Follow Slashdot stories on Twitter

 



Forgot your password?
typodupeerror
×

Submission + - Bernie Sanders, H-1B skeptic

Presto Vivace writes: Will the Vermont senator raise the visibility of the visa issue with his presidential run?

The H-1B visa issue rarely surfaces during presidential races, and that's what makes the entrance by Sen. Bernie Sanders (I-Vt.) into the 2016 presidential race so interesting. ... ...Sanders is very skeptical of the H-1B program, and has lambasted tech firms for hiring visa workers at the same time they're cutting staff. He's especially critical of the visa's use in offshore outsourcing.

Comment Re:Outdated (Score 1) 211

What you described here fits the typical definition of a project manager.

So they had one person, a "manager", keep an eye on people, keep an eye on projects, allocate resources, and basically manage the group

The difference between a project manager and a manager is that a manager has direct reports and is responsible for dealing with all of the human resource issues (hiring, firing, training, reviews, etc.)

In the situation that you described, who took care of those tasks? The boss? The manager?

Comment Re:Outdated (Score 1) 211

In the case of my organization, they are trying to transition to recurring revenue streams by offering technology solutions with predictable, monthly fees. They are hoping to balance out the cyclical and sporadic revenue cycles inherent in traditional consulting engagements. The organizational structure has not yet adjusted to address the realities of employing a skilled technical workforce.

Comment Re:Also, stop supporting sites with poor encryptio (Score 1) 324

My bank still insists on using RC4 ciphers and TLS 1.

If Firefox were to stop supporting the bank's insecure website, it would surely get their attention better than I've been able to.

What bank is this? There's nothing wrong with public shaming in cases like this, in fact it does the world a service.

Also, you should seriously consider switching banks. Your post prompted me to check the banks I use. One is great, one is okay. I'll watch the okay one.

Comment Re:Can't wait to get this installed in my house (Score 1) 514

I also live in Ontario and did a calculation for that based on prices of Chinese lithium ion batteries at the time (6 months ago). Back of the napkins said it would be greater than 10 years to get a payback, but the prices are still dropping. I'd say this kind of stuff is going to happen soon. I recently installed a whole home power monitor for interest sake, and honestly for $3500 even if it paid itself back to break-even over the 10 year warranty period it would be an interesting project to take on. Still I imaging the switching equipment you need to install along with this is pretty serious cost, and I don't think this comes with a charger/inverter either.

Comment Re:Yes, but.. (Score 1) 324

That said, if I'm debugging something a browser is doing, the developer console is usually better anyway.

Yes, it is, and the same holds everywhere. Being able to grab the data on the wire has long been an easy way to get sort of what you want to see, but it's almost never exactly what you're really looking for. HTTPS will force us to hook in elsewhere to debug, but the "elsewhere" will almost certainly be a better choice anyway.

Comment Re:Paid Advertisement (Score 4, Insightful) 76

The OpenSSL codebase will get cleaned up and become trustworthy, and it'll continue to be used

Cleanup up and trustworthy? Unlikely. The wrong people are still in charge for that to happen.

Nonsense. The people running the OpenSSL project are competent and dedicated. OpenSSL's problem was lack of resources. It was a side project with occasional funding to implement specific new features, and the funders of new features weren't interested in paying extra to have their features properly integrated and tested. That's not a recipe for great success with something that really needs a full-time team.

Submission + - Patent Issued Covering Phone Notifications of Delivery Time and Invoice Quantity (eff.org)

eldavojohn writes: The staggering ingenuity of the US Patent system has again been showcased by the EFF's analysis of recent patents. This week's patent and follow up patent cover the futuristic innovative idea that when you order something, you can update your order and add additional amounts to your order while it's being processed. But wait, it gets even more innovative! You may one day be able to even to notify when you would like it delivered — ON YOUR PHONE. I know, you're busy wiping all that brain matter off your screen as your head seems to have exploded. Well, it turns out that inventor and patent holder Scott Horstemeyer (aka Eclipse IP, LLC of Delray Beach, FL) found no shortage of targets to go after with his new patents. It appears Tiger Fitness (and every other online retailer) was sending notices to customers about shipments. Did I mention Professional waste-of-space Horstemeyer is a lawyer too? But not just a regular lawyer, a "SUPER lawyer" from the same firm that patented social networking in 2007, sued Uber for using location finding technologies in 2013 and sued Overstock.com as well as a small time shoe seller for using shipping notifications in 2014.

