Catch up on stories from the past week (and beyond) at the Slashdot story archive


Forgot your password?

Comment Re:Freeze Distilation != Normal Distillation... (Score 1) 228

There, fixed it for you.

No, I'm not kidding. Remember brewing is the alcohol-creation step before distillation.

The fact that this is freeze-distilled still makes it beer: unlike normal (boiling) distillation, you keep the wash, not the distillate. (How they avoid making it taste like ass is another question.)

Comment Re:Health or Politics? (Score 1) 120

And sometimes, it's about Politics in Health.

China isn't the first nation to grapple with HIV in blood transfusions. The United States' blood transfusion industry lobbied in the 1980s to suppress the issue over concerns about their reputation and revenue, and succeeded to some degree.

In this case, China's communist government is probably being lobbied, too -- and as an easily corrupted system with great powers, we see instances like this.

Fortunately, there are also top-level politicians trying to turn it it around.

Comment Re:Two reasons for SSL (Score 1) 269

Certificates don't ensure you're talking to anyone in particular, other than someone who has managed to get their hands on the certificate, which, based on prevalance of rooting and etc., could be quite a range of people.

Certificates are public information. Oh, did you really mean, private key?

Certs reliably encrypt traffic between the two endpoints. That's the entire usefulness to the two endusers.

Nope. Bulk ciphers are what encrypt traffic between two endpoints. Did you really mean certs provide key exchange?

HOWEVER: An entire deceptive financial ecosystem was created when the browser manufacturers put those "scare the heck out of the user" dialogs in there; that meant that ecommerce types *HAD* to get certs that would not raise those warnings -- meaning, buying a bag of bits from someone else, a bag you could have made yourself for free, for all the good it would do you, instead purchased for $50 (or many more) dollars.

It's all based upon one key falsehood: The idea that a cert "assures" you that you're talking to someone in particular.

Wow, you like, have no idea what root trust provides, do you? If your private key is secured properly, it provides reasonable proof that the entity at the server end is related to the domain owner.

Yup, there's problems with the human-level implementation. Like, oh, govenments "leaning" on CAs to provide them with an intermediate certficate. Or, yes, private key security.

You're paranoid about (and it's possibly Proper Paranoia®) that any site may have weak private key security, especially against, erm, "hackers". Fine, the mom'n'pop websites should probably leave their SSL handling to a professional webhost since they're just as like have bungled the security if they did it on their own. Generally, though, you can reasonably trust private key security with organizations that are likely to have professional network security staff.

I'm well assured every time someone in my organization (a network appliance manufacturer) needs to help a customer with an SSL/TLS related issue and the customer meticulously coughs up all the information needed except the private key.

Comment Re:BFD (Score 1) 175

Step 1: Install Wireshark

Step 1.5: Install HttpFox (Firefox on any OS) or HttpWatch (IE or FF on Windows).

For HTTP traffic, both will supplement WireShark by giving you a clear browser-level picture of what data your browser is sending and receiving.

For HTTPS (or other SSL/TLS tunneled protocol spoken by your browser), it's also the practical way to get a cleartext version of the communication.


Submission + - Economy tanked while government surfed porn ( 1

unixan writes: In a report by the SEC Inspector General that smacks of fiddling while Rome burns, 33 recent ethics investigations all showed that the government employees responsible for keeping an eye on the economy were instead obsessed with surfing porn — while the economy was tipping over.

One cited example:

A senior attorney at the SEC's Washington headquarters spent up to eight hours a day looking at and downloading pornography. When he ran out of hard drive space, he burned the files to CDs or DVDs, which he kept in boxes around his office.

Comment Re:For a program so hard to turn off (Score 1) 472

Happy shall he be, that taketh and dasheth thy little ones against the stones

This is an ancient Israeli wish for bitter revenge against invaders. Here is more context (in alternate translation):

8 People of Babylon, you will be destroyed.
The people who pay you back for what you did to us will be happy.
9 They will grab your babies and throw them against the rocks.

Comment Re:Bad Astronomy, Bad Taxonomy (Score 1) 93

2. The definitions refers to our the sun. Not the star which the planet orbits but 'the sun'. That makes it sound like extrasolar planets are not planets either.

Given that we don't have much information about extrasolar planets yet, making up such definitions is bad science in general, not just bad astronomy.

We aught to survey another system by probe before determining whether our local definitions apply to other systems. Especially, for example, rules for small objects determined by politics.

Comment Re:In Soviet Russia capitalism owns YOU. (Score 1) 370

Actually, yes, luggage as well as shipped items are "lost" all the time. Police, security guards, customs, inspectors, etc. are rampant with corruption.

This is why Russia has yet to have a true capitalist recovery: every lucrative business attempt is nickeled and dimed to death by thefts and rackets.

Comment Re:Video Games (Score 1) 447

--but from then on, I always opened my cartridges at the register after paying.

Unnecessary if you are in the US, or a country with similar consumer-protection laws. You are allowed to open the product at the store to inspect it prior to purchase.

If they object to having to repackage (e.g. shrink wrap it again), tough cookies, especially if you fully intended on purchasing the product and found it to be faulty.

Slashdot Top Deals

Avoid strange women and temporary variables.