The CPU generates a session key, encrypts it using the video site's public key (which comes from a certificate signed by Intel which is verified by the CPU) and sends this encrypted session key to the video site.
The video site then decrypts the encrypted session key using their private key, and then uses the session key to encrypt the video stream.
The CPU then takes the encrypted video stream, decrypts it with the session key, then produces an HDCP stream[1] which is sent out over the video ports.
All you need for this is instructions for: - init_session(certificate_signed_by_intel) -> (context, session_key_encrypted_by_cert_public_key) - convert_stream_block_to_hdcp(context, encrypted_stream_block) -> hdcp_stream_block
and since the session key never leaves the CPU unencrypted, and the stream is never emitted unencrypted there's nothing to tap.
[1]: yes HDCP is broken, but Intel barely admits that.
For the NTP pool you send and recieve time data; funnily enough the time is public information.
Switching your DNS servers to OpenDNS means you end up sending them every domain you visit, and apparently every Google search too. Most people would probably want their search terms and domains they visit to stay private, so your analogy between the NTP pool and commercial DNS providers breaks down here.
(note: I'm not implying sending your DNS data to OpenDNS means it's made public!)
and on Windows I backup and restore my profile in the Documents and Setttings folder, which includes my registry, my desktop, my documents, everything, and it works still perfectly afterwards.
How does it run as part of the kernel?
The rendering engine is just a COM object inside a DLL that runs as the user that opened the browser.
The integration with the OS is just integration with the shell (explorer.exe, which is the shell, desktop, start menu, file browser, etc), not integration with the kernel.
Winamp 3/5 have a media library with all the features you said, you type your artist/song name into the search box and as you're typing it finds the matching songs, or use the lists with the artist names in, it also indexes your files in the background and updates its database every so often in the background.
You can also configure whether you want it to use ID3 tags or parse the filename.
A virus that spreads like like msblaster did is very easily possible, if someone discovered a flaw in a piece of popular software that runs on most linux machines, such as OpenSSH (please don't reply with stuff about openssh running as a user with no access to anywhere on some distros, it can somewhere, or home distros not having openssh, it's an example). You don't need root to connect to an IRC server, and listen for commands to fire packets at people.
Also you mention email worms/trojans, why do you need to be root to start a program that emails everyone in your evolution/kmail/syphleed address books? All it needs is the ability to connect outwards on port 25 and read your address book, like your email client running as your user does. It could even drop a DDOS zombie into your home directory that attacks people with your ping binary (forked off multiple times). Additionally it it could add itself into your bash_profile/x startup file so it starts when you logon.
Yes, it couldn't affect other users on the local machine, but it would still spread and affect the user that opened it, just like running an email virus on Windows as a restricted user would.
This been around for about 7 years. It is called Microsoft Authenticode, you right click on the file, goto properties, if its been signed there is a tab labeled 'Digital Signatures', click on the tab and you see the signature and certificate chain.
The file has a genuine Microsoft digital signature that you can verify by right clicking and going to properties, it'll show you the signature details and the cert chain.
Yeah it wouldn't have anything at all to do with our leadership and skill on the battlefield.
Sarcasm is a poor substitute for knowledge.
The French leadership and skill caused the most problems for the British if I remember correctly (such as the Battle of the Chesapeake and Battle of Yorktown, both led by the French).
That must explain why every other part of the British empire collapsed shortly after our War of Independence -- the Brits couldn't hold onto their empire because they didn't have Jets.... err wait no that's not right the empire actually lasted until the 20th century and the United States was one of the few nations that ever defeated the Brits during their hay day.
World Wars I and II caused the collapse of our empire.
Nice cheap shot to belittle the accomplishments of America though. Did it take you all week to think that one up?
Sigh.
We do have a constitution, it is just an unwritten one.
It's not one document, but several written at different times, such as the Magna Carta, as well as case law and other things. More information.
It wasn't illegal, the project was a game that played like Warcraft 2, but was rewritten 100% from scratch, with new graphics (you could load the WC2 graphics from your WC2 CD if you bought it). There was no infringment then and there is not now (the C&D letter was about the name?!)
Slashdot Mirror
Here's my theory as to how it works:
The CPU generates a session key, encrypts it using the video site's public key (which comes from a certificate signed by Intel which is verified by the CPU) and sends this encrypted session key to the video site.
The video site then decrypts the encrypted session key using their private key, and then uses the session key to encrypt the video stream.
The CPU then takes the encrypted video stream, decrypts it with the session key, then produces an HDCP stream[1] which is sent out over the video ports.
