Sunday, March 26, 2017
Direct approach 2
Yesterday I noted a report about a burglar who was checking out houses by posing as a salesman inquiring about security. Simple and efficient. Do you have ADT? If not, you're set up for a burglary.
Firefox is doing something similar in its idiotic campaign to eradicate non-HTTPS websites. The latest version forces you to RE-ENTER passwords every time when accessing any non-HTTPS website. Even if you check the 'remember this' box, Firefox won't let the website 'remember this'. My paid web storage is non-HTTPS, so I have to re-enter the password each time I upload an image for use here; and then I have to explicitly dismiss a warning about the non-HTTPS content before I can either save or publish the post.
Do those extra steps increase security? Fuck no. Each re-entry of the password makes a new opportunity for a key-tracker to read the password, and each extra step in saving or posting adds more web traffic for other bots to read.
If Firefox thinks I'm going to switch storage to get out of their security inquiry, they're wrong. Firefox is run by tech-tyrants who spend their life hooked intraneuronically to Github. Their lives are contained in superfast RAM, instantly updating everything to the latest subsubsubversion as of the latest picopicopicosecond. Leaving anything constant for a full second is
I've got something like 3500 files in that old "insecure" storage website. Switching would require editing all 7200 posts on this blog, and there's no automatic way to do that. Thus the switch would offer 7200 new opportunities for bots to see the passwords.
This parallels the Romneycare delusion about shopping around for health insurance. Getting approved for insurance is a long and risky process. If you're young and healthy, and if INSURANCE IS NOT REQUIRED, maybe you can risk being uninsured for several months. Since INSURANCE IS REQUIRED, shopping around is made EXPLICITLY ILLEGAL by the same idiotic system that assumes you can shop around. Neither side of the Catch-22 was fixed by this month's alleged "fix", so it deserves to fail.
I've got something like 3500 files in that old "insecure" storage website. Switching would require editing all 7200 posts on this blog, and there's no automatic way to do that. Thus the switch would offer 7200 new opportunities for bots to see the passwords.
This parallels the Romneycare delusion about shopping around for health insurance. Getting approved for insurance is a long and risky process. If you're young and healthy, and if INSURANCE IS NOT REQUIRED, maybe you can risk being uninsured for several months. Since INSURANCE IS REQUIRED, shopping around is made EXPLICITLY ILLEGAL by the same idiotic system that assumes you can shop around. Neither side of the Catch-22 was fixed by this month's alleged "fix", so it deserves to fail.Labels: defensible spaces
¶ 2:01 AM
