Slashdot Mirror


User: Crayon+Kid

Crayon+Kid's activity in the archive.

Stories
0
Comments
1,004
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 1,004

  1. Re:So on A New Form of Online Tracking: Canvas Fingerprinting · · Score: 1

    You can configure RequestPolicy to filter on full domain, then only allow requests explicitly to www.example.com, and not to domainclick.example.com.

    But I did NOT have it configured that way, thank you for the heads up about this trick.

  2. It's not "new" on A New Form of Online Tracking: Canvas Fingerprinting · · Score: 2

    The paper "Pixel Perfect: Fingerprinting Canvas in HTML5" by Keaton Mowery and Hovav Shacham is from 2012.

  3. Re:So on A New Form of Online Tracking: Canvas Fingerprinting · · Score: 4, Informative

    Use the RequestPolicy addon in Firefox. It's a whitelist for allowing certain sites to load resources (of any kind) from other sites. If the pairing between the site you're on and another site is not explicitly added to RequestPolicy, nothing gets loaded (the request is not even made to begin with). It covers JS, CSS, images, anything.

    IMO it's a more practical approach than NoScript, although not as ultra-secure.

    In case you're wondering what's the difference between RequestPolicy and Ghostery:

    • * Ghostery is a blacklist, not a whitelist (blocks only the things in the list, allows anything else). Blacklists are usually a bad idea in security.
    • * With RequestPolicy you control the list, with Ghostery someone else does.
    • * Ghostery has a lot of extra fluff, RP has only what's needed.
  4. Re:But Does It Scale on The New Science of Evolutionary Forecasting · · Score: 1

    They don't like hanging upside down.

  5. Re:But scarcity! on Verizon's Accidental Mea Culpa · · Score: 3, Interesting

    The problem is still the lack of competition in the market. If everyone had the choice between 4-5 ISPs, considering the popularity of Netflix, consumer ISPs would be paying Level 3 truckloads of money to ensure Netflix works flawlessly...and the roles may even be reversed (where Level 3 tries to gouge Verizon, since they'd know Verizon would have no choice or lose a ton of customers).

    I've lived in Europe and I got to see first hand what very strong competition means.

    Every ISP peers to the max with every other ISP it can, and with the backbone providers. Nobody charges for peering either way, everybody wants to open the pipes as much as possible.

    At one place I lived at I had a choice of the biggest 3 providers in the country and 2 small ones. All of them offered bandwidth in the range of 100 Mbps, both up and down, to/from anywhere inside their network (which for the big ones meant pretty much the entire country) and varying levels of outside bandwidth (but 10-30 Mbps was usual). This was pretty much the standard on cable or copper connections in the cities. Outside it went down but you'd still typically get 30-50 Mbps. Fiber was only available in the cities – but it meant 1000 Mbps down (yes, 1 Gbps).

    Lowest basic monthly subscription started from around 10$. It was 25$ for the fancy fiber stuff. I wish I was making this up.

    Was there throttling, blocking, or shafting customers with lower-than-advertised bandwidth? You betcha, and plenty of it. Did anybody call for government regulation? Nope. They bitched about it to the ISP, and if the ISP didn't fix it (or couldn't) they switched to another one. Or they decided they don't care that much and stayed on. Whatever. Even with the most crap of the crappiest ISP's you still got something like 10 Mbps so, yeah, some people didn't care.

  6. Re:What I'd like to see... on Valve's 'Steam Box' Console Is Real, Says Gabe Newell · · Score: 1

    I'll probably get hate for pointing this out but other than Tablets this is the one place where Win 8's metro GUI actually works well,

    You forget that Microsoft would be a direct competitor in the console market. Doesn't sound like a good idea to build your console around their OS. They would probably refuse out of hand, and even if they accepted you'd be at their mercy.

    with both Valve and Sony bringing X86 based consoles to market its gonna be another golden age for us PC gamers,[..]its a great time to be a PC gamer regardless

    Enjoy it while you can, because it's not going to last. As the vast majority of personal computing users move to smartphones, tablets and living room devices, the PC market is shrinking.

    Who's gonna remain?
    * Corporations, with all the virtualization and cloud going on, may very well go back to thin clients. Even if they don't, they usually go for standardized workstations, they have no use for interchangeable parts and tinkering.
    * Gamers? I have a nagging suspicion that their vast majority wouldn't mind consoles if they got a mouse and keyboard alongside the controllers, and if Valve or anybody else will give them that, it's bye bye PC.
    * Pretty much the only niche left for the PC will be professional power-users such as multimedia, music, 3D modelling, CAD, programmers, ie. specialized software on high-end hardware. But it will be a fraction of the current PC market, which might make it into a very different beast.

