Slashdot Mirror


User: mpapet

mpapet's activity in the archive.

Stories
0
Comments
1,988
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 1,988

  1. Ignoring MITM attacks on Skype Messages Monitored In China · · Score: 1

    Ignoring MITM attacks

    Ignore it at your peril.

    The skype method of providing communication establishes a permanent a man in the middle. Now, they did it in the beginning to provide exceptional voice service by eliminating NAT and other issues. If you have a decent set of networking tools, you will see the number of connections opened by their client far exceeds a similar VOIP compliant call.

    you don't need to trust anything in the middle
    You do need to trust what's in the middle because the actual words/audio aren't encrypted to the server. See below illustration.

    skypeclient1 --- SkypeServices --- skypeclient2

    For those three parties, the voice/text data isn't encrypted. If a bad guy tried to jump in the middle of those three parties after the sessions are created, then yes there is encryption. Any agency would simply listen on the server providing Skype services.

  2. Re:In end-to-end security... on Skype Messages Monitored In China · · Score: 5, Informative

    Except, even IF you could comb through the code, it doesn't mean that at some higher level your security isn't compromised.

    I run a VOIP server and it's ridiculously easy to monitor everything going through it despite a TLS initiated client-server session.

    - Text/sms/etc? In the database.
    - Voice? Easy to keep a listener on the call. Very easy.

    In both cases, there's encryption over the "public wire" but the server's got access to ALL of it. In the U.S., I imagine it's as simple as the NSA visits your CEO and gets full cooperation. CEO tells CTO to cooperate fully with the NSA. All of your communications are now monitored. That is, if the current monitoring at AT&T isn't enough somehow.

    The "simple" answer is to decentralize VOIP. How you find and trust VOIP peers is where that ideas falls apart.

    Another idea is to encrypt/decrypt the data on the client. Your sms would be good to go.. Encrypting the audio portion of the UDP packets would be very problematic. But it would work.

    Running your own communications server is good too. A dumb old P3 with 1GB of ram will run VOIP and mail just fine. In that scenario, you own/control all the parts.

  3. Re:Some genuine news here. on Hikers May Have Found Fossett Items · · Score: 1

    As someone that's hiked that area long ago, when they say The search will begin on the John Muir Trail between Dorothy and Shadow Lakes.

    That is a *heck* of a lot of VERY rugged area above 8000ft and it's not like there's a long snow-free time up there. That they were able to find the wreckage is awesome. That's one reason why we pay taxes people.

    Prior searches focused on land east of the Glass Mountains. Another *huge* area.

    As an FYI, the area has all kinds of omnivores.

    You guys should get out more, especially the conspiracy nuts. It's a beautiful area of our country. If that's too far away, visit a nearby National Park.

  4. They do *something* with the emails on US House Limits Constituent Emails · · Score: 1

    What exactly I'm not sure, but I got a canned reply back from one of my Senators. The Congresswoman and other Senator didn't reply. Call their local office. It may be just as effective.

    After all the fear mongering, the sun came up today and markets traded... No Great Depression 2.0 either. Just banks borrowing from the Fed. The bill isn't needed.

    Bottom Line: the banking system is trying to avoid eating the sh!t sandwiches they never want marked to market and generate some banking fees working for the Federal Reserve. (It's in the bill)

    Most importantly, they want the $700 billion now so that when they have to report losses under GAAP rules they'll ask for (and get) another trillion dollars.

    Banks want the taxpayers to make them whole and perpetuate the asset inflation scheme with $1.7 trillion dollars.

  5. Except on The Stigma of a Tech Support Background · · Score: 1

    So you've been working two years in helpdesk without being offered a promotion?

    In these situations it is very often the case that if it is known the employee is working at some sort of degree, then it is understood they are the equivalent of good temporary help...

    In other situations, there is *never* any intention of moving people off support. I've worked in other departments at large companies where this was explicitly the case.

  6. Mod Parent Up on The Stigma of a Tech Support Background · · Score: 1

    You've been had cheap and people's perceptions are so, so hard to change.

    I was working to graduate debt-free. I succeeded at that, except.... I wouldn't go to a school _I_ couldn't afford. I was in school much longer than four years. Never landed a paying internship because, frankly, there weren't enough hours in the day to work and do well in school. I got huge quantities of consistently bad professional advice from people where the Social Connections of Mom and Dad *were* their enormously successful careers and the Bank of Mom and Dad funded their time between jobs.

