Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×

Comment Re:What else can you do? (Score 5, Informative) 62

Encrypt everything, make life as difficult as possible for those who would snoop your traffic. You mention Firefox plugins, perhaps you should also be using the HTTPS Everywhere plugin: https://www.eff.org/https-everywhere

Also make sure you are using the SSL Observatory function, this should at least help prevent MITM type attacks against you.

Comment Re:So is it libre or not? (Score 1) 162

Indeed there were some open usenet servers back in the early 2000s. I know when I was at Teleglobe in the early 2000s, we ran several open(read-only) usenet servers and we carried as much as alt.binaries.* as we could, we didn't have a very long retention time..but hey you weren't paying either ;)

Comment Re:silicon valley looking for cheaper IT workers (Score 1) 109

Good and bad points, Andro. Plenty of felons get jobs

Oh I didn't say they couldn't get jobs, well paying ones? Doesn't sound like it. Ex-cons certainly are more willing to work for less pay. However when you have people underemployed or underpaid, recidivism certainly is a possible outcome. Your example of the luggage thieves, if they were getting paid better, they'd probably be a bit less likely to be stealing on the job. Pay people well enough. But don't take my word for it: http://news.illinois.edu/news/12/0730wagepremium_ClaraChen.html

Evidently, some organizations prefer felons.

Perhaps so, they might be willing to work for less pay, given their ex-convict status, makes them perhaps a slightly more desperate than average workforce.

I don't have any issues with giving people job skills at all, I just don't trust that the motives behind the people doing the training are 100% altruistic. They want a labor force that can be easily manipulated to work long hours for cheap. Ex-convicts fill that role nicely, as do H1B workers and new graduates.

What's the difference between an office with beds, a gym, a cafeteria(as seen as some sprawling corporate campuses) and a prison?

Comment reminds me of someone from irc... (Score 2) 156

This guy(who I won't name, you know who you are), was once writing some PHP code for some webapp. Well in app, he had some delete links and he hadn't finished the authentication code apparently, so googlebot crawled is site, followed all of the delete links and completely wiped out his database.

Of course, you can keep googlebot away from your crappy code with robots.txt too...

Comment Re:Too important to "fix" (Score 1) 68

Not to mention the power systems for the entire DC area are too important to allow any outages no matter how short.

Bahaha...the power goes out in the DC area all the freaking time. Pepco is notorious for power outages in DC. They blame the "dense tree canopy of the city" or something retarded. Ask anyone who's lived there for a while.

The DC metro area has suffered major outages, the remnants of Hurricane Isabel knock out most of the power and water in Fairfax County, Virginia as well.

Anything important in the DC metro area and well everywhere else, is going to have both battery and generator backup power, knowing that grid power can and does fail all the time.

Too important my ass...the power reliability in DC was like living in a third world country.

Comment Re:oops (Score 1) 154

Ram is considered volatile memory, meaning it loses its info when power is turned off.

Stick a battery on the drive with the RAM instead of flash? You know, battery backed cache is not a new thing. Usually you see it for RAID controllers. There isn't any reason a small battery could be installed with the drive, recharged via the power supply, to keep the ram alive.

Comment Re:you have the source (Score 1) 566

Any questions?

Sounds like you still have questions. For one, that is all Linus would have been able to do anyways, the RDRAND instruction isn't privledged.

You'd hope that whatever userspace program, be it openssl etc, would be smart about its usage of the RDRAND instruction. It would certainly need to be, as the RDRAND instruction doesn't exist on every CPU, certainly not a lot of older ones. Most any cryptographic software worth its salt has methods of specify its PRNG source as well.

Random numbers aren't something that should be left to chance.

Comment Re:you have the source (Score 5, Informative) 566

It's not as simple as just commenting out a few lines of code.

No, it's easier than that. You can simply pass nordrand to the kernel. It was the first thing I saw when I opened up
arch/x86/kernel/cpu/rdrand.c
__setup("nordrand", x86_rdrand_setup);

So there...don't like rdrand, don't use it.

From Documentation/kernel-parameters.txt

                nordrand [X86] Disable the direct use of the RDRAND
                                                instruction even if it is supported by the
                                                processor. RDRAND is still available to user
                                                space applications.

Comment Re:Why all the whining in the first place? (Score 1) 566

Shouldn't we be welcoming RdRand with open arms? It's a mathematically proven high-quality random number generator that lets chips like Ivy Bridge & Haswell produce large amounts of true random data (not a simple PRNG data) at multi-gigabit speeds.

I'm guessing they are implying that the stream coming from RdRand isn't actually random, but perhaps an AES encrypted stream that the NSA has the key for. Not that I've ever seen any proof of that, it seems maybe in the tin foil hat realm..but who knows what hides in intel's microcode?

Slashdot Top Deals

A morsel of genuine history is a thing so rare as to be always valuable. -- Thomas Jefferson

Working...