Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×

Comment Re:So more of the same then? (Score 1) 368

"Or from which store should one have lawfully purchased movies instead?"
  ^^^^^ That part of the fucking question right there. ^^^^^

There are other stores that sell music and movies legally. If you bought from Apple or anyone else something that's controlled by DRM your goods are subject to that DRM. If you bought someone else's DRM-encumbered stuff, it's not at all impacted by this. If you bought non-DRM stuff, it's not impacted by this. If you upgrade to a halfway recent OS, you're not impacted by this.

If you have the money to throw at a huge library of DRM-encumbered stuff, spend $80 on Windows 7 for goodness sake.

Comment Re:I call bullshit on anything from Forbes (Score 1) 134

It's a cache timing app. Pretty impressive that they were able to maintain the precise timing necessary to conduct the attack in Javascript, but still quite limited in what it can collect. Basically they can tell if certain cache lines are in use, and figure out maybe what those lines are shared with to do some behavior analysis on the victim. This application is a bit of a stretch, since learning the allocation patterns is not going to be easy.

Their other example is a user that has a machine with two VMs on it. One is highly secure (no network access) but has been rooted. The other has network access but no normal connection to the rooted VM. You can pass data from the secure VM to the network VM and then ex-filtrate the data using a malicious advertisement injected into a normal browsing session. It does require the victim to not understand that VMs are not airgapped though.

Comment Re:Not very useful. (Score 3, Interesting) 134

The paper assumes that your problem is exfiltrating data because the target has somehow gotten infected but is ultra-paranoid about outbound traffic from his machine. You can instead transfer the data to a javascript app running in a webpage on a different VM that may be less secure. It seems pretty cornercase to me, but every time I think that someone comes out with some crazy exploit that extracts all of your SSH keys or something from the box using what seems like a nearly useless exploit.

Comment Re:80% through tunnels? (Score 2) 189

My guess is that going pure pneumatic is probably inefficient and more difficult to build. A hybrid system probably make more sense, if for no other reason than you don't have to maintain an airtight seal around the car for an entire 1000km journey. Electric motors are pretty reliable and relatively inexpensive.

Comment Re:80% through tunnels? (Score 3, Interesting) 189

Then every car (and the tunnel itself!) needs to be a pressure vessel and you need oxygen masks if there is a leak. Plus you have to turn every station into an airlock. Depressurizing the tunnel is a lot of extra work.

It might be easier (although not much more sane) to have two large ventilation systems for the tunnel. One working at high negative pressure (near vacuum), and the other working at a high positive pressure. The vents would be shutters that could be opened and closed rapidly, so you're always pulling air from the front of the train and introducing it behind the train. Basically you would always have a strong tail wind, reducing the heating effects of compressing that much air. The energy required to move the air would be substantial though, and it might not make sense. The high speed shutter system would be relatively complex too, and making it reliable would be a challenge.

Comment Expensive and fragile (Score 3, Informative) 96

Optical networking startups are littered through history. Ultimately the tech works, but has caveats like you can't move your machine around without losing connectivity, and you also lose connectivity whenever someone walks in front of the beam. Also, they tend to be expensive, and since the machine ends up having to be basically immobile anyway it usually makes sense to just run cables instead.

Even for Point to Point links where you can't easily run cables (to a building across the street for example), you end up with a reasonably fast link that still cuts out when there is heavy rain or a bird lands in front of it or something. 100Mbps is really nothing to write home about either. In 2015 you should be pushing more like 1Gbps over an optical link to make it even somewhat attractive compared to plain old WiFi.

Slashdot Top Deals

"Ninety percent of baseball is half mental." -- Yogi Berra

Working...