Catch up on stories from the past week (and beyond) at the Slashdot story archive

 



Forgot your password?
typodupeerror
×

Comment "It's Not a Tumor" - Oh Wait, It Is (Score 4, Interesting) 301

This could get a lot more ugly...

Once upon a time, SSL certificates were signed against a single root certificate, each SSL cert issuer had a single root certificate authority for each of its product lines. Now all corps issue an SSL certificate that is signed against and INTERMEDIATE certificate, which in turn is signed against the root certificate.

What happens if a provider's server has this exploit and the intermediate certificate is compromised? EVERY certificate signed against that intermediate must be revoked. Or put another way, the ENTIRE PRODUCT LINE must be tossed into the garbage and all certs reissued.

So if Verisign or Thawte discover new their intermediate certificate MIGHT have been exploited, would they say anything? The servers implementing those certs are in the hands of a select few - it would be easy to hide the possibility they might have been compromised.

Comment Re:Corporations are not people (Score 1) 139

Most of this happened longer than 5 years ago under different leadership. HP is still suffering from the mistakes of the past. HP was financially successful then but at a cost. This is the way people like Mark Hurd do business. Its all about short term gains. Being told your pay was being cut because of difficult times and it was necessary in order to survive, only to find out that 6 months later HP had record profits. That's why all the top performer's no longer work there.

So again, saw it coming

Comment Re:Freedom of Speech? (Score 1) 328

Porn is not speech any more.

Tell that to Paris Hilton, Kim Kardashian, Farrah Abraham or any other of our very famous revenge porn stars with their sex tapes custom-built for the teenage audience.

Where would any of these sluts be if it wasn't for their 'revenge porn' boyfriends? Oh right, sucking **** just as depicted. Okay yes I agree let's make these awful things federal offenses. Can we prosecute the whores who star in them too? Please?

Comment it's true (Score 4, Interesting) 353

Almost every failing of a computer can be related to where the OS sits. I have replaced/installed over 50 new/used computer platters with SSDs as the primary and a platter as the storage. Not only does boot time vanish, but just about everything under the sun is improved. I could ramble on but I think that's what the video does. Basically it's just smarter regardless of whether you use Win/Mac/Linux etc.

Submission + - Progress reported in creating "homo minutus" -- a benchtop human to test drugs (vanderbilt.edu)

Science_afficionado writes: Vanderbilt University scientists reported significant progress toward creating "homo minutus" — a benchtop human — at the Society of Toxicology meeting on Mar. 26 in Phoenix. The advance is the successful development and analysis of a human liver construct//organ-on-a-chip that responds to exposure to a toxic chemical much like a real liver. The achievement is the first result from a five-year, $19 million multi-institutional effort led by Los Alamos National Laboratory (LANL), to develop four interconnected human organ constructs — liver, heart, lung and kidney — that are based on a highly miniaturized platform nicknamed ATHENA (Advanced Tissue-engineered Human Ectypal Network Analyzer). The project is supported by the Defense Threat Reduction Agency. Similar programs to create smaller-scale organs-on-chips are underway at the Defense Advanced Research Projects Agency and the National Institutes of Health.

Submission + - RSA encryption further compromised by NSA engineering (reuters.com)

alphatel writes: It was revealed in December that the NSA paid RSA $10 million to insert a random number generator with a deceptive NSA backdoor built-in.

A group of professors have found that a second tool, known as the "Extended Random" extension, could help crack a version of RSA's software tens of thousands of times faster.

RSA Chief Technologist Sam Curry declined to say if the government had paid RSA to incorporate Extended Random in its BSafe security kit. An NSA spokeswoman declined to comment on the study or the intelligence agency's motives in developing Extended Random.

Comment Re:Not the only reason..... (Score 5, Funny) 409

Should schools pay for M$ or take Google's privacy invasive stuff free or is there a third choice. Should the federal provide free open source software under federal core program. Software that is free, has been audited for quality and security, software that is free of privacy invasive elements during and after school use. If all the money spent on software licence had instead been spent on developing software, the government would have produced the necessary software ten times over and been able to distribute for free instead of still paying to this day. Niether M$ nor Google is the answer, they just both keep the problem going, year after year after year, instead of permanently solving the problem with something like https://www.libreoffice.org/.

Dude, stop making sense.

Comment Re:Two Possibilities (Score 1) 349

2) Comcast doesn't have an entry in it's DNS servers for the site because it is a Chinese domain that looks like spam that no customer of theirs has tried to access before now.

And as soon as you make a query to this brand new domain, Comcast is supposed to query the IANA's root-servers to get the data. So your point 2) is a fallacy. Otherwise every time someone buys a new domain, Comcast has to wait for everyone in the world to visit it first?

Slashdot Top Deals

Never trust a computer you can't repair yourself.

Working...