How is the honeynet system under more stress than the normal systems? Do you pay hackers to attack it in preference to your other systems? I don't see how that would work, since as soon as a hacker knows that this isn't a real box, they'll move on to more profitable and/or fun targets. If you incite hackers to attack it by making it an easy target, then you're not really testing what would happen to a real system, are you?
I've been hearing about these for a while, but to be honest I don't see how a honeynet will really help your network.
If you want to monitor attacks against your network, you could just as easily do this on your real boxes and spend the extra time improving your tripwires, etc.
Another common reason for honeynets is "to observe hacking attempts in the wild", but I don't see how you can guarantee that the hacker with the new idea will attack your particular honeynet as opposed to your production machines or someone else's network entirely.
If someone else's honeynet is attacked, there's no way to be sure that they'll pass on the vulnerability information they've discovered about their own systems (although their vendor should let the world know once a patch is available).
Maybe someone can explain the attraction to me, but it seems that although honeynets may observe a new attack technique every once in a while, on the whole they're not the most effective prevention method. The time would be better spent auditing the security level of your machines, improving your patch application time, analyzing log files from your production machines, etc.
Right after the incident many long years ago, when "Top Secret" was blamed for some kid blowing away a store clerk, me and freinds
went and got "Top Secret" and played it. To be honest, it didn't live up to the hype.
What's really amazing is that just this weekend I was watching "Heathers" on TV. If there's any one movie that would be Columbine-inspiring, it's "Heathers" - it included black trench coats, shooting the school jocks, and blowing up the school. I like the movie, but it's a surprise given the current atmosphere that anyone will still play it in the U.S.
The only danger is sending out the wrong message. Drugs kill, and anyone advocating their use is little better than a killer.
Well, tobacco, alcohol, sex, skydiving, and driving too fast can kill you too - are all proponents of those things "killers"? It's a little simplistic to say "Drugs are bad, you shouldn't do drugs, mmmmkay?". Like any other choice in your life, drugs can have bad or good consequences.
I agree that kids shouldn't be doing drugs, but that's because
as with many other choices, society generally feels that kids aren't capable of making fully-considered choices about drugs (plenty of adults are like this too, but I digress)
drugs could harm kids developmentally
But I really don't care at all if the adults next door choose to partake in drugs in the privacy of their own home. Now if they're mugging people to support their habits, then that mugging should be prosecuted to the full extent of the law, but that's a separate issue. It's true that families are torn apart by drugs, but on the other hand many of those families are torn apart because Daddy's in prison on drug charges, not because of any real breakdown of the family. If there were sufficient education and support services for drug addicts in the U.S., most of those broken families wouldn't have to be broken. The quickest way to decrease demand in the U.S. would be to spend half of the "war on drugs" money on treatment rather than prisons, police property seizures (oh wait, that's revenue not an expense:), and shooting down missionaries in Peru.
Children won't automatically get addicted to drugs any more than they automatically get addicted to alcohol, cigarettes, or sex. The rampant use of alcohol is widely accepted in our society, but people still don't let kids drink, do they? (OK, some do, but we've already got laws about that.)
Remember Nuclear power in the 1950's? Remember how it would provide electricity so cheap as to be free? How it would be
completely safe? The reality has turned out to be somewhat different, has it not?
Not necessarily. Here in Illinois, ComEd generates 75% of it's power from nuclear fission, without any environmental problems so far. As a result, my electricity bill is always lower than my phone bill or internet access charges. And this includes using electrical heat over the winter. No soaring natural gas bills here!
Not that nuclear energy is always right, but if handled correctly it is a great alternative. With existing safety standards enforced properly, it is probably more environmentally friendly than burning coal.
On behalf of the SDMI Foundation, I urge you to reconsider your intentions and to refrain from any public disclosure of confidential
information derived from the Challenge...
Well, it's not really confidential any more, is it? It's not like Felten signed an NDA to get the SDMI secrets, and is now publishing them. The whole point of the exercise was for his team to figure it out on their own. I don't see how it can be considered confidential information restricted only to the SDMI group any more, since another party has independently figured it out. It could be argued that Felten's research is confidential to him until he decides to publish, but it's not confidential to the SDMI folks any more.
While I'm at it, kudos to Cryptome! The site is probably one of the most important resources on the 'net, here's hoping it never goes away.
that 49 minutes would have been wasted anyway!
on
Buried in email?
·
· Score: 1
I check my email when I've been working on something for a while and need a break to think about something else. If I didn't check email, I'd have to read/. instead, and we all know what a productivity suck that is:) The average worker is going to waste a certain amount of time every day - email makes it possible to be somewhat productive during "mental task switching" time which would otherwise be involved in gossiping, smoke breaks, or pranks on coworkers. That's why, even with almost an hour "wasted" on email every day, people are more productive now.
