Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×

Comment Re:About time for a Free baseband processor (Score 1) 202

Lavabit is a bad example - the FBI only requested the private SSL key directly after the Lavabit guy refused to co-operate with a more tightly scoped warrant and claimed he had no way to intercept the data of just the user they were interested in (Snowden) ..... a claim that was manifestly false and everyone knew it. If he had handed over just the data of the one user requested, the SSL key would probably still be private. But after proving that he was utterly unco-operative and quite possibly untrustworthy too, the approach the FBI took was not entirely surprising. Additionally it did go through all the motions and there was plenty of oversight of the whole thing - a lot better than some silent interception.

Yes, if the NSA decided that the signing keys for cell tower certificates had to be handed over using some crappy secret national security court then there's not much the phone companies can do. However, it's still good enough to stop your average local police force who just can't be bothered justifying themselves to a judge and going through the overhead of a proper legal request ... which is what TFA says the driving rationale for these devices is.

Comment Re:About time for a Free baseband processor (Score 1) 202

Having a database of the cell towers a phone *should* see in a given region (it should be possible to crowdsource that) should make it possible to throw an alarm if a cell tower with suspicious characteristics "appears" at some spot.

There's no need for a free/open source baseband or really any technical changes at all to fix this at a technical level. Just disable 2G/GSM on your phone (not sure what the equivalent would be for Verizon). 3G/UMTS onwards involves the phone/SIM authenticating the tower cryptographically. That means - only way to create fake towers is to go get the keys from the phone companies. But at least the phone companies can know about it and mount a legal fight, if they so choose. It's not simply up to a donut eating agent to buy some cool hardware and charter a plane. Although in the USA that might not help much, such fights can go different ways in different jurisdictions.

The problem of course is that 3G coverage is usually not as good as 3G+2G coverage.

Comment Re:should be banned or regulated (Score 1) 237

Do you ever wonder why with this completely paranoid culture we have today why no one ever really worries about getting into a random car driven by a complete stranger in a dark alley in a city in a major US city? Well, it's because the medallion that driver carries is worth several hundred thousand dollars in most cases.

It's because people who are in the habit of assaulting or raping random strangers who get into their cars are extremely rare, and hunted down by experienced law enforcement professionals with great efficiency. It has nothing to do with taxi medallions which 99.99% of people who take taxis cannot possibly authenticate as genuine, being as they are non-experts in taxi licensing. Indeed, most taxis I've been in have visible licenses that are so basic (just a piece of paper with a logo and a photo/name on it) that forging them would be beyond trivial. And if you're the sort of person who drives around trying to entice strangers into your death-cab then printing out a Photoshopped license isn't going to stop you.

Indeed it's only a few US cities that have this crazy medallion system. In most parts of the world taxi licenses are expensive but not THAT expensive. So it can't be medallions that keep people safe.

In general I'm not against carefully thought out laws that have strong and clear justifications for them. I am not some anti-government zealot. A good, solid piece of scientific analysis showing that the costs of such laws are outweighed by their benefits would convince me, ideally backed by studies between areas where taxis are unlicensed vs areas where they are licensed. But I've found that the lawmaking process is very rarely driven by any kind of scientific process like that.

Comment Re:Hey, no worries! (Score 1) 86

At some point - probably soon - they'll shut down the last one of these and then there won't be any more. That's how the war on drugs was won!

I know you are being sarcastic, but the number of people on this thread who need a reality check is just amazing.

Why are there no online drug stores running on regular non-Tor websites, accepting money via PayPal? Because they would get shut down and the operators arrested immediately. In fact there used to be one such site, called the Farmers Market, which pre-dated the use of Tor and Bitcoin. And the owners were indeed found and jailed. Since FM was seized there weren't any more like it.

Now we come to this. It appears that the police believe they have a repeatable technique for busting black markets using hidden services. Whether they do or whether it's just a bluff, I suppose we shall see - I suspect they have a technique that is powerful but not all powerful. But I don't know and nor does anyone else outside the law enforcement community, so the people running and using sites like Evolution and Agora are taking big risks.

If the new technique they've developed is powerful enough, it's actually not unimaginable that all such sites would end up being seized.

Comment Re:Whack a mole; it's govt. policy! (Score 1) 86

The fact remains though.... the U.S. post office surely helped facilitate the actual delivery of many of those illegal orders placed on Silk Road, yet we never talk about arresting the mailmen who delivered the packages. We never talk about raids on the post offices to search through boxes held there either.

Um, there might be arguments for what the Silk Road and similar sites have been doing, but this isn't it.

