Silverdot writes "In an article on ZDNet, the author brought up a few cases of uneasy relationships between security researchers and software firms. While those who report the bugs should first seek to notify and work with the software firm to resolve the flaw, One researcher commented: "All researchers should follow responsible disclosure guidelines, but if a vendor like Microsoft takes six months to a year to fix a flaw, a researcher has every right to release the details." Should the onus be on the software firm to manage each issue and the relationship well, or does it fall to the morally responsible user?"

bigman2003 asks: "ADTmag.com recently released a list of average salaries for IT workers. Usually when I see these lists, I find out that I am grossly below the average salary. But this time I was very surprised to see that I am actually above the average! This is partly because of a recent raise, but it is also because the numbers quoted in this survey are lower than what I've seen the past from other surveys. This report quotes about $56,000 for the average application developer. I am a web developer (sure, laugh all you want) and I wanted to know specifically: How much are other web developers were making? And- How many hours a week does it take you to make it?"

belmolis asks: "For many years I've done almost all of my writing in TeX. This has increasingly caused problems with publishing in journals. For a long time, many journals reset what you sent them, so they didn't care what program you used. More and more, I find, they do, and in most cases, what they want is MS Word. Is there any good way to convert TeX to Word?"

alstor writes "The New York Times has an interesting story about the success of World of Warcraft, and whether it is hurting or helping the gaming industry; this goes along with an earlier post on an article from CNN. From the Times article: 'WoW is now the 800-pound gorilla in the room. I think it also applies to the single-player games. If some kid is paying $15 a month on top of the initial $50 investment and is devoting so many hours a week to it, are they really going to go out and buy the next Need for Speed or whatever? There is a real fear that this game, with its incredible time investment, will really cut into game-buying across the industry.' What is the Slashdot opinion on World of Warcraft's impact on the gaming industry?"

twigles asks: "Every gamer I know worthy of the title has logged 8+ hours straight on their favorite game. But I've seen several people become so hopelessly addicted to gaming that they cease to function in the real world. After having witnessed two married couples deal with alcoholism (one made it, one didn't) the symptoms are strikingly similar. Has anyone actually dealt with this with any success? I've seen occasional articles mention this problem, but are there any studies?"

Mr. Jax writes "6 years ago Mr Poet submitted the story Comparing MySQL and PostgreSQL. Since then both databases have evolved to wherever they are today. Are the points raised 6 years ago still valid? What has changed? Are there other things to consider since then (e.g. licensing)?" This is certainly a valid question since both databases have had to evolve with the times. Have these applications been specialized to fit a particular niche market or are they both still strong competitors? What does the horizon look like for the development of these programs, especially considering the recent MySQL partnership with SCO?

It doesn't come easy wonders: "While surfing the net, I ran across this commentary on Geocaching by Erin Joyce. My wife is keen on trying Geocaching one of these days and I began to wonder if anyone on Slashdot participates in this pastime? If you do, what do you use (equipment-wise) and what's your opinion on the sport?"

adwb asks: "I work for a small company which performs network installations and support for clients in the Seattle area. We have a handful of network admins and programmers who go out to client's offices to solve problems as needed. A problem we have been trying to deal with is the various administrator passwords for different client networks at different domain levels. It seems the easiest solution is not the most secure: just dump every client's administrator password into a text file and store it in a secure network location inside our local domain. Can any of you experienced network admins recommend a method (either pre-built software or custom database/interface solution) of storing client authentication information in a way that can be easily accessed by our employees (preferably from any computer, including their Pocket PC's) but secure from the outside world?"

Arthur B. asks: "Whenever I try to find a software product, I find myself browsing SourceForge, but it's really hard to find something, when I only know the features I want and not the name of the project. It's hard, once I find a software, to gather information about it's reliability (is it a huge collaborative OSS project, an IT giant driven project or an end of term student project). The same is true about package trees in Linux distros. I'd like to ask the crowd: Where do you pick your software (be it commercial or not)? How do you compare different products? How do you know what a software does exactly before using it? Does a website provide this kind of help? Please let me know your tips and tricks."

Hrodvitnir asks: "Yesterday the BBC reported that the hole in the ozone layer above the Antarctic is the largest on record. Today CNN says that it is recovering, or at least stabilized. Do we really know what's going on? Is this more bad science/false studies, or are they both partially right?"

Saqib Ali asks: "I am a regular reader of Bruce Schneier's Blog, Articles, and Books, and I really like what he writes. However I recently read his book titled 'Secret and Lies' and I think he has done some in-justice to the security provided by the 'Code Signing.' On page 163 of his books, he (Bruce Schneier) basically states that: 'Code signing, as it is currently done, sucks.' Even though I think that Code Signing has its flaws, it does provide a fairly good mechanism for increasing security in an organization." What are your thoughts on the current methods of code signing in existence, today? If you feel like Bruce Schneier, how would you fix it? If you feel like Saqib Ali, what have you signed and how well has it worked?

