I believe "expectation of privacy" is a legal term. You have an expectation of privacy in the washroom, although someone may install a camera there. -------- "I already have all the latest software."
These MS-signed crypto modules run as the super-user (as every MS component does). These modules could contain any code at all.
I could write a module that, when fncDo_crypt function is called, spawns a (hidden) remote-access server that allows me to control the computer, access files, etc. If MS (or the NSA) signs it, I have access to everyone's computers (and I can flag the most sensitive data - the stuff that was supposed to get encrypted).
Don't trust MS crypto, nor even PGP (it's proprietary, though I guess it's better than MS-CruftAPI), but only OSI-Certified OSS alternatives, such as GnuPG.
'Nuff Said. -------- "I already have all the latest software."
You need a backup (and I believe that the NSA requires it by law) so that if the first key ("key #1") needs to be revoked, you use the backup key to verify the new "key #1" that you receive.
I can see why Microsoft would want to do this, so they don't have to spend millions on a worldwide upgrade of all windows systems (like the Pentium bug), but why would this be required by law? There is no element of "national security" of any interest to the NSA in this, unless there's something Microsoft is not telling us.
We probably found something, but it isn't what we think it is, so Microsoft is trying to create a diversion so put us off track by pretending the key is only used for CryptAPI, when really it is being used for other things as well. Someone should really see what else this key can be used for. -------- "I already have all the latest software."
It would really help if RedHat make images like Debian does. Would save a lot of hassle making sure I symlinked everything properly. (This wasn't actually a problem this time around (RH6.0), but I had some trouble with RH5.2) -------- "I already have all the latest software."
I think most people did nothing about this because the idea was so stupid that nobody actually thought it would happen. This really scares me, as now I'm thinking that "digital-recording media tax" here in Canada might actually happen.
Also, so what if I'm running NetNanny? NetNanny allows me to remove all the blocks, essentially making it a transparent proxy. Annoying, though. -------- "I already have all the latest software."
His job is IT and he does not know how to make a shortcut on his little windows desktop.
Hmmm... I haven't used that archaic application (OS? Come on, how much do you expect me to believe? Everyone knows it runs under DOS.) for so long that I seem to have forgotten too. -------- "I already have all the latest software."
What happens to the guy who's wife emails him about the great time she is going to give him tonight and it ends up in some manager's (who happens to be very christian) email box? How will you feel when that manager takes it upon himself to cause as much trouble for the "Godless heathen" as possible?
Then you're an idiot to expect anyemail to be private. You wouldn't send credit card information over email, so why would you send anything else that is private? (If you knew how they worked, you would also not say private things on a cellular phone).
Also, although I've seen this a lot on Slashdot, it is my belief that you should not eliminate something good, just because it could evolve into something bad. Think about banning debuggers just because they could be used to crack some copy protection scheme, or (ala UCITA) allow you to reverse-engineer software.
I have an expectation of privacy when I encrypt something, or when I use a land phone line. I do not have an expectation of privacy when I send something in cleartext over the internet, or when I say something over a cellular phone.
It's quite simple. -------- "I already have all the latest software."
You can tell by reading the logs whether or not someone accidentally got in. (following 5 links deep is a sure giveaway, not to mention having 20 porn hits in 2 weeks) -------- "I already have all the latest software."
Why is there always someone who will bring this up?
I personally refuse to write "him/her" ever. Why? Because it restricts language. Assume that 1000 years from now, we encounter an alien life form, having 12 sexes. Are we going to list them all any time we want to refer to any of them? (him/her/it/bhir/jior/shior/ghet/etc...)
No, we won't, we'll just use "him". -------- "I already have all the latest software."
What do you think about the fact that there are gazillions of 'Alan Cox'es out there? It does get confusing at times. -------- "I already have all the latest software."
Okay, some of these moderators should RTFMG (RTF Moderator Guidelines). The above post was _NOT_ "Offtopic". -------- "I already have all the latest software."
Looks like the Linux versions have the debug symbols still in place. I wonder if the other platforms still have them. -------- "I already have all the latest software."
I heard about this some time ago, and was quite angered by the concept. (I use many CDRs to archive downloads, and Free Software, and I don't have a single copied music CD.) I think that now that the media show has whined down, our wonderful record companies are trying to get this tax passed before the public catches on.
I alse believe the best way to combat this is to encourage that ALL digital media be taxed (at $.75/MB ala MP3). The public would them go crazy when they find out that it costs $8,000.00 to buy a 10GB hard drive. The government then would repeal the tax, and taxing media would be such a sensitive issue that no government in its right mind would ever try something that stupid again.
My $0.02. -------- "I already have all the latest software."
I agree. I can buy a movie, which cost the company 100 million USD to make, for $20, yet record companies charge $20, and software companies charge tens, hundreds, even thousands of dollars ($2000 for 3D Studio Max R2!) -------- "I already have all the latest software."
Well, since IPv6 is finally out, we can refer to that as the "New Internet", which makes the previous "New Internet" the "Old Internet", and the "Old Internet" still the "Old Internet", thus squishing the notion of the "Old New Internet".
Huff, Huff! -------- "I already have all the latest software."
It's good that WinCE will have some competition... but wait, it does: Linux.
--------
"I already have all the latest software."
I believe "expectation of privacy" is a legal term. You have an expectation of privacy in the washroom, although someone may install a camera there.
--------
"I already have all the latest software."
pronounced "GRA-mer"
--------
"I already have all the latest software."
These MS-signed crypto modules run as the super-user (as every MS component does). These modules could contain any code at all.
