Follow Slashdot stories on Twitter

 



Forgot your password?
typodupeerror
×

Comment Re:Go for it (Score 1) 43

I agree he doesn't belong on that list. I do think on the list of America's worst presidents, he'd be at the top of the list.

Ignored warnings from the previous administration, top FBI officials ignored field agents who were warning of something bad, and got our country attacked.

Then he started an incredibly stupid war in Iraq, which led to the rise of ISIS.

Presided over the building of mass surveillance of the American people.

Took office during a boom, left office under the worst economy since the great depression. It's my theory that what caused the ruined economy was fuel prices more than quadrupling during his reign. Buy gas to get to work, or pay the mortgage? Tough choice!

Took office with a balanced budget, left it with the largest deficit in American history. Meanwhile, infrastructure was crumbling and he did nothing.

Now, if the list was of people who did the most harm to our country, he should be on that list. Mao and Pol Pot were very evil men who killed millions of people, but they didn't harm America.

Comment In particular, NO redundancy. Reliability drops. (Score 5, Informative) 226

Losing data goes with the territory if you're going to use RAID 0.

In particular, RAID 0 combines disks with no redundancy. It's JUST about capacity and speed, striping the data across several drives on several controllers, so it comes at you faster when you read it and gets shoved out faster when you write it. RAID 0 doesn't even have a parity disk to allow you to recover from failure of one drive or loss of one sector.

That means the failure rate is WORSE than that of an individual disk. If any of the combined disks fails, the total array fails.

(Of course it's still worse if a software bug injects additional failures. B-b But don't assume, because "there's a RAID 0 corruption bug", that there is ANY problem with the similarly-named, but utterly distinct, higher-level RAID configurations which are directed toward reliability, rather than ONLY raw speed and capacity.)

Comment NetUSB=proprietary. Is there an open replacement? (Score 2) 70

It happens I could use remote USB port functionality.

(Right now I want to run, on my laptop, a device that requires a Windows driver and Windows-only software. I have remote access to a Windows platform with the software and driver installed. If I could export a laptop USB port to the Windows machine, it would solve my problem.)

So NetUSB is vulnerable. Is there an open source replacement for it? (Doesn't need to be interworking if there are both a Linux port server and a Windows client-pseudodriver available.)

Comment Opportunity to detect MITM attacks? (Score 4, Interesting) 71

I skimmed the start of the paper. If I have this right:

  - Essentially all the currently-deployed web servers and modern browsers have the new, much better, encryption.
  - Many current web servers and modern browsers support talking to legacy counterparts that only have the older, "export-grade", crypto, which this attack breaks handily.
  - Such a server/browser pair can be convinced, by a man-in-the-middle who can modify traffic (or perhaps an eavesdropper-in-the-middle who can also inject forged packets) to agree to use the broken crypto - each being fooled into thinking the broken legacy method is the best that's available.
  - When this happens, the browser doesn't mention it - and indicates the connection is secure.

Then they go on to comment that the characteristics of the NSA programs leaked by Snowden look like the NSA already had the paper's crack, or an equivalent, and have been using it regularly for years.

But, with a browser and a web server capable of better encryption technologies, forcing them down to export-grade LEAKS INFORMATION TO THEM that they're being monitored.

So IMHO, rather than JUST disabling the weak crypto, a nice browser feature would be the option for it to pretend it is unpatched and fooled, but put up a BIG, OBVIOUS, indication (like a watermark overlay) that the attack is happening (or it connected to an ancient, vulnerable, server):
  - If only a handful of web sites trip the alarm, either they're using obsolete servers that need upgrading, or their traffic is being monitored by NSA or other spooks.
  - If essentially ALL web sites trip the alarm, the browser user is being monitored by the NSA or other spooks.

The "tap detector" of fictional spy adventures becomes real, at least against this attack.

With this feature, a user under surveillance - by his country's spooks or internal security apparatus, other countries' spooks, identity thieves, corporate espionage operations, or what-have-you, could know he's being monitored, keep quiet about it, lie low for a while and/or find other channels for communication, appear to be squeaky-clean, and waste the tapper's time and resources for months.

Meanwhile, the NSA, or any other spy operation with this capability, would risk exposure to the surveilled time it uses it. A "silent alarm" when this capability is used could do more to rein in improper general surveillance than any amount of legislation and court decisions.

With open source browsers it should be possible to write a plugin to do this. So we need not wait for the browser maintainers to "fix the problem", and government interference with browser providers will fail. This can be done by ANYBODY with the tech savvy to build such a plugin. (Then, if they distribute it, we get into another spy-vs-spy game of "is this plugin really that function, or a sucker trap that does tapping while it purports to detect tapping?" Oops! The source is open...)

Comment Re:DHI (Score 1) 11

Ever since they changed it so I have a goddamned horizontal scroll (are they on crack?) I've only come by occasionally to look at journals.

Look, Dumbass Holdings Idiots, there's no reason whatever short of GROSS incompetence to introduce a horizontal scroll on a widescreen format notebook!! I'm all for hiring the handicapped, but you don't hire Ray Charles to be a bus driver and you don't hire the educationally handicapped to code...

