Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror

Comment Re:Less demand (Score 1) 269

No. Ever since that disaster (2 years ago?), prices decreased but they never returned to normal. It just seems like manufacturers never let the prices return to their normal rates after being forced to hike them up due to the floods. It's almost like they were given a second chance at re-pricing their goods after knowing what consumers were willing to pay.

Comment Re:optical disks still cost less then usb keys in (Score 1) 269

As fatalexe said:

I switched to using USB drives to install the OS of a computer a long time ago. You can even keep them up to date with OS patches unlike burnt disks. Usually installs faster too.

I recently used a USB drive as a boot-only type device to pull up the install screen, then installed all of the ports and packages over my network.

Comment Re:Shouldn't trust the host computer AT ALL (Score 3, Informative) 252

You are incorrect. FIPS validated products cannot use the password for key generation. Instead, they must use a random number generator to create the AES key (eg 256-bit key). They password is used to gain access to the key. So a short password can be used, yet you still get 256 bit encryption. As long as brute force password protection counter is also implemented in hardware and cannot be rolled back, you do not need very long passwords (eg. set a 3 try limit). Also, you should encrypt the random AES key with a SHA-256 hash of the password, so that the key isn't stored in the clear anywhere.

Comment Re:IronKey? (Score 5, Informative) 252

IronKey D200 and S200 models are validated to the much more demanding FIPS 140-2 Level 3. The products that are the subject of this hack are validated to Level 2. They are all in fact manufactured by SanDisk. Previous authors are correct, their architecture has serious design flaws. They are relying on the host PC to do password verification, and essentially using a static code to tell the device to unlock. Basically it's a back door to all of those affected SanDisk, Kingston and Verbatim devices. I will be posting an FAQ later today on the https://www.ironkey.com/ website describing the flaws and how IronKey's architecture does not have these issues. IronKey validates all passwords in hardware. We have password replay prevention and encrypted USB command channels. We also use a hash of the password to decrypt the data AES key, so it's cryptographically impossible to unlock an IronKey without the password. Finally, IronKeys store encryption keys and brute force counters in a hardened CryptoChip. The SanDisk, Kingston and Verbatim products store them in Flash memory, which isn't even part of their FIPS 140-2 security policy. Dave

Comment Re:X-Wing vs Tie Fighter (Score 1) 1120

SWBFII is the closest recent game with space combat but it isn't a "space sim" like XvT or XWA. Myself and many other people have been trying to get LAG to publish a new "space sim" for a few years but apparently most people don't want to play games that involve joysticks these days.

Slashdot Top Deals

"In my opinion, Richard Stallman wouldn't recognise terrorism if it came up and bit him on his Internet." -- Ross M. Greenberg

Working...