Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!


Forgot your password?

Comment Re:Scripts that interact with passwords fields aws (Score 1) 362 362

" I've been in the software business for almost 40 years,"

Software, not security.

"I suggest you study texts on encryption, and maybe read the technical details of how a good cloud-based password manager like LastPass actually works"


That's all I fucking need to know. A piece of paper holding my passwords is more secure in my wallet than my passwords are with LastPass or KeepPass. I also have the ability to actually defend my stuff if someone tries to take it, whereas someone hacks your shit and it's gone, you're fucked. By the time you realize it, it's too late, they've made off with your stuff.

"Your super-whiz-bang method still requires a password, it seems"

Good authentication requires everything, including a password. We could switch to biometrics, you're fucked because there are any number of ways to get around that, including taking your head off. With a password added for second verification (or third verification, in this case) taking your head does me no good unless I was able to get the password from you before hand.

"How do you hash the passwords for your sites? Still using MD5?"

You silly noobs using hashes and salts. Nowdays smart people embed that information in an image file, good old steganography. You think you got a password database? Enjoy the cluster of hentai you just downloaded. Get past the fact that there's information inside the image? Good luck decrypting the white noise format used to encode it. Unless you have used my server software, you aren't going to be able to do much with it.

Comment Re:A simple proposition. (Score 1) 218 218

They used to sell a service where you could subscribe to Slashdot [slashdot.org] for some nominal fee per 1,000 page loads. The fact that they quit selling this service is their own problem, the scaffolding is all there. It just needs to be turned back on and made worth the investment.

I subscribed to Slashdot right up until their subscription system broke.

My second official act as the new owner of Slashdot (after tearing out the videos and replacing them with fish tanks) will be making sure that goddamn subscription system works again. It was easy as pie and occasionally I would even pick some insightful commenter and gift him 5000 page loads.

When Slashdot started refusing my subscription requests, I figured it was only a matter of time until they'd get sold. Fortunately, I had sufficient bottle caps, pre-war money and Legion Denarius to purchase the site. Once the sale goes through, things are gonna be different around here, lemme tell you.

Comment Re:There we go again (Score 1) 218 218

I'd be good with that. Give everyone an incentive to never go to web sites again, or at least stop browsing mindlessly and instead pay attention to what they are doing. Not a bad thing. Society has functioned without web sites, and it will again (and pretty soon too as it's all moving to phones/tablets now anyway).

Yet you visited Slashdot long enough to not only click through to this article, but also post 7 comments.

For someone so keen on seeing the death of the web, you sure use it alot. Or when you said "Give everyone..." did you just mean "everyone else", because your rules don't apply to yourself?

Society has functioned without web sites, and it will again (and pretty soon too as it's all moving to phones/tablets now anyway

In what way do you envision phones and tablets making the web go away? I browse the web on my tablet and phone much more than on my computer.

Comment Re:A simple proposition. (Score 1) 218 218

Headache inducing? Let's not forget people who are subject to epileptic seizures. I remember some of those pages that stabbed into my brain painfully. If I were an epileptic, I'm sure that some of them would have triggered a seizure. Think of MySpace as a prime example of the crap I'm talking about.

Comment Re:A simple proposition. (Score 1) 218 218

One thing about advertising - all of my efforts to block advertising still allow some ads to come through. I do see an occassional advertisement.

Every single advertisement that I DO SEE is hosted on the server which is serving up the content that I am looking at. If you are hosting your own blog, on your own hardware, and you serve up an advertisement with each page, I WILL SEE that advertisement. I may or may not LOOK AT the ad, but it will load, and I will see it, at least peripherally.

Comment Re:Page loading has always been far slower with ad (Score 1) 218 218

I think the advertisers are stuck between a rock and a hard place. The metrics show that their ads have lousy response rates, so they make them more obtrusive, which increases their click-through rates, yes. But then those buying the advertising eventually look at 'completion rates', and find that the obtrusive ads have lower completion rates - IE somebody actually buying the product/service, signing up, whatever. Most of the increase is from a higher mis-click rate where the user is hitting close or back as quickly as they can.

While it's true that I tend to click on the obtrusive ads much more than the low-key unobtrusive ones, that's only because I'm trying to click on the f'ing tiny little close button (which is even harder to hit on a tablet or phone). Then when I click on the add because I missed the close button by a pixel or two and the advertiser's page loads, I'm pissed off at whatever they are advertising, so I can't imagine that my click was worth paying for.

Comment Re:A simple proposition. (Score 1) 218 218

"But, it is an accepted social structure"

Accepted by whom?

I'm not even going to attempt to guess what percentage of us refuse to accept it. But, there are those of us who simply DO NOT accept that we must watch meaningless advertisements before we can get to the page contents.

