Slashdot is powered by your submissions, so send in your scoop

 



Forgot your password?
typodupeerror
×

Comment Re:non-Oracle ZFS FTW (Score 1) 113

For Mac, try the free Zevo ZFS from Greenbytes: http://www.getgreenbytes.com/ZEVO

For Windows, if you are willing to use NTFS on an iSCSI volume hosted on ZFS by a FreeBSD NAS, you could still benefit from the checksumming provided by ZFS. See the comments by 3dinfluence here: http://serverfault.com/a/122408/79266

Or you could run a ZFS NAS in a FreeBSD VM on Windows, of course, and use it via SMB from Windows.

Comment About page (Score 1) 299

The most important page on any site is the About page - people arrive with little clue on what your site or program is about, so it's incredibly valuable to provide the About page. Just a few paragraphs written without assuming previous knowledge is enough.

Comment Re:Sample size too small? (Score 2, Informative) 192

Yes, this is really junk science, but I believe there are other studies that show similar results - see http://stereopsis.com/flux/research.html for a list, including links to the full papers (the site is for F.Lux which I really recommend to adjust colour temperature to get more sleep, for Windows, Mac and Linux, and jailbroken iOS).

Comment Re:Pretty Obvious + Plug for Awesomeness (Score 2) 192

F.lux is great, works on Windows, Mac and (jailbroken) iOS. One of the downsides of iOS devices as e-readers is that you have to jailbreak to get f.lux installed and not change your sleep cycle.

There's also XFlux, but I use Redshift too on Linux - http://www.ubuntu-inside.me/2009/03/flux-better-lighting-for-your-computer.html

[[http://stereopsis.com/flux/ios.html Now on iOS]] for jailbroken devices - see [[iPhone]] for jailbreaking.

Discussion: http://forum.koohii.com/viewtopic.php?id=5347&p=1

Blue light in morning resets circadian cycle: http://www.sciencedaily.com/videos/2006/0201-waking_up_teens.htm

Tie-in to SAD and phase advance or delay associated with depression: http://www.sciencedaily.com/releases/2006/05/060501113832.htm

Comment Re:Crashplan vs. rsnapshot (Score 1) 326

I have tried CrashPlan a couple of times on Windows and Linux, and had to give up. It would either fail to connect, or make very slow progress. It's not my broadband, since Mozy (Windows and Mac only) is fine. I also found that on Linux it would really hammer the system when backing up (4GB dual-core system) so it was barely usable.

Possibly CrashPlan's cloud service is the problem, but I'm not very impressed with the software.

For Linux and Mac backups, it's worth using something like rsnapshot, which is rsync-based and works very well to back up over 1 TB of data. It doesn't do block-level incremental backup, and it makes complete copies of files (rsync plus hard links) but it works incredibly well without writing shell scripts. It can do hourly, daily, weekly, monthly and yearly backups, and has automatic retention i.e. purges the oldest backups in a predictable way (say after 6 months or 5 years).

rsnapshot works well for Linux and (I believe) for Mac, as long as you don't need fully bootable backups, and it should work really well for photos as 99% of them won't change after being created.

rsnapshot is very similar in concept to Time Machine on Mac, but without the nice GUI (in fact, without any GUI). Your files end up in a big file tree and can be restored with any file-copy tool.

http://rsnapshot.org/

Comment Re:Correction (Score 1) 691

"Our motorways have cameras over every lane which track the numberplate"

Not quite true - not all motorways have these gantries with cameras over every lane, but it's true that automatic number plate recognition cameras are located alongside every motorway at least, and on major roads, in town centres, etc, and this feeds into a national database to enable the police to track any car for whatever reason (not just uninsured/banned drivers or car theft - in a few cases, demonstrators have been tracked via this system and stopped). See my other post: http://slashdot.org/comments.pl?sid=2727483&cid=39387461

These gantries do often have speed cameras as well, and in some cases there are average speed cameras.

Comment CCTV mission creep in the UK, and ANPR (Score 1) 691

Many petrol (gas) stations in the UK already have these CCTV cameras to catch people driving off without paying.

The interesting part about this story is the mission creep and data unification - once the CCTVs are in place for company reasons, the government creates another application of the data for its own reasons. Not a new story - once the data exists somewhere, the drive to get access to it is much stronger.

This all helps to turn the UK into probably the most surveilled country in the world... see http://news.bbc.co.uk/1/hi/uk/8159141.stm for stats from 2009.

This petrol station initiative is probably tying into the nationwide UK network of automatic number plate recognition (ANPR) cameras in town centrese and virtually all major roads (not just motorways/freeways, but every "A road" too). Usually painted blue and on high poles, these capture and OCR the license plate of every vehicle that goes past. This feeds into a centralised data centre for queries, data mining, and real time alerts, for both criminal and terrorist investigations: http://en.wikipedia.org/wiki/Police-enforced_ANPR_in_the_UK

Comment Re:Already won: Khan Academy (Score 1) 479

Khan academy is an excellent resource once kids want to learn and with some guidance from a mentor.

Sugata Mitra's self-organising learning environments are perhaps more general as they can be applied to any topic, and in fact they don't need an expert to provide the courseware or videos. Somewhat bizarrely, he just sets up small groups of children, provides an Internet connected PC per group, asks them a big question (e.g. who was Pythagoras and how did he advance geometry?) and lets them get on with researching it for 45 minutes.

See my other comment here for links and background: http://slashdot.org/comments.pl?sid=2719455&cid=39326653

Comment Self-organising learning environments (Score 1) 479

Sugata Mitra has been doing practical research for 10 years that involves children learning in groups of 4 or 5 through being asked a big question such as "can trees think?", "how does a GPS work exactly", etc, then being given time with a shared computer and broadband connection to answer the question, before having to explain it to a teacher. This is called a self-organising learning environment or SOLE, and appears to work for almost any subject for children up to age 10 or so.

