Catch up on stories from the past week (and beyond) at the Slashdot story archive

 



Forgot your password?
typodupeerror
×

Comment Re: Sounds like criminal computer sabotage (Score 1) 75

And then... why is anyone using curl to do very specific SSL validation tests when tools like the openssl cli are available.

Because they are using curl for whatever reason they use curl (ease of its command line as compared to other https clients, or whatever).

And it only makes sense to do the validation along with the rest of the https access (which could be the submission of a form, which contains sensitive data).

The reason for this is twofold:

  1. convenience: why call 2 different utilities, when you could do all in one?
  2. security: if middleman is smart, certificate could have changed between invocation of "validation" utility, and actual access

Comment Re: Backdoor uses (Score 1) 75

If there is a backdoor (other than this one), the nation state level attacker could just directly install a keystroke logger or whatever.

However, this curl backdoor allows a nation state level attacker to lean on a CA under its control, which happens to be already in the system CA store (but not in the user's own trimmed down CA store).

Comment Re: So how did the "human reviewer fail"? (Score 1) 95

This still doesnâ(TM)t seem right. It should not be the burden of the accused to deal with the false accusation. Lots of stupid nonsense takes 5 minutesâ¦and guess what? More and more of everyoneâ(TM)s day should not be taken up by stupid nonsense. The point may be strengthened by pointing out that driving is a privilege requiring various responsibilities, not a right, but that still seems weak.

You know, posting to Slashdot is a privilege too, not a right. So please put that iPhone away :-)

Comment Re: Attorney fees (Score 1, Insightful) 72

I almost ejected from my toilet because my ass made a seal and the internal air pressure built up.

Looks like this was not so much due to there being beans on the burrito, but more about its overall size, and the size of all the burritos before it: a lean person's ass makes no seal with a standard bowl.

That and "do you always shit with the seat up?" or the "beans" would simply have vented through the gap between seat and bowl.

Slashdot Top Deals

Money will say more in one moment than the most eloquent lover can in years.

Working...