Catch up on stories from the past week (and beyond) at the Slashdot story archive

 



Forgot your password?
typodupeerror

Comment Re: iPhone Unavailable - try again in 1 minute (Score 2) 48

I realize not reading the article is something of a /. tradition, but I've literally quoted part of the summary where they're pretending that nothing is done to mitigate brute-force attacks (which as you rightfully pointed out, has been recognized as threat for as long as there has been an infosec industry).

I wouldn't be wearing my captain obvious hat if the article hasn't pretended that brute force attacks are some kind of scary new threat, of which there is absolutely no defense besides making your password contain a minimum of one each of the following attribute:

An uppercase letter
A lowercase letter
A special character
Your favorite emoji
A DNA sample from your pet
A short essay on whether you think streaming services are fairly priced
Cannot reuse a previously used password

Comment iPhone Unavailable - try again in 1 minute (Score 1) 48

They could just spray a list of known passwords at an authentication API and secure a quick win.

This is why anyone with half a brain rate limits failed password attempts and then locks the account after too many failures. If your code allows an attacker to just hammer the authentication API, you suck as a programmer and should feel bad.

Comment Re: You're preaching to the choir (Score 0) 33

This statement was cute, even funny, the first few times that it was used. That was because it was such an absurd way of making that point.

That statement was stupid, even absurd the first times that it was used — by the Reich wing. The entire reason I'm still using it when speaking to them is to rub their noses in how fucking stupid it was.

But, after this statement has been repeated so many times, it's just fucking stupid now.

You're two steps behind me as usual, but at least you're getting there.

You should consider abandoning it before people start thinking that you are stupid.

Insert Travolta looking around meme here. This is me, looking for fucks.

Comment Re:Good, but... (Score 2) 43

Yeah it's a real mess we've made, easier just to disallow it from vehicles altogether than fix that quandary, if companies want it that bad they can offer it as a physical addition to the car, it can contain the data collection and transmitting systems and the customer can pay or be paid appropriately for it, just like insurance companies offered.

I'm open to the idea companies find value in that data, if my personal goings on is worth something I would like the option to sell that if someone is paying but we should have control over that information. Let me access my global advertising profile, hell, I'll keep it up to date with my preferences.

Comment Re: You're preaching to the choir (Score 0) 33

rsilvergun has been screaming even louder about how AI as we have it now it's already the end of the world, and that society isn't "ready" for it until he says it is.

Since he's living rent-free in your head, can we assume you're the one responsible for the rsilvergun-impersonating LLM spam?

Comment Just do a freedom of information request (Score 2, Insightful) 43

I forget which town but one of them immediately removed all the cameras when somebody did a foi request.

You're not going to find out where the billionaires are going because like Steve Jobs used to do they hide their license plates.

But your shitty little Republican mayor who frequents the local gay bar doesn't have the resources to do that. A

Comment Re:Meta ffs (Score 1) 32

Things businesses have to hide from unauthorized access or making public accidentally:

Businesses only need to hide it if they are the data controller or the data processor engaged in confidence. YOUR PUBLIC PROFILE IS NOT THIS. *YOU* chose not to hide it. It is clearly mentioned that your profile is available and shared with others. It's your choice not to include a photo or your name in it.

Comment Re:Meta ffs (Score 1) 32

Uhm, what it's called by everyone else in the tech industry is "personally identifiable information" or PII.

Whether it's personal or not is irrelevant. It is published, by you. When you setup WhatsApp you're explicitly told it'll be available for other's to see. You've explicitly authorised people to view it.

Your name is considered personal information when you enter an agreement to share it in confidence. That's not what happens in public profiles. In other news Phonebooks used to exist, vast databases printed out and delivered to everyone in the city containing the PII of everyone else.

Slashdot Top Deals

Elliptic paraboloids for sale.

Working...