Please create an account to participate in the Slashdot moderation system

 



Forgot your password?
typodupeerror
×

Comment Re:haven't we learned from the last 25 exploits? (Score 0) 68

"An HTML-only web is great for relatively static content, but not so great for anything much beyond that. "

This sounds like nonsense to me, but I will give you the benefit of the doubt and ask you for *concrete* examples of what you are talking about. I have yet to be cited a single good example here - very often what is being done would work just fine in HTML, with less overhead, but the 'designers' just do not understand HTML, or have any desire to learn it, so they do things this way instead.

Certainly javascript can produce a slicker appearance and make certain things a bit smoother - but to do so it sacrifices device-independence and browser agnosticism - critical advantages that underlie the success of the web and whose loss can only undermine it.

Now if you build a proper web page, and then *enhance* it with javascript sanely, preserving graceful fallbacks, that would be fine. You can have your slick interface without sacrificing the web. And I can choose to avoid your slick interface so as not to sacrifice my security.

The 'designers' that cant be bothered to do that, and the suits that keep them employed, are the reason we cant have nice things. In this case, javascript.

"Is it so difficult to grok why you might want content to change on the client?"

Not difficult to understand why it was desired.

The point is it's harmful and been proven harmful, and far too harmful for the small advantages it brings to outweigh that.

Comment Re:Cry Me A River (Score 4, Insightful) 608

But the real problem is this impression that you have to be born 80% as smart as Einstein to get into this field, and that the learning curve is impossible for regular people. That's totally wrong. Average intelligence plus persistence is all you need.

What you really need is to deal with this anti-intellectualism that's so popular in the culture today, and replace it with genuine curiosity, a joy of discovery, and a delight at learning new things.

Do that, and the rest will naturally follow, and not just in software development.

Comment Re:haven't we learned from the last 25 exploits? (Score 1) 68

"If you want the web to be useful, you should be pushing for only the most minimal use of Javascript."

When this crap first started getting pushed, a lot of us saw the potential problems coming and objected. We were assured it was only to be used to 'spice up' webpages, not to replace them.

Such assurances are obviously shit. If it's allowed to use it, then the lowest common denominator of self-proclaimed 'designers' can, will, and must overuse it. This overuse expands steadily and predictably until and unless there is effective pushback. Today we have reached the point where the typical corporate 'website' (and I use scare quotes because these things are NOT websites, at all) consists of hundreds of executable files, fetched from dozens of different servers, all of which the browser is expected to suck in and execute without so much as giving you a warning.

And contrary to the hilarious suggestion I see at the top of many many webpages today ("Enable Javascript for a better user experience") this does not bring with it any substantial improvements for the user. Quite the contrary, it results in a worse immediate experience (no, I didnt want a dozen popups, autoplaying video presentations, and a huge advertisement that floats over the text so I cannot see it!) and also in the longer term (like a week later when you discover that some random ad server sent your browser a rootkit and it happily executed it, oops!.)

But the point is history has proven this is a bad code drives out good situation. If it's allowed, it will take over, just like a weed.

Turn off javascript. See the web as it really is. And support the web that still exists, before it's too late.

Comment Re:Car Insurance Companies Too! (Score 1) 353

There is no effective difference between the two. There is a rate for people with the monitoring and a rate for people without it, and the latter is higher. The only difference is what you call the "default."

Yes, and that's a difference. Which one is the default makes people who don't care (the majority) more likely to do the default one.

This is only because the practice isn't well established. When you call around for car insurance and find that everybody's default rate is $5k/yr, but they all offer a $4500/yr discount if you accept monitoring, few people will stick with the default. I also wonder how many new Progressive customers don't accept the monitoring - I would imagine that the company would advertise it to anybody who asks for a quote since it lets them give out a lower number which makes them more competitive. Bottom line the consumer is given two rates and has to choose between them.

(Very similarly, we give "time off for good behavior" for prison. That's awful.. Good behavior should be the default, they should be able to add time, with some kind of maximum unless a new crime is committed (in prison), for bad behavior.)

This will just result in either base prison sentences being shortened, or people being let out early all the same on some other pretense. You can call the label whatever you want, but for various reasons society wants people who behave well in prison for n duration, and people who don't behave well for n+m duration. It would take time for things to change - I don't suggest that prison sentencing is "economically efficient" (I realize I'm being very loose with that term, but I suspect you will get what I'm trying to say without going on about it). Actually, something like prison terms is a pretty poor analogy because there is so much politics involved - voters/officials/etc don't decide on how long to punish a murderer the way they decide on how much to pay for a new car.

