Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×

Comment Actualy, It's correct (Score 3, Informative) 41

I'm assuming you're not trolling, and might be interested in a bit of constructive feedback, so I'll point out that the apostrophe in the sentence starting "Stanley Tucci's not the only one..." indicates a contraction of "Stanley Tucci" and "is" rather than a possessive as you seem to have inferred.

Comment Can't tell time (Score 1) 36

Perhaps even worse, look at the times currently posted on Microsoft's status page:

Start time: Tuesday, March 16, 2021, at 7:15 PM UTC
Next update by: Tuesday, March 16, 2021, at 2:30 AM UTC

Both of those times are currently in the future, and the next update is before the start time, which certainly doesn't lend much credibility to anything else they have to say.

Comment Says the author (Score 4, Informative) 111

But you can still wait a few week for the article to become free.

Why didn't you wait a few weeks to post the article to slashdot? Oh, of course. You're the author, which is a fact you conveniently failed to disclose.

Author(s): Lee Phillips

Self-promotion is one thing, but I think everyone is more that a bit peeved at the irony, which you don't seem to grasp, of posting an article about "door slams asking you to subscribe to a newsletter before viewing a site" when that's exactly what you've done.

Use Express-Checkout link below to read the full article (PDF).
Buy this article as PDF
Express-Checkout as PDF
Price $2.95
(incl. VAT)
Buy Linux Magazine


Honestly, do you think anyone will pay $2.95 for this single article of yours? That's a rhetorical question, although I wouldn't be surprised if someone paid and then copied the entire article here, just to spite you.

Comment It's mostly better (Score 1) 313

It seems they recently (within the past week or so) made it difficult, if not impossible, to post anonymously. There are definitely some serious trade-offs to be considered, but so far I think it's been better overall. I have mod points often enough that I tend to browse at -1, and that's been much less chaotic lately.

Comment Definitions (Score 2) 274

1. If asymptomatic people aren't infectious, then how did this virus spread so far and wide in such a short amount of time?

Their definition of "asymptomatic" is that the person never showed any symptoms. This is distinct from "pre-symptomatic" where the symptoms are not present yet but will eventually be so. The peak time to infect others seems to be sometime before the onset of symptoms, while pre-symptomatic (but not asymptomatic).

Because of the wording, I think this report is unfortunately going to cause a lot of people to think pre-symptomatic people aren't infectious.

Comment Re:Not quite: CNAME not A (Score 1) 24

Would owning partnersite.com allow you to get a new certificate for partner.msn.com?

Yes, for Domain Validation (DV) certificates. Organizational Validation (OV) and Extended Validation (EV) certs require more than just domain control.

For example, Let'sEncrypt (which only issues DV certs) just requires you to show that you control the domain by asking you to place a specific file on a website accessible via your claimed domain name. In this case, you'd simply need to publish a file at http://partner.msn.com/ which is exactly what's made possible here.

You'd think CAs would require proof of ownership through the root domain rather than the subdomain.

That's not how it works. Look at the HTTP-01 challenge process. Note that one of the listed pros of this technique is that it "allows hosting providers to issue certificates for domains CNAMEd to them" meaning it honors the stale CNAME from MS.

Comment Not quite: CNAME not A (Score 5, Informative) 24

This isn't quite correct. MS defines a CNAME record that points to some other domain, somewhere outside of their own domains. Eventually that other domain expires, but the CNAME records to it aren't removed. Now the researcher buys the abandoned domain and sets it to point to any IP address at all. Because browsers and email both honor the CNAME, this IP address will work exactly as if they're within an MS domain. The researcher can then even trivially obtain a DV certificate, because this subdomain is indeed under the researcher's control. Now everything looks valid and secure, but it's actually not at all controlled by MS. All the same-origin and other such policies treat this as a valid MS subdomain.

Comment It still gets worse (Score 1) 83

Its worse than that: They are saying basically, "while we are experts at delivery, we could not make this profitable, hence, we would like you to take all the risk"

It's even worse than THAT: This is nothing new! They offered the same deal last year to the public at large. TFA mentions over 200 businesses have already been created.

Slashdot Top Deals

1 + 1 = 3, for large values of 1.

Working...