Well the technique was pretty darn common in the 8 bit home computer era. So you are right in that this is not novel, but it shows its still a good method to add video to hardware that the manufacturer maybe never intended to have video out. I think this is a pretty good "News For Nerds" post even if its strictly New(s) that you can do this. I think it might be an interesting technique to apply in things like Rockbox and plug computers, as well.
There are two pretty fundamental problems with lastpass.
1. The stronger the security the less usable the system is. They could require two factor and one factor could be a username password pair where the password is at least 24 bytes, no two bytes in a row. The second factor could be an RSA token, or their grid system for one time pads seems pretty solid to me. AES-256 blockmode encrypt the users data as one big struct with those keys and you have a data store that even if becomes completely public is likely to stand up against any cryptographic or even bruit force attack no matter how long the attacker has to wait. Trouble while this would be secure it would be usable for many.
2. Because you can't do it right, in that someplace in the chain there has to be a key weak enough for typical humans to remember and a token easy enough to carry, last pass presents a target. Worse it presents a very valuable target.
Something that small would be hard to spot with radar, and it does not need to rain down hell fire missiles, a single well places.22 round will neutralize many targets.
I agree that is possible even likely senerio, but I see that as being in addition to my three. Just because the Pakistanis are lying, obstructing, delaying or any combination there of does indicate if our government is/was doing those things. I like you would venture they were/are.
Well Osama was found in a populated city filled with Pakistani Military and Spy agency personnel and by all indications he had been there along time. That leaves a few possibilities :
1. The Pakistanis are completely incompetent at security, and therefore could not be trusted to protect our bird. 2. The Pakistani Government knew where Osama was and was protecting him from us, they are therefore not actually or allies but an enemy who has been playing us, and therefore could not be trusted to protect our bird. The jury is still out. 3. Parts of the Pakistani Government and or Military leadership are disloyal and were protecting Osama from the rest of the government and us. From and operation standpoint we can't know who can and cannot be trusted therefore none can be trusted, and we had to scuttle the bird.
So how accountable should Sony ( a victim ) be for/to their end users also victims? I mean this seriously. In a world of tangibles its not even clear. Lets say you lent me your laptop and left it in my unlocked car at a the mall. When return to my car its gone. Now I was negligent about protecting your laptop. Clearly its the thief's fault its missing but I really should replace your computer if it can't be found after a day or two.
Now we are in the world of intangibles, Sony did a poor job of protecting users data. Its certainly whoever crack they systems fault the data is gone but that should not completely excuse Sony and more than I would be excused for the loss of that laptop. Trouble is what is the harm to the users? It could be none, the crackers stole the data just to embarrass Sony and have already deleted every bit of it, or someone could spend the next six months sorting our identity theft issues consuming hundreds of hours of their time; but that could happen anyway. We will never know. What is really fair here?
Hmm I am 27 and I WONT USE THE DAMN SELF CHECKOUT anymore.. A human checker can always complete my transaction faster than I can unless they are new trainee or something. Its not that I have problems using the machine, most of the time I tried using them everything was fine and it was easy to understand what to do. A few times there were problems where the weight sensor did not register the item had been place in the bagging area and than you have to stand there like an idiot until the operator can come over which takes all kinds of time.
The main issue is locating the UPC codes. I don't know where they are on the packing so I have to sit there and spin each item around and around in my hands inspecting between one and six sides of it before I can locate it. A human checker becomes familiar with the products the store sells and knows right where to look, and often they don't need to look they can orient the thing correctly over the scanner without sighting the code. I would say for a weeks worth of groceries an experienced human checker can do the job 15% to 20% faster than I can, especially if there is allot of produce to weigh. Its not worth while to do it myself.
1. If places like Aaron's did not exist as you say the choices left to people at that income level would be go without the laptop or save for 12 months, there would be no option to have it now period.
