Slashdot Mirror


User: darth.hunterix

darth.hunterix's activity in the archive.

Stories
0
Comments
128
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 128

  1. Re:whatever on Star Trek: Discovery Is Returning For a Second Season (engadget.com) · · Score: 1

    You've only seen it. Will Wheaton WAS there, on set. And how old he was then?

  2. Re:How serious is this? How exploitable is it? on WPA2 Security Flaw Puts Almost Every Wi-Fi Device at Risk of Hijack, Eavesdropping (zdnet.com) · · Score: 1

    Better yet, I work for a company that sells them.

    1024 RSA for TLS is not allowed and we would be in great trouble if it turned out we have it. It is used by some legacy EMV credit cards for dynamic authentication, but those cards are no longer issued and will soon all expire.

    3DES is only used for pinblock encryption and such encrypted pinblock is later encrypted further, along with the rest of transaction data, with AES.

  3. Re:How serious is this? How exploitable is it? on WPA2 Security Flaw Puts Almost Every Wi-Fi Device at Risk of Hijack, Eavesdropping (zdnet.com) · · Score: 1

    It is not allowed.

  4. Re: Strange days indeed.... on US Preparing to Put Nuclear Bombers On 24-Hour Alert (defenseone.com) · · Score: 1

    There is one difference. At first, he just suggested he might have a gun somewhere. Then he waived a plastic toy. Then he used money you gave him to buy the real thing. And now you hear he uses money from you to get shooting lessons and buy ammo. What now?

  5. Re:How serious is this? How exploitable is it? on WPA2 Security Flaw Puts Almost Every Wi-Fi Device at Risk of Hijack, Eavesdropping (zdnet.com) · · Score: 1

    At this point 2048 is minimum. https://comodosslstore.com/blo...

  6. Re:How serious is this? How exploitable is it? on WPA2 Security Flaw Puts Almost Every Wi-Fi Device at Risk of Hijack, Eavesdropping (zdnet.com) · · Score: 1

    2048 here.

  7. Re:How serious is this? How exploitable is it? on WPA2 Security Flaw Puts Almost Every Wi-Fi Device at Risk of Hijack, Eavesdropping (zdnet.com) · · Score: 1

    Communication between POS and card processor goes via TLS, usually also over VPN. So content encrypted by TDES has another layer of encryption (or two) added when it leaves the POS device.

  8. Re:How serious is this? How exploitable is it? on WPA2 Security Flaw Puts Almost Every Wi-Fi Device at Risk of Hijack, Eavesdropping (zdnet.com) · · Score: 1

    >What else would you use to encrypt 8-byte long sequence.

    I would establish a secured session using authenticated key agreement and use that session to carry all the traffic.

    Session between what and what? And is loading key in air-gapped secure room into secure memory separately by several security officers enough key authentication enough?

    I write user application for POS terminals for a living. I agree that the specs are all over the place, but cryptography is actually the only parted of it which is just fine.

  9. Re:How serious is this? How exploitable is it? on WPA2 Security Flaw Puts Almost Every Wi-Fi Device at Risk of Hijack, Eavesdropping (zdnet.com) · · Score: 1

    What else would you use to encrypt 8-byte long sequence, which after decryption still looks like random data?

    Triple DES is used to encrypt your PIN, which is stored in the following manner:

    PIN may be from 4 to 12 digits long. Let's assume 1234.

    First you create pin-block sequence 4C1234FFFFFFFFFF, where 4C is constant (min and max length of PIN), and Fs are padding. Then you XOR it with PAN, which is also secret, so you end up with semi-random sequence, which rules out brute-force attack. Then you encrypt the whole thing with Triple DES.

    Obviously, the key is stored in special, tamper-proof module.

    Transaction journal, on the other hand, must be encrypted at least with AES-128, with key in safe memory as well.

  10. Re:Another reason why bitcoin is garbage on In a Cashless World, You'd Better Pray the Power Never Goes Out (mises.org) · · Score: 1

    Because when world goes down the shitter, it's the TAXES people are worried about.

    Also - write down details of every transaction in a notebook, put everything in the cash register when power comes back. I've learnt it from my grandma when I was 5.

  11. Re: And Nourse's _Blade Runer_ was excellent. on Why Is 'Blade Runner' the Title of 'Blade Runner'? (vulture.com) · · Score: 1

    Unless you keep the gun loaded (some people do, some people don't) it's much easier to accidentally kill someone with a knife than with a gun.

    While I don't own a gun myself I am no stranger to them and I know plenty of gun owners or people who live with gun owners. Most of them had more or less serious accident with a knife, none of them had any accident with a gun. Partly due to the fact that guns get more respectful treatment, partly because there is no way to "unload" a knife. Hell, it doesn't event have a safety!

