Forgot your password?

typodupeerror

Comment: Re:Too expensive? (Score 1) 229

by wkk2 (#40170733) Attached to: Ask Slashdot: Equipping a Company With Secure Android Phones?

I suspect that no off the shelf product is secure from the network side. The hardware needs to have two independent blocks: a communications module and a application module. The two need to be linked with a well defined API so that the communications module can't change the application code and there is a good point for an audit. There are probably regulatory issues like GPS to emergency services, not being able to hang up an emergency call, etc. You need to be able to load the application code from a secure interface with signed code etc. A smart card slot for application module key material would be a plus. Good luck trying to find one and good luck getting approval to sell one with these features.

Comment: More privacy issues (Score 1) 234

by wkk2 (#38226976) Attached to: Carrier IQ Software May Be in iOS, Too

There appears to be more privacy issues beyond monitoring in the phone. My Smartphone (GT-I9100 v.2.3.4) won't allow access to https://www.google.com./ It also doesn't allow the addition of private certificate authorities or the removal of bad ones. To make matters worse, it won't display the fingerprint of a certificate. So the only option is to accept, on faith, the issuer name displayed. It seems obvious that the handset makers don't care about privacy or potential harm to customers.

Comment: Re:The scam will always win -- its all about the s (Score 1) 243

by wkk2 (#37011006) Attached to: Ask Slashdot: Does SSL Validation Matter?

A big improvement would be to require e-commerce servers to protect their private key in a hardware accelerator that won't give up the key. This would protect the certificate if the server is compromised. Someone might be able to use the accelerator, via some type of proxy hack, but the certificate would be safe after a compromised server is reloaded.

Maybe the "scam" factor could be reduced if the certificates were signed by two or more entities in different jurisdctions.

Comment: Re:Dear Customers... (Score 1) 219

by wkk2 (#36362124) Attached to: RSA Admits SecurID Tokens Have Been Compromised
Yes, I'm sure we will never find out if the data was given to various agencies. After carefully opening one, I agree that they are tamper evident. It wouldn't be a big step to have two pins (I2C?) for programming from a simple workstation that also loaded the customer's server. A fuse link or finalize command could prevent future changes. I would hope the programming could be idiot proof but they keep making better idiots.

Comment: I hope it is a good design (Score 4, Insightful) 374

by wkk2 (#36088764) Attached to: Cellphones Get Government Chips For Disaster Alert

The messages need to be digitally signed or we are going to get spam claiming to be from the president. It also needs to be better designed than weather radios. For example, I can turn off thunderstorm watch alerts but not tornado watch alerts. I might understand requiring warnings but not watches. It cries wolf, in the middle of hot muggy nights, so often it gets turned off.

Comment: Re:Switch Batteries? (Score 1) 122

by wkk2 (#35918534) Attached to: EV Fast-Charging Standards In Flux

I was thinking about troubles with evacuation from some place like the Florida Keys with a long highway. All lanes are switched to North so it would be difficult to get extra batteries. Even a seasonal thing like lots of people going South for Spring break would cause inventory problems.

It's probably hard to compete with the cost of piping fuel to storage tanks near distribution centers vs. the investment in battery packs.

I sure hope we can get charging stations everywhere. I'm not very hopeful since utilities are slow at upgrading major transmission lines no less what would be needed for fast charging in homes. I think we are on the edge of major problems without EVs. During hot weather I see 105 V and last night I saw 130 V. The regulation won't get better without lots of investment. We probably need rules that require higher power capacity for new construction (fiber too).

"There are some good people in it, but the orchestra as a whole is equivalent to a gang bent on destruction." -- John Cage, composer

Working...