Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!


Forgot your password?
Trust the World's Fastest VPN with Your Internet Security & Freedom - A Lifetime Subscription of PureVPN at 88% off. Also, Slashdot's Facebook page has a chat bot now. Message it for stories and more. ×

Comment Re:Okay - that was quick. (Score 2) 890

that explains picking a Judge with only ten years of experience to the Supreme Court instead of the most experienced one that could be found.

Chief Justice John Roberts had five years of experience as a judge before being nominated for Associate Justice to replace retiring Justice O'Connor and then being nominated to replace Chief Justice Rehnquist when he died. While I don't agree with everything he says, he's done a good job of steering the court overall.

Going after the most experienced usually means going after the oldest, which has some potentially significant downsides not just in terms of time on the Supreme Court but also often least understanding of current issues. Going after the most qualified does not mean the most experienced.

Comment Re:I did a complete 180 on AV software (Score 1) 231

SEH has been present in some form since at least XP. It's old tech, with numerous bypasses. Windows 10's big improvement is Control Flow Guard.

Getting around ASLR is relatively easy if any library loads that does not use ASLR, and this is unfortunately very common.

Comment Re:I did a complete 180 on AV software (Score 1) 231

Win32 even had account personation services

Account impersonation is still there, even in 64-bit Windows. It's required for how Windows works. If you want to see it, set up a VM, run Metasploit against it (use smb_login) and get a meterpreter shell, load incognito, and list and impersonate tokens to your heart's content.

Vista god bless it made UAC, privilege speration, scrambled ram addresses with aslr, buffer overflow protected buffers in c/c++, and psuedo local admin accountants which instead used a token to run something.

UAC has numerous bypasses, privilege separation has existed since at least NT4 (maybe 3.51), ASLR only applies to the heap and only when the library or executable is compiled to do so (or is forced by EMET, which can crash some applications), buffer overflow protections can be bypassed using SEH or ROP gadgets, and as I mentioned above, tokens are still around. Another note on ASLR: it only takes one library in the entire chain of libraries called to not use ASLR to make it ineffective. Also, ASLR on 32-bit Windows is weak, having only 128 possible addresses without factoring in predictability that is inherent in the system, and if the process crashes and restarts relatively gracefully, it's not hard to hit a valid address. ASLR on 64-bit Windows is much more difficult to bypass.

Comment Re:Luck not a factor? (Score 2) 191

Which human's math skills? Humans have a staggering range of capabilities. Average? Then average in which way? A savant? Then a savant in which way?

And what about autistics who happen to be very good at poker but lousy at reading human expressions?

There are multiple different ways to be good at poker, and this system is just using one of them, and is clearly quite good at this particular way.

I also didn't see anyone making the claim that this was a hard or general purpose AI. It's not, and you acting like someone did make that claim is kind of weird. It's a system that is beating some of the best players at a game that was previously deemed to be very challenging to do computationally.

Comment Re:Not sure what to think.... (Score 1) 798

I'm curious about this - do you grab people's junk before using a gendered pronoun with them, or just ask? It seems really awkward.

Follow-up question - if you're not having sex with them, why do you care about what they have between their legs? It seems a bit weird to me to put that much emphasis on someone else's genitals, but hey, whatever floats your boat!

Comment Re:Don't keep on trucking (Score 1) 635

And what happens when that truck driver can't find another job? Do we guarantee him a wage? What about his kids when they can't find a job?

I am not against progress, but there is a social cost that partially offsets the gains. We seem to regard this a collateral damage and want to ignore the people that are hurt in the name of progress.

Comment Re:Violence or discrimination? (Score 2) 434

Stating specifically what they are concerned with in this particular case doesn't state that they aren't also concerned with other behaviors if they see them. They mentioned the specific behaviors they found problematic in this case.

However, by all means, if you see advertisers on this network engaging in hate speech against majority groups, you should bring it to their attention.

Comment Trump and his supporters should DEMAND a recount. (Score 1) 1321

They're certain he won fair and square and keep on saying there's a mandate for him, right?

If they're smart, they'll insist on a recount so that they can remove any doubt about the legitimacy of this election.

If they're actually interested in democracy, they'll want to make sure that everything is above board.

I actually don't know why we don't automatically recount after an election, period, if only to make sure we got something this important correct.

Comment Re:Understandable, but foolish (Score 1) 386

You don't have to wonder - just look at migration to the US in the 18th and 19th centuries.

My grandfather came here from a farm in Mongolia in 1906, alone, at the age of 12, and found himself in New York City. That might as well have been going 500 years into the future, just he did it by boat rather than time machine. Given the difficulties at the time as well, there was no going back.

People did it all the time back then, and still kind of do today, though arguably globalization has made it substantially less jarring. Some fail, some merely survive, and some manage to thrive.

Slashdot Top Deals

This is a good time to punt work.