Catch up on stories from the past week (and beyond) at the Slashdot story archive

 



Forgot your password?
typodupeerror
×

Comment Re:Ubuntu good for linux? (Score 1) 143

Agreed. And I've never had a single occasion where I've done a Windows installation where I've not had to go off and download drivers from somewhere else to get all the hardware working.

That doesn't mean it's a problem because when you've done it, everything works fine and everyone is happy - but the Windows people seem to conveniently forget these things when they accuse Linux of being difficult to install.

Comment Re:Terrible summary (Score 1) 124

In other words all those people using Starbucks' free wifi are broadcasting their Apple ID and password to everyone else in range.

I've never owned an Apple device in my life and have no intention of ever doing so - but wrong is wrong and I have to correct you.

The passwords are encrypted over SSL and therefore anyone snooping a connection will only see gobbledigook - in no way are they broadcast in clear text.

The actual vulnerability here is that someone can, using their own constructed SSL keys, perform a man-in-the-middle attack to step into the middle of a communication - at which point they could no doubt request the password and be sent it in what would be a decryptable and readable format.

So, yes, it's a vulnerability, but whereas anyone can run sniffer traces to read packets on the wire or in the air, a man-in-the-middle attack takes a considerably higher amount of technical expertise to carry out.

Comment Re:Terrible summary (Score 2) 124

Encryption (e.g. in SSL) actually serves two important purposes - it encrypts clear text such that it appears like rubbish to anyone taking a look, but it also acts as authentication security because it allows you to validate that the endpoint you are communicating with is who they say they are.

In SSH, for example, you can do away with passwords entirely by using private and public keys - the idea being that you encrypt with the private key and give the public key to the other endpoint, the algorithm used for both keys being such that when you decrypt with one you can only decrypt with the other. If you control the keys properly, then by virtue of being able to communicate with each other, you can pretty much confirm both endpoints are who they say they are.

In the case of this iMessage issue, yes the passwords are encrypted but the keys are not properly "pinned" (i.e. controlled) meaning that a third party can potentially intrude using their own keys - and because you have a valid communication with that third party, you've no reason to assume it's not Apple you are talking to, which probably makes it that much worse as a form of exploit.

The point is that encryption is only half the story, authentication is the other half...

Comment Re:Ubuntu good for linux? (Score 2) 143

Not at all. I hardly ever recommend Linux to non-techies because I've seen the issues it often causes.

I have absolutely no problem with intelligent discussion with anyone on the pros and cons of Linux, but why do so many of the anti-Linux people make these generalised, sweeping statements about Linux without putting any meat into their points?

Precisely what issues have you seen Linux cause?

I've given a number of friends and family the opportunity to try Linux out, mainly because they themselves tell me they don't want to end up having to use Windows 8. All of them still have Windows to use, I've either done them a dual boot on their hard disk, or made them up a bootable CD or USB stick to use when they feel like it.

I get questions asking me how to do certain things or find certain things in Linux, in which case I tell them the answer or give them a bit of help to get something to work right - but none of it's an "issue" because I help them fix it.

It's just strikes me as very selfish to say "I can't recommend it to you because I haven't got the time to help you out when there's a problem" and, to be honest, you probably are best off staying away from Linux completely if that is your attitude to helping others with it.

Comment Re:You'll pry Windows 95 from my cold dead hands! (Score 4, Insightful) 398

With all respect, I agree with him. I am both Linux and Windows person with no requirement to spend valuable CPU cycles on unnecessary eye-candy simply to impress someone who happens to look over my shoulder.

GUI interfaces need to be slick, clean and uncluttered, they need to get you to where you need to be in as few mouse-clicks and key presses as possible, whilst at the same time allowing usage of both of them for navigation.

Rotating cubes, melting windows and icons that animate other than to tell you your mouse pointer is over them have no place on any computer outside of a kindergarten classroom - Windows, OS X, or Linux, I don't care, I'm not biased.

Comment Re:Meh (Score 3) 398

I don't think gaming is anywhere near the big sticking point that it used to be when it comes to choosing Linux over Windows.

Microsoft essentially killed big commercial PC gaming on Windows when they took the decision to split DirectX 9 and 10 across XP and Vista respectively. Making that decision when they did hurt the Windows games development community considerably because it fragmented game development when most people were still on XP, and was precisely the scenario DirectX was designed to avoid. It wouldn't surprise me if it was a deliberate tactic by Microsoft to drive people to X-Box for their gaming needs, but it undoubtedly had a huge negative impact on commercial PC gaming releases.

In the longer term, it's actually an extremely good thing to have happened because it's killed the stranglehold big PC games companies had on Windows games and opened the floodgates for indie developers to start making games again - not to mention the impact of Kickstarter in getting games released that, under big corporate control, would never have seen the light of day.

Steam is going to be an interesting turning point for gaming on Linux, but as some analysts are already saying, the actual turning point will likely only be if and when there's a killer game on Steam for Linux (or SteamBox or whatever it's name is) that gets people buying it in their droves.

