Catch up on stories from the past week (and beyond) at the Slashdot story archive

 



Forgot your password?
typodupeerror

Comment Re:Why don't the rest do that? (Score 4, Informative) 22

But if it comes down to either America or China, I would prefer my data was in China, out of reach of the NSA and other US spy and law enforcement agencies.

I don't understand this. As soon as the data goes out of the country, the NSA can capture it with no warrant at all... At least that is how I thought things currently stood.

As far as power, the typical Joe Average can be blackmailed, doxed, and embarrassed.

Comment Re:Good luck recruiting for the movement (Score 2) 76

Unfortunately, that seems to be true.

A recent Money podcast by the Motley Fool said exactly that when talking about Zoom. "I don't care if they monitor what I say. I just care that it works" and the fellow "Fools" on the podcast chimed in with agreement.

It might change when they discover that Zoom (or CCP) has started making their life harder based on what they have heard from the corporate secret Zoom meetings but by that point, it may be too late. And there could easily be so much cognitive dissonance that they never consciously put the facts together.

Comment Re:PIA (Score 1) 159

Revocation has one of two choices. Either you force the revoking query to succeed or not. If you force it to succeed, then the attack is to interfere with that process. As you noted, what most people do is ask but if the revoking query fails, they go ahead and accept the certificate. As one person puts it, this. is like having seat belts in the car but taking them off just before an accident.

The whole system was designed back in 1988 with X.500 and the whole thing needs to be replaced. Until then, the only viable way to use certificates is to have short lifetimes. This isn't my opinion but what I discovered over the course of the past few years. e.g. go look at the Hashicorp Vault documentation.

Comment Actually 1 year may be too long as well (Score 1) 159

There is no real way to revoke a certificate. Thus, certificates are having shorter and shorter lifespans so a compromised certificate becomes dead in a relatively short amount of time. This increases the load on the intermediate and root CAs causing them to need updating more often. The current system goes back to "DAP" X.500 (ca. 1988) which is the parent of LDAP and our certificate system. It was designed when the concept of the internet was vastly different than what we have now.

There are various concepts to replace the whole system but none seem to gaining any favor. This is really what needs to happen.

Comment Re:So... (Score 1) 510

You did, huh, Dr.? That's pretty awesome. Where's the research you're citing?

Go find three "Uncommon Knowledge" videos Dr. Jay Bhattacharaya. And there are others. The "10 x" figure is not new news. Indeed, this has been known indirectly from the very start because one of the original reason for the panic is totally asymptomatic people were being discovered.

Comment Re:Nuclear: Dangers Much Less Than Previously Thou (Score 0) 241

As you point out, the "greens" don't want to actually achieve anything. They just want to destroy.

You mention fraudulent nuclear studies. The entire global climate change is a fraud. Go to the NOAA ftp site, download the various data sets and study it for yourself. You will NOT find why they claim.

Slashdot Top Deals

Money is better than poverty, if only for financial reasons.

Working...