Forgot your password?
typodupeerror

Comment Re:So, ignoring this, um, threat... (Score 1) 47

I wouldn't trust he could remember anything but the name of his daughter by now. He definitely doesn't reward anything other than crossing his palm. Though there is some merit to what you're saying, because he clearly considers all of our money to be his money now — therefore, asking for tariff refunds is asking him for some of his money.

Comment Re:Rethinking our approach (Score 1) 54

The password server should be in a special box that throttles requests.

There is no passive defense that can save you without creating new problems. A slow server is a DDoS-able server. We already do things like rate limiting, but it can also be a problem. Therefore we use active threat detection and selective blocking.

That way no hacker can run gajillion retries on a password without swiping the actual box.

It's not wrong to want to put your authorization server on a link that's too dumb to hack it through, but what about local logins? We have good reasons to protect our password databases.

Anyhoo the best kinds of passwords are phrases with subtle errors or small random changes, and the best policy only forcing changes rarely unless a breach is known or suspected. Making them longer is the only thing that really helps make them more expensive to break, after keeping them secure in the first place, and the more easily people are allowed to memorize them, the less likely they are to need to write them down.

Comment Re: scares me too much ill never do that (Score 1) 66

NewScum wants to bring them back, because forced treatments are better than people suffering in the streets.

He wants to bring them back because he can profit from directing investment to his cronies. If he cared about people suffering in the streets he'd have directed some investment wisely and gotten them off of the streets. Or, you know, backed an empty unit tax that would make housing affordable again.

Comment Re:wrong motherboards (Score 2) 46

They should be selling motherboards with 8 or 16 RAM slots so that you can consolidate existing RAM from multiple 'obsolete' boxes.

That's not trivial, especially when most people want uATX or smaller.

Also nobody wants to support a bunch of people using old RAM and then filing RMA requests about it.

Comment Re:Yawn (Score 1) 46

I saw no benefit in purchasing new components to chase the never ending need to stay "current".

I upgrade to the current generation when it becomes the prior generation, i.e. when the new generation comes out. I built a 5900X system with 64GB of RAM just before the prices spiked. In fact I bought 32GB and then just after it arrived I was like nah, I should have more at this price, and the price had already gone up by about 10% since my first order. Therefore I purchased at the very start of the spike. Last I looked, the same RAM I had bought had gone up 200%.

Comment Re: scares me too much ill never do that (Score 1) 66

I'm in favor in theory, but in practice I don't trust my federal government, my state government, or the people of my country, or the people of my state, or the people of my county to make responsible decisions which respect freedom. I used to kind of trust the people of my state in the aggregate, but then they voted not to end slavery in this state because it would impact fire management.

Comment Re:Microsoft part right, part wrong (Score 1) 103

Yes you'd need malware to dump contents of the RAM in order to extract the passwords, but this is a vector none the less.

It's a bigger problem than that because it's in the browser, which is often how attacks enter the system. If someone finds a hole in Edge which allows them to inspect only Edge's memory, then they can use it to get your passwords out of it. This is an enormously likely scenario.

Comment Space heaters make sense, DCs don't (Score 1) 131

The idea of having someone put one of your servers in their home and using it to produce heat makes sense. The requirements are low and if one server goes down it doesn't affect your cloud much.

The idea of having someone have a bunch of your servers at their home makes none. They don't have a SLA for power and it's difficult and expensive to get carrier-grade networking at their address.

Slashdot Top Deals

"Just the facts, Ma'am" -- Joe Friday

Working...