The Post Office in any country is not explicitly set up to facilitate illegal activity. You don't read about postmen getting arrested for delivering packages because they are doing so blindly, they didn't know they were delivering drugs. And you don't hear about raids on post offices because .... duh .... the postal system cooperates with law enforcement when they get a warrant to search mail, along with other ways too.

The charges against Ulbricht and Benthall are "engaging in a conspiracy to sell narcotics". The post office is clearly not doing that, so, no crime.

it seems to me that's little more than a detail that such site operators could get around by simply making broad, more general categories that are clearly usable for LEGAL transactions as well as anything illegal in some countries.

Your understanding of the law is incredibly bad. In law, intent matters a lot. Silk Road 1.0 did in fact have categories for things like books. However its primary purpose was clearly the selling of drugs, as evidenced by the fact that they didn't remove drug listings, had dedicated categories for them, helped mediate disputes for them, charged money on them, and tried to hide themselves because they knew what they were doing was illegal.

If Silk Road had been primarily a book store, and occasional ads for drugs were quickly erased, then there would have been no problem .... but equally no point, because existing sites like Amazon already do a good job of that.

Comment Re:Follow the money (Score 1) 138

Consumer Watchdog got a $100k grant specifically to attack Google. No issues with money getting mixed up for different causes there. It's basically a lobbying/PR group that poses as some sort of consumer rights organisation - at one point there website was being cohosted by an actual Washington lobbying firm that claimed to specialise in "grassroots movements". As phony as they get.

Comment Re:Corporate espionage is standard practice (Score 1) 101

... at least, outside of the US, it seems. Many countries have a policy that basically boils down to "if you can grab it, then it's yours, and it's impolite for another company to point fingers and claim you stole it."

I guess you didn't read the parts of the Snowden releases where NSA/GCHQ were caught engaging in industrial espionage, right?

If you think the USA is somehow on a moral high ground here, I really wonder why. The USA has less that it can steal from other countries, but it certainly hasn't shown any signs of hesitation.

Comment Re:Look on the bright side ... (Score 1) 108

Since it's decentralized, they'll have to go after the actual users.....

... or the developers. I'm not sure OpenBazaar is going to win this one. The way to gain immunity is to build tools that genuinely have large amounts of legitimate usage, large enough that attempts to blanket ban the whole thing are seen as unacceptable.

The amount of trading on these black markets is huge. Meanwhile, demand for a pure p2p trading marketplace is probably rather low. It would be very easy for OpenBazaar to be overwhelmed by bad usage and not have enough good usage to defend itself.

Additionally, I think a lot of people have forgotten that even Silk Road 1 and 2 were actually somewhat policed. When SR1 was brand new, in the very earliest days, it had no rules at all and a few ads appeared for things like nuclear material and slaves. The ads were extremely convincing and quite, quite chilling. DPR shut them down immediately and instituted the "no things that do harm to others" policy, though of course that policy was hardly internally consistent - he was quite happy to sell guns.

But if OpenBazaar has no way to control listings at all, things like that might well start appearing again. And that would put them in a whole world of hurt. Governments care about the drug war yes - but they care about nuclear proliferation a hell of a lot more.

Comment Re:What a shame (Score 1) 189

Is there a loss in profit for original work? No doubt, but I would argue .....

The failure occurs at this point. You can argue all you want, and if you can convince content creators you are right they might go along with your suggestions to (presumably) give away all their work for free. After all, open source software developers often do.

However, what the Pirate Bay does is simply ignore the wishes of the people who created things, and profit off it. That's not winning arguments, hearts or minds. That's not even ethical. It's selfish exploitation of what could otherwise be a pretty reasonable and flexible framework.

Comment Re:Mailing lists (Score 2) 139

That's not the case at all.

DKIM allows mail providers to detect that a message was tampered with in transmit, and DMARC tells mail providers to trash tampered messages.

Therefore, a mailing list has several options.

Option one is: don't tamper with the signed data in transit. This is very easy. It means not doing things like editing the subject line or adding signatures to the end of mails, but any good email client can auto label or filter mailing list messages anyway, so this is not a big deal.

Option two is: tamper with it, but resign under your own sending identity. This means the From header will be "wrong", but not really, because the message isn't really "from" the sender at this point. It would be more accurate to say the message resembles one sent by the original sender, but really, from a security POV, the mailing list could have done anything.

I prefer option one, myself, but either works.

Slashdot Top Deals

Those who can, do; those who can't, write. Those who can't write work for the Bell Labs Record.

Working...