Slashdot is powered by your submissions, so send in your scoop

 



Forgot your password?
typodupeerror
×

Comment Re:Wait a minute... (Score 1) 324

That's an argument for having the browser try HTTPS first, optionally falling back to HTTP if HTTPS isn't available. That's fine by me. It's not an argument for disabling capabilities of HTML/Javascript/etc. just because the transport isn't encrypted. It's also not an argument based on security but on privacy, and there's plenty of privacy problems that exist regardless of whether the connection's encrypted or not (eg. web bugs placed in advertising coming from servers in the site's domain (but not operated by the site and not on the site's network) that then use plain query-string parameters to relay data to off-site servers bypassing browser origin checks).

Comment Re:Wait a minute... (Score 4, Interesting) 324

The problem is that requiring HTTPS doesn't make sites more secure. It prevents an attacker who can't obtain a legitimate SSL certificate for the domain from running a mid-transit MITM attack, nothing more. The biggest problems seem to be a) phishing attacks that convince the user to visit a rogue site eliminating the need for MITM, b) local system compromises (client- or server-side) that have access to the cleartext traffic and don't need an MITM, and c) rogue CAs who issue certificates for domains the recipient isn't authorized for which allows for mid-transit MITM with HTTPS. The first two can't be mitigated by anything other than smarter users (HAH!), and mitigating the third requires massive changes to certificates so it's possible to determine whether a certificate belongs to a given site without depending on anything in the certificate and without depending on the CA having validated the recipient.

Comment HTTP insecure? (Score 1) 324

Doesn't that depend on the configuration and purpose? If the HTTP server's running on my own machine and the URL is "http://localhost/...", am I automatically insecure because I can't get an SSL certificate for "localhost"? And how would an attacker not already on my machine exploit this?

If I can't test the full capabilities of a Web site because the browser won't let me, I'm going to have to switch browsers and relegate Firefox to testing-only just like IE is currently.

Comment Re:Why such crap? (Score 1) 263

yes, a netbook running a locked down version of linux, with NO update ability, signed binaries and (to be even more sure) put the os in ROM. require some kind of key to do any writes at all to it. have dual sections of rom for redundancy and crc check them; if one is bad, switch to the other.

OK, lets pretend that exact configuration is used.

Now the airline manually signs and offline installs the updated manuals, resulting in the same exact breakage you see here, and in the same situation.

Your solution just resulted in the grounding of the aircraft.
Except your solution will take much much longer to install the fixed data back.

The only real difference is now it is you personally and Linux that will unfairly and incorrectly get the blame instead of Apple.

Comment Re:Why such crap? (Score 1) 263

Why would anyone use cheap crap such as an iPad in a professional passenger airplane? How stupid is that?

For the same reason, and just as stupid, as using any other tablet such as Android or Surface, or even the original paper books.

In other words, your solution (which ever one it may be) has the exact same problem as iPad, so is a broken stupid solution.

Yes even paper. If I ripped the pages out of the paper manual and replaced them with chewing gum and hardcore porn (aka a fight club styled update), the situation would remain the same and the plane just as grounded as now.

Either beef up your trollskill some, or learn how to computer. You failed miserably at both.

Comment Re: Yeah.... (Score 1) 193

OTOH aside from existing regulations aimed at the business side, I don't see what is wrong from that persons perspective. In principle I have no issue with a service that allows people to, on a part time basis, give other people rides for a few bucks to make some spare income.

Why does everything need to be professional? I think the problem with amateurs providing services are mostly overblown.

Comment Re:Yeah.... (Score 1) 193

Believe it or not, and I know not everyone complies with this, but I believe external markers are required (here in MA) on ANY vehicle with commercial plates. Note, of course, that no Uber driver is going to have commercial plates, and really shouldn't, generally people don't need commercial plates when they supply their own personal vehicle for the job. (imagine what that would do to pizza delivery)

Comment Re:Why the surprise? (Score 2) 177

Here is a nickle, kid, go tell someone who never had to go find another system to run a web browser on because the latest updated broke his XF86Config. (a version of which happened again recently when I wasn't paying attention and I allowed an update to uninstall the ati graphics driver packages....oops, always read those "to be removed" lists)

Every distro out there has managed some type of update breakage at some point, and if you run a full desktop you pretty much can't avoid it.

Though I did switch back to Debian myself because I didn't like the direction they were going with the Desktop and noticed Debian release cycles had shortened significantly since I switched.

Comment Re:Cool world (Score 1) 216

My father had a hunting story about a gun like that, tho it was a single shot....

"....again I slowly put a round in the chamber and slowly lifted the gun back up, and for the third time raised the barrel even higher, this time I was just about aiming into the sky, I pulled the trigger.....and finally....grazed the deers belly and he ran off....if that was my gun, I would have wrapped it around a tree"

Comment Re:Here _I_ come? (Score 5, Insightful) 216

This, and so much this for just about every gun related cry for regulation.

