Slashdot Mirror


User: Altrag

Altrag's activity in the archive.

Stories
0
Comments
2,180
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 2,180

  1. Re:Cry More on Making FOIA-Requested Data Public: Too Much Transparency For Journalists? · · Score: 1

    The problem is that if I have to pay to get something released, and I'll see no ROI, then I'm not going to pay for it.

    I agree it would be grand if the government would just release all public documents on their own dime. But they don't. And if this stops investigators putting in their dime as well, the result will be NO documents being released to anybody, which is not an improvement over the current system.

    Doing this but implementing say, a 1 month moratorium on public release rather than immediate, would probably be a good tradeoff. Of course that only helps the general public without doing much for either the government or the investigators (in comparison with the current system) so why would they bother?

  2. Re:Call it what it is on Snoopers' Charter Could Mean Trouble For UK Users of Encryption-Capable Apps · · Score: 1

    Snooper's Charter sounds even more ominous to be honest. At least a "firewall" has some implication of protection even if everyone knows its true purpose.

    "Snooping" on the other hand has pretty much purely negative connotations since early grade school for most people.

    Then again, its kind of refreshing that the government is at least being honest about the purpose of the program. If it was in the US it would be called PINKUNICORN or some other absurd backcronym created purely to sound "nice" in print without giving away its sinister underpinnings (see: USA PATRIOT.. and a whole lot more listed here.)

  3. Re:What about medical records? on Snoopers' Charter Could Mean Trouble For UK Users of Encryption-Capable Apps · · Score: 1

    Fax?

    Other than that.. hand-waving and magic. Government officials (in every country) that come up with these plans seem to be under the impression that its possible to have a government back door while still being generally secure against everybody else.

    Its dreadfully obvious that these people don't know the first thing about computer security, but unfortunately only to people who DO know the first thing about computer security. The Dunning-Kruger effect is in full force when it comes to politicians creating computer security legislation.

    Of course, it doesn't help that they're "right" in the technical sense that you can build secret-sharing encryption schemes. But they tend to overlook two serious issues here:
    1) The secret will get out with probability approaching 1 given enough time. Of course if that amount of time is "50 years" as is the case with, for example, many military operation secrets, then maybe that's OK. Chances are it will be a lot less though given that the digital secret will have to be fairly wide-spread amongst government and telecom employees (who are generally a lot less disciplined than military personnel) in order to be useful.

    2) Secret sharing schemes are a completely different type of encryption. You can't just "add" a shared key to an existing AES-encrypted (for example) message. The message would have to be decrypted with the original scheme + key and then re-encrypted with the new shared scheme and new keys. And even if you're only interested in transient communication (so you don't have to worry about pre-existing messages,) the developer will have to rebuild their product (and force-distribute it) to handle the new schemes. Might be plausible for the majors like Facebook but pretty insane to think everybody who operates in your country could pull that off.

  4. Re:They have no intent to ban Whatsapp and others on Snoopers' Charter Could Mean Trouble For UK Users of Encryption-Capable Apps · · Score: 1

    Which they won't do. They'll either comply (probably by just disabling the encryption layer,) or pull out completely.

    Remember, WhatsApp (and other such companies) aren't in the business of social reform. They're in the business of making money. The only way they would go to the effort of decentralizing their software (or any significant change) is if they thought it would provide a reasonable ROI (which may be in the form of stifling losses as opposed to producing profits.)

    I have significant doubts that a single country would provide those incentives, especially for something like decentralizing which would make it much more difficult to monetize the product in the first place.

  5. Re:The end of on-line banking and shopping on Snoopers' Charter Could Mean Trouble For UK Users of Encryption-Capable Apps · · Score: 1

    even significant parts of Cameron's own party are likely to vote against it and block the legislation.

    Never underestimate the stupidity of politicians. Especially if they're being bribed, coerced or threatened (I don't know how UK politics works but here in Canada, going against the party line is a good way to get yourself backbenched.)

  6. Re:Experts? on Crypto Experts Blast Gov't Backdoors For Encryption · · Score: 1

    Its not that we don't trust the technology, its that we don't trust the people implementing and operating the technology.

    They don't have our best interests in mind, and are far too often either too incompetent or too cheap to properly implement the necessary measures even if they do have good intentions. And even if they manage to pass that test, their replacements in 4 years may not be so noble.

