Follow Slashdot stories on Twitter

 



Forgot your password?
typodupeerror
×

Comment Re:DMARC and Google: multiple foobars (Score 1) 139

That would be a very good step and eliminate most of the issue with Google, I agree.

However, G also insists on, for example, sending out G Calendar notifications forged with my sign-in email, which is SPF/DMARC protected, and which other systems (and gmail) thus entirely correctly often reject.

But I can't get anyone at G to even acknowledge the issue. (Would be nice if a Googler was reading this and would pass it on.)

And, BTW, G also seems to ignore email other than from the a/c's login address, eg for AdSense/AdWords, which is a Catch-22, and one small reason why I am using them far less.

Rgds

Damon

Comment DMARC and Google: multiple foobars (Score 2) 139

DMARC would work a lot better if Google for one didn't wrongly try to internally forward as-is *and then bounce* email from DMARC-controlled domains, thus making it impossible for example to get through for many support queries, and causing spurious problems with (say) Google Calendar when the account ID is in a DMARC-controlled domain.

Left hand vs right hand Google? You guys are meant to be smart!

That and randomly chucking email from DMARC-controlled domains in SPAM folders...

Rgds

Damon

Comment Re:Redistribution (Score 1) 739

Hmm, I hear what you say, but it wasn't generally stand-alone IT that would be much use outside finance, and I was the CTO of the virtual credit card start-up.

But I assure you that there is no gold-filled vault, no not even slightly full of warm lovely glowing metal; nothing to see here, move along.

Rgds

Damon

Comment Re:You shouldn't need insurance for most things (Score 1) 739

For most things maybe you just shouldn't be paying, at all denying treatment to those who happen not to have spare cash, eg students and young adults in general getting going in their jobs. I couldn't have paid anything much as a teenager for my epilepsy diagnosis and treatment; should I have just rotted before I even got to uni? I had left home, BTW.

(In the UK I do pay for a few things at point of use under the NHS, but often even then fairly small fixed/tiered charges.)

Rgds

Damon

Comment Re:Just don't try to write an OS in Java (Score 1) 511

Hi,

That is a different and also interesting case, and just by bringing it up you'd pass my test.

No, I meant something like:

public static final String CRITICAL_ID = "whatever"

in a secure API. If I use char[] instead what happens if a miscreant overwrites the content of the array; what BadThings might happen?

Rgds

Damon

Comment Re:Performance improvements have helped it survive (Score 2) 511

Except that once JIT/Hotspot is involved all or most of the executions *are* of compiled machine code, optimised to the particular CPU on hand and the particular data set for this particular job. So things like dynamic inlining *for this particular job* can allow the JVM to produce *better* machine code which will execute more quickly than statically-compiled code.

The translation takes time, but for long-running tasks that may well be easily amortised away.

So single-threaded Java can beat single-threaded C++.

But I can also bring more CPUs to bear on the code safely with Java for a given level of code complexity (well, now C++ finally has some sensible volatile semantics, that's a little less true).

And there are other factors such as the generally forced synchronous nature of C++ heap handling which can work against it.

Rgds

Damon

Comment Re:Performance improvements have helped it survive (Score 1) 511

I promise you that it was worth saving many MB in the .WAR and associated thumb-twiddling time, plus showing me in the logs which library and other routines were actually being used. I never felt the need to time stuff (since performance was at least not visibly worse). Shame on me!

If I get a chance I'll do as you suggest, though it'll be tricky with all the many things going on concurrently.

Rgds

Damon

Comment Re:Just don't try to write an OS in Java (Score 1) 511

My favourite related Java question to ask in the context of security is: "What's the difference between char[] and String, eg if I have one in a critical API as a public static?"

I'm quite happy to hear slightly 'wrong' answers as long as someone understands a little about wrapping/immutability and so on...

Rgds

Damon

Slashdot Top Deals

2.4 statute miles of surgical tubing at Yale U. = 1 I.V.League

Working...