Slashdot Mirror


User: WaffleMonster

WaffleMonster's activity in the archive.

Stories
0
Comments
4,185
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 4,185

  1. Re:interesting on Group Thinks Anonymity Should Be Baked Into the Internet Itself Using Tor · · Score: 4, Interesting

    There is also some evidence from the Snowden leak that standards procedures and committees have been weakened by members acting overtly or secretly on behalf of government agencies. So they should be really cautious about such offers.

    In some ways IETF is almost a joke. "Consensus" building is supposed to be the key to movement yet there is no barrier to entry other than having sufficient number of brain cells to send a message to a mailing list. I have observed several instances of "ballot stuffing" where hoards of random people who very likely know and have contributed nothing at the last moment express support for x. The arbiter of what consensus means is always WG chair(s) who themselves mostly always work for a corporations with skin in the game.

    The IETF process is most successful as a middle ground where there is market incentive to work together. In the case of tor there is no market to speak of to incentivize such behavior.

    And why re-invent the wheel and make something fro scratch? Tor is working well, even too well in the eye of some people ...

    My guess they might start with existing specification and evolve standard based on IETF process.

    An example of this SSL v3 was mostly Netscape's doing while TLS v1 and later were products of the IETF. In this case there were no radical changes between versions and backwards compatibility was retained. There was also huge market incentive for broad compatibility and getting security right.

  2. Re:DNS is broke not the operators on Spamhaus Calls for Fining Operators of Insecure Servers · · Score: 1

    And no, spoofing source addresses is rarely useful. You can't use TCP for most purposes with a spoofed address (or at least one spoofed to be on a different network), so spoofing almost automatically renders you incapable of communicating. The same goes for UDP if you care to hear a response, which most protocols do. That gives it very limited utility outside of diagnosing local network problems.

    While general purpose protocols do not work consider a messaging system of anonymous users where the outcome is known/broadcast globally while contributors remain secret. You can send a one-sided UDP message anonymously and be informed via public channel. I think on balance getting rid of amplification is likely more important but I do see some value in it especially in states ruled more by fear than consent.

  3. Re:DNS is broke not the operators on Spamhaus Calls for Fining Operators of Insecure Servers · · Score: 1

    Firstly IP level fragmentations problems are self inflicted. IP fragments get though fine if you haven't put up a firewall to block them.
    Even with fast open one needs vastly more compute power to support DNS over TCP to the equivalent level of DNS over UDP.

    What does vastly more compute power mean and does it matter? Lets assume it costs 100% more CPU time and 100% more RAM per DNS query to use TCP.. who cares? The long tail of DNS servers sit idle and every server that becomes a TCP only server is a server that cannot be used for amplification.

    cookies needs more work though as a general idea it is the way to go.

    Yet for countless years it sits and **NOTHING** gets done. The only leadership I've seen in addressing this issue is futile attempt at discriminating thinking human adversaries from legitimate users (e.g. DNS RRL)

  4. Re:Windows RT is actually pretty useful. on Microsoft May Finally Put Windows RT Out To Pasture · · Score: 2

    Seriously, what the hell more do you want from a tablet?
    Shit, at some point why the hell aren't you using a desktop or laptop?

    This is something I will never understand. All of these devices are computers. Even the smallest of form factors today have multi-core CPUs, multiple gigabytes of RAM and 1080 displays. Why should software availability differ based on the form of the device? If it is capable of executing software why artificially prevent it? What is the difference between a laptop and a tablet? Availability of a keyboard? What if you get a bluetooth keyboard for your tablet..what is it then? None of this shit makes any sense from the users perspective. It only works from the vendors side who collects a cut of all software sales and curates all execution. It is impossible to justify.

    I'm not sure what people mean when they whine about no apps,

    Wah I can't run any of my software on this this computer...wah I'm whining because none of my shit won't run and the computer is therefore useless to me.

    except that I must assume they are gamers. I have Netflix and Hulu installed. It has Outlook, Word, Excel, Powerpoint and OneNote. Its base apps allow you to browse the web, read the news, check the weather, play local videos, etc.

    Zombie consumers have it made. Everyone else not so much.

  5. Re:Another cure that is worse than the disease on Spamhaus Calls for Fining Operators of Insecure Servers · · Score: 1

    Are you serious? This is entirely enforceable without unreasonable difficulty. It's easy to find out who owns an IP address and there's always contact info attached to that record.

    LOL the MPAA wishes this were true.

