Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×

Comment Store the encrypted private key (Score 1) 309

Store the private key on the server, but encrypt it using a key derived from a passphrase. Script would then fetch the encrypted private key from the server and decrypt it using the passphrase entered by the user. The NSA would have to crack your passphrase to get your private key, just as it would if it seized your workstation.

Comment Correctly used is the problem with Web of Trust (Score 1) 309

The Web Of Trust should make TLAs subversion near impossible, if correctly used.

There's the rub. How are you sure that nobody whose key you have signed in the past has since been compromised by the NSA, by Alzheimer's dementia, or by some other affliction that breaks the assumption of "correctly used"?

Comment Re:Same error, repeated (Score 1) 309

S/MIME relies on centralized key servers [which are] extremely desirable points of attack.

As are the individual members of the "strong set" in PGP's web of trust, which as I understand it is made of people who can afford to travel to key-signing parties in foreign countries.

there's no equivalent to PGP's web of trust

I've had two problems with the concept of PGP's web of trust. One is that just because you can vouch for someone's identity doesn't necessarily mean you can vouch for that person's ability to vouch for others' identities. Another is that if you yourself don't travel to foreign key-signing parties, good luck finding multiple independent paths through the trust graph between you and someone with whom you are corresponding. All this trust has to flow through this "strong set".

Comment Re:Forced waiting (Score 1) 81

You assume it's necessary to show an ad before every video.

If the partner uploader or the Content ID claimant has specified "Do not allow this video to be shown without an advertisement" on a particular video, then it is necessary.

If the video isn't long enough to insert an ad after, just don't show one until the next video has been viewed.

That would violate Google's contracts with YouTube partners and Content ID claimants.

Comment Re:Copyright issue? (Score 1) 285

Yes, you can sideload, but that cuts down your visibility tremendously, and sideloading these kind of apps is already sort of questionable, given they're very ripe vectors for getting malware on Android

Which creates an opportunity for a third-party app store for Android devices that specializes in malware-free porn.

Comment Re:Pay Once and Play; Minecraft mods (Score 1) 188

So "mods" is your new edge-case Axe to Grind

Yes. I have realized that a mod is more reasonable in scope for a community project than a complete game. Would Half-Life have been nearly as popular without Team Fortress Classic and Counter-Strike? Yes, I'm aware that Counter-Strike was eventually ported, but if Half-Life were a console exclusive, Counter-Strike would never have been created in the first place.

Comment Forced waiting (Score 1) 81

YouTube videos also tend to be a lot shorter than segments of children's broadcast television. Compare the 11-minute segments of an animated TV series for children with the 1- to 4-minute YouTube videos. This makes the requirements described in the "Commercial Time Limitations" section more practical to fulfill for broadcast television than for YouTube. For example, a 15-second commercial might be shown before a 45-second video, which would exceed the FCC's 1 to 4 ratio for weekdays, let alone the 1 to 4.7 ratio for weekends. Would you prefer to have the YouTube Kids app just block viewing of partner or claimed videos when the app has displayed too many partner or claimed videos within a 60-minute period? That'd feel like the forced waiting in Candy Crush Saga.

Slashdot Top Deals

The key elements in human thinking are not numbers but labels of fuzzy sets. -- L. Zadeh

Working...