Domain: techdirt.com
Stories and comments across the archive that link to techdirt.com.
Comments · 1,602
-
Wasn't Snowden supposed to be one of the Good Guys(who are supposed to get access), at the time he did get access?
As for "compromise" vs mathematics, the old German adage applies:On partings steep and trouble-bound
doom tends to loom on "middle ground". -
Re:May I be one of the first to day it....
The people chose between Obama and McCain. I don't play the lesser evil game, but for the sake of argument, strictly between these two, which do you think is the better choice in regards to encryption? You will not find what you're looking for with a republican or a democrat, and since most voters do play the lesser evil game, don't expect any improvement.
-
Re:Punishes users and good advertisers
Pretty much.... https://www.techdirt.com/artic...
-
Re:Ads == Malware Delivery and Nuisance Content
Placing the burden on content providers will just push smaller content providers out. I can see no benefit to this.
There should be some burden on the content providers, they need to remember that the whole page is what users draw their impression of the site from. A good site owner would do their best to make sure any ads they do run do not detract from the user experience and are maybe useful to the user. Unfortunately there is many websites that instead slap some content down and then plaster it with ads, not considering the users impression of the site when it is like that. If those types of sites fail because they cannot be bothered to vet their advertisements they deserve everything coming to them.
Furthermore, centralized ad content distributors can do a lot more to combat malware than can smaller content providers.
One of the main pushes behind people installing ad blockers is because the ad content managers failed to combat malware and in fact became a vector for malware infections. A decent antivirus solution running on the sites webservers would have caught that.
-
Re:So the vulnerability is the updating mechanism?
Ehh, who needs mod points.
Take a look at this link: https://www.techdirt.com/artic...
The gist is that iPhone's "Secure credential storage" firmware is part of the regular firmware, and can be updated without authentication. It just has to be signed by Apple. I will agree that a much better model would be a fully seperate chip that requires authentication, or a wipe to update the firmware. Unfortunately, it looks like Apple didn't want to do things properly.
I'm not sure what you're talking about for the second part. The changes the FBI is asking for are pretty simple. Disable the auto wipe after 10 bad attempts, and remove the delay between password retries. With both of those removed brute forcing the password is easy. The truth is those changes are trivial. Since they have the source code, all Apple hase to do is comment out two lines. The BIG IMPORTANT PART is the new firmware requires Apple to sign it to run.
-
Re:To the editors...
Forbes has chosen to speed their journey into irrelevance with their policies. Don't force Slashdot to follow them down that hole by becoming dependent upon their content.
I would make a sincere request that the editors stop accepting any articles from Forbes, period.
https://www.techdirt.com/artic...
http://www.extremetech.com/int...
http://www.networkworld.com/ar...
http://www.networkworld.com/ar...
One of these sweet bits of kit was the angler exploit kit.
http://researchcenter.paloalto...
Just imagine, 90,000 plus websites out there, just waiting for me to disable my adblocker in order to get some of their yummy ransomware.
Anyhow, take this in the spirit it's given, in case the editors didn't know what Forbes stands for these days. Forced malware.
-
What could go wrong ...
Dark skinned guy crossing borders and using encryption, what could be more suspicious?
What could be more suspicious ?
Adi Shamir trying to attend the Cryptology conference he did start him-self in the 80s ?According to the US that's even worse.
-
Re:Not this old info again
liar caught lying again.
Hey NSA, &other FED LEOs - don't destroy the infrastructure of the world economy with your abject incompetence. You can't even effectively make use of the encrypted data you already collect. -
[Citation Needed]
Bullshit. The Paris attackers did not use encrypted communications.
Was this an intelligence failure? Possibly. Was it an intelligence failure due to a lack of backdoors and/or laws against cryptography? Absolutely not.
-
Re:remember Benito
These fascists need the Benito treatment.
Umm, before we advocate the summary execution and public hanging of those involved, I might like to get a wee bit more information about what we're discussing. Stuff that, you know, the summary might have actually included such as:
- Which countries are potentially party to this?
- How do the provisions differ from currently accepted law in those countries?
- Who has enforcement rights over violations?
It's also worth noting that the story has only one link, to a blog which is politically opposed to the treaty. A cursory Google search would point you to a much wider range of viewpoints on the agreement. Some are pro-treaty, some against, but they all provide much better context than the linked article. I don't particularly care one way or another, but any story with only one viewpoint expressed is usually a sign of either a lazy editor or an agenda.
I hate to keep dredging up the "Slashdot flame bait post because it has no actual 'editors'" trope, but damn. I imagine that if I submitted a story that said "Apple CEO advocates eating puppies" and linked to a blog somewhere that suggested it, the story would be published immediately and without actual review or "editing." Which is, you know, what an "editor" is supposed to do.
-
The NSA cares if the government cares ...
Among the treasure trove of government actions he brought to light, were emails and other documents showing how the US government was secretly strong arming other countries into adopting the MPAA's version of copyright. (Hey, the MPAA paid for their government so they are getting some mileage out of it...)
https://www.techdirt.com/artic... -
Decrypting nearly impossible
Re-quoting this informative comment:
You mistake an iPhone's unlock code with the iPhone's encryption key. the iPhones do typically use a 4-6 digit pin as an unlock code. The user also has the ability to create a full alphanumeric password for the unlock code as well. However, that is simply the code that's used to unlock the actual full encryption key that is stored within dedicated crypto hardware. Apple uses a dedicated chip to store and process the encryption. They call this the Secure Enclave. The secure enclave stores a full 256-bit AES encryption key.
Within the secure enclave itself, you have the device's Unique ID (UID) . The only place this information is stored is within the secure enclave. It can't be queried or accessed from any other part of the device or OS. Within the phone's processor you also have the device's Group ID (GID). Both of these numbers combine to create 1/2 of the encryption key. These are numbers that are burned into the silicon, aren't accessible outside of the chips themselves, and aren't recorded anywhere once they are burned into the silicon. Apple doesn't keep records of these numbers. Since these two different pieces of hardware combine together to make 1/2 of the encryption key, you can't separate the secure enclave from it's paired processor.
