Slashdot Mirror


User: GPLDAN

GPLDAN's activity in the archive.

Stories
0
Comments
807
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 807

  1. Re:Brave New World on Zimmermann, Encrypted VoIP, and Uncle Sam · · Score: 1

    TMM,

    The Narus software that Klein blew the whistle on (the stuff with AT&T), can decode nearly every well-used VOIP codec out there. I suspect that it was being used, heavily. I would imagine that the NSA has calls using VOIP software from lots of IP addresses they were looking at.

    The irony is, that the old fashioned circuit switched network with channelized circuits, it would be a massive engineering effort to tap and do voice recognition on every call. It would be nearly impossible given the way circuit switched calls work. But VOIP scales the problem out to a problem of CPUs and disk. And those are effectively infinite for a government that can spend whatever it wants. Iraq is closing in a trillion. A few billion bucks, and huge HVAC units and you can look into millions and millions of calls simultaneously with todays technology. I expect that it is happening already. Anything told to us about what isn't happening has turned out to be false and proven so.

  2. Know how it works... on Zimmermann, Encrypted VoIP, and Uncle Sam · · Score: 5, Informative

    Phil took an open source VOIP client and added encryption to it. By his own admission, he doesn't know much about how to make VOIP work well, codecs and all that. But his encryption is very clever. It uses Diffie-Helman to generate a per-session key, which is stored in a completely volitile way. i.e. it is destroyed after the call terminates and cannot be retrieved (stored in memory which is then overwritten). So, even if a man (or government) in the middle records the RTP stream and then gets a search warrant to get the key to decrypt the call, it won't be there.

    Look for his techniques for peer to peer key setup, which again is very clever and well thought out, to be used in a variety of new ways. I expect you will see a bit-t client soon that can also generate this one time session key between peers. It will be much more computationally intense than what you see bit-t clients like Azureus do to the CPU now, but no more than using S/FTP. Well, maybe more, because of the number of keys being setup and destroyed and the memory allocation needed in a swarm situation. But for peer to peer calls, it's strong and I expect that Phil, who was nearly bankrupted by Uncle Sam, trying to defend himself, will again be the NSA crosshairs. The guy is just a warrior, what can you say? Guys like him and Klein who blew the whistle on AT&T are the ones fighting for privacy and against a police state. And they will not be treated kindly by this administration.

  3. Re:Dude! on CNN Sits Down With Linus Torvalds · · Score: 1

    I took a look at the picture of Linus on the CNN link. I was like "whoa". It's sunny in California, somebody buy him a bike. Not to throw stones from a glass house, but Pizza is not its own food group.

  4. I hope Phil Zimmerman doesn't like London on UK Law May Criminalize IT Pros · · Score: 1

    I guess ZFone is right out then. Dynamic encryption key set up by using Diffie-Helman on a call by call basis with an unknown peer using no pre-shared key (PSK). A dynamic way to make VOIP untappable. Even with the incredible tools that the NSA uses from Narus Networks and optical splitters to assemble profiles on every conversation and protocol used by a given source IP address. (The Narus tools used by the NSA can decode all major codecs). Assume your Vonage calls are on a hard drive somewhere.

  5. BotNets: The thing that bestows power on Blue Security Gives up the Fight · · Score: 1

    If the spammers didn't control botnets that had tens of thousands of zombies under their control, then they wouldn't be empowered to bring such power to bear. The power to spray packets at people they don't like. The answer? Kneecap the botnets. And there is serious work underway to do just that. If you know anything, then you know what is going on to quell bot replication. There are companies and consortiums and the domestic US law enforcement agencies like the FBI get more international cooperation than you think.

  6. Lemme relate it to the UNIX geek world... on Americans Not Bothered by NSA Spying · · Score: 1

    How many of you are doing some sort of logging, or in charge or have charge over security? Firewall logs? An IDS? Maybe Websense or SurfControl for a little content filtering?

    Now... maybe you work for a company. RIght to work, company pays you they own you, etc etc. But... not all of you do. Some of you work for the government. Some work in education. Do you have the right to see these logs? Should you record the websites that students and government employees visit? Well. What if you suspect a break-in, or fraud? You have access to the VOIP system, can you correlate the call log? Start playing Columbo? If you proxy outbound SSL as I do, is it ok to go look at any financial transactions the employees made? Maybe a bank deposit? Maybe putting something they stole up for sale on Ebay? Is that ok?

