Slashdot Mirror


User: nullchar

nullchar's activity in the archive.

Stories
0
Comments
577
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 577

  1. Re:Wait a second... on Google Pressure Cookers and Backpacks: Get a Visit From the Feds · · Score: 1

    The metadata stores the query:

    https://www.google.com/search?q=my+search+string+is+in+the+http+header

    They don't care about the results of the query.

  2. Re:Google as it used to be on Google Pressure Cookers and Backpacks: Get a Visit From the Feds · · Score: 1

    On a search results page, you can click on "Search Tools" and then change the middle dropdown from "All Results" to "Verbatim".

    You need to accept cookies for that to work...

  3. Encryption on Google Pressure Cookers and Backpacks: Get a Visit From the Feds · · Score: 2

    Even https://encrypted.google.com/ won't save you!

  4. Re:Huh? on A Circular New York City Subway Map To Straighten Things Out · · Score: 1

    I thought the same thing, WTF were those two red & blue maps of NYC?

  5. Re:as often the user is the problem on Ask Slashdot: Hardware Accelerated Multi-Monitor Support In Linux? · · Score: 1

    You have 3-4 monitors working with hardware acceleration without using Xinerama or TwinView?

    I have 2x Quadros running with Xinerama - one monitor has hardware accelerated 3D graphics, but a 3D application cannot span nor cross a monitor boundary.

  6. Re:I do this currently.. on Ask Slashdot: Hardware Accelerated Multi-Monitor Support In Linux? · · Score: 1

    Can you please post your "Device0" and "Monitor0" sections too? I'm confused by your MetaModes...

  7. Re:Btrfs send & receive on Ask Slashdot: Asynchronous RAID-1 Free Software Backup For Laptops? · · Score: 1

    Thanks for the informative reply. I've been a long time md user, but not yet experimented with btrfs - I'll definitely try its native raid.

    I'm very excited for the checksum-on-read process to alert on corrupted data.

  8. Re:Btrfs send & receive on Ask Slashdot: Asynchronous RAID-1 Free Software Backup For Laptops? · · Score: 1

    Do you lose any functionality by using btrfs on top of an md device? (vs btrfs' own raid)

  9. Re:mdadm can do this on Ask Slashdot: Asynchronous RAID-1 Free Software Backup For Laptops? · · Score: 1

    Agreed, it would be better to boot from another device (usb) and then use mdadm to rebuild the array (sync disk1 to the replaced disk0).

  10. Re:find & diff on Ask Slashdot: Asynchronous RAID-1 Free Software Backup For Laptops? · · Score: 3, Interesting

    Just curious, why do you require access time? I set 'noatime' on all partitions.

  11. Why "fix" what isn't broken? on Forget Apple: Samsung Could Be Google's Next Big Rival · · Score: 2

    Why would Samsung want to create it's own appstore when it can leverage Google's to sell more devices?

  12. Re:Self signed? on Anonymous Source Claims Feds Demand Private SSL Keys From Web Services · · Score: 1

    Derp, the TFA was talking about end service provider's private keys to their SSL certs. But with internal taps behind the SSL gateway, I don't see how it matters....

  13. Re:Self signed? on Anonymous Source Claims Feds Demand Private SSL Keys From Web Services · · Score: 1

    Except the DNSSEC root keys (and common gTLD keys like .com) have been compromised along with the CA keys. Now you just MITM the DNS request and forge the cert.

  14. Re:Self signed? on Anonymous Source Claims Feds Demand Private SSL Keys From Web Services · · Score: 1

    TFA is talking about the private keys to the Certificate Authorities, not the private keys of each individual SSL certificate.

    Convergence.IO totally helps here -- assuming you can trust the end service provider to not give up their SSL cert keys. All the big providers have allowed internal taps into their data, so it doesn't matter if they shared their keys or not. But small providers and peers could be trusted with Convergence.

  15. Re:US Military shares your opinion. on Anonymous Source Claims Feds Demand Private SSL Keys From Web Services · · Score: 1

    Sounds good, but what if they receive a Foreign Intelligence Surveillance Act (FISA) court order which prohibits them from telling anyone they had to hand over the private keys to their Certificate Authority?

    Somehow the 4th and 1st amendments are violated without any public recourse.