Although I suspect it may be retarded PHBs than retarded coders. Someone is obviously VERY stupid. The idiotic mistakes I see should NOT happen at a so-called "nerd" site.

Comment Re: Prior art (Score 1) 221

ATT had the same idea. In about 1945.

Was gonna say the same thing.... or MCI, this being their entire business model, really.

Kids today! ;) Everything old is new again...

I know what you mean. Next we'll be reading an article about client-server renamed to something with a C... It's a crazy world out there.

Comment Re:Not a great idea ... (Score 1) 4

If you do that you have to double the used web space, and that can be expensive. I'm already almost at the upper limit for my site and will have to go to the next tier of hosting soon. As it is, only three of the well over a hundred pages on my site need a special mobile version, and I would imagine a lot of other folks are the same way.

Having it first look for m.sitename, falling back to mobile.html if it exists and m.sitename doesn't, then index.html if there are neither m.sitename or mobile.html might be a good idea, though.

Comment Re:No Chicklets! (Score 1) 147

The inadequately-configurable trackpads, in positions where they detect the palm resting on the laptop (or brushing them) and randomly jump the cursor or highlight whole paragraphs so the next keystroke replaces them, are no help, either.

What do you mean by inadequately configurable? There's usually an option to disable while typing somewhere.

It's there. It's on. Didn't help. Don't know if it's that Ubuntu 14.04 doesn't support it properly on these two machines or if it doesn't do the job I want done.

What I'm looking for is NOT there: A threshold level for touch sensitivity. If you're going to put a BIG touchpad on a laptop's palm rest, you need to either put it where the palms won't brush it, or you need to make it possible to turn down the sensitivity so that a feather-light brushing of the pad doesn't register as a mouse motion or button click.

Two different manufacturers (Lenovo and Toshiba) have used exactly the same layout, and exactly the same hair trigger, non-adjustable, touchpad sensitivity. (Also exactly the same sort of wafer-thin flat tile keys, which is how we got into this digression.)

Comment Re:call me skeptical (Score 1) 190

He's the one that made the claims. He said he did it, and then went to the FBI to explain how he did it. Other than finding the tampered box lid, all the "evidence" is in his claims.

I could knock a panel loose and then claim I hacked the in-flight entertainment system and made an airplane into a sperm whale and then a potted plant. That doesn't make it real, even if I showed them a box containing an infinite improbability drive. Funny thing about that, when most people see it, they see an empty box. How improbable.

Comment Asteriod redirection (Score 0) 150

NASA already has the answer. Glitter filled Super Balls are the best thing for the job. As we all know, they are infused with magic energy. A 10kg payload traveling at 11.2 km/s could deflect an object the size of the moon.

It does have risks though. Once set in motion, the Super Balls would be set loose on the universe, potentially disrupting entire galaxies.

For the sake of the universe, I hope we never have to deploy such a weapon.

Comment Is that a summary mistake or is the title BS (Score 1) 214

Either the summary or the title or both are bullshit. This is Slashdot so none of those would surprise me.
from TFS:

we will continue to offer Windows 10 to customers running devices in a Non-Genuine state.

Sounds to me like they just said they WILL offer free upgrades to pirates right there in the summary.

Comment No Chicklets! (Score 3, Insightful) 147

The problem I have with current keyboards is not just the short travel and lack of clickyness, but the tiny height of the keys.

Instead of the tall keys with space between them for fingernail clearance, there are these thin squares maybe an eighth of an inch above a solid surface. If I don't keep all my fingernails cut short, when they go past the side of the key they hit the panel and the key doesn't "strike". Letters get dropped. (So I get to pick between typing well and playing the guitar. I pity those who must keyboard for a living but want long nails to maintain their social life.) The short travel means there's little margin for finger variation, so some letters, where my fingers don't depress the keys as far, normally, don't strike, while others, where I support the weight of my hands, do strike when they shouldn't, or strike multiply.

After over a year I haven't been able to adjust. You may have noticed that my spelling has gone to hell as a result: I have to do a lot more correction and sometimes miss fixing things up.

(The inadequately-configurable trackpads, in positions where they detect the palm resting on the laptop (or brushing them) and randomly jump the cursor or highlight whole paragraphs so the next keystroke replaces them, are no help, either.)

On the other hand, when the nails do hit the key, they quickly wear through the top level of black plastic, exposing the backlit transparent light below it. I replaced a laptop about a year ago and after about six months about a half-dozen heavily-used keys had their pretty letters obscured by the giant glow of the scoured away region.

I had been running on older thinkpads and toshibas, with classic keyboard-shaped keys, or at least the little fingertip cup and substantial fingernail clearance. Switching (in a two-dead-laptops-in-two-weeks emergency) to a lenovo z710, then to a company-supplied toshiba s75, both with the stupid "I'm so thin", square, low-travel, no-finger-cup keys has been a disaster.

Slashdot Top Deals

Neutrinos have bad breadth.

Working...