Slashdot Mirror


User: Ash-Fox

Ash-Fox's activity in the archive.

Stories
0
Comments
7,748
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 7,748

  1. Re:Why in hell would I want this? on Google Is Finally Making Two-Step Verification Less Annoying (theguardian.com) · · Score: 1

    Hell all they now need is to get hold of your smart phone

    Oh, how will you unlock it?

    steal not only your Gmail

    I have a Google account, but I don't have gmail.

    I'll stick with the simple text message and enter it into the website instead of allowing my phone to simply be tapped to confirm.

    If my e-mail is somehow compromised regardless, I could unplug the server?

  2. Re:Wish this standard were open... on Google Is Finally Making Two-Step Verification Less Annoying (theguardian.com) · · Score: 1

    I wish this were open source

    It is open source, https://github.com/google/goog...

  3. Re:You still need a phone for this? on Google Is Finally Making Two-Step Verification Less Annoying (theguardian.com) · · Score: 1

    I don't have a phone! Can't you buy some rolling key fob somewhere and register the code with them?

    Yes, you can use the FIDO Universal 2nd Factor (U2F) fob.

  4. Re:Electronic payment through untrusted devices on Interviews: Ask Security Expert Mikko Hypponen A Question · · Score: 1

    I live in the Netherlands.

    Oh, Nederlands. Well I have known for a fact that Mastercard does have pre-paid cards there (I was looking to move there back in 2001 and I was quite aware of these back then).

    Unsurprisingly, looking at it on Google, I found a fair few results on such cards. The security on pre-paid items tend to be quite poor. The trick is, you want to use something like a pre-paid gift card as they do not have a name associated with the card it self, so you're able to make payments with either any name, or a name you came up with out of nowhere during registration.

  5. Re:Electronic payment through untrusted devices on Interviews: Ask Security Expert Mikko Hypponen A Question · · Score: 1

    I don't live in the USA.

    Neither do I.

    It's not possible to buy a prepaid internet card at a gas station or at a supermarket where I live.

    I didn't talk about "Internet cards".

    What more would you like to know?

    Your location.

  6. Re:Electronic payment through untrusted devices on Interviews: Ask Security Expert Mikko Hypponen A Question · · Score: 1

    Sorry, too little information to help.

  7. Re:Why do people claim security... on Interviews: Ask Security Expert Mikko Hypponen A Question · · Score: 1

    You do know WebRTC leaves the fucking data channel wide open once you accept Video and Audio channels, never once asking for authorization?

    Yes, I did read the document I linked which mentioned session hijacking. As I said, it's been tested.

    You do know WebRTC has a nasty habit of allowing IP addresses to be revealed?

    If you were concerned about concealing your normal provider's IP address, why would you not be using a network wide VPN? You can practically discover someone's publicly routable IP address in so many different ways. The webbrowser alone makes it easy. Being online and assuming someone nefarious doesn't have your publicly routable IP address is a false sense of security, especially since the entire range is being brute-forced continuously by worms.

    But ignoring this, if you look at Google's implementation, they're pushing all traffic through their TURN server. So the issue is already resolved with a implementation change on the hosting provider's side without breaking the specification which solves this. Also, unsurprisingly, the document I linked even includes some of this information!

    So, you going to call "TempDog" now? That's all it takes!

  8. Re:Electronic payment through untrusted devices on Interviews: Ask Security Expert Mikko Hypponen A Question · · Score: 1

    Buy a pre-pay Visa/Mastercard from a gas station.

  9. Re:Some clarification is needed. on Mattel Sells Out Of 'Game Developer Barbie' (cnet.com) · · Score: 1

    Sadly the Twitter search engine is shit, but you could start with her interview on Slashdot:

    Not the grand parent here. I read through it, end to end... To be quite frank, I saw nothing here that was particularly technical and this was on a site for an actual technical crowd... I'm disappointed.

  10. Re:SJWs to the rescue! on Mattel Sells Out Of 'Game Developer Barbie' (cnet.com) · · Score: 1

    The SJW thing appears to be an artificially created meme

    Could you describe to me what a organically created meme is and how this is different?

