Slashdot Mirror


User: cbeaudry

cbeaudry's activity in the archive.

Stories
0
Comments
685
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 685

  1. Re:From your description, not REX on New Controversy over Black Hat Presentation · · Score: 1

    Thats kinda odd actually.

    Was there a reader on the door ?

    The only tech I know might of been the same thing, proximity cards, but they could have been carrying active cards, they are much thicker as they are powered with a battery. Those cards aren't passive, but active.

    They can go up to 8 feet that I know of, but its possible that some could go further.

  2. Re:Proximity vs RFID on New Controversy over Black Hat Presentation · · Score: 1

    The thing is, there has to be a balance between security and whats practical. Contactless security systems, cost next to nothing in maintenance. Magstripes, require a swipe, has a moving reader head, which needs cleaning, and breaks down. Barcodes... well those are useless, one photocopy and you have another card. There are Wiegand insertion, but they still require a swipe or inserting the card into a reader, and where there is contact there is WEAR AND TEAR. About brute forcing the encryption, you would need to have direct access to the reader or card for a long period of time to be able to brute force the 64bit key. 64bit, doesn't seem like much in the IT world, but seriously, you'd have to be pretty lucky to brute force a 64bit key and not get noticed standing there in front of a door for what?... 2 years ? :)

  3. Re:Proximity vs RFID vs What? on New Controversy over Black Hat Presentation · · Score: 1

    That was probably what we call a REX (Request to Exit) device.

    Motion detector type REX's, or infra red heat detectors.

    Some are of very poor design and will capture any motion or heat up to 20 feet ahead and as wide.

    Some are very precise, where you can narrow the beam to such a point where it captures no more than 1 foot wide, 1 foot from the door, and about a few inches wide accross the door handle, no more.

  4. Re:Proximity vs RFID on New Controversy over Black Hat Presentation · · Score: 2, Informative

    Maybe my (french canadian) english didint describe well what I meant.

    Basicaly, using the iClass readers, there is a basic encryption key between the card and the reader.
    Using a special card, a reader can be programmed with a NEW key.
    The reader now accepts the old (public key) and new (Private key).

    When an old card is presented to such a reader, the cards key changes to the private key after negotiation.
    After a while, you reprogram the readers to a SECOND private key.

    Now that reader ONLY accepts Private key 1 and Private key 2, no longer accepting cards from a public key,
    effectively locking out ALL cards except those with your own private key.

    Basic Datasheet here :
    http://hidcorp.com/pdfs/products/irg_us.pdf

    List of all iClass docs here:
    http://hidcorp.com/page.php?page_id=27

  5. Re:Proximity vs RFID on New Controversy over Black Hat Presentation · · Score: 1

    I am not a sales person. But in fact the Engineer who sets the sales people straight. But I'll admit, I did comment using my standard sales approach, meaning, giving too much information, is like not giving enough. You are right, proximity cards, whatever technology are RFID. I did not specify this, because many assume when they hear RFID nowadays that we are talking about Active tags. I used that assumption to make my point.

  6. Re:I assume it reports random numbers on New Controversy over Black Hat Presentation · · Score: 1

    Actually, it captures the Card number from someones card if you bring it within a few inches of that card.
    Retains the number, and spits it back out.

    Reporting random numbers usually wouldn't work, as many access control systems will disable the reader after a pre-configured number of invalid attempts.

    As well, if this system is monitored, invalid card reads would litter the screen of an operator or guard station.

    Your other points about adding more layers of security are all dead on though.

  7. Proximity vs RFID on New Controversy over Black Hat Presentation · · Score: 5, Informative

    The article and this guy on the video seem to be confusing RFID and Proximity (125khz).

    Its really odd to hear them mention you'd need to bring the card up to 2-3 inches to the reader, when they keep talking about RFID.
    Its clearly proximity.

    Also the fool on the video mentions this as if its new, numerous websites mention how to do this and have for years.

    Proximity has its draw backs and EVERYONE knows this.

    Which is why HID HAS addressed it with new products. HID iClass readers. 13.56mhz, with Encryption between the card and the reader. After 2 roll-overs of public to private encryption keys, you no longer can just read the card with any reader you actually need to know the private key.

    So:

    RFID not what they are talking about.
    RFID /= Proximity
    RFID should not be used for access control (unlocking doors from 5 feet a way... seriously...)
    Proximity vulnerable (nothing new)
    HID iClass (13.56mhz proximity with Encryption) HID has a solution (makes me wonder why they never mention it though...)