    You are on the wrong end of a number of promises that never came true and probably won't ever. You've been had cheaply so you are screwed right now...

    The way I did it when I got done being angry about all of my mistakes, I started working two jobs. One my career, the other dead-end retail. Between the two I made enough to quit the dead-end job 5 years later. The dirt-poor career job is used to develop skills. You'll find the worst of humanity and job conditions when you are paid cheaply. Professional contacts are few and far between. You'll have to fight for every penny in your paycheck and your precious job titles. At this time, don't fall in love. It won't be worth the conflict.

    10 years later you'll be the stronger, much better employee than most of the softies who came up from the Bank of Mom and Dad who will supervise you. Which, coincidentally, keeps you trapped in your position because you are too valuable in your current position. Which, coincidentally allows you to do meet people, fall in love and have a wonderful life...

  7. HahaHa! Intel Will Buy It. on Transmeta Up For Sale · · Score: 1

    First, Intel gives Transmeta the shaft by stealing the best ideas.

    Second, Intel says, "I actually infringed your patents? I'm shocked you would make such an accusation!" Years later... Transmeta finally gets some money after being pounded into the ground by Intel and the law firm they paid to sue Intel.

    Talk about some sad, frustrating working conditions. This would be one of them...

  8. Corrections on State of Kentucky Seizes Control of 141 Domain Names · · Score: 2, Informative

    Given that the biggest gambling Mecca in the western world is in the US (Las Vegas)

    I don't know about that. Native American casinos have far and away outstripped Nevada for gaming supremacy. California appearing to be the biggest State.

    Some other places in the world probably have bigger operations either in construction or complete. http://en.wikipedia.org/wiki/Gambling_in_Macau

    The judicial event in question is odd to say the least. The chances are excellent this one will go a few rounds through appeal. The gaming industry doesn't like attracting attention to itself, so they'll probably let it die at some point to stay out of the limelight. The former owner of the domains will be encouraged to let it go.

    Online gambling isn't seen as a direct threat to location-based operations, but sooner or later organized crime will run that too.

  9. IMAP much? on Windows 7 Trades Email and Photo Apps For Downloadable Ones · · Score: 1

    Cached IMAP is supported in a few clients, Firebird and kmail come to mind...

  10. Follow Up on Complaints Pour In After Digital TV Test · · Score: 1

    All of your ideas may work in your area, but my local Time Warner offers has no ATSC or QAM signals on their $12/mo signal.

    I have two separate ATSC and QAM capable tuners one inside a brand new Sharp HDTV LCD panel, the other a Hauppauge card. The only way to receive HD is by using an aerial antenna. This is particularly vexing for the LCD TV because it will store *only* one set of channels, either ATSC/NTSC or cable/QAM. The hauppauge card and mythtv store the channels so I can switch between NTSC/and ATSC. I still get no ATSC/QAM over the TimeWarner wire.

  11. Please recalculate on Microsoft To Buy Back $40bn of Its Shares · · Score: 1

    Your reasoning is not disciplined.

    Over an extended period stock splits increase market value. Say X's stock sells for $100 then does a 2 for 1 split. Within months the sales price may be $60, a $20 increase.

    you are concatenating two separate events.

    Event 1: Stock spilt. This is designed to lower the price of the stock so it is traded more. The only benefits are passed to the brokerage industry in the form of generating more trading fees. Period. There is financial management fees that the company in question typically spends to perform the split. That's where there is a loss of 2%.

    Event 2: Stock price rises. This happens because investors feel the future of the company is great. NEVER assume one goes hand-in-hand with the other.

    Sure, if you only care for growth sell the stocks.
    The grandparent made clear their desires included watching the value of the stock rise. I think you would agree it won't in the near future. Don't spin this off into a different direction as a way to discredit my statements.

    Buy-backs are an attempt....

    The entirety of your opinions are riddled with exceptions, half-truths and common sensical ideas that have no basis in reality. You need a far deeper understanding of the structure of corporations and corporate charters and far more detailed understanding of publicly traded assets.

    Please, take this as an opportunity to learn more rather than some kind of hostile post.

