How do you propose local law enforcement deal with a cross-state hack (oh wait, thats federal territory)? And do you want every local PD to have their own 10+ years experience security guru dedicated to dealing with such hacks?
Lack of common sense alert. The FBI isn't usually called in to deal with shoplifters or domestic violence.
They usually ARE called, however, to deal with internet fraud and hacks, as local police usually have neither the jurisdiction nor the resources to do so.
Without the hardware acceleration, the Xeon E3 1220 would handle around 2-3gbits of AES. My core i3 laptop exceeded 1gbps AES when tested from within a virtual machine (with all the overhead that entails).
For that matter, my laptop is simulating an entire network with failover firewalls and an LDAP server. Try that on 5 year old hardware.
Offices (or their tenants) dont usually pay electricity-- not that Ive ever heard of. Possibly its a concern in the server enviornment, but if thats the case Intel makes some new Xeons with 20w power draw (Xeon E3 1220L) which would kick the crap out of those ARM processors.
As for desktop prices, will it run Windows well? What about Office 2010? If not, are you factoring the costs of switching your software suite over to something totally different?
No, thats not what homeless means. Homeless means you dont have a permenant residence-- you could be at a shelter, or moving from friend's house to friend's house, or you could be "on the streets", or any number of other possibilities.
Seeing as hackers tend to need internet access, Im guessing its one of the first two.
False dichotomy alert. Lets stop going after shoplifters, hackers, and wife beaters, until we've taken care of the mafia, drug lords, and crazy dictators with nukes.
The new i5s and i7s are about 7 times faster at AES encryption with the new instruction set, than an equivalent processor without it. So try scaling that up to 21ghz, if you want to compete with an i5 2600k. Which do you suppose is easier, adding that instruction set or dealing with the TDP of a 21ghz cpu?
I'm sure some things actually are faster, but in terms of what's available to consumers, it hasn't seemed to get all that much faster the last few years..
Heres a reality check for you.
Im speccing out a machine for a pfSense firewall; Ive settled on a low power, 20 watt Xeon E3 1220L. At about 1/5th the power consumption of a Pentium 4 2.8ghz (and at about 75% the clockrate), it can handle about 13.5gbits of AES encryption, compared to the Pentium's 500mbps.
So we're talking a 36-fold improvement in processor performance in the area of encryption, along with a 5-fold reduction in power requirements; not to mention the improved memory bandwidth and whatnot.
Processors continue to improve at a rapid pace; Intel is supposed to be releasing Ivy Bridge soon, which should have another ~15% performance increase, and they just released Sandy Bridge which mostly eliminates the need for a dedicated GPU on laptops and about 80% of users.
So when people bemoan the rate of computer improvement, despite the MASSIVE leaps in performance, reductions in power usage, and price drops (a core i3 @ $100? A phenom x3 @ $60? Yes please), it boggles my mind. 5 years ago a "modern", decent gaming rig could be had for about $800. Prior to that, getting a fabled 2GB of ram was like $200 on its own. These days, you can have a decent gaming rig for about $500, with none of your parts costing substantially more than $60. For goodness sake, RAM is down to about $6 per GB.
Heck, I just priced out and ordered 2 laptops for 2 different clients-- they come with i3s, 4GB of RAM, a 4hr battery life, and very high build quality, all for under $500. Where the heck could you have gotten a laptop anywhere close to that value 3 years ago? A celeron? A crappy AMD mobile?
Another set of keys (Pkek) permits communication between an OS and the firmware. An OS with a Pkek matching that installed in the firmware may add additional keys to the whitelist. Alternatively, it may add keys to a blacklist. Binaries signed with a blacklisted key will not load.
So why cant a rootkit that has subverted the OS insert its own signing key to the whitelist, THEN replace the boot sector, and reboot just fine? The problem is that if you include any mechanism for letting the OS modify its own boot sector (which seems like a really good idea), it seems like a subverted OS could bypass the protections entirely.
You don't need anyone to press charges if you're caught smoking pot, driving drunk, passing bad checks, or even if you hit your wife
If your wife decides to drop charges, I dont think theres anything they can do. Ditto with the bad checks, whoever you committed that specific crime against can choose to drop the charges.
As for driving drunk and pot, those are crimes against the state, so the state is able to press or drop charges.
Basically, whoever is paying for (or at least having to request) the lawyer, is the person who has to either press or drop charges-- at least AFAIK.
Oh boy, a lawsuit. Last I checked, computer hacking was a federal crime punishible by up to 20 years in prison.
