Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×

Comment Re:Encryption (Score 1) 220

Except that with DNSSEC you have authentication, just not bundled around the HTTP protocol. How you solve the encryption and authentication does not change the situation, that when communication with parties that you wish to exchange session keys with, you need to authenticate them. You could also use a previously shared key for that, but that would not be feasible for the web.

Comment Re: No steering wheel? No deal. (Score 2) 583

Human level AI? I would rather not, most human drivers are bad. Try to use the cruise control on a crowded highway and you know what I mean. Just maintaining uniform speed is an impossible task for most drivers. Oh there is a minor bend in the road, I need to slow down, there is a minor hill, I need to slow down, look an accident on the other side of the road, I need to slow down.

In almost all cases a computer will be able to react way faster and with more precision than a human can. Yes there will be some minor flaws in the first systems, they will be systemic and patched out. With human drivers it is a gamble each time they get on the road.

Comment Re:No steering wheel? No deal. (Score 1) 583

You mean manual controls like the autopilot? Most modern planes are flown autonomous, granted by manual heading inputs by the pilots, because there is no digital link to the air traffic control. Modern airliners are capable of taking of, flying and landing fully autonomously. The current technological hurdle is to get ATC guidance into the airplane's systems.

Just look at this: https://www.youtube.com/watch?... (look ma no hands)

Comment Re:Encryption (Score 1) 220

To quote myself:

The only cases where encryption without authentication sort of works is when the keying material is previously shared and you can reasonably assume that it was not compromised

Reading comprehension much?

Comment Re:Encryption (Score 2) 220

Except that HTTP 500 is a proper and valid response when it comes to the HTTP. Following your oddball logic a 404 would also be "refused", what nonsense. The server accepted the connection, the request handler for that resource crapped it's pants and the server is dutifully informing you of that fact. What is "not accepting the connection", where? The fact that you got a 500 means the server accepted your connection. Even a 401 Unauthorized is technically an accepted connection, since the authorization is for the resource not the server.

Comment Re:Encryption (Score 1) 220

Despite that, being vulnerable to MitM is much better than being vulnerable to any sort of passive listening.

Although this was sort of my sentiment too, but it basically is false. Passive listening on WiFi connection may be foiled, to a certain degree. But the moment someone has access the the wires the game is over no matter how you play it. Passive listening that requires penetrating a device or inserting hardware, is basically MitM and as a result going from passive listening to active MitM attack is basally just upgrading the software.

Comment Re:Encryption (Score 1) 220

Interestingly in the above case encryption is almost irrelevant. What are you doing with the information that he turned on the light bulb 23 and switched of his AC? The important bit here is authentication and that can be trivially don without channel encryption. You still need an "encryption" scheme like an HMAC for the authentication though.

Comment Re:Encryption (Score 1) 220

It makes man in the middle attacks trivially possible and thus rendering the encryption useless. The problem with channel encryption is that you need the share some form of keying material and if you don't authenticate you can't trust the keying material. The only cases where encryption without authentication sort of works is when the keying material is previously shared and you can reasonably assume that it was not compromised. But in the case of the web, this is basically impossible.

Comment Re:Why Not Fuel Cells? (Score 1) 160

I think this makes total sense. If we see hydrogen fuel cells it may rather be airplanes before ground vehicles. The biggest problem with hydrogen in cars is not only the lack of a distribution network, but also the leakage. Leave the car parked for a month and it is empty. This would not happen with a plane, fill it up and "burn" it more or less immediately. The airport is already a place where specialized fuels are delivered and stored, hydrogen may not be so much an added hassle.

Slashdot Top Deals

If you want to put yourself on the map, publish your own map.

Working...