Slashdot Mirror


User: dutchwhizzman

dutchwhizzman's activity in the archive.

Stories
0
Comments
1,369
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 1,369

  1. Re:The basic design flaw: key recovery... on Hackers Steal Keyless BMW In Under 3 Minutes · · Score: 1

    I didn't read TFA, but I know what is the real problem. You can't tell BMW "this is the new key", but the BMW tells you what the new key is. You can then program the new key on the spot and it doesn't even needs to be activated. There's 10 plaintext passwords in the BMW, for all possible keys that computer is ever going to be talking to.

  2. Re:Problem and Solution on Hackers Steal Keyless BMW In Under 3 Minutes · · Score: 1

    No, it's not the case. BMW just stores passwords on keys and stores the same passwords unencrypted in the car's computer. BMW keys could only be bought preprogrammed from BMW themselves, until someone in China found out how they worked and started selling blank keys and copying equipment. How naive can you get?

  3. It's not about OBD on Hackers Steal Keyless BMW In Under 3 Minutes · · Score: 1

    It's about being stupid enough to store plain text passwords for all the 10 possible keys for the car in the car's memory.

  4. No, it is as bad on Hackers Steal Keyless BMW In Under 3 Minutes · · Score: 1

    The private keys that validate the proper "electronic key" is used, are plain text stored in the car's computer. Some cheaper than $200 chinese tools that are readily available can read those private keys and program a $50 or less replica blank electronic key with those private keys. That is all that is needed to drive off with your brand new "high tech" BMW.

    There are several tricks to get inside the car, some not publicly known ones seem to make it possible to do so quickly without having to force anything. The best known one is to jam the keyfob frequency so careless owners will not lock the car and not check for the indicator lights to blink. In many countries "chirping" is illegal and most owners don't press the button until they have already turned their back to the car and are walking already.

    I'd say that is pretty bad, considering that it's just as easy to steal a modern $100.000 BMW as it is to steal a 35 year old Dodge.

  5. Re:That's an improvement... on Hackers Steal Keyless BMW In Under 3 Minutes · · Score: 1

    Not really. Traditional locks combined with electronics made the thief had to circumvent 2 problems. Especially on 10 year old European cars, ignition barrels weren't very easy and could well take over 10 minutes to "crack". If you had to do that and replace a computer, you'd be looking at 10+ minutes exposed. This is a less than 3 minute job with no damage to the car at all and nothing showing to the police that the driver had just stolen the car.

  6. Easy solved on Hackers Steal Keyless BMW In Under 3 Minutes · · Score: 1

    They just up the premiums for BMW cars by 200%. Yes, true figure in the UK. Imagine how screwed you are owning one of these BMWs. Can't pay insurance, it will get stolen and nobody wants to buy your car because it's probably stolen already, will be stolen soon and even if they don't steal your car, the insurance will steal your money and then not pay out "because it's a known problem and you didn't put on extra security" or some lame excuse.

  7. One more thing on Steve Ballmer: We Won't Be Out-Innovated By Apple Anymore · · Score: 2

    Make your product the coolest there is and make no compromise to compatibility with previous products.

    Then support that product for it's entire lifecycle, including real updates. If you drop support for phones sold less than a year ago that run your current latest telephone OS, you will never get anyone to believe your product is worth spending 150% of the competitors price on. You can't have your cake and eat it too, if you drop support for older hardware, make sure the older hardware has served it's purpose and is probably worn out as it is.

    Make sure your product only comes in one or two flavors. How many versions of windows are there again? There's 4 versions or so of 2008R2 server, 7 or so of windows 7? Just make "server" and "desktop" and give them the same name and API. Put some server centric apps on the server and desktop centric apps on the desktop, but the OS API should be uniform amongs the two versions.

    Make sure there is a "support" that just gives support for that machine. Again, 2 options, desktop support and server support. Nothing more, nothing less.

    People like the simple proposals that don't give them more chances to pick the wrong option. How frustrated do you think your customers are when they get told that their "genuine" windows version doesn't have that feature that their neighbors or work PC has and not only that, since they bought OEM they should get support from their vendor and not MicroSoft? Really....Stop coming back for a glass of milk when you already got the cookie. if you want more, charge a whole cake in advance and then just give people what they want for the cake in return without telling them no after they already paid.

  8. Re:Speculation vs Investigation on Criminals Distribute Infected USB Sticks In Parking Lot · · Score: 3, Informative

    No, it's investigation. It's not just one stick, it were multiple sticks with the exact same contents on the parking lot at the same time. Yes, that sounds as clumsy as it is.

