Please create an account to participate in the Slashdot moderation system

 



Forgot your password?
typodupeerror
Trust the World's Fastest VPN with Your Internet Security & Freedom - A Lifetime Subscription of PureVPN at 88% off. Also, Slashdot's Facebook page has a chat bot now. Message it for stories and more. ×

Comment Re:Windows (Score 2) 223

Aren't Windows people getting tired of constantly babysitting their OS? One of my computers is a dedicated gaming box, and yes, running Windows. I'm constantly upgrading packages and rebooting. Sometimes it just feels slow and and rebooting seems to fix it for whatever voodoo reason. And what's the crap with having to re-install one per year? If I don't re-install everything, the system gets slower and slower until I'm pulling my hair out. And then when I re-install, it's like I have a new fast system. I've been running a gnome desktop since the 90s as my dedicated desktop and never had that issue.

But, we're almost there. And what I mean by that is more and more popular games are coming out for linux via steam these days. It won't be long until Windows is no longer needed and I can finally kick it to the curb.

Comment Re:Okay - that was quick. (Score 2) 893

that explains picking a Judge with only ten years of experience to the Supreme Court instead of the most experienced one that could be found.

Chief Justice John Roberts had five years of experience as a judge before being nominated for Associate Justice to replace retiring Justice O'Connor and then being nominated to replace Chief Justice Rehnquist when he died. While I don't agree with everything he says, he's done a good job of steering the court overall.

Going after the most experienced usually means going after the oldest, which has some potentially significant downsides not just in terms of time on the Supreme Court but also often least understanding of current issues. Going after the most qualified does not mean the most experienced.

Comment Re:I did a complete 180 on AV software (Score 1) 231

SEH has been present in some form since at least XP. It's old tech, with numerous bypasses. Windows 10's big improvement is Control Flow Guard.

Getting around ASLR is relatively easy if any library loads that does not use ASLR, and this is unfortunately very common.

Comment Re:I did a complete 180 on AV software (Score 1) 231

Win32 even had account personation services

Account impersonation is still there, even in 64-bit Windows. It's required for how Windows works. If you want to see it, set up a VM, run Metasploit against it (use smb_login) and get a meterpreter shell, load incognito, and list and impersonate tokens to your heart's content.

Vista god bless it made UAC, privilege speration, scrambled ram addresses with aslr, buffer overflow protected buffers in c/c++, and psuedo local admin accountants which instead used a token to run something.

UAC has numerous bypasses, privilege separation has existed since at least NT4 (maybe 3.51), ASLR only applies to the heap and only when the library or executable is compiled to do so (or is forced by EMET, which can crash some applications), buffer overflow protections can be bypassed using SEH or ROP gadgets, and as I mentioned above, tokens are still around. Another note on ASLR: it only takes one library in the entire chain of libraries called to not use ASLR to make it ineffective. Also, ASLR on 32-bit Windows is weak, having only 128 possible addresses without factoring in predictability that is inherent in the system, and if the process crashes and restarts relatively gracefully, it's not hard to hit a valid address. ASLR on 64-bit Windows is much more difficult to bypass.

Comment Re:Who cares? (Score 2) 238

>>A TV is a TV is a TV.

It's clear that you don't know what OLED is. I just bought an LG OLED 65 inch two weeks ago and it's the most amazing thing I've ever seen. The colors are incredibly bright. The contrast ratio is infinity because black means that the pixel is actually turned off. If the whole screen goes black for a moment while watching a movie, it's like the TV is turned off. Watching space movies at night with all the lights off is a jaw dropping experience. I just watched Prometheus again in 3D at night with all the lights off. It's a whole new experience. This is hands down the best TV I've ever seen or had.

Granted there's not much 4k content, but you can get quite a bit currently on Netflix. I'm currently re-watching all of Breaking Bad at 4k, 7.1 surround. I hightly recommend the OLED experience.

Comment Google's podcar isn't spectacular... (Score 1) 255

I see Google "podcars" on my way home from work everyday. I drive on Central Expressway between Palo Alto and Santa Clara. These podcars are slow as shit, typically doing about 20mph in a 50 and holding up lots of traffic. They are over cautious and have their safety thresholds dialed way too high, as I've had numerous occasions to "play" with it by invading its personal space; good fun by the way, highly recommended.

From what I've seen with Google podcars, we're a long way off from having these all over. And I mean a loooong way off.

Slashdot Top Deals

Competence, like truth, beauty, and contact lenses, is in the eye of the beholder. -- Dr. Laurence J. Peter

Working...