2. Usury is not actually limited to victimizing the poor. Plenty of people of superior economic means manage to get into all sorts of trouble with credit cards that have rates darn close to Aaron's and Cash Advance, and many get suckered into other things like variable rate interest only mortgages and similar financial instruments that many simply don't understand; again though these can be very useful to *some* customers in some situations.
Considering Netflix now has more subscribers than Comcast, I am not at all sure that is true, because I would venture that most Netflix customers use streaming.
I guess I was one of the "birthers" until recently. Orly Tates describe plenty of reasonable explanations for the birth announcements in Hawaii and the other trappings. It was also perfectly reasonable to think that Obama was telling the truth based on the available evidence.
What it came down to for me was you know gee its not crazy to want to want to see candidates for our highest office prove they meet the qualifications to do so. If Obama was born here, it would be easy for him to prove it, because he won't he is probably not a natural born citizen.
Well now he has produced a birth certificate, it would be way more politically risky to produce a fake on at this point than to just keep stone walling. I will accept its real and he is a natural born citizen, the available evidence has changed and so has my conclusion.
1.Multiple versions of NTFS with subtle changes 2.Its a complex file system with lots of features, some of which are not even used by windows but you still have to take care of the on disk data correctly. 3.The security scheme does not cleanly map onto UNIX style rules even with ACL support and such.
NTFS is by no means avant guard but its by any means simple and without documentation figuring out its internals completely and correctly is a BIG job. Now why they can't gleen allot of that from the Linux source I don't know. I know they can't use the Linux source because of the GPL being incompatible with BSD maybe there is a contamination concern.
So this court upon which you will conferring the power to review the Supreme Court is going to be directly elected and fairly frequently I take it?
Want to guess what happens to judicial precedent when frustrated voters who don't know anything other than they are frustrated toss out one party and vote in the other each election cycle? Can we at least make the terms like five years or something so we can just know that for even numbered decades abortion and weed are legal, the second and tenth amendments are void, the first amendment is absolute and for odd numbered decades the reverse. That will just make things easier.
An other issue with the over consumption of water that is a bit less extreme is the simple fact that your kidneys assume that in most cases they will be working against the concentration gradient. That is the will need to create a higher ration of chemicals that need to be removed from your body in your urine than already exist in the body, b/c there will not be enough water otherwise. If modern running tap water is used to turn this on its head well there is little mechanism to keep things from moving with the concentration gradient and water will dissolve and strip chemicals from the body in greater amounts than are desirable.
More likely they know what the vulnerability is but don't have a good way to fix it without major breakage. If it was simple buffer overflow or something where someone spoofed a PS3 and sent PSN some malformed data I am sure it would be fixed by now with a few input validation patches. More likely there is something very fundamental to the operational scheme that is exploitable.
Now I am sure all the PSN interfacing is done through libraries which are part of the PS3 monitor code that Sony can update but I would speculate they are having problems keeping all the changes under the hood opaque to all that software shipped on read-only blue-ray media.
Server stores hash, client computes hash, transmits hash, server compares hash. Not very hard.
Brilliant, you basically have just turned the hash into the password. I don't need your password now, just the hash which you are transmitting. You accomplished exactly nothing!
Boy I sure am glad Nintendo only know me by WII Number and I have never given them my CC either, always just bought WII points cards to add points to my account for purchases. So even their database gets published me and probably lots of other account holders WONT CARE. Stupid Sony Stupid...
Right and I you should point out that if you don't install their certificate for the sites they are MITMing you will just get a certificate warning. Unless you can tunnel your traffic someplace else if they are redirecting destination port 443 to Google's net block your traffic is going to hit their proxy. You can accept it or refuse and not get the page.
Slashdot Mirror
Well the technique was pretty darn common in the 8 bit home computer era. So you are right in that this is not novel, but it shows its still a good method to add video to hardware that the manufacturer maybe never intended to have video out. I think this is a pretty good "News For Nerds" post even if its strictly New(s) that you can do this. I think it might be an interesting technique to apply in things like Rockbox and plug computers, as well.
