Slashdot Mirror


User: echnaton192

echnaton192's activity in the archive.

Stories
0
Comments
198
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 198

  1. Re:"insecure electronic voting" on Researchers Reprogram Voting Machine To Run Pac-man · · Score: 1
  2. Re:"insecure electronic voting" on Researchers Reprogram Voting Machine To Run Pac-man · · Score: 2, Informative

    The problem is, that you can't proof the result is correct.

    They tried to use election machines in Germany for their cost-effectedness and in order to get the results faster.

    The experts of the CCC (www.ccc.org) could show how easy it is to tamper with it.

    The High Court used their expertise to state that while electronic voting machines are not per se forbidden, the only way they would be allowed is by making them as easy to proof as an old fashioned ballot box.

    E.g. providing a print out so the voter could proof his vote was correctly counted. But this print out would have been able for a recount.

    And that is were it begins to get funny: Every voter has the right to watch the process of the counting and the preparation and has the right to be able to SEE the votes are counted in a correct way. So you wait for the voting day to be over, wait for the electronic results and then - DEMAND a recount of the printouts.

    The High Court stated that while every citizen has the right to see for himself that everything went OK, there is NO constitutional right for an early result.

    The voting computers were put out of business.

  3. Re:Some security measures don't seem practical. on Users Rejecting Security Advice Considered Rational · · Score: 1

    This entirely depends on two things:
    1) Password length. Using upper/lower capitals, Symbols and numbers, > 20 Characters are considered sufficient.
    2) Possible retries. If the Password is unusable after 5 retries, any hacking would get noticed, at least by the user.

    And as long as a company doesn't imply a strict single sign on policy, it is impossible to keep track of all the passwords, except you keep them simple.

    That is what happened here:

    I use complex passwords on my whole system encryption and my server, but rediculously simply passwords at wok, whereas I started with complex ones. Reasons:

    Every system expires the password on another day
    They have at least 10 (!) systems requiring a password

    I work there for 10 years and I follow the password rules to the letter. But the result is a "complex" password that really isn't.

    And again: If the password is suspended after 5 retries, the "hacking" of a password would still be too much a hassle, even with only 5 characters and no expiring time. Social engineering would be more efficient.

    And if you use > 20 digit, strong passwords on the whole system, that expire once a year (!) and that are suspended after 50 retries, this would be more than sufficient. Thinking of n strong passwords every 60 days is impossible (at least it is for me).

    The situation is ridiculous: I use stronger passwords at home than I do in the office (I follow the rules, but the password is really easy, despite the fact the systems thinks it's "complex").

  4. Re:Good article! on Users Rejecting Security Advice Considered Rational · · Score: 1

    Where are the mod points when you need them? You are right. Reasonable (!) security advices people would actually follow. That is the key. My mantra for years now.

  5. Re:It's obvious on Users Rejecting Security Advice Considered Rational · · Score: 1

    If someone "lends" his password to another person, you have bigger security problems. And 60 days are enough time to do really bad stuff.

    Changing passwords every 60 days leads to weak passwords. Period.

  6. Re:Another possibility... on Users Rejecting Security Advice Considered Rational · · Score: 1

    For some family members where I have suggested very basic security steps like disabling automatic logins

    I think you are missing this documents point.

    Automatic logins do NOT invcrease the vulnarability significantly.

    According to the document, it decreases the security as users abandon security alltogether for a very real reason:

    The cost for security are higher than the risk costs for each user. So they behave "economically rational" by not following your rule instead of having a strange mentality.

    The point is

    1) No normal user for example could manage all the passwords on all the sites he visits, banking accounts, email, you name it. The average user has 24 logins to manage, while I assume we as slashdotters have about 60.

    If you follow the standards of not reusing your password across sites and use strong passwords, passwords become impossible to handle. If you type in the passwort for every site you visit you lose time.

    2) If the PC is compromised, typing in the password doesn't really help, because the password is logged anyways.

    How about telling them, for instance, to use firefox, use really strong passwords for each site and store it in firefox, using a single, strong, master password? The passwords would be encrypted then.

    THAT would tighten security while the actual cost for the user (in time) is little. Or you could ask them to use keepass or whatever safe program to safely store passwords and automatically insert them to the logon screen.

