Slashdot Mirror


User: chill

chill's activity in the archive.

Stories
0
Comments
4,651
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 4,651

  1. Re:Perfect Forward Secrecy implementations on TLS 1.3 Draft Prepares to Drop Static RSA Key Exchange · · Score: 1

    In the link in the third sentence of the summary titled "forward secrecy". Is this a trick question?

  2. Re:duplicated effort? on Microsoft, Google, Others Join To Fund Open Source Infrastructure Upgrades · · Score: 2

    10. The companies listed do large amounts of business with the U.S. government, which requires FIPS certification of crypto software.

    20. OpenBSD has explicitly stated that FIPS certification is off the table for OpenSSH. NOT one of their goals.

    30. Taking that off the table leaves a large pile of money ON the table.

    40. GOTO 10

  3. Re:Get it FIPS certified on Not Just a Cleanup Any More: LibreSSL Project Announced · · Score: 2

    The core encryption functions of an older version (0.9.8, I think) was spun off into a separate module and certified for FIPS. The certification process is that the code is provably correct and the implementation is flawless, which is why it takes so damn long. It is also why only the core crypto transforms are certified.

    You CAN, and vendors DO update the wrapper module around the core functions and update things without having to go back under certification.

    Case in point. The Red Hat version of FIPS-OpenSSL was susceptible to HeartBleed, even though the core FIPS module was based off of an older version that was produced before the code error was introduced! Why? Because the error wasn't in the core crypto but rather the wrapper, non-crypto code. The actual cryptographic transforms (AES, HMAC-SHA, etc.) functioned perfectly, but information was leaked by the non-crypto code.

    LOTS of people -- like almost everyone in the U.S. Gov't or contractors that work on their systems -- use the FIPS certified module for OpenSSL. Or, at least, Red Hat's version of it.

  4. Re:Okay, Go! on OpenBSD Team Cleaning Up OpenSSL · · Score: 3, Interesting

    Not necessarily. It looks like they're removing what they can't support, such as VMS, Netware and OS/2. The few people that care can still use the original OpenSSL code.

    I'd expect them to ensure it support the hardware platforms OpenBSD supports at the very least. Then, if they go the "portable" route like they did for OpenSSH, support for the other Unix and Unix-like systems.

    http://www.openssh.com/portable.html

    More power to them.

  5. Black on Black on Ties of the Matrix: An Exercise in Combinatorics · · Score: 1

    For someone seemingly intelligent enough to try and enumerate the tie options in code, they were brain dead fucking stupid enough to try to illustrate it with small pictures of a black tie on a black shirt.

    Sheer genius.

  6. Re:No Wireless? on Intel Releases $99 'MinnowBoard Max,' an Open-Source Single-Board Computer · · Score: 3, Insightful

    Uh, no thanks.

    I much prefer that wireles to be on a mini-PCIe card so I can upgrade it if necessary.

    Damn near everything that comes with Wifi/BT ends up being single-band b/g/n and BT 2.0. For $35 I can get a dual-band, a/b/g/n/ac card w/BT 4.0.

    Slapping it on the board greatly reduces options.

  7. Re: Not much different than. on Geologists Warned of Washington State Mudslides For Decades · · Score: 2

    The song started playing in my head as soon as I read that phrase.

    Led Zeppelin When the Levee Breaks.

  8. Re: Not much different than. on Geologists Warned of Washington State Mudslides For Decades · · Score: 1

    The song started playing in my head as soon as I read that phrase.

    Led Zeppelin When the Levee Breaks.

  9. Re:Long-Term vs. Short-Term on IRS: Bitcoin Is Property, Not Currency · · Score: 1

    Ouch. Those are taxed at 28%, IIRC.

  10. Re:If BITC are property.. on IRS: Bitcoin Is Property, Not Currency · · Score: 1

    No, you're supposed to pay your taxes in the form the government with the military SAYS you're supposed to pay your taxes regardless of what you personally use for a medium of exchange.

    See: Split Tally Sticks, especially their use in England, for an example. It is still the longest in-use form of currency in history. Started by King Henry I around 1100, they persisted until 1826.

  11. Re:Voice messages? on Goodbye, Google Voice · · Score: 1

    Those are for when you are driving and it is so much easier to just leave a VM. Also, when the background noise in the car makes a dictated e-mail look like it written by a drunk, illiterate wombat.

  12. Re: Also time to stop on Author Says It's Time To Stop Glorifying Hackers · · Score: 1

    Sorry seems to be the hardest word.

  13. Re:Maybe the company's not actually doing it? on Ask Slashdot: Does Your Employer Perform HTTPS MITM Attacks On Employees? · · Score: 1, Insightful

    It isn't an attack, it is a proxy. The company's node (computer) is configured to use the company's proxy to get out to the Internet. The connection to the end system is between the company's proxy and the end system. The user has no equipment in play.

    Where I work (U.S. Gov't Agency) does this, though they exempt links to known online banking addresses.

    Employees are trained annually and sign papers acknowledging they understand what is going on. Don't like it? Don't work here. Or, as most people do, use your own device on a cellular connection and don't use the company's equipment or network.