    A decade from now we may very well look back on the PC of today the way we now look back on the golden days of Amiga and Commodore 64.

  7. Re:Sounds improbable on Dutch Cold Case Murder Solved After 8000 People Gave Their DNA · · Score: 2

    That's why the US has the fifth amendment (and why a right against self-incrimination is a good idea in general).

    Please elaborate on how this is a good thing, because I'm really confused about it. To me it sounds like, the police finally found a way to identify a murderer, but then this 5th amendment thingy comes in and it gets thrown out on a technicality. What's good about that?

    I've read the Wikipedia entry about the self-incrimination aspect of it, to prevent confessions obtained under torture for example. But that's a far cry from what we have in this case.

  8. Re:thanks for asking on Windows Phone 8 Users Hit Some Snags · · Score: 1

    People still use Symbian?!

    Yes. The latest Asha line of models from Nokia is quite good. They've put good build quality and decent features into ~100 EUR devices. They've also mixed in features from other kinds of phones, such as QWERTY physical keyboards and Exchange support from business phones, or touch screens and Youtube video playback from smartphones. The screen resolutions are crappy, but it's suprising how well a small package of features can satisfy a casual user. And the S40 app support is also suprisingly solid.

    To give you an example, I've asked a friend who has an Asha 302, here's what they do with it off the top of my head: web browsing with Opera Mini (mostly feed/news reading, checking forecast, Googling or Wikipedia); Exchange sync (email, calendar, contacts) for work; email support for popular providers (Yahoo, Google) as well as custom accounts (including stuff like secure IMAP etc.); Google Maps, Skype, Facebook, Shazam, YouTube; data-texting with Skype, Viber or WhatsApp; snapping pics and video (crappy quality, but bearable); music player and FM radio; apparently there's also MobiPocket (ebook reader) available for S40. She also has some obscure little S40 games she's been carrying around for years from phone to phone.

    And of course it's 90% about talking and texting on the phone, all the above is only the other 10%. I guess that's what makes the difference. Some people want the phone to be just a phone, mostly.

  9. Re:Free software could leak cleartext or keys on FreeBSD Throws the Clang/LLVM Switch: Future Releases Use LLVM · · Score: 1

    If it's feasible to make money on a video game with a free engine and proprietary data, then why aren't there more popular video games built on engines that have been free from day one?

    Not sure what you're asking, the first part of this question is completely disconnected from the second. And they both completely disregard what I've said above.

    It doesn't matter if the code or the data is open or not. What matters is whether the hardware will cooperate to let you reverse engineer it.

    As for Hollywood and game companies, they're not exactly poster children for moving with the times and waking up to the realities of technology.

  10. Re:Free software could leak cleartext or keys on FreeBSD Throws the Clang/LLVM Switch: Future Releases Use LLVM · · Score: 1

    Ah, but we should also point out that closed software on open hardware does little to achieve the above restrictions or protection of data. As long as the user has access to the underlaying machine they can still access the raw form of the program and the data. It's harder than having clear-text source code and unobfuscated data, sure, but it's doable.

    The only environment in which closed-source code works is putting it on locked-down hardware, a "black box" of sorts with no external clue as to what's going on inside. You can sell such boxes to users (game consoles, media players) or you can keep them at your place and just rent the use of them remotely (web servers).

    (if you're selling individual units to the users) and create a "black box" of sorts with no external clue as to how it works; or putting it on hardware you own and control fully, and just open the interface to the user (Web servers) -- which is pretty much the same as the previous, except you also keep the black box and just sell the use of it.

    But if the code is always in a locked-down black box I don't see that it even matters anymore if it's "open" or "close".

    Source code being open or close is not really the point, it's about whether the hardware is open or closed.

  11. Re:Finally on Valve: Linux Better Than Windows 8 for Gaming · · Score: 0

    The only reason I can see for hating Metro (besides the "walled garden" thing, which is a MAJOR turn-off)[...]

    I'm very curious: do you see Linux as a walled garden as well?

    Serious question, no trolling. I get the impression you're a long time Windows user and I'm a mainly Linux user nowadays, for years now. Technically, Linux distros also use "app stores" (they just call them package repositories). The one major difference would be that on Linux you can always add another "app store" quite easily.

    So, back to the question: would this make a casual user of Linux also see it as a "walled garden"? Conversely, if Microsoft allowed you to add other app stores, would you stop feeling walled? Are there other factors contributing to this?

  12. Re:Dear OP on OpenGL Becoming a Requirement For the Linux Desktop · · Score: 3, Interesting

    While Unity 2D may have been dropped, Ubuntu Precise (which is as you probably know a LTS) offers the "Gnome Classic (no effects)" option, which uses Metacity and no Compiz (install gnome-session-fallback). There are some small differences from older "pure" Gnome 2 (and there are plenty of tutorials on the web describing how to close the gap) but I haven't found anything critical, overall it's close enough to the Gnome 2 experience.

