Please create an account to participate in the Slashdot moderation system

 



Forgot your password?
typodupeerror
×

Comment ALL CAPS (Score 1) 362

There is a major difference between chat, email, etc in ALL CAPS and filling out a form in ALL CAPS. I often times fill out forms in all caps due to the fact that many are scanned and OCR tends to work better with caps than lowercase letters. This is especially true for hand-filled forms. In fact I have filled out forms that *explicitly ask* you to use all caps when filling them in.

Submission + - Fedora 19 to Stop Masking Passwords 1

PAjamian writes: Maintainers of the Anaconda installer in Fedora have taken it upon themselves to show passwords in plaintext on the screen as they are entered into the installer. Following on the now recanted statements of security expert Bruce Sheiner, Anaconda maintainers have decided that it is not a security risk to show passwords on your screen in the latest Alpha release of Fedora 19. Members of the Fedora community on the Fedora devel mailing list are showing great concern over this change in established security protocols.

Comment Re:It's called the key (Score 3, Interesting) 1176

Even on older cars the default state of the clutch is engaged. Most cars have a hydrolic clutch which can fail due to a burst hose or failed seal, etc. Other cars have a manual clutch which is basically just a cable that can fail from fatigue (the clutch cable breaks). In either of these cases if the clutch fails it is left *engaged* which means that you cannot release it. The only case of a clutch failing and not leaving the engine engaged is when the clutch plate itself is worn out and then you get what is known as the "clutch slipping" (and eventually not engaging at all).

Comment Re:More capacity, but what about I/O? (Score 1) 293

It's not as bad as it may seem. With disk speeds up to 15,000 rpm and higher areal densities means that data can be pulled off pretty fast. If HDD manufacturers were to implement technologies such as multi-track disk heads then IO speed could increase a lot more and would be limited mainly by seek times. What a lot of companies are doing nowadays is using 2" (laptop) drives in their servers, packing a lot more drives into the space, which means more smaller disks and therefore less to rebuild in the event of a failure as well as a lot more disk heads to increase IO even further (and help a lot with those nasty seek speeds when trying to access data in 200 different files at once). What we're really left with as the limiting factor is the electronics and if all else fails that can be dealt with by multiple parallel channels (first we had PATA, now SATA, anyone for PSATA?).

So yeah, Disk IO is a bit of a problem now but there really is quite a lot that can be done to eliminate that issue.

Comment Re:Have it put into writing. (Score 1) 666

Exactly what driver have you found that will run on RHEL but not on the same version of CentOS? CentOS is fully package and binary compatible with RHEL and they take great pains to make it so so I would be very surprised if there is any RHEL package or driver that won't work with CentOS just as well, or vice-versa for that matter.

Comment Re:Email is public anyway. (Score 2) 554

There is, it's called TLS (which is the same technology that modern SSL uses, so the same encryption used by https) and is implemented by STARTTLS. It establishes a secure connection between two email servers and sends the email off secure between them and it suffers from the following pitfalls:

1. It only encrypts the data stream between two email servers that support it, or between the email server and client.
2. The email is still decrypted and stored plaintext in the queue of any given email server, and is subject to reading by the admin of any server in the chain.
3. It relies on each email server in the chain supporting TLS (most do, but there are still old ones out there that do not and the ones that do will generally fall back to unencrypted email if need be to communicate with an older server).
4. While it is possible to purchase and verify certificates between two servers no one does because a lot of servers use self-signed or invalid certificates, so verifying them would simply cause a lot of email communications to fail, thus it is susceptible to a man in the middle attack.

The best way to secure your emails has been and still is to use PGP (and before someone says it, that includes GPG), which secures the email end-to-end and so it is not subject to any snooping or attack in between with the exception that the envelope sender, recipient, and email headers still have to be sent in plain text. Of course this requires that both the originator and recipient of the email both have PGP support installed on their email clients and it requires the maintenance of PGP keys be done by the end-user, so it is more complicated than the vast majority of email users are willing to commit to.

Comment Full stack (Score 2) 554

Postfix 2.8.x for the MTA (2.8 has the new postscreen feature which is great to help with SPAM control)
Dovecot for IMAP POP3 as well as for SASL AUTH
Roudcube or Squirrlmail (take your pick) for webmail
PostgreSQL or MySQL for database backend
Spamassassin to catch what SPAM is missed by postscreen.
ClamAV to scan for viruses
Amavisd-new to interface psotfix to spamassassin and clamav
PostfixAdmin for managing your domains and accounts from the web.

Use virtual domains with postfix "virtual" for the delivery agent, use maildir format for your mailboxes (mailbox path needs to end in "/"). Make sure and use the submission port (587) for your outbound emails, not the SMTP port (25) which should only be for inbound emails. Don't use SMTPS (which works over port 465) unless you have to support a really old email client that doesn't support STARTTLS (which works over the submission and smtp ports). Stitch all the pieces together and if done right you'll have a great email system like all the pros use.

If you need help come into #postfix on freenode IRC network.

Comment Re:2 questions for the TSA (Score 1) 570

Actually America puts its own screening points in foreign airports for flights bound for the US. I'm not fully certain if they had this for the flight with the underwear bomber, though.

Also, while this is the case, it's usually just an additional passport check.

Slashdot Top Deals

If all else fails, lower your standards.

Working...