Slashdot Mirror


User: johnjones

johnjones's activity in the archive.

Stories
0
Comments
941
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 941

  1. Servers are something else... on Linus Torvalds on Why ARM Won't Win the Server Space (realworldtech.com) · · Score: 1

    The server market is actually different now... DCS is bigger than home servers...

    arm has this now :

    https://github.com/ARM-software/sbsa-acs

    but well thought out just dated Linus Torvalds...

    John Jones

  2. Multiple SSIDâ(TM)s - I want SSO on Amazon Is Buying Mesh Router Company Eero (theverge.com) · · Score: 1

    Eero was pretty nice they at least supported IPv6 eventually...

    They had a feature of broadcasting multiple SSID for example creating a network just for the babysitters so you didnâ(TM)t have to give out your main network details...

    What I would like is the ability to use 802.1X for logins on the wifi

    So users could use their @gmail or @outlook etc and be given a certificate and I could be prompted to approve them on the guest network ( isolated )

    That would be nice...

    John

  3. Yes answer is TLSA/DANE on Firefox Will Soon Warn Users of Software That Performs MitM Attacks (zdnet.com) · · Score: 1

    YES exactly TLSA/DANE is the answer here but sadly apart from national Security agencies...

    if only mozilla actually built a browser around security...

    TLSA/DANE effectively declares the TLS/SSL cert you should expect so you can use it even through a proxy

  4. Geocentric Datum and maps... on Earth's Magnetic Field Is Acting Up and Geologists Don't Know Why (nature.com) · · Score: 5, Interesting

    what matters is how everyone else measures...

    For example, in Sydney there is a 200 metres (700 feet) difference between GPS coordinates configured in GDA (based on global standard WGS 84) and AGD (used for most local maps), which is an unacceptably large error for some applications, such as surveying or site location for scuba diving

    see : https://www.icsm.gov.au/datum/what-gda2020

  5. I agree you should replace the Cert but you need to declare what your cert is and do it in a sensible open mannor otherwise people might pin your cert and freak out...

    the Solution to this is to use DNSSEC and DANE to declare your cert and provider you even declare a rollover rules...

    the USA gov have been pushing DNSSEC they just need to get the DANE declared since they no longer have a Gov mandated TLS cert provider

    john

  6. just move countries - well done USA - move out on Software Patents Poised To Make a Comeback Under New Patent Office Rules (arstechnica.com) · · Score: 3, Insightful

    dont have a office in the USA or bank account (you can still accept US dollars etc )

    USA is the last place you want to pay tax's

    If your selling software even a small amount do as the large corporate entities do and pay no tax... It's the American Corporate Way
    vote with your dollars and tax then they might get the message...

             

  7. True mozzarella NOT what Americans call it... on American Cheese Surplus Reaches Record High · · Score: 1, Offtopic

    True mozzarella is made from buffalo not cow's

    ignorance is not an excuse

    Mozzarella was granted Protected Designation of Origin status by the European Union in 1996

     

  8. so whats the best open weather data network ?

    I'm not after predictions, just data

  9. environmental damage ? on New York Sky Turns Bright Blue After Transformer Explosion (nytimes.com) · · Score: 0

    So great its a transformer...

    couple of things stand out :

    Environmental damage, what was the reason why it was blue and I'm going to guess that its not intended to be breathed in...

    A prison had a power failure for 25 minutes... backup generators was not mentioned...

    great reporting... simply follow what people say on twitter...

  10. they have no DNSSEC & other problems on Users Report of Nationwide CenturyLink Internet Outage (ktvb.com) · · Score: 5, Informative

    centurylink.com has no DNSSEC
    centurylink.com have insecure cipher suite on their mail servers : IDEA-CBC-SHA
    centurylink.com does not support DKIM records

      centurylink router config has no rpki for bgp so can be hijacked

    they do however have a status page : https://status.ctl.io/

  11. the Japanese people need to stand up and be counted...

    is this acceptable for the government of japan to deplete stocks and allow China to take the moral high ground ?

  12. yes its a good thing to compete... on The GPS Wars Have Begun (techcrunch.com) · · Score: 1

    all of the systems currently are VERY easy to block

    hopefully the UK system might have some Point to Point information or mitigation
    being able to get to the raw sensor data on a receiver is crucial as well as calibration

    you can see a list of android phones and their capability here :
    https://developer.android.com/guide/topics/sensors/gnss

    Apple need to step up in this regard and offer L5 Support, SBAS and BeiDou with offsets
    Currently apple supports GPS (GALILEO which is compatible) GLONASS and augmentation from QZSS and wifi/bluetooth

    regards

    John Jones

     

  13. exactly the BND are sharing the same way EU does on Germany Refuses To Ban Huawei, Citing Lack of Real Evidence (phys.org) · · Score: 1

    your spot on I find it hilarious anyone interested in privacy would choose Germany with what the BND can do they are pretty amazing !

