Follow Slashdot stories on Twitter

 



Forgot your password?
typodupeerror
Trust the World's Fastest VPN with Your Internet Security & Freedom - A Lifetime Subscription of PureVPN at 88% off. Also, Slashdot's Facebook page has a chat bot now. Message it for stories and more. ×

Comment Re:we've been stuck at 4 core for too long (Score 1) 157

As far as I'm concerned they never left the game, only lost popularity. I'm running a pile-driver core chip on my stuff at home and it doesn't get saturated on my day to day stuff and is quite speedy on my heavy duty stuff as well. I'm not by modern definition a gamer so I'm not pushing it as hard as I can with Windows on the latest AAA titles, but I do use Linux and 3D games - my limitations seem to revolve around my out of date GeForce 750 Ti.

I just built a pile-driver core machine for work, it's being used for video editing - the editor originally wanted a Mac but we talked him into a custom Windows machine instead since Adobe actually caters to the Windows side more considering their war with Apple. He's exceedingly happy - in fact he's asked us to remove his older Mac from his desk he likes the Windows/AMD combo we built him so well.

I'm still a fan of the AMD/Nvida combo, from the old ATI Rage IIc almost always having issues in laptops in the late 90's, to my first Radeon literally smoking after playing Alice for about an hour and half, to the conference room machine where I now work having to run on an older version of the Radeon driver if I want sound over HDMI to work I've never been able to bring myself around to liking ATI/Radeon/AMD graphics with the exception of saying they did great in the Wii and GameCube.

Comment Re:Doing more with less.. (Score 1) 63

Why aren't these tools built in, though?

IMHO, PKI on Windows is problematic less because PKI is complex but more because the in-built tools suck or are non-existent.

Most IT admins are oversubscribed enough that writing that Powershell script or putting together the third party tools for certificate expiration won't happen, especially when you consider for most organizations the number of certificates that matter is relatively small.

I will grant an exception for Homeland Security, though, as any organization using PKI to that extent ought to have an entire team responsible for managing it, which means they would have the time/tools/experience to deal with it.

Comment Re:Doing more with less.. (Score 1) 63

I think you're basically right, PKI implementations are horribly complex in practice and doubly (or more!) so with Windows.

It seems to get worse as certificate-based security gets added into products as defaults installations. As an example, Exchange 2016 installs a self-signed certificate by default which gets assigned to SMTP and IIS. The normal (spanning back several releases) process of adding and assigning a public certificate to services doesn't change the self-signed certificate assignment and use for the IIS Exchange Back-End site or for transport connectors.

I ran into these are problems recently with a customer who deleted the self-signed certificate after installing and assigning his public certificate. Bam, dead Exchange GUI -- had to re-bind the back-end Exchange site in IIS with the public certificate.

Another customer had "verify certificates" enabled on their spam service and when they switched SMTP delivery to the new server, the self-signed cert was still being used by the front-end receive connector. It took some kludgy, un-documented Powershell to force the connector to use the public certificate -- ie, the attribute has to be built as a compound variable using sub-attributes of the public certificate combined with some text, and then that variable assigned as the TlsCertificateName on the connector.

So even if you're trying to use certificates, application behavior and certificate selection is pretty opaque in many cases and can actually ignore specific certificate assignment options.

I won't even get into the management trainwreck that is Windows certificate server, with its 2003-era dialog boxes and management tools. In my mind at least, all of this could be modernized and made much simpler to manage, but the toolchain remains completely user-hostile.

Comment Re: Yup (Score 1) 340

Lifetime indenture = slavery.

But that's not quite the same as recognizing someone as actually a slave, and not an extended contract of indenture. If I remember correctly, John Punch ran away before his limited term of indenture was finished and broke his contract, and that was the punishment meted out by the court. John Casor was not made a slave as punishment, he did not break his contract. Anthony Johnson simply did not want to recognize the end of his contract for commercial/monetary reasons.

Strat

Comment Re:Google? (Score 1) 39

Translation: Google does not want to be accused by the RIAA / MPAA of supporting piracy. This allows the usefulness of globally sharing files, but the extremely plausible deniability of creating a piracy tool.

As all good people know, any technology that allows files to be transferred over the internet can enable piracy and thus is evil. Any company that makes a technology which ends up being used for piracy must be shut down for the good of the global economy. Or terrorism. Or think of the children. (See: Grokster. Also see the attacks and rhetoric about bit torrent technology.)

If the project is only easy for nerds to set up, and most people won't use it, this is a blessing in disguise! It would be like Usenet before the great poisoning of AOL. Or like the Web before the great unwashed hoardes, and f***ing advertisers. But like most things, some moron will come along and spoil it all by making it easy for Windows users and RIAA users. Just an opinion.

Comment Isn't this why many people voted for Trump? (Score 1) 340

Or at least semi-intelligent people?

They knew in their hearts he was kind of incompetent, but they also were so cynical about any establishment politician being able to effect meaningful change that the only way to achieve it was to empower an incompetent with the idea that it would break the system.

Of course, breaking the system has lots of unplanned side effects, too.

Comment Re: Yup (Score 2) 340

I must admit mis-remembering concerning John Casor being white. I confused the Irish indentured servants with John Casor for some reason. I will always admit it when I'm mistaken.

However, Anthony Johnson *was* a black man and *was* the first government-sanctioned US slave owner, and the rest of my original post I still stand by.

I know many people here intensely dislike Glenn Beck, heck I don't agree with him on many topics, but he did a very good historical piece on US slavery. I believe it's worth seeing.

https://youtu.be/KnsjiIHGkbc

Strat

Slashdot Top Deals

In a consumer society there are inevitably two kinds of slaves: the prisoners of addiction and the prisoners of envy.

Working...