Slashdot Mirror


User: omnix

omnix's activity in the archive.

Stories
0
Comments
23
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 23

  1. The delusion of security on Alleged Massive Account and Password Seizure By Russian Group · · Score: 1

    This may be a hoax; but it is certainly not impossible for this sort of thing to happen.

    What governments and businesses need to know/do is:
    1) Understand that there is no such thing as ABSOLUTE security - every castle, system, etc can (arguably will) be compromised. The dilemma is whether the cost/effort needed to compromise the system is worth the reward/gain.
    2) They should only keep the essential information - don't keep what you don't need. Besides, what they don't store can't be stolen - in the long-run it's cheaper for them and better for the user/customer. Legally speaking, businesses/agencies that store personal/private information is assuming a fiduciary duty to the customer/user - particularly in protecting their data.
    3) They should keep the data as atomic/discrete (ie separated) as possible. Instead of housing everything in one mega-database, user information should be kept separate from credentials (passwords), which should be kept separate from banking data, and that should be kept separate from transaction data.
    4) All data access should require credentials (certificates and/or passwords) - preferably, the credentials should only provide limited and/or one-time access to the data.
    5) Particularly sensitive information should be encrypted within the database, and all access should be logged on a separate system.
    6) Credentials and certificates should NEVER be stored on the same system they access.
    7) They should use randomly generated unique IDs for each segment of the data - preferably, these IDs should be changed on a regular basis (like passwords).
    8) Government issued ID numbers should only be used by the government agency that issued the ID, just like bank account or credit card numbers should only be used by the bank that issued them. Employers should NEVER use the employee's SSN, driver's license, bank info, etc as an employee ID.
    9) They should ONLY aggregate the data as needed (at transaction time) - if possible, they should even avoid having more than one segment within the same code.
    10) They should make an effort (ie spend time & money) to protect user/customer information data - like it was their own.
    A) They should have their entire system audited by certified external analysts - I wouldn't be opposed to (random) government audits of corporate data.
    B) They should spend more time and money resolving the issues/findings, and then have their systems audited again.
    C) They should also regularly update the system. Over time, the cost/effort to overcome any security system decreases while, in most cases, the value (ie gain) increases.
    11) If they aren't willing or able to spend the time/money to protect the data, then they should NOT be allowed to store personal data on their systems.
    12) If they do store a user's/customer's information, the user/customer should be able to request certified proof that the system was audited - to verify that their information is safe.
    13) All parties should utilize up to date encryption, virus/malware, and security technology to secure their and/or the customer's information.
    14) No matter how much effort/money is spent, there is no such thing as ABSOLUTE security.

    Personally, I believe that what most businesses are doing with customer's data is reprehensible - and should be outlawed. A person's private information is just that, PRIVATE. Outside of storing financial transactions, user's/customer's information shouldn't be kept to do market research/analysis. They certainly should not be able to profit off of the data - that's a violation of their fiduciary duty. If you think of every worker as a little private enterprise and their employer is effectively "the customer", imagine how much information each of us could collect from every "customer" we've had. Then imagine if every worker started analyzing and selling/sharing "trends" with other "private enterprises", or using that information for their personal benefit. How

  2. Re:Bribery on Mark Cuban's Plan To Kill Google · · Score: 1

    I'd take the million, and then do what I want. Personally, I despise Microsoft, but Google is getting large enough to worry about who is at the helm.

    Seriously though, not using Google would cost the larger companies more than 1MM. In marketing/advertising you use any and all channels to generate leads.

    You know, this might also fall into exclusionary practices, which could cause the DOJ to pursue anti-trust case against MS and Mark "I smoke a lotta" Cuban.

    Just my ($1/pi)*2^3 Hope you got your money's worth...

  3. Re:Put's the lie to their open source claims on IBM's Supreme Court Brief Says That Patents Drive Free Software · · Score: 4, Insightful

    So what, then, would you call an entity that is in general designed to remove wealth from as many hands as possible and put it into as few hands as possible?

    The correct term is corporatism or fascism, which seems to be the direction of the Republican party. This is the fundamental argument against unregulated capitalism which has become prevalent in the US over the past 100 years.

    Not that I believe the Democrats are any better, since they ultimately are a corporatist organization as well. The Dems just lack the organization...

  4. Re:When will this end? on The Next Ad You Click May Be a Virus · · Score: 1

    If it was only .01%... I'm thinking it's somewhere closer to 10-15% are truly unscrupulous, and another 10-20% that are either stupid or naive enough to follow the former set. Of that, I'd say half or more are actually capable of causing real problems (which is an amazing success rate, considering societies tendency to object to maliciousness). Thus, the effective number of assholes and blindly ignorant follows is fairly high (billions). Who was it that said, "Those who desire power, usually don't deserve it"?

