I'm with you 100%.
Mission critical systems should not be accessible to the outside world.
If you really want to remote control it write your own client/server or whitelist IP addresses, add encryption or just use a VPN.
Scratch that...do all of the above!
I mean which net architect/admin can't set up a simple VPN? That's what they were designed for...that's what they're good at.
You can pick-up any CCNA (yes I know i'm kinda advertising here I don't care) student and he'll do it for you...
Yeah I know if you use a VPN even with the current state of their system the vulns will still be there and I know that no-one likes security through obscurity but access would be limited to the staff anyways and it'd at least be easier to track down the intruder...
This felt like a rant...I didn't plan for my reply to sound like that, excuse me.
Funny thing...
I was developing a web app security assessment platform like Metasploit but for web apps...so I had to get a peak at the competition.
So like a good boy I set up a logger on my website and asked a big security firm to demo their own automated web assessment tool on my website.
I received a report of some hundreds of vulnerabilities. Needles to say not one of them was correct. So I e-mailed them back and told them and got a response with an apology.
If they used an automated tool like that it's very probable most of the vulns were false positives.
Oh and by the way, many of these tools detect e-mail addresses or contact info posted on the site as a possible vulnerabilities because they provide "sensitive information".
My point being...don't fully trust the report. Sure they must have some serious security risks on their website but 3.800 seems extravagant.
PS. Sorry to the guy above me with the
I want a link to the page where I can control a plane!!
for removing my mod +1 funny to his comment. I just had to post this reply. hehe
I think a serious rant and forcing him to pay for the techs to inspect the system for malware[1] etc should be enough.
Could this be worse if he was charged with sexual harassment?
[1] I assume that that's why such sites are forbidden, if it's just due to wasting some time they should ban everything.
What if they wear a turban underneath the headgear to feel like a proper Sikh and a turban outside the headgear to look like a proper Sikh....with an unusually large head.
I'm impressed that he got so many headshot...That's skill... No, I'm not trolling, I just don't see why I should post a serious response to a stupid article.
There already are overclocking tools that do exactly that.
Control the fans, the temperature threshold, cpu freq etc...
I don't see why a worm or other malware can't do the same thing.
..it's not easy to prove that a teacher can't teach.
Where are going to base this on? Some students that can't solve math problems?
I've had my share of bad teachers, and being 20y.o. the memories are still vivid.
In my experience teachers support each other more than they should and turn their head the other way when one of them messes up.
I've seen math teachers copying the teaching books' answers from another book which has the answers.
English class was fun....it was like I were the one who was teaching.
Anyways, I can go oooon and on about this forever so I'll shut up now.
All the above refer to my Greek school but I assume the situation's kind of generic.
I agree with the parent.
Due to my birth-date and some weird Greek law I started school 1 year earlier than my peers...
Although, I never recall having any problems in school.
Other than my rebellious nature and my problem with elementary school teachers acting like rulers of the galaxy just because they have some power over 9 year olds...
Anyway that's not my point.
According to some on-line IQ tests I rank at 100, exactly at the middle of the IQ curve.
Despite that fact, on high school I could do 3-4 degree derivates in my head. For some reason I thought that that part of calculus was fun so I faced it with a different attitude.
Which leads me to my point which is....if you WANT to learn or be good at something you probably can be and with practice you will be...
Sorry if my thoughts were incoherent as I wrote them but I haven't slept for some 30+ hours.
That isn't heartless. It's just plain logical.
Kudos for the rational response.:)
And it's not a child, it's an embryo. (That's a line from House MD, but it's still valid)
...where's the Ubuntu logo? Just kidding hold your horses...
Oh math class, true story...
The girl that went on first was so hot no boy could stand up after her, myself included...why hide it anyways.
No, not at all. But calling the police on you and prosecuting you *is*...
Welcome to my world...
A Greek student with a certificate of Proficiency from Michigan uni living on the North of the UK...The very North.
I thought I was on the wrong country when I first talked to a local. You seriously can't understand most of what they're saying.
This is not a troll, it's true. I guess London would have been a better choice for me...
Unfortunately this sounds about right...
I'm with you 100%.
Mission critical systems should not be accessible to the outside world.
If you really want to remote control it write your own client/server or whitelist IP addresses, add encryption or just use a VPN.
Scratch that...do all of the above!
I mean which net architect/admin can't set up a simple VPN? That's what they were designed for...that's what they're good at.
You can pick-up any CCNA (yes I know i'm kinda advertising here I don't care) student and he'll do it for you...
