Forgot your password?
typodupeerror

Comment Re:TFS is a bit incorrect (Score 1) 63

nah, a RS code can correct a tiny bit of loss but two metadata copies can correct a bad sector or even track if you're lucky.

Different requirement spaces.

The idea this guy has might make embedded devices slightly more long-lasting.

They usually have quantity one of a cheap storage part and a bad block in the wrong place could brick the whole thing.

It would only be useful in the case where maybe the build is 12MB and the chip is 16.

Most vendors won't ever pay extra for this.

Comment Re:Proprietary software needs to be abandoned. (Score 2) 65

Not sure of your needs, but I know there are a bunch already ; if you started adopting one of the preexisting ones a few years ago, it would probably be complete for what you need by now. Always worth putting a little aside to make sure that you have a FOSS second supplier available.

Comment Re:Proprietary software needs to be abandoned. (Score 2) 65

We're talking enterprise here, in which case the organization really has to take control of the upgrade cycles even with outside vendors, otherwise they will end up failing security audits as well as having vendors come in and break things at critical moments like end of year closing.

Comment Re:If systemd Is So Bad... (Score 2) 42

I suspect the people who hate it don't have problems it solves.

Maybe a very basic home laptop is fine with SysV today and they don't want to learn anything new.

Personally I've been able to retire thousands of lines of scripts I'd written to handle complex things with many edge cases and ugly devops modules that are no longer needed with more recent releases.

There's just no userland interface to many of the events it can respond to and it's not easy to write a new C++ daemon to handle each need that comes up.

At this point it's largely a functional API to kernel events in the way I use it. That's the DOTADIW perspective for me. I still have services call my scripts where it doesn't handle what I need. It would be crazy to ever expect it to handle everything.

But just because I need to handle complex things at scale sometimes doesn't mean everybody else does. If I want to run debian with X11 and emacs and you want to run Devuan with Wayland and vi, you'll get no argument from me.

Who has time for drama these days?

Comment He will be missed (Score 4, Interesting) 30

Not that anyone in the TOS cast really deserves much criticism as far as how they manage(d) their celebrity, but Koenig always came off as a class act. In every interview he always seems grateful to just have had the privilege of being part of something big. Really seem to care about the fans and wanted to be entertaining for them at conventions and the like, was willing to participate in some of the fandom projects. Just a good guy.

Comment CIA (Score 1) 71

Nice little supply chain attack.

Hijack of shipment of servers equipped with presently very very expense silicon that nobody will consider just disposing, insert your implants, let some patsys get busted and the kit get returned to the owners.

Bonus points make it seem like a general / widely implemented scheme by hijacking some large liquor shipments and various other goods as well. Pass out the spoils at the field office party or fence them to finance some other activities that need kept well away from oversight.

Comment Re:Proprietary software needs to be abandoned. (Score 1) 65

Shouldn't pretty much every major org run something like Red Hat Satellite, Artifactory, whatever for this exact issue?

Yes, if you are a major organization you need to do supply chain checks and that means you need servers that store artifacts.

I'd be concerned about Red Hat since their commitment to Open Source seems to have faded considerably. It's all very well having the artifacts, but if your ability to know how they are generated and what they contain is compromised you have a problem.

Comment Re:Who is eMudhra (Score 5, Interesting) 19

This discussion on their inclusion in Mozilla is quite revealing:

https://bugzilla.mozilla.org/s...

Elsewhere it's claimed that they used a FIPS HSM to generate their keys.

I did not see who their auditor was.

Did eMudhra lie?
Did the auditor lie?
Are FIPS HSM's backdoored?
Do we have another Dual_EC_DRBG situation on our hands here?

If nobody is lying we could have just seen a huge cyberwar or false flag averted. Essential crypto gear could be totally buggered still.

PS Remember when Mozilla gave CACert absolute hell for years when they were tremendously more competent?

Comment Proprietary software needs to be abandoned. (Score 2, Informative) 65

FOSS software of course also has an upgrade cycle however there are really major differences

  • * you can almost completely keep the upgrade cycle within your operating system by only using add no packages for specific specialist software you directly work with
  • * you'll normally be able to completely control rollback yourself and be able to see the reason for any upgrade, deciding if it's needed for you
  • * provided you use a "free as in beer" system, you won't have software costs for the upgrade
  • * you can find many people who can understand and verify what's changing during an upgrade

Slashdot Top Deals

Pascal is not a high-level language. -- Steven Feiner

Working...