    I'm really surprised, though, that this ad-based malware is only making news now. Using ads to traffic malware has been going on for at least the last 5 years.

  5. Gezus, wat eh moorraun... on Helping Some Students May Harm High Achievers · · Score: 1

    from the stop-dragging-us-down dept should be changed to from the "We_told_you_so;_but_you_didn't_listen,_because_you're_the_dumbest_asshole_to_be_elected_president_in_US_history dept"

    What a brilliant idea Mr. president. (Can't we just call him, Junior?) Let's divert our limited and precious resources (teachers time) to those who are either a) genetically predisposed to stupidity, b) don't give a shite, or c) from Oklahoma. What a great idea!!!

    And, his puppets are surprised that by lowering the bar, our students aren't excelling?!? I believe most of our competitors (other industrialized countries) are doing just the opposite. They advance the higher potential students - kids that put forth the effort and have the ability to become great contributors to society.

    I guess I shouldn't be surprised, since almost half of the country re-elected him. There really are a lot of morons in this country...

    The only good news is that, given the eventual reduction in the population (as baby-boomers expire) and the relative ineffectiveness of our younger generations, Gen X's and Y's will be the predominant resource in our workforce for many years to come. Oh sure, there will be immigrants, but they'll stop coming over here once the word gets out how our standard of living has dropped below the level they have in their home country.

    I'm only concerned that this will increase the social divide (haves vs have nots). If things get bad enough, we could be headed for another war (some would argue that it is already here). Guess I should start brushing up on several foreign languages, just in case I need to move my family.

    What country has the best standard of living/quality of life right now? Any speculation on which countries will be the best places to go in 5 to 10 years?

  6. Modestly high-tech on What Would Be Your Ideal Futuristic Home? · · Score: 1

    Here's a list of the things I would like/am installing in my home:

    - Full audio distribution system
    - Wireless video of all entrances (integrated with home security system)
    - Biometric doorlocks (fingerprint, but must have numeric keypad as well)
    - Motion-sensitive lights in all bathrooms (steady on feature when the shower is running)
    - Solar and/or wind power for pool system
    - High-speed (wired) networking, digital video, analog video & analog phone accessible from each room
    - Smart air circulation/conditioning with individual settings for each room
    - Home management system (monitor security, adjust environments, etc)

    All of this must be integrated into an energy-effecient design without loosing functionality, space or design.

  7. Sounds like collusion to me on Pay-to Play and the Tiered Internet · · Score: 1

    This kind of practice borders on collusion, doesn't it? Or is it a cartel? Personally, I don't believe that any _one_ company can take control of it, and those that have tried have found out why. But competitors talking about how to artificially raise prices by instituting artificial controls, would definately have some realm of viability. What is needed is atleast one major player refusing to join the pact. Which is why this disturbs me even more, since they are blatently sending messages to one another trying to see who's in...

    The government seriously needs to bite this in the ass, but without going too far in the other direction.

  8. As much as I wish this was true... on Time Names Battlestar Galactica Show Of The Year · · Score: 1

    Being a loyal /.er, red-blooded male, and X-gen (ie - I grew up watching the original series) I wish Battlestar Galactica was one the best series of the year. They definately had the hotties and the FX were reasonable, but overall it just didn't deliver. Alas, this is a B$ plug for the shows that just didn't hack it (not sure what they hope to accomplish), by the aging broadcasting companies. It's sad that so much money get's heaved into the furnace that is Hollywood... The silver-lining, as another poster mentioned, is that the behemoths are loosing their grip and they will do anything to make one more dollar. I just can't wait until there are no more laugh tracks telling me when I should laugh...

    My choices (albeit slim pickings)
    CSI: Las Vegas - The others still don't have the magic...
    Will & Grace - Their last season is starting off pretty good...
    NCIS - Abby
    Close to Home
    Without a Trace
    Cold Case
    Law & Order
    Threshold
    Commander & Chief
    Numbers

    That's just my opinion, I could be RIGHT!!!

  9. Re:Give those with low IQ jobs. on Gene Found That May Affect IQ in Males · · Score: 1

    Can we also execute those people who are intentionally "holding-out" by feigning ignorance?

    Does anyone know a word for this? Disingenuous comes close, but it has the wrong connotation.

