Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×

Comment Re:Bogus from the beginning (Score 1) 228

We did CMM 3 and we never had anyone come and tell us that. We did all our code reviews after the code was at least unit tested.

While the majority of what the reviews found was coding standard stuff (I suspect it usually is) we did have a lower defect rate on the delivered software than the industry average, and the code reviews had the side benefit that people in the team knew what each other's code did and how it worked, rather than having to try to figure it out when a crash report came in and the original developer had left or was out on vacation in Patagonia. This we found to be pretty valuable.

Comment Re:Not Culture (Score 1) 314

There are quite a good number of good French films. However, the French have an uphill struggle making a movie profitable even if it were the world's best movie, because they are in French.

Hollywood has it easy, the English speaking world that understands US culture is enormous (300M Americans, 30 odd million Canadians, 60 odd million Brits and Irish, several million Australians and Kiwis, plus a huge number of people who can speak English fluently as a second language). The French on the other hand have only 65 million French people as their potential audience and that's it and hardly anyone learns French (yes, British people tend to be forced to learn French at school, but probably under 1% ever actually go on to learn it well enough to enjoy a movie in French, I'd wager the number of British people who can even hold a basic conversation in French is in single digit percentages).

If the French want any French language films at all, they almost have no choice but to subsidise them.

Comment Re:Guilty and impossible to prove innocent (Score 1) 248

Worse than that, they continued using it AS THE DEFAULT for years after security researchers revealed that it was flawed. The flaws and possible backdoor in the RNG was noted back in 2007 but RSA kept it as the default until September this year. So it's either a case that they kept it as the default because of a secret deal with the NSA or because of incompetence. Either way, that makes RSA a company I don't want to deal with.

Comment Re:Guilty and impossible to prove innocent (Score 1) 248

They put DRBG in BSAFE because it was a NIST standard. However, what they did do that seems suspicious is make it the default, and keep it as the default even though way back in 2007, security researchers said it was slow, flawed and possibly had a backdoor. No one else used it as the default. Why did RSA keep it as the default?

If it wasn't the NSA giving them a bung for keeping it as the default, then the only other answer is incompetence. Incompetence is certainly believable, after all there was that thing with their keyfobs a year or two back. So either way we ought to avoid doing business with RSA - because either they are in cahoots with the NSA and took an under-the-table payment to keep a known bad RNG with a possible backdoor *as the default* for their product, or they are incompetent - and you don't want either of those in something incorporated in your company's security.

Comment Re:I support Mr. Mikko Hyppone (Score 5, Interesting) 248

But beware, if you do that you might end up typing something stupid or embarrassing.

Consider: "Feliz año nuevo" - it means "Happy new year". The ñ isn't merely an accented character, it's a letter in its own right, and choosing the letter "n" instead seems innocent enough, but "Feliz ano nuevo" means "happy new anus".

Comment Re:As an organiser of events. (Score 4, Insightful) 469

I'd love facial recognition. I have a really bad memory for names and faces, and I often end up in the embarrassing situation of meeting someone in the street who knows who I am but I only vaguely recognise their face and certainly don't remember their name. Having a prosthetic "face to name" system would save me from many embarrassing situations.

Comment Re:Happy capitalist greed day everyone! (Score 1) 199

This is the problem I find with Christmas, total lack of moderation. The problem is that all the shops go full-on Christmas mode some time in September, so by the time it's over we've had an entire third of a year of Christmas - it's too much. By the time December 25th rolls around I'm bored to death with it because of the constant pounding of the Christmas sales drum for three months.

If Christmas was traditionally celebrated by nothing more than a meal and booze and a Dr.Who special on TV it would be a lot more fun because I wouldn't be fed up with it by the time it actually rolled around.

Comment Re:I don't trust anyone (Score 4, Insightful) 291

If they didn't do it for the NSA, why did they make a slow and vulnerable RNG the default? Of course we can apply the principle "Never attribute to malice that which can adequately be explained by incompetence". In which case it's immaterial anyway to our company's purchasing decisions on security products: we either avoid RSA because they are in cahoots with the NSA, or the alternative - because they are flat out incompetent (which is entirely believable, given their earlier security breaches).

Comment Re:Limited money supply is a problem? (Score 1) 691

In which case Bitcoin fails massively as a store of value. For instance, if you try to sell something in bitcoin, the value of the bitcoin you got paid with may have changed by 30% by the time the transaction is confirmed, it is so massively volatile. Bitcoin - at this stage - is suitable only as an instrument of speculation.

Slashdot Top Deals

Kleeneness is next to Godelness.

Working...