    I would also appreciate it if you could describe after that why we should care if it's an organic or artificial meme too and then why we should care about memes at all?

  11. Re:"stay up late writing code" on Mattel Sells Out Of 'Game Developer Barbie' (cnet.com) · · Score: 1

    More importantly, working more hours does not equal more output. Once you get past 45 or so hours/week, you're doing less, not more.

    My experience varies. I was definitely doing more work and getting a project moving faster when I was doing 100 hour work weeks verses 50.

    Longer hours do not make you more productive, and can in fact have the opposite effect: You'll get less done

    I found if my work is time sensitive and I can get things deployed, configured and running as soon as they're ready, they're done sooner and therefore more work is completed as a result of that.

    When I was able to produce a work output through a constant stream that didn't have time sensitive points when I could or couldn't work, I found that less was more.

  12. Re:Why do people claim security... on Interviews: Ask Security Expert Mikko Hypponen A Question · · Score: 1

    ... while they're using untested and not standardized (hell, not even Version 1) protocols? Example, Discord using WebRTC and claiming it's secure.

    WebRTC testing in Chrome? There, some testing? Or did you want some security testing of WebRTC? Seems tested to me?

    It's using DTLS to handle encryption which is fairly standardized and provided by every most multi-purpose encryption libraries out there.

    Is this another of your stories? All you have to do is call "TempDog", that's all it takes!

  13. Re:Completely fucking pointless! on Microsoft is Working On Software For The Legal Marijuana Industry (theverge.com) · · Score: 1

    Son, do you not remember who the owner of #foxie was on FurNet?

    Yeah, I do.

    Anyway, give your "TempDog" a call, that's all it takes after all. I don't know why you're wasting time, just make the call.

  14. Re:You look like a gentleman open to the ... unusu on Microsoft Open-Sources 'Checked C,' A Safer C Version (softpedia.com) · · Score: 1

    So, your "interest" in writing in "C" is knowing the "machine code" that is likely to be produced by the "compiler".

    Well, let's be honest, assembler does not have the nice fancy IDEs you can get with C (even if you're not using their fancy compilers), the language isn't so simple that you have to write out entire loop code. It is low level enough that I can write micro-optimizations and understand more or less what the compiler is going to produce.

    So yes, my preference for using C is for this particular scenario typically.

  15. Re:You look like a gentleman open to the ... unusu on Microsoft Open-Sources 'Checked C,' A Safer C Version (softpedia.com) · · Score: 1

    It produces C code, so you can know the machine code that is likely to be produced by the C compiler.

    Yeah, but I'm not going to write 100 different variations in nim to get it to produce the C code I want to get it translated to machine code.

    If you know what machine code your C code will become, which I find quite hard, due to modern optimizations.

    I'm writing low level C code, which doesn't have much room for optimization honestly and I like to do my own micro optimizations (and trust me, a compiler can't optimize some things the same way a human can, take a look at path walking in the Linux kernel for an epic example).

    It would take some learning and experience, and one would have to weigh this against the advantages nim offers, of which the checking described here ist only one.

    Sadly, things like bounds checking and malloc handling aren't always the most efficient and sacrifice performance; which isn't always in the interest of the project one works on.

  16. Re:Those... on Microsoft Open-Sources 'Checked C,' A Safer C Version (softpedia.com) · · Score: 1

    You apparently haven't looked at the output of C compilers recently.

    I tend to avoid C++ compilers that are branded as 'C compilers' for C and the C compilers I play with are pretty sane with a couple of switches.

  17. Re:Better get used to it... on Microsoft Open-Sources 'Checked C,' A Safer C Version (softpedia.com) · · Score: 1

    And it uses syslinux as the bootloader.

    I wasn't actually aware of syslinux being used for the bootloader.

    And critical parts are written in assembler (back to square one!) and literally the assembler code is just tacked into the final OS in place of C' functions (like a macro replacement).

    I thought the critical low level parts were written in X# (which is very assembler-like)?

