I blame Hillary and the democrats. Hillary for being such a shitty candidate that she couldn't beat someone who may have been an even shittier candidate but it was close on the level of shit. I blame the democrats for selecting a shitty candidate. The fact that it was close in Minnesota and the state was one of the last to be called is a testament to how shitty she was given that MN hasn't gone for the republican since 1972.
The republicans made it very clear they were done with the usual cast of characters that sit on their hands and piss and moan about not being able to do anything and then from their voter's point of view cave. Granted there were better candidates for the republican nomination but the republican voters are likely getting exactly what they thought in this case. If you want to blame those who voted libertarian well that is just further proof of how shitty Hillary was because a party that typically takes votes from republicans caused her loss.
If government wants the data, they must obtain a true warrant and I will decrypt it for them.
Even then it seems that you can tell them to go piss up a rope. They can confiscate the device/storage with the warrant but you don't have to give them the password. They then can try to crack it before the heat death of the universe.
On the other side of things I have been pretty critical of the government especially the various law enforcement and security agencies. If more people call them out as well as their elected representatives we might actually change things. It isn't like I have called my soon to be former congressman either mentally retarded or willfully ignorant when he call me to assure me that the USA FREEDOM act wouldn't do what the fucking law says it was going to do. I have long been a thorn in their side and as someone who likely does enjoy some "white privilege" being a white male with a clean background good education and good job I am willing to use that privilege to fight to keep rights for everyone.
Well there are a bunch kids shows they produced that my kids like so maybe next summer when driving across South Dakota I can just load up a season or two of dino trucks, or Inspector Gadget on the tablet and let the kids watch that in the back seat as we drive past 300 miles of corn.
There are very few 20+ year old vehicles on the road, and even then in 1996 E-10 was common and vehicles were designed to run on it. Going back further having driven a number of really crappy American vehicles from the 80s even those ran fine on E-10, the oldest of which were made in '85. So given that at this point those vehicles which when I had them ran just fine on E-10 would now be 31 years old it isn't an issue. The few vehicles I see from the mid 80s now tend to not be beaters but instead are collector vehicles and are well kept despite being poorly made ugly fucking boxes on tires. Going back farther to the 70s and earlier now you are clearly in the collector car realm. That said from time to time you do find a running older vehicle from the early 80s and 70s for cheap but they don't run well. Much like a buddy who bought a '67 rambler for $250 in like 02 or 03 that burned oil, had bad springs, and had a bad PCV system so moisture would build up in the crank case, lots of rust and dents, and the interior what pretty shot. It ran but not well. He drove it for 9 months regularly until the engine wore out so much it could barely move under its own power and even then he sold it for $500.
but as you mentioned they have no standing to regulate INTRAstate commerce
How I wish that were true. Unfortunately the courts have long held the belief that the interstate commerce clause means that the federal government can not only regulate interstate commerce but also things that have an effect on interstate commerce. Because of this the feds can regulate all commerce such as raising food for my own consumption on my own land that never enters the commercial market.
Unless you have a collector vehicle running on E-10 isn't an issue. If you do have a collector car you probably know where you can get some non-oxy fuel or you should. The biggest problem with E-10 is in small engines marine engines that see little use where the fuel can absorb moisture out of the atmosphere and if too much is absorbed then the ethanol+water mix separates from the gasoline. Here again you should be running some non-oxy fuel anyway and . I haven't had a problem with any of my equipment that is fuel related ever, wear and age yes but never fuel.
I would as well as there really is a lot of cheap crap out there that looks well made even if it isn't but there are still some companies that aren't making crap. My general rule of thumb is to now only buy tools new from a store that will handle the return right there on the spot. If it requires mailing in some busted tool I won't trust it but if the store will take it and give me a new one I will likely buy it. As Ace now carries Craftsman and Stanley tools and will do the lifetime replacement in store I buy most from them now. I do however like Estwing and Vaughan striking tools, and my Hobart wire feed welder (basically Miller's consumer line) you would have to pry out of my cold dead hands.
I'll accept that everyone has different tastes. Personally my favorite drink is some Chabot VSOP Armagnac, then probably some XO Martel Cognac, followed by either Glenlivet 21 or Glenlivet 12 French oak. Although I do like most Irish whiskeys I have had.