  14. Re:Gaming is a commodity on PC Game Prices — Valve Starts the Race To Zero · · Score: 1

    You know, that would explain the excessive amount of "fertilizer" coming from gaming companies these days.

  15. Re:Regulation of currency on MtGox Sets Up Call Center For Worried Bitcoiners · · Score: 2

    Great! Then those people who just stole $400+ million by siphoning BTC from Mt. Gox wallets will be caught! Nothing to worry about at all!

  16. Re:Predictions were made in the 1970s then? on How Well Do Our Climate Models Match Our Observations? · · Score: 4, Informative

    There was no decision to change it, they are two different terms. Global Warming is a subset of Climate Change. The confusion of terms exists only in the reporting of the general, non-scientific press and the minds of Internet dogs who think checking a household thermometer means they themselves are qualified to hold a valid opinion.

    The IPCC was created back in 1988 at the request of WMO (World Meteorological Organization) and the UNEP (United Nations Environment Program).

    The UNEP was formed in 1972 to study man's interaction with and impact on the environment.

    The WMO was researching "potential global warming caused by the build-up of greenhouse gases in the atmosphere" back in the mid-1970s.

    Back in 1956 scientist Gilbert Plass published a study titled "The Carbon Dioxide Theory of Climatic Change".

    In a 1975 Science article by geochemist Wallace Broecker of Columbia University's Lamont-Doherty Geological Observatory: "Climatic Change: Are We on the Brink of a Pronounced Global Warming?"

  17. Re: Use Cisco instead... on S. Korea Diverts Network From Huawei Networks · · Score: 4, Informative

    Uh, no. You just read the *headlines* on Snowden articles and not the details, didn't you?

    Backdooring Cisco or Juniper equipment required physical access or someone to upload a Trojan firmware.

    Huawei has a *remote upgrade* feature that allows remote firmware programming. They are very..."user" friendly.

  18. Bluetooth ODB-II? on How To Take Control of a Car's Electronics, Cheap · · Score: 4, Informative

    And how does this differ from the Bluetooth ODB-II connector I use to stream car data to my cell phone? That is wireless and also requires being plugged into the diagnostic port on the car.

    I can pull all sorts of data from that. If I spend a little more, I can get a full CAN-bus connection and actually *send* information and control things.

    This isn't hacking. It is a product demo for VW.

  19. Select individuals should on Should Everybody Learn To Code? · · Score: 1

    All judges and anyone working in the Patent Office should be required to have taken the equivalent of a college minor in computer science. (Not IT, but real CS). Just the core courses.

  20. Re:Er... what? on New 3D Printer Can Print With Carbon Fiber · · Score: 1

    Pfft. Everyone knows it is Bigfoot and JFK who reside on the far side of the moon. Poser.

  21. Re:yep, always threaten my kids on The "Triple Package" Explains Why Some Cultural Groups Are More Successful · · Score: 1

    Your cover is blown! Taco Cowboy is really Donald Duck!

    Donald's Happy Birthday (1949)
    http://www.youtube.com/watch?v=xIdpIPgLcTU

  22. Re:yep, always threaten my kids on The "Triple Package" Explains Why Some Cultural Groups Are More Successful · · Score: 1

    That's an old Donald Duck cartoon w/his nephews.

  23. OpenELEC front end, SMB/CIFS/NFS server back-end on Ask Slashdot: Suggestions For a Simple Media Server? · · Score: 1

    I have a set-up where all my media files are stored on a generic Linux file server running Samba for CIFS/SMB and exporting NFS shares. This can be any old box you have laying around, and yes, the Raspberry Pi can do this fine.

    My televisions have small boxes mounted via VESA-mount adapters on the back of them. 2 are Raspberry Pis, 1 is a Zotac Z-Box. Two are wired, one is wireless, all have power and HDMI cables. All run OpenELEC as a front end and I use Yatse on my Android phone as a remote.

    The downsides are you can't integrate Netflix into OpenELEC (which is really just a skinned, slimmed XBMC) because of lack of DRM support on Linux. I haven't checked on Amazon Prime video or Hulu Plus video support lately. I know it was working before with the BlueCop repository of add-ons.

  24. Re:9.1 on Windows 9 Already? Apparently, Yes. · · Score: 2

    1. Windows 98se was able to log in to a Win2000/2003 domain. WinME had the ability to log in to a domain removed. Yes, I know it wasn't intended to work in a business environment, but at the time people were using Win98 on Windows 2000 Small Business Server environments. There was a big price difference between ME and 2000 Workstation.

    2. Multitasking older Windows & DOS software ( and there was tons of it out there) often caused ME to choke and blue screen as it gave up some backwards compatibility to implement some of it's features.

    3. WinME was hyped like crazy as a truly new Windows OS (vs 98 etc) and it really wasn't. It was more or less a tweak of 98 to fill the time/market gap until XP could be finished.

  25. Re:Egocentrism on How Weather Influences Global Warming Opinions · · Score: 2

    Er, what? The Tamil people, quoting Wikipedia for convenience,

    Tamils were noted for their martial, religious and mercantile activities beyond their native borders.

    and again, further in the article...

    Although most Tamils are Hindus, most practice what is considered to be folk Hinduism, venerating a plethora of village deities. A sizable number are Christians and Muslims.