Become a fan of Slashdot on Facebook

 



Forgot your password?
typodupeerror
×

Comment Re:Hmmm... (Score 2, Insightful) 341

So, the take away from this is... what? Any author gets to decide what information does or does not constitute a breach of national security based on what the effect of its deletion on their book sales would be? I for one would sleep more soundly knowing that that information wasn't in his book than I would knowing he was going to get a big fat royalty check.

The take away is that the first amendment exists.

Comment Re:Are the CAs that do this revoked? (Score 5, Interesting) 139

We should. We won't.

A system built around certificate authorities is broken by design. Self-signed certs are much more secure than anything stamped by a CA.
And can we start using client certs, please? I should be able to walk into my bank and hand them a unique cert that they attach to my account and use for verification. Additionally, I should be able to request a unique cert on their end that they use only for my account so I can do my own verification.
Since this is all self-signed shit, it can be easily automated.

For revocation, all either party has to do is stop using/trusting the cert. No one can regenerate the bank's unique cert that I trust because there is no authority with that power. No one can regenerate mine. If the bank wants to issue a new cert, I have to go in and get the new cert and trust it. You can dumb down your trust if you want - the bank could mail you the cert, mail you a letter saying it's going to be changed, post the thumbprint of the cert on their site, to their support phone line, whatever. If I want to issue a new cert, I have to get them to trust me in a similar fashion.

Doing it this way is more work, but you have ACTUAL trust, negotiated equally by both parties. You can choose convenience over security if you want, but you're not subject to some government/CA MITMing everything on a whim.

Comment Re:No WAY! (Score 4, Informative) 204

Pretty much.

M.2 slots and SSDs are now fairly common place in laptops.

For desktops, direct PCIe flash drives have been around for years. PCIe adapters also exist if you want to use an M.2 drive now and your motherboard doesn't have an M.2 slot. Newer desktop boards ship with SATA Express ports, and drives should show up this summer offering the speed benefits of M.2 (running off PCIe lanes) as well as the benefits of NVMe, along with the possibility of being thrown into RAID (depending on your controller, of course). Many newer boards also feature a M.2 slot if you hate cables or are very space constrained.

Comment Re:Trash (Score 1) 141

I'm referring to the privacy and security risks to the user, not the people in public places.

"IoT" devices like these have their own embedded radios and are full IP hosts, have far less user-facing control than webcams, mics, cell phones, are designed to be always-on, are designed around remote operation, and are under the ultimate control of the world's largest datamining corporation.

Comment Re:Sooo .. (Score 1) 127

Typically the power button automatically locks the phone, making it trivial to lock the phone in a hurry.

The whole fucking point of this feature is to "lock" the phone but not really lock it until the gyros determine the phone has been set down.
Letting the phone time or hitting the power button will "soft lock" the phone. You won't need a pin/face/password to wake it up until the gyros determine the phone has been set down.

Comment Re:Double Standard? (Score 1) 569

Free speech. If the indirect consequences matter, then we should be holding charlie hebdo responsible for getting several people killed.

You cannot have it both ways.

There's a difference between speech and the consequences of it, idiot.
There's no having it both ways here. Someone who swats someone is free to do so, and is free to do so until they die. They have an inalienable right to that speech. They do not have a free pass when someone is shot, when the cops decide to send him a bill for all the wasted time, when someone else couldn't get help because the cops were at the swatting victim's house, etc.

Slashdot Top Deals

An authority is a person who can tell you more about something than you really care to know.

Working...