Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×

Comment Re:Well that explains why the killed google Reader (Score 1) 90

Wrong. Since I follow the situation closely, let me explain.

The HTML5 Web Notifications API is in Chrome since forever under webKitNotifications.

The first draft spec of Notifications API included both icon-and-text simplistic notifications, and HTML notifications which were in fact just tiny windows that popped up.
Chrome implemented both, extension authors happily started using it.

Next, W3C drops HTML notifications from the draft. Chrome then drops it from the web context, but keeps it for extensions: they didn't want to suddenly break legacy apps, I guess. They didn't even mark it as deprecated until not long ago.

Fast forward a few releases. Chrome wants its own notifications center, and drafts a new Rich Notifications API. Long experimental, this finally hit Stable.

However.. Despite being touted as a replacement for HTML notifications, those don't come even close to customization possibilities of an arbitrary HTML page, with its own code running. And Google decided to make a hard switch: a browser version has either Rich or HTML notifications enabled. So, if the feature hit you, your old notifications keel over and die immediately.

But that's not the worst problem here. The worst problem is sudden fragmentation. Windows and Chrome OS have the new Rich notifications and do not have HTML ones anymore. OS X and Linux do not have Rich notifications but support HTML ones. See the problem? And despite saying that it will come to other platforms "soon" this isn't in Beta yet for sure, and possibly not even in the Dev branch, but don't quote me on that. So to even maintain both systems I now need two OSes.

Comment Re:No (Score 1) 253

Note that without the hardware part, the whole system cannot survive a hard drive wipe. So it's semi-useless for existing hardware not equipped with it, and my point is that the original question was about exactly this situation. Not to lessen the merits of the solution, of course - it's just not applicable.

Besides, Computrace persistency module will only re-enable itself under supported operating systems. Guess if Linux is included!
So the surviving module will be running on firmware/BIOS level only, and I personally consider that "hardware".

Comment If you like the Google Reader UI (Score 2) 50

If you're a fan of Google Reader UI, check out The Old Reader.

It is a "fork" of Google Reader before it integrated with Google+.

Upsides:
* very familiar UI and very similar functionality
* an API is coming very shortly
Downsides:
* the feeds are not updated as timely as in Google Reader
* there are no long-term feed archives, at least not yet
* does not embed the Slashdot iframe with top comments

I enjoy the clean UI and none of the social/magazine nonsense of popular alternatives.
I'm also contributing to its Chrome Notifier.

Comment Re:Why (Score 2) 193

Well, my point wasn't that the original card is impossible to clone given physical access to the card. My point is that using only radio communication with the chip, it is not possible to clone it. I imagine that NFC stuff and the crypto module are isolated, and the hardware crypto module quite literally has only one command exposed, to generate a response to a challenge. So neither passive (when you hear the challenge and the response) nor active (when you can submit challenges yourself) attacks can give you the required key, even if you can find a bug in NFC that you can exploit.

As for complex protocols. I'm a logician working with proof theory. There have been precedents of full formal verifications of such protocols that, given a set of assumptions about the hardware, can exclude any possibility of a flaw in the protocol itself. Example 1, example 2. It's usually very hard, but can be done, and gives the same rigor as normal mathematical proofs.

Smart card security isn't new. So it's a reasonably mature concept, but it has usability problems in this application.

Comment Re:Why (Score 4, Interesting) 193

And I will just repeat what I said when they first came out- why do we need this? Swiping a card is not difficult nor time consuming. Yet contactless is more expensive, more complex, and has remote "skimming" possible issues. It is far enough distance to be potentially dangerous, but not enough to be REALLY convenient (like leaving it in your pocket or purse). Meanwhile, the only problem with the old [card] tech has been reliance on magnetic strips that can and do wear out or get erased. So replace them with invisible IR barcodes or something. Or maybe *contact-full* chips that require touching something.

Contactless payments differ a lot from magnetic stripe swiping, invisible barcodes etc.

They are not static information but an active challenge-response authentication system. You cannot clone the chip; it has an internal cryptographic secret it does not allow you to access, only challenge responses. You can trick it into authorizing a purchase you don't want if you're in physical proximity, which is happening here, but you cannot save that authorization for later use, since the bank is issuing the challenge here, just like with a chip-and-pin purchase. The whole point is to ensure that this is really the actual card.

So the main problem is the lack of user interaction to go ahead with the purchase. A touch button on the card itself would help, but would destroy part of the convenience.

Comment Re:Hold your horses (Score 1) 117

The burden should really be on the patent submitter to point out exactly what is so innovative as do deserve a government enforced monopoly over the approach. If the patent is 90% mundane details, it should not be the job of the patent office to pick out what is worthwhile. If the submitter cannot make a concise and convincing argument, then they don't deserve a patent.

Then it falls back to the patent office to pick out which arguments are convincing, which is a pretty much similar task.

Slashdot Top Deals

According to the latest official figures, 43% of all statistics are totally worthless.

Working...