You are certainly right that the "socialist" model (although it is more "infrastructure" in nature) does not enforce accountability either. But the capitalist model actively discourages accountability, as ripping off the customer maximizes profit. And you miss one extremely important factor in education: Personal integrity of the educators. In the "infrastructure" model, they can compete on quality, in the capitalist model anybody insisting in quality will be eliminated as a cost factor.
1. It is completely unknown whether anything truly random exists in this universe. I fully agree with you.
2. Profiling has advantages and disadvantages. To get the best results you will do both: Profile everybody and then add some randomly selected ones. As the TSA does not try to do actual security, they are happy with random only, something every actual security expert knows is not going to cut it.
Look at reverse-breakdown noise in a storage oscilloscope with bandwidth > 100MHz. Individual tunneling events are visible as you get a randomized saw-tooth. True, that are not individual electrons tunneling, but individual avalanches caused by individual electrons tunneling. A bit similar to what a photo-multiplier or a Geiger-Mueller tube gives you, but a _lot_ cheaper.
As to getting a good distribution, no physical system can do that. That is why anybody competent feeds the noise to a CPRNG instead of using it directly.
Interesting. Do you encrypt the output or put it through a keyed hash? Or are you using little enough randomness that attacks become too hard? I would have expected a CPRNG being the minimal requirement, though.
Depends on the language. Some use MT19997 and that is pretty good and still fast (not directly suitable for crypto though). And as soon as you have a crypto-library, you will get a CPRNG that is a lot better than what is needed here even if it is pretty bad, because of the low number of bits used.
There is absolutely no need for "true" random (whatever that is, the physical processes called "true random" are actually "we have no clue how it works, but we have a statistical model"). CPRNGs (Cryptographic Pseudo Random Number Generators) are entirely fine for this, because they are not predictable, unless you have the full state. Nobody needs "random" for this application here, non-predictable is entirely fine. As to seeding, a few precisely timed button-presses on start, a seed file from the day before and just timing whenever a new decision is asked for gives you a good initialization without problem.
In fairness to the government, they are trying to delay the inevitable realization by the masses that there is no perspective for them and the inevitable collapse that will follow.
It really is no surprise at all. Happens to traditional universities all over the planet as well: As soon as they think they can get rich on tuition or money from the state, they try to enroll as many students as possible and then waste their time with education quality going down the drains. An excellent example for a field where capitalism does a lot more harm than good.
He cannot as even drug-related prostitution is only a small faction. Most doing it are just women (and some men) thinking it provides a decent paycheck given their skills.
Interestingly, evidence from western countries where prostitution is legal, says exactly the opposite: Almost all prostitutes are free agents working for themselves. Ones that are forced into the trade by others are so exceptionally rare as to be virtually non-existent.
That is a tired old lie and has no connection to the facts. The only thing this myth serves is to justify sticking it to the prostitutes and to justify state-sponsored violence against them. You are vile.
Completely irrelevant. This is not a legal question. It is technological, and crypto implementers have a strong moral duty to not give access to anybody that does not hold the key as otherwise their product is fundamentally defect.
The stupidity of people that think that the law trumps actual reality is staggering.
I don't think so. The FBI certainly put the idea there for the wider population, but they just needed to wait for a useful idiot like this to come along.
The son may have had some reasons for that. Also, this father is denying himself access by his past actions, or rather lack thereof. That is how crypto done right works.
The appeal itself is just pathetic and attention-whoring. The most guilty party is the press though. They should not help anybody disgracing themselves publicly this way. This is hugely unethical.
Indeed. In the security field you often cannot protect people from their own stupidity. You can warn them, but if they ignore these warnings and lose their passwords or fail to prevent recovery access, then they have screwed themselves and that is it. The alternatives (offering broken, backdoored crypto) are much, much worse.
Most people act emotionally, with zero understanding of the issue at hand. That is disastrous and the main reason why democracy does not work (everything else that is known works even worse though), as it makes them extremely vulnerable to manipulation.
The simple fact of the matter is that unless some account sharing was requested by the customer and set-up before the data-loss, crypto needs to prevent this type of access or it is broken. If Apple can do anything, then they were selling a defective product.
This is grandstanding by stupid. Some attention-whoring obviously included.
Slashdot Mirror
Google has bought a lot. But whenever they tried to create anything themselves, it fizzled. Makes you wonder what fundamental mistake they are making.
You are certainly right that the "socialist" model (although it is more "infrastructure" in nature) does not enforce accountability either. But the capitalist model actively discourages accountability, as ripping off the customer maximizes profit. And you miss one extremely important factor in education: Personal integrity of the educators. In the "infrastructure" model, they can compete on quality, in the capitalist model anybody insisting in quality will be eliminated as a cost factor.
