Slashdot Mirror


User: silas_moeckel

silas_moeckel's activity in the archive.

Stories
0
Comments
2,989
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 2,989

  1. Re:Switch to GSM !!! on FCC to Reorganize 800mhz Band? · · Score: 3, Interesting

    Why? I have had netel for years. I work with companies that have hundreds of nextel phones. Last time I checked GSM wasent a great platform for 2way wihc is a HUGE part of Nextels appeal. Most places I work if they dont have good nextel reception (or cell phone reception period) Nextel or a rep has put in a repeater this means a lot when your several stories underground in a datacenter but still have 6 bars of service and can 2 way your coworkers. GSM is a nice standard but it dosent seem to offer the same feature set. Nextel needs to move to a next generation solution something with higher bitrates for data and keep the fast setup for 2way to work well.

  2. Re:salts? on Cisco's LEAP Authentication Cracked · · Score: 1

    OK speaking as somebody that started doing this years ago vs unix crypt function commonly used to store passwords. The salt does add to the number of permutations as for each cleartest password you need to crypt it with every possible salt.

    I think the funny bit about this is there is allready a fix anyway it's SecurID as it rotates the password at every signon it invalidates this program as knowing the password does no good.

  3. Re:What I'd like to know... on Build Your Own Steadicam · · Score: 1

    Film people dont use Duck Tape they use Gaff Tape it's a superior product. Besides it comes in great glow in the dark colours.

  4. Re:after reading the article more... on Stoplights to Mete Out Punishment? · · Score: 1

    I think the expectation of a sudden thing stopping in the middle of the intersection is a bit unreasonable. Especialy for a rural one where you can see cars comming. This is the same silly logic that uses an object stopping instantly in front of you and having the time to react and stop is proper spacing.

  5. Re:Skip the Firewall on Chipset Integrates Gigabit Ethernet, RAID, Firewall · · Score: 1

    I'll second that one. Look at most good security modles they have a combinations of course filters fo stuff you never want firewalls to be more specific for the network as a whole then firewalls on each computer with IDS's insuring the firewalls are working correctly. This generaly only works well if your configuration is very stable or you have a good centralized management platform that says who can talk to who, how and when.

  6. Re:Patches work both ways... on Openness and Security on Campus · · Score: 1

    Your missing the point those private keys are high value making brute foring them worthwile as they dont change. You can play at sneakernet to the high holy signing box all you want but it dosent stop the fact that you can remake a private key given computing power and time since everybody knows the public key. Yes auto update is usefull but it's not that panecea that people think it is.

  7. Re:Yeah right... on Passive E-Mail Monitoring Leads To Arrest · · Score: 1

    Yes they can keep on creating new accounts but that does become more and more cumbersome to deal with. Remember they might be sniffing this traffic via the internet cafe it's beign sent from aka watching the sender.

    Lavarand is good but I wonder how long it would take to generate a large emmount of pure random data as it seems to be more ment as a seed. But overall probably a good idea (space noise works well to)

    A guy on a plane can be turned. If the guy goes from point a to b directly it's easy to follow them and this defeats the purpose of the one time pad. If it goes through lots of hands turning one of them to make a copy becomes more and more plausable.

    Would you trust a computer to do decrypt the data? There is that whole radiation based screen duplication bit that seems to work. Laptops can be modified with keyloggers etc. I small notepad / pencil is pretty secure after it's been lit on fire and the ashes flushed. If your that paranoid about information security you realy cant trust a computer thats not watched 24/7 by multiple people.

    Dates provide a potential means but all messages have to be smaller than the offset change (use a one time pad twice and it can be broken) a message could contain the offset plane text at the start. It's more efficient if you start at the end of the last used one time pad but waste is ok.