    These are all rhetorical questions for the most part. Most of the slahdot crowd isn't going to be well enough versed in privacy laws to know where the boundaries lie in the public sector. It's meant to make you consider the challenge the FBI and NSA face in an open society. Without log analysis of some sort, there are just too many ways to coordinate activities too easily that are untraceable. Cells are able to set up shop and use communication methods to coordinate precise and deadly attacks. Look at the bombs in Spain on the trains, all detonated with cellphones. What are they supposed to do? How would you try and catch these guys if you didn't employ log collection? Eventually, the bad guys will go to encryption, but the src and dst endpoints of calls/packets/carrier pigeon messages will always reveal important patterns.

    Nobody values privacy more than I. The trick is congressional oversight, and using the principles of democracy correctly. Subverting FISA and taking knowledge away from the legislative branch of government, making laws un-applicable so that the judicary is compromised, and concentrating all the power in the executive branch with covert teams that have no checks isn't going to help. They need access to the log data, they just need some way to keep it from being abused against political dissidents. It's already started, it's been shown that this administration has looked into the files of their political rivals so the slope is already greased up and the slide has begun.

  7. Re:Romero (of all people) misses the point entirel on More Oblivion Re-Rating Fallout · · Score: 1

    I'd mod you up if I wasn't going to respond. He goes on to say that all the game files will be encrypted. Yet another area he doesn't understand. This guy truly is non technical, and Carmack really was the brains, huh? Where does he think the symmetric decryption key will be? Maybe in the .exe? And if you obfuscate that using a fuzzer, then you just have to go get it from memory once it gets used.

    That is not how game designers will respond, anyhow. It makes their development much harder for no real payback. Mods help. They'll just add language to the EULA that makes it a violation to modify or customize any element of the install directory. And they won't even do that - look how many copies of Unreal Tourney 2K4 that Red Orchestra sold, plus a lovely taste of the standalone product. Nobody is going to do that, they just need to get it straight in the courts and Romero needs to control his kneejerk idiocy. The guy is becoming Derek Smart.

  8. Re:Will it play this way? on The Future of the Internet · · Score: 1

    I do not get it. Sorry.

    Let me simplify, then. Packet switched networks do not work the same way as circuit switched networks do. The cumulative effect of applying QoS to a packet as it traverses your part of an IP network, when you do not know what the other networks are doing to the packet, invalidate assumptions about transit and would inevitably break networks. The only way to insure this does not happen is to work with other network providers and create a system of classification that everyone can agree upon, lest the VOIP carriers of the world get destroyed. And once that happens, once providers get together to set standards for IP protocols based on destination IP address, that is called collusion and price fixing and is illegal. Better?

  9. Re:Will it play this way? on The Future of the Internet · · Score: 1

    Then they would lose their "common carrier" status, a fate VERY few of the big boys would willingly risk.

    Perhaps, then, you should edit the Wikipedia entry of common carrier, since you have it right and they have it wrong.

    Then they would either breach their contracts with those on either side of their chunk of network, or they would voluntarily transmit less data over time, thereby making less money for that traffic.

    What contracts are you specifically referring to? Perhaps you also should look up the meaning of cartel on wikipedia.

  10. Will it play this way? on The Future of the Internet · · Score: 5, Insightful

    Do this: Traceroute to your favorite sites. Understand that traceroute is no longer the tool it once was, ICMP ttl-exceeded messages are not always handled, and you aren't seeing things like paths over MPLS where there are tags that created switched paths across the net. But... it's the best thing the end user has, unless your broadband provider or ISP disallows it.

    On average, how many carriers did you cross? What would happen if a carrier started using Class-Based Queueing techniques just across their sections? What if they started creating tariffs, quotas, import fees of classified "bulk traffic', or started using the differentiated services model at internet peering points? I'm not talking about rate-queues and other things that guys on NANOG routinely do now, I'm talking about corporate sponsored refusal to carry types of traffic.

    A complex system of MPLS paths based on traffic types would result, BGP tags would get processed to have implied meanings (i.e. AT&T won't carry my SMTP messages unless they are destined for email servers in the AT&T network) and on the whole, it would get pretty messy.

    Now, the economic result of this would be that carriers would set up trade barriers to each other, not unlike nations do. And the net-net would be... market consolidation. How could it not? The small ISPs and regional carriers would eventually fall prey to larger groups who would create mutually beneficial arrangements to carry traffic and create cartels to approach the major websites, esp. the search engines, and demand that they pay up. Google would need to pay into formed groups like "the Consolodated Tier-1 providers of North America" to allow broadband users to reach Google services.

