Become a fan of Slashdot on Facebook

 



Forgot your password?
typodupeerror

Comment Re:Still not sold on DoH (Score 2) 85

I don't like DoH either. However, you seem to be inadvertently advertising one of its benefits. Even if you do not use your ISPs DNS servers, DNS is not encrypted so your ISP can record all of your queries anyway. DoH set to the server of your choice stops your ISP from seeing all of the queries. I completely agree that there should be one resolver for the system or subnet/managed network. If that one resolver uses DoH, fine, but do not give individual applications the power to change unless it is a specialized application. Certainly do not use DoH for a general purpose web browser. I think Microsoft is going in the right direction of enabling DoH at the Windows system level and allowing the user (or admin) to configure it if they choose to use it.

At least Mozilla is making it optional. I would stop using Firefox if it became mandatory (more likely, I'd just configure my firewall to block it).

Comment Re:NEVER NEVER EVER (Score 3, Informative) 85

I like the concept of DNSSEC-Trigger (https://ancillary-proxy.atarimworker.io?url=https%3A%2F%2Fnlnetlabs.nl%2Fprojects%2Fdnssec-trigger%2Fabout%2F). It uses local recursive servers if they provide DNSSEC and falls back to doing its own validation if that is not available. I think this gives a good balance of trust and performance enabled by DNSSEC.

Comment Use open systems like SMS (Score 1) 151

Similar to the recommendations to use PGP, I always preferred to use this:
https://ancillary-proxy.atarimworker.io?url=https%3A%2F%2Fsilence.im%2F

Unfortunately, Google pulled it from the play store, but an open app that uses standard sms and layers encryption basically eliminates the central authority to spy on everything. Use SMS. Encrypt it. Why bother trusting the centralized systems like Whatsapp. Of course they get your meta data, but how much can you really hide that anyway?

Comment BREACH SSL attack bandwidth vs security (Score 1) 216

I find it interesting that there was a general consensus that the BREACH SSL attack had no simple fix because the Internet could not handle the load if everyone turned off gzip HTML compression. While acknoewleding that bandwidth and computation resources are different, I am surprised that a simple fix for BREACH was dismissed, yet hoards of resources are being thrown at transport encryption.

Image

White House Correspondent Tweets His Heart Attack 77

Tommy Christopher, who writes for mediate.com, has reporting in his blood, so much so that he livetweeted every part of his recent heart attack. "I gotta be me. Livetweeting my heart attack. Beat that!" and "This is not like the movies. Most deadpan heart attack evar. Still hurts even after the morphine," were among his updates as he was rushed to the hospital. Christopher is now in stable condition after recovering from emergency surgery.
Censorship

China Faces Piracy Suit Over Censorship Software 113

angry tapir writes "Web software filtering vendor CyberSitter has filed a $2.2B lawsuit against the Chinese government, two Chinese software makers, and seven major computer manufacturers for their distribution of Green Dam Youth Escort, a controversial Web filtering package the Chinese government had mandated to be installed on computers sold there. Researchers at the University of Michigan found that Green Dam copied code from CyberSitter."

Slashdot Top Deals

A physicist is an atom's way of knowing about atoms. -- George Wald

Working...