Catch up on stories from the past week (and beyond) at the Slashdot story archive

 



Forgot your password?
typodupeerror
×

Comment Re:SEED "backdoor"? (Score 1) 64

The problem is that Korea requires use of their own national encryption standard, which has a governmental back door (and for which exploits have already been demonstrated at BlackHat) in order to "secure" banking transactions from snooping by foreign powers (guess they called that one correctly).

[citation needed]

Can you provide a link to the paper/presentation in which the exploit and/or backdoor has been shown?

A quick search doesn't turn anything up, but "seed" is a bit of a generic term (and is also used in reference to RNG in crypto) and so there's a lot of noise.

http://dl.acm.org/citation.cfm... (search for "SEED encryption", with the quotation marks to get similar results).

Here's another algorithm indicating identity exposure (SEED's keying system is specifically designed to *always* expose identity, which means that a lot of sites aren't very secure, since they can know who the culprit was, they don't figure they need to secure them):

http://privacy-pc.com/articles...

I'm pretty sure the demo was by Chae Jong Bin, if that helps.

Comment Also illegal, so far... (Score 5, Informative) 64

Also illegal, so far... It's illegal to use something other than the ActiveX plugin authorized by the Korean government to do online banking in South Korea. The current president promised to change things, but so far, nothing has changed. Here's his promise being reported:

http://en.wikinews.org/wiki/So...

The problem is that Korea requires use of their own national encryption standard, which has a governmental back door (and for which exploits have already been demonstrated at BlackHat) in order to "secure" banking transactions from snooping by foreign powers (guess they called that one correctly).

Here are some other articles about where the plugin is required to establish secure communications channels:

http://gadgets.ndtv.com/intern...
http://www.washingtonpost.com/...
https://www.techdirt.com/artic...

Comment That's a nice tax bracket you have there... (Score 3, Funny) 560

That only applies to people who have no authority that could ever possible impact the judge in question.

"That's a nice tax bracket you have there... it'd be a shame if it got audited for the last seven years, and every year from here on out, into the foreseeable future"

Comment Re:So, why pay UK taxes? (Score 1) 104

First, I'm guessing we are now specifically talking about Google's "Don't be evil" motto, which is specifically a reference to the Chinese wall between advertising income and search results

What? No, Google's motto is to do with doing good for the world rather than take short term gains, see this. Not paying taxes and forcing others to pay more to cover the shortfall is precisely taking a short term gain and causing others pain. Sounds pretty close to the definition of 'evil' to me.

You realize quoting back at me the link I used to prove you wrong doesn't prove you right, right?

I'd argue that Google has done a better job in terms of the social contract than those elected to govern.

Really? You mention surveillance of citizens which is exactly what Google does for economic gain. They also do what Google thinks is good for society which is not the same as what people think is good for society. Google is not elected by, nor accountable to, the people of the UK and worse, is in fact a foreign corporation with interests that may diverge greatly from those of the UK. I will grant you that I tend to agree with a lot of Google's aims (other than immoral tax evasion) but people have no control over this and it could change in a second with a new CEO.

Google gather information in *aggregate*. It does not spy on individuals specifically. And yeah, Google does what Google thinks is good for society, rather than what "people" think is good for society. For example, the "people" who make up the Taliban believe that women shouldn't learn to read, and if they do anyway, they should be stoned to death, and that everyone should live under Sharia law, and that blowing up people is a reasonable political statement. "People" have a pretty piss poor track record, compared to enlightened individuals.

I;ll also point out your "what if there's a new CEO" scenario can't happen with Google: Sergey and Eric and Larry make stock grants out of non-voting stock. Any stock splits are designed such that, ig you have N shares of voting stock initially, and there's a 2:1 split, you will end up with N shares of voting stock, and N shares of non-voting stock. This is the difference between the "goog" (voting) and "googl" (non-voting) ticker symbols. And new employees get their GSU's (basically performance pro-reated RSU's) in "googl" stock - non-voting.

