Slashdot Mirror


User: Dr_Barnowl

Dr_Barnowl's activity in the archive.

Stories
0
Comments
2,799
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 2,799

  1. Re:FUD on Shmoocon Demo Shows Easy, Wireless Credit Card Fraud · · Score: 2

    The CVV1 is on the stripe, the CVV2 code is not on the stripe - it's the second code on the signature strip.

    In many countries in Europe, it's mandatory to provide the CVV2 code for authorization of "cardholder not present" transactions. Online retailers that don't ask for it now make me nervous.

  2. Re:FUD on Shmoocon Demo Shows Easy, Wireless Credit Card Fraud · · Score: 4, Insightful

    Untrue ; waiters and cashiers will eventually get busted by data mining - you just need to correlate the transactions that pay for food and note the common location, then go through their time cards.

    Whereas with wireless, you could collect the data in a location not covered by security cams, and transmit it, encrypted (how ironic) to avoid detection, to another location where payments are processed. A crowded subway car would be ideal - people are not going to be using their cards, and it's the ultimate in cultured anonymity - everyone goes out of their way not to notice anyone else.

  3. Re:Yes on Ask Slashdot: Does Europe Have Better Magazines Than the US? · · Score: 1

    2006 numbers (WHO) are more like USA - $6,719 ; France - $3,420

    So still about the same ratio, but a lot higher now.

  4. Re:no 5th? on US Judge Rules Defendant Can Be Forced To Decrypt Hard Drive · · Score: 1

    It's possible, because there obviously is meaning there, but in an ideal cryptosystem the entire volume should be indistinguishable from random noise - empty space and remnants of deleted files should have the same entropy.

    So ; it's better than nothing. It certainly introduces more reasonable doubt than just a single volume.

  5. Re:Hadn't noticed before, but yes. on Ask Slashdot: Does Europe Have Better Magazines Than the US? · · Score: 1

    There were always gaming magazines with playable demo disks

    For a time, UK games magazines would also cover mount disks with a full game. Some of the games I played most avidly were acquired this way.

    Then the European Leisure Software Publishers Association (ELSPA) got together and made them stop doing it. I think that particular pact runs to this day ; it may have weakened in the face of free games you could download anyway, but you won't see a full game on the cover of a magazine in the UK anymore, unless it's the client for a subscription game with a limited trial code.

  6. Re:Competition in print, too on Ask Slashdot: Does Europe Have Better Magazines Than the US? · · Score: 1

    Yeah, but Rupert Bloody Murdoch is a global phenomenon now, just like all sociopathic corporate entities. We should be thankful that he provides a convenient figurehead to focus all of our ire on News Corporation. Who do you hate at Nestlé? Or Monsanto? For once we get a reasonable picture of the corporate direction unfiltered by PR flacks, and for that, we should be grateful, as well as hateful.

  7. Re:Some disagreements in recent history on US Judge Rules Defendant Can Be Forced To Decrypt Hard Drive · · Score: 1

    provide a decrypted drive

    Which doesn't currently exist, because the plaintext was never anywhere but RAM. They are ordering you to work to *create* evidence that could incriminate you.

  8. Re:Opening under duress on US Judge Rules Defendant Can Be Forced To Decrypt Hard Drive · · Score: 1

    Alas, they'd probably take a photo of an apparently ritualized arrangement of Skittles, but I do like your thinking. My mother-in-law would probably destroy my encryption password on a weekly basis though.

  9. Re:no 5th? on US Judge Rules Defendant Can Be Forced To Decrypt Hard Drive · · Score: 1

    So they are asking for evidence that doesn't exist? It's not like a safe where the papers are inside ; encrypted data doesn't "contain" the plaintext. So they are asking you to create evidence that may incriminate you by providing the means to transform that pseudo-random data into plaintext.

    I believe the point the GP is making is that if your pass phrase is "I killed Colonel Mustard in the library with a cryptography-grade spanner while trying to get his password", and that it's true (or plausible) then that itself serves as potentially incriminating evidence and is thus covered by your 5th amendment rights, but good luck explaining that one to the judge.

