Follow Slashdot stories on Twitter

 



Forgot your password?
typodupeerror
×

Comment Re:Good for them (Score 4, Informative) 148

I'm tired of these security experts holding these sites hostage. They should disclose these vulnerabilities to build a safer Internet, not to line their pockets.

If they really wanted to line their pockets, they'd sell them to the black hats.

Blindly disclosing the security holes to the internet at large makes the internet less safe in the short term since the bad guys can exploit the vulnerabilities before the good guys can fix them.

Groupon could hire people themselves to find the vulnerabilities, but they chose not to, instead they offer a bounty for security bugs, which apparently is very cost effective when they don't pay up, so it's a double win - no need to pay money to hire security experts when a community of bug hunters will do the work for a token bounty, and no reason to actually pay the bounty when you can find a technicality (if one out of 30 bugs were released in violation of their guidelines, why aren't they paying their promised bounty for the others?)

Comment Re:Maybe so but... (Score 3, Informative) 171

Good luck getting a penny in compensation out of the corporations responsible if this happens.

They are already smart enough to use shell corporations to do the drilling -- by the time water contamination or triggered earthquakes are discovered, the shell company is long done and a new one has taken its place.

Comment Re:I call bullshit on anything from Forbes (Score 1) 134

Yes, but it cannot observe what data from other processes is moving out of the cache The attacking process already has to know what bits the other process might have in the cache that they are attempting to time. The cache side-channel attacks are using statistical techniques... in artificially constructed scenarios: where only one other process has shared data you want to do a timing attack against.

Well yeah, that's kind of what the whole paper is about - the fact that they can analyze cache behavior to detect network and mouse activity on the system.

Comment Re:Cripple Linux? (Score 1) 174

It's also $40 cheaper, which translates into a savings of > 25% of the device price.

You want Ubuntu on the "non-crippled" version? Good news: If you are willing to pay the additional $40, you ought to be able to install Ubuntu because the same hardware (minus some RAM/storage) has already been setup to run Ubuntu.

Is it the same hardware? This implies that it's not identical: The Ubuntu version of the Compute Stick has as a similar CPU -- if the CPU is different, how much of the rest of the chipset is different?

Comment Re:I call bullshit on anything from Forbes (Score 2) 134

They cant even describe what happens.

" Once there, the software inside the bogus content launches a program that manipulates how data moves in and out of a victim PC’s cache"

Uh, if the website can launch programs to manipulate your CPU cache, that's a problem.

I suspect this is the old "set up a webgl context, read back a framebuffer, maybe you will see some old shit in the framebuffer" attack that Microsoft used to attack WebGL back in the day.

Sounds like typical OMG COMPUTERS!!!!!!! from the business crowd.

God how I wish everyone with an MBA would just get the fuck out of my way when I have grownup work to do.

If you understand the CPU architecture, any program that can control what happens within its address space can manipulate data moving in and out of the CPU cache.

Comment Re:Cripple Linux? (Score 4, Insightful) 174

For the last 24 years: LINUX ISN'T STUPID BLOATWARE! IT RUNS GREAT ON ANY HARDWARE!!!

Hardware maker in 2015: OK, you're right. Here ya go.

Fanboys: OMG!! CRIPPLED HARDWARE!!

It's still a valid complaint -- why give the Ubuntu device half the ram and 1/4 the storage? Even if Ubuntu *requires* less resources than Windows, the applications that people want to run may not. Chrome, in particular, seems to grow to consume all of my RAM whether I run it on my old 2GB laptop or my 16GB desktop. And the Windows device has 19GB of usable storage -- more than 3 times the total amount of storage on the Ubuntu stick, Ubuntu users store data too, especially on a device well suited to be a media player.

Comment Re:Oh great (Score 2) 96

But if you're already have the power cord plugged in, it should be easy to provide a wired network connection right next to it.