I could write a module that, when fncDo_crypt function is called, spawns a (hidden) remote-access server that allows me to control the computer, access files, etc. If MS (or the NSA) signs it, I have access to everyone's computers (and I can flag the most sensitive data - the stuff that was supposed to get encrypted).
Don't trust MS crypto, nor even PGP (it's proprietary, though I guess it's better than MS-CruftAPI), but only OSI-Certified OSS alternatives, such as GnuPG.
'Nuff Said.
--------
"I already have all the latest software."
You need a backup (and I believe that the NSA requires it by law) so that if the first key ("key #1") needs to be revoked, you use the backup key to verify the new "key #1" that you receive.
I can see why Microsoft would want to do this, so they don't have to spend millions on a worldwide upgrade of all windows systems (like the Pentium bug), but why would this be required by law? There is no element of "national security" of any interest to the NSA in this, unless there's something Microsoft is not telling us.
We probably found something, but it isn't what we think it is, so Microsoft is trying to create a diversion so put us off track by pretending the key is only used for CryptAPI, when really it is being used for other things as well. Someone should really see what else this key can be used for.
--------
"I already have all the latest software."
Old news on Slashdot, yet again.
--------
"I already have all the latest software."
It would really help if RedHat make images like Debian does. Would save a lot of hassle making sure I symlinked everything properly. (This wasn't actually a problem this time around (RH6.0), but I had some trouble with RH5.2)
--------
"I already have all the latest software."
I think most people did nothing about this because the idea was so stupid that nobody actually thought it would happen. This really scares me, as now I'm thinking that "digital-recording media tax" here in Canada might actually happen.
Also, so what if I'm running NetNanny? NetNanny allows me to remove all the blocks, essentially making it a transparent proxy. Annoying, though.
--------
"I already have all the latest software."
By the way, I wonder how much space it takes on Slashdot's server to store a 3 word comment saying:
"Yes, I agree."
--------
"I already have all the latest software."
His job is IT and he does not know how to make a shortcut on his little windows desktop.
Hmmm... I haven't used that archaic application (OS? Come on, how much do you expect me to believe? Everyone knows it runs under DOS.) for so long that I seem to have forgotten too.
--------
"I already have all the latest software."
You'll slip up somehow, and get caught. Then what?
--------
"I already have all the latest software."
You noticed too?
--------
"I already have all the latest software."
How do you say "him" using the term "one"?
--------
"I already have all the latest software."
What happens to the guy who's wife emails him about the great time she is going to give him tonight and it ends up in some manager's (who happens to be very christian) email box? How will you feel when that manager takes it upon himself to cause as much trouble for the "Godless heathen" as possible?
Then you're an idiot to expect anyemail to be private. You wouldn't send credit card information over email, so why would you send anything else that is private? (If you knew how they worked, you would also not say private things on a cellular phone).
Also, although I've seen this a lot on Slashdot, it is my belief that you should not eliminate something good, just because it could evolve into something bad. Think about banning debuggers just because they could be used to crack some copy protection scheme, or (ala UCITA) allow you to reverse-engineer software.
I have an expectation of privacy when I encrypt something, or when I use a land phone line. I do not have an expectation of privacy when I send something in cleartext over the internet, or when I say something over a cellular phone.
It's quite simple.
--------
"I already have all the latest software."
You can tell by reading the logs whether or not someone accidentally got in. (following 5 links deep is a sure giveaway, not to mention having 20 porn hits in 2 weeks)
--------
"I already have all the latest software."
Why is there always someone who will bring this up?
I personally refuse to write "him/her" ever. Why? Because it restricts language. Assume that 1000 years from now, we encounter an alien life form, having 12 sexes. Are we going to list them all any time we want to refer to any of them? (him/her/it/bhir/jior/shior/ghet/etc...)
No, we won't, we'll just use "him".
--------
"I already have all the latest software."
What do you think about the fact that there are gazillions of 'Alan Cox'es out there? It does get confusing at times.
--------
"I already have all the latest software."
Okay, some of these moderators should RTFMG (RTF Moderator Guidelines). The above post was _NOT_ "Offtopic".
--------
"I already have all the latest software."
You're not the only one
--------
"I already have all the latest software."
Looks like the Linux versions have the debug symbols still in place. I wonder if the other platforms still have them.
--------
"I already have all the latest software."
I heard about this some time ago, and was quite angered by the concept. (I use many CDRs to archive downloads, and Free Software, and I don't have a single copied music CD.) I think that now that the media show has whined down, our wonderful record companies are trying to get this tax passed before the public catches on.
I alse believe the best way to combat this is to encourage that ALL digital media be taxed (at $.75/MB ala MP3). The public would them go crazy when they find out that it costs $8,000.00 to buy a 10GB hard drive. The government then would repeal the tax, and taxing media would be such a sensitive issue that no government in its right mind would ever try something that stupid again.
My $0.02.
--------
"I already have all the latest software."
I agree. I can buy a movie, which cost the company 100 million USD to make, for $20, yet record companies charge $20, and software companies charge tens, hundreds, even thousands of dollars ($2000 for 3D Studio Max R2!)
--------
"I already have all the latest software."
Well, since IPv6 is finally out, we can refer to that as the "New Internet", which makes the previous "New Internet" the "Old Internet", and the "Old Internet" still the "Old Internet", thus squishing the notion of the "Old New Internet".
Huff, Huff!
--------
"I already have all the latest software."
One question: How is the above post "Flamebait"?
--------
"I already have all the latest software."
I guess I should clarify: $150 CANADIAN FUNDS
--------
"I already have all the latest software."