Comment Re:The real problem here... (Score 1) 353

Yup - there are some criteria that we've explicitly decided NOT to let people use (i.e. even if you could show that race and auto insurance costs were correlated, and that the relationship was statistically significant, you still couldn't charge people more for being black/white/Asian/whatever), but credit score isn't one of those.

Actuaries are pretty clever, they can typically find a benign-sounding proxy for the forbidden criteria.

To some extent they don't have much choice, unless insurance is compulsory and enforced.

Insurance only works in the absence of knowledge. If I had a magic machine that could predict the locations of every house fire the next day, the fire insurance industry would cease to exist, unless they were allowed to require coverage to be purchased two days in advance without an option to cancel without paying two days premium. Otherwise everybody would drop fire coverage and sign up the day before their house burns down, and insurance companies would basically have to charge the replacement cost of the house for their policy, making it pointless to buy in the first place.

You can't legislate around this sort of thing without mandating universal coverage. If you prevent insurers from discriminating against those purchasing insurance on some basis, then you also need to prevent people from being able to avoid buying insurance on the same basis.

Suppose life insurers can't charge people with diabetes a different rate. Diabetics have a much higher cost to insure, so on average the rate would have to be much higher. A non-diabetic would look at the risk of needing insurance vs the cost of buying it and conclude that insurance isn't worth buying. Now the risk pool changes so insurance companies are ONLY insuring diabetics so they have to REALLY increase the premiums. Previously diabetics were signing up in droves since the rates were cheap, but now there is no incentive for them to buy insurance since it actually reflects real costs. The result of preventing an insurer from charging more for a particular group is that they just charge more for everybody instead, and this is unavoidable as they'll end up there whether they start out that way or not.

Comment Re: Patience, my pretty... (Score 3, Insightful) 120

[vaccination caused] 25 deaths. All to stop a flu that never exceeded 5 infections contained to Fort Dix

Yes, but you can't go back in time and discover what would have happened if they didn't mass vaccinate. Sure dumb luck may have caught all five cases before it spread further, but do you want to bet your life on dumb luck?

Yup, this sounds a bit like Y2K in retrospective. Was money wasted on it because it turned out to be a non-event, or was it a non-event because so much was spent on it?

Always money to do it over, never money to do it right... :)

Comment Re:say wha? (Score 4, Insightful) 68

"English translation: as usual, Flash is useless except as a vector for malware, viruses, trojans and keyloggers. Remove Flash from your system."

That's actually not quite true. Flash is a great way to develop simple games quickly and cheaply.

The problem isnt Flash itself (which is on the whole a fine product, used correctly) but the idea of using Flash as a substitute for a webpage, the installation of it as a browser plugin, and the auto-execution of it by the browser. None of that should be tolerated.

It's still possible to get a standalone flash interpreter and only feed it local, vetted files, which is really fine (or as close to fine as lots of other things you do every day, at least.)  But Adobe seems to be trying their best to discourage that and force everyone to use it as an auto-enabled browser component instead. The one way to use the program that causes major problems is also the one way they want you to use it.

Everyone who has been infected as a result of this should really get together and sue these arseholes, because money is the only language they understand.

Comment Re:haven't we learned from the last 25 exploits? (Score 5, Insightful) 68

Excellent advice.

Expect to be flamed into oblivion by all the 'web devs' that cant be bothered to learn how HTML works and rely on this crap instead, though.

The web - the real web, the HTML web, appears to be shrinking at the moment. New content is often hidden behind some kind of opaque app crap for no apparent reason and with no actual webpage for fallback (thanks google!) and old content occasionally gets removed as well. Each time this happens, it makes it even harder and less likely to revive the healthy web we once built with such love and care.

And naturally the people that are making a profit on this crap will just keep right on cranking it out as long as that is true.

The real victims here are future generations, who should inherit that world-wide web, but are set to inherit something entirely different - and inferior in every way (when judged from the users perspective - from the perspective of big Advertising of course the story will be different, but we built this web for humans, not for marketing.)

Comment Re:On this 4th of July... (Score 1) 349

Again, if someone publicly acuses you of a crime that is later proved you didn't commit, you are entitled to indemnification by damages caused to your reputation and your business/whatever. As this is not a matter of crime, it is a dispute filed on a civil court. There is no prosecuter on this. It is a dispute between two entities.

No argument with that, but in this case Qualcomm isn't publicly accusing anybody of anything. They mailed a private letter to a service provider, and that was it for their part.

Please tell me one well-known, widespread OSS project that is completely community-driven and mostly built with unpaid volunteer work. And no, stuff like foundations don't count - they're done for tax purposes.