If the advertisers COULD successfully target my interests, I might actually look at an ad now and then - before I did a search for that product, to compare it to other similar products. Then, when I've compared them, I often go to Ebay to see if the item is available at some huge markdown. I'm in the market for a megger, for instance. I don't SEE advertisements for meggers, despite the fact that I've already done a number of searches. Let's SUPPOSE that an advertiser were shrewd enough to catch on to my megger searches. He starts serving up megger advertisements, starting with Fluke. The prices in the ads start at over $1000, because the vendors who pay for advertising need to recoup their advertising costs. More reasonable prices are available directly from Fluke and Fluke approved vendors around $500 to $600. But, suppose that I don't NEED new and/or calibrated equipment - I just need a semi-reliable meter. I can go to those vendors who aren't advertising, and sell the same equipment at less than $500. If I'm willing to settle for a used piece of equipment, I can find my fluke megger multi-meter for AS LITTLE AS $200.

Keep in mind that I've researched and purchased a number of meters over the past few years. Not one time have I ever seen an advertisement for electric/electronic testing equipment anywhere other than Ebay, and a very select number of industrial sales sites.

In short - the advertisers are utter failures. Despite all their attempts at "targeted advertising", they have completely FAILED to identify my interests and needs. Utter failures.

Now - why should I tolerate their in-your-face advertising bullshit, when they so completely fail to offer things that I actually need?

Notice that I'm not even really bitching here that the items advertised are to high. That's just a peripheral consideration to the fact that they've not merely missed the target. The damned fools aren't even hitting the range! They are standing at the east end of the range, the targets are on the west end, but their bullets are flying out north, east, south, and west.

We should reward such gross incompetence? Why?

And, no, meg testers are not the only items I've needed, and searched for. Try it yourself - do a search for industrial grade fuse pullers. There are a small number of different brands on the market, with Ideal being the standard. Do several searches over a few days, and sit back to see how many advertisements you get. I have Ideal fuse pullers in three different sizes in my toolboxes. A couple years ago, I purchased a lot-sale off of Ebay, and got 18 of the smallest for a couple dollars each. I gave them to my work-mates for Christmas. Despite the fact that I have an established history of searching for, and purchasing these things, I've NEVER SEEN AN ADVERTISEMENT FOR THEM!

Sample ebay sale, currently priced around ten bucks: http://www.ebay.com/itm/Ideal-...

Comment Re:There we go again (Score 1) 218 218

Imagine if all the effort and resources put into advertising were instead redirected to productive purposes.

You mean more productive like popups from every website saying "Support our site! Now that all internet Advertising has been banned, you have to pay us 17 cents for every page you view".

Comment Re: Now I won't feel guilty about using Adblock (Score 4, Informative) 218 218

Jesus Christ don't use AdBlock Pro. They do some pretty shifty shit to try and get paid to let ads around their filters on default configuration.

Use uBlock. Also use https everywhere. Fuck downgrade attacks.

You mean shifty shit like say right on their home page:

Unobtrusive ads aren't being blocked in order to support websites

And they also provide a checkbox right on the main options page that controls whether to Allow some non-intrusive advertising.

Comment Re:There we go again (Score 1) 218 218

And - how does that differ from life in the US? Most people . . . niche talents . . . few doing nothing but leading. Especially now that young adults find it necessary to work two or more part time jobs to support themselves, most people do spend most of their time working their niche talents.

Comment Re:If there was a criteria for safe unlocking (Score 1) 57 57

If there was a criteria for safe unlocking of the hinged tail section then why wasn't it interlocked until the criteria was satisfied?

A bigger error here is reliance on operator training. It's the least reliable form of ensuring a certain outcome.

From TFA:

Those ships will include an extra mechanical device to prevent pilots from inadvertently unlocking the tail sections, known as “the feather” early, Virgin Galactic wrote in a report obtained by Discovery News.

Comment Re:Whistle blower (Score 4, Informative) 468 468

And all three of which went to prison for their technically illegal actions.

Wrong. Martin Luther King, Jr, Rosa Parks and Susan B. Anthony did NOT go to prison. They were arrested, booked and released. MLK spent some time in a local jail, but that's not the same as being sent to prison.

A better example for Snowden would be Daniel Ellsberg, who is now seen as a hero.

Comment Re:Whistle blower (Score 5, Insightful) 468 468

He should have gone on the Sunday talk shows and say, "the government is doing really sleazy, illegal and unconstitutional shit, and I am violating my oath and the law by telling you exactly what they are."

When your oath to the government requires you to keep government wrongdoing secret, the problem is not with the whistleblower, but with the government.

"It's the best thing since professional golfers on 'ludes." -- Rick Obidiah