Catch up on stories from the past week (and beyond) at the Slashdot story archive

 



Forgot your password?
typodupeerror
×

Comment Context (Score 3, Informative) 62

This ends a situation in which two companies that would otherwise have been competitive bidders decided that it would cost them less to be a monopoly, and created their own cartel. Since they were a sole provider, they persuaded the government to pay them a Billion dollars a year simply so that they would retain the capability to manufacture rockets to government requirements.

Yes, there will be at least that Billion in savings and SpaceX so far seems more than competitive with the prices United Launch Alliance was charging. There will be other bidders eventually, as well.

Comment Re:I'm extremely surprised... (Score 2) 161

In Minnesota, the public sector is mandated by statute to release information to the public and be setup in a way which facilitates this action:

https://www.revisor.mn.gov/sta...

13.03 ACCESS TO GOVERNMENT DATA.
Subdivision 1.Public data. All government data collected, created, received, maintained or disseminated by a government entity shall be public unless classified by statute, or temporary classification pursuant to section 13.06, or federal law, as nonpublic or protected nonpublic, or with respect to data on individuals, as private or confidential. The responsible authority in every government entity shall keep records containing government data in such an arrangement and condition as to make them easily accessible for convenient use. Photographic, photostatic, microphotographic, or microfilmed records shall be considered as accessible for convenient use regardless of the size of such records.

I have used this exact quoted statute many-a-time to force local government agencies in Minnesota to not only provide me information, which they were usually willing to do, but for free or very low cost.

I made a request once to a public transit agency who told me it would be several hundred dollars to do. I told them if they had followed the statute to make the data readily accessible by the public, it wouldn't require the work they were trying to charge me to do. Their legal counsel informed them I was indeed correct and I got it for the cost of the media.

Maybe there is a similar statute in this case which drove the decision?

Comment Re: Apple ][ was a great product (Score 1) 74

Though there was a good reason for the original compact Macs to discourage users from opening them up -- there were exposed high voltage monitor electronics in there which could give you a hell of a zap of not properly discharged.

The later all in one Macs of the 90s were better in that regard. Their user suitable parts (motherboard, drives) all were easy to get at, but the monitors and power supplies were fully enclosed.

Comment In particular, NO redundancy. Reliability drops. (Score 5, Informative) 226

Losing data goes with the territory if you're going to use RAID 0.

In particular, RAID 0 combines disks with no redundancy. It's JUST about capacity and speed, striping the data across several drives on several controllers, so it comes at you faster when you read it and gets shoved out faster when you write it. RAID 0 doesn't even have a parity disk to allow you to recover from failure of one drive or loss of one sector.

That means the failure rate is WORSE than that of an individual disk. If any of the combined disks fails, the total array fails.

(Of course it's still worse if a software bug injects additional failures. B-b But don't assume, because "there's a RAID 0 corruption bug", that there is ANY problem with the similarly-named, but utterly distinct, higher-level RAID configurations which are directed toward reliability, rather than ONLY raw speed and capacity.)

Comment NetUSB=proprietary. Is there an open replacement? (Score 2) 70

It happens I could use remote USB port functionality.

(Right now I want to run, on my laptop, a device that requires a Windows driver and Windows-only software. I have remote access to a Windows platform with the software and driver installed. If I could export a laptop USB port to the Windows machine, it would solve my problem.)

So NetUSB is vulnerable. Is there an open source replacement for it? (Doesn't need to be interworking if there are both a Linux port server and a Windows client-pseudodriver available.)

Comment Opportunity to detect MITM attacks? (Score 4, Interesting) 71

I skimmed the start of the paper. If I have this right:

  - Essentially all the currently-deployed web servers and modern browsers have the new, much better, encryption.
  - Many current web servers and modern browsers support talking to legacy counterparts that only have the older, "export-grade", crypto, which this attack breaks handily.
  - Such a server/browser pair can be convinced, by a man-in-the-middle who can modify traffic (or perhaps an eavesdropper-in-the-middle who can also inject forged packets) to agree to use the broken crypto - each being fooled into thinking the broken legacy method is the best that's available.
  - When this happens, the browser doesn't mention it - and indicates the connection is secure.

Then they go on to comment that the characteristics of the NSA programs leaked by Snowden look like the NSA already had the paper's crack, or an equivalent, and have been using it regularly for years.

But, with a browser and a web server capable of better encryption technologies, forcing them down to export-grade LEAKS INFORMATION TO THEM that they're being monitored.

So IMHO, rather than JUST disabling the weak crypto, a nice browser feature would be the option for it to pretend it is unpatched and fooled, but put up a BIG, OBVIOUS, indication (like a watermark overlay) that the attack is happening (or it connected to an ancient, vulnerable, server):
  - If only a handful of web sites trip the alarm, either they're using obsolete servers that need upgrading, or their traffic is being monitored by NSA or other spooks.
  - If essentially ALL web sites trip the alarm, the browser user is being monitored by the NSA or other spooks.