    And about the software update:

    The updating mechanism is allright for windows update.

    But it has become impossible for Joe Average to handle all the updates for all the other programs, even if he only installs the basic programs.

    You get a new install every few days. Flash, Acrobat, Apple (itunes, quicktime, bonjour), Java, Firefox or whatever you use, the mail program,... you get the point.

    With secunia for example, the "cost" of updating all the software is dramatically reduced as it tries to keep track of the most critical programs.

    Try that (or a similar program) and ask them to run that program from time to time to stay safe.

    Try to make them work as a normal user instead of working as an administrator. This tightens security and - assuming they are using windows - together with UAC is actually quite manageable since windows 7 came out.

    KISS. Make security easy for your folks. Only that works. The document is right. Normal security advices like "always type in your password" costs more than the risk cost for the individual user.

    That is why we as power users that are asked to "fiix it" need to think about SIMPLE security measures that costs VERY little time to follow.

  7. Re:Scapegoating 101 on Microsoft Sends Flowers To Internet Explorer 6 Funeral · · Score: 1

    Ever heard of a concept called virtualization? Do that and mom could use MSIE for business purposes only. And no, it's not M$ fault companies built browser based software that depended on MSIE 6 and that these companies didn't change their ways in the years (!) between.

  8. Re:Translation on Microsoft Sends Flowers To Internet Explorer 6 Funeral · · Score: 1

    If this rumor is true: http://thenextweb.com/apps/2010/03/04/internet-explorer-9-html5-compatible-microsoft-joining-antiflash-movement/ and IE9 passes (!) Acid 3, it needs SVG-compatibility, or am I misinterpreting Wikipedia? http://en.wikipedia.org/wiki/Acid_3 As for the png-part, MSIE 8 has not so many problems with png, but a few minor probs: http://www.gtalbot.org/BrowserBugsSection/MSIE8Bugs/ So *if* MSIE 9 would be HTML 5 compliaqnt and if it would pass acid 3, it would be a good thing. Mind you, I only use Firefox unless I visit Windows update or a page that insists on MSIE crap (happened once in two years, not visiting again), but MSIE > 9 would force standards down the throat of all companies that are forced to upgrade to Windows 9 10 11 or whatever version MSIE 9 would be shipped with...

  9. Re:Here's a suggestion: on On iPhone, Searching For Kama Sutra = Porn · · Score: 1

    Um - how about: I am reluctant to buy the iphone for its poor GPS (no navi-software) and its bad app-store-policy and its lack of modem-capability, but I DEMAND multi-touch on my next phone?

    I don't give a damn about "style". But everytime somebody showed me how to use the iphone, I envy them. No waiting for the iphone to respond, easy internet, easy usage - and did I mention the instant response time?

    It's not about style. It's about liking the usability. Give me alternatives or I'll strongly consider buying an iphone next time around - IF I could use it for navigation and as internet-access to my netbook.

    Style to me simply boils down to "phone needs to be black". But usability simply boils down to: Haven't seen anything nearly as good as this one. So Jailbreak might be the only option.

    A phone needs to be fast and intuitive and so on. I'll consider alternatives. But multitouch is fun to use. To me, that counts.

  10. Re:Expectations on Why Game Exclusivity Deals Are Feeding the Hate · · Score: 1

    <quote> While most people generally find exclusives a bit annoying but acceptable, this particular case is different.  This isn't Nintendo announcing the next Mario game--only on the Wii.  This is a game that was already announced as being multiplatform and even had a release date, but suddenly it's become a timed exclusive for one system.  The versions for the other systems will all be ready, but Sony's holding them back. </quote>

    Do you remember Halo? Developed as the next killergame on the PC and other platforms, Microsoft bought the company, decides to finally kill the PC as a gaming platform and start selling XBOXs instead.

    They did quite well.

    I am angry too, but it won't do them any good. I talked peoply out of buying Sony products before - as the notebook repair prices are ridiculous - but I will intensify my efforts.

    You made me wait for Ghostbusters? This would have brought you roundabout 300 EUR for console and game if I would have bought this game on the console.

    I am personally aiming at talking people out of buying Sony products for at least 3000 EUR.

    And so should you. We are Nerds, right? We are the people others ask before buying hardware. Make Sony pay.

    Simple as that.