  12. There's Another Issue Looming on Complaints Pour In After Digital TV Test · · Score: 1

    Preamble: We buy our local franchise's $12/month package. (It's basically UHF+VHF+Cspan) They won't transmit ATSC (ATSC is over-the-air digital) over this service. There appears to be no way to join the cable-NTSC and ATSC signals into a single coaxial antenna.

    With the switch to digital coming, the cable franchise has maneuvered itself into an ideal situation. Get rid of deadbeat customers like us or force them into the expensive DTV packages. The number of customers that will begrudgingly switch to an expensive DTV package will far outweigh the loss of deadbeat subscribers like us.

    Another media conglomerate jackpot!

  13. It's a Dog on Microsoft To Buy Back $40bn of Its Shares · · Score: 0

    When I bought it, it was doubling and splitting regularly

    Yes... well those splits definitely destroy value. Roughly 2% per split goes to the financial firm doing the split. Buy-backs are also a bit of a value destructor too so don't bank on it.

    I'd like to see it earn its keep again for a while before I sell it.
    Common sense should tell you that Microsoft's days of being a growth stock are well behind it. Do not stay married to the stock. If it is not performing *today*, sell it and buy one that you think has a better future. I would recommend some kind of ETF over individual stocks though. Playing the stock market as an average individual is a fools game.

  14. Re:$40,000,000,000 on Microsoft To Buy Back $40bn of Its Shares · · Score: 5, Informative

    Not really. They allocate that much over the length of the project and spend it over a period of a few years.

    This is generally viewed as the company believing they are under-valued. It's a great time to "buy low" so they can sell them later at a higher price and keep the spread.

    Also generally speaking, there's a bit of wealth destruction going on when a company does this because the premium for shares rises over the course of the buy-back.

    It's also worth noting they've increased their dividend so investors are getting impatient with all of the cash they have laying about a couple of different ways.

  15. Mod Parent Informative on Fast-Booting Text-Editor Operating System? · · Score: 1

    I've had to mess about with udev rules and it will do _exactly_ what the parent says it will do.

    Grandparent is wrong

  16. Roll Your Own? on Email-only Providers? · · Score: 1

    Search terms "imap email hosting" delivered a bunch of hits, this being one of the first. http://www.fusemail.com/cost/ Chances are excellent there's a smaller provider and a little hungrier providing the same service a few pages back.

    Otherwise, roll your own. I've got a *great* DSL provider who had no problem hosting my own mail server. (sonic.net) You need a static IP and something as simple as the NSLU2 should do great. http://shop.ebay.com/items/_W0QQ_nkwZLinksysQ20NSLU2QQ_armrsZ1QQ_fromZR40QQ_mdoZ DSPAM + Postfix + Dovecot IMAP and a few hours learning Postfix. At this basic level, it isn't rocket science.

    I've contemplated setting up a service for individuals like yourself, but I don't see what I could provide that's special besides sieve support and overtly supporting Evolution, kmail, and Thunderbird. Any recommendations are welcome.

  17. Bingo! on eBay To Disallow Checks and Money Orders In US · · Score: 1

    It seems to me like PayPal is acting a lot like an introducing broker.

    That's exactly what they are doing and they get some kind of bounty for each customer captured by the scheme. This is not new or unique in the financial world. You could do the same thing with a few hundred thousand active customers.

    Paypal sucks and all of the animosity generated recently is warranted. They utterly failed maximizing value and totally avoided disrupting the payment overlords. Instead, they make it progressively harder to use paypal. It is only a matter of time before whatever market value they have created is destroyed by the seat-warmers and procedure-makers in executive management.

  18. More Corrections on eBay To Disallow Checks and Money Orders In US · · Score: 3, Interesting

    They allow you to move money from your bank account to your paypal account.
    So do any number of gift cards. Sorry. Not a bank.

    They allow you to elect to make payments from your paypal "balance"
    As do gift cards, a positive balance on any given utility, your cable bill, etc.

    They offer a "debit card" that draws from your paypal "balance".
    Any company with a few thousand customers could do the same thing. Visa pays a bounty in the $40/per sale range. It's a Visa product originated by a Visa member bank with an Ebay logo on it. Other than the bounty and providing a logo for the card, Ebay knows nothing and has nothing to do with the branded debit card.

    If someone sends you funds, it goes towards this balance.
    When you pay a bill it does the same thing... Your average utility/store credit card is not a registered bank. They may use something that SOUNDS like a bank, but they do not offer simple interest savings accounts, originate home and business loans, provide business banking services... I could go on and on.