The second half of the encryption key is generated using a random number generator chip. It creates entropy using the various sensors on the iPhone itself during boot (microphone, accelerometer, camera, etc.) This part of the key is stored within the Secure Enclave as well, where it resides and doesn't leave. This storage is tamper resistant and can't be accessed outside of the encryption system. Even if the UID and GID components of the encryption key are compromised on Apple's end, it still wouldn't be possible to decrypt an iPhone since that's only 1/2 of the key.
The secure enclave is part of an overall hardware based encryption system that completely encrypts all of the user storage. It will only decrypt content if provided with the unlock code. The unlock code itself is entangled with the device's UDID so that all attempts to decrypt the storage must be done on the device itself. You must have all 3 pieces present: The specific secure enclave, the specific processor of the iphone, and the flash memory that you are trying to decrypt. Basically, you can't pull the device apart to attack an individual piece of the encryption or get around parts of the encryption storage process. You can't run the decryption or brute forcing of the unlock code in an emulator. It requires that the actual hardware components are present and can only be done on the specific device itself.
The secure enclave also has hardware enforced time-delays and key-destruction. You can set the phone to wipe the encryption key (and all the data contained on the phone) after 10 failed attempts. If you have the data-wipe turned on, then the secure enclave will nuke the key that it stores after 10 failed attempts, effectively erasing all the data on the device. Whether the device-wipe feature is turned on or not, the secure enclave still has a hardware-enforced delay between attempts at entering the code: Attempts 1-4 have no delay, Attempt 5 has a delay of 1 minute. Attempt 6 has a delay of 5 minutes. Attempts 7 and 8 have a delay of 15 minutes. And attempts 9 or more have a delay of 1 hour. This delay is enforced by the secure enclave and can not be bypassed, even if you completely replace the operating system of the phone itself. If you have a 6-digit pin code, it will take, on average, nearly 6 years to brute-force the code. 4-digit pin will take almost a year. if you have an alpha-numeric password the amount of time required could extend beyond the heat-death of the universe. Key destruction is turned on by default.
Even if you pull
-
Re:Don't see the problem
You can't do the latter. The encryption key is split into fragments, baked into silicon in multiple chips, and the exponential timeout and wipe features are enforced by hardware.
iOS may be a walled garden, but damn, the walls go down to the bedrock.
See apple's own ios 9 security whitepaper or this fellow's succinct summary buried deep in the comments on techdirt.
-
Re:They aren't ordering Apple to decrypt it
This is the only good explanation I've seen of what the order is about:
https://www.techdirt.com/artic...
As long as Apple can install a signed update on the device without decrypting it first, this will be possible. They need to remedy that quickly.
Yes, Apple has all along insisted that they can't break the encryption on the phone. But the FBI apparently knows they can and wants them to do it. That means there is already effectively a back door and they just need Apple to sign the software update. So Apple has been lying.
No, it just means that the folks at the FBI, don't believe anything Apple is saying. Given that the FBI in general is technically illiterate, I wouldn't put any stock
in Apple having the ability to decrypt.However, the encryption is only as good as the key entered by the user. Given the general level of technical ineptitude of the general public, the key is probably relatively short and could probably be brute forced in less 100,000 attempts, which is where Apple is in trouble. iOS considers more than 10 attempts to be an attack and clears the phone. Good security practice, but if Apple does install a work around for that, it won't be that long before the bad guys figure out how to do it as well.
-
Re:They aren't ordering Apple to decrypt it
This is the only good explanation I've seen of what the order is about:
https://www.techdirt.com/artic...
As long as Apple can install a signed update on the device without decrypting it first, this will be possible. They need to remedy that quickly.
Yes, Apple has all along insisted that they can't break the encryption on the phone. But the FBI apparently knows they can and wants them to do it. That means there is already effectively a back door and they just need Apple to sign the software update. So Apple has been lying.
-
They aren't ordering Apple to decrypt it
This is the only good explanation I've seen of what the order is about: https://www.techdirt.com/artic... As long as Apple can install a signed update on the device without decrypting it first, this will be possible. They need to remedy that quickly.
-
Re:Great way to get sued!
It's neither intellectual, nor property. linky
-
Re:Seems like freedom of speech to me
German courts and currrent administration do not know what online free speech is. This is just another nail in the coffin for regulating the the people and moving backwards to another governmental controlled system:
merkel polices zuc
zuc is on itLet's not forget Merkels initiative to take care of the German voters first:
Germany yroWonder why ccc has not been updated or so quite ?
-
Re:Where is the dispute?
LOL no there are not "valid legal arguments". There are loser arguments made by losers but they're not valid nor legal.
Copy Right is the right to copy given to the original author (for a bit).
"Scholarly" blah blah blah useless crappy people like you who take other people's work and put it out again and claim YOU hold the rights to THEIR work, NO. That's not copyright. That's the bullshit you spew.
It's her diary. She wrote it. It's in the public domain now. Everyone else who wrote "something on top of her work" can suck it.
Suck it.
E
P.S.
https://www.techdirt.com/artic...
https://www.techdirt.com/artic...
http://bfy.tw/3nnw -
Re:Where is the dispute?
LOL no there are not "valid legal arguments". There are loser arguments made by losers but they're not valid nor legal.
Copy Right is the right to copy given to the original author (for a bit).
"Scholarly" blah blah blah useless crappy people like you who take other people's work and put it out again and claim YOU hold the rights to THEIR work, NO. That's not copyright. That's the bullshit you spew.
It's her diary. She wrote it. It's in the public domain now. Everyone else who wrote "something on top of her work" can suck it.
Suck it.
E
P.S.
https://www.techdirt.com/artic...
https://www.techdirt.com/artic...
http://bfy.tw/3nnw -
Re:Underwhelmed by Netflix
Agreed.
Someone else made an insightful comment about netflix a while back.
When the movie studios realized Netflix was giving the consumer what they wanted, they demanded a bigger piece of the pie and the Netflix catalog dried up.
Ever since, Netflix they've been filling it with junk documentaries and B-movies.
Netflix abandoned their fancy recommendation algorithm because it was simpler to just recommend based on popular and trending titles. And there's no point recommending something isn't in the catalog. Would you like to see a B-movie that tries to pass itself off as an A movie with cover art?
https://www.techdirt.com/blog/...
https://flowingdata.com/2012/0...
