Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×

Comment Re:Huh? (Score 1) 104

Perhaps you should include engineers from the real world in your deliberations. The IETF has consistently and adamantly refused to accept that NATs exist for security reasons (NOT JUST TO SAVE ADDRESSES!!) and are not going to go away with IPv6. In that regard, please stop inventing protocols that require a masters degree thesis to pass through NATs. (Thesis here: http://www.minisip.org/publications/Thesis_LaTorreYurkov_feb2006.pdf)

Perhaps, many within the IETF understand that NATs exist to generate more address space and they also provide some firewall-like security features. Perhaps some of them might even think that when the additional address space needs are unnecessary, the use of NATs as a firewall is also unnecessary. You might even just use, I don't know, something that is explicitly a firewall and not bother NATing.

If you really want security, having a device which functions explicitly for security might be better than, "Hey, I'm doing this NAT thing because I want more address space at home instead of that stinking single static (most people dynamic, sigh) IP my ISP is giving me. But now that I have 18 quintillion IP addresses at home I can't possibly get rid of NAT and use a firewall that blocks incoming connections because, ..., Bueller?"

Comment Re:Google it (Score 1) 70

My googlefu may be poor. I'd like to think that since I did this a few months ago, it has become more available since then. But it could be that my searching just kind of sucked. I had two problem though. One is that of the places saying they support DNSSEC, I had a very difficult time figuring out what that meant (they'll let you enter records on there site, you can have records in your own DNS (duh), or you can actually upload your DS records to your parent in some fashion). For the most part it looked like I would have to register domains at registrars to find out.

Time (maybe even laziness) was the other issue, particularly after a few conversations with the help contacts at different places. I figured I didn't want to spend the time to go from one person who has no idea what DNSSEC is to the next, to another, to finally someone who knows what it is but tells me they don't support it. I was pretty discouraged. Godaddy was the first one I found that had online instruction about what they did (upload DS records using a web based tool) so I went with them. But I figured there must be other choices. It didn't occur to me to ask slashdot at the time. But it did when the godaddy buyout came up.

Comment Re:DynDNS does it (Score 1) 70

This is good to know. When I looked at dyndns a few months ago, I was unable to find away to upload DS records to my parent. In fact, this appeared to me to be a registrar that would only support DNSSEC if it managed the DNS (which would already put it ahead of most at the time). I'm hoping this is a fairly recent change and it wasn't just my failure to figure it out at the time. I was a bit disappointed too, because I really like dyndns. It seems to me to be one of the more professional registrars (more interested in being a good registrar than in trying up-sell everything).

Submission + - What Registrars support DNSSEC?

baerm writes: With GoDaddy being purchased by private equity firms (i.e. it will be sucked dry with service reduction and price increases until it dies) what other Registrars support DNSSEC? GoDaddy is the only registrar I could find that supports DNSSEC for registrees running their own DNS. It was fairly easy to add the Key Signing Keys' DS records to the parent zone using its DNS config. I did find a couple other registrars that were 'testing' DNSSEC or that would support DNSSEC if they ran your DNS. But I couldn't find any other registrars where you could just register, run your own DNS, and use DNSSEC (i.e. with your DS record in your parent zone). That being said, I was only able to research a small percentage of the registrars out there. Does anyone know of registrars, other than GoDaddy, that allow for DNSSEC? That is, registrars that have a method to pass the DS records to the parent zones for their registeree's domains?

Comment Re:Funny... (Score 1) 391

she had been using an Asian-style vegetable peeler to try to pry open the door, when the aforesaid burlies saw the peeler they "thought it was a cleaver" and as we know two large men are no match for a distraught 89 pound woman! The officers, "fearing for their lives" opened fire and shot the lady many, many times (cops NEVER shoot to wound or disable) at point blank range!

I don't really like defending the police. There are many cases of abuse. But this is a bad example. The Asian-style vegetable peeler in this case was in the shape of a cleaver with a 6" blade (10" overall) at the bottom and a second peeling blade in the middle. A picture I found of it was here:

http://protectsanjose.blogspot.com/2009/09/rose-by-any-other-name.html

An 88 pound woman could severely injure and/or kill two grown men with that. IIRC, she was coming at them with it held over her head. If someone was coming at me like that, I'd consider my life at risk. Now, I don't know what happened before that. I.e., police seem to have a need to 'dominate' any situation and I could imagine that behavior making an agitated person more agitated. There may have been a way to handle the situation leading up to the shooting better (I just don't know). But once she was coming at them with that thing, I can easily understand them thinking their life was in danger.

Comment Re:You're misunderstanding the argument (Score 1) 670

No they're not, they just better understand the argument
than you do apparently, and Google's conclusion doesn't disagree with
them.

I think everyone agrees C++ can theoretically perform
faster, but as Google notes you need to perform a lot of optimisations
by hand which requires a lot of time, and a high degree of skill to
perform.

I would suggest you re-read the article (or read it). The conclusion
was that a simply written C++ was much faster (almost an order of
magnitude) than a simply written java program. Your argument would
follow that Java could theoretcially perform as fast as simple
un-optimized C++ but it would require a high degree of skill and time
to make it that way. I.e., everyone should write their code in C++.