My tools have all been new when I got them and I don't have an impact driver so I know it isn't that. The Snap-On and MAC sockets that I have broken were all impact sockets (when I worked at U-Haul) so it isn't like they were the regular ones. It seems a lot of the cheap tools were likely cast instead of forged, or cooled and hardened improperly either way the difference in the grain structure was dramatic when looking at the broken cross section. Like I said the cheap ones had grains larger than what I have seen when I have broken up brake drums and rotors.
I actually always wear safety glasses since getting some nice prescription glasses that are also safety glasses isn't too difficult and since I need safety glasses so often it just simplifies things.
In "flyover" country not having any broadband/access to fast internet news seems almost a foreign concept. If you're limited to local news and local concepts that is bound to shape your opinion differently to someone who has the internet at your fingertips.
I actually know someone who was involved in bringing high speed internet to their little town several years ago. They were the city manager for a small town in southwest MN that wanted to actually get connected and have some amenities that everyone takes for granted. They managed to get municipal broadband put in and something like municipal cable. Up at my lake property there aren't any utilities to the property and there isn't cell coverage there. The neighbors up there have solar and some small windmills for their power with a battery backup, a well for water, and heat with wood primarily and LP as a supplement and for cooking. Eventually I will put up a small cabin and due to remoteness solar + wind + batteries is economically viable now even without rebates.
You should always assume every tool will break and protect yourself accordingly.
I do assume that but the failure mode of cheap tools is very different from good ones. For example good sockets will just snap and have a big crack in them, I've had this happen hundreds of times from everything from Craftsman up to nice Snap-On and MAC tools, as something will break when you put an 8' steel pipe on the end of a breaker bar. Now with shitty sockets (or shitty tools in general) they will instead shatter. What is interesting is looking at the broken part the good tools had nice tiny grains, the cheap ones that shattered had grains larger than what I have see on brake disks and rotors.
the only time I end up in a CVS or Walgreens is when I am picking up a prescription as their pharmacies are open 24/7 and at that point anything else I would buy there at 3AM when dealing with a sick child would cost just as much at a gas station which is also open 24/7.
and business's "liberty" to just put sawdust on the shelf and call it food
They do that already. Just look for the word cellulose in any form on food labeling. It could be worse, they could be deliberately mixingbugs into food. Well shit, at least it isn't as bad as haggis sounds.
I would say that Tylenol is one brand that proved it should be trusted. There the company took the over cautious step or recalling all products nationwide while trying to figure out what it had done wrong, hint they weren't at fault. For those that don't know about the incident or won't bother to read the article the incident was someone who poisoned some bottles on store shelves but Tylenol went to great lengths to figure out what they might have done wrong.
And the less said about the fish you buy the better.
So you mean I shouldn't wonder about that walleye I just ordered?
Man it seems like things just fall off the internet all the time as these old stories get harder to find. And yes the fish I get is what is claimed as I just pull them up out of my lake. The wife and kids love a big old fish fry of perch, sunnies, bass, and crappies, and the neighbor up there loves pickled norther so I let him have those when I catch one.
For me I find that the quality is more affected by manufacturer than by age. Yes the are differences between VS, VSOP, and XO but I have had some really harsh XOs and some surprisingly smooth VSs. I have found this to be more true with Armagnac than with Cognac but it still happens there as well. I don't know much about Bourbon but from what little I have had it all seems like a slight step up from Silver Wolf Vodka and just all around vile so my advice to the French would be to just block it all. I don't know if this is because I haven't found a good one or not but I have tried Jim Beam, Wild Turkey, and Makers Mark and thought they were all vile but wouldn't mind a recommendation if I have just been scrapping the bottom of the barrel.
Screw you I only make the best thing it is that ChrisMaple brand thing that is of questionable composition./s
I do agree that it should be the owner of the brand who is responsible for the quality of the product. In this case the fact the store brand aloe vera contained no aloe vera would indicate that their quality control is questionable at best. If they were presented with a QA report from the manufacturer that provides different results then Target, Wal*Mart, CVS, etc. can go after the 3rd party manufacturer and get what ever they can out of them but as a consumer it would seem I should be well within my rights to go after the brand owner. I'd be pretty pissed if my bag Market Pantry (the only store brand I know of off the top of my head) brand of frozen corn instead contained chickpeas and it wasn't just some stupid one off mistake but instead every bag of corn in every store does and always had.
