Follow Slashdot blog updates by subscribing to our blog RSS feed

 



Forgot your password?
typodupeerror

Comment Re:improvement? (Score 2) 320

If you want to talk about a conversion fiasco, don't talk about Python. They handled it pretty well.

If by pretty well you mean that users took about twice the original EOL to start making the switch, sure. The transition was so smooth that years after Python2 was originally EOL'd they still had to support it and release an update and announce "This is the final last release of Python 2, please stop using this". At the same time distributions pretty much still shipped Python 2 until mid 2023 because people still hadn't fully transitioned yet. The sheer amount of legacy code depending on modules that hadn't so much as begun the work for Python 3 was mind boggling.

The transition to Python 3 was for most people an incredibly bumpy ride, and if it weren't for the sheer inertia Python at the time it would've gone the way of Perl. It'd be a bad idea to forget just how bumpy that ride was despite the amazing amount of work people did to ensure that migrating would be fairly painless.

Talk about Perl, which still hadn't recovered.

The scripting language formerly known as "Perl 6" was vaporware for so long that most Perl 5 users started moving on to greener pastures before there was a viable Perl 6. It was announced as being under development in 2000, and didn't release until 2015. To put it into context, Duke Nukem Forever, the ultimate vaporware and disappointment which became the gold standard for vaporware was announced in 1997 and released in 2011, and that took only 14 years, and managed to still be more discussed than Perl 6.

Comment Re:Bitterly my ass (Score 1) 159

Those of us who have experienced almost nonstop problems caused by automation of certificates should also have a vote.

Those of us who haven't had non-stop problems caused by said automation can also get a vote?

The problem that they are trying to solve is precisely what CRLs are designed to solve.

Which was working so well that we got OCSP, and OCSP stapling, and the intricacies of the latter in the various webservers that implement them leave the average admin scratching their head as to the correct functioning of their server.

Dramatically increasing the odds of a reissue script not firing, resulting in a site outage.

Haven't personally experienced this one yet and I've been using Let's Encrypt since 2016 for various small stuff, but sure, it's a possibility. Comparing that to the number of times some chucklefuck simply "forgot" to deal with their certs, causing a major outage I would say the automated approach is working out better in my albeit personal and anecdotal experience.

Dramatically increasing the risk of the site not coming back up at all after a mandatory certificate-driven reload.

Usually if Apache or whatever webserver you're using won't come back up after a reload you're looking at a problem that's hardly related to the replacement of a certificate.

Dramatically increasing the difficulty of and reducing the utility of certificate pinning.

If we're talking HPKP, the adoption rate for it was abysmal from the start, and it was an error prone mess from the onset, relying on the fact that the first time you saw the header, it must be true. Under perfect conditions it could've worked out great, but anyone who read the fine print and looked at their IT staff and their error prone ways they ever so gently applied the brakes to that effort as to avoid the whiplash of ballsing that whole thing up.

It's usefulness to the end user in a corporate environment was highly debatable since everyone at the time was rolling out proxies that MITM SSL and replace the encryption with their own "trusted" CA. A whole debate worthy of having outside of this topic, since it causes me grief to no end, but it is the situation we're in right now, regardless. HPKP is deprecated leaving a bitter aftertaste of how poorly and ill conceived the notion was in the first place.

Dramatically increasing the revenue of certificate providers by eliminating their ability to sell longer-duration certs at a cheaper per-year rate.

A point you won't have any debate on from me. There is of course Let's Encrypt if the cost is an issue for your organization or for you personally. Depending on the situation and requirements I'm all for simply dealing with Let's Encrypt. They're no more or no less trustworthy than other CAs. I've had my share of gnashing teeth with CAs and paid a premium for it too.

