Click here to Skip to main content

The Insider News

   

The Insider News is for breaking IT and Software development news. Post your news, your alerts and your inside scoops. This is an IT news-only forum - all off-topic, non-news posts will be removed. If you wish to ask a programming question please post it here.

Get The Daily Insider direct to your mailbox every day. Subscribe now!

 
NewsThoughts on the Apple TV SDK PinstaffTerrence Dorsey25-Jun-13 11:35 
Newseval() isn’t evil, just misunderstood PinstaffTerrence Dorsey25-Jun-13 11:35 
NewsNot Your Grandfather’s Open-source PinstaffTerrence Dorsey25-Jun-13 11:34 
NewsMicrosoft-Oracle deal: What you need to know PinstaffTerrence Dorsey25-Jun-13 9:07 
NewsAs sales plunge, Barnes & Noble says it will stop making Nook tablets PinstaffTerrence Dorsey25-Jun-13 9:06 
GeneralRe: As sales plunge, Barnes & Noble says it will stop making Nook tablets PinmemberDave Calkins25-Jun-13 9:14 
GeneralRe: As sales plunge, Barnes & Noble says it will stop making Nook tablets PinprotectorAspDotNetDev25-Jun-13 12:45 
NewsMicrosoft brings BizSpark, Bing Fund, and its accelerators under one roof PinstaffTerrence Dorsey25-Jun-13 9:06 
NewsNSA has total access via Microsoft Windows PinstaffTerrence Dorsey25-Jun-13 9:06 
GeneralRe: NSA has total access via Microsoft Windows Pinmemberlewax0025-Jun-13 10:38 
GeneralRe: NSA has total access via Microsoft Windows PinmemberRene Pilon25-Jun-13 11:48 
GeneralRe: NSA has total access via Microsoft Windows Pinmemberlewax0025-Jun-13 12:08 
GeneralRe: NSA has total access via Microsoft Windows PinmemberRene Pilon25-Jun-13 12:47 
GeneralRe: NSA has total access via Microsoft Windows Pinmemberlewax0025-Jun-13 13:05 
Rene Pilon wrote:
Question is - is that reg key (and who knows where else it sits) used for a crypto seed - or is it a unique ID....
It's a public key[^], and it's the same on everyone's machine. In short, from my understanding, a public key allows you to do two things:
1. Decrypt data encrypted with the associated private key.
2. Confirm data came from the owner of the private key.
 
Neither of those is a danger to anyone's computer directly. There could be an issue of what you're decrypting (e.g. spyware of some sort), but then, why bother sending it encrypted if everyone has the key on their machine? The next is using it to confirm something was sent from a specific sender. So at worst, it would confirm some data came from the NSA. Unless there's more to it, e.g. it's open to any incoming internet traffic and will decode and execute arbitrary data, that alone isn't enough to be an obvious threat.
 
