I was using a satellite Internet connection a couple of years back. The 'dish' was a flat panel about the same size as the lid of the laptop it was connected to.
The TSA should engage in profiling, as the Israelis do. Although it's controversial, the Israelis have managed to prevent any hijacking incidents since 1969 so they must be doing something right.
When was the last time they actually caught a hijacker at the airport? Or, indeed, a terrorist of any description?
You may be right, but I can't think of any news reports in the last twenty years or so.
So this would prevent the certificate issuing system from being compromised and that is important, since CA's private keys are there (and the signing code is there).
But... they... don't... need... those... keys.
Their goal is to get fake keys signed. If they can break into your network and submit their fake keys to the signing system and get signed certificates back, then they have succeeded. Obviously stealing the signing keys would be better, but so long as they can get the fake certificates they want, then they don't much care.
All you've done is converted an attack on the signing computer into an attack on the intermediate computer. That's a difference that makes very little difference.
How does that help? If the key-signing computer just signs any keys submitted to the intermediate system then anyone who hacks into the network can send keys to the intermediate system and wait for the signed certificate to appear there.
Cost, I presume. With an air gap someone has to physically take a USB key to the other machine to get the key signed, and that adds cost and people want to buy certs cheap.
Of course the end user who's relying on those certs has no way of ensuring that they weren't generated by a cheap CA which doesn't take serious precautions to prevent this kind of thing.
Ultimately the whole CA system is broken because any company can issue any key for any site, so we're all reliant on the least secure CA that the browser trusts. Worse than that, the browser doesn't even tell you that they key has changed unexpectedly (e.g. without the old key expiring), which would go a long way toward eliminating these kind of attacks.
I have a hard time understanding the outrage. Do people here really have that hard of a time learning how to use it? Has Slashdot's core audience shifted away from geeks and nerds?
'Geeks and nerds' don't like fancy inefficient interfaces.
Nixon certainly was a right-winger. He may not have been a fascist like most of the current right-wingers, but he was definitely right-wing.
Fascists were left-wing. And in what universe are price and wage controls now 'right wing' policies? If Obama was proposing them people would be calling him a commy.
FFS, we wonder why our world is so fucked up when artists (some actually talented people) are forced to put up with shit like that.
Correct me if I'm wrong, but haven't many of the most famous musical 'artists' been demanding that we must 'do something' for the environment for decades now?
Well, now we're doing something, and they should be happy.
I'm still waiting on a bug to be fixed that dates back to version 4 beta. It's not something trivial, I get a BSoD after about 15-20 minutes of regular use. I've looked online, I've submitted bugs, I've done just about everything they've suggested, save one: 'Turn off Crossfire whenever I use their browser', and frankly, that's in no way a real solution at all.
Applications per se won't give you a BSOD, because that generally means something went horribly wrong in kernel mode. Sounds like the ATI drivers have a bug that causes a crash with Crossfire enabled, and Firefox can't rewrite those drivers for you.
Why would they? I'm just a user and I had no problems with the fast releases.
Because every new release is increasingly dumbed down and randomly removes user interface components or moves them around so you have to find them again and then remember where they were when you go back to an old version? And your only choice is either 3.6 or the current latest version because they now refuse to support any other versions?
The only thing really keeping me on Firefox now is Noscript.
I was recently pissed off again by Gedit refusing to load my text file because it contains a control character, and when I checked the Gnome bugzilla I discovered that had been logged as a bug in 2004 and still isn't fixed. Given that it's incredibly dumb and should just require an option to _not_ refuse to a load a file just because it contains control characters, I'm amazed that it's been able to sit there for seven years without someone fixing the damn thing.
Then again, there's Gnome 3. So maybe I shouldn't be that surprised.
When I'm asked to recommend a printer, I say "not HP". Their drivers are a bloated mess.
Yeah, we have an HP printer at home that we inherited when the previous owner bought a new one. The last Windows drivers I downloaded were about 150MB; that's a quarter of the size of a typical Linux distribution.