    If the fine isn't paid or isn't paid on time, it's only a simple matter of shutting the company's site down 'til the fine is paid.

    I am beginning to loose my faith in humanity and Slashdot in particular. That there really are people here begging for legal intervention makes me sick. The technical basis for arguments being spewed here are not even factually accurate.

    We're not talkin' about individuals here,

    Who's we? There is plenty of consumer gear with broken DNS proxies and plenty of users who run their own servers something we should be encouraging not discouraging with our dreams of offloading liability from criminals to the users.

    but companies, especially hosting services, etc. Notification would come through an official gov't somebody, not something like a spamish-lookin-email.

    Hosting companies are the least of your problems.

    Anybody who's setting up servers that falls for a spamish-looking-email about this, deserves whatever problems they get as a result of believing such an email. They really should know better.

    Now this is the ticket. This is the kind of spirit the Internet needs to retain. If you act stupidly the Internet bitch slaps you for it.

    And while they're at it, they should fine everyone who's DB is stolen due to stupid insecure setups... SQL injections, plaintext passwords, etc. This stuff isn't excusable

    Who determines what is stupid? And how would anyone but the lawyers benefit from that arrangement? It is not like there is not already massive legal and financial disincentive against getting p0wn3d. I can think of a few inexcusable security transgressions that remain standard industry practice to this day. Do I get to write the law?

    Can you imagine how much money the gov't would've made off Adobe and SONY over the past few years? That'd probably help lower our taxes (in theory).

    And your buying power (in fact).

  6. Re:Another cure that is worse than the disease on Spamhaus Calls for Fining Operators of Insecure Servers · · Score: 1

    This isn't so much about spam anymore, but about massive DDOS attacks. I even admit I had a few systems with wrongly configured DNS servers, there were used in DNS amplification attacks, and I would have loved to know about it before they were used for that. All fixed now.

    Except it's not fixed.

    Of course, this makes NO sense if it gets adopted in the UK only, needs to be enabled at least for USA + Canada + European Union countries to make any sense !
    It's sort of like the Kyoto protocol.

    Political solutions to technical problems is exactly what the Internet needs.

  7. DNS is broke not the operators on Spamhaus Calls for Fining Operators of Insecure Servers · · Score: 1

    Each time someone makes the claim misconfiguration of DNS enables amplification they are contributing to the problem by refusing to address the root cause.

    DNS is flawed by design. You can still extract perfectly useful amplification factors out of non-recursive servers or servers with DNSSEC enabled. All turning off recursion does is cut out ultra low hanging fruit while leaving the problem unaddressed.

    There are several ways to actually solve this problem.

    1. Use TCP for DNS

    2. Implement DNS cookies

    3. Globally apply ingress filtering with sufficient granularity to prevent source address spoofing.

    I think #1 coupled with TCP fast open extension is the best of the three options. With fast open the setup delay is mostly gone, TCP support is already widely deployed and fast open extensions to TCP can be deployed later as available to optimize RTT delay. With IPv6, DNSSEC and the shitty state of IP layer fragmentation support TCP is necessary regardless.

    #2 in the form of http://tools.ietf.org/html/draft-eastlake-dnsext-cookies-03 requires more work to push out to DNS infrastructure yet after a few years I can see it following the same trajectory as SYN cookies.

    #3 Ingress filtering... am not an operator I don't pretend to know how viable this is to roll out globally, from what comments I have read it is non-viable. This is the only option that would concurrently address all broken UDP protocols susceptible to amplification from a spoofed source address. The downside is spoofing source address can sometimes be a feature. For example it can be used to enable communication without revealing the speakers source address.

  8. Re:This is why I don't trust this guy on Intelligence Officials Fear Snowden's 'Doomsday' Cache · · Score: 1

    If he's a whistle-blower, then blow the fucking thing already. I understand that he is on the run, sorta, but why not just come out with it all? All the spy-vs-spy bullshit just makes me think that the whole Snowden thing is bullshit itself. I don't get it.

    As far as I understand it Snowden is only releasing information to the press. The press is disclosing information as they deem appropriate.

    If you take Snowden at his word he does not want his information to cause unnecessary harm hence the adult supervision (e.g. Press)

  9. "The obvious culprit is the weather" on European Health Levels Suddenly Collapsed After 2003 and Nobody Is Sure Why · · Score: 2

    Whatever you do don't put the blame on you blame it on the rain yeah yeah. Cuz the rain don't mind and the rain don't care.

