Become a fan of Slashdot on Facebook

 



Forgot your password?
typodupeerror
×

Comment Re:You know it's not going to work (Score 1) 260

Take SSL/TLS. Are they going to demand both parties stash the session key, or do their handshaking through a proxy logging each packet?

Probably not. You're thinking like a geek instead of a politician. Politicians don't get their way by understanding technology. They get their way by finding people who do and forcing them to obey their will.

In this case, what Cameron means by banning encryption is passing laws that say something like, "If your website is used by people in the UK, you must always be able to comply with a warrant demanding data and you must provide all data, even if it is encrypted". The exact details of how that works is neither here nor there to them.

Now of course the interesting thing is how this interacts with jurisdictions, and whether it would be enough to make GCHQ shut up (probably not). The UK may or may not be able to force the hands of Facebook/Google/etc because the UK is such a huge market and they all have offices there, but China was a huge market too and Google walked away from that anyway. So it's hard to know how things would play out. For companies that have no UK exposure it's not clear what they'd do - probably use ad-hoc blocking of any website they suspect might be used by The Evil Terrorists if it doesn't comply. Could be a mess depending on how heavily they enforce it.

Comment Re:Nevermind the bollocks, here's David Cameron (Score 1) 260

All those figures say is that birds of a feather flock together. Tory voters tend to live near each other and because the UK has a political system designed a long time ago for resolving local issues, not surprisingly it doesn't translate votes to seats directly at the national level. As local politics becomes less and less relevant, of course, people feel this system no longer works well for them.

However, as you note, it would not have mattered if Labour had won, or any other party. There are NO parties in the UK that believe people should be able to keep secrets from the government. It's just not something that fits into the political worldview. And because the voting system collapses thousands of decisions down to just one every so many years, surveillance and encryption is simply not democratically decided at all. Basically the wheel of power is decided by the economy, and that's about it.

Unfortunately this is not specific to the UK and is true nearly everywhere, France is even worse for example, and the USA pretends to care but realistically lots of Congressmen would very much like total surveillance of Americans .... and only feel they can't demand it openly because of that darned constitution. That won't stop them doing it in secret though!

Comment Re:At least he included warrants (Score 2) 260

Ha ha, did you think he meant warrants?

He meant warrant. Unfortunately as is often the case with the Tories, they use words differently to how ordinary people do. By warrant he means a ministerial rubber-stamp. For instance Theresa May last year alone "signed" nearly 2,800 warrants, a number that clearly shows zero attempt to investigate their legitimacy and indeed almost certainly means some anonymous flunky is signing them on her behalf.

Comment Re:One of these days (Score 1) 80

Wrong. The LGPL license of free Qt allows you to keep the source code to your program secret.

I think it was GPL in the long past but they changed at least 10 years ago.

Comment Re:Sole provider? (Score 1) 250

But the reality is, most people do NOT have the luxury of having the time and resources to find the perfect job they love in order to work and make a living.

Certainly, but the author isn't asking what most people should do. He's been able to support his family for three years, and his wife has demonstrated the ability to learn Java and build enterprise software. I'm willing to bet she could transition to a related field (consulting, IT, a different language, etc.) quickly and with minimal additional training.

I see no point to rush immediately into the same type of job when a small investment could yield much better results for everyone.

Comment Re:Routing around (Score 5, Informative) 198

So the Internet was designed with resilience unless someone has a strong pair of garden shears?

The Internet will do just fine. Your personal ability to access it, watch a movie or dial 911 will not.

The big networks all have many data centers and diverse physical routing paths between them. But most people seemingly fail to realize that your house, your neighborhood - heck, maybe even your county if you're rural - probably does not. There is more than one physical path to get data from a colo facility in San Francisco to one in Seattle (even if it adds a lot of latency). There is probably only one physical way to get data to your house. Yes, even your cable provider and the telco almost certainly share a conduit somewhere near you. Mostly that's because there are simply a limited number of good rights of way to run fiber (frequently railroad tracks, gas pipelines, etc.) in any given area.

