Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×

Comment Re:Happy to let someone else test it (Score 2) 101

Most of FIPS is a certification process oriented on testing. However, there is a checklist of things you need to support, and one of them used to be the easy to backdoor Dual_EC_DRBG.

Now that the requirement for Dual_EC_DRBG has been dropped from NIST's checklist, it would be possible to have LibreSSL meet FIPS requirements without having the troublesome component. Most of FIPS certification is about throwing money at testing vendors, as described by OpenSSL themselves. Doing that would really be incompatible with the crusade LibreSSL is on though, because the result is believed by some to be less secure than using a library that isn't bound to the FIPS process. I don't see those developers ever accepting a process that prioritizes code stability over security.

Comment Re:Boards or ROM's (Score 1) 133

Just seen this - hopefully you read the reply. For MAME I have a real arcade cab with an old PC inside it, so I don't use the Mac for that. For the rest of the emulation scene on the Mac though, take a look at Open Emu, which has a lot of what's useful. Other ones I use are for Commodore - Vice64 for the C64, UAE for the Amiga.

Comment Re:Boards or ROM's (Score 3, Interesting) 133

Ever played Asteroids? If you haven't played it on the original arcade machine, chances are you're missing out on a large part of the experience because it runs on a vector monitor. Those beautiful glowing bullets simply don't show up on raster hardware in close to the same way. Same can be said for Star Wars - the sit-down vector monitor game was incredible.

I'm speaking as someone who has an arcade cabinet running MAME, and who regularly uses emulators on a Mac as well. I'm not perfectionist for a lot of the standard stuff, but I do appreciate that in some cases there are material differences to the real thing.

Comment Re:What whas the problem in the first place? (Score 5, Insightful) 250

Reading between the lines here, it seems fairly probable that Truecrypt has either

a) Very serious security bugs, or
b) Had backdoors introduced by the NSA.(Does Truecrypt use elliptic curve cryptography?)

In either event the code is basically tainted and shouldn't be used for any future projects.

The vague and sometimes bizzare nature of the statements from the Truecrypt dev team, including this one, lead me to believe that they have been placed under a standard NSA gagging order and have decided to burn Truecrypt rather than see it be turned against its users. Comments like "Forking is Impossibe" appear to be an open code for communicating that they are essentially unable to communicate, but that Truecrypt is no longer a trustworthy piece of software.

Reading though the Lavabit case, it's clear that those placed under NSA gagging orders have very, very little room for legal/media maneuver, but nevertheless still retain the freedom to walk away from their projects and tell others not to use them. Such actions appear to be the last defense of cryptographers in the US, and I think that is what we're seeing with Truecrypt.

Comment Space (Score 2) 170

Launch the data into oputer space on a satellite, programmed to transmit the data after a set time period. For best results, send the machine on a massive period orbit to the outer solar system, or in a pinch, crash land it it on the Moon or Mars.

Governments will either have to give up, or else fund massive space project. Either way, we win.

Comment Re:Style over substance (Score 1) 188

Oh goodie, a lesson on ABX testing I didn't need. Carbonation is more obvious than the taste differences people often fail to confirm in blind test. Slate even did some coverage on container carbonation differences talking about it. According to that I didn't necessarily describe the cause and effect correctly in my quick comment--it may be from gas escaping rather than a bottling difference--but the effect I was describing is real.

Have you ever noticed the difference between flat soda and fresh? If so, why do you believe carbonation level and bottle specific characteristics are never distinguishable? There's a motion component to it. A major reason flat soda tastes differently is that you expect a different taste from the bubbles, whether or not there even is a taste difference outside of that. Your perception of carbonation turns into a taste even though it's really not a taste, exactly. The same way that knowing the brand alters how you taste--the bit that screws up non-blind taste tests--sensing the carbonation in your mouth changes how you taste too.

Fine, you say that's still me claiming something, not a test result. I looked around for five minutes for a blind test showing some difference between two different Coke product packages that included observations on the "fizziness" of the product impacting preference. Here's a recent blind comparison with untrained testers doing exactly that. I don't think it's studied more because it is too obvious to bother.

Slashdot Top Deals

According to the latest official figures, 43% of all statistics are totally worthless.

Working...