Spork Boards

That Darn Microsoft!

tomierna's Avatar Picture tomierna (Admin) – December 08, 2007 02:34AM Reply Quote
FUD, fear and loathing, cross-platform livin', sickness unto death, enterprise strategies and tactics.

rino – March 03, 2008 07:52PM Reply Quote
In America, the only respectable form of socialism is socialism for the rich.
It's the world's largest software company who spawned the world's richest man and many others in the top 100.


I just don't trust a site when I see that.

Cloudscout – March 03, 2008 11:30PM Reply Quote
Det finnes ikke dårlig vær, bare dårlige klær!
I've been getting a LOT of expired certificate errors when connecting to various Microsoft sites lately.

Ironic, given the fact that I've been going to lots of meetings lately to discuss the problems surrounding certificate/key management in our Microsoft infrastructure and listening to people complain about how it shouldn't be so hard.

stan adams – March 04, 2008 12:05PM Reply Quote
In my mind a certificate should ONLY change when the thing that it is "protecting" changes. It makes no more sense to have certificates expire annually than if I had to arbitrarily change my home's front door lock annually or install a new mailbox at the end of my driveway annually if I want the Post Office to deliver mail to me.

Unfortunately we LET the people that dreamed up the "annual city sticker" scam also be in charge of "certificate authorities". BIG mistakes on both...

YDD – March 04, 2008 12:37PM Reply Quote
Quote

In my mind a certificate should ONLY change when the thing that it is "protecting" changes

Or when the encryption key which produced the certificate gets cracked. Or when the company which requested the certificate goes bust, and the certificate needs revocation as a result. Whether a year is an appropriate timescale is another matter, but having certificates automatically expire does seem like a good principle - a sort of dead man's handle.



Edited 1 time(s). Last edit at 03/04/2008 12:38PM by YDD.

stan adams – March 04, 2008 12:59PM Reply Quote
If I knew or suspected the key to my front had been picked I'm pretty sure I'd change the lock ASAP, and if my mailbox gets run over it I replace it -- that covers cracking and the failure of the authority. I understand the theoretical value of time limited certs, but as a practical matter I think it sucks.



Edited 1 time(s). Last edit at 03/04/2008 01:01PM by stan adams.

El Jeffe – March 04, 2008 01:24PM Reply Quote
What a journey.
You can rest assured that your lock is as good as picked. That's why I bar my doors.



What a journey.

stan adams – March 04, 2008 02:16PM Reply Quote
"withstands over two tons of force"

quote from last night's Terminator "it'll be quicker to go through the wall" and those were CINDER BLOCK...



Edited 1 time(s). Last edit at 03/04/2008 02:16PM by stan adams.

El Jeffe – March 04, 2008 02:29PM Reply Quote
What a journey.
that was the strangest scene with that guys son in his room off his office.

What a journey.

bahamut – March 04, 2008 04:36PM Reply Quote
jesus christ, i thought indiana was relatively safe!

El Jeffe – March 04, 2008 05:34PM Reply Quote
What a journey.
It is for ME! I'm prepared.

What a journey.

rino – March 04, 2008 07:45PM Reply Quote
In America, the only respectable form of socialism is socialism for the rich.
holy hand grenades! you guys have locks on your mail boxes? I guess it depends first on single-family dwelling vs. condo/apartments.

...around here FedEx/UPS leaves all manner of boxes on our porch.
We definitely do not have bars or clubs or alarms. We do lock doors.

My dad who worked on the Dallas police force as a crimes against property detective basically says any of it is just a deterrent but the reality is if a criminal really wants in they are getting in...

El Jeffe – March 04, 2008 08:26PM Reply Quote
What a journey.
locks? Hell no. Send everything to "The UPS Store" (formerly Mailboxes, etc.) Much more secure, dependable, and LIABLE.

What a journey.

tliet – March 05, 2008 12:49AM Reply Quote
The front door of my house (containing two appartments) is never locked, and the door to my appartment is also never locked, since I share the stairs with my neighbour downstairs, why would I? His frontdoor is also unlocked.

We tend to double lock the house front door when we are both gone (neighbour and me), otherwise, it's just open.

You are as safe as you feel yourself.

(why are we talking about this in the Microsoft thread?)

El Jeffe – March 05, 2008 05:28AM Reply Quote
What a journey.
Because MS employees roam free.

What a journey.

Dr Phred (Moderator) – March 05, 2008 07:49AM Reply Quote
owned by the mothership.
good point. Will we ever be safe while Microsoft runs free?

Rarely lock my door here. Never had a package disappear from the front stoop.

El Jeffe – March 05, 2008 08:02AM Reply Quote
What a journey.
but, do you feel safe enough to advertise that? Put a sign up out front that says door unlocked, no guns inside.

I know a guy that would leave his door wide open, not just unlocked, in the dorms. That used reverse psych by making people think he was always close by.

What a journey.

YDD – March 05, 2008 10:53AM Reply Quote
Quote

If I knew or suspected the key to my front had been picked I'm pretty sure I'd change the lock ASAP, and if my mailbox gets run over it I replace it -- that covers cracking and the failure of the authority
But how do you push that notification out to people? This isn't just between you and your front door. Lots of people are using those certificates to authenticate websites, and if one gets cracked (whether it's the Versign original, or a individual company's) how do you push that information out? Automatic expiration at least means that you can stop worrying at a definite point in time.

Robert Taylor – March 06, 2008 07:40PM Reply Quote
Quote
El Jeffe
Because MS employees roam free.

Ahem.

El Jeffe – March 06, 2008 07:54PM Reply Quote
What a journey.
sorry, thought you were too busy to roam free.

What a journey.

bahamut – March 07, 2008 02:53AM Reply Quote
i live within spitting distance of newark and they leave packages on our porch all the time.

Sorry, only registered users may post in this forum.

Click here to login