That means that they will never lose voting control of the board, and so if a new CEO came in (which they'd have to approve), and decided to be an asshole? They'd just throw him out the day after in an emergency board meeting that pretty much doesn't have to be more than a conference call between the three of them.

So your fear-mongering there is totally fabricated.

Indeed if we are to discuss types of government then I would suggest that the corporate philanthropy model you espouse is more akin to a feudal system. Google is the feudal lord who does what it thinks is best for us peasants without us having any input or control whatsoever.

They are totally incomparable to a feudal lord. A feudal lord doesn't give a crap what the peasants think, so long as they keep producing. So under a feudal lord, conditions will improve only if there's widespread rebellion, but not otherwise.

If you want a feudal lord comparison, you should look to Verizon vs. Netflix, or Comcast trying to acquire Time Warner so that there's a single monopoly cable company everywhere, and zero other choice for Internet service. The model these guys use is "you send us money each month for no reason, and we will (reluctantly) provide you service, if you complain loudly enough that you start sucking the profit we are making from you out through our call center".

You can quibble about the type of democracy in the UK and you can argue that the government should be doing a better job with the way it spends taxes (and I would not disagree) but I would still claim that history shows that, averaged over time, it is still far, far better than letting unelected, powerful corporations decide.

What historical examples of corporate rule are you able to cite again?

Comment Re:Unisys Binary Translation (Score 1) 113

Well, good luck to them; even though they could just license the technology, they probably won't. The job posting says they are relying on LLVM-IR as a means of translating the code.

Maybe they tried working with Transative in the mid 2000s. Maybe Transative failed. Maybe the Transitive people couldn't do what was asked of them. Maybe their performance numbers didn't work out.

Remember that what Apple is doing is translating binary apps. What Unisys needs done is translating / emulating whole sections of the OS. That is a lot harder.

That actually predates the code actually working reasonably well. I believe Apple also had an exclusivity license for some of the code.

If you count only the BSD system calls, it would have been a small job; if you add the mach, sysctl, fcnt, ioctl, and other multiplex BSD system calls, there was parameter and endian switching work that happened for in excess of about 8000 APIs, and that's not including the Mach message contents diddling that had to take place between the binary application and the native runtime environment, and other programs running on the same system which may or may not have been running under Rosetta (in fact, the original DSMOS relied upon Rosetta refusing to run on non-Apple platforms, and a critical system component being compiled only for PPC, rather than both PPC and Intel).

This amount of interface translation is about comparable, in terms of effort, and in terms of runtime overhead.

And yes, I'm certain the numbers *didn't* work out, if there was such a program attempted, since they aren't working out today, as it says in the article. It's the reason they haven't already killed off the CMOS chips, they just expect that they will be able to do so in 2015, which gives them about a year and a half to either get their numbers up or throw hardware at the problem.

If they are going to take the "throw hardware at it" approach to hitting their target date (about the only reasonable chance of hitting it), it's going to take a hell of a lot more than in place retargeting the code using LLVM-IR on the existing binaries.

Comment Re:So, why pay UK taxes? (Score 1) 104

The point is that the people making the deal are not physically located in Ireland. The negotiation, sale etc. is all taking place in the UK. They then twist the law to the point where they can legally claim it took place in Ireland.

Nobody cares about the people doing the negotiation. The contracts are not between people, they are between companies, or at best, between people and companies, and what matters is where the contracts are *executed*.

Also while you might be able to decide whose laws are used to negotiate disputes regarding the contract you cannot decide whose laws apply to taxation resulting from the contract.

Actually, you can. And companies do. Because nations let them do so. Because it's in the nations best interest to get some of the take, rather than none of it.

They are following the absolute letter of the law and using it to get around their social responsibilities to support the society in which they operate which is immoral, or to put it another way evil. So I'm guessing they have had the same lawyers figure out how to get around their "do no evil" rule.

