking head vs. another slightly different pro-government talking head.

    Now, there were politicians who really hated NPR, and they tended to be Republicans, but it was as much because of NPR's elitist positions on the arts as anything else; Jesse Helms was more a "black velvet paintings of Elvis" kind of guy than a "controversial cutting-edge art" NPR fan.