Catch up on stories from the past week (and beyond) at the Slashdot story archive

 



Forgot your password?
typodupeerror
×

Comment Re:If true. If. (Score 1) 200

such as the massive & ongoing civil rights violations/infringements that most people agree are wrong, regardless of what political stripe they self-identify as.

But I think that's wrong.

You and I may not agree with this, but I think that MOST people are quite happy to trade-away their civil liberties for the illusion of security. Particularly those who are convinced that since they "do nothing wrong", they have nothing to fear from such violations.

It's a very sad commentary on our democratic peers, but unfortunately, factual, and consistent with pretty much everything else that's gone on since 9/11, (and more-or-less, since the McCarthy era - with regard to "communists").

We're not going to unite in this country. Period. It's like Morpheus said, in The Matrix: "Most people are not ready to be unplugged from the system, and will fight to protect it." Cliche, but true.

Comment Re:Fire(wall) and forget (Score 1) 348

Correct me if I'm wrong, but PCI compliance doesn't necessarily require a firewall between each system that takes credit cards. It just requires a firewall to protect all the systems that take credit cards. If you have a few POS systems and a SQL server that access credit card info, you don't need a software firewall on each of those systems. You could set up one hardware firewall that protects all of those systems from Internet traffic (and other LAN traffic, if needed).

Comment Re:Fire(wall) and forget (Score 1) 348

It depends on what you're talking about, and where. A firewall between the LAN and the Internet, yes. Generally speaking, put it up, and then figure out what needs to be opened.

Beyond that, it starts to get a bit more foggy. Security is often a trade-off between making access too easy for attackers vs. making access to hard for authorized personnel. It's not uncommon for security software to do more harm than good, blocking things that shouldn't be blocked, breaking the networking stack in weird ways. When it comes to software antivirus and firewalls, my view is that you should use the more lightweight, least intrusive solution that meets your needs.

I'm not sure, but it seems to me that the original poster is asking about the built-in Windows firewall. Should that be enabled on all machines?

Comment Re:Citing Wikipedia (Score 1) 189

It doesn't even take any depth. I've cited wikipedia on my website (the intent was to link to more information, not to utilize it as an exhaustive source) and later gone on to visit that link to make sure it still says what I want it to say only to find out that since I cited the article, the article cited the very page on which I had cited it. Whoever cited my page was either too lazy to check the bibliography, which was at the foot of the page as normal, or didn't care that they were potentially creating a circular reference one reference long.

Comment Know what firewalls do. (Score 2) 348

Honestly, determining whether you need a firewall isn't as simple as "yes, always, all the time" or "no you don't need one." You have to know what the firewall is doing, and what security is required. You can set up a firewall, allow all ports to be forwarded through without inspection, and while you have a firewall, it's not helping you. Or you could have a server running a secure OS with only the vital ports opened, without access to anything other than the Internet, in which case a firewall probably isn't doing you a lot of good.

Also, it seems you're talking about a software firewall installed on the server? I wouldn't trust it. If I'm running Internet accessible servers, I generally want separate hardware firewall, and I want to put those servers into a separate DMZ if I can. I might leave the built-in Windows firewall turned on if it's not causing any problems, but if I have to disable it, I don't worry too much about it because I have the hardware firewall.

A properly secured Linux/Unix server should be able to sit directly on the Internet without issues, but you may as well put it behind the hardware firewall if you have the option.

But are we talking about disabling the built-in software firewall on a machine that's only accessible by other computers on the LAN? That's probably fine. You should have some security preventing unauthorized personnel from accessing the LAN, and I would assume the SQL databse it password protected, right?

I guess my bottom line here is this: Since you can't trust a the built-in Windows firewall to actually protect from very much, you shouldn't worry too much about disabling it. Make sure your network is secure without it.

Comment Re:Any Help Is Good (Score 1) 55

I am glad that someone is thinking about disaster aid but the most neglected problem is the potential for a severe hurricane in highly crowded areas. South Florida can not be evacuated.

If it's not safe in the event of a disaster, then it's not safe now. Therefore, we should be evacuating it now, at least down to a reasonable level of population. You know those maximum capacity numbers that get written inside of businesses? Florida should have one, too.

Comment Re:A critical need in disasters is housing (Score 1) 55

This is a great idea. Getting people to think about opening their homes in times of a disaster before the disaster happens. Sort of like the organ donation sticker on your drivers license.

I don't have an organ donation sticker because there have been paramedics who have outright announced that they don't work as hard to save donors. I will continue to not donate until this is no longer true. If I were to join an organ donation scheme it would involve reciprocity. I might well, although I forget the name of the one I liked the look of, and of course the google results are all scientific papers. They must not have paid google for ad placement, so it's not coming up at all.

Comment Re:The Hobbit didn't take the material seriously (Score 2) 156

What's funny, is that I remember for DECADES, fans bemoaned the lack of a good LOTR/Hobbit adaptation, because the special effects weren't good enough. We had the Ralph Bakshi atrocity, then the Rankin-Bass embarrassment. (and for the hipsters, the little-known black-and-white Russian adaptation). Then. . . Nothing. No studio was going to invest their good money into such a farce. Then Peter Jackson came along, with some contacts who had a CGI technique that could maybe make human actors look like Hobbits - then, we finally got LOTR.

And there was great rejoicing among the FANS. But if you really want to look at LOTR with a critical eye, step back and take a look at it, and yeah, it was pretty stretched-out (and at the same time, weirdly had the feeling of being tightly compressed; like months of road-travel and hiking crammed into a 30-minute TV episode compressed.) (I hike. And I don't know how you make a long hike "interesting" to a cinema audience. But that experience, of long day-after-day exposure to nature, that absolute breathless awestruck feeling when you behold the spectacle of pristine wilderness, the deafening silence, the overwhelming feeling of "letting-go" of your personal safety in the face of insects, weather, predators, rough terrain, homesickness, isolation, struggle, confusion, physical exhaustion, was all very deftly conveyed in Tolkein's prose, and totally absent from the movies). But, overall, still better than the Bakshi version of the movie.

Hobbit takes that to the next extreme. I think it's obvious that the Studio wasn't going to fund Hobbit unless they could milk it to the same profitable extent that LOTR was milked. Only, it's like 1/10th the literary material to work with. I think it's also apparent that the creative team had a difficult time making that requirement work. My guess is that everybody was all geared up to accept this new whizbang 48 fps 3d technology, and that they were hoping that this would make these movies so visually engaging that the audience wouldn't care about the pacing and story and plot problems. I think that they almost certainly fell into the groupthink trap, and bought into their own bullshit, and somehow, anybody who had any nagging doubts was just never in a position to say; "fuck, this is awful, we need to back up and fix this shit." because, by that time, it was probably too late, and the only impact of speaking-up would be to end one's career in the industry. I've been on projects like that. I know that feel.

Comment Re:Bullshit.... (Score 1) 133

Well no, the metric is real. The question would be whether it's useful or meaningful. You originally implied that it wasn't because:

A "combined score" for speed and ratio is useless, as that relation is not linear.

It seems now that it's not about the relation being linear, but about something else that you won't say. I'm afraid I'm not closer to understanding.

Slashdot Top Deals

The hardest part of climbing the ladder of success is getting through the crowd at the bottom.

Working...