  14. sure it does on Germany Refuses To Ban Huawei, Citing Lack of Real Evidence (phys.org) · · Score: 2

    the Chinese equipment supports interception the same way other equipment makers do

    the problem is the network operators dont know how and when it might be enabled without them asking and with much of the SDN equipment the opportunity to detect it is reduced...

    everyone spy's on each other, its the very nature of the security posture that the world has adopted

  15. loading images so 90's just use txt on Iranian Phishers Bypass 2fa Protections Offered By Yahoo Mail, Gmail (arstechnica.com) · · Score: 1

    the fact they watch for email being read wont work for plain txt, gmail even for HTML loads the images into the gmail cache on receipt so you cant tell when the person reads the email (you have to use the gmail apps though) you should use plain text if possible.

    so basically this is a phishing scheme linked to SMS messages and wont work with the google authenticator or yahoo 2FA nor will it work with apple 2FA

    your more at risk if you dont secure your domain... the number of domains that do not have DNSSEC is quite scary... combined with the amount of mail servers that actually verify the certificates correctly via DANE

    you can test your domain https://www.internet.nl/

    Thankfully the German and Netherlands Governments have made DANE a standard for secure email communications... the American gov also MUST have DNSSEC enabled...

    so test and secure your corporate domain today !

    regards

    John Jones

  16. most ships have COTS systems on Ships Infected With Ransomware, USB Malware, Worms (zdnet.com) · · Score: 1

    often COTS run windows, the navigation/sensors tends to be seperate network. Like all systems you need management and maintenance of those systems just like the engine etc

    The problem comes when no one takes responsibility

     

  17. mKaart (a smartcard) works on the train, tram, bus and self-service bicycles

    young people (20 to 25) can get free travel now apart from travel to the international terminals

    honestly I don't know why more places don't do this, sure charge visitors and if you want 1st class charge for it but ordinary TAXPAYERS who dont need to have an entire car then are not clogging up the roads... makes everyone happier

  18. its just RIPA with more legal wangles on Australia Passes Anti-Encryption Laws [Update] (zdnet.com) · · Score: 4, Interesting

    its pretty much the same as Regulation of Investigatory Powers Act 2000 (c.23) (RIP or RIPA) is an Act of the Parliament of the United Kingdom

    they don't try and break encryption they simply ask that you hand over the Keys so they can break into the stream

    the same thing as the :

      United States Foreign Intelligence Surveillance Court (FISC, also called the FISA Court) is a U.S. federal court established and authorized under the Foreign Intelligence Surveillance Act of 1978 (FISA) to oversee requests for surveillance warrants.

    so americans do you want to examine your own systems because the people who Cant Infiltrate Anything simply go to court...

  19. how about this Hyper Text Markup Language ? on Google Bridges Android, iOS Development With Flutter 1.0 (arstechnica.com) · · Score: 2

    honestly can we not just use web app for GUI development like Steve Jobs evanglised when they first launched the iPhone ?
    (native code if you must for OpenGL ES and specialist API's )

    maybe if google actually contributed to cordova so we could use their "app" on something with a fast keyboard as well as mobile :

    https://cordova.apache.org

  20. Microsoft's never doing any military or space work on That Time The Windows Kernel Fought Gamma Rays Corrupting Its Processor Cache (microsoft.com) · · Score: 3, Informative

    preparing your software for failures in hardware due to common problems such as radiation might be a good idea...

    This is why some firms/states would not trust microsoft to critical functions....

  21. Companies USED gov data now its pay up time on 'Google, Apple, and Uber Should Be Forced To Share Their Mapping Data' (technologyreview.com) · · Score: 1

    they based their data on taxpayer provided data and don't contribute anything back willingly

    so the UK will legislate to FORCE them to CONTRIBUTE back to the taxpayer funded systems

  22. great but detail / resolution on Human Images From World's First Total-Body Scanner Unveiled (medicalxpress.com) · · Score: 3, Interesting

    the best way has always been NMR spectroscopy or magnetic resonance spectroscopy (MRS) which are very very detailed, they don't specify the resolution nor the interpolation (guessing) thats done so basically they will have patents galore around it compared to NMR which is much higher detail and competing equipment manufacturers

    whats the advantage apart from whole body ? (that I'm guessing is actually guessed rather than scanned at the same time)

  23. if you cant admit students regardless of their ability to pay otherwise known as NORMAL

  24. problems with SCTP and QUIC on The Next Version of HTTP Won't Be Using TCP (zdnet.com) · · Score: 5, Interesting

    yes and BOTH use UDP and you will see a LOT of problems with optimisations of links specifically sub sea fibre links

    but google et al dont seem to care since they have plenty of transit they control and CDN like features...

    good luck getting the telco's to use this and support it (they will just drop your packets) they make more by billing for the data and without control you wont know who is dropping your packets...

  25. Slow adoptance because of banks on US Chip Cards Are Being Compromised In the Millions (threatpost.com) · · Score: 3, Informative

    the retailers put up with allowing mag stripe because the banks do

    if EMV actually made the retailer liable for fraud then they would make sure you use pay wave/pass (NFC) and a PIN
    by using a CHIP and PIN it first of all verifies LOCALLY on the chip then generates a One Time Code that gets sent to the issuing network (bank) There is ZERO

    repeat ZERO ways to skim chip and PIN its all down to the Mag Stripe

    before some bright spark complains about having to input the numbers into ecommerce sites... Yes this can be secured by 2FA that the banks in europe ask for (you get redirected during the payment process to the banks website that then ask's for your 2FA details )

    basically its american banks being lazy and dont care about loosing customer details... its just a cost of business to them and they dont care about the retailers experience either otherwise they would have made made NFC cheap and easy

    basically banks need to reduce they fee's they charge retailers in return for securing things 0.5% is common in Europe