Also it will only feed one sheet of paper at a time. From what I gather they used some crappy component inside which needs to be replaced after a couple of years if you want the paper feed to work.
Is this really any easier or safer if there are plans for humans to ever be on that body again?
You do realise that space is so full of radiation that any long-term base on the Moon or Mars will probably need to be buried a few feet under the ground, right?
In order to get a reactor to the moon you have to launch it on a rocket, and rockets do not have a really great safety record.
The reactor doesn't start up until it's in place, so it's relatively safe until then. Plus if the launcher fails after the first minute or so it ends up at the bottom of the ocean.
The Russians have put reactors into space before, and I believe NASA did launch one before they settled on RTG and solar.
nonsense, RDP (and most other tcp services) can be quickly scanned and identified on ANY port
Of course if you're serious about security then a port-scan would be logged and blocked. They'd need to compromise multiple machines or scan at a very slow rate in order to be able to get past such a firewall.
Slashdot Mirror
They look for the dish on your roof.
I was using a satellite Internet connection a couple of years back. The 'dish' was a flat panel about the same size as the lid of the laptop it was connected to.
The TSA should engage in profiling, as the Israelis do. Although it's controversial, the Israelis have managed to prevent any hijacking incidents since 1969 so they must be doing something right.
When was the last time they actually caught a hijacker at the airport? Or, indeed, a terrorist of any description?
You may be right, but I can't think of any news reports in the last twenty years or so.
So this would prevent the certificate issuing system from being compromised and that is important, since CA's private keys are there (and the signing code is there).
But... they... don't... need... those... keys.
Their goal is to get fake keys signed. If they can break into your network and submit their fake keys to the signing system and get signed certificates back, then they have succeeded. Obviously stealing the signing keys would be better, but so long as they can get the fake certificates they want, then they don't much care.
All you've done is converted an attack on the signing computer into an attack on the intermediate computer. That's a difference that makes very little difference.
How does that help? If the key-signing computer just signs any keys submitted to the intermediate system then anyone who hacks into the network can send keys to the intermediate system and wait for the signed certificate to appear there.
Cost, I presume. With an air gap someone has to physically take a USB key to the other machine to get the key signed, and that adds cost and people want to buy certs cheap.
Of course the end user who's relying on those certs has no way of ensuring that they weren't generated by a cheap CA which doesn't take serious precautions to prevent this kind of thing.
Ultimately the whole CA system is broken because any company can issue any key for any site, so we're all reliant on the least secure CA that the browser trusts. Worse than that, the browser doesn't even tell you that they key has changed unexpectedly (e.g. without the old key expiring), which would go a long way toward eliminating these kind of attacks.
Really? What are your metrics?
It's odd, because the people with 'metrics' are usually the ones pushing UI changes that almost everyone hates.
I have a hard time understanding the outrage. Do people here really have that hard of a time learning how to use it? Has Slashdot's core audience shifted away from geeks and nerds?
'Geeks and nerds' don't like fancy inefficient interfaces.
In what universe were fascists left-wing?
This one?
I note that you ignored my question about price and wage controls.
Nixon certainly was a right-winger. He may not have been a fascist like most of the current right-wingers, but he was definitely right-wing.
Fascists were left-wing. And in what universe are price and wage controls now 'right wing' policies? If Obama was proposing them people would be calling him a commy.
Shutting down an American company is helping no one. They will build them in Mexico if this keeps up.
So rather than 'no one' it would definitely seem to be helping Mexicans.
I'm sure that foreign CEOs cry themselves to sleep when they see the US government shutting down US companies to 'save the environment'.
Actually, maybe they do; with tears of laughter.
When their guy Dick Nixon is the one that proposed, and signed it in to law.
He also supported price and wage controls. If he was still alive the Democrats would be running him as a hard-left candidate.
FFS, we wonder why our world is so fucked up when artists (some actually talented people) are forced to put up with shit like that.
Correct me if I'm wrong, but haven't many of the most famous musical 'artists' been demanding that we must 'do something' for the environment for decades now?
