Follow Slashdot blog updates by subscribing to our blog RSS feed

 



Forgot your password?
typodupeerror
×

Comment Blocking access? (Score 1) 184

Hypothetical scenario: an ISP is under DDoS attack originating from some fixed foreign IP. Since it becomes impossible to "block access" without CRTC approval, does that mean the ISP has to take it like a bitch while waiting from the OK to have it blackholed? What about any other kinds of attacks? What about Spam filtering?

I really don't think the CRTC really understands the issue. I should know, I listened to some of the public hearings a few months back.

Disclaimer: I work for an affected ISP.

Comment Re:What I do (Score 1) 303

Hate to reply to myself, but I just remembered a good site I once registered with and I thought others might find it interesting or amusing. It asked me for a security question, but when I checked the headers at the top of the page it said I was already logged in and there was a View My Account button. Curious, I tried it and it worked and I didn't need to enter a security question. Awesome.

Obviously, I tried logging out and in (asked me to set a question, ignored it) and tried a password reset. The reset failed because I didn't have a security question set. Even better!

Comment What I do (Score 2, Interesting) 303

Regretably a few sites I visit regularly (including my bank) may prompt me for these questions, so a question of "Mash the keyboard!" and an answer of "alsjdgiosadln" no longer works.

Instead, as someone already stated, I select a secret question of "What is my password?" and if it's necessary for a second, "Type my password backwards." (answer: drowssap)

And finally, if it's a question to be asked by a human (tech support for an ISP I know of does this now), the question is something silly. As fun as "What are you wearing?" would be, I have sympathy for the employees and instead have "The Joker is invading Gotham - what do I do?"

Comment Re:Reminds me of something people said about crypt (Score 1) 674

Okay, so maybe I should have qualified it with "when used correctly." Closed source won't protect you if your administrator password is "password" any more than openssl can protect you from using a 128 bit RSA key.

What I meant to say is more along the lines of "we invented our own crypto, and we can't give you the documentation for it because doing so would make it crackable," or generally "we depend on security through obscurity." But the point is taken.

Comment Reminds me of something people said about crypto (Score 1) 674

AES, RSA, and all the rest are published standards. Now, some companies claim that they can't reveal what kind of encryption they use or it would severely degrade their product. I'm not naming names because I have none, this is just a vague recollection. Just go with the high level idea.

Well, how safe does that make you feel? Someone guesses it and all your security goes out the window? Here's the claim made by AES, and possibly by extension open source: We have a thousand eyes watching us, everyone knows how we work since it's published, and we're still secure. How's that for tough?

And, yes, more logically valid arguments like stats between number of open and closed source vulnerabilities found and other things suggested by other posters.

Comment Why just netbooks? (Score 3, Insightful) 262

Sure the big blocky feel of pretty much every window manager out there sucks on my Eee, but this is one reason I stick with GTK+ 1.x. I don't have a 1280x1024 monitor just so I can see the same material I could see on an 800x600 10 years ago but with cleaner rounded edges.

And I have the bigger Eee. 1024x600 resolution, and some dialogs don't even fit on the screen.

Comment I thought VMWare already did that (Score 5, Informative) 374

I have an Athlon64 but run a 32 bit OS. I tried running a 64 bit virtual machine using VMWare Server 1.0.x a year or so ago and it worked. The performance was not noticeably poor.

So... assuming I haven't missed anything too obvious, my response would be "No, vmware is not getting a run for their money." Not today anyways.

Slashdot Top Deals

Never call a man a fool. Borrow from him.

Working...