Comment Re:when? (Score 1) 182

nobody is building Internet services that need several hundred megabits for reasonable performance

If there is not a lot of length of copper or fibre between the two endpoints why not? It's only congesting a little bit of a network.

Perhaps I wasn't clear. I wasn't referring to building of network connections, I was referring to the building of user services that rely on them. For example, YouTube is built to dynamically adjust video quality based on available bandwidth, but the range of bandwidths considered by the designers does not include hundreds of megabits, because far too few of the users have that capacity. They have to shoot for the range that most people have.

But as that range changes, services will change their designs to make use of it. We don't really have any idea how things will change if multi-gigabit connections become the norm, but you can be certain they will. Just as programs expand to fill all available memory, Internet services expand to fill all available bandwidth. To some extent that's because more capacity enables laziness on the part of engineers... but it also enables fundamentally different and more useful technologies.

Comment Re:Paid Advertisement (Score 1) 76

Has the fact that there's three major BSDs and one Linux been in BSD's favor?

Being able to choose an operating system (BSDs, Linux, commercial UNIXen, Windows, etc.) has been in your favor, particularly from a security perspective. And would you seriously argue that the existence of multiple BSDs has been a bad thing for their security? I'd argue exactly the opposite. The BSDs, have a well-deserved reputation for being more secure than Linux, and part of that reputation arose directly from the BSD forking. In particular, OpenBSD forked specifically to focus on security, and FreeBSD and NetBSD worked to keep up.

Does it really provide any tangible benefit that not all of us are hit at the same time with the same bug, when we're all vulnerable some of the time?

Yes, it does. You seem to think that being vulnerable none of the time is an alternative. It's not. The system as a whole is much more resilient if vulnerabilities affect only a subset.

For that matter, the eyes in "many eyes makes all bugs shallow" as well.

Look how well that has worked for OpenSSL in the past. The many eyes principle only matters if people are looking, and competition creates attention. Also, it's a common error to assume that the software ecosystem is like a company with a fixed pool of staff that must be divided among the projects. It's not. More projects (open and closed source) opens up more opportunities for people to get involved, and creates competition among them.

Competition also often creates funding opportunities, which directly addresses what was OpenSSL's biggest problem. You can argue that it also divides funding, but again that only holds if you assume a fixed pool of funding, and that's not reality. Google is contributing to OpenSSL development and almost fully funding BoringSSL (not with cash, but with people). That isn't because Google's left hand doesn't know what its right is doing.

Am I supposed to swap browsers every time a vulnerability is found in Firefox/Chrome/Safari/IE?

Huh? No, obviously, you choose a browser with a development team that stays on top of problems and updates quickly. It's almost certain that developers will choose their SSL library at least partly on the same basis, again favoring more work and more attention on the crucial lib.

It's more like math where you need a formal proof that the code will always do what you intend for it to do and that it stands up under scrutiny.

It's not, it's really not. It would be nice if that were true. It's really more like a car that breaks down over time in various ways; some are more reliable than others, but all require ongoing attention and maintenance.

We're not talking about something that must have a fail rate, if you get it right it's good.

This is true in theory, but untrue in practice, because new attacks come along all the time and ongoing maintenance (non-security bugfixes, new features, etc.) introduce new opportunities for security bugs.

Your Apache and IIS counterexamples are actually support my argument. IIS, in particular, was riddled with problems. Yes they've been cleaned up, but you're talking about a space that has been static for almost two decades (though it will soon be destabilized with the introduction of HTTP/2 and probably QUIC) and is, frankly, a much simpler problem than that solved by OpenSSL... and I assert that without the competition of alternatives, IIS never would have been cleaned up as thoroughly as it is.

Slashdot Top Deals

Air pollution is really making us pay through the nose.

Working...