You do know the standards allow you to render things in slightly different ways, don't you? It's one of the principles behind HTML. If you need pixel-perfect rendering, the web isn't the right medium. It's not designed for that.
It's the most expensive science experiment, not project. The ISS isn't a single experimental apparatus like the LHC, it's a platform for multiple experiments. OK, it's really a political pawn, but it's a science platform too.
Freedom of Speech only applies with respect to the Government, not private entities.
The First Amendment of the US Constitution only applies to the US Government. The US constitution doesn't apply to most of the world and is far from the only definition of freedom of speech.
I lay awake in bed at night wondering the same thing, cold sweat running down my face as I count down the seconds until the release of Ubuntu 17.10. Then I consider that the world is becoming increasingly unstable and fractured and I realise that there's a good chance the human race will destroy itself in a fiery hellstorm of nuclear war long before then.
Nuclear war? We're all gonna die tomorrow when we get turned to strangelets by the LHC. I've withdrawn all my savings and will be blowing the lot on hookers and cocaine tonight. That's what I do every Tuesday and I won't let the end of the world spoil my fun!
It's the challenges which get rotated, not the responses. Each challenge generates a unique response and you can issue the same challenge to the chip as often as you like, so you can't DOS the chip. They aren't embedded, they're generated on-demand, and there are 2^64 in the top-of-the-line model. You needn't increment the challenge for every incorrect response as the odds of guessing the right 64-bit response are vanishingly low, so you can't DOS the system. An exhaustive interrogation would, at the rate of 1000 per second, take half a billion years, so you can't do that either.
If it is readable, it is possible to copy it. It can be made difficult, but never impossible.
There are 2^64 challenge/response pairs per chip. Let's say the tag can communicate at 125kbps (125kHz is a frequency commonly used by rfid tags, no idea what actual data rate they support, probably much less). 64 bit challenge, 64 bit response gives us near enough 1000 interrogations per second. 2^64/1000 = 1.8e16 seconds, or 585 million years to brute-force clone one. It actually allows a few bit errors, so you could probably reduce that by an order of magnitude or three, but we're still talking geological time.
Wait... so if it sends a challenge to the RFID and sends the same challenge to a database to see if they have the same response... then can't you just hook up your RFID copy to query the database and send the correct response?
Query the database? If someone hacks the authentication database you'd be fucked anyway. Each challenge/response is only used once, so replay and MITM attacks don't work.
Re:This would be a waste of time in Ontario, Canad
on
DIY Hybrid Car Kit
·
· Score: 1
Don't you have anything like low-volume type approval or Single Vehicle Approval in Canada? They're the more relaxed (eg no crash testing) regulations for low-volume and one-off vehicles in the UK. Not having such laws must be a highly effective way to destroy a car industry before it's even born.
The Smart is a city car. The brick-like shape isn't very aerodynamic, but low mass is far more important than efficient aerodynamics for city driving. Around town it's much more efficient than most things. If you're starting and stopping, small = efficient, or more accurately, light = efficient.
If you want a real car that's efficient, buy a Peugeot diesel hatchback. 60 mpg (UK gallons) with no need for fancy hybrid crap, 3/4 the price of a Prius. Unless you and you family are startlingly obese, have three 6'3" kids or regularly drive across continents a 308 is plenty of car. Actually, my dad does drive across continents in his 307 diesel, but only 2-up.
It happens all the time in the UK. There's a healthy market for kit cars (well, car kits) and some people design and build the entire thing themselves. You build it, the man from the VOSA comes round, makes sure the brakes work and so on, gives you your SVA (Single Vehicle Approval) certificate and you're good to go. The requirements are lower than for production cars (eg. no crash testing, for obvious reasons), but as long as the brakes and steering work and the wheels won't fall off it won't be a danger to other road users - the safety of the driver/builder is their own problem.
According to the manufacturer's site, up to 2^64 challenge-response pairs (each 64 bits). They aren't stored on board the tag, but generated on demand. The uniqueness comes from normal manufacturing variations, so they don't need expensive techniques to make each chip unique. With each tag before using it you capture however many challenge/response pairs you will need. The pairs should in theory should only be used once, but in practice I suppose that's up to the implementation, the tags will happily keep giving out the same[1] response to the same challenge. Given you need to interrogate the IC for each challenge/response before putting it in service, there will be a temptation to re-use keys to reduce the time for training the system for each key.