  10. Re:One more reason to move away from RC4 on Jury Finds Newegg Infringed Patent, Owes $2.3 Million · · Score: 1

    That's one more reason to stop using RC4, which isn't secure anymore when used with SSL/TLS

    While I agree with security sentiments this particular patent expired in 2012. They were going after Newegg for past transgressions.

  11. Re: Stupid judge/jury. on Jury Finds Newegg Infringed Patent, Owes $2.3 Million · · Score: 1

    Jurors and judges don't get to invalidate patent claims because of some flaky idea of who is trolling who. Rather, they have to follow a more or less established legal process, regardless the side they may otherwise be rooting for. You want a "Bad Guy" for this event? Blame Congress, as current law incentivizes patent reviewers to accept questionable patent applications, and the number of years granted to these patents are too many.

    http://en.wikipedia.org/wiki/Jury_nullification

    If Jurors are expected to be robots helplessly putting up with all measure of insanity placed before them what is the point of having a Jury? In the real world legitimacy matters.

    You want a "Bad Guy" for this event? Blame Congress, as current law incentivizes patent reviewers to accept questionable patent applications, and the number of years granted to these patents are too many.

    I blame "we the people" for not insisting on campaign finance reform and ending "K" street.

  12. Re:Lenovo. on Ask Slashdot: Best Laptops For Fans Of Pre-Retina MacBook Pro? · · Score: 2

    T420s owner here. Sure, it's got all the processing power of a MBP and a robust chassis, but the battery life, audio and screen quality are all terrible.

    A T410 got me 12hrs of use on an intl flight with 9-cell battery and ultra-bay lipoly. While I don't care enough about audio to comment the screens are all TN only very lately has Lenovo transitioned to IPS for T-series.

    My problem recently with Lenovo and T-series they effectively killed it off in recent iterations by "Appleizing" it. Slimming it down, getting rid of the ultrabay replacing with an internal non-removable battery. I use my ultra bay heavily for archiving to DVD, second battery on long trips and as a sata tray for a second HDD drive for RAID 1 mirror. It could be worse they could have glossy screens but latest iteration of T series is dead to me and this makes me really sad.

  13. Open source genome sequencing on FDA Tells Google-Backed 23andMe To Halt DNA Test Service · · Score: 4, Interesting

    At the rate things are going it is likely to soon become cost effective to sequence everything for what 23andMe is charging now and simply hand customers a DVD with their fully sequenced DNA.

    When that happens the cat is out of the bag all you need is software to do analysis for any and all aliments you want using nothing more than software which can be downloaded and used freely by anyone. Software no government is going to have much luck restricting people from getting their hands on it.

    I am all for FDA regulations but they need to evolve or they will find themselves on the loosing end of a war they cannot win (See also drugs, smokes and alcohol)

    A couple of suggestions:

    1. Carve a space in regulatory regime allowing for speculative technologies provided any test outcomes must be validated by an FDA approved method before actionable decisions are made by a doctor. e.g. what is most likely to happen currently anyway as a result of any 23andMe diagnosis.

    2. Setup a scoring framework and information system allowing people to get statistical information on the accuracy of tests as results are confirmed so they can make up their own minds whether tests are worth their time. Enabling the market to drive accuracy is a win for everyone.

  14. Re:Monsanto belivers riddle me this on Make Way For "Mutant" Crops As GM Foods Face Opposition · · Score: 2

    That would be true if RoundUp was free. It isn't. Spraying with RoundUp is expensive both in terms of labor and cost of materials, so there definitely is an incentive to minimize its use.

    Whether roundup is free is not at issue. The issue is the cost difference in relation to additional time needed to do a suitable job missing spraying crops with roundup had crop not been "roundup ready"?

    What after all is the market incentive for roundup ready crops if not reduction of labor cost?

    There is also the issue of relative toxicity. RoundUp is the least toxic herbicide to mammals known. Other large scale farming practices require use of much more toxic practices.

    The issue I raised is limited to the real world implication of crops that can now tolerate more roundup than they could in the past thanks to genetic manipulation. I do not wish to compare other solutions unless it is somehow relevant to the original question.

    NIH Tox comments re: Glyphosate:
    http://www.ncbi.nlm.nih.gov/pubmed/10854122

    So why the danger Will Robinson warning label on bottles of roundup from home depot if it is so safe? Assume I'm a complete moron... I am unable to parse or imagine a way by which both statements can concurrently be true.

    Also please note - RoundUp is a trade name for an off-patent herbicide. The generic name is glyphosate, and most of the production of glyphosate is done by Chinese generic manufacturers.

