It is nice to have a good transport layer for E-mail, but no matter how well secure it is, it is wise to have your final message/file encryption be separate, just in case something happens. The same reason people put stuff in a physical, sealed envelope before it goes into the courier's hands, even though the courier is 100% trustworthy.
I'd just let the USB ports charge my external battery. Then, charge my good stuff with the battery. There are also "USB condoms" which cut the data ports and only allow charging.
The market might be like Austin, where the values are increasing because people from other countries are buying. Austin's values are shooting through the roof because of foreign investments, and those are not leaving anytime soon.
I sort of doubt this is the cause. Things like annealing, epoxy potting, solder dip, and component geometry can be used to mitigate this. However, if tin whiskers did form, it could be a show-stopper.
This is how it -should- be. IoT devices should yak to each other via Bluetooth, or if they need to go out to the WAN, via hardened hub or hubs with some type of profile limiting the machines they can communicate with.
However, there are two profit driven motives why something like Z-wave isn't used: The first is that sucking as much data as possible down is profitable. Analytics, telemetry, "anonymized" profile data... regardless, the IoT maker makes cash for everything the device can discern about the buyer or the environment and ship up.
The second is cost. Security doesn't pay the bills, so IoT makers don't care how vulnerable their stuff is. In fact, it is in their financial interest to have devices which can't be updated, forcing the user to buy new ones or face compromise.
For now we can... However, things change. For example, finding a vehicle that does not phone home 24/7 is a challenge. Right now IoT devices are an option, but with the fact that companies can make more money from the data stream coming from the device than the device itself, there is a good chance that the "option" part will disappear. We saw that with consoles which require a constant connection to function. We see this with Windows 10 and its telemetry gathering. IoT is often about dumping as much data as possible to a server, just because that data can be sold to someone, and because of shrink-wrapped EULAs, just by putting in an IoT++ light bulb into a socket, the user agreed to 24/7 monitoring.
I really don't like combining my encryption layer with the transport layer. Too easy for stuff to get compromised. Even if the company has good intentions, an agency like Interpol leaning on them with the choice of putting in a backdoor or everyone in the company going to jail for conspiracy/collusion charges can cause issues.
My recommendation: Use a PGP reader and a secure transport mechanism. PGP applications are pretty easy to obtain on all platforms. Then, use a trustworthy transport link. The closest analog to this would be sending critical stuff via registered mail. The Post Office uses two keys and signatures every place the message goes, and even then, only the receiver and the sender have/had access to what is inside the envelope.
It isn't like encryption is hard. If someone is too afraid of PGP, getting a S/MIME key and using that in Outlook, Thunderbird, or another mail program isn't difficult.
For a lot of devices, they don't need the speed of 5G, or even LTE. Some devices are just fine working on EDGE or even GPRS because those protocols require less power and are simpler, requiring fewer computation cycles to packetize/depacketize network data.
I wish 5G was engineered similar to Bluetooth. Have a mode for fast data and high power, but have the ability to allow for low power, low bandwidth, so something like a solar powered weather station in the middle of nowhere can send its data to a monitoring server 24/7 without worry about it draining the batteries due to having to have a multi-watt antenna hot at all times.
I want a "hard" off switch, and I want it where the device does not need access to the Internet. I've read in previous/. articles about some thermostats automatically turning off in 14 days if they don't have constant Internet access.
Realistically, I just don't want IoT functionality, period. There is nothing it gives me that I don't have already. My TV displays whatever is on the other on the HDMI cable; no more. My fridge keeps my beer cold; no more. If I wanted to pay a lot of money for a refrigerator, I'd buy a fridge that uses both natural gas and electricity so a blackout while I am gone doesn't mean fouled food when I return. I am not paying money for a fridge that can turn into a botnet client or a potential hazard if some hacker decides to turn it off while I am gone in hopes of causing food poisoning.
Just a quick browse of the CREST archive shows a number of items that are historically intriguing, be it the Berlin tunnel, formulae for invisible ink, OPSEC tutorials for the old OSS, and other items.
The documentation about GITMO is also worth a look-see.
Definitely stuff worth looking at, and some of it might be something worth having in an American History class.
What wiggle room? The justice system here in the US is a meat grinder that destroys lives, even people who were innocent. Take NYC, for example. Someone gets arrested for jaywalking. Unless they bond out, they are going to be staying at Riker's for over a year until trial. Even after trial, if they are found lily-white innocent, their lives are ruined. They are most likely evicted, their job is long gone, and any vehicle they had is either repossessed or impounded and sold.
What do we want in the US, a -justice- system, or a -revenge- system? A -justice- system is designed to ensure crimes are not repeated, and rehabilitation is part of that. What we have now is a -revenge- system. It is great if one likes watching people suffer, and great if you have private prison stock, but not if you have any ethics or a conscience. Yes, we need to lock up some people well away from society to keep the streets safe, but why should someone who was caught with a bag of marijuana be locked up for life, and even if they get released, will never be able to hold a meaningful job.