  16. Re:Prior Art on Sound-Based Device Authentication Has Many Possibilities (Video) · · Score: 1

    Public Key Infrastructure (PKI) needs to be built into the APIs from day one. There shouldn't be a non-encrypted version available to developers or users.

    Of course, anything using cryptography must be open source (and in a library available to my app, not only as a "cloud-based" API unless it only accepts encrypted data, no way can it have access to my private key).

    There are lots of APIs available, but developers need to implement applications with them.

  17. Re:More Prior Art on Sound-Based Device Authentication Has Many Possibilities (Video) · · Score: 1

    I knew there was a slashdot story about this! I failed in my quick search. Thanks for the link.

  18. Prior Art on Sound-Based Device Authentication Has Many Possibilities (Video) · · Score: 3, Interesting

    Near_sound_data_transfer is already implemented and sold by TagAttitude.

    Audio data transfer in Android is discussed in this stackoverflow post which mentions this slideshow.

    This dude posted his same idea over a year ago.

    Modem-style data transfer between smartphones is a cool idea - but the software and protocol would need to be ubiquitous (read: open). If only a few apps or devices support this tech, it's no different from requiring hardware like NFC or software to support a bluetooth data sharing connection.

  19. Re:I have an idea on ICANN Approves First Set of New gTLDs · · Score: 2

    These are all uncontested applications (except for .sucks) and will all be new gTLDs within the next year or so:

    .gripe
    .fail
    .sucks
    .wtf

    (Listed in order of application prioritization by ICANN.)

  20. Re:Why no .4Q top level? on ICANN Approves First Set of New gTLDs · · Score: 1

    There is an application for .WTF (as well as .FOO and .DOT, etc etc)

  21. Re:How do I type this? on ICANN Approves First Set of New gTLDs · · Score: 1

    And DNS will continue to use Punycode in the foreseeable future. DNS is all that matters here as what is a "domain name" (read: hostname) other than a mapping of name to number?

  22. Punycode versions: on ICANN Approves First Set of New gTLDs · · Score: 1

    As we cannot post unicode versions, here are the punycode versions:

    .xn--ngbc5azd = International Domain Registry Pty. Ltd.'s Arabic for "Web or Network"
    .xn--80asehdb = Core Association's Russian for "Online"
    .xn--80aswg = Core Association's Russian for "Web site"
    .xn--unup4y = Spring Fields, LLC Chinese for "Game"

  23. Re:Ghostscript on Ask Slashdot: How Do You Automatically Sanitize PDF Email Attachments? · · Score: 1

    I do not know if it strips javascript or not. I'd be happy to try it on a script heavy PDF.

    You can do the same PDF-> PS -> PDF as the summary suggested -- but with ghostscript and possibly control more options (like change the PDF version which might strip scripts), and perhaps use a different intermediary format than postscript.

    (I also don't know about the libpng attack inside a PDF, but am aware of various remote code execution in poor png parsing/rendering libraries. Are people re-encoding PNGs at the mail gateway level to reduce exposure to malicious PNGs?)

  24. Ghostscript on Ask Slashdot: How Do You Automatically Sanitize PDF Email Attachments? · · Score: 4, Informative

    I use Ghostscript when attempting to compress a "bloated" PDF (such as generated by Xsane). The input is a PDF, output is a PDF:

    # Use ghostscript to re-write the PDF
    gs -dBATCH -dNOPAUSE -q -sDEVICE=pdfwrite -sOutputFile=new.pdf old.pdf

    Also handy to combine multiple PDFs into a single document, or copy out certain pages from a PDF:

    # Combine PDFs
    gs -dBATCH -dNOPAUSE -q -sDEVICE=pdfwrite -sOutputFile=combined.pdf 01.pdf 02.pdf 03.pdf

    # Copy pages 3 & 4 from an existing PDF
    gs -dBATCH -dNOPAUSE -sDEVICE=pdfwrite -dFirstPage=3 -dLastPage=4 -sOutputFile=new.pdf current.pdf

  25. Re:Internet Explorer on Ask Slashdot: Most Secure Browser In an Age of Surveillance? · · Score: 1

    If you're using HTTP instead of HTTPS, then the NSA has all your traffic already.

    See: http://www.wired.com/threatlevel/2013/06/snowden-powerpoint/#slideid-57990