|
|
I think that this improves password usability and is a move to the right direction. Others should follow instead of making passwords even harder for the end users, the most insane counter examples are the websites that mask your username as well. However, there really should be a switch to toggle this behavior.
For me Eclipse with TeXlipse plugin has been the best so far. It can compile the document and any non-obvious errors get marked on the exact place. Using SVN or git is easy too. Furthermore, common syntax and citation keys can be autocompleted, which is nice if you're working with large bibtex databases.
Convergence seems to solve the problem of a government (Iran) placing fake certs in front of their users and decrypting their GMail and FB SSL connections, and what have you. But what if the fake cert is placed much closer to the target website which is being spoofed?
That could be mitigated by having at least one notary running DNSSEC, but then you can't have a consensus, you have to have all notaries agree, and require the DNSSEC one to agree. This would work, but in that case, just use DNSSEC (Which I do
...Or some notaries could use the current CA system. The point is _trust agility_ and that you if you employ these certificate checks as an extra measure, you can not be in a worse situation than with the current CA system. In a nutshell: You don't have to trust CAs, you don't have to trust DNSSEC and you don't have to trust notaries that just compare certificates. But you can choose to trust them if they agree (and even if they don't).
But to use for security? That's as lame as installing anti-virus software because you know your OS can't handle security.
I've said for some time that anti-virus is not security. It is damage control, at best.
Damage control is security at its finest. We do not aim for the theoretically secure and perfect locked-down-restricted-with-airgap situation if implementing that security would be more costly than the damages in case of a compromise.
Quote from article: "The theory is still largely speculation
I fucking hate it when people talk about a hypothesis as a theory. Theory is something that works, generalizable and models the real world accurately. Hypothesis could be something like that, but necessarily isn't.
Old timer, n.: One who remembers when charity was a virtue and not an organization.