Catch up on stories from the past week (and beyond) at the Slashdot story archive

 



Forgot your password?
typodupeerror
×

Comment Re:A nice piece of work (Score 1) 300

"The weakest trusted CA in the world compromises the entire public key infrastructure."

That's a slight overstatement. It compromises the entire public key infrastructure for which that CA is the root of trust.

If you removed all MD5-enabled CAs from your trusted roots list, you remove the potential of being fooled by a forged cert. Certs issued by other CAs, unaffected by the brute-force MD5 collisons, remain as trustworthy as they ever were.

Granted, for most people the chain of trust ties back to the default CAs that ship with their browser, and if any of those CAs is vulnerable, your faith in any cert validated as 'trusted' by your browser goes down, and most people don't bother looking at what CA issued the cert so long as their browser deems it trustworthy, but it's a little more nuanced that 'compromises the entire PKI infrastructure.'

I suspect browser patches will be out soon, removing trust for affected CAs entirely, not trusting them past a certain date, or at least giving warnings when MD5 signature verification is found along the chain of trust.

Enlightenment

Submission + - Noncertified IT pros make more than certified (networkworld.com)

ddubie writes: "IT professionals who have acumen in diverse business areas but whose IT skills are noncertified are bringing in bigger salaries on average than their certified counterparts, according to Foote Partners, which attributes the growing imbalance to the melding of corporate and IT goals."
Television

Submission + - TiVo 3 & HD to get TiVoToGo and Multi-Room Vie (tivocommunity.com)

MBCook writes: "A post on the TiVo Community Forum by TiVoPony this morning confirmed that the Series 3 and TiVoHD boxes will receive a software update (planned for November) allowing both Multi-Room Viewing and TiVoToGo. The update will also contain a feature letting you move videos from your PC to your TiVo so you can watch them on your TV, unofficially named TiVoToComeBack."

Slashdot Top Deals

"Gravitation cannot be held responsible for people falling in love." -- Albert Einstein

Working...