Slashdot Mirror


User: Timothy1965

Timothy1965's activity in the archive.

Stories
0
Comments
9
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 9

  1. Re:There will be plenty of posts talking about... on Greenland Glaciers Melting Much Faster · · Score: 1

    The only way to stop global warming were for the people of the world to collectively reduce their usage of energy and lower their standard of living. That's a false choice that Cheney would have us believe. Technology for producing the same goods using less energy usually enables lots of other technologies as well. For instance, the west owes its technological advance to energy savings in agriculture. That's what freed us from having to do subsistence farming and allowed us to build software and all.

  2. Credence for FileSharing without P2P Pollution... on P2P Polluter Shuts Down · · Score: 5, Informative
    I use Credence-LimeWire for downloading songs. About five days after voting on some files, it built a decent trust network for me so the top items in my searches are items that other people have voted on as being clean.

    By the way, OverPeer is by no means the only polluter out there. There are spammers who serve the same iPod ad under every conceivable name. Credence marks those as crap and moves them to the bottom of the list, once someone else has voted on them.

    Previous Slashdot discussion on Credence is here.

  3. "Inside Microsoft Visual Studio 2005 Team System" on Inside Visual Studio 2005 Team System · · Score: 0, Offtopic

    Inside? I'd like to remain firmly outside visual studio. Give me emacs and cvs any day.

  4. Re:Stranger and stranger on DVD Jon's Code In Sony Rootkit? · · Score: 1
    Most folks don't review the sourcecode of software they purchase to determine if its license-tree is clean.

    False. This is what the "due-diligence" study at the time of purchase or licensing is all about. Every product that Sony chooses to distribute carries with it a responsibility/liability to ensure that it does not violate the law. This is a pretty clear case where Sony was not sufficiently diligent.

    In general, ignorance (of the law, of the legal violations one is conducting) is a poor defense in court. If company X could get off scot free by saying "but we licensed this from company Y and therefore cannot be liable," then pretty soon all companies would turn into shell companies (e.g. Sony would be licensing and selling products from RealSony, raking in the profits and avoiding liability).

  5. Re:Statist Musical Chairs on Senator Wants to Keep U.N. Away From the Internet · · Score: 1

    There is zero need for for any regulation. The Europeans have a point in that the current design of DNS requires that certain queries be answered by certain nameservers (e.g. ".com", ".net", ".org" and so forth), and it so happens that many of these TLD nameservers happen to reside in the US, where non-US users see large latencies, and where they are subject to US law, only. But there are new systems, like the CoDoNs alternative and safety net for DNS that appeared at SIGCOMM last year, that can solve the problems technologically. CoDoNS enables nameservers anywhere to serve any (crypto-protected) name. And deploying DNSSEC in the meantime would only help make the name system more secure.

  6. Re:Can somebody enlighten me? on P2P Now and Then · · Score: 1

    I use Credence-LimeWire to download content off of Gnutella. Credence weeds out the junk (i.e. mislabeled files, spam, trojans, etc.) and LimeWire delivers the bits.

  7. There is a better system... on OpenID - Open Source Single-SignOn · · Score: 2, Interesting
    There was a recent paper at IPTPS on this problem last year.

    I RTFA'd and OpenID relies on a single host as an authenticator, just like Passport. Sure, you can have many single host authenticators with OpenID (whereas there can only be one with Passport), but at the end of the day, your credentials are only as strong as the security of that one box. Remember all the problems that Microsoft had with authenticating and authorizing Hotmail users? Single hosts make inadequate authenticators. The CorSSO folks fix that problem using threshold cryptography - in CorSSO, an attacker has to compromise a group of different hosts all at the same time to usurp someone's identity, which can be made much harder than compromising a single host in OpenID.

  8. Strong anonymity in a public network... on Dissidents Seeking Anonymous Web Solutions? · · Score: 1

    There are many systems that provide strong anonymity in a public network. These include Herbivore, Crowds, Tarzan, Tor, P5 and many others. Some have even been deployed and used in practice.

  9. Study shows it could be much worse... on DNS Cache Poisoning Spreads Malware · · Score: 3, Interesting
    A group of researchers at Cornell looked at the DNS poisoning problem (article here) and found that
    • many names were vulnerable to DNS poisoning because they depended on lots of nameservers. Some names in some country-code TLDs, like the Ukraine, were depending on 600+ nameservers.
    • some key nameservers controlled a large portion of the namespace. Compromise one of those nameservers, and you can hijack a lot of domains.
    • some crucial names were not protected well. For instance, fbi.gov could be hijacked!


    Easy way to get on the FBI's most wanted list. You try to hijack fbi.gov, and you'll end up on the most wanted list even if you fail.