Slashdot is powered by your submissions, so send in your scoop


Forgot your password?

Comment: Re:I had this problem, then I got f.lux. (Score 1) 175

by rdnetto (#48663587) Attached to: Study: Light-Emitting Screens Before Bedtime Disrupt Sleep

On Unix, sadly, only Adobe Flash player detects color corrections and plays your video in proper color. Neither Google nor Mozilla have figured this out for flash video, either.

Strictly speaking, wouldn't you want the video to be in the adjusted colour? Most of my late night PC usage is watching video, and I don't even notice the change anymore. (It helps that Redshift gradually changes the colour temp.) That said, I found it made a huge difference to my sleeping patterns.

Comment: Re:a progressive new group (Score 1) 323

by rdnetto (#48663137) Attached to: Putting Time Out In Time Out: The Science of Discipline

your reference to male suicide rates means you're a "men's rights" nut too, so you're not only for conservatism, you're also robustly against anything that isn't conservatism.

I'm not a men's right activist / masculinist (I prefer egalitarianism), but a lot of the gender based inequities come down to the imposition of traditional values / stereotypes. In that sense, I think that such lines of thought are more probably more progressive than conservative, especially since things like allowing and accepting men to demonstrate feminine qualities are pretty much non-existent among conservatives.

Also, is it such a bad thing if a demographic has above average suicide rates and we want to fix that?

P.S. the parent post read like a troll, I just wanted to rebut that assocation

Comment: Re:I don't even... (Score 1) 323

by rdnetto (#48662981) Attached to: Putting Time Out In Time Out: The Science of Discipline

I'm thinking homework that is numerical or multiple choice

And that's your mistake. As I understand it, the point of homework (in addition to reinforcing what was taught), is to identify what the students did wrong and help them to understand the mistake. A simple correct/incorrect answer doesn't do that.

Comment: Re:Your power level! (Score 1) 54

by rdnetto (#48662841) Attached to: Texas Instruments Builds New Energy Technology For the Internet of Things

But the reality is that current requirements vary. A car battery is rated for ~300 A at 12 V. A laptop power supply might be rated for ~2 A at 12 V. An LED consumes about 10 mA at ~3V. A microcontroller can run off microAmps at 5 V.

All those voltages are within the same order of magnitude, but the currents span 8 orders of magnitude, and in practice you wouldn't even change the PCB design or wiring for anything 0.1 A.

Comment: Re:Your power level! (Score 1) 54

by rdnetto (#48662801) Attached to: Texas Instruments Builds New Energy Technology For the Internet of Things

If I'm reading the packaging info right, the pitch spacing is 0.50 mm. For context, that's about the width of a 0603 resistor (0.8 mm). So, if you have a very steady hand and a microscope, it should be doable.
Also, I suspect if there's enough interest someone like Sparkfun will start selling these on breakout boards...

Comment: Re:Why bother? (Score 1) 420

by rdnetto (#48648291) Attached to: Ask Slashdot: Is an Open Source<nobr> <wbr></nobr>.NET Up To the Job?

why is Apache still spawning processes for every request that comes in... don't they realize the overhead of that?

My guess is they're UNIX devs - under Linux (and probably some other Unices), forking is ridiculously cheap. In fact (IIRC), spawning a thread has more overhead than forking, since Linux threads are just processes which share resources.

I'm not sure how many people are using Apache under Windows, but I wouldn't be surprised if they were a minority.

Comment: Re:Hope it works better then my wallet (Score 1) 110

by rdnetto (#48635249) Attached to: RFID-Blocking Blazer and Jeans Could Stop Wireless Identity Theft

Ah, I think you misunderstood me. When I said that it uses challenge-response, I was referring to the cryptographic challenge-response (e.g. the card receives a message, signs it with a private key, then transmits the signature), in contrast to magstripe, where data is simply read from the stripe.

Comment: Re:No problem. (Score 2) 137

I suspect the test could be generalized to work for N variables, since the noise should increase as we move along a causal chain. The only issue is the exponential drop-off in confidence. If the accuracy could be improved, it could be quite useful for deriving or verifying Bayesian networks.

Comment: Re:Some people better be out of a job... (Score 1) 110

by rdnetto (#48634435) Attached to: Hackers Compromise ICANN, Access Zone File Data System

And replace it with what, exactly?

Seriously, how do you intend to manage all of the addressing, both the IP level and the human-readable level, without some form of central authority?

