Slashdot is powered by your submissions, so send in your scoop


Forgot your password?
DEAL: For $25 - Add A Second Phone Number To Your Smartphone for life! Use promo code SLASHDOT25. Also, Slashdot's Facebook page has a chat bot now. Message it for stories and more. Check out the new SourceForge HTML5 Internet speed test! ×

Comment A lot of Misunderstanding Here (Score 3, Interesting) 786

I think a lot of folks here are missing the point. The trouble is that the kernel running in secure boot mode has to be able to receive signed keys in a secure way (if you think secure boot is worth anything, many do not).

Linux running in secure boot mode is a done deal. The question is how do you import keys that are signed by Microsoft. In an ideal world you'd just upload the signed X.509 cert and you'd be done. Unfortunately, Microsoft will only sign PE binaries.

So the developers opted to enclose the X.509 cert in a PE binary. Unfortunately, that means the kernel needs to be able to read the PE binary and verify the signature all in kernel space, then extract the x,509 cert. This is undeniably messy.

Now lots of folks will argue that there's no point to this and it should be done in user space. I'm not going ti argue with that, but the reality is that most of the mechanics of this are already implemented, just not the PE stuff. You can sign kernel modules and verify them in kernel space with x.509 certs (at least by my reading of the thread).

Frankly, I think this is pretty much the only thing to do short of talking MS into signing x509 certs. The other suggested work-arounds involve additional authorities or doing stuff in user space. They are all workable, but are pretty clumsy compared to what's being proposed.

I think it may have been a mistake to just drop this ugly change on Linus without his involvement. My guess is that if the problem had been stated before coming up with a proposed implementaon, they might have come up with essentially the same solution with less drama.

Comment Landfill contamination isn't so simple (Score 2, Informative) 186

Aside from some of the obvious mistakes this opinion piece makes.

> There is no need to worry about toxins leaching into the water supply. No elaborate liner or monitoring is required

This is wrong. There are some situations where organic rich runoff can cause problems.

The following link:

" dissolved organic carbon in the leachate plume is dissolving arsenic from arsenic-containing iron oxides in the aquifer and bedrock"

Comment Re:Stop overloading common tech acronyms! (Score 1) 79

I agree that it's annoying, though in my experience people never refer to SPICE without prefacing it with "Berkeley". SPICE all by itself is used as a generic term.

TFA could also use some more references. It sounds intriguing, but I've been around long enough to be distrustful of what's in press releases.

Comment Re:There is (Score 1) 130

> aluminum hydroxide which, apart from helping us with our stomach ulcers, may be linked to brain disease

Are you talking the Alzheimer's link? I thought that that was found to be a non causal link quite some time ago.

Here's a link that pretty much flat out says it's not an issue:

There are a lot of websites that talk about it as being a problem, but they all seem a little woo woo.


The Economics of Federal Cloud Computing Analyzed 85

jg21 writes "With the federal government about to spend $20B on IT infrastructure, this highly analytical article by two Booz Allen Hamilton associates makes it clear that cloud computing has now received full executive backing and offers clear opportunities for agencies to significantly reduce their growing expenditures for data centers and IT hardware. From the article: 'A few agencies are already moving quickly to explore cloud computing solutions and are even redirecting existing funds to begin implementations... Agencies should identify the aspects of their current IT workload that can be transitioned to the cloud in the near term to yield "early wins" to help build momentum and support for the migration to cloud computing.'"

Slashdot Top Deals

What this country needs is a good five cent nickel.