Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×

Comment Re:Why? (Score 2) 92

I have to confess, I'm pretty mystified. For our own internal servers, I have my own CA, and can see no reason why I would want to have someone else sign internal certs.

Sounds like yet another way in which the commercial CAs scam stupid CIOs out of cash.

Comment Re:No big deal (except the encryption part) (Score 3, Informative) 176

If you use their web interface, they will store your password on their servers. Be aware of that.

Also, your account password is the the key used to encrypt your data (easy to verify: accessing your data on a new device only requires your account password). They use PDKDF2, which expands the password into a larger key, but (obviously) doesn't add any entropy to that already present in the password. Choose your password wisely.

That password is also used to access the billing, etc web interface, so they do keep at least a hashed copy of your password on their servers.

As with any closed source and opaque solution, you shouldn't depend in any way on unverifiable claims. They could now, or at any time in the future, store your passwords. You're better off handling your own security than trusting magic black boxes.

Comment Re:Now I wish.... (Score -1, Troll) 60

Hell, if I put a Raspberry Pi inside the scooped out guts of ENIAC, it would be just like ENIAC was streaming a movie... right?

I'm thinking of pulling the beads off an abacus and throwing a Raspberry Pi to show how an abacus can stream movies... and then maybe hollowing out a stone and showing how cool streaming could have been in the Neolithic...

Sarcasm mode off

Slashdot Top Deals

HELP!!!! I'm being held prisoner in /usr/games/lib!

Working...