Doesn't work. Just rerun the picture test enough times to deduce that the constant is that you always get cars and flowers, but other items are subject to change. So then by induction, you try one more thing. Three constant things. Well then there are only 6 ways to choose 2 elements. Fine, make all say, 9 pictures constant "things", one of which is a car and one of which is a flower. How many 2-permutations? 72.

Surely an accomplished individual like him could put out a serious paper on why picture passwords aren't good security, if they aren't. The math seemed alright in the Microsoft blog, so I don't know what the problem is.

Oh, I know what it is, he's the head of a company that offers alternative security products that use multi-factor authentication. *Of course* well implemented multi-factor auth is more secure than single-factor, but if he weren't in charge of a company trying to sell a product, would this article even exist? Probably not.

The law is what you can successfully litigate.

An anonymous coward writes

"Slashdot readers have decided to label recent articles as tainted crap for significant journalistic flaws. These articles reportedly lack substance, appear to be written by a child, and have other problems. With Slashdot articles being flagged as tainted crap, they will be taken less seriously by their readers."

I don't think Verisign will sign your private root certificate, no matter how much you ask. At the very least, I doubt they'd sign it with flags that make it able to sign other certificates in a chain, it'd just be for verifying the authenticity of the (your) private root.

Yes! I've discovered lately when evaluating Chrome for workstation use that Chrome now has a (ever-growing) list of group policies available. Grab the adm/admx templates and MSI installer and check them out.

Coincidentally, the latest Chromium/Chrome Canary/Chrome Dev builds also started ignoring IE's trusted zone lists and so windows integrated authentication (Kerberos Negotiate) stopped working. Boo. Supposedly there's a new policy that I can set to fix this. I reported the issue but am waiting for clarification on whether this is intended behavior, a security issue, or what.

Which way it's pointed.

Often those sites are unwitting hosts to malware that are eventually cleaned up, so I'd hope that they don't start permanently blocking.

I don't think anybody had any idea how much developers were willing to take a cut on having a guaranteed delivery channel, and how much consumers were going to be willing to give up alternative means of acquiring applications.

Apple demonstrated to the whole world that if your release channel is solid, the vast majority of consumers won't bother looking elsewhere and won't care to. Steam is sort of the same way, and I sadly fall prey to it all too often. (Steam, please sir, will you take some more of my money?)

So run an older version of X in a Linux VM? All the current kernels run pretty well on all the hypervisors, so just download whatever current distro you like, put it in a VM, and store it for "legacy programs".

Likewise DOS, early Windows and Win9x all run in VMs fine.

It's a functional language following in the footsteps of the ML category of languages, but written for the .NET platform. It's open source with a patent grant, and the F# team has made sure each release has both a .NET and a Mono installer.

Ah, so frame dragging isn't a real phenomena?

I don't know if it solved all of their problems, perhaps they were also unhappy with the .NET system in other ways?

If it's anything like the NYSE is planning, they let the investment banks build their high speed trading server racks right next to the stock exchange racks. Literally.

Supposedly there's even ways to get your server physically in the same rack as one of the NYSE's exchange servers, but I think that might be taking it a bit too far, or maybe an overzealous reporting on the matter. But I don't think it's even disputed anymore that they're letting banks colocate with the exchange.