    Alright I feel smarter now.

    Nobody says all GMOs are safe.

    Unfortunately this is a claim I have seen made many times. I would hope all would agree it not to be defensible.

  15. Please stop on Code.org: More Money For CS Instructors Who Teach More Girls · · Score: 0

    Girls hate programming (And silly boys who program). It is in there genes it is who they are stop trying to change them.

    There will only be so many girl programmers the same way there will only be so many bronies in the world.

    Stop wasting your time convincing people to do things they will most likely end up regretting but by all means otherwise work to make the field as accessible as possible to all who *want* in. Quotas are the wrong tool and the wrong measure of success.

  16. Monsanto belivers riddle me this on Make Way For "Mutant" Crops As GM Foods Face Opposition · · Score: 1

    I have two questions for the crowd here and elsewhere who asserts GMOs are safe and haters are just paranoid fools.

    1. When you go to the store and buy roundup to kill grass/weeds at your local home depot the label warns of danger of getting any on your skin suggesting you should immediately wash any off.

    The only reason to modify crops to be resistant to roundup is so they can be sprayed by accident and not die. However if you do this there is no longer any incentive to keep crops from not being sprayed arbitrarily to save time/money. This means more shit we are eating contains more roundup than it otherwise would within it.

    Is this untrue or unfair? Why? Please be specific.

    Assuming the above is true how is ingesting food containing roundup any safer for you than getting a little on your hands while weeding the lawn? Is only the home depot purchased roundup harmful for you?

    Please I just don't understand the logic... it makes no sense on its face at all. Please tell me how to make it make sense...what am I missing?

    2. "GMOs are safe backed by decades of studies" I have never asserted and never will assert all GMOs are unsafe. Not all things that grow "naturally" are safe either. However GMOs are changing all the time and new strains are being constantly produced. How the hell can you just blanket assume all GMOs are safe all strains regardless of the details of each strain and regardless of studies produced before the introduction of subsequent strains?

  17. Re:Blow to NoSQL movement on NYT: Healthcare.gov Project Chaos Due Partly To Unorthodox Database Choice · · Score: 1

    Why do people insist that NoSQL means losing data and inconsistency?

    I have no idea what NoSQL means. It is no different than someone belching out "Cloud" in a context free manner and expecting them to read your mind and have any clue what your talking about.

    NoSQL is an empty vessel covering such a staggeringly disparate array of technologies as to be totally devoid of any meaningful context on its own.

    When you are doing a transaction, and it should be "eventually consistent." meaning on the order of minutes. So if someone, somewhere else, who you do not know about and are not interacting with asks about your data, it might be a few minutes old. ACID makes it so that random person will get an upto the milli-second accurate answer. That makes transactions orders of magnitude slower, and much more complicated to scale.

    This warped sense of coherency many people seem to be peddling is quite amusing.

    Every last bit of data that comes out of a "rational" RDBMS is stale the very instant it is read out. It in no way matters whether it is read out within an active transaction. Answers read out are only guaranteed to be transactionally consistent.

    You normally deal with this by optimistically making dependent assertions on subsequent changes such that incompatibilities arising from conflicting subsequent states can be detected and resolved.

    No sane RDBMS ever blocks reads to offer non-stale responses. They only provide transitionally consistent responses. While there are some RDBM's allowing such foolishness the more sane offerings have no capability to even allow it. The very concept any read data can be held on to without being assumed to be stale is totally insane SQL or NoSQL.

  18. Computer time..where does it all go? on NYT: Healthcare.gov Project Chaos Due Partly To Unorthodox Database Choice · · Score: 1

    I get there must be tons of complexity in managing healthcare.gov site interacting with all necessary stakeholders... Must be quite a lot of different databases, systems, operators to say nothing of complexity of working the actual problem space. I can understand how there might be glitches that cause wrong rates and plans to be communicated.

    What I am still puzzled by are the "waiting rooms" with 40k people waiting to use a site. What the hell can justify it being so computationally expensive to spit out a list of plans? Does the universe need to be recalculated every time someone signs up? Is there some manner of massive graph problem needing to be solved for each user? If you ran a profiler on the web site what would it most be spending its time doing?

  19. Re:Drones for Defense on The US Now Faces the Same Dilemma Over Drones As It Did Over Nuclear Weapons · · Score: 1

    For offense, well, they make great flying bombs. Not everyone needs a predator drone that can be flown over and over. Sometimes all you need a a swarm of delivery agents that can come at a target from multiple directions...in waves, autonomously.

