Forgot your password?

typodupeerror

Comment: Re:no 5th? (Score 4, Insightful) 1047

by Nelson (#38803723) Attached to: US Judge Rules Defendant Can Be Forced To Decrypt Hard Drive

The difference? There are a couple but the first of which is that the lawyers and judges involved are not stupid, they may not be techsters but they are almost certainly not stupid and this encrypted data is but one piece of evidence and you f-ed up long before if you're in this position. Second, there is a judge that will judge.

If you pistol is stolen or lost, you have some obligation to report it as such. It's typically registered and in that case, they know you have it, know the make and model. If you conveniently discover that it is missing when a court requests it they can check to see if you reported it lost or stolen beyond that, there is a judge there to judge you and he'll judge your credibility as he sees it from your behavior up to that point. Basically, keep track of your weapons, particularly when you're getting ready to be involved in a trial. Are you the kind of person that loses a pistol and forgets to tell anyone?

The password isn't quite the same. They may have some idea if you regularly used the computer. Again, I'll reiterate a couple things, the other guys aren't stupid and you didn't get in this position simply because of an encrypted drive. Now if you've spent 3 years doing something considered crime and there is other testimony where you've suggested you don't remember something because it's on the computer you use daily and now you don't remember the password, I can tell you how I'd judge you. Or maybe it's on the computer you resisted handing over and kept in a safe, those factors might not be admissible in the case against you but they certainly come in to play when you attempt to "forget" the password. Do you regularly use computer and keep track of dozens of accounts and passwords but this one computer you had locked up in a safe at your mothers house that you tried to pretend didn't exist, you forgot how to log in?

What will a judge think from your story?

Comment: I've been trying to recover from decades of hating (Score 4, Insightful) 353

by Nelson (#38748130) Attached to: Visual Studio Gets Achievements, Badges, Leaderboards

Seriously, I have been trying to get over the MS hate that I've had since Windows 3. They're just another big company, trying to do what they can and at least they try to compete in new markets even though they routinely get shelled by the competition when they stray off the desktop.

But WTF?!?. Badges in Visual Studio? For real? They have no idea what they are doing. Are they chasing 15 year old developers to be? This is a company with 10s of billions in cash that can subsidize products like Xbox for years and years. This is fucking Bob in the IDE.

Comment: Too much religion with BSD (Score 1, Informative) 487

by Nelson (#37985658) Attached to: In Favor of FreeBSD On the Desktop

Ubuntu (and it's variants) and OpenSuse are pretty damned good, it's literally minutes and you've got an integrated, modern KDE, or Unity or GNOME up and running. You want more software of security patches? It's just a couple clicks and you're there. Now if you had some concrete numbers on instability or performance numbers then you could talk about something, real numbers, not just hearsay.

Thing is, I don't think you can find and interesting performance difference between Linux and FreeBSD, excluding the possibility that there might be a few pathological cases where one really out performs the other, and the Linux community is such that if you could produce a real benchmark, they'd invalidate it before too long and fix the performance problem. And from my own experience shipping products and running businesses on it, I don't think you could show a substantial difference in reliability. Now one thing I know you could measure the difference on is the amount of time managing them and I think Linux has a gigantic lead here.

I'm not a BSD hater exactly, but they need a better story than they've had and they need a different sort of community. If you like oldskool like UNIX, real UNIX, then BSD is just the thing. If you want UNIXy like stuff with some more contemporary things (think upstart, systemd, I don't know a full desktop UI) then Linux is pretty clearly the choice. Now that newer stuff may not be what you want, I'm personally sort of surprised how well Linux does in the embedded world where a BSD might be far better suited in a multitude of ways. PCBSD is getting nice, it's still nowhere near the level of polish that Ubuntu is though. LLVM and Clang have finally provided them with a non-GCC build chain option, there has been a ton of cycles spent on GPL vs. BSD licenses and in this particular case, I don't see how BSD has benefited in those discussions, at the end of the day the difference fundamentally lets businesses do stuff and just not contribute it back. Maybe I'm wrong but while BSD was worrying about a build chain, Linux platforms were building GNOME and KDE and remarkably simple graphical installers and easy to use automatic patch systems and support for tons of hardware and the list goes on.

Comment: Thanks (Score 1) 1521

by Nelson (#37208498) Attached to: Rob "CmdrTaco" Malda Resigns From Slashdot

I don't visit it nearly as much as I used to, it's still in my home
page tabs and I scan it regularly but with a family and my career
where it is I can't post as much. Some parts of growing up suck.