  11. Re:Let me be the first to say on Sony BMG Sued For Using Pirated Software · · Score: 1

    How embarassing. I was reading your post incorrectly. Simply forget it, because you actually said it was easy when using OS. Sorry. It's late.

  12. Re:Let me be the first to say on Sony BMG Sued For Using Pirated Software · · Score: 1

    Hi,

    have you actually red the reports?

    > The "key" used since 4 December 2004 by this company was
    > coded "TAM / CORE": the signing of a pirate.

    I don't know. When I start software @work all software is "registered to" the company I work for. I have never ever started software that is registered to a known release group. I only once had contact to the "scene", but "CORE" *is* a known group, even for outsiders, right?

    And it seems like that wasn't the only "pirated" software they used on their hardware. I am a "political pirate" http://en.wikipedia.org/wiki/Pirate_party but I either buy the software I use or I get free ware, preferably open source. These hypocrites installed root kits on others peoples computers and thus endangered others peoples privacy and human rights. They destroyed lives of people that simply downloaded games / music / films from sony for their own, personal use. And Sony actually optimizes its profits by "pirating" software from a small company? Talk about really evil people.

    No, I want to see Sony bleed. Not because it systematically "pirated" software, but because this company *made money* out of it AND ruinied others that "infringed" their "IP".

    I strongly object to the thesis that it is hard for a company to maintain their licenses. You may not have 100 % control about people's computer @work, but four servers with a pirated software on it "licensed" to a release group? I don''t think so. I believe the report is right: Sony simply denied them the money to buy necessary software so in the end it had to be pirated, because the job the software was planned for needed to be done.

    Echnaton192

  13. Re:Crazy World on German Court Abolishes German Snooping Law · · Score: 1

    > Oh and in North America, you don't have to notify ANYONE when you move

    Given. But what is the price you pay? ID theft. Someone may steal you're card here, but in most cases money is refunded. ID theft is a no-issue here. They know were you live, you can't open an account without an official ID, for instance.

    I was very concerned about privacy until that ruling, but I am quite happy that despite our politicians, the system works :)

    We have a new human right. My english is not good enough to translate it. But look around, someone has.

  14. Re:you live and you learn on German Court Abolishes German Snooping Law · · Score: 1

    Oh, you mean like the three Crytec-employees that are Goths and go to the same places I do? Ahm - nope. They're more like admired. It depends on whom you hang around with. Yes, there are some stupid people wanting to ban ego-shoters. There is propaganda. But you have those suckers too, don't you? Talk about that lawyer...

    At least we have no Christian Taliban [tm] in our government :)

    You really should always try to see both sides. The ban of egoshhooters isn't in place yet. Some "christians" here try to change that. But we are a democracy. And if everything else fails, wait for the Stupid Old Men - and Women - to retire. Young people of 18+ don't believe in being patronized. I am 39, those wankers are 60+ - you do the math :)

    Bye

  15. Re:If true, this isn't particularly surprising. on Thousands of Adult Website Accounts Compromised · · Score: 1

    You are right - and you are wrong :)

    Of course I would sue - and I would sue openly. I am not attached so don't care. But: The porn industry in Germany is one big ripoff.

    The adult sites in the U.S. are simply better: More consumer-friendly and less expensive. You have to read the contract better than in Germany though, because it's more likely that they want you to accept spam as a part of your payment.

  16. Re:Game portability on Valve Locking Out Gamers Who Buy Orange Box Internationally · · Score: 2

    Which player would that be?

  17. Re:Who cares? on Underground Mac Community Foils a Coup · · Score: 1

    Or you could purchase a prepaid credit card - yes, these do exist.
    http://www.google.com/search?q=prepaid+credit+card /

  18. Re:In Germany it was the other way around on In Australia, An Ebay Sale is a Sale · · Score: 1

    As mentioned before, it's the same way around. And for the same reason: A contract is an agreement between two people/group/whatever do do A if the other one does B. In most cases there is no bound in German law for any form this agreement was reached.

    If they agreed via telephone, fax, drums, morse code or whatever does not matter. If two sailors use flags to agree to the contract it|s still valid.

    Of course there are some examples were zou could get out of a contract. For example, if zou accidentally wrote 10 Euros for mz car when zou meant 10.000 Euros then you get out of it. But you will need to tell the other person as soon as you found out your mistake.

