Slashdot Mirror


User: ironicsky

ironicsky's activity in the archive.

Stories
0
Comments
232
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 232

  1. Apple != Innovation anymore on iOS 13 To Feature Dark Mode and Interface Updates, Report Says (9to5mac.com) · · Score: 3

    I miss the days when Apple was an innovator.

    First widely successful music player? Apple
    First widely successful smart phone? Apple
    First small footprint TV streaming device for laptops and smart phones? Apple

    Hell, go back to the 80's, first widely successful computer platform? Apple.

    Without Steve Jobs, apple lost its innovation. Even near the end for Steve, his focus obviously shifted and his level of Innovation went down.

    Now, Apple is playing catch up to Android, their Macs aren't innovative, maybe except for the touch bar, and the laser mapping face unlock.

    My first two smart phones were iPhone 4 and 4s. My fiance has an iPhone X, and I see absolutely no reason to ever go back. The experience on my Pixel 3 is much, much better.

  2. Transport or Network layer Encryption on Gmail Becomes First Major Email Provider To Support MTA-STS and TLS Reporting (zdnet.com) · · Score: 1

    I keep thinking, we keep creating application and service level encryption to protect data transmission - but why not at the stack level, or one level deeper - the transport or network layer? Each physical network device should create a public/private key encrypted connection per remote host they are connecting to, and store that key in an on-chip storage that gets orphaned or erased when the connection closes.

    It seems to me that if we added a deeper level of strong encryption to the physical devices then application level encryption becomes a 2nd level of protection as redundancy. I'm sure people much smarter than me have thought of this, but why has it not become standard?

  3. Only two hops? on 'It's Time To End the NSA's Metadata Collection Program' (wired.com) · · Score: 1

    Wow! How generous.

    Let's assume for a minute that the target has 300 friends, family and acquaintances (based on average Facebook profile friend count). And each of those people have 300 people in their Network, and each of those the same.

    300x300x300 = 27,000,000.

    That's 27,000,000 people being tracked tied a single target. That's a lot of fucking people

  4. Re:Ughhh. Gifs on Is Adobe's Creative Cloud Too Powerful for Its Own Good? (vice.com) · · Score: 1

    You can do the same thing with CSS animation

    https://loading.io/css/

  5. Ughhh. Gifs on Is Adobe's Creative Cloud Too Powerful for Its Own Good? (vice.com) · · Score: 2

    I'm of the age when I remember GIF's from the 90's as a "cool" way to animate things, before Flash was a big deal. Flash has gone the way of the dodo, and so should gifs. I'm not sure what everyone's fascination with making animated gifs are when we have much MUCH better technology today with web-purposed video formats, like WEBM, instead of using clunky formats from the 80's.

  6. Device security on Android Is Helping Kill Passwords on a Billion Devices (wired.com) · · Score: 2

    If only they would apply 2FA policies to device authentication. Using their BLE token , you should not be able to unlock your device without your token and a finger print or password.

    As others have mentioned, finger prints can be faked, passwords can be guessed, but none of that matters when the phone is stolen if you are missing the token attached to someone's keychain.

    Google accounts online can be protected by 2FA, but your Google device is the weak link, because it has access to all your photos and drive documents without authentication once your device is unlocked.

  7. Re: Boo hoo on Former Edge Browser Intern Alleges Google Sabotaged Microsoft's Browser (ycombinator.com) · · Score: 5, Insightful

    I came here to say this.

    ActiveX
    Silverlight

    Incompatible CSS and IE specific JavaScript.

    Microsoft is one of the reasons the internet was a standards nightmare, while Mozilla, Google and Opera all played nice with standards, Microsoft didn't.

  8. EV SSL Security on Google Wants To Kill the URL (wired.com) · · Score: 1

    Their argument is user security. For the nominal cost and slight headache of setting up an EV certificate, businesses could just do that instead, and Google search, chrome and other browsers could highlight websites as ID Verified. Since EV certificates require a URL to be cross checked against a physical business with government registration, its less likely someone will register a website pretending to be "Facebook" or "Mastercard" if browsers enforced EV for high profile targets.

  9. Not likely on Homeland Security Claims DJI Drones Are Spying For China (engadget.com) · · Score: 0

    Unless DJI drones have a sim card in them, how the hell do they expect the drone to magically send the signal back to China? Typically drones are used in rural areas, since they are banned in most urban places, which means no WIFI either.

