Follow Slashdot stories on Twitter


Forgot your password?

Comment: Re:So what will happen in practice? (Score 1) 687

by MulluskO (#30746896) Attached to: Google Hacked, May Pull Out of China

Having the private key and sniffing is (simetimes!) insufficient for breaking TLS. The concept is "perfect forward secrecy."

I wouldn't say that, "SSL isn't all that secure when someone has complete control over your traffic." An adversary with control over your trust store is a problem, particularly because all of the CAs in your trust store can issue certs for any domain.

Comment: It's a GUIDE (Score 2, Informative) 450

by MulluskO (#30179692) Attached to: Microsoft Denies It Built Backdoor Into Windows 7

"Working in partnership with Microsoft and elements of the Department of Defense, NSA leveraged our unique expertise and operational knowledge of system threats and vulnerabilities to enhance Microsoft's operating system security guide without constraining the user to perform their everyday tasks, whether those tasks are being performed in the public or private sector,"

DISA and the NSA produce guides.

They're patting one another on the back because they worked on the guide before Windows 7 was released.

Comment: Windows Steady State (Score 3, Informative) 695

by MulluskO (#28180045) Attached to: Keeping a PC Personal At School?

Here is a real answer:

This is software from Microsoft which helps prevent unpriveleged users from altering your computer in any way. Install this, enable the guest account, and switch users when people ask to borrow your machine. You'll need a password on your account, of course.

Comment: Re:Let's be civil and reasonable in disagreement. (Score 1) 140

by MulluskO (#26249229) Attached to: Cryptol, Language of Cryptography, Now Available To the Public

I don't think nutter is a particularly harsh term. Have you heard him sing?

Java is not a trap. Never was. Something like Java could have contributed to a world in which Linux on the desktop might have been more useful to more people. Java pre-installs on Windows fizzled because of legal issues, and on Linux fizzled because of unfounded fears.

Now the only de-facto universal platform is web+flash. Stallman will tell you that's a trap too.

The degree of technical confidence is inversely proportional to the level of management.