Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×

Comment Re: For that, you'd have to do a different attack (Score 1) 336

I don't think you understand how amplification attacks work.

I wrote advisories on that more than 10 years ago, so please go ahead and lecture me.

Your home network should not allow a request with an IP that doesn't belong to it out. If I'm the router that connects 1.2.3.0/24 to the Internet, I shouldn't put a packet that claims it originates from 5.6.7.8 on the wire.

The only places where a package that isn't part of my network should be routed through is when my network is a transit network.

Comment Re:Rubbish (Score 1) 336

I know from my own experience how right you are, but that, exactly, is the problem. This "it didn't crash in 10 minutes, ship it" approach is utterly horrible. It's become industry standard instead of being taken out back to be shot, and that is a really serious problem.

People shouldn't be used to computers crashing - they should demand that they don't do so.

Comment Frankly... (Score 5, Insightful) 552

...when every programmer (and tech support person, and manufacturing person) in the US can get a job, that's the time for US operations to be looking for foreign help.

But since age, health, formal schooling, in-country location, and credit score are widely and consistently used to deny highly skilled US programmers jobs -- I am very confident in saying that Mr. Graham has not even come close to identifying the "programmer problem" from the POV of actual US programmers. All he's trying to do here is save a buck, while screwing US programmers in the process.

Do it his way, and the US economy will suffer even further at the middle class level as decent jobs go directly over our heads overseas, while, as per usual, corporations thrive.

This is exactly the kind of corporate perfidy that's been going on for some time. Graham should be ashamed. He represents our problem. Not any imaginary lack of US based skills.

Comment Re:Perler Bead Sorting? (Score 1) 85

The major problem is that the cheapest way to get beads is by the tub. This is - as you might expect - a tub of various colors of beads... all mixed together. Want a black bead? You need to hunt through the tub to find one. Or you can do what we do and manually sort through thousands of beads and group similar colors together in another container.

The only thing you really need to know is - do you think they actually make them in mixed colors? Nah... they make a batch of a gazillion red beads, then blue beads, then green beads, then yellow beads... the tub is just their mix to maximize sales, they know that you'll end up with leftovers and will buy more expensive pure color packs to round it out. It's like how there's a silent conspiracy between hot dog sausages and hot dog bun makers, they avoid matching numbers so you'll always go out shopping more to make use of the leftovers. It's not exactly a coincidence when you end up with a tub full of colors you don't want.

Comment Re:LOL fascists (Score 4, Insightful) 62

It might be news to you, but capitalism - at least in the Russian variety and I wouldn't hold my breath on the US variety as of late - means a lot of the wealth has been accumulated on a few hands. I'm not sure that people are worse off on an absolute scale, but there's actually quite many feeling that they're worse off compared to everybody else. In Greece for example SYRIZA - the "Coalition of the Radical Left" - has been up to 27% in the polls lately. That's the birthplace of democracy, not some shithole that's never known anything different. Which I suppose is nicer than the way Germans reacted in the 1930s to the economic buttfucking of the Allies, I guess. In a dysfunctional economy most everything will seem like it's worth trying and they can be very productive in unconventional ways. Like the German war machine that nearly broke Europe's back in WWII was build by a country allegedely on the brink of bankruptcy. But money is money and guns in guns and what the lacked in the former they got plenty in the latter. Don't underestimate Russia and China just because they're not western.

Comment Re:Actually, he's right (Score 1) 552

"so where do we get the next generation of major league players from?"

Brown & Sharpe (now a tiny little division of Hexagon AB) used to be the preeminent machine tool manufacturer in the US.

One of my previous bosses was told by one of the Sharpes that the day the company died was the day they stopped training apprentices.

Short-term-profits-at-any-cost amounts to eating your seed corn and then sowing the ground with salt.

--
BMO

Comment Re:They're assholes. (Score 1) 336

This is true, but the issue is that is dumb! You really should be able to unbox a toy on Christmas morning have it work without going out the Internet and connecting to some account.

Maybe not all the functionality can be there, but functions that don't naturally require network access should not require network access.

As it happens, my wife bought me a PS4 for Xmas -- a massive upgrade over my 15 year old original PS2. It came in the box with GTA5 (on disc), and a coupon for a free digital download of another game.

