Follow Slashdot blog updates by subscribing to our blog RSS feed

 



Forgot your password?
typodupeerror

Comment Turned to Crap, Trolls Took Over (Score 1) 264

I stopped participating over there 8 or so years ago. The Troll agenda took over and nothing of value was getting voted up any longer. I occasionally would cruise over to see if anything of interest had reappeared. Never found anything.

Comment Re:Great! More hipster hate. (Score 1) 176

I've never met a hipster who wasn't uber interested in proving how uncool other people were. Mostly they find people "uncool" for being "late" to whatever thing they thought was completely awesome 3-6 months ago. I've never met one who wanted to be cool, at least not in the traditional definition.

By definition they aren't interested in being cool, to be cool, you have to be doing what the majority of people are doing, and by that time the hipsters have moved on to whatever is next to avoid becoming "cool".

Comment Seems flawed, but what do I know? (Score 1) 549

It seems to me the most likely machine to be compromised is probably a user desktop. Servers and web services can implement pretty effective countermeasures against brute force attacks (3 tries and you're done for an hour, 5 tries and you're done forever). Not to mention multi-factor authentication.

Putting all of your passwords no matter how complex on a windows 7 desktop with a single (easy to remember, easy for computer to guess) password, which can be trivially retrieved with a keylogger seems like completely broken security to me. One zero day in IE, keylogger installed, access to all user passwords for all sites granted.

You're literally a single hack away from having bank accounts, social media, email, everything hacked. Or am I wrong somehow about password managers/keyloggers?

Comment A little early to judge? (Score 1) 144

Maybe my recollection is bad, but, wasn't the big PR push just in the last year? I know at my high school (granted, almost 20 years ago now) you had to take 2 years of CS to get into the AP course and even attempt the test. So at a minimum I would expect the PR push to show up in next year's numbers. Its going to take more time and effort than 1 year of google handing out cash to make a significant change in numbers, and its going to take a long time to really improve pass rates. You can't just throw a CS book at your average HS student and expect them to get a 5 in 6 months time.

Its going to take at least a decade to get female numbers up to parity, changing culture is hard. Its going to take at least a decade to improve pass rates because you have to start teaching CS earlier in order to have a foundation. We start teaching math in kindergarten, how many students take the AP test in calculus and how many pass?

Also, in my experience each year the tests are vastly different and have vastly different pass rates, so one year does not really mean much. My AP Chemistry test was an example, we only had a few students pass (with 3s) out of a class of 30, where the year before, 75% of this same teacher's class passed, and more than 50% got 4 or 5. The teacher after the test read through it and said our year was the hardest test she'd ever seen.

Comment Not for home users... (Score 3, Insightful) 80

From rtfs, it seems o3b is aimed at the ISP market. I think this could be quite neat, they are aiming at being a backbone provider for say a local wireless ISP on a tropical island, this ISP sets up their terrestrial wifi equipment, and sets up a link to o3b for backhaul.

This could transform the competitive landscape in a lot of these places where either a) becoming an ISP means signing a multi-thousands/mo deal with the 1 company that has pulled fiber under the sea for thousands of miles, or b) having no option, because the terrestrial land lines are all owned by the government run telco who has no interest in providing an upstart with bandwidth

Of course, for this utopia of competition to break out, it assumes that o3b will be charging significantly less than whoever has pulled fiber under the sea, and that government regulation in all these countries doesn't simply preclude the business model by granting unlimited monopoly power to the government run telco. I know in the 2 south american countries I've visited this second hurdle is much larger than the first... The government owns the telco, thats the only way to get internet, period.

But assuming I'm wrong about the regulatory landscape, and assuming o3b will have reasonable pricing, it almost becomes interesting to attempt to setup a wifi based ISP in some underserved country...

Comment I can happen (Score 2) 403

1. Deep Storyline, focusing on story first action second, that's what made the original trilogy good
2. Don't throw away the content the fans are screaming for...ok some of the expanded universe is just silliness, but there is some good stuff...AKA Timothy Zhan books...keep most the concepts from there...Mara Jade, Leia and Han's kids...
3. Attribute 1,2,3 and to unclear memories and retcon some of that crap!
4. Don't make new characters poor clones of previous characters
5. for the love of god make sure the villains aren't Vader/Emperor retreads...and PLEASE don't find some half asses way to resurrect the them!

Comment kettle, meet pot (Score 1) 294

I found it hilarious that the post bemoans the state of getting started with a new environment, and how it invariably requires a tutorial, and that is terrible.... And then you download their software and you're presented with a blank screen and no idea how to get started... so you turn to you guessed it.. a tutorial.

