Comment Re:Who cares? (Score 1) 489
5) Uses Intels new-ish RDRAND instruction for a higher quality random number gen as the basis for ASLR
The ones that FreeBSD de-emphasized due to security concerns?
5) Uses Intels new-ish RDRAND instruction for a higher quality random number gen as the basis for ASLR
The ones that FreeBSD de-emphasized due to security concerns?
Yeah, I'm not keen on relying on a proprietary overlay to a proprietary OS. What happens when backward-incompatible service pack X arrives and breaks the overlay, and then you have to decide between learning the defaults or not upgrading? I'm not a fan of such things on general principle: if the OS really wants me to do things a certain way, I try to either adapt to it or not use that OS at all. Continually fighting against the current makes me tired.
I also submitted the story but got scooped. I wrote this:
Our favorite source of resistors, odd batteries, and cell phone accessories is preparing to file for bankruptcy, according to the Wall Street Journal. Millenials won't remember a time when it was a legitimately geeky place to go with lots of new at the time computers on display, tons of electronic kits and DIY gear, and a Free Battery Of The Month club card. Sadly, Radio Shack never found a clear way forward from those roots and swung between emphasizing several categories of small consumer goods.
It's really too bad. Radio Shack was a great place when I was growing up, but floundered about from one market experiment to the next and never found its footing. I really hope I'm wrong and I wish them well, but I can't imagine how they could possible make it through this.
We bought a laptop for my then-12-year-old son so he could play Minecraft without using ours. It shipped with Windows 8 and he is young and unexperienced enough to not have any prior opinions. And above all else, it was his beloved Christmas laptop, not some random beige box that an employer shoved onto his desk. In other words, this was the best possible scenario for someone to like Windows 8.
Two years later, he despises the desktop with a passion. Sure, his programs run well once he launches them, but everything else is a hassle. It looks weird. Nothing works like the lab computers at school. His friends don't have anything like it. It's obnoxious for the sake of being obnoxious, and I've heard plenty of complaints about Windows itself since we got it. They're good natured and he isn't ungrateful: when I asked him if he liked his laptop, he told me he loves it and it runs great, "but is the next Windows going to be less stupid?"
If you make a UI change and Retirement Joe in the office pool doesn't like it, well, that's probably just Joe being crotchety and close-minded. But what's it say when a malleable early teen who didn't have preconceived notions also thinks it's illogical and weird? I think it says you've done something very, very wrong.
Should Apple be supporting a 7-generation-old iPhone 1? Should Motorola be supporting a class of device that for practical purposes no longer exists? Both of those are unreasonable expectations.
Joking aside Lollipop went from 0% to 0.1% in two months. iOS 8 went from 0% to 56% in two months (released in September; at 56% in November). As of now, the latest iOS 8 has 68% share, the previous iOS 7 has 29%, and older releases have about 4%.
According to Google, 46% are using two-generations-old Jelly Bean and 15% are using versions at least three generations old.
I think there are more reasons for Android users not upgrading than "they got busy over Christmas".
* compression. You mean like this, "SSLCompression On".
Which isn't a good idea anyway.
Ignore. HTTP vs HTTPS, yes. I'm still waiting for my coffee to kick in.
http is on the way out
LOLWAT? Given the ubiquity of JSON-over-REST as a common API for just about everything, HTTP is the exact opposite of on the way out. If anything, it's absorbing and replacing many other protocols (even when it shouldn't).
Medium's just another blogging platform. Why does it matter whether it's explicitly pointed out, any more than Wordpress or Tumblr or other blog hosts?
SSH connections take For. Eh. Ver. relatively speaking:
% time ssh localserver exit
ssh localserver exit 0.02s user 0.02s system 2% cpu 2.061 total
Subsequent requests using the same connection are quick enough:
% time ssh localserver exit ssh localserver exit 0.00s user 0.00s system 20% cpu 0.039 total
But compare to an HTTPS connection to a remote host:
% cat curlcfg
verbose
trace-time
url = "https://www.google.com/"
output = "/dev/null"
head
url = "https://www.google.com/"
output = "/dev/null"
head
% curl -K curlcfg
...
A brand new request to a remote server takes just 263ms, and a second request only 81ms. Considering that the server is 25ms away, that makes it a bit faster than a cached SSH connection to a local machine.
But even more than that, SSH in this context is a transport, not a protocol. It allows you to build and manage secure connections, but you still have to write a protocol on top of it ("I'll send this command, and you reply with..."). Even if you "cheat" and use SFTP, you're still missing out on fixes to the thousands of little issues people have worked out with HTTP over the years. What's the SFTP equivalent of If-Modified-Since? How will redirects to remote servers work? What's your cross-domain scripting policy? How are you going to handle anonymous connections?
Use SSH for SSH. Use HTTP for HTTP. They're separate things for good reasons.
To what end should slashdot secure itself?
Because without HTTPS, anyone who owns a router between me and their hosting site can see everything I'm reading, every comment I make as AC, every session cookie I pass over the wire, everything. More importantly, there's no good reason whatsoever not to secure it. Encryption is incredibly cheap, so Just Do It.
Always draw your curves, then plot your reading.
