Comment: Besides helping a few traders.. (Score 1) 158
Comment: The new slashdot, now even whiter! (Score 1) 2254
Next up, IPv6!
Embedded Linux 1-Second Cold Boot To QT 141
from the why-does-my-phone-need-2-minutes? dept.
Comment: Re:So how about it, Slashdot? (Score 1) 247
Comment: This only affects BIND and Unbound users (Score 1) 132
It is generally not made clear that problems are only to be expected for those users behind DNS resolvers that ask 'DNSSEC OK=1' questions by default.
Such 'do=1' default behaviour was enabled in BIND, most likely in an effort to 'make the world safe for DNSSEC'. Even though no further DNSSEC processing is performed by default.
Other implementations, like PowerDNS & DJBDNS, do not wantonly ask 'DNSSEC OK=1' questions. This means that for these (and other) resolvers, on May 5th nothing will happen.
The 'testing' sites linked do not clarify if you are behind a resolver that asks 'do=0' or 'do=1' questions, and may thus lead to needless worry.
Cheers,
Bert - PowerDNS.
Scientists Say a Dirty Child Is a Healthy Child 331
from the snack-is-going-to-be-on-the-floor-today dept.
Comment: Re:Flash security has always frightened me (Score 1) 355
``Browser vendors have the right incentives because users have a realistic choice of browsers. Flash is an all-or-nothing affair.''
And that is a real problem for users, and not just because of its effect on security. Only Adobe makes software that can handle all the Flash applets out there, and anytime there is only a single supplier, the incentives to make things better for customers aren't there. Adobe has been pretty nice with Flash, considering.
Comment: Re:The vulnerability (Score 1) 355
Seems to me there _is_ an easy fix: disable that behavior by default (why would you want it, anyway?). Then, for sites that are broken by it, allow it to be selectively enabled.
Of course, the fact that Adobe isn't fixing it and we aren't allowed to fix it nicely illustrates why having the whole world depend on a piece of proprietary software is a bad idea at least from a security point of view.