I'd rather have my taxpayer dollars go for vocational rehab in prisons, so someone getting out has a chance of a job. This way, they can work, or even just cruise on welfare... both are cheaper on the taxpayer than locking them up in a private, for-profit prison for the rest of their life.
I think there is a market for them. Otherwise, Apple would not have made the iPhone SE. I would assert that there would be a market for slider devices, similar to the Droid or CLIQ. It would be somewhat of a niche market, but it would definitely be profitable, just because there are a lot of people who would like a different form factor. Plus, with a thicker phone, it would allow for a larger battery or perhaps multiple MicroSD card slots.
That would be an ideal. The minimum would be an unlockable bootloader easily done with "fastboot oem unlock", click a dialog with a warning, and done.
What would be really nice would be to have a default ROM on a device, but have some factory-blessed choices that are easily obtainable as well. For example, if I want a ROM that uses Nova Launcher, a custom keyboard, multiple app stores (Google Play Store, F-Droid, Amazon), it would be available. Even something like LineageOS with GApps would be nice to have (especially since LineageOS is not a rival of Google.)
I remember back in the 1980s, as soon as the press stopped naming people in public who committed suicide, the amount of public suicide pacts and other items went down.
What bothered me about the press wasn't the fact that a mass murderer was named. A few years ago, there was a mass shooting at UCSB. The shooter was not just named, but his writings and his YouTube videos were published, and the press spent most of the holiday going through his life like a biography of a hero. What the press should have done is give the guy an emasculating nickname, and from that point on, if the incident comes up, it will be "Happy Bunny" or "Lollipop Licker" who is named for that event, with all his/her writings not readily available, so the person never gets any press after the action.
Definitely no monuments with the shooter's name on it. Just the victims.
As a devil's advocate, it can be argued that other than a direct victim or people who are affected by the criminal's actions, keeping the names of people arrested private isn't such a bad thing. It is a better system than here in the US where as soon as someone is booked, that info goes into hundreds of databases, and even if charges are dropped or the person is found innocent, the arrest record is still public, and can affect finding work in the future. It just might be that the public humiliation of having some peccadillo be forever branded into a person's virtual hide is far greater a punishment than the offense requires.
Slashdot Mirror
It is nice to have a good transport layer for E-mail, but no matter how well secure it is, it is wise to have your final message/file encryption be separate, just in case something happens. The same reason people put stuff in a physical, sealed envelope before it goes into the courier's hands, even though the courier is 100% trustworthy.
I'd just let the USB ports charge my external battery. Then, charge my good stuff with the battery. There are also "USB condoms" which cut the data ports and only allow charging.
xPrivacy used to do exactly that, but it (and the XPosed framework) seems not to have been updated in years.
The market might be like Austin, where the values are increasing because people from other countries are buying. Austin's values are shooting through the roof because of foreign investments, and those are not leaving anytime soon.
Too much money to be made by telemetry and data sucked back for it to go away. That, and the ability to have another method to throw ads at people.
I sort of doubt this is the cause. Things like annealing, epoxy potting, solder dip, and component geometry can be used to mitigate this. However, if tin whiskers did form, it could be a show-stopper.
This is how it -should- be. IoT devices should yak to each other via Bluetooth, or if they need to go out to the WAN, via hardened hub or hubs with some type of profile limiting the machines they can communicate with.
However, there are two profit driven motives why something like Z-wave isn't used: The first is that sucking as much data as possible down is profitable. Analytics, telemetry, "anonymized" profile data... regardless, the IoT maker makes cash for everything the device can discern about the buyer or the environment and ship up.
The second is cost. Security doesn't pay the bills, so IoT makers don't care how vulnerable their stuff is. In fact, it is in their financial interest to have devices which can't be updated, forcing the user to buy new ones or face compromise.
For now we can... However, things change. For example, finding a vehicle that does not phone home 24/7 is a challenge. Right now IoT devices are an option, but with the fact that companies can make more money from the data stream coming from the device than the device itself, there is a good chance that the "option" part will disappear. We saw that with consoles which require a constant connection to function. We see this with Windows 10 and its telemetry gathering. IoT is often about dumping as much data as possible to a server, just because that data can be sold to someone, and because of shrink-wrapped EULAs, just by putting in an IoT++ light bulb into a socket, the user agreed to 24/7 monitoring.
I really don't like combining my encryption layer with the transport layer. Too easy for stuff to get compromised. Even if the company has good intentions, an agency like Interpol leaning on them with the choice of putting in a backdoor or everyone in the company going to jail for conspiracy/collusion charges can cause issues.
My recommendation: Use a PGP reader and a secure transport mechanism. PGP applications are pretty easy to obtain on all platforms. Then, use a trustworthy transport link. The closest analog to this would be sending critical stuff via registered mail. The Post Office uses two keys and signatures every place the message goes, and even then, only the receiver and the sender have/had access to what is inside the envelope.
