Gmail (and Google Docs) is a perfect example of a totally insecure way to store confidential documents. They actively encourage people to access the system (sending their credentials) over insecure connections (no https) and will even do it automatically.
If you're the director of a company and you store confidential information on one of these services and your company loses money as a result of someone gaining access to that confidential information, you will likely be sued into bankruptcy.
Think you missed the point. There's a lot of e-books on the Amazon store for this device.. a lot of those e-books are not available anywhere else. Crack the DRM and it might be worthwhile paying for them.
Really??? Because I haven't seen any book glowing in the dark, have you?
With kindle you can read day and night with no flashlight/lamp/whatever. Uhh, no, you can't. As I said (and the review linked in the summary said) it is e-ink, and there's no backlight.
If it was less expensive (say, $100) and actually worked in my country (Australia) I'd buy one.. I'd fill it with book warez I converted into their format with bootleg tools, but I'd buy one. I'd take advantage of the free access to Wikipedia, and maybe I'd pay the $1/month to get Slashdot on it, but they can keep their $9.99 NYT bestsellers (and the associated DRM).
dude, every single review of this device on the Amazon website (famous for nuking bad reviews) has someone saying "the DRM sucks". Probably half the people who bought it are warezing their books and using the unofficial converters to load em onto the device by USB. Early adopters are notorious hackers.
Say I bought the idea that the typical book that the Kindle is replacing is this $20 hardcover bestseller (why not paperback?) which you can now get in e-book form for $9.99. You're saving $10 per book, that's what you're saying right? So you need to buy 40 books to break even? I read about 20 books a year and I'm a heavy reader, but few, if any, are NYT bestsellers.. but let's say they were, you're saying this 2 year investment will save me how much again? I'll break even, that's right.
I think the real value of this product is in the ability to read Slashdot when away from a computer (but I guarantee you can't post) and for reading newspapers, etc. Oh, and the free access to Wikipedia is just awesome. But the price will have to come down a lot first.
There's a lot more things going for it.. just watch the presentation.. but otherwise, yes, paying $400 for the pleasure of buying $9.99 books is a bit steep.
Dude, there seems to be something wrong with your keyboard. For some reason you're typing 'd' instead of 't' at the end of sentences. Are you trying to learn dvorak or something?
counting OFTEN up to human judgement, which is never unbiased (hanging chad, etc) hanging chad? Did you miss the whole freakin' point of the discussion or what?
The rest of the democratic world doesn't have chads. We don't punch cards.
That's because people much cleverer than you or I have put hundreds of millions of dollars into designing and deploying the system. Dude, what is up with you assuming you know me?
Besides which, all of these systems have flaws in them, no matter how "clever" the people who make them are or how much they spend to do it.
Yes, well, I don't think anyone was debating whether or not Dan Geer has good communication skills. Any implementation of this ultra-stupid idea would require really good "are you sure you want us to own you?" questioning.. but basically what he's saying is that he can write a root-kit that can beat the root-kits that are already installed on your machine.. which is just not something anyone should claim with a straight face.
Please tell me that it is at *least* an SSL deployed ActiveX control.
It's this kind of stuff that makes penetrating corporate networks so easy once you've owned the ISP of someone who networks in from home. That and the fact that most everyone these days is happy to download an exe and run it if they think they get some dancing bunnies to giggle at.
Have you considered the possibility that someone has broken into the stock buying site and now would like to get into your banking site? Maybe because, I don't know, they think you might have *more* money in your bank account that the stock buying site doesn't have access to and they'd like that money too? Honestly, if your stock buying site tells you that you need more security than your browser supplies and asks that you download some random piece of software that you can't even inspect to ensure is not malware, then say no.. otherwise you're most likely installing a key logger as the stock buying site would have to be pretty dumb to think asking people to run arbitrary code is a good thing.
It's like people who ask you to run an ActiveX control because it is "more secure". They're obviously idiots and you should take your business elsewhere.
So you trust your stock trading site to have access to your banking site.. cause by running what has been described by the article as a "root kit" from your stock trading site, and then logging into your banking site, that's what you're doing.
So you're saying that the guy should force everyone to download the root-kit and install it or they can't access the website?
Cause it is the root-kit thing that gives more security.. from the perspective that the vast majority of clients are probably infected with at least some malware.
I mean, is SSL not good enough for you? You don't trust SSL?
Ok, so how is this extra special security executable going to get to you? If the site isn't sending it over SSL then anyone upstream can replace the executable with a trojan right? So I guess the site is going to have to send it to you over SSL, cause then no-one can intercept it right? Oh, wait, you don't trust SSL.. that's the reason why you're downloading this extra special security in the first place.
Slashdot Mirror
Gmail (and Google Docs) is a perfect example of a totally insecure way to store confidential documents. They actively encourage people to access the system (sending their credentials) over insecure connections (no https) and will even do it automatically.
If you're the director of a company and you store confidential information on one of these services and your company loses money as a result of someone gaining access to that confidential information, you will likely be sued into bankruptcy.
