Forgot your password?

Comment: WRONG! (Score 1) 232

by Junior J. Junior III (#46788671) Attached to: Bug Bounties Don't Help If Bugs Never Run Out
Security is not binary. Security is not absolute. There is ALWAYS residual risk. There is no such thing as invulnerability or immortality. Everything can be taken down. Security is not an end state. It is an ongoing process. If you do not continually improve the security of software, by addressing known vulnerabilities, performing a sane risk assessment, identifying threats, and doing what you can to mitigate them, you will regret it. The notion that implementing fixes is pointless because there will always be more vulnerabilities is wrong. Yes, there will always be vulnerabilities. Yes, security is a job that never ends. No, you can't ignore vulnerabilities once you know of them.

Comment: 100% paper (Score 0) 167

by Junior J. Junior III (#46670475) Attached to: A Rock Paper Scissors Brainteaser
100% paper strategy will win 50% of the time. Of the remaining 50% of games played, (assuming even distribution of the remaining picks) 25% will be losses and 25% will be tied. Thus, you'd be assured a win-loss-tie ratio of 2-1-1, which is quite good. If their remaining options are not distributed evenly, this changes things. You'd want to look at their play to see whether there are any discernable patterns, such that you know that Rock will be played for certain every other move, for example. Then you just sync Paper moves to their Rock moves, and play Scissors or Rock randomly for the other half.

Comment: Unequal, but also unquantifiable (Score 2) 156

Rather than asking whether they are equal, we should instead think in terms of how can we verify what they're worth? Is a source quantifiable? If not, it makes little sense to consider whether one type of source is equal to another. Just being able to identify what type of source a source is may be difficult or impossible.

Comment: Re:Education does not qualified make... (Score 5, Insightful) 491

by Amtiskaw (#46345311) Attached to: Do We Really Have a Shortage of STEM Workers?

Nonsense. You can easily hire top people, you just have to be willing to pay them enough. Whatever you're offering, keep doubling it and see if you're still not getting great candidates walking in the door. This is what Netflix do: They routinely offer salaries at significantly above market rate, and they have far less trouble hiring software engineers than the other Silicon Valley firms who complain about a lack of talent.

Now, you may say, "but we can't afford to offer salaries that high!" and maybe that's true, but it means that the candidates you want are out of your price range, not that they're not out there. For companies that can't pay, the solution is obvious: Encourage as many people as possible to enter STEM fields, thus increasing the pool of candidates, which in turn increases the smaller pool of elite candidates. Greater supply and equal demand causes a drop in price, and companies an now hire better talent for mediocre wages.

This equation is the only reason by tech companies have been attaching themselves to these ludicrous campaigns to teach everybody to code. Not because they really believe their some social benefit to every school kid being able to make their own smartphone app, but because they want to increase their profits by lowering their wage bill. This is hardly wild speculation, given we know for a fact that tech CEOs spent most of the 2000s illegally conspiring to lower wages via mutal non-recruitment agreements:

Comment: fuuuuuuck comcast (Score 1) 520

by Junior J. Junior III (#46318229) Attached to: Netflix Blinks, Will Pay Comcast For Network Access
I want my network neutrality back. This is the sort of thing that is going to squeeze out the smaller players, or anyone who the backbone operators and ISPs don't want to succeed. It will result in less innovation as startups who can't afford to pony up to the established powers who control the infrastructure won't be able to do business. Prepare for decades of stagnation and no progress as the big players concentrate on consolidating control and only improve things where they absolutely have to, incrementally, with no imagination.

+ - Owner: Vote, your choice: Get rid of Slashdot:Beta OR everyone goes elsewhere-> 1

Submitted by Ying Hu
Ying Hu (704950) writes "Slashdot Beta is not Slashdot:
What was loved about Slashdot does not appear in the new design — those creating the latter, please fire yourself and go work for a commercial consumer site (which we never read, and never will). OUR site should work without JavaScript, and JavaScript that IS used should to do something actually desired by a reader or commenter, not waste our bandwidth and CPU, and electricity, sending CRAP onto our computers. Improvements/ plugins,, won't be enough."

Link to Original Source

+ - Once Slashdot beta has been foisted upon me, what site should I use instead? 2

Submitted by somenickname
somenickname (1270442) writes "As a long time Slashdot reader, I'm wondering what website to transition to once the beta goes live. The new beta interface seems very well suited to tablets/phones but, it ignores the fact that the user base is, as one would expect, nerds sitting in front of very large LCD monitors and wasting their employers time. It's entirely possible that the browser ID information gathered by the site has indicated that they get far more hits on mobile devices where the new interface is reasonable but, I feel that no one has analyzed the browser ID (and screen resolution) against comments modded +5. I think you will find that most +5 comments are coming from devices (real fucking computers) that the new interface does not support well. Without an interface that invites the kind of users that post +5 comments, Slashdot is just a ho-hum news aggregation site that allows comments. So, my question is, once the beta is the default, where should Slashdot users go to?"

Comment: Re:More mission creep (Score 1) 133

by c4tp (#46119179) Attached to: Feds Grab 163 Web Sites, Snatch $21.6 Million In NFL Counterfeit Gear

Customer and Border Patrol

Border Patrol is just a small part of the Customs and Border Protection (CBP) agency. CBP mainly inspects people and goods that come into the U.S. through any port, whether it's by land, sea or air. So they have officers all over, and intercepting counterfeit imports is part of their mission. Immigration and Customs Enforcement (ICE) is the other agency within DHS that has boots on the ground to find violators after they get past customs. They should be part of a task force to find illegal imports as well.

Border Patrol is probably what you're thinking of, they are the ones actually patrolling the border. Or are you thinking of the TSA, which is yet another part of DHS?

"The Amiga is the only personal computer where you can run a multitasking operating system and get realtime performance, out of the box." -- Peter da Silva