Catch up on stories from the past week (and beyond) at the Slashdot story archive

 



Forgot your password?
typodupeerror
×

Comment Re:Effect? (Score 4, Insightful) 385

somehow throw a spanner in the works and cause a massive cost/delay to the government.

Are you asserting that congress would have actually gotten anything done during that time?

Yes. Congress is typically quite industrious at violating the Constitution and destroying civil rights.

I wish the partisans would STFU and realize this is a civil rights issue, not a partisan issue, for *everyone* regardless of political party, ideology, and/or religion (or lack thereof).

For those kool-ade drinkers defending the administration regarding domestic spying, do you want your political enemies to have this power to wield when they inevitably gain office?

Strat

Comment Re:US Proposes Tighter Export Rules ... (Score 1) 126

Paranoid, much?

Those that would mistake paranoia with basic observational skills referencing events over the last 60 years are likely be on some type of 'agenda'. What some call paranoid, others are calling it 'having a big mouth', but you don't see that part now do you?

Don't bother. Just check Dave420's post history. He's drank so much of Leftist/Social Justice kool-aid that California is considering sanctioning him for the amount of water he wastes.

Strat

Comment In particular, NO redundancy. Reliability drops. (Score 5, Informative) 226

Losing data goes with the territory if you're going to use RAID 0.

In particular, RAID 0 combines disks with no redundancy. It's JUST about capacity and speed, striping the data across several drives on several controllers, so it comes at you faster when you read it and gets shoved out faster when you write it. RAID 0 doesn't even have a parity disk to allow you to recover from failure of one drive or loss of one sector.

That means the failure rate is WORSE than that of an individual disk. If any of the combined disks fails, the total array fails.

(Of course it's still worse if a software bug injects additional failures. B-b But don't assume, because "there's a RAID 0 corruption bug", that there is ANY problem with the similarly-named, but utterly distinct, higher-level RAID configurations which are directed toward reliability, rather than ONLY raw speed and capacity.)

Comment Re:US Proposes Tighter Export Rules ... (Score 1) 126

Hot air, nothing compared to the US self imposed brain drain caused by fucked up policy, gamed and broken system. If they don't want to see things that are better in the hands of other countries then they should rethink the way things have been going in the US for the last 60+ years. The policy of 'keeping the people stupid' is not going to produce a superior product in any sector anyway so where are these idiots coming from on this?

An economic/social collapse is what those in power need to roll out martial law and complete the final stages of the "fundamental transformation of America" to a police state.

Strat

Comment Re:North Pole (Score 4, Funny) 496

The north pole and a circle of lat 1 + 1 / (2 * PI) north of the south pole.

Actually the answer is the north pole and a circles of lat 1 + 1 / (2*pi*n) north of the south pole where n=1,2,3,4... etc. plus there is a slight correction because the surface of the earth is not entirely flat and so the circumference of a line of latitude is actually less than 2*pi*s where s is the arc length from the line to the south pole for the distances involved it would probably be negligible compared to surface defects.

See, if you gave the above answer, you would get a SpaceX job as an engineer due to the detailed, exact nature of your answer. Or maybe a job in their legal department.

If you just casually said "the North Pole," you would get a SpaceX job as a manager of engineers.

Comment Re:I laid out the facts, horse will not drink (Score 1, Funny) 102

You haven't laid out anything other than a bunch of baseless accusations. You should write a book about it, I'm sure it'll sell.

Bwaahahaha!

"I didn't do it. Nobody saw me do it. You can't prove anything"

It's the Bart Simpson defense!

[Beetlejuice voice] And it just keeps getting funnier *every* *single* *time* I see it! [/Beetlejuice voice]

How about you just stick your fingers in your ears and go; "Lalalala, I can't hear you! Lalalala!".

Too funny!

