Become a fan of Slashdot on Facebook

 



Forgot your password?
typodupeerror
×

Comment Re:Bad idea (Score 1) 671

Civil disobedience has ALWAYS carried the potential for punishment and if you break the law to make your point that the law is unjust you should stand ready to be arrested, imprisoned and tried in court for what you choose to do.

Your argument would carry more weight if the government who'd be trying Snowden weren't the same one he outed for violating its own laws, with the active collaboration of its judicial branch. Not to mention all of the recent fully-public sidestepping of due process for hundreds of other enemy combatants. Oh, and the torture, including of US citizens. And... do I really need to go on?

Snowden has extremely good reason to be skeptical of the fairness of a trial... or if he'd even get a real trial.

Comment Re:Leverage (Score 1) 671

Snowden may be using what leverage he has left. He has not yet disclosed all the information he obtained so the US government might cut a deal to avoid further disclosures.

I see no evidence that Snowden didn't hand everything over to the Guardian et al, all at once, as he said he did. On what do you base your claim that he's still got something left?

Comment Re:C++ important on Apple too (Score 1) 407

Cross-platform compatibility of C++ code is excellent these days, C++ can call low-level Apple APIs exactly as well as C, and there is no performance cost to C++ unless you choose it.

1) Good but not as good as C.

In most cases these days it's a distinction without a difference.

2) But it's an unnecessary third layer. Obj-C has the objects. C has the speed and compatibility. What do you need a third layer for?

I see this differently. Obj-C has the objects I need to interact with the framework. C++ has the speed, compatibility and expressive power I want. C has speed and compatibility, but lacks expressive power, which creates a lot of tedium and loses a lot of safety.

3) Indeed.

We agree on something :-)

So virtually no one uses it in this scenario.

Only time I see it used is when it's a library that was written in C++ on another platform and is simply being used on a Mac.

I haven't really done much on Macs, but I did a lot of work on NeXTstep back in the day, and C++ was quite common in scientific computing there. Actually, what I saw a lot of was "Objective-C++"... they may have grown further apart, to the degree that this no longer works, but in the early 90s gcc allowed you to mix Objective-C and C++ constructs freely in the same code. So a common approach was to build everything in an OO fashion, but to choose between Objective-C and C++-style classes based on performance and flexibility tradeoffs. The result required you to be fluent in both, but that really just means being fluent in C++ because a C++ programmer can learn Objective-C in a day (which is something I respect about the language).

Comment Re:Missing the problem by a mile (Score 1) 564

If you put an infected executable on my machine and gave it a TXT file extension it's totally harmless. So it tries to open the file in notepad....no harm there.

But how do you know that it will open it in notepad? Do you examine the registry?

How do you know that an app you tried a year ago and quickly uninstalled didn't change the extension association for .txt to run a small wrapper that examines the file, and if it's an executable, executes it, and otherwise opens it with Notepad?
It doesn't have to be a trojan you ran either - it could have been done through an IE/Flash exploit a long time ago too.

Comment Re:Better idea (Score 1) 564

distinction without a difference: there still has to be some sort of indication both to the OS and to the User what a file is and how to handle it.

Whether this is accomplished via Icons, File Name Extensions, Tags, or any other sort of mechanism
is ultimately irrelevant as they all accomplishes the same thing.

And they all still require the user (and the OS) to be at least somewhat intelligent.
The only way to remove this basic requirement is to remove the User, which rather defeats the purpose.

The mechanism of indicating this to the user is NOT irrelevant. A 3 character extension, with a vast legacy of possible permutations that all mean executable of some fashion is BAD. The OS may need that detail of distinction between types of executables, the user does not. Training a user that the icon that looks like 'this' means it's a program and that it means you better trust it because it can do anything you can do if malicious is world's easier than, here is a, mostly, complete list of file extensions that you should be as cautious with.

Comment Re:Missing the problem by a mile (Score 1) 564

You cannot tryst the extension to be what the file actually is. But you CAN trust the extension to determine what Windows will do with it. That .jpg might not actually be an image, but Windows will try to load it like one.

No, this is what I have tried to tell here, and keep getting modded down for. You cannot trust that. Really. You can trust that Windows will treat it as a .jpg file, but you cannot trust that Windows will treat .jpg files as images .
What Windows treats .jpg files as depends on registry values that are changeable by the user (and apps). An app can change .jpg files to be treated as executables, without you knowing it.

All that's needed is to modify HKEY_CURRENT_USER\Software\Classes\.jpg and it will override the system defaults. It's in the user hive, and does not even require admin privileges.
Apps do this all the time, benignly to associate file types with themselves. That your .mp3 files suddenly open with WinAmp after installing WinAmp is because of this. But that's not all they can do - they can associate ANY file types with ANY programs, not just themselves. That includes making Windows execute the file as a binary, if they so choose.
So you cannot trust that Windows treats a .jpg file as an image. That is only the case if you (or an app) hasn't changed that.

Few people will check the registry before "running" a file. They trust that Windows will open the .jpg file with an image viewer (or editor), but they have no way of knowing if a boring game they installed and uninstalled a year ago changed that, and that .jpg files now get executed if containing executable content and otherwise shown in an image viewer.

Comment Re:C++ important on Apple too (Score 1) 407

You're dropping out of Obj-C for cross platform compatibility, because you're dealing with a low level Apple API, or because you want maximum speed for some part of the code. All these things are usually best served by C.

Cross-platform compatibility of C++ code is excellent these days, C++ can call low-level Apple APIs exactly as well as C, and there is no performance cost to C++ unless you choose it.

Unless you're concerned that you may need to target a platform not supported by a decent C++ compiler (which is really rare, given that gcc is basically everywhere), the only reason to choose C over C++ is personal preference or concern that some of the users of the code may not know C++.

Comment Re:FDE on Android doesn't work as of yet (Score 3, Informative) 124

The issue with FDE in Android has for long been the lack of combining strong passwords with a pattern lock or pin lock for unlocking the screen. In other words, your encryption key is only as strong as the pin code or password you are willing to put in every time you open your screen lock.

No, it doesn't. At least in Lollipop FDE-password is separate and you enter it at boot.

It's not separate. In stock Lollipop there is only one password, and it's used both for FDE and for screen unlock. Some customized ROMs (e.g. CM) have separated it, which allows you to choose a strong boot password and a more convenient unlock password. Stock Android didn't go that direction because too many users would set a strong boot password which they only use once every few weeks and therefore forget, losing all of their data.

Comment Re:FDE on Android doesn't work as of yet (Score 3, Interesting) 124

Had I jumped to the Nexus 6 at the same time, however, that may not have been an issue.

As a recent Nexus 6 owner, I can confirm that encryption is enabled by default. I have not noticed any performance lag and the battery life has been really good. I will admit, I'm coming from an 'ancient' phone, so maybe that's why I think it's fast enough; way faster than my old phone.

As mentioned by Gaygirlie, a big factor is the AES-NI instruction in the ARMv8 instruction set supported by your Nexus 6. It dramatically reduces the performance and power hit of AES operations.

Slashdot Top Deals

Only God can make random selections.

Working...