I do agree that this is a valid case, however the money cannot be justified.
Yes, she should receive money covering the cost of the laptop when new, and money for the cost of her time and money spent protecting again fraud resulting from the loss of her data, but this surely this still does not amount to $54m. For that kind of money, she could start a new life, with a new name, and not have to worry about the loss of her data.
One of the top professionals in the security industry, Bruce Schneider, runs and open wi-fi network. As he puts it, you computer should be secured weather on your network, or on a public network.
I also have a open network, no-one abuses it and I'm quite happy for someone to come along and use it for free, as long as they don't download torrents or something. So I do have UPnP disabled as it will probably stop a novice downloading torrents. However, I keep my computer secured, and would be happy on an insecure network, or if someone forwarded a port on my router.
I left university 6 mounths ago, and got a very good job before I left.
I spoke to the person who employed me, and he said the main thing they were looking for was someone who would fit in with the team. The most problematic people they've had over the past few years have been people who have been anti-social, create code on their own that only they understand, and not be able to communicate with customers and other employees.
One thing I think will help a bit, along with many other things, is IPV6. One thing that this protocol includes IP lists on packets, meaning one packet can have multiple destinations. This will especially help for online TV and streaming, and other services that will deliver the same content to multiple people. Also over the next 10, 20, 100000 (IPV6 should have become standard years ago) lots of places will be upgrading there infrastructure to accommodate IPV6.
Ok, the name might suck, but the company I work at follows the Extreme Programming practice, a kind of agile programming. I have only worked there a few months, and had never herd of XP before, but am now converted. We work in pairs, which instantly adds a whole testing level. Deployments of code are done once every week, but sometimes more in an emergency. We write code test first, then run a build on our machines, then we upload it to a test environment where automatic tests are run. Finally on passing that, it moves to a stage environment where humans test the code, when they are happy a version number is noted, and that is uploaded to live. This means it can take a day for some code to be written, tested and deployed if required. It also means there is continual development, different departments can work on different versions, and then there is a weekly deployment of the latest stable code.
It is a very interesting practice, and seems strange at first, but I would highly recommend it for certain types of companies. The company I work for took a few years to convert, and it was slow at first, but now it is an expert and even helps train other companies. It also builds its business upon being one of the quickest responders for code in our region.
A few people have expressed concern, and said they would disable there account, but have you ever tried doing this. If you disable your account none of the information is removed from there database, when you register again with the same email address, all your photos, private information and such items will still be there.
Sorry, I think they now own your face
First of all, this is specific new to windows (I am not a 100% windows hater) 1) Unix derived stored passwords use salt, windows doesn't, which instantly makes them far more secure. 2) Linux no longer stores the main password in/etc/password, but in a special hidden protected file
Using "funny" symbols in your passwords do help, the chances are people will use rainbow tables over brute force to crack a password, and these generaly start with known words, then random letter, ending in random symbols and such likes, meaning it will take longer to crack your password.
Assuming a person can't get inside your computer, it is possible to secure a unix derived machine. 1) Password protect the BIOS, and make the only boot device the main hard drive 2) Password GRUB, or whatever boot loader you are using, so they can only access your OS, and not as root 3) Password protect your user account, and don't allow root login, just for good measure 4) Use extra login security, like an external key device and biometric scanner, pretty rare, stops agains key loggers 5) Use an encrypted file system and swap space, if you really don't want people to get in (even if they steal your hard drive) 6) Put an electro magnetic scrambler in the case, so when it is opened without the key it wipes the entire hard drive (assuming you keep backups)
Slashdot Mirror
I do agree that this is a valid case, however the money cannot be justified. Yes, she should receive money covering the cost of the laptop when new, and money for the cost of her time and money spent protecting again fraud resulting from the loss of her data, but this surely this still does not amount to $54m. For that kind of money, she could start a new life, with a new name, and not have to worry about the loss of her data.
One of the top professionals in the security industry, Bruce Schneider, runs and open wi-fi network. As he puts it, you computer should be secured weather on your network, or on a public network. I also have a open network, no-one abuses it and I'm quite happy for someone to come along and use it for free, as long as they don't download torrents or something. So I do have UPnP disabled as it will probably stop a novice downloading torrents. However, I keep my computer secured, and would be happy on an insecure network, or if someone forwarded a port on my router.
I left university 6 mounths ago, and got a very good job before I left. I spoke to the person who employed me, and he said the main thing they were looking for was someone who would fit in with the team. The most problematic people they've had over the past few years have been people who have been anti-social, create code on their own that only they understand, and not be able to communicate with customers and other employees.
One thing I think will help a bit, along with many other things, is IPV6. One thing that this protocol includes IP lists on packets, meaning one packet can have multiple destinations. This will especially help for online TV and streaming, and other services that will deliver the same content to multiple people. Also over the next 10, 20, 100000 (IPV6 should have become standard years ago) lots of places will be upgrading there infrastructure to accommodate IPV6.
Ok, the name might suck, but the company I work at follows the Extreme Programming practice, a kind of agile programming. I have only worked there a few months, and had never herd of XP before, but am now converted. We work in pairs, which instantly adds a whole testing level. Deployments of code are done once every week, but sometimes more in an emergency. We write code test first, then run a build on our machines, then we upload it to a test environment where automatic tests are run. Finally on passing that, it moves to a stage environment where humans test the code, when they are happy a version number is noted, and that is uploaded to live. This means it can take a day for some code to be written, tested and deployed if required. It also means there is continual development, different departments can work on different versions, and then there is a weekly deployment of the latest stable code. It is a very interesting practice, and seems strange at first, but I would highly recommend it for certain types of companies. The company I work for took a few years to convert, and it was slow at first, but now it is an expert and even helps train other companies. It also builds its business upon being one of the quickest responders for code in our region.
A few people have expressed concern, and said they would disable there account, but have you ever tried doing this. If you disable your account none of the information is removed from there database, when you register again with the same email address, all your photos, private information and such items will still be there. Sorry, I think they now own your face
First of all, this is specific new to windows (I am not a 100% windows hater) /etc/password, but in a special hidden protected file
1) Unix derived stored passwords use salt, windows doesn't, which instantly makes them far more secure.
2) Linux no longer stores the main password in
Using "funny" symbols in your passwords do help, the chances are people will use rainbow tables over brute force to crack a password, and these generaly start with known words, then random letter, ending in random symbols and such likes, meaning it will take longer to crack your password.
Assuming a person can't get inside your computer, it is possible to secure a unix derived machine.
1) Password protect the BIOS, and make the only boot device the main hard drive
2) Password GRUB, or whatever boot loader you are using, so they can only access your OS, and not as root
3) Password protect your user account, and don't allow root login, just for good measure
4) Use extra login security, like an external key device and biometric scanner, pretty rare, stops agains key loggers
5) Use an encrypted file system and swap space, if you really don't want people to get in (even if they steal your hard drive)
6) Put an electro magnetic scrambler in the case, so when it is opened without the key it wipes the entire hard drive (assuming you keep backups)