  9. Net Neutrality and all that on TIME DotCom and Facebook Invest In Massive Undersea Internet Cable Project · · Score: 1

    Even if it wasn't for making money on the cable by providing access to others and charging for it, they'd have a large argument why others shouldn't be charging them for access to their consumers. It's the same as having a patent arsenal if you're into software. You won't enforce your patents, if others won't enforce theirs. By owning part of the global infrastructure, you have a successful weapon against (other) Tier-1 TelCos charging you an arm and a leg.

  10. Re:Investing in wireless on TIME DotCom and Facebook Invest In Massive Undersea Internet Cable Project · · Score: 1

    Latency would absolutely suck if you were to be bouncing off satellites. That wouldn't be a viable option for interactive traffic, no matter how much bandwidth you would be getting.

  11. will it have? on AOL: Outdoor Server Huts Are the Future · · Score: 1

    Will it have a door with a heart shaped hole cut into it? How about a horizontal board about 2 feet from the ground with a 1 foot hole in it?

  12. There are no after work beer meetings. on Ask Slashdot: Old Dogs vs. New Technology? · · Score: 1

    Yes, that's what they'll tell you, there are no after work beer meetings. But every office has them. If they tell you they don't exist, they just don't want to hurt your feelings.

  13. FF3.6 vs FF13 on Mozilla Downshifting Development of Thunderbird E-Mail Client · · Score: 3, Informative

    You are comparing Firefox 3.6 and 4.0 (both out of even long term support) to last years versions of Chrome and IE and complaining about RAM usage? Sure, 3.6 or 4 is an old memory hungry beast that's slow at javascript and whatnot. You should be comparing the latest version before whining. Not that I particularly like Firefox's RAM hunger, but this is just plain unfair whining about something that's had major improvements the last year.

  14. Helping people? on Apple-Motorola Judge Questions Need For Software Patents · · Score: 1

    Most of what drug companies make doesn't really help people, it just has a statistically proven effect to lessen some of the symptoms of some disease. I'm not saying all medication is snake oil, but the more promotion a medicine needs, the less it usually helps people or fills a niche that is not already filled by other medications. I think that most of the promotion money spent by big pharma is actually to promote medication that already has competitive products that are just as functional, or for medication that does not really cure anything important.

  15. Hardly, I'd say the RedHat way on Ask Slashdot: How To Get Old Commercial Software To Be Open-Sourced? · · Score: 1

    Google releases a very small percentage of the code they buy up, compared to RedHat. Both do keep some of the code behind, but RedHat only does that for enterprise management tools, they throw everything else in open source. Google keeps their whole search engine, filesystems, Linux distro and stuff we don't even know exists in closed source.

  16. Male cow manure on Linux Played a Vital Role In Discovery of Higgs Boson · · Score: 1

    Brush up on your hardware. The latest generation x86_64 supercomputing grids have much faster IO and memory bandwidth that the latest generation SPARC boxes/grids have.

    SPARC is just as suitable for realtime as x86_64. true realtime is in the programming, not the IO. Counting cyles for every operation you program to make sure you know where each bit is at any cycle during the running of your program is true "real time". Practical "realtime", like what you are talking about is something completely different. That works because your load never exceeds your systems limitations and is just a matter of sufficient overkill on your hardware selection and carefully disabling every cron job that gets in the way of your limits. That too can be done on any machine and has nothing to do with SPARC or not.

    Last but not least, only the sampling of the data for the LHC is "real time", the calculations are done later.

  17. Re:Smart but not nice on China Begins Stockpiling Rare Earths, Draws WTO Attention · · Score: 3, Informative

    It's not as if there is no other source than Chinese land for those minerals. DeBeers just buys all the diamond mines to get a monopoly, China can't do that with rare earth mines, so that won't happen.

  18. Whatever you do on Ask Slashdot: How Do I Stay Employable? · · Score: 1

    Whatever you do, do not go looking up the receptionists address in the records, so you can send her flowers when she's having a bad day. Also, make sure medicare covers a second opinion. You don't want to be diagnosed with a brain tumor that you don't have.

  19. But.... on Is Being In the Same BitTorrent "Swarm" Equal To "Interacting"? · · Score: 1

    But....You wouldn't download a car? Also "shady dealer" is a pleonasm.

