Slashdot Mirror


User: rickb928

rickb928's activity in the archive.

Stories
0
Comments
7,014
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 7,014

  1. Simple fix, no? on Cold Reboot Attacks on Disk Encryption · · Score: 3, Insightful

    Make the BIOS clear RAM on power-up.

    Wait, doesn't it already?

    Wait, did the researchers bypass BIOS?

    Well, if they did, then adding some crap to DRAM to kill it on power loss is the only way. Probably.

    It was once an axiom of system security, that if you gained physical access, all was lost. This evolved from keyboard and console attacks to floppy- and CD-boot attacks, USB keys, stealing the hard drive, you know the drill.

    Ultimately, if you can cart away pieces of the machine, your last line of defense is gone.

    The only other variable to control is time. Make the DRAM die quicker, or is it time for a 'better' memory technology?

    And this is such great stuff, the TEMPEST guys will now have to re-write their procedures, with both a power-off and wait 30 seconds, and a re-power-on and wait for login prompt, then shutdown again.

    Sometimes I hate h@xrs, and sometimes I realize they do me a service, albeit while they intend to just do me.

    How ironic. My captcha is 'honest'. This cannot be coincidence.

  2. Re:Remember on iPhones Produced in China Smuggled Right Back in · · Score: 1

    "people who defend 'intellectual property' are usually the same people as the people who decry big government,"

    What? Are you insane? People on all ends of the political spectrum defend IP.

    Shocking lack of truth.

  3. Lemme throw in my $.02 here... on Hi, I Want To Meet (17.6% of) You! · · Score: 1

    As a Charter Member of Match.com (that means I joined before they charged, and I have a lifetime membership - gratis - and I have occasionally offered them advice^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^Htold them the obvious, some observations... I use 'men' and 'women' here as described in posting, though the rols fit the sexes fairly well.

    - At birth, match.com was instantly rife with fraud, misrepresentation, and disappointed women.

    - You will never fix the problem of men lying on their profiles. How will this affect women's response rates over time?

    - What about this idea improved the quality of profiles? If it's just about improving feedback, consider this; I corresponded with a very interesting woman who, after a week of emails, politely informed me that she could 'never date a Republican'. This appeared on her profile immediately thereafter. Mind you, we got along well in emails until she asked me my political affiliation. I suspect she figured that offering up a profile that descrbed her as 'fun-loving', 'NPR listener', and 'social activist' would deter Republican men. Which it did not. Oh, neither did her photo, of course. So your method will change that how, again?

    - One bright spot in the proposal; dating sites that just want to list millions of profiles and let you sort with increasing granularity are just more of the same. Adding more feedback like response rates, limiting the gaming of profiles, and making it easier for women to sort the flood of responses is a start.

    - And remember, sperm are cheap. Eggs are precious. One is in virtually unlimited supply, indiscriminate in dispersal, and easily replaced. The other is a finite resource, with a shorter shelf life, more discriminating in granting access, and not as highly motiviated to share. Oh, this does change over time, but guess what... Egg purveyors without eggs are generally less desirable. Strangely, sperm purveyors without actual sperm are often MORE desireable. How wierd...

    Oh, and I met lots of interesting, normal-ish, and desireable women through match.com. Including my wife.

    My profile is alive, but should be hidden, even if I haven't touched it for 4 years. Sorry, I'm taken, but having it is just a stupid status symbol. Don't tell my wife, ok?

  4. Re:Remember on iPhones Produced in China Smuggled Right Back in · · Score: 0, Redundant

    Arguing with an AC is always fraught with risk, but hey, this is /. so...

    You seem to be arguing that intellectual property 'isn't, as in 'isn't property'. That would so cleverly explain why this thing, which 'isn't property', is so coveted as to be copied and produced.

    Or perhaps you are arguing that one should not be protected against others' copying their efforts and profiting from them.

    Or perhaps, instead, you are arguing some other point you didn't make. 'Cause I don't think you've made either or your points. Wait, actually, you just spewed. No real explanation or logic, just a pair of statements.

