Slashdot is powered by your submissions, so send in your scoop

 



Forgot your password?
typodupeerror

Slashdot videos: Now with more Slashdot!

  • View

  • Discuss

  • Share

We've improved Slashdot's video section; now you can view our video interviews, product close-ups and site visits with all the usual Slashdot options to comment, share, etc. No more walled garden! It's a work in progress -- we hope you'll check it out (Learn more about the recent updates).

×

Comment: survival of the fittest (Score 1) 48

by slashmydots (#49361777) Attached to: Startups Increasingly Targeted With Hacks
Newer companies are more likely to have newer IT infrastructures and newer security. If they have a less secure setup than an established mega-corporation, it's because someone massively messed up and had their priorities wrong or they chose a crap vendor or two after buying into their marketing fluff about how secure they are. I suppose they also could have gone with whoever was cheapest for antivirus, firewall, monitoring, etc and that's an equally dumb mistakes. The good news is, startups that keep making stupid mistakes are going bankrupt anyway. The smart ones shouldn't get hacked because they're smart enough to prevent it and they will succeed anyway. So this is a less of a problem than you might think.

Comment: Re:stupidly weak (Score 1) 257

by slashmydots (#49349915) Attached to: Generate Memorizable Passphrases That Even the NSA Can't Guess
No, it gives you about 5 bits. That's because 1 letter vs 1 word is practically the same thing as far as checking difficulty and generation difficulty and programs can treat whole words as 1 item while brute forcing. To try every word in English with every variation in case sizing takes less than a second. Checking every combination of 2 words in English is harder but still under a second. Once you get to three words, it's probably between a few seconds and a few minutes but the list to check is still pathetically short compared to if they were random letters.

Comment: not the problem (Score 1, Redundant) 92

A monkey could configure a 10TB array right now and power isn't exactly a problem. Putting it in a single drive is neat but the #1 problem with SSDs right now is price. The prices are horribly inconsistent day to day. They can make a 2Tb or 10Tb or 10000TB drive for all I care but what I need for my many, many custom builds at my shop is a low cost 240-256GB SSD.
Once in a while I can get a $90 silicon power S60 240GB SSD. Crucial's MX and BX series hit that low once in a while. All others are perpetually above $100 which is too expensive for a Facebook wonder do-nothing PC with a pentium 4th edition and 4GB of RAM. Some people do reasonably go past 120GB too so I do typically want to use 240GB drives. I blame smartphones' cameras and itunes' automatic backup of ipads and other devices.

Comment: stupidly weak (Score 0) 257

by slashmydots (#49349621) Attached to: Generate Memorizable Passphrases That Even the NSA Can't Guess
Yes, use 100% dictionary words. That's a great idea. The idea of a passphrase is to make it so many letters, brute forcing won't work. But dictionary attacks don't have to be individual words. They can easily be combinations of all known dictionary words without having a ridiculous result set to try compared to random letters. So what you need to do is come up with multiple words that you can remember then put a number or two between them. DO NOT replace e with 3 or a with @ or S with $, as those are known and common attack possibilities too. So if you choose "chickenisdelicious7nomnomnom" nobody will ever, ever, ever figure that out. If you choose "chickensandwichwaffles" it could get reverse via dictionary phrase attack in under a second.

Comment: Re:Disaster Recovery? (Score 2, Informative) 167

by slashmydots (#49347473) Attached to: NJ School District Hit With Ransomware-For-Bitcoins Scheme
In case you're not familiar, let me give you the breakdown. The worst educated, fat, smoking, abrasive personality, asshole nurses work at kidney dialysis places. That's simply where the worst possible employees end up from that career field. The worst IT workers end up at schools. It's low pay and higher demand than corporate environments, the budget is a joke, and they're perpetually understaffed. So you get some clueless moron who can't hold down a real job working as the IT administrator at any given school.

To err is human -- to blame it on a computer is even more so.

Working...