    Education ought to be the biggest growth industry in the developed world right now... - Yeah, it's a stolen sig, whatcha gonna do about it?

  10. Re:Give those with low IQ jobs. on Gene Found That May Affect IQ in Males · · Score: 1

    Isn't it funny how they (those who abuse the welfare system) can't seem to keep a job (theoretically due to low IQ), but all of a sudden they become mathematicians when it comes to welfare vs paid sterilization. The irony astounds me...

  11. Re:Each Protocol Has Its Good Points on What Makes a Good IM Client? · · Score: 1

    Actually, it's quite entertaining to hear the synth try figure out pronunciation of last names... It knew most of the silly netspeak like emoticons and common abbrs.

  12. Re:Each Protocol Has Its Good Points on What Makes a Good IM Client? · · Score: 2

    I worked for HAL++ for a while and I liked the alphaWorks SameTime client (I forget the name exactly) but it would talk, which freed me up to walk away from my desk. I was working remotely, so when things got really slow (or not), I could go watch TV and not worry about missing someone trying to get ahold of me via IM... (Think CYA)

    Anyway, I'd like the client to have speach capabilities... Even better would be to assign different voices to known contacts, but that's just my opinion. I could be wrong.

  13. How much? on A Workable Downloadable Movies Business Model? · · Score: 1

    I'd pay $5-$7 for a movie that I can copy to my hearts content... They could embed a digital code in the file to link it to me, so that if it get's circulated an the internet they have a chain of ownership. If they want to instill some sort of limitted viewing, though, then I'm only willing to pay about $1, maybe $2... For anything more, though, I'll do like most said and either wait for it to come out on DVD, HBO, et. al. or find a copy on the net.

    Isn't it funny how the entertainment industry is quick to forget the basic economic principle, "if you charge to much, then customers will look for alternative ways to get it." Entertainment is not critical to survival, and the economy (atleast in the US) doesn't support their business model. From the looks of it, most of the other countries are in similar situations...

    Although I haven't read all of the details (especially the legalese) it looks like Sony might be thinking along the right lines, however, I suspect this is more of a PR move given the backlash from earlier this week. If anyone can pull it off, though, I would think Sony could before most of the others...

  14. Midnight Commander & NEdit on Top 10 Items in the Linux Admin Toolkit · · Score: 1

    I cast my vote for Midnight Commander. It has a great built-in editor, does ftp (but not sftp, yet), opens files, and still allows me to have full access to the shell... I'm sure it does other things, but these are my primary uses. It's also been a great tool to help teach *nix to others. Take a bow Miguel.

    As for coding, I prefer to write all of my code using NEdit. I started using it before it was a true OpenSource development, and it's only gotten better.

  15. Total Annihilation on 'Transformers' Live Action Movie from DreamWorks? · · Score: 1

    I would prefer to see TA made into a movie, instead of Transformers.

  16. Get back in touch with reality... on Star Wars Episode 3 PG-13? · · Score: 1

    This is amazing... I can't believe there are so many people who can't get over the fact that Lucas retouched the original trilogy. It's done, he owns it, get over it!!! Personally, I too like the original version, but so what, I don't own it...

    As for the new trilogy (prequel), I don't think Lucas ever really wanted to tell the story, because it's not as good as the original. He knew it then, and he knows it now. Ep 3, may have some magic, though...

    Just try to keep this stuff in perspective, is all I'm saying. There is enough real problems, like corrupt politicians, murderers, RIAA, and Microsoft to bitch about. I just can't see a reason to getting emotional over something I don't own.

  17. It's kinda kewl, but... on Motorola Announces E1060 Phone With iTunes Support · · Score: 1

    I think it's a kewl looking phone, albeit for someone younger. This isn't really a ground-breaking phone, like the PalmOne Treo, Siemens SX66, et. al. But I think convergence is a good thing when it makes sense or the technologies overlap. Why carry around a PDA, cell phone, GameBoy, and have 30 remote controls at home, when you can have them all in one, for about the price of just the PDA?

    The problem I have with this phone is, Motorola makes it. Moto, can't write good software for making a device compatible with a real computer to save their life. Oh, and don't even think about trying to write you're own code... They'll sue you quicker than you can say "GPL".

    I'm still waiting for ASUS or Dell to market a smartphone with a 40 GB harddrive, 1+ MP camera, good display, stereo output and decent built-in software. Hell, I don't even care if it is M$ based. As long as I can buy and/or write code for it, and it has decent integration with my PC regardless of my OS. Bluetooth and Wi-Fi would also be mandatory.

