Slashdot Mirror


User: JesseMcDonald

JesseMcDonald's activity in the archive.

Stories
0
Comments
3,955
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 3,955

  1. Re:Why Slashdot doesn't do Unicode (5:erocS) on Google: Chrome 53 Will 'De-Emphasize Flash In Favor of HTML5' Next Month (venturebeat.com) · · Score: 1

    It really shouldn't be this hard to do Unicode comments safely. First, all text should be in UTF-8, with no conversions anywhere. It's crazy that code points not on the whitelist show up as scrambled text; they should at least be replaced with a standard placeholder code point using a competent UTF-8-capable regex library while rendering the page. Second, put together a trivial script to collect all the non-blacklisted code points which have been filtered out and present them for review. After review each code point should be added to either a whitelist or a blacklist. After a short time of running this script regularly the operators will have classified all the common code points and we can start using Unicode as it was originally intended. Comments should be stored in their original form so that they can be displayed properly once the new code points are added to the whitelist.

  2. Re:Not going to work... on EFF Asks FTC To Demand 'Truth In Labeling' For DRM (techdirt.com) · · Score: 1

    So the only legal way for you to acquire that 20 year old game is to wait another 70 years or more

    No - resale is perfectly legal.

    That would imply that someone else has to give up their own copy so that you can have the ability to play it. That is an unreasonable restriction when digital copies are trivial to make and no one could possibly claim to be harmed by the existence of additional copies of an out-of-print game.

  3. Re:Privacy? Fuck you. on BBC To Deploy Detection Vans To Snoop On Internet Users (telegraph.co.uk) · · Score: 1

    Not all taxes are pooled. For example, the TV license tax is earmarked for the BBC. It is not at all uncommon for taxes to be levied for a specific purpose (like funding the BBC) and on specific activities or circumstances (such as accessing iPlayer, or possessing TV receiving equipment).

  4. Re:Privacy? Fuck you. on BBC To Deploy Detection Vans To Snoop On Internet Users (telegraph.co.uk) · · Score: 1

    That's a bit like saying that schools aren't funded with public money because they're payed for with property taxes rather than income taxes. The TV license is a tax on anyone with the ability to receive BBC broadcasts, whether or not they actually watch the BBC (much less have entered into a true contract where they voluntarily agreed to pay for a license) and thus constitutes a form of public money.

  5. Re:Please stop attention whoring on New Attack Steals SSNs, E-mail Addresses, and More From HTTPS Pages (arstechnica.com) · · Score: 1

    People have for example demonstrated recovery of useful information from encrypted voice communications simply by use of complex codecs without having to compromise encryption or wield any influence on in-band messages.

    That I can believe, but it seems to be more a matter of analyzing the real-time bandwidth (many samples of compressability over time) rather than the overall compressed length. If all you had was a recording of the complete conversation, compressed and then encrypted, I doubt much could be inferred from the length of the ciphertext. There wouldn't be enough entropy in the length to represent more than a few words even if the compression algorithm were specifically designed to encode the content into the length with maximum efficiency. Also, voice communications is massively redundant when you consider the amount of data required to recognizably represent someone's voice compared to the plain information content of the conversation, so an attacker doesn't need to extract much of the original information at all to infer which words were spoken. This analysis probably wouldn't work nearly as well when applied to content other than audio and video streams.

    The key point is that the length of the ciphertext only reveals a few bits of information in the worst case. If you give an attacker lots of samples to work with, either of the same message compressed many different ways, as in this SSL attack, or of distinct parts of the same message (e.g. many fixed-duration blocks of audio), it risks giving away enough of the message to be a significant risk. If the data is compressed as a whole in exactly one way, without any input from an attacker, then the most the attacker might be able to get from the change in length due to compression would be log2(uncompressed_length) bits. That isn't a significant risk provided the message has considerably more entropy than the number of bits in the length, which is true for most messages.

    Not using compression or using secure compression algorithms designed to not leak information would be a far safer option...

    No argument there; of course, a computer which is switched off, unplugged, and buried under six feet of concrete is far more secure than one you can actually use. There are security/usability trade-offs to be considered. Compression saves bandwidth, and thus cost, which makes some uses practical which wouldn't be otherwise. Usability aside, eliminating redundancy in the plaintext before encryption also carries some benefit when it comes to thwarting cryptoanalysis.

  6. Re:Please stop attention whoring on New Attack Steals SSNs, E-mail Addresses, and More From HTTPS Pages (arstechnica.com) · · Score: 1

    The takeaway we all learned many many years ago compression can be used as a side channel attack and therefore should probably never be used in conjunction with any stream containing sensitive data.

