Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×

Comment Re:Most severs shouldn't be vulnerable (Score 1) 245

Maybe he's suggesting to just use plain SSL without the initial plaintext exchange and initiation.

Yup. Nobody needed to reinvent traditional TLS/SSL secure sockets in order to send email.

What's wrong with STARTTLS? To quote the original RFC: "...a client that gets a 454 response needs to decide whether to send the message anyway with no TLS encryption, whether to wait and try again later, or whether to give up and notify the sender of the error."

So in other words, if you're writing an SMTP stack you have to handle a severe security edge case by parsing a string instead of getting an exception from your secure socket library. What could possibly go wrong! Oh right... there's a reason this is on Slashdot.

Comment Most severs shouldn't be vulnerable (Score 0) 245

By stripping out this flag, these ISPs prevent the email servers from successfully encrypting their conversation, and by default the servers will proceed to send email unencrypted.

Look, most severs these days are configured in such a way that STARTTLS runs on a different port than the plain-text connection. The server will reject login requests until the STARTTLS handshake is completed.

So sure, a few old, badly configured servers will continue over an unencrypted connection. But take it from a guy who worked on an email client, this is not a typical setup these days.

(Also: STOP USING STARTTLS!!!)

Comment Re:Book Analogy (Score 1) 260

Except that only the names have been copied. Google provided their own story. (Which is proven by the fact that Oracle didn't allege copyright infringement on any of the actual code except one trivial function, which was dismissed as de-minimus, especially since it had already been replaced.)

The thing you seem to be overlooking is that functionality is something that is specifically excluded from copyright protection. (Which is why trying to make book analogies for software is usually a complete waste of time and highly misleading. Functionality is almost never found in works of fiction; in books, it appears mainly in "how-to" works and the like. And you can't copyright "telling someone how to install a door".) Google may have copied the functionality, but that's perfectly legal, as long as they didn't copy the code. Which they didn't, except for the names.

Comment Re:I mean, aren't (Score 1) 260

More akin to words (or perhaps standard phrases). The programmer uses them to express something creative (a program), but they themselves are simply tools of creativity, not creative expressions in themselves.

This is why computer languages have been ruled non-copyrightable. And APIs are simply extensions of a computer language. In some languages (e.g. tcl), the boundary between language element and API is arbitrary and subject to change without notice.

Comment Re:Number is irrelevant compared to severity (Score 1) 170

The NSA's mandate includes both data penetration and data protection! For this reason, I suspect it's not the severity, but the obscurity that matters. A vulnerability that's easy to find is going to make government machines easier to penetrate, so they're likely to want to close them. A vulnerability that requires standing on one leg while juggling two white cats and wearing a clown nose is something they can keep to themselves, because it's so unlikely that anyone else will stumble across it.

Comment Re:SpaceShip Two is not a technological dead end . (Score 1) 594

"Microgravity" is irrelevant in this context, it just means the ship is falling. Sure, it's a little bit easier from 68 miles than from 7 miles, but again, that's just the altitude, which is already the easier part. It does nothing to help you gain orbital velocity.

And, rocket engines have not developed that much in 30 years. We are still stuck with the weight-to-energy limitations of chemical reactions.

Comment Re:SpaceShip Two is not a technological dead end . (Score 1) 594

"Suborbital" is a very different concept from "low earth orbit".

"Suborbital" means you don't have enough speed to stay in orbit. Getting to the required altitude is the easy part of getting into orbit. Once you're there you need to stay there, which takes far more energy to achieve.

SpaceShipTwo is strictly suborbital, as is apparently ASM-135.

Slashdot Top Deals

If all else fails, lower your standards.

Working...