    Ok. But intellectual property is real to those who create and develop it. And copying someone's work is pretty much considered wrong if it's *yours*, believe me. Imagine writing a stellar term paper, and lending it out to someone. Not even to copy, since plagiarism os so easy to detect, but to let them touch it up a bit and benefit from your original work. Now imagine they post it out there and sell it for a few bucks a whack. Do you share in the revenue? And if not, is that perhaps the least bit unfair to you? Oh, yes, you can choose to give it away. But what if you didn't choose, 'cause you didn't know it was being distributed...

    Actually, bad analogy. You sound like the sort of AC that would take the contrary position just to annoy me. Feh...

  5. Re:Why does he get a personal forum on Slashdot? on Rush Limbaugh Begs Steve Jobs For Bug Fixes · · Score: 1

    >Indeed. Looks like the Democratic primary race is afflicted with that evil as well.
    >
    >Examples?
    >
    Um, looks like Hillary and Barack are trading personal attacks. Usually that behavior is reserved for attacks on Republican opponents. Of course, Hillary also made a mean comment about Vlad Putin. He took it real well, too.
    >
    >
    >As if there's a nickel's worth difference between Democrats and Republicans.
    >
    >
    >Sorry, but Nader was a complete fucking idiot to have said that back in 2000, and that was before 7 years of >Bushco's incompetent fascism.
    >
    What ARE you talking about? What's Nader got to do with this? Oh, did he make that comment? I was convinced of that before I knew who Nader was. And yes, that is long time ago. My mother first made that comment to me, some time in 1969, I think. Don't presume for a moment you can categorize me so glibly.

    >
    >You haven't listened to much Liberal radio lately, have you?
    >
    >All the time. The part that you don't realize is that due to decades of vicious right wing attacks, liberals by >and large make sure their shit is on point. Whereas the right wing is just full of shit.
    >

    Remarkable. You expect me to accept that the Left Wing is always correct, and most importantly does not manipulate or spin the facts, while the Right Wing always does? You can try, but if you value your time, don't bother to try it with me. It's fairly obvious to any careful observer that either party will gladly cast their opponents in the worst possible light. And if it takes innuendo or outright falsification, they'll both do as much as they dare to. If you recall, the hoorah about memos and correspondence about W's Guard service brought to light what can best be described as forgeries by a zealous but misguided Democrat sympathizer. You're not going to try and argue that those memos were genuine, are you? I was servicing IBM typewriters back then. Not many Guard officers were skilled enough int he use of an IBM Composer or Executive to type those, and not many Guard bases would have either machine available. Some had Model Ds with Annunciator baskets, but that's as special as it got.

    Really, claiming that the Democratic Party doesn't behave like the Republican Party is naive. Just let it go. Call Republicans worse if you want, but to lay bad actions exclusively at their door ignores reality.

  6. Re:Why does he get a personal forum on Slashdot? on Rush Limbaugh Begs Steve Jobs For Bug Fixes · · Score: 1

    Dead on, my friend.

    Many a diatribe against Rush starts with 'I dont't really lissten to his show...'

    And many a diatribe should end there. Clever rhetorical device, objecting to that which you do not know for fact.

  7. Re:Why does he get a personal forum on Slashdot? on Rush Limbaugh Begs Steve Jobs For Bug Fixes · · Score: 1

    'their own set of facts'

    Indeed. Looks like the Democratic primary race is afflicted with that evil as well.

    As if there's a nickel's worth difference between Democrats and Republicans. Both will mis-state anything to either gain an advantage or make a point at the expense of their opponents and the truth.

    It's naivete or hypopcrisy to claim one group or the other is more or less righteous. Give it up. American Politics is in the toilet, to our great shame and loss.

    You haven't listened to much Liberal radio lately, have you?

  8. Re:That must be... on Rush Limbaugh Begs Steve Jobs For Bug Fixes · · Score: 2, Insightful

    I've owned two cats in my adult life. That leaves me one step away from being an animal abuser?

    I have a son. I'm just one step away from a child abuser, and should be equated with child abusers?

    And I've had sex with a woman (see above), does this leave me one step away from being a rapist and misogynist?

    Yup, entirely vapid post, you got it right.

    It's been my experience that many of the people that hate Rush the most are genuinely intolerant of dissenting opinion, recommend that he (and others 'like him') be jailed or restrained from offering opinion, and that their views be suppressed at every opportunity.

