Slashdot Mirror


User: TaoPhoenix

TaoPhoenix's activity in the archive.

Stories
0
Comments
4,352
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 4,352

  1. Re:5 characters on Selectively Reusing Bad Passwords Is Not a Bad Idea, Researchers Say · · Score: 1

    "requiring passwords to be at max 5 characters. MY BANK!!!"

    I hope not. Even the worst services I have seen want 8 characters. I'll leave it to my betters how fast a cracker program can bust 5!

  2. Re: Offtopic - sig url for Bill Stewart on Ask Slashdot: Future-Proof Jobs? · · Score: 1

    Okay, off-topic but I can hack a 1 point karma drop.

    Bill, what even is that url?
    http://preview.tinyurl.com/dy5...

    What is even the point of "preview.tinyurl.com"?
    It goes to an Evening Sun article by Craig Paskoski here:
    http://www.eveningsun.com/news...

    And it's filled with some of the loudest javascript I've seen. What do you gain by hiding it in a tinyurl?

  3. Re:They aren't stupid on Google's Project Zero Aims To Find Exploits Before Attackers Do · · Score: 1

    I'll reply to you, as you're the closest to the angle I was going for.

    Cross-posted from another site, with two more sentences here.

    Okay, picking my words a little and hoping I get my tone right...

    I get that Google (and Facebook and all kinds of other gangs) are *selling info*. It's sleazy, but to me that's "grey hat". It's "we're psychologically manipulating you to make money, but you knew that but we made the services nice and fun/useful so you don't care". I've been reading a huge Star Trek DS9 Re-Watch overview, and that feels so like a Quark move - he's devious but eventually even he draws his lines.

    Secret silent software bugs that only X number of governments even know exist is a whole other level of Black Hat. (Really, somewhere in the combo of Heartbleed and the True-Crypt mess I got grumpier than I have been in a while.)

    So Google isn't some poor 12 man op with a lonely tech who was beaten by big guys - behind the sales guys there's a *lot* of tech crunching firepower there. So *maybe* the Agencies have a bit of a lead on them, but I'd bet not as big as those Agencies thought.

    It's a fascinating twist - Govt can beat up "little guys" a few at a time in a Divide and Conquer strategy, but what if this story catches on, and then Microsoft and Facebook and Apple and Samsung and your choice of others jump in?

    (I put Samsung in there because software bugs know no boundaries, so it's specifically a test of geographic negotiations beyond the US level.)

    Short Selling jokes aside, can the US even manage to indict the CEO's of all of US tech? Their dealmaking might just be on the verge of coming to bite them. (There was a TV series about all that, corps, totally owning govt openly and outright.)

    When we're not busy snarking in the Basement or the Living Room, having a gaping security flaw in software isn't good for any of these companies. So maybe (making up a name) Gennady Li Chandarovskiyij-Maharujshi is the greatest programmer alive at one of the Agencies, but can he really stand up to a world wide team that's now pissed off??

    Going all story fiction for a moment, imagine it:
    All these companies, led by the big dogs with little guys lending a spare hour;
    CEO's around the world getting royally pissed and saying "our products are dominant enough and we have time to put away our micro-jockeying. Let's spend an entire year and 700 billion dollars/whatever to clean this mess up. Grab anyone who has any legit idea whatsoever about software security and let them do whatever they want (jokes aside), no questions asked including extra perks like the 90's like croissant sandwiches in the break room."

    US Govt is slowly winning the PR war against "Anonymous", but what if the Big Tech companies with tips from millions of freelancers all unite and say "Thanks for all the fish, yummy, now watch what you made! We have a worldwide "team" of over a *thousand* software people (and four space aliens, only three of which you know about.) Do you *really* wanna keep doing this? Or can we just get back to selling people's info for money?"

    At least in my imagination I wanna believe we're on the verge of Tech calling Govt's bluff that they've been going "Divide and Subdue" too long, and the beautiful part is all the bribery is (mostly) illegal - how can they even pretend to shout about 770 companies and 12,345,845 freelancers all spending an entire year on software security?

    So that's my message of daydream hope!

  4. Re:precedent in many future law cases. on Goldman Sachs Demands Google Unsend One of Its E-mails · · Score: 1

    You're almost the only one addressing the legal-theory side.

    Stepping aside from the technics, what becomes the theory for this?

    "Material that is believed to be owned by the recipient but is in fact leased or rented may be removed by the lessor/provider if it causes reputational damage from the sender (and maybe to other parties?)"

