Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×

Comment A lot of Misunderstanding Here (Score 3, Interesting) 786

I think a lot of folks here are missing the point. The trouble is that the kernel running in secure boot mode has to be able to receive signed keys in a secure way (if you think secure boot is worth anything, many do not).

Linux running in secure boot mode is a done deal. The question is how do you import keys that are signed by Microsoft. In an ideal world you'd just upload the signed X.509 cert and you'd be done. Unfortunately, Microsoft will only sign PE binaries.

So the developers opted to enclose the X.509 cert in a PE binary. Unfortunately, that means the kernel needs to be able to read the PE binary and verify the signature all in kernel space, then extract the x,509 cert. This is undeniably messy.

Now lots of folks will argue that there's no point to this and it should be done in user space. I'm not going ti argue with that, but the reality is that most of the mechanics of this are already implemented, just not the PE stuff. You can sign kernel modules and verify them in kernel space with x.509 certs (at least by my reading of the thread).

Frankly, I think this is pretty much the only thing to do short of talking MS into signing x509 certs. The other suggested work-arounds involve additional authorities or doing stuff in user space. They are all workable, but are pretty clumsy compared to what's being proposed.

I think it may have been a mistake to just drop this ugly change on Linus without his involvement. My guess is that if the problem had been stated before coming up with a proposed implementaon, they might have come up with essentially the same solution with less drama.

Comment Landfill contamination isn't so simple (Score 2, Informative) 186

Aside from some of the obvious mistakes this opinion piece makes.

> There is no need to worry about toxins leaching into the water supply. No elaborate liner or monitoring is required

This is wrong. There are some situations where organic rich runoff can cause problems.

The following link:
http://toxics.usgs.gov/topics/rem_act/saco.html

describes:
" dissolved organic carbon in the leachate plume is dissolving arsenic from arsenic-containing iron oxides in the aquifer and bedrock"

Comment Re:Stop overloading common tech acronyms! (Score 1) 79

I agree that it's annoying, though in my experience people never refer to SPICE without prefacing it with "Berkeley". SPICE all by itself is used as a generic term.

TFA could also use some more references. It sounds intriguing, but I've been around long enough to be distrustful of what's in press releases.

Comment Re:There is (Score 1) 130

> aluminum hydroxide which, apart from helping us with our stomach ulcers, may be linked to brain disease

Are you talking the Alzheimer's link? I thought that that was found to be a non causal link quite some time ago.

Here's a link that pretty much flat out says it's not an issue:
  http://www.alz.org/alzheimers_disease_myths_about_alzheimers.asp

There are a lot of websites that talk about it as being a problem, but they all seem a little woo woo.

Government

The Economics of Federal Cloud Computing Analyzed 85

jg21 writes "With the federal government about to spend $20B on IT infrastructure, this highly analytical article by two Booz Allen Hamilton associates makes it clear that cloud computing has now received full executive backing and offers clear opportunities for agencies to significantly reduce their growing expenditures for data centers and IT hardware. From the article: 'A few agencies are already moving quickly to explore cloud computing solutions and are even redirecting existing funds to begin implementations... Agencies should identify the aspects of their current IT workload that can be transitioned to the cloud in the near term to yield "early wins" to help build momentum and support for the migration to cloud computing.'"

Comment Re:There are randomized controlled trials (Score 1) 430


I'm a troll because I think flu vaccines are bullshit? Wow.

No. You're a troll because you used the word fuckall in way that was at best gratuitous.

It's just not that hard to avoid. Good hygienic habits, good nutrition, and a good night's sleep are far more effective than any flu vaccine and those habits don't have mercury.

Got any studies to back those measures up?

Comment Re:As one of the few (non-tech) lawyers..... (Score 3, Informative) 907

Here's the short answer:

Guy buys a laptop which has been designed and optimized to run under windows, which has been pre-installed. Any necessary configuration to optimize battery life was done when the laptop was imaged.

Now someone takes said laptop and installs Linux on it. That particular hardware combo may never have been tested before and no optimizations have been done on it.

It would be unsurprising to me if the latter situation didn't work very well.

I run Linux on my laptop exclusively, but getting the pm stuff optimized is a big pain. The amount of fighting to get broken drivers and BIOSes working is not for the faint of heart.

Your best bet for a Linux laptop would be a pre-installed version that's more than a windows laptop with Ubuntu slapped on it.

Otherwise you'll be in for a a lot of fiddling.

Slashdot Top Deals

And it should be the law: If you use the word `paradigm' without knowing what the dictionary says it means, you go to jail. No exceptions. -- David Jones

Working...