    AFAICT, the vulnerability isn't compression in general, but compressing sensitive data along with data controlled by an attacker. Just compressing the sensitive data by itself won't leak much; it gives away how compressible the data is, of course, but that isn't very much to go on by itself, and the same data would always compress to the same size.

    What we need is a structured format where data from different sources can be compressed separately. Classic MVC design, in other words; the sensitive data (the model) should be delivered independent of the view (the presentation of the data, including things like ads). The view should ideally be a static, cacheable resource, and any ads should be as isolated from the rest of the page as if they had been opened in a separate browser instance.

  7. Re:And that's how you lose an election on Donald Trump Signs Pledge To Crack Down On Internet Porn (pcworld.com) · · Score: 1

    Wait, so you think "Pledges to crack down on Internet porn" is a fair reading of "Give serious consideration to appointing a Presidential Commission to examine the harmful public health impact of Internet pornography on youth, families and the American culture..?"

    I think that "cracking down on Internet porn" is exactly what the organization that wrote the pledge wants—it's obvious if you bother to glance at their website, as other commentators have already noted—and that this agenda can be inferred from the text of the pledge itself if you give it careful consideration. I also think that anyone who signs this pledge is putting their stamp of approval on the organization's broader anti-pornography agenda, even if the pledge itself is written to appear more limited. At the very least the pledge calls for more filtering of legal content at public Internet access points, such as libraries. That point alone demolishes the claim that this is just about preventing exploitation of minors, unless (like this organization) you view all pornography as potentially exploitative of and harmful to minors.

    No one would waste their time giving "serious consideration" to "appointing a Presidential Commission to examine the harmful public health impact of Internet pornography" if they didn't believe that there was some harmful impact, or (given that these are politicians we're talking about) at least wish to appear that they believed this.

    The phrasing is deliberately vague to allow candidates to avoid alienating people like you who don't see through the smokescreen.

  8. Re:Well - there goes the voting base . . . on Donald Trump Signs Pledge To Crack Down On Internet Porn (pcworld.com) · · Score: 1

    Congratulations, you fell for the camouflage. The real substance of the pledge is all in point 4:

    4) Give serious consideration to appointing a Presidential Commission to examine the harmful public health impact of Internet pornography on youth, families and the American culture....

    So clearly this pledge isn't just about protecting the kids; they also want to direct public money toward pushing their more general anti-adult-pornography agenda. It's also rather clear if you read the prelude that the organization behind this pledge considers (legal) Internet pornography to be "sexual exploitation of children" if there is any chance that it might be accessed by anyone under the age of majority. They're pushing for additional mandatory filtering (of legal content) in places like libraries that are used by both adults and children. If they could get away with banning pornography entirely without blatantly violating the First Amendment I'm sure they'd be proposing that instead.

  9. Re:And that's how you lose an election on Donald Trump Signs Pledge To Crack Down On Internet Porn (pcworld.com) · · Score: 1

    There's nothing in here that says Trump is going to "crack down on internet porn." The organization may be anti-porn beyond child porn, but the pledge is just about kids.

    Most of the pledge is just about protecting kids. This is purely a matter of base political calculation; it sets the stage such that anyone who refuses to sign can be made to seem a defender of child abuse. However, there is also this part:

    4) Give serious consideration to appointing a Presidential Commission to examine the harmful public health impact of Internet pornography on youth, families and the American culture...

    Given that paragraph, I don't think the headline is alarmist at all. The submitter grasped the real intent behind the pledge far better than any of those excusing it as nothing more than a commitment to enforce existing laws against the exploitation of minors. All of that is nothing more than camouflage. This is the only part that represents an actual change from the status quo.

  10. Re:So make it equally first amendment to block the on Judge Rules Political Robocalls Are Protected By First Amendment (onthewire.io) · · Score: 4, Informative

    The state law closed the loophole the politicians left in the federal do-not-call system. Yay for the state.

    The state could have accomplished the same end by banning all robocalls that the recipient didn't specifically sign up for. Since that wouldn't be based on the content of the calls it wouldn't be subject to this particular 1st Amendment challenge. By banning politicial robocalls in particular they guaranteed that the law would be found to violate the 1st Amendment.

  11. Re:Sad but unavoidable on Motorola Confirms That It Will Not Commit To Monthly Security Patches (arstechnica.com) · · Score: 1

    Do you think there's a difference between "can run" and "runs stable and performing"?