    Lawyers have a fun job. (Things to do with a 170 IQ). Take can take one word and use it to create billions of client dollars. There was that one other article in Rolling Stone about how Goldman Sachs borrowed one paragraph from their federal government bailout, jammed it into a 15 year old finance bill, and now they get to run oil pipelines while bidding on oil futures and stuff.

    Or the one from earlier today where that review board authorized the NSA to keep spying by abusing the words "adequate" and "reasonable".

  5. Re: 191 page report on Privacy Oversight Board Gives NSA Surveillance a Pass · · Score: 1

    The report is a bit more clever than that, and *parts* of it are actually good. It's certainly more info than I ever knew before, and than they would have ever released before.

    The way these "Devils in Details" landmined reports work is that 95% of it is legit, and builds a legit case towards ... what you think it should. Then at the very capstone when it comes time to produce the conclusion, they flip a key paragraph as the landmine. In a perfect world, let's say we ever magically elect a both incredibly powerful party majority and an incredibly honest one, they can take this report, reverse the landmine paragraphs, and end up with the correct result.

    Try looking near pages 98-99.

    This is the paragraph that echoes this entire thread:
    "On the other side of the coin, the acquisition of private communications intrudes on Fourth Amendment interests. Even though U.S. persons and persons located in the United States are subject to having their telephone conversations collected only when they communicate with a targeted foreigner located abroad, the program nevertheless gains access to numerous personal conversations of U.S. persons that were carried on under an expectation of privacy. Email communications to and from U.S. persons, which the FISA court has said are akin to âoepapersâ protected under the Fourth Amendment,426 are also subject to collection in a variety of circumstances."

    At this point everyone is clamoring for the followup to be "Unconstitutional so get rid of it." As they say, "always put one concession to your opponent's position in an argument", so here I say, "it is not possible under any form of intelligence work to have *zero* US-US information showing up, such as because any email to that sketchy girlfriend with a CC to your US buddy on it, drags him along along for the ride." Of course that's a minimal data point, but this thread has been about the issue of Non-Zero data collection.

    *However*, then they threw their landmine in.

    Over on page 99:

    "The government has acknowledged that the Fourth Amendment rights of U.S. persons are affected when their communications are acquired under Section 702 incidentally or otherwise, and it has echoed the FISA courtâ(TM)s observation that the implementation of adequate minimization procedures is part of what makes the collection reasonable. (See footnote 433)"

    So before everyone jumps on the word "reasonable", *that's* their landmine. You get Schrodinger's Cat scenarios with that email because as soon as they even see whose names are on it, one to Osama Bin Laden's hot neice's Iranian cousin staying in the Netherlands, and one to your radical US buddy, they *already have* metadata! So they decide to open it, whereupon it contains some nice NSFW Rule34/Rule35 pictures, and a PS memo on the bottom of it with a piece of info that actually qualifies as intelligence. Great. Now you have an email that pisses off at least four countries. What do you do with that?! (After you finish grinning lewdly and more to the pictures!)

    So the *actual* word to mess with is "Adequate". After you finish laughing at my scenario, is that an *adequate* acquisition of US citizen data? I don't know. So saying "Aha! A right was violated, abolish the entire agency!!" is not the answer. The only one I can think of is a percentage one of some kind, such as "less than X% of US communications were collected, as verified by an auditor that you actually believe." Then we can all start over deciding what that percentage is.

  6. Re: Not Voluntarily on Following EU Ruling, BBC Article Excluded From Google Searches · · Score: 4, Interesting

    In general I applaud the EU ruling *if* it really gets implemented fairly. But there's all sorts of wiggles to mess around with.

    We've been focusing on "that one guy" but look at this note way at the bottom of the article:

    "It is only a few days since the ruling has been implemented - and Google tells me that since then it has received a staggering 50,000 requests for articles to be removed from European searches."

    And that's 50K requests in a few days.

    Google can afford to hire "the army of paralegals", but does the ruling extend to smaller services? You can delist-bomb a small site out of existence when someone manages a "DDOS Distributed De-List of Service" attack on every article in their entire catalog. Then you get games where people try to de-list each other's materials.

    Not that I am a fan of Google, but I can bet a senior lawyer at Google is saying "well hell, besides the cost, if we have taken down seventeen million articles on all kinds of topics, there goes our ten year competitive advantage of useful searches."

  7. Re: known data isn't there on Mass. Supreme Court Says Defendant Can Be Compelled To Decrypt Data · · Score: 4, Interesting

    All this is making me start to think of some kind of more clever "panic mode" encryption.

