Follow Slashdot stories on Twitter

 



Forgot your password?
typodupeerror
×

Comment Re:Best AV is almost as good as nothing at all (Score 1) 515

First, anti-malware tools (like MSE) don't wait until after the infection occurs. For a piece of malware ot infect something (lets say you open an email with a trojan or some other malware), before anything happens, the tool scans the email. The malicious code doesn't have a chance to run before it is scanned. Now, to detect the malware, it does rely on definitions which come from previously seen malware.

FIM and HIDS on the other hand do wait until after the infection and then tells you about it later.

Now McAfee has a tool (and I cant' think of the name... Artimus maybe) that instead of relying on definitions, looks at what the code is going to do and tries to determine from there if its malware. For example it might let an executable designed to update core components of Windows run if the code is signed by MS, but if there's no signature, it would prevent it. However, its certainly not free.

As for the article you linked, its not talking about the casual web surfer. Its talking about advanced adversaries with resources behind them and more or less directed attacks. Anti-malware tools like MSE are going to be relatively useless in these situations.

Comment Re:How to prove medical knowledge? (Score 2) 186

But who is writing the exams? If its all self taught people, then you're in a self-reinforcing stereo type situation.

Certs are an indicator that someone can learn information in a formal setting. There are benefits to this over someone who learned as they went, from a book, or from a website. How do you know they actually know industry standards, best practices, and are going to give you a quality product at the end of the day.

That's not to say that everybody with a certificate is the best candidate, that's as far from the truth as the reverse. I've held several certificates over the last number of years, some I've renewed (GIAC) and some I have (various MS certificates), based on what position I'm in. If someone shows me that they hold a GIAC certification, I'm going to move them to the "interview/test" pile assuming they have some working experience as well. If they don't, I'm going to study their resume a bit closer before I make that decision.

Comment Re:Pulmenary system (Score 2) 544

As others have said, quit.
I quit after about 15 years of smoking. I took up running and feel great. I run about 30-40K per week, and have undone most of the damage I caused by smoking. Running shoes and even the technical shorts and shirts are far cheaper than smoking as well :)

Comment Re:This is for real (Score 1) 340

Lets look at the possible number of passwords (so we're talking about a brute force attempt on the hashed password).

Blizzard's setup is not case sensitive, and they disallow a significant number of special characters. Lets say they have 40 possible values for each. A good password setup should have around 75 (or more).

So lets see how many possible values there are for a 7 character password in each setup:
Blizzard 4.456764032636319e+34
Good: 1.6883055225799413e+64

That's quite a difference. Lets see how many characters it would take in a Blizzard password to get into the same ballpark. Turns out its 37 which gives: 1.9782022283855447e+64

So, I guess a restricted character set is okay, if you go with REALLY long passwords.

(I used the password calculator at http://www.csgnetwork.com/optionspossiblecalc.html with 4 for a minimum length to determine those numbers).

Comment Re:This is for real (Score 2) 340

That's all fine and dandy until you realize that Blizzard doesn't differentiate case in passwords. They either covert them all to upper or lower case, not sure which. The forums were alive with this recently. So, all of a sudden brute forcing isn't so tough, especially when they also only allow a reduced set of special characters.

Comment Seriously? (Score 5, Insightful) 58

FTA: "In another case, the judges found that movie theatres shouldn't be charged for the music that's part of a soundtrack. The court ruled that a “soundtrack” that accompanies a movie is not the same as the Copyright Board’s definition of a “sound recording” because the soundtrack is meant to be part of the movie and includes preexisting sound recordings. And finally, the court ruled that performance royalties do not need to be collected for music used in downloaded video games." So the industry wanted to charge movie theatres extra because of the music in the movie? Shouldn't that have been deal with long before when the production company (or whoever) got permission to include the song? Same thing for video games. Did they actually expect consumers to buy a game for $x and then later get charged $y for the music in the game?

Comment Re:DST (Score 1) 473

I do like living in Saskatchewan... No DST, though there's a significant portion of the population that think we're backwards for not changing our clocks twice a year.

Comment Re:I still don't want one (Score 3, Informative) 200

I live is SE Saskatchewan. This winter is hardly a fair example (its been very warm here with the exception of the past week). However, even in an average winter, we would rarely see as cold as -25C as a high for more than a few days in a row. So what this says to me, is even though I thought the opposite, the Volt may actually be a reasonable car here. Even if its not the most efficient choice during the extreme cold, we're talking maybe less than a week on average in any give year that it drops below those temperatures. That means, that >98% of the time, this is the most efficient choice of vehicle in these climates.

Slashdot Top Deals

He has not acquired a fortune; the fortune has acquired him. -- Bion

Working...