Seeings as the FBI fought Phil Zimmermenn a former political activist and the writter of PGP tooth and nail in court over it I would guess that they don't have a backdoor.
I'd even go far as to say the problem creeps into larger issues. All the libraries you require are based in C/C++. QT, etc. These code bases are completely massive and even if you run some small "shows a box on screen" app you are calling 3000 lines of possibly broken an insecure code. The solution is move the core libraries away from C to C#, Java, or some other viable candidate that prevents software from "doing bad things". Essentially what the open source community has been saying is "trust us", but who exactly do you trust to carry your wallet? I only trust myself... How about you? Community developed software is great provided it is implemented on a framework that is invulnerable to input errors. I rather have my app crash than get hacked.
Guess what language the Java VM's or CLR VM are written... C and C++, sometimes assembly. So what you are saying is we should not be codeing with libraries that are written in C or C++ instead we should be coding with VMs that are written in C and C++. And how exactly is that any better?
As for trusting these VM to not let code do bad things you mean like we should trust the VMs who's security was bad enough Homeland security issued an warning to dissable or remove it?
As a former softie, all I can say is that i would trust bitlocker over pretty much any solution on the market and here are the reasons why:
1. Microsoft would not knowingly backdoor bitlocker. The NSA pressured the team leads, but management was adamantly opposed and declined to acquiesce.
2. Suppose bitlocker was knowingly backdoored, the amount of reputational harm that Microsoft would endure would literally be crippling. Crippling not with the OSS crowd, but enterprise customers. The only loser would be Microsoft and they would not recover.
I would have thought that point valid until RSA backdoored their encryption for chump change from the NSA. Or if I had not remembered MS having _NSAKEY in their software.
No because every human born is another brain made. If we can build one out of carbon hydrogen oxygen and some trace minerals why would we be fundamentally unable to build one out of silicon oxygen various metals and trace minerals?
If you actually trust a computer more than your own judgement in an accident situation, I feel sorry for you.
I may not trust it more than my judgement but I trust it more than the other crazies on the road. Equally they trust it more than my ability but less the their own ability's. Logically the best option is for both sides to trust the computer. Now while I want a self driving car I want one with manual controls, not so I can take control mid critical moment but because I occasionally need/want to go off road or poorly maintained logging roads that I doubt the self driving car would handle well.
One mainframe per house. It controls the hvac, lights, windows, doors. It operates the multitude of touch screen walls and microphones for voice control. It connects you to the world and holds all your stuff. it'll never happen due to copyright and internet connection monopolies and people finally realizing that once your computer can understand and respond to your voice that they've wanted all these years, it has to listen to you all the time which is bad now that it is actually decent.
It would not necessary have to listen all of the time you could go the star trek approach and have to press your com-badge (read bluetooth) to talk to it that way its only listening in when you initiate communication. Alternatively you could just host the voice recognition software locally so that even though it is listening constantly no one outside can get a record of your yelling at the TV and sleep talking.
You mean jump from the toilet to the cesspit? Why not just keep slashdot nice get rid of beta, quit posting sports stories [slashdot.org] to a geek news site and maybe actually fix things like unicode support, ssl (as in keep the cert up to date for the login at least), rather than bone the sites UI into a Yet.Another.Identical.Agragrator.
You mean jump from the toilet to the cesspit? Why not just keep slashdot nice get rid of beta, quit posting sports stories to a geek news site and maybe actually fix things like unicode support, ssl (as in keep the cert up to date for the login at least), rather than bone the sites UI into a Yet.Another.Identical.Agragrator.
Women don't stink the same as men. My roommate smells like a rancid asscrack even after he takes a shower, but my girlfriend always smells good even after camping for a week with minimal showering.
That may be a pheromone trigger making you not notice her scent. It could be that her scent has Pavlovian effect where her smell is associated with a dopamine release causing you to think it is good where your roommates particular scent has no such association and you still notice the smell.
I came here to say the same thing emotive eeg headset and sdk if the poster is a coder it could be used to expand her communicatory abilities immensely with the patient not having to exhaust themselves straining to simply twitch yes or no.
Yes because they're open sourceing of two different operating systems and a browser and sponsoring of the summer of code event counts for nothing. Actually their algorithm is the least thing that matters. Lets say someone else had wrote it and licensed it gpl, for sake of argument, google could use it alter it and make their billions and never give back as they don't distribute.
Another point, just because someone drives a big SUV to work, doesn't mean it's a status symbol or what have you. Maybe they have 4 kids and don't want to (or can afford to) have a small car just for commuting. Or maybe they need the vehicle for work because they regularly carry large bulky items for sale or install... I've more and more tried to turn off my generalization engine...