    You'd have to make it really fast, such that it's reg proto-encrypted two ways, one normal, and the panic mode. So say something really fast like shift-control-alt-F11 instantly flips the "panic bit".

    We as geeks could put all kinds of awesome stuff into it, smashed into a kind of digital Klein Bottle with milk for Schrodinger's cat.

    "Do you know how to decrypt it?"
    "No"
    "Why not?"
    "Because it's time-locked with a code that cannot be found until next September."
    "Do you know what documents are on there?"
    "The ones you are looking for are not there because they were broken into component parts that only the computer knows, tied to a code that September code. Meanwhile other documents you did not know were there, are there, because they were created by algorithms the moment I hit the Panic Button and not a moment before. And the base of the September key is an English phrase which may or may not admit a crime. You don't know."
    "So what if the case is dismissed?"
    "I can do other work until September. What's important is that it cannot be broken right now."

  8. Re: far from first on HUGO Winning Author Daniel Keyes Has Died · · Score: 1

    "Hey may have hit it best, but he was far from first. Poul Anderson's Brain Wave [wikipedia.org], for example, came out in 1953-54. I think there were a lot of even earlier examples, but I don't have them at my fingertips."

    Okay, fair. I might have slipped up on my wording.

    It's been decades since my old days as a young'un reading all the old Pre/Gold/Silver age stuff. I certainly know who Poul Anderson is, but that exact story is the kind of thing that used to be really tough to find. It's still a little tricky, maybe six web links in Amazon can do it, but back even in the 80's trying to find a then-thirty-year-old story was really tough and I wouldn't have known it even existed to hunt it down.

    D. K. and Flowers showed up because it was aggressively highlighted in some school class's curriculum. To be sure, it was worth the exposure, but that's different from trying to make a quick post and hold it to "researcher standards". At 1958 it is reasonably close to the top of the chain and I bet the writers of my examples had at least a phone call advising them "You know you're re-making Flowers for Algernon, right?"

    But then there's your note, and if you moved the theme just a little, you might even get some slightly different earlier but not unrelated takes on the theme.

  9. Re:Unicode on The Game Theory of Life · · Score: 2

    Drifting off topic, but did the infamous Beta in fact get Unicode support?

    I mean, look at this tortuous new Beta, did they even bother to put in the Unicode support that people have been screaming for for ten+ years?

    Damn we need a mole at Dice. What do they even do at management meetings?

    "Let's make a whole new design with 55 changes."
    "What about Unicode Support?"
    "That's a big word. That's too hard for me. Let's put more videos up instead."

  10. Re:Two things on The Game Theory of Life · · Score: 2

    "are mathematics (of which algorythms are a small part) discovered or created ? No one has a clear answer to that question."

    I thought it was pretty clear that stuff is discovered. To me this kind of question reads like "Well, does it stop being right at any time once it is discovered?" and the answer is generally no. (A, you sometimes get stuff that was discovered and not properly reported, at which point the original discovery is not at fault and it is just a reporting problem, or B, you get stuff that was *insufficiently* discovered and *over-reported*, causing someone else to re-do parts of the work and end up with something else. But then it's still discovered, at whatever level that year's understanding entails.)

    In a way it's a bit silly, you can't just "make up" (create) knowledge, so it has to be there. It can just be ferociously difficult to "correctly" discover, and we might end up with three or thirty versions of the knowledge as we discover it. But once something is really nailed, hard, I can't think of any cases where people said stuff like "Oh, sorry, that law stopped existing in 1932". Every time, when a mistake shows up, it's "Oh, sorry, we didn't discover it right."

  11. Recycled Hard Drive?! on IRS Recycled Lerner Hard Drive · · Score: 1, Interesting

    See this is where the news gets varying degrees of surreal.

    In 2014, you "recycled" a hard drive with important emails on it?! Really?!

    So then we're faced with that famous Dr. Who trick of whether the Media is accurately reporting an astoundingly senseless event, or if the Media got it wrong.

    Oh look, this time it's the IRS. What's with agencies magically losing data when it suits them? Snark aside and all that, why is it that only HIPAA medical records get taken remotely seriously at least with lip service? What possibly produces a result like "ho hum, let's recycle this person's hard drive and damn any data that happens to be there in the only copy with no backup?!"

  12. Other variants on HUGO Winning Author Daniel Keyes Has Died · · Score: 1

    I had a mini project looking for other variants of the same idea because Keyes got there first and hit an important theme.

