Forgot your password?

typodupeerror

Comment: Itunes, not even remotely good. (Score 2, Interesting) 512

by TiggertheMad (#43728725) Attached to: iTunes: Still Slowing Down Windows PCs After All These Years

The service runs in the background and launches iTunes when the phone is plugged in. It's quite handy.

That's your opinion. I always found it to be incredibly annoying, as it launches that shitty app every time you plug it in. You can't charge your Ipad without firing off ITunes.

Yet another example of Apple's holier than thou concept of design: "We know better than you do, about how you want to use our products."

Comment: I patch the patch! (Score 1) 110

by TiggertheMad (#43669935) Attached to: Honeywords — Honeypot Passwords

The idea seems to be that the second system can be a smaller, less complicated single-function server, easier to harden and could be running a different OS/Webserver/DB stack. You could (by sacrificing real-time validation) even have the second system entirely firewalled off and unreachable to an attacker, just polling the login servers to validate the sessions at some small interval.

And how are you going to implement password resets in any sort of timely fashion on this magic one-way ultra-secure box? I can pretty much respond to any answer you will give me with either a) won't scale or b) new security vulnerability.

Comment: This is an ok idea, definitely not a great one (Score 5, Insightful) 110

by TiggertheMad (#43669039) Attached to: Honeywords — Honeypot Passwords
Ok, for those who didn't RTFA, or don't know anything about security, you have a list of users and encrypted passwords in a DB. They log on and their password is checked against the DB. The problem is how do you know if someone has stolen your DB so they can crack it offline? (Offline brute force attacks are much more effective since they are thousands of times faster) So the author proposes that you give each user several possible passwords in the DB, only one of which is the correct one. If other passwords are used to logon, a danger alarm goes off, and you know someone has stolen your DB.

There are several problems with this idea. To make it work, you have to have a second DB listing all the passwords, and some sort of marker indicating which ones are real and which are fakes. You can't put this in the main DB, because then the hackers would have stolen this info too, and can tell which passwords are real. So you have a second, more secure system for this. Aside from the problems in maintaining a separate parallel system, one might ask the question, "why isn't your primary DB as secure as the secondary DB?". If attackers can breach your main defenses how do you know they cannot breach your backup network? What happens if your secondary system goes down?

More insidious, there is the recursive security problem. The point of doing this is for the assurance that your password DB is secure. How will you know if an attacker has gained access to your secondary password DB? Well, that would require a third password DB.......

Comment: Free as in Not Free (Score 1) 91

These are free books during the class. You have the option of buying them for the class, but I'm curious where you're going to be able to buy them for less than $0.

Are they really 'free', or are they actually subsidized via licencing agreements between the school and the publisher, and just being included in the tuition costs as a result of being part of the school's general budget expenses? I'd bet the latter, and they are just then charging you more if you want a permanent copy.

Comment: NEIN! NEIN! NEIN! (Score 1) 712

by TiggertheMad (#43627615) Attached to: Defense Distributed Has 3D-Printed an Entire Gun

Exactly. Hitler took one look at that and said "never mind"...

Actually, he took a look at them and said, "Invade our bankers and money launderers? Why would we do that? They are helping to fund us when half the world won't trade with us!"

Also, they were neutral and basically German anyway. You know, the whole Aryan thing?

Comment: Revenge of the Nerds (Score 1) 533

by TiggertheMad (#43622127) Attached to: Is Google Glass Too Nerdy For the Mainstream?

Yes

More to the poin, fuck whatever they mainstream likes or doesn't like. I have been a self identified as a nerd for 30 years, and I have seen many of my hobbies and interests become mainstream in that time. I know what I like and I don't need validation from anyone. Society can either like tech like this or get run over by it when they don't embrace it, and I do.

Comment: I HAX THE HAXZORZ!!! LOLZ! (Score 4, Funny) 509

by TiggertheMad (#43582203) Attached to: Cracked Game Released To Get Back At Pirates

It's pretty sad when someone can't even work up the reading comprehension to grasp the story from a short summary.

In total, if you play the cracked version of the game, the simulator will ramp up the rate of piracy for your simulated company's games, so you will lose. It stacks the odds against you.

Anyone have a link to a hacked .exe that fixes this behavior?

Comment: Can I haz passw0rds? (Score 1) 438

by TiggertheMad (#43543195) Attached to: Israel Airport Security Allowed To Read Tourists' Email
I will be more than happy to show them any of the number of fake e-mail accounts that I maintain for spam. How exactly are they going to be able to tell that they aren't legitimate? Oh, they aren't. They want to go through my email, they will have to spend all afternoon picking through idiotic threads of forwarded cute cat pictures....

Hey Israel, fuck you for being stupid.

Comment: Re:Because civil projects never go over budget... (Score 2) 297

I'm not disagreeing, but I question whether this is something that happens more with really big projects which are very unique (Big Digs aren't exactly a regular occurrence, hence the name), rather than with your mundane, everyday civil engineering projects like a boring commercial building that's not much different from dozens of other commercial buildings in its area.

Well then, since you are using generic, cookie cutter building projects as supporting evidence for your argument, wouldn't it be an accurate comparison to look at how often web design firms go over budget when building generic 5 page websites for small businesses? I suspect that the numbers will be roughly equal, and the type of work would be similar. In contrast, an unusual project like the big dig would probably be comparable with someone like Microsoft writing a new OS from scratch.

My point is that software development isn't really that different than a lot of other engineering projects. Building things is hard.

Comment: Because civil projects never go over budget... (Score 3, Informative) 297

Predicting a civil engineering project, like a bridge, is easy.....

I'm going to stop you there, because civil engineering projects are NOTORIOUS for going over budget. You might have heard of projects like the big dig. Less well know, is that going over budget in less spectacular ways is apparently a fairly common occurrence. I was looking around for a report to link for you that I read awhile back talking about why civil construction projects so frequently go over budget, but alas, I cannot locate it.

Alas!

Comment: Great, now we just need an ewok princess..... (Score 1) 342

by TiggertheMad (#43510805) Attached to: Disney Announces "One <em>Star Wars</em> Movie Per Year" Plan
Saying they 'will make it' kid friendly saccharin sweet crap, implys a change of direction. Anyone else here old enough to remember the ewok made for tv movies? If you think that uncle George started shoveling out cutsy crap in episode 1, you are sadly mistaken...

What's so funny?

Working...