Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×

Comment Ted Unangst's article (Score 4, Informative) 304


Ted Unangst wrote a good article called "analysis of openssl freelist reuse"

His analysis:

This bug would have been utterly trivial to detect when introduced had the OpenSSL developers bothered testing with a normal malloc (not even a security focused malloc, just one that frees memory every now and again). Instead, it lay dormant for years until I went looking for a way to disable their Heartbleed accelerating custom allocator.

it's a very good read.

Comment Re:AWS is NOT cheap (Score 2) 146

Yes, I've heard of Xen, and I've even run it in production, both Xenserver and Oracle VM flavors, and both sucked horribly. Back when VMWare tried the v.Tax I contemplated switching to KVM using RHEV but Redhat took almost 30 days to even get me access to a RHEV download by which time VMWare had backed off on their pricing.

As to the crack about redundancy and scalability, I've got a better uptime metric than any cloud provider, zero unplanned downtime in the last 5 years (vmotion + svmotion makes replacing both hosts and storage a breeze) thanks to redundant generators, UPS, chillers, and internet connections.

Comment AWS is NOT cheap (Score 5, Informative) 146

AWS is expensive, I can provide the equivalent of an m3.large reserved instance to my users for 1/4th the cost over 3 years, if you ammatorize my infrastructure over 5 years (which is what we've actually been doing) then it's almost 1/7th as much. The only places where AWS makes sense is if you're a quickly growing startup, have a VERY bursty workload, or you're so small that you can't justify 3 hosts for a VMWare Essentials bundle.

Comment Re:there are also a shitload more f2p games that d (Score 1) 245

That did what? Not suck? Can you give us a list of 10 F2P games that did not suck and not include DOTA2?

And how much lower is the bar for F2P and why? Clearly, the teams making these games are trying to make money, and if they believe they can make money, apparently there is some value to having people play these games?

So what exactly is "free" as in "free to play"? Ain't nothing free.

Comment Re:Technically if an NSA backdoor existed (Score 1) 171

The code is being audited in America.

Is there something preventing an audit elsewhere? Is it illegal to send the source code overseas? And how are these audits done? There aren't a lot of details in TFA. Is it like a big Wiki where anybody can look at the code and report what they find, or are the auditors vetted with specific sections assigned them?

I'm asking seriously. I'm not a developer, so I don't know. But I worry about security and snooping.

Comment Re:Who makes that? Also FP (Score 1) 287

My total benefits put me in the top 25% of industry average for my position and region (systems engineering manager in the midwest). If you're consistently making below industry average then you are either a very poor negotiator, your skills are below average in value, or you value something else about the jobs you take more than monetary compensation.

Slashdot Top Deals

There are two ways to write error-free programs; only the third one works.

Working...