    And as to knowledge who has access to guns you missed two important factors:

    1. When I lived with a gun owner I also wasn't sure who has access, because they weren't mine and I didn't have an access myself. I trusted the owner to take care of them and apparently he did, since we never had any accident.
    2. When you go to hospital you probably have something else on mind than a guns, like an injury or an illness. Imagine if they asked her about the colour of her underwear. While she probably knows it, she wouldn't be able to answer the question because of hospital-related stress.

  12. Re:Thus the Seattle-Vancouver study was repudiated on Why Is 'Blade Runner' the Title of 'Blade Runner'? (vulture.com) · · Score: 1

    When people flat out state that they are honest, they usually lie. Only self-admitted liars can be trusted.

  13. Re:Slashdot has changed over the 20 years on 20 Years of Stuff That Matters · · Score: 1

    I didn't remember that it was 20 years. I would actually have guessed 21 years ago.

    Off by one error? Happens to the best of us.

  14. Re:Slashdot Died when CmdrTaco Left on 20 Years of Stuff That Matters · · Score: 1

    In other words: "Make trolling great again!"? Man, I could run a presidential campaign on this one, despite having no USA birth certificate.

  15. Re:Gaia - Earth Worship on Hawaii Approves Telescope On Volcano Sacred To Indigenous People (reuters.com) · · Score: 1

    Oh, there is even better option: Ancient Roman paganism. While they did have their own gods, they felt it is unwise to insult other people's gods, so in they generally believed that all gods and all myths are kinda sorta true, but we don't know for sure. This leaves room for Gaia, FSM, or whatever BS you can come up with. With a bit of creativity, you can come up for a reason for naked dancing any day you wish!

  16. Re:Oh, this ain't good... on Internet Explorer Bug Leaks Whatever You Type In the Address Bar (arstechnica.com) · · Score: 1

    Sure they did. They just try to leak as much user's data as possible, so this count as huge success. Or, since it's M$ we're talking about, suckcess.

  17. Re:Please just don't just be SJW propoganda on 'Star Trek: Discovery' Premieres Tonight (ew.com) · · Score: 1

    Ferengi are old news.

    They should bring some Daleks to the Starfleet. Then, in one swift stroke they will fight for two social issues at once: diversity and oppressive copyright law.

  18. Re: Nope on 'Star Trek: Discovery' Premieres Tonight (ew.com) · · Score: 1

    Well it wasn't until Rodenberrry started backing away from the show that black dudes got promoted into positions of power (Michael Dorn to Chief of Security, Levar Burton to Chief of Engineering). Before that, they were just help. And I'm not sure if Rodenberry was even alive, when first black capitan or female admiral was shown.

    But he was all about kissing black eye candies, I give you that!

  19. Re:One reason for Microsoft enthusiasm of WSL ??? on Richard Stallman vs. Canonical's CEO: 'Will Microsoft Love Linux to Death?' (techrepublic.com) · · Score: 1

    I don't remember Win98 spying on me. Well, everyone who could plant a trojan there did, but not the OS itself.

  20. Re:MS is probably trying to do as Stallman says on Richard Stallman vs. Canonical's CEO: 'Will Microsoft Love Linux to Death?' (techrepublic.com) · · Score: 1

    I'd say Ron Jeremy would be more likely role model for M$.

  21. What puzzles me is that you are right, even tough it makes no sense. My company has been recently taken over by a bigger competitor in attempt to create near monopoly, and many of our customers have immediately turned to the remaining (tiny) competition, in order to bring balance back to the market.

    And yes, they chose to pay more for inferior product, because they had enough foresight not to let a single company take over the whole market. They knew that they would be screwed badly in just a couple of years, so they poured some money into competition's pockets, and what do you know, no monopoly for us. Bad for my company, good for general public.

    And yet those same people keep buying into M$ marketing bullmanure as if there was no tomorrow. It is sad and it is strange.

  22. The most important skill on A New Zealand Company Built An AI Baby That Plays the Piano (bloomberg.com) · · Score: 2

    Ok, fine, piano, books, whatever. But is this AI potty trained?

  23. And what was wrong with the Wonderwoman movie?

    Lucy Lawless was too old to play Wonder Woman. There is nothing wrong with Gal Gadot, it's just Lawless was born for this role and after Xena she was ready. Now it will never happen and it's sad.

  24. Re:GPS can only send location (and time) informati on Dealership Remotely Disables A Car Over A $200 Fee (www.cbc.ca) · · Score: 1

    Freedom is expensive. People used to kill and die to gain or preserve it. Accepting small inconveniences is difficult, annoying and nobody likes or wants it, but ultimately it could have been much worse.