Strat

Comment Re:North Pole (Score 1) 496

It's definitely the north pole. If you start at the north pole and walk one mile south you'll be standing on some ice one mile from the pole, if you then walk west you'll actually be walking around a circle (look at lines of latitude, that is East-West lines on a globe near the poles). If you then walk 1 mile north you'll be right back at the north pole.

Took me longer to write the explanation than to figure it out, honestly a fifth grader could figure that out.

Comment NetUSB=proprietary. Is there an open replacement? (Score 2) 70

It happens I could use remote USB port functionality.

(Right now I want to run, on my laptop, a device that requires a Windows driver and Windows-only software. I have remote access to a Windows platform with the software and driver installed. If I could export a laptop USB port to the Windows machine, it would solve my problem.)

So NetUSB is vulnerable. Is there an open source replacement for it? (Doesn't need to be interworking if there are both a Linux port server and a Windows client-pseudodriver available.)

Comment Opportunity to detect MITM attacks? (Score 4, Interesting) 71

I skimmed the start of the paper. If I have this right:

  - Essentially all the currently-deployed web servers and modern browsers have the new, much better, encryption.
  - Many current web servers and modern browsers support talking to legacy counterparts that only have the older, "export-grade", crypto, which this attack breaks handily.
  - Such a server/browser pair can be convinced, by a man-in-the-middle who can modify traffic (or perhaps an eavesdropper-in-the-middle who can also inject forged packets) to agree to use the broken crypto - each being fooled into thinking the broken legacy method is the best that's available.
  - When this happens, the browser doesn't mention it - and indicates the connection is secure.

Then they go on to comment that the characteristics of the NSA programs leaked by Snowden look like the NSA already had the paper's crack, or an equivalent, and have been using it regularly for years.

But, with a browser and a web server capable of better encryption technologies, forcing them down to export-grade LEAKS INFORMATION TO THEM that they're being monitored.

So IMHO, rather than JUST disabling the weak crypto, a nice browser feature would be the option for it to pretend it is unpatched and fooled, but put up a BIG, OBVIOUS, indication (like a watermark overlay) that the attack is happening (or it connected to an ancient, vulnerable, server):
  - If only a handful of web sites trip the alarm, either they're using obsolete servers that need upgrading, or their traffic is being monitored by NSA or other spooks.
  - If essentially ALL web sites trip the alarm, the browser user is being monitored by the NSA or other spooks.

The "tap detector" of fictional spy adventures becomes real, at least against this attack.

With this feature, a user under surveillance - by his country's spooks or internal security apparatus, other countries' spooks, identity thieves, corporate espionage operations, or what-have-you, could know he's being monitored, keep quiet about it, lie low for a while and/or find other channels for communication, appear to be squeaky-clean, and waste the tapper's time and resources for months.

Meanwhile, the NSA, or any other spy operation with this capability, would risk exposure to the surveilled time it uses it. A "silent alarm" when this capability is used could do more to rein in improper general surveillance than any amount of legislation and court decisions.

With open source browsers it should be possible to write a plugin to do this. So we need not wait for the browser maintainers to "fix the problem", and government interference with browser providers will fail. This can be done by ANYBODY with the tech savvy to build such a plugin. (Then, if they distribute it, we get into another spy-vs-spy game of "is this plugin really that function, or a sucker trap that does tapping while it purports to detect tapping?" Oops! The source is open...)

Comment Re:It's the semi's that destroy the roads (Score 1) 837

Roads without semis aren't designed for semi loading - so those roads do get damaged by cars. Noone surfaces their driveway (the private bit of road up to your house - sorry don't know what the US calls this) to the standard of interstate highway. Likewise, local residential roads are not built to that standard either (although typically to a higher standard than a driveway).

Additionally, weather and vegetation will eventually damage a road even if it has no traffic at all. For metalled roads that only have foot traffic and bicycles, this is, to all intents and purposes, the only source of damage.

Slashdot Top Deals

To the systems programmer, users and applications serve only to provide a test load.

Working...