Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror

Comment Re:Sure. (Score 1) 159

Our internal training has shifted entirely to passphrases, to the point that we had to write our own internal training video because every training video we looked at talked about traditional ways of creating a complex password. We found that when people were encouraged to come up with a sentence, they usually came up with something in the range of 25-35 characters, well past the minimums.

Comment Re:Cloudflare (Score 2) 159

Microsoft seems to be doing these kinds of migrations lately.

I think their old ways of poorly documenting things even internally came back to bite them. I've seen some things written by people who were at one time Microsoft devs working on Windows 7, 8, and 10, who said that a lot of removed functionality came because trying to figure out what the old code was supposed to be doing was nigh impossible, and figuring it out sometimes just didn't fit the schedules or budgets. If a feature didn't seem to be widely used as a percentage of the userbase, then it often got dropped.

Maybe some rewrites are being taken too far, but anyone who has dealt with code that goes back potentially more than 30 years is almost certainly going to find some really bad and/or confusing implementations.

Comment Re:Sure. (Score 1) 159

NIST SP 800-63 has formalized this. Specifically, look up Section 3.1.1.2 in SP 800-63B-4, released just this year. Minimum length 15, max length at least 64, but no other requirements, including complexity or regular rotation. Unicode is supposed to be accepted, normalized against a standard process (that one I don't remember, but it's documented), with one code point counting as one character. Filtering for known bad passwords or patterns is strongly encouraged.

I pushed through an implementation at our company last year, explaining why, showing the NIST draft. A bunch of people protested because it was different, but the CIO told them to live with it because their entire argument was "but we've done it this way for 30 years!" Some critical vendors complained when we started pushing them to comply (or at least implement SAML), but we only have a couple of vendors not complying now, and they should be compliant soon. Users are largely happy with the change, and they complain a lot less when we see suspicious activity and force a rotation.

Comment Re:What does any "desktop experience" really provi (Score 1) 39

The desktop background is the modern customized splash screen.

Window decorations and effects matter to me, for both functional and aesthetic reasons. To me, KDE is a sort of modernized cross between Windows 7 and NeXTStep in that department. And it gets right things that Windows has gotten worse about in 11, like being able to read the fucking clock. I seriously don't know who came up with that idea, but on the same display, I can read the taskbar clock on KDE without glasses and not on Windows unless I scale everything and throw away the benefit of the high-resolution display. And that's on the automatic display mode, but you actually also get settings.

Comment Re:I'll stick to KDE (Score 1) 39

I tried using Wayland with Devuan Excalibur (Debian Trixie) and my experience with it was not good. I had some games not work and a lot fewer windows could reopen where I left them. This is with AMD graphics. With Nvidia on Devuan Daedalus it really just doesn't work at all for me, and I'm not interested in figuring out why.

This is irritating, but hopefully X will last until my next PC or even my next GPU, which will probably be from AMD. The Nvidia Linux driver situation is unsatisfactory — they will not miss my money in any case, which no doubt helps explain the lack of attention. While their Linux drivers are typically current these days, and have approximately the same performance as the Windows drivers, they still just aren't very stable. Also, the installer sucks, where with AMD OSS drivers that's simply not a thing.

I ran every wm under the sun back in the 90s as well, designing whole desktop and widget themes around each one, and now I just use KDE. Does it do every single thing I used to do, no. Do I care, also no, because it's a great desktop. It does pretty much all the things I used to actually do with compiz. The thing I really want it to do (per-window scaling) I didn't have with compiz either. Yeah I know compiz still exists, but it's flakier than ever.

Comment Re: pile of pet projects (Score 1) 195

I've bought all kinds of stuff because people bought it to use with one Windows version and the very next version didn't support it. This is usually due to literal malfeasance on the part of the maker, not Microsoft. The new devices speak the same protocol and WOULD work with the new driver, but either the driver is coded to not work with them or even just the inf file doesn't have the right vid/pids. You can sometimes make them work with hackery but your average user can't do that. The idea that Windows has good hardware support is very stupid, but there's no shortage of stupid people here.

Slashdot Top Deals

I've got a bad feeling about this.

Working...