Monday, September 16, 2013

"This is not good" - A terrifying look at Nuclear weapons

Well, I lived through it, but had no idea.

http://www.motherjones.com/politics/2013/08/eric-schlosser-command-control-excerpt-nuclear-weapons

If I was a grown up in 1980, and aware of what was happening...

I admit, I can't imagine.   Things are pretty screwed up now, but then?  Wow.


Monday, September 9, 2013

Net Neutrality? http://theinternetmustgo.com/

Not totally true, parody actually, but really does show what net neutrality means.

http://theinternetmustgo.com/


Saturday, September 7, 2013

Tor Servers crackable, according to ARS


 Rob Graham, CEO of penetration testing firm Errata Security, arrived at that conclusion by running his own "hostile" exit node on Tor and surveying the encryption algorithms established by incoming connections. About 76 percent of the 22,920 connections he polled used some form of 1024-bit Diffie-Hellman key.

...

He went on to cite official Tor statistics to observe that only 10 percent of Tor servers are using version 2.4 of the software. That's the only Tor release that implements elliptical curve Diffie-Hellman crypto, which cryptographers believe is much harder to break. The remaining versions use keys that are presumed to be weaker.

Thursday, September 5, 2013

Ad Blocking Illegal? Well, let me see...

The (bad word) president of the Interactive Advertising Bureau thinks blocking third party cookies and ads might be illegal.  Apparently so does a writer at CNET.

While I'm not a lawyer (IANAL).   I do understand that the the Computer Fraud and Abuse act criminalizes:
" (a) Whoever ... (2) intentionally accesses a computer without authorization or exceeds authorized access, and thereby obtains—...(C) information from any protected computer;"
 Can I put a message into my browsing header that creates my own terms of service that states:
"This computer browser is accessing a web site to collect public information and images in HTML format published by the owner of the web server site.  For reasons of data privacy and security, the policy of the owner of the browsing computer prohibits execution of any computer programming code such as, but not limited to, Javascript, Oracle Java, Microsoft ActiveX, and others without explicit permission, and has automated policies set to block execution of this code.  Sites that use technical measures to bypass these protections are considered attackers of the browsing computer, and may be blocked and/or prosecuted under Computer Fraud and Abuse act of the United States of America.

If this policy conflicts with your web site, please block your information from being sent to the browser.  If you would like our policy to change, indicate your own policy, and we will determine whether our policy can be temporarily modified. "
I suspect this is way to long to put in the browser headers, but I could certainly put in a link to my cloud site, and save the logs of the sites that access the policy.  It could certainly be part of the web browser.