All that said, Netflix is the best out there. $7.99 for netflix, or $11.99 for hulu without ads.
I am not aware of any other mainstream competitors for flat-fee all-you-can-view offerings.
-
Re:This Is Not A Problem
Re 'social media":
The US and UK governments have opened the domestic propaganda pipes. Expect a lot of "good" news stories on social media, web 2.0 and the free online portals sites, walled sites.
Their own domestic audiences are now been subjected short term and long term psychological operations online by their own mil.
'Anti-Propaganda' Ban Repealed, Freeing State Dept. To Direct Its Broadcasting Arm At American Citizens (2013/07/15)
https://www.techdirt.com/artic...
British Army To Create 1500-Strong Social Media Propaganda Force (2015/02/04)
https://www.techdirt.com/artic... -
Re:This Is Not A Problem
Re 'social media":
The US and UK governments have opened the domestic propaganda pipes. Expect a lot of "good" news stories on social media, web 2.0 and the free online portals sites, walled sites.
Their own domestic audiences are now been subjected short term and long term psychological operations online by their own mil.
'Anti-Propaganda' Ban Repealed, Freeing State Dept. To Direct Its Broadcasting Arm At American Citizens (2013/07/15)
https://www.techdirt.com/artic...
British Army To Create 1500-Strong Social Media Propaganda Force (2015/02/04)
https://www.techdirt.com/artic... -
Re:Copyright is not a right, despite the name
Irrelevant, but I'll answer anyhow. They were not first. Sucks to be them but we don't all get to win the race.
So before I publish a work that I created, what can I do to tell whether it unintentionally violates another's copyright?
Yes it is [a right] - in fact, it's created on inception.
Yes, under current law, the privilege of copyright comes into being when a work is fixed in tangible medium. But when copyright begins is independent of whether it is a right.
When you fail to compensate someone for the fruits of their labor, it is slavery.
Is our failure to continue to compensate the heirs of the inventor of patent leather "slavery"?
Ownership is complete - that's what ownership is. It promotes the arts and sciences because they're able to control it and thus decide how it's used, when it is used, and who gets to use it.
How are you certain that absolute ownership is a better way "to promote the Progress of Science and useful Arts" than something other than absolute ownership?
I believe it is something like Article 1 that gives congress the right to make such a law
Article I, clause 8, gives Congress the power to create copyright but not the obligation to do so. This differs from the Bill of Rights, which gives Congress the obligation not to create certain laws by taking powers away from it.
Rights aren't given to you by the government. You already have them by grace of birth. Do you have to ask the government to breath?
Yes. People had to petition the government for the Clean Air Act.
For the fruits of your labor?
Fruits of one's labor include externalities. And yes, in general, people do have to petition the government for exclusive rights to extract rents from externalities. Copyright is a rent extracted from the externality of the existence of a work of authorship.
The ability to own it, to control it, even to revoke access (an unfortunate side effect but must be included because it's ownership, by right) is a basic human right.
Say I build and sell you a chair. Should I have the power to demand that you return that chair because I want "to revoke access" to its design? I disagree with you that the right to revoke access to something that has been published "is a basic human right". And no, I'm not the only person to believe that way; Leigh Beadon agrees with me and disagrees with you.
the GPL that I know you're familiar with and (as I recall) a fan of - is also based on copyright and gets its powers from copyright regulations. Should someone just be able to take the code, edit it, and sell it without giving back to the community and not give out the source when they do so?
If there were no copyright, it would be lawful to disassemble proprietary software, thoroughly comment the disassembly, and distribute the commented disassembly to others. In fact, I'm pretty sure that that's what Richard Stallman had originally planned to do in the printer driver kerfuffle that kicked off the whole GNU project.
-
Re:Many people don't and won't buy DRM software
"The only reason that DRM is so rampant is because society has proven that they can't be trusted"
No the reason piracy is so rampant is because copyright law is corrupt and people know when the world is unjust even if they can't articulate it, the corporations stole the public domain first. Even if most of the public is ignorant of copyright law they can still smell the evil of corporations and their bought and paid for laws.
This is not new in history:
"Men very different from the present race of piratical booksellers will soon infringe this intolerable monopoly. Great masses of capital will be constantly employed in the violation of the law. Every art will be employed to evade legal pursuit; and the whole nation will be in the plot. On which side indeed should the public sympathy be when the question is whether some book as popular as Robinson Crusoe, or the Pilgrims Progress, shall be in every cottage, or whether it shall be confined to the libraries of the rich, for the advantage of the greatgrandson of a bookseller who, a hundred years before, drove a hard bargain for the copyright with the author when in great distress? Remember too that, when once it ceases to be considered as wrong and discreditable to invade literary property, no person can say where the invasion will stop. The public seldom make nice distinctions. The wholesome copyright which now exists will share in the disgrace and danger of the new copyright which you are about to create. And you will find that, in attempting to impose unreasonable restraints on the reprinting of the words of the dead, you have, to a great extent, annulled those restraints which now prevent men from pillaging and defrauding the living. If I saw, Sir any probability that this bill could be so amended in the Committee that my objections might be removed I would not divide the House in this stage. But I am so fully convinced that no alteration which would not seem insupportable to my honorable and learned friend, could render his measure supportable to me, that I must move, though with regret, that this bill be read a second time this day six months."
https://en.wikipedia.org/wiki/Copyright_Term_Extension_Act#/media/File:Copyright_term.svg
The piracy debate is always one sided and privileges business instead of talking about the criminal corporations/businessmen who's been taking your rights to own shit away and trying to pass piracy off a bad thing when games never reach the public domain because it was stolen by people like yourself and valve. Game licensing is a scam, games never go into libraries and are held in "intellectual property" limbo. The whole concept of IP and licensing when applied to games is a legal con and the fact that ignorant people like you eat it up and want to be corporate slaves is sickening.
http://www.onthemedia.org/story/265083-barely-any-us-culture-will-enter-public-domain-year/
https://www.techdirt.com/articles/20131231/23434825735/grinch-who-stole-public-domain.shtml
https://www.techdirt.com/articles/20131231/23434825735/grinch-who-stole-public-domain.shtml
Piracy is the only way things like video-games for instance will be preserved given that the source-code is confiscated/locked down and not going into libraries. Corporations stole our culture an illiterate like yourself is chastising the "thieves" when corporations are the biggest thieves of all time.
