Forgot your password?
typodupeerror

Comment Coding interviews are a waste. (Score 1) 120

Your best engineers will be AuDHD, and AuDHD folk don't do well in these sorts of synthetic tests.

I can code in 20+ languages for over 12 different OS', write code that's good enough for CERN to run for particle accelerator data collection for a decade, have accelerated systems by an order of magnitude by understanding the poem space better than their previous engineers, but I am abysmal at exam style settings.

The software industry is riddled with SEs who write abysmal code but can pass a coding test easily. They're the folk that you have always needed to reject but didn't because they ticked a box.

Comment Well... (Score 4, Interesting) 146

My opinion is that AI will kill Linux eventually. Not now, not when Linus uses it, because Linus knows how to code and is careful. But eventually the crappy vibe-coded junk will seep into the kernel. And then you'll get Microsoft-style code quality issues.

Comment Re: Who is eMudhra (Score 3, Interesting) 19

They primarily manage company-internal CAs for big businesses, which they seem to do well. AFAICT, they noticed that their security infrastructure was compliant for managing a global CA, and thought they might as well also have that as a product. However, there are some operational differences between an enterprise CA and a public one, including that companies want to issue client certs to employees but nobody really does global client certs. That means that they had an intermediate CA for global client certs that they never used, but it was in the standard trust store, and nobody tested that it was handled right until Wayne just went through the standard trust store making sure a new certificate weakness detector didn't give false positives.

So eMudhra correctly handled all the certs they issued, and all the certs they used to sign them, but they got some extra CA certs trusted that they didn't really need, because it would make their side business more similar to their main business, and this caused a major problem.

Chances are that they actually got a real random number out of a HSM for the bad CA certs, but accidentally made the certs with the index of the random number instead of the actual number. (That is, they got the 4th random number and made a cert for 4 instead of the number.) I wouldn't be surprised if they stored the correct private key, which would have made leaf certs that didn't validate because the intermediate was wrong, but they never used it to find this problem.

Comment Re: Phishing Tests (Score 2) 84

The email wasn't even too good to be true. The nasty phishing emails are the ones where the recipient is supposed to get a real email on the topic, but it's because of a publicly known event and outsiders could easily make up the content, so they just need to find a bunch of likely recipients.

I think the "you've been assigned the mandatory phishing training" emails should come from an external sender and contain a link to get into the extended training, and you should only get the short refresher by finding it through verified sources. Not only would this be a good placement test, it would test that official communications are actually hard to fake and possible to verify using the process in the training.

"In response to the embarrassing data breach that hit the news recently, we've assigned every employee at the company an online training session about phishing at this link. By sure to take it immediately, because it's a legal requirement for our settlement and delays could affect your employment." --Russian Hackers

Comment Damn... There goes my porn (Score 3, Interesting) 173

Russian sites like Yandex, Rutube, VKvideo... are great to find porn. But if they go down, I'll take the minor inconvenience for the sake of Ukraine.

More seriously, Yandex has been throttling queries rather aggressively lately, and I'm pretty sure it has something to do with their compute going up in smoke due to Ukrainian drones.

Comment Re: VRBO (Score 2) 132

I use AirBNBs as locations to produce adult content. I'm not joking.

An AirBNB is perfect for my needs; it's a literal godsend. I want a clean home-like setting that is relatively generic and free from personal items, that also doesn't look like a hotel and can be unique for the amount of content being produced there. I believe this is a relatively common practice.

That being said, I bring my own bedding, towels, pillows, cleaning products and tools and I take my trash with me when I leave and dispose of it elsewhere. I am conscientious that I'm staying at another individual's property.

In one case, I found out the property owner was still home, in his basement, while I was working with performers upstairs. He wanted to know what we were doing and didn't actually have a problem with it, but talking with him informed what I should do going forward. Even if I wasn't responsible for messy human activities, I'd still choose to leave as little work as I can for service staff.

I realize that many AirBNBs are owned by property management services and in some cases even hotel groups, but what I'm paying for is exactly the thing I want: clean and not-a-hotel.

Comment No alternative (Score 2) 132

Finding a hotel that can accommodate a family of 4 is not that difficult. Finding one that can accommodate a family of 8 is a bit more challenging. Finding one which can accommodate 8 adult siblings, their children, spouses, etc... is nearly impossible. The short-term rental market is the only realistic option for those people who want to meet with the rest of their family for an extended weekend.

Hotels are set up for small gatherings (an individual room or two), large gatherings (hundreds to thousands in a conference room), but seldom in between.

The last time my in-laws got together, we numbered almost 40 people. Airbnb rentals provide accommodations which are much more practical for those people who want to spend a holiday together with their geographically distributed relatives. Yes, the cleaning can be substantial. But making guests both clean the place, and then pay an additional cleaning fee (in the hundreds to thousands of dollars) seems ridiculous.

Comment This has been around a while (Score 4, Interesting) 142

The DOD/DOW have been working on this for a while. They discovered, early on, that the device had a propensity to cause permanent nerve damage.

It's very unlikely the US have fixed that, as they'd largely sidelined the work as a failure. However, at 36%, Trump needs something he can call a win, no matter what the long-term consequences.

Comment Re:Not just the browser (Score 1) 87

You know you don't have to install Adobe Reader, right?

FWIW, I had an interaction with the person responsible for PDFGear online somewhere and I've been using it since I found out about it. It's a free (gratis) PDF viewer and editor. Maybe the full, paid Acrobat product can do more things, but if so I haven't noticed.

Comment Re:Use Rufus (Score 4, Informative) 87

The thing you are looking for is the Group Policy Editor. There are Group Policies that can disable the prompts to use Microsoft accounts and the ability to use OneDrive or Windows AI features, the hook Bing has in Windows Search (i.e. no more searching in the start menu and having it list web sites before the file or application you wanted) and all the "consumer experience" features in non-Enterprise Windows. There are a few GPO settings that get ignored unless you're on Windows Enterprise or Education. Most of them related to Microsoft Datamining.

It is also possible to transition a Microsoft account back to a local one without losing your Profile. This is done in Settings > Accounts > Your Info in Windows 11.

gpedit.msc is normally only available to non-Home Windows SKUs, but it is unlockable with a tiny bit of Powershell:

Get-ChildItem @(
        "C:\Windows\servicing\Packages\Microsoft-Windows-GroupPolicy-ClientTools-Package*.mum",
        "C:\Windows\servicing\Packages\Microsoft-Windows-GroupPolicy-ClientExtensions-Package*.mum"
) | ForEach-Object { dism.exe /online /norestart /add-package:"$_" }

Open an Administror-elevated Powershell or Terminal session, paste that in and even your $200 Acer vomit-grade notebook can work the way you want it again.

The reason we need GPOs for this stuff is that Microsoft's software updates will occasionally re-set registry changes. If the changes are made with GPOs, the settings get reapplied and overwrite changes no matter what state Windows is in. This is particularly annoying for stuff like OneDrive, CoPilot and Edge preferences. You either have to regularly re-run scripts to alter the registry to the state you like it and hope nothing makes a structural change to where those settings live, or you set a GPO.

Slashdot Top Deals

"Success covers a multitude of blunders." -- George Bernard Shaw

Working...