Follow Slashdot blog updates by subscribing to our blog RSS feed

 



Forgot your password?
typodupeerror
×

Comment Re:spamassassin (Score 1) 190

I see you've never had your server compromised.

"The certifier contacts the sender and demands an explanation. If sender was hacked, they fix the security hole and tell certifier they
did so. If spam was not spam, or a misunderstanding, they explain."

A hacked server might result in the revocation of the certification (and thus the UN-certification of all the emails sent by it), but the company can simply re-certify (with a new key pair).

And of course nobody can spoof an email header or perform a Joe Job.

What's what the Public-key cryptography is for. No email can pretend to be from your server, unless it has an encrypted header encrypted with your private key. Which is, you know, private.

These are just two obvious holes. There are certainly more.

Actually, they're not holes at all.

Comment Re:spamassassin (Score 1) 190

Just switch over to Email Certification.

Long story short, everyone who wants to send Certified mail has to be 'certified' by their ISP. (UN-certified mail would still be possible, if
you wish.) Getting certified is nothing more than providing enough information to positively identify you, and costs a nominal fee.
In return, you create a public/private key pair, and give the public one to the certifier. The private key goes into your email server, which
adds some headers to each outgoing email. One of these is encrypted with the private key. When someone with a certification-compliant email
program receives a certified email, the program reads the headers, connects to the certifer's certification server, and downloads the public
key. It then uses the public key to decrypt the encrypted header. If successful, it proves that email came from the specified server, and no one
else.

If you get spam, your email client has a big 'report certified spam' button. Click it, and an email is auto-launched to the certifier of the
sender. The certifier contacts the sender and demands an explanation. If sender was hacked, they fix the security hole and tell certifier they
did so. If spam was not spam, or a misunderstanding, they explain.

If, OTOH, the sender does not reply, then the certifier revokes their certification, and from that moment on, all their (the senders) emails are
UN-certified.

What if a Certifier themselves is 'evil'? Well, it's certainly possible to have blacklists like they do now, but, instead of blacklisting IP
addresses, which get re-assigned and cause trouble for their new owners, it would be evil Certifiers that get listed and blocked.
Eventually, it'll reach a point where any spam that is sent out will get the sender 'de-certified' almost immediately. That means everyone else
probably never ends up seeing the spam at all (depending on how their clients handle un-certified emails. Most people will probably auto-trash
them.)

However, white lists are still possible. If you like getting emails from a certain un-certified sources, just white-list them, and you'll
continue to get them. You can also use challenge-response or keyword set-ups for people sending you un-certified email.

TL;DR:
By proving who sent the email (or, more precisely, which server did), Email Certification can hold the server owner responsible. If they send
spam, they get de-certified, which means in all likely hood, they lose the ability to email anyone at all. Spammers who can't get certified
can't send emails anyone will see.

Comment Re:Tie off (Score 2) 247

At the same time, if the job will take an hour when proper safety measures are followed but if you take more than 45 minutes, you're fired, the fault lies with management. It's not uncommon for employers to pay lip service to safety but then structure things to assure it will be ignored.

A simple letter/email to your boss with pointing this out ("safe practices take one hour, minimum, you say it must be done in 45minutes- are you telling me to be unsafe?"), and requesting a (written) response usually sort these matters out. None but the stupidest manager will put their job on the line by stating in writing that you must not follow standard safety practices. And the ones that do... you sue.

Comment Re:Better plots? (Score 1) 1029

It would be frankly impossible to do Ringworld without doing some serious wordsmithing. It is not a book that lends itself well to story telling.

Why not? It actually fits a standard formula: A group of people is gathered, have some friction, agree to get along, travel to a distant place, get in some adventures, overcome obstacles, and free themselves from trouble.

Any weirdness (aliens, future tech, etc) can be either explained with brief voice-overs by Louis, or via added dialog.

Comment Re:Better plots? (Score 1) 1029

when they try to make a movie version of books like that, they royally fuck them up.

  Yes, they do. Which is why I'd like it to be done by an... independent movie company? Indie? Whatever.

You really think Hollywood would give fair treatment to, for instance, the open relationships and line marriages in Heinlein's books? Not a chance.

Why not? I mean, look at the bad press Enders Game is getting, because the author is allegedly anti-gay. You'd think a story by an author who wasn't anti-anything* would do well.

*well, sexually speaking.

Comment Re:Better plots? (Score 3, Interesting) 1029

Or use of of the already existing plots? There are literally dozens of sci-fi books I'd LOVE to see on the big screen. Heinlein's The Moon is A Harsh Mistress or Stranger In A Strange Land. Niven's Ringworld, or any of his Known Space stories. Piers Anthony's Apprentice Adept, or Incarnations of Immortality series.

Yes, Hollywood has done a few. Starship Troopers and The Puppet Masters by Heinlein, for example. But they did them... WRONG.

Comment Re:Innocent until blogged about (Score 1) 666

"No, I ..."

"That's all, no more questions!"

"Your honor, may I have redirect? Thank you. Please continue the statement you were rudely cut off before you could finish".

"No, I never stopped beating women... because one must start something before one can stop it. And the attempt to force a 'yes or no' answer for such a question is reprehensible."

Slashdot Top Deals

"Look! There! Evil!.. pure and simple, total evil from the Eighth Dimension!" -- Buckaroo Banzai

Working...