I wouldn't put much trust in the FTC given how many complaints I have filed about:
windows tech support
Rachel from card holder services
The warranty on my vehicle about to expire
The free cruise I won
Shitty debt collectors basically attempting to defraud me (thankfully I can rain hellfire on them in other ways)
That isn't to say I dislike government agencies, just ineffective ones. When it came to dealing with shitty debt collectors I got nowhere with the FTC, but the Minnesota Attorney General's Office, MN Department of Commerce and federal Consumer Financial Protection Bureau got results and put the screws to one that was exceptionally bad. Personally there should be more fraud investigations done by agencies and private organizations all around as there sure seems to be a lot of it. Get it exposed and then fine or sue the hell out of companies and individuals committing it.
Unless you have a terrible firewall device one would still be able to limit the inbound and out bound connections of IoT devices so that they are only allowed to connect to approved service providers. It isn't like I expect an IoT thermostat to be contacting some random porn site but I would expect it to interact with what ever cloud service allows my phone to remotely set the house temp with an app. Yes there may be issues from their crappy protocol but one can dramatically limit the problems by only allowing the device to talk to approved servers. This dramatically lowers the attack surface
Then again I haven't used the stock consumer firmware on a home router in years so I don't know what the current state of that is as I just drop OpenWRT on them and properly configure things. I know I can port forward inbound traffic from a specific host or set of hosts from the outside to a specific host inside but the say any outside host not in the approved list gets blocked. Same thing with traffic on the outbound side, I can filter at the firewall based off of source and destination IP and port. Some hosts on my network can only send one type of traffic out, others can send everything. For example my time server is allowed to send and receive traffic on UDP 123 but it receives nothing else from the internet and can't even send anything else out to the internet, yet my main desktop can send out anything and receive back only on established connections, while my NAS is cutoff from the outside world.
Why coulnd't I have a set of rules that says:
Allow established connections
Shitty_IoT_Device1 is allowed to send data on port 80 only to Shitty_IoT_Manufacturer1
Shitty_IoT_Manufacturer1 is allowed contact Shitty_IoT_Device1 on port WhatEverListeningPort
Shitty_IoT_Device2 is allowed to send data on port 80 only to Shitty_IoT_Manufacturer1
Shitty_IoT_Manufacturer1 is allowed contact Shitty_IoT_Device2 on port WhatEverListeningPort
Shitty_IoT_Device3 is allowed to send data on port 80 only to Shitty_IoT_Manufacturer2
Shitty_IoT_Manufacturer2 is allowed contact Shitty_IoT_Device3 on port WhatEverListeningPort
My_usefule_Devices are allowed to send data on port 80 and 443 to anywhere ...
Block everything not allowed
Seems like a rule set like this would work fine and isn't all that different from how I treat wireless mobile devices on my home network. They are all limited in what they can access and are separated from the wired network.
Those vulnerabilities are not mitigated by firewall protection in any way.
How? It isn't like manufactures of these dumb little devices are implementing things at ore below layer 4 of the OSI model so why wouldn't a standard firewall be able to block their crap. At worst it would be some custom protocol running on some random port using TCP. If they did go and create their own custom layer 3 or 4 protocol it would likely be blocked anyway as what networking device would understand bullshit protocol 862 from ChinaTrashCo. If you are referring to running some BS over HTTP that these shitty devices typically do you could always limit the source and destination of their traffic which is what one should be doing anyway. That would stop a lot of the issues with these devices if all of a sudden they couldn't send data off to any random server or get command from random servers. If you want more protection you can always drop something like snort in IPS mode in between and either wait from someone to create some custom rules or figure it out your self and write some rules your self.
