Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror

Comment State level identification (Score 1) 59

Technologies like OAUTH 2.0 have been around for a long, long time, and their purpose is to provide a verifiable audit-trail for users.

And it works! Although there have been (and will always be) security issues, the reality is that technologies like SAML and OAUTH do provide a very useful level of trust.

Except that, although these technologies do allow for a useful transfer of identity, the agents widely used to provide this identity (the IDP) is never an entity that provides a uniformly useful level of identity.

Here I am: Bill Jones (not my real name) citizen of the UK (not my real country, either) and I have no way to properly assert that to, say, Bank of the West (not my real bank, either) or Northern Airlines. (not my real airline)

If I have to assert my true identity, I have a state-issued driver's license or passport. Why do I have no way to assert either of these identification documents electronically?

Why can't I use my passport ID to assert myself to the bank, or the airline?

Seems to me that it would be HIGHLY USEFUL if I could. And it seems to be self-evident and proper that the agencies that issue drivers licenses or passports could offer electronic identification, even if it's sourced out to a tech company with a good reputation.

In the US, it's now become increasingly common to have a unified electronic ID to interact with agencies: see id.me. This is a start, and I know government agencies work GLACIALLY SLOWLY so maybe by the time my grandkids are having babies this could be a thing.

Comment Eh? (Score 4, Interesting) 67

Eh?

> At some point you have to ask why you're using RAID at all. If it's for always-on, avoiding data loss due to hardware failures, and speed, then RAID 6 isn't really am great solution for avoiding data loss when disks get to these kinds of sizes, the chances of getting more than one disk fail simultaneously is approaching one, and obviously it was never great for speed.

If you're at this point, then using drives at all is probably already off the table. But I think this position is probably ridiculous.

I have many years of experience managing file clusters in scopes ranging from SOHO to serving up to 15,000 people at a time in a single cluster. In a cluster of 24 drives under these constant, enterprise-level loads, I saw maybe 1 drive fail in a year.

I've heard this trope about "failure rate approaching 1" since 500GB drives were new. From my own experience, it wasn't really true then, any more than it's true now.

Yes, HDDs have failure rates to keep in mind, but outside the occasional "bad batch", they are still shockingly reliable. Failure rates per unit haven't changed much, even though with rising capacities, that makes the failure rate per GB rise. It still doesn't matter as much as you think.

You can have a great time if you follow a few rules, in my experience:

1) Engineer your system so that any drive cluster going truly offline is survivable. AKA "DR" or "Disaster Recovery". What happens if your data center gets flooded or burns to the ground? And once you have solid DR plans, TRUMPET THE HECK OUT OF IT and tell all your customers. Let them know that they really are safe! It can be a HUGE selling point.

2) Engineer your system so that likely failures are casually survivable. For me, this was ZFS/RAIDZ2, with 6 or 8 drive vdevs, on "white box" 24 bay SuperMicro servers with redundant power.

3) If 24x7x36* uptime is really critical, have 3 levels of redundancy, so even in a failure condition, you fail to a redundant state. For me engineering at "enterprise" level, we used application-layer logic so there were always at least 2 independent drive clusters containing full copies of all data. We had 3 drive clusters using different filesystem technologies (ZFS, XFS/LVM) and sometimes we chose to take one offline to do filesystem level processing or analysis.

4) Backups: You *do* have backups, and you do adhere to the 3-2-1 rule, right? In our case, we used ZFS replication and merged backups and DR. This combined with automated monitoring ensured that we were ready for emergencies, which did happen and were always managed in a satisfactory way.

Comment upvote parent please (Score 1) 30

The parent of my comment here should get upvoted, to counter the nonsense of the grandparent who suggested the obvious staging that has already been done.

I logged in (for the first time in like a year) to upvote it, but apparently I don't know how to do that anymore.

Comment Re:If you live by the cloud... (Score 1) 82

If you have important files that live only on your computer - especially if they only reside on one computer, then you're an even bigger fool and deserve what you get.

For the most part, cloud providers do a much better job than individual people do. Putting it on Google's servers is generally safer than keeping it only on your own computer.

Also, have you ever tried to back up a Windows host? It's ridiculously complicated! Sure, there are plenty of "easy" solutions, but does that back up SQL Server? That fancy accounting package you spent $4000 for? Where *does* it keep those files?