    And that's the government. Private companies don't even have to pay lip service to our best interests. I mean they'll do so anyway in some cases (such as Apple pre-enabling encryption) but its not because they have to, and they'll stop as soon as it becomes more financially advantageous to screw us over.

    And even if by some miracle, all of that goes in the favor of us average citizens.. somebody, somewhere is eventually just going to make a mistake and leak the keys by pure accident.

    And once the keys are out, there's no take-backs. Every single device using those keys must be considered immediately and permanently compromised.

  7. Re:backdoor versus sidedoor. on Crypto Experts Blast Gov't Backdoors For Encryption · · Score: 1

    My safe deposit box (well, if I had one..) is most certainly not vulnerable to one person with a good drill.

    Its vulnerable to one person with a good drill, who can bypass bank security, can get into the cage, and drill the box out all without anyone noticing (and/or faster than anyone can respond.)

    Your average internet-enabled computer is more along the lines of the safe sitting in the middle of nowhere where nobody can hear the drill, nobody is likely to respond, and no other security measures are in place beyond the lock on the box itself.

    While from a mathematical point of view, encryption is the strongest security we've ever developed, we're still pretty sloppy on the human side of the equation (ie: not putting the keys somewhere they can be found, which includes everywhere except being a secret known to exactly one person) while we've been figuring that shit out with respect to banks for hundreds if not thousands of years.

    There's also the downside that a bank lock is (essentially) unique while an encryption protocol tends to be used everywhere. If someone gets a key to your lockbox, you grumble about whatever got taken and replace the lock. If someone gets a hold of an encryption master key then every device everywhere using that protocol needs to be replaced (PS3 anyone?) Firmware isn't sufficient due to the obvious downside of being able to overwrite it, so its minimally a chip replacement (and even that's questionable.. black blob is more likely if you need it to be actually secure, which generally means entire board replacement.)

  8. Re:They tried it before. on Crypto Experts Blast Gov't Backdoors For Encryption · · Score: 1

    That would be.. a hard sell. OpenSSL and many other encryption technologies are open source, already exist, and are already used by many many people and companies (which are more important to the govt these days.)

    Even if you convinced the OpenSSL team to implement a back door.. its open. Someone would just remove the back door. And someone else would simply read the code to find the back door and use it nefariously. So they'd not only have to figure out how to ban or enforce restrictions on new software, force old software to be upgraded to restricted newer versions.. they'd also have to blanket ban all open source products that include any sort of encryption layer, regardless of compliance.

  9. Re:Falling on deaf ears on Crypto Experts Blast Gov't Backdoors For Encryption · · Score: 1

    Given the flurry of government breaches over the past year or so, I'm not sure they're using either backdoored or real encryption to any great extent at the moment.

  10. Re: Falling on deaf ears on Crypto Experts Blast Gov't Backdoors For Encryption · · Score: 1

    The idea isn't to sell them to European (or Asian or whatever) countries. The idea is to produce overseas and sell locally. Which is already happening in most cases anyway so its mostly a matter of including the changes in the next round of fab blueprints (or whatever they use) that you fire off to the factories in China.

    Of course the next step by the govt would be an import ban on such devices.. but they'd have a hard time punching that through when the devices you're talking about are things like iPhone7 and whatever Google calls the next Nexus product.

    People might not understand/care about back doors, but they sure as hell care about not being able to buy the newest gadget and if the manufacturers of such gadgets understand/care about back doors, the government will find themselves in a bit of a pickle.

  11. Re:I don't think it means what you think it means on The Unintended Consequences of Free Windows 10 For Everyone · · Score: 2

    And exactly the opposite of what MS wants:
    1. Open sourcing it completely is pretty unlikely. There's still a lot of proprietary code in there, even with the various shared source programs, and much of it is licensed from other vendors and even MS is in no position to just arbitrarily release other peoples' code.

    2. MS wants people to keep up to date. Every time someone gets a virus or an incompatible driver update or some other BS, they blame Windows for being crappy. In many cases, the issue they're having has already been patched long ago. Sure 0-day exploits are thing, but most people don't pick them up on day 0. Even at internet speeds, those things take a while to spread around. Charging people for updates is a very very good way to make them not bother updating. (And the extreme of "tip-top" shape is entirely impractical for so many reasons, regardless of any discussion of updates. Way way way too many variables involved to offer that level of support to anyone willing to pay a measly $10.)

