Forgot your password?

typodupeerror

Comment: Skype (Score 4, Interesting) 283

by snowtigger (#43288489) Attached to: Real-Time Gmail Spying a 'Top Priority' For FBI This Year

It's hardly surprising that Skype isn't mentioned. It's widely believed that there are already backdoors in Skype. Skype has "declined to confirm" that there are no backdoors.

From the Wikipedia Skype Security article

Security researchers Biondi and Desclaux have speculated that Skype may have a back door, since Skype sends traffic even when it is turned off and because Skype has taken extreme measures to obfuscate their traffic and functioning of their program.[26] Several media sources have reported that at a meeting about the "Lawful interception of IP based services" held on 25 June 2008, high-ranking but not named officials at the Austrian interior ministry said that they could listen in on Skype conversations without problems. Austrian public broadcasting service ORF, citing minutes from the meeting, have reported that "the Austrian police are able to listen in on Skype connections".[27][28] Skype declined to comment on the reports.[29]

Google

+ - Google Public DNS now supports DNSSEC validation->

Submitted by snowtigger
snowtigger writes "Google’s Public DNS service, behind the well-known 8.8.8.8 and 8.8.4.4 IP addresses, now supports DNSSEC validation. Previously, the service accepted and forwarded DNSSEC-formatted messages but did not perform validation.

Effective deployment of DNSSEC requires action from both DNS resolvers and authoritative name servers. Resolvers, especially those of ISPs and other public resolvers, need to start validating DNS responses. Meanwhile, domain owners have to sign their domains. Today, about 1/3 of top-level domains have been signed, but most second-level domains remain unsigned. From the daily 130 billion DNS queries the service receives, only 7% of queries from the client side are DNSSEC-enabled (about 3% requesting validation and 4% requesting DNSSEC data but no validation) and about 1% of DNS responses from the name server side are signed."

Link to Original Source
Google

+ - Google Maps released on iOS->

Submitted by snowtigger
snowtigger writes "Google just released the Maps for iOS. It’s a sharper looking, vector-based map that loads quickly and provides smooth tilting and rotating of 2D and 3D views. Google also released the Google Maps SDK for iOS, and a simple URL scheme to help developers use Google Maps when building their beautiful and innovative apps. The new Google Maps app is available for the iPhone and iPod Touch (4th gen) iOS 5.1 and higher, in more than 40 countries and 29 languages"
Link to Original Source

Comment: Re:Split your equipment (Score 1) 402

by snowtigger (#39854205) Attached to: Ask Slashdot: Building A Server Rack Into a New Home?

This is exactly what I have and it's a great solution.

In a small 4U network cabinet, you can fit a patch panel and a 24 port switch. That leaves you an extra 2U for other things. I also have a PoE enabled switch and a network server: The SuperMicro 1U Atom servers are small, cheap, energy efficient and quiet. For the switch(es), go for quiet (fanless if possible) and energy efficient. Most switches are made in the same factory in China and from the same components, so it doesn't really matter which brand you choose.

I recently downsized from a 42U to a 21U rack. A 42U rack is was inconvenient and too heavy to handle. Having a smaller rack on wheels is more convenient and 21U is probably more space than you'll need in a home environment if your main purpose is "just for fun". I've got a separate switch in the rack and an uplink connecting the two switches.

Comment: Run your own (more generic open source setup) (Score 1) 193

by snowtigger (#39631399) Attached to: Ask Slashdot: Finding a Trustworthy VPN Service?

I recently set up my own VPN network and wanted a generic solution with access to a number of countries, mainly the US, Canada and the UK. I wanted something that would work naturally with all the devices on my home network, including the Wii, Playstation, etc. The problem with a regular VPN services is that they only give you one country at a time, plus you will probably tunnel more traffic than you want. Your ISP is usually the best route for traffic that doesn't have to originate inside a specific country.

So I've got a number of VPS instances in different countries, all running OpenBSD. These routers are connected with IPsec tunnels. That's not really necessary (ip encapsulation would work just fine) but gets me around national packet sniffing (Australia, I'm looking at you). Then I use OpenBGPD to dynamically announce routes between the routers. Finding out the routes for a provider is easy: just lookup the whois information for an IP number and you get the corresponding CIDR. Add that route to BGP and it's visible across the network in seconds. You also need to forward the appropriate DNS traffic, to get around the load balancing based on originating IP used by some CDNs.

This solution may seem too complicated and overkill, but it works incredibly well. You could of course achieve the same thing by having multiple VPN connections from a single router and add a bunch of static routes. But where's the fun in that?

As an added bonus, it's trivial to set up redundant gateways to the US and load balance traffic between them. This is a natural feature of BGP: if a router goes down, the BGP connection dies and traffic is routed through another path. Since OpenBSD is very light, I only pay for the smallest VPS instances, usually 128MB ram and a tiny bit of cpu for a few $/month per instance.

Comment: Prior art? (Score 1) 247

by snowtigger (#37526418) Attached to: Returning Power From Electric Cars To the Grid

This was discussed on slashdot in 2007:
http://tech.slashdot.org/story/07/07/27/2312257/toyota-unveils-plug-in-hybrid-prius#comments

And it's not a very good idea:
http://www.nytimes.com/2007/09/02/automobiles/02POWER.html
"The V2G potential of Honda’s full hybrid vehicles is unexplored, but the company is doubtful of using them to power homes. “We would not like to see stresses on the battery pack caused by putting it through cycles it wasn’t designed for,” said Chris Naughton, a Honda spokesman. “Instead, they should buy a Honda generator that was made for that purpose.”

Comment: Re:Obstruction of justice (Score 1) 597

by snowtigger (#31949574) Attached to: Seattle Hacker Catches Cops Who Hid Arrest Tapes

It all depends on what you look like and where you are. Technically, you're probably supposed to carry your passport as a foreigner in a ton of countries. But if you stay out of trouble and look like you're there for a reason, you've got nothing to worry about. Countries with lots of tourists don't want to annoy tourists for no reason.

I've travelled and lived in a large number a few countries over the last 15 years, including the US. Let's take the US as an example. If you speak good English, you'll never have a problem, except maybe getting into bars. If you don't speak good English and look like you're from somewhere else, carrying your passport would probably be a good idea.

As someone else pointed out, bringing your foreign driver's license is usually fine. As long as you've got some kind of ID, they can give you the benefit of the doubt.

Comment: Re:Why bother for now? (Score 1) 178

by snowtigger (#31066794) Attached to: Google Shooting For Smartphone Universal Translator

Google is working on a translation system that's based on the massive information they've gathered off the internet. To get an idea of how this works, have a look at the 2009 Google Wave developer presentation. Fast forward to about 1h 12min
http://www.youtube.com/watch?v=v_UyVmITiYQ

In another demo (which I can't find right now) they show how the translation engine understands the context of the conversation.

It's easy to see how this could be applied to a phone call using the right voice recognition software.

Comment: Oh well... (Score 1) 467

by snowtigger (#30883486) Attached to: IPv4 Free Pool Drops Below 10%, 1.0.0.0/8 Allocated

I've been using 1.1.1.1/8 at home for years. It's by far the quickest to type and remember.

I'll probably keep using it for a while, until I need to reach any of those officially allocated addresses in 1/8. Hearing they got allocated in Africa and Latina America is really good news, since I rarely go to African and Latin American websites.

Since we're all here, we must not be all there. -- Bob "Mountain" Beck

Working...