It is my understanding from reading the paper from the security researchers that SecureRandom() is also perfectly fine as long as the implementation does what it's supposed to. In this case, the implementation was buggy, so instead of 256 bits of state they got 56 bits, or something similar. Bits were discarded that shouldn't be.
Judging the book by the cover, it looks like someone thought this new cool programming language of the week was the most awesome ever, wrote a few wrappers to some applications, and released it as a new distro.
"it has sound" is precisely the reason why webm videos should NOT be used... Imagine if every stupid cat-animation now also tries to compete with each other in loudness.
It's "just" the tor browser bundle and firefox portable, they link to both, where sources can be had. The custom configs are (naturally) included in this release for inspection. It seems that they configure Tor to be as fast as possible while removing some possible anonymity, and they block certain countries as exits to remove censorship. Then they have a dynamic proxy to automatically route torrent sites through Tor.
Further, what percentage of these machines are running pirated copies of WinXP? I know in Latin and South America, they're almost all pirated. How is it in China?
Well.. I don't think you need to be a rocket surgeon to guess that number correctly.:P
It will be interesting to see how they will handle this. When I visited China, computer security didn't seem to be one of the top priorities among the computer users, so the majority of the population might just not care much about updates. If it starts breaking down completely, and Windows 7 or 8 isn't as easy to pirate, perhaps we'll see a Chinese mass migration to Linux.
I wonder how difficult it would be for the Chinese government to make their own Windows patches. They could probably perform a MITM on the windows update servers and feed their own patches if a lot of unpatched Windows machines leads to an increased influx of CIA-sponsored viruses to China.
One option is the."51% attack". If a party has control of more hashing power than the rest of the network put together then they can arbitrarily block transactions they don't like from properly confirming. I'm quite sure if the US goverment chose to do so they could do this, it's a question of whether they would consider it worth committing those resources.
The computing power in the bitcoin pool today is 8 times the computing power of the top 500 fastest super computers in the world combined.
Even if NSA, Russia and China have more powerful setups than what's on the official Top 500 list (and I'm sure they do), it would take an immense effort to create something matching.
Actually, isn't it about time to give up hogging Hawaii now? It's so far from the mainland it's just ridiculous. Problem solved. You can still go there on vacation you know.
Oh, at the same time, leave Alaska to Canada, the maps look weird enough as it is...
I suppose this "fuzziness" is why I got curious. I would have thought that the border areas would be too fuzzy to enable someone to release a set of files for it.
Assuming Wikipedia is correct, it seems to differ a little depending on where in the states you live.
Honestly, computers are so efficient these days that fans shouldn't be necessary. I guess it's some sort of evil spiral. "Oh, the computers are so fast anyway, we don't have to bother optimizing this, it's just unnecessary developer time". Then you get to a situation where people write applications in a framework running on javascript running in an operatingsystem that is running *in* a web browser which is running on some other type of virtual machine ad absurdum.
And it's slow, but who cares, do you have a slow computer? Just buy more power.
They have been getting some sort of a comeback recently, with Das Keyboard becoming mainstream and a lot of companies following them to grab a piece of the market. I wouldn't trade my Das Keyboard for a "normal" keyboard, although it would be interesting to try one of the newer, "silent" versions. Supposedly they have an almost identical tactile feel to them, at least when comparing the graphs.
Then there's actually computer users, clutching the real, full-size keyboad in fear while glancing on Ubuntu's and Windows' rapid and rampant move from sanity to the insane "everything is a touch screen" interface, which no computer user ever asked for but seems oh-so-trendy if you're a marketing drone who mostly use the computer for playing games on facebook or following blogs.
That's probably the longest sentence I've ever written, btw.
Not being from the USA, it would be interesting to know what a "neighborhood" means in this case. Is it a legal definition apart from the more casual meaning of the buildings close to where you live?
Yeah, and next week when the next javascript exploit is found, the excuse will be the same. "Just upgrade your browser and it will be ok, javascript is safe!" No one in their right mind would enable vbscript by default when opening spreadsheet files, but javascript on websites doesn't seem to be a problem.
Could be they underestimated the reach of Bluetooth, or underestimated the cost of water for flushing.
Or perhaps you are overestimating both? Will the signal go 10 metres through concrete walls? Will flushing the toilet amount to any more than spare change in the long run? I honestly wouldn't know, I live in a part of the world where getting clean water isn't much of a problem.
I'd like to point out that nothing in Tor was exploited here. You're still as anonymous on Tor as you used to be, but it still doesn't solve all problems. For example, in your neighbor-only network, chances are FBI could easily install a backdoor onto one of your computers.
When people who claim to be privacy nuts are such godawfully fucktarded morons to fall for this, I guess we're pretty well doomed on that front.
Do you really believe that everyone using Tor are identical clones? Maybe the fraction of users they got with this method were not self-proclaimed privacy nuts? Maybe these are the same people who fall for Nigeria scams, or vote for "the lesser of two evils" instead of voting for someone who they really like to rule the nation?
Slashdot Mirror
It is my understanding from reading the paper from the security researchers that SecureRandom() is also perfectly fine as long as the implementation does what it's supposed to. In this case, the implementation was buggy, so instead of 256 bits of state they got 56 bits, or something similar. Bits were discarded that shouldn't be.
No, they are also afraid of us getting a less diverse Internet experience.
The only time I want your "internet" to differ from mine is when I actively log in.
