Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×

Comment Re: What happens if you lose this device? (Score 1) 51

>>Whether you lose it or not, the existence of these insecure recovery protocols is the weak link in the chain. The only security benefit you gain from using these is that keyboard loggers cannot capture your password.

I think you're missing the point. The largest benefit is thwarting someone from logging into an account even if they have your credentials, brute forced or otherwise. Without the yubkey, they're out of luck. Also, instead of using Google Authenticator for TOTP, use Yubico Authenticator instead. Your codes don't appear until you plug the key into your phone. You can even require physical touch for sensitive TOTP codes.

Comment This doesn't make sense to me because (Score 1) 32

If it's not your keys, then it's not your content. In other words, unless you created the keys yourself using your own gear and method, then you cannot guarantee that Slack cannot decrypt your communications without your knowledge. Having Slack generate your keys is ridiculous and is akin to security theater.

What you're getting with this "announcement" is security for data in transit and in storage, but there's no guarantee of confidentiality.

Comment The end of private spending (Score 5, Insightful) 454

It's also important to note that governments want this, too. They used to just have visibility on big number transactions but once all cash is gone, they'll be able to monitor every transaction, no matter how small. The concept of anonymous transactions and spending privacy will be soon be over.

Comment Re:Popcorn (Score 1) 116

> Having a RFC to standardize length, characters and expiry dates would be a good first step.

It's easier than this. First step is to convince people to use a unique password for each site. Once folks start doing this, they won't be susceptible to the low hanging fruit kidhacks are using today to gain access to their online accounts.

Ultimately, once hardware tokens are more widely adopted, these kinds of attacks will stop and likely move to another vector, like cookie session stealing through malware for account breaching.

Comment Re: Fortunately for him, most people are stupid (Score 1) 79

>> Something that costs 0.5BTC this morning (actually $1,700) may very well cost 0.7BTC tonight (still $1,700).

As with any new currency, volatility is likely to happen until exchanges and trading stabilizes it. In this area of a brand new technology acting as a currency or asset, where it is completely decentralized and has no borders, it's likely to be volatile for awhile before becoming stable. Also, keep in mind that your thinking is relative to what a seller is expecting: if a seller is expecting dollars, then pay in dollars; if in euros, then pay in euros; if in bitcoin, then pay in bitcoin. If you don't pay a seller what they're expecting, then there's likely to be a difference in value as a result - sometimes small, sometimes large.

>> Getting most people to trust cryptocurrency isn't going to happen, unless you assume most people are stupid. Fortunately for him, it seems most people are indeed stupid.

The sad part about your post is that you're calling people "stupid" for getting involved, either financially or other. Either you don't understand the technology itself or you're angry because you feel that you've missed some kind of boat where you could have quintupled your dollars. You need to think larger than this.

I highly recommend that you spend some time checking out these resources:
https://lopp.net/bitcoin.html

Once smart phones reach a lower price point ($10 or less), we can expect the 2.8 billion 'un-banked' people in the world to enter global financial markets using some form of crypto currency. Think of the prosperity that will spread across third world nations as a result.

Slashdot Top Deals

"And remember: Evil will always prevail, because Good is dumb." -- Spaceballs

Working...