Please create an account to participate in the Slashdot moderation system

 



Forgot your password?
typodupeerror

Comment Never been slashdotted before (Score 1) 1172

Hey, cool, I just found this story! Daychilde is my common nickname - I adopted NameWithheld during the time I managed to stay anonymous - I'm Isaac Eiland-Hall. And this story explains why the server load is as high as it is, although we've been featured in a lot of places today.

If you want to see what you guys are doing to my two servers, check out http://namewithheld.us/ - I have live stats up. :)

Comment Re:Security Through Obscurity is not security (Score 1) 385

Here's a quick counter-example: Part of the security of a military base would be the guards at the entrances wielding big scary guns. They're really not obscure, and that's precisely the point.

There may *also* be guards who wish to remain unseen. But there is a significant portion of security (in nearly any application thereof) whose point is precisely to be as unobscured as possible.

Your blanket statements are ill-conceived. You may well have some valid points, but your current argument is flawed, in my opinion.

Comment Re:Is this a problem? (Score 1) 231

What's wrong with writing their login details on post-it notes?

Of course, it completely depends on the context... but I'm assuming massive attempts to log in are probably coming from an external source, i.e. across the internet. If people don't have physical access to your workstations, putting the post-it note isn't such a terrible thing.

Now, don't get me wrong - I'm not advocating posting login details and pasting them on the monitor. Instead, write `em down and treat that piece of paper like a thousand-dollar bill. Put it in your wallet or purse. If someone gains access to it - you have worse problems than just your password being taken.

And again - if your hacker is onsite and has physical access - you really have worse problems than a password written down and stuck in a drawer (because I'm really not advocating for sticking it on a monitor).

Which of these sounds more secure:
1) Employees are forced to change their passwords every 90 days, but are discouraged from writing the passwords down anywhere.
2) Employees are forced to change their passwords every 90 days, and are encouraged to keep a written copy in their wallet or purse.

Which of those will tend to allow for more secure passwords, realistically?

There's a ton of things to consider - but it always bugs me when someone argues that writing down passwords is a bad thing. It may seem counter-intuitive at first, but I think it's clearly a Good Thing(tm). :)

Software

Submission + - Canonical Begins to Open-Source Launchpad (ubuntu.com)

kripkenstein writes: "Canonical, the corporation behind Ubuntu, has begun to open-source Launchpad. Canonical has been criticized for not doing so earlier.

The first component of Launchpad to be open-sourced is Storm, described as an "object-relational mapper (ORM) for Python". A tutorial with many examples is available. The license for storm is the LGPL 2.1 (inspection of the several source files shows they contain the common "either version 2.1 of the License, or (at your option) any later version", implying that Storm is LGPLv3-compatible)."

Slashdot Top Deals

"The chain which can be yanked is not the eternal chain." -- G. Fitch

Working...