Privacy is for old people.
The kids, they love to be stalked.
Think you missed the point. There's a lot of e-books on the Amazon store for this device.. a lot of those e-books are not available anywhere else. Crack the DRM and it might be worthwhile paying for them.
Verbatim copying and distribution of this entire article is permitted in any medium without royalty provided this notice is preserved. I'm surprised Bezos isn't selling it already.
Me too.. thing is, there's virtually no good automatic typesetting apps for 'em and I miss my diagrams.
With kindle you can read day and night with no flashlight/lamp/whatever. Uhh, no, you can't. As I said (and the review linked in the summary said) it is e-ink, and there's no backlight.
If it was less expensive (say, $100) and actually worked in my country (Australia) I'd buy one.. I'd fill it with book warez I converted into their format with bootleg tools, but I'd buy one. I'd take advantage of the free access to Wikipedia, and maybe I'd pay the $1/month to get Slashdot on it, but they can keep their $9.99 NYT bestsellers (and the associated DRM).
dude, every single review of this device on the Amazon website (famous for nuking bad reviews) has someone saying "the DRM sucks". Probably half the people who bought it are warezing their books and using the unofficial converters to load em onto the device by USB. Early adopters are notorious hackers.
Say I bought the idea that the typical book that the Kindle is replacing is this $20 hardcover bestseller (why not paperback?) which you can now get in e-book form for $9.99. You're saving $10 per book, that's what you're saying right? So you need to buy 40 books to break even? I read about 20 books a year and I'm a heavy reader, but few, if any, are NYT bestsellers.. but let's say they were, you're saying this 2 year investment will save me how much again? I'll break even, that's right.
I think the real value of this product is in the ability to read Slashdot when away from a computer (but I guarantee you can't post) and for reading newspapers, etc. Oh, and the free access to Wikipedia is just awesome. But the price will have to come down a lot first.
Yeah.. that's freaky generous.
There's a lot more things going for it.. just watch the presentation.. but otherwise, yes, paying $400 for the pleasure of buying $9.99 books is a bit steep.
No. E-Books has been buried for long enough. It is time to accept this technology into our lives.
Crack it.
You don't have to. It's an option. You don't need a computer, but if you have one you can use it to put files on it. It comes with a usb cable.
it's not an LCD, it's e-paper or "electronic ink".
Yeah, they finally got that technology out of the lab about a couple of years ago.
Did you say elevator?
http://www.penny-arcade.com/comic/2007/11/16
Dude, there seems to be something wrong with your keyboard. For some reason you're typing 'd' instead of 't' at the end of sentences. Are you trying to learn dvorak or something?
The rest of the democratic world doesn't have chads. We don't punch cards.
See, now that's just insulting.
I happen to be a computer security consultant.
But you just stick with your incorrect opinion ill-formed from one chance encounter.
I'll keep calling you an idiot.
Besides which, all of these systems have flaws in them, no matter how "clever" the people who make them are or how much they spend to do it.
Yes, well, I don't think anyone was debating whether or not Dan Geer has good communication skills. Any implementation of this ultra-stupid idea would require really good "are you sure you want us to own you?" questioning.. but basically what he's saying is that he can write a root-kit that can beat the root-kits that are already installed on your machine.. which is just not something anyone should claim with a straight face.
yeah, stupidity abounds.
Please tell me that it is at *least* an SSL deployed ActiveX control.
It's this kind of stuff that makes penetrating corporate networks so easy once you've owned the ISP of someone who networks in from home. That and the fact that most everyone these days is happy to download an exe and run it if they think they get some dancing bunnies to giggle at.
Have you considered the possibility that someone has broken into the stock buying site and now would like to get into your banking site? Maybe because, I don't know, they think you might have *more* money in your bank account that the stock buying site doesn't have access to and they'd like that money too? Honestly, if your stock buying site tells you that you need more security than your browser supplies and asks that you download some random piece of software that you can't even inspect to ensure is not malware, then say no.. otherwise you're most likely installing a key logger as the stock buying site would have to be pretty dumb to think asking people to run arbitrary code is a good thing.
It's like people who ask you to run an ActiveX control because it is "more secure". They're obviously idiots and you should take your business elsewhere.
So you trust your stock trading site to have access to your banking site.. cause by running what has been described by the article as a "root kit" from your stock trading site, and then logging into your banking site, that's what you're doing.
So you're saying that the guy should force everyone to download the root-kit and install it or they can't access the website?
Cause it is the root-kit thing that gives more security.. from the perspective that the vast majority of clients are probably infected with at least some malware.
Ok.. why do you want this extra special security?
I mean, is SSL not good enough for you? You don't trust SSL?
Ok, so how is this extra special security executable going to get to you? If the site isn't sending it over SSL then anyone upstream can replace the executable with a trojan right? So I guess the site is going to have to send it to you over SSL, cause then no-one can intercept it right? Oh, wait, you don't trust SSL.. that's the reason why you're downloading this extra special security in the first place.
You're an idiot.