Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×

Comment Re:On no. 1 & 3: Never trust the client (Score 1) 265

Don't trust the client, store things like geolocation data and other such things server-side.

Uhm, where do you think you got those coordinates from in the first place?
TFA isn't talking about sending geoip data back to browsers to store it in a cookie, it's about getting GPS data from visitors, who will want to lie about it, e.g. to get free beers for logging in at a specific spot several days in a row.

Comment Re:Every "investment" in EVE is a scam. (Score 4, Interesting) 171

FTFA:

Along the way, 345.18 billion ISK was paid out to investors as interest to make sure the scheme kept going. Another 452.72 billion was withdrawn by worried investors before the company shut down; that left 1,034 billion ISK in the hands of the company's owners.

I always wonder how many of these worried investors recognized the scheme for what it was right away, and decided to try and make some profit out of it themselves.

Comment Re:Problem will solve itself (Score 1) 535

Most people would just not buy from that person again. With the profit margins on drugs being as huge as they are, dealers make more money from only two sales than from ripping you off once.
Also, if your business model consists of consistently ripping off people willing to buy illegal drugs, my guess is it probably won't be too long before you piss off the kind of people that do believe in physical customer feedback. (Although obviously they won't be able to find you, as all the wire tapping is exclusively accessible to incorruptible people that only have your safety against terrorism, child porn, and crimethink on their mind.)

Comment Re:Tools for OS X and Linux (Score 1) 248

There's inSSIDer for Linux, although Kismet is nice, it doesn't output pretty pictures :p (Seriously though, the graphical overview of networks is a nice addition to just a textual list of networks and their strengths for each channel, especially for seeing the overlap if they're using something besides the three standard channels)

Comment Re:unrealistic armchair approach (Score 1) 254

Companies spending too much time perfecting their UI design will go out of business while their competitors are shipping flawed but ultimately usable products.

There's a difference between perfecting a UI design and inflicting completely new, experimental ideas on unsuspecting users. Testing which particular gesture would be best for each interaction might take too much time, but completely omitting menus (leaving the only way to accomplish anything to be guessing the right gesture) is something that should've been thought over (especially if your target platform ships with a physical 'menu' button).

Comment Re:relative to what? (Score 1) 148

In special relativity lets say I'm sitting next to someone and then I go for a walk and come back. When we compare clocks they will be the same since otherwise there would be symmetry breaking and we could establish a preferred inertial frame.

You don't need to factor in acceleration to have the clocks get out of sync, just remember that changing directions means you won't be at rest the whole time in any reference frame:

Inertial frame of your friend: First you move away with say 1 m/s. Halfway through you move towards him at 1 m/s. You're moving, so your watch will be slow when you return.

Inertial frame of you walking away: First your friend moves away at 1 m/s. Halfway through you start moving in the same direction at 2m/s. You're moving faster, so your watch will be slow when you catch up with him.

Inertial frame of you walking back: First you move at 2m/s, while your friend falls behind at 1 m/s. Halfway through you stop moving, and wait for your friend to catch up. You've been moving faster, so your watch will be slow when he reaches you.

Comment Re:SSL certs are both over-trusted and under-trust (Score 3, Informative) 194

I agree it's stupid how browsers show self-signed certificates as more dangerous than plain HTTP.

The difference between paid-for certificates and self-signed certificates means more than just who promises authenticity though: The certificate's signature can be checked against the certificate shipped with the browser, thus preventing MITM attacks.

Basically:

  1. HTTP: everybody on the network can read your stuff, including passwords etc. They don't even need to perform a MITM attack. With a simply MITM attack they can also alter content.
  2. Self-signed HTTPS: your traffic isn't that easily sniffable anymore, but an attacker can perform a MITM attack to read/alter your data. He'd intercept all your browsers' requests, including the certificate, and replace them with his own.
  3. CA-signed HTTPS: an attacker can't perform a MITM attack, because intercepting the certificate request means it's signature won't match with the CA-cert that your browser shipped with.

Thus paid-for certificates mean you won't get MITM'd, the part where the CA also verifies identities is just bonus.

Slashdot Top Deals

A morsel of genuine history is a thing so rare as to be always valuable. -- Thomas Jefferson

Working...