Slashdot Mirror


User: vlm

vlm's activity in the archive.

Stories
0
Comments
8,750
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 8,750

  1. Thar be dragons! on New Tool Hides Data In Plain Sight On HDDs · · Score: 2

    Moreover, the channel provides two-fold plausible deniability so that an investigator without the key cannot prove the presence of hidden information,"

    So what encryption scheme are they using before storing the data? I didn't find it in the article. Hopefully not something as dumb as XOR using the "key" or using the key as a step size when encoding or something like that.

    Unless they encrypt the data before encoding the fragmentation,a glance at the frag pattern will show a distinct and obvious pattern based on the stored data. If the data is UTF-8 text using non-ascii glyphs, its gonna be pretty obvious when every other byte is a UTF-8 shift header thingy. If its plain ole ascii text its going to be pretty obvious the 8th bit is almost always 0. If the data is semi-packetized like video frames, its gonna be pretty obvious. If the data is stored emails with semi-known plaintext headers, its gonna be pretty obvious. Theres only so many ways to encode 1 and 0 into the frag pattern so playing games like encoding it backwards isn't going to help.

    I'm guessing its not going to be plausibly deniable at all... The other part of the deniability problem is how to deny the presence of the decryption tools in the filesystem, or in unused blocks of the FS. Hmm. You could delete the tools, and then defrag the hard drive to sorta-wipe it. Oh wait...

  2. Re:Upgrade on Nintendo Announces Wii Successor for 2012 · · Score: 1

    If this will play all the old Wii games and output in 1080p, they've got one sold to me already. The Wii is tons of fun, but the low-res graphics get a little obnoxious on a huge-screen TV.

    I wonder about the opposite direction... I hope they continue to have a composite output.

    I don't watch TV very much, and what little I watch would not benefit from HD, so I don't have a HDTV. I have 4800x1200 on my desktop, triple 19 inch LCDs, maybe one of those would have an input compatible with the new wii's outputs...

  3. Re:Who's paying for it on SpaceX Aims To Put Man On Mars In 10-20 Years · · Score: 1

    I'm glad to hear it confirmed that SpaceX really does have ambitions beyond LEO.

    Study your orbital mechanics. Launchers are not constant delta-v machines. They are constant energy machines. Aside from some peak acceleration limits, and some adjustments in the guidance package, a booster that puts X zillion Kg into LEO IS the same machine that puts X divided by some single digit-ish number all the way into Mars orbit.

    So they're planning a really freaking huge LEO booster. But we already knew that. And if you can boost 200 tons into LEO you can boost 30 tons all the way to Mars. But we already knew that too. So it doesn't really say much.

    Somebody has to pay for it.

    Daydreaming about mission profiles is pretty much free. They're in the business of burning fuel ... Don't much care where they go.

    Standard /. car analogy... BP has the technology to gimme 100 gallons of burnable gas. They can daydream all they want about the road trips I could take, but it doesn't much matter. I can burn those 100 gallons in my wife's Prius and go 6000 miles, or burn those 100 gallons in my coworkers RV and go 400 miles, and what BP thinks about it, frankly doesn't matter much, they're in the burnable fuel business not the travel agency business.

  4. Re:Tell me when you can put a man on Mars tomorrow on SpaceX Aims To Put Man On Mars In 10-20 Years · · Score: 1

    Really... At least nuclear fusion is only a decade away, like it's been for the past 50-60 years.

    Is this the new nuclear fusion?

    Humorously, you are exactly correct, for reasons that you probably don't know. Both are well within our technological reach, both repeatedly have been determined to be possible given a decade of funded work, both have repeatedly had "political" declarations that we'll do it, both without any budgetary follow thru.

    For at least fifty years, if someone would slap down the stack of cash, in a decade you'd have a fusion plant or a moon colony.

    At least one problem is the technology has been improving faster than construction can happen. For example, a 1950s fusion reactor would probably resemble a very large linear accelerator across the state of TX, using an old fashioned "mirror machine" design. But it would require something like the national steel output for a year to build the casing, the world wide copper output for a decade to wind the magnets, blah blah blah, and you'd even up with some multiple of the entire planets generating capacity. Which would make scheduled maint kinda problematic. Now a days you could build one vaguely powerplant sized, more or less, but the R+D costs using live hardware would be kinda expensive... Can't you just wait a decade for more studies to get the reactor wall perfected in simulation before cutting metal?

    In a similar way, a 1950s mars colony would have been kind of expensive and risky... Almost certainly this will continue, and a 2020-designed colony will be quite a bit more expensive and risky than a 2030-designed colony...

  5. Re:Great more money wasted on USAF Gets F-35 Flight Simulator · · Score: 1

    Amusingly one design goal of the F-22 was to reduce cost of ownership over the F-15 ... didn't turn out that way, feature creep will kill any aerospace project, look at the shuttle. But at least that's one reason why they started the project.