    You are effectively destroying the evidence every time you save plaintext to an encrypted volume, so I suppose they could charge you with that.

  10. Re:no 5th? on US Judge Rules Defendant Can Be Forced To Decrypt Hard Drive · · Score: 5, Insightful

    TrueCrypt doesn't have a "burn the data" password, because that would be pointless - firstly, any digital forensics person worth their salt will make a bit-for-bit copy of your data to a separate storage device before working on it, and secondly, you're likely to attract additional criminal charges for attempting to destroy evidence.

    What it does have is a "hidden volume" system - it can store a second volume hidden in the freespace tail of the first. Because encrypted data looks random, it's easy enough to peg a volume as being encrypted, but it's virtually impossible to be sure that there isn't a hidden volume in the freespace at the end.

    You have two pass phrases ; one for the first volume, where you keep stuff that could be construed private or slightly embarrassing (tax returns and *legal* porn, or photos of your naked wife, etc) to make it believable, and one for a second volume, where you keep your dastardly plan to conquer the world.

    You put up a sufficient amount of resistance to giving up your first password to make it look convincing. "None at all" is an option - that way you look like a hopeless amateur cowed by the almighty power of the state. You do not give up the second password, or give any hint that there might be a hidden volume.

  11. Re:Talk or else! on US Judge Rules Defendant Can Be Forced To Decrypt Hard Drive · · Score: 1

    Obligatory paper on assassination politics ; only relatively sophisticated enemies of the people hate crypto because of this one though.

  12. Re:There would be no healthcare crisis in the U.S. on The Problem With Personalized Medicine · · Score: 1

    The flipside is the high import tariff on cane sugar, which has it's roots in politics, and trade protectionism.

    It's astounding how politicians go on about the invisible hand of the market solving everything*, and then putting it in handcuffs. Sugar import tariffs being one of those things. If the domestic price of sugar in the USA wasn't double the global price, HFCS wouldn't have ever gained the foothold that it has, and perhaps corn farming might have been replaced by some more productive use of the land (maybe switchgrass or one of the other feedstocks that the biofuel guys say actually provide a decent return).

    * note that I am not one of these people, but I am pointing our their hypocrisy.

  13. Re:ACTA bad, Piracy good. on EU To Sign ACTA Later This Month · · Score: 1

    It appears to boost...

    • Anime DVD sales
    • Sales of songs and albums online, as well as music subscriptions
    • (and fewer physical CDs, but this was supposed to be a report about online sales).

      There's also evidence to suggest that piracy can really help the little guy :

      Piracy trumps obscurity .. so it's not all black and white. These were all picked off the first page of a search for "piracy boosts sales", so your Google-fu is indeed weak.. or your heart just isn't in it

      It is difficult to get a man to understand something when his job depends on not understanding it.
        Upton Sinclair US novelist & socialist politician (1878 - 1968)

  14. Re:Wow, you are stupid on Ubisoft Has Windows-Style Hardware-Based DRM For Games · · Score: 4, Interesting

    Sony put Linux on the PS3 solely to avoid EU taxes that apply to consoles, by pretending that it's a general computing device.

  15. Re:Smart boxes not TVs on Ubuntu TV: Coming Soon To a Living Room Near You (Video) · · Score: 1

    There are already HDMI dongles that are small enough to just hang out of the port, powered by a standard USB 5V, that are powerful enough to run Linux.

  16. Re:Answer, in brief: on Can NASA Warm Cold Fusion? · · Score: 4, Informative

    Erm, no, you used 1000W, for an hour.

    You used 3600 x 1000 Joules, or 3.6MJ

    You don't measure total energy in kW - Watts are always a unit of power, the rate at which energy is used.

    Adding the h means "for an hour" ; it's a way of expressing energy in units that people understand - because their appliances are rated in terms of their power consumption, it's easier to think about what they consume if left on for an hour. "3.6 megaJoules" doesn't mean much to most people. "Leaving your hairdryer on for an hour" does.

    Saying a battery is a "10kW" unit makes no mention of it's capacity - only it's possible power output (10,000 Joules per second). The battery can run, say, 10 hairdryers, or three modern kettles, but it might only be for a few seconds. or it could be a million years. A 10kWh battery tells you that it holds 36MJ of energy, enough to run those kettles for an hour, but it says nothing about whether that battery can release that energy fast enough to boil the water.