All you need for this is instructions for:
- init_session(certificate_signed_by_intel) -> (context, session_key_encrypted_by_cert_public_key)
- convert_stream_block_to_hdcp(context, encrypted_stream_block) -> hdcp_stream_block
and since the session key never leaves the CPU unencrypted, and the stream is never emitted unencrypted there's nothing to tap.
[1]: yes HDCP is broken, but Intel barely admits that.
will alert 2.
Not really, no.
For the NTP pool you send and recieve time data; funnily enough the time is public information.
Switching your DNS servers to OpenDNS means you end up sending them every domain you visit, and apparently every Google search too.
Most people would probably want their search terms and domains they visit to stay private, so your analogy between the NTP pool and commercial DNS providers breaks down here.
(note: I'm not implying sending your DNS data to OpenDNS means it's made public!)
4th paragraph:
"However, the police subsequently descended on the man's home, seizing his computer and camera equipment."
Incorrect, the URL of the sign in box is: https://www.google.com/accounts/ServiceLoginBox?se rvice=analytics&nui= ...
A prime number is a natural number that has exactly two factors, 1 has only one, therefore it is not a prime number.
strcmp returns 0 if the strings are equal.
and on Windows I backup and restore my profile in the Documents and Setttings folder, which includes my registry, my desktop, my documents, everything, and it works still perfectly afterwards.
Except you generate the certificate yourself, they just sign the public bit.
How does it run as part of the kernel?
The rendering engine is just a COM object inside a DLL that runs as the user that opened the browser.
The integration with the OS is just integration with the shell (explorer.exe, which is the shell, desktop, start menu, file browser, etc), not integration with the kernel.
Winamp 3/5 have a media library with all the features you said, you type your artist/song name into the search box and as you're typing it finds the matching songs, or use the lists with the artist names in, it also indexes your files in the background and updates its database every so often in the background.
You can also configure whether you want it to use ID3 tags or parse the filename.
WoW, WC3, Starcraft and Diablo 2 all use DirectX.
Also you mention email worms/trojans, why do you need to be root to start a program that emails everyone in your evolution/kmail/syphleed address books?
All it needs is the ability to connect outwards on port 25 and read your address book, like your email client running as your user does.
It could even drop a DDOS zombie into your home directory that attacks people with your ping binary (forked off multiple times).
Additionally it it could add itself into your bash_profile/x startup file so it starts when you logon.
Yes, it couldn't affect other users on the local machine, but it would still spread and affect the user that opened it, just like running an email virus on Windows as a restricted user would.
This been around for about 7 years. It is called Microsoft Authenticode, you right click on the file, goto properties, if its been signed there is a tab labeled 'Digital Signatures', click on the tab and you see the signature and certificate chain.
The file has a genuine Microsoft digital signature that you can verify by right clicking and going to properties, it'll show you the signature details and the cert chain.
Parent post stolen from here.
Yeah it wouldn't have anything at all to do with our leadership and skill on the battlefield.
Sarcasm is a poor substitute for knowledge.
The French leadership and skill caused the most problems for the British if I remember correctly (such as the Battle of the Chesapeake and Battle of Yorktown, both led by the French).
That must explain why every other part of the British empire collapsed shortly after our War of Independence -- the Brits couldn't hold onto their empire because they didn't have Jets.... err wait no that's not right the empire actually lasted until the 20th century and the United States was one of the few nations that ever defeated the Brits during their hay day.
World Wars I and II caused the collapse of our empire.
Nice cheap shot to belittle the accomplishments of America though. Did it take you all week to think that one up?
Sigh.
For reference (after reading the first entry in your journal), posts like these bring out the worst of anti-Americanism in most people.
The fact you were ~3000 miles away in an age before the jet engine helped quite a bit...
We do have a constitution, it is just an unwritten one.
It's not one document, but several written at different times, such as the Magna Carta, as well as case law and other things.
More information.
Yeah, they got rid of the colour replacer and added JPEG support (along with a few other formats).
3D File System Navigator for IRIX 4.0.1+
Pounds are the strangest imperial unit, you insensitive clod.
It wasn't illegal, the project was a game that played like Warcraft 2, but was rewritten 100% from scratch, with new graphics (you could load the WC2 graphics from your WC2 CD if you bought it). There was no infringment then and there is not now (the C&D letter was about the name?!)
Since when is OpenBSD FreeBSD?
Correct link: Netcraft (but it says they use Solaris on their site?)