Slashdot Mirror


User: colinnwn

colinnwn's activity in the archive.

Stories
0
Comments
644
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 644

  1. Re: I don't truly trust any of them on What Can Be Done About Security of Debit Cards? · · Score: 1

    I bank with a small national bank and a community credit union that I somewhat trust. They have never done anything to me, or anyone I know of that I deemed inappropriate.

    But I also don't 100% trust any company to always do the right thing. You can always get a jerk employee, or just get unlucky after a misinterpreted policy change. When it is my money, I will always err on the side of caution, and the side of having more protection in regulation, rather than in contract or marketing language.

  2. Re: I think you misunderstand parents intent on What Can Be Done About Security of Debit Cards? · · Score: 1

    First, I think he'd tell you he'd never use his ATM/PIN in ANYTHING but an ATM machine. If you want cash without going to a teller, there is no cheaper or safer way to do it. Debit cards or credit cards would all work the same as an ATM card, or would be more expensive. This makes the issue of PIN transactions being harder to refute irrelevantly equal. And no retard should give their PIN to anyone they don't accept as an authorized user of the card for any purpose.

    Also while Visa provides virtually equal protections for credit and debit cards, that doesn't give it the force of law, only the force of contract that may have to be litigated. I believe debit card transactions still have somewhat fewer legal protections than credit cards. But even that doesn't really matter.

    The real issue is if your debit card is rooted, the money is gone until the bank chooses to return it whether they do it in a couple hours, a couple days, or a couple weeks, whether that is legal or illegal, contractual, or in violation. If your credit card is rooted, you still have all your money. And if worse comes to worse and you can't agree with the bank on whether it is a valid charge, and you choose to sue or not, you can just not pay your bill. You credit score might go to crap, and they might choose to sue you, but you still have your money until you choose to give it to someone else.

  3. Re:What can be done? Nothing. on What Can Be Done About Security of Debit Cards? · · Score: 1

    Wow, sounds like they did a crappy implementation over there.

    In a properly implemented system, the card would offer up a rolling encrypted account number to the device to send to the bank, so even if they captured your pin, they couldn't use it, because if they tried to supply the same encrypted card number to the bank, it would no longer be the correct account.

    But on top of that, when a properly authorized device sends the correct account number to the bank, the bank should reply with a unique and pre-negotiated encrypted passphrase that must be correct before you enter your pin.

    So the device would receive the encrypted passphrase, send it to the card that decrypts it using its onboard chip, then sends the plaintext passphrase to the device to display.

    You'd see "Bootylicious - Enter your PIN" and enter it. But if you saw "Poopypants - Enter your PIN" you'd know the device was fraudulent and you could cancel the transaction without providing your PIN.

  4. Re: True... on What Can Be Done About Security of Debit Cards? · · Score: 1

    You are correct, but it is also true there are more legal protections on credit card transactions than on debit card transactions. So I guess the real question is, how much do you trust your bank to do the right thing, vs. what they are minimally legally required to do, without having to call their regulators or file a lawsuit against them.

  5. Re: This happens... on Red-Light Camera Ticket Revenue and Short Yellows · · Score: 1

    ...at some intersections in Texas. Yet if you are making a non-protected left turn and get stuck in the intersection with oncoming traffic going straight and protected left turn, if you have positioned yourself appropriately, it doesn't seem to impede oncoming traffic in either direction. Then when the oncoming straight traffic is finally stopped before crossing traffic starts, or before allowing your following protected left turning traffic to restart, you have a chance to complete your turn. I do this all the time.

    Note I am not commenting on whether it is technically legal. But I do it unabashedly in front of police in Houston and Dallas and other cities I infrequently travel to in Texas, Colorado, and New Mexico, and have never gotten a ticket.

  6. Re:Silly DVR boxes on Comcast Disables VCR Scheduling In New Guide · · Score: 1

    In the US, we don't have SCART. We have composite or S-video on VCRs. I don't think any consumer VCRs were made with component video, DVI, VGA, or HDMI.

    Otherwise it works the same way here. The original poster was saying Comcast has disabled the feature on their digiboxes that allow you to set a recording channel and time for it to come on automatically for the VCR, unless you upgrade to the DVR package with improved digibox.

    Another poster claimed this wasn't nefarious, but was the result of very limited flash RAM in the basic digiboxes used by Comcast. They needed the flash RAM for other TV guide improvements.

