Follow Slashdot blog updates by subscribing to our blog RSS feed

 



Forgot your password?
typodupeerror

Comment How about the unbanned? (Score 2) 116

Forget the kids, they don't vote so they can be safely trod upon. Who cares what their experiences are.

But seriously, what about the not-kids? Australian adults, are you having to show your ID when you get a DHCP lease? Do a lot of websites who didn't have mandatory logins, now have 'em?

How does it work, and what has changed for you?

Comment Re:Won't work but needs to be done (Score 1) 116

Europe is now eyeing similar bans, as well as proposals for a late-night "curfew", curbs on addictive features, and an EU-wide age verification app.

LATE-NIGHT CURFEW?!

If Europe isn't careful, they're going to teach a generation of kids that it's ok to do their FTPing during business hours.

Comment The problem is lack of generation capacity (Score 1) 115

What these groups need to do to protect vulnerable people is to make sure we build new powerplants soon. It's so sleazy of them to act like they're trying to protect customers from paying high prices for energy when for decades they basically caused energy prices to get so high by having a problem with basically every possible way of generating energy.

Comment I mean - most of them are local first (Score 3, Interesting) 98

HomeAssistant's main strength is in tying otherwise incompatible devices together. Local first is not unique though - HomeKit is local, Matter is local, I don't know much about the Alexa/Google setups but I believe they can be controlled locally too.

Don't get me wrong, Home Assistant is an excellent bit of kit with lots of standardisation and automation. But this article is pushing the wrong part of its strengths - local-first isn't unique. Pick the right ecosystem and it's all local-first anyway.

I have many different smart vendors in my home - Google (originally Nest), Philips, Meross, Aqara, Eve, Ikea, LightwaveRF, Shelly, Eufy, Switchbot...none of them require the internet. All of them can work locally. All of them work in the same ecosystem. Then I have oddities which I use HomeBridge for to bridge the gap - Roomba (older, non-Matter, Worx Landroid (robot lawnmower), Dyson Hot'n'Cool thingy, Logitech Harmony...even plugins for Synology which show the NAS's temperature and allow shutdown. Through the use of HomeBridge, I can draw them into the same ecosystem too. None of this requires the internet.

The meme is completely overblown and quite often you can tell by people that don't actually use this kind of tech. Obviously if I want to control this kit from outside the home then I need an internet connection, and if I want to update any of the kit then I need to download the updates from the internet for that too, but operation from within the house? Just a HomeKit/Matter hub, that's all.

Comment Re:I assume you are joking, but ... (Score 1) 155

We are only a year out from the murder of a health-insurance executive, so the police are more on edge than usual.

Then we need to threaten such things much more often, so that the cops will eventually get used to it, and relax. ;-)

Debian never tried to kill me through my computer. I'd appreciate it if my car manufacturer made their car as safe as my computer.

Fuck it, I just want a Debian car. Then I won't need to extract bloody vengeance from beyond the grave, as my zombie revenant tracks down the CEO of Subaru, and the rotting flesh of my hands tightens around his throat as payment for the time a popup distracted me.

Comment There's no consensus definition of E2E encryption (Score 1) 90

Some people are busting out "definitions" of "End to End Encryption" but people were already using that as in informal descriptive term long before your formalized technical jargon was made up. Nobody should be surprised if there are mismatches. Have faith in our faithlessness.

I personally view the term as an attempt to call semi-bullshit on SMTP and IMAP over SSL/TLS. In the "old" (though not very old) days, if you sent a plaintext email (no PGP!), some people would say "oh, it's encrypted anyway, because the connection is encrypted between your workstation and the SMTP server, the connection from there to some SMTP relay is encrypted, the connection from there to the final SMTP server is encrypted, and the recipient's connection to the IMAP server is encrypted."

To which plenty of people, like me, complained "But it's still plaintext at every stop where it's stored along the way! You should use PGP, because then, regardless of the connection security, or lack of security on all the connections, it is encrypted end to end. Never trust the network, baby!"

Keep in mind that even when I say that, this is without any regard for key security! When I say E2E encrypted, it is implied that the key exchange may have been done poorly/incorrectly, mainly because few people really get to be sure they're not being MitMed when they use PGP. You can exchange keys correctly, but it's enough of a PITA that, in the wild, you rarely get to. You usually just look up their key on some keyserver and hope for the best. Ahem. And I say "usually" as if even that happens often. [eyeroll]

Indeed, every time I hear about some new secure messaging app/protocol, the first thing I wonder is "how do they do key exchange?" and I'm generally mistrusting of it, by default. And sometimes, I'm unpleasantly unsurprised, err I mean, cynically confirmed.

But anyway, if my E2E definition matches yours, great! And if it doesn't, well, that's ok and it's why we descend into the dorky details, so that we can be sure we're both talking about the same thing.

Slashdot Top Deals

"You need tender loving care once a week - so that I can slap you into shape." - Ellyn Mustard

Working...