    Semantically, sure, but the AOSP builds for the Nexus phones are stable and performant. The differences between AOSP and the official Google firmware images are mainly skin-deep, in the form of UI themes and preinstalled apps. In other words, things which do not require a great deal of work to port to each new version of Android.

    Are you trying to tell me the Nexus system image is exactly the same as AOSP?

    Google has their own customizations and add-ons just like the other manufacturers. You can build and install fully functional AOSP images on Nexus devices, but they don't ship with stock AOSP. However, Google's changes are layered on top of the system using the AOSP mechanisms designed for that purpose, which reduces the porting effort considerably compared to other phones which need proprietary binary drivers (and thus specific kernel versions) and deep modifications to core AOSP components.

  12. Re:Sad but unavoidable on Motorola Confirms That It Will Not Commit To Monthly Security Patches (arstechnica.com) · · Score: 1

    Since you obviously know more about this and I, maybe you could let me know what big name smart phones or Android devices are built in this manner. Please make it one that has shipped 100k's of units.

    The Nexus line of smartphones has over 100k units sold (more like millions, actually) and can run AOSP out of the box with no patches.

  13. I suspect legally companies are free to tweet anything they want as long as they don't include terms specifically trademarked by the IOC, much as advertisers referred to the Superbowl as "the big game" instead of the trademarked "Superbowl" term.

    Even if they did use the trademarked terms, the use of trademarks for purely descriptive purposes is not trademark infringement, whether or not you have the trademark holder's permission. Trademarks only exist to prevent confusion, not to censor discussion.

    Calling your own event "the Superbowl"—trademark infringement.

    Accurately referring to the Superbowl as "the Superbowl"—not infringement.

  14. Re:Sad but unavoidable on Motorola Confirms That It Will Not Commit To Monthly Security Patches (arstechnica.com) · · Score: 1

    Every single change you made in the previous release needs to be ported to the new release and tested. And it's more likely than not that the files have changed and it's not simply applying a patch. If you are unlucky, the kernel changes and you need updated version of your drivers. Sometimes you don't even have the source for those so you need to go contract with chip maker or a 3rd party to rework the drivers.

    This is why you upstream everything and choose hardware with open-source drivers. If you have to apply proprietary in-house patches to get the latest AOSP running on your device, you're doing it wrong.

  15. Gold is rare. The argument is null.

    The situation described was that one was offered a handful of gold or a handful of seeds. Under those circumstances gold could not be considered rare. In any case its rarity is orthogonal to its utility as a raw material.

    You're only proving my point that gold only develops value in the context of a society/economy (i.e. your trade) that can provide the basics of survival and has the sophistication to turn the gold into a useful tool.

    The same could be said of the seeds—or did you think that the knowledge of how to grow, preserve, store, and prepare a proper harvest from a handful of seeds somehow comes by instinct? That, too, is a form of technology learned by society over a very long period of trial and error. Without that knowledge acquired from society you might manage a single meager meal, provided the seeds are of an edible variety.

    You need to define "easily." Because most people don't have spare metal extruders lying around or the parts and skill to assemble one.

    It doesn't take a great deal of capital equipment to draw wire, and gold has a relatively low melting point. A deserted island would most likely have everything you need provided it's survivable at all. Gold sheets are even simpler and can be hammered out with rocks if you're patient enough.

  16. Gold is not an appropriate material to make clothes or shelter.

    You could if it weren't so rare. Gold can easily be extruded into fine thread and woven into cloth, or hammered into thin sheets to make walls or shingles. It's a very versatile material. We don't use it this way because an all-gold suit would require at least a few million dollars' worth of gold, not because the material properties of gold make it unsuitable.

    Or another way to think of it... if you were stranded alone on an island with no hope of rescue and trying to survive, which would you prefer to have: a handful of gold or a handful of viable seeds for crops?

    If this is a one-time either/or proposition, obviously the seeds. Gold has no nutritional value and little else matters when faced with the prospect of starvation. Given a more flexible situation, however, I might be willing to trade some of those seeds for an equivalent volume of gold for the sake of making tools. As a raw material it's highly ductile, malleable, conductive, and corrosion-resistant; I'm sure I could find some practical use for it even without any prospect of trade.

  17. Re:TFA is not terribly clear... on Suspect Required To Unlock iPhone Using Touch ID in Second Federal Case (9to5mac.com) · · Score: 3, Informative

    Why is my phone not protected because I used a fingerprint while your phone is because you used a passcode?

