Slashdot Mirror


User: subanark

subanark's activity in the archive.

Stories
0
Comments
387
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 387

  1. Re:This bothers me on Microsoft Has Created Its Own FreeBSD (microsoft.com) · · Score: 1

    Of course they did. Microsoft wants Linux to work better on Azure, so any improvements they make which allows it to work better with Hyper-V, you can bet they want those improvements adopted. Otherwise, someone will simply decide to use AWS due to AWS working better with older drivers that were made to work well with Zen, but not Hyper-V.

  2. Re:Eastern Europe on Microsoft May Ban Your Favorite Password (securityweek.com) · · Score: 2

    This doesn't solve much. You just force the armature hackers to use proxies, which makes it more difficult to do forensic analysis. At the same time you prevent that 1/1000 person who is traveling to Russia and needs to access their account. Sounds like a lose-lose situation to me.

  3. Re:What could possibly go wrong... on Microsoft May Ban Your Favorite Password (securityweek.com) · · Score: 2

    Great sob story, bro. There are ways to set up recovery, you weren't really impacted by getting locked out, and you didn't state how it could have been better.

    PS: There are lots of "throw away" email services that are just for doing what you want to do.

  4. This affects their bottom line on Microsoft May Ban Your Favorite Password (securityweek.com) · · Score: 1

    This rule is for Azure. Since Microsoft needs to maintain a reasonable reputation for their customer service being flexible, they will often refund fraudulent use of their service which costs them money.

    PS: Don't try to argue that Microsoft doesn't have reasonable customer service, I can name many other companies with horrible CS, and many sob stories from companies like Amazon who are rated as having excellent CS.

  5. Polygraphs are easy to cheat on on Filmmakers Ask 'Pirate' to Take Polygraph, Backtrack When He Agrees (torrentfreak.com) · · Score: 3, Insightful

    And their results cannot be used as evidence in court. The defendant didn't have much to lose by taking one. The plaintiff should have thought through his fear tactic before using it.

  6. Re:Must we prepend "tax payer" to money on Security Expert Jailed For Reporting Vulnerabilities In Lee County, FL Elections (theregister.co.uk) · · Score: 1

    "taxpayer money" == "government money". Just because they got it (mostly) from the taxpayers, or that they are expected to use it responsibility, doesn't mean it isn't theirs.

    All I want is to keep it neutral. No qualifiers, just let people make their own judgement. Just because some people might think of it as "government money" vs "taxpayer money" doesn't mean your opinion needs to be hammered in every time the subject is brought up.

  7. Must we prepend "tax payer" to money on Security Expert Jailed For Reporting Vulnerabilities In Lee County, FL Elections (theregister.co.uk) · · Score: 1

    It's a government agency, so it is kind of redundant to quantify the term money with "tax payer". All it does is push people away from government programs that could improve quality of life.

    It is this kind of attitude that pushes bean counting and attempted cost savings to such an extreme level that it is detrimental. This is why the government is so bad at finding the right organizations to do work for them; they just keep giving out contracts to the lowest bidder. This is why there are so many inefficiencies, they are afraid of spending money on existing projects in the short term to save money in the long term.

  8. Re:I just don't get this "free will" thing on Study Suggests Free Will Is An Illusion (iflscience.com) · · Score: 1

    I think people would agree that if a computer was struck by lightning and misbehaved, it wouldn't necessarily constitute free will. From what I've read, simply having random behaviour isn't sufficient to qualify as free will.

    Kind of related:
    "What is the meaning of life?"
    Meaning is always from the point of view of some entity. If such entity is "God" then, yes, we will never find out in our lifetime.

  9. I just don't get this "free will" thing on Study Suggests Free Will Is An Illusion (iflscience.com) · · Score: 1

    After years of trying to read various papers, articles, take a class in philosophy, I still don't grasp what free will is. The best I have come up with is a term that people use to assert individual responsibility and accomplishments, such that they can justify taking pride in what they do and demonize actions of people they hate.

