News for hackers. Stuff that matters.

tomgirl1

Re:Why is nobody using SSL client certificates? on Thursday July 11, 2013 @11:12AM (#6026505)
Which is not secure at all. you can MITM a typical SSL connection in so many ways SSL might as well not exist.

No real cert validation, forged certs, proxy replays. SSL is a joke.

Re:The NSA slide you haven’t seen on Thursday July 11, 2013 @11:06AM (#6026462)
excuse me?
Re:Why is nobody using SSL client certificates? on Thursday July 11, 2013 @10:33AM (#6026227)
Im at a loss, but my first instinct is to say that server certs arent validated properly AT ALL, so I fail to see how client certs would do any better.

For all the hype over PFS (perfect forward secrecy) I dont see how how MITM attacks are stopped because cert validation is so bad or nonexistent I dont see applying more certs (plus diffie hellman) to be a solution.

Re:Is Russia interrogating Snowden? on Thursday July 11, 2013 @08:55AM (#6025717)
He doesnt need to be interrogated. He is exposing an international fraud. If he is what he says he is, all he has to do is say Hi and the rest will follow.
Re:Is Russia interrogating Snowden? on Thursday July 11, 2013 @08:47AM (#6025685)
ok, so by your theory Snowden is being waterboarded to hand over his laptops to the russians when he would just show them what he has in the first place?

Snowden has literally nothing to lose so whats your point?

Re:Is Russia interrogating Snowden? on Thursday July 11, 2013 @08:36AM (#6025636)
Time magazine is completely off. The entire article is made up of so many bs reports of what coulda, woulda, shoulda logic its unbelievable.

The most important points are, Snowdens passport has not been revoked. Its not even legal per the US state dept website to do so.

He has a completely valid US passport to travel with. What he IS doing is stopping in places long enough to tantalize local officials with the data he has to see where that might lead.

Unless he travels to a country that the US can throw Interpol at him, he is a free man. That sounds easier than it really is. But its still a true fact.

Rather than speculating that he's in a Russian suburb, being drugged by alleged KGB thugs, it might be more constructive to realize he could easily take a private plane out of Moscow and reach his destination if he has one.

No entity including the US is going to kill the golden goose when it laid its egg before it could be hatched.

As Julian Assange said, no state will be able to prevent the release of the complete trove of information.

So if you want to play international poker, you had better be holding the cards.

Place your bets....

Re:How to permanently delete a Facebook account on Thursday July 11, 2013 @06:47AM (#6025335)
I gather this link points to facebook.com. Funny, I deleted my facebook account years ago, but Im sure as heck not going to click on a facebook.com link and find out if I really did!

(subtitle, I react to facebook.com links as if they were phishing links and what would be the difference? scraping my contacts, selling my personal data, rewriting my TOS at every opportunity. I view the home page of facebook even without logging in as a phishing site. Sorry Mark. :()

Re:Navy Drone Successfully Lands on Aircraft Carrier on Thursday July 11, 2013 @06:02AM (#6025233)
I have to disagree. You are being fooled into thinking that is a stealth fighter or bomber. Its not.

It's a drone which is at mini-scale to the actual aircraft you may be referring to.

Yes. We have stealth bomber looking drones at 1/3 scale to the actual thing.

And to your original point, this is obviously not a first, drones have been taking off and landing from aircraft carriers for years.

Why the washington post is reporting this now is a better question. They are clearly out of the loop.

Re:DuckDuckGo Direct queries per day (28 day average) on Thursday July 11, 2013 @04:09AM (#6024975)
You are right about that...but years ago I had a service which shall remain nameless that got 10 million hits a month just by removing the tracking links on Google search results.

I didnt make a dime, but I did get calls from spooky people out of the blue who wouldnt identify themselves asking questions.

I admire anyone who pursues this goal, and yet I will never go there again.

Re:The NSA slide you haven’t seen on Thursday July 11, 2013 @04:00AM (#6024953)
I could be wrong, but I think we are looking at screencaps of documents which have been captured on different screen sizes, where there was word wrapping occuring. I dont see evidence of editing.
What NTSB has now said is that Auto-throttle has not 2 but 5 modes. Im not a pilot so all I knew of was 2. That may be a combination of different auto-pilot modes combined with auto-throttle modes.

But what seems clear is that the moment that the pilot turned off auto-pilot, the flight was doomed to crash as the auto-throttle was not in the right mode for landing. As in, a mode that would actually use thrust vs elevators to maintain airspeed.

NTSB also revealed that course corrections were being done not at the latest moment of 500 feet, but at 4000 feet 2.5 minutes before landing the plane was off course, in which case supervision, and correction would have been appropriate in a training scenario.

I hate to draw conclusions like this, but in today's modern aircraft pilots only fly about 20-30 mins of a flight, takeoff and landing at most with autopilot managing most of the rest under normal conditions.

The inability to hand fly an airliner, is a disqualifier to be a professional pilot.

NTSB revealed that several modes on autopilot and autothrottle were being cycled in the last 2.5 minutes of the Asiana descent perhaps indicating a reluctance to hand-fly the plane and an over-reliance on automation.

Any commercial pilot that cant hand-fly a 777 on a perfectly clear day at SFO should never see a commercial cockpit again.