And that's also because it makes doesn't make financial sense to spend the money to ensure that your house has two redundant cables coming out of it that take two separate paths out of your neighborhood to different COs, etc. That's true not just for houses but in many cases for cell towers, Central Offices and other telecom points of presence that make last-mile connections rather than backbone connections. So that's why a fiber cut is so bad - everyone served locally by that fiber will be out of luck, even if the Internet as a whole is not.

Submission + - XKEYSCORE: NSA'S Google for the World's Private Communications (firstlook.org)

Advocatus Diaboli writes: "The NSA’s ability to piggyback off of private companies’ tracking of their own users is a vital instrument that allows the agency to trace the data it collects to individual users. It makes no difference if visitors switch to public Wi-Fi networks or connect to VPNs to change their IP addresses: the tracking cookie will follow them around as long as they are using the same web browser and fail to clear their cookies. Apps that run on tablets and smartphones also use analytics services that uniquely track users. Almost every time a user sees an advertisement (in an app or in a web browser), the ad network is tracking users in the same way. A secret GCHQ and CSE program called BADASS, which is similar to XKEYSCORE but with a much narrower scope, mines as much valuable information from leaky smartphone apps as possible, including unique tracking identifiers that app developers use to track their own users."

also

"Other information gained via XKEYSCORE facilitates the remote exploitation of target computers. By extracting browser fingerprint and operating system versions from Internet traffic, the system allows analysts to quickly assess the exploitability of a target. Brossard, the security researcher, said that “NSA has built an impressively complete set of automated hacking tools for their analysts to use.” Given the breadth of information collected by XKEYSCORE, accessing and exploiting a target’s online activity is a matter of a few mouse clicks. Brossard explains: “The amount of work an analyst has to perform to actually break into remote computers over the Internet seems ridiculously reduced — we are talking minutes, if not seconds. Simple. As easy as typing a few words in Google.”

Comment Sole provider? (Score 2) 250

What part of

She is starting to think about refreshing her coding skills and looking for a job. . . . However, she is not very eager to go back to coding.

makes you think she wants her husband to be the sole provider? Is there something wrong with wanting a rewarding career that you're passionate about?

Comment It's their business model. (Score 3, Informative) 311

When you expect to get most of your revenue from selling apps in the iStore - it's essential that people are unable to get apps for free via fancy web pages.

Hence, iPhone doesn't support WebGL for doing fancy 3D graphics on a web page - if it did, people would write cool games in HTML/JavaScript/WebGL and monetize them directly without having Apple take 30% of the revenue and "approve" their product.

Is this because Apple can't support WebGL? Hell no! The browser actually DOES contain code for WebGL, but it's disabled...UNLESS your web site signs up to display Apple-provided advertising banners...in which case, WebGL works great!

Safari uses the exact same core rending software ("WebKit") as Chrome - so it can trivially support everything that Chrome supports - it's really just a matter of Apple deciding to deliberately cripple the browser to prevent people from providing apps for free.

Comment iOS users feel it (Score 1, Insightful) 311

I currently have a web radio transceiver front panel application that works on Linux, Windows, MacOS, Android, Amazon Kindle Fire, under Chrome, Firefox, or Opera. No porting, no software installation. See blog.algoram.com for details of what I'm writing.

The one unsupported popular platform? iOS, because Safari doesn't have the function used to acquire the microphone in the web audio API (and perhaps doesn't have other parts of that API), and Apple insists on handicapping other browsers by forcing them to use Apple's rendering engine.

I don't have any answer other than "don't buy iOS until they fix it".

Comment Re:Kaspersky (Score 1) 33

I'd imagine it's also because the Kaspersky guys spend much less time than Krebs trying to dox various malware authors and so on. The real life identities of those people are just much less relevant. So if a journalist comes and starts asking questions about various people who "anyone in the business should know" etc, and if your job is just analyzing malware all day but you don't much care about the real names of the people who make it, then you might come across as evasive when really they're just thinking, "that accusation might be kind of weak, but I don't know for sure either way, best to stay out of it". Especially if you'd rather not appear in print with your name next to the real name of a bad guy.

The Kaspersky question was kind of dumb anyway. Let's imagine that they have some sort of shadowy deal with Russian intelligence to avoid flagging their IC malware. I doubt it, but let's pretend they do.