-
Re:"psychological impacts"
Yes the Drone papers give some insight into that aspect https://theintercept.com/drone...
The conscience side is been worked on too. Expect a lot of new very well funded Hollywood movies, TV series, comics, books and other web 2.0 media to show a nice new friendly side to the contractor remote military industrial complex.
With the Smith–Mundt Act been reworked to allow domestic propaganda Smith–Mundt Act a flood of domestic good news stories can be gov funded to win hearts and minds about the use of drones soon.
"'Anti-Propaganda' Ban Repealed, Freeing State Dept. To Direct Its Broadcasting Arm At American Citizens" (2013/07/15)
https://www.techdirt.com/artic... -
In other words, a software patent
Yeah, otherwise known as a "software patent". It's worth clarifying what a software patent is not, the better to understand what it is and why it's so pernicious and why they're banned (yes, they are) in the EU and pretty much everywhere else in the world except AU. and JP.
Software patents are not patents on specific ways for causing a machine to perform a useful function. That type of IP is the IP we call "copyright". Copyright does prevent your code, your (virtual) machine, from being ripped off.
So with copyright you're not issued a patent on the concept of any wheel, you're issued a patent on your wheel's unique and specific implementation. If you stop and think about it, it's a really amazing how well copyright serves as the natural vehicle for IP in the computer industry. You cannot just steal another person's original work. Stealing includes *near copying with just a few things changed*. You have to find a relatively original way to achieve the same effect, but the *idea* of what you're doing is not patentable. Copyright naturally delivers all that to computer IP.
Software patents are patents on all ways to cause a machine to perform a generally describable function. It's not the specific implementation performing the useful function that is being protected- it's the ability to achieve the same ends in any way whatsoever.
So like the RIM patent debacle, this patent covers things unbelievably abstract and covers things like this:
http://torrentfreak.com/images...
For people who don't follow links, it's a picture of little labeled boxes representing computers, with arrows being drawn between the little boxes to signify what info gets passed between what computers and when. That's what they're patenting. That's what the patent in the 750 million dollar RIM/NTP case did- took THIS info out of a data base NOW and sent it to THAT computer who did THIS with that info.
That's right folks, we are patenting flowcharts. Read it and weep-
https://www.scribd.com/doc/294...
This is exactly why in the EU computer-related inventions must control some physical, industrial process and then only that physical industrial process is patented, not the code which drives it. Otherwise you're patenting processes defined by flowcharts. You're patenting results. You're patenting ideas.
We know for a fact we don't need these patents for software to progress and for companies to becomes powerful, even monopolistically so, since prior to 1987-1990 or so very few software patents were permitted. Yet we had the invention of EVERYTHING and we had gigantic corporations reaping huge profits also.
This is about regulatory capture and the corporate coffers it fills (with what would have otherwise been your money).
https://news.vice.com/article/...
-
Re:Exit node
Twenty seconds of googling found some cases:
https://www.techdirt.com/artic...
https://www.techdirt.com/artic... -
Re:Exit node
Twenty seconds of googling found some cases:
https://www.techdirt.com/artic...
https://www.techdirt.com/artic... -
Re:Won't work
http://hackaday.com/2010/03/31...
http://hackaday.com/2013/03/14...
http://hackaday.com/2013/03/18...
http://www.extremetech.com/com...
https://www.avforums.com/threa...
Most any WiFi firmware artificially limits the radio -> http://www.qsl.net/kb9mwr/proj...
http://www.ilounge.com/index.p...
Whoa, your car has hidden features? https://www.youtube.com/watch?...
Extra cores on your CPU? No way! http://www.bit-tech.net/hardwa...
Cripple phone features? Oh noes! https://www.techdirt.com/artic... https://www.techdirt.com/artic...
More than one HAM radio have been found to be subject to software tweaking for improvements in scan speed and frequencies covered.-> https://www.youtube.com/watch?...
Got a RAID card? Some of them can be crossflashed to gain features BTW. Or you can pay thousands to the manufacturer for some features (*cough*PERC*cough*) http://www.servethehome.com/ib...
Gains can be had by flashing custom firmware to your DVD\BD RW drives but I didn't feel like spending any time past a cursory search to find this. http://binflash.cdfreaks.com/ http://www.rpc1.org/viewtopic.... http://dvrflash.rpc1.org/
Firmware being used in external HDD has also been found to be crippled vs a standard drive, this didn't used to always be the case....
Here's one that's just an upgrade with features the manufacturer didn't include (see also ANY Jailbreaking post ever)
http://lifehacker.com/find-out...
http://lifehacker.com/5942229/...
http://www.digitaltrends.com/p...Oh look, your camera now supports RAW? Thought that was only for pro cameras not P&S pocket models...
I could go on and on with examples but suffice it to say yeah it DOES happen and it happens fairly often. It happens most often with system that have a full OS, often Linux, where a firmware flash can give you all sorts of features (OpenWRT or Tomato anyone?) but it also happens in cameras, lab bench tools, TVs, stereos, and just about anything else that is driven by software. Want more turbo boost in your car? Software baby! Want that printer to register an empty toner cartridge sooner? No problem!
Tired now, think I've made my point?
-
Re:Won't work
http://hackaday.com/2010/03/31...
http://hackaday.com/2013/03/14...
http://hackaday.com/2013/03/18...
http://www.extremetech.com/com...
https://www.avforums.com/threa...
Most any WiFi firmware artificially limits the radio -> http://www.qsl.net/kb9mwr/proj...
http://www.ilounge.com/index.p...
Whoa, your car has hidden features? https://www.youtube.com/watch?...
Extra cores on your CPU? No way! http://www.bit-tech.net/hardwa...
Cripple phone features? Oh noes! https://www.techdirt.com/artic... https://www.techdirt.com/artic...
More than one HAM radio have been found to be subject to software tweaking for improvements in scan speed and frequencies covered.-> https://www.youtube.com/watch?...