  12. Re:WindowsME 2.0 on The Unintended Consequences of Free Windows 10 For Everyone · · Score: 1

    Stability wasn't Win8's problem. I doubt it'll be Win10's problem either.

    Win8's problem was Metro, which most people hate with a passion. Win10 still has Metro (backward compatibility) but its kind of jammed into a Win7 style UI in a Jekyll/Hyde type hybrid abomination.

    It'll probably be fine though. People will learn to ignore the Metro half of the start menu and life will go on in Windowsland.

  13. Re:I wonder... on The Unintended Consequences of Free Windows 10 For Everyone · · Score: 1

    There's one very major reason to prefer XP: If you're using software that doesn't play nice with UAC. If you're lucky you might be able to reconfiguring to work around the UAC issues (in particular, installing to a non-standard directory) but that has its own potential set of risks.

    Of course that only applies to the (hopefully very few) computers that actually need to interface with legacy software (or hardware in some cases.)

  14. Re:I wonder... on The Unintended Consequences of Free Windows 10 For Everyone · · Score: 1

    It goes back further than that:
    95/98 -> not bad (crashed a lot but most users came from earlier MS products which were just as bad.)
    ME -> garbage
    XP -> great
    Vista -> garbage
    7 -> great
    8 -> garbage
    10 -> ??

    Personally, I suspect Win10 will fall into the "not bad" category again. It's biggest selling feature is being not Win8 rather than having much purpose of its own, so I'm not really expecting super amazing things from it.

    But hey you never know I didn't really recognize how much nicer Win7 was over XP for quite a while (particularly the taskbar.. to the extent that I tried to set all the options to be XP-ish for the first few months. But after getting used to the new style holy hell is it a lot nicer, especially as I get more powerful machines and have far more programs running simultaneously. Nothing along that vein has jumped out at me yet with the Win10 preview but then I haven't spent a whole lot of time with it yet either.)

    I'm just really hoping that they'll finally do something not entirely stupid when handling multiple monitors. Rearranging my entire desktop just because the EDID signal died (ie: I turned off my screens for the night) is ridiculous.

  15. Re:Scare quotes? on School Lunch Program Scans Student Thumbprints For 'Tracking Purposes' · · Score: 1

    The student ID isn't "exactly" as linked to them. If your fingerprints makes it into a federal database, you can be looked up for ages. If your student ID makes it into a federal database, you can only be looked up as long as you're flashing your student ID.

    Fingerprints can't be discarded like an ID card can.

  16. Re:Scare quotes? on School Lunch Program Scans Student Thumbprints For 'Tracking Purposes' · · Score: 1

    I think the issue is that the NSA is getting them at all.

    NSA tracking >> school tracking on the scary scale. Especially since the school is doing it in public and likely has to have some sort of expiration plan after the student leaves the school, while the NSA will keep that shit as long as they can fund the disk space.

  17. Re:Desperation on Windows 10 Will Be Free To Users Who Test It · · Score: 1

    I don't know if I'd call it "desperation" so much as "recognizing a changing landscape." Its hard to compete with free (Linux) and Apple's essentially giving away OSX with their hardware as well. Windows is the only major OS you still pay for these days.

    And really, its not all that much skin off their backs. Probably 90+% of people who already have Windows will never upgrade it until/unless they upgrade the entire computer with a preinstalled OEM version. Not that I have any insider info, but I would guess that off-the-shelf sales of Windows are miniscule compared to the OEM and other commercial contracts. Hell the second most common version of Windows is still XP http://www.netmarketshare.com/operating-system-market-share.aspx?qprid=10&qpcustomd=0, 14 years later and long after support was cut off!

    Plus, they're still pushing their mobile-integrated (and now XBox-integrated) unified platform idea, so the more people they get on the new Windows (even with Metro being less obnoxious,) the more people they might convince to buy mobile Windows products (and more to the point, start buying stuff from the Windows store which is near-free money once they convince developers enough to put stuff up there and get enough users to buy stuff that the store can become self-sustaining.)