    Also the mig-27 was retired by the russians when I was a little kid, and they gave them to 3rd world countries. You're probably thinking of something like the new mig-35 which is arguably just a highly modernized -29.

    Of course we could have built a modernized F15 to compete with the -35 instead of striking out in new territory...

  6. Re:REST is not an architecture on Book Review: RESTful Java Web Services · · Score: 1

    ... is not an architecture, it's a bunch of concepts and good practices ....

    Whats an architecture style, if not a bunch of concepts and good practices?

  7. Re:Thank god you're reading slashdot on The Government Internet ID Proposal · · Score: 1

    I'm talking about companies that have no right to this data collecting it anyways, because they manage to make their authentication platforms defacto standards without any regulation over what they're allowed to collect.

    Sounds like a credit bureau business model. That oligopoly hasn't turned out all that bad. I claim they all share everything regardless of process, and you're claiming one group would not share with another or at least one group should not get a free or better data stream that another does not get. And/or I think you're claiming that alternative SSO systems could be worse, but I'm claiming its already as bad as it can be. Unless I summarized you wrong, there's probably nothing else to do but civilly agree to disagree and wish you a happy day.

    you simply won't be able to do business without incumbent authentication systems, wether they are Verisigns, Googles, or Facebooks, using their clout to force counterparties to share their data.

    Don't know about GOOG and Facebook, but I've done SSL business with Verisign a few times in the past, and all they wanted for SSL certs was cold hard cash. Quite an impressive stack, too, given how little they spent to make my customer's certs. Maybe times have changed and they demand detailed sales data from online sellers, perhaps for a discount on the price, but they certainly didn't care about sales data last time I talked with them. In fact they didn't even care what we were doing with the certs. Oh a secured website, how nice.

  8. Re:peer-to-peer vouching system on The Government Internet ID Proposal · · Score: 1

    Once this system is working, would that mean we can do away with the electoral college? No?

    The primary real world use of the EC is as a reward to minor state level party functionaries. A family member of a friend got to be one. I don't remember the pres although given his leanings it must have been for Bush the First. The electors party and hang out together, make connections and schmooze. They hang out with lobbyists, insiders, etc. It would have been inappropriate for me to ask if their expenses were reimbursed, but I'm guessing the answer is yes, and from the stories of modest debauchery I heard, those would have been somewhat high expenses. On the other hand I heard even more indirectly that "married with children" electors treat it as a family vacation, bring the kids out for a week to see the sights, etc, vs hard core businessmen who show up "the day of" do their deed and fly home that night. I guess its most correct to say its a "political party" in the literal sense of the word, and individuals all party very differently...

    Each state decides how they want to select electors, so I would guess that in addition to inherent individual and cultural variation, a state that selects by candidate will have much different elector personalities than a state that selects by party or by primary.

  9. Re:How will this prevent identity theft? on The Government Internet ID Proposal · · Score: 1

    Any ID you can establish, you can also revoke.

    And anyone who controls the PC, often not the person who thinks they control it, can also revoke the ID. Good thing the dominant operating system is so secure.

  10. Re:Thank god you're reading slashdot on The Government Internet ID Proposal · · Score: 1

    What are you talking about? Under the NSTIC proposal nobody keeps this data except for the person you bought the book from.

    Transitivity. I don't know where you get the idea there are no databases. There already are, and they're shared amongst all big players. This is just intended to make it easier to link them together.

    What exactly does authentication have to do with market analysis? My local LDAP server does not look at my amazon recommendations before letting me log in, it just checks the password. So.. revamping the detailed procedures of the authentication department will affect the market analysis and targeted advertising departments exactly how?

    So, rather than logging in locally and then freely trading marketing data, we'll have a complicated authentication system after which we'll freely trade marketing data.

    I'm more offended at the sham of it. Like calling relatively minor administrative changes "full blown socialized medicine". Or calling giving up our civil rights the "patriot act". If they honestly described it as "just fooling around with shared logins that will have no improvement WRT privacy or identity theft" then it wouldn't be offensive.

  11. Re:peer-to-peer vouching system on The Government Internet ID Proposal · · Score: 1

    I'm trying to work on a peer vouching system to establish identity and real existence of people sufficient to conduct a reliable global electronic vote.

    Anyone have any ideas what kind of algorithm might work for that?

    None, because there is no, or at least no simple, technical solution to the social problems of simple rubber hose coercion, vote buying, outright civil disobedience by the electorate, the innumerable electioneering laws about physical separation of campaigners and voting sites, lack of legal peer liability (if a poll worker decides to intentionally let me illegally vote, they are liable, but if I'm facebook friends with someone who cannot legally vote, or friends with a real person and an alias of that person...), serious privacy problems (how will all your peers know if you are legally able to vote?) and what essentially boils down to MITM keystroke logging attacks.