Well, now we're doing something, and they should be happy.
I'm still waiting on a bug to be fixed that dates back to version 4 beta. It's not something trivial, I get a BSoD after about 15-20 minutes of regular use. I've looked online, I've submitted bugs, I've done just about everything they've suggested, save one: 'Turn off Crossfire whenever I use their browser', and frankly, that's in no way a real solution at all.
Applications per se won't give you a BSOD, because that generally means something went horribly wrong in kernel mode. Sounds like the ATI drivers have a bug that causes a crash with Crossfire enabled, and Firefox can't rewrite those drivers for you.
Why would they? I'm just a user and I had no problems with the fast releases.
Because every new release is increasingly dumbed down and randomly removes user interface components or moves them around so you have to find them again and then remember where they were when you go back to an old version? And your only choice is either 3.6 or the current latest version because they now refuse to support any other versions?
The only thing really keeping me on Firefox now is Noscript.
I was recently pissed off again by Gedit refusing to load my text file because it contains a control character, and when I checked the Gnome bugzilla I discovered that had been logged as a bug in 2004 and still isn't fixed. Given that it's incredibly dumb and should just require an option to _not_ refuse to a load a file just because it contains control characters, I'm amazed that it's been able to sit there for seven years without someone fixing the damn thing.
Then again, there's Gnome 3. So maybe I shouldn't be that surprised.
When I'm asked to recommend a printer, I say "not HP". Their drivers are a bloated mess.
Yeah, we have an HP printer at home that we inherited when the previous owner bought a new one. The last Windows drivers I downloaded were about 150MB; that's a quarter of the size of a typical Linux distribution.
Also it will only feed one sheet of paper at a time. From what I gather they used some crappy component inside which needs to be replaced after a couple of years if you want the paper feed to work.
So what's worse - your default space radiation or some enriched nuclear fuel lying around or able to find its way inside your systems?
The radiation from nuclear fuel is negligible compared to the radiation from solar flares which can kill you in a few minutes.
Is this really any easier or safer if there are plans for humans to ever be on that body again?
You do realise that space is so full of radiation that any long-term base on the Moon or Mars will probably need to be buried a few feet under the ground, right?
In order to get a reactor to the moon you have to launch it on a rocket, and rockets do not have a really great safety record.
The reactor doesn't start up until it's in place, so it's relatively safe until then. Plus if the launcher fails after the first minute or so it ends up at the bottom of the ocean.
The Russians have put reactors into space before, and I believe NASA did launch one before they settled on RTG and solar.
Space X has yet to put a man into space. Period.
And they will in 2-3 years, and the total cost of developing the rockets and capsule will be less than the cost of a single shuttle flight.
Keep that in mind before saying how "useless" "overfunded" "wasteful" the NASA Shuttle and Constellation programs were.
Now imagine if all the money spent on the shuttle and ISS had been given to companies like SpaceX instead...
The whole point of a worm is that they have multiple machines.
Not on my internal network.
And if you have RDP open to the Internet you're so retarded there's no saving you.
Astronauts have accepted the danger and know the risk.
Try that in any other business and see how long you can survive before the government close you down.
"Sure they have a one in fifty chance of dying every time they go on a business trip, but they've accepted the danger and know the risk."
The shuttle's main propulsion is liquid hydrogen and liquid oxygen. Its exhaust product is water vapor.
Exactly. If I remember correctly, about 80% of the 'greenhouse effect' on Earth comes from water vapor.
nonsense, RDP (and most other tcp services) can be quickly scanned and identified on ANY port
Of course if you're serious about security then a port-scan would be logged and blocked. They'd need to compromise multiple machines or scan at a very slow rate in order to be able to get past such a firewall.
However, don't you take issue at all with a company misrepresenting itself to people?
Do you really think that people have orgasms when they drink brown carbonated sugar water, like they do in the ads?
Only a product of government school indoctrination would believe anything a company says without verifying it first.