The OSVDB went pay a few years ago. They have a wealth of interesting information and use to be fully open source however due to lack of community involvement they decided that the open source model wasn't working for them.
If the OSVDB has a problem with people scraping their site, they should really update (or in their case - create) their robots.txt. I was interested in this data myself a year or so ago until I found out they wanted me to pay a subscription to access information I can view for free on their website and screen scrape for free if I really wanted to. Further more, I noticed that google has completely cached their site because they take no preventative measures against it. If anyone wanted this data, they could easily screen scrape it from the google cache and the OSVDB would be none the wiser.
Why should anyone pay for data that the OSVDB has literally done nothing to protect?
Seriously. Google and other companies in silicon valley skip out on billions worth of taxes by funneling it through Ireland and this is what you want to focus on. Jet fuel?
Is there a line which gets crossed where every Snowden supporter would say "this has gone too far"?
I have a better question, how much will it take for the American public finally do something about their government that is committed so many international crimes? For the record, I for one do not believe that shedding light criminal activities could ever go too far. What's the old phrase, "Don't shoot the messenger?"
That they can't be the ones spying. Corrupt govt hating on another corrupt govt.
It's hardly hating. Given the circumstances, this will likely become the norm for all governments and quite likely businesses that don't feel like being spied on.
I'd like to think this is a wake up call for all those people that want to throw their data into the cloud without giving it a second thought, but it looks like for the most part nobody cares. And apparently, anyone who does care and takes a pro-active approach will be labelled as a hater.
If you're going to attempt such a blatant slashvertisement-disquised-as-a-story, at least tell us what the fuck "The Old Reader" *is*.
I presume it's yet another RSS-reader similar to Google Reader, like so many others out there??
I enjoy using The Old Reader - I also just happened to hear about them closing up shop this morning, however it wasn't communicated well unless you read their blog. I'm happy this was posted up on Slashdot as it draws attention to the issue that they were considering shutting down their servers. This is news that matters to me.
In the real Pearl Harbor, people died. Unless and until the people talking about "cyberwar" demonstrate that they're defending us against the same kind of lethal threats, there isn't a legitimate comparison.
I completely agree that the "Cyberwar" term is hyped up and thrown around too much. But an attack on critical infrastructure like Water and Energy systems through SCADA attacks could easily result in the loss of lives. Just as an example, how many people depend on life support systems that require energy in hospitals?
How are you supposed to protect a password that you don't even know? It seems to me if someone knew how the system worked, they could trick an unsuspecting user into divulging their password without the users knowledge. This is obfuscation, nothing more.
Checked out the link... interesting read.
Interesting because, considering the plethora of stupid shit that man saidin his 8 years as President, people actually bother to take time to make stuff up.
Anyway, thanks for the update, I'll remove that notion from my vernacular immediately.
Wikiquote seems to disagree (although it mentions it was said behind closed doors...).
Stop throwing the Constitution in my face. It's just a goddamned piece of paper!
What? Read the article. The person who committed the act of stupidity is the person paying for it. This is the way it has to be.
If the banks payed for the stupidity of this man there'd be no incentive not to be stupid.
I work for an international bank and I can assure you we take phishing attacks on our customers very seriously. Almost all banks have an email address where you can forward phishing emails or websites to. I'll agree there is some blame to be put on the users, but the banks should not be off the hook. Banks have the man power and clout to actually shut these sites down.
Yeah, I just read over the wikipedia article on common carriers after posting. Still, this must create some kind of dangerous precedent for ISPs. If they can do if for the MPAA/RIAA, then they could be forced in the future to do it for others, no?
If the ISPs start policing copyright policy, would that not cost them their common carrier status and make them liable for all activity on their networks? Any subject matter experts on common carriers present?
If his credentials are being properly stored as SHA2 hashes, I don't think Google could comply with this anyways. This is the whole point in using hashes over encryption.
And filing is necessary because outlook and run its search for days. When you file your emails, you can search just within that folder, and its much faster. I supposed if you're using outlook 2010 maybe its faster because of its indexing, but its still not very organized.
I'll be honest, didn't even bother reading the article based on the summary. Most threats come from the inside, from people that understand the system. Obscurity isn't an issue for these people, since they built the systems.
Obscurity isn't security at all.
Since the article doesn't have a picture of this legs, I went looking for a picture and found it here. Its also an article about the 2008 decision to not allow him to compete in the Olympics back then. I wonder whats changed?
Slashdot Mirror
The OSVDB went pay a few years ago. They have a wealth of interesting information and use to be fully open source however due to lack of community involvement they decided that the open source model wasn't working for them. If the OSVDB has a problem with people scraping their site, they should really update (or in their case - create) their robots.txt. I was interested in this data myself a year or so ago until I found out they wanted me to pay a subscription to access information I can view for free on their website and screen scrape for free if I really wanted to. Further more, I noticed that google has completely cached their site because they take no preventative measures against it. If anyone wanted this data, they could easily screen scrape it from the google cache and the OSVDB would be none the wiser. Why should anyone pay for data that the OSVDB has literally done nothing to protect?