  13. Re:Notice one thing... on Why Eric Schmidt Is Wrong About Microsoft Not Mattering Anymore · · Score: 2

    I suppose it depends how you look at it. Facebook has done work that advanced the state of certain technologies, such as NoSQL, high availability, global distributed services. It put social networks on the map more than ever before, and has raised awareness of online privacy. Facebook may be evil, but I'd say it was a necessary evil.

  14. Re:One teensy weensy difference... on Facebook Confirms Data Breach · · Score: 1

    You're right, but how difficult do you think it is to "prove" marriage? Marriage licenses in the US can be very casual, basically they're just a piece of paper. If a woman shows up with such a (forged) piece of paper and a random priest swearing "yeah, I married you two back in '67 in Vegas, I remember you were drunk as shit", you're screwed.

    There's practically no way you can prove they're lying, and the US law recognizes this as a legal marriage, without the requirement that it was recorded in an official registry. Whereas in other countries (most of Europe), no marriage is valid without it being recorded in the centralized national registry. Licenses are just pieces of paper, they can be lost or reissued, but the record in the registry is either there or it isn't.

  15. Re:One teensy weensy difference... on Facebook Confirms Data Breach · · Score: 1

    In countries which implement ID cards, just knowing a person's unique ID number doesn't help a bad guy. In fact we freely give out those numbers when shopping when we need an invoice for accounting purposes, at the doctor's, for civil registry purposes (recording of marriages, children etc.), at the bank and so on. The number is just a convenient method of tracking a person in the records.

    But don't confuse the number with [i]proving your identity[/i]: you have to present the card in person (it's a picture ID card); people are protective of their ID card; the cards have safety elements which make forgery very hard; there are automated verification machines (used mostly by banks and country border routine checks) which scan a card and respond back within seconds if it's valid.

    So yes, identity theft is practically unheard of in Europe, in the sense it's used in the US. For example, in order to get a loan you have to show up at a bank and request it in person, physically sign a contract and wait (days) to be checked out. An impersonator would have to (a) forge an ID card; (b) forge your signature on a contract; (c) hope no word of this gets back to the actual person during the check-up period. And even if they manage all this, the laws are such that once it's proven it wasn't you, you're completely off the hook.

  16. Re:One teensy weensy difference... on Facebook Confirms Data Breach · · Score: 2

    Phonebooks were generally only easily available in the area you lived in and not accessable by Vlad in Minsk who wants to collect as much data as he can on you to impersonate you to a bank. Not only that , but once data is on a computer a lot of things can be automated.

    So if I get this right, your solution to the fact that the US has a major identity theft problem is "would everybody be so kind and ignore it", or perhaps "bad guys, please don't use computers"? I'm afraid it may not work very well.

    I'm not even sure what's with the American paranoia against unique ID cards. It's not like not having them grants you any anonimity. If anybody (including your .gov) wants to find stuff out about you, they do. You already have unique social numbers, so all the worse parts of being uniquely identifiable in a centralized database are already happening. You're just missing out on all the good parts, such as limiting identity theft, or a comprehensive civil registry. I mean, it's ridiculous that in the US you can't really prove you've never been married.

  17. Re:Phonebook on Facebook Confirms Data Breach · · Score: 4, Interesting

    You probably don't remember this, but when you first started using the Facebook application on your phone you had to confirm your phone number. You probably got a text with a code you had to enter or something like that.

    You can remove the number, as you noticed, but I'd be really skeptical whether they actually remove it. I suspect they don't, since it's a great way of tracking people across multiple accounts. As you experienced yourself, people often forget that they made Facebook aware of their personal phone number at some point in time.

    Consider for example the case of someone who becomes more privacy-aware, closes their initial FB account then later opens another when where he is more guarded about who he friends and what he publishes. And he thinks he's leaving less of an online footprint... when in reality I bet FB is tying it all in with his previous account.

  18. Re:Somewhat fair on Illegal Downloading Now a Crime In Japan With Increased Penalties · · Score: 1

    that's when I started to feel maybe it's time for some civil disobedience.

    Alright, but remember that civil disobedience also means you accept the punishment if you're caught, in order to make a stand and expose an unfair law.

    If you break the law but expect to go unpunished then it's not civil disobedience, it's just freeloading.

  19. Re:Driver's education on To Encourage Biking, Lose the Helmets · · Score: 1

    In additions, drivers are always held responsible in accidents invoolving bicycles.