    If you hook up the drone to a computer to download the footage from the SD Card, it should be quite easy to determine if the drone is sending the footage home through your computer - just run netstat and look for weird connections, or a lot of data transfers through your router.

    This seems just as likely as Kaperskey spying for the Russians.

  10. Virtual Machines on Deloitte Hit By Cyber-attack Revealing Clients' Secret Emails (theguardian.com) · · Score: 1

    With all these types of attacks surfacing, I question why we let production machines access the internet at all. I'm talking no email client, no browsers, no FTP or SSH, nothing. All ports to the internet are closed for business.

    Instead, all users would have a Citrix or RDP app installed which provides the same apps, Outlook, Chrome, and other internet utilities. The virtual machine those apps are running on a different VLAN (or a physically separated connection), which only has access to the corporate network through ports that support the remote VM session, as well as a single DMZ'd file server.

    Any file downloaded through the remote session would be saved to the DMZ, which is processing all files automatically, scanning for malware, objectional content, executable code, steganographically hidden content, etc. Once the file is marked as safe a process running on the corporate network grabs the files and moves them into the corporate network for access.

    Likewise, a user who needs to send a file out would save the file to a "pick up" location on their corporate network, and the process would work in reverse. It would be scanned for objectional content, then pushed to the DMZ file pick-up location that the user could then send out by email or other processes.

  11. The problem with a mailbox for actual replies from email marketing emails is those damn out of office replies.

    Someone has to sift through hundreds, or thousands every send to find the actual messages.

    Yes, mail rules can be setup to filter OOO emails from outlook, because all emails have a predictable subject line. Gmail for Business, on the other hand does not and let's the user set their own out of office subject line.

  12. Data mining & law enforcement on Cloudflare is the One Tech Company Still Sticking By Neo-Nazi Websites (qz.com) · · Score: 1

    Nothing in this world is free - CloudFlare offers their service for free at the basic level, which means to make money they data mine.

    CloudFlare adds tracking cookies to sites they serve. All the data passes through them using a CloudFlare issued SSL, they an authorized man in the middle. They can literally see, in plain text, any data passing through their service. Even on the paid plans where the destination site can provide their own SSL means that CloudFlare is given the ability to decrypt the traffic.

    There is probably more value to them and law enforcement agencies to leave the service up so they can intercept all the traffic from their users to build cases against the site and it's users

  13. Wifi extenders on Ask Slashdot: What Can You Do With Old Coaxial Cable? · · Score: 1

    Use the coax as a way to distribute wifi in your house.
    I don't know if this is the best solution, but it's one of the top ones I found when I googled "wifi over coax"

    http://www.dual-comm.com/wifi-...

  14. Re:Technology already exists on An End To Phone Pranking (axios.com) · · Score: 1

    Nevermind. I read other posts above that this is UHF/VHF "calls" over a radio, not a telephone.

    Carry on :-)

  15. Technology already exists on An End To Phone Pranking (axios.com) · · Score: 1

    This seems pointless. Coastguards & Military should have E-911 type access to anyone calling in.
    -If you are calling from a landline, you clearly cannot be in the middle of the ocean, since an address will be attached to your call.
    -If you are calling from a cell phone, you are probably within 45 miles of the coast (the range of a cell tower in optimal conditions), and cell phones transmit their rough GPS coordinates with all 911 calls.
    -If you are calling from a satellite phone, you are probably out in the ocean and may have an actual issue. Satellite phone calls are expensive, around $1.00 per minute (+/-), so if you are pranking on one of these you have money to burn, since the phones are pricey.

    Why invent sound pattern recognition technology to bust pranksters, when existing technology can already do the job?

  16. No, they shouldn't. Many employers expect employees to be available outside of work hours for emergencies, critical tasks or to meet deadlines.

    I check my work email frequently outside of office hours, which is essentially unpaid work. So if I take time during the day for personal projects I feel it evens out.

    At the end of the day, as long as the work is being done to the quality, scope, budget and timeline as originally planned then who cares how or when it gets done.

    I see my salary as a compensation for work completed, not my ass being in a specific seat for perscribed hours of the day.

  17. Re: Stock ROMs are shit on Do Android Users Still Use Custom Roms? (androidauthority.com) · · Score: 0

    Why do you need SD cards? Phones come with 128Gb of storage now, and pixel devices come with unlimited photo backups to Google Drive.