    Amerika the Beautiful. Hypocrites.

  9. Re:I blame IBM. on Whatever Happened To The Joystick? · · Score: 1

    What?

    Every desktop PC I've ever had has a joystick port on it, either on the serial/parallel/joystick card, or built in. I'd have to look, but I think both my desktops now have them, though they are going on 2 years old now.

    You got cheated.

    Of course, I use a USB joystick, but that's a different tale of woe.

  10. Re:This isn't going anywhere... on Speedcabling - Untangling For Fun and Profit · · Score: 1

    Don't contradict them. While they were trying to figure out how many of their Ethernet switches were Class 1 bridges, and did they violate some hop rule, I was sniffing my Token-Ring network and explaining to the boss how much more money it would cost to move to Ethernet, having been told by the database vendor that it was the 'Token Ring stuff' that was causing the performance problems. And showing the boss how long it took for the server to respond, vs how long it took for the workstation to receive the packet from the server. Lots of fun. Token-Ring rocked. Mine got up to 94% utilization before they replaced it with switched 100mb Ethernet, and then we discussed all the money we spent to gain the -1ms latency... aww gee.

    ps- all you l0sers, in teh old days you pretty much had to know how stuff worked. No Internet to Google 'arp' and 'collision' and hope someone else had exactly your problem. Or course, back then, every had EXACTLY your problem.

  11. This isn't going anywhere... on Speedcabling - Untangling For Fun and Profit · · Score: 2, Interesting

    ...since this is precisely what I do in my sleep, after all the MCSE weenies who weren't allowed to touch the cables in class have left for the day.

    Now, a hunt for the loose terminator in a Thinnet network, or the forced-duplex port in your Cisco stack, or the one Linksys VPN router with different firmware out among the 50+ telecommuters, or even the splitters over the ceilings in your Localtalk network at the elementary school, or any number of real-world-ish scenarios.

    Bah. Like playing pool for money. Too much like real work. And playing for beer makes you pee too much.

  12. Re:Balanced view. on "Anonymous" Takes Scientology Protest to the Streets · · Score: 1

    You know, if you have a better theory of Life, the Universe, and Everything, have away at it.

    I'm particularly interested in everyone's Creation story with a really good "before everything existed..." part. Physics as we express it is so lacking in this area.

  13. Re:Why is it always China? on Space Shuttle Secrets Stolen For China · · Score: 1

    You don't have lunch with me during the week, do you?

    We (lunch buddy) bemoan the sad state of the US, our willingness to mortgage (figurately AND LITERALLY) our industry, finances, and technology to the Chinese in the name of free markets and commerce, and our failure to maintain an industrial base sufficient to ensure our prosperity.

    Think for a moment, we buy nearly everything computerish from China. How long before someone spots a trojan in their motherboard BIOS?

  14. Re:Balanced view. on "Anonymous" Takes Scientology Protest to the Streets · · Score: 1

    Well, the Reformation certainly shook things up. Printing presses came along at just the right time, indeed. Before that, you were pretty much stuck with going to church to hear the Scripture.

    As for my recollections of Catholic priests' personal preferences, I have very few. But their doctrine is not so much a matter of personal preference (save that they should at least serve because they believe, and so their personal preference is assumed, by me at least, to agree with Papal doctrine) but of Chirch doctrine and policy. I didn't state that Catholic priests prefer that you NOT READ the Bible, but that they prefer you share their interpretation of it.

    So, as a former Catholic, I'm left with several important dillemas. Do I believe that my ppriest is my intercessor before God, or is it Christ? Do I still go to Confession, or can I confess to Christ directly, or even to God? Do I take Communion as the literal flesh of Jesus, transubstantiated in the hand of the priest as I take it into my mouth, or do I recognise the elements of Communion as representative of Christ's sacrifice? The issue of Communion is an important one, and the Catholic Church stakes a lot on it. And yes, wrongly in my opinion, as you can guess.

    All religions are subject to interpretation, and all I suspect get pretty thoroughly distorted at one time or another. Scientology, I wonder, isn't so much distorted. L. Ron seems to have gotten it just as he intended. Christianity is not nearly so monolithic, or course, if only because it has a much larger following. Harder to control.

