Follow Slashdot stories on Twitter


Forgot your password?
DEAL: For $25 - Add A Second Phone Number To Your Smartphone for life! Use promo code SLASHDOT25. Also, Slashdot's Facebook page has a chat bot now. Message it for stories and more. Check out the new SourceForge HTML5 Internet speed test! ×

Comment A lot of Misunderstanding Here (Score 3, Interesting) 786

I think a lot of folks here are missing the point. The trouble is that the kernel running in secure boot mode has to be able to receive signed keys in a secure way (if you think secure boot is worth anything, many do not).

Linux running in secure boot mode is a done deal. The question is how do you import keys that are signed by Microsoft. In an ideal world you'd just upload the signed X.509 cert and you'd be done. Unfortunately, Microsoft will only sign PE binaries.

So the developers opted to enclose the X.509 cert in a PE binary. Unfortunately, that means the kernel needs to be able to read the PE binary and verify the signature all in kernel space, then extract the x,509 cert. This is undeniably messy.

Now lots of folks will argue that there's no point to this and it should be done in user space. I'm not going ti argue with that, but the reality is that most of the mechanics of this are already implemented, just not the PE stuff. You can sign kernel modules and verify them in kernel space with x.509 certs (at least by my reading of the thread).

Frankly, I think this is pretty much the only thing to do short of talking MS into signing x509 certs. The other suggested work-arounds involve additional authorities or doing stuff in user space. They are all workable, but are pretty clumsy compared to what's being proposed.

I think it may have been a mistake to just drop this ugly change on Linus without his involvement. My guess is that if the problem had been stated before coming up with a proposed implementaon, they might have come up with essentially the same solution with less drama.


Suggesting Innovative Uses For Retired Space Shuttles 127

coondoggie writes "It was a sad event when the iconic NASA Space Shuttle program ended last week with the landing of Atlantis. After the last mission the flying shuttles will all be assigned to museums where millions will admire them as static displays. But wouldn't it be cool if they were put to use in places where you might not expect?" (Best viewed with the slide-show consolidating software of your choice.)

Comment Re:Don't like beer. (Score 1) 840

I call bull.

Some very social people I know don't drink alcohol or coffee, smoke, or eat meat. But you know what? They still come out drinking, they just drink cranberry & soda, or lemon & soda, or just water. And they stay inside when people go smoke. And they order tea (or iced tea, or juice, or water) instead of coffee. And they play sports, or go running, or whatever with the rest of us.

They don't feel the need to point out to everyone else that they don't like beer, coffee, or cigarettes, and for the most part, you never even notice that they're not imbibing (or whatever). You've just invented a convenient excuse for never going out and socializing ("It's not *me*, it's the fact that I don't like *beer*. *That's* the only reason I'm at home every Friday and Saturday night, sitting in front of the computer.")

Get off your high horse or pity wagon or wherever you're sitting, and go out and talk to people and stop whining.

(Apologies if you're the first person I've ever met who breaks this pattern.)

Comment Re:Internet connectivity during power loss confirm (Score 1) 328

This recently also happened to me. I had previously tested that if I pulled the power to everything, I had the appropriate things in my house UPS'ed. But, much to my dismay, when the power in our area did go out for several hours, the internet only stayed up for about 15-20 before, I assume, the UPS on the equipment in the area gave out.

Comment Landfill contamination isn't so simple (Score 2, Informative) 186

Aside from some of the obvious mistakes this opinion piece makes.

> There is no need to worry about toxins leaching into the water supply. No elaborate liner or monitoring is required

This is wrong. There are some situations where organic rich runoff can cause problems.

The following link:

" dissolved organic carbon in the leachate plume is dissolving arsenic from arsenic-containing iron oxides in the aquifer and bedrock"

Comment Re:typo squatter (Score 0, Troll) 63

Facebook does not share information with advertisers. Facebook's ad system acts as a broker: an advertiser submits an ad, a demographic they wish to see the ad (e.g., gender, age, geographic locale), and a bid. Facebook pairs those ads with users that match the criteria.

I work for Facebook, as an engineer in search.

Slashdot Top Deals

Technological progress has merely provided us with more efficient means for going backwards. -- Aldous Huxley