Issue of whether or not it qualifies as hacking aside, crimes have to be tried in court, and the persons wronged generally need to press charges. If they choose to drop the charges due to a settlement, then that basically does let them off the hook (as the "victims" have agreed not to pursue the matter).
Thats not being above the law, and if you think it is, you seriously dont understand how the system works. If I steal $100 from you, and then we settle out of court with me agreeing to mow your lawn for the next 30 years in compensation, the matter is closed as far as the courts are concerned-- it doesnt set me up as being "above the law".
Re:Warning: Excessive buzzwords can be fatal
on
Windows 8 Roundup
·
· Score: 1
I know of such services and have used them. Can you explain how "Xbox" or "windows phone 7" will become a continuous service in the manner you described? Pretty sure if you stomp on your one phone you wont somehow continue receiving calls.
. Notice how no one at Sony has gone to jail for hacking thousands of computers with their rootkit.
Not to defend sony here, but if you cant see the difference between invasive, ill-planned, and destructive-- yet nevertheless not malicious-- DRM software; and an intentional intrusion and breach of millions of customer records; then I dont think theres much help for you. The one causes inconvenience and at worse requires a reinstall of your OS, while the other resulted in hundreds of millions of dollars in damages, potentially affected credit scores for millions, and caused those millions to have to cancel credit cards etc and hope that their addresses were not harvested for spamming. You tell me which is more severe.
And Im pretty sure (though my memory is fuzzy) there WAS a lawsuit on this issue; a quick googling shows that Sony settled with the customers, so while their credibility and reputation may be shot because of it, its hardly fair to complain that they didnt go to jail.
Good grief, its like you dont even have to be realistic or accurate to get an insightful mod, you simply have to bash whatever big corp is in the title of the article.
I'm at the BUILD conference, and my impression is that Windows 8 will be very competitive. The re-imagining effort is sweeping, and touches everything from the back end to Consumer devices.
I remember saying the same thing about Vista. Then Vista came out, and it became apparent that changing absolutely everything doesnt really make for a winning, solid OS-- it just tends to break and piss everyone off.
Warning: Excessive buzzwords can be fatal
on
Windows 8 Roundup
·
· Score: 1
Windows 8, Windows Server, Windows Phone 7, Xbox, Bing, and Office, and each of their corollary utilities and tools, will all become “continuous services” — services that fully leverage Windows Azure and Live to provide a new level of context- and position-aware computing.
Additionally, with the new Bing(TM) services leveraging the groundbreaking Azure(tm) Cloud Computing Platform-- the CCP-- you can utilize your core capabilities in a paradigm shifting manner that leads to brand new intra-platform synergies.
Windows 8-- because I have no idea WTF I just said.
Maybe you should read the comments in this thread. There are a LOT of people in this topic advocating this type of response. Jail time? What do you think that does for your resume?
Sarcasm like that doesnt work so well when a ton of people are making the same statements sincerely.
I'm always surprised that in these discussion someone always turns up to find excuses for twits like Sean Duffy.
Its because there are a number of us who arent convinced that this is an attempt at justice, rather than some emotional "he hurt my feelings and must pay" response. Harassment it may in fact be, but I tend to think that if you get upset that someone speaks their mind on facebook and you cant deal with it, the law isnt really the best vehicle to "fix" the situation.
I might be wrong here, Im just really suspicious of the emotional response and the call to jail time for what amounts to "he hurt my feelings". For the record, I am also not familiar with the UK's laws on harassment, but again jail time doesnt seem to meet (IMHO) any real standard of "proportional punishment".
The problem I have is, the old standard of "eye for an eye" (which is usually criticised for being harsh) would dictate that this person have his feelings hurt in return for hurting other's feelings.
Im not clear how jail time is the equivalent punishment for hurting someones feelings, honestly.
I want to be clear, that I think the guys a jerk and what he did was wrong.
At the same time, Im not sure I would call "having my feelings hurt" something that makes me a "victim". Good grief, how did you ever make it through high school?
Better analogy: It doesn't matter whether your door is locked or unlocked, it's still wrong for someone to enter and spray graffiti on the walls.
And the wrongness of it doesnt mean you shouldnt lock your doors. If you want to stop getting burglarized, you lock your door; if you want to stop having your feelings hurt (and on the INTERNET no less), you moderate your page.
Slashdot Mirror
Heh, that's particularly funny that you called a 'False dichotomy alert', then posted a false dichotomy.
Its called sarcasm, I was parodying his sentiment. One might add, woooooosh.
I suppose you COULD call it a strawman, except its basically repeating what he said, so its not exactly a strawman either.