    Realy you dont need all of this a shared book can be used easily enough and assuming it's a random enough book it's doubtfull it would turn up in brute force. I do wonder would inserting random garbage into the text make it harder to brute force, a plain text that looked like the following:

    OKTHISISPLAINTEXTHGKUGYKFGYTFYUGKJHGIFYOUHAVETHE KE YITSPRETTYOBVIOUSKJKJKJLKJHLKJHLBUTIFYOUDONTTHEN ITLOOKSLIKEANDARBORATIONLJHJLKHLLUHIUIYFHGKJHG

    Yes I didn't use spaces and all caps I din't go into intentionaly misspelling and contracitng words as thats a pain to do.

  8. Re:Yea on Passive E-Mail Monitoring Leads To Arrest · · Score: 1

    I would say it more applies to the domestic terroist than the forign one. Persoanly I vote for wonton destruction of forign terrorists perferably by using FAE's to get everything around them as well. Now your description seems to be of the run of the mill Middle Eastern Terrorist, yea they are a sick bunch. Personaly I think religion should stay out of politics period but that wont happen. For a counterpoint the IRA was also called a terrorist group abit primarly a domestic one (ok realy 2 countries) that would be a better example to go up against our founding fathers. Notice I didn't say there was anything wrong with what they acheived, I understand war is ugly unlike most people you have to relize that inocent people will be killed en masse to relize your goals if you win your a liborator if you loose your just another terrorist uprising.

  9. Re:Yeah right... on Passive E-Mail Monitoring Leads To Arrest · · Score: 1

    Yes the decyption by nature will fail. But they will know that somebody from a cyber cafe in the middleeast sent some gibrish read by soem guy on a wifi point in london. Track the accounts and those pop's and you might learn more. People often fall into ruts and those ruts are dangerous for people like that. One time pads inherintly cant be cracked in thery. To make them work you need to have a perfectly random source for the pads and perfect security getting them around. Our military uses one time pads for some things and thats a good idea. But they are cumbersome to use over time as you either need enormous pads safly hidden away and kept in perfect sync (try missing a message).

  10. Re:How old was it when YOU first got on the net? on Happy 35th birthday, RFC 1! · · Score: 1

    Internet was at age 10 (dialup to a local Uni) but there wasent much there (1985) the BBS's were where it was at for that time along with things like FidoNet.

  11. Re:Yea on Passive E-Mail Monitoring Leads To Arrest · · Score: 2, Informative

    They did attack civilian targets (Boston tea party being the most noteable) They did use privaters. They did not fight in the open as was part of war at that time. They were an unconventional force that did attack civilian targets. Granted modern terrorists are a lot worse. Rememebr I said could as in the English government could use that term to describe there opponent. A domestic terroist is only a terroist untill they win then they are liborators and patriots.

  12. Yea on Passive E-Mail Monitoring Leads To Arrest · · Score: 2, Interesting

    Finialy people might figure out that email is trivialy easy to monitor it's sent clear test to a well defined port. Switching gear can creat a span based upon that easily enough. This is why all email should be encrypted and with strong encryption.

    As to finding out the terrorists great, just remember that the US was founded by people that could be called terrorists.

  13. Re:Patches work both ways... on Openness and Security on Campus · · Score: 1

    The problem with the signature is it dosent change and has high value to comprimise. Granted I agree that test boxes and a local patch server are the only way to go in production. I would disagree at the patch servers not being as an effective target as a worm. Worms are noisy people know about them they set off all sorts of security apparatus. Now with a patch server you could even be selective as to who gets the trojans. By definition it would be "wanted" traffic so the allarms wont go off. Even with a test server assuming the trojan goes into some sort of stealth mode people may well test it as good and deploy to production high value targets. Rememebr that script kiddies just want to claim boxes infected the black hat hackers want things like your data. There are ways to make this safer people just arent interested enough to make them happen.

