Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×

Comment Re:Implementation Skills Issue (Score 1) 88

If it is in the cache, it will not be loaded on the other site. So slashdot can load a https://trackingcompany/slashd... and a https://trackingcompany/pornsi... and the trackingcompany can measure if one of them or both are accessed from your ip. The content of the files is irrelevant for that.

The content is not irrelevant if it's executable and not signed.
The mitigation of side channels is best done with quantization and trace synchronization prevention. But those might be not in the skill set of the average web programmer.

The blasted wasteland approach is to not cache. The googles will whine about the wasted bandwidth, but then they shouldn't have spent decades putting insecure constructs into web technologies.

Comment Re:Implementation Skills Issue (Score 1) 88

This would do not help reduce the cache misses and save network bandwidth, though.

If the excess bandwidth is the downloading on first visit of a file you previously downloaded, then that's the cost of security.
You could mitigate by first sharing hashes of the code you are linking so the browser can make a choice about downloading or not. A filename is not a secure hash.
If it's say a common jquery library, then there's very little information leaked by not downloading it.
If it's something more specific to singular websites, then go ahead and download it.

Comment Re:Just call it ECMAScript (Score 1) 68

The point is that people call it JavaScript

And they can continue to do so.

The trademark doesn't mean you can't call JavaScript "JavaScript".

It just means you can't call other things "JavaScript".

Why would anyone need to do that?

I'm not so sure that's how a trademark works. As I understand it, a trademark is valid in a specific product category or categories, and does not prohibit using the same name elsewhere. Assuming the mark is valid, you can't call a new programming language JavaScript since it would be confusing, but could call an airplane JavaScript because no one would confuse a plane with a programing language.

Like my new movie "Javascript" about an author stuck on the island of Java and he needs to write a best seller to get the money to leave.

Comment NoNoHellYes (Score 1) 112

>Is there any benefit to migrating this codebase to a more modern PHP framework, like Laravel?
No
>And is there an easy and minimally intrusive way this can be done en-masse, across dozens of applications and websites?
No
>Or at this point should I just stick with vi?
Hell yes

Frameworks are a pox on coding, forcing many layers of stuff between your code and what it does. HTTP is not complicated. It doesn't need a complicated framework.

Comment Re: Scalability, Schmalabity (Score 1) 83

The result I'm interested in is whether it is possible or not. We don't have an answer either way.

If the noise always grows or the energy to create low entropy matter or something else conspires to prevent it being possible then that it good for stored data.

If QEC can work in a scalable way and BER can be reduced such that the ECC beats the BER, then you have a problem for stored data.

Being crypto minded, my personal opsec led me to keep anything secret that went into a cloud or transited across the internet have a symmetric key that travelled by quantum secure methods. I helped that I travel a lot. DH or RSA is not quantum secure. A key file in your pocket is.

 

Comment Re:Scalability, Schmalabity (Score 3, Interesting) 83

Sadly the paper is behind a $30 paywall.

I read the abstract. The claim seems weak - "beyond break even" I.E. they do better than not having error correction. Well I should coco, but is it enough? 63us decoder time for a 1.1 us cycle. So how does that work? 1.1us then you spend 63us waiting for the error correction before doing the next cycle? They've upped it from a distance 5 to distance 7 code - a distance 7 code can correct 3 bits in (if I read it right) 101 qbits comprising the logical qbit. That's not enough.

Perhaps a real quantum computer academic can tell me where I'm misreading it? I'm just a humble cryptography implementor trying to work out if I should be worried.

Comment Scalability, Schmalabity (Score 2) 83

"IBM, Google's main rival, questioned the scalability of Google's "surface code" error correction approach"

I believe I questioned the scalability, right here on slashdot, on the discussion around the original surface code paper. The numbers were in the paper showing the error correction could not scale to a lid on BER as the number of qubits and iterations increase.

The text of TFS is underwhelming. "Dropped by half". So you had 10 errors, now you have 5. Your algorithm still doesn't work.

I haven't read the paper yet - I guess I've got to go and do that now just so I can see why it won't work.

Slashdot Top Deals

One has to look out for engineers -- they begin with sewing machines and end up with the atomic bomb. -- Marcel Pagnol

Working...