Two comments:
1. It is completely unknown whether anything truly random exists in this universe. I fully agree with you.
2. Profiling has advantages and disadvantages. To get the best results you will do both: Profile everybody and then add some randomly selected ones. As the TSA does not try to do actual security, they are happy with random only, something every actual security expert knows is not going to cut it.
And if you do that, you get higher-order non-random behavior. Seriously, it is known how to do this right.
You have not. You may have misunderstood how those TRNGs worked though.
Look at reverse-breakdown noise in a storage oscilloscope with bandwidth > 100MHz. Individual tunneling events are visible as you get a randomized saw-tooth. True, that are not individual electrons tunneling, but individual avalanches caused by individual electrons tunneling. A bit similar to what a photo-multiplier or a Geiger-Mueller tube gives you, but a _lot_ cheaper.
As to getting a good distribution, no physical system can do that. That is why anybody competent feeds the noise to a CPRNG instead of using it directly.
The $1k thing is for idiots. Unless they do whitening, it _will_ have bias. Reverse-breakdown noise feeding a CPRNG is by far enough.
Interesting. Do you encrypt the output or put it through a keyed hash? Or are you using little enough randomness that attacks become too hard? I would have expected a CPRNG being the minimal requirement, though.
Depends on the language. Some use MT19997 and that is pretty good and still fast (not directly suitable for crypto though). And as soon as you have a crypto-library, you will get a CPRNG that is a lot better than what is needed here even if it is pretty bad, because of the low number of bits used.
There is absolutely no need for "true" random (whatever that is, the physical processes called "true random" are actually "we have no clue how it works, but we have a statistical model"). CPRNGs (Cryptographic Pseudo Random Number Generators) are entirely fine for this, because they are not predictable, unless you have the full state. Nobody needs "random" for this application here, non-predictable is entirely fine. As to seeding, a few precisely timed button-presses on start, a seed file from the day before and just timing whenever a new decision is asked for gives you a good initialization without problem.
This is a _solved_ problem.
In fairness to the government, they are trying to delay the inevitable realization by the masses that there is no perspective for them and the inevitable collapse that will follow.
It really is no surprise at all. Happens to traditional universities all over the planet as well: As soon as they think they can get rich on tuition or money from the state, they try to enroll as many students as possible and then waste their time with education quality going down the drains. An excellent example for a field where capitalism does a lot more harm than good.
That would require some understanding of numbers. He obviously does not have that.
"Estimate", my ass. "Guesstimate informed by religious" fanaticism is more like it.
He cannot as even drug-related prostitution is only a small faction. Most doing it are just women (and some men) thinking it provides a decent paycheck given their skills.
Interestingly, evidence from western countries where prostitution is legal, says exactly the opposite: Almost all prostitutes are free agents working for themselves. Ones that are forced into the trade by others are so exceptionally rare as to be virtually non-existent.
Please keep your deranged fantasies to yourself.
That is a tired old lie and has no connection to the facts. The only thing this myth serves is to justify sticking it to the prostitutes and to justify state-sponsored violence against them. You are vile.
Indeed. And now we see why Facebook actually bought Occulus.
Completely irrelevant. This is not a legal question. It is technological, and crypto implementers have a strong moral duty to not give access to anybody that does not hold the key as otherwise their product is fundamentally defect.
The stupidity of people that think that the law trumps actual reality is staggering.
On the more technical side the moral duty of any crypto-architect and -implementer is to those that have the key, _never_ _ever_ to anybody else.
This father may have as well burned the photos and than made his appeal.
Crypto done right _must_ cause full data loss when the password is no longer available. Anything else is a severe flaw.
However, I doubt the phone is bricked. I expect a factory reset at full data-loss (including the iCloud account) is possible.
I don't think so. The FBI certainly put the idea there for the wider population, but they just needed to wait for a useful idiot like this to come along.
The son may have had some reasons for that. Also, this father is denying himself access by his past actions, or rather lack thereof. That is how crypto done right works.
The appeal itself is just pathetic and attention-whoring. The most guilty party is the press though. They should not help anybody disgracing themselves publicly this way. This is hugely unethical.
Indeed. In the security field you often cannot protect people from their own stupidity. You can warn them, but if they ignore these warnings and lose their passwords or fail to prevent recovery access, then they have screwed themselves and that is it. The alternatives (offering broken, backdoored crypto) are much, much worse.
Most people act emotionally, with zero understanding of the issue at hand. That is disastrous and the main reason why democracy does not work (everything else that is known works even worse though), as it makes them extremely vulnerable to manipulation.
The simple fact of the matter is that unless some account sharing was requested by the customer and set-up before the data-loss, crypto needs to prevent this type of access or it is broken. If Apple can do anything, then they were selling a defective product.
This is grandstanding by stupid. Some attention-whoring obviously included.