So what's in there which isn't in Ubuntu?
Judging the book by the cover, it looks like someone thought this new cool programming language of the week was the most awesome ever, wrote a few wrappers to some applications, and released it as a new distro.
"it has sound" is precisely the reason why webm videos should NOT be used... Imagine if every stupid cat-animation now also tries to compete with each other in loudness.
Because the plugin would be Tor.
The MAFIAA doesn't seem to get jokes.
The Netherlands and China is covered in this browser bundle. They specifically block dutch and chinese exit nodes, among others.
It's "just" the tor browser bundle and firefox portable, they link to both, where sources can be had. The custom configs are (naturally) included in this release for inspection. It seems that they configure Tor to be as fast as possible while removing some possible anonymity, and they block certain countries as exits to remove censorship. Then they have a dynamic proxy to automatically route torrent sites through Tor.
From their FAQ:
Does it make me surf the net anonymously?
No, this browser is just to circumvent censorship, to remove limits on accessing sites governments don't want you to know about.
Further, what percentage of these machines are running pirated copies of WinXP? I know in Latin and South America, they're almost all pirated. How is it in China?
Well.. I don't think you need to be a rocket surgeon to guess that number correctly. :P
Sounds like a great target for an epic rick-roll trojan.. say.. where is this movie theatre located? ;)
It will be interesting to see how they will handle this. When I visited China, computer security didn't seem to be one of the top priorities among the computer users, so the majority of the population might just not care much about updates. If it starts breaking down completely, and Windows 7 or 8 isn't as easy to pirate, perhaps we'll see a Chinese mass migration to Linux.
I wonder how difficult it would be for the Chinese government to make their own Windows patches. They could probably perform a MITM on the windows update servers and feed their own patches if a lot of unpatched Windows machines leads to an increased influx of CIA-sponsored viruses to China.
Actually also because they are noble metals, and won't randomly corrode and spoil after long storage.
One option is the ."51% attack". If a party has control of more hashing power than the rest of the network put together then they can arbitrarily block transactions they don't like from properly confirming. I'm quite sure if the US goverment chose to do so they could do this, it's a question of whether they would consider it worth committing those resources.
The computing power in the bitcoin pool today is 8 times the computing power of the top 500 fastest super computers in the world combined.
Even if NSA, Russia and China have more powerful setups than what's on the official Top 500 list (and I'm sure they do), it would take an immense effort to create something matching.
Actually, isn't it about time to give up hogging Hawaii now? It's so far from the mainland it's just ridiculous. Problem solved. You can still go there on vacation you know.
Oh, at the same time, leave Alaska to Canada, the maps look weird enough as it is...
I suppose this "fuzziness" is why I got curious. I would have thought that the border areas would be too fuzzy to enable someone to release a set of files for it.
Assuming Wikipedia is correct, it seems to differ a little depending on where in the states you live.
Honestly, computers are so efficient these days that fans shouldn't be necessary. I guess it's some sort of evil spiral. "Oh, the computers are so fast anyway, we don't have to bother optimizing this, it's just unnecessary developer time". Then you get to a situation where people write applications in a framework running on javascript running in an operatingsystem that is running *in* a web browser which is running on some other type of virtual machine ad absurdum.
And it's slow, but who cares, do you have a slow computer? Just buy more power.
Yes, I'm old.
Most probably marketing bullshit from this company, indeed.
They have been getting some sort of a comeback recently, with Das Keyboard becoming mainstream and a lot of companies following them to grab a piece of the market. I wouldn't trade my Das Keyboard for a "normal" keyboard, although it would be interesting to try one of the newer, "silent" versions. Supposedly they have an almost identical tactile feel to them, at least when comparing the graphs.
Then there's actually computer users, clutching the real, full-size keyboad in fear while glancing on Ubuntu's and Windows' rapid and rampant move from sanity to the insane "everything is a touch screen" interface, which no computer user ever asked for but seems oh-so-trendy if you're a marketing drone who mostly use the computer for playing games on facebook or following blogs.
That's probably the longest sentence I've ever written, btw.
Not being from the USA, it would be interesting to know what a "neighborhood" means in this case. Is it a legal definition apart from the more casual meaning of the buildings close to where you live?
Yeah, and next week when the next javascript exploit is found, the excuse will be the same. "Just upgrade your browser and it will be ok, javascript is safe!" No one in their right mind would enable vbscript by default when opening spreadsheet files, but javascript on websites doesn't seem to be a problem.
Could be they underestimated the reach of Bluetooth, or underestimated the cost of water for flushing.
Or perhaps you are overestimating both? Will the signal go 10 metres through concrete walls? Will flushing the toilet amount to any more than spare change in the long run? I honestly wouldn't know, I live in a part of the world where getting clean water isn't much of a problem.
I'd like to point out that nothing in Tor was exploited here. You're still as anonymous on Tor as you used to be, but it still doesn't solve all problems. For example, in your neighbor-only network, chances are FBI could easily install a backdoor onto one of your computers.
When people who claim to be privacy nuts are such godawfully fucktarded morons to fall for this, I guess we're pretty well doomed on that front.
Do you really believe that everyone using Tor are identical clones? Maybe the fraction of users they got with this method were not self-proclaimed privacy nuts? Maybe these are the same people who fall for Nigeria scams, or vote for "the lesser of two evils" instead of voting for someone who they really like to rule the nation?