Forgot your password?

typodupeerror

Comment: Re:they'll come in handy... (Score 1) 123

by grahammm (#38916925) Attached to: Next-Gen Spacesuits

How would this work for female astronauts? For males, external catheters and urine collection bags are established technology and could conceivably be incorporated into a close fitting space suit. For a female,. urine collection/recycling in a suit does not seem nearly so straightforward. The collection tube would have to form a permanent (or at least while she is urinating) water-tight seal over her labia otherwise the urine would pool in the suit (or where there is gravity, run down her legs).

Comment: Re:It's time to take a historical approach... (Score 1) 513

by grahammm (#38625314) Attached to: Lawmakers Intent On Approving SOPA, PIPA

And any person putting themselves forward as a candidate for a position of political power is demonstrating that they are unsuited to hold such a position. While there are rare exceptions, in general, politicians should not be trusted to rule a country. They are habitual liars - they do not honour promises made during election campaigns; they are devious - they are masters at avoiding giving answers to direct questions, they often answer a different question to the one which was asked.

Comment: Re:Why so complicated? (Score 1) 62

by grahammm (#38407396) Attached to: New Standard For Issuance of SSL/TLS Certificates

If you go to "mybank.com" and they say "we are mybank.com, trust us,we are who we say we are, here is an encrypted connection, use it to send your bank info", would you proceed? i hope you wont.

Many banks do that when they phone you. They do not present their number and then ask you to answer their security questions (the ones you have to answer when you phone them). Then act surprised if you tell them that as they called you anonymously that they have to first demonstrate that they are calling from the bank and are not scammers attempting to elicit your security details.

If you were presented with a fingerprint on first connection and mybank published its fingerprint 'out of band;' (eg having printed on every paper statement, available (in print) in every branch, etc) then this would give a much greater level of trust. On the other hand this only works well with entities with which you already have a relationship not a "random" web commerce site. Though, with entities such as banks with which you already have a relationship they could provide their X.509 certificate out of band by giving it to you on a CD, USB stick, etc.

Comment: Re:takedown notices are one-sided (Score 1) 157

a statement that, under penalty of perjury, [evil RIAA goon lawyer] is authorized to act for the copyright holder

So as WB were NOT not acting with the authority of the copyright owner, were they not committing perjury? Unlike the other statements quoted, this one does not contain the 'goof faith' clause.

Comment: Re:well managed self-signed certs are safer (Score 1) 152

by grahammm (#37310694) Attached to: Rogue SSL Certs Issued For CIA, MI6, Mossad

It would help if the browsers warned if a site sends a different certificate than the previous time(s) you visited the site. To handle certificate expiry, a certificate could also be accepted if it is signed by the one already held by the browser. That way if someone did set up a MITM attack, anyone who had previously visited the site would be warned that something may be amiss. For the 'popular' sites like Google, facebaook, Amazon etc. it is very likely that a large number of people would have the certificate prior to the setting up of the MITM and the alarm would be quickly raised.

Work expands to fill the time available. -- Cyril Northcote Parkinson, "The Economist", 1955

Working...