Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×

Comment Re:git blame of the bug please (Score 1) 303

Looks like snhenson most recently committed the two places final s2n() macro call the above linked article identifies as the line that finally sends data, as well as the n2s() that got data from the remote connection:

https://github.com/openssl/ope...
https://github.com/openssl/ope...

Not sure which is worse, using the unsanitized user input (which it seems he MUST have known was user input) or the copy-n-paste coding.

Sorry for the public shaming, but it seems he'd better at least make a case that he's not on the NSA payroll. Of course mistakenly relying on user input is the sort of mistake we've all probably made at least once, so it's quite believable that it was an honest mistake.

Comment Re:Still trying to wrap my head... (Score 1) 51

This isn't the '90s. Compared to hardware resources today, yes, an operating system is a thin runtime environment. Most of the resources are shared and usually they are abundant.

Using containers simply means you get yet another abstraction layer, that needs to be managed in yet another way, that will eventually evolve into being exactly the same thing as that operating system you tried to get away from.

Frankly, I'd rather be managing 1000 guests with 1000 apps, because once I have enough automation to spawn and manage guests on demand I don't want them being unique snowflakes and get the accompanying maintenance nightmare because they each host so much that they create infrastructure dependencies.

For most small to medium scale operations the main cost will be the personell needed for management. If you're only running a lot of things you can deploy and support on something like containers or even better openshift, that might be the better option. But if you're running a lot of things that you need to dink around with, even to a minor extent, and will run into support issues with, then you're just creating a resource drain on the one resource that's actually expensive: your admins time.

Comment Re:History Lesson:German occupation of Czechoslova (Score 1) 551

I would consider it far more likely that Putin annexes parts of the Balkans. Estonia or Latvia would be a whole other ballgame as they're EU and NATO members. That would basically force the EU and NATO to engage as the next step after that would be Poland and East Germany. It would be obvious that there's no intention at all of stopping at all.

As that point at least Britain and France might very well start pressing nuclear buttons.

Comment Re:How? (Score 1) 516

Where the heck do you live that you can buy even a studio apartment for $10k? And even if you can, you'll spend $20k/year in gas getting to your job (not to mention the time you waste in the car). Okay, maybe if you get mad cash working an oil field in the boonies, but for most of us who have to live in a city to be reasonably close to work...

I agree with you that people should consume less, not demand huge, new houses, drive their cars until they can't possibly be fixed, and I do all that. My car is a 1998 I live 45 minutes from work because houses cost twice as much near my office. And I have a family, so I can't just rent a room (which is how I lived cheaply when I was single). But for the $800 of our mortgage payment that goes to interest, taxes and insurance, we can only rent a small apartment or condo, so borrowing and buying truly makes more sense.

What I'm really complaining about is the tax code and the fed's monetary policy. If you're paying 3.5% (i.e. earning -3.5%) on a mortgage and the stock market earns, on average, 8%, every extra dollar put in your 401k instead of paying down your mortgage is earning you 4.5%/year. But now that money is at risk for those years (and we have one once or twice a decade) where the stock market actually drops.

Tax and monetary policy should encourage people to save, not gamble. It /should/ be smart to pay off your mortgages and thereby distribute wealth rather than consolidate it at the top. Tax the capital gains the same as income. End the mortgage interest deduction but let us withdrawal from retirement accounts without penalty or taxes to pay off the mortgage on a single, primary residence (with some reasonable cap, say $500k). When Americans start actually owning their homes instead of the mortgage company owning it, we'll have less need for social security and medicare and be less resistant to cuts in those programs. And we'll save cash too, now that we've paid off our mortgages early, making us dependent on ourselves, not handouts from the Uncle Sam.

And the feds should NEVER bail out the markets. If we'd all owned our homes instead of having so much of our asses in the markets, we could have just let the big firms fail -- only a small percentage of very wealthy Americans would have been hurt much by that, and all of them could have afforded it.

And the fed should target a 0%, not 2% inflation rate. Would this hurt stock market growth? Of course, but that's fine. This free ride of a market averaging 8%/year just makes the rich (who have a larger % of their assets in the market) richer. Let it fail. Let it decline. But let the middle class get out first.

Comment Re:hate the name (Score 1) 230

Okay, stupid name aside, this is awesome. I've never had a single good thing to say about Facebook or Mr. Zuckerberg, but this could totally change that. Lots of devs disparage PHP, but they're all idiots -- PHP is heavily used because it's heavily useful. I haven't used HACK yet, but if it's not a buggy piece of junk might truly be great. I've yet to find a language that lets me go dynamic when I'm prototyping but gradually type when I see fit. So...Sweet!

That said, static typing isn't all it's cracked up to be. Java being the prime example, it makes for some very wordy code that's often tedious to change. And of all the bugs I fix in dynamically typed languages, very few are caused by treating something as the wrong type.

