Become a fan of Slashdot on Facebook

 



Forgot your password?
typodupeerror
×

Comment Re:It depends (Score 1) 486

RAM *is* faster (by far) than any persistent media 9SSD, HD...). So whatever the test, the algorithm is probably bad,

I read this summary as "when the goal is to write a string to disk, building it in memory first is slower than just writing it to the damn disk in the first place".

Followed by a "does this mean my cafeteria meal card is going to get renewed?" at the end.

Comment Re:Nice (Score 4, Funny) 119

It's easy. You just use "vi [filename]" and then inside the file you hit lower case i to actually edit it and then escape to stop editing it and then ctrl to activate the command prompt inside vi and w to write it and exclamation mark because youre sure you want to save it and then q to quit.

And after that I have configured resolv.conf and apt.sources to the point where I can just install nano and get back to work.

Comment Re:Summer? (Score 1) 160

The article says nothing about what happens during the summer months. You just shut down the servers then? (HTTP 707 Error: Server on summer break).

They probably install a duct to just circulate outdoor air through the unit. In The Netherlands the average high temp doesn't get past 70F/21C so there are few times when you would have waste heat that you couldn't use.

Plus, these are no doubt highly distributed redundant systems (cloud, as it were) so turning them off and relying on servers elsewhere is a viable option.

Comment Re:Yeah because you know... (Score 2) 224

Entirely true. It would just make more sense if they developed technology that could be retrofitted in to any car instead of just their newest line.

There are a fucking million of them but, what good is a device that goes for around $100 when you can sell [announcer voice] aaaaaaaa new caaaaaaar! [/announcer voice].

Comment Re:boxen and Borg? (Score 1) 296

Then the answer is not to send the hardware to empty buildings, but to install a GPS tracking device in the shipping container, and see where it goes off-course. Bonus points if you can track it all the way to the NSA modification warehouse, but at least if you know where it got diverted, you can figure out *how* it gets diverted. I suspect the truck drivers are in on it, but without tracking data, that is just a theory.

Why on earth wouldn't you just presume that they are sitting in the CBP cargo control office waiting for anything marked Cisco? Secret warehouse? What is this, a Bond movie? It's a guy with a laptop and a cubicle at the port of Los Angeles who sifts through manifests and then saunters out for a few hours when he spots a ripe container, does his flashy flashy, puts some pretty tape back on the box, and no one is the wiser. The guy who works in Memphis at the border control office for the Fedex hub has it even easier, he just waits for the box to come down the conveyor and "inspects" it for a few minutes and sends it on its way.

You make a good point though, Cisco doesn't seem to have any problem with the premise that US intelligence agencies can basically do anything with their products after they leave the warehouse, but is glad to set up an extra layer of work (for a fee!) to help (not really) remedy it. If they wanted to actually stop this from happening they would take a completely different approach, like just doing final assembly over seas, since all the freaking parts come from Asia anyway.

Comment Re:What I would do (Score 1) 296

If I were Cisco I'd send a rep to a few customers believed to be likely targets (at no cost to the customer), have them check the firmware on site w/ JTAG and if it doesn't match, take the firmware apart and publish the malware. Would serve NSA right.

TSA goon 1: Oh, youre with cisco, and you're headed to Iran? (chris hansen voice) Why don't you take a seat over there?
TSA goon 2: Nice JTAG interface you have there. Shame if anything happened to it (h4x0r flash with firmware to hide modified cisco firmware)
TSA goon 1: Have a nice trip!

Comment Re:boxen and Borg? (Score 2) 296

What?

"Editors"

While admiring Cisco's efforts here, this seems hard. At least these criteria would need to be satisfied:

1) the order would have to come in over an actual secure channel and be handled on known-secure systems.
2) the payment could not be processed until the delivery was made. Once the payment is made, the delivery location is compromised for future orders.
3) the shipment would have to be to a location that does not appear on the MLS. The receiver would have to follow tracking and send a courier out to meet the delivery driver (a easy expense for the right customers).

Driving to a distributor for pickup also seems like a good idea, so long as #2 is adhered to, since it amplifies the required effort of an attack to intercept several palettes of gear.

What other attacks are there on such a secure-delivery system using a common carrier?

The most obvious one: they will just intercept everything leaving Cisco and not heading to a reputable US company (scratch that, they probably target reputable us companies too). If they can intercept and MitM one box they can surely do it to a thousand. Why should they care if they don't even know where it's going, they can needlessly bug 1000 routers for every 1 that gets inside the right place and still have enough money in the budget to buy donuts on friday.

Where did you get criteria 2 and 3 from? It's pretty clear from the description that Cisco thinks the NSA will be thrown off the trail based on the premise that they are using a (From==Cisco && To==Iran) style filter to do these intercepts, and won't think to do ((From==Cisco && To==Pier 4, NYC) || (From==Pier 4, NYC && To==Iran)). The thinking is similar to bitcoin laundering services Underestimating the NSA in this regard is pretty sad, given that the leaks are only a fraction of their secretive doings.