  10. The bigger the crime, the more resources will be thrown by companies, individuals, police, government to stop it. Many "smart" criminals will avoid killing as it draws a lot of heat. E.g. if your in a big city and someone steals your phone, good luck getting the cops to do more than note it down. However, if someone steals a phone and kills the victim, you can expect a full crime scene, and lab work to be done.

    Hacking cars with the intent to hurt (or make it appear so) will get the interest of the US government, and it doesn't matter what country you hide out in. The military will hunt you down and take you out.

  11. Re:Watching Paint Dry on Steam Hacker Says More Vulnerabilities Will Be Found (arstechnica.com) · · Score: 2

    Go play the original, Desert Bus, nothing beats in terms of testing dedication and perseverance in the face of utter boredom and your ability to not sleep.

  12. Re:Cheap since it closed loop on Steam Stealer Malware Becomes Extremely Sophisticated, Remains Very Cheap (securelist.com) · · Score: 1

    Ah, guess I didn't realize that. I did find a policy that indicated a 7 day waiting period if using official channels though. I just assume that most games have a "you cannot profit on it" policy.

  13. Cheap since it closed loop on Steam Stealer Malware Becomes Extremely Sophisticated, Remains Very Cheap (securelist.com) · · Score: 1

    Money goes into steam games/DLC money doesn't come back out. Valve can just reverse all exchanges, so even if you broker the trade of one game for another, it will all get reversed after a complaint.

    The only way to make money is to convince someone to do an under-the-table trade, which most people know is pretty risky on its own.

  14. Re:It's Windows 10 on Microsoft Opens Up Azure Cloud in Germany Even It Can't Access (windowsitpro.com) · · Score: 1

    If you don't trust Windows 10 on your VMs then either:

    A. Set up a firewall at the host level to stop if from talking to non-trusted servers.

    B. Use enterprise edition, which is trusted by people like Amazon (which owns AWS) not to snoop on private information

    C. As part of a major corporation negotiate rights to look at the source code for Windows.

    D. Install linux on Azure (just make sure you use updated hyper-v drivers in your distro).

  15. At least it is encrypted on U8 Smartwatch Engages In Covert Traffic With Chinese IP Behind Your Back (softpedia.com) · · Score: 1

    If something is going out to someone else, I'm glad it is encrypted. Makes it harder for an attacker to learn stuff about what your phone is doing.

  16. Re:Compromised system on Microsoft Brings Post-Breach Detection To Windows 10 (sdtimes.com) · · Score: 1

    An attacker only has to screw up once before a breach is found, and an investigation is launched. Also, when an attacker first gets into a system they are often blind, and could easily trigger an alarm while poking around the numerous systems. Remember, this isn't for your individual user where an attacker can test all their tools beforehand, they are dealing with hidden programs that trigger an alert when something unusual happens, or it simply goes quiet.

  17. Re:So instead of fixing the problem... on Microsoft Brings Post-Breach Detection To Windows 10 (sdtimes.com) · · Score: 1

    Problem: Humans make mistakes.

    Solution: None yet

    In all seriousness, companies need to make a tradeoff between security and productivity. The biggest security problem is social engineering. You can't solve this problem.

  18. Re:Verified edu accounts should be protected. on Copyright Professor's Lecture Removed From YouTube Over Sony Content-ID Claim (torrentfreak.com) · · Score: 1

    The thing is that posting videos to YouTube is not a legal right. Google can remove any video for any reason. They have decided that assuming guilt is far cheaper than manually checking every complaint. The penalty for posting copyrighted material is often ignored, and lots of people will just recreate accounts if they get banned.

    If you want to punish false accusers, you are going to have to start punishing the rightly accused.

  19. Re:Well, we will be using JRE 8 for a while then on Oracle To Drop Java Browser Plugin In JDK 9 (softpedia.com) · · Score: 2

    Assuming that the java applet is the only thing you are interested in (as in it is not heavily integrated with the web page), you can use appletviewer. I don't think they will get rid of this as it is just a simple container for applets rather than interfacing with the browser. Took me an hour back in college to make one of those myself.

    I think you can also put the jsp file that runs the applet on another server as long as it is on the same domain as your switch.

