Forgot your password?
typodupeerror

Comment The classic web development problem. (Score 1) 20

This is what made the Web so successful and omnipresent while at the same time introducing this type of epically dimwitted security nightmares:

The Web has nice pictures you can click on, meaning everybody has an opinion about it and wants to develop with and for it. That's not necessarily a bad thing, but most web "developers" (emphasis on the quotes) have no idea about how the web actually works and what secure-by-design actually entails.

That's when you get this sort of thing, roughly 70%-80% of the time.

It's super frustrating and can get you severely depressed if you aren't aware of the cultural reasons for this problem. I've been doing non-trivial web development for 26 years now and have learned to live with this problem, but it still is just as annoying as it was in the year 2000, even though I've since notably updated my zen-skills in dealing with these types of people and projects. The upside is that by now I (mostly) get do decide who I work with and those are people who pay me fair and do listen when I say that an idea for a web solution is a bad one and has security issues built in no matter how much the juniors or marketing think it's awesome.

That said, I still consider the Web superiour to most other ways of doing software, for the simple fact that it is 100% open standard, human readable, truely 100% cross-platform and FOSS all the way through. And I wouldn't have it any other way doing professional software development. Fixing and replacing abysmally shitty code every odd project is a downside I'm willing to take with that.

Comment Yeah, no shit. (Score 1) 37

A fleet of Zuse Z3 built out of pure gold is probably cheaper than running critical infrastructure on VM Ware.

Nobody I know runs VM Ware. And hasn't for decades. I remember when virtualization was the new hot thing roughly 20 years back and VM ware was aquired by some big corp, instantly turned to shit and the FOSS crowd started pushing out VM solutions to counter the problem. Xen and KVM got traction shortly after that.

A buddy of mine who virtualized ~300 workplaces on an HP Blade setup a few years back ran everything on FOSS and Proxmox. Virtualized storage was done with Ceph and VMs with one of the FOSS offerings (can't remember which). The whole system was high availability to the tee, with a software budget orders of magnitude cheaper than anything proprietary.

VM Ware was dead the moment they cashed out, epic style.

There is a reason experts do not trust anything mission critical to proprietary solutions.

Comment Re:None of my machines has the module loaded. (Score 1) 56

Being more thorough:

~ $ modinfo algif_aead
filename: /lib/modules/.../kernel/crypto/algif_aead.ko.zst
(so it is a loadable .ko)

~ $ grep CONFIG_CRYPTO_USER_API_AEAD /boot/config-$(uname -r)
CONFIG_CRYPTO_USER_API_AEAD=m
(so it is configured as a loadable module)

~ $ lsmod | grep algif_aead
(returns nothing, so it is not loaded)

Comment Re:Go Google Employees! (Score 4, Informative) 36

It won't work: Google is a for profit company, and there are A LOT of profits to be made in the made from the military. They will stop operating in the UK before they give up that much money.

DeepMind is the core of Google's AI research, and it began as a UK company that Google purchased. It's still the case that the bulk of their core researchers are there. Ceasing operations in the UK would not only cost them a lot more than the US DoD will ever pay them, it would also cost them a lot of critical AI expertise.

Slashdot Top Deals

Natural laws have no pity.

Working...