There are two pretty fundamental problems with lastpass.
1. The stronger the security the less usable the system is. They could require two factor and one factor could be a username password pair where the password is at least 24 bytes, no two bytes in a row. The second factor could be an RSA token, or their grid system for one time pads seems pretty solid to me. AES-256 blockmode encrypt the users data as one big struct with those keys and you have a data store that even if becomes completely public is likely to stand up against any cryptographic or even bruit force attack no matter how long the attacker has to wait. Trouble while this would be secure it would be usable for many.
2. Because you can't do it right, in that someplace in the chain there has to be a key weak enough for typical humans to remember and a token easy enough to carry, last pass presents a target. Worse it presents a very valuable target.
Something that small would be hard to spot with radar, and it does not need to rain down hell fire missiles, a single well places .22 round will neutralize many targets.
Well I am sure it compares very favorably if you have an old CPU or a CPU of a different architecture which does not feature those instructions.
I agree that is possible even likely senerio, but I see that as being in addition to my three. Just because the Pakistanis are lying, obstructing, delaying or any combination there of does indicate if our government is/was doing those things. I like you would venture they were/are.
Cool so installing Windows makes one a Scientist
Well Osama was found in a populated city filled with Pakistani Military and Spy agency personnel and by all indications he had been there along time. That leaves a few possibilities :
1. The Pakistanis are completely incompetent at security, and therefore could not be trusted to protect our bird.
2. The Pakistani Government knew where Osama was and was protecting him from us, they are therefore not actually or allies but an enemy who has been playing us, and therefore could not be trusted to protect our bird. The jury is still out.
3. Parts of the Pakistani Government and or Military leadership are disloyal and were protecting Osama from the rest of the government and us. From and operation standpoint we can't know who can and cannot be trusted therefore none can be trusted, and we had to scuttle the bird.
Or maybe SA just stands for "Security Agency"
Ok,
So how accountable should Sony ( a victim ) be for/to their end users also victims? I mean this seriously. In a world of tangibles its not even clear. Lets say you lent me your laptop and left it in my unlocked car at a the mall. When return to my car its gone. Now I was negligent about protecting your laptop. Clearly its the thief's fault its missing but I really should replace your computer if it can't be found after a day or two.
Now we are in the world of intangibles, Sony did a poor job of protecting users data. Its certainly whoever crack they systems fault the data is gone but that should not completely excuse Sony and more than I would be excused for the loss of that laptop. Trouble is what is the harm to the users? It could be none, the crackers stole the data just to embarrass Sony and have already deleted every bit of it, or someone could spend the next six months sorting our identity theft issues consuming hundreds of hours of their time; but that could happen anyway. We will never know. What is really fair here?
I'd totally buy Angry Birds from the shop channel, the WiiMode hold A + B to grab control would work fine. I'd be a great living room game.
Hmm I am 27 and I WONT USE THE DAMN SELF CHECKOUT anymore.. A human checker can always complete my transaction faster than I can unless they are new trainee or something. Its not that I have problems using the machine, most of the time I tried using them everything was fine and it was easy to understand what to do. A few times there were problems where the weight sensor did not register the item had been place in the bagging area and than you have to stand there like an idiot until the operator can come over which takes all kinds of time.
The main issue is locating the UPC codes. I don't know where they are on the packing so I have to sit there and spin each item around and around in my hands inspecting between one and six sides of it before I can locate it. A human checker becomes familiar with the products the store sells and knows right where to look, and often they don't need to look they can orient the thing correctly over the scanner without sighting the code. I would say for a weeks worth of groceries an experienced human checker can do the job 15% to 20% faster than I can, especially if there is allot of produce to weigh. Its not worth while to do it myself.
There are other ways of looking at it.
1. If places like Aaron's did not exist as you say the choices left to people at that income level would be go without the laptop or save for 12 months, there would be no option to have it now period.