    Anyway, any ideas about this?

    Deployed systems that at least half way work: Debian ring of trust, that new web of trust thingy recently added to freenet.

    Could this kind of bottom up identity/reputation establishment compete for validity with a top-down government system?

    Uh, no. Maybe for Dancing with the American Survivor Idols voting, where it doesn't really matter, so no one intelligent cares enough to break the overall system.

  12. Re:How will this prevent identity theft? on The Government Internet ID Proposal · · Score: 1

    How will this prevent identity theft? Seems to me that it will make it potentially easier to steal someone's identity.

    I don't think you understand who the government serves. They serve the corps, not us. From the point of view of the corps, they would no longer have any liability for identity theft. Follow the detailed fedgov procedure, the fedgov authenticates them, the corp is not liable for mistakes. Also the fedgov will prosecute for criminal fraud against the fedgov at their expense, rather than the corp paying to prosecute as a civil court thing. That is how it protects against identify theft.

  13. Re:Thank god you're reading slashdot on The Government Internet ID Proposal · · Score: 1

    You can see why private industry would hate this proposal: it robs third parties of the ability to collect advertising and customer data through user authentication.

    So what, exactly, is the societal benefit of the governments new ability to directly compile a secret list of everyone whom purchased Noam Chomsky's "Manufacturing Consent" from Amazon, over the current system where they merely order Amazon to do it for them, or buy the info from commercial marketing databases?

    Also you miss the power of a SQL JOIN statement. My CC card company knows Very Well Indeed exactly who I am. Amazon knows that credit card account purchased a certain book. They all "share and share alike" or maybe more like "from each according to their ability, and to each according to their need". So, how, exactly, does Amazon not already know everything about me now, or with this baroque byzantine proposal, in the future?

    Not only is private industry not being robbed, I can't figure out who is being robbed, of anything really. I guess its a big waste of money, meaning someone will get a shiny crispy new income stream by having donated to the correct politicians election campaigns, but aside from that, does it really change anything? At all?

  14. Anarchist cookbook? on CIA Declassifies Pages From Their Cookbook · · Score: 2

    Mix 5 drams copper acetol arsenate. 3 ounces acetone and add 1 pint amyl alcohol (fusil-oil).

    This is sounding like the "anarchist cookbook" which had made up recipes intended to blow up potential bombers rather than cooking up the real thing.
    Right up there with "get high from banana peels"

    You want a solvent for mucilage, try ethanol fumes. I have no idea how to test it because envelope manufacturers have not used biological mucilage for longer than I've been alive... Maybe a museum or an old relative has an envelope they'd let you mess with?

  15. Re:home routers on IPv6 Traffic Remains Minuscule · · Score: 1

    I believe that any DOCSIS3 modem HAS to be IPv6 ready in some form, as part of the DOCSIS3 spec (please tell me if I'm wrong on this, but as far as I am aware, this is the case).

    This is correct. Very soon (if not already?) it will be impossible to purchase either a modem or a CMTS that does not natively support v6. It's a "must" in the spec, not a "would be really nice".

  16. Re:home routers on IPv6 Traffic Remains Minuscule · · Score: 1

    I'd run IPv6 but for this reason. I've looked around to see if there's a firmware upgrade for my routers that will support the new addressing scheme, but no dice, and I don't relish spending another $75 to
    $100 to replace 2 routers. I suppose I'm not the only guy in the world with this problem. So I guess there's your reason.

    Pick up two $10 class PCs, two $5 LAN cards if necessary, less than an hour installing linux, all done and have fun. Educational, at least as educational as inserting a cdrom and googling for 15 seconds "how to get up iptables NAT" can be...

    If you insist on new, you can buy appliance FWs over and over every other year, or you can buy an appliance PC like a Soekris once a decade or so... Sorta like buying cheap shoes at walmart every month or twice that cost shoes at Kohls every year...

  17. Re:home routers on IPv6 Traffic Remains Minuscule · · Score: 2

    Very close, except that IPV4 isn't automatically able to talk on an IPV6 network, where as your black and white set kept getting a picture, even if it was broadcast in color.

    http://en.wikipedia.org/wiki/Dual-stack#Dual_IP_stack_implementation

    I welcome you to the world of dual stacking. Just jump in, the water is nice. I've been there since the late 90s, maybe early 00s. Around a decade, anyway. The rest of the world will catch up, eventually.

  18. Re:what is... on IPv6 Traffic Remains Minuscule · · Score: 2

    Would have been a heck of a lot funnier if you said her LAN is so big, it has a /48 v6 allocation whereas my woman has a cute little /64 sized allocation.
    All the guys in the neighborhood use her 6to4 service every night?
    My IPv6 tunnel to her has a long uptime?

    If you're gonna post, at least put in some effort.