Seriously. Google and other companies in silicon valley skip out on billions worth of taxes by funneling it through Ireland and this is what you want to focus on. Jet fuel?
Is there a line which gets crossed where every Snowden supporter would say "this has gone too far"?
I have a better question, how much will it take for the American public finally do something about their government that is committed so many international crimes? For the record, I for one do not believe that shedding light criminal activities could ever go too far. What's the old phrase, "Don't shoot the messenger?"
That they can't be the ones spying. Corrupt govt hating on another corrupt govt.
It's hardly hating. Given the circumstances, this will likely become the norm for all governments and quite likely businesses that don't feel like being spied on. I'd like to think this is a wake up call for all those people that want to throw their data into the cloud without giving it a second thought, but it looks like for the most part nobody cares. And apparently, anyone who does care and takes a pro-active approach will be labelled as a hater.
A Google spokesperson said that the company "does not provide encryption keys to any government.""
As Google is a U.S. based company, I'm pretty sure this is a bald faced lie due to the "Patriot Act".
If you're going to attempt such a blatant slashvertisement-disquised-as-a-story, at least tell us what the fuck "The Old Reader" *is*.
I presume it's yet another RSS-reader similar to Google Reader, like so many others out there??
I enjoy using The Old Reader - I also just happened to hear about them closing up shop this morning, however it wasn't communicated well unless you read their blog. I'm happy this was posted up on Slashdot as it draws attention to the issue that they were considering shutting down their servers. This is news that matters to me.
Not only that, its incentive for other people, who may have access to an unknown zero day to disclose that information to MS for the bounty.
"When people stop fighting battles for themselves war becomes nothing more than a game." -- Quatre
In the real Pearl Harbor, people died. Unless and until the people talking about "cyberwar" demonstrate that they're defending us against the same kind of lethal threats, there isn't a legitimate comparison.
I completely agree that the "Cyberwar" term is hyped up and thrown around too much. But an attack on critical infrastructure like Water and Energy systems through SCADA attacks could easily result in the loss of lives. Just as an example, how many people depend on life support systems that require energy in hospitals?
How are you supposed to protect a password that you don't even know? It seems to me if someone knew how the system worked, they could trick an unsuspecting user into divulging their password without the users knowledge. This is obfuscation, nothing more.
Checked out the link... interesting read. Interesting because, considering the plethora of stupid shit that man said in his 8 years as President, people actually bother to take time to make stuff up. Anyway, thanks for the update, I'll remove that notion from my vernacular immediately.
Wikiquote seems to disagree (although it mentions it was said behind closed doors...).
Stop throwing the Constitution in my face. It's just a goddamned piece of paper!
http://en.wikiquote.org/wiki/George_W._Bush
What? Read the article. The person who committed the act of stupidity is the person paying for it. This is the way it has to be.
If the banks payed for the stupidity of this man there'd be no incentive not to be stupid.
I work for an international bank and I can assure you we take phishing attacks on our customers very seriously. Almost all banks have an email address where you can forward phishing emails or websites to. I'll agree there is some blame to be put on the users, but the banks should not be off the hook. Banks have the man power and clout to actually shut these sites down.
So, they want to invade privacy in what should be an illegal manner and they want me to pay them to do it?
Well, when you say it like that, it just sounds stupid.
Yeah, I just read over the wikipedia article on common carriers after posting. Still, this must create some kind of dangerous precedent for ISPs. If they can do if for the MPAA/RIAA, then they could be forced in the future to do it for others, no?
If the ISPs start policing copyright policy, would that not cost them their common carrier status and make them liable for all activity on their networks? Any subject matter experts on common carriers present?
If his credentials are being properly stored as SHA2 hashes, I don't think Google could comply with this anyways. This is the whole point in using hashes over encryption.
Even Slashdot has given up on trying to save the word "hacking"...
The Dojo Toolkit definitely makes javascript feel a little more friendly.
Or are there only corporations on the list of supporters. Are there no individuals left? Or are they just not worth listing?
By popular demand!
And filing is necessary because outlook and run its search for days. When you file your emails, you can search just within that folder, and its much faster. I supposed if you're using outlook 2010 maybe its faster because of its indexing, but its still not very organized.
I'm sure the next time Firefox updates the plugin will be incompatible anyways, just wait a week and the problem will solve itself.
I'll be honest, didn't even bother reading the article based on the summary. Most threats come from the inside, from people that understand the system. Obscurity isn't an issue for these people, since they built the systems. Obscurity isn't security at all.
Couldn't a pilot who's convinced to pull off a terrorist attack just, well -- do it? They are at the controls and all...
What about someone impersonating a pilot? Or using some sort of duress to convince a pilot to smuggle something through checkpoints.
Since the article doesn't have a picture of this legs, I went looking for a picture and found it here. Its also an article about the 2008 decision to not allow him to compete in the Olympics back then. I wonder whats changed?