Follow Slashdot blog updates by subscribing to our blog RSS feed

 



Forgot your password?
typodupeerror
×

Comment Re:Hardware is trusted (Score 1) 83

It'd be nice if the next iteration of EFI had a more robust upgrade security design.

Something like this: Firmware upgrades are not possible from inside the OS. At all. Instead there's a switch on the mainboard that is only accessible when the computer has been physically opened. When that switch is on, EFI will refuse to boot any OS and all onboard SATA/SCSI controllers are physically disabled. EFI will scan every USB port* for a FAT32-formatted mass storage device containing a file with a certain filename, which is then displayed for your approval, checked and installed. While the switch is off, changing the firmware should be prevented in hardware, such as by detaching a certain line required to write to the flash chip. (Settings should be stored on an unprotected chip and can be changed while the computer is bootable.)

You're in a corporate setting and need to update 16.000 identical desktop computers all at once? Make sure the computers have an enterprise-ready mainboard that can pull the update from the network (e.g. using something similar to BOOTP). You'll still have to toggle that switch and confirm the prompt. That's as convenient as it should get; after all, if there is any chance that the firmware is modified while an OS is loaded, any successful attack on the OS leaves your firmware in a potentially compromised state.

* Yeah, I know, USB also has infectable firmware. Unfortunately, I don't know of a reasonable mass storage standard that doesn't. And making people physically swap PROM chips won't fly.

Some, if not most mother boards have a slot or space for tpm chip. That tpm is a smart smart card chip that can store data, can encrypt data and act like a vault. Thats a few pennies and does not require an external pair of wires to a physical switch.
  TPM = Trusted Platform Module. ( http://en.wikipedia.org/wiki/T... )

Comment Virtual water won't work, Need drip irrigation (Score 1) 417

California has more water than Israel. Israel actually does a great job or water preservation by watering individual plants with a drip irrigation system that runs water in a plastic hose along the run, and where there is a plant, They install a tee connection with a controlled drip to the plant area. They also mulch. Israel reduced wasted water consumption by more than 80%. Works for fruit and vegetables, exterior and greenhouses.
You just can't continue to do wide area spraying, as we see on youtube and on TV.

Comment My light weight wrist-watch with the 7 yr battery (Score 1) 111

I bought a Seiko, because it was thin, light-weight, and had an approximate 7 year battery life. After 7 years, I bought a new battery, installed for $10.00

So, I have to change the date 6 times a year, and adjust for leapyear twice a year. Big-deal. But my watch can be immersed in water, and still keep on functioning. Newer electronic watches from the consumer market now are perpetual. Date, self adjusts, and the solar panel in the watch keeps the internal battery charged. Why would I need more. Do I need to text to my watch during meal times?

Comment Re:I just don't care (Score 1) 232

You are thinking like a consumer, not a business owner. For consumers, sure they get worse results and can go elsewhere, but for business owners, the majority of their potential customers are going to use Google since it is the go-to for most people, thus it decreases your visibility and income. So it is a pretty big issue for people trying to reach an audience, which includes people who work for any company that has customers. Thus unless you're independently wealthy or work for a Google affiliated company, this probably affects you.

I really don't care what Google does, I only window shop at the vendor list that Google prepares, but I never make a purchase. I tend to purchase from smaller businesses that are local. I support my local merchants.

Comment Re:I dub all unswitchable hardware: disposable (Score 1) 362

That's a descriptive word I know gsm phone manufacturers work hard to distance themselves from, even more where it's more true.

I was nice of Microsoft to play along until the secure boot controversy was diffused and then stop backing openess. I'm not sure RMS would be completely surprised.

Seriously though, we have the choice, and the only thing that will maintain that freedom is that we express it with our dollars. Manufacturers are at OUR mercy, not the other way around.

If you can't get to the boot menu when you play with it in the store, don't buy it. Amazon will let you return nearly anything. This is a freedom we can defend.

I would have the US Government block sales of all computer systems in which secure boot could not be disabled. If I want to run XP as a control program for my cash register, I certainly need to bypass secure boot. Ditto if I want to run a Linux OS which does not support secure boot.
Do I need to take a RedHat or Debian based distribution, perform a minimal install and replace the guts with the other OS? Let Ubuntu or Fedora bypass the UEFI security, and let me do what I want with my hardware. I had to purchase, not lease the hardware.

Comment Re:Necesary Censorship (Score 1) 216

Except that basically all extant religions feed on ANYTHING that can be construed as persecution. By trying to censor, you only strengthen their resolve. Same shit with Neo-nazis and Mein Kampf. Nothing could do more damage to that movement than exposing that Das Fuhrer had the language skills of a middle school American sleeping through their first semester German class.

