Become a fan of Slashdot on Facebook


Forgot your password?
Slashdot Deals: Deal of the Day - Pay What You Want for the Learn to Code Bundle, includes AngularJS, Python, HTML5, Ruby, and more. ×

Comment Re: Further proof the web model blows (Score 1) 29

The honeypot is a simple way to identify an attack source. It's only one thing. As for any defense-in-depth structure, the failure of one thing doesn't compromise the whole. Preferably the failure of several things doesn't compromise the whole.

If you think there is anything to do with security in the PCI-DSS specs, you are sadly mistaken. They are a pile of poo.

Comment Re:The latest version as well? (Score 1) 29

heh, and how many websites get updated? If it ain't hacked yet... well, don't look... we don't want to upgrade.

It is the norm for these frameworks that the installation involves fifteen pages of "put that there, set that permission, put this in the apache config, install this pre-req". Tomato Cart and Zen Cart, I'm looking at you.

By the time you finally get it running, it seems like you have a massively fragile configuration consisting of many small changes. The idea of dropping an upgraded codebase on that is akin to saying "Your website will go down for a week while you get it running again, because that's how long it took you last time".

What is needed for a fix is instructions to "Change this line to say this" in your existing codebase. So you can make a minimally invasive change.

Comment Re: Further proof the web model blows (Score 1) 29

OK, I'll bite. What do you consider to be better than php?

I coded the payment system on our store's website in python CGI scripts. Keep it simple first. It helps that I'm a crypto security type engineer for a big techy company in my day job, so it's not a challenge to bake in defense in depth. It sucks when PCI-DSS scans ding you for insecure versions after their probe finds my honeypot.

Comment Re:And this is why modern systems abstract the UI/ (Score 1) 192

As far as I can tell, that's been trending since before I was at college. I graduated in 1991.

It's still a good idea though. I tend to build things as a collection of command line tools first. Usually operating against a shared data model, be it in RAM, or a database or whatever. Then it's easy to add arbitrary UIs and really easy to script actions within the system. If it's for my own use only, then it doesn't need to get past command line tools because GUIs are a crutch in most cases.

Comment Re:Space-based Economy (Score 1) 269

Last I heard, they found a lot of water at one of the poles.

And all those other things, while not extremely rare here, are still valuable for building stuff on the Moon. Iron, aluminum, and titanium are very useful for making things. Plus there's tons of sunlight there to provide solar power, without any clouds or atmosphere in the way.

So with all this, you should be able to build a Moon base which you can use for refining captured asteroids (which have far more valuable ores) and doing low-g manufacturing.

As for the gravity well, it's half the gravity of Mars, and it's very close to Earth. These sound like big pluses to me. I guess if you really need extremely low gravity or zero gravity, you could just build a big space station at the L1 Lagrangian point. And again, all that material on the Moon you think is "boring" would come in handy there, because it'd be far cheaper to lift all that mass from the 1/6g Moon than from the 1g Earth.

Comment Re:Fail. (Score 1) 224

I don't see the problem here. If you're looking for a phone where you can easily replace the CPU, that doesn't exist and never has, and it's just plain idiotic to ask for that. What's important is if you can replace the screen (since they get cracked sometimes), the USB port, the battery, the camera lens, etc.: the things that actually do get broken or wear out and need to be replaced.

Comment Re:I would like to say for the record... (Score 1) 439

If you're all PhDs, then you're not real engineers, you're statistical anomalies. In 15+ years of work, I've never even met a PhD engineer except when I was at college, and college professors aren't actual engineers since they don't do any engineering work.

We're talking about real engineers here, the kind who work at companies and do regular, everyday engineering work. Most have BS degrees, or at most, MS.

Comment Re:Private companies don't do exploration of front (Score 1) 269

The return is high relative to the return they would be getting without government funding, which is close to zero.

No, it isn't. They could do some other commercial work and potentially get higher profits, but with higher risks. They do government contracting because it's low risk, not because there's a lot of profit in it.

You seem to be implying that without government funding, corporations would simply go belly-up. That's ludicrous in the extreme.

Comment Re:Serves them right (Score 5, Insightful) 67

Oh please, I've used Cox before, and they were pretty decent for an ISP. They upgraded their systems at one point, rendering my cable modem unusable, so they sent me a new Surfboard for free. Their prices were good (compared to other ISPs I've had since I had to move away from there), and the prices were stable.

The company that really, really sucks is Comcast.

I've never heard of Cox continuing to charge people after they canceled their account (Comcast is famous for this), or for making it almost impossible to do (again, Comcast is famous for this; I think I was on hold for 2 hours doing this when I had to move out of a Comcast service area).

Cox also lets you just buy a cable modem and install it yourself, without a visit from a technician. Comcast and other companies require you to have a tech visit and charge you $100 just to plug in a modem.

I also don't remember Cox having any kind of 3-strikes system like Comcast has.

I see exactly what's going on here: Cox is the best of all the cable ISPs, so they're being run out of business so Comcast can buy them up for pennies on the dollar.

Comment Re:Space-based Economy (Score 1) 269

The problem I see with your plan here is that Earth is a huge, huge gravity well (well, not compared to Jupiter maybe, but compared to everything in the inner solar system it is). Keeping stuff in Earth orbit requires very high orbital speeds, or very long distances (for GEO). Wouldn't it make more sense to build your asteroid refineries and manufacturing facilities at the Lagrangian points?

Also, I'm not an expert on mining, but if any of those processes require gravity, then the Moon would be a good place for that: it has some gravity, but it's pretty low so your landing and launch costs will be low too.

"Help Mr. Wizard!" -- Tennessee Tuxedo