I have fought harder to make certificate updates work reliably with Server.app than I have with all of the configuration issues in all of the other server software

It's hard to know what you're doing so my suggestion here may be completely useless, but I've found the administrative burden of SSL/TLS to be much less of an issue by centralizing my SSL/TLS temination at a group of reverse proxies in a highly available setup and dealing with it there, rather than at every individual webserver. Between all the various issues with OpenSSL and its bugs, the complete lack of understanding of how it all works by a so called devops team of experts faffing about in their own little utopia, and the amount of maintenance and auditing needed keeping it all spread out gave me a horrible headache. This gives you the option to either work with a webserver you've got more faith in, or simply buy a solution with a support contract if you need that umbrella to pull open if the shit hits the fan. There's a few exceptions to the rule, but most vendors are aware that this approach is now the recommended if not mandatory practice in many organizations.

Comment No need to panic, ideal time to plan reform (Score 3, Interesting) 313

We're lucky in a sense in our industry, many of us already were working from home a few days a week already, and most of us already had the infrastructure to do so setup and saw accelerated adoption. Work has been going relatively well the past few weeks during the lockdown. The biggest change for me has been that a lot of the bullshit meetings have disappeared entirely or have seen their duration cut down significantly in their online formats. Useful meetings seem to stick to the meat and bones, nice and concise.

Two weeks ago the government here (a European country) announced we'd slowly crawl out of the lockdown one step at the time, starting this week. My company started looking into how to plan a safe work environment together with building safety coordinators with the new guidelines made available. The biggest change (aside from disinfection stations, mouth masks, etc) will be to the open office spaces where safety precautions will cut the available number of desks in half. There will be a focus on working from home for most of our staff, and presence on the office will need to be planned. They're still working out how to plan presence in the office. Our current guidelines are that at least until June 8th 95% of the workforce will be working from home every day. The current changes have been announced to last at least until summer 2021 at which point they're reevaluate the situation, but it seems likely that the next 3-4 years we'll be following this kind of strategy.

The town I live in was hit hardest in this region. I went in the hospital for a follow up on my cancer treatment just as the first infections were happening in the region. The hospital had already cordoned off many of its sections, and they were well prepared, even though they didn't have the capacity needed to handle all the cases. They were able to forward patients as needed through medical transport. I've been avoiding supermarkets for the most part. Local supermarkets have been somewhat negligent in adoption of the rules wrt maximum amount of people allowed in their stores. I started shopping at smaller stores which are less busy and seem more willing to adhere to those rules, although their offering is smaller.

Two people in my family have died from covid-19, and another from a long fight against cancer. Phone conversations with friends and acquaintances seem to indicate that everyone has family members that have been seriously ill (not necessarily in critical condition) or have died. It's been difficult for many with young children, who have been juggling keeping their kids busy in a somewhat meaningful fashion while trying to get work done. For some the 9 to 5 workday has shifted to 5-10 and 13-17, trying to create a structure for their kids where they have "learning hours" and "play hours".

Many criticize our governments response as lacking, but I don't feel that strongly about it. For the most part they've consulted experts, followed the majority of their advice, sought meaningful compromise where the advice was impossible or impractical. The lockdown avoided the hospitals being overrun and avoided a worst case scenario, and now that the infection rate has dropped significantly and the daily deathtoll is slowly dropping they've got a reasonable exit-strategy. I'd say that given the circumstances the response was adequate, though somewhat chaotic due to the continuously developing situation. There's a few politicians hell bent on agitating the population into fast tracking the lockdown exit, but for the most part they're a loud minority. What's become clear is that we were ill prepared for an epidemic of this scale on several fronts, mostly the elderly care sector, and there were a lot of issues with PPE. I suppose that after all this, we'll reevaluate setting up a larger national emergency stock of PPE. A large amount of resources were sunk into emergency buying of PPE such a N95 and surgical masks, often from dubious suppliers and of equally dubious quality.

The real response will be after the health crisis has somewhat stabilized and the effects of the economic crisis start kicking in where the public observes them. From one day to the next about 10% of our population became temporarily unemployed, an all time high in most people's lifetimes. I'm fairly sure that a significant part of those 10% will not have a job at the end of the health crisis, which is likely to fuel the coming economic crisis for a while. Many sectors can't work from home and they'll need to invest into safety measures, which I'm sure will create some absurd and not always safer environments. I don't exactly fear for my job this year or the next, but if the economic crisis is deep enough or the recovery is too slow, after that things might start to look depressing.