Got a RAID card? Some of them can be crossflashed to gain features BTW. Or you can pay thousands to the manufacturer for some features (*cough*PERC*cough*) http://www.servethehome.com/ib...
Gains can be had by flashing custom firmware to your DVD\BD RW drives but I didn't feel like spending any time past a cursory search to find this. http://binflash.cdfreaks.com/ http://www.rpc1.org/viewtopic.... http://dvrflash.rpc1.org/
Firmware being used in external HDD has also been found to be crippled vs a standard drive, this didn't used to always be the case....
Here's one that's just an upgrade with features the manufacturer didn't include (see also ANY Jailbreaking post ever)
http://lifehacker.com/find-out...
http://lifehacker.com/5942229/...
http://www.digitaltrends.com/p...Oh look, your camera now supports RAW? Thought that was only for pro cameras not P&S pocket models...
I could go on and on with examples but suffice it to say yeah it DOES happen and it happens fairly often. It happens most often with system that have a full OS, often Linux, where a firmware flash can give you all sorts of features (OpenWRT or Tomato anyone?) but it also happens in cameras, lab bench tools, TVs, stereos, and just about anything else that is driven by software. Want more turbo boost in your car? Software baby! Want that printer to register an empty toner cartridge sooner? No problem!
Tired now, think I've made my point?
-
Re:So?
> Your logic relies on the assumption that there aren't hidden reasons.
And when those hidden reasons are revealed, they tend to be bullshit like ticking the wrong checkbox
That is the real world.
-
Re:Guys - chill
Re "procedures that state that personal information not relevant to the break-in will need to be removed or destroyed from the information that is shared."
"Senate Rejects All CISA Amendments Designed To Protect Privacy, Reiterating That It's A Surveillance Bill" (2015/10/27)
https://www.techdirt.com/artic...
"removal of personal information"
"removed FOIA exemptions"
""tightened" the definition of cybersecurity threats"
"more difficult for Congress to learn whether or not CISA is being used for domestic surveillance"
All the privacy protection and time limitations laws got removed early on. Its a US gov working with the US private sector free for all. Collect it all, keep it all and presented to nice new gov portals. No real reasons needed, no court oversight, no questions back to the private sector, no questions about what the gov and mil will do with the data. Just a huge flow from the US private sector for the US gov to keep and sort. -
Re:it's not the smart people, it's the PHB
> , there's a shadow government,
Gee, and that's why the G20 summit secret law and TPP (Trans-Pacific Partnership) were held in the open, right? Oh, wait,they're weren't until WELL after the fact.
Maybe if governments would stop making bullshit reasons for secret laws maybe this conspiracy would finally die.
> WTC was an inside job,
And yet seven hours after the Twin Towers collapsed, Building 7 just "mysteriously" collapses.
What was the official report on the cause of _that_ again??
Only a fucking idiot would believe it was "the terrorists."
-
Re:I Hate My California Self
Really? You haven't been paying much attention...
Senator Barbara Boxer (D-CA) after the San Bernadino shootings -- "Sensible gun laws work! We've proven it in California." link She is apparently unaware of what state San Bernadino is in.
Representative Nancy Pelosi (D-CA) with the debt spiraling upwards at close to $1.25T per year and insurance premiums are jumping as much as 50% per year - "ObamaCare is lowering costs and the deficit." link
Rep. Nancy Pelosi (D-CA) -- “Every month that we do not have an economic recovery package 500 million Americans lose their jobs.” – in a nation with 307 million people.
Sen. Dianne Feinstein (D-CA) -- “We have federal regulations and state laws that prohibit hunting ducks with more than three rounds, and yet it’s legal to hunt humans with 15-round, 30-round, even 150-round magazines.". Apparently, she doesn't know that it's illegal to hunt humans with any number of rounds.
She (Feinstein) also believes that allowing people to make calls from an airplane will result in uncontrollable brawling amongst the passengers. link
Or, her (Feinstein's) fine opinion of our Veterans: "All vets are mentally ill in some way and government should prevent them from owning firearms." link
Not to mention Feinstein's flip-flopping on this very issue [encryption]. In October, she said, "Millions of personal records and hundreds of billions of dollars fall victim to cyber-attacks every year, and we’ve done little to stem the tide." In other words, calling for enhanced cyber-security, yet only a month ago, "I can say this. [FBI] Director [James Comey] and, I think John Brennan, would agree, that the Achilles Heel in the internet is encryption. Because there are now... it's a black web! And there's no way of piercing it. And this is even in commercial products!"link
“Those who survived the San Francisco earthquake said, ‘Thank God, I’m still alive.’ But, of course, those who died, their lives will never be the same again.” – Sen. Barbara Boxer
“It [marijuana] will still be legal under federal law.” Senator Dianne Feinstein claiming that marijuana is legal
And. of course, the all-time grandaddy of a Nancy Pelosi quote, "But we have to pass the bill so that you can find out what is in it."
That was from less than 2 minutes of searching. You should really pay more attention. -
Re:corruption, not victim compensation
Some jurisdictions may be abusing forfeiture for profit - and that's bad - but it's quite a leap to extrapolate that to all law enforcement agencies in the country, as some Slashdotters are quick to do.
Actually, the US Marshals Service is at the heart of asset forfeiture abuse, because they are used by many local and state police agencies to circumvent state laws against asset forfeiture abuse:
The US Marshals Service doesn't need to dirty its hands by performing seizures. All it has to do is sit there and wait for assets from equitable sharing programs to roll in. And roll in they do, thanks to local law enforcement agencies partnering up with the DOJ to avoid state laws put in place to limit the sort of abuse that is all too frequent when cops are given the authority to declare money, vehicles and other property guilty on the spot.
https://www.techdirt.com/artic...
From what I see on the Marshals' listings, the items being sold are forfeited pursuant to a final judgement from a suitable court. The proceeds are indeed listed as part of the judgement, and would therefore be distributed among the victims (possibly including the government itself) as any similar fine would.
You get a gold star for propaganda, weasel words, and obfuscation!
-
Wut. The. Fuck.
