Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror

Comment: Re:done already, and so? (Score 1) 215

by Lost Race (#49729141) Attached to: Trojanized, Info-Stealing PuTTY Version Lurking Online

Putting the checksum right next to the binary on the download server only helps to check for bitrot in the download. It does nothing whatsoever to establish provenance of the binary, since whoever put the binary there could generate their own checksum from it. You need a checksum or signature that is more trustworthy than the binary in order to verify it.

It would be nice if every publisher would sign every downloadable blob, and the OS maintainers would countersign the true public keys for all popular projects. Then we wouldn't have to care about whether we're downloading from an "official" site or not.

Comment: Re:What it really says... (Score 1) 184

by Lost Race (#49661907) Attached to: Enterprise SSDs, Powered Off, Potentially Lose Data In a Week

Using spinning media for proper backups is almost impossible. See http://www.taobackup.com/

There is nothing in that story to suggest that HDDs are considered inappropriate for backup media. What is your theory? I've used HDDs for deduplicating daily snapshots for the last 15+ years and found them to be every bit as reliable as tapes, and far far easier to use.

Comment: Re:At what point do we stop playing? (Score 1) 139

by Lost Race (#49332161) Attached to: Chinese CA Issues Certificates To Impersonate Google

The beauty of the Internet is that you can do your part all by yourself, without waiting for anyone else to get their shit together first. You don't need to start a movement, you don't need to tear anything down or build some international organization to oversee everything. Just do what you said -- stop using Google, stop trusting root CAs, roll your own encryption, use VPNs, etc.

If other people want to continue using commercial / government crap, well, that's their prerogative. If it's as bad as you say then they'll eventually see the light and the Internet will be a better place for them too.

Comment: Re:Such potential (Score 1) 520

by Lost Race (#49067573) Attached to: Nim Programming Language Gaining Traction
I would like to propose a moratorium on comments of the form, "I manage a team and would never hire you." They add nothing to the discussion and only lead to useless dick waving competitions. ("Oh yeah? Well, I'm president of a Fortune 137 company and *I* wouldn't hire *you*!" "Oh yeah? I'd never accept an offer from your crappy company and you couldn't afford me anyway! Neener neener!" "Oh yeah? [etc]")

In the sciences, we are now uniquely priviledged to sit side by side with the giants on whose shoulders we stand. -- Gerald Holton

Working...