Restaurants and bars are scoffing at the new regulations wrt customer density at their establishments for when they're scheduled to reopen, claiming it's not worth reopening their small "picturesque" bistro if they can't stack customers back to back. The response from that sector is always out of proportion, with the height of absurdity being reached on the smoking ban nearly a decade ago which was going to absolutely devastate their businesses, which turned out to be patently false. They'll adapt and transform once the grumbling wears off, and many of the local restaurants have already adopted a somewhat fancier approach to take-out and home delivery with a somewhat more culinary refined menu than most take-out places. The biggest risk in that sector I estimate will be for the zero hour contract employees, as the sector will undoubtably seek to offset its reduced income with reduced costs.

There's a lot of misinformation being spread via the usual channels, much of it online. It finds it way into the population where it blows out of proportion. It goes from the usual fear of losing the established benefits such as "the government will be taking money from your pension plans", to fear of isolation such as "I read that they'll be locking anyone over 65+ in their homes for the next few years, and you'll only get necessities from a delivery man", to the absurd tin foil hattery where an all-seeing omnipotent government will track any and every move of its population while rolling the dice on who gets treatment or a vaccine and who gets thrown in a shallow grave while still gasping for air.

A significant part of the population is hell bent on not applying common sense or refuses to adhere to the regulations. About 0.8% of our population has been fined for serious violations of the lockdown, such as entering closed down public premises, getting caught organizing and attending lockdown parties at private residences, etc. There have been a handful of bars that ignored health and safety regulations and reopened despite the requirement to remain closed resulting in a suspended business license. A handful of people have taken it upon themselves to be persistent enough that they're currently in jail awaiting trial. Given that this 0.8% got caught redhanded without any severe authoritarian police powers, I'm guessing that's the tip of the iceberg really, not that I'm pleading for expanding the police force powers.

I don't doubt that there's going to be a significant part of the population that after the current health crisis stabilizes who will throw caution to the wind. As various non-essential shops reopened this week, the queues at various stores turned out to be ridiculous despite the advice not to all go out at once on monday. People waiting in line for a pair of sneakers at the shoestore, as if their lives revolved solely around a pair of shoes. People heading in great numbers towards Ikea, because they really needed that Skaldknulla TV cabinet right now, complaining loudly that they couldn't get any meatballs since the restaurant was closed. I'm in the market for some new pants myself, but I'm not exactly going to stand in line for them for several hours, so I'll see about that sometime next week or the week after.

Personally, I've been enjoying this new pace of life. I find myself not being stuck in traffic 3 hours a day when I go to the office, the bullshit meetings have for the most part disappeared, and I find myself getting more work done in less time, and striking a better balance between work and private time. The workload hasn't really changed so far, and I doubt it will given my planning for the next year and a half, so qualitatively speaking I've been doing better work than before. I could get used to this. I could get too used to this, and resent when things turn back into the regular shitshow a few years from now.

Comment Re:Life is meaningless. (Score 2) 205

Want less of a problem, eat the rich

Ah, cannibalism, is there a single ill of the modern world you cannot cure? World hunger? Just eat your neighbours. Capitalism? Just eat the rich. Pollution? Just eat about 2/3rds of the world, and we'll have less pollution. If you love your fellow man, then eat him.

The predatory nature of psychopathic capitalism is driving people to escape the abuse, whether it be drugs or gaming, it is much the same thing, for those who can not cope, the need to escape from the cruel and abusive nature of the societies of which they do not feel a part, just it's victims.

Quite frankly, if you wish to escape the "abuse nature of society", then video gaming is not it. 10 minutes in an online game community should teach you that everyone else in the room is really there to work out their own little stresses on other people in an abusive as possible fashion. If we are indeed talking about capitalism as the great ill of society, look no further than videogames where you pay 60-80 bucks for the framework upon which expansions and DLCs are built and hurled at the user at a steady pace, often using fear of missing out (FOMO) as a tactic to pre-order the game by offering a pre-purchase exclusive vorpal sword of doom, and we haven't even begun discussing the predatory nature of microtransactions or lootboxes just yet. If you feel a victim of modern day society, don't turn to videogames, this industry has become predatory to its consumers and often abusive to its employees.