  20. Re:License and registration please? on Arizona H-1B Workers Advised to Carry Papers At All Times · · Score: 1

    I'm fairly certain I can get a drivers license while visiting on a tourist visum. Once that expires, I'm no longer legally in the USA. Also, the tourist visum prohibits me from working in the USA, but the drivers license might help me get more fake IDs and eventually, assume an identity that will get me a SSN. Even without an H1B, fake IDs or SSN, I could be doing contract work and simply bill in my home country and pay my taxes there.

    Conclusion: that drivers license is a pacifier, once you stuff it in the cops mouth, he'll stop crying, but he won't get his milk.

  21. why not SQL on the POS? on Ask Slashdot: Low Cost Way To Maximize SQL Server Uptime? · · Score: 2

    I've seen pretty nifty windows based POS systems that had the SQL server start on each POS, look for a master and if there was one already, try and be slave. If that failed, it would just fail and try to become slave every few minutes. Apart from that, the POS software would just connect to the master-of-that-moment. Once the master went down, the slave would promote itself and the fist POS that tried then became the slave. All POS terminals that were up would constantly replicate database files/dumps/backups whatever so they would never be too far behind the master. I don't know how this mechanism worked exactly, but it was pretty resilient against little restaurant accidents and power glitches.

    I Wouldn't want to directly advise to go cloud. If your uplink dies, so does your POS system. You could put backups in the cloud to prevent theft or arson destroying your accounting and books, but I'd not trust a single uplink high latency service with your primary business myself. Even if you get business quality lines with a proper SLA, you still can be down for half a day easily and pay hundreds of dollars per month for just the single uplink. Getting two independent uplinks with this kind of SLA will be so prohibitively expensive that you could easily afford to do your own cluster for that kind of money.

  22. Re:How useful is Office, really? on Microsoft Phasing Out Office Starter Edition · · Score: 1

    It's useful for medium sized mailings (merging), document revisions where multiple people work on it consecutively, working in company templates and making graphs and forecasts and such. Sure, for each of these things there is specialized software available that will do it better than the office suite. The reason why it's there and why it's so ubiquitous is that it's there and "everyone" can use it.

    You start with a simple document, decide you want feature X that you haven't used before and it's there, in the software already. Never used pivot tables, but it's all you need to do what you want in the spreadsheet that already has your data? Learn pivot tables and you don't need to convert your data to another application. Want to send the same letter, personalized, to 100 people? Learn how to merge your address book with the text processor and you have just saved yourself buying and learning a mail generating and printing solution.

    What really surprises me is the popularity of the presentation software in these bundles. Without exception, their layout facilities are at par with banner mania on MS-DOS PCs, their graphic editing tools are worse than the average 5 year old with a box of crayons can achieve and their text/font capabilities are thwarted by the same banner mania software. If it wasn't for the funky slideshow with effects, there would be absolutely no practical use for those applications whatsoever.

  23. Re:Can they get rid of that shitty OEM trials too on Microsoft Phasing Out Office Starter Edition · · Score: 1

    If it bothers you that much it's called format it and do it yourself

    You lose your warranty on the software if you do that. Since it's an OEM version, MicroSoft doesn't support it, only provides updates and calls it Genuine, but you can't get a support contract on it or even call them for your "three free calls" or however much it is these days. If you buy a retail license or get a volume license as a company, then only do you get support, but only if you install that windows version. Mind you, if you decide to go that way, the hardware vendor won't support your driver problems, unless you get a separate support contract for that.

    Damned if you do, damned if you don't. Now what was it about linux and support again?

  24. Restricted license on Microsoft Phasing Out Office Starter Edition · · Score: 4, Informative

    You 're not allowed to do commercial things with that. Why would I need office for home use? No, I'm not a student, so what exactly do you propose to do with it?

    Send a letter to my sister congratulating her with her birthday? Put all my recipes in a spreadsheet (after all, it's a database, right?). Maybe make a presentation so I can convince my girlfriend it's better to watch sports on television tonight than Jersey Shore?

    Keep in mind that many companies already have a license where it's legal for their employees to run full office at home and that many charities get a "free" license from MicroSoft so their volunteers can use it. There isn't a lot of situations left where you would actually have to buy a license if you really wanted to use MS Office and not be able to do so already, or use the Starter Edition, or Libre Office. Only there the "Home" license would be required.

    Oh, now I see, you want to use full blown Outlook because you like the features (I despise it with a vengeance myself). Sorry, that's not in Office Home, you need to buy the full package for that

  25. Re:1000? on Gigapixel Camera Catches the Small Details · · Score: 1

    Your math, flawed it is.

    Also, it's not the megapixels that count, but the field of view and the details captured. Most of that is in the lens and the combining of the sensors.