The notion that they used encrypted channels to coordinate has already been debunked. Let's tar and feather these assholes trying to use the deaths of 129 innocent people to further their agenda of outlawing privacy.
-
Lol
after-endless-demonization-encryption-police-find-paris-attackers-coordinated-via-unencrypted-sms
https://www.techdirt.com/artic... -
Well, if it weren't for snowden...
The logic of authoritarians:
Thanks to Snowden's revelations, terrorists started using unbreakable encryption!!!!!!!
Right. Except they didn't.
That was pre-Snowden. Terrorists didn't know about encryption before that.
Right again. Except they did.
So, you see-- Snowden has "blood on his hands" for making terrorists aware of encryption, which they knew about for decades, so they could use it, which they didn't. And thank goodness for that, because if they had used encryption, the attacks might have been successful, which they were.
Got it.
-
Re:Where's the article
Hidden now in the title.
https://www.techdirt.com/artic...And from there;
https://theintercept.com/2015/... -
Review the code all you like....
...Interdiction is where it's at: https://www.techdirt.com/artic...
Or maybe use IPSec / SSH with DH Group 19 - that's not looking too clever either: https://weakdh.org/imperfect-f...
All in all, if your threat model includes the NSA then reviewing 30m LOC may seem like a good place to start but in practice.....
-
Reading Slashdot? Don't worry.
You are already on a watch list. Somewhere.
After all, most NSA people are geeks, and so they read Slashdot. To the point they did a MITM using a fake Slashdot page.
Oh, and by the way: hi NSA!
A more serious reply is this one: they don't want you to know you are on a watch list. If you represent a serious target, they REALLY don't want you to know. On the other hand, if you have any reason to suspect you are a serious target, assume the worst and unplug now.
-
Coren22 proven a TROLL (NSA/GCHQ?)
See subject - OR didn't you say:
"Maybe I should change my signature again just to rile him up some more." - by Coren22 (1625475) on Tuesday November 03, 2015 @10:07AM (#50855451) FROM http://slashdot.org/comments.p...
behind my back (I can't see sigs) & KGIII noted it:
"In an earlier thread, I saw that APK quoted your signature" - by KGIII (973947) on Monday November 02, 2015 @10:22PM (#50852845) FROM http://slashdot.org/comments.p...
Which I SHUT DOWN due to your lies about me on AD + DNS (GPO too from my security guides I see you've read, that are geared to single stand alone machines NOT networked ones but I advise vs. using external DNS with AD there too, here) -> http://slashdot.org/comments.p...
---
* You're a disgusting LIAR & burying yourself!
---
DEFENSE INDUSTRY? Coren22 from http://slashdot.org/comments.p...
"Theory" here - you working for the NSA/GCHQ now?
They tend to "recruit from within"!
They're KNOWN to attack SECURITY software (like mine) https://theintercept.com/2015/...
(If so THEY PICKED BADLY using YOU as a lapdog - (not theory ->) you're brain-damaged w/ Aspergers as you admit- "the sins of the father" = visited on his kids too)
Dumb - folks like me help SECURE folks via wares like mine - folks in NSA/GCHQ are spying on us is NOT helping folks in the US!
This "theory" of mine wouldn't surprise me 1 bit - considering GCHQ hacked
/. https://www.techdirt.com/artic...Not after proof I put up (IF you're their crony tell your "handlers" they're busting on the WRONG guy for "character assasination" - I help do the RIGHT thing, not the wrong one spying on US folks! I protect 'em)
Wouldn't be a 1st: I've had PROFESSIONAL trolls try it (Cito) & advertisers' cronies (AndyMadigan & RayMorris) do it on
/. - I dusted + busted 'em.APK
P.S.=> You've bring it on yourself (signatures? Punk! I've shown you're technically inept & I doubt you're MCSE, SystemEngineer, & Security - my posts show otherwise)... apk
-
Coren22 proven a TROLL (NSA/GCHQ?)
See subject - OR didn't you say:
"Maybe I should change my signature again just to rile him up some more." - by Coren22 (1625475) on Tuesday November 03, 2015 @10:07AM (#50855451) FROM http://slashdot.org/comments.p...
behind my back (I can't see sigs) & KGIII noted it:
"In an earlier thread, I saw that APK quoted your signature" - by KGIII (973947) on Monday November 02, 2015 @10:22PM (#50852845) FROM http://slashdot.org/comments.p...
Which I SHUT DOWN due to your lies about me on AD + DNS (GPO too from my security guides I see you've read, that are geared to single stand alone machines NOT networked ones but I advise vs. using external DNS with AD there too, here) -> http://slashdot.org/comments.p...
---
* You're a disgusting LIAR & burying yourself!
---
DEFENSE INDUSTRY? Coren22 from http://slashdot.org/comments.p...
"Theory" here - you working for the NSA/GCHQ now?
They tend to "recruit from within"!
They're KNOWN to attack SECURITY software (like mine) https://theintercept.com/2015/...
(If so THEY PICKED BADLY using YOU as a lapdog - (not theory ->) you're brain-damaged w/ Aspergers as you admit- "the sins of the father" = visited on his kids too)
Dumb - folks like me help SECURE folks via wares like mine - folks in NSA/GCHQ are spying on us is NOT helping folks in the US!
This "theory" of mine wouldn't surprise me 1 bit - considering GCHQ hacked
/. https://www.techdirt.com/artic...Not after proof I put up (IF you're their crony tell your "handlers" they're busting on the WRONG guy for "character assasination" - I help do the RIGHT thing, not the wrong one spying on US folks! I protect 'em)
Wouldn't be a 1st: I've had PROFESSIONAL trolls try it (Cito) & advertisers' cronies (AndyMadigan & RayMorris) do it on
/. - I dusted + busted 'em.APK
P.S.=> You've bring it on yourself (signatures? Punk! I've shown you're technically inept & I doubt you're MCSE, SystemEngineer, & Security - my posts show otherwise)... apk
-
Coren22 proven a TROLL (NSA/GCHQ?)
See subject - OR didn't you say:
"Maybe I should change my signature again just to rile him up some more." - by Coren22 (1625475) on Tuesday November 03, 2015 @10:07AM (#50855451) FROM http://slashdot.org/comments.p...
behind my back (I can't see sigs) & KGIII noted it:
"In an earlier thread, I saw that APK quoted your signature" - by KGIII (973947) on Monday November 02, 2015 @10:22PM (#50852845) FROM http://slashdot.org/comments.p...