    The end result would be the fragmentation of the internet. Large parts of it would be unreachable from certain parts of the world. And that's over and above national firewalls like the Chinese have, this wouldn't be censorship - this would just be business. The board at AT&T now has the technology to really implement differentiation, and now they want to use it. To make money, at the expense of content providers and value-add information sites. I don't see how that is a good thing.

  11. How aboutthe Frenchman? on The Forgotten Apple CEO · · Score: 2, Insightful

    Jean Louis Gassee sounds like a more interesting character in the Apple saga. An outrageous Frenchman who wore leather pants and was completely power mad. I love the stories of the infighting as well, as Gassee and others would rip Sculley behind his back and then deny it to his face.

    Gassee really screwed up trying to develop his own RISC processor and his DRAM debacle showed him the door.

    How come this type of biography seems only to be available for Apple? What about Cisco or Microsoft? Is anybody doing an inside blog of the cutthroat politics of Google? When they announced a Dutch Auction for their IPO, Wall Street practically launched a smear campaign against the company to protest their lack of first dibs. I bet that has some great stories behind it.

  12. Re: "OLIGARCHY" on Republicans Defeat Net Neutrality Proposal · · Score: 1

    In fact, you are quite correct. I meant oligopoly, which is entirely different. An oligarchy refers to a form of government.

  13. What AT&T has said on Republicans Defeat Net Neutrality Proposal · · Score: 5, Insightful

    THe chairman of AT&T has openly lamented during hearings that he gives websites like Google a "free ride". To his mind, Google is a service that should be paid for. That Google needs to apportion a percentage of its revenue into a general fund, because AT&T doesn't sell bandwidth to Google, but carries a lot of Google traffic. He specifically used Google in his example.

    That's called revenue sharing, and you know who does stuff like that? Sports team owners. They divide up the revenue from tv rights equally, despite teams representing unequal market share. You know what the big ISPs want? They want that. They want to see Microsoft and Google, and anyone else THEY deem to provide some essential function to the net to pay into a revenue sharing pool.

    You know the only time a free market can allow something like that to happen? When you have a oligarchy. And that's what the big backbones providers want. They want to consolidate the market, and start putting tarriffs in at peering sites. They want to exert influence outside the carrier market, and they see QoS as the first step to getting down the slippery slope. Pretty soon, some carriers decide to de-prioritize packets to Google. Maybe Google works, maybe it's really really slow. The internet routes around failure, but it DOESN'T route around a transit carrier who decides to fuck with the traffic en route.

    The Republican mindset has only one edict: Corporate self governance. Regulation, in nearly any form, is bad. THey see liability law and tort reform as key, so airlines can crash and not have to pay the passengers settlements. And they certainly want to reign in the FAA to stop "burdening" the airlines with all those expensive safety checks. Same with ISPs. You watch and see, nobody is stopping the oligarchy and now the carriers like Level 3, AT&T and others are going to collude and force a revenue sharing scheme. Next up: national firewalls. The reason Cisco and Google and others only got a slap on the wrist when censoring the Chinese nets, is that the US republicans want to see how well it works first and then start putting it in here under the guide of the Patriot Act.

  14. Re:Finally! *My* chance to be an angry Lunix zealo on Linux Five Years Away From Mainstream · · Score: 1

    Whoops. One mistake in my last post.

    I modified /etx/X11/xorg.conf and fixed my scan rate problem to get 1600x1200 AFTER I had to do this:
    http://www.uberdose.com/journal/archives/2004/12/1 1/ubuntu-and-nvidia-geforce-6600

    I'm thinking most average users would have given up a LONG time ago and never got it working. Luckily, the great oracle of Google pulled me through.

  15. Re:Finally! *My* chance to be an angry Lunix zealo on Linux Five Years Away From Mainstream · · Score: 1

    Well, now that I have it running - I like it.

    The reason why my mediaplayer didn't work was a sound issue. I also couldn't figure out why RealPlayer wouldn't spawn.

    I figured it was related to my Microsoft Digital Sound System 80 USB Sound system. It appears that was it. Although the sound system worked fine under fedora, it didn't here. But after I found driver support for it, and got it running, I had this problem:

    http://ubuntuguide.org/#configuresoundproperly
    Luckily, the technique there fixed it.

