Slashdot is powered by your submissions, so send in your scoop

 



Forgot your password?
typodupeerror
×

Submission + - Dice Ruins Slashdot (slashdot.org) 12

An anonymous reader writes: In an attempt to modernize Slashdot, Dice has removed everything that made Slashdot unique and worthwhile and has turned it into a generic blog site. User feedback has been unanimously negative, but this is to no avail, and users will have to head elsewhere for insightful and entertaining commentary on tech news.

Submission + - Ask Slashdot: Has Gmail's SSL certificate changed, and how would we know?

An anonymous reader writes: Recent reports from around the 'net suggest that SSL certificate chain for gmail has either changed this week, or has been widely compromised. Even in less-than-obvious places to look for information, such as Google's Online Security Blog, are silent. At the moment, the blind are leading the blind to blindly trust the new certificates in order to see the dancing bunnies in their emails. The problem isn't specific to gmail, of course, which leads me to ask: What is the canonically-accepted out-of-band means by which a new SSL certificate's fingerprint may be communicated and/or verified by end users?

Comment Re:This is what IDS/IPS appliances are for... (Score 1) 99

>-yes, that's like saying "don't download virii from the net and run it" - of course.

No, it is nothing like that at all. It is saying "Are you on the guest list? No?, then you cannot run at all, and I am going to call security on you."

> When it's an obfuscated "trusted" host service being exploited it makes it that much more obfuscated.

What, are these Windows boxes directly connected to the internet without a firewall or IDS in between them? If my Windows Service Host is trying to contact port 443 at wherethefuckever.x389af389w8.ch that should set off an even bigger alarm bell then the damn web browser doing so.

Comment Re:This is what IDS/IPS appliances are for... (Score 2) 99

Anti-virus is a failure. I can whip up a trojan in pretty short order that will not be (and may possibly never be) detected by A/V. First order of failure is allowing unsigned executables from running. Second order of failure is allowing new executables on the system and nobody hears anything about it. An offline style tripwire type scan should be ran once a week or so on the systems to detect changes in the filesystem. The final failure is unaudited egress traffic to any system. Who cares if the traffic is encrypted, why is it occurring in the first place should be the question.

Comment Diana Moon Glampers: UX Designer (Score 4, Insightful) 729

As much as i applaud Apple for finding homes for physically challenged mice, that doesn't mean the rest of the mice should have to wear sandbags.

Diana Moon Glampers as a UX designer. That explains a lot, actually.

I miss the days when it was UI - the user's interface with the computer. An interface. The thing that makes it possible to make the computer do what you want it to do. Design it for maximum functionality with minimal interference.

Somewhere along the line it became UX - the experience. The fluff. The marketing. Doesn't matter if it's functional or not as long as it feels good. You're not allowed to learn anything, you're not allowed to even know how it works. There's nothing to master. Just one button that says "Make it look like whatever the other UX people think is fashionable this year."

In Windows-land, we lost (unless you hack the registry) focus-follows-mouse from XP to 7, and the ability to resize an arbitrary number of windows when we went from 7 to Metro. In Web-land, we lost Firefox. In GNOME-land, we're about to lose middle-click-to-paste. (I probably shouldn't have mentioned focus-follows-mouse, or they'll take that too.)

First they hide the feature. They they claim telemetry says nobody uses it. Then they take it away. (Never mind the fact that the sort of user who does use the feature either delays the upgrade, hacks around the limitation, and is likely to pre-emptively disable telemetry as a matter of course.)

We used to be Emperors and Empresses over our machines. Now that any fool can design a UX, we have UIs designed by fools for fools. It's all kind of mixed up in my mind, but the past five years of change for change's sake have been a doozy.

Comment Re:cost of doing business (Score 5, Informative) 168

>And what rules were broken

http://codes.lp.findlaw.com/nycode/GBS/22-A/350-a

Don't be a dumbass, there has been false advertising laws for years to deal with issues like this in meatspace. Lying out of your ass about products your are selling has nothing to do with free speech.

Comment Late-breaking wind: Quadhydrocarbon release! (Score 4, Funny) 106

The Council has declared a day of rejoicing, relaxation and release as intelligence reports from the blue world confirm that the latest invader from the blue world has failed to detect appreciable quantities of quadrohydrocarbon.

K'Breel, Speaker for the Council, addressed a tightly-clenched world: "Our collective tightening effort over the past year has not gone in vain. Long and hard have we clenched, and now it is time for all right-thinking citizens to reap the rewards. Our symbol must no more be the clenched fist, but the unfolded flower! REJOICE with your podmates, RELAX your cloacae, and RELEASE upon our impoverished atmosphere a deluge of accumulated flatulence so great that the very canyon walls shall shake, enveloping the invaders in dust and cutting off their vital power!"

When a junior reporter reminded the Speaker that the latest invader was powered by something other than mere radiant stellar energy, K'breel, in his mercy, had both of the junior reporter's cloacae sealed until the pressure of accumulated quadrohydrocarbon was released through the second-weakest point of structural failure: the gelsacs.

Slashdot Top Deals

"I've seen it. It's rubbish." -- Marvin the Paranoid Android

Working...