  19. Blind men and an elephant on IPv6 Traffic Remains Minuscule · · Score: 1

    Nothing but the blind men and an elephant in the internet age.

    http://en.wikipedia.org/wiki/Blind_men_and_an_elephant

    From what little I have access to, I see it increasing. From what little they have access to, they see it increasing in absolute but decreasing in relative. I'm sure someone else out there can get an equally meaningless datapoint. Who cares.

    I've switched at least some of my infrastructure over to v6. It just works. How boring. In other news, the sun rose in the east today.

  20. Re:Can we start using examples other than Divorce? on Apple Logging Locations of All iPhone Users · · Score: 3, Insightful

    Let's try to come up with better examples that make people actually care please?

    Oh wait I've got a fun one... The only legal people that matter in the USA anymore are corporations, so ... What is the legal liability to a company that tracks the location of all its employees and then knowingly does nothing with the knowledge of the employee being in an illegal location? Perhaps he's only got a S clearance or entirely uncleared, yet here is proof of him walking around in the TS offices and warehouses... If the company does absolutely nothing with its proof of illegal activity, and later the guy gets caught (camera, whatever) then exactly how liable is the company or its agents as a co-conspirator?

  21. Re:Can we start using examples other than Divorce? on Apple Logging Locations of All iPhone Users · · Score: 5, Interesting

    Visiting the hiring interview room at a competitor on your day off, with your company issued must-carry phone? This could get really weird...
    Insurance company requiring tracking data to prove you don't go to fast food joints or tobacco shops, and you do visit the gym regularly?
    Police / employers harassing you when they download your coordinates and find out you're volunteering at the "wrong" political election office or you attend the "wrong" church? (Or more likely, at least in the backwards USA, the wrongness would be defined as not attending church at all?)
    Company wants a record of exactly where your phone went on your "sick" day. God help you if you left the house to visit doctor or pharmacy, because thats not "staying home and resting".

    Every day I'm happier I have an ipod touch to do i-stuff with, and a plain ole VM pay as you go phone for that old fashioned "telephone call" functionality. The coolest part is when I drain the ipod battery from screwing around with music / videos / games, I can still do the important stuff like make and receive phone calls. I know people whom absolutely squeal when angry birds fly off with their battery charge and then they can't talk on the phone or text for a couple hours. Lately I've been facetiming thru open wifis instead of making phone calls on my old fashioned cellphone, if everyone I knew did facetime, I'd probably ditch the phone entirely.

  22. batch processing system? on YouTube Now Transcoding All New Uploads To WebM · · Score: 2

    cloud-based video processing infrastructure that maximizes the efficiency of processing and transcoding without stopping. It works like this: at busy upload times, our processing power is dedicated to new uploads, and at less busy times, our cloud will automatically switch some of our processing to encode older videos

    Finally, a clear and concise explanation of "the cloud". Its batch processing just like JCL on MVS/360. And to think people thought it was something new...

  23. polycarb plastic? on Erasing CDs By Using 150,000 Volts of Electricity · · Score: 1

    Its polycarb plastic, right? Expose it to a chlorinated solvent and it'll craze and crumble, kinda de-polymerize itself. Breathing the vapors is inadvisable.

  24. Re:How would they look to the natives? on Worlds With Two Suns May Sport Black Plants · · Score: 1

    I hate to follow up to myself but I forgot another very important limitation... Look at the optical resolution vs wavelength equations for a given eye size.

    Examine our solar spectrum at the top and bottom of the atmosphere.

    http://en.wikipedia.org/wiki/File:Solar_Spectrum.png

    Below 400 or so nM is a waste of time due to oxygen adsorption. Above 800 nM or so is a waste of time due to water adsorption.

    Why do we have no / very few animals using the bright rnages around 1100 and 1200 and 1600? To get the same resolution as my eyes get at 500 or so nM would require eyes with a diameter roughly 2 to 3 times as large for those wavelengths... And volume / mass / caloric requirement increases as the cube. So, to go infrared at reasonable resolution I'd have to invest probably a couple pounds of biomatter to get "good human vision" in my new giant eyes. On the positive side a lot of womens clothing fabric is transparent at those wavelengths. Tradeoffs, tradeoffs....

    In summary, don't matter what the big flashlight in the sky is squeezing out, UV vision is useless in an oxygen atmosphere, and IR vision is either really low res or really freaking biologically expensive or is blocked by water vapor. Its "visual spectrum" or nothin.

  25. Re:Planets around two suns probably would be lifel on Worlds With Two Suns May Sport Black Plants · · Score: 1

    It helps if the two stars are like Pluto distance apart.

    Even Jupiter distance apart is "not entirely awful". That would make life on Mars very exciting, for example.

    But yeah if Venus and Mars were both Sol sized stars we'd be pretty much screwed, yeah.