    My NVIDIA card did not work correctly, and running the shell script from init level 3, and getting it configured - and then STILL not having work because I didn't have a base scan rate in xorg.conf to match my Sylvania monitor so I had to make one, which took my about 4 hours to figure out why it wouldn't go past 800x600, and now - after all of this - finally haviong WMV support for Mozilla and all the tools working like Eclipse that I want to code with... now... ok, it works pretty good and I like it. It does some wasteful things I had to tweak to get turned off, like run cupsd for printing and syslogd. Xorg sits memory resident at about 45M, and javaw runs at a whopping 80. Compare that to XP's java runtime and explorer.exe footprint. And, now that I have native Nvidia drivers loaded and have the desktop with virtualization (something the XP powertools will give you, btw) it runs good - but it's a bit slow on refresh. I optimized Mozilla but clicking through tabs has a noticeable laggy nature.

    Still, I'm glad to be free of Microsoft. I can use GNUCash now to manage money, and a host of other tools I am much happier to work with, not the lease of which is the fact I have a bash shell, gcc and g++ on my desktop machine.

    But let's not pretend this is fun, or that XP lacks package management (.msi) or that I am completely off base.

    Having said all that, I am happy here and am leaving my home server on Ubuntu. Your bafflement baffles me.

    Oh, I think you're wrong on Valerie Plame as well. Anyhow...

  16. Re:It's happened to me... on ESR Gets Job Offer From Microsoft · · Score: 4, Insightful

    I don't doubt it. Tech recruiters don't work for the company they are recruiting for, are often sloppy and in a rush, and usually not that bright. What they are good at, is social networking.

  17. Re:GCC 4.01 on Mozilla Firefox 1.5 Beta 1 Released · · Score: 1

    Is there somewhere where I can use apt-get and update from?

  18. Re:Finally! *My* chance to be an angry Lunix zealo on Linux Five Years Away From Mainstream · · Score: 4, Insightful

    I think it's really important to distinguish from Linux the server platform and Linux the desktop platform, as you say. I run GNOME from an Ubuntu distro on the desktop, and it's.... pretty good. But it's not XP. No Quicktime or WMV plugin means a lot of websites like CNN and Yahoo don't really work well. Xine is ok for DVD content, but overall it's a bit slow and uses more resident memory than what I consider an equivalent XP system does.

    Linux as a server has arrived, and has been here for awhile.

  19. This was begun in 1969 on International Call for Open Standards · · Score: 3, Funny

    Title: Host Software
    Author: Steve Crocker
    Installation: UCLA
    Date: 7 April 1969
    Network Working Group Request for Comment: 1

  20. Re:The most sought after Iraqi domains... on Iraq TLD In Legal Limbo · · Score: 2, Funny

    Gotta run with it....

    chronicles-of-ridd.iq
    mensa.iq
    sub100.iq

  21. Re:Lack of Suckers on Online Gambling Running Out of Steam · · Score: 4, Interesting

    How many people need to tell you what is happening before you catch on? Unlike the poor, uneducated masses that line the slot machines at many casinos, once a rat is seen online - people leave in droves. Information moves at the speed of light, and online casinos can turn from full to empty in minutes, not days. Nobody goes on benders or tilt online.

    Wired splits the fucking scam right down the middle in their expose.

  22. Re:As soon as I can figure this out.. on Microsoft Windows Media Player Encryption Hacked · · Score: 2, Funny

    Turns out.... Kathleen was his laptop.

  23. If the research is done by Derek Smart, then what? on Scientist Says Most Scientific Papers Are Wrong · · Score: 1

    If the researcher is Derek Smart, then there is a chance the research ITSELF isn't just wrong,/i>, it DOESN'T EXIST!

    http://en.wikipedia.org/wiki/Derek_Smart

  24. Re:Boo, fucking, hoo on Google's Turn To Be The Villain · · Score: 1

    What are you capable of? Mach 3? Mass Murder? A stirring rendition of 'China Doll'?

  25. Re:Article ignores crackdowns on legal card counti on The Tech Used to Catch Vegas Cheats · · Score: 1

    Articles like the parent and your comments make me wonder why anyone wants to go to a Casino. I just do not get it. Vegas is full of fun things to do, without playing games of chance that are orchestrated to take money from you.

    Off the Strip games will be where the players you talk about should go then, maybe back room poker games or such.