    Just because you could have get more is no reason. You as a seller will lose the case in question here in Germany too. Period. I do not know about the U.S. but if a deal at ebeay is too good to be true then it would be very stupid for you to not sue the guy if he tries to chicken out. As long as you have reasons to believe that guy is not completely broke.

  19. Re:Still MS demands IE for a lot of their services on IE Dropping, Now Near 70% In Europe · · Score: 1
  20. Re:Stop Bickering, Stop Posting on IE Dropping, Now Near 70% In Europe · · Score: 1

    Good luck. The last banks here in a big, developed european country just abandoned OS/2 a few weeks ago, using Netscape 4.61 (no joking!) and switched to.... tataaa.... Windows XP with MSIE 6 :(

    In some cases, it-nerds sticking to stone-age hard- and software because it's been "approved" should simply get their own, personal stoning. They said "Jehova" a hundred times, ladies, I mean guys.

    You even get e-mails from those guys complaining the customer-game on your website (not the site for the business-partners) does not support flash 5 when flash 9 (!) is already out.

    killkillkillkillkillkill

  21. Re:It is to be expected on IE Dropping, Now Near 70% In Europe · · Score: 1

    Nonsense. mozilla.org is based in the US.

    But Firefox

    - did never had those big holes in itself like MSIE 0.0 - 6.0 had.
    - did never try to force you to use one search engine like MSIE 3.0 - 6.0 did
    - does not patch it's holes once in a month even if exploits already exists. It patches them within hours, even if the problem lies within Windows
    - doesn't show up hundreds of thousands of spy- share- and crippleware when you search for extensions
    - doesn't overhaul the whole OS just to install a new browser
    - doesn't lose it's settings like MSIE after (re-) installing the OS. Please try to backup your passwords, history, bookmarks, skin, the addons, all those little settings from MSIE 6 and move it to MSIE 7. Or from XP to Vista. Or even from one XP to another XP.

    Some people here simply don't like the feeling that MS owns everything, while MS did not care for security nor privacy for ages. And they tell their friends to try Firefox. And they try out Firefox. And of course their friends like it. And they tell their friends....

    My boss, for example, was very skeptical. But he tried Firefox's tabs and liked it (I am working at a web-support-line for a big investment company and we have to have 6 - 15 Windows open simultaneously, which is a pain in the butt if you don't have tabs), while MS still used one window per page. He started to use Firefox, but was still joking. But he started to use it at home for some strange reasons, like the better handling.

    And then he learned that Firefox actually is more secure. When a problem appeared on the web concerning Firefox, it got fixed. Instantly. Still joking about Firefox.

    And then he tried out the extensions and fell for them. Began to love Firefox. His biggest concern right now is losing his local administrator privileges and losing Firefox as well as he just became a bigger boss. Get the picture?

    And speaking of Firefox as an cross-platform-browser and testing HTML-pages with this browser: Why argue with the OSS-multiplier who complains he doesn't want to use this shitty MS-crap? Or with the rich guy using Apple (hello customer with money to spare :), when you simply have to develop for *one more* browser besides MSIE to cover *every major OS on the market*?

    Just my to (Euro-) cents.

  22. Re:Here's Looking to IE8 on IE Dropping, Now Near 70% In Europe · · Score: 2, Informative

    What is the big deal? Firefox brings its own settings and doesn't effect your system as every file is put to the firefox-directory or its profile. Simply try it. It won't bite :)

    And of course you could keep MSIE as your main browser. It's not as if you were changing your mailclient or something. Like you could use notepad AND word ;)

    MSIE sucks, Firefox is nice, it's as simple as that.

    Try out the free add ons.

    http://www.mozilla.com/

  23. Re:I just don't get one thing... on AT&T Gears Up for the iPhone · · Score: 1

    There are those blue tooth headsets you can plug into your mp3 that mute the music when a call arrives. And you can even plug in your own earphones. So as long as your cheap mobile phone supports blue tooth, this might be an option...

    I might do that: The ipod holds my whole music (which is about 2x of data than the iphone and my mobile phone supports GPS and syncs with outlook (which I only use for calendar and contacts). So as long as Generation X of the iphone isn't out, this brings me everything I need gadget-wise :)