How do you propose local law enforcement deal with a cross-state hack (oh wait, thats federal territory)? And do you want every local PD to have their own 10+ years experience security guru dedicated to dealing with such hacks?
Lack of common sense alert. The FBI isn't usually called in to deal with shoplifters or domestic violence.
They usually ARE called, however, to deal with internet fraud and hacks, as local police usually have neither the jurisdiction nor the resources to do so.
Without the hardware acceleration, the Xeon E3 1220 would handle around 2-3gbits of AES. My core i3 laptop exceeded 1gbps AES when tested from within a virtual machine (with all the overhead that entails).
For that matter, my laptop is simulating an entire network with failover firewalls and an LDAP server. Try that on 5 year old hardware.
Yes, because they totally cant manage that now.
Offices (or their tenants) dont usually pay electricity-- not that Ive ever heard of. Possibly its a concern in the server enviornment, but if thats the case Intel makes some new Xeons with 20w power draw (Xeon E3 1220L) which would kick the crap out of those ARM processors.
As for desktop prices, will it run Windows well? What about Office 2010? If not, are you factoring the costs of switching your software suite over to something totally different?
No, thats not what homeless means. Homeless means you dont have a permenant residence-- you could be at a shelter, or moving from friend's house to friend's house, or you could be "on the streets", or any number of other possibilities.
Seeing as hackers tend to need internet access, Im guessing its one of the first two.
False dichotomy alert. Lets stop going after shoplifters, hackers, and wife beaters, until we've taken care of the mafia, drug lords, and crazy dictators with nukes.
The suspected hacker is homeless and alleged to have been involved in Santa Cruz County government website cyberattacks...
So, hacking county government websites is ok, just so long as you are homeless? Is that how it works?
Or is your objection that county police werent involved in an internet crime?
The new i5s and i7s are about 7 times faster at AES encryption with the new instruction set, than an equivalent processor without it. So try scaling that up to 21ghz, if you want to compete with an i5 2600k. Which do you suppose is easier, adding that instruction set or dealing with the TDP of a 21ghz cpu?
I'm sure some things actually are faster, but in terms of what's available to consumers, it hasn't seemed to get all that much faster the last few years..
Heres a reality check for you.
Im speccing out a machine for a pfSense firewall; Ive settled on a low power, 20 watt Xeon E3 1220L. At about 1/5th the power consumption of a Pentium 4 2.8ghz (and at about 75% the clockrate), it can handle about 13.5gbits of AES encryption, compared to the Pentium's 500mbps.
So we're talking a 36-fold improvement in processor performance in the area of encryption, along with a 5-fold reduction in power requirements; not to mention the improved memory bandwidth and whatnot.
Processors continue to improve at a rapid pace; Intel is supposed to be releasing Ivy Bridge soon, which should have another ~15% performance increase, and they just released Sandy Bridge which mostly eliminates the need for a dedicated GPU on laptops and about 80% of users.
So when people bemoan the rate of computer improvement, despite the MASSIVE leaps in performance, reductions in power usage, and price drops (a core i3 @ $100? A phenom x3 @ $60? Yes please), it boggles my mind. 5 years ago a "modern", decent gaming rig could be had for about $800. Prior to that, getting a fabled 2GB of ram was like $200 on its own. These days, you can have a decent gaming rig for about $500, with none of your parts costing substantially more than $60. For goodness sake, RAM is down to about $6 per GB.
Heck, I just priced out and ordered 2 laptops for 2 different clients-- they come with i3s, 4GB of RAM, a 4hr battery life, and very high build quality, all for under $500. Where the heck could you have gotten a laptop anywhere close to that value 3 years ago? A celeron? A crappy AMD mobile?
Seriously, come back to reality please.
Is it possible it wasnt funny, it was just stupid, off topic, and without value as a comment?
Im not understanding this either.
Another set of keys (Pkek) permits communication between an OS and the firmware. An OS with a Pkek matching that installed in the firmware may add additional keys to the whitelist. Alternatively, it may add keys to a blacklist. Binaries signed with a blacklisted key will not load.
So why cant a rootkit that has subverted the OS insert its own signing key to the whitelist, THEN replace the boot sector, and reboot just fine?
The problem is that if you include any mechanism for letting the OS modify its own boot sector (which seems like a really good idea), it seems like a subverted OS could bypass the protections entirely.
Or am I missing something here?
You don't need anyone to press charges if you're caught smoking pot, driving drunk, passing bad checks, or even if you hit your wife
If your wife decides to drop charges, I dont think theres anything they can do. Ditto with the bad checks, whoever you committed that specific crime against can choose to drop the charges.
As for driving drunk and pot, those are crimes against the state, so the state is able to press or drop charges.