Which I SHUT DOWN due to your lies about me on AD + DNS (GPO too from my security guides I see you've read, that are geared to single stand alone machines NOT networked ones but I advise vs. using external DNS with AD there too, here) -> http://slashdot.org/comments.p...
---
* You're a disgusting LIAR & burying yourself!
---
DEFENSE INDUSTRY? Coren22 from http://slashdot.org/comments.p...
"Theory" here - you working for the NSA/GCHQ now?
They tend to "recruit from within"!
They're KNOWN to attack SECURITY software (like mine) https://theintercept.com/2015/...
(If so THEY PICKED BADLY using YOU as a lapdog - (not theory ->) you're brain-damaged w/ Aspergers as you admit- "the sins of the father" = visited on his kids too)
Dumb - folks like me help SECURE folks via wares like mine - folks in NSA/GCHQ are spying on us is NOT helping folks in the US!
This "theory" of mine wouldn't surprise me 1 bit - considering GCHQ hacked
/. https://www.techdirt.com/artic...Not after proof I put up (IF you're their crony tell your "handlers" they're busting on the WRONG guy for "character assasination" - I help do the RIGHT thing, not the wrong one spying on US folks! I protect 'em)
Wouldn't be a 1st: I've had PROFESSIONAL trolls try it (Cito) & advertisers' cronies (AndyMadigan & RayMorris) do it on
/. - I dusted + busted 'em.APK
P.S.=> You've bring it on yourself (signatures? Punk! I've shown you're technically inept & I doubt you're MCSE, SystemEngineer, & Security - my posts show otherwise)... apk
-
Coren22 proven a TROLL (NSA/GCHQ?)
See subject - OR didn't you say:
"Maybe I should change my signature again just to rile him up some more." - by Coren22 (1625475) on Tuesday November 03, 2015 @10:07AM (#50855451) FROM http://slashdot.org/comments.p...
behind my back (I can't see sigs) & KGIII noted it:
"In an earlier thread, I saw that APK quoted your signature" - by KGIII (973947) on Monday November 02, 2015 @10:22PM (#50852845) FROM http://slashdot.org/comments.p...
Which I SHUT DOWN due to your lies about me on AD + DNS (GPO too from my security guides I see you've read, that are geared to single stand alone machines NOT networked ones but I advise vs. using external DNS with AD there too, here) -> http://slashdot.org/comments.p...
---
* You're a disgusting LIAR & burying yourself!
---
DEFENSE INDUSTRY? Coren22 from http://slashdot.org/comments.p...
"Theory" here - you working for the NSA/GCHQ now?
They tend to "recruit from within"!
They're KNOWN to attack SECURITY software (like mine) https://theintercept.com/2015/...
(If so THEY PICKED BADLY using YOU as a lapdog - (not theory ->) you're brain-damaged w/ Aspergers as you admit- "the sins of the father" = visited on his kids too)
Dumb - folks like me help SECURE folks via wares like mine - folks in NSA/GCHQ are spying on us is NOT helping folks in the US!
This "theory" of mine wouldn't surprise me 1 bit - considering GCHQ hacked
/. https://www.techdirt.com/artic...Not after proof I put up (IF you're their crony tell your "handlers" they're busting on the WRONG guy for "character assasination" - I help do the RIGHT thing, not the wrong one spying on US folks! I protect 'em)
Wouldn't be a 1st: I've had PROFESSIONAL trolls try it (Cito) & advertisers' cronies (AndyMadigan & RayMorris) do it on
/. - I dusted + busted 'em.APK
P.S.=> You've bring it on yourself (signatures? Punk! I've shown you're technically inept & I doubt you're MCSE, SystemEngineer, & Security - my posts show otherwise)... apk
-
Coren22 proven a TROLL (NSA/GCHQ?)
See subject - OR didn't you say:
"Maybe I should change my signature again just to rile him up some more." - by Coren22 (1625475) on Tuesday November 03, 2015 @10:07AM (#50855451) FROM http://slashdot.org/comments.p...
behind my back (I can't see sigs) & KGIII noted it:
"In an earlier thread, I saw that APK quoted your signature" - by KGIII (973947) on Monday November 02, 2015 @10:22PM (#50852845) FROM http://slashdot.org/comments.p...
Which I SHUT DOWN due to your lies about me on AD + DNS (GPO too from my security guides I see you've read, that are geared to single stand alone machines NOT networked ones but I advise vs. using external DNS with AD there too, here) -> http://slashdot.org/comments.p...
---
* You're a disgusting LIAR & burying yourself!
---
DEFENSE INDUSTRY? Coren22 from http://slashdot.org/comments.p...
"Theory" here - you working for the NSA/GCHQ now?
They tend to "recruit from within"!
They're KNOWN to attack SECURITY software (like mine) https://theintercept.com/2015/...
(If so THEY PICKED BADLY using YOU as a lapdog - (not theory ->) you're brain-damaged w/ Aspergers as you admit- "the sins of the father" = visited on his kids too)
Dumb - folks like me help SECURE folks via wares like mine - folks in NSA/GCHQ are spying on us is NOT helping folks in the US!
This "theory" of mine wouldn't surprise me 1 bit - considering GCHQ hacked
/. https://www.techdirt.com/artic...Not after proof I put up (IF you're their crony tell your "handlers" they're busting on the WRONG guy for "character assasination" - I help do the RIGHT thing, not the wrong one spying on US folks! I protect 'em)
Wouldn't be a 1st: I've had PROFESSIONAL trolls try it (Cito) & advertisers' cronies (AndyMadigan & RayMorris) do it on
/. - I dusted + busted 'em.APK
P.S.=> You've bring it on yourself (signatures? Punk! I've shown you're technically inept & I doubt you're MCSE, SystemEngineer, & Security - my posts show otherwise)... apk
-
Coren22 proven a TROLL (NSA/GCHQ?)
