Forgot your password?

typodupeerror

Comment: Rossi's big blue box (Score 1) 292

by WaffleMonster (#43804607) Attached to: A Cold Look at Cold Fusion Claims: Why E-Cat Looks Like a Hoax

Didn't someone find the shipping container Rossi built his million dollar MW cold fusion plant supposedly delivered to the undisclosed super secret millitary customer actually collecting dust in the back of his brothers tire shop?

And years prior didn't Rossi get in trouble and nearly go to jail for a waste to oil scam that didn't work and ended with his lab burning to the ground?

Now we have lockheed claiming to bring a cheap shipping container sized hot fusion reactor online within the next decade. It is very sad to see such little real money going into commercially viable fusion energy research compared with enormous sums spent on defense dept end-runs around NPT obligations (e.g. NIF)

Comment: Why stop at XMPP? (Score 1) 407

by WaffleMonster (#43778281) Attached to: Google Drops XMPP Support

Apparently google is quickly striving to catch up to AOL having not received the walled garden memo some 20 years ago.

Come on google... don't be stuck in the past.. throw away your crufty ole legacy support for POP3, IMAP and acceptance of SMTP messages from the few third party domains who dare not use gmail. It will be great.

Comment: Live in fear good citizen (Score 1) 101

by WaffleMonster (#43759855) Attached to: Cell Phones As a Dirty Bomb Detection Network

There have been andriod apps in the market place for years converting your phones cmos camera into a real life working decently accurate geiger counter easily able to pick up background. If you go looking take care to avoid the joke apps.

While this is all really cool and interesting mcgivering of technology dirty bombs don't actually exist because they are pointless.

Comment: TLS vee1.1 and 1.2 (Score 1) 106

Now that your delaying third party cookies hows about using the extra time to add support for new versions of TLS? Why is IE the only browser supporting TLS v1.1 and 1.2? Even chrome supports 1.1 and it uses NSS too.

We are still dealing with a few lazy nessus wielding compliance jackasses invoking BEAST to get EVERYONE to use broken RC4 ciphers because a few users still have not updated their browsers to fix a known problem solved over a decade ago.

It would be nice to one day be in a position to start to get everyone off TLS 1.0.

Comment: Re:So... (Score 3, Informative) 55

I was semi-joking; but it is actually a serious question. (To the best of my understanding) a quantum-encrypted network provides rock-solid assurance that nobody is physically tapping your lines.

All quantum crypto gives you is one time pad material that cannot be derived from previous communications.

For example say you are able to record all classical communication between parties. If at some point in the future you are able to somehow compromise the initial encryption key you would be able to go back and decrypt any communications using this key and rotated keys based on the initial key or descendants of said keys if communicated within intercepted channel after the fact.

With quantum crypto there is no longer a physical linkage possible because pad data is guaranteed to be knowable to exactly two parties.

There is still very much a real classical problem in that you need to establish a trust relationship between yourself and your communication partner to have any assurance as to which party you are actually OTPing in quantum world...This is always done using an initial classical key to protect against Active MITM of the quantum channel.

While I appreciate the value in this scheme in the real world I do wonder what the actual benefit is for things like electric grid control cited in their paper where forward secrecy has very little value to begin with.

While it is true that a compromised key could not in theory be used for long....if you already had the ability to compromise current key you could then also perform an undetectable active MITM against the quantum communication channel and from then on be privy to all new OTP/key refreshes.

Any of us can exchange data over the Internet with the same level of assurances as the best fancy quantum gear...All you need to do is exchange OTP data offline (SD card filled with a few GB of random garbage) and you are set for a very long time of guaranteed intercept free communication. Years worth of voice chatter..lifetimes worth of text messages or short control messages all for small fractiones of pennies on the dollar. Sure it does not scale but no trust relationships ever really meaningfully do.

As with the quantum gear your vulnerability is and always shall be compromise of that which hold trust/keys.

Comment: Re:It's like deja vu all over again (Score 1) 786

by WaffleMonster (#43645421) Attached to: Microsoft's "New Coke" Moment?

Many of Microsoft's 'failures' are the result of doing something new. And then when the 'improved' version comes out, it can be quite a hit.

Windows 8 is a fundementally different equation. It is not about improving a product or trying something new it is about twisting arms for selfish reasons.

Vista - flop
Vista SE (Win 7) - big success

The core problem was people simply did not have enough ram for vista without their machines swaping like crazy. Win 7 made several improvements... bulk of which were realitivly simple changes shifting vista service sprawl from service hosts to a much more capable task scheduler while concurrently dram costs continued to fall like a rock.

Windows 98 SE - pretty good
Windows 98 SE 2 (Win Me) - "Hey, people will forget about this once Vista comes out"

I remember feeling sorry for those who did not get the NT memo during Win 9x era. They all sucked 95,98,ME /w only marginally different/abysmal results between them.

Windows 8 - Works pretty good, but people bitch about the UI
Windows 8 SE (Blue?) - Hey, Metro apps are cool now. Maybe

No secret a lot of users only own a PC for email/web/facebook a reality that has been building for two decades and now people finally have other options. Good for them if they are happy with windowless UIs and locked down vendor controlled appstores.

For the rest of us metro is basically dos era desqview all over again. Total batshit insanity. Complete waste of time and high resolution monitors. When MS throws US under their Apple chasing bus I hope they understand our server and backend licenses are going with.

Comment: Re:Please! (Score 1) 621

Either this is true and so secret even most of law enforcement doesn't have access or it simply isn't true. Having run a large enough telecom operation to deal with CALEA I can say for sure that law enforcement very much needed our help to do anything with our customers' communications. Not only did they need to come to us with proper warrants in the first place, but they barely had enough technology sense to be able to do anything with it. Anything more complicated than taps and CDRs never even came up.

Just cause one TLA has a capability does not mean they would be willing to piss away such capabilities by revealing it to you or LEAs conducting an ordinary investigation.

I am not taking a position on whether Mr. Clementes claims are true or not only this specific line of argument is unsound.

To put it another way who knew we had stealth helos b4 binladen raid? After? See what happens when you use a plausibly deniable capability?

"And do you think (fop that I am) that I could be the Scarlet Pumpernickel?" -- Looney Tunes, The Scarlet Pumpernickel (1950, Chuck Jones)

Working...