Beta
×

Welcome to the Slashdot Beta site -- learn more here. Use the link in the footer or click here to return to the Classic version of Slashdot.

Thank you!

Before you choose to head back to the Classic look of the site, we'd appreciate it if you share your thoughts on the Beta; your feedback is what drives our ongoing development.

Beta is different and we value you taking the time to try it out. Please take a look at the changes we've made in Beta and  learn more about it. Thanks for reading, and for making the site better!

Comments

top

Intel Insider DRM Risks Monopoly Investigations

slug359 Re:DRM fails (217 comments)

Here's my theory as to how it works:

The CPU generates a session key, encrypts it using the video site's public key (which comes from a certificate signed by Intel which is verified by the CPU) and sends this encrypted session key to the video site.

The video site then decrypts the encrypted session key using their private key, and then uses the session key to encrypt the video stream.

The CPU then takes the encrypted video stream, decrypts it with the session key, then produces an HDCP stream[1] which is sent out over the video ports.

All you need for this is instructions for:
- init_session(certificate_signed_by_intel) -> (context, session_key_encrypted_by_cert_public_key)
- convert_stream_block_to_hdcp(context, encrypted_stream_block) -> hdcp_stream_block

and since the session key never leaves the CPU unencrypted, and the stream is never emitted unencrypted there's nothing to tap.

[1]: yes HDCP is broken, but Intel barely admits that.

more than 3 years ago
top

Trying To Bust JavaScript Out of the Browser

slug359 Re:Javascript is actually a great language (531 comments)

Here's my three favourite language flaws, which make the language nearly unusable for non-trivial projects:

  • Variables are global by default, leading to accidental memory leaks, conflicts and various other fun things.
  • A lack of namespaces.
  • Lack of block scope (despite the fact the language has blocks), i.e:

    function a() {
    var b = 1;
    {
    var b = 2;
    }
    alert(b);
    }

    will alert 2.

more than 4 years ago
top

OpenDNS To Block and Monitor Conficker Worm

slug359 Re:I just found out about this. (175 comments)

Not really, no.

For the NTP pool you send and recieve time data; funnily enough the time is public information.

Switching your DNS servers to OpenDNS means you end up sending them every domain you visit, and apparently every Google search too.
Most people would probably want their search terms and domains they visit to stay private, so your analogy between the NTP pool and commercial DNS providers breaks down here.

(note: I'm not implying sending your DNS data to OpenDNS means it's made public!)

more than 5 years ago
top

MI6 Terror Photos, Data Accidentally Sold On Ebay

slug359 Re:Fuck the police (317 comments)

4th paragraph:

"However, the police subsequently descended on the man's home, seizing his computer and camera equipment."

more than 5 years ago

Submissions

slug359 hasn't submitted any stories.

Journals

slug359 has no journal entries.

Slashdot Login

Need an Account?

Forgot your password?

Submission Text Formatting Tips

We support a small subset of HTML, namely these tags:

  • b
  • i
  • p
  • br
  • a
  • ol
  • ul
  • li
  • dl
  • dt
  • dd
  • em
  • strong
  • tt
  • blockquote
  • div
  • quote
  • ecode

"ecode" can be used for code snippets, for example:

<ecode>    while(1) { do_something(); } </ecode>