They could get a minivan that has better millage then the gas guzzling SUV.
No, this is proof of the recent industrial espionage allegations against China; they've obviously seen the source code for Windows 8, and they know they don't want it.
Actually Microsoft gives governments (No espionage needed) access to the windows and office source code including the US, Russia, China and other big licenser's. My guess is in this case it backfired and they found shit in it they don't want to touch with a ten foot pole. Possibly another _NSAKEY check?
So the client can keep generating simple session keys over and over until it discovers the server's key? Sounds like a brilliant vulnerability. NSA, is that you?
Except they can already throw data at a servers public key as it is public already
Likely it will just be "John/Jane Doe" indictments.
So we will be charging no suspect and prosecute them in absentia where they will have no defense, as such it is a forgone conclusion that they will be found guilty, so what is that plan have convictions made up with a "insert name here..." line? Yeah I feel safe living in country that thinks this is fine...
And beyond the obvious dubiousness of these proceedings isn't this a major pot calling the kettle black situation after everything Snowden has showed us in the past year of the NSA spying, hack/cracking, emplanting of back doors, stealing foreign secrets. We have no moral high ground to stand on in this fight.
A better way to handle this would probably be to have the client generate the session key and encrypt it with the servers public key, this would distribute the load for generating keys away form the server so they would not be as easily DOS'ed.
Please note the "professional grade" portion of that request.
for the proprietary camp you have Corel with painter, paintshop, corel draw, video studio, corel cad, word perfect and whatever their pdf editing software is called. for open source, you have gimp, inkscape, blender,
what are you typing on? a computer, running a OS, running a browser, delivered to you by multiple routers and servers all running various servers(http. dns, dhcp), guess who wrote them, the protocols they use, and the maintain the infrastructure. That is all computer science.
Slashdot Mirror
a password protected encrypted version of the key could be synced.
Seeings as the FBI fought Phil Zimmermenn a former political activist and the writter of PGP tooth and nail in court over it I would guess that they don't have a backdoor.
then use chromium the open source fork and look at the code yourself
I'd even go far as to say the problem creeps into larger issues. All the libraries you require are based in C/C++. QT, etc. These code bases are completely massive and even if you run some small "shows a box on screen" app you are calling 3000 lines of possibly broken an insecure code. The solution is move the core libraries away from C to C#, Java, or some other viable candidate that prevents software from "doing bad things". Essentially what the open source community has been saying is "trust us", but who exactly do you trust to carry your wallet? I only trust myself... How about you? Community developed software is great provided it is implemented on a framework that is invulnerable to input errors. I rather have my app crash than get hacked.
Guess what language the Java VM's or CLR VM are written... C and C++, sometimes assembly.
So what you are saying is we should not be codeing with libraries that are written in C or C++ instead we should be coding with VMs that are written in C and C++. And how exactly is that any better?
As for trusting these VM to not let code do bad things you mean like we should trust the VMs who's security was bad enough Homeland security issued an warning to dissable or remove it?
As a former softie, all I can say is that i would trust bitlocker over pretty much any solution on the market and here are the reasons why:
1. Microsoft would not knowingly backdoor bitlocker. The NSA pressured the team leads, but management was adamantly opposed and declined to acquiesce.
2. Suppose bitlocker was knowingly backdoored, the amount of reputational harm that Microsoft would endure would literally be crippling. Crippling not with the OSS crowd, but enterprise customers. The only loser would be Microsoft and they would not recover.
I would have thought that point valid until RSA backdoored their encryption for chump change from the NSA. Or if I had not remembered MS having _NSAKEY in their software.
OK, but same could be true for brains, no?
No because every human born is another brain made. If we can build one out of carbon hydrogen oxygen and some trace minerals why would we be fundamentally unable to build one out of silicon oxygen various metals and trace minerals?
If you actually trust a computer more than your own judgement in an accident situation, I feel sorry for you.
I may not trust it more than my judgement but I trust it more than the other crazies on the road. Equally they trust it more than my ability but less the their own ability's. Logically the best option is for both sides to trust the computer. Now while I want a self driving car I want one with manual controls, not so I can take control mid critical moment but because I occasionally need/want to go off road or poorly maintained logging roads that I doubt the self driving car would handle well.
One mainframe per house. It controls the hvac, lights, windows, doors. It operates the multitude of touch screen walls and microphones for voice control. It connects you to the world and holds all your stuff. it'll never happen due to copyright and internet connection monopolies and people finally realizing that once your computer can understand and respond to your voice that they've wanted all these years, it has to listen to you all the time which is bad now that it is actually decent.