The large number of challenge/response pairs possible makes cloning implausible (you'd need to capture all 2^64 pairs), until someone can reverse engineer the "algorithm" and find the hidden variables (manufacturing variations) which form the "key" for a particular tag. I'm sure someone will work out how to do that eventually, but given it seems to be an analogue "algorithm" with a potentially large number of hidden variables I don't know how easy it will be. It seems like a sufficiently interesting problem that researchers will be queuing up to try.
[1] Apparently not always the same - there is some finite probability of the same tag giving different responses to the same challenge, but they have techniques to reduce this and its impact. The vagaries of analogue electronics at work.
Erm, yeah, because the **AA's web browsers don't do SSL. All the SSL does is stop people sniffing, which isn't that much help when anyone can connect and bittorrent has to give out the IPs of people with the files in order to work.
I made trivial and extreme suggestions. You complained (in a dismissive and confrontational manner) that the extreme suggestions were too extreme, implying that I should have made trivial suggestions as well or instead. I already had made trivial suggestions, which you for all the world appeared to ignore. Reading your first reply again in light of you latest reply, I guess you intended the distinction between all-caps and lower case to be semantically important. Given it wasn't a direct quote, that's somewhat unusual. I took it as mere emphasis.
Yes, I did consider that some people don't want to move or start a company, that's exactly why I included things which are trivial to do. Perhaps you missed the "or" and "as appropriate"; try reading it again, slowly. Get someone to help if you have trouble understanding, or see a doctor if you can't remember the start of a sentence by the time you reach the end. The first two suggestions were changing ISP and complaining to the right people if a government-granted local monopoly means you can't. If you can't even be bothered with those trivial things then quite frankly you deserve shitty service.
Yes, they do oversell, which is no secret and it would be foolish to do anything else. If you don't pay for a dedicated pipe, do you think you should get one?
Slashdot Mirror
You do know the standards allow you to render things in slightly different ways, don't you? It's one of the principles behind HTML. If you need pixel-perfect rendering, the web isn't the right medium. It's not designed for that.
It's the most expensive science experiment, not project. The ISS isn't a single experimental apparatus like the LHC, it's a platform for multiple experiments. OK, it's really a political pawn, but it's a science platform too.
4000 is a lot for a scientologist, unless they automated the entire process.
I would hope you'd need reasonable grounds for believing you held the copyright.
Once species we could do without is the straw man.
The First Amendment of the US Constitution only applies to the US Government. The US constitution doesn't apply to most of the world and is far from the only definition of freedom of speech.
The Islamic edition of Windows 2000 won't be released for another six centuries, you insensitive clod.
If all you read is the headline then yes, that's all the information you'll get.
Nuclear war? We're all gonna die tomorrow when we get turned to strangelets by the LHC. I've withdrawn all my savings and will be blowing the lot on hookers and cocaine tonight. That's what I do every Tuesday and I won't let the end of the world spoil my fun!
How odd, it certainly wasn't intentional. I generally try not to mess with other people's shit :)
It does, but not at 375Mbps.
It's the challenges which get rotated, not the responses. Each challenge generates a unique response and you can issue the same challenge to the chip as often as you like, so you can't DOS the chip. They aren't embedded, they're generated on-demand, and there are 2^64 in the top-of-the-line model. You needn't increment the challenge for every incorrect response as the odds of guessing the right 64-bit response are vanishingly low, so you can't DOS the system. An exhaustive interrogation would, at the rate of 1000 per second, take half a billion years, so you can't do that either.
Yay for ill-informed criticism!
There are 2^64 challenge/response pairs per chip. Let's say the tag can communicate at 125kbps (125kHz is a frequency commonly used by rfid tags, no idea what actual data rate they support, probably much less). 64 bit challenge, 64 bit response gives us near enough 1000 interrogations per second. 2^64/1000 = 1.8e16 seconds, or 585 million years to brute-force clone one. It actually allows a few bit errors, so you could probably reduce that by an order of magnitude or three, but we're still talking geological time.
