Forgot your password?
typodupeerror

Comment Re: Who is eMudhra (Score 2) 18

They primarily manage company-internal CAs for big businesses, which they seem to do well. AFAICT, they noticed that their security infrastructure was compliant for managing a global CA, and thought they might as well also have that as a product. However, there are some operational differences between an enterprise CA and a public one, including that companies want to issue client certs to employees but nobody really does global client certs. That means that they had an intermediate CA for global client certs that they never used, but it was in the standard trust store, and nobody tested that it was handled right until Wayne just went through the standard trust store making sure a new certificate weakness detector didn't give false positives.

So eMudhra correctly handled all the certs they issued, and all the certs they used to sign them, but they got some extra CA certs trusted that they didn't really need, because it would make their side business more similar to their main business, and this caused a major problem.

Chances are that they actually got a real random number out of a HSM for the bad CA certs, but accidentally made the certs with the index of the random number instead of the actual number. (That is, they got the 4th random number and made a cert for 4 instead of the number.) I wouldn't be surprised if they stored the correct private key, which would have made leaf certs that didn't validate because the intermediate was wrong, but they never used it to find this problem.

Comment Be the machine! (Score 1) 149

I like the FP though I wonder if you were going for funny in the "You say that like it would be a bad thing" genre. A whole lot of the code that was written yesterday and today was bad code enabling bad ideas, so no code tomorrow isn't bugging me too much.

However the joke I was looking for involves how much easier it is for humans to learn to think like machines than vice versa. I think that's a bad thing (per the old warning from Sydney Harris) but I also think that's the path of least resistance that too many, probably most, people will follow. There will be at least two other groups. Probably a large group of people who refuse to go along and who get discarded as "low-value" losers and a small group of people who are smart enough to go beyond thinking like machines. The "beyond" people will be competing at the level of using the tools without being used by them, and the few who win that competition might be planning to rule the world with a robot's iron fist (controlled by obedient (?) AIs).

Going more directly to the story, I did a fairly complicated system recently using Claude. Because of token limits, I used several instances, which led me to the belief that there are implicit personality variables that make Claude more or less useful. My time and effort was MUCH smaller than when I did the same system using PERL and every test I've been able to think of says the AI version is better than mine, which doesn't make me feel good even about my programming skills, even allowing for the peculiarities of PERL. (But I have been lucky enough to work with and for some top-tier programmers and I've learned that I'm not at that level...) However the most interesting thing was that the new version got me to reconsider the problem and now I see a much better way to handle the UI. (But I hate the depending on Claude so much that I am declining to do another version? And I'm too afraid of thinking like ChatGPT to use that one again?)

Comment Re:Safety first, urgency second (Score 1) 83

I think you are quite confused about what "politics" means. Or maybe you are simply trying to use an extended definition? Easiest way to find out might be to ask where you think the lines are, but it seems obvious to me that your reasoning can be applied to make anything fit as a political problem. I could probably play the same game, though (judging by past posts) I seem to prefer economics as the catchall category.

However your reply is sufficient to explain why you probably get few Funny mod points. What I mistook as an attempt to be funny would have depended upon a deep understanding of the reality and "Frankly, my dear, I think you don't give a darn about reality."

Comment Re:Does not make me like the IT guys (Score 1) 80

Microsoft has probably the most illustrious history of bugs where just visiting a website or opening an email can get your system hacked, but you're right, this is not a problem unique to them.

These days, Lookout asks you before it loads any images from outside your organization...

Comment Re:Safety first, urgency second (Score 1) 83

Okay FP but you didn't get your Funny mod points. Maybe you confused the moderators when you mentioned success without success criteria?

This is a government of politics first. Or maybe vengeance first? Or perhaps it's personal profits first? Or popularity in the latest poll? Whatever it is, safety is not on the main list of priorities. Plenty more volunteers eager to join up if the first ones die.

But I thought the funniest posts were the ones that suggested the YOB would go. I couldn't buy the premise of the "wants to name something on the moon" joke because there's no golf course there. (Yeah, I know one of 'em hit a golf ball, but... On the safety side, I wonder how NASA made sure the ball wouldn't explode when struck under lunar conditions.)

Comment Re: For more details.... (Score 1) 59

Did you read your own joke? Did you consider the premise of your joke?

However you changed your sig so my attempted joke lost both its context and its premise. The "dynamic" hint in your new sig suggests that I should include it here, but... This "discussion" merely seems to be another example of "what happened to" Slashdot.

Slashdot Top Deals

Be careful when a loop exits to the same place from side and bottom.

Working...