It would not necessary have to listen all of the time you could go the star trek approach and have to press your com-badge (read bluetooth) to talk to it that way its only listening in when you initiate communication. Alternatively you could just host the voice recognition software locally so that even though it is listening constantly no one outside can get a record of your yelling at the TV and sleep talking.
opps double posted probably due to the shity wifi timing me out for the last half hour
Then go to reddit, you fucking whiner.
You mean jump from the toilet to the cesspit?
Why not just keep slashdot nice get rid of beta, quit posting sports stories [slashdot.org] to a geek news site and maybe actually fix things like unicode support, ssl (as in keep the cert up to date for the login at least), rather than bone the sites UI into a Yet.Another.Identical.Agragrator.
Then go to reddit, you fucking whiner.
You mean jump from the toilet to the cesspit?
Why not just keep slashdot nice get rid of beta, quit posting sports stories to a geek news site and maybe actually fix things like unicode support, ssl (as in keep the cert up to date for the login at least), rather than bone the sites UI into a Yet.Another.Identical.Agragrator.
Women don't stink the same as men. My roommate smells like a rancid asscrack even after he takes a shower, but my girlfriend always smells good even after camping for a week with minimal showering.
That may be a pheromone trigger making you not notice her scent. It could be that her scent has Pavlovian effect where her smell is associated with a dopamine release causing you to think it is good where your roommates particular scent has no such association and you still notice the smell.
I came here to say the same thing emotive eeg headset and sdk if the poster is a coder it could be used to expand her communicatory abilities immensely with the patient not having to exhaust themselves straining to simply twitch yes or no.
Yes because they're open sourceing of two different operating systems and a browser and sponsoring of the summer of code event counts for nothing. Actually their algorithm is the least thing that matters. Lets say someone else had wrote it and licensed it gpl, for sake of argument, google could use it alter it and make their billions and never give back as they don't distribute.
Another point, just because someone drives a big SUV to work, doesn't mean it's a status symbol or what have you. Maybe they have 4 kids and don't want to (or can afford to) have a small car just for commuting. Or maybe they need the vehicle for work because they regularly carry large bulky items for sale or install... I've more and more tried to turn off my generalization engine...
They could get a minivan that has better millage then the gas guzzling SUV.
No, this is proof of the recent industrial espionage allegations against China; they've obviously seen the source code for Windows 8, and they know they don't want it.
Actually Microsoft gives governments (No espionage needed) access to the windows and office source code including the US, Russia, China and other big licenser's. My guess is in this case it backfired and they found shit in it they don't want to touch with a ten foot pole. Possibly another _NSAKEY check?
of course my mod points are gone but +1 insightful.
So the client can keep generating simple session keys over and over until it discovers the server's key? Sounds like a brilliant vulnerability. NSA, is that you?
Except they can already throw data at a servers public key as it is public already
Na, all you have to do is slow down the speed of light 100,000 times and you can produce that cup of tea with only 600 watts.
Yes lets just change a fundamental constant of the universal. Where did I leave that Higgs field manipulator...
Likely it will just be "John/Jane Doe" indictments.
So we will be charging no suspect and prosecute them in absentia where they will have no defense, as such it is a forgone conclusion that they will be found guilty, so what is that plan have convictions made up with a "insert name here..." line? Yeah I feel safe living in country that thinks this is fine...
And beyond the obvious dubiousness of these proceedings isn't this a major pot calling the kettle black situation after everything Snowden has showed us in the past year of the NSA spying, hack/cracking, emplanting of back doors, stealing foreign secrets. We have no moral high ground to stand on in this fight.
A better way to handle this would probably be to have the client generate the session key and encrypt it with the servers public key, this would distribute the load for generating keys away form the server so they would not be as easily DOS'ed.
Point to a viable, professional grade option.
Please note the "professional grade" portion of that request.
for the proprietary camp you have Corel with painter, paintshop, corel draw, video studio, corel cad, word perfect and whatever their pdf editing software is called.
for open source, you have gimp, inkscape, blender,
(Snowden does NOT...) ...deserve a book, movie, or anything.
what about an jack bauer beat down?
Not sure if troll or droll political commentary.
Fascinating theories, ultimately useless.
what are you typing on? a computer, running a OS, running a browser, delivered to you by multiple routers and servers all running various servers(http. dns, dhcp), guess who wrote them, the protocols they use, and the maintain the infrastructure. That is all computer science.
good to see APK is as lucid as ever