Slashdot Mirror


User: nacturation

nacturation's activity in the archive.

Stories
0
Comments
5,045
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 5,045

  1. Re:Excuse me, but... on Behind the First Secure Quantum Crypto Network · · Score: 1

    That leaves the case where the channel is insecure. Doing the quantum transmission in one go falls to the man-in-the-middle attack I've detailed: I establish a computer in between, receive A's photons and send my own photons in its stead. I can't clone the photons, but I don't need to: I simply establish one OTP with A (A thinks he's sending that OTP to B), and another OTP with B (B thinks this is A's OTP), and transparently decrypt/encrypt what comes later.

    If you're able to convince Alice that you're Bob and convince Bob that you're Alice, then no method of securing data is safe from that MITM attack. That's a fundamental trust issue which cannot be solved by any technology.

    If Alice thinks you're Bob, then having Alice whisked to you in one of the NSA's black helicopters and personally hand you the data doesn't really matter, does it? You've already intercepted it, Alice totally trusts you, and you could then copy the data, head over to Bob's place in the NSA's black helicopter and personally deliver it to Bob because Bob totally trusts you and thinks you're Alice.

    To call that a weakness of quantum crypto is either ignorance or a strawman.

  2. Re:1kbps is low throughput but... on Behind the First Secure Quantum Crypto Network · · Score: 1

    If one ran the quantum encrypted backbone on one adapter of machines, and normal Internet stuff on another, perhaps the handshakes and the key exchange for large volume data transfers over SSL or ssh be done via the quantum interface, then the session key negotiated be used over the Ethernet link. This way, should a private key be compromised or broken on a host it would not affect future communications (assuming the security hole is patched and the machine re-secured.)

    The whole point of public key cryptography is that the encryption setup is secure, even if an attacker is able to watch every byte that gets exchanged. If your private keys are compromised, then having transmitted the private keys over an unbreakable quantum link doesn't really matter at that point because the only solution is to revoke the keys and reissue new ones.

    If you really need maximum security, then use 8192 bit public key encryption... nobody's going to be breaking that any time soon.

  3. Re:Symantec products are apparently the same. on Symantec Exec Warns Against Relying On Free Antivirus · · Score: 1

    You don't want the uninstaller resident, that's a point of weakness for attack.

    Of course, an anti-malware product that's unable to protect itself from malware attacks says something right there about how effective it really is.

  4. Re:No Backup?? on Seattle Data Center Outage Disrupts E-Commerce · · Score: 1

    Google Checkout and Amazon Payments -- there's your redundancy, both with neither setup nor monthly fees.

  5. Re:How the server gets infected? on New Click-Fraud Attack Is Stealthiest Yet · · Score: 1
  6. Re:How the server gets infected? on New Click-Fraud Attack Is Stealthiest Yet · · Score: 2, Informative

    The goal is to get some website to distribute your payload, which consists of specially crafted HTML code. This can be done by simply posting a comment on any webpage which accepts and retransmits arbitrary HTML. Or it could be done by exploiting a bug in IIS, Apache, or other webserver software so that the original site serves up your payload. Or you could hack Windows or Linux to get the webserver to use your payload. The payload then exploits any number of browser bugs, whether Firefox, IE, or another browser to install software automatically into Windows when the victim visits a compromised website.

  7. Read The Fine Summary on New Click-Fraud Attack Is Stealthiest Yet · · Score: 5, Informative

    Why would they waste their time? Surely there are easier ways to steal from adsense that don't involve putting people at risk...

    Were you just trying for first post, or did you have a point to make? "Why would they [the FFSearcher developers] waste their time?" Because it makes them money and, thus, is not a waste of time at all but rather quite the profitable use of their time. And from the summary, it sounds like FFSearcher does nothing malicious except for redirecting traffic such that it gets referral payments. How is that putting people at risk? And what are these easier-to-steal-from-adsense methods you're referring to?

  8. Re:Gah... brains are meant to be good at learning on Toyota Demonstrates Brain Control of Wheelchair · · Score: 4, Funny

    FWIW, my own idea of how to do this would be to put a few small electrodes into a person's lower arm, far away from the brain (and have a sensitive meter to detect nerve firings).

    Why not just put the electrodes into the person's feet? Then when they're walking along, the wheelchair can just follow a few paces behind them. That way, if they ever find themselves paralyzed and unable to send nerve firings to their feet, they'll find it rather convenient to have a wheelchair available.

  9. Re:95% accuracy is pretty awesome. on Toyota Demonstrates Brain Control of Wheelchair · · Score: 3, Insightful

    I was going to say just this. 95% sounds good until you start thinking about it - but that means that in every hour of usage, the chair is going to spend three full minutes misbehaving.

    Depends on how it fails for that 5%. If 95% of the time, it understands and executes the command perfectly, but the other 5% of the time, it doesn't understand and thus executes no command, then that's pretty good.

