Forgot your password?
typodupeerror

Comment Re: Criminal conspiracy to defraud (Score 1) 66

I'm reasonably certain that was sarcasm, but... mostly because it actually literally kills people, like PGE skipping maintenance for 99 years and burning down Paradise[, CA] or ATT taking away the POTS so people in the hills can't call 9-1-1 since the cellular network doesn't reach them. This is an active issue in my town, which is in Humboldt county CA. I live about a block from the CO, which is absolutely tiny, because so is the town. (It's technically a city but it does not act like one in any regard. We don't even have a fucking disaster plan despite needing to cross a bridge or drive a road with "slide" in the name to get in and out of here. Yet Cal Fire is going to put a new HQ here, it's insane.

Comment Criminal conspiracy to defraud (Score 1) 66

Taxpayers gave ATT literally hundreds of billions of dollars to build out last mile high speed internet. Actually, this goes back so far that SBC and even Pacific Bell were receiving this money here in California. Pacific Bell once promised all subscribers would be able to get ADSL by the year 2000!

ATT (and others, but ATT is the single largest beneficiary) handed this money out to shareholders and executives instead of delivering that access. These phone lines they are trying to shut down now are among those which they promised to deliver high speed internet access to, then never did.

If ATT were a person, we'd have thrown it in prison for decades.

The solution to the ATT problems here in California is the same as the solution to the PGE problem: Nationalization. Both corporations are frauds right on their faces; they take the money they're handed, but they don't meet any of their obligations. There is literally no way in which they are doing what they say they are doing. Why is fraud bad for me, but great for AT&T?

Comment Re:Nobody admits it: supply chain attacks are EASY (Score 1) 31

Of course, I've always said that if you have untrusted users you are fucked. LPEs are a dime a dozen and can break anything, even VMware tenant separation.

The problem is, you're going to be opening connections outward, and you might be compromised that way. Say, through your browser. As long as LPE remains possible then that opens the door to owning your whole system, to say nothing of the damage they can do to your data even without one.

Comment Re:Nobody admits it: supply chain attacks are EASY (Score 1) 31

There's another way to mitigate this, and it's ideologically difficult for a lot of Open Source people to accept...

The big problem is not ideological.

but you'll have to diverge from the tried and true path. AI makes this much easier: instead of using $popular_thing_everyone_uses, you use something else - either COTS or roll-your-own. Yes, it might be bugs, and yes, they might be security bugs, but unless they're painfully obvious issues where you didn't do your due diligence, it's going to be a more obscure target which will require more targeted attacks.

Humans are vulnerable to making the same kinds of errors, and security is hard, so you're going to either be highly likely to make predictable errors that are going to be easy to find or you're going to need to pull in some libraries to handle security.

No, this doesn't solve anything and it's 100% "security through obscurity".

IOW it's not a useful suggestion, especially now that there are exciting new tools for finding vulnerabilities rapidly.

Comment Re:Another point for Firefox and against Google (Score 1) 52

I gave up on NoScript a long time ago. Too difficult to use. Too many broken sites.

I have to use Chromium to access a few sites which are important, like for paying certain bills. Those sites don't work in Firefox with or without noscript; even when I enable all scripts, they still don't work. Anything not critically important which doesn't work when I enable all the scripts I'm willing to enable, I just don't go to, and I'm better off.

Slashdot Top Deals

Adding manpower to a late software project makes it later. -- F. Brooks, "The Mythical Man-Month"

Working...