Slashdot Mirror


User: allo

allo's activity in the archive.

Stories
0
Comments
2,738
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 2,738

  1. No, you shouldn't have to on Mark Zuckerberg Tapes Over His Webcam. Should You? (theguardian.com) · · Score: 1

    No need to do so, if you only run trusted software. If you need to fear that something uses your webcam without your permission, you have bigger problems than the webcam.

    And the webcam is boring. What do you expect to see when secretly recording? Some grimaces of the user, who doesn't know he's filmed. Maybe you see him naked. Very thrilling, because there are no naked people on the internet!

    The problem is the mic. While an image of you is utterly boring, your conversations are very interesting. And taping the mic is hard, if you want to make sure that no sound gets in anymore (as some programs may better reconstruct your words from a low sound than you would expect).

    So the mic is something, where it may be a good idea to cut the cable and buy some usb mic for when you need it. It has better quality anyway.

  2. Maybe they WANT some people to analyse it on Kernel of iOS 10 Preview Is Not Encrypted -- Nobody Knows Why (technologyreview.com) · · Score: 1

    Somebody forced them to include something ugly, they are not allowed to tell and they really hope we'll find it now.

  3. Re:Can you say privacy shield? on PayPal Dumped Cloud Company After It Refused To Monitor Customers' Files (fortune.com) · · Score: 1

    now they will.

  4. Re:Can you say privacy shield? on PayPal Dumped Cloud Company After It Refused To Monitor Customers' Files (fortune.com) · · Score: 1

    privacy shield does not mean anything. It's like "usa says they won't do evil, but they reserved the right to do so". That's why the eu activists want to stop it (and keep at the current "data should not leave safe countries" policy, which is just covered by the normal laws regarding privacy in the eu).

  5. > helping college students illegally swap music and movies
    Citation needed.

    They created an opensource dropbox clone. That's what they did and they did way better than owncloud.
    Hosted service as business model is the reasonable option to fund that.

  6. So, did you read the sentence?

  7. Re: Why would I want 2 step on Google Is Finally Making Two-Step Verification Less Annoying (theguardian.com) · · Score: 1

    nope, they do not transfer call logs to their servers. If they do, it would be rather new and a reason to sue them.

  8. I want this for servers on Google Is Finally Making Two-Step Verification Less Annoying (theguardian.com) · · Score: 1

    But without google.

    Something like an android app and some web service coupled with a pam module. The login prompt then displays a number, the app displays the number as well and i can accept the login from the app with a single tap. Fallback to normal google authenticator.

  9. Re:Terms of Service on Twitch Brings CFAA and Trademark Claim Against Bot Operators (techdirt.com) · · Score: 1

    Did you click somewhere "i agree"? No? Than you're not bound by anything, which isn't a law.

    Did you? Now it's open to legal interpretation, if agreeing to tos without having a contract (which means you're providing some personal details, like at least a verified e-mail address or something similiar) has a meaning.

    And then the question is, what's the worst the company can do? Try to go to court "We really logged, that he clicked that button!!!"? The most important part of normal ToS is, that companies can terminate your account. They do not need to sue, because they can terminate your account and are sure you cannot sue them because of this.

    When they now want to sue anonymous visitors ... have a lot of fun.

  10. What's okay for the US of A ... on Russian Bill Requires Encryption Backdoors In All Messenger Apps (dailydot.com) · · Score: 1

    ... seems to be okay for russia as well.
    No surprise here.

    Stop surveillance. Worldwide. For everybody.

  11. Re:So, kinda like....?? on Red Hat Launches Ansible-Native Container Workflow Project (helpnetsecurity.com) · · Score: 1

    ansible is kind of cfengine/puppet/chef/salt/... but with more native tools (no server side daemon, etc.) in the unix style (have a lot of small programs working together). The simplest modules just run shell commands via ssh, some more advanced use small python scripts.

  12. Re:Terms of Service on Twitch Brings CFAA and Trademark Claim Against Bot Operators (techdirt.com) · · Score: 1

    you do not need to accept any tos to watch.

  13. Re:Legal no-brainer. on Twitch Brings CFAA and Trademark Claim Against Bot Operators (techdirt.com) · · Score: 1

    No problem here, as you do not need to accept the tos to watch a stream.