    Unless you are downloading a shit ton of media you will never need it.

    Even Google Play Music doesn't suck up that much space with offline playlists. I have a 500 song playlist for weekend camping - and it uses a whopping 1.5-2Gb of space (1Mb per minute X 3 minutes per song X 500 songs)

    Even with every photo I've ever taken, I'll never ever fill up a full phone worth of data.

    Phone storage "space wars" is no different than pixel density wars. At some point it becomes pointless to add more with no actual benefit.

  18. Who cares on 75 Percent of Bluetooth Smart Locks Can Be Hacked (tomsguide.com) · · Score: 1

    Honestly... who cares, really. Smart locks aren't about security, they are about convenience. The fact that most residential mechanical locks can be picked in mere seconds by a skilled lock smith with cheap tools should be more concerning. A hacker will need specialized software to hack bluetooth locks, greatly reducing the likelihood of a bad-dooer doing something to your house.

    Further, locks don't stop dishonest people from doing dishonest things. You could kick down a door faster than you can pick the lock or bluetooth hack it. Its just a hell of a lot noisier. Locks stop honest people from trying to be dishonest people.

  19. Legal Limits Are Crap on DUI Charges Dismissed Against Woman Whose Body Brews Alcohol (cnn.com) · · Score: 1

    There is a huge problem with legal limits. The affects of alcohol are different for everyone. I've known grown men who could down a 40oz of Rye in an evening and still be standing, coherent and functional. I've also known average sized adult men that after 2 beers were slurring and drunk.

    Alcohol affects everyone differently. The fact that her homeostasis is 4x the legal limit means her body has probably adapted to the constant presence of alcohol and she wouldn't have any of the symptoms of being drunk.

    We need to find a better way to judge someone's ability to operate a vehicle other than the amount of chemicals in their blood.

  20. Re: How would they know the order? on Cheap Thermal Imagers Can Steal User PINs · · Score: 1

    Except though, how often do you only press the four digits of your pin. When you make a deposit of $10 or more you need to press at least 4 digits, the dollars and cents. So now you've pressed 8 numbers, and someone has to figure out which of the 8 buttons are for the pin #.

    After 3 failed attempts the machine eats the card, and if it's retail the cars gets disabled.

    So even best case scenario of having 24 combinations, you won't make it past 3 attempts.

  21. Re: wait, what? on New Zero Day Disclosed In WordPress Core Engine · · Score: 3, Insightful

    And all this can be prevented if administrators simply adding one line to their wp-config.php

    define('DISALLOW_FILE_EDIT', true);

    Wordpress provides a large amount of hardening functions like this, others allow the overriding of default file permissions of uploaded documents to 644 instead of 755 to prevent execution of uploaded scripts.

    Developers need to educate themselves on the software they are provides to beat learn how to administrate it.

  22. Re: Like the 100 mpg carburetor on This App Lets You Piggyback Facebook's Free Internet To Access Any Site · · Score: 1, Insightful

    Greedy? They are providing FREE Internet to the third world. I hardly consider that greedy.

    They developed it as an education and communication tool, allowing access to Wikipedia, Google and Facebook.

    That gives them access to knowledge, news, email, chat and other communication tools.

    The only other thing I would add is Khan Academy.

  23. Re: Fishy on TrueCrypt Website Says To Switch To BitLocker · · Score: 1

    And a TPM chip, something not built in to all computers.

  24. Re:Bullying on Xbox One Reputation System Penalizes Gamers Who Behave Badly · · Score: 1

    Use Slashdot's moderation and meta moderation style system. One irate idiot cannot negatively impact the score of a post or a users reputation. Multiple people need to report the same thing for a score to hold, then the meta moderators determine if the score assigned to a post was justified or not.

    I assume Microsoft won't allow a single person's review of another user to hold much weight until multiple users are reporting the same thing, Likewise, I assume that users with a good reputation down voting a bad player will have more klout than a user with a bad reputation trying to down vote another user.

  25. Re:Without her permission? on Minnesota Teen Wins Settlement After School Takes Facebook Password · · Score: 1

    As a parent, I will never give my kids school permission to access her cell phone, email accounts, Facebook or any other online account. If they have concern about the content of a post she makes, or a message she may have sent, they can raise the concern with me and I'll deal with it accordingly. If they track her online usage while at school, fine - all organizations do it, they have to from a liability standpoint, but demanding her password? I'll raise hell.