I've been playing around with some ideas lately on how to implement a decentralised DNS, and what it basically comes down to is how you resolve conflicts. e.g. Microsoft reserves, then I try to do so. Ideally, the order shouldn't affect the final result, because a first-come-first-server system encourages squatting. Crypto-based systems also have to consider if the domain name can be reacquired if the private key is lost/stolen.
Here's a quick summary of the different approaches:

Traditional DNS: uses first-come-first-serve (FCFS) and conflicts are resolved through legal means (trademark law). Conflicts are resolved by the registrar - the second application is denied because the name is already in use. Centralized.

mDNS: uses multicast, impractical for global usage. No conflict resolution. This is the only decentralized approach that doesn't involve a DHT.

Microsoft PNRP: requires registrars which sign names to handle conflict resolution. (The unsecured variant has no conflict resolution.) Also requires IPv6, which is currently impractical.

Namecoin (decentralized with FCFS): Conflict resolution is implemented algorithmically. There is a small (1 cent) cost associated with updates.

Decentralized with voting: whichever resolvent the majority decide is official gets the domain name. Impractical, due to ease with which fake votes could be created. (Can be mitigated by making voting expensive - the bitcoin approach.)

Decentralized with trust-on-first-use (TOFU): conflict resolution is implemented by the resolver. Where there is a unique resolvent, it is used and added to a list of trusted resolvents. Where there are multiple resolvents, and the name has not been resolved by the user previously, the client may check white/blacklists published by other clients whom they have previously marked as trusted. If unique resolution is still not possible, manual intervention is required.

Currently I'm leaning towards the TOFU approach, since it's an extension of what's currently used for SSH clients. The only issue is that allowing multiple clients to resolve the same name differently borders on breaking the internet (see RFC 2826). However, it does have the nice property that it's the only decentralized system where a name-holder have their private key seized by an attacker, and still recover the domain name (by creating new keys and having people blacklist the old domain name in favour of them).

If anyone has some ideas/suggestions on this, I'd love to hear them.

Comment: Re:Hope it works better then my wallet (Score 1) 110

by rdnetto (#48633401) Attached to: RFID-Blocking Blazer and Jeans Could Stop Wireless Identity Theft

The VISA Pay Wave doesn't have user challenge/response, it's simply a wireless magstripe.

Do you have a citation for that? It seems odd to me that they would use such a weak mechanism, when the existing chip already uses challenge/response.
The standard used is ISO/IEC 14443, which enables half-duplex communications, suggesting that challenge/response is at least plausible.

Additionally, in my country (Australia), I found that when they introduced PIN-less transactions for contact less cards below a certain threshold ($100), PINs were no longer required when the chip was inserted, which is consistent with my belief that the RFID mechanism is just another means of connecting to the chip.

Comment: Re:Hope it works better then my wallet (Score 1) 110

by rdnetto (#48630629) Attached to: RFID-Blocking Blazer and Jeans Could Stop Wireless Identity Theft

Got my passport in 2006, don't think it has RFID. My VISA card does - or did until I centered a hole punch over the chip and whacked it with a hammer. That was strangely satisfying :-)

I really don't understand this logic. Yes, wireless connections to the card are a risk (and I say that as someone who took measures to shield my wallet), but that risk is minuscule in comparison to the risks associated with using the magstripe (vulnerable to skimming) instead of the chip (uses challenge and response).
These days, if someone requires me to use magstripe, I look at the terminal extremely carefully before swiping.

Comment: Re:huh what? (Score 1) 388

by rdnetto (#48624911) Attached to: Sony Leaks Reveal Hollywood Is Trying To Break DNS

The practical effect is the same - the user is denied access to the site via an attack on the name resolution protocol. If the registrar is subpoenaed, it doesn't matter if they set the domain to resolve to a takedown notice or a NXDOMAIN result - the practical result is that anyone who doesn't have the site's IP address written down will be unable to access it.

Both hosting and registering the domain outside of the US will provide some resilience if you are doing something they don't like, though they can still block resolution for everyone who isn't using DNSSEC.

Comment: Re:Public road is not for joy riding... (Score 1) 679

by rdnetto (#48617349) Attached to: Economists Say Newest AI Technology Destroys More Jobs Than It Creates

There's a level in risk in life that most people are willing to accept in order to live life the way they want. Just because some people are happy wrapped up on cotton wool and kept away from any possible harm doesn't mean that sort of life should be inflicted on the entire population.

Society as a whole is what decides where on the freedom-safety spectrum it lies. Given that we already have speed limits, it's not unlikely that limits on manual driving may be put in place eventually.

Torque is cheap.