2. Usury is not actually limited to victimizing the poor. Plenty of people of superior economic means manage to get into all sorts of trouble with credit cards that have rates darn close to Aaron's and Cash Advance, and many get suckered into other things like variable rate interest only mortgages and similar financial instruments that many simply don't understand; again though these can be very useful to *some* customers in some situations.
They call it "crisis communications" for a reason I guess.
To watch it die on the vine in the general consumer space like firewire and be relegated to a few niche markets... That should be Exciting...
I happen to like my TI99/4A...very much actually.
Considering Netflix now has more subscribers than Comcast, I am not at all sure that is true, because I would venture that most Netflix customers use streaming.
I guess I was one of the "birthers" until recently. Orly Tates describe plenty of reasonable explanations for the birth announcements in Hawaii and the other trappings. It was also perfectly reasonable to think that Obama was telling the truth based on the available evidence.
What it came down to for me was you know gee its not crazy to want to want to see candidates for our highest office prove they meet the qualifications to do so. If Obama was born here, it would be easy for him to prove it, because he won't he is probably not a natural born citizen.
Well now he has produced a birth certificate, it would be way more politically risky to produce a fake on at this point than to just keep stone walling. I will accept its real and he is a natural born citizen, the available evidence has changed and so has my conclusion.
Add to that a few other fun things
1.Multiple versions of NTFS with subtle changes
2.Its a complex file system with lots of features, some of which are not even used by windows but you still have to take care of the on disk data correctly.
3.The security scheme does not cleanly map onto UNIX style rules even with ACL support and such.
NTFS is by no means avant guard but its by any means simple and without documentation figuring out its internals completely and correctly is a BIG job. Now why they can't gleen allot of that from the Linux source I don't know. I know they can't use the Linux source because of the GPL being incompatible with BSD maybe there is a contamination concern.
So this court upon which you will conferring the power to review the Supreme Court is going to be directly elected and fairly frequently I take it?
Want to guess what happens to judicial precedent when frustrated voters who don't know anything other than they are frustrated toss out one party and vote in the other each election cycle? Can we at least make the terms like five years or something so we can just know that for even numbered decades abortion and weed are legal, the second and tenth amendments are void, the first amendment is absolute and for odd numbered decades the reverse. That will just make things easier.
Thanks
An other issue with the over consumption of water that is a bit less extreme is the simple fact that your kidneys assume that in most cases they will be working against the concentration gradient. That is the will need to create a higher ration of chemicals that need to be removed from your body in your urine than already exist in the body, b/c there will not be enough water otherwise. If modern running tap water is used to turn this on its head well there is little mechanism to keep things from moving with the concentration gradient and water will dissolve and strip chemicals from the body in greater amounts than are desirable.
there is sufficient track record
I see what you did there.
More likely they know what the vulnerability is but don't have a good way to fix it without major breakage. If it was simple buffer overflow or something where someone spoofed a PS3 and sent PSN some malformed data I am sure it would be fixed by now with a few input validation patches. More likely there is something very fundamental to the operational scheme that is exploitable.
Now I am sure all the PSN interfacing is done through libraries which are part of the PS3 monitor code that Sony can update but I would speculate they are having problems keeping all the changes under the hood opaque to all that software shipped on read-only blue-ray media.
Server stores hash, client computes hash, transmits hash, server compares hash. Not very hard.
Brilliant, you basically have just turned the hash into the password. I don't need your password now, just the hash which you are transmitting. You accomplished exactly nothing!
Boy I sure am glad Nintendo only know me by WII Number and I have never given them my CC either, always just bought WII points cards to add points to my account for purchases. So even their database gets published me and probably lots of other account holders WONT CARE. Stupid Sony Stupid...
Right and I you should point out that if you don't install their certificate for the sites they are MITMing you will just get a certificate warning. Unless you can tunnel your traffic someplace else if they are redirecting destination port 443 to Google's net block your traffic is going to hit their proxy. You can accept it or refuse and not get the page.
They can force most users to just live with it.