Slashdot Mirror
I blame Hillary and the democrats. Hillary for being such a shitty candidate that she couldn't beat someone who may have been an even shittier candidate but it was close on the level of shit. I blame the democrats for selecting a shitty candidate. The fact that it was close in Minnesota and the state was one of the last to be called is a testament to how shitty she was given that MN hasn't gone for the republican since 1972.
The republicans made it very clear they were done with the usual cast of characters that sit on their hands and piss and moan about not being able to do anything and then from their voter's point of view cave. Granted there were better candidates for the republican nomination but the republican voters are likely getting exactly what they thought in this case. If you want to blame those who voted libertarian well that is just further proof of how shitty Hillary was because a party that typically takes votes from republicans caused her loss.
If government wants the data, they must obtain a true warrant and I will decrypt it for them.
Even then it seems that you can tell them to go piss up a rope. They can confiscate the device/storage with the warrant but you don't have to give them the password. They then can try to crack it before the heat death of the universe.
On the other side of things I have been pretty critical of the government especially the various law enforcement and security agencies. If more people call them out as well as their elected representatives we might actually change things. It isn't like I have called my soon to be former congressman either mentally retarded or willfully ignorant when he call me to assure me that the USA FREEDOM act wouldn't do what the fucking law says it was going to do. I have long been a thorn in their side and as someone who likely does enjoy some "white privilege" being a white male with a clean background good education and good job I am willing to use that privilege to fight to keep rights for everyone.
Well there are a bunch kids shows they produced that my kids like so maybe next summer when driving across South Dakota I can just load up a season or two of dino trucks, or Inspector Gadget on the tablet and let the kids watch that in the back seat as we drive past 300 miles of corn.
There are very few 20+ year old vehicles on the road, and even then in 1996 E-10 was common and vehicles were designed to run on it. Going back further having driven a number of really crappy American vehicles from the 80s even those ran fine on E-10, the oldest of which were made in '85. So given that at this point those vehicles which when I had them ran just fine on E-10 would now be 31 years old it isn't an issue. The few vehicles I see from the mid 80s now tend to not be beaters but instead are collector vehicles and are well kept despite being poorly made ugly fucking boxes on tires. Going back farther to the 70s and earlier now you are clearly in the collector car realm. That said from time to time you do find a running older vehicle from the early 80s and 70s for cheap but they don't run well. Much like a buddy who bought a '67 rambler for $250 in like 02 or 03 that burned oil, had bad springs, and had a bad PCV system so moisture would build up in the crank case, lots of rust and dents, and the interior what pretty shot. It ran but not well. He drove it for 9 months regularly until the engine wore out so much it could barely move under its own power and even then he sold it for $500.
but as you mentioned they have no standing to regulate INTRAstate commerce
How I wish that were true. Unfortunately the courts have long held the belief that the interstate commerce clause means that the federal government can not only regulate interstate commerce but also things that have an effect on interstate commerce. Because of this the feds can regulate all commerce such as raising food for my own consumption on my own land that never enters the commercial market.
Unless you have a collector vehicle running on E-10 isn't an issue. If you do have a collector car you probably know where you can get some non-oxy fuel or you should. The biggest problem with E-10 is in small engines marine engines that see little use where the fuel can absorb moisture out of the atmosphere and if too much is absorbed then the ethanol+water mix separates from the gasoline. Here again you should be running some non-oxy fuel anyway and . I haven't had a problem with any of my equipment that is fuel related ever, wear and age yes but never fuel.
I would as well as there really is a lot of cheap crap out there that looks well made even if it isn't but there are still some companies that aren't making crap. My general rule of thumb is to now only buy tools new from a store that will handle the return right there on the spot. If it requires mailing in some busted tool I won't trust it but if the store will take it and give me a new one I will likely buy it. As Ace now carries Craftsman and Stanley tools and will do the lifetime replacement in store I buy most from them now. I do however like Estwing and Vaughan striking tools, and my Hobart wire feed welder (basically Miller's consumer line) you would have to pry out of my cold dead hands.
I'll accept that everyone has different tastes. Personally my favorite drink is some Chabot VSOP Armagnac, then probably some XO Martel Cognac, followed by either Glenlivet 21 or Glenlivet 12 French oak. Although I do like most Irish whiskeys I have had.