    The phone is not legally protected in either case. If they can find a way in, they can use the data. What is protected in the latter case is the fact that you know the passcode. If there is anything incriminating on the device then knowing the passcode which unlocks it would be tantamount to an admission of guilt. (Note that the passcode is generally not protected if they can separately prove that you have the ability to unlock the device, since at that point you would not be revealing anything incriminating.)

    The principle behind the prohibition on self-incrimination is that no one who has not already proven guilty should be placed in a catch-22 where their only options are to confess their guilt or be punished for failing to do so. Allowing records to be taken of your physical characteristics does not even amount to providing testimony, much less testifying against yourself.

  18. Re: TFA is not terribly clear... on Suspect Required To Unlock iPhone Using Touch ID in Second Federal Case (9to5mac.com) · · Score: 1

    And if they compel me to provide fingerprints ... it should be up to them to convert my fingerprint into a useful tool to actually unlock the phone.

    Sorry, but that's simply not a reasonable restriction. If they can compel you to provide fingerprints, they can compel you to provide them by placing your finger(s) on the scanner of the iPhone they already seized as evidence. There is no rational cause to limit fingerprint collection to ink transfers on paper, or their own imaging equipment.

    At most you could argue that the fingerprint scanner in the iPhone cannot be trusted to uniquely identify its user. That would be a difficult argument to win at the best of times, however, and they may just want access to the data—either because they already know that it's your device or because they expect to be able to prove as much from the contents once it's unlocked.

    A reasonable case could be made for limiting the number of times one can be required to provide one's fingerprints. Two or three times per finger would probably be sufficient; much more than that would be unduly burdensome. If they want to brute-force a system requiring both a password or PIN and a fingerprint simultaneously they'll need to come up with something more imaginative than making the suspect put their finger on the scanner repeatedly for the hours/years/centuries/eons it would take to stumble onto the right code.

  19. EVERY device sold is carrier locked

    That shouldn't be a problem so long as the SIM cards are from the same carrier. Moreover, I know that statement isn't true universally because I bought my own phone with no carrier lock (a Nexus 5 purchased directly from Google). There may be markets where it's impossible to buy unlocked phones, in which case your only realistic option is to move somewhere less oppressive.

    Especially if you want to be able to use a phone number as well which doesn't change with each SIM swap.

    That is a bigger problem. I'm not sure whether the dual-SIM phones are capable of using both SIM cards at once, one for voice and one for data. If not, the only option would be to get some mobile WiFi hotspots and use those instead of mobile data. While not exactly cheap, they would more than pay for themselves in avoided overage charges within the first month.

  20. Where I live the absolute largest data plan you can even buy is 40GB and that costs $150/mo.

    Can you switch SIM cards easily? If so, just buy the 40GB plan for three different SIMs and switch cards when you get close to the limit. That would give you 120GB for $450/mo.

    For that matter, even using three separate devices would be cheaper than paying those overage fees. You could make two of them dedicated WiFi hotspots to avoid paying for extra voice packages.

  21. Re:There's an excellent reason for that. on EFF Is Suing the US Government To Invalidate the DMCA's DRM Provisions (boingboing.net) · · Score: 1

    We all agreed to the law

    We certainly did not all agree to the law. I'm one of those who never agreed to it; I'm certain there are plenty more.

    or at least, in theory a majority of us enacted this law

    Closer, but still not accurate. There was no popular vote on this specific issue, and no expression of active support by a majority of the population.

    Now, we have the DMCA - a law we must collectively have agreed to, as it is no long merely a bill but a law.

    Only if by "must collectively have agreed to" you actually mean "supported by a majority of voting representatives, selected in many cases by a plurality (not majority) of voters in their districts on the basis of a variety of issues having nothing to do with the DMCA".

    The public never agreed to this law. The public was never consulted. Our role in the process was merely a lack of active resistence to a law introduced by and supported by a vocal minority of copyright maximalists, back at a time when this seemed like a niche issue of little concern to the average person—before computers (and DRM) had invaded every aspect of everyday life.

    If you put copyright—the whole system—up to a straightforward single-issue popular referendum right now, there is a decent chance that it would be repealed, or at least severely curtailed. For the DMCA in particular that probability goes from "likely" to "almost certainly". A significant portion of many politician's jobs (from their employers in the pro-copyright lobby, not their nominal constituents) comes down to making sure the issue is never put before the public in such simple terms.

