Forgot your password?

typodupeerror

Comment: Beat the Beatings: Have a fake parition... (Score 1) 467

by jlcooke (#33634852) Attached to: Distinguishing Encrypted Data From Random Data?

Just as with your laptop. Create a fake login.

So when someone beats you with a phone book or a tirewrench, you can say "the login is jdoe, password 123!" and they'll login and see your not so important files. When actually your login is janedoe password abc.

Same applies with encrypted partitions in your setup. Have a partition A at index N and a partition B at index M. A,N is the fake one, complete with files recently modified (.bashrc and cron will help with that). And B,M is your normal secure parition.

Comment: Password in clear-text (Score 1) 180

by jlcooke (#28756057) Attached to: Is Battery-Free 2-Factor ID Secure?

The system is no better than having a normal credit card CVV.

The LCD-like half-images are the secret. Take a photo of that and you're totally compromised.

The battery systems (like RSA SecurID) are better because they protect the secret inside the deviceand only give a derived value every 60 seconds.

Nice try however.

Comment: Re:Too good to be true... maybe? (Score 1) 188

by jlcooke (#28057831) Attached to: Plastic and Fuel That Grow On Trees

This news is actually over 50 years old.

Pop reference you can check out: "It's a Wonder Life" - the flash-back scene where the lead charactor's friend tells me "there's a great investment oppertunity with Soy farmers, they're going to make plastics!" - or something like that.

Mr Tupper (Tupperware fame) made it big by using fuel refinement waste to make plastics - there by removing the bottleneck of growing Soy.

Comment: Something like this perhaps (Score 1) 522

by jlcooke (#27508747) Attached to: Why the CAPTCHA Approach Is Doomed

The key is to make the bots/spammers use more resources then they have.

Something like this can be used to slow down email address scanning bots.

Like sending email with hashcash, if you make the scammers work to get the right answer by requiring to compute a computationally complex formula (crypto function random walk distinguished points), they will not be able to keep up.

A website can pre-compute a table of (and continuously add to that table) challange-responses that a visitor must perform. A human will see a 5-15 second delay to registration, to a bot this can be intolorable.

Earth

Earth Hour: Nothing saved-> 1

Submitted by
jlcooke
jlcooke writes "Not news to many. But Earth Hour doesn't save squat. Here's a URL that uses PHP/GoogleGadgets/JavaScript/CronJobs to present historical graphs of published electrical generation data for the province of Ontario. jlcooke.ca/ieso Electrical consumption drops during Earth Hour, but generation does not. Think about it — if you ran a generating station that burns hamsters to boil water to spin a turbine to produce electricity — would you turn it off for 1 hour? How long would it take to get it back up to full power? The problem with Earth Hour is in the name — it's only an hour."
Link to Original Source

Comment: Look at older projects (Score 1) 188

by jlcooke (#27064945) Attached to: Collaborative Map-Reduce In the Browser

http://it.slashdot.org/article.pl?sid=03/12/31/2246241&tid=93

MD5CRK used a JavaApplet that used this Chinese Lottery concept. The applet performed 95% as fast as a pure C implementation of MD5. JavaScript is another matter however. And an assebly code that inlieved MMX/SSE with ALU was much faster.

Background threads in browsers will help of course.

Security

Large webhost hacked, malware redirection sneak

Submitted by
Jean-Luc Cooke
Jean-Luc Cooke writes "The large (and largely mismanaged) ecommerce.com (aka. opentransfer.com, etc) has some web servers hacked. In a cleaver way of not getting detected, it only affects users that visit those sites from a search engine. If the Referer HTTP header contains google or some other popular search engine names, then you get redirected to a malware install site. Try it yourself: search for "Delicious Alternatives" on google, click the first link. Some telnet experiments will confirm the trigger is in the HTTP header."

"Everyone is entitled to an *informed* opinion." -- Harlan Ellison

Working...