Comment Re:This is a propaganda war first of all (Score 1) 623

Of course it doesn't justify anything. But trying to claim the whole ultra nationalist issue is only Russian propaganda and false flag operators when such a claim is demonstrably false simply increases the efficiency of actual Russian propaganda as it will look more credible. There's simply enough there that trying to dispute the existence of such concerns wont be productive.

Better to criticise on the more appropriate things instead, such as the fact that even if such concerns are real, invading is utterly inappropriate and completely unacceptable. Or the violations of various agreements. It's not as if there aren't a whole lot of other reasons to oppose the invasion.

Comment Re:This is a propaganda war first of all (Score 1) 623

On the other hand, there have been multiple reports about known Swedish neonazis recruiting and travelling to Ukraine to aid the nationalist Svoboda 'to help keep Ukraine from turning into something like Sweden'. Some of who just after returning to Sweden promptly got in a fight and stabbed a couple of antifascists in a streetfight.

So frankly I don't think Russia needs to work particularly hard to stage anything; there may certainly be spetsnaz units pretending to be nazis there, but there is also a bunch of actual real violence prone neonazis there. Unless you're suggesting the Swedish neonazis are spetsnaz as well.

If you want, here's a summary article on the situation at least: http://www.thedailybeast.com/a...

Comment Re:How? (Score 2) 516

> don't borrow money. Ever.

I know that seems like common sense, but the very rich have engineered it so that it's stupid NOT to borrow money. This is what makes us all slaves. You HAVE to borrow money because if you have decent credit, a mortgage is as cheap or cheaper than renting. Saving won't work due to inflation.

But that's why the financial system is rigged. The middle class has to borrow from the rich and pay them, making them richer. We also have to put our money at risk in the stock market because savings will LOOSE value to inflation. And because the middle class has our assets there, the government has to bail out the market when it collapses like it did in 2007/2008.

We need:
1) The fed to target 0% inflation
2) Tax policy to encourage owning property and paying down mortgages more quickly, rather than paying the rich interest.

Or maybe just a good old fashion french-style revolution with guillotines and all. Actually, I think we're getting pretty close to that one, unfortunately.

Comment Like you haven't though of that for years (Score 1) 234

Okay, everybody, stop your whining. I'm pretty sure every one of us reading slashdot has had somewhere near the middle of his or her to-do list something along the lines of "script mass exploit of remote computers in case I ever need to give the entire world a big F-U". There it is, just below "implement monitoring for everything" and just above "stock up for immanent apocalypse" (which fell a few spots in late 2012). It probably won't ever float high enough to actually make much progress on, but we've all though of it. If you could get someone to actually pay you to work on that one in a semi-legitimate fashion (i.e. NOT the mafia or Russian government), wouldn't you jump at the chance?

Comment Re:Rule of Law (Score 1) 519

> If laws can be "interpreted" to go beyond their plain meanings, then it becomes difficult for those subject to them to figure out what is prohibited.

Really? Apparently you haven't read much of the law then. If that were the case, the we pretty much haven't a single law on the books, as just about anything written by lawyers and judges that I've ever read, the constitution itself being a prime example, is vague to the point of being useless. Maybe that just because I'm a computer programmer and when writing code anything ambiguous doesn't even compile, but lawyers and judges have got to be the group with the absolute worst grasp of language.

Comment Re:Why so many trucks? Why not railroads (Score 1) 242

And what's wrong with subsidizing something we all use and benefit from? Those who can pay more do in the form of higher property taxes (the rich actually pay a smaller percentage to the feds income/capital gains tax, but that's a different story). But in return the can hire people at lower wages and patronize businesses with cheaper prices because those businesses can hire people at lower wages. Without the subsidy, we'd either have crime, a revolution or higher wages.

Comment Re:Geez... (Score 1) 333

Perhaps. Then again, I can recall a fairly decent influx of female hires during the web boom years when internet was a hot thing. Unfortunately, at least in my proximity, most of those hires ended upp gravitating towards admin positions, management, process and project management, pretty much anything not actually technology. Because they were not really interested in technology, they just went for things that would land them a job in a hot field.

So, no, I don't think sexing it up with 'glamour and lucrative' is going create an influx of employees of the kind you actually want to have.

Better to keep trying to find ways to actually encourage interest in those who show some and make sure there's nothing stopping those who actually enjoy the work.

Comment Re: Vive le Galt! (Score 1) 695

Of course, your credit union already operates on the principle that your money gets pilfered from your account and handed to someone else as a standard practice while you're shown a fake balance, which is what makes deposit insurance absolutely necessary.

Anyone putting bitcoin into a wallet functioning on that same principle will eventually get screwed, yes, just as anyone putting money into non-FDIC investment products. Hopefully they realize the difference and refrain from putting all their eggs in that basket.

Now, of course, a bitcoin storage facility used for reasonably safe storage should not be operating on a principle with shared wallets. You should be able to validate the wallet at any point in time and be certain that any account balance appearing to be there also actually is there.

Slashdot Top Deals

Trying to be happy is like trying to build a machine for which the only specification is that it should run noiselessly.

Working...