  14. Re:Application white-listing for Network Access on Interviews: Ask Security Expert Mikko Hypponen A Question · · Score: 1

    So, easy route, which might be secure:

    - Install some linux
    - add a user "restrictednet"
    - add a firewall router -A OUTPUT -m owner --uid restrictednet -j DROP
    - run stuff as this user

    you will still leak anything triggered by setuid programs as ping, dns requests made by the system, etc.

    more secure:
    - run a vm as this user. Then everything the program can generate is owned by the restricted user.

    more flexible:
    use firewall rules matching a cgroup, put programs / vm-instances in the cgroup. This allows you to switch network on/off for programs on the fly, but requires some care (as for example you need to make sure you add the pid to the cgroup, you need to create the cgroup in some bootscript, i think you need to add firewall rules after the cgroup was created, etc.)

  15. That doesn't need an AI on IBM Engineer Builds a Harry Potter Sorting Hat Using 'Watson' AI (thenextweb.com) · · Score: 1

    Kind of stupid. For the sorting hat you just need a binary decision tree, where you get questions until you arrive at a leaf node, which tells you the house. There are already many implementations of this. linux (i think bsdgames) has a animal guessing game, akinator is the web based version of this.

  16. Re:Open source concerns on KDE Bug Fixed After 13 Years (kate-editor.org) · · Score: 1

    Most of KDE is GPLed.

  17. Slashdot on KDE Bug Fixed After 13 Years (kate-editor.org) · · Score: 5, Insightful

    And slashdot doesn't even try to describe the bug in the summary.

  18. Please more stereotypes! on Mattel Sells Out Of 'Game Developer Barbie' (cnet.com) · · Score: 1, Insightful

    Because a regular barbie cannot represent a game designer, or can it?

    Stop being so stupid. It's all about the fantasy. Even a stick man cut out of paper can be a game developer role model, if the child likes to play this game.
    If this is the most attractive game is a whole other question. If you look at the game development sector you're not even sure, if you would encourage somebody to get a game developer. Respect to the ones, which are, but that does not mean i would want to push my child in that direction.

  19. Re:Application white-listing for Network Access on Interviews: Ask Security Expert Mikko Hypponen A Question · · Score: 1

    Maybe you just have a look at cgroups and iptables.

    But it's bullshit. If you run untrusted software, you're fucked. Linux users just know it and tell it straight forward, many windows users believe in claims of so called firewall apps.

    Easy example for windows: There is an api to fetch urls using IE dlls. This means, a program wanting to communicate even when the firewall blocks all ports, just uses this api and can talk to its server using a operation system process. One, the firewall probably cannot block and if it can, you will have whitelisted it as all other stuff is broken if you don't.

    So. STOP. RUNNING. UNTRUSTED. CODE.

  20. Re:PHK criticizes HTTP/2; do you buy it? on Interviews: Ask Security Expert Mikko Hypponen A Question · · Score: 1

    > To the point that EU cookie notice popups have become more annoying than ads and I need an adblocker to get rid of them. Thanks a lot, EU.
    The point is, that companies try to ignore the law that way.

    "You're agreeing to cookies by visiting this page [OK]".
    Hey, you set a cookie, before i could even read your message. I expect to get NO cookie at all before clicking ok.

    There just needs to be prosecution for this practice and a requirement for real informed consent. "We do not really need cookies, but our user tracking depends on them. Accept some cookies? [yes, i like to be trackedn] [Fuck off, just show me the content]".
    Of course the requirement needs to include, that not showing content, even when it would be possible without cookies is illegal. So a shopping cart requireing an session cookie should be okay (even without asking, as implicit consent), some tracking cookie should never be okay.

  21. Re:Most recovery re-installs work the same on Microsoft Tests New Tool To Remove OEM Crapware (arstechnica.com) · · Score: 1

    For Lenovo i created a boot medium via windows, then reinstalled ... and it reinstalled the crap as well.

  22. Can it be used ... on Microsoft Tests New Tool To Remove OEM Crapware (arstechnica.com) · · Score: 1

    To remove Windows 10?

  23. to free pizza?

  24. Promoted Tweets on Now Advertisers Are Watching Your Emojis On Twitter (thenextweb.com) · · Score: 1

    The fastest way to get me to block your account.

  25. 2-FA prevents reasonable privacy.
    Either you need to use your authenticator all the time or you cannot delete your cookies, as the site will see your visit as new visit requiring a new code.
    So use a strong password instead.