    If they put a hold on your account, they deny you access to this "balance" that is your money.
    This is not banking. I don't care if you think it is, it simply isn't.

    Bottom line: I know Paypal sucks, but they are not a bank. Not even close. You and the informative moderators don't have a clue how it works. Please learn something from this post.

  19. Corrections on eBay To Disallow Checks and Money Orders In US · · Score: 4, Interesting

    Paypal acts like a payment processor, not a bank. They don't have a bank charter among other things. Payment processing regulation is very lax.

    They are a teeeny-tiny player in the payment processing world dominated by hook-and-crook by the Visa association of banks.

  20. Corrections on How the LSB Keeps Linux One Big Happy Family · · Score: 1

    I care more about the standards of the Debian project.

    Which, is compliant-ish, which is about as good as it gets in regards to many industry standards.

    LSB compliance is important. Coincidentally, it makes the experience from one distro to another roughly equivalent. This makes the whole distro universe a heck of a lot less like buying a used car. (I couldn't resist another car analogy)

    Wikipedia to the rescue, Since Debian already includes optional support for the LSB (at version 1.1 in "woody" and 2.0 in "sarge"), this issue evaporates under closer scrutiny (i.e. the end-user just needs to use Debian's "alien" program to transform and install the foreign RPM packages in the native package format).

  21. Arrgh!!! Apple Plunderin' me Treasure on Apple Attempts to Patent Pre-Existing Display Software Idea · · Score: 3, Funny

    Ye landlubbers never seen such a frightful sight as the Flyin Apple on the starboard with the Skull-n-Bones flyin.

    Ay she's a fast ship the Flyin Apple. Her hull like dull silver. No good ever come of her. I've seen her come aboard a ship in the Carribbean and all the crew were turned to shredded paper!

    ARRRRR!!

  22. Kmymoney2 ?? on Trading the Markets With FOSS Software? · · Score: 1

    I'm a "buy and hold on fundamentals" kind of investor, so kymoney2 works great for me. The project could use some work in the reporting section, but it keeps track of our small portfolio just fine.

    http://kmymoney2.sourceforge.net/index-home.html

    Getting more complicated than that is generally out of range for the average individual investor. Sourceforge lists a bunch. Maybe you can find what you are looking for there? http://sourceforge.net/search/?type_of_search=soft&words=finance

  23. More Information on the event... on Human-Powered Vehicle Speed Competition · · Score: 1

    What makes Battle Mountain the place to do this kind of thing is it's the smoothest, flatest road that the local community is willing to close.

    Putting a UCI-class rider in one of those things would be great to see. The speeds would be off the charts. That would be the quickest end to your pro career. Much worse than getting caught for doping.

    Recumbents are without a doubt much more comfortable to ride for most people than the traditional bicycle. Their costs continue to come down too. It's the fact that they don't look like a regular bicycle that scares most people away from them.

    IHPVA is a great group. Lots of new ideas and experimentation going on with slim budgets.

  24. Please, Stop and Think on New York Issues RFID-Encoded Drivers Licenses · · Score: 1, Informative

    Until somebody gets the string of bytes from his own card and figures out that f( his_ssn ) = stream_of_bytes, tries it on a few friends' cards for verification, and then figures out an inverse function.

    Again, you assume you know how this works and rely on Minority Report/V for Vendetta moviethink. When the reality is so completely different I won't bother wasting any more time on it.

  25. Re:You'd be Wrong on New York Issues RFID-Encoded Drivers Licenses · · Score: 2, Informative

    there have been several demostrations of people able to read RFID tags at a significantly greater distance with the right hardware.

    And what exactly will they discover? Some long string of bytes that's all. What do the bytes mean? You watch too many movies where these bytes lead to some impossible story progression.

    Well, obviously the border crossings have a scanner, otherwise what would the point be?

    Are there scanners now? Are they compatible? That's a non-obvious question, but very relevant in the contactless world.

    That's irrelelvant so long as the RFID is optional. And presumably by the time it is not optional, you'll actually *need* that tag in order to do things.

    You make my point for me very nicely thank you. What are these magical uses besides border crossings? Do you understand that presenting the card without rfid functionality will be required at least in my lifetime? Does the State have access to the format of the bytes stored on the card? Again, you watch too many movies.