The 'optimized' C++ speed was not shown, nor the 'optimized' Java (it
just mentioned that the optimized Java was as fast as the simple C++).

Now, the test was a narrowly defined test. And speed performance is
not always the most important feature of a software project (maybe not
even the majority of the time). So I think this test shows what most
people already know. C/C++ is faster than Java. But then, for many
(most?) projects, it doesn't matter that much and other language
features can be more important (ease of development, familiarity,
etc...).

Comment Re:IPv6 is overwrought (Score 1) 173

How about this? This is my proposal for IPv5. Whack another two octets onto the front of your addresses, so that the entire 0.0.0.0.0.0/48 block is reserved for IPv4 use - if the first two octets are zeroes, it's IPv4 over IPv5.

...

Anyone know how to set up a RFC?

Yes, got to www.ietf.org. Become active in that organization and try to start a work group (or find one where this RFC would be applicable), write and submit your RFC. Of course, the main problems: no one is implementing it at ISPs, no one is implementing in hardware, compatibility issues, ISPs won't implemented until they have too (i.e. they believe they lose money without it or believe they will make more money with it), everyone one and Dilbert's mother will have an idea of what to add / change in your proposal before anyone accepts it and actually does any of the above. If you're extremely successful, you end up with a bastardized IPv4 that will take longer for anyone to use than IPv6 (i.e. which is already defined and available in modern devices), does less, and has a much smaller address space than IPv6. I'm not thinking it would be a big win.

Comment Re:Ignorance of net neutrality (Score 1) 72

- Jail a person because they have sold drugs

- Jail a person because they force people to sell their bodies

- Jail a person because they ran over someone else while drunk

One of those things is not like the other...

Interesting, the oddball I would have picked is the one above that does not have a person actively doing something to second person that the second person doesn't want.

Comment Re:Good luck with that (Score 1) 388

FWIW considering we're fairly far off topic at this point and of course the 'I am Spartacus' line is a Hollywood invention. But Spartacus was assumed to have died in the final battle without his body being found/known. His 'I am Spartacus' followers that lived were not very lucky either, six thousand of the slave army that Spartacus led were crucified after the battle (and placed all along the main drag into Rome). I don't think they (the man?) had any qualms about dealing with large groups of 'anonymous' people, even in the Bronze Age.

Comment Re:Why wouldn't you? (Score 1) 151

If you're not paying for a service, then you are the product being sold.

You write that as though being a "product" somehow dehumanizes you, and yet at the same time you're creating a false sense of self-worth. Why is it a problem if I'm the "product"?

Not the GP, but it does dehumanize you. Try saying this,

I threw that product in the trash when I was done with it.
I threw Mary in the trash when I was done with her.

Unless you're a sociopath, the second one should have some serious negative connatations. Although I would agree that being a 'product' might not be all bad. It may be a trade off that's worth it. I would argue that generally the productising of humans is not transparent. The majority of people being treated that way don't realise it, or its full implications, and often don't have a choice whether to be treated that way or not. It is inherently flawed and bad for society unless it is very carefully done.

Comment Re:Osama Bin Laden (Score 1) 570

The plus side it is possible to recover. Unfortunately dumb asses in congress want to cut taxes, renew tax breaks, and stop government programs.

When you're on the verge of bankruptcy, reducing waste and increasing income is precisely how you do recover. On a national level that means cut taxes and eliminate wasteful government jobs programs.

I can see what you mean by waste, 'eliminate wasteful government jobs programs' (although when that is a very tiny part of the federal budget, by itself it won't do much, military, SocSec and medicaid/medicare are the really big items). But since it's our government going bankrupt, I don't think 'increasing incomes' = 'cut taxes' will do what you think it will do. Ever time we've tried it in the past 30 years, government debt goes up, median income goes down. Our government loses and the only people that gain are people in the top %5-%10 income bracket (and the only big gains are in the top %1). To me it sounds like the building of a crappy surf society where most of us lose.

Comment Re:OMG YOU LEMMINGS!! (Score 1) 354

Um, how in the world is an IT guy making a Star Trek reference surprising? Why would an educated Arab making a comment referencing one of the most famous Arab poets (Kahlil Gibran) be surprising? (I've read through 'The Prophet', it's a poetry book that has as much to do with Muslim extremism as Shakespeare). I think you might need to take the aluminium hat off and/or come out from under the bridge and relax a little bit.

Surely, in the big scheme of things, Osama's death really doesn't matter that much. Don't take the mediatainment as seriously as it thinks you should.

Comment Re:Well... (Score 1) 262

Reps last 2 years, Presidents 4, Senators 6. It's all right there in the current system. Nobody has "job security." The majority can vote out anyone at every election.

Exactly, I think a better 'fix' would be to remove or at least limit the money involved in getting elected. As long as money is the main motivator (because $ does = votes), politicians will have to spend the majority of the their time seeking donations instead of legislating and US politics will continue down the plutocracy path. That said, I don't know what the best way to do this would be: enforced spending limits?, public financing?, enforced receiving limits?, something else?, some combo?

Slashdot Top Deals

Kleeneness is next to Godelness.

Working...