It's been a PITA that PSN has been offline. There are a lot of features and functions built into the system that rely on online functionality, including for some dumb reason accessing the built-in web browser. However, playing GTA5 hasn't been an issue -- I just popped the disc in, waited what felt like an eternity while it installed itself (it didn't give me a choice, and warned me it could take up to an hour), and I was off and playing. All without having been signed into PSN.

In essence, the system worked exactly as you described that it should. A single-player game on disc loaded and ran just fine while PSN has been offline. Not all the functionality was there, but the major function that doesn't require network access (playing GTA5 in this case) has worked flawlessly.

Yaz

Comment Re:Knuth is right. (Score 3, Insightful) 149

Discreet mathematique are the basis for computing

Not at the semiconductor junction level.

You are confusing computing with computers. Indeed, a "computer" used to be a human being implementing algorithms with a mechanical adding machine, and then were tube-based electrical systems, and in the future may use something wholely other than semiconductors; computing, however, remains the same. A bubble sort is still a bubbble sort.

Comment Re:Pot, Kettle, irony (Score 1) 360

If the main text of a religion isn't a reliable guidebook to that religion, how can we determine if anything is?

Obviously, we can't.

What made you think we could?

All major (and most minor) religions present huge diversity. Within Christianity, the bible is taken as everything from vague metaphor to the "inerrant word of God." The Koran for Islam, the same. Buddhist practice ranges from meditative to non, from vegetarian to non, from rigidly scientific to the most laughable crystal-gazing nonsense you've ever heard of. New agers.... that's a basket so broad I don't even have a clue as to what it really means, although I have to say, I've rarely come away from someone's description of their new age ideas thinking "wow, that made sense." OK, actually, never. But I figure it could happen. :)

In addition to actual sect differences, there are practitioner differences, and they range all the way from non-believers who are there for the social aspect, to rigid adherents to every jot and tittle in every book (and some, like the Catholics, have quite a few books.)

For my part, I figure, if I want to know what someone thinks, just ask them. Unless I have specific relevant evidence, I don't assume people fit into standardized boxes. I have found that to very rarely be true.

Comment Re:For that, you'd have to do a different attack (Score 1) 336

spoof the IP address of your target (...) it proves that the DNS protocol itself is beyond repair

No, it proves that the network you are connected to is braindead because it still allows IP spoofing.

And that EVERY company on the net is susceptible to something like that because unlimited bandwidth does not exist.

It used to be really easy to knock someone off the Internet. It's not so easy anymore. For some of the really big targets, being able to muster the bandwidth alone would be an impressive demonstration of power. Keeping them offline for more than a few seconds while their Anti-DDoS countermeasures deploy would be something that few players smaller than a nation state level can pull off.

MS and Sony have a security that matches the opaqueness of an erotic dancer's dress

Not really. I hate them as much as most people with three working brain cells, but they've both done quite a lot about security. It's just not enough and - like every company - they make decisions to not invest in some security measures because the ROI simply isn't there.

Comment Re:Rubbish (Score 3, Insightful) 336

Nonsense. On their gaming systems you are unlikely to find any data that the companies would consider valuable. And 10+ years of experience show that "oops, we leaked customer data" isn't really a game-changer.

But cries from customers can be. Denying them the joy of their freshly gifted gaming console can be very powerful. It's not the nice way, definitely not, but it makes headlines.

I doubt it's going to change anything, because customers are too used to computers not working. That is the real damage that 30 years of Microsoft dominance have done to the world.

Comment Why Kozmo sort of succeeded (Score 1) 34

Ok, the company as a whole tanked rapidly, as one might expect, but according to friends who lived in its territory at the time, one reason the service was so popular was that one of the things it delivered was weed. The company itself didn't sell it, but the drivers did that themselves, so they were happy and the customers were happy, and there were an awful lot of deliveries that had only one random item on the books (plus weed.)

Comment Skype Call Setup and Media Path Protocols (Score 1) 71

Skype used a server-based system to set up calls, going through supernodes if possible (so it was semi-P2P), which handled subscriber lookup functions and also NAT transparency (which was the big thing that Skype did better than standard VOIP protocols such as H.323 and SIP.)

For the actual media path, if it could go directly, it would, but otherwise it would carry the call through supernodes (again, the NAT traversal problem.)

These days it seems to be mostly central servers, partly as a result of Microsoft buying them and partly because there was a lot of corporate pushback against supernodes using your corporation's bandwidth to complete somebody else's call.

Slashdot Top Deals

All seems condemned in the long run to approximate a state akin to Gaussian noise. -- James Martin

Working...