  14. Re:Patches work both ways... on Openness and Security on Campus · · Score: 1

    More imporant what happens when the patch servers are violated? Attacking those serevers directly or performing man in the middle attacks vs them would become extreamly usefull. If everybody is allowing there computers to automaticaly install said updates it gets ugly. Auto Updates do make things better but they are not a panecea by any means and provide a method of infection. Granted security in an open college setting is very much different than the server world I'm used ot setting up (where we have charts of what machines need ot talk to what other machines and only allow those packets on the switch)

  15. Re:SCSI on The New Linux Speed Trick · · Score: 1

    I beleive you can trust that it's on disk localy unless your running a hardware raid controller with battery backed up ram cache (nearly as good as disk). There are some broken raid controlelrs out there that will do that without the battery backup. This has allways been an issue with SMTP servers as by RFC they have to flush to disk before they respond with message received. MS Exchange was broken in this regaurd last I checked.

  16. Re:Forget the spammers... it's the stalkers! on ICANN Cracks Down on Invalid WHOIS Data · · Score: 1

    I think your missing the point to agreed in your contract to get the domain name to provide this information. I do beleive a PO box is acceptable for an address. I didn't enter into a binding contract with slashdot they can cancle my account at any time for any reason. Nobody said you had to give out your email address there is nothing wring with tech@mydoamin.com as long as somebody reads the email every now and then least was passes the spam filters it's called a role account. ICANN can because your agreed to it as a provision of the contract to get your domain registered. Realy this has little to do with ICANN as it was required before them if anything they have relaxed the rules since 92 when I got my first domain.

  17. Re:Not new news on Inside a Mechanical Parking Garage · · Score: 1

    I think the point your missing on the Bus lane is they might help during rush hour but they are slower than cars. Busses produce a good deal of directly visable polution aka they have that lovely desil smog comming out of them, are loud and on the east cost at least are plain bad drivers (watch 2 city busses block the box in NYC and just not care it's especialy fun at 42nd and lex) I'll repeat tring to gain efficiency in a congested medium that is subject to all the same ills if a fools errand. Want to throw some jersy barriers up and make a real bus lane maybe that woudl work. Course I think out there in Cali you have more issues with subways due to earthquakes and such.

  18. Re:Forget the spammers... it's the stalkers! on ICANN Cracks Down on Invalid WHOIS Data · · Score: 2, Interesting

    I think the point was domains were supposed to be for businesses and orginizations ie places that have headquarters. The only real thing I could see was allowing one contact to be minimal name and email but requiring one valid and complete technical contact. But if you didn;t like the rules when you signed up you should have not aquired a domain. It would be nice if every incomplete entry was purged for noncompliance.

  19. Re:Not new news on Inside a Mechanical Parking Garage · · Score: 2, Funny

    Yea another one. Yet another the suburbs are bad live liek a sardine int he city and ride public transportation next to the bum with lice (over egagerating but you get the point) How about this we make it more atractive for business to move out into the burbs so people in the country can find good work. Throw some high speed trains making few stops fromt he city to these little complexes so the city folk can work someplace nice.

    Persoanly I'm a work at my own office near my house/home at client site consultant. There will never be a posibility of living near all my clients.

    Currently I'm in NYC and have come to this conclusion the city should phase out city busses they wreck havoc in the streets I have been nearly run over by them a few times a months for the last six months as there drivers seem to drive on the I'm bigger than you and they cant fire me pricaple so they just rush out in front of vehicals forcing them to brake hard. Secondly phasing out all on street parking would help a ton by opeing up 2 lines on every road. Mass transit makes more sence if it's not competing with cars. As it seems to be your point that cars are not a good thing mass transit needs to become consitantly faster and more convenient that cars. High speed trains with an agrigate speed and frequency faster that the average non rush hour car speed would be needed. Lets look at me for an example.

    I have a 2-2.5 hour commute from CT to NYC. The first 30 miles I go by car as the train takes 2x as long and only runs ever few hours makng the missed train penalty significant. I then go the rest of the way about 90 minutes on a trains going less than 65 mph including stops. This is faster during rush hour only. Off peak I can make the same trip in a car in little over an hour at 80mph average in my car.