    Some other entries:

    The Six Million Dollar Man - Burning Bright (1974) William Shatner ... Josh Lang
    Phenomenon (1996) - George Malley - John Travolta

    And a couple of newer movies that I am out of energy to track down.

  13. Re:Too Big to Be Indicted... on NSA's Novel Claim: Our Systems Are Too Complex To Obey the Law · · Score: 5, Interesting

    This argument has a bit of a different feel to it though.

    Up till now for a decade the agencies just invoke "we're scary and secretive, we don't need to follow your puny little laws because of National Security but we need a billion dollars in next year's budget to build more systems to hold data forever and ever".

    And you can bet they cherry pick their data so that they have ten years worth of people's email and Slashdot posts, but suddenly when a lawsuit comes along, suddenly that data vanishes. But then it becomes vital to an investigation! "Oh look, we found it again!"

  14. Re: Moral Code on The Sci-Fi Myth of Killer Machines · · Score: 1

    "...what a lot of people portray as "evil" is really just the absence of a moral code -- more accurately called "amoral". An AI system that has no moral code and no ethical code..."

    I think this is the main line of the discussion. Hollywood profit calculations aside, this is what we're worried about. But we don't let people grow up without moral codes, so AI's shouldn't get a free ride.

    Forgetting Snowden style confusion, when you commit a criminal act, you expect to get into trouble. So if anything it's a snap to program an AI with all the laws so that it at least knows the basics of what not to do even better than we do. Yes, cue the Grey Areas, but that's a topic we can handle. We're nervous about Skynet/Borg style complete takeovers which have discarded our laws completely.

  15. Re:Self Aware on The Sci-Fi Myth of Killer Machines · · Score: 1

    "The problem with that argument is that we don;t have to design an AI that is self aware by that specific definition."

    Without dragging me into Citation Needed stuff, I have read a few things that suggest that self awareness is a crucial part of true AI. (Suggested partial cite - Douglas Hofstadter's book "Strange Loop". )

    Partially relevant from another genre is Ray Bradbury's story "The Bicentennial Man". In that story, it is about a robot that grows as an AI. But only near the end with an understanding of mortality do people grant it "true AI" status.

    But even before that, just knowing flaws, is what we people have to deal with every day. That's why I have semi-joked that every AI needs an old Pentium 1 chip as part of its processor network, *and to be aware* that it can't fully trust every result it produces. (I know, it's slow, it needs better chips to do the hard stuff.) But to my knowledge that's the only famous chip with a true math error flaw that isn't just past tense "state of the art as it was then".

    Asimov had a good start with the three laws of Robotics. We don't let people become random murderers, so why should AI's get a free ride? So we just have to program/teach them basic morality.

  16. " by immaterial (1520413) Alter Relationship on 05:48 AM June 4th, 2014 (#47162803)
    A 24 Horus deadline? Just six of those falcon-headed bastards strutting around all godlike and hassling me about missed TPS reports is bad enough, but 24... To be honest, at that point I might just throw myself into the Nile and let my ka move on to the realm of Osiris."

    Dear Sir.

    Please advise what Creative Commons license you wish for this comment. This is *the* most epic comment I have seen here in months and I would like to do something such as write a short story around it.

    Send me an email when you like,

    --Tao

  17. Re: cooked the technology into the cake on Did Mozilla Have No Choice But To Add DRM To Firefox? · · Score: 4, Insightful

    So I'm a bit confused all this. How close is the following chain of events?

    1. Netflix/___ others start trying to wrap their "tasty content" into wrappers that (try to) require baked in DRM.
    2. Uneducated Firefox users suddenly discover that their browser won't play that tasty content anymore "because Mozilla didn't add that Dr. Thingy stuff" to make it work.
    3. Said uneducated Firefox users then jump ship to that dulcet siren's call such as Chrome because yay the tasty content works again! "Everything is Awesome!"
    http://www.youtube.com/watch?v...

    So what about PaleMoon? Scuttle has it a bunch of people are headed over that way not least because of FF29 UI Shenanigans. So why not DRM? Their entire point was to unbake bloaty parts of reg FF. So why not if they unbake the DRM from their copy?

    And what does Opera have to say about all this? How about Chromium and/or Komodo Dragon? (Non-Googly clones of Chrome.)

  18. Re: an app on For US Customers, Text Access To 911 Slowly Rolls Out · · Score: 1

    You're close and this would be really easy to make. You just need a bit of a clever UI that stops most prank calls but is "unforgettable" in real emergencies. The actual tech of this is a snap.

