Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×

Comment Re:For everyone who said "what do you have to hide (Score 2) 337

Very well put. What I like to say to people who say that they have nothing to hide is a quote from Cardinal Richelieu: "If you give me six lines written by the hand of the most honest of men, I will find something in them which will hang him." This massive trove of surveillance data can and will be used against anyone whom the powers that be don't like, and it is very easy to twist casual remarks and jokes out of proportion, to destroy the credibility of someone who may rock the boat. God forbid you are actually be doing something perfectly legal that isn't socially acceptable. If you stay one of the proles, sure you have nothing to fear, but if you try to do something useful like, oh, try to run for public office with a mind to changing how the government does things, those six million lines and counting describing everything you've ever said and done will be examined, and they will definitely find something in them which will hang you.

Comment Re:XKCD nailed this ages ago (Score 2) 276

Wrong. Four words, out of 20,000 or so words that a typical literate person would know, gives 20,000^4 combinations, or a total of 1.6e17 possible combinations. That's about 57 bits of randomness right there, harder to crack than a DES key, and that's only if you *know* for certain that they're using an XKCD 936-style password. Yeah, I know that's in range of a massive distributed cluster: a DES cracker can be built for US$10,000, that can recover a key in six days, but it's still a fair sight better than the rubbish we have today. If you really care, use more words. Nine words is all you need to get to 128 bits of entropy.

Facebook

Should Facebook 'Likes' Count As Commercial Endorsements? 189

Slashdot contributor Bennett Haselton writes: "Facebook settled out of court over displaying ads that told you which of your friends had 'liked' a product or service, and another lawsuit is currently pending over the use of minors' pictures specifically in similar ads. (Not to be confused with another recently filed lawsuit alleging that Facebook converts private messages into public 'likes'.) Google+ tried to limit its liability by only showing the faces of users over 18 when showing which friends 'like' a page. I'm all for more privacy for social networking users, and if it's true that Facebook has been silently marking users as publicly 'liking' a page because they mentioned the page in a private message, the plaintiff's lawyers ought to clean them out for that one. But in cases where you willingly and knowingly 'liked' a page, Facebook and Google+ ought to be able to tell that to your friends in advertisements, without being sued for it." Read on for the rest of Bennett's thoughts.

Comment Re:Impressive (Score 3, Interesting) 247

It's not direct detection of gravitational radiation, but observations of PSR B1913+16 have been considered convincing enough proof of the existence of gravitational waves as predicted by general relativity. It's a binary pulsar: a neutron star and another object that might be another neutron star or possibly a black hole, orbiting each other. They're spiraling in together, which could only happen if their orbits were losing energy due to gravitational radiation, and calculations based on their observations conform exactly with the predictions of general relativity for gravity waves. This was convincing enough to have won the 1993 Nobel Prize in Physics for the scientists involved in the discovery and analysis of the pulsar, Russell Alan Hulse and Joseph Hooton Taylor Jr.

Comment Re:Technically correct (Score 4, Insightful) 573

And then anyone who tries to seriously get into politics in that way will understand just why the NSA's data collection is so dangerous and gives them so much power. I've seen many people around here make the ridiculous argument that NSA domestic data collection doesn't affect them because they're nobody. Right... But if you want to try to effect real change you stop being a nobody, and all that "dead data" they collected on you suddenly takes on life like so many zombies. Cardinal Richelieu once famously said that if he was given six lines written by the hand of the most honest of men he would find something in them by which would hang him. The NSA has far, far more than that. On all of us. I can only hope that you Americans still have the same courage your founding fathers had when they created your nation. You will need it in these dark days.

Privacy

Member of President Obama's NSA Panel Recommends Increased Data Collection 349

cold fjord writes "National Journal reports, 'Michael Morell, the former acting director of the CIA and a member of President Obama's task force on surveillance, said ... that a controversial telephone data-collection program conducted by the National Security Agency should be expanded to include emails. He also said the program, far from being unnecessary, could prevent the next 9/11. Morell, seeking to correct any misperception that the presidential panel had called for a radical curtailment of NSA programs, said he is in favor of restarting a program that the NSA discontinued in 2011 that involved the collection of "meta-data" for internet communications. ... "I would argue actually that the email data is probably more valuable than the telephony data," ... Morell also said that while he agreed with the report's conclusion that the telephone data program, conducted under Section 215 of the Patriot Act, made "only a modest contribution to the nation's security" so far, it should be continued under the new safeguards recommended by the panel. "I would argue that what effectiveness we have seen to date is totally irrelevant to how effective it might be in the future," he said. "This program, 215, has the ability to stop the next 9/11 and if you added emails in there it would make it even more effective. Had it been in place in 2000 and 2001, I think that probably 9/11 would not have happened."' — More at Politico and National Review. Some members of Congress have a different view. Even Russian President Putin has weighed in with both a zing and a defense."