  20. Re:Well, we will be using JRE 8 for a while then on Oracle To Drop Java Browser Plugin In JDK 9 (softpedia.com) · · Score: 2

    JSP - No change
    Desktop - No change
    Browser - Easy fix

    If you really have applet still in use today, you can convert them to Web Start without touching the binary. All you need to do is update your web page and make a jnlp file that points to where the applet is and any configuration that was originally on the web page itself.

    There aren't many problems,here are the edge cases I can see:
    1. Packaged sites - You want to support your applet with ads (who does this with Java anymore?)
    2. Javascript interop.
    3. Cross applet communication (aside from a nasty security bug 12 years ago, who does this)

  21. Re:How would that work? on The President Wants Every Student To Learn CS. How Would That Work? (npr.org) · · Score: 1

    Having some experience on how Microsoft does stuff, I think they are going start the kids off with Lego mindstorm, which is something much more interactive than c# or what not.

    In any case once you learn one functional language the other functional languages are easy to pick up. It's the logic that needs to be learned, not the syntax.

  22. Re:How would that work? on The President Wants Every Student To Learn CS. How Would That Work? (npr.org) · · Score: 1

    I've seen a lot of people come into a CS degree who only do so because CS is a high paying low stress field to be in. Many of these people don't grasp the basic logic concepts to succeed. Some manage to wrangle their way though college, mostly though getting their peers to help with their assignments, and finding teachers who grade more on concepts than implementation.

    These people are a primary reason that CS interviews start with basic programming questions over the phone. A BS degree in CS is only an indicator someone might be competent, not that they actually are. Would these people have done better if they learned CS at a younger age? Maybe.

    The biggest thing I hope to see from CS classes in K-12 is the use of programming outside of CS fields where a tad bit of programming with a lot of domain knowledge can go a long way.

  23. Re:Just curious about people skills on Google Has Toughest Interview Process For Developers, But Not the Worst (getvoip.com) · · Score: 1

    You simply need to realize that not everyone thinks or operates in the same way. You need to challenge your own bias, and determine if the person you want to hire is truly deferential, or simply brings a different perspective than what you are used too. This kind of perspective needs to be taken beyond the interview as well.

    Anyone who says they don't discriminate is either lying or doesn't understand what it means.

  24. Re:Just curious about people skills on Google Has Toughest Interview Process For Developers, But Not the Worst (getvoip.com) · · Score: 1

    The biggest problem with evaluating people skills is that you need to have interviewers properly trained in doing this. Otherwise you end up losing a lot of diversity due to different thinking and cultural expectations (not to mention people who are good at lying). Being a person that has failed many interviews solely on the "people" skills aspect, let me explain the dangers of heavily evaluating someone on this:

    Amazon: "The reason you stated for wanting a new job wasn't: To advance my career. Instead you said your previous job wasn't working out which is a sign of someone who runs away from problems" (Amazon normally doesn't tell you why you weren't hired)

    Reason I was basically fired from Amazon (after went from contractor to full time): Not influencing groups outside your own within the company in adopting invocations you created and unable to solve the fundamental communication problem between the developers and testers.

    Blizzard: My answer to "If you and another developer have an equally good solution to a problem, which one should be picked" was "flip a coin". The correct answer is "Let's go with your solution this time, and next time we can do mine". Reason for not being hired: Unable to handle conflict (which is right, I can't).

    Other companies I interviewed for wouldn't say the reason for not hiring even though I did just fine on the coding parts. I think they just didn't like me. I eventually got another job though a diversity placement program.

  25. May not be unconsitutional on Kentucky Bill: Wait an Hour Before Posting Injuries To Social Media (kentucky.com) · · Score: 1

    The bill is aimed at videos. You are still free to report any event in writing using your favorite blogging service. Your right to express your opinion is not hindered. In many cases video taping a court room trial is not allowed, so you see painted images of the court room instead on the news.
    What the question should be is: Is evidence protected under the first amendment?

    Videos are a stronger form of evidence than someone written summary of an event. They are harder to fabricate and easier to detect frauds.