I found this out recently when I upgraded a hard drive and reloaded the OS onto the new drive. Why would you think it would be so danged difficult to get Quickbooks client files transfered to a new hard drive?

hahahaha

Submission + - Pope Gets Coding Religion, Blesses Python Training for Children

theodp writes: The BBC reports that Pope Francis has endorsed a global project aimed at getting more children into computer programming. The Code with Pope initiative, championed by Cosmose AI founder Miron Mironiuk, aims to bridge "the glaring disparities in education" across the globe by providing access to Python coding education through the free online learning platform Codeforia for students aged 11-15 across Europe, Africa and Latin America. Mironiuk will meet the Pope at the Vatican, but he admits he's not anticipating the pontiff to emulate his students in acquiring new skills. "I don't expect him to know Python very well," he said.

This is not the first time the Pope has encouraged young people to get into coding, having helped write a line of code together with tech-backed nonprofit Code.org in 2019. Pope Francis has also blessed AI's potential for good, meeting with Microsoft President Brad Smith (a Code.org Board member) to sign the Rome Call for AI Ethics early this year just ahead of Microsoft's $10B OpenAI investment and announcing "Artificial Intelligence and Peace" as the theme for World Day of Peace 2024 in August.

Comment 2007 called, they want their idea back (Score 1) 158

In January 2007, GM unveiled the Chevy Volt concept car, the one you may recall looking like a Camaro. Because the range-extending gas generator allowed the gas engine to be decoupled from the wheels, GM said that the range extender could be any kind of engine, *including turbine*. The enthusiastic response to that concept car led to GM greenlighting the car for production, and then they got serious about the design. Rather quickly they determined that a turbine engine actually SUCKS (ha) for this application because of terrible emissions -- high NOx as I recall.

Power output and weight are not the only parameters to worry about in gas engines.

See other comments for discussion of hydrogen.

Comment Re:This is stupid (Score 1) 149

Posting my first comment IN A DECADE to say yeeesssss ^^^THIS^^^. What this guy said. Wireless charging on the move (in roadways) absolutely only exists to soak up VC, government and institutional grant money. It's just the most awesome slow-motion fraud.

STATIONARY wireless charging is absolutely a thing, and I look forward to the J2954 standard finally arriving as a factory installed option, although I'm starting to worry that it won't ever. But in-road wireless? Not happening. Big batteries and DC Fast Charging have already mooted it.

It's like those partisans for cars powered by hydrogen fuel cells. They don't even know that they've already lost the battle with battery electric vehicles. Or, more specifically, their funders don't know it.

Submission + - Slashdot Alum Samzenpus's Fractured Veil Hits Kickstarter

CmdrTaco writes: Long time Slashdot readers remember Samzenpus,who posted over 17,000 stories here, sadly crushing my record in the process! What you might NOT know is that he was frequently the Dungeon Master for D&D campaigns played by the original Slashdot crew, and for the last few years he has been applying these skills with fellow Slashdot editorial alum Chris DiBona to a Survival game called Fractured Veil. It's set in a post apocalyptic Hawaii with a huge world based on real map data to explore, as well as careful balance between PVP & PVE. I figured a lot of our old friends would love to help them meet their kickstarter goal and then help us build bases and murder monsters! The game is turning into something pretty great and I'm excited to see it in the wild!

Comment Re:Do users care? (Score 2) 245

Most average users of linux want a system that...

You think you can speak for "most average users"? Because you certainly don't speak for me. I'm a professional Linux developer of 20+ years experience (starting with Red Hat Linux 5.0) and things like systemd are a big deal for me! I'm a programmer and systems admin/engineer.

That said, although I have been somewhat slow to adopt systemd, I'm starting to get used to it and I'm actually starting to like it. Things that used to require hackish software like xinetd are really easy to rewrite under systemd. Barely a simple config file and a tad of Google pounding and... it's done. So much simpler than reinventing everything a la messy, 300 line init scripts in bash.

Comment Re:Windows phones should run windows programs (Score 1) 284

For example, Windows Mobile 6 -> Windows Phone 7 -> Windows Phone 8. Is there any phone that you can run the same mobile software on all three Windows phone platforms? No. Each OS version requires new versions and adherence to new standards and APIs. A WP8 app will not run on a WM6 machine.

And that, my friends, was the fatal flaw in the Windows Ecosystem.

I understood the change from 6 to 7. WinMo 6 was just awful. But the jump from 7 to 8 was a deal breaker for devs, myself included.

Trust was betrayed.

AFTER pushing Windows Phone 7 as the "new, next big thing" with the weight of Microsoft behind it, it was then immediately followed, AT THE NEXT MAJOR RELEASE, with a "new - new next big thing" that completely trashed any investment in WP7.

Sorry, that's psychotic behavior, I'm not down for that.

Slashdot Top Deals

Computers are useless. They can only give you answers. -- Pablo Picasso

Working...