Addiction isn't a sign of modern day capitalism or even of happiness, as if communist countries didn't have to deal with the ills of alcoholism in their heyday. I've seen men who had every right to be happy about their career and family life descend into an alcohol fueled self-destructing rage dragging those around them with them into an abyss of abuse and unhappiness. I've seen men who had a certain amount of success, throw months worth of salary at gambling machines or at a poker game, walking away in debt and miserable only to return in that very position. I've seen people like this struggle with their addiction, try and rebuild a happy life, only to toss it all away again and again at some blinking lights or the bottom of a pint until the hit rock bottom and start rebuilding again. The few that recover from their addiction and don't fall into the temptation again struggle with it for the rest of their lives. The cost of addiction is one that transcends a generation, with adult family members often tossing the family budget into their addiction, decreasing the opportunities they could create for their children, often accompanied by abuse. Addiction is a severe cost on society, but we tolerate certain possible addictions because if we don't the criminal element would create far bigger problems.

The need for escapism doesn't necessarily stem from an unhappiness in life or a failure of society to provide opportunity for happiness. We all watch movies, read books, and yes, even play (video)games, have a drink, regardless of our selfperceived happiness. Yet all of us aren't consumed by those activities to the point where our escapism becomes a priority over life itself resulting that very inevitable downward spiral. There are various ills in our society, but unless there is a clear systematic pattern of abuse across huge swaths of the population, video game addiction is hardly an indicator of a society's health, rather than it is the failure of an individual to cope with his own impulses and stressors.

Now, if we were talking about the opioid crisis, given how those drugs are introduced to a significant part of the population, the dependencies they create, and the cost on society of that, then we would have a much better argument about the shortcomings of society. But videogames? Nah, that's personal impulse control rather than the failings of capitalist society.

Comment Re:We know everything about space & physics (Score 1) 583

Except that our "understanding of space and physics" may be INCOMPLETE to a degree that we cannot even CALCULATE

Oh come on, as much as I'd like it to be aliens who'll come along any day now and force us to mate endlessly, the odds of it being aliens from a statistical point of view are near zero. I mean, honestly, which is more likely here? It being a rock undergoing some physical process we don't quite understand and therefor not ending up in the trajectory we expected or an alien probe cleverly disguised as a rock sent here to scout planets for habitability by a civilization that has not only mastered interstellar travel, but has such long term goals on its agenda that it would take hundreds if not thousands of generations before actually getting a single result? Which of these requires the least amount of leaps of faith?

we will discover NOTHING NEW or mind-boggling about space and physics in the next 200 years

It's hard to predict what we'll do in 200 years, but my guess is we'll find a fuckton of things we haven't seen yet, revise our model of the universe, maybe we'll even develop some sort of hyper efficient engine making a trip to Mars similar to a flight to another continent, who knows? Statistically speaking, even my wildest dreams are much more likely than aliens.

we are DEAD CERTAIN that we KNOW EVERYTHING about the vast universe we exist in

We don't know everything, but we can take pretty good guesses about how likely it is that an alien civilization built a probe to look like a rock which would then go on a several thousand years interstellar journey and remain functional enough during that time to accelerate away from us as fast as it could, and report to the homebase "No intelligent life here".

I'm not saying it can't be aliens. Who knows, maybe Zorg will show up in a few years and build a harem of concubines of the attractive humans and use the rest as cattle for the new Manburger (tm) or enslave us all to work in the salt mines of Vednor 3. It's just extremely unlikely. If I were an alien race I'd ram that probe right into the planet and get rid of a potential threat to my galactic souvereignty, but that's just me... If that would have happened, I'm sure I would've said "Huh, what are the odds" in my final moments before burning my books on logic and statistics as a warning to those who'd survive the onslaught.

Unless we get some really convincing arguments that this rock isn't a rock without a giant leap of faith, it's just gonna be a rock. A damn interesting one, but still... just a rock.

Slashdot Top Deals

Yes, we will be going to OSI, Mars, and Pluto, but not necessarily in that order. -- Jeffrey Honig

Working...