Slashdot Mirror


User: man_ls

man_ls's activity in the archive.

Stories
0
Comments
1,292
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 1,292

  1. once upon a time on CNN Notices that WiFi is Insecure · · Score: 3, Interesting

    Once upon a time, the average user *was* tech-savvy.

    Back before computers put a pretty appearance on everything with Windows XP wizards, or even 98, you had to know DOS to get anything done on a computer system, you had to know keyboard commands, and a basic idea of what the ports on your PC did.

    The "average user" was more tech-savvy because there were fewer uses back then, since the learning curve was higher.

    Now, with everything plug-and-play, it's much easier to not understand what's really going on inside the magical blue-and-black or grey box with a pair of antenna sticking up from the sides of it.

    On my system, I use a Belkin 54G access point. SSID belkin54g. No crypto, no authentication, no MAC filtering. But, you're not going to get anywhere off the wireless segment if you connect to it. The firewall behind the WAP is configured to drop all traffic except the encrypted PPTP tunnels which the wireless clients actually use to connect to the wired infrastructure and the external router. Thus, anyone is welcome to try and get onto my network, but without having a valid account on the 2K3 Enterprise Server box playing router/connection master, and knowing the encryption keys, they're going to get precicely nowhere.

  2. Re:Teaching? Yes. Applications? Er.. why? on High Level Assembly · · Score: 1

    " " This language is basically like C but more so: nobody in their right minds would consider using it for a major project, but it's very useful to have some idea of how this stuff really works. " "

    Tell that to the Linux Kernel developers.

  3. Re:Because they're japanese on NEC Admits To Ripping Off Schools Through E-Rate Program · · Score: 1

    I think the difference would be, telling the customer that the card costs $900, and telling the customer you sell it for $900.

    "You need this card, which costs $900, to fix your system."

    "You need this card, which we happen to sell for $900, to fix your system."

    If you use the second, and then they pay for it, you've made no representation as to how much the card *costs*, only to the selling price of it when purchased through your shop.

  4. Re:No Paper Trail, No Confidance. on NYT Calls For Open-Source Election Machines · · Score: 1

    At least here in West Palm Baech, FL, the Supervisor of Elections controls all the voting........only election staff actually get to play with the equipment.

    Sure it's a public building, but it's not public to where people can go in and play with stuff.

  5. Re:So how do you prove... on NYT Calls For Open-Source Election Machines · · Score: 1

    If such a system were set up by the states it might be easier.

    I.e.:

    State voting site.

    You enter SSN and DL # for your identity, and vote away.

    I assume each state knows the SSN of everyone legally allowed to vote in that state...or could get the list from some Federal authority.

  6. Re:No Paper Trail, No Confidance. on NYT Calls For Open-Source Election Machines · · Score: 1

    There must also be no way that the vote tally is readable by a human ... being able to prove you voted for who you marked also means you can prove to someone else you voted a certain way -- and this opens up the possibility of selling/buying votes, leveraging votes for employment purposes (boss says "prove you voted for Canidate X or you are fired.") and the like.

    Optimally, have the machines store the vote using a *proprietary* hashing algorithm. Open-source the entire thing except for that module, which would be developed by, I don't know, the Census Authority or some other agency. Or perhaps developed by the local Supervisors of Elections, such that the algorithm could be localized and it wouldn't matter to anyone outside that area. Something like a reversable hash of the sum of the voter SSN and binary string of possibly canidates and votes -- thus someone couldn't vote for the "acceptable" canidates, get a baseline hash, and then force everyone to compare to that or fail.

    Have the computer generate two copies of the ballot on a label printer. You take one, you drop the other in the box. The Supervisor has a program at their office which they read, it deconstructs the hashes into something meaningful, and scores them up.

    This has the benefit of:
    *You have a printed copy of exactly the same thing they have.
    *There is no way for the average human, without "insider knowledge" or at least insider access to a scanning device, to determine who you voted for.
    *You have a receipt of your vote, machine-readable in case there is a descrepency.

    In essence, it's a double-blind voting system. The only people knowing what numbers correspond to what votes would be the developers of the hash algorithm, but the entire rest of the codebase would be open-sourced so there is no possibility for "losing" votes in the machinery somewhere.

  7. Re:Unsurprizing on Microsoft Extends Product Lifecycle · · Score: 1

    Actually, this really doesn't work........I've tried it.

    Something checks the parameters of login.scr now.

  8. Re:Who's gonna buy em? on 12GB CompactFlash Cards Coming Soon · · Score: 1

    Anybody who has made the effort to learn English, and use it to communicate, is forgiven for small gramatical lapses, in my book.

    I'd have said it similarly.

  9. Re:Am I the only one this bothers? on MS SQL Server 2005 Adds Security Features · · Score: 4, Insightful

    I think this is a good thing.

    Since Windows XP, Microsoft has done almost a 180 (well...maybe like a 135........but still) in terms of security. They've put extensive security-related features into XPSP2 assuming it ever comes out, their newest server is locked down as tight as anything can be out of the box (although enabling stuff isn't difficult, it's not online by default) and they generally use standards-based encryption.

    I think that MSSQL 2005 security will probably be very good. Or at least, *good enough* The government probably can read everything anyways -- but the point is, if Joe Hacker (or Jaing Hackerong) can't read it without expenditure of time and money beyond anything he would have access to, then the mission is accomplsihed.

    The whole point of cryptography is not to keep people from reading what you're saying. It's to raise the cost of figuring it out so high that it's not worth it to most people to break.

  10. What if. on SPF To Be Integrated With MS 'Caller ID' System · · Score: 3, Interesting

    What if, say, businesses started showing up promising "unrestricted email" to get around SPF.