    In case you're wondering, I know many Catholics, and I trust in their faith, that is I believe they believe. Their Church may be flawed, but I don't encourage them to abandon it. I encourage them to cling to Scripture, and pray.

    As I do you.

  15. Re:Balanced view. on "Anonymous" Takes Scientology Protest to the Streets · · Score: 4, Insightful

    "Most religions(the Vatican notwithstanding) don't withhold their most sacred texts"

    Before the Reformation and Gutenberg, getting a copy of the Holy Bible meant going to your local Catholic church, where the priests were more than happy to interpret it for you. Badly, I suspect.

    To this day, IIRC, your Catholic priest would prefer you ask him what it means. And a careful reading of the New Testament could leave you with the impression that the Catholic Church is, in fact, not practicing Christianity.

    And to be fair, neither are many if not most TV and other Evangelists. It's so simple, unless you're asking for money.

    Written by a Christian. Trying to keep it simple.

  16. Re:Er, but... on The Grammy In Mathematics · · Score: 1

    "In USSA, copyright steals from ME."

    Sooner or later, this is pretty much the situation everywhere, I'm afraid...

  17. Re:PBKAC on Antivirus Inventor Says Security Pros Are Wasting Time · · Score: 1

    I was born in Maine, and lived 50 of 52 years there.

    In rural Maine, you put your mailbox on a long rail, to let the plow clear it. Clever ones have a hinge to pull the box right up out of the way. Of course, it's been a while since we had that much snow, but 2004 was pretty much the 'old days' snowpack.

    Closer to the city, the kids tend to go out on mailbox patrol a bit more. And the plows don't wing back the snow so far, so your mailbox can survive a few years before a plow driver gets sloppy and nails it. I haven't seen many mailboxes smacked by the plow. They uusually end up either down the road, buried in the bank, or blown clean out into the woods. Sad, the carnage...

    But the cast-iron mailbox in Eddington claimed two plow blades before the town made the owner take it out. He settled in the end for a mailbox on a swivel. It took the batting pretty well, and was easily replaced. It's just that the kids never seem to grow tired of this. Mostly in the summer, so the iron box comes out with the end of mud season and goes in around Thanksgiving. The i-beam post was vertical, and supported the mailbox. Not a plow guard, which most towns don't permit. Seems their plows are more expensive than the mailboxes they obliterate. I'll Ask my sister, a town manager in the Midcoast area. She will have a story to tell me.

    I got tired of smacking mailboxes pretty quick.

    ps- We locked our doors in South Portland, and in Bangor. More so now, with the influx of new people. Leaving the fishing camp door unlocked used to be ok, too. Maybe in Milo or Stueben you can get away with that, but not in Sanford or Ellsworth. You haven't lived in Maine for a while I gather. It's just not the same.

  18. Re:Linux on Desktop? Ha on Torvalds On Desktop Linux's Slow Uptake · · Score: 1

    Wireless is THE issue that keeps me from using Linux at home for everything.

    My old laptop (Mitac 6120) took Fiesty just fine, but my 3Crwe154G72 shows WEP only. The steps to get WPA running are both confusing and contradictory. Do I do the wpa_supplicant thing, or try an updated driver, or ndiswrapper? And when I get ndiswrapper, and it fails install, who do I turn to? The ever-helpful Linux community?

    I tried Fedora 6. It persisted in installing IPv6, despite docs saying it does not. This killed routing with my old DSL modem/router, which never had trouble with anything else. After killing IPv6, I found it coming back after nearly every update, and gave up. I haven't tried FC7 yet.

    But the thing that most irks me about Linus' article is the apparent ignorance of the scheduler issue. When do we get a desktop-centric schedule option in Linux? Probably never. The champion of the desktop-enhanced scheduler has been pretty much driven out of the kernel group, and mostly because of personalities. Linux is my server OS, no debate. But the desktop needs a lot of work:

    - Distros need to include everything needed. ndiswrapper, more drivers, more help. I use Joe for text-mode editing. Always have to go get it. Why?