Your comments are just if you are dealing with rational individuals. But when an individual becomes ultra whatever, (from religion to being anorexic to drug addiction), rationalism is out the window. Censorship drives that drivel underground, and that way the reach to a number of susceptible individuals is greatly reduced. And of the ones converted, they are lost.

We now hear that many that went to Isil (Isis) are disillusioned about the terrorism. They can't leave for fear of death. Only sadists remain truly committed.

Comment Re:Whitelisting real mobile carrier towers (Score 1) 140

Use compound encryption. Compound encryption means using algorithm one, applied to a file encrypted with algorithm two. And at least one of the algorithms is salted and so that two encryptions of the same input file produce different output results. I wrote software that generates 16**3 different encryption keys, randomly selected. (srand(clock)); The cypher block chained vigenere encryption is the first algorithm and triple DES is the second. All that the recipient knows is that the key number, ranges from 1 to 16**3 different non repeatable keys and non repeatable subkeys. It functions somewhat like a 1 time pad.

Comment Local computer store (Score 1) 452

I bought a 11.00 dollar keyboard with sculptured keytops, it is excellent. I still use my old IBM keyboard on my second computer

You can purchase a similar keyboard that has the buckle spring action.
The buckle spring keyboard is somewhat noisy, but with it you can type faster and with fewer adjacent key press errors. Search for buckle spring on the WEBB

Comment Re:Why don't i believe them (Score 1) 188

And at a huge cost. There's no way they did that without planning on using them for something, and that something wouldn't be a vague might happen kind of thing either, but a concrete we "need" this from the higher ups.

Would that use be an individual doing exercise in the back seat with his mistress?

Comment Proper English, Not in the USA (Score 1) 667

The US has distorted English so badly, that some US authors have to hire off-shore editors to insure legibility of understanding. Organizational flow of the text is fine, but sentence construction is the pits.

Do you write on a disk or do you write onto a disk? I stand on the floor and using my computer I write onto it's disk. Do I go in the house, or do I go into the house?

There are 4 cars from which to choose, or 4 chars to choose from?

Comment Blackberry Physical Keyboard, I want !!! (Score 1) 95

I was given a Nexas 4 Android. I am not a cellphone devotee, I use it for phone calls received. I hardly ever make outgoing calls and because my fingers are large, texting is folly. My text stuff, when I do it, is full of errors, even to where I select the word that the software anticipates I want to write. If I am sitting in the car while the wife shops, I play freecell. I have a 6 gig data plan and use about 50megs a month. (Yes, a waste).

With a physical keypad, there is a space between the keytops, and there is tactile feedback, and I can type with many fewer errors. I don't need voice response. Occasionally I will use the cell as a gps to guide me to an address. I own a wristwatch, so I do not need or use the cellphone to tell time.

I turn it off at meal times, or when I am in public (theatre, restaurent) places.

A cellphone is great for teens and pre-teens. Leave me to a phone with tactile feedback.

Comment Swatch may disappear, but not real wristwatches. (Score 1) 389

There are several non-Suiss wrist watches on the market that today will be around
I wear a Seiko. It is less thick then the thickness of two American Quarter coins. The battery lasts seven years, and the precision is better than one second per month.
For month that have fewer than 31days, I have to manually change the day number.
If I wanted a watch that is "perpetual", (has a built-in photocell and produces enough power to recharge battery and this watch can keep going for weeks, if left in a drawer, that watch will be 1/3rd thicker than mine. And I can go swimming with my watch.

What will the band of the Apple contain? Will contain batteries to allow the watch to run 18 hours?

Enough said!

Comment Re: In other news (Score 1) 609

This sort of thing isn't unprecedented, the Bush White House had a policy of issuing important staffers two Blackberries, one that had a whitehouse.gov email and one that had a gop.org email, and using both systems indifferently for communication.

I sorta don't care in either place, at least from an ethics perspective, since all emails ever seem to do is trigger dopey years-long investigations and pseudo-controversies about the parsing of language and people going off half-cocked. Case in point: Benghazi.

On the other hand, I'd rather not people like this be president of the United States. I think Lindsey Graham has the right idea, if you're an official person, NEVER USE EMAIL. Write official documents carefully, or just call someone.

When you have to shlep two laptops where you go, and the government one weighs twice as much as your own, and the government did not allow you to create a private logon for yourself, what would you do? You leave the crappy one at home.
And since Hillary communicated with government officials, they all have copies of her messages and their replies. Government messages to her open account would put the blame on the sender, not the recipient. I am sure her emails to government individuals were encrypted and sent via vpn.

Slashdot Top Deals

"No matter where you go, there you are..." -- Buckaroo Banzai

Working...