Please create an account to participate in the Slashdot moderation system

 



Forgot your password?
typodupeerror
×

Comment Re:Adobe (Score 3, Interesting) 304

I think open ebook community should thank Adobe for demonstating (at the cost of their reputation and revenues) to everyone who ever did something as stupid as buying a book with Adobe's DRM, what't it's all about and all the dangers of having someone else manage your access to the content you bought right to access. Only through these actions will people learn, as they only listen when they've been hit in their wallet. Luckily, ebook reader (hardware) manufacurers will also learn the hard way, that implementing an obscure DRM scheme is more expensive in the long run (and more damaging to the brand and sales) than partnering up with a shop that not only allows you to buy the books, but even keep them after it changes the technolgy (or goes down in flames) without taking all the books with them.

All that aside - those who suffer from it, deserve it. Hopefully this lesson will be painful enough to remember not to mess with DRMed content any more.

Comment Re:Wow (Score 1) 463

Everybody has a right to decide. It's forcing your decision on others where we draw the line. Everyone can share their opinion regarding other people. Heck, that's called free speech (yeah, I know, you don't have that in US anymore), but stop with the attitude, please. From perspective on a global scale, from humanity as a whole to a local community - it truly is a time wasted and that could have been spent better, from individual perspective, some, I'm sure, would also agree they wasted their time, others will say they had the best time and consider it a time well spent. And yet still everyone is entitled to their opinion and it's expression.

Comment Re:Focus on the host platform. (Score 1) 39

>> Also anything that uses a public key exchange is only secure because certain reversals of transformation are 'hard'.
Nope, it's also only secure as long as you verify that the key you have in front of your eyes corresponds to the person you want it correspond to.

>> There is no universality to hard, what is hard for me may not be hard for you..

Actually you might want to refresh your memory a little bit about cryptography. To crack a decent asymmetric cypher it would take more than visible universe working as a computer for time longer than said universe exists. So, there is universality to hard.

>> I support the sentiment of these guys but your code is going to be running on a platform that is largely exploitable by most English speaking foreign governments and possibly well funded crooks.

I don't support their sentiment. If they really wanted to create a secure platform - they could. I'm pretty sure that it's not that hard to check out best practices and analyze the situation before coming up with solutions. a) The only good security - is end-to-end (i.e. data is only unencrypted on endpoints and only people wielding the keys are on the endpoints) b) You verify the keys via a secure channel to prevent tampering (I'm quite convinced NSA is not good enough to fake a live video stream with you holding up a QR code in real time and on a mass scale) c) you should be able to host your own server and have access to both client and server (because otherwise the software might actually be leaking the information).

So, with all that in mind we have people who just want to cash in a check on public outcry about privacy violation and make a quick buck exploiting mass hysteria. For example The Guardian Project are actually doing a secure open source IM, with code available for audit and allowing for end-to-end perfect-forward-secrecy (OTR) encryption and key verification. Now that is the right direction, not cloning yet another IM and telling everyone "Trust us, we're the good guys, we'll protect your privacy, unlike those other guys".

Comment Re:Define serious (Score 2) 39

My though exactly. Even if third-party researchers cannot find any vulnerability in the protocol itself, who says there isn't a backdoor in the server part, that will reduce security to 0? Pretty sure they won't open the server part to scrutinity (even if they do, how do we verify that it's the same version running on the actual server?)

Comment Re:Free Vulnerabilities: (Score 2) 39

I'm pretty sure they omitted the part where users have to exchange keys over trusted channel (or at least a channel that prevents or makes it really hard to tamper with it). And this allows for a mitm attack, so all that fancy encryption is absolutely useless, since the attacker will have both keys and total control. What we need right now is not a gazillion of apps that create the illusion of privacy, but a protocol and a set of standards for federated communication channel (pretty much what XMPP is). Since many claim XMPP is not suitable for modern-day communications I would like to see more effort toward improving it (or creating something from a scratch, if it's so flawed). Because right now the only universal and secure way of communication is email with GPG or SMIME encryption slapped on top of it.

Comment Re:One way to bankrupt them (Score 4, Insightful) 39

Maybe it would, but those backdoors are worth much more to NSA unpublished. As well as all the data that passes through the vulnerable services. So should you scenario come to life, it would be huge success for endusers, as many vulnerabilities would be closed.

Regarding the article: talk is cheap, show me the code. And let me host this server myself, with inter-server communication. Otherwise it's no better than hangouts, iMessage, Whatsapp, Viber and whatnot else is now trying to be the one and only messaging service. You can't even begin speaking of security if a) you can't audit the code b) you can't control the data.

Comment Re:They should require refund window (Score 1) 252

Very little incentive. Which is a good thing. I don't want crappy free games, that nag me to buy content on every corner. I want the full package for the full price. Current in-app purchase business model hides all the costs in extra items so in total the price comes up to a rather high number.
Can't wait till writers implement something like that. "to read how our hero defeated the magic dragon please buy this 5-page abstract". "to get a clue about how the villain tricked the police, please buy this 2-page abstract".

Comment Re:Whatever (Score 0) 339

It's a thing that will suck up all of the good google's services to fail miserably, as userbase that is OK with G+ is much smaller that YouTube's and GMail's userbase. And we've already got one facebook, who needs another one, google flavour? It's development is dead in the water after the launch.

Comment Re:Great.... (Score 1) 339

But that's the problem. G+ is just fine. Even if it's better than Facebook (look the same to me) then it's not better by a much. Not better enough for others to switch. Why would you switch, if they are pretty much freaking clones.

And shoving G+ down users throats is causing gag reflex, so sad to see company that used to win users by being the best in the field (GMail, Search, YouTube) is down to such cheap promotion methods.

I kind of like G+ at first, but when all this nonsence started with killing off GTalk and replacing it with Hangouts (super-tightly tied into G+), then even stock Gallery on Android is biting the dust, being replaced by G+ Photos (Picasa was shot in the head much earlier). I came to pretty much hate G+, because Google does everything so force me there, sacrificing good projects so this DOA project can sustain some kind of existence.

Comment Re:Windows XP still at 28.98% (Score 3, Insightful) 470

Office 2013 is an abomination and I'd rather it ran off a cliff. The font anti-aliasing and hinting have been broken and make my eyes bleed, the interface is worse than in 2010, less function more showing off.
The typing animation, that draws symbols on screen with a second or so delay is even worse (yeah, I understand it's for tablet users, so they don't feel like they're painfully slow when typing, but you could at least disable it on desktops, where it creates the impression of deadly slow computer).

Slashdot Top Deals

He has not acquired a fortune; the fortune has acquired him. -- Bion

Working...