I would argue that big applications like MS Office and Photoshop are bigger obstacles to the adoption of Linux. In reality, most MS Office and Photoshop users (who are, let's face it, probably using pirated copies anyway) would find that LibreOffice and The GIMP do everything that they need to do anyway but are just too lazy and/or scared to try something new. Sure, there are a minority of "professional" users who need the specific features in MS Office, Photoshop and other big commercial Windows applications, but they really are a tiny proportion compared to the overall userbases of them.

Comment Re:Ubuntu 13.10 (Score 1) 398

Well that and the fact that Apple made a better Unix desktop.

I would not for one minute argue that Apple made a desktop that a lot of people like as an alternative to Windows. But you're actually arguing against the whole design ethos of OS X in that's it's designed to be simple to use for people that don't know a lot about computers. Put UNIX in front of those people and they wouldn't know where to begin - so whilst I accept it has a BSD core, OS X is not UNIX, merely a derivative of UNIX, since the command-line power tools that make people use UNIX are hidden from OS X users by default.

The people I know who switched to OSX circa 2002 were Linux users, not windows.

I don't know where you get the facts to make this statement from but it's not my experience. In 2002, the penetration of Windows XP was still very low, Microsoft was still suffering with negative backlash from Windows ME and if you wanted a reasonably good desktop Linux for the time then you had a choice of Red Hat, SuSE, Debian and Slackware (with maybe one or two others). None of these had much of the slickness and ease of installation that Linux distros do now, therefore if (like me) you were using them then, then you were probably a die-hard Linux geek anyway who was still using Windows for some stuff.

I therefore believe your statement to be false - people switching to OSX in 2002 were disillusioned Windows people, not Linux people.

Okay I know that last part has gotten better, but still every time in the past decade when I've gone to try Linux on the desktop again something hasn't worked without a workaround

Again, you're contradicting yourself. I accept you like OS X more than any other OS but OS X is specifically designed to run on a very small and specific subset of hardware which is why you can only run it on Apple machines. But then you complain that you find Linux difficult to install on a laptop that contains one of possibly thousands of possible combinations of hardware?

For your information, I recently bought a Lenovo laptop on which to run Linux and all the hardware on it ran pretty much first time with little or no difficulty. In actuality, I did a lot of research first, looked at countless laptop model specs and after a couple of weeks decided that was the model that would be the best one to work out of the box with Linux, in my price range and with the power and features that I needed. And that, incidentally, is basically the same process Apple do when they choose hardware to go in their Macs - so if you had problems with your Linux laptop then, sorry, that's your fault for not doing your research and going to ask questions from people in the know, and that's why you as a consumer have a choice of going to Apple who have done that research for you up front.

When Apple moved to Intel chips, well then we could run Windows via virtualization or bootcamp allowing people like me to have 1 machine, work, and test on both OSX & Windows.

But earlier on in your posting you said "OSX is the best of all worlds" - in which case you've again contradicted yourself by stating you need the capability to run Windows on your Mac. So which is it to be then?

Comment Re:Google WTF are you doing? (Score 0) 154

No, I'm not an idiot - and the fact that you've had to resort to personal abuse just tells me I've already won this argument with you.

I'm an IT security professional who understands what makes a system insecure by virtue of what attack vectors can be used to gain access to a system, and you would be very surprised to learn that fixing vulnerabilities within an OS are only a small part of securing against those vectors being exploited - this is why good security takes a layered approach, this is why you deploy firewalls and Access Control Lists that all help to stop the wrong people getting to those vulnerabilities in the first place. It's a fact, deal with it.

Lack of common sense in a user is also an attack vector and therefore education of the user serves as mitigation to that vector - how that is or is not dealt with in the real world is irrelevant to this discussion, it exists. Period.

It borders on computer archeology.

That borders on nonsense - "computer archeology"???

Comment Re:Not much improvement; drawbacks continue (Score 0) 398

Linux isn't immune to viruses and worms.

Actually, by virtue of design, it pretty much is.

Viruses and worms spread because they can blindly copy themselves across large populations of machines running similar operating environments at high-level access privileges. Two reasons why Windows is prone to viruses is because there's a lot of backwards compatibility built into it (meaning that, in theory, you can run a Windows 3.1 program on the latest Windows 8 machine) and because most users grant log themselves in with administrator level privileges so they can automatically do what they want on their machines. Both of these are conditions allowing viruses to spread.

On Linux, it is more difficult to find a common exploit existing across large populations of Linux machines to create an environment for a virus or worm to propagate in the first place - just because a machine run Linux does not mean it has the capability to run every executable placed on it. In addition to that, Linux users don't normally log in with administrator privileges all of the time so even if a virus or worm gets onto the system, it won't have the privileges it needs to do much harm to the system or to get out onto the network to other Linux machines. In other words, a Linux virus or worm could be created but it would be pointless because it wouldn't propagate very far.

Incidentally, Linux is more prone to attacks on network services that it might be running such that someone could buffer overflow a network service and cause it to drop to a shell prompt to gain access that way. On older UNIX-like systems, that can be a problem because if the service is running with root privileges then a buffer overflow drops it to a root shell prompt where a hacker can do anything he/she wants. However, much of this risk has been mitigated in recent years because Linux distro creators have done things like installing sudo (that only gives root access to users to run commands that need it when they need it), not running network services with root privileges unless they really MUST do so, and simply turning off any services that the user isn't likely to need within a default installation.