Query the database? If someone hacks the authentication database you'd be fucked anyway. Each challenge/response is only used once, so replay and MITM attacks don't work.
Don't you have anything like low-volume type approval or Single Vehicle Approval in Canada? They're the more relaxed (eg no crash testing) regulations for low-volume and one-off vehicles in the UK. Not having such laws must be a highly effective way to destroy a car industry before it's even born.
Lead acid batteries are cheap, simple and have good power-to-weight ratio. Not so great in terms of energy density though.
The Smart is a city car. The brick-like shape isn't very aerodynamic, but low mass is far more important than efficient aerodynamics for city driving. Around town it's much more efficient than most things. If you're starting and stopping, small = efficient, or more accurately, light = efficient.
If you want a real car that's efficient, buy a Peugeot diesel hatchback. 60 mpg (UK gallons) with no need for fancy hybrid crap, 3/4 the price of a Prius. Unless you and you family are startlingly obese, have three 6'3" kids or regularly drive across continents a 308 is plenty of car. Actually, my dad does drive across continents in his 307 diesel, but only 2-up.
It happens all the time in the UK. There's a healthy market for kit cars (well, car kits) and some people design and build the entire thing themselves. You build it, the man from the VOSA comes round, makes sure the brakes work and so on, gives you your SVA (Single Vehicle Approval) certificate and you're good to go. The requirements are lower than for production cars (eg. no crash testing, for obvious reasons), but as long as the brakes and steering work and the wheels won't fall off it won't be a danger to other road users - the safety of the driver/builder is their own problem.
According to the manufacturer's site, up to 2^64 challenge-response pairs (each 64 bits). They aren't stored on board the tag, but generated on demand. The uniqueness comes from normal manufacturing variations, so they don't need expensive techniques to make each chip unique. With each tag before using it you capture however many challenge/response pairs you will need. The pairs should in theory should only be used once, but in practice I suppose that's up to the implementation, the tags will happily keep giving out the same[1] response to the same challenge. Given you need to interrogate the IC for each challenge/response before putting it in service, there will be a temptation to re-use keys to reduce the time for training the system for each key.
The large number of challenge/response pairs possible makes cloning implausible (you'd need to capture all 2^64 pairs), until someone can reverse engineer the "algorithm" and find the hidden variables (manufacturing variations) which form the "key" for a particular tag. I'm sure someone will work out how to do that eventually, but given it seems to be an analogue "algorithm" with a potentially large number of hidden variables I don't know how easy it will be. It seems like a sufficiently interesting problem that researchers will be queuing up to try.
[1] Apparently not always the same - there is some finite probability of the same tag giving different responses to the same challenge, but they have techniques to reduce this and its impact. The vagaries of analogue electronics at work.
Erm, yeah, because the **AA's web browsers don't do SSL. All the SSL does is stop people sniffing, which isn't that much help when anyone can connect and bittorrent has to give out the IPs of people with the files in order to work.
Oh dear, it looks like you really do need to work on that reading comprehension.
I made trivial and extreme suggestions. You complained (in a dismissive and confrontational manner) that the extreme suggestions were too extreme, implying that I should have made trivial suggestions as well or instead. I already had made trivial suggestions, which you for all the world appeared to ignore. Reading your first reply again in light of you latest reply, I guess you intended the distinction between all-caps and lower case to be semantically important. Given it wasn't a direct quote, that's somewhat unusual. I took it as mere emphasis.
Don't be so dismissive, I'll be investing my $40 from recovering data from a zeroed disk into a new keyboard to work on this port.
Yes, I did consider that some people don't want to move or start a company, that's exactly why I included things which are trivial to do. Perhaps you missed the "or" and "as appropriate"; try reading it again, slowly. Get someone to help if you have trouble understanding, or see a doctor if you can't remember the start of a sentence by the time you reach the end. The first two suggestions were changing ISP and complaining to the right people if a government-granted local monopoly means you can't. If you can't even be bothered with those trivial things then quite frankly you deserve shitty service.
Yes, they do oversell, which is no secret and it would be foolish to do anything else. If you don't pay for a dedicated pipe, do you think you should get one?