Basically, whoever is paying for (or at least having to request) the lawyer, is the person who has to either press or drop charges-- at least AFAIK.
How else do you think settlements are reached?
Oh boy, a lawsuit. Last I checked, computer hacking was a federal crime punishible by up to 20 years in prison.
Issue of whether or not it qualifies as hacking aside, crimes have to be tried in court, and the persons wronged generally need to press charges. If they choose to drop the charges due to a settlement, then that basically does let them off the hook (as the "victims" have agreed not to pursue the matter).
Thats not being above the law, and if you think it is, you seriously dont understand how the system works. If I steal $100 from you, and then we settle out of court with me agreeing to mow your lawn for the next 30 years in compensation, the matter is closed as far as the courts are concerned-- it doesnt set me up as being "above the law".
I know of such services and have used them. Can you explain how "Xbox" or "windows phone 7" will become a continuous service in the manner you described? Pretty sure if you stomp on your one phone you wont somehow continue receiving calls.
. Notice how no one at Sony has gone to jail for hacking thousands of computers with their rootkit.
Not to defend sony here, but if you cant see the difference between invasive, ill-planned, and destructive-- yet nevertheless not malicious-- DRM software; and an intentional intrusion and breach of millions of customer records; then I dont think theres much help for you. The one causes inconvenience and at worse requires a reinstall of your OS, while the other resulted in hundreds of millions of dollars in damages, potentially affected credit scores for millions, and caused those millions to have to cancel credit cards etc and hope that their addresses were not harvested for spamming. You tell me which is more severe.
And Im pretty sure (though my memory is fuzzy) there WAS a lawsuit on this issue; a quick googling shows that Sony settled with the customers, so while their credibility and reputation may be shot because of it, its hardly fair to complain that they didnt go to jail.
Good grief, its like you dont even have to be realistic or accurate to get an insightful mod, you simply have to bash whatever big corp is in the title of the article.
Im pretty sure on a standard blackberry I could keep up, without looking, with someone using pen and paper (also without looking).
Im sure its well coded and quite fast, though-- after all, this IS McAfee.
I'm at the BUILD conference, and my impression is that Windows 8 will be very competitive. The re-imagining effort is sweeping, and touches everything from the back end to Consumer devices.
I remember saying the same thing about Vista. Then Vista came out, and it became apparent that changing absolutely everything doesnt really make for a winning, solid OS-- it just tends to break and piss everyone off.
Windows 8, Windows Server, Windows Phone 7, Xbox, Bing, and Office, and each of their corollary utilities and tools, will all become “continuous services” — services that fully leverage Windows Azure and Live to provide a new level of context- and position-aware computing.
Additionally, with the new Bing(TM) services leveraging the groundbreaking Azure(tm) Cloud Computing Platform-- the CCP-- you can utilize your core capabilities in a paradigm shifting manner that leads to brand new intra-platform synergies.
Windows 8-- because I have no idea WTF I just said.
Maybe you should read the comments in this thread. There are a LOT of people in this topic advocating this type of response. Jail time? What do you think that does for your resume?
Sarcasm like that doesnt work so well when a ton of people are making the same statements sincerely.
I'm always surprised that in these discussion someone always turns up to find excuses for twits like Sean Duffy.
Its because there are a number of us who arent convinced that this is an attempt at justice, rather than some emotional "he hurt my feelings and must pay" response.
Harassment it may in fact be, but I tend to think that if you get upset that someone speaks their mind on facebook and you cant deal with it, the law isnt really the best vehicle to "fix" the situation.
I might be wrong here, Im just really suspicious of the emotional response and the call to jail time for what amounts to "he hurt my feelings".
For the record, I am also not familiar with the UK's laws on harassment, but again jail time doesnt seem to meet (IMHO) any real standard of "proportional punishment".
The problem I have is, the old standard of "eye for an eye" (which is usually criticised for being harsh) would dictate that this person have his feelings hurt in return for hurting other's feelings.
Im not clear how jail time is the equivalent punishment for hurting someones feelings, honestly.
Translation "I blame the victim".
I want to be clear, that I think the guys a jerk and what he did was wrong.
At the same time, Im not sure I would call "having my feelings hurt" something that makes me a "victim". Good grief, how did you ever make it through high school?
Better analogy: It doesn't matter whether your door is locked or unlocked, it's still wrong for someone to enter and spray graffiti on the walls.
And the wrongness of it doesnt mean you shouldnt lock your doors. If you want to stop getting burglarized, you lock your door; if you want to stop having your feelings hurt (and on the INTERNET no less), you moderate your page.