    Disclaimer: I don't work for HID, but I'm a Sales Engineer for an Access Control company and we use HID readers or our own which are also Proximity.

  8. Re:Canada looks better and better on Bush Claims Mail Can Be Opened Without Warrant · · Score: 1

    Thats because 70% of the Canadian population LIVES in the east.

    I don't see why its such a tragedy that 70% of the Canadian population gets more representation than 30%.

  9. Re:Utopian expectations on US Citizens To Require ''Clearance'' To Leave? · · Score: 1

    "The US university system is *by far* the best in the world."

    You obviously know absolutely nothing about other countries university systems.

    One example being Montreal.
    Concordia University
    McGill University (World Renowned)

    These 2 aren't Ivy leagues, do not cost an arm and a leg (probably just as much as your local community college) and have some of the best curriculum's and have equal if not higher standards in almost all programs than your most popular universities.

    This is not to mention Europe. Which has some of the best education programs around. Another example being Geneva.

  10. Re:I think we can all agree... on UK Companies Love IT Workers, Love Not Returned · · Score: 1

    Indeed, which by your meaning, also implies, intelligence is pre-existing to education, and not a result off... the later.

  11. Re:I think we can all agree... on UK Companies Love IT Workers, Love Not Returned · · Score: 1

    Education is about knowledge, not intelligence.

  12. Re:The best thing about BG on Battlestar Galactica Resurrection Effort Described · · Score: 1

    I beleive they used the computer systems on the planet surface to help plot their trajectory in 12 mins instead of 12 hours.

    Doing so required them to leave themselves open to a cylon cyber-terrorist attack. =)

    Hence why they setup all the firewalls and such.
    As soon as they had the computing done, he did unplug the wifi underneath the desk no less, by pulling 4 plugs.

  13. Re:Mistake in numbers on Britain to Pilot GPS Speed Governors · · Score: 1

    Though I somewhat agree with your general idea, I think those statistics and all the numbers you are quoting are pulled straight out of your buttcheeks.

    80km/h 100% risk ?

    I should be dead then, right ?
    100km/h, 180 degree spin, then flipped on top, into the woods, and slid for 15 yards barely missing a few huge trees.

    Car was totaled, me and my passenger where 100% ok, not a damn scratch. Car was banged up bad, but the frame held solid to protect the passengers inside.

    Im not saying this to condone speeding or not, I just cant stand numbers pulled out of thin air.

  14. Re:Glass roof? on Darknet: Hollywood's War · · Score: 1

    I agree. But the DVD player would have to get to that building right ?

    What if the firmware was programmed to hold on to the last position it managed to triangulate.

    It would be a good guess that the DVD player would still be in the same area.

  15. Re:judicial activism? on Decriminalizing File Swapping · · Score: 1

    hmm, how did that get in there?

    Though if I was in the US (Canuck here), I might agree to a Judicial system reboot =)

  16. Re:judicial activism? on Decriminalizing File Swapping · · Score: 1

    Actually to be fair, part of what you said is true, in the sense that, when a Judge is making new interpretations of a law, or making a ruling on a new law for the first time I beleive that is whats called Judicial Activism. Or basicaly when a judge is trying to change the law, but twisting its interpretation.

  17. Re:judicial activism? on Decriminalizing File Swapping · · Score: 1

    Actually, the US perspective is exactly the opposite of what your saying. The Judges interpretation of the law sets precedence. Its what you we call Jurisprudence (Case Law). In the US, judges are strongly bound by previous case law, meaning the "intepretation" of the law, by previous judges almost dictates future cases outcomes. Nothing is 100% official, but if your ruling is different than a previous judges ruling you better have a DAMN good reason for it. In Civil Law, or even the french Criminal law, Restarting Subsystem Error Not able to start Message server Server will shutdown. The judges have more to rely more on the law itself. They have to try and interpret it as closely as possible to what the INTENTION of the law was. In the end, what your saying regardless if its in the US, Canada or France, is wrong, mainly because if what you said was true, we wouldnt NEED judges. Judges are they to try and apply the law to the best of their and their peers understanding. If that wasnt the case, police would input evidence into a slot machine, input crime and sentence and/or fine would come out on a piece of paper!!!

  18. Re:Frances is just damn sore ! on Decriminalizing File Swapping · · Score: 1

    Ignorance is bliss isnt it ?