What are you gonna do about it? Kaspersky is the best at what they do, and they've blown the covers of way more government malware than any other company out there, period. If you say, gosh, I don't trust those awful Ruskies, what if I get hacked by the Kremlin, I'm gonna go with a True Blue American Patriot AV company ..... then all you're doing is siding with a team that not only hasn't revealed NSA malware, but generally, hasn't revealed any government operations at all. Does not seem like a win. Especially because the Russian government is about 1% as scary as the ridiculous Western propaganda would have us believe.

Comment Re:Altough I agree (Score 1) 61

My favorite feature is Birds Eye view, which uses aerial photos rather than satellite photos. Sometimes that can get you better info from that, since they usually have 4 different perspectives you can rotate through, and they are much closer and more detailed.

That was true, but Google was pretty quick to copy it. They now seem to have incorporated it into their 3D view as well, which makes panning somewhat better (and more importantly hides the worst defects in the 3D view by limiting the projection to a POV very similar to where the texture map image was taken from).

Comment Re:Drone It (Score 2) 843

I have a car, but the new Mazda has a 10hp more powerful engine. Should I sell my Mazda 3 for $5000 and buy a new Mazda 3 for $21,000?

It's a fair question in the context of Mazdas. It is a much less clear answer in the context of should I buy a F-16 for $100 million that gets me a 20% chance of being shot down in an engagement vs. a F-35 that gives me a 5% chance of being shot down for $350 million.

Comment Re:Drone It (Score 5, Informative) 843

It sounds to me like our current crop of F16 fighters are superior. Why do we have a $1 trillion plane?

There are plenty of reasons, good and bad. I'll assume you are asking a serious question, and give you the short version of the most often cited answers:

Good reasons include:

  • It's stealthy(ish), and has an Active Electronically Scanned Array radar . Part of the idea is that you can see the other guy but they can't see you, so you have blown them out of the sky at BVR (Beyond Visual Range) and never had to get to the point of a dogfight.
  • It's supposed to replace a bunch of different fighters and attack aircraft among the services' current fleets with a single airframe. Better QC, cheaper spare parts, buying in bulk, yadda yadda. The different models for the Air Force (F-35A), Navy (F-35C) and Marines (F-35B) turned out to be more different than expected, but that at least was the idea.
  • America's allies wanted access to a fifth-generation fighter for their own militaries - which they weren't going to build on their own - and if the US didn't build a relatively affordable one (we weren't going to sell anyone the F-22 since it's our trump card for air superiority) they were going to have to buy them from Russia or China.

Debatable reasons include:

  • It - like the military itself - is kind of a Federal jobs program. If you keep your existing jets and don't build new ones, then you lose the employees with the skills and experience needed to do the job. (Kind of like we may not be able to build new nuclear weapons if we wanted them because we haven't made them for so long and everyone with any experience has retired.)

Bad reasons include:

  • The military and its defense contractors need new weapons programs to work on in order to justify their careers and existence (military procurement officers) and make money (contractors). Both groups have strong influence in congress, not least because of all the jobs they support (see above).
  • The F-35 was intended to revolutionize weapons system procurements by using a strategy of "concurrency" - think of it like agile vs. waterfall development. The idea was better stuff, quicker and cheaper. It turned out - like some of the lessons Boeing learned with the 787 - that agile development may work great at Facebook but it's a train wreck when applied to aerospace, military systems and gigantic procurements. Oops.

There were also plenty of f***ups in assumptions the program made that were only really recognizable in hindsight, like the fact that trying to mesh the Marines' requirement for a V/STOL aircraft with the traditional designs for the Air Force and Navy hobbled the plane's performance for all three constituencies.

I know a lot of people are very critical of the F-35, and rightfully should be. But it's not as bad as it may sound - I think it will eventually turn into a decent (but never great) aircraft with a long service life. It's out there flying around today, but will take probably 10 more years to get to where everyone hoped it would be in terms of capabilities. Nonetheless, you will almost certainly still see F-35s flying around under US colors in 2050, so in the long run it will work out OK.

Slashdot Top Deals

If you have a procedure with 10 parameters, you probably missed some.

Working...