Recent Posts
awesome.
but the thumbs ups here are making me nauseous.-superboyac (November 07, 2013, 04:05 PM)
(5 stars)
I have a youtube account that is not associated with my real name/G+ account. Google forced a secondary G+ identity on me that exists as a Youtube channel under my main account. It allows me to keep them separated, but not have to deal with having 2 google accounts to do it.-app103 (November 07, 2013, 01:30 PM)
Is this just about commenting?-dr_andus (November 07, 2013, 01:22 PM)
...But option to say 'now is kind of a bad time' sure would be nice.+1-Stoic Joker (November 07, 2013, 07:13 AM)
Lachlan HuntBrianB_NY wrote:mudlock wrote:
"Despite what anyone tells you, end to end encrypted e-mail is not possible in a webmail world."
Sure it is. Anything a stand-alone client can do, a browser can do....
Exactly. The author either doesn't understand that you can implement stuff client side (Javascript for example) or he is making the leap that because doing so could potentially be too slow (in execution cycles) to be usable equates to "not possible"
If you start doing the decryption with javascript, then there are a number of issues that make it impractical and not totally secure. The question of where the private key is stored still exists. For practical and usability reasons, it's most convenient for the service to maintain the keys on their servers. It's possible that those keys can be password protected to provide limited protection against snooping, but users are notoriously bad at picking good passwords. Alternatively, you have to find some way to let the user store the private key themselves, leaving them wholly responsible for keeping it secure and backed up.
But assuming you have a workable solution for private key storage, you also need a way for the browser to perform the decryption of the email content, which is separate from normal decryption performed as part of the SSL/TLS connection. If, as you suggest, this is done by some JavaScript in the page. Then that exposes a huge security hole.
If you give the JavaScript access to the key and the user's password for decrypting the key, then it is also possible for that script to send a copy of the password and/or decrypted key back to the server. You have to have a certain level of trust in the service provider that they won't do this. But, that is exactly what HushMail did, and they were forced to snoop the credentials of some specific users in order to turn over unencrypted emails to the authorities.
It's also, unfortunately, the approach taken by services like LastPass when you log in via the website, rather than the extention, or use their security check tool. Users have to trust that LastPass is never going to send any javascript for the purpose of stealing their credentials. But they could certainly do so if they were ordered to. They could theoretically even direct this malicious version of the script to a specific IP address or user account, so no-one else could possibly notice it.
[...]
While they maintain they did "nothing..."MS put up a banner across my wife's screen urging her to upgrade-cranioscopical (November 06, 2013, 06:45 PM)
There was something to that effect mumbled in passing.
Still, it's a hell of a bind to put someone in since they were traveling by car when the whole thing kicked off.-Stoic Joker (November 06, 2013, 06:53 PM)
Here's my list of issues:Re: So-called upgrades that ruin good programs-Darwin (October 23, 2013, 08:36 AM)
unfortunately I don't have excel, I use libreoffice latest version-kalos (November 06, 2013, 04:39 AM)
But you're still not wrong, that plugin is in some parts similar to my idea after all.-theMastermind (November 05, 2013, 10:48 AM)
If the author of the plugin sees this thread, may be he'll have some useful comments...-ewemoa (November 05, 2013, 08:50 PM)
You'll never look at Australia the same way again.
(see attachment in previous post)-app103 (November 03, 2013, 12:53 AM)
Dammit! I'll have to move ... I'm definitely a dog person.-4wd (November 05, 2013, 06:26 PM)
And that joke whizzed RIGHT over my head, but I refuse to
(Yay Strike-through!)-TaoPhoenix (November 05, 2013, 10:11 PM)
Bitcoin is a technological advance. Just because it has something to do with financials doesn't make it any less so. Just my .02. And looking back through the thread, most of it is of a technological slant- even the last article posted. First we wanted to have one thread to contain it... and now no threads at all? Just ignore anything to do with it?(my emphasis)
Seems a bit off...-wraith808 (November 05, 2013, 11:52 PM)
Linked tabs
In a dual-display Lister, a folder tab on one side of the Lister can be linked with a tab on the other side. When two tabs are linked, selecting one in the Lister to make it active automatically activates the linked tab too. Linked tabs are displayed in different colors from unlinked tabs, and you can configure these colors from the Display / Colors and Fonts page in preferences.
You may choose to make both tabs in a pair slaves, in which case changing the folder in either tab will also change the folder in the other, or you may choose to only make one of the two takes a slave, in which case changes to the non-slave tab will affect both tabs while changes to the slave tab will only affect it.
Snowden might end up being extradited to the US within a couple of months, regardless of what the German government might have promised him.yes,-IainB (November 04, 2013, 04:52 PM)
It might already be a ruse to entice Snowden into a country from which he could be more readily extradited to the US. There's no honour amongst thieves.--IainB (November 04, 2013, 04:52 PM)