Forgot your password?

typodupeerror

Comment: Re:As long as they didn't influence it, it's OK (Score 3, Informative) 566

by Jon Stone (#41500801) Attached to: A Suicide Goes Viral On the Internet

There is also the question whether this video will influence more people to commit suicide. The Samaritans have a section on their website explaining how to report and dramatize suicides responsibly.
http://www.samaritans.org/media-centre/media-guidelines-reporting-suicide

Comment: Re:Privacy Concerns (Score 2) 244

by Jon Stone (#40248427) Attached to: After Launch Day: Taking Stock of IPv6 Adoption

Remember - we're comparing IPv4 with NAT against IPv6.

Yes the ISP allocates the IPv6 prefix, but then again with NAT every source packet has the same IPv4 address. The real difference is that with IPv6 every single request can be given a different source address. If the source addresses are picked randomly from the /64 pool then it should be impossible to identify individual hosts within the /64 based solely on IP address information. As you rightly point out there are other effective ways of doing this already, but that's not an argument against using IPv6.

Comment: Re:Privacy Concerns (Score 4, Interesting) 244

by Jon Stone (#40247879) Attached to: After Launch Day: Taking Stock of IPv6 Adoption

I've never understood this concern. With IPv6 I have, say, 2^64 addresses to use. I could use a different source IP address for each and every HTTP request I send out. Even at 1000 requests a second we'll all be long dead before you had to reuse a source address.

IPv6 gives you loads of room to hide. This is my concern - address based blocklists will quickly become infeasible.

Comment: Re:We don't need this law! (Score 5, Insightful) 199

by Jon Stone (#39836501) Attached to: Bill Banning Employer Facebook Snooping Introduced In Congress

Facebook are willing to sue. They don't want people to do this either. It devalues their service (even if the users are the "product", they still need to provide something of value to attract users).

Facebook probably wants to be able to charge companies for access to potential employees' data

Comment: Re:Part of this is because of US Export Restrictio (Score 2) 139

by Jon Stone (#39011573) Attached to: Southwest Airlines iPhone App Unencrypted, Vulnerable To Eavesdroppers

Does the operating system not provide the SSL libraries? Or do you actually have to code the encryption routines into each application on iOS?

I would have thought the export restrictions would only apply to the SSL libraries, not the application that uses them.

Comment: Re:What? (Score 2) 152

by Jon Stone (#38956919) Attached to: No More SSL Revocation Checking For Chrome

CRLs are revocation lists which used to be published by CAs and clients were able to periodically download.

As a concept they were replaced with OCSP (online certificate status protocol). Here the client requests the current status of a certificate each time they are presented with it. The idea was that it would be more timely and up to date and meant CAs didn't need to publish a complete list of revoked certificates.

Now it seems Chrome wants to go back to a bodged version of the old way of doing things where Chrome periodically requests the CRL from the browser vendor or Chrome is periodically updated with the latest CRL?

Comment: Re:Getting developers (Score 1) 312

by Jon Stone (#37198242) Attached to: What HP's TouchPad Fire Sale Teaches iPad Rivals
One of Dilbert creator Scott Adam's books covers market segmentation. The market segment every business should aim for is the "stupid rich". The poor rich don't have enough money, and smart people aren't going to buy your company's product anyway. The stupid rich is where the money is made.

Only great masters of style can succeed in being obtuse. -- Oscar Wilde Most UNIX programmers are great masters of style. -- The Unnamed Usenetter

Working...