SoylentNews is people
SoylentNews
from the c80eab5af3a3b8ab69c0e3a3d444540f2d740c76 dept.
Submitted via IRC for TheMightyBuzzard
"Beginning May 9, 2017, Microsoft released updates to Microsoft Edge and Internet Explorer 11 to block sites that are protected with a SHA-1 certificate from loading and to display an invalid certificate warning," the company announced.
The change, however, impacts only SHA-1 certificates that chain to a root in the Microsoft Trusted Root Program where the end-entity certificate or the issuing intermediate uses SHA-1. This means that enterprises or self-signed SHA-1 certificates won't be affected by this. They are, however, encouraged to migrate to SHA-2 based certificates as fast as possible.
"Microsoft recommends that all customers migrate to SHA-2, and the use of SHA-1 as a hashing algorithm for signing purposes is discouraged and is no longer a best practice. The root cause of the problem is a known weakness of the SHA-1 hashing algorithm that exposes it to collision attacks. Such attacks could allow an attacker to generate additional certificates that have the same digital signature as an original," the company notes.
Source: Microsoft Kills SHA-1 Support in Edge, Internet Explorer 11
(Score: 1, Troll) by lx on Saturday May 13 2017, @08:50AM (19 children)
It's easy to hurl criticisms from an Anonymous account.
Show your face if you want to be heard or even better, get off your lazy ass and volunteer to help.
(Score: 0) by Anonymous Coward on Saturday May 13 2017, @09:32AM (18 children)
Hint: I'm one of the submitters. And, here, I submitted the story once again.
I care not about my submission being accepted or not, but I'd say 100 countries affected by a cyber attack is certainly more notable a story than the two affected users by SHA-1 dropped from Edge [soylentnews.org].
And the reality went ahead, the crisis was solved and Soylent...errr.. News(? really?) editor on duty sat on his hands; we'll likely see the story posted in the next century, if ever.
Unfortunately, I don't have time for editing; if I could find time for it, I certainly would have volunteered.
Knowing very well I don't have enough time, I preferred to admit it and stay away from editing (rather than over-promise only to under-deliver afterwards).
Perhaps I'm too old-fashioned in the way I approach responsibilities.
Other than that, I wonder by what process did you deduce I'm lazy?
I can only assume your sole neuron got bored alone and started to fire due to the thermal noise.
I'm might be wrong though on the causes, but I'm dead certain your reply added nothing at value on this site.
(Score: 5, Informative) by The Mighty Buzzard on Saturday May 13 2017, @10:19AM (12 children)
You think we have Eidtors on Duty? How quaint. We have half a dozen or so guys who check in and push stories as they find the time. Often they even have to go find the damned things first. Which, come to think of it, is pretty damned sad when there are more than twenty thousand times that many people visiting the site on any given weekday.
Also, and let me be very clear on this, we are not a news reporting site. We are a news aggregation and discussion site. We generally prefer that news be a day or two old before we run it so that we can have a more informed discussion on it. If we notice it's both important and time sensitive, we'll push it out quickly as breaking news but Yet Another Tedious Exploitation does not warrant that unless A) the attack is severe B) ongoing C) TFA has mitigation information and D) it doesn't primarily affect people who utterly did not give a damn about securing their shat.
Finally, abusing editors is my job, thank you very much, and I'll appreciate you not horning in on it.
My rights don't end where your fear begins.
(Score: 0) by Anonymous Coward on Saturday May 13 2017, @11:33AM (11 children)
We don't? How queer!
And you don't see any problem when the soylents actually submit breaking-news stories and those stories lag until they are no longer breaking, not even news.
What a great motivation for submitting stories, right?
Heaps of links to breaking news to be aggregated into a story, go check the pending queue.
Right, 100 countries affected is not severe, is it now?
Chaos in the UK medical system, with ambulances diverted [cnbc.com], is not threatening, just a usual fact of life on countries other-that-the-mighty-US.
Maybe you don't give a shit about people not giving a shit about security.
How would you feel if your open heart surgery that you need is cancelled [ft.com] because of a ransomware attack perpetrated with NSA tools [forbes.com]?
Sure those surgeons should drop everything they're doing, secure those damn'd WindowXP-es and let Jeremy Cunt sleep well after cancelling a pricey support package in 2015 as a cost-saving measure. [theregister.co.uk]. Cost saving and "starve the beast" is a so trivial fact of life it doesn't worth discussing.
You can continue to abuse them whenever/whatever you like.
Me?... I'm only exercising my right to free-speech, I hope you won't object to that.
Oh, my speech actually abused the editors? Sorry, I though that TMB knows better than to select special snowflakes as editors.
(large trollish grin. Thanks for the fun!).
PS - are you sure soylenters still don't have enough to discuss even with the links I posted in this reply?
(Score: 2) by takyon on Saturday May 13 2017, @11:40AM (1 child)
It will run in 2 hours. You can drop it already.
[SIG] 10/28/2017: Soylent Upgrade v14 [soylentnews.org]
(Score: 2) by c0lo on Saturday May 13 2017, @01:20PM
Oh, don't take it so serious.
Be honest, admit it. If not for me trolling this FA, you'd have a blank page here.