First, I'm guessing we are now specifically talking about Google's "Don't be evil" motto, which is specifically a reference to the Chinese wall between advertising income and search results (i.e. search results will not be swayed just because you buy advertising for sponsored links). Which means it's irrelevant to this discussion, but if you want to read more about it, knock yourself out, the reference is here: http://en.wikipedia.org/wiki/D...

Second, you appear to be equating giving money to a government which has admitted to spying on its own people as a means of social and political control as "moral", which I have to believe is a passing reference to Rosseau's "Social Contract", aka: http://en.wikipedia.org/wiki/T...

I think if you read that, you'll see that the U.K. government doesn't qualify as what Rosseau is describing in his social contract as "monarchy" or "aristocracy", since the U.K. is, at best, a Representative Democracy, or Republic, rather than a true Democracy.

But let's grant you that anyway, at the same time granting the same to the U.S., which is also technically a Republic.

I'd argue that Google has done a better job in terms of the social contract than those elected to govern. Specifically, the difference between the government doing "Google Fiber" and Google doing it, is that Google actually did it. It's not like the government lacks for money (if it needs money, it borrows it against the credit of the citizens, or it confiscates it from the citizens by way of taxation, or it confiscates it from the citizens by printing it - with concomitant inflation (e.g. so called "Quantitative Easing").

So Google is a better adherent to the social contract, if we can agree that by virtue of being born into a society, you tacitly agree to the societies shrink-wrap license, even though it's not like you had any choice in the matter.

Until the U.K.government can demonstrate better social responsibility than Google, I'm pretty happy to leave the money in the hands of those who will use it most wisely, as opposed to giving it to people with a demonstrably poor track record instead.

PS: One of the main tenets of philanthropy by individuals who have accumulated extreme wealth is that they have a demonstrated track record of understanding the system; a second tenet is that one persons enlightened judgement is often better at making socially beneficial decisions on how to wield the economic power of society than a bunch of bureaucrats - Carnegie Free Libraries, and the Bill and Melinda Gates foundation's emphasis on clean water and maria eradication, and the Rockefeller Foundations charitable works all being examples of where governments talk a good game, but end up doing squat in terms of useful effect.

Comment Re:So, why pay UK taxes? (Score 1) 104

You should not be allowed to just arbitrarily decide which countries laws apply when everything is taking place in the UK unless you are going to give individuals the same power and I can go shopping for the country with the lowest income tax rate too.

And in fact, you can. It's not anyones fault that you are not personally a multinational organism by nature, and that in order to do this, you'll have to physically relocate to Ireland, rather than merely relocating your consciousness to your body already living in Ireland. Sucks to be made out of meat, I guess.

Comment Re:Unisys Binary Translation (Score 3, Interesting) 113

http://www.compilerjobs.com/db/jobs_view.php?editid1=525

So they are looking for Rosetta - the technology Apple acquired for running PPC binaries on the x86 using binary translation.

Well, good luck to them; even though they could just license the technology, they probably won't. The job posting says they are relying on LLVM-IR as a means of translating the code.

In case they care, Apple acquired the company that produced Rosetta, so that's where you want to start to license it, or Facebook last year acquired a small company that did the same type of thing. I doubt they'd be able to hire the engineers away from Google, but if they're interested, Google has NACL and PiNACL which have to use similar techniques.

It's funny how everything old is new again, isn't it? IR is basically becoming ANDF from 1989 http://en.wikipedia.org/wiki/A...

...and there's a good reason that Avie Tevanian went with "fat binaries" instead of TenDRA style ANDF or IR, and there's a good reason we (at Apple) extended it to Intel systems, rather than continuing on with Rosetta (though, to be fair, there isn't really a technical reason for the death of Classic or Rosetta, other than a broken build and archival process, really).

Slashdot Top Deals

"When the going gets tough, the tough get empirical." -- Jon Carroll

Working...