Forgot your password?

typodupeerror

Comment: Re:Seems to me (Score 1) 409

Isn't water vapor attributed to solar energy orders of magnitude more mass than water vapor output by combustion of fossil fuel?

The state of Florida is pretty damn humid, and I don't think it's from all the golf carts.

I don't dispute that water vapor is indeed a greenhouse gas which holds a lot of heat, but it seems like it's mostly created by the sun, or perhaps a city full of air conditioners (which act as condensers).

Comment: Re:Please no... (Score 4, Insightful) 264

by psyclone (#38356496) Attached to: Internet Explorer Users Have Low Risk Intelligence

If she is using NoScript in a "medium" security manner -- meaning temporarily trust the parent domain of the site, but only whitelist external scripts (which means a fair amount of clicking "Temp allow akami / googleapis / disqus / some-image-service / etc") then that is MUCH better than Chome. Even NoScript in a "low" security method that temp-allows all scripts on a page but still blocks XSS, ClearClick, and anything else you choose like Java applets and iframes is still better than allowing all javascript and all plugins.

On the privacy front, try BetterPrivacy (never touch it after first time config) to flush all local Flash storage on browser start+stop. (You can of course whitelist LSOs from your bank or whatever.) Additionally, try CookieMonster in whitelist-only mode. It's just like NoScript, but for cookies so you can permanently allow all the sites she logs into, and temp allow any random page with a form.

Even just trying some extra plugins or stronger security settings will help everyone think more about security as they're learning more about security.

Comment: AnonymousCoward.XXX ? Don't count on it. (Score 1) 140

by psyclone (#37332530) Attached to: .XXX Domain Registrations Begins

These are the current requirements for getting a working .xxx domain in either Sunrise or Landrush. (No mention of open registration once landrush is over, but the requirements will probably be the same.

Sponsored Community Validation Process:

      1. Person/company submits an application for a name in Sunrise A or Landrush with their registrar of choice — they pay their registrar directly for that.
      2. ICM sends the person/company an introduction email that includes a validation link — to the Registrant Contact email address provided with their application.
      3. The person/company clicks on the validation link in the ICM email and is directed to the ICM Membership Application.
      4. The person/company fills out the ICM Membership Application — free of charge. (Takes about 5 minutes to complete — only have to do this one time per email account, not per domain.)
      5. As a part of ICM's Membership Application, the person has to provide the following:
                  1. Address
                  2. Phone Number
      6. As a part of ICM's Membership Application, the person has to attest to the following:
                  1. Provide correct birth date information
                  2. Agree to ICM's Registry-Registrant Agreement
                  3. Attest to being a member of the Sponsored Community
      7. ICM will call the phone number provided during the Membership Application.
      8. In that phone call, ICM will provide the person with a PIN # (real time) and the applicant will input the PIN# in the designated area in the Membership Application process.
      9. Once the person completes the Membership Application, ICM provides the registrar a Membership Token thus allowing all of the .xxx domain names associated with that email account to resolve.

Comment: Re:Real Soon Now (Score 4, Insightful) 252

by psyclone (#37270596) Attached to: I have started Q businesses, where Q = ...

That's the opposite of what you should be thinking. NOW is the best time to start a business, to get all the early "business building" crap out of the way so when the economy does begin growing again, your business is in a good position to grow along with it.

If you wait until the roller coaster has started climbing, you'll be left on the platform and not in a seat.

Comment: DNSSEC bad idea for total cert trust (Score 1) 229

by psyclone (#37254672) Attached to: Another CA Issues False Certificates To Iran

Each ccTLD operator is not necessarily limited to just the domains under that ccTLD. If China maintains a root server, and they have the private keys for the root, they can then sign their own .com keys, and then sign domains under .com. (And even if they only have the .cn private keys, and SSL trust was solely implemented in DNSSEC, now you can't trust your SSL connection to any .cn domain!)

Using DNSSEC for publishing certs and extra identity information is a cool idea, but it's not a good idea to replace all other trust mechanisms. Granted, the current CA model is broken, but there are good ideas out there for distributed models where we don't have to trust governments.

Marlinspike makes some good points here.

"I think it is true for all _n. I was just playing it safe with _n >= 3 because I couldn't remember the proof." -- Baker, Pure Math 351a

Working...