Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×

Comment Registration confirmation e-mail typo (Score 1) 365

Another commonplace annoyance is sites of no consequence that ask for an email address and for some unknown reason require it to be entered twice.

Some site probably tested it and found that it reduces the number of registrations that fail to complete because the user mistyped his e-mail address and thus failed to receive the registration confirmation e-mail message. Then other sites copied it.

Comment Mobile password entry; acting on user's behalf (Score 1) 365

If you are writing software that takes in a password and you are hashing the password to compare it to a stored hash, there is no reason at all to restrict the maximum length of a password or prohibit certain characters from being used in it.

Other than that it's far harder to type a 60-character password on a mobile device whose only text input method is a flat sheet of glass. Allowing users to enter a long password discourages users from even trying the mobile site or mobile app.

If you are writing software that takes in a password and you are NOT hashing the password (but instead storing it in the clear or otherwise doing something with it), you shouldn't be writing software involving passwords in the first place

Unless you're storing the user's password in order to log on to a service on the user's behalf. A password manager is an example of such an application. With other applications, even if the service supports some form of OAuth, the application still has to somehow store the client ID, client secret, and user token securely.

Comment Re:Why do browsers allow websites to do this? (Score 1) 365

Mozilla in all their wisdom decided to remove those options when they removed the settings to disable JavaScript all together. I'm not entirely sure what the rationale for that decision was

Possibly to reduce the cost of supporting users in case Firefox extensions and Firefox apps do not work correctly when JavaScript is turned off.

Comment Non-repeating characters lose less than half a bit (Score 1) 365

non-repeating characters (in fact it reduces entropy by some security admins seems to think it is a good idea), numbers and so on.

If there are 64 choices for each character, a requirement for non-repeating characters reduces the number of choices for characters after the first to 63, for a total of -log[2]((63/64)^9) = .2 bits of entropy lost in a 10-character password.

Comment Re:Start with SATA DRAM enclosure (Score 1) 405

and then swap to it

the links GP provided are for RAM disk cards which can only be used as storage, not as system RAM.

I intended "and then swap to it" to mean that the external storage would be used to hold a page file, which in effect augments your system RAM. But because it's RAM, it wouldn't have quite as much slowdown as swapping to a hard disk.

Comment When an ESR isn't a "high traffic release" (Score 1) 405

"Attempts to download high traffic release files from this server will get a '550 Permission denied.' response." Yet you managed to download the ESR.

You hid a lot of the log with "(...)", including the part where you navigated within the pub directory. Did this "(...)" contain any "550 Permission denied." responses?

Perhaps downloading the ESR worked because apparently Mozilla doesn't consider ESRs to be "high traffic release files". So I guess you have to download the ESR (47 megs) and then use that to download the current version (another 47 megs or so).

Comment Use ftp.exe to get Fx from which server? (Score 1) 405

or at the least, download firefox using ftp.exe

I thought Mozilla removed releases from ftp.mozilla.org and disabled the FTP protocol on releases.mozilla.org. From messages that I get while logging in to ftp.mozilla.org anonymously:

releases.mozilla.org now points to our CDN distribution network and no longer works for FTP traffic
[...]
Attempts to download high traffic release files from this server will get a "550 Permission denied." response.

Slashdot Top Deals

Computers are useless. They can only give you answers. -- Pablo Picasso

Working...