  18. Re:Good Luck on France Claims Right To Censor Search Results Globally · · Score: 1

    The USA government can't meaningfully punish Orange by punishing Orange-USA

    So? What gives the USA govt the right to punish (meaningfully or otherwise) a French company?

    because Orange can create dozens of subsidiaries

    The USA govt's responsibility is to regulate things that happen on their soil. As long as those dozens of subsidiaries follow USA law, then there's no connection to the specific subsidiary (Orange-USA) that is breaking the law and being punished.

    What you're suggesting is the corporate equivalent of jailing your entire family because your brother committed a crime, even though the rest of you are perfectly innocent (and extraditing your French grandmother to boot!)

    As for long legally intensive battles... Why does that need to occur?

    It doesn't. But when have you ever seen it not occur?

    It isn't them meaningfully completely pulling out. And so the countries often can't accomplish their objective.

    And that's the sticky point in the issue. The internet gives no fucks about national boundaries or localized laws. So governments are in a position where they either have to give up their sovereignty (well technically try to convince other nations to give up their sovereignty, but that certainly won't be a one-way street,) or give up their ability to censor random things that they don't like.. or I suppose a third option is follow China's plan and just break the internet all together -- but even with their massive firewall they aren't entirely successful.

    The USA government is the government that can effectually regulate Google.

    No, they can't. The USA government has no more control over Google France than the French government has over Google USA. The only difference is that the head decision makers are in the USA and can potentially be convinced (but not forced) to apply changes across their global operations. But then again, France could also call them up and try to convince them to do things globally.. the USA just has a bit more sway in that aspect due to (mostly) human aspects like patriotism rather than any legal rights.

    If Germany or France or Spain wants a regulate the USA government is who they should be negotiating with, if they want their regulation to actually happen.

    That would require a treaty and while I'm sure its not unheard of, generally speaking nobody would want to instigate a whole treaty negotiation process to deal with a single company's policies. Which is why, as I noted, things like the WTO exist.

    Essentially, the WTO is an organization that has already been empowered by the US and French (and many other) governments to handle these disputes on their behalf, specifically to avoid the situation of dealing with direct government-to-government negotiations. (Well I'm sure the WTO does more than just arbitrate trade disputes but that's one of their jobs at least.)

  19. Re:Universal App APIs are too limited on Microsoft's Skype Drops Modern App In Favour of Old-Fashioned Win32 App · · Score: 1

    Absolutely correct. I'm also arguing (indirectly) against desktop specific UIs on mobile devices. I don't particularly see how you could have a universal API that does both (again, just talking the GUI components -- obviously the system-level APIs have more flexibility.) I mean I'm sure someone could hack something together but I suspect it would be a giant mash up of "if mobile do X else do Y," which isn't really "universal" in my mind even if it comes in the same .dll. Effectively that's your idea for maintaining multiple UIs (which is about the only plausible option in the general case.)

    I'm not sure where Skype came into this.. by way of example? In any case, the issue with Skype clients isn't the UI, its the transmission protocol. That shit's encrypted and MS hasn't been shy about threatening legal action if someone produces a third party client by breaking said encryption.

    They used to provide a library (skypekit) to do that but they decided to cut it off so now you're stuck with the official (horrid) client or nothing -- regardless of what device you're using. Sadly none of the versions I've seen/used are particularly great.. "usable" is about the most positive adjective I could apply to them.. About 1000 steps down from from the old MSN/Windows Live IM client which worked really well and had lots of options to customize your chat the way you like.

  20. Re:Good Luck on France Claims Right To Censor Search Results Globally · · Score: 1

    I can't say I agree with that. In my mind it should be:

    French Government -> Google France. Period.

    If the French government wants to try and dictate local laws in the US (or Australia or China or wherever,) then they should be poking around tribunals at some place like the WTO which is set up specifically for negotiating trade disputes between nations.

    And why would the US government need to go through two (like long and legally intensive) battles in order to regulate shit that happens on American soil? If Orange doesn't like American laws, they're welcome to haul ass back to France and let somebody else have their market share.

    Google already has (or at least has threatened) to do exactly that in several countries already when they couldn't come to terms with local laws (search for "Google pulls out," but be careful what you click with that sort of phrasing!) That's how it should be.

    Of course its entirely up to Google to decide whether their French servers are worth breaking their system elsewhere in the world. France has no jurisdiction to enforce this ruling in the US or anywhere else outside of their borders, which means the worst they can do is force Google's French offices to shut down.

