Become a fan of Slashdot on Facebook

 



Forgot your password?
typodupeerror
×

Comment Re:Good ol neo Republic of Gilead. (Score 4, Funny) 292

If they were really serious about this severe problem, they would kick all the people out of their state, so that nobody would ever see anyone else. Until humans are eliminated, Texas' vision cannot be fulfilled. FUCK HUMANS! (Err, I mean that figuratively, of course. You should never literally fuck a human. That's not even a thing, kids, I swear!)

Comment Please Tell Me What I Want Sirs (Score 4, Insightful) 90

Why would you want to see reccomendations even when you're logged in?

If you are on YouTube and can't think of a video you want to watch... maybe you... DON'T want to watch any videos right now!

You're now free to go and do literally anything else with this time you've now freed up. Do you have books you complain you never have time to read? Stop wasting your life watching videos that you didn't even feel like watching in the first place.

Are you concerned your kids have too much screen time? Use this reclaimed time to play game with them or ask "how're you doing?" instead. Really. Try it.

I personally don't understand the ad ecosystem. Companies pay other companies for the privilege of annoying me, pissing me off, and making me resent their company and products. Somehow this creates value for them. And so Google needs to keep my attention span hooked, even when I can't think of anything in my own brain that I want to watch on YouTube.

Just willingly letting yourself be mentally programmed for profit.

Comment Re:IIgs was slow? No way! (Score 1) 69

Today, almost everybody is programming by gluing bits of often highly optimized (but often not) libraries together.

"Almost everybody" is programming these days in interpreted or JIT-compiled scripting languages like Python and Javascript, by gluing bits of libraries together from internet package managers line npm. These libraries are very much not optimized. Python is the new Basic, still slow, but at least you don't need line numbers anymore. Anyone using something better than that (even C#) is in the minority of humans writing code.

Comment Re:I had one of these. (Score 1) 69

while the closed Mac systems became a weird boutique item.

The Mac was very much NOT closed. The documentation may have been hard to get in its very early days, but Apple literally had it printed in a phone book format to help get it out cheaply. The actual problem was that it was expensive, with Apple's "typical" high-margin price tag. (even the Apple II had quite a bit of mark-up) It was also alien to what people were used to back in the day, being one of the few modern computers without any character generator or text mode, leading to many potential developers not even bothering to try.

Comment Re:Tire was Boeing's fault? (Score 5, Interesting) 132

There's just not much you can blame Boeing for here.

Tire: airline maintenance
Engine: Boeing doesn't make or maintain the engines (though they presumably do only support a limited number of models)
Runway: could be pilot, tower, weather conditions, etc.

Also, with big jets, there's only two companies now: Boeing or Airbus. It's kind of hard for it not to be one of the two, unless it's a mid-size regional jet or smaller. As much as I am not impressed with Boeing these days (with their space stuff as much as their jets), I can't really put any special blame on them for this.

Comment What's the frequency, Kenneth? (Score 1) 113

I don't see anything about what their radio frequency is. The Wikipedia page about the station does not say, and even the page for the station linked from Wikipedia doesn't mention a frequency (not that I could find), much less even what band it is in. I know I probably don't have the right equipment to receive it, and I'm not on the west coast anyhow, but if I did, what would I tune to?

Comment I was there 25 years ago (Score 3, Funny) 92

I was working on code that talked to gas pumps back in 1997-2000, and at some point in 1998, I noticed that the code for leap year wouldn't be right for 2000. So I fixed it. And I didn't test it. And it was in assembly language. And I got the branch condition wrong. And it would break on all leap years. Fortunately all the Y2K mania meant that someone else did test it before it became a problem. But it would just have messed up the date on your receipt at worst.

In-house payment solutions . . . reportedly still worked during the outage.

Yep this is a problem with the place that handles the credit cards. Probably caused by an outsourced idiot, because local idiots are too expensive. I remember back then when I freaked out some of our contractors from India that were working on our cash acceptor project, by showing them a two-dollar bill.

Comment Re: They probably got there from medical care. (Score 1) 105

These were the very first mRNA vaccines brought to market.

Being "first to market" doesn't indicate something is unsafe or untested. Research into mRNA has been ongoing since the 1960s, and the first mRNA human vaccine trials started in 2001, with the first human clinical trials for a rabies mRNA vaccine starting in 2013.

In this case, "being first to market" is misleading, as mRNA vaccines already had 20 years of human testing by the time the first COVID-19 mRNA vaccines were approved.

Yaz

Comment Re:Already solved problem (Score 1) 177

Hyundai’s keyfob does the same — but if you’ve parked at a mall (as one example) and are walking around with the keyfob in your pocket, the relay attack will work just fine (unless you’ve put the keyfob into a faraday pouch).

The motion sensor kill switch is great for when you’re at home and your key is in a drawer, but not otherwise.

Yaz

Comment Re:Programming Code (Score 1) 177

HOTP (RFC 4226) would serve nicely

HOTP (and TOTP) wouldn’t help in this case, as it’s not that the authentication is being broken. The problem is that in allowing proximity alone to activate the authentication, you can create a simple RF bridge to fake the proximity portion. You don’t even need to parse the RF signal or bring it back into the digital domain — at their most basic, these devices aren’t snooping the authentication, nor doing a MITM attack — they just boost the signal from the keyfob, and relay signals from the car back to the fob, allowing the fob to authenticate even when it’s distant from the car.

The most mathematically perfect authentication in the world isn’t going to fix that. By allowing the convenience of allowing the car to unlock when the keyfob is apparently “near”, just by boosting the signal between fob and car when they’re not proximate allows those two devices to perform a normal authentication — and the device in the middle doesn’t even need to know how the authentication works, nor parse (nor try to hack/fake) the data being relayed. Better authentication doesn’t fix that — it’s an issue of the protocol making assumptions of proximity that are easily faked via basic signal boosting.

But these people could obviously not even be bothered to do some minimal research.

Hey, kinda like your post!

Yaz

Comment Re: If you park outside.. (Score 1) 177

The problem here is that the “real” key fob is still the one in this attack doing the authentication, so it will still work regardless.

The problem is that this authentication happens automatically based on proximity — and the attack fakes the proximity, and not the authentication. The authentication here is still real, and doesn’t need to be faked — they’re not doing a MITM attack, just providing a bridge such that the car thinks the fob is nearby, at which point they authenticate as expected.

Your proposed solution doesn’t fix this problem, as it’s not an authentication problem in the first place. The attackers aren’t faking the authentication, nor are they even providing it — they just provide an RF bridge to boost the signals such that the car and key think they are in proximity, at which point the car and key authenticate and unlock the vehicle.

Hyundai does at least have an automatic power-kill switch built into their fobs when they’re at rest; however I don’t know if this is in use in the UK (where it appears the majority of attacks of this sort against the IONIQ 5 are made).

Yaz

Slashdot Top Deals

Solutions are obvious if one only has the optical power to observe them over the horizon. -- K.A. Arsdall

Working...