    They set their SPF to everyone/everyone...or something.

    Then it's an open relay with an SPF signature that matches.

    and we're back to square 1.

  11. Re:Restrictions on China Developing own Standards · · Score: 1

    CSS prevents playing by unauthorised players more than it prevents copying.

    "Licensed" players are given a key to decrypt CSS. Obviously this key was weak both by policy and by mathematics and has since been cracked, but the purpose wasn't to restrict copying, it was to restrict playback.

  12. Simple. on Ruling Clears Way For Lindows Trial · · Score: 1

    Windows (capital W) is not a generic term. It's a trademark. It refers to the industry standard Microsoft operating system for displaying applications and information to the user in a method incorporating multiple window segments which may overlap, interact with each other, etc.

    window and windows are generic terms. They refer to the screen space an application occupies on a system which uses the window method to display data.

    I honestly do think Microsoft is correct in this case -- They are referring to the use of Windows, the trademark and the operating system, as a way of attracting credibility. Don't kid yourself - it alludes to the Microsoft product very strongly.

    It's not like Microsoft is taking any developer of window manager applications, or applications that run in a window or windows, or even publishers or developers that refer to their program's "window" or "windows" when talking about the application. They're taking a publisher/distributor to court over a name which sounds very similar to their operating system, Windows.

    I don't see the issue...

  13. Re:What's that about Magnetic energy? on Fusion Plasma Plant in The Future · · Score: 2, Interesting

    It would probably be devestating but only for a very short range, with no lingering radiation or anything.

    It would also probably cause objects to projectile towards the reactor rather than away from it (think MRI machine)

    A magnetic field of that strength, thrown out of balance, could probably do nifty things like diflect electron orbits, and magnetize non-magnetic materials. However, since strength varies with the inverse cube of distance, the effective radius would be very small.

    Nothing more to worry about than a coal-burning power plant exploding, except for the direction the shrapnel moves.

  14. Re:Google Browser? on Google's Software Principles · · Score: 1

    There are legitimate uses for popups...IIRC, the best popup controls I've seen are ones that block scripts.

    "Allow scripts to open new windows only in response to a user action." i.e. clicking a button or link -- not just for the hell of it.

    a Google web browser would be very interesting, however.

  15. No Logs. on Feds to Open BlackBoxVoting User Logs? · · Score: 5, Interesting

    They can't subpoena something that doesn't exist...if sites with potentially controversial content make a policy of not keeping logs more than 24 hours (or even better, simply write the logs to /dev/null) then there's nothing at all for the FBI, NSA, etc. to subpoena.

    I'm surprised they don't do this already.

  16. Techies or Lawyers on WiFi Signals In Between Television Frequencies · · Score: 1

    Does anyone know which the FCC regulators are mostly?

    Are they techies and scientists, or are they buerocrats and politicans?

    The FCC seems to make fairly intelligent decisions whereas our Congress seldom does.

  17. Re:Off topic, but... on Email Authentication Schemes - Friends or Foes? · · Score: 1, Flamebait

    We could solve the IP allocation problem by deallocating the space from countries that abuse their connections and placing them in a data embargo.

    IANA should have the authority to reallocate addresses as a method of punishment. I.e., deallocate all of Nigeria's address space.

    All of Africa, and most of Asia, for that matter.

  18. Re:American Stupidity on The Logic Behind Metric Paper Sizes · · Score: 1

    The Farenheit system was not invented by an American, it was invented by a Danish man. The temperature 0 is when an equal mixture of water and salf freezes.

  19. Re:Did ANYONE RTFA??? on Cisco Applies For Patents To Secured TCP · · Score: 1

    Cliffs:

    Anyone can use their patent for free, with the following conditions:

    *If that someone owns a patent, they can't make Cisco pay for use of their patented technology, should that situation arise.
    *If the someone does make Cisco pay royalties, Cisco will make them pay royalties.

    Pretty fair mutual-assistance type thing.

  20. Re:And in other news... on Cisco Applies For Patents To Secured TCP · · Score: 1

    Welcome to my world. :)

  21. Re:And in other news... on Cisco Applies For Patents To Secured TCP · · Score: 1

    IPX is routable...IPX packets contain the same fields as IP packets (network ID and host ID, similar to ip address and subnet mask)

    It just didn't get as popular as IP for some reason.

  22. Re:I don't like S3 on ACPI and S3 Sleep on the Linux Desktop? · · Score: 1

    I think it requires some hardware?

    I have a TV tuner card which has in hardware the ability to power the PC on, log in to Windows, record a show, and log back out.

    I don't know how it does this nor do I want to, but it involves running power leads from the card to the mobo and case to card.

    I think the card draws enough standby power to keep an RTC and a relay running...at the appointed hour-10min or so, relay flips, "switches" on, Windows reads some saved statefile, logs in, records.

  23. Re:Just had this idea... on US Gov't Representatives - Who's Who? · · Score: 1

    The president can't make laws but he can sign executive orders which carry the same weight as law...

  24. Re:Quick question on New Material for More Efficient Solar Cells · · Score: 2, Interesting

    It wouldn't make much of a difference -- they work because the energy of the photons in the light kick electrons off the photoelectric material.

    But, light carries the same amount of energy at all wavelengths etc., so making it absorb more just means it would get hotter, not actually generate any more electricity.

  25. a friendly reminder on First Java AP Computer Science Exam Complete · · Score: 1

    Posting or discussing specific test questions is not authorized by ETS, and may result in legal action against the person posting them by compromising the security of the tets.