Forgot your password?

Comment: Re:Proof (Score 2) 82

by flux (#47563723) Attached to: seL4 Verified Microkernel Now Open Source

While there have been some Linux bugs due to the compiler, I can't really recall hardware problems that have caused security problems â" unless you already have physical access, and then all bets are off.

The compiler issue could be addressed by using a certified compiler, such as this: . Sadly CompCert is not FOSS.

Comment: Re:Where is IPv7? (Score 1) 250

Well, v4 doesn't require remembering IPv4 addresses either, but still it comes handy in a pinch to remember the gateway, the dns server, the WLAN access point, etc addresses. For some reason people really like to point out the Google's DNS server's IP, not its name.

Though remembering local gw and dns mostly comes to remembering the network prefix whcih won't be that large, assuming one has not used dynamic allocation for services in a network.

Comment: Re:Where do you draw the line? (Score 5, Insightful) 650

by flux (#46681193) Attached to: Should Microsoft Be Required To Extend Support For Windows XP?

Actually Google already gave the Wave to the Apache foundation, so I guess they're set from that point of view.

That aside, I don't think a company should be forced to provide any level of support for a ten-year-old product. They could even be up-front about ("this product will not be supported for longer than five years") and people still wouldn't care. Well, until the day came.

Comment: Reducing number of candidates (Score 3, Insightful) 465

by flux (#45550585) Attached to: Ask Slashdot: Why Are Tech Job Requirements So Specific?

If you can reduce the number of candidates you need to evaluate and interview, you are saving plain money. More effective to have them do the filtering in a distributed manner.

Of course, you might miss the perfect candidate that way as well. But, you cannot really put a price to that.

Comment: Re:Problem is dedupe (Score 1) 136

by flux (#44753899) Attached to: Software Developer Says Mega Master Keys Are Retrievable

There is a way to do dedup without having the key.

For example: the client takes an SHA256 of the data, then encrypts the data it with the lowest 128 bits of the SHA1, uploads the encrypted data to the server saying "this data has id ". The lowest 128 bits are then encrypted with the client key and uploaded as well. This way another party with the possession of the same data gets the server to merge their data (but the key still keeps hidden from the server). Servers makes an SHA1 sum of the encrypted data so that clients can quickly check if the data they are deduping is properly stored to dwarf data integrity attacks.

Not sure if this was the way Mega does it but it was something pretty close to it.

Comment: Re:Btrfs send & receive (Score 1) 227

by flux (#44388815) Attached to: Ask Slashdot: Asynchronous RAID-1 Free Software Backup For Laptops?

I lose the btrfs functionality of it repairing bad blocks. I'm pretty sure md doesn't notice the error if it doesn't come from the backing device in the form of an IO error.. So if btrfs gets a bad block from md, there's not much to be done, except to make a guess which of the mirrors has the copy and manually resync (if btrfs manages multiple devices, it can just do that automatically). I don't know how that would be even done. But at least I would know which file has the error and I can restore it from the backups. Metadata is duplicated so that shouldn't be an issue.

I also lose the ability to change the data layout at ease; in btrfs going from raid10 to raid1 to raid0 or adding new devices is just a matter of running btrfs balance (and btrfs device add). Md doesn't even support adjusting the number of devices in raid10 array, nor conversions from raid1 to raid10 (that can be done manually, but you don't have redundancy during the process).

In future I may lose the forthcoming ability to set redundancy level per subvolume or possibly even per directory/file.

Comment: Re:Btrfs send & receive (Score 1) 227

by flux (#44388607) Attached to: Ask Slashdot: Asynchronous RAID-1 Free Software Backup For Laptops?

That is quite correct but now a week goes by without someone joining #btrfs and asking about how to recover. And personally I just restored my / just a week ago.. Technically I shouldn't have, because I was using btrfs raid10 and only one of the drives had had issues (it was the old drive I was putting back; btrfs scrub; btrfs balance somehow made all drives have errors). Btw, the system did not survive the death of the drive either, I had to reboot it without it, whereas linux md survives these things very nicely.

But I'm hopeful of the future. Btrfs IS really a nice thing to have, at least if you have some SSD and fragmentation isn't an issue for you (say, for virtual machine images). I'm planning to put it on some spinning media as well, I shall see how that'll work out..

One picture is worth 128K words.