Beta
×

Welcome to the Slashdot Beta site -- learn more here. Use the link in the footer or click here to return to the Classic version of Slashdot.

Thank you!

Before you choose to head back to the Classic look of the site, we'd appreciate it if you share your thoughts on the Beta; your feedback is what drives our ongoing development.

Beta is different and we value you taking the time to try it out. Please take a look at the changes we've made in Beta and  learn more about it. Thanks for reading, and for making the site better!

Comments

top

Surveillance Case May Reveal FBI Cellphone Tracking Techniques

dopodot Re:Interesting end run (57 comments)

The 3G/UMTS protocols have the handset authenticate the network exactly to protect against fake base station attacks.

For GSM, this is not the case -- handsets do not authenticate the towers they're connecting to. It's trivial to become the loudest tower and get the phone to switch over to you... but there are technical hurdles around connecting back to the wireless carriers and getting calls / SMS to work correctly in both directions.

about 3 years ago
top

Man-In-the-Middle Vulnerability For SSL and TLS

dopodot Re:Dissabling SSL re-negotiation? (170 comments)

It's more than changing the cipher type, it's also negotiating up from anonymous client to verified client. The second situation occurs ALL THE TIME in web services that require different levels of trust for different content within the same site. So it's not a "seldom-used" feature in the least.

more than 4 years ago
top

Null-Prefix SSL Certificate For PayPal Released

dopodot Re:Paypal uses an EV cert. (351 comments)

Do you really think the average user is going to notice a lack of green bar? Internet Explorer is going to accept this certificate as valid for https://www.paypal.com/ and there will be no hints to the user that it's actually illegitimate. Unless there's some other mechanism in Internet Explorer that will notice it got an EV cert in the past and is no longer getting it, then this cert is entirely usable for a man in the middle.

more than 4 years ago
top

Microsoft, Cisco Finally Patch TCP DoS Flaw

dopodot Re:BSD (114 comments)

Cisco's moving towards Linux. That post is 2 years old, and they've not announced anything hinting that anything BSD will be coming out. I have a feeling they're willing to deal with the GPL (Linux) just so they don't have to adopt BSD years after Juniper did, which could be a little embarassing.

about 5 years ago
top

Microsoft, Cisco Finally Patch TCP DoS Flaw

dopodot Re:what's the point of IOS? (114 comments)

"IOS" has been rewritten and released half a dozen times, as NX-OS (which is Linux based), IOS-XR, IOS-XE (also Linux based), Modular IOS, and another major one in the pipeline. They all offer the same basic CLI interface that CCNA holders would be familiar with and instantly able to use.

about 5 years ago
top

FSF Settles Suit Against Cisco

dopodot Re:I'm nervous about this (194 comments)

They're only releasing source code related to the Linksys products, which were in violation. Cisco acquired Linksys a few years ago -- Linksys still operates mostly as their own company. Cisco proper already has people responsible for ensuring source license compliance and they seem to have done a good job. I don't think there's any GPL code in IOS, which is what it sounds like you're worried about. There's lots of BSD-style code though.

more than 5 years ago

Submissions

dopodot hasn't submitted any stories.

Journals

dopodot has no journal entries.

Slashdot Login

Need an Account?

Forgot your password?