Getting the wired network to the laptop is not a problem -- most laptops in the office get to the wired network through the same cable they use to plug in to the monitor, but that wired network doesn't come for free, my company paid $50,000 to wire up cat-6 for an office that we only plan on being in for 2 years - and it already constraints where we can place desks. This doesn't include the $40 - $50K spent on access switches in the server room.

We have Wifi, which works well for phones, tablets, and laptops in conference rooms, but it's no substitute for the wired network since when the graphics guys are saving gigabytes of photoshop files to the file server, the rest of the network suffers.

Comment Re:Oh great (Score 1) 96

with receivers on top of everyone's monitor with much better total throughput and less interference than RF.

What about laptops, tablets and phones ?

The same thing they do now -- use RF Wifi.

Everyone in my office plugs their laptop into their large monitor at their desk (which is why I said to put the receiver on top of the monitor, just as they now get their wired connection through the monitor), though a laptop may still be able to get good optical signal with a receiver built into the top of the display. Tablets and phones tend to have lower bandwidth needs than laptops and desktops (few people are editing uncompressed TIFF files on a tablet), so they could still use traditional Wifi (which will have a lot more bandwidth available when the heavy users are using Optical links). This technology wouldn't never replace RF Wifi (since it's a lot harder to ensure optical line of site than to ensure RF signal), but supplement it.

Comment Re:Oh great (Score 2) 96

IRDA is back. Hey I have an idea, why not just have an access point that, for each user, drops a little cord out of the ceiling (where all access points are, right) and you plug it in for GIGABIT SPEEEDZZZS!!!1.

No but seriously why are we doing this when channels in the 5 Ghz spectrum are easy to come by.

This is as close to IrDA as RS-232 is to ethernet.

This technology purportedly creates small one meter hot-zones of light, so instead of an AP having one (or a few) 5Ghz channels shared by everyone in range, it can have dozens of separate hotzones so each , and an AP in one room won't interfere with one in the next room.

I could see this being very useful in offices -- instead of spending tens of thousands of dollars pulling wire to each desk back to a central wiring closet, a few AP's can be hung on the ceiling with receivers on top of everyone's monitor with much better total throughput and less interference than RF.

Comment Re:Seizures? (Score 1) 96

Can they do this without it being visible light?

I'm pretty sure you could really mess up some epileptics this way.

Not to mention I can see this giving some people migraines ... I know many many people who can see the flickering of fluorescent lights.

Cool, awesome, yay progress. But I don't want to be in a place where I am aware of the flashing lights.

Even if they used visible light, no one is going to see the flickering of a multi-megahertz flickering light.

Comment Re:Rainwater collection from homes (or roads) (Score 1) 678

1 inch of water per SQFT is for those who want that golf green lawn. Until about 6 years ago I never watered my lawn and it remained reasonably beautiful with just normal precipitation. Now I only water my lawn when it's dry for extended periods. I water for only 15 minutes per section (whatever amount of water that equals to I'm not sure but I managed to do the whole lawn which is about 30x30 total which is about 1/3 inch per sqft).

Watering a 30x30 ft lawn with 1/3 inch of water is around 180 gallons, so if you're spreading 50 gallons over that lawn, you're only getting around 1/10th of an inch of water, barely enough to penetrate the soil.

So the point is, I get whatever I get out of the 50 gallons. It's water that isn't coming out of the city's water supply. Those that are more serious (such as some I know) will get a 1000 gallon tank installed at time of construction. Each 50 gallon saves me $10 (based on the lowest rate in the consumption chart) and based on my bills I figure I save between $25 and $40 a month.

Where do you live that you pay $0.20/gallon for water? In San Francisco, the water+sewer rate is closer to $0.02/gallon. The city with the highest cost for water + sewer in this chart is Atlanta, GA ataround $0.026 per gallon.

If you're refilling your 50 gallon barrel 2.5 to 4 times a month with rainwater, you probably don't need much water for irrigation anyway, sounds like you're already getting regular rain.

Slashdot Top Deals

HELP!!!! I'm being held prisoner in /usr/games/lib!

Working...