    Lets look at possible solutions using high speed trains:

    High levels of automation can reduce the expensive and error prone human factors.
    A signle high speed train could use a detach/ reattach system to avoid slowing down. A single/set of cars would be at the station before the train arrives it would gather all the passengers, accelerate and meet up with the long distance train and join it at the head of the train. Departing passangers would move to the rear car(s) and they would detatch and decelerate to a station stop. Keeping the average speed for all passangers near maximum. Some statistics would allow the traint o know what stations it can skip if there is nobody destined for it. A train like this running on 10-15 minute spacing and say 150 MPH would be faster assuming 30 minutes time wasted between each end on cummutes that are about an hour. This number goes down significantly as the person needs to waste less time getting to and travaling from the station. Will it ever happen probably not, people are to dumb on average to figure out what car they need to move to and to scared of a train going throguh there back yard at 150+MPH. I think the average commute is like 35 minutes I dont see mass transit comming close to this.

    BTW I agree peope shouldent overextend themselves in buying a house but I also dont think people should be forced to live in the city some people like that life many others hate it. I work on the if you can see your neighbor they are too close rule.

  20. Re:I've already hacked it. on Microsoft Preps 'Janus' Music Copy-Prevention Scheme · · Score: 1

    MP3 and Quality in the same sentance if your worried about quality you dont play MP3's you play FLAC or uncompressed. OK granted I dont thinkg the DVD-Audio spec is good enough to replace first gen studio tape and thats the quality level I would like for my audio.

    I guess all things are moot if your just coping Brinty Spears latest audio excriment. But thats a personl oppinion.

  21. Re:All well and good, but for infrastructure on Court Ruling Points Way To Broadband Regulation · · Score: 1

    Now if you can get local municipalities to regulate you cold get fines so bad they need to comply and or loose there cable franchise. Well thats at least around me where the cable company has short contracts like 5 years and can be thrown out having to leave all the infrastructure in place. The flip side is they dont improve infrastructure unless they have to.

  22. Re:No floppy?! on Wal-Mart Sells PCs Preloaded With Sun's Linux · · Score: 1

    Ok I show $3 for a floppy drive on pricewatch with no shipping. So given no cost to install it for warentee it your still looking at 1% of the overall price. I think most companies would rather ssee that point on there bottom line than in a device most consumers dont care about. It's not generaly shipping a component out it's shipping the whole system back and forth or setting up local repair depots people buing computers at wallmart dont exactly open up there boxes and put new parts in when they break after all.

  23. Re:No floppy?! on Wal-Mart Sells PCs Preloaded With Sun's Linux · · Score: 3, Informative

    Actualy Floppy drives have gotten expensive around $10 a unit in modest quanities. Add the cost of installation and repair and it's 3.33-5% of the total cost of the system why bother?

  24. Re:Proposterous! on Hacker Indicted In France For Publishing Exploits · · Score: 2, Insightful

    Yay one more for security through obsurity. Lets try this on something tangable if there was one spot on a certine car that if you did somehting the cars doors would open and the engine would start up lets say hit it with a 5lb hammer. Should you be arested for not telling toyota first and waiting for them to fix it? Should 5lb hammers start to be concirered car theft tools?

    People need to be made aware of the vulerabilities of anything ASAP. The person that makes it public may not be the first person to find the issue. Network elements can be made to stop the exploits or reduce there impact. It's not fair to say well most people dont care about there systems so we will protect the lazy at the expence of the vigalent. Allways remember patching is not the only solution to an issue it's generaly the best in the long term but you can have a lot of other methods at your disposal as well in the short term.

  25. Re:My wallet just shriveled. on Australia's Great Linux-Based Satellite Network · · Score: 1

    I would say more correctly that Telstra is dumb in general. If you were to meet magor ISP in the US in multiple places and source and sync a decent ammount of traffic they could become a tier 1 and stop paying for bandwith. But considering that Telstra seems to refuse to have a real network and try to mess up the worlds BGP tables to avoid it I doubt that will happen. If you dont know what I mean Telstra used to public 30k+ routes to the internet basicaly trying to avoid backhauling any customer data. The onyl reason I can think for ding that would be they realy dont have a network and are just playing middle man.