My tools have all been new when I got them and I don't have an impact driver so I know it isn't that. The Snap-On and MAC sockets that I have broken were all impact sockets (when I worked at U-Haul) so it isn't like they were the regular ones. It seems a lot of the cheap tools were likely cast instead of forged, or cooled and hardened improperly either way the difference in the grain structure was dramatic when looking at the broken cross section. Like I said the cheap ones had grains larger than what I have seen when I have broken up brake drums and rotors.
I actually always wear safety glasses since getting some nice prescription glasses that are also safety glasses isn't too difficult and since I need safety glasses so often it just simplifies things.
In "flyover" country not having any broadband/access to fast internet news seems almost a foreign concept. If you're limited to local news and local concepts that is bound to shape your opinion differently to someone who has the internet at your fingertips.
I actually know someone who was involved in bringing high speed internet to their little town several years ago. They were the city manager for a small town in southwest MN that wanted to actually get connected and have some amenities that everyone takes for granted. They managed to get municipal broadband put in and something like municipal cable. Up at my lake property there aren't any utilities to the property and there isn't cell coverage there. The neighbors up there have solar and some small windmills for their power with a battery backup, a well for water, and heat with wood primarily and LP as a supplement and for cooking. Eventually I will put up a small cabin and due to remoteness solar + wind + batteries is economically viable now even without rebates.
You should always assume every tool will break and protect yourself accordingly.
I do assume that but the failure mode of cheap tools is very different from good ones. For example good sockets will just snap and have a big crack in them, I've had this happen hundreds of times from everything from Craftsman up to nice Snap-On and MAC tools, as something will break when you put an 8' steel pipe on the end of a breaker bar. Now with shitty sockets (or shitty tools in general) they will instead shatter. What is interesting is looking at the broken part the good tools had nice tiny grains, the cheap ones that shattered had grains larger than what I have see on brake disks and rotors.
the only time I end up in a CVS or Walgreens is when I am picking up a prescription as their pharmacies are open 24/7 and at that point anything else I would buy there at 3AM when dealing with a sick child would cost just as much at a gas station which is also open 24/7.
and business's "liberty" to just put sawdust on the shelf and call it food
They do that already. Just look for the word cellulose in any form on food labeling. It could be worse, they could be deliberately mixing bugs into food. Well shit, at least it isn't as bad as haggis sounds.
That settles it, I'm switching to maple syrup!
I wouldn't trust that either.
When that story broke I like most people was surprised to find out that a Global Strategic Maple Syrup Reserve existed.
I would say that Tylenol is one brand that proved it should be trusted. There the company took the over cautious step or recalling all products nationwide while trying to figure out what it had done wrong, hint they weren't at fault. For those that don't know about the incident or won't bother to read the article the incident was someone who poisoned some bottles on store shelves but Tylenol went to great lengths to figure out what they might have done wrong.
And the less said about the fish you buy the better.
So you mean I shouldn't wonder about that walleye I just ordered?
Man it seems like things just fall off the internet all the time as these old stories get harder to find. And yes the fish I get is what is claimed as I just pull them up out of my lake. The wife and kids love a big old fish fry of perch, sunnies, bass, and crappies, and the neighbor up there loves pickled norther so I let him have those when I catch one.
For me I find that the quality is more affected by manufacturer than by age. Yes the are differences between VS, VSOP, and XO but I have had some really harsh XOs and some surprisingly smooth VSs. I have found this to be more true with Armagnac than with Cognac but it still happens there as well. I don't know much about Bourbon but from what little I have had it all seems like a slight step up from Silver Wolf Vodka and just all around vile so my advice to the French would be to just block it all. I don't know if this is because I haven't found a good one or not but I have tried Jim Beam, Wild Turkey, and Makers Mark and thought they were all vile but wouldn't mind a recommendation if I have just been scrapping the bottom of the barrel.
