Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×

Comment Re:Bring it on, folks! (Score 1) 215

Sounds like all you need to analyze this, is a "fake" processor.

EG, running this inside something like BOCHS, which has a built in x86 debugger, and runs a lot like a hypervisor. This encryption would need to be able to detect living inside a fully emulated system and simply refuse to operate in order to be safe from this kind of analysis. BOCHs will let you step through exactly what instructions the emulated CPU is actually doing, regardless of the data that is stored in the memory allocated to the emulator's process.

Don't get me wrong-- this makes a nasty bump in the road for career data thieves, but forensic analysis of the encryption is not completely thwarted.

Not to mention that it is extremely hard for a program to detect that it is inside a VM like Bochs unless the VM exposes something that can be detected - e.g a BIOS string, hardware signature, etc. Even then, that's easy for a cracker to fix by modifying the VM to have a different string or hardware signature.

Comment Re:One difference (Score 1) 271

If Google is hacked, Google takes the hit and looks bad. If your bank gets hacked, you take the hit, the merchant takes the hit, the bank walks away clean.

It is not identity theft (this makes the individual responsible to resolve.) it is fraud (causing the banks and fed to be responsible to clean it up). Someone needs to sue the bank because they allowed the fraud to happen then called it identity theft so they could wash their hands of it.

Well, not quite. FDIC (e.g government) takes the hit as the bank's insurer. So yes, the bank isn't risking much anything by not implementing strong protections.

This is why government is usually not the solution. However, the FDIC is necessary but perhaps the FDIC should start requiring stronger online protections as part of the insurance program...then again, the FDIC might not care enough....

Comment Re:When OLPC said Windows IMO they "jumped the sha (Score 1) 355

This is the IoT build, and you would run Visual Studio on another desktop system and upload the programs to the Pi.

Again, compared to existing Pi use-cases where the compiler is on the Pi system itself. So now you can't develop with just a RasberryPi, you have to have another Windows System too.

That too doesn't resolve the Device Driver issue; it also means users have to install and learn how to use the Visual Studios Remote Debugger or learn more advanced (older style) debugging techniques.

All those things are not in the favor of Windows for development of software for a RasberryPi or Pi2 device.

Comment So... (Score 1) 471

...a project that people are already complaining about not addressing bugs quickly enough is integrating another, potentially dead, project that is not addressing bugs even as fast as it is. Make sense.

Kind of like the HP and Compaq merger 10 years back - two bankrupt companies merging to try to create a healthy company; worked out for a little while and now HP is spinning stuff off again.

Comment Re:Didn't work for Philadelphia (Score 1) 204

But it makes the town a better place to live, so more people (and businesses) move there, increasing the number of subscribers and lowering the cost for everyone. Hey, it could happen.

Sure. And a pink elephant could materialize out of thin air. Fortunately, we don't need to guess — the City of Brotherly Love tried municipal WiFi (much cheaper than running actual cables) years ago. By 2008 the system was shut down. Earthlink actually wanted to hand it off to the city's government, but found no interest...

Seattle's municipal WiFi went dark in 2012. Other examples abound.

Yes, not only is government competing with private sector illegal — it is also a bad idea.

Except you are not simply talking about government. You are also talking about HOA's and similar communities.

For instance, one of my friend's bought a house in a community 15-20 years back. The CableTV companies didn't want anything to do with the community; so they ran their own lines to everyone's house. It was simply an HOA that did the work and the residents split the costs. Same thing has happened in many communities around the nation only to have the big players (especially the Cable companies) come in and shut it down.

So no, this doesn't necessarily mean goverment run; but it does mean citizen run and organized in some manner - with or without help from their municipal government.

Comment Re:$28 million is a lot! (Score 1) 204

A taxpayer has more say than a customer?? are you kidding? Sure, a taxpayer can vote...once every two years or so, and whatever he wants will be compromised out of the equation long before it's time to vote, and he still has to pay for it. A customer can look at what's on offer and say 'no thanks.' There is no more powerful vote than that of the wallet.

Except in this case where the "voting with your wallet" essentially means sell your home (if you have one) and move elsewhere if you don't like the one or two options available to you; but the problem is no matter where you go you basically will only have those same kind of one or two options (with possibly the same or different entities being your options).

Typically the choice is: Cable Internet (Comcast, Cox, TWC/RoadRunner, Charter, WindStream, and may be a couple smaller players) and either DSL (AT&T, Verizon, and numerous resellers due to Title II status of copper lines over which DLS runs) or Fibre (AT&T uVerse, Verizon FiOS). And all the players mentioned try to keep community broadband services - which run either Ethernet, Fibre, or Coax to your residence themselves - from being an option by claiming "unfair competition" and "contracted rights".

So yes, in this case you actually have a bigger impact by voting in elections - municipal, county, state - than you will ever have with your wallet.

