Become a fan of Slashdot on Facebook

 



Forgot your password?
typodupeerror
×

Comment Or the malware might cover its tracks. (Score 1) 324

If you ask the drive to read out the whole flash.
The maybe the firmware would have to go to the platter to get the real image.

Or the malware could regenerate the un-attacked version.

For instance: If it's a patch that loads into an otherwise cleared-to-known-vallue region it can detect that region while reporting flash content and report the cleared value, instead. Add a couple other tiny regions where it saved (or alread knew) the previous contents where it "sank it's hooks" and you can't tell it's there from its replies to dump requests.

JTAG seems safer.

Yep. JTAG, in principle, could be corrupted. But it would require substantial hardware support that almost certainly isn't there (yet!)

Comment Hashes can be useful. (Score 1) 324

Which is why I always laugh my ass off at all these people who use PGP to sign things and put a hash on the same website you download it from ... look you can verify this file you downloaded from the website hasn't changed because theres no way anyone would be smart enough to update the hash as well!

That's why you SIGN the hash. Then only the public key needs to be published by a different route.

And it doesn't HURT to publish it on the web site as well: Then someone tampering by substituting a different public key sets off alarm bells when that differs from the public key obtained from another site or by another path. Blocking that makes man-in-the-middle more complex: The attacker has to have essentially total control of the path to the victim and be able to recognize and substitute the public key whenever it shows up. One slip-up and somebody may raise the alarm.

Meanwhile: Even if publishing hashes on the same site may not provide additional security against MITM, it DOES let you check the download wasnt corrupted in transit (in ways other than malicious substitution). With modern protocols that's less of a problem these days than it used to be, but a check would be comforting.

Comment &is "teal" blue with greenish tinge or vice-ve (Score 1) 420

... blue and brown. Just now, I opened the Washington Post link on my 24" screen in a sunlit room, and it was clearly white and gold.

Though the sensations are vastly different, brown is really dark yellow. The underlying color of that part of this dress seems to be very near the perceptual boundary (probably just on the yellow side of it). This picture seems to have the dress in a non-obvious shadow, so when it is viewed by someone whose visual system doesn't adequately pick up the shadowing and compensate, it crosses the boundary and appears light brown rather than dark yellow.

Another perceptual oddity is that a very slight bluish tinge to white makes it appear "whiter than white", especially in sunlight or other strong lighting. (I suspect this works by mimicing the differential response of the various color sensors in the eye when exposed to very bright light, though blue may also "cancel out" a bit of the yellowing of aging cloth.) Laundry products up through the 1950s or so included "bluing", a mild blue dye for producing the effect. (It fell out of use when it was replaced by a fluorescent dye that reradated energy from ultraviolet as blue, making the cloth literally "brighter than white" {where "white" is defined as diffuse reflection of 100% of the incoming light}, and which, if mixed with detergent products, would stick to the cloth while the surficant was rinsed away.) I suspect some of the "blueish is brighter" effect is going on here.

When I view the picture straight-on on my LCD display, the light cloth on the upper part of the dress appears about white and the image appears somewhat washed out. Meanwhile the lower half has a bluish tinge. So I suspect the cloth is actually nearly-white with a bit of blue. (Viewed off-axis it's very blue, but the other colors are over-saturated and/or otherwise visibly off-color. So off-axis viewing makes it look more blue and this probably adds to the controversy.)

Another color-perception issue is "teal", a color between blue and green. There are paint formulations of this color that give the sensation of "distinctly blue with a greenish tinge" to some people and "distinctly green with a bluish tinge" to others, even under the same lighting and viewed from the same angle. (I'm in the "slightly-bluish-green" camp.)

The first place I encountered this was on the guitar of the filksinger Clif Flint. (On which he played _Unreality Warp_: "... I'm being followed by maroon shadows ..." B-) ) Apparently his fans occasionally had arguments about whether his guitar was blue or green, so he sometimes headed this off (or started it off on a more friendly levl) by commenting on the effect.

Comment Re:do no evil (Score 2) 185

Perhaps they should be asking for a ".google" gTLD, for that purpose, instead of trying to monopolize a generic identifier.

I was about to suggest the same, but with ".goog", to make it shorter. (Can't think of a less-than-three-letter symbol that points to them as strongly.)

(It's also their stock ticker symbol, so maybe it's not such a good idea - it could cause a land rush and litigation from all the other publicly traded companies.)

Comment Re: file transfer (Score 2) 466

The most ancient laptop I ever touched was a Compaq 386/16 with a 20MB 3.5" 1/2 height IDE drive. It sounds pretty much like the same, or probably the piece of crap I had was a predecessor. I do remember it was clearly a 20MB drive though. I swapped it for a regular desktop 40MB IDE that we had in the shop.

Everything I found about that series says it's IDE. I couldn't find anything specifically saying the physical size, but I suspect it was a 3.5" drive. I seriously doubt it was RLL, MFM, ESDI, or anything more exotic. So he's wasting everyone's time asking rather than just opening it up and seeing "ooh, a IDE drive." Even if it was, he could go find some combination of adapters to use it. Anyone who's worked with stuff long has a box full of adapters and cards for exactly this. Well, I did ditch all my ancient cards on eBay a few years ago.