I keep seeing people talk about high capacity magazines, assault rifles etc etc every time gun violence comes up. Oh we need to ban this, we need to background check that.... never mind that they are whipping themselves up into a froth about the least common categories of gun violence.

  In the end, real crime, even the real heinous shit, tends to be done with either hand guns or hand held melee weapons. Almost nobody uses rifles for crimes, more hammers are used to kill than rifles....all rifles, assault or otherwise....but nearly every gun control nutter I talk seems to think every gun owners secret dream is to carry around an AK-47 all day.

In fact, so far the only real connection between gun laws and crime is, places with crime problems tend to make more gun laws as a result.... which doesn't do shit about their crime problems. The whole issue is only popular because its an easy sound bite "solution", you know, the kind that "always work" like banning drugs.

Comment Re:Cool world (Score 4, Informative) 216

This instantly reminded me of an 80's movie called Runaway with Tom Selleck, who is a part of a special task force to hunt down and destroy malfunctioning "runaway" robots.

Their handguns could lock on a target and program the bullets just before firing to stay on their target, although they looked more like miniature rocket based missiles with their own tiny engines and guidance fins.

I remember a number of the larger scenes giving a bullet-point-of-view type thing as the target goes running away and try to evade the shots by going around corners and obstacles, even purposely missing other people, before embedding into their target and exploding.

http://xirdalium.net/2012/02/1...

The above link has a picture of the bullet from this movie, and even goes on about a real prototype from Sandia National Laboratories back in 2012

https://share.sandia.gov/news/...

I wonder how much these two groups worked together on these.

Comment Re:Brilliant! (Score 1) 99

Hardcore is without mods? Lol! Depends on your mods man.

I was playing since before science mode existed so, by the time career came out, I found I could just monkey stomp the tech tree. I tend to run mods which add new game mechanics that add challenge. For example, Tac Life Support which means kerbals need supply of water, food, and oxygen and electricity.... that is one of the few things that kept me from early moon missions (solar panels are not available right away).

Construction time to add ship build time mechanics, Deadly Reentry for heating effects (might be obsolete now, at least partially), FAR for better aero (I hear its getting even better), RemoteTek to simulate antena range and signal delay, scansat for mapping/scanning features, cacteye for telescopes, realchute for better parachutes, stage recovery, KIDS to make thrust/throttle/ISP/altitude relationships to work more correctly (default KSP makes fuel consumption vary with atmospheric pressure instead of thrust, so throttle input relates to thrust not fuel usage, KIDS has options to fix that) ....then once it is hardcore and good top it all off with Astronomer's visual pack to get clouds, auroras, dust storms, etc to make it real pretty.

Comment Re:Awesome! (Score 1) 99

Its not missing, its intentionally ignored for the sake of gameplay. Getting normal gamers up to speed on stable orbits with 2 body physics induces enough rage quits. The ability to easily have stable orbits is a bit more important than the neat tricks you can do with a better gravitational model.

I would love to be able to pull off tricky low energy tranfers and use multi-body gravitation to send ships on slow tours of the solar system for very little fuel costs, or put a satelite in a halo orbit.... fun stuff but.... nothing that I would want to trade stable orbits for.... the simplified physics makes it easier to get to a point where you understand it.

Comment Paid mods are a bad idea (Score 4, Interesting) 239

I really think paid mods are dumb, they will do little good other than encourage new modders, but, it will do it by giving them false hopes and setting them up for an antagonistic atmosphere. Look at Kerbal modders now for an example. They work together. There are few "competing" mods, most work with eachother, and when you see two modders working on similar or related mods meet in the forums it is always a "Oh you are the guy who does X? Awesome how did you do Y?" and they have a great conversation and work together a bit.

Enter paid mods, and they would have incentive to...not do that. You would have modders who just copy others and release trying to make a buck, you would have people trying to obscure code, and hide their "secret sauce".... all.... for a pittance that will never sustain them.

I run 30 kerbal mods now (and a similar number of skyrim ones). If mods started going paid, theres maybe 2 or 3 on each I would even consider continuing to use if they were even a $1 or 2....in fact, it would massively increase my resistance to even wanting to try a mod.

So the main thing it will do is mean a lot less mods get used.

Comment Re:I See it made it to GoG.com DRM-free (Score 1) 99

Whats the difference? I let steam update it, and then copy it off to another directory for mod installs so I can keep a pristine copy around. Sometimes I make two copies so I can run different mod sets.

I see no issue here, plus I have steam already so why go anywhere else if I already use it? Don't really need an installer.

Slashdot Top Deals

"If I do not want others to quote me, I do not speak." -- Phil Wayne

Working...