Comment Re:When OLPC said Windows IMO they "jumped the sha (Score 1) 355

And they serve different purposes and goals, more importantly. The Raspberry Pi is designed to be a general hobbyist platform and OS choice is a good thing there.

True; but so it being able to make the device do what you want. And Windows has too much overhead to really be useful on a Pi or even the Pi2.

Seriously, when is the last time you tried to run Visual Studios on a sub 1GHz system with only 1 GB or even 2 GB of RAM? VS is practically unusable in those environments; yet a compiler is a must for the audience that the Pi and Pi2 are targetted at.

So is device driver development and access to low level hardware in a timely manner. Yet the performance of Windows will not be sufficient for that.

Realize, this is Microsoft trying to soften the bleeding that is happening; but it will probably only show just how badly they meet end-user needs in the environments where the bleeding is occurring.

To Microsoft, it's not about choice. It's about survival and they don't have something that can compete.

Comment Re:When OLPC said Windows IMO they "jumped the sha (Score 1) 355

Good catch! OLPC lost a lot of developer mindshare IMHO when they started cosying up to Microsoft and changing their hardware to run Windows.

True; however, OLPC never had as big an audience as Rasberry Pi has; so the momentum will likely continue with Windows being an "also ran" that was "late to market" kind of thing.

Comment Re:Google+ has better communities... (Score 1) 210

I find the "communities" better on Google+, but all my friends post there normal stuff on facebook. I find the technical forums (the few that I am a member of) are asking a newbie question (nothing really interesting) like how do I print a number..... when it is facebook, but much more interesting communitie tech posts on google+.

Agreed. I'm on G+ daily, post occassionally (both public and privately), and almost never go on Facebook. G+ just developed better communities and people tend to use the communities instead of blasting everything out to everyone; perhaps because G+ has a higher technical userbase than others, but nonetheless it works well.

Though, thinking about it more, G+ by design is community oriented. Blasting out to the everyone doesn't really stuff very far; while sending it to one or more communities does - that is, unless you're a big celeb and have lots and lots of followers, but that's just not typical in G+.

Comment Re:Bad idea (Score 4, Insightful) 385

I imagine corporations will fight back legally if/when their employees start getting hacked by the FBI.

Why would a corporation care?

One word: Liability.

Corporations would very much care because of liability concerns - both domestically to the US and foreign to other countries. It's already becoming enough of an issue that companies are taking to hosting data regionally instead of centrally just from a legal liability perspective.

For instance, suppose there was conversation going on regarding what to disclose to the US government over the operations of a foreign subsidiary between the execs and their lawyers? Regardless of the topic, matter-at-hand, or end result that is protected conversation regardless of medium, and the existence of the VPN would mean they expected it to be carried out in private.

And you can certainly bet the lawfirms will fight it too.

Comment Re:my vote: (Score 1) 648

Java. It has the broadest popularity in industry, isn't tied to any one company (e.g. Microsoft), can be developed using a wide variety of host operating systems (Windows, Mac, Linux), lends itself well to teaching O.O. design and has a wealth of free tools. It's also what the majority of universities use in their intro level courses. (Though that's changing.)

Java is a bad language to teach programming with. It's a good language to show off some theory with, but that's really about it.

It's also one of the reasons why Android doesn't have as good of performance as it could have.

A decade ago, I would have used JavaScript or VBScript to start teaching - in part because of Windows Scripting Host; but now, I'd use Python as an intro to get students going; then transition them to C and C++, Pascal/Delphi, and others.

Comment Re:This guy hasn't done his research. (Score 1) 648

The VB compiler is written in VB. C compilers are written in C. Why isn't Python written in Python? But maybe you know more than the people who know it the best, the core developers!

The VB Compiler is most likely written in C, C++, or C#, and not VB. In part, because there are many things that one must actually drop to a lower level language like C/C++ to do in order to even implement some of the functionality of VB. So it's a mix - some portions are definitely written in VB, but the majority and certainly the core are not. This, of course, applies to VB and not BASIC in general since those lower levels would have been written in other languages (namely Assembly) and would have changed over time; where as VB came after the advent of C; even then its lower levels may still have been written in Assembly for some time due to performance needs.

Likewise, Python is written in a mixed-mode, with C covering some of the core functionalities to "bootstrap" the language and provide high performance in certain areas; with most everything else written in Python itself.

Comment Re:instant disqualification (Score 1) 648

"...VB is MS only." No it's not.

http://www.mono-project.com/do...

Sure you want to get sued by Microsoft over the use of some of the keywords and their related patent filings.

Even the agreement that MS signed with Novell didn't cover VB, only C# and what they published to EMCA and ISO. Everything else was still open for lawsuit. Of course, even that agreement has now expired, and Miguel's new company doesn't have a new agreement either.

So good luck there.

Slashdot Top Deals

Marriage is the triumph of imagination over intelligence. Second marriage is the triumph of hope over experience.

Working...