    And Cosmos pretty much only works in VMWare and doesn't even have a single hardware video driver

    I definitely ran Cosmos off a flash drive before on actual hardware. As for video, I wonder if your reasoning is true or just another matter like, lack of interest.

  18. Re:Those... on Microsoft Open-Sources 'Checked C,' A Safer C Version (softpedia.com) · · Score: 1

    Those that do not understand Rust are doomed to reinvent it. Badly.

    Is the Rust language low level enough to know what the machine code will be produced from the language at a glance?

  19. Re:Better get used to it... on Microsoft Open-Sources 'Checked C,' A Safer C Version (softpedia.com) · · Score: 3, Informative

    As yet, nobody has made an OS that isn't C at the bottom.

    Pretty sure a lot of operating systems used Assembler at the bottom in the early 2000s. Now, I think they're pretty flexible, like:
    https://github.com/CosmosOS/Co...

  20. Re:You look like a gentleman open to the ... unusu on Microsoft Open-Sources 'Checked C,' A Safer C Version (softpedia.com) · · Score: 1

    My interest in writing in C is knowing the machine code that is likely to be produced by the compiler. How does this apply to "Nim"?

  21. Re:Completely fucking pointless! on Microsoft is Working On Software For The Legal Marijuana Industry (theverge.com) · · Score: 1

    Come on, Khyber! Call this "TempDog"! After all, that's all it takes !

  22. Awww, is Alex getting owned again?

    Alexander Peter Kowalski? I haven't seen him here recently.

    You really are a stupid little man.

    And why is that?

  23. Let's see how Khyber plays out first. I know that wwofly and Cecilia still have copies of those logs too.

  24. Untrue. When it first came out, it only supported 2000 and XP.

    That's just an initial release, not what it was meant for.

    Oh, look, I see an option to go back SEVERAL MONTHS.

    Oh look, you didn't logon through a new device like I told you. By the way, I can reproduce this perfectly on OS X El Capitan and Windows 10.

    I can prove you're an untrustworthy and petty fucking shit if you want to get into that nonsense.

    Oh, irrefutable proof? Please, proceed.

    All it takes is calling TempDog for the logs where your ass hijacked my IRC account

    Please, call this "TempDog".

    for the logs where your ass hijacked my IRC account

    That sounds pretty interesting actually, please proceed and retrieve these logs and post them along with the information that links it to my person.

    " I can't even see half of my group chats on the Linux client"

    THAT DOES NOT SOUND LIKE PROPER LINUX SUPPORT.

    I can't help it if Skype is fundamentally broken.

    Real computer users do the checking themselves.

    Why do you think I use Telegram for chat instead, where it actually works properly across all devices? lol, silly.

    So, given almost the entirety of your bullshit has been shown to be incorrect, the only reason your ass responded to me was as always to try to denigrate me.

    No, if you look at my posting history, I almost always respond to everyone who responds to me. You could have spent the "two minutes" it takes to check that, but you didn't before making accusations, as always.

  25. Well, that's your problem for trying to use Linux. Skype was never meant for it in the first place.

    Indeed, Skype wasn't meant for Linux particularly, it was meant for all major platforms, including Linux.

    It syncs everything just fine for me.

    I highly doubt that. Login on a new device and try going back more than a month on a non-cloud chat.

    Windows XP and Windows 7 computers.

    Interesting point, I'll address this in a moment.

    It works perfectly fine here

    I genuinely suspect you're making up stories, much like your whole whole super secret IPv6 IRC network that had furry musicians on a domain that wasn't registered and you couldn't even provide a IPv6 address to connect to (I still have those IRC logs).

    I don't know what you're doing to screw it up besides using outdated unsupported clients.

    Sorry, all the clients and operating systems I use are supported.

    Now your Windows 7 support ended on 1/13/2015 and Windows XP support ended on 14/04/2009.

    Now, maybe in theory, you running outdated, unsupported systems may work well, but considering how Skype actually works, I doubt it really does and I have no interest in running outdated, unsupported systems.