It isn't like encryption is hard. If someone is too afraid of PGP, getting a S/MIME key and using that in Outlook, Thunderbird, or another mail program isn't difficult.
For a lot of devices, they don't need the speed of 5G, or even LTE. Some devices are just fine working on EDGE or even GPRS because those protocols require less power and are simpler, requiring fewer computation cycles to packetize/depacketize network data.
I wish 5G was engineered similar to Bluetooth. Have a mode for fast data and high power, but have the ability to allow for low power, low bandwidth, so something like a solar powered weather station in the middle of nowhere can send its data to a monitoring server 24/7 without worry about it draining the batteries due to having to have a multi-watt antenna hot at all times.
I want a "hard" off switch, and I want it where the device does not need access to the Internet. I've read in previous /. articles about some thermostats automatically turning off in 14 days if they don't have constant Internet access.
Realistically, I just don't want IoT functionality, period. There is nothing it gives me that I don't have already. My TV displays whatever is on the other on the HDMI cable; no more. My fridge keeps my beer cold; no more. If I wanted to pay a lot of money for a refrigerator, I'd buy a fridge that uses both natural gas and electricity so a blackout while I am gone doesn't mean fouled food when I return. I am not paying money for a fridge that can turn into a botnet client or a potential hazard if some hacker decides to turn it off while I am gone in hopes of causing food poisoning.
If IoT is a question, then "NO" is the answer.
Just a quick browse of the CREST archive shows a number of items that are historically intriguing, be it the Berlin tunnel, formulae for invisible ink, OPSEC tutorials for the old OSS, and other items.
The documentation about GITMO is also worth a look-see.
Definitely stuff worth looking at, and some of it might be something worth having in an American History class.
What wiggle room? The justice system here in the US is a meat grinder that destroys lives, even people who were innocent. Take NYC, for example. Someone gets arrested for jaywalking. Unless they bond out, they are going to be staying at Riker's for over a year until trial. Even after trial, if they are found lily-white innocent, their lives are ruined. They are most likely evicted, their job is long gone, and any vehicle they had is either repossessed or impounded and sold.
What do we want in the US, a -justice- system, or a -revenge- system? A -justice- system is designed to ensure crimes are not repeated, and rehabilitation is part of that. What we have now is a -revenge- system. It is great if one likes watching people suffer, and great if you have private prison stock, but not if you have any ethics or a conscience. Yes, we need to lock up some people well away from society to keep the streets safe, but why should someone who was caught with a bag of marijuana be locked up for life, and even if they get released, will never be able to hold a meaningful job.
I'd rather have my taxpayer dollars go for vocational rehab in prisons, so someone getting out has a chance of a job. This way, they can work, or even just cruise on welfare... both are cheaper on the taxpayer than locking them up in a private, for-profit prison for the rest of their life.
I think there is a market for them. Otherwise, Apple would not have made the iPhone SE. I would assert that there would be a market for slider devices, similar to the Droid or CLIQ. It would be somewhat of a niche market, but it would definitely be profitable, just because there are a lot of people who would like a different form factor. Plus, with a thicker phone, it would allow for a larger battery or perhaps multiple MicroSD card slots.
That would be an ideal. The minimum would be an unlockable bootloader easily done with "fastboot oem unlock", click a dialog with a warning, and done. What would be really nice would be to have a default ROM on a device, but have some factory-blessed choices that are easily obtainable as well. For example, if I want a ROM that uses Nova Launcher, a custom keyboard, multiple app stores (Google Play Store, F-Droid, Amazon), it would be available. Even something like LineageOS with GApps would be nice to have (especially since LineageOS is not a rival of Google.)
I remember back in the 1980s, as soon as the press stopped naming people in public who committed suicide, the amount of public suicide pacts and other items went down. What bothered me about the press wasn't the fact that a mass murderer was named. A few years ago, there was a mass shooting at UCSB. The shooter was not just named, but his writings and his YouTube videos were published, and the press spent most of the holiday going through his life like a biography of a hero. What the press should have done is give the guy an emasculating nickname, and from that point on, if the incident comes up, it will be "Happy Bunny" or "Lollipop Licker" who is named for that event, with all his/her writings not readily available, so the person never gets any press after the action. Definitely no monuments with the shooter's name on it. Just the victims.
As a devil's advocate, it can be argued that other than a direct victim or people who are affected by the criminal's actions, keeping the names of people arrested private isn't such a bad thing. It is a better system than here in the US where as soon as someone is booked, that info goes into hundreds of databases, and even if charges are dropped or the person is found innocent, the arrest record is still public, and can affect finding work in the future. It just might be that the public humiliation of having some peccadillo be forever branded into a person's virtual hide is far greater a punishment than the offense requires.