He started with the well-known "Hole in the Wall" experiment where he placed a computer in the wall of a building on the street, and watched what happened - the children taught themselves English as well as how to use the computer. Later experiments involved leaving a PC with English biotechnology materials in a remote village with kids who only spoke Tamil, and telling them to get on with it. Remarkably, they actually learnt a significant amount of biotech.

See http://educationalurbanism.wordpress.com/2011/08/19/dr-sugata-mitra-from-the-hole-in-the-wall-to-sole-self-organized-learning-environment/ - his ideas on "the granny cloud" show how this could scale enormously using Skype etc to have older mentors encourage the children, and perhaps ask or help in creating the big questions that will drive the childrens' learning.

I really hope he gets a chunk of the prize - he is a true innovator and his technique can be applied both inside and outside schools, from developing to developed world.

http://en.wikipedia.org/wiki/Sugata_Mitra has references - see his TED talk, he's a very engaging speaker.

Comment Linux Mint (Score 1) 319

First of all, standardise on a single distro so that the 99% of people who aren't Linux gurus can at least share solutions to problems. It's quite common to have hardware that doesn't work in some way, e.g printers, sound or graphics cards (3D performance), and it will be disastrous if everyone has different distros.

Secondly, I'd recommend Linux Mint - either the Ubuntu or Debian based version. It has a lot of simple but helpful changes for new users of Linux, but the Ubuntu/Debian base means an enormous amount of software is available. I wouldn't recommend Ubuntu these days, as it has too many regressions from release to release, and things that just don't work (had to abandon an Ubuntu 10.04 LTS installation as it froze every day or two for months, probably due to Intel drivers.)

The switch to kernel mode setting (KMS) for graphics cards in the last few distro versions is critical - in some cases this has really reduced reliability a lot, so I'd recommend you research this a lot... I ended up using an old ATI 9250 graphics card to be sure that Ubuntu (or Mint-based Ubuntu) worked properly - however doing this for a whole company would be painful. This is important given the popularity of Intel GPUs on business PCs and the crapness of Intel drivers post-KMS, but perhaps some research will show this is a non-issue with the latest kernels and X11.

The switch of most distros to GNOME 3 and/or Unity is also a big problem - these desktop UIs are very immature and simply don't work well for the sort of desktop usage many people are used to. Unity in particular is a research project that should have been left to mature for 5 years, not pushed into a long term support release - this is why a big chunk of Ubuntu users are switching to Mint or other distros.

Mint has a sane strategy for GNOME 3 which involves recreating the GNOME 2 UI on a GNOME 3 base (Cinnamon project, aka MGSE), as well as letting your retain GNOME 2 if you want (MATE, not yet mature). Most importantly, Mint as a project listens to its users a great deal, so it is less likely to take decisions that screw up the user experience (e.g. Unity.)

Comment Could happen to almost any site or cloud service (Score 1) 188

It's not uncommon for sites to get hacked (one every 3.5 seconds is the current rate), and in some cases this is so they can host a phishing form (which is why the US government took down JotForm.com).

Given this draconian approach to removing some phishing forms, and given that's it's tough to completely stop hackers, it's clear that this could happen to any site, or to cloud services that host your content under a shared domain (maybe even Tumblr or Pinterest).

The only protection is not to host sites with US-based registrars.

I would hope that EU-based registrars for .com etc should be safer from this sort of action - can anyone confirm? Failing that you could go for a country domain.

Comment Re:Storing passwords (not as easy as you think) (Score 1) 122

I did read the article, although quickly, and I wasn't very impressed with it. See http://slashdot.org/comments.pl?sid=2622556&cid=38711478 for some of the errors. The mention of GPUs is really irrelevant to security, and most useful for crackers.

By "standard library" I really mean something like phpass that is written by developers who are highly security-aware. PHP's built in libraries probably don't qualify on that score.

phpass will work on almost any version of PHP, and can use MD5 or SHA1 if that's what's available.

Password stretching: the article's point about iterating 1000 times creating 1000 times the collisions is theoretical, as there are ways of implementing stretching that don't have this problem - see http://en.wikipedia.org/wiki/Key_stretching for non-collision-prone stretching options.

There are many web hosts still using PHP 5.1 or 5.2 - requiring a recent PHP 5.3 isn't really a solution for many people.

Comment Re:Storing passwords (not as easy as you think) (Score 4, Interesting) 122

Mod parent up, the article is quite good.

A more general and simpler answer though is to *always use a standard library* - see http://stackoverflow.com/questions/1581610/how-can-i-store-my-users-passwords-safely/1581919#1581919 for a good answer.

Also ensure that your password storage is one-way hashed, and *salted* with a random salt (different per user) and uses *password stretching* (i.e. iterates the hashing function thousands of time to make brute forcing much more expensive). See http://slashdot.org/comments.pl?sid=1987632&cid=35150388 for more on password stretching including phpass, the gold-standard library for PHP used by WordPress, Drupal, etc.

Most importantly, never write your own password storage - you are virtually guaranteed to get it wrong. Apart from the above issues, what about timing attacks (Zend has an article about this from PHP perspective.)

Comment Re:Listed mitigation: Adobe Reader X Protected Mod (Score 1) 236

Unfortunately I need Adobe on my work PC to enable comments - don't think Foxit handles this. Foxit 5.0 was a bit crap (broke in some ways) but 5.1 is better.

Thanks for the pointer to Okular, this might be a good option on Windows. Included in the KDE for Windows installer: http://windows.kde.org/download.php

Slashdot Top Deals

"Protozoa are small, and bacteria are small, but viruses are smaller than the both put together."

Working...