Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×

Comment Re:Are we, America, butthurt? (Score 3, Insightful) 247

This might be part of an answer to your question: "Ohio lawmakers want to limit the teaching of the scientific process".

In other words, you live in a country where being an ''egghead'' (your term - not mine) is not respected. As a matter of fact, you live in a country where a large percentage of the population still thinks some invisble man in the sky has created the entire Uinverse in 6 days, and the Earth itself might well be 6000+ years old (instead of 4+ billion years old).

Need I say more? Case closed.

Comment OPSEC (Score 5, Insightful) 116

If you are a Tor programmer, and if there are really NSA/GCHQ insiders who actually help you to correct bugs... For Pete sake, just keep quiet about it!!!

Now, both agencies will have to initiate a mole-hunting operation, and you will lose these valuable insiders!

On the other hand, it may paralyze these agencies for months, maybe even years, while they try to figure out who has been leaking invaluable bug information back to the Tor project.

So it might be a wash. Either way, it also probably means that people inside the Puzzle Palace and the Donut are beginning to realize that enough is enough, so that is also encouraging.

Comment What could possibly go wrong? (Score 5, Interesting) 174

Instead of potentially dangerous experiments, may I suggest the oldest known and proven solution to global warming?

This is extremely complicated, so please bear with me for a minute or two:

Plant. More. Trees.

Don't believe me? Fine, don't take my word for it. Heck, even that bastion of free enterprise, The Economist got behind that idea!

So, why is not implemented on a large scale? Because planting trees is not techonologically "sexy" - it is well known, has been well known for centuries, and, for maximum effect, would require rich countries to invest serious money in poorer countries, to save the rainforest (which is where tree-planting would have maximum impact). And we cannot allow these natives to get money to do something as simple as plant a tree, right?

In other words, the wealthiest have decided it is a lot more fun to throw money at dangerous or even foolish and ineffectual solutions rather than provide for jobs and development in the poorest countries of the world -- precisely the countries that will suffer the most due to global warming. Make of that what you will.

User Journal

Journal Journal: Stan Lee is an agent of Thanos - or maybe even Thanos himself.

Warning: this is long and completely weird. Almost spoiler-free, but there might be some in there as well.

Saw Guardians of the Galaxy yesterday and it was pretty much what I expected: funny and cartoonish, great action and great special effects (but, really, when was the last time you saw a movie with BAD special effects? But I digress.)

Comment Re:what environments allow USB boot? (Score 2) 132

Anything that has a USB port, really.

Essentially, anything that is run by NGOs or individuals.

Sure, in a corporate or governmental/military environment, USB ports are usually a big ''no no'' but some of use like them USB gadgets.

(Yes, before anyone ask, there has been infiltration through contaminated USB drives and keys ''abandoned'' in strategic locations...)

Comment Re:Shocked I am! Shocked! (Score 1) 151

I've spent the past 5 years of my life fully employed in the design, creation, testing, and deployment of secure RNGs.

Citation needed. Seriously, this is /. where everyone is a world-class programmer (except me, of course).

The world is full of bad PRNGs, NRNGs, CSPRNGs, DRBGs, TRNGs and any other form of RNG.

I will grant you that one.

LibreSSL doesn't have a leg to stand on. A good secure RNG will return unpredictable output.

Bzzzzt! Sorry, you lose. As I have already said, this is not a LibreSSL problem - it's a Linux PRNG problem. Unless I am mistaken, the same issue is non-existent under OpenBSD, because it's PRNG is different from Linux, better seeded and because PIDs are randomized under that OS.

We know how to do these things. It isn't trivial, but it isn't hard either.

You contradict yourself: if programming PRNGs is, let's say, a medium difficulty task (neither trivial nor too hard), how come you have spent years designing and programnming PRNGs (your words, not mine) and how come the world is full of bad bad bad PRNGs? Surely, by now, everyone would have agreed on a reasonable implementation?

The truth is, PRNGs are HARD to program, because computers are not good at generating truly random numbers. Period. The best implementations all rely on some form of hardware generator. But don't take my word for it, go ahead and read this instead.

Allowing someone to extract predictable behavior from the service end of a security library is a gross failure and an exposition of incompetence.

As opposed to the magnificent job OpenSSL has done all these years, with information leakage, bug reports that went uncorrected for years and accumulated cruft for such modern OS as VMS, DOS and Windows 3.1?

I think you need to tone down the hysteria a notch right here.

Slashdot Top Deals

Real Programmers don't eat quiche. They eat Twinkies and Szechwan food.

Working...