The "tap detector" of fictional spy adventures becomes real, at least against this attack.

With this feature, a user under surveillance - by his country's spooks or internal security apparatus, other countries' spooks, identity thieves, corporate espionage operations, or what-have-you, could know he's being monitored, keep quiet about it, lie low for a while and/or find other channels for communication, appear to be squeaky-clean, and waste the tapper's time and resources for months.

Meanwhile, the NSA, or any other spy operation with this capability, would risk exposure to the surveilled time it uses it. A "silent alarm" when this capability is used could do more to rein in improper general surveillance than any amount of legislation and court decisions.

With open source browsers it should be possible to write a plugin to do this. So we need not wait for the browser maintainers to "fix the problem", and government interference with browser providers will fail. This can be done by ANYBODY with the tech savvy to build such a plugin. (Then, if they distribute it, we get into another spy-vs-spy game of "is this plugin really that function, or a sucker trap that does tapping while it purports to detect tapping?" Oops! The source is open...)

Comment Re:No Chicklets! (Score 1) 147

The inadequately-configurable trackpads, in positions where they detect the palm resting on the laptop (or brushing them) and randomly jump the cursor or highlight whole paragraphs so the next keystroke replaces them, are no help, either.

What do you mean by inadequately configurable? There's usually an option to disable while typing somewhere.

It's there. It's on. Didn't help. Don't know if it's that Ubuntu 14.04 doesn't support it properly on these two machines or if it doesn't do the job I want done.

What I'm looking for is NOT there: A threshold level for touch sensitivity. If you're going to put a BIG touchpad on a laptop's palm rest, you need to either put it where the palms won't brush it, or you need to make it possible to turn down the sensitivity so that a feather-light brushing of the pad doesn't register as a mouse motion or button click.

Two different manufacturers (Lenovo and Toshiba) have used exactly the same layout, and exactly the same hair trigger, non-adjustable, touchpad sensitivity. (Also exactly the same sort of wafer-thin flat tile keys, which is how we got into this digression.)

Comment Re:New Jersey and Other Fictions... (Score 1) 615

These people are increasingly rare, given that more gas stations lack "full-service" pumps.

Well, chalk one up for electrics, I guess.

Tesla's working on automated full-service battery swapping stations. And apparently also on charging cords that can plug themselves in:

http://www.theverge.com/2014/1...

Robots of that sort already exist, so you can see the sort of thing he's probably referring to:

https://www.youtube.com/watch?...

Comment Re:Won't save most of the 4000 lives (Score 1) 615

Local delivery (Fed Ex, UPS etc) will still have an operator (or perhaps two or more) that can jump out with the package while the delivery truck drives around the block

That's what the Amazon drones are for. The truck just has to cruise through the neighborhood. Meanwhile, small drone aircraft that it carries will work to carry packages out of the truck and to front doors. A human will still be needed for heavy or bulky packages, or for deliveries that have to be brought inside or where there's no convenient place for the drone to land to deposit them, but those packages and destinations can be separated from the others at the local depot, and all put on a smaller number of trucks, therefore needing a smaller number of humans. You won't need a human for every truck if you work out the routes each day based on the nature of the packages you've got and where you're taking them.

Comment No Chicklets! (Score 3, Insightful) 147

The problem I have with current keyboards is not just the short travel and lack of clickyness, but the tiny height of the keys.

Instead of the tall keys with space between them for fingernail clearance, there are these thin squares maybe an eighth of an inch above a solid surface. If I don't keep all my fingernails cut short, when they go past the side of the key they hit the panel and the key doesn't "strike". Letters get dropped. (So I get to pick between typing well and playing the guitar. I pity those who must keyboard for a living but want long nails to maintain their social life.) The short travel means there's little margin for finger variation, so some letters, where my fingers don't depress the keys as far, normally, don't strike, while others, where I support the weight of my hands, do strike when they shouldn't, or strike multiply.

After over a year I haven't been able to adjust. You may have noticed that my spelling has gone to hell as a result: I have to do a lot more correction and sometimes miss fixing things up.

(The inadequately-configurable trackpads, in positions where they detect the palm resting on the laptop (or brushing them) and randomly jump the cursor or highlight whole paragraphs so the next keystroke replaces them, are no help, either.)

On the other hand, when the nails do hit the key, they quickly wear through the top level of black plastic, exposing the backlit transparent light below it. I replaced a laptop about a year ago and after about six months about a half-dozen heavily-used keys had their pretty letters obscured by the giant glow of the scoured away region.

I had been running on older thinkpads and toshibas, with classic keyboard-shaped keys, or at least the little fingertip cup and substantial fingernail clearance. Switching (in a two-dead-laptops-in-two-weeks emergency) to a lenovo z710, then to a company-supplied toshiba s75, both with the stupid "I'm so thin", square, low-travel, no-finger-cup keys has been a disaster.

Slashdot Top Deals

Let the machine do the dirty work. -- "Elements of Programming Style", Kernighan and Ritchie

Working...