Sure - Gentoo Linux. To my knowledge they've never paid a dime to any contributor, other than covering a fairly small number of expenses with the resulting assets owned by the Foundation. SleepyHead is another that I'm aware of - the author accepts donations, but they don't come close to covering his time. Until fairly recently projects like CyanogenMod were purely donation-based and those certainly didn't cover the time involved (and only a few of the contributors actually get donation money).

I have no doubt that people have contributed to many of those projects using time compensated by another employer, but we're talking a very minor share here compared to something like Fedora/etc.

I'd call volunteer projects the norm. Very few projects turn into Apache/Mozilla/etc. For every one of those there are a thousand gtklifes.

Comment Re:Hmm (Score 1) 302

The problem with this kind of approach is that it basically punishes kids for the mistakes made by their parents.

It would make far more sense to take care of the people who are actually born and maybe try not to have so many that the state ends up having to pay for.

Maybe parents would be more involved in public education if you had to pre-pay 12 years of tuition in order to be allowed to have a child. :)

Comment Re:I doubt the dna stuff will come true (Score 1) 353

"The real problem we are having is not the loss of privacy per se, it's the abuse of private information. Most people are fine letting Onstar know their current location. We are not fine with Onstar telling anyone that information - not the police, not our wife, not our boss. "

It sounds more like the real problem is that people are so stupid they do not realize that you cannot have your cake and eat it too. If Onstar has the information, others will be able to obtain it, whether by hook or crook.

If you want your privacy you must defend it consistently, not only when it is convenient and inexpensive to do so.

Comment Re:The real problem here... (Score 1) 353

Except that credit score is actually quite a good predictor of car insurance risk. Not saying that it's causal, but, overall, people who pay their bills on time also tend to drive more cautiously and get into fewer accidents.

Yup - the beauty of actuarial tables is that they contain all those non-politically-correct correlations we're not supposed to talk about. We can hate what is in the tables, but they are cold hard statistics. Certainly they are open to over-interpretation, but the correlations are what they are.

Comment Re:Car Insurance Companies Too! (Score 1) 353

Just have to switch it around - instead of "offering a discount" for people who do this, think of it more as "charging a penalty" for people who don't.

There is no effective difference between the two. There is a rate for people with the monitoring and a rate for people without it, and the latter is higher. The only difference is what you call the "default."

If this takes off you'll see the difference in price grow, until the non-discounted rate represents the cost to insure a very-high-risk driver, and the discounted rate reflects the current rate minus whatever those drivers used to cost. It is just a form of the insurance death spiral. If you offered a discount on health insurance for people who don't have diabetes over time the cost for non-diabetics would go down, and the rate for "everybody else" aka diabetics would go WAY up. Since diabetics represent an incredible percentage of insurance costs the split would be fairly dramatic.

Comment Re:Buffet vs. A La Carte (Score 2) 353

Very true. Ideally corporations would figure out that there are no demonstrated outcomes for diet composition, and thus it isn't in their interests to force their customers to adhere to one. In practice they may not do so, or there might be government pressure to pick whatever is the fad of the day.

I'd LOVE for there to be some decent clinical trials that study diet in a scientific manner. Just about all the data which exists is basically uncontrolled - no blinding, often no randomization, no actual outcomes, etc. Obviously doing a real trial is expensive, and nobody wants to foot the bill since you can't patent "eat less HFCS" or even "eat more HFCS."

Comment Re:Buffet vs. A La Carte (Score 1) 353

That and it'll only be offered as long as everyone isn't doing it.

Reminds me of all the water conservation efforts. We used less water, the utilities brought in less money, so they had to raise the rates to offset the loss. In the end we all use less water, but pay more for the service.

I bet this will only work for insurance up the point where hospitals have to charge more to make up for empty rooms.

The difference between a utility and a hospital is that the former is a natural monopoly. The latter may or may not be one.

If the utility needs to charge more money to survive, you don't really have a choice about paying it if the charges are unavoidable. You can change WHO pays them (taxes vs bills, public vs private, etc), but unless you want to ditch running water you're stuck.

Hospitals aren't quite as locked in. If a community has 3 hospitals (I realize that not all do), and as a result of cost containment they all are 1/3rd utilized, then you can continue to force reimbursements lower until one goes bankrupt. Now utilization goes up, and the lower costs become sustainable.

If a community has a population of 1000 and is 300 miles away from everybody else and you want a hospital, then you won't have any choice in paying a premium, though you can choose who pays for it (taxpayers vs sick people, or maybe taxpayers living someplace else). Undercapacity is the price of not being an hour flight from a hospital if you have a heart attack.

Slashdot Top Deals

People who go to conferences are the ones who shouldn't.

Working...