Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×

Comment responsible disclosure is a myth? (Score 1) 163

I think everything else you wrote was good but in the case of disclosing security attack vectors, letting everyone know or only letting hackers know, before giving the company a chance to fix the security hole results in a great many more hackers using the attack vector than if it had been reported without public disclosure. We have no idea who figured out the attack vector first, the researcher could very possibly be first, or be one of the first, to discover it. Do hackers always share attack vectors with other hackers immediately after finding them?

Security bugs are very different from functionality bugs and should not be compared. Similarly the disclosure of these bugs should follow different paths.

Comment Re:big effing news (Score 1) 330

That article is mostly about the NSA's responsibility to collect intelligence on foreign communications. They didn't going into comsec as much as comsint. The CIA collects intelligence through non communication interception methods such as infiltration, espionage, etc. All of our intelligence agencies have some degree of overlap but intercepting and decrypting communications is a primary responsibility of the NSA, not the CIA, as confirmed by your own source.

Comment Re:big effing news (Score 2) 330

Really? The NSA has always been a spy agency. Even in the 60's they were decrypting communications of foreign governments. Wikipedia's opening paragraph on the NSA mentions spying before security as well. Where did you get the idea that they aren't a spy agency?

Comment Shark Tank is here to help (Score 2) 212

The lollacup episode on Shark Tank had some interesting tidbits about contracts with marketing firms. To summarize, do not give your marketers exclusivity to profits for a market (asia for instance) and make sure they profit from their contributions to the market success of your product. The Lollacup creators had good business sense but still managed to make a contract with a marketing firm which took advantage of them.

Comment Re:What about complex software? (Score 1) 130

I can't figure out the specific company that made a presentation video about this exact situation but it was posted here on slashdot about a year ago if anyone remembers it. I thought it was Pixar but searching the web for the video didn't turn up much. The gist of the process was that 10 CS Doctors worked on an algorithm for 3 years to greatly improve speed and believability of rendering light interactions with objects. They patented each promising attempt but it still took 3 years to perfect the algorithm and apply for their final patent.

If the evolution of the algorithm had no missteps then requiring code at each stage would have been fine for them but they had many missteps and not all of their patents are useful compared to the last one they published. Imagine someone got wind of what their abstract, non-coded idea was and hired a bunch of programmers to make a very poor version of it and then patented it. They would lose their economic incentive to finish the project and we'd all be stuck with a really bad implementation of their good idea. I guess alternatively they could just go ahead and waste time coding up a very bad version of their idea and then rewrite all the code correctly later.

The project I'm working on right now for a well known company has about 50 engineers working on it and has been going almost a year now. We had working code after 3 months for the basic idea but we still don't have code demonstrating the ultimate vision of our product. So that works out to roughly 5 man-decades before we'll have a fully coded implementation of the patent filed several years ago. The last company I worked for had a much larger software team working on an even more complex project but the basic idea had been patented long ago and we were just making small incremental improvements on it, some of which we patented.

Comment Re:Provoking (Score 1) 1130

That's quite true that they're limited by their fingers but the difference of a few rounds a second is considerable if the spree goes on for a few minutes which most do; 2 extra shots per second x 60 seconds/minute x 2 minutes = 240 extra bullets. I don't think we should be comparing your fire rate to a pro like the guy in the youtube video but there has to be someone with equal pistol/file skill that has compared fire rates including reloads. It's such a simple thing to test and would put this whole argument about clip capacity limits to rest.

Comment Re:Provoking (Score 1) 1130

The guy in the video managed to average 3 rounds per second using his 6 round clip. This is much slower than what can be done by a carbine and that's not taking into account the fact that he can only store so many clips in a position on his body which can be quickly taken from without looking at it. You're argument also assumes that Torres was trying to shoot as many bullets as fast as possible which is dubious considering his firing speed. Finally, even marines and people who frequent firing ranges can't speed reload like that. It takes a lot of practice and most people will fail miserably at it when the adrenaline kicks in.

Comment Re:Provoking (Score 1) 1130

I'll admit that I was only thinking of the last couple shootings which were committed using carbines but overall pistols do come out ahead by a small margin compared to assault rifles/carbines. I say small margin because even though in many cases the suspects were also armed with pistols, their primary weapon was a rifle.
http://www.nycrimecommission.org/initiative1-shootings.php

Comment Re:Provoking (Score 1) 1130

They're using mortars and AK's, neither of which are legal in the USA. The gun-rights advocates are defending possession of firearms which are decidedly not capable of equaling military firepower. I most definitely want us to keep high caliber small arms and sniper rifles as a deterrent against tyranny but carbines really aren't needed and are the weapon of choice in mass shootings.

Comment Re:Did Zuckerberg ever have to get past HR? (Score 1) 716

Right, but it may have in fact meant something outside of College so I was covering both bases with my comment. I'm sorry if that wasn't clear from what I wrote. I also assumed you fit into the category of people for which you were referring because you made such a negative comment in response to what I wrote. It was a calculated guess but you really didn't give me much information to figure out why you were calling me a stoned pinhead. I should have just ignored your negativity and tried to address the confusion but that's hard to do when someone pisses you off.

The personal attack response isn't a US thing as far as I know. The research I've read so far on the subject indicated that It's caused by disassociation from community. In essence people don't realize that there really is another person on the other side of a text based conversation.

If your point was simply that some people want to go through life in a different order then I totally agree with you. On the other hand, if your point was that they are enjoying themselves more by choosing a path that either doesn't involve college or involves a education track which doesn't develop a marketable skill-set, then I'd say they're being shortsighted and should re-evaluate both their goals and plan to accomplish those goals.

Slashdot Top Deals

Work continues in this area. -- DEC's SPR-Answering-Automaton

Working...