Comment Re:Has anyone studied? (Score 4, Insightful) 262

Has anyone studied the effect on the environment of taking all of that energy out of the wind? What if seeds and dust aren't carried as far? How does that affect terraforming? What about migratory birds? Has anyone bothered to solve the problem of mass kills during migration season?

These questions will never be answered, I don't think, because the politics that drive wind power are the same as those that drive anthro climate change - "We're right, shut up if you disagree?"

The Earth is going to be destroyed by people (on both sides of the political aisle) who refuse to take a reasoned approach to our energy crisis. The root causes of our energy shortage, climate change, starvation, hunger, crime, and disease, are all one in the same: OVERPOPULATION.

We're 7 times as numerous as the Earth can sustain. Unless and until we fix that problem, our habitable climate WILL be destroyed.

"Informative"? WTF mods, just wtf. Let's see: YES, they have studied it: wind speeds beyond the wind farm in question are not changed any measurable amount by the operation of the farm. Don't worry, pollen and dust will still get all over every fucking thing. Terraforming? Wtf, no. Bird issues are being addressed by implementing various repellent techniques, and the number of birds killed is actually already extremely low (far less than the number killed by household cats but you aren't here on /. to whine about getting rid of cats, are you).

As for your overpopulation assertion, Thomas Malthus died 150 years ago, and still isn't close to being right.

Comment Re:Exactly. You8 can't get there from here. (Score 1) 205

The last thing the world needs is for you to learn on the job. That privilege is reserved for every other line of work (bar none), but not, I repeat, not and never ever IT security.

It is kind of a dick move to walk into a project with a negative deliverable (from the customer's perspective they are desiring proof that there are no security holes) and have no real idea what you are doing. Why do you think fortune tellers have such a bad rap? "oh yes, i can see it now, everything is fantastic! there are no issues anywhere! oh, and avoid Pisces" Sure, you can't be wrong (unless they are literally getting exploited while you audit), but then again you are almost certainly not right either.

Comment Re:Get certified (Score 3, Informative) 205

Get certified.

>> my boss approached me about offering security evaluation and penetration testing to customers in our area

Because it might at least mitigate the damage after your company get sued by customers who get hacked after you tried to learn on their dime. (Google "Target Trustwave"...)

Seriously, if there's a real business opportunity in your market, your management should either hire an experienced guy/gal and/or partner with an existing firm. Then, you'd have the opportunity to learn along them...while picking up the certs you'll need to be credible when talking to other companies. (And if your management is too cheap to buy your security certs, that's a BIG red flag!)

That's a bit overgeneralized. Trustwave is under fire because the breach in question was of a (supposedly) PCI-DSS compliant system, which Trustwave was partly responsible for setting up and validating, a basically impossible task when the system has that much surface area. So, the lesson learned is don't work on PCI-DSS unless the system is so small that you can personally verify each component yourself. I really doubt this anonymous company is going to be winning a contract with a major national retailer to install/validate a PCI-DSS network, considering many larger companies are already in that market with, you know, actual credentials.

The takeaway should also be, before selling your service, get a lawyer (or a bunch of them) to draft a very detailed customer agreement to protect you. Also, get insurance just in case.

Comment Re:I'm no Seleneologist but.... (Score 1) 214

In a word, Helium3.

Even if it were useful, it turns out that it's available in modest form in extracted natural gas and other deep pocketed materials. If we had a use for a whole lot of it maybe getting it from the moon is practical but that can only come after we have a use for the amount already here, which won't be for a long time. Considering it's measured in the parts per billion in lunar soil you would need a hell of a refining plant to get a significant quantity.

The only hope of profit from this sort of "expedition" is to come across a few of the fabled solid platinum meteors and come back with a whopper (platinum is currently valued at $3,500,000 per hundred kg)

Comment Re:Youtube. (Score 1) 169

Post it on youtube. Include the URL and maybe a checksum in the capsule. Make it someone's job to hold onto a copy, check once a year, and re-upload if it's gone for any reason. Make it someone else's job to make sure that someone is responsible if the first person dies or moves away, etc...

And don't forget, when choosing candidates for job #1 and job #2 put them in descending order by age.

Comment Re:Could be. (Score 1) 392

ightning was introduced because Micro USB was considered sub-par by Apple. And let's face it: There is some truth to that. Lightning is sturdier, easyer to handle, has more data throughput and IIRC more relyable electrical specs.

Easier to plug in? Yes, Apple perfected that with Lightning. Easier to break? Yep they did that too http://9to5mac.com/2014/08/22/... And faster? Perhaps faster at delivering hype and vapor, because last I checked every Lightning cable made had a USB1/2 A port on the other end, so it's exactly as "fast" as every micro-USB cable out there.

Slashdot Top Deals

Life is a healthy respect for mother nature laced with greed.

Working...