I roll my own Windows builds of Firefox and have been using Win64 versions since before FF4 actually came out; the difference is really minimal; I use 64-bit Flash (square) and Java, everything works and it's native. Currently there is a patch in the works to enable Firefox x64 to use 32bit plugins via the wrapper, which I get the feeling will probably encourage Adobe to not bother releasing a "proper" x64 Flash.

First Slashdot posts a load of crap about how nenolod supposedly cracked the Motorola Android certs (hint: he didn't, it was a troll) and now you're quoting bullshit from some no-name site as gospel, go ask someone who actually works for Mozilla what's actually going to be in Firefox 5 and you'll discover that most of that article is complete and utter wank.

Since when did ElGamal private keys fit into a single tweet? I don't believe for a second that Motorola were using a 240bit key, I call bullshit.

As a non-Hungarian who spends a rather large amount of time in Hungary.

This media law is going to get challenged at the first possible opportunity by someone like Magyar Hírlap and the case will end up being taken to the EU level and Fidesz will quite probably end up in a semi-embarassing climbdown that they will no doubt try to spin in order to save face.

Totalitarian laws are scary only when they have genuine teeth... Hungary as a country does not have these sort of teeth, and this Media law will only descend into debacle in the coming months and years.

Depends if you're talking about the dumb ones that you just provision with something like Gemalto's Card Admin or the ones that you can actually program applications for and write to the card. In any case, EMV smartcards aren't mere "flash drives"

I wrote a Windows software version of the CAP/DPA card readers; entering the PIN does make a difference; the ARQC generated by the smartcard differs if the PIN hasn't been submitted, the same will apply in a DDA transaction carried out at a terminal; the PIN bypass is only truly going to work if the terminal or card only supports SDA, otherwise, the bank's back end can check whether the PIN was issued or not.

Actually that's only true for SDA (Static Data Authentication) smartcards (or terminals incapable of performing DDA) - if the auth process uses DDA then the ARQC generated by the EMV card will be different and the bank will thus know that the card was not issued a PIN. I doubt any of the UK banks are still issuing SDA cards, however, whether a merchant's terminal supports DDA is another issue. In any case, it's a heck of a lot of effort and risk to go to when fraudsters by-and-large can have a much easier time engaging in CNP transactions.

Um, when data is stolen, it's copied, you don't copy it and then delete it, that's going to alert the user that you're collecting information.

depends if the spammer wants control of the account over the long term or simply wants to do a hard and fast smash 'n' grab on the account. In any case, this could easily be mitigated with a captcha or similar.

This essentially comes down to who can kick off the other logins first... the real user or the spam program. My money's on the program.

This is a terrible analogy; they're advertising a rate of download which you will probably not get, nonetheless, whilst whatever you want to download might well take longer than expected, you'll still get your download. So here's an analogy that works; the advertised weight of the chips/burger/whatever is exactly the same, what you're being told is that you can expect to spend 10 minutes consuming it when in reality the only people who are going to spend that long on it are small children; either way you still got your bag of chips, you're just polishing them off faster than you'd expect.