Catch up on stories from the past week (and beyond) at the Slashdot story archive

 



Forgot your password?
typodupeerror
×

Comment Re:Hipsters generally do ok (Score 1) 336

The hipsters should arm themselves. Michigan's gun laws aren't too restrictive, and with the money saved on housing they should be able to afford to arm and train themselves well. Your average hoodlum barely knows how to operate his gun, which is often a piece of junk, so the bar isn't too high.

Comment Re:Nothing new - Always had tech jobs (Score 1) 336

Top two cities with the highest density of engineers are Huntsville Alabama and Palm Bay/Melbourne Florida for what should be obvious reasons.

I'm sure that's true if you're counting traditional engineering fields, meaning not including software engineers. I'm not sure it would still be true if you included software. Of course many would argue that software engineering isn't yet mature enough to be a real engineering discipline, but it definitely is a big part of "tech", which is the subject of discussion.

Comment Re:do they have a progressive view? (Score 1) 336

I've spent about half of my life in Texas. I've lived in Houston, Dallas, and Austin. I've also lived in Silicon Valley, Seattle, and Southern California.

Every conversation about living in Texas I've had with a West Coaster: "How can you stand living in Texas. Everyone is so bigoted and prejudicial?" "Oh really, have you ever been there?" "No." "..."

And, of course, they completely miss the irony in their own statements.

Comment Re:Security compiler? (Score 1) 235

Why not a security compiler? Seems some clever, creative hackers could work up something which would take raw code, subject it to some scrutiny and give output/feedback. Perhaps even a security switch to the standard compilers or even a security test suite. Shouldn't be that hard to do.

Shouldn't be too hard... in the sense that solving the Halting Problem shouldn't be too difficult. I conjecture that with an appropriate set of assumptions it's possible to use Rice's Theorem to prove that security analysis is equivalent to the Halting Problem.

Of course, static analysis can catch some vulnerabilities, and can highlight potential vulnerabilities. That's what Coverity does. But I don't think any mechanical process can defeat a creative attacker.

Comment Inductive Fallacy (Score 1) 235

This analysis is based on an erroneous assumption which is derived from an inductive fallacy. Specifically, the author assumes that because one researcher who found one bug believes he could have found a second for roughly the same level of effort means that the researcher believes this process could be repeated indefinitely. I'm certain that if Kohno were asked he would deny the validity of this assumption. I'm sure he would say that his team could find a handful of similar bugs for similar level of effort, but once the pool of low-hanging fruit bugs was exhausted, the cost and difficulty would rise.

Comment It's not the infinite bugs... (Score 1) 235

...it's the lack of accountability. The reason why Microsoft should take the cash is because they are not accountable for their bugs by contract. Finding a vulnerability costs them money, it does not make or save money. The only case that can be made for disclosing and fixing vulnerabilities is improved goodwill, but even that is tempered by the fact that what ever meager goodwill they gain by fixing the bug is probably cancelled by the loss in goodwill from having the bug in the first place.

Comment Re:Left-Wing Propoganda (Score 1, Troll) 258

Well, then it's about time the UK starts allowing their citizens to arm themselves, stop being monitored in public, and paying for stupid TV licenses. While we're at it, the French need to work longer hours and wear deodorant, and the Germans need to have the sticks up their asses surgically removed.

Comfy?

Slashdot Top Deals

Work continues in this area. -- DEC's SPR-Answering-Automaton

Working...