Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror

Comment Missed the point (Score 1) 444

Well, how about spending tax money for public schools? Because it matters a lot less if you don't have to cope with tuition fees and other oligarch bullshit.

And while we're at it, how about enacting a decent social and healthcare system, where you don't have to drown in debts just because somebody in your family needed a cure or lost its job?

Comment Break your onw security absolutely (Score 1) 421

If you want backdoors, you undermine your security. And this is asymmetric. Because the security of your hospitals, power plants, electrical grid, communications infrastructure, emergency response, water treatment plants, military(!) and so on, will also be subverted. In contrast, any adversaries probably don't care about infrastructure because they don't run any.

Basically what these morons are saying is "we want to open our whole infrastructure to abuse by criminals, terrorists and other adversaries".

Comment Re:The real problem is having an open discussion (Score 2) 351

Coming from a country with a high percentage of guns per capita, but with a very low homicide rate, I can give you a hint: We have rifles, not handguns. And that is true for most of the countries with similar profiles: Canada, Sweden, Norway, Switzerland, Austria, Iceland, Germany, New Zealand, Finland.

This might not be the reason for less homicides, but there is probably some underlying factor influencing both, homicides and handgun proliferation.

So you might really want to start looking into that: Why do your people want to have handguns?

Comment Using Technology for the Wrong Purpose (Score 1) 189

This is exactly using technology for something it is completely unsuited.

Facial recognition is useful as second or third-factor authentication of a small and clearly defined user base. Like checking the face of a person wanting to pass a security door whilst the same person is in possession of a RFID badge. Not only do you match against a smallish set of people who "shall pass", but against the very small set of people who may pass with that specific RFID badge, exactly one, that is. And in this case, security is immensely increased by facial recognition.

Comment Re: Authentication != identification (Score 1) 161

Facebook etc will not have your fingerprint. There are may different biometric models, but they don't actually store a copy of your fingerprint and then check the whorls against your thumb.

For example, a model may use a hash of key points in the thumbprint and that hash is used in a challenge/response from the server. A model may use the biometrics to generate a derived key or to unlock a local key store.

Any website or OS worth their salt (pun intended) doesn't store your password, they store a salted hash of your password and its the hash you authenticate with, not the actual password. Same concept here.

Comment Re: Four by four (Score 2) 88

The first 6 digits are the BIN range which identify the Card Type (first digit) and Issuing Bank (rest of the BIN). Those are not (by themselves) sensitive. The PCI specification states that the first 6 and last 4 digits of a PAN may be in the clear i.e. 5555 43** **** 3232 and that this has a difficulty of being guesses of 10^6 (due to Luhn check).

As long as the middle 6 are not exposed, then first 6/last 4 isn't a 'huge' concern from a card compromise perspective. It is however, a large risk from a social engineering perspective. An attacker could answer certain security questions and/or pretend to be someone who legitimately has that kind of information and convince people to think they are an appropriate organization to share further information with.

Slashdot Top Deals

Men take only their needs into consideration -- never their abilities. -- Napoleon Bonaparte

Working...