See subject - OR didn't you say:
"Maybe I should change my signature again just to rile him up some more." - by Coren22 (1625475) on Tuesday November 03, 2015 @10:07AM (#50855451) FROM http://slashdot.org/comments.p...
behind my back (I can't see sigs) & KGIII noted it:
"In an earlier thread, I saw that APK quoted your signature" - by KGIII (973947) on Monday November 02, 2015 @10:22PM (#50852845) FROM http://slashdot.org/comments.p...
Which I SHUT DOWN due to your lies about me on AD + DNS (GPO too from my security guides I see you've read, that are geared to single stand alone machines NOT networked ones but I advise vs. using external DNS with AD there too, here) -> http://slashdot.org/comments.p...
---
* You're a disgusting LIAR & burying yourself!
---
DEFENSE INDUSTRY? Coren22 from http://slashdot.org/comments.p...
"Theory" here - you working for the NSA/GCHQ now?
They tend to "recruit from within"!
They're KNOWN to attack SECURITY software (like mine) https://theintercept.com/2015/...
(If so THEY PICKED BADLY using YOU as a lapdog - (not theory ->) you're brain-damaged w/ Aspergers as you admit- "the sins of the father" = visited on his kids too)
Dumb - folks like me help SECURE folks via wares like mine - folks in NSA/GCHQ are spying on us is NOT helping folks in the US!
This "theory" of mine wouldn't surprise me 1 bit - considering GCHQ hacked
/. https://www.techdirt.com/artic...Not after proof I put up (IF you're their crony tell your "handlers" they're busting on the WRONG guy for "character assasination" - I help do the RIGHT thing, not the wrong one spying on US folks! I protect 'em)
Wouldn't be a 1st: I've had PROFESSIONAL trolls try it (Cito) & advertisers' cronies (AndyMadigan & RayMorris) do it on
/. - I dusted + busted 'em.APK
P.S.=> You've bring it on yourself (signatures? Punk! I've shown you're technically inept & I doubt you're MCSE, SystemEngineer, & Security - my posts show otherwise)... apk
-
Coren22 proven a TROLL (NSA/GCHQ?)
See subject - OR didn't you say:
"Maybe I should change my signature again just to rile him up some more." - by Coren22 (1625475) on Tuesday November 03, 2015 @10:07AM (#50855451) FROM http://slashdot.org/comments.p...
behind my back (I can't see sigs) & KGIII noted it:
"In an earlier thread, I saw that APK quoted your signature" - by KGIII (973947) on Monday November 02, 2015 @10:22PM (#50852845) FROM http://slashdot.org/comments.p...
Which I SHUT DOWN due to your lies about me on AD + DNS (GPO too from my security guides I see you've read, that are geared to single stand alone machines NOT networked ones but I advise vs. using external DNS with AD there too, here) -> http://slashdot.org/comments.p...
---
* You're a disgusting LIAR & burying yourself!
---
DEFENSE INDUSTRY? Coren22 from http://slashdot.org/comments.p...
"Theory" here - you working for the NSA/GCHQ now?
They tend to "recruit from within"!
They're KNOWN to attack SECURITY software (like mine) https://theintercept.com/2015/...
(If so THEY PICKED BADLY using YOU as a lapdog - (not theory ->) you're brain-damaged w/ Aspergers as you admit- "the sins of the father" = visited on his kids too)
Dumb - folks like me help SECURE folks via wares like mine - folks in NSA/GCHQ are spying on us is NOT helping folks in the US!
This "theory" of mine wouldn't surprise me 1 bit - considering GCHQ hacked
/. https://www.techdirt.com/artic...Not after proof I put up (IF you're their crony tell your "handlers" they're busting on the WRONG guy for "character assasination" - I help do the RIGHT thing, not the wrong one spying on US folks! I protect 'em)
Wouldn't be a 1st: I've had PROFESSIONAL trolls try it (Cito) & advertisers' cronies (AndyMadigan & RayMorris) do it on
/. - I dusted + busted 'em.APK
P.S.=> You've bring it on yourself (signatures? Punk! I've shown you're technically inept & I doubt you're MCSE, SystemEngineer, & Security - my posts show otherwise)... apk
-
Coren22 proven a TROLL (NSA/GCHQ?)
See subject - OR didn't you say:
"Maybe I should change my signature again just to rile him up some more." - by Coren22 (1625475) on Tuesday November 03, 2015 @10:07AM (#50855451) FROM http://slashdot.org/comments.p...
behind my back (I can't see sigs) & KGIII noted it:
"In an earlier thread, I saw that APK quoted your signature" - by KGIII (973947) on Monday November 02, 2015 @10:22PM (#50852845) FROM http://slashdot.org/comments.p...
Which I SHUT DOWN due to your lies about me on AD + DNS (GPO too from my security guides I see you've read, that are geared to single stand alone machines NOT networked ones but I advise vs. using external DNS with AD there too, here) -> http://slashdot.org/comments.p...
---
* You're a disgusting LIAR & burying yourself!
---
DEFENSE INDUSTRY? Coren22 from http://slashdot.org/comments.p...
"Theory" here - you working for the NSA/GCHQ now?
They tend to "recruit from within"!
They're KNOWN to attack SECURITY software (like mine) https://theintercept.com/2015/...
(If so THEY PICKED BADLY using YOU as a lapdog - (not theory ->) you're brain-damaged w/ Aspergers as you admit- "the sins of the father" = visited on his kids too)
Dumb - folks like me help SECURE folks via wares like mine - folks in NSA/GCHQ are spying on us is NOT helping folks in the US!
This "theory" of mine wouldn't surprise me 1 bit - considering GCHQ hacked
/. https://www.techdirt.com/artic...Not after proof I put up (IF you're their crony tell your "handlers" they're busting on the WRONG guy for "character assasination" - I help do the RIGHT thing, not the wrong one spying on US folks! I protect 'em)
Wouldn't be a 1st: I've had PROFESSIONAL trolls try it (Cito) & advertisers' cronies (AndyMadigan & RayMorris) do it on
/. - I dusted + busted 'em.APK
P.S.=> You've bring it on yourself (signatures? Punk! I've shown you're technically inept & I doubt you're MCSE, SystemEngineer, & Security - my posts show otherwise)... apk