Screw you I only make the best thing it is that ChrisMaple brand thing that is of questionable composition. /s
I do agree that it should be the owner of the brand who is responsible for the quality of the product. In this case the fact the store brand aloe vera contained no aloe vera would indicate that their quality control is questionable at best. If they were presented with a QA report from the manufacturer that provides different results then Target, Wal*Mart, CVS, etc. can go after the 3rd party manufacturer and get what ever they can out of them but as a consumer it would seem I should be well within my rights to go after the brand owner. I'd be pretty pissed if my bag Market Pantry (the only store brand I know of off the top of my head) brand of frozen corn instead contained chickpeas and it wasn't just some stupid one off mistake but instead every bag of corn in every store does and always had.
I wouldn't put much trust in the FTC given how many complaints I have filed about:
windows tech support
Rachel from card holder services
The warranty on my vehicle about to expire
The free cruise I won
Shitty debt collectors basically attempting to defraud me (thankfully I can rain hellfire on them in other ways)
That isn't to say I dislike government agencies, just ineffective ones. When it came to dealing with shitty debt collectors I got nowhere with the FTC, but the Minnesota Attorney General's Office, MN Department of Commerce and federal Consumer Financial Protection Bureau got results and put the screws to one that was exceptionally bad. Personally there should be more fraud investigations done by agencies and private organizations all around as there sure seems to be a lot of it. Get it exposed and then fine or sue the hell out of companies and individuals committing it.
Unless you have a terrible firewall device one would still be able to limit the inbound and out bound connections of IoT devices so that they are only allowed to connect to approved service providers. It isn't like I expect an IoT thermostat to be contacting some random porn site but I would expect it to interact with what ever cloud service allows my phone to remotely set the house temp with an app. Yes there may be issues from their crappy protocol but one can dramatically limit the problems by only allowing the device to talk to approved servers. This dramatically lowers the attack surface
Then again I haven't used the stock consumer firmware on a home router in years so I don't know what the current state of that is as I just drop OpenWRT on them and properly configure things. I know I can port forward inbound traffic from a specific host or set of hosts from the outside to a specific host inside but the say any outside host not in the approved list gets blocked. Same thing with traffic on the outbound side, I can filter at the firewall based off of source and destination IP and port. Some hosts on my network can only send one type of traffic out, others can send everything. For example my time server is allowed to send and receive traffic on UDP 123 but it receives nothing else from the internet and can't even send anything else out to the internet, yet my main desktop can send out anything and receive back only on established connections, while my NAS is cutoff from the outside world.
That would be the movie about a couple of regular shepherds right?
You're just jealous of the double butters when they get their first commission.
Why coulnd't I have a set of rules that says:
...
Allow established connections
Shitty_IoT_Device1 is allowed to send data on port 80 only to Shitty_IoT_Manufacturer1
Shitty_IoT_Manufacturer1 is allowed contact Shitty_IoT_Device1 on port WhatEverListeningPort
Shitty_IoT_Device2 is allowed to send data on port 80 only to Shitty_IoT_Manufacturer1
Shitty_IoT_Manufacturer1 is allowed contact Shitty_IoT_Device2 on port WhatEverListeningPort
Shitty_IoT_Device3 is allowed to send data on port 80 only to Shitty_IoT_Manufacturer2
Shitty_IoT_Manufacturer2 is allowed contact Shitty_IoT_Device3 on port WhatEverListeningPort
My_usefule_Devices are allowed to send data on port 80 and 443 to anywhere
Block everything not allowed
Seems like a rule set like this would work fine and isn't all that different from how I treat wireless mobile devices on my home network. They are all limited in what they can access and are separated from the wired network.
Those vulnerabilities are not mitigated by firewall protection in any way.
How? It isn't like manufactures of these dumb little devices are implementing things at ore below layer 4 of the OSI model so why wouldn't a standard firewall be able to block their crap. At worst it would be some custom protocol running on some random port using TCP. If they did go and create their own custom layer 3 or 4 protocol it would likely be blocked anyway as what networking device would understand bullshit protocol 862 from ChinaTrashCo. If you are referring to running some BS over HTTP that these shitty devices typically do you could always limit the source and destination of their traffic which is what one should be doing anyway. That would stop a lot of the issues with these devices if all of a sudden they couldn't send data off to any random server or get command from random servers. If you want more protection you can always drop something like snort in IPS mode in between and either wait from someone to create some custom rules or figure it out your self and write some rules your self.