Follow Slashdot blog updates by subscribing to our blog RSS feed

 



Forgot your password?
typodupeerror
×

Comment Re:they used encryption, hmacs, thought they knew (Score 1) 83

BMW's programmers did as much as I'd expect any application programmer to do. It's then time for the security audit, by a truly qualified security person, to catch the kinds of mistakes that the author caught.

No. Security is not an afterthought or something do be approached at the end. It needs to be an integral part of the software development lifecycle from soup to nuts. Anything else results in "ship it now, we'll fix it later" decisions and we end up where BMW is today.

Comment Re:I don't think this is really true. (Score 1) 153

Also very hard if there is not a set of reference photographs.

Fortunately your friends, relative, and coworkers are willing to help out with that. Each photo uploaded to Facebook with your face tagged in it is a reference photo. Setting your privacy settings to not display those tags doesn't mean the data point wasn't saved.

Comment Re:OpenSSL, GnuPG, ... (Score 2) 51

Every e-mail client(desktop and mobile) should have S/MIME and GnuPG integrated in - including Gmail, Yahoo and the various ISP web clients. What's taking Google so long for Gmail - pressure from various governments?

Maybe it's the fact that if your email is encrypted as it passes through Google, they can't data mine it. Since that is the Raison d'etre for gmail, it would kind of defeat the whole purpose.

Comment Re:Lasers are easy to stop (Score 1) 517

Conventional ships guns hit targets over the horizon by firing up and then gravity brings it down (hopefully on target) and they have about as much range now as they are ever going to get, everyone is agreed there. All I was implying is it's going to be hard to hit a target over the horizon with a straight shot. If your going to shoot the railgun the same way you shoot conventional guns what's the point?

They'll still use indirect fire, it may just have to orbit the earth a time or two before coming back down for the impact.

Comment Re:Been a long time coming (Score 1) 294

Then they expanded like hell, employed stupid corporate business policies like charging people to pay for store catalogs, ridiculous "i need all your personal info" so I can sell you a resistor, etc.

I remember this shift well. Our local store manager understood though. As soon as you gave him a WTF look he would reply with "Right. Kris Kringle it is then."

Comment Re:Bound to happen (Score 1) 619

I don't mind ads as such, but what I do mind more than anything else -- more than being noisy and obnoxious -- is the tracking that comes with them. That's why I block all advertising that I can, and why I always will.

And the drive-by malware. Don't forget about the malware that makes it into even the best of ad networks.

Comment Published but not released yet. (Score 1) 27

According to their info page, juliabase has not had a 1.0 release yet.

JuliaBase is organized in a public Git repository on GitHub. So far, there is no public release of JuliaBase 1.0. However, the master branch in the repository is a release candidate, ...

I'm not sure I would solely trust my lab results to a LIMS system that is pre-release.

Comment Re:One more reason to use a wired keyboard (Score 1) 150

Since AES is a block cipher, and an AES block is 16 bytes, and since keypresses appear to be transmitted "instantaneously", does that mean for each keypress, a 16-byte block is formed, and encrypted? And what about the encryption mode? (Otherwise doesn't it basically become ECB?)

You use the block cipher to generate what is essentially a random stream, then XOR it with the input stream as needed, turning your block cipher into a stream cipher.

Comment Re:Nope (Score 1) 331

The problem is, that hasn't been decided as of yet. It would make sense to any normal person that they wouldn't be. But law enforcement isn't sure how to deal with such services so they are doing their best to kill the industry with raids, but then drop the cases before they hit court so no ruling can hurt their efforts.

Even if it turns out that you are not legally responsible for the content, that's not going to keep LE from confiscating/impounding your computer systems for an undetermined amount of time.

Slashdot Top Deals

It is easier to write an incorrect program than understand a correct one.

Working...