And then a tutorial that isn't even illustrated, so you can't tell what is supposed to happen with you hit cmd/ctrl+enter... I get a little checkbox next to my line of code.. I don't know what that means. Line is syntactically correct? Line executed? Line monitored by system? And it certainly doesn't provide any insight into the flow of data. I don't see a pane like I do in pycharm that lists the variables with their current values, I don't see any state.. Is that intended? I don't know, the tutorial doesn't inform me, and the environment is useless.

I don't generally use debugging tools, preferring to keep my abstractions shallow, my code small and understandable, and a test suite that can prove that my code is handling the cases its designed for correctly. In some projects, yes, complexity is a requirement, but I feel like the advent of IDEs and debuggers has only served to allow people to more easily break what is in my opinion the first rule of development:

  "Everyone knows that debugging is twice as hard as writing a program in the first place. So if you're as clever as you can be when you write it, how will you ever debug it?" - Brian Kernighan

Break systems down into small manageable parts. Write the code simply and clearly. Write tests EVERYWHERE.

Comment Was worth seeing, could have been better (Score 1) 732

1. I understand the need to trim the general aging of the characters. Using an endless succession of the kids to age them over the timespan of the book wouldn't have worked. However since the kids were now a fixed age it rushed the storyline.
2. Giving away the fact he was fighting the real battles was just stupid
3. Having a single ship carry the little doctor (which was now not so little)...was a total waste of a plot device
4. They should have spent more time on the training of Dragon Army...establish Ender's creds as a leader
5. Changing the ending sending Ender off alone was an error, I don't know if they intend sequels, but it really messes with the continuity
6. Bean was TOO big! and they spent no time on his relationship with Ender
7. The move had the soul of Ender's Game, but not the heart
8. The kid's ethnicities are all screwed up, plain and simple
9. Card wrote versions of the movie over the years perhaps one of his revisions should have had more influence

Comment Re:Tough, Apple (Score 1) 180

The problem is apple *did* implement the standard, this is a classic submarine patent. Apple is using the standard SIPS+SRTP protocol... but guess what? These guys patented it a year before it was standardized, and now its the defacto standard in everything (IP Phones, LTE, literally all voice communications now use SIP)

So these guys printed a mint by patenting something, then getting standards bodies to adopt their standards, then claiming everyone infringes by implementing the standard.

Comment Re:My give-a-darn meter is reading negative GADs (Score 2) 180

By my reading, this company virnetx claims to have patented SIP... So Asterisk, grandstream, and everyone else is probably on their list as well. Anyone who setups up direct communications between 2 endpoints violates their patent.

According to what I've read, using SIP secured by TLS/SSL and SRTP was only "standardized" in 2004, 1 year after these guys patented "setting up an adhoc VPN" between two devices automatically (which is what SIPS+SRTP does) according to them.

So, I guess we'll all use VoIP again in 2023, once this patent finally expires.

Comment Re:As usual, some things got left out... (Score 1) 161

How is it sloppy security practice? You're seriously arguing that *every* *single* *api* on the internet *must* implement oauth right now because the api *will* be reverse engineered and users will be tricked into providing their credentials directly to a third party? Even when third party apps are not authorized? Every company with an api on the net *must* provide for third party access?

Oauth doesn't provide any security anyway. Users will still be tricked into providing their credentials directly to third parties (on phishing oauth portals). Whats going to stop someone from spoofing an oauth portal, and distributing an app that redirects to said portal? User enters username/password on spoofed oauth portal, third party has creds, does nefarious deeds. Oauth provides precisely 0 security if the user is not careful.

Comment Re:Those who attempt to re-create Oauth... (Score 1) 161

Well, I'd argue this is one such context. There is no third party, Tesla's API is not designed for third party access, its designed for Tesla app -> Tesla API communication. Adding Oauth to this workflow, just for kicks, certainly would decrease usability, as you'd get redirected to a third Tesla page, to provide your credentials and generate a token for Tesla's own app.... The facebook and twitter apps published *by those companies* don't use oauth, they ask directly for your username/password

Saying Tesla's app should use oauth is crazy. Saying that anyone who publishes an API on the internet *must* implement oauth so third parties can access the API is equally crazy.

Comment Re:Those who attempt to re-create Oauth... (Score 1) 161

Tesla wasn't even trying to re-create Oauth, they *don't* provide third party api access. They implemented a perfectly reasonable first party api authentication mechanism. If users are inclined to give their creds to *unauthorized* third party apps then that is on the user.

Every API in the world shouldn't be *required* to provide third party access.

Slashdot Top Deals

Prediction is very difficult, especially of the future. - Niels Bohr

Working...