Comment Non-denial denial (Score 5, Informative) 291

As usual with these things, it's a non-denial denial. "RSA, as a security company, never divulges details of customer engagements, but we also categorically state that we have never entered into any contract or engaged in any project with the intention of weakening RSA's products, or introducing potential 'backdoors' into our products for anyone's use." Emphasis added. The first part says that they can't say whether they've taken any money from the NSA, so the story of them receiveing $10 million from the NSA could still be true. The second part leaves a lot of wiggle room. The word "intention" is the weasel. The statement leaves open the possibility that they could have taken the money from the NSA in good faith, in the same way that Mozilla takes Google's money in exchange for making Google the default search engine in Firefox. They didn't know then what the NSA's true intentions were in pushing use of Dual_EC_DRBG (never that mind it's several orders of magnitude slower than any other CPRNG algorithm described in NIST SP 800-90A). They were already using it in BSAFE as early as 2004, and the algorithm became a NIST recommendation in 2006. The possibility of a backdoor in the algorithm was floated publicly in 2007, a few months after it was published. I for one don't buy that they did all this in good faith, but there's no way to prove it unless some cryptographer who was employed by RSA at the times in question blows the whistle and says they had suspicions with the algorithm and the NSA's intentions for it.

The NSA wasn't always thought of as so evil. They modified the DES s-boxes so as to strengthen it against a cryptanalytic technique (differential cryptanalysis) that was known only to them and IBM since at least 1974, and kept classified until it was independently discovered by the academic cryptographic community in the late 1980s, so there may be some reason to give RSA the benefit of the doubt.

Comment Re:These companies don't care, it is all pretense. (Score 3, Interesting) 312

The only thing corporations care about (insofar as organisations are capable of caring about anything), most especially publicly traded corporations, is money. It would open a corporation to shareholder lawsuits if it were not trying to maximise their profits using whatever means available at its disposal. That is the nature of these monsters that have been created by legal instruments. If you want them to care about anything, you have to show them how much it will cost them not to care about it. In the absence of laws against pollution, it saves money for corporations to pollute, so to get them to stop polluting, laws are written that make them liable for fines when they do. A properly-written anti-pollution law will make it cheaper for a company to buy equipment to clean up or minimise pollution than to pay the fines the government exacts for violating the law. In the same way, it saved money for corporations to be compliant with the NSA, so now other countries are making it impossible for them to operate in their countries (which costs them a market and hence money) using systems that make it easy for the NSA to do its spying. It remains to be seen whether this potential loss of business or increased operating expenses will be enough to make them rebel against the NSA. To corporations, money talks and bullshit walks every time.

Comment What a load of bollocks (Score 5, Insightful) 698

If these attackers the NSA supposedly thwarted (the Chinese it is speculated), managed to gain control over large numbers of computers with access enough to damage their firmware, it would make far better sense to keep those machines alive and working for them instead. You could cause far more damage to the US economy by keeping those machines alive and pwn3d than if you simply bricked them. A bricked machine will cost a few hundred dollars to fix. A pwn3d machine is a gift that keeps on giving!

Censorship

North Korea Erases Executed Official From the Internet 276

itwbennett writes "The North Korean state propaganda machine has edited and deleted hundreds of news articles that mention Jang Song Thaek, the former top government and party official and uncle to leader Kim Jong Un, who was executed Thursday. Earlier this week, Jang was arrested in front of hundreds of senior members of the ruling Worker's Party of Korea and denounced for numerous alleged acts against the state and Kim Jong Un. From arrest to trial to death took only four days and the unprecedented fall from grace is widely being interpreted as an attempt by Kim Jong Un to keep officials loyal and scared."

Comment Re:How can doctors secure it? (Score 1) 120

Nothing really stops you from changing the firmware on Google Glass to a custom one, with all of Google's spyware ripped out.

Not to bring anybody down... but seriously... we intentionally left the device unlocked so you guys could hack it and do crazy fun shit with it. --- Stephen Lau, Google X Lab

There's source code available for the kernel as required by the GPL as well as for other essential components, so custom firmware is definitely possible for it. Someone out there will probably eventually wind up selling medical editions of Google Glass with custom firmware with HIPAA compliance baked in and apps to interface with common medical information systems, although such a thing will likely be far more expensive than the consumer edition. Someone further down commented that it would cost $19,000, and well, I imagine they're not far off the mark, and perhaps even underestimating it. Certification is an expensive business.

I frankly don't get why there is so much hate on Google Glass. Indeed, the use that is being pushed for it as a consumer device is very creepy from a privacy standpoint, but you don't have to use it as Google intended. As William Gibson famously said, the street finds its own uses for things, and Google hasn't done anything to hinder that, in fact they are actively encouraging it.

Comment Re:Government doesn't bother me (Score 1) 319

The government snooping around doesn't bother me all that much, as while it might be a waste of money, it really doesn't affect me. It's just dead data sitting around on some NSA server.

Until the day that Grumbel decides to run for Congress, on a platform of returning the protections guaranteed by the Constitution against the encroachments of the NSA. All sorts of "dead data" suddenly comes to life out of context like so many zombies.

Slashdot Top Deals

Two can Live as Cheaply as One for Half as Long. -- Howard Kandel

Working...