  22. Re:Amazon is awesome for knockoffs! on Amazon Loses Huge Footwear Company Because Of Fake Products, a Problem It Denies Is Happening (cnbc.com) · · Score: 1

    Sure - if Greece had actually collected the taxes due, rather than just saying "meh" and relying on debt, they'd be in a better situation than they are now.

    You could say the same for reducing spending, rather than collecting more taxes. The problem was going into debt.

    If they had raised the taxes it would have required a corresponding reduction in private spending. There is little evidence for (and plenty of economics against) the idea that it would have been better to spend this money on the public programs selected by the government rather than what the citizens chose to spend their money on voluntarily, or would have chosen to spend it on had those programs not existed.

  23. Re:Amazon is awesome for knockoffs! on Amazon Loses Huge Footwear Company Because Of Fake Products, a Problem It Denies Is Happening (cnbc.com) · · Score: 3, Insightful

    The problem is that we have accepted, in a large number of cases, ignoring laws we don't like, and people think that is how it is supposed to work for all laws. You cannot say we are going to ignore laws we don't like, and at the same time want people to uphold / follow laws we like, but they don't.

    No, the real problem is that there are far too many laws. The law is supposed to be something that nearly everyone actively agrees with, in its entirety. It also needs to prescribe responses which are proportional to the offense; that's where its legitimacy comes from. Things like "if you commit murder you can be locked up (and maybe killed)", "if you steal then the property can be taken back and you can be fined"... these are accepted by almost everyone, being impossible to dispute coherently. Turn about is fair play; the murderer or thief can hardly object to being subjected to the same treatment they practiced against others.

    What we have, however, is a vast array of laws too large for any one person to comprehend, most of which carry disproportionate punishments. Most of which, in fact, have no proportional punishment, because there is no victim whose rights were violated, and thus nothing to be proportional to. Such laws have no legitimacy.

    This isn't a matter of laws we like or don't like. Treating the law as if it were determined by some sort of popularity contest is actually part of the problem. The distinction is between laws which have a sound moral and ethical basis, vs. ones that have merely been made up by legislators for reasons of social engineering, demogogy, and/or personal profit.

  24. Please explain what makes some land your property? Because you say so?

    Because he put it to productive use at a time when no one else had any prior claim to it, or someone else did so and then voluntarily transferred their rights to him. (The process is called "homesteading"; look it up. It's the basis for any legitimate claim to ownership of private property.)

    The idea of property pre-dates government; they didn't invent the concept, and are not necessary for its implementation.

    Why should anyone else care about that? Because you'll kill them if they don't?

    Mostly because if you choose to ignore others' property claims, they'll be free to ignore yours. It's extremely difficult to argue that someone else is wrong to do to you what you did to them first. Of course if you want to engage in war then that's your decision, but don't expect to receive a lot of help. Alliances among aggressors tend to be fleeting at best. The majority who prefer a more stable and civilized environment will band together to fight you, and you'll probably lose. In the end you'll most likely find that it would have been easier and more productive to simply earn what you wanted instead of trying to take it by force.

    Because, in the absence of a government, what's stopping them?

    Natural law. Going to war is expensive, and ultimately self-defeating. Even the more successful empires founded on conquest tend to self-destruct when they inevitably run out of "barbarians" to pillage. Civilizations based on voluntary coexistence are more stable and sustainable, and thus tend to dominate over the long term.

  25. Re:Companies are not people on New Study Shows Why Big Pharma Hates Medical Marijuana (washingtonpost.com) · · Score: 1

    But whether you should be allowed to use the machinery of a limited liability company to spread those views ..., that's a different ball of wax altogether.

    What difference does it makes that the company is limited liability? No one is likely to experience any liability for their political speech. This is just a group of people using their commonly-owned property and connections to spread their views. Whether the corporation is limited liability is irrelevant.

    Just because you're allowed to publicly state your opinion doesn't mean you're allowed to use a megaphone to do it at all hours of the night.

    The use of a megaphone "at all hours of the night" is (sometimes) prohibited on the basis of the noise level, regardless of the content of the speech. The same rules would prohibit reciting your grocery list or playing loud music at a late-night party. The fact that it applies to all speech (all noise) equally is what prevents this from being a First Amendment violation. In contrast, corporations are allowed to run commercial advertisement, or pretty much any other form of speech they care to engage in short of outright fraud. Even in the case of fraud it's not the false speech which is prohibited so much as taking commercial advantage of the deception; or in a word, theft. The fact that political speech alone is prohibited is absolutely a First Amendment issue, because it is a prohibition on speech with certain content.