  7. Re:Silly DVR boxes on Comcast Disables VCR Scheduling In New Guide · · Score: 1

    I think you misunderstand, though the post wasn't very informative.

    No VCRs I am aware of have digital tuners. This feature of the cable box automatically turned it on and to the correct channel, so the VCR timer could also turn on at the same time and start recording this channel. Fancier VCRs had a IR blaster feature. This is basically a substitute for the IR blaster to the cable box.

  8. Re: must carry on Comcast Disables VCR Scheduling In New Guide · · Score: 1

    If you are in the US, this is against FCC regs. Local broadcast channels carried in digital must be carried in clear QAM. I believe only the SD version is required to be in the clear, but if they don't carry the SD version, the HD must be in the clear. On TWC in Dallas, several other basic channels like WGN are also in the clear.

    http://www.avsforum.com/avs-vb/showthread.php?t=1072309

    In this thread, someone suggests rather than going midevil on TWC, first try calling your local channel, ask for the network engineer, and let them know TWC is not carrying their channel in the clear. They frequently have contacts in the cable company, and have a desire to get their channel carried correctly so they have the largest possible number of viewers.

  9. Re: A little faster than 10's of minutes on Largest Sodium Sulfur Battery Powers a Texas Town · · Score: 1

    My Dad is a petrochemical engineer who specs equipment. He has told me they occasionally use large generators (over 1mw) that can go from not running to producing power, in a few cycles (less than one tenth of a second), using pneumatic start. I'm sure they are using some of the tricks listed in children posts, like staying preheated, and priming the exhaust and intake tracts.

  10. Re: Power Steering on Toyota Accelerator Data Skewed Toward Elderly · · Score: 1

    I used to drive a 5000 lb truck (IH Scout Traveler) that would regularly have the power steering go out. If you were traveling over 20 mph it was easy to turn at any rate that you'd want to turn at speed. The only thing that made it even minorly dangerous was if you were making a 90 degree turn at an intersection with one hand (which is poor technique anyway). If it went out and you didn't have your other hand ready, you could drift into the next lane as the steering wheel jerked against your hand.

  11. Re: An intentional translation error from... on India First To Build a Supersonic Cruise Missile · · Score: 1

    Cheneyish to English.

  12. Re: Nuclear powered, or nuclear armed? on India First To Build a Supersonic Cruise Missile · · Score: 1

    If it is similar to the nuclear powered aircraft we considered building, but let good sense prevail, thank goodness. The nuclear powered airplane would have sprayed so much radioactive fallout during operation, that it didn't need to be armed with anything. Just flying around over a populated area would kill most of the residents within a couple days if they didn't GTH out.

  13. Re: Death to... on India First To Build a Supersonic Cruise Missile · · Score: 5, Informative

    I was watching a recorded Rick Steves episode the other day about traveling in Iran. I'd actually like to go there now. He said the people were more friendly than many European towns. People kept saying "We love Americans" and that they wish our countries governments could get past our disagreements.

    During a fundraising break, he mentioned he was sitting in a cab in horrible traffic and the cab driver said "death to traffic." He asked the cab driver what he said, and the driver said they say "death to..." when they are irritated by something. It was at this point, Rick realized when they say "Death to America," what they mean is "Damn America!" And given what we have done to the political situation in the middle east, especially by deposing their democratically elected government in 1953 to keep the oil tap open, it is hard to argue with them.

  14. Re: He is referring to... on Amazon Battles Apple By Arm-Twisting Publishers · · Score: 1

    ...the most favored nation clause.

    As someone who has been involved in negotiating a contract for the buyer with a most favored nation clause, they do seem wrong. You are either asking your supplier to lie to you, or to reveal the lowest price they charge anyone. Some contracts say this can't be revealed, though it is generally assumed it can't be revealed only when identifying the involved parties also.

    It completely eliminates the equality of negotiating positions. The saving grace for suppliers is they can claim clauses that vary between contracts constitute a different level of service, causing their cost model to be different, and therefore is a different product.

  15. Re: Maybe not on Oracle Shuttering OpenSSO · · Score: 3, Insightful

    MySQL would be a very high profile project to kill. I think it is more likely they would provide much less support and engineering resources for it going forward, leaving it to the community outside of Sun to keep it feature and bug competitive.