    You know, the funny thing is, I don't need the thing to have the normal dimensions of a phone, because I hardly ever put any phone to my ear any more. I find Bluetooth and speakerphone (as a backup) is sufficient in most places...

  18. Total Annihilation would make a good movie on Does A Good Game Make A Good Movie Idea? · · Score: 1

    I wonder if InfoGrames would let one of the big 3D animation places make TA into a movie... I see the movie as being a prequel to the game.

  19. Re:Geeks are NOT sad losers on What to Get My Geek for Valentine's Day? · · Score: 1

    LOL... Yeah, I was on a different tangent, so sex wasn't one of the things I mentioned, but it goes without saying. Most geeks do, hence one the first post was about sex. I would hope that everyone `enjoys` sex, regardless of your current status or sexual preference.

    Hence, my $.10 philosophy on that is, if ya ain't enjoying it, you're doing it wrong and/or with the wrong person. I still don't know where that leaves the unhappy onanistic, and the guy with the Taco Bell food...

  20. Geeks are NOT sad losers on What to Get My Geek for Valentine's Day? · · Score: 5, Insightful

    Who the fsck are you to determine whether someone is a loser? I'm a self-professed geek, and in this day, that's like saying I'm a renaissance man. Being a geek is a philosophy which extends beyond computers, into all things logical and illogical. I see my problem solving (ie - programming) skills as being a form of art. I feel complete and satisfied when I have `finished` a program/module that I know is exactly the way I want it.

    Aside from programming (and computers in general), I enjoy other forms of art including photography and sketching. I've been married for 15 years, and I'm a father. I enjoy riding my Triumph Trophy 1200 motorcycle, and training my dog to do agility. But even when I'm doing all of those things, my mind is still racing with hundreds of ideas for the project d'jeur.

    I don't know what your definition of `geek` is, but most of the people I know, who call themselves one, use my definition. Not the one in Websters, and they don't feel like it's a limitation either.

    One more important point, I would like to direct your attention to, is that you are enjoying the benefits of the geeks. Many of us designed the computers, along with many other things, and wrote the code to contol them. Obviously you don't scoff at the use of these items, and we've made our money doing it.

    So again I ask, who are you to determine that being a geek qualifies us as losers. I see you as the loozer, since you don't have the sack or brains to do it yourself.

  21. Re:Nothing worth buying is my reason! on The Effect of Pirated CDs · · Score: 1

    Like you, I believe most people are 'stuck in their prime years' when it comes to music. What I have noticed is that, besides our generational choices, people tend to buy CD's with compilations (such as Now, Monster Booty, etc), and movie soundtracks. In particular, movie soundtracks tend to be well mastered, and the songs are anchored to a pleasant state. (Search for NLP for an explanation).

    What the RIAA hasn't said is what sector of sales is down. I would like to see a comparison between 'artist', 'soundtrack' and 'compilation' sales. My hunch is that the latter two are still fairly strong considering the economy, and that only the former is suffering, which would support the theory that quality of product is diminished.

  22. I think this is the best solution on DOJ considering source-licensing punishment · · Score: 1

    For those who know me, I have been hoping that forcing MS to GPL all of their OS code would be atleast considered as a just punishment. I still believe that this will effectively remove MS's leverage, and restore some level of fairness in the market. Hell, I doubt I'll even look at it, since it is probubally in the top ten worst written pieces of software ever (Lotus Notes takes top honors). But people working on other projects like wine and OS's that emulate Windows will find the code very usefull. One thing I'm also hoping is that they force MS to allow IBM to release the code to OS/2. I believe IBM would do that if they knew MS wouldn't take them to court.

    Anyhow, it's nice to see the DOJ attornies are thinking on their feet, and not just considering breaking MS up since that hasn't worked very well in any of the previous monopolies.

  23. This could be a good thing... on More Info on Pentium III, /dev/random, etc. · · Score: 1

    I have been watching this, and I believe the uses Intel have devised for this sucks. That number should not be available over the net. Between the spammers, and malicious crackers it could be abused real quickly. Any form of personal identification will get misused and abused unless it is kept secret and never used as a public identifier (e.g.-social security numbers for those of us in the US).

    On the other hand, if I wanted a system to be secure, especially the data on it, I could use that number as part of an encryption scheme. That way, even if I pulled the harddrive out, and moved it over to another system, when I tried to access it, I wouldn't be able to. Sure there will be ways to hack it, but that's just one more obstacle. I could even see a firmware driver that adds additional support.

    Maybe someone should add this into Linux as part of an encrypted-journal file system.