The world is so different now. I'll tell you what slashdot showed me
and helped me with, in the mid to late 1990s it became clear that
nerds and geeks could change the world. A couple guys with a computer
and an idea could start a company, make money, employ people and
ultimately make a difference. The hard part of that for most of us
introverted nerdy dudes is "community." A few people can really make a
difference but it still takes a community around them and there are
community skills. "Opensource" was taking off, VA Linux and Redhat
were hot stocks, I was young, fresh out of college, full of piss and
viniger but I didn't know how to take part. (Why is that? I have no
idea, it's really odd saying it but it's true)

I guess I had two experiences: At work, we hired a relatively well
known Linux kernel hacker to help with something and he showed me how
to contribute, the hows and whys of things. It was incredible how it
built the community confidence. I knew how to code, I knew technology
but for some reason I felt like I didn't want to look stupid or be
rejected or I didn't know how to play with others. Second, I took
part in the Loki Hack competition at the Atlanta Linux Showcase. ESR
was there, Ryan Gordon was there a couple other guys that seem to
still be nerd famous, Taco and Hemos showed up with some food or
something a couple times. I remember thinking "these guys are 'doing
it!'" and you guys were cool enough and friendly with *everybody* It
was oddly confidence building. I have no idea why exactly I felt that
way, but being around other people doing the things you want to do,
contributing to a cause, taking part inspires and gives confidence to
contribute and take part.

Community, communication, and all sorts of other
not-quite-as-technical things are incredibly important to making
something like Linux succeed. It's really hard to quantify, but I've
seen and felt the difference, it's incredibly important and valuable.
Thank for that. I've made my career with Linux and opensource
technologies, I've got a home and a family that that stuff has helped
me realize.

Comment: Is he predicting that performance won't matter? (Score 2) 258

by Nelson (#36981310) Attached to: Wall Street Predicts Merge of OS X and iOS

Apple spent a couple decades on 2 other less popular platforms before they got to Intel and for years they took beatings about performance and fabricating benchmarks or tests to stack the performance the right way. Now they are more than capable of building their own chips, they have the money and the know how but why would they do that again unless the prediction is that there will be a world where they aren't compared to Windows on Intel machines?

Now I could see Mac books and Mac Pros with an ARM chip in them for certain functions and for the custom silicon that Apple adds to them. That doesn't seem totally out of the realm of possibility. At the end of the day though, someone is going to rip a blu-ray or render some HD video or count the FPS with some game and compare that number to the one made on a Dell with an Intel Core x in it and that's going to be that.

Comment: Use an HMAC (Score 1) 409

by Nelson (#35150298) Attached to: Are You Sure SHA-1+Salt Is Enough For Passwords?

If you need database support for it, then there is an opportunity to get some opensource fame and add it.

The assumption is they can get at the hashes, salt or not, with some of the GPU accelerated stuff and criminal set out there now, if they can get the hashes and it's simply salted and hashed or just hashed, within a reasonably small amount of time they can turn that in to passwords.

There is bcrypt but there are also hmacs, it would be interesting to see an analysis of md5-hmac vs salting or some other techniques, being as how it's largely considered easy to collide. Personally, I'd use an HMAC with SHA. I'd properly pad the passwords to be a full block in size and I'd pick a very random pass-phrase. Standards groups have helped design them with security in mind, where as the bcrypt proponents largely point to the speed of bcrypt as its biggest advantage.

Comment: Re:mm (Score 1) 641

by Nelson (#34155550) Attached to: Oracle To Monetize Java VM

It's a certainty. Thing is, google-go is a C competitor, not a C#, Java, etc.. competitor. Not any time soon at least and it's also very much a work in progress.

Sun beat MS in a very similar law suit, I don't see any reasons why Oracle won't win against Google either, that leave google 2 options: 1) buy the rights from Oracle for a huge chunk of cash or 2) create their own tool set and language. They've already built the tool set.

Personally, I see it as a marketing and product positioning problem. There is clearly a market for a C competitor, people have been working at them for years but no real players have backed any until go. Google pretty clearly needs a higher level application tool too. They just need to market both without eating each other or undermining each other, that's the problem.

The next person to mention spaghetti stacks to me is going to have his head knocked off. -- Bill Conrad

Working...