    0.5c per kWh is indeed a bargain, even if it's just raw heat. But the whole "reverse engineering proof" thing really doesn't raise my opinion of Rossi or his alleged technology.

    If this thing is real, it's a revolution. It has the possibility to produce world peace. People fight over perceived differences in wealth. Energy is the root of all modern wealth - one of the reason things are getting so fraught is that energy (specifically fossil fuel) is getting harder to come by. Reducing the cost of energy by an order of magnitude could usher in a new era of peace. The guy would probably win 2 Nobel prizes. Instead he comes out with petty crap like that, revealing that he's just in it for the money. Being a genius doesn't preclude you being a materialistic ass .. but most of the materialistic asses I'm aware of ain't geniuses.

  17. Re:Solitude, privacy & military-industrial com on Introversion and Solitude Increase Productivity · · Score: 1

    The buzzphrases are just justifications to avoid dealing with the fact that walls cost money. Some of them may believe their own schtick, some may not.

  18. Re:MS Taking Aggressive Steps Against MALWARE On A on Microsoft Taking Aggressive Steps Against Linux On ARM · · Score: 2

    Firstly, yes, we would bitch at them. Just because you have double standards for your preferred OS doesn't mean everyone else does.

    if they were using grub2 as a bootloader, it would also be against the license - GPL3 forbids you to Tivoize.

  19. Re:Whatever happened to passphrases? on Passwords Not Going Away Any Time Soon · · Score: 3, Interesting

    I just realized that my bank must be doing this (or at least using reversible encryption) because it uses the whole positional character schtick. Damn.

  20. Re:CAC still uses passwords on Passwords Not Going Away Any Time Soon · · Score: 1

    Estonia managed it (for government purposes).

  21. Re:Whatever happened to passphrases? on Passwords Not Going Away Any Time Soon · · Score: 5, Informative

    The stupid part is that the limit on the password field is just a piece of UI.

    If they're doing it right, they're storing a hash of the password. The hashes are all the same size. You should be able to carry around a USB device that emulates a keyboard and types out the declaration of independence (without using enter) and use that as a password.

    Systems that limit the password to, say, 13 characters bug the crap out of me, because I often chose passwords that are longer.

    Systems that limit the password size because they are storing them as plaintext, should of course have their source printed out and ritually burned.

  22. Re:So, why is it called Windows, then? on Windows Admins Need To Prepare For GUI-Less Server · · Score: 5, Funny

    I always think that when I see their new command line product

    Microsoft Powers hell

    Oopsie, another misplaced space.

  23. Re:this is amazing... on Geek Tool: Slashdot Video of Award Winning 3D Printer From CES · · Score: 1
  24. Re:But wait. on Geek Tool: Slashdot Video of Award Winning 3D Printer From CES · · Score: 2

    Someone did imagine ; The Diamond Age includes this scenario - all the replicators ("matter compilers") are linked to a network and under heavy DRM. The most successful economic groups control the matter supply (ink cartridges / 3D printer spools / tiny nano-legos). The major plot arc surrounds an attempt to obtain a small scale, self-replicating (on the macro-scale, no grey goo) matter processing technology, in preference to the vast, centralised, proprietary matter processors owned by a few powerful groups.

    While there is poverty in the proposed world, it's not as bad as it is today - there are kiosks in the street where you can obtain basic clothes and foodstuffs, thermal blankets, etc, for no charge. What poverty there is remains the result of an oligarchy controlling centralised production systems.

  25. Re:Level of detail on Geek Tool: Slashdot Video of Award Winning 3D Printer From CES · · Score: 1

    World of Warcraft ran a promo to get your avatar printed by a ZCorp 3D printer ; the resolution quoted in the video is 1/100th of an inch - which coincidentally is the same as the 0.25mm quoted by a sibling poster.

    They aren't 28mm models.. but if it's good enough for Warcraft, maybe it's good enough for Warhammer. Of course, Games Workshop will start demanding DRM for STL files...