Catch up on stories from the past week (and beyond) at the Slashdot story archive

 



Forgot your password?
typodupeerror
×

Comment Re:My 300 baud modem shivered... (Score 1) 181

If you have enough signal for a voice call. My office is weird. I can't make a voice call, but I can text just fine.

There are plenty of situations where you have a radio signal strong enough and reliable enough for slow data but not for voice. Those are the kind of places that they're talking about.

There's a reason that you can get around the world with less than 5 watts of radio power on CW.

Novell

Submission + - Novell wins final judgment in SCO battle (computerworld.com)

CWmike writes: It's not the first time onlookers have declared that the long-running legal dispute between Novell and SCO is over, but many are saying that a Thursday judgment favoring Novell on all counts is the end of the road. 'The door has slammed shut on the SCO litigation machine,' wrote Pamela Jones, a paralegal who has closely followed the SCO v. Novell case since its beginning on her Groklaw blog. A judge in the U.S. District Court for the District of Utah on Thursday granted Novell's request for declaratory judgment and ruled against SCO's claims of slander and breach of implied covenant of good faith. He also said that SCO is obligated to recognize Novell's waiver of SCO's claims against IBM and other companies that use Linux. He ordered the case closed.

Submission + - How are you doing your LaTeX? 3

An anonymous reader writes: I tried convincing my professor to add LyX to the default installation on the lab machines to no avail. My arguments of quicker work, easier bidirectional languages switching and formula preview and easier orientation for new users didn't help convince him that it's better than a simple text editor. What would be good way to do it? And what are you guys using?

Comment Re:As the Rednecks say: (Score 1) 1131

Pat Robertson never flew an airplane into a building or blew up a bus full of women and children.

You can bet your sweet ass that if Pat Robertson thought driving a bus full of true Christian believers who were willing to be martyrs into an abortion clinic would make him and the people that follow him martyrs and spark a great fundamentalist Christian conversion, he would do it in a fucking heartbeat.

He's smart enough to know that the backlash would destroy the evangelical movement, but don't think for a second that something similar hasn't crossed his mind.

Submission + - Wikileaks Releases Murder Video (collateralmurder.com)

linguizic writes: Today Wikileaks released the video of US military firing large caliber weapons into a crowd that included two children as well as a photojournalist and a driver for Reuters. Wikileaks maintains that this video was covered up by the US Military when Reuters asked for an official investigation. This is the same video that supposedly has made the editors of Wikileaks a target of the State Department and/or the CIA as was discussed on Slashdot here: http://yro.slashdot.org/story/10/03/24/1321224/Wikileaks-Receiving-Gestapo-Treatment.

Comment Re:Should've Impeached Nixon (Score 3, Informative) 85

Nominally subordinate to only the 4th Amendment, which it violated by allowing exceptions to the Amendment's requirement of a warrant issued prior to any wiretapping.

Um, no. The Fourth Amendment says no unreasonable search or seizure, not no unwarranted search and seizure. It does, however, set out what a warrant requires, but it does not require a warrant for a lawful search:

The right of the people to be secure in their persons, houses, papers, and effects, against unreasonable searches and seizures, shall not be violated, and no Warrants shall issue, but upon probable cause, supported by Oath or affirmation, and particularly describing the place to be searched, and the persons or things to be seized.

There are many cases where a warrentless search has been held to be reasonable, and thus not a violation of the Fourth Amendment.

That being said, warrantless wiretapping of the entire US population is, indeed, an unreasonable intrusion, in my opinion.

Comment Re:DNSSEC has a similar attack against it (Score 3, Insightful) 168

The problem with a system that relies on trusted third parties is that these third parties have to be, well, trusted. This implies that they are trustworthy. Have you evaluated all of the CAs on the list included with your operating system and browser for trustworthiness? I know I haven't. I've delegated that to the OS vendor and the browser vendor. Should I be doing this? Do I have evidence that shows that my OS vendor and browser vendor are trustworthy? And whose interest do they work for?

These are all things that need to be evaluated when dealing with a system that requires trusted third parties. The problem, of course, is that very few people actually do this. SSL is a system that requires trusted third parties if you are to put any trust in the fact that the certificate signed by a CA really belongs to the person the CA says it belongs to.

[This is, technically not true with self-signed certificates. Anybody can be a CA. Just self-sign a certificate and use that to sign the certificates of others. The problem is that you're not included by default. Of course, there are some sites that have their own CA, either for business reasons or because they can. They have an internal CA that they use to sign certificate for business purposes. These CAs are verified and pushed to machines, either by Active Directory at Windows sites or some other mechanism. There's no reason that an individual can't do the same when they generate certificates. The problem is that the fingerprint of CA certificates needs to be validated out of band in order for you the avoid a man in the middle attack when distributing the CA certificate to somebody else. This sort of distribution of SSL certificates would not require a trusted third party, but you would need to be able to identify the person or organization giving you the fingerprint and judge their trustworthiness.]

Comment Re:Generate your own certificates... (Score 1) 168

That doesn't help taking to your bank

It sure does. When someone signs up for online banking, make them go to the branch to set a password and give them documentation showing how to verify the certificate and set it up in their browser. Bonus points for making this a bank-specific CA and then having rotating certificates on the bank website that are signed by this bank-specific CA so that this only needs to be done once per computer/browser.

Slashdot Top Deals

After an instrument has been assembled, extra components will be found on the bench.

Working...