And I wasn't even outrageous in my trolling.
https://www.youtube.com/watch?v=aoFiw2jMy-0 https://soylentnews.org/~MichaelDavidCrawford
(Score: 2) by The Mighty Buzzard on Saturday May 13 2017, @11:52AM (7 children)
I'd feel pretty damned good about it. Maybe the bastards will secure their shit now. This is one of the best possible things anyone could have done to all affected; make them open their wallet.
My rights don't end where your fear begins.
(Score: 0) by Anonymous Coward on Saturday May 13 2017, @01:15PM (6 children)
Yeah.
Perhaps asking for the same volunteering spirit (and speed) as for SN editors will get them to install a Linux or a BSD on those machines, 'cause there's no money in UK's health budget to upgrade from WinXP.
(grin)
(Score: 2) by The Mighty Buzzard on Saturday May 13 2017, @01:29PM (5 children)
Is there money to pay the ransom?
My rights don't end where your fear begins.
(Score: 2) by c0lo on Saturday May 13 2017, @02:53PM (4 children)
Funny enough.], it seems like paying the ransom once is cheaper in this case.
That is... if you don't take into account the cost of the chaos; but who in her/his full mind would look into those costs? The path to freedom (or death) is capitalism, and everybody knows the capitalism is about privatizing the profit and socializing the cost/risk.
https://www.youtube.com/watch?v=aoFiw2jMy-0 https://soylentnews.org/~MichaelDavidCrawford
(Score: 2) by The Mighty Buzzard on Saturday May 13 2017, @03:36PM (3 children)
Only if you're either scum or a socialist. But I repeat myself.
My rights don't end where your fear begins.
(Score: 1) by Scruffy Beard 2 on Saturday May 13 2017, @04:03PM (1 child)
Your're not saying that only scum or Socialists understand Capitalism, are you?
(Score: 2) by The Mighty Buzzard on Saturday May 13 2017, @04:37PM
No, I'm saying only they misunderstand it in that particular way.
My rights don't end where your fear begins.
(Score: 2) by c0lo on Saturday May 13 2017, @10:02PM
Well, I'm redunduntly both, you'll have to live with it.
But I don't worry, you'll manage fine. A thick rind is all you need.
https://www.youtube.com/watch?v=aoFiw2jMy-0 https://soylentnews.org/~MichaelDavidCrawford
(Score: 2) by NotSanguine on Sunday May 14 2017, @05:01AM
Maybe you don't give a shit about people not giving a shit about security.
How would you feel if your open heart surgery that you need is cancelled [ft.com] because of a ransomware attack perpetrated with NSA tools [forbes.com]?
Sure those surgeons should drop everything they're doing, secure those damn'd WindowXP-es and let Jeremy Cunt sleep well after cancelling a pricey support package in 2015 as a cost-saving measure. [theregister.co.uk]. Cost saving and "starve the beast" is a so trivial fact of life it doesn't worth discussing.
And because SoylentNews didn't run this story on your timeline, SN is responsible for any deaths from a lack of open heart surgery, right?
Is that your beef? Or are you just annoyed that you don't control the order in which stories are posted?
No, no, you're not thinking; you're just being logical. --Niels Bohr
(Score: 2) by lx on Saturday May 13 2017, @10:23AM (3 children)
My, aren't we defensive all of a sudden! I must have hit a nerve.
If you're too busy then recognise that others may face the same time constraints as you do and don't bitch about it when your submission isn't picked first from the list.
You can use big words like "old-fashioned" and "responsibility" to puff yourself up but your demeanor suggests selfish motives.
You can easily check the total of my contributions to the site and judge for yourself whether it's a net positive or negative. I have no way to check yours so I naturally assume the worst.
And with that I bid you farewell.
(Score: 0) by Anonymous Coward on Saturday May 13 2017, @10:44AM (2 children)
You didn't.
I didn't.
It suggests to whom exactly?
(like I had nothing else better to do)
I'm not casting a doubt on your total contribution, I'm only pointing that your comment, the one alleging I have a lazy ass, adds nothing of value.
Of course, you are entitled to post whatever you like, TMB will make sure you won't be silenced.
See you next time.
(Score: 0) by Anonymous Coward on Saturday May 13 2017, @08:00PM (1 child)
I must have hit a nerve.
You didn't.
Methinks he doth protest too much!
(Score: 0) by Anonymous Coward on Saturday May 13 2017, @10:20PM
Yet another case of thermal noise causing a sole neuron to fire, don't take it for thinking.
(Score: 2) by NotSanguine on Sunday May 14 2017, @04:57AM
Unfortunately, I don't have time for editing; if I could find time for it, I certainly would have volunteered.
Knowing very well I don't have enough time, I preferred to admit it and stay away from editing (rather than over-promise only to under-deliver afterwards).
Perhaps I'm too old-fashioned in the way I approach responsibilities.
If you don't like how things are done, yet are unable (or unwilling) to help make things better, perhaps you shouldn't complain about those who are making things better for you by keeping this site going.
Just a crazy thought. Carry on.
No, no, you're not thinking; you're just being logical. --Niels Bohr