    - The Linux community needs to get the hardware industry on board. Broadcom's wireless drivers a case in point. There are others.

    - Clean, functional upgrades within distros. Nuff said.

    - And somewhere, a plain-talk, helpful, customer-centric support option. It may be that with so many distros that we will need to have specific support forums for each one, but as an example, is there a straight answer to getting WPA-PSK working on Ubuntu Gutsy with a Prism card? Maybe, but I have yet to find it. Most forums show solutions with half the steps referring to some other problem, or telling you to scrap the driver and use ndiswrapper without full instructions, etc. Just not helpful. Ignore the fundamental issue of not being able to get online to get the answer.

    - And maybe, somewhere, a distro that will enlist some serious UAT, and release a distro that just plains works, with a wider variety of hardware. No, wait, this is too much to ask. I just asked for stuff that works. As if that wasn't Job 1 in the first place...

    Pardon my rant. I've been waiting for that good Linux desktop distro since 1999.

    Does this mean I have to start a support forum myself???

  19. This idea is stupid. on New Authentication Scheme Proposed · · Score: 1

    A trackball? Multiple keys? Sure, they got a great idea for selling lots of mouse replacements. And really just for authentication.

    How about a biometric scanner? Oh, wait, that's beatable. Iris scanner? Too expensive. And strong passwords really don't work - just have someone steal the database.

    It's just stupid.

  20. Re:slashdottagsmakemesmile on New Authentication Scheme Proposed · · Score: 1

    You ARE special.

    Just like everybodyu else.

  21. Re:Keypad on New Authentication Scheme Proposed · · Score: 1

    Hey, he (?) may not be a drug dealer. He might be a lawy...

    Never mind, you were pretty much on the right track...

  22. Re:PBKAC on Antivirus Inventor Says Security Pros Are Wasting Time · · Score: 3, Interesting

    "If an admin is truly competent they will have no problem getting their lab workstations up and running cleanly and bug free with pretty solid security"

    That's not the goal. Security's goal is to get PRODUCTION workstations up and running cleanly and bug free with pretty solid security.

    The lab is easy. Let a few users have those machines for a week, visiting the casino sites, clicking on the latest e-greeting, and bringing the USB drive from home with those oh-so-important documents they were working on last night, right after their kids updated all the myspace pages.

    Security is, indeed, fairly easy save for two variables. Users and attackers. As an analogy, you can put any sort of locks, grates, fences, alarms, dogs, and flaming trenches around your house. If the kids let in the cable guy without seeing some ID, none of it matters. If all the crook wanted was to steal your mailbox, you'll have to weigh the advantages of fencing it in vs. having mail delivered, or hardening it into a 1/4" plate steel box on a 4x6 I-beam, mounted into a 500-pound footing. Or just replace the damned mailbox when the kiddies bash it with a baseball bat driving by.

    Oh, and the plate-steel mailbox? In rural Maine, those are a laugh a minute. Sometimes you see splinters on it, shards of a Louisville Slugger in the ditch, and a brief note in the local fishwrap about some kid at the ER with a broken wrist. Priceless. If only we could do the same thing to the script kiddies...

  23. Git yer marsmallows and grahams ready for... on Li-Ion Batteries Hit Final R&D Phase for Plug-in Cars · · Score: 3, Insightful

    Carbeque!

  24. Re:power connections vary on Best Laptop for Going Around the World? · · Score: 1

    In desperation, pack a handful of wirenuts. Then buy a power cord wherever you are, cut it off and the spare cord for your power supply (the other is back home, admittedly), and splice it up. You can probably even buy a crap ANYTHING with a power cord and scrifice the gizmo. Or sell it back to the shop you got it a for 50%, and let them put the cord back on and sell it again. Of course, you may find blank cords with std connectors on the end, but...

    Desperation. The mother of many hacks.

  25. Re: Buying Rolexes on the Street on DHS Official Suggests REAL ID Mission Creep · · Score: 1

    Personally, I prefer stainless. The gold has rubbed off every watch I have except the Wenger, go figure.

    Now for the hard part. They modded my post 'funny'. It was serious.

    Never doubt the /.'r being able to see the humor in a potentially fatal situation. Rolexes excluded...