  19. Re:technical aspects on For US Customers, Text Access To 911 Slowly Rolls Out · · Score: 2

    Nice angle Dan. I needed you to start the angle because I don't have the skills for that post but I can ride with it.

    Working with that use case, my older iPhone croaks right about at the 6% mark (when it's not glitching.) So for ex if you are right at 7% battery because you spent all day doing stuff, and didn't recharge, you might be able to smash out one or two texts but don't have time for the full call. Similar thing, folks like me have "value plans" for phones and with 60 cents left on the plan there's no way I'd get a call out but I might be able to manage two texts.

  20. Re:point of texting 911 on For US Customers, Text Access To 911 Slowly Rolls Out · · Score: 2

    Hallo Sir Avenger.

    I'll go even further with a new avenue. Let's say that there is no attacker, that it's a "contained" emergency like a self inflicted wound or an auto hit or whatever. *Both* text *and* voice could save lives. If you have stuff like

    "Geroald MacKenzei with the ei and watch the unusual spellings 1433 Maple Avenue #7F Woodside, NY next to 5th and 6th Ave hits M and R trains just past the cross junction of Broadway and Roosevelt. Remember you need to have someone get you in the building." ...all as a pre-recorded 911 text you just smash it out during your call and the operator should have the tech to power-blast it to all 17 agents. So you don't need to waste time with the Op on stupid junk repeating it because Texts Can't Be Forgotten. (done right)

    Our traditional notions of 911 are somewhere stuck half in 1977 and half with modern tech that 1882 TV cop shows is possible but somehow the carriers are treating it like a big deal to get a text message and send a squad car.

  21. Topic getting buried!? on For US Customers, Text Access To 911 Slowly Rolls Out · · Score: 1

    Okay, this is kinda an important topic and too many junk post are threatening to bury it so I will keep raising a couple of new avenues to discuss.

    It's a weird collection of states. Pasted:
    Colorado, Georgia, Illinois, Indiana, Iowa, Maine, Maryland, Montana, New York, North Carolina, Ohio, Pennsylvania, South Carolina, Texas, Vermont and Virginia

    Linear:
    Colorado
    Georgia
    Illinois
    Indiana
    Iowa
    Maine
    Maryland
    Montana
    New York
    North Carolina
    Ohio
    Pennsylvania
    South Carolina
    Texas
    Vermont
    Virginia

  22. Re:will it work with no plan? work with blocked tx on For US Customers, Text Access To 911 Slowly Rolls Out · · Score: 1

    I think you make a good point. These services tend not to flesh out as fast as they need to. But for example any of the dating apps are free (with ads) via Wifi (in your home) So if they really wanted to drill this out (see my note above, emergency codes help) you could for example text 911 on a dating site for free.

    It comes down to how much they want to actually help people vs the political capital. It's not hard to monitor "911" on any of thirty dating apps if they spread the word to solve exactly the problem you mentioned.

  23. Re:zillion drunk texts on For US Customers, Text Access To 911 Slowly Rolls Out · · Score: 1

    See my note above.

    For example let's forget tinfoil hats and assume that for once the cops are on your side. You go visit them on a nice safe day and get a series of codes.

    Then you folks work together to make a few pre-recorded 911 texts with those codes and stuff they will need as mentioned in the article. Responders are at work, it's not like chatting, they don't mind a Wall of Text. So with some sort of few keystroke system if you can send any of nine 911 text messages in 12 seconds, that's gotta be plenty for them to get started with. Yes on the rare case you send that as a joke you get a fine, but the life saving side will way outweigh it;

  24. Specific use cases on For US Customers, Text Access To 911 Slowly Rolls Out · · Score: 4, Interesting

    Maybe I've seen too many TV shows but if you have a pre-recorded text for 911, something like seven key strokes can send it silently whereas the standard voice call risks the attacker hearing you.

    I wasn't impressed with the article. At a higher level there has to be some coding you can send that says "can't speak, puts my life in danger". I don'tr know what that would be, but it rises above the article's cheap promotion of voice calls.

  25. Re:a way to address "issues" on London Police To Wear Video Cameras In Pilot Project · · Score: 1

    This is a topic highly prone to what AC was meant for in the best sense.

    It's rather narrowly presented - all on the officer side. Pretty soon the members of the public will have their own running cameras if for no other reason than just in "today's social media / blogging culture". So then suddenly the defendant has a video but the cop doing something "forgot" to turn his on?!

    That's gotta be good for a defense lawyer!

    So the next level is both sides have theirs on, and everyone is tracking everyone else, and we become a giant game of Pac-Man. Go Atari.