Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×

Comment My real-world impression (Score 2) 260

First test - some python (scikit-learn&pandas&mathplotlib) notebook doing a grid search:
- i7-Macbook = 5min 37 seconds
- M1-Macbook = 1min 57 seconds (!)

Second test - side by side Teams call - ±2hours
- i7-Macbook = battery down to 45% - hot case and cpu
- M1-Macbook = battery down 10% - dead cold

It's not a benchmark. It's just real life.

Submission + - Does domain name encryption increase users' privacy? (acm.org)

An anonymous reader writes: After the Chinese Government started blocking TLS1.3 — I bumped into this very recent paper where authors shows that even with encryption, it is quite simple to find which website you are browsing just by using packet sizes, inter arrival times, and connection lengths. What can one do to avoid this?
Here is the abstract of the paper.
"Knowing domain names associated with traffic allows eavesdroppers to profile users without accessing packet payloads. Encrypting domain names transiting the network is, therefore, a key step to increase network confidentiality. Latest efforts include encrypting the TLS Server Name Indication (eSNI extension) and encrypting DNS traffic, with DNS over HTTPS (DoH) representing a prominent proposal. In this paper, we show that an attacker able to observe users' traffic relying on plain-text DNS can uncover the domain names of users relying on eSNI or DoH. By relying on large-scale network traces, we show that simplistic features and off-the-shelf machine learning models are sufficient to achieve surprisingly high precision and recall when recovering encrypted domain names. The triviality of the attack calls for further actions to protect privacy, in particular considering transient scenarios in which only a fraction of users will adopt these new privacy-enhancing technologies."
Here is a full version of the paper

Comment Listening to noise is cheaper and more effective (Score 1) 119

What’s the difference of getting close to your house and listening for noise coming from inside? It’s even much more effective - since you don’t need to bring you laptop and try to grab the correct WiFi signal. BTW - the solution is plug your camera to a Ethernet cable. Or upload the content on the cloud at random time. Come on - guys this is ridiculously obvious... science should be something different from making noise on the web with news like this one.

Comment Why google dns should be better than my ISP dns? (Score 1) 104

My campus network runs a dns server. I trust it more than googleâ(TM)s for sure. My isp, that I PAY, run a dns server. I trust it more than googleâ(TM)s. My mobile provider, which I PAY, run a solid dns service. I trust it more than googleâ(TM)s one. Lucky Iâ(TM)m using safari... so I donâ(TM)t care. But this move is really fishing...

Comment What about tracker blockers? (Score 1) 95

In case you are interested, other researchers have compared popular tracker blockers in a recent paper titled "Benchmark and Comparison of Tracker-blockers: Should You Trust Them?". Results shows that your mileage may vary, with some plugins performing overall quite poorly. Here is the link to the conference program and here the PDF of the paper.

Submission + - Comparison of Tracker-blockers: Should You Trust Them?

fasuin writes: Researchers from Politecnico di Torino in Italy, and Ermes Cyber Security — a startup working in the privacy preserving area — have tested 7 AD blocker and privacy preserving plugins. The results, presented in the paper at the IEEE/IFIP TMA Conference, show that they improve privacy protection of users, but are not able (or do not want) to block all web tracking services. Ghostery and Ublock are among the best performing, while PrivacyBadger and AdBlockPlus offer somehow disappointing results.
The measurement campaign also unveiled that most of websites actually do not respect the EU Cookie Law, which imposes website to ask users’ explicit consent before installing profiling cookies or contacting any web tracking service.

Comment Re:Yes (Score 1) 238

If you mind reading the paper, or checking the slides, they say that "according to Internet Watch Foundation Blacklist, only 5% of their entries is based on pure domain or subdomain"... Now how to impose parental control of www.facebook.com/mypornpage?

Submission + - The cost of HTTPS

An anonymous reader writes: Researchers from CMU, Telefonica, and Politecnico di Torino have presented a paper at ACM CoNEXT that quantifies the cost of the “S” in HTTPS. The study shows that today major players are embracing end-to-end encryption, so that about 50% of web traffic is carried by HTTPS. This is a nice testament to the feasibility of having a fully encrypted web.
The paper pinpoints also the cost of encryption, that manifests itself through increases in the page loading time that go above 50%, and possible increase in battery usage.
However, the major loss due to the “S” is the inability to offer any in-network value added services, that are offered by middle-boxes, such as caching, proxying, firewalling, parental control, etc.
Are we ready to accept it?
Presentation can be downloaded from here

Submission + - Cloud Storage Comparison

fasuin writes: Which is the most advanced cloud storage solution? Which is the impact of server locations? What are the benefits of advanced techniques to optimise data transfers? Researchers from Italy and The Netherlands have come out with a set of benchmarks that allowed them to compare Dropbox, CloudDrive, SkyDrive and GoogleDrive. Which is the best? You can check it by yourself by running the tests on your own if you like.

Comment STOP measuring jitter, packet loss, upload speed! (Score -1, Troll) 47

How the hell we are still "measuring" throughput, packet loss and RTT in 2011???? My wife want to know if she can "WATCH YOUTUBE" , "SEND A PICTURE VIA EMAIL", "PLAY HER FAVORITE SHOW ON TV". It's like the PC. People don't care about how many GHz, GB, Mcolors the box has. They care about what they can do... It's like for cars: who's interested in checking the engine, knowing which brakes and knowing the maximum speed... It's really time to get rid of this sticky measures...

Slashdot Top Deals

"It may be that our role on this planet is not to worship God but to create him." -Arthur C. Clarke

Working...