Yeah I know if you use a VPN even with the current state of their system the vulns will still be there and I know that no-one likes security through obscurity but access would be limited to the staff anyways and it'd at least be easier to track down the intruder...
This felt like a rant...I didn't plan for my reply to sound like that, excuse me.
I was developing a web app security assessment platform like Metasploit but for web apps...so I had to get a peak at the competition.
So like a good boy I set up a logger on my website and asked a big security firm to demo their own automated web assessment tool on my website.
I received a report of some hundreds of vulnerabilities. Needles to say not one of them was correct. So I e-mailed them back and told them and got a response with an apology.
If they used an automated tool like that it's very probable most of the vulns were false positives.
Oh and by the way, many of these tools detect e-mail addresses or contact info posted on the site as a possible vulnerabilities because they provide "sensitive information".
My point being...don't fully trust the report. Sure they must have some serious security risks on their website but 3.800 seems extravagant.
PS. Sorry to the guy above me with the
I want a link to the page where I can control a plane!!
for removing my mod +1 funny to his comment. I just had to post this reply. hehe
I think a serious rant and forcing him to pay for the techs to inspect the system for malware[1] etc should be enough.
Could this be worse if he was charged with sexual harassment?
[1] I assume that that's why such sites are forbidden, if it's just due to wasting some time they should ban everything.
What if they wear a turban underneath the headgear to feel like a proper Sikh and a turban outside the headgear to look like a proper Sikh....with an unusually large head.
I'm impressed that he got so many headshot...That's skill... No, I'm not trolling, I just don't see why I should post a serious response to a stupid article.
There already are overclocking tools that do exactly that.
Control the fans, the temperature threshold, cpu freq etc...
I don't see why a worm or other malware can't do the same thing.
..it's not easy to prove that a teacher can't teach.
Where are going to base this on? Some students that can't solve math problems?
I've had my share of bad teachers, and being 20y.o. the memories are still vivid.
In my experience teachers support each other more than they should and turn their head the other way when one of them messes up.
I've seen math teachers copying the teaching books' answers from another book which has the answers.
English class was fun....it was like I were the one who was teaching.
Anyways, I can go oooon and on about this forever so I'll shut up now.
All the above refer to my Greek school but I assume the situation's kind of generic.
Who cares...
I agree with the parent.
Due to my birth-date and some weird Greek law I started school 1 year earlier than my peers...
Although, I never recall having any problems in school.
Other than my rebellious nature and my problem with elementary school teachers acting like rulers of the galaxy just because they have some power over 9 year olds...
Anyway that's not my point.
According to some on-line IQ tests I rank at 100, exactly at the middle of the IQ curve.
Despite that fact, on high school I could do 3-4 degree derivates in my head. For some reason I thought that that part of calculus was fun so I faced it with a different attitude.
Which leads me to my point which is....if you WANT to learn or be good at something you probably can be and with practice you will be...
Sorry if my thoughts were incoherent as I wrote them but I haven't slept for some 30+ hours.
Oh nevermind...The website started to work now...
Fatal error: Out of memory (allocated 7602176) (tried to allocate 4864 bytes) in /home/myaunt/public_html/wp-includes/pluggable.php on line 901
Yeah that's very cool! I'm almoast jealous I don't have an iPhone...or a Linksys AP...or an R/C toy...
I don't know why but your post made me laugh!
Thank you!
No no no, I don't mean it like *that*...
You are totally 100% spot on.
Dunno, if the hidden data is 30 column wrapped that could be stenography[1].
/. readers I expect a funny mod up. xD
Steno = narrow
graphy = writing
Greek
HOW the F is that informative? No I'm not new here...
MRI does the job...MRI does a lot more than this job though and it's pretty damn expensive.
What is this sex thing you are talking about? TISD[1] please use a different analogy...
TISD = This Is SlashDot
Seems appropriate: http://www.woosk.com/wp-content/uploads/2008/08/ninjas-with-guitars.jpg
Isn't there a difference between being forced to a limit and being able to set or disable the limit yourself?
:P)
Just my 2 cents....
(I have a feeling I'm gonna get wooshed
...this could be a publicity stunt.
Nobody cares though WHY they're doing it as long as they are ACTUALLY doing it.
Anyways, Kudos to Bahnhof!
That isn't heartless. It's just plain logical. :)
Kudos for the rational response.
And it's not a child, it's an embryo. (That's a line from House MD, but it's still valid)