    Now its never as simple as it sounds. I'm sure there's more than just a passing interest from the rest of the EU given that the right to be forgotten legislation is theoretically in effect for the entire union, as well as a handful of other countries around the world with similar legislation. And of course anyone who's ever wanted to force Google to censor anything (including the US) are going to be keeping close tabs on it in hopes that whatever decision is reached will provide precedent for their own issues.

    So we'll have to wait and see. Hopefully Google sticks to their guns. I'm a big fan of countries having the right to create and enforce their own local laws but our international legal systems aren't really sufficient to handle (never mind enforce) cross-jurisdictional issues like this yet and a sloppy legal structure is a fine way to grease those slippery slopes.

  21. Re:I do not consent on FDA Bans Trans Fat · · Score: 1

    Two issues with you're argument, regardless of whether you're right or wrong:

    - "I think" does not make a very strong case compared to say, "I did in-depth clinical studies and got these results."

    - Removing something from our diet all together (as is the case in a ban) is a much much bolder restriction than suggesting we reduce the amount consumed. For example, while we (the generalized "we") probably do eat too many carbs, eating zero carbs is also not going to be a particularly healthy diet. Presumably somebody did the research and decided that humans can survive without those particular kinds of fats.

    I'm not sure where refined sugars fits in that mix.. whether there just hasn't been enough clinical evidence to warrant a ban, or its been determined that its not feasible to replace all refined sugar with other sugars, or that the refined sugar lobby groups happen to be stronger than the trans fat lobby groups, or that they simply haven't gotten around to that one yet, I don't know. But just because trans fats aren't the only evil doesn't mean its a bad idea to get rid of them. One step at a time.

  22. Re:Good Luck on France Claims Right To Censor Search Results Globally · · Score: 2

    That's basically how things work already, even if the definitions aren't as strict as you're suggesting.

    The problem with this particular is that the internet gives approximately zero fucks about your national boundaries and national laws, no matter who makes the judgements.

    Stupid as this decision is, and horrible as the precedent it could potentially set is if Google complies, it shows a remarkable amount of technological awareness (for a pile of politicians at least) in that they recognize the only way to remove something from the internet is to literally remove it everywhere on the planet simultaneously.

  23. Re:Good Luck on France Claims Right To Censor Search Results Globally · · Score: 1

    Practicality has rarely stopped politicians when it comes to tech issues.

  24. Re:Good Luck on France Claims Right To Censor Search Results Globally · · Score: 2

    They are unrelated.

    They're related in the sense that both countries are trying to apply their local laws on a global stage. Beyond that aspect though you're right, they're unrelated.

    Though its not quite the same. While the US is claiming the right to retain information about citizens of other countries, they aren't attempting to force companies in those countries to feed them the data (though I wouldn't put bribery past them) -- they're only claiming collection rights of stuff that they can get their hands on themselves.

    As opposed to this French claim where if I (as a Canadian) decide to look up a French national using google.ca from a Canadian IP address, they still expect Google to filter my results. At least that's what its sounding like to me. So they're explicitly attempting to apply their local laws not just to Google' French subsidiary but to all of their worldwide subsidiaries.

    Its understandable that they'd want to do that (inasmuch as such a law is understandable at all) since they're likely well aware that someone could just use a VPN or other workaround if they only blocked such searches for French IP addresses.

    Of course they don't seem to be addressing the workaround of "use a different search engine." You can say what you want about the results ranking of Bing/Yahoo/Duckduckgo/whatever but they still all crawl the web in (fairly close to) the same manner and index the same pages -- you might just have to dig a little further into the results view to get what you want.

  25. Re:3 ... 2 .. 1 . on Microsoft Research Paper Considers Serving Web-ads From Localhost · · Score: 1

    I'm not lawyered up enough to absolutely say for sure (never mind just reading an article rather than the actual decision paper) but just from what I see there:
    - Its against a government agency rather than a corporate one, which may have an impact.
    - I don't think arbitration is the same as having a private judge. In particular, arbitration can fail and still be passed to a court whereas a judgement is typically final (barring appeals.)
    - Most of the EULA clauses related to this are specifically against class action lawsuits. I don't know if those enjoy the same seventh amendment privileges as private suits.

    Though none of that makes much difference to me personally as I live in Canada and US rulings have little to no bearing over me.