I'd be surprised if the drive even spins though. Most of the time when I go to try ancient hardware, the drives don't spin, or spin enough, even though the owner remembers that it was working when they shut it off.

Comment Re:Without estimates you can't budget... (Score 5, Funny) 347

Lets see... What would they say? This is the one-sided conversation, since it doesn't matter what you say anyways.

"Ok, we can accept that estimate."

"Ya, ya, ya, whatever."

"We'll have that information to you by the start of the project."

"The information isn't ready yet, we'll have that by the time you need it."

"I thought we had that to you already. We'll have to check with the information source."

"The PMs have some changes."

"Here's the information, but there are some small changes."

"No, those are small changes, they won't impact the timeline."

"No, you can't have more time, we already made commitments."

"The PMs have some changes."

"What do you mean you won't have it in on schedule? You agreed with the initial estimate."

"You're going to stay here until it's done, I don't care how long it takes."

"I don't care that you've been in the office 30 hours straight, this is your fault."

"We're hiring an off-shore company to help you with the project. Get them up to speed."

"The PMs have some changes."

"Since we have the off-shore team, we need to cut your department back."

"I read an article saying Java is the future. Redo it in Java."

"What do you mean we're waiting on the off-shore company?"

"We fired the off-shore company. You're good, you can get it done in time."

"Ok, hire more people into your department, but we're only offering half the salary, and no more bodies."

"Why is this project so far behind? Don't you know what you're doing?"

"The PMs have these changes."

"Why aren't you done? We're weeks from the deadline!"

"You didn't meet the deadline. Don't you know deadlines are firm. We have commitments."

"I don't want excuses, I want results."

"You and your idiot team are fired. Get out of my building."

[2 months later]

"We need you to come back and finish the project. We need it by next Monday, that should be plenty of time."

"Here's all the new specs. They should be easy to do."

"What do you mean total rewrite, it's only a few chances. You are an idiot. Get out."

[1 month later]

"We need you to come back and finish the project. We need it by" {click}

"We need you to come back and finish the project. We need it by" {click}

"We need you to come back and finish the project. We need it by" {click}

"Why do you keep hanging up on me?" {click}

Comment Re:Oh bullshit! (Score 4, Interesting) 320

I've heard of similar things. For example, this guy sending air, water, and sugar.

As long as you have the right safety labels, there shouldn't be a problem. The guy in the above link screwed up with the "Rocket Fuel" label.

If they were sending a mill, why did they say "It's a machine for making guns"? IT could have been labeled as coming from "GG Machine Works", and if they needed a declaration of contents it's just "a CNC machine."

I can't even think of the countless things I've shipped. Usually I'm only asked on International shipments for the customs declaration. If I explain what's in them, it's too complicated, so they just put "computer parts" or "tools".

I've received some things that surprised people, like ammunition (legally marked and shipped as such, handled by UPS), a truck front axle, and all kinds of weird smaller things.

Comment Mostly Republicans trying to legalize. (Score 1) 398

This is only news to those who have had their head in the ground, listening to fox news and government shills.

I've noticed that it seems to be mostly Republicans who are putting up the legalization legislation trial balloons.

(Can't speak about Fox. I don't follow 'em all that much since, during the (especially the last) presidential campaigns, they proved the right-hand side of their claimed "fair and balanced" coverage consisted of flogging the Neocon faction and ignoring or slamming the others - especially the "Liberty" faction and Ron Paul.)

But I haven't checked Thomas.gov to see whether this is accurate, or just an artifact of the media only covering it when a Republican does it, on the "man bites dog IS news" principle.

Comment Re:The Summary Claims Effect is Cause (Score 1) 33

The Aurora Borealis are not "are an electromagnetic phenomena that can adversely affect ..."

(Putting on my grammar policeman cap, and explicitly not addressing Rob's point...)

I DO wish the author of TFA would correctly use the singular and plural
of "Phenomenon".
  - Phenomenon: One (class of ...)
  - Phenomena: More than one (class of ...)

The Aurora Borealis are a set of related phenomena, involving glows from ionization of various atmospheric elements at different altitudes, various of the Van Allen belts being pumped up with new particles and/or pushed down by magnetic field distortion from solar wind variations, upper-atmosphere currents, ground currents, and I don't know what all else. The author's apparently inconsistent use of the singular and plural makes it difficult to understand what he meant.

Comment What's "darker" about privizing services? (Score 0) 65

Forbes article last month explored some of the potentially darker sides of open data â" from ... to making an argument in favor of privatizing certain government services.

What's "darker" about privatizing government services?

Government is FORCE. When it "provides a service" it uses that force to make everybody using that sort of service use THEIR service, which they do THEIR way, and prevent anyone from providing the equivalent service in a possibly better and/or less expensive way.

We're seeig this now with Obamacare. But this has been going on since there have been governments. One of the earliest examples with THIS government was the suppression of alternative mail services.

Now there MAY be a FEW services where privatizing them are an issue. But we can discuss those on a case-by-case basis. For the bulk of them, why should the government even be involved?

Slashdot Top Deals

Intel CPUs are not defective, they just act that way. -- Henry Spencer

Working...