omh

20 ms·

151.
by omh 13y ago
Are you sure? The old 'British Billion' was 10^12, but even that is rarely used any more. I've never seen an 'M' suffix used to mean anything other than 10^6.
152.
by omh 13y ago
The "old way" is actually to install a new CA on the device. Then the proxy can just dynamically create dummy certificates signed by that CA. This is simple on the client and avoids any security warnings. It's supported in qu
153.
by omh 13y ago
I always assumed it was the more general "coming up with names" - for variables, hostnames, project names etc. The non-human-readable things like MACs, IPs and auto-increment keys are easy. But when I have to come up with a short,
154.
by omh 13y ago
Ah, thanks. Missed that. So it doesn't look like there will be a way of getting an email in to their Facebook inbox. Unfortunately my grandmother never quite figured out email but she's very comfortable with Facebook.
155.
by omh 13y ago
That's a shame. I use this to send emails to a couple of older family members who are happy using Facebook but don't use any 'real' email address. Is there any chance they'll keep some forwarding option around?
156.
by omh 13y ago
The same thing is possible today by getting users to install a new CA and maybe configuring a proxy for them. It doesn't seem like these proposals would make this significantly easier.
157.
by omh 13y ago
It is funny this kind of came full circle. Damien Katz, the original CouchDB author was working on Lotus Notes as some point in his life It's definitely interesting. I can remember people in the Notes community wondering why IBM didn
158.
by omh 13y ago
Any modern CPU has dedicated hardware for encryption. And a huge number of storage devices have it too - either storage arrays (which perhaps Google aren't using) or standard hard disks, especially SSDs.
159.
by omh 13y ago
Does anyone who is concerned about the NSA issues seriously think that encryption (in the way it's implemented here) would be any help?
160.
by omh 13y ago
What is the purpose of encryption in these cases? Is it just a compliance tick box? The keys are managed by Google and obviously this won't protect against them getting at your data. And any external attacker who gets into Google'
161.
by omh 13y ago
Why would there be a significant performance degradation? I'd expect this to be implemented by hardware encryption, probably at the storage layer, with minimal speed impact.
162.
by omh 13y ago
Sorry, my reply was badly phrased. I understand NZ's anti-nuclear stance, I was just wondering why the US think that's so important for free trade agreements.
163.
by omh 13y ago
That sounds plausible. For the most part though I'd expect those users to just use the old hardware anyway, so it's not a loss of revenue. And I'm sure the resources used to serve the updates wasn't significant.
164.
by omh 13y ago
Note that the resources required to launch that attack were relatively small. From the cloudflare article: it is possible that the attacker used only a single server running on a network that allowed source IP address spoofing So perhaps
165.
by omh 13y ago
However NZ's anti-nuke stance and lack of military spend means that NZ will never get free trade agreement Is this an official policy? Why is nuclear such a big deal, and how does the military factor in? Is it just that those are the
166.
by omh 13y ago
Why would HP choose to do this? Is it really likely to increase revenue? I can't imagine many customers without a support contract now getting one purely for firmware updates - they'll just ignore them. So perhaps a few extra sale
167.
by omh 13y ago
This was a form of two-factor authentication. There was a certificate and a password and Snowden apparently obtained both. There are obviously other types of 2FA that would have prevented this, but it's interesting to note that this qu
168.
by omh 13y ago
By the time they get the chance to reject the packet it's too late. At that point it's already on their network and it's consumed their bandwidth.
169.
by omh 13y ago
I can see a possible market here, competing with Microsoft's licensing for cloud/virtual desktops. MS licensing is at best confusing, and in some cases quite horribly expensive. And obviously keeping the software open source but c
170.
by omh 13y ago
It is possible to continue to pay for support,but I'm not sure whether this is guaranteed to include security patches. Those large organisations who care about security but are forced to keep XP for some reason will presumably rely on
171.
by omh 13y ago
Is it possible to give an 'upgrade' message to old browsers in this case though? If they fail the SSL handshake then they'll see a browser error before it loads anything from your site. I agree with the principal of pushing p
172.
by omh 13y ago
Seconding the recommendation. I have this meter for the same reason. You need to use the Bayer software to talk to it (I'd recommend actually installing the software rather than using the copy from the meter itself). But then the readi
173.
by omh 13y ago
Depending on exactly what you're doing, ZFS (and probably btrfs?) provide at least the Consistency & Durability of ACID, and maybe Isolation as well. But yes, it seems like it would be relatively straightforward to build Atomicity
174.
by omh 13y ago
As a Solaris admin, it's a little strange to hear ZFS called a "next-gen" filesystem. (It's been around for at least 7-8 years!) But it's good to see these ideas getting usable in other operating systems, especially
175.
by omh 13y ago
Is that still true if the attacker has access to system memory? That's a more difficult attack but still feasible for a malicious VPS admin.
176.
by omh 13y ago
Unless you're very paranoid then a single pass of zeroes should be sufficient. The bigger problem is what to to with a dead hard disk. It's usually easier to buy a new one rather than replace it, but an attacker could perhaps repa
177.
by omh 13y ago
Credit card thefts can be reversed. If they can't detect which of the admins did it then what are they going to do?
178.
by omh 13y ago
But if they don't have the capability to modify packets, wouldn't the original LinkedIn packet get through as well? Perhaps the OS might ignore it, but it seems like it would show up in some cases.
179.
by omh 13y ago
Thanks for the source. I think using that that something is "more vulnerable" is misleading though. Do we really think that 8_32 is 4 times more vulnerable than 8_64? Isn't it more likely that 64-bit users are less likely to
180.
by omh 13y ago
What on earth does it mean to say "Windows XP with SP3 is 56.5 times more vulnerable than Windows 8 RTM" ? I guess it's this some attempt to quantify how often XP machines get infected vs Windows 8. But a good part of that is

More ›