    No, they aren't. The strict liability law you are referring to is about civil liability, not criminal liability. The police will determine who is at fault and will fine/prosecute whoever it was, including the cyclist. The strict liability is mainly about insurance; there is indeed a default assumption there that the driver is at fault, but only until the driver can prove (usually with the help of the Police) that it was not his/her fault.

    Do not rely on this law to protect you be an asshole cyclist because it will NOT help.

  20. Re:But that's not the real problem. on To Encourage Biking, Lose the Helmets · · Score: 1

    You haven't understood what "fault" means. It's called "strict liability". A lot of people (even Dutch) assume that it's some kind of very powerful law that protects cyclists. They are wrong.

    1. It's not a criminal liability, only civil liability. It's mainly for insurance ie. the driver is cut access to insurance coverage when they hit a cyclist until they prove they couldn't have prevented it. It has nothing to do with legal prosecution.

    2. Even if it was about criminal liability, it's debatable whether it would be a deterrent to driving dangerously. There are punishments in place for all kinds of activities, they haven't eliminated those activities.

    Read more here.

  21. Re:But that's not the real problem. on To Encourage Biking, Lose the Helmets · · Score: 1

    Proper instructions are key to making roads safe.

    There are no special instructions for drivers in Copenhagen or Amsterdam. The big secret is: physical separation of bike routes. The bike lanes are spacious and always very well delimited from both car traffic and pedestrian traffic. Mixing of bike traffic and car or pedestrian traffic is reduced as much as possible. Where they intersect there are of course traffic lights. That's all. The rest follows naturally; drivers, cyclists and pedestrians all do their own thing on their own dedicated lanes.

  22. Re:Downloading, or uploading? on EU Court Asked To Rule On Private Copying · · Score: 1

    You're right, wrong example.

    Here's the proper example: it wasn't that person's picture. He had no rights to distribute it. Under the normal laws, only that person is at fault. Under this kind of law, all the people who downloaded it would be too. And that just ain't right. It leaves everybody open to entirely too many problems, it becomes impossible to do much on the web without constant fear.

  23. Re:Bittorrent uploading illegal in NL on EU Court Asked To Rule On Private Copying · · Score: 2

    I don't see the comparison with fragments of literary works as being valid. Coherent pieces from a text are usable on their own. But 2 random pieces from a movie file are useless. Can they really claim that the sharer harmed the rights holder by distributing pieces which are unusable? I just don't see it standing for one file-sharer alone, in the absence of all the others who together made available the whole file.

  24. Re:Downloading, or uploading? on EU Court Asked To Rule On Private Copying · · Score: 4, Insightful

    You don't even have to go that far. Criminalizing downloading is insane. It doesn't make sense, it cannot work. Example: someone posts a picture of their cat on any website, without mentioning distribution terms, anybody who downloads that picture is automatically at fault.

    This is why I suspect this EU thing is not a blanket "let's get all downloaders" thing, but a rather more subtle approach.

    You have to understand that in EU, not just in Netherlands but many countries, downloading is currently legal, period. What the law punishes is distribution ie. making available, uploading etc. But you can't go after uploaders who use protocols like BitTorrent, because any of them taken individually (usually) only upload pieces of files, not entire files. In order to be able to prosecute anybody for one download you'd have to keep track of all the IP's that provided all the file pieces, then identify the people behind them, then prove intent and knowledge of what they were doing, then prove collusion to break the law.

    Given the privacy laws of most EU countries this is simply impossible. It won't even get past identifying people behind IP's, let alone seizing evidence to prove intent, knowledge and collusion. It's a chicken and egg problem: you need identities and evidence to prove they did something wrong, but you can't get identities and evidence until you prove it.

    So I expect that this thing is about relaxing copyright and/or privacy laws so it allows media companies to get warrants for people that engage in certain "obvious" file sharing activities, on the downloading side, so they can identify them and get evidence. Even so, I'm not 100% sure how it would work. Simple participation in a BT swarm doesn't mean you get even a single file, and if you do you still have to prove intent and knowledge before you get your warrant. And if they hope to get warrants without proof... that opens a very big can of worms.

  25. Re:So that means hatred forever is ok? on Iran Behind Cyber Attacks On U.S. Banks · · Score: 0

    You know the US has had some countries it has had a beef with in the past. The UK, Germany, Japan, and so on. You might want to examine their reaction, their relations these days.

    When's the last time US has been nasty to any of those countries? And when's the last time it did something that Iran resented? I think it was a bit more recent than 1945 or 1783.

    Stuxnet was a cyber-attack on Iran and now they strike back. Whether Stuxnet was really deployed by the US is irrelevant at this point. Iran is lashing out at who's been doing the most threatening noises.