    Their called cruise missiles.

  20. Re:Why subsidize? on A War Over Solar Power Is Raging Within the GOP · · Score: 1

    If solar is doing so great then why does it need subsidies?

    This is a fair question. While I don't know the answer we should be mindful some of the largest most profitable corporations in the world (big oil and huge ag) are also on the receiving end of massive subsidies.

    Thats what the GOP doesn't like, not that such a thing exists, but that the government creates distortions in the economy by picking winners before the race starts. Old school republicans and libertarians both distaste government intervention. Solar will eventually become cost effective without subsidies, lets wait for that to happen.

    No (successful) market is completely capitalistic.
    Sometimes markets need to be distorted to hedge against unexpected shocks to the supply chain or internalize long term problems. These hand waving philosophical blanket statements about non-interference and "picking winners and losers" talking points are worthless. Decisions must be made based upon vigorous consideration of real world conditions and forces not abstract philosophy.

    To be clear I am not for or against solar subsidies I am against the line of argument.

  21. Common wisdom on Elevation Plays a Role In Memory Error Rates · · Score: 1

    In aggregate entire atmosphere down to sea level works out to something like the equivalent of 30ft of water of shielding.. 20% reduction thru an entire rack of servers sounds to be in about the right ballpark.

    People have been running the same experiments on international flights on laptops for years.

  22. Re:Forget it on Ask Slashdot: How Reproducible Is Arithmetic In the Cloud? · · Score: 1

    Not to mention, nuclear simulations should be staying on LANL's hardware, not being foisted into the cloud.

    Real men use grids, pansy hipsters use clouds.

  23. Re:Booze Bus on Texas Drivers Stopped At Roadblock, Asked For Saliva, Blood · · Score: 4, Insightful

    You dont have any knowledge of either Australia or Police States.

    Lol wut? look at u acting like u know me.

    Anyone with half a brain does not use the word "cuz" (which is short for cousin in Australia and New Zealand and is typically used by junkies or people with as much intellegence as a junkie).

    In these parts cuz is shorthand for because. After misspelling "intelligence", "don't" and s/drink/drunk/ you will forgive me for ignoring the ad hominem garbage.

    You have a choice, you can simply not drive. No driving, no random breath tests.

    I live in a State with a constitution protecting the rights of people to be left alone and not arbitrarily searched without cause.

    Remember that driving is not an inalienable right, its a privileged and a privileged that drink drivers abuse

    How does having a drivers license effect your constitutional right to not be searched without cause? For what legal reason does it even matter? Being on foot while drunk is also a crime why is a vehicle necessary to justify search without cause?

    a privileged that drink drivers abuse

    ..hiccup...

    Seeing as you're a fan of hyperbole, seeing as you're using ridiculous analogies against this, you are as culpable in road deaths as the drink drivers themselves (this is sarcasm to demonstrate the ridiculousness of the OP's analogy, for those who cant tell).

    The only justification you had made for your position was it gets results. There is a falsifiability problem inherent in only asserting ends justify means. My analogy was only intended as a device to illuminate this problem so that it can be avoided in the future. Any statement which cannot be falsified contains no useful information.

  24. Re:Booze Bus on Texas Drivers Stopped At Roadblock, Asked For Saliva, Blood · · Score: 1, Insightful

    In Australia it is called a 'Booze Bus'. They don't take blood, but they do the rest and it is 100% involuntary. They will block off freeways to test everyone and park cop cars in all the side streets.

    Australia is a police state.

    Personally I am mostly OK with this.

    And this would be why.

    The next morning when you see the huge line of cars left behind because the drivers were drunk justifies it to me.

    Your ok with it cuz you believe ends justify means?

    If authorities systematically searched everyone's homes without cause and installed cameras and microphones in every room I'm sure it would also bear fruit.

  25. Application policy on 1.2% of Apps On Google Play Are Repackaged To Deliver Ads, Collect Info · · Score: 2

    The only prompt which should ever appear when installing an App is for owner to select a profile of permissions the owner of the device feels comfortable giving to the application. Once this decision is made operating system is expected to do whatever is necessary to sell the lie that Rumpelstiltskin at 7185551212 is my only contact, my current location is the South Pole and my phone number is 1-900-909-4300.

    The problem is none of the current cast of characters - not Microsoft, Google, Apple give a shit about the user they only care about profits which is why the user is always allowed to be treated like shit. Their days of owning the mobile OS space are numbered.