Forgot your password?
typodupeerror

Comment Re: good old days? (Score 1) 123

The good old days were before that. Circa '92 was good. Reasonable etiquette, news groups for almost every interest you could care to name, decent people you could run into (a bunch of people I met on the 'net prior to '92 was the start of many trips over to the States, many of whom I'm still in touch with). After '92-93 was the Eternal September, and the net went to hell in a handbasket.

Comment I'm moving out of IT because of this. (Score 1) 89

It's simple logic. I can't provide real value-add as a regular developer or IT expert anymore. AI is good enough in most cases. At the same time we're experiencing a demographic collapse. This means that people are becoming more valuable, not less. The Nash equilibrium of a society banking on this sort of automation is somewhere beyond a fertility crisis and the collapse of culture. The only winning move is to exit the industry, I'm not needed here anymore. I'm currently looking for ways to go back closer to performing arts that I did in the 90ies using my extensive IT skills as a cultural technique rather than a job.

Comment Re: Who is eMudhra (Score 2) 19

They primarily manage company-internal CAs for big businesses, which they seem to do well. AFAICT, they noticed that their security infrastructure was compliant for managing a global CA, and thought they might as well also have that as a product. However, there are some operational differences between an enterprise CA and a public one, including that companies want to issue client certs to employees but nobody really does global client certs. That means that they had an intermediate CA for global client certs that they never used, but it was in the standard trust store, and nobody tested that it was handled right until Wayne just went through the standard trust store making sure a new certificate weakness detector didn't give false positives.

So eMudhra correctly handled all the certs they issued, and all the certs they used to sign them, but they got some extra CA certs trusted that they didn't really need, because it would make their side business more similar to their main business, and this caused a major problem.

Chances are that they actually got a real random number out of a HSM for the bad CA certs, but accidentally made the certs with the index of the random number instead of the actual number. (That is, they got the 4th random number and made a cert for 4 instead of the number.) I wouldn't be surprised if they stored the correct private key, which would have made leaf certs that didn't validate because the intermediate was wrong, but they never used it to find this problem.

Comment Re:In short ... (Score 3, Insightful) 26

Birds are pretty smart, full stop. They're the only group that has a method of creating and using their own hooked tools (Caledonian Crow) other than humans.
They are excellent problem solvers overall. Given their size relative to comparative intellects (Crows are comparable in intellect to monkeys and gorillas), they're absolute marvels.

Comment Re: Phishing Tests (Score 2) 82

The email wasn't even too good to be true. The nasty phishing emails are the ones where the recipient is supposed to get a real email on the topic, but it's because of a publicly known event and outsiders could easily make up the content, so they just need to find a bunch of likely recipients.

I think the "you've been assigned the mandatory phishing training" emails should come from an external sender and contain a link to get into the extended training, and you should only get the short refresher by finding it through verified sources. Not only would this be a good placement test, it would test that official communications are actually hard to fake and possible to verify using the process in the training.

"In response to the embarrassing data breach that hit the news recently, we've assigned every employee at the company an online training session about phishing at this link. By sure to take it immediately, because it's a legal requirement for our settlement and delays could affect your employment." --Russian Hackers

Comment I think you hit the nail on the head. (Score 1) 371

Pretty much this.

AFAICT and have heard the cascading climate change effects have already been kicked loose. The planets albedo (it's ratio of reflection) has already dropped into a feedback loop that will only accelerate things. We can kiss our glaciers goodbye and the dutch will likely have to find a new place to stay within this century. As some island nations already have to know.

Comment At the end of the day, it's people. (Score 1) 46

Bioware may well be a shadow of its former self, but at the end of the day, love or hate what they produced in their latter days, it's all people that worked every day to do their best to bring about what management and the employed script writers specified.
There are many posts about graphics being superb, but gameplay lacking. That's a decision by game designers, rather than all the team, many of who are lumbered with knowing it could be better but constrained to produce what the spec and story said.

I feel for the team, each of who would be trying to make a living, and hope that some of the other studios may be able to wrangle increasing head count to absorb some of the EA fallout. Or that some kickstarter will be set up by the now unemployed members to rebuild some of what the old Bioware (and others) were once known for.

Good luck out there, ex EA employees. We'll be cheering you on for a path back to stability!

Comment Deno is awesome ... (Score 3, Interesting) 7

... I hope this move doesn't screw it up.

For the uninformed: Deno is basically the "new" official non-shitty successor to Node.js. It's secure (closed) by default, supports TypeScript natively without the need for transpilation, has the full browser API on the server side and comes with a bunch of neat other features that turn Jamstack development from the bloated and fickle shit-show that is Node into a chill walk in the park. I've been using it exclusively for a few years now and have come to avoid Node.js like the plague for real world deployment.

Slashdot Top Deals

You are an insult to my intelligence! I demand that you log off immediately.

Working...