Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror

Comment Re:BETTER Mitigation (Score 1) 66

Non-systemd Debian and more and more Devuan here. This is not a high criticality vulnerability, but, after the sshd near-disaster, the second time not running systemd proves to be the right decision.

I can't hear "Debian" and "sshd" and "disaster" in the same sentence without thinking of https://research.swtch.com/ope... (the OpenSSL bug from September 2006). It really took me a minute to realize you were talking about the xz-utils attack.

Comment Re: as long as... (Score 4, Insightful) 45

From a server perspective I get it a little, but all those changes make sense on a Linux desktop/laptop. The reason I'm so passionate about this is the people: I'm an oss developer myself, with lots of friends who work at various enterprise Linux houses -- they all are smart people with reasons for what they do. Many of the anti systemd arguments are couched in conspiracy theories or ideas that something sinister is manipulating things instead of wondering maybe these people know something I don't know? Even more in that direction is that so many major distributions have also accepted these pieces as basic building blocks. Don't get me wrong, I'm glad there are alternatives for people who want them (I work on Gentoo and openrc is good), but I just wish folks who like those alternatives wouldn't act like they're being appointed because the free software they've been given isn't exactly to their liking.

Comment Re:as long as... (Score 3, Insightful) 45

By systemd people, do you mean the folks who work full time producing linux distros that utilize systemd? aka the vast majority of professional linux programmers? It's been years. We have systemd. Everyone has systemd. You can use other things if you don't want systemd (deuvan, gentoo w/openrc), but this continued cult-hatred for "systemd people" is completely weird to me. How many decades will it take before folks stop being salty about having to learn a new way of doing things.

Comment CDK Proteins are extremely tightly conserved (Score 5, Insightful) 94

This protein is changed so little across the entire spectrum of eukaryotic cells that brewer's yeast can have their CDK replaced with the human version with no ill effect. Something that's proliferated for so long with so little change indicates that very small changes make the organism unviable. Tampering with the expression of this protein seems like an amazingly bad idea.

Comment Re:Thunderbird too (Score 4, Informative) 112

Thunderbird is not dead at all, it's just been relegated to community maintenance mode (like SeaMonkey has always been). There was a lot of press blather about how that amounted to the "death" of Thunderbird, meanwhile its users are happily downloading security updates with the occasional new feature, and continuing to use a relatively stable program. Considering what they're doing to Firefox, I think this is a good thing.

Comment Re:No winners economically (Score 1) 268

I have little sympathy for an industry that could have spent the last 40 years reducing their emissions.

Paying for extra emission reduction would put you at a competitive disadvantage against power plants who just did the bare minimum. Or, in a highly regulated environment, it might run you afoul of price controls.

Comment Re:No point encrypting if you're the only one... (Score 1) 108

And yet, as I point out, Apple has done it with iMessage. A lot of sites encrypt their traffic with SSL.

Both of these are surely compromised by the NSA by now. Certainly SSL is.

I think the real problem is one of standards.

That is a really good point. The move to closed systems is a disease that is killing the internet.

Comment Re:No point encrypting if you're the only one... (Score 2) 108

This argument hasn't changed in twenty years, in spite of massive improvements in ease of use. Apparently, it's impossible to make it "easy enough" for the average user. I think this means ease of use actually has very little to do with the problem. The problem is with the average user's priorities. People value convenience more highly than privacy, and as long as people don't change those values, encryption will never take on. Typically people will only change their priorities under threat of dire and immediate consequences for them personally. Everyone will lock their door so they don't get burglarised. But email privacy is too abstract and invisible still. It's going to take some huge cases of identity theft, with real monetary loss, to get people to change â" and then people will probably sooner abandon email than use email encryption. Finally, the kind of convenience that you propose necessarily will render the whole thing insecure. Letting strangers (like Google) manage your private keys defeats the whole purpose.

Comment Re:Microsoft Opened Themselves Up for Lawsuits (Score 2) 345

Oh and don't forget which OS it was that gave us heartbleed. Was it Windows? No no no no, was it OSX? No no nooo no, was it Linux? yeah yeah yeah yeah!

How does this utter shit get modded up to +4? Heartbleed is an OpenSSL bug. It's got jack to do with Linux (or any other OS). That is just the worst in the parent message. Everything else is misleading as well.

Slashdot Top Deals

Competence, like truth, beauty, and contact lenses, is in the eye of the beholder. -- Dr. Laurence J. Peter

Working...