rikt writes "I am trying to implement MPI I/O for our CFD product. I am facing a problem with the portability of the generated data files. MPI2 interface describes a way to achieve this either by using 'external32' or user defined data representations. The problem is that ROMIO, the most widely available MPI I/O implementation, has not implemented support for any data representation other than 'native'. Do you know of any MPI I/O implementation that supports this, and is available on various platforms? I know IBM and Sun supports this, but I am looking for a solution on Linux and Windows (both 32 & 64 bit) as well."

modi123 asks: "I was spending a large chunk last weekend watching VH1's I love the 80's: Strikes Back with a couple of friends. We would comment and laugh at all the dreadful things we were into, and then the topic shifted towards old tech and gadgets from then. I brought up my old 486 Packard Bell (DOS 6.0, Windows 3.1, Doom, all for $3700.00), and it spiraled out from there. The usual things cropped up: Nintendos, Sega Master Systems, Apple II Gs, and so forth. Then it delved into more weird items: Rob The Nintendo Playing Robot, HyperCard, cell phones with 50 lb batteries, and the pager craze. I am curious what the /. community remembers as their favorite technology from previous decades (be it 70's, 80's or 90's). Perhaps we can even chart a timeline if people toss in when they first remember it."

chromis asks: "I am a 'Linux-from-scratch' like Linux user. I maintain my system for almost 4 years that way. I'm still using kernel 2.4, and I'm a little bit afraid for updating to 2.6 because of the problems like stability issues, driver subsystem problems, etc. I once tried 2.6.0 a long time ago, but I experienced random freezes which I could not diagnose. We all know about the development model issues, and I often read complaints about current kernel development practices. Now that kernel 2.6.13 is out, I really want to ask Slashdot: if you are a vanilla 2.6 kernel user, how are your experiences with these plain kernel.org 2.6 kernels? Is it really as bad as some people claim, or is 2.6 only usable when using a distro from a large vendor like Red Hat, SuSE, etc? I really would like to upgrade to the new vanilla 2.6 kernel eventually, but I'm a little hesitant. Any advice?"

Cr0w T. Trollbot asks: "It looks like New Orleans is going through something very close to the worst case scenario right now. This somewhat prescient study, written well before the hurricane, describes some of the challenges (engineering and otherwise) facing New Orleans. 'In this hypothetical storm scenario, it is estimated that it would take nine weeks to pump the water out of the city, and only then could assessments begin to determine what buildings were habitable or salvageable. Sewer, water, and the extensive forced drainage pumping systems would be damaged. National authorities would be scrambling to build tent cities to house the hundreds of thousands of refugees unable to return to their homes and without other relocation options.' The hypothetical is looking awful close to reality right now. What can be done about draining and rebuilding New Orleans in light of the massive flooding, and what can be done to prevent and/or lessen such disasters in the future?"

reedk writes "I was having a discussion with my boss about long-term archives, and we got on the topic of older files becoming un-readable by newer versions of software. Not only are those old Ami pro files unreadable by today's common word processors, but I have heard that newer version of Office can't consistently open very old versions of Office documents. With the increasing retention periods being forced by current and coming regulations, this could become a problem of compliance in the future. We want to pursue this topic, but to build support for it internally, I am looking for examples of older file formats that are no longer readable by newer version of the same software or due to the market death of the product. If true, this would lend a lot of force behind moving to products that have an open file format. Can Slashdot readers come up with examples of this, or ways they have had to get around these kinds of problems?"

puargsss asks: "For many people a bicycle is not a viable form of transportation to work due to lack of storage space. Are there any products out there suitable for transportation to a working environment (the ability to store them inside is essential), or a detachable/retractable set of wheels similar to heelys that are built for a working environment? I normally rollerblade for sport/exercise, but it is fairly unprofessional to show up in my workplace with the rather large and clunky traditional equipment. Any ideas?"

Cultural Sublimation asks: "My brother's band is putting the finishing touches on their new album. They have published via a small independent label before, but this time they are considering going for Internet-based distribution. They are quite open to fresh ideas: they are even thinking of releasing the album into P2P networks and using the tip-jar model for revenue. It would also be nice to give people the possibility of buying online the physical CD with the artwork. They are therefore looking for a publisher which: a) won't take away their rights; b) allows for distribution via P2P (perhaps even providing a tracker for torrents); c) facilitates the tip-jar model; and c) allows physical CDs to be shipped on demand. What are fellow Slashdot readers opinion on this?"

erica_ann asks: "Fact: You can have the knowledge without having to pay to be Certified when it comes to computers. Another fact: Just because you have the certification does not mean you actually know the material as well as someone who is not certified. You might just be good at taking tests. So what is the point of getting IT Certifications? To have a piece of paper?"

ThiagoHP asks: "I have developed MultiMAD, a rapid application development and prototyping for for mobile devices in my master's course, and now I want to share it with the community. It's written in Java and it has a plugin architecture in order to support different mobile device platforms (WAP, J2ME, PalmOS, etc). I want to give the freedom to anybody write their plugins, even closed-source, as long as the tool itself is not modified for them to run. This implies that GPL cannot be used. At the same time, I do not want any closed-source tool based in MultiMAD code, so licenses such as the Apache one cannot be used. Am I right in my assumptions regarding licenses? What license do you suggest?"