    The French are great with Electronic music:
    Daft Punk
    Air
    Jean-Michel Jarre

    Movies:
    Luc Besson:
    The Messenger: the Story of Joan of Arc (1999)
    The Fifth Element (1997)
    The Professional (1994)
    La Femme Nikita (1990)
    The Big Blue (1988)
    Unleashed (2005)
    Taxi (2004)
    The Transporter (2002)
    The Truth About Charlie (2002)
    Kiss of the Dragon (2001)

    How about American remakes of french movies, because they dont understand french and dont like redubs, doesnt mean they dont like french comedy.

    Three men and a baby
    The Toy
    Taxi
    The man with one red shoe
    Nine Months
    The Birdcage
    The Associate
    Father's Day
    Just visiting

    Americans love french art much more than they'd like to admit. OR maybe its just the ignorant fools that wont admit it.

  19. Re:Why not go to DST permanently? on Daylight Savings Change Proposed · · Score: 1

    ok, still nothing you said explains how 5-10mins extra out of 12 hours could really be much of a problem. Once a year, 10 mins a day for 6 days to shift their milking habits by 1hour. Unless you are 100% sure this would mess them up in such a manor that they would not produce milk for a week I am still very confident they would adapt. Honestly, when I start feeling I need to pee... there is no pain, just a feeling, then pressure builds up until there is pain. But I can certainly hold it in for a while before it starts becoming painfull. Even if I agree that they cows are fickle (I do agree, I have no reason not to) I still highly doubt changing things 10 minutes at a time, twice a year would seriously disrupt their milk producing.

  20. Re:Why not go to DST permanently? on Daylight Savings Change Proposed · · Score: 1

    [i]But since this is about DST, we don't shift 10 minutes every day for six days prior to the DST change. We do it all at once.[/i] Because the time shifts over night, does it mean you cant shift your milking time gradually over the period of 1 week (6 days) ? The sunlight has NOTHING to do with the milking time. And since you have no experience with the cows (I dont either, but Im accounting for natures ability to survive) you are presuming nature cannot adjust, which is a big assumption. If some cows where milked at 5am and some others at 5:45am how did they determine that ? Ask each cow what time he prefers ? Let them discuss between each other until they come to a consensus on the milking order ? Im sorry, but you are assuming cows are machines with a limited set of options. They are living things, that can adjust, and they will adjust to even drastic changes. All it takes is a procedure to do it gradualy and it shouldnt affect them much.

  21. Re:Why not go to DST permanently? on Daylight Savings Change Proposed · · Score: 1

    I dont buy that you cant gradualy shift their milking time by 1 hour.

    10 mins everyday should do it.

    And dont tell me thats impossible. Before automatic milking with machines, people did them by hand. Did they milk all 50 cows at once ?

    Give me a break, thats the poorest excuse Ive ever heard. Cows dont have digital clocks.

  22. Re:Stuff doesn't happen over night on World of Warcraft Shatters Sales Records · · Score: 1

    Though I agree there are massive lag problems in populated servers and areas, for the populated areas lag can be cut in half and more by having the proper amount of RAM. 512mb in this case just doesnt cut it, in large areas like Ironforge or Orgrimar you will experience the situations you mentioned. Uping that to 1g or halfway beteween 512-1g ram, will fix or help TREMENDOUSLY.

  23. Re:Spoliers! on Car Hacks & Mods for Dummies · · Score: 1

    C'mon.

    Have you seen a Hyundai Accent with a HUGE aluminum spoiler, driving around town with a "wheelie bar" lately ?

    Didint think so.

    Its not because 10 NHRA professional drag racers with TUBE FRAMES and fully built FWD cars have huge spoilers and wheelie bars to compensate for those spoilers that its not a stoopid idea for all street driven FWD cars.

    Honnestly, a Type-R spoiler... is fine, not all that practical, but fine.

    An aluminum spoiler on a street FWD is useless without a proper front spoiler/splitter, to keep the front of the car down as well.

  24. Re:Reality check people... on Nissan Exhibits IEEE 1394-Compatible Car · · Score: 1

    Sequential transmissions for the general public are nothing like sequential transmissions with a DogBox and straight cut gears found in race cars.

    If they where, it WOULD be a big deal.... but it isnt. Your right though, seems they are trying to take control away from the driver :(

    Oh and also the Silvia S15's 6speed transmission is weaker than the previous 5speed. It does have a cool factore, but definately not worth the money.

  25. Re:Because without the loophole (MOD Parent Up) on Spitzer Takes On Record Industry Payola · · Score: 1

    The grandparent obviously did not read the chart he posted. It shows a CLEAR downward slop of listeners.

    Even just looking at 2 numbers, 98 and 2003, you can see the decrease. And if you follow the trend for all years in between, its a slow downward slope.