Follow Slashdot stories on Twitter

 



Forgot your password?
typodupeerror
×

Comment Re:Specious Argument (Score 1) 113

It was the lack of altruistic eyes scrutinizing it.

That was a secondary effect. People who might want to analyze code want to do a good job, and there's a lot of code worth analyzing.

To do that job there are tools that help with that analysis. OpenSSL's use of non-standard internal memory management routines makes it resistant to use of such analysis tools.

Is it impossible for a code auditor to keep everything in his head? No, but it's tough and error-prone. Some people have found OpenSSL bugs before, of course, but there are ways to make it easier for auditors to stand a fighting chance.

That's largely what the OpenBSD team is doing - ripping out all of that unneeded memory management crap, killing OS/2, VMS, and MacOS7 support code, etc. The payoff should be more people looking at it, but it sure wouldn't hurt for some companies that save millions by using OpenSSL to throw the team a few bones once in a while to make it more regular. Or hire their own internal folks to do the same, if that would work out better.

Comment Re:Too good to be true? (Score 1) 196

$300 for the 16 GB model and $350 for a 64 GB model? Knowing what Samsung charges for comparable devices

Yes, but the recent build estimate based on tear-down for the S5 was $255 or so.
    That gives these guys in China almost a hundred bucks, which is a good margin for any business. Samsung is just making money hand-over-fist, but there's plenty of long-tail to profit in.

Comment Re:But streaming is easy! (Score 1) 200

You are paying for streaming. It is not necessarily the DRM. On Hulu it is the need to stream a bit, then make sure the user experience is interrupted for at the least the possibility of commercials. On Netflix, it is so that they can keep the price lower by not competing with people the people who are willing to pay for rental of purchase to keep a local copy.

If bandwidth cost is an issue, then perhaps the solution is to rent or purchase the content. Maybe if aero is avaible in your market, this might be an option. I don't know if they allow buffering of a whole show. Rent or purchase may be competitive depending on the data costs.

Comment Re:How Can We Create a Culture of Secure Behavior? (Score 3, Interesting) 169

Or more succinctly: incentives matter. What incentive does an employee have to keep data secret? Will he be demoted in rank and lose pay if he does something stupid?

What incentives do companies have to maintain a secure infrastructure? Will their insurance policy hold them liable if they do not?

I'm just in the middle of polishing up a puppet module to deploy a bunch of new certs on my infrastructure. My incentive is that my reputation looks pretty bad if I advise clients to be secure but my own infrastructure is not up to snuff. That's really an incentive to avoid lost opportunities, I suppose.

Google is talking about scoring up pages that are secure. Another very wise incentive.

Let's keep this ball rolling: what other incentives can we offer or explain?

Comment Re:education doesn't work (Score 1) 306

You know, it is not education. It is that too many people think that IT means you but a PC, buy a site licsense for everything MS, and the teach Office or maybe ISS.

Critical thinking skills are taught, at least at the high school level, in course most people don't want to take. History where you read and write papers on what is read. Philosophy where formal logic and general help you develop the ability to judge and make an argument. Literature where you can learn to think creatively to join ideas that were not joined before. Engineering and hard science classes where you actually can build devices. Maths where you learn the formal methods to process information.

Honestly, I see way to much time teaching MS Office and other applications. If those things need to be taught, they need to be embedded in something rigorous.This even goes for teaching coding.

Comment Re:What I want to know is ... (Score 4, Insightful) 239

Seriously, airplane security is clearly full of holes and the sham of passenger security checks is just that, a sham meant to make us 'feel' safe while wasting our time and shoveling tons of dollars to the TSA.

Well, any good government repression solves multiple problems, but the point of TSA is behavioral conditioning - giving away tons of money to political cronies is just a bonus.

Comment Re:Heck yes... (Score 2) 306

If you're willing to pay you can hire good people. It's just that the big publicly-owned Silicon Valley companies can use their funny money to pay more than you can.

If you go to places where people are living for quality-of-life and not just money, you'll find more of the competent folks. The competent folks in sucky-places-to-live have all moved to the aforementioned corporations or nicer places to live.

Comment Re:Please justify $5 for one rental (Score 1) 137

Please justify the $5 cost to rent your film. I can rent your latest superhero blockbuster over the weekend for $2 from Redbox. I can own Louis CK's latest show forever for $5. Why is your content so much more expensive?

Because people are willing to pay $5 to watch it now. If Whedon's company is smart, the price will go down over time to pick up the folks who won't pay $5 to watch it out of the gate.

If it goes down to $2 in a year, then to me that's better than 100% RoI in 1 year, so it's a great deal to me to watch it next year. But some people value being able to be the first to blog about it, chat about it over the water cooler, etc. I watch TV on Netflix 2-3 years after it's been on a network (because cable & satellite are way too much money), but I realize I'm very atypical in that view.

Check out some stuff from Menger if you want a more academic treatment.

Slashdot Top Deals

Today is a good day for information-gathering. Read someone else's mail file.

Working...