Forgot your password?

typodupeerror

Comment: Re:Why? (Score 2) 104

by jonwil (#43783303) Attached to: Hollywood Studios Use DMCA To Censor Pirate Bay Documentary

Actually, legally, if the person who posted the original content submits a valid DMCA counter-notice then the content host (the one originally sent the DMCA take-down notice) can put it back and be legally protected. Its then up to whoever sent the original notice to to file a lawsuit against the uploader if they still believe they have a legitimate case.

IANAL but this is my understanding of the DMCA. Any experts out there feel free to correct me if I am wrong.

Comment: Time to create a truely secure chat client (Score 1) 273

by jonwil (#43726645) Attached to: Microsoft Reads Your Skype Chat Messages

I have an idea for a really secure chat client. It would support all the things Skype does that don't cost money (including voice chat, video chat and file transfers). How I envisage it working is this:
1.When a user installs the program and registers for the service on a given host (there could be multiple separate instances of the server which may or may not communicate for the purposes of allowing users on one to talk to users on another), a public and private key-pair is generated on the local device. The public half is submitted alongside the registration details and the private half never leaves the users device (unless the user e.g. copies it to another device so they can use the program there).
2.When the user logs onto the service, they use their private key to digitally sign a login packet which is verified by the central host (to verify that the user is who they claim to be and making phishing and password-theft much harder).
3.To talk to someone (voice, video, text, file transfer, whatever) the client that wants to initiate the conversation asks the central server for the public key of the other guy. Then that public key is used as part of some sort of key exchange to share an encrypted session key in a way that even someone with a complete packet dump of the network traffic AND the private keys of both people couldn't recover the session key (something like Diffie-Helman would probably work here)
4.All communications between users would be peer-to-peer direct conversations. In cases where direct links are not fesable (such as mobile devices where direct p2p links are not an option) all any relay servers ever see is encrypted data packets.
5.Unless specifically asked by the user to do so, none of the communications are ever stored on any persistent storage medium by the client.
6.At the end of the conversation, the session key is destroyed. (how you define "end of the conversation" in an IM client I dont know but certainly ending a video or voice session would count, as would closing the client)
7.The client would cache public keys from users and warn if the cached key and the one the server has are different (thus helping detect if the central server has been compromised by someone)

Assuming the client is implemented properly and the crypto is good (and hasn't been cracked) then this should be highly resistant to eavesdropping.
The protocol would be 100% documented and open.
The client (and there would ideally be multiple implementations to ensure against someone inserting a back-door) would be open source.

If the session keys and key exchange are done properly (and there are no weaknesses in the key exchange or crypto) then even with the private keys of both parties in the conversation AND a full packet dump of the entire conversation, it would be impossible to recover what was transmitted.

Comment: Re:That's not at all the point (Score 1) 496

by jonwil (#43681293) Attached to: DoD Descends On DEFCAD

The ITAR rules place restrictions on exporting certain things without an export license. One of the things that is restricted are handguns. ITAR also says that exporting blueprints and technical data related to an item requires an export permit in the same way that exporting the item does.

So by publishing blueprints to a handgun on a US-hosted web server without an export license, an ITAR violation has taken place.

Comment: The #1 problem with HTML5 DRM... (Score 1) 320

by jonwil (#43616565) Attached to: RMS Urges W3C To Reject On Principle DRM In HTML5

Is that it is simply replacing one set of binary blobs (Flash, Silverlight and a host of dedicated non-web apps on mobile devices, smart TVs, games console etc) with another set of binary blobs (the content decryption plugins).

It does nothing to make the content work on more browsers (the content decryption plugins still have to be ported to a given OS/browser combination). In fact, if those who create content decryption plugins do browser sniffing to block browsers they dont like (or browsers that contain bugs, vulnerabilities or features that could allow access to the decrypted content) it may reduce the number of choices to view specific content.

It will likely increase the number of DRM solutions out there as different content providers will want their own DRM solutions. (e.g. what Netflix uses may be different to what Google or Microsoft or Hulu or Amazon uses).

Comment: Re:a chemical explosion in a school bathroom is ok (Score 1) 1078

by jonwil (#43611175) Attached to: Florida Teen Expelled and Arrested For Science Experiment

I agree with others posting here that the correct response (given that no-one was hurt, no damage was done and there was no intent to hurt anyone or cause any damage and given that this kid was otherwise a model student and had never done anything wrong before) was NOT to call the cops but to give the kid a week of detentions or maybe a weeks suspension, maybe combined with a stern warning to the kid (and the school as a whole at the next school assembly or something) not to do such things again because people might get hurt.

Comment: Re:Beside the point. (Score 1) 189

by jonwil (#43563275) Attached to: Was Google's Motorola Mobility Acquisition a Mistake?

One big reason for Google to be interested in Motorola is that, at the time Google bought them, Motorola was making a LOT of noise about using its patent portfolio to go against not just Microsoft and Apple but other Android vendors as well. Which would have hurt Android and hurt Google.

Buying Motorola allowed Google to end that threat.

Comment: Re:Mickey's copright must be expiring soon. (Score 1) 142

by jonwil (#43545287) Attached to: House Judiciary Chairman Plans Comprehensive Review of US Copyright Law

The current market capitalization of Disney is over $100 billion. I cant find any specific information on Disney but I would expect that the shareholding of Disney is the same as for many large blue-chip companies where significant chunks are owned by entities (index funds, hedge funds, pension funds and others) who are only interested in the short term share price or the next set of quarterly financial numbers.

Personally I think Google could do well to buy one of the big movie studios. (Warner might make a good target) then use that ownership (and seat on the MPAA and etc) to push for a saner copyright system (e.g. one that doesn't place as many requirements on Google and YouTube to look for, censor or remove illegal content themselves and placing greater burden on the owners of the copyright to carry out the policing)

Comment: Re:And who cares? (Score 1) 447

by jonwil (#43542405) Attached to: What's Actually Wrong With DRM In HTML5?

DRM in HTML5 replaces proprietary, often browser-specific and platform-specific plugins like Flash and Silverlight with proprietary browser-specific and platform-specific content decryption modules (which will likely be even MORE tied to specific browsers and platforms)

At least with Flash, you have a reasonable chance of it working in any web browser that supports whatever plugin API the Flash plugin you have actually needs. With the CDMs, expect to see the people who create them specifically tying the CDMs to browsers (and browser versions) they have verified as "safe" (i.e. unable to be used to steal their precious content). It will likely be HARDER to use the CDM plugins with open-source web browsers than it is now with Flash.

Reunite Gondwondaland!

Working...