I just wanted to clarify that - yes, Linux is not immune to being exploited, it is just very unlikely to be through viruses or worms.

Comment Re:Not much improvement; drawbacks continue (Score 1) 398

Eh, my webcam works fine in Windows 8 without extra support. I assume Android has SIM card drivers because of u no it's used for 'phones a lot.

About three months ago I bought a new Lenovo Ideapad laptop - it had Windows 8 installed, I couldn't buy it without it.

I installed Windows 7 on it, W7 didn't recognise either the Ethernet controller or WLAN controller out of the box, I plugged in an old Belkin USB Wireless dongle but it didn't recognise that either, and there were no Windows 7 drivers for the old USB dongle. So instead I downloaded the laptop drivers onto a USB stick on another PC and got them installed that way.

I finished the Windows 7 install then started the Gentoo Linux dual boot installation on it. The Gentoo installation CD didn't recognise either built in network interface either, but it did immediately recognise the old Belkin Wireless USB dongle - at which point I did the installation, booted it up with a recent Linux 3.10 kernel and it recognised all the network interfaces.

So all-in-all that's a win for Linux supporting older hardware and note that I didn't have to go off and download all the drivers for it - with the latest kernel it picked up everything.

Comment Re:Meh (Score 4, Interesting) 398

Speaking as an IT person with 30+ years experience who is mainly a Linux guy but likes XP and Windows 7, I only ditched my last copy of XP (excluding virtualised ones) about 6 months ago and moved to Windows 7.

Ultimately, I like Windows 7, it's as reliable as XP (mainly because I never found XP to be unreliable) and a lot slicker on newer hardware, but then XP was starting to get clunky with newer machines.

But I hated Windows 7 when I first started with it, it seemed that stuff (especially in Control Panel) had been moved around for no readily apparent reason and a couple of months to comfortably find everything I wanted to as quickly as I could in XP.

My point is that it took even an IT geek a couple of months to get used to a new OS, so why is this any different for "Joe Sixpack" ditching XP and moving to, say, Linux Mint with it's Cinnamon interface that is very similar to the XP layout.

It's all just about familiarity and I am sure every Microsoft-focused person out there suffered some initial infuriation when they fired up Windows 7 for the first time and saw how different a lot of it is from XP. Yes, we all got used to it and like it now, but that time to familiarise was still there, even if you choose not to acknowledge it.

Comment Re:Google WTF are you doing? (Score 1) 154

Yea! Except thats the MOST COMMON ATTACK VECTOR out there. Most viruses are coming from "legitimate" websites which either have ads or have been hacked and are serving up infected PDF, Java, or flash objects.

With all respect, much of that still comes down to common sense of the user. Why would someone like me, with years of experience in IT and IT security, blindly open every PDF, Flash Object or Java app that is fired at me? And much of this comes down to keeping the appropriate executables updated - it's the PDF, Flash Object or Java program exploiting a vulnerability in the unpatched executable dealing with that format that's the problem - if you keep those updated regularly and avoid dodgy sites serving them, you've mitigated against most of those attack vectors full stop.

As for ads, yes, it can happen that malware is served up within those - but again, highly unlikely in legitimate sites and mostly mitigated with a good ad-blocker.

Your experience is wrong, and Id suspect is the result of confirmation bias.

I've no idea what "confirmation bias" means, I've never come across that term before. I can only go by my experience in the industry and what I've seen with my own eyes. I've used XP since around 2003, in all that time I've had one piece of malware on any one of my PCs and I believe that came from downloading a dodgy zip file of an ancient DOS game I was after that I couldn't find anywhere else. I've never used anything more than a basic free virus checker, most recently Microsoft Security Essentials. Don't believe me, I don't care.

In business settings ive been in, ive seen countless viruses appear in the morning (8-9AM) on receptionist PCs where the user visiting a "dodgy site" is incredibly unlikely, and their browser history has tended to prove that.

In my experience, receptionists tend to be the brunt of practical jokes within their own organisations and IT people frequently work overnight - put the two together and I'd definitely want to rule out internal (to the organisation) tampering as a possible cause. I'd also consider the possibility of the receptionist herself unknowingly installing a trojan program which, over a longer of period of time, installed other malware on her machine. Just because it's there in the morning doesn't mean that what installed it only appeared during that previous night.

Comment Re:for most retired people, up-to-date Chrome (no (Score 1) 154

That's your opinion and you are entitled to it.

But I would argue that given that I personally don't do professional-level graphics editing, I cannot justify the expense of a fully licensed copy of Photoshop. Therefore I have a choice of either using a free alternative like GIMP (which is what I do in reality) or downloading a free warez-d copy of Photoshop.

Given that warez-d copy would be extremely likely to contain malware which will, at some point, do some damage to my PC that I would inevitably have to investigate and fix, then I would argue that investing time in learning GIMP without any risk of malware is the better option of the two.

Slashdot Top Deals

New York... when civilization falls apart, remember, we were way ahead of you. - David Letterman

Working...