The real things to consider here:
a. Does it actually have anything to do with the NSA? (Seems like it would be a little stupid of them to label it "NSAKEY" if it was supposed to be some secret backdoor. It could easily stand for something like "Null Signing Authority", which would make sense for a test key.)
b. What is that module actually used for? How could it actually allow someone to compromise an entire computer?
c. Would MS actually go along with something like this? Seems a little dangerous to intentionally include any sort of back door, not to mention potential backlash.
GeneralRe: NSA has total access via Microsoft Windows PinmemberRene Pilon25-Jun-13 13:17 
NewsThe Future of Internet & Cars PinstaffTerrence Dorsey25-Jun-13 9:05 
NewsI felt a disturbance in the force... PinprotectorPete O'Hanlon25-Jun-13 4:46 
GeneralRe: I felt a disturbance in the force... PinprofessionalDennis E White25-Jun-13 5:30 
GeneralRe: I felt a disturbance in the force... PinprotectorPete O'Hanlon25-Jun-13 5:47 
NewsDon Knuth and the Art of Computer Programming: The Interview PinstaffTerrence Dorsey24-Jun-13 12:40 
NewsHeirs of Infocom: Where interactive fiction authors and games stand today PinstaffTerrence Dorsey24-Jun-13 12:39 
NewsAll the Apps Have Been Written PinstaffTerrence Dorsey24-Jun-13 12:39 
NewsThe development of Linux Kernel 3.9 PinstaffTerrence Dorsey24-Jun-13 12:38 
NewsDirty Game Development Tricks PinstaffTerrence Dorsey24-Jun-13 12:37 
NewsAOL launches Reader for RSS PinstaffTerrence Dorsey24-Jun-13 11:39 
NewsA very old problem turns 20 PinstaffTerrence Dorsey24-Jun-13 11:38 
GeneralRe: A very old problem turns 20 PinprotectorAspDotNetDev24-Jun-13 13:27 
NewsMicrosoft Tightens Security for Virtual Machines in Windows Azure PinstaffTerrence Dorsey24-Jun-13 11:38 
NewsLSI puts out a 4TB PCIe3 SSD PinstaffTerrence Dorsey24-Jun-13 11:38 
GeneralRe: LSI puts out a 4TB PCIe3 SSD PinprotectorAspDotNetDev24-Jun-13 13:32 
GeneralRe: LSI puts out a 4TB PCIe3 SSD PinstaffTerrence Dorsey24-Jun-13 13:47 
NewsAnger mounts after Facebook's 'shadow profiles' leak in bug PinstaffTerrence Dorsey24-Jun-13 11:37 
NewsLinux Game Engine Revolution PinstaffTerrence Dorsey23-Jun-13 14:06 
GeneralRe: Linux Game Engine Revolution [modified] PinmemberLloyd Atkinson23-Jun-13 16:34 
NewsBasic JavaScript: an introduction to the language PinstaffTerrence Dorsey23-Jun-13 14:05 
GeneralRe: Basic JavaScript: an introduction to the language PinprotectorAspDotNetDev24-Jun-13 7:11 
NewsThe Facade Pattern in .NET PinstaffTerrence Dorsey23-Jun-13 14:05 
NewsScala for C# Developers: A Tutorial PinstaffTerrence Dorsey23-Jun-13 14:04 
NewsProgramming Elixir PinstaffTerrence Dorsey23-Jun-13 14:04 
News3 Things Java Programmers Can Steal from Clojure PinstaffTerrence Dorsey23-Jun-13 9:33 
NewsThirteen Tenets Of User Experience PinstaffTerrence Dorsey23-Jun-13 9:32 
NewsBut what does it all mean? (Talking about code) PinstaffTerrence Dorsey23-Jun-13 9:31 
NewsCan Microsoft’s exFAT file system bridge the gap between OSes? PinstaffTerrence Dorsey23-Jun-13 9:31 
NewsA funny case of using the (virtual) PC PinstaffTerrence Dorsey23-Jun-13 9:30 
NewsComparison of Ways to Check Preconditions in Java [modified] PinmemberMarkus Sprunck21-Jun-13 3:01 
NewsA Coder Interview With Maureen McElaney PinstaffTerrence Dorsey20-Jun-13 11:55 
NewsKeep your hands off my xap! – Obfuscating your Windows Phone and Windows Store code PinstaffTerrence Dorsey20-Jun-13 11:54 
GeneralRe: Keep your hands off my xap! – Obfuscating your Windows Phone and Windows Store code PinprofessionalRanjan.D20-Jun-13 12:17 
GeneralRe: Keep your hands off my xap! – Obfuscating your Windows Phone and Windows Store code PinprofessionalKarl Sanford21-Jun-13 3:31 
GeneralRe: Keep your hands off my xap! – Obfuscating your Windows Phone and Windows Store code PinmemberDan Neely21-Jun-13 3:34 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.


Advertise | Privacy | Mobile
Web02 | 2.8.1411023.1 | Last Updated 27 Nov 2014
Copyright © CodeProject, 1999-2014
All Rights Reserved. Terms of Service
Layout: fixed | fluid