  10. Re:Last thing to do on Madoff Sentenced To 150 Years · · Score: 1

    You hear that sound?

  11. Re:As the great Bartle said on Why Don't MMOs Allow Easier Transportation? · · Score: 1

    That's why I play Progress Quest: http://progressquest.com/

    All of the leveling, none of the tedium!

  12. Re:CTO? I don't think so on Out of Business, Clear May Sell Customer Data · · Score: 1

    If the CTO of a corporation didn't realize a private company, contracted by the government, would not delete his personal information at his request, he shouldn't be a CTO.

    ALL data, in whatever form, once in the hands of the government, its entities, subsidiaries and contractors, will exist essentially forever.

    Oh no! The government now has his Social Security Number!

  13. Re:Actually, I think it's a great tactic on Amazon Cuts Off North Carolina Affiliates · · Score: 1

    They should have made a censored version, only replacing every swear word with the word "walmart". "Walmart off and die, motherwalmart!"

  14. Re:More to it than that. on How To Get Out of Developer's Block? · · Score: 3, Funny

    Chapter 11? That's kind of like a bankruptcy in motivation.

  15. Re:Your Ikea dollars hard at work on Pirate Bay Retrial Denied, Judge Declared Unbiased · · Score: 1

    IKEA: Swedish for "particle board".

  16. Insert Homo Jokes Here on IBM Claims Breakthrough In Analysis of Encrypted Data · · Score: -1, Flamebait

    Please consolidate all your "that's gay technology" and various other homo jokes under this thread.

  17. Re:If you give up the inch, they'll take the mile on NASA Sticking To Imperial Units For Shuttle Replacement · · Score: 1

    Fahrenheit is a more precise unit

    Why? Is there a limit to the number of decimal places you're allowed to use where you're from?

    Yes, the limit is 0 decimal places "when expressed as an integer" as the GP indicated. How many decimal places do your integers have?

  18. Re:Parts: The Clonus Horror on Apple's Obsession With Secrecy Grows Stronger · · Score: 1

    He did have a hormonal imbalance, they said he had very serious health issues and would return to work in June. All of that is true.

    Quite true, assuming the liver thing is accurate:

    From Apple's press release:

    Fortunately, after further testing, my doctors think they have found the cause - a hormone imbalance that has been "robbing" me of the proteins my body needs to be healthy.

    From Wikipedia:

    The liver plays a major role in metabolism and has a number of functions in the body, including [...] plasma protein synthesis, hormone production, ...

    So if your liver's on the fritz, you're hormone production will be off, and so will plasma protein synthesis. Personally, I think all of this should just go away. Whether or not the CEO is healthy is relevant to shareholders, but the details of that ought to be private.

  19. How? on Could We Beam Broadband Internet Into Iran? · · Score: 1

    How would you beam broadband into Iran?

    I don't know... but something I once read prompts me to answer that they might beam broadband capability into Iran via satellite.

  20. Re:But... on Blu-ray Adoption Soft, More Still Own HD DVD · · Score: 1

    Just as an example, I've never bought a blu-ray disc. There's never been a blu-ray disc in my PS3. Effectively, I am not part of the blu-ray market even though I do own a blu-ray capable device; any statistics that claim that I am are faulty.

    If you've ever had a game disc in your PS3 then your PS3 has had a Blu-Ray disc inserted into it. Unless you don't play PS3 games on disc, then you've technically never had a Blu-Ray movie in your PS3.

  21. Re:I work in he rental industry on Blu-ray Adoption Soft, More Still Own HD DVD · · Score: 1

    It's a great idea, but it depends on what the store charges for Blu-Ray rentals. If it's like any of my local stores, they charge a dollar or two more than DVD and make it 1 day only (bastards!) which is why I don't rent locally anymore. So it may be more profitable for them. If, however, they charge identical prices for DVD and Blu-Ray then more people renting Blu-Ray will increase costs as they'll have to stock up on a more expensive format. In that case, they'd want to delay Blu-Ray adoption to scale back costs.

  22. Re:Oh Slashdot... on Sothink Violated the FlashGot GPL and Stole Code · · Score: 1

    Since my analogy seems to have been stretched the entirely wrong way, let me rephrase it:

    If copyright didn't exist we wouldn't rely so much on the GPL? That's a bit like saying that a fish wouldn't rely so much on my email junk folder.

  23. Re:Oh Slashdot... on Sothink Violated the FlashGot GPL and Stole Code · · Score: 1

    My point exactly.

  24. Re:Oh Slashdot... on Sothink Violated the FlashGot GPL and Stole Code · · Score: 2, Informative

    "we wouldn't need to rely so much on the GPL"

    With no copyright, you cannot rely on the GPL at all because it's unenforceable. Much like a person without arms wouldn't rely on gloves so much because they're unwearable.

  25. Re:Oh Slashdot... on Sothink Violated the FlashGot GPL and Stole Code · · Score: 1

    I think you should re-read my post. You're reading into it a point I'm not trying to make.