Follow Slashdot stories on Twitter

 



Forgot your password?
typodupeerror
DEAL: For $25 - Add A Second Phone Number To Your Smartphone for life! Use promo code SLASHDOT25. Also, Slashdot's Facebook page has a chat bot now. Message it for stories and more. Check out the new SourceForge HTML5 internet speed test! ×

Comment Re:There are 900 .com registrars (Score 1) 77

Right, but if Verisign allows any registrar to update DS records for any domain, and not just the ones they're individually responsible for, then a registrar other than your own could push a malicious DS record for your domain into the TLD where it would be duly signed by Verisign, and you're back to trusting 900 separate registrars rather than just your own authorized registrar and Verisign. The TLD should only allow one registrar to update any given domain.

Comment RPG will take that out in a heartbeat. (Score 2) 174

The police wants to escalate to that level, Then the Unrest will also.

Cops with full battle armor are a danger to society, it means the ones that think they need to defend themselves from the police will up their game to a 308 high power hunting rifle that will rip through Military armor like butter, or start using Armor piercing 5.56/7.62 home made rounds.

Want to keep a crowd calm, you don't freaking roll in like storm troopers hell bent on extermination.

In he countries it's built in, RPG's are not hard to come by, hell even a home made IED would take that thing out.

Comment Re:There are 900 .com registrars (Score 1) 77

There are 900 registrars handling .com, any of which can issue a transfer and change the root DNS servers for any .com domain.

So they don't keep track of which registrars are responsible for which domains? That does seem a bit messed up, if true. My impression was that there was a formal process registrars had to go through to transfer control over a domain name—or does that only restrict domain owners, and not registrars? If the control over .com domains is really as chaotic as you say then that is a separate issue that ought to be addressed independent of DANE or DNSSEC.

Even so, DANE still gives you the benefit of domain validation without the need to deal with a traditional CA as well as your DNSSEC trust chain. You also have the option of choosing a TLD with saner access controls than simply granting 900 separate entities global write access.

Comment Re:"Signed all the way". That's just a different C (Score 1) 77

You still have CA, you've just decided that the CA needs to be the same people who run DNS, because ... well no good reason that I can think of. What does that gain you?

First, this is for Domain Validation certificates only. The normal CA process would still apply if you wanted an EV certificate—though you could restrict your domain to a specific EV certificate for additional security.

If someone has control over your domain records they can already obtain a DV certificate for your domain from just about any CA by redirecting the domain to their own servers. What DANE buys you is all the security you would get with Domain Validation minus the need to deal with two different CAs, one for DNSSEC and another for TLS.

As a bonus, with DANE records for a site "example.com." there are only three entities you need to trust: the domain administrator for "example.com.", the registrar for "com.", and the root authority. In the traditional CA system any CA can issue a certificate for any domain, so you're forced to trust dozens (if not hundreds) of CAs both to maintain the security of their signing keys and to refrain from issuing an unauthorized certificate for your domain. A breach at any one of those CAs can compromise the security of your site.

Comment Re:Here's the actual problem, (Score 1) 191

I've lived as an immigrant and guest worker for much of my life, and I've always understood that immigration is a privilege, that as an immigrant I do not have most of the rights of citizens, and that until I become a citizen, I can be asked to leave at any time.

You're selling yourself short. Your rights are not defined by the government's whims. You have just as much right to be here as anyone born within the geopolitical boundaries of the United States. Anyone who tries to claim otherwise (including the U.S. government) is infringing on your natural rights as a sentient being.

Comment Re:Conflict of interest (Score 1) 254

But then the police here think they need Tanks, M16A4 fully automatic weapons, drones, bombers, orbital strike platforms......

When in reality, 90% of the police can barely handle a small caliber pistol safely, and they are so poorly trained they are not much better than a roaming gang of thugs.

Comment Re:Conflict of interest (Score 3, Insightful) 254

easy solution, raise the taxes. if your taxes are not high enough to pay for Fire,Police and road maintenance then you should absolutely pay more.
If your taxes are not being used for that but instead, holiday decorations, more pay for someone to choose to buy more decorations then it's time to start voting for officials more wisely.

Yes, Yes, I know the irony of an American saying to vote more wisely to another country.... I'm not happy with our Toddler in Chief, but then he is not much different than the ones we have in congress and local government all over here. Recently in my home town we had one of the commissioners demand that a law be passed so that anyone in government can not be criticized or go to jail.

It seems that we either elect very evil people, or stupid ones that have never read the constitution. From my experience, it's the latter, only the dumb want to be in political office.

Comment Re:It won't matter (Score 1) 242

After I switched out the cartridges, I shipped the empty cartridge back in the same box as I got the new cartridge, print out a shipping label and drop it off at the post office. Hence, I "rented" the cartridge and kept the ink.

You're not renting the cartridge; it belongs to you. You may or may not get a credit towards the purchase of a new cartridge if you return your old one for recycling, but there is no penalty for simply keeping it. If you were renting the cartridge you would be obligated to return it eventually, whether or not you wanted a new one.

There are cases where the container for a consumable really is rented; for example, if you need a small quantity of liquid nitrogen you'll generally want to rent a dewar to carry it rather than buying your own. (Liquid nitrogen is relatively cheap, on its own, but the dewars start at several hundred dollars.)

Slashdot Top Deals

You may call me by my name, Wirth, or by my value, Worth. - Nicklaus Wirth

Working...