  16. Re: 8 character passwords on Blazing Fast Password Recovery With New ATI Cards · · Score: 1

    I think it is a good idea. That's what I meant by token based security. But it does present a problem for things like smartphones and the coming light tablet computers. Do you carry around a RFID credit card as the token that the phone or computer reads? Do phones and small devices get exempted from this and you use gesture passwords? There are some things to get worked out.

  17. Re: 8 character passwords on Blazing Fast Password Recovery With New ATI Cards · · Score: 1

    8 character passwords must remain the minimum allowed. If it goes higher, people can't easily remember them, especially when you are expected to change them every month/quarter/year. I could memorize and be willing to use a 12 character password if I never had to change it. Other mechanisms like running a password app on a portable flash drive, or token based security has advantages and disadvantages.

    Really I think the answer has to be exponential rate limiting, where each incorrect guess doubles the amount of time before you can try again, starting with 2 seconds maybe. That gets intolerable for guessing real fast.

  18. Paging the new reincarnation of John Yoo on Yale Law Student Wants Government To Have Everybody's DNA · · Score: 1

    That is all...

  19. Re:Drobo fan and user on Long-Term Storage of Moderately Large Datasets? · · Score: 1

    In 6 years when he needs to look at the data sets again, has replaced a faulty Drobo, and the new one is no longer compatible with older disk packs, or Drobo is out of business, can you read the disk packs any other way?

  20. Re: brake and clutch on $1M Prize For Finding Cause of Unintended Acceleration · · Score: 1

    That's a good way to see if your clutch is bad, but a dumb way to see if your parking brake is good. Instead they should have been accelerating to 5 mph and be sure the emergency brake would stop the car in X feet.

  21. Re:Talk to Steve Gibson author of Spinrite on Write Bits Directly Onto a Hard Drive Platter? · · Score: 1

    Can you give us some Linux or Windows tools that do what Spinrite does correctly (i.e. tries many times to re-read corruptly read sectors) but fixes what it does poorly (write recovered data back out to another hard drive)?

  22. Re:Not Surprising on Tethering Is Exhilarating (With the Nexus One) · · Score: 1

    Is your 3% figure by coverage area, or covered persons? Seems like it is either a really old figure, or it is by coverage area. T-mobile has been quickly adding 3G coverage in their major markets.

    Anyway a 2G network could just as easily be saturated by tethering, unless you are saying it is so slow people don't bother.

  23. Re: How? on Lost Nazi Uranium Found In a Dutch Scrapyard · · Score: 1

    With one nut?

  24. Re: I don't think so on School Spying Scandal Gets Even More Bizarre · · Score: 1

    First, I don't think there are any OTC medicines available today that you can get high on unless they are adulterated. Most prescription medications also don't allow you to get high with the exception of certain classes of pain killers and psychoactive drugs. For those classes of drugs that present a REAL abuse risk, I am on board with requiring the nurse to hold and administer until the kids are out of high school. Too many adults abuse these kinds of drugs, and the risk is too great for selling/trading/abusing.

    For the drugs that are not abuse risks, I find it totally unacceptable that school nurses must administer them after kids get out of elementary school. I think it is more liability than abuse risk that schools do this, though I still find it equally unacceptable. Kids are mature enough at that age to handle their medication requirements on their own to the extent their parents are comfortable with it. And by the time you are in high school, if you can't handle your own medication requirements, you should probably be in the school for special children who will never graduate.

    I could go through lots of reasons for this, but I will stick to 2. There are risks of medicine mistakes when a 3rd party is maintaining care, custody, control, and distribution for you. It even happens to pharmacists and doctors. I especially don't trust a school nurse to do it 100% accurately. The other reason is we infantize children in the US, and there is no good reason we do it. Children need to learn how to grow up and take care of themselves gradually. Treating them like incompetent possessions until they are 17, then throwing them out of the house to go to college or find their way isn't a reasonable way to parent. Unfortunately parents, schools, and authority figures all encourage and participate in doing exactly this.

  25. Re:Lojack on FBI Probing PA School Webcam Spy Case · · Score: 1

    Well they probably didn't know what the theft rate would be, making for a hard financial decision before the fact. But either way just buying Lojack, telling the kids, and putting a sticker on them might tamp out half of the theft they did see and make it cost effective. Kinda stupid, or smart? that they didn't tell the kids the webcam would be activated if the computers were reported stolen.