Slashdot Mirror


User: scbomber

scbomber's activity in the archive.

Stories
0
Comments
31
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 31

  1. Re:Call commissioner Gordon! on Optical Cellphones · · Score: 1

    Hopefully they can make it carry more than one bit of information per day also...

  2. Re:I am so pissed at Network Solutions right now on Verisign Ordered to Stop Deceptive Renewal Notices · · Score: 1

    they did me the exact same way. After I renewed there was no problem with the transfer. The alternate registrar knew about the tactic and offered to bill for a period starting from the NetSol expiration, just because they didn't want to lose time getting my $ while I tried to fight the power at NetSol. Creepy spiteful hateful practices abound there! Stick it to them!

    And this is the company we are expected to TRUST to certify all those webservers out there? Stupid move for someone who wants to be in the trust business.

  3. time for a new identity on Apple Cuts Off Under-18 Darwin Developer · · Score: 1

    in cyberspace, nobody knows you're under 18

  4. Re:It's traffic analysis, and it isn't just for SS on SSH Vulnerability and the Future of SSL · · Score: 1
    SSH2 transport protocol has a specific remedy for traffic analysis attacks! (IF clients and servers implement it.) It's the SSH_MSG_IGNORE message.
    Quoted text from IETF draft follows.
    9.2. Ignored Data Message byte SSH_MSG_IGNORE string data All implementations MUST understand (and ignore) this message at any time (after receiving the protocol version). No implementation is required to send them. This message can be used as an additional protection measure against advanced traffic analysis techniques.
    Quoted text from IETF draft ends.
  5. A client vulnerability at worst on SSH Vulnerability and the Future of SSL · · Score: 1
    Not only because some clients buffer your password locally before sending any of it, but also because the SSH transport layer protocol provides for an arbitrary amount of padding to be inserted with payload packets...this is almost accidental.

    What's intentional is the inclusion of SSH_MSG_IGNORE message which is specifically mentioned as being useful as "an additional protection measure against advanced traffic analysis techniques." such as the one described in the paper.

  6. Re:An old idea on Books on Demand · · Score: 1

    VolumeOne in Chicago has been in this business since 1997. I think some major publishing houses were looking at it too.