Once the American public realizes that you can drop some pretty big rocks on the USA from the Moon, they'll care about it. I think people could get all worked up about another space race and that in fact something like that is needed. Americans are nothing if not competitive; and a large part of the emotional problems we've displayed on the world stage recently are due to the fact that we don't really have an external focus or goal as a nation. Americans don't know how to sit back, relax, and enjoy their success; there always has to be a next goal and when no such goal is in sight, we have problems domestically until a new goal is found.
If President Bush really wanted to be remembered for more than "The Business of America is Business" (actually that was Coolidge IIRC), he'd lay down a Kennedyesque ultimatum to have a fully functional international space station and the start of a permanent lunar settlement before the decade is out. The development program would be good for the U.S. aviation and defense industry, and business could really take it to the next level once they have cheap access to space. Not to mention the millions of other useful advances that a major investment in a space program brings.
Sorry, I got carried away there. Bottom line: humanity has to spread, and if I have to pit China vs. the USA to do it, I'll send a spy plane every day of the week:)
My Dad used to tell stories about how IBM would send out technicians to work on the mainframes and printers, and how they always had to have the same suit and tie, no matter how dirty the actual work was. Nice to hear things have changed...
I wish India the best, but I really hope that the Chinese kick their space program into high gear first, because that's the only thing that would arouse enough competitive spirit to get Uncle Sam off of his couch and back into orbit and beyond. Nationalism isn't great all the time, but it's good for pushing the human race into new frontiers, and so in that regard the more competitive China gets, the better. If recent history has shown anything, it's that the U.S. does better when there's somebody to compete with. Otherwise we get complacent, dumb, and irritable.
Anyone viewing porn in the library can already be asked to leave, under existing library policies and terms of service. Just like if you had a problem with someone whacking off to a physical Playboy mag in the next study carrel. Likewise for school libraries, especially since you could just require students to login. You wouldn't leave kids alone in the classroom to tell dirty jokes and intimidate girls, why would you leave them alone in the school library long enough to do so? (In reality, of course, you can't stop young boys from telling dirty stories no matter what you do, which makes the effort to ban the virtual extension of this all the more addlepated.) Sorry, the intimidation factor is a red herring.
Censorware isn't about preventing porn, it's about control. Although those that want to control information may start off with the best intentions, I refuse to submit to that kind of control.
I agree that in a perfect world there are some things that kids wouldn't be exposed to until they're ready, but in Real Life kids are already talking about it and surfing the Internet for it at home anyway. The only way you can really protect them is to talk to them beforehand and explain how the world really is. If they're forewarned, they aren't going to be any more intimidated by the occasional school library porn than they will be by the myriad jokes they hear in the restroom every day.
That's all right, "overrated" is the closest to an accurate negative moderation of one of my posts that I've seen in a while. Usually I end up being "flamebait" or "troll". At least I have posted something in the past which was overrated, so I can consider this to be karmic retribution.
I hope for metamod too (and I like to think I've fixed some things in that phase) but I don't hold out too much hope.
This is OT, but couldn't you just rebuild your kernel with just the security patches, but not patch the top-level makefile so that the module version number remains the same? You wouldn't want to pick up every change from a new kernel version, just the security stuff. I've never tried this, I'm just curious as to whether there would be problems with this approach or not. It would probably be a huge pain to get this to work right, though.
I'm curious, how do you take the proper precautions for a fire alarm (i.e. evacuate the building) but still maintain instructional time? "OK kids, as we file out of the building you'd better be thinking about your multiplication tables!"
After all, all of those kids that bullied him will probably live in fear for their lives until they're out of school now:)
But seriously, I think the best thing that father and son could do now is go to the court of public opinion, and fast. Not/., though - I mean the "real media" that the community is exposed to ("what's a slashdot?" - he he). Try to get an interview in the local papers, TV news, etc., or at least write letters to the editor. If you spin the story as "why did our school systems allow things to come to this" you might make an attractive story for the media, especially since he's never been in any kind of trouble before. Make sure going to/. was your first step into the public eye, not your last step or your only one.
Try finding one sympathetic school board member - depending on the politics in your area, if the school board's a highly-contested position, there's probably a political split or two in the board that you can use to advantage. At the very least you might get a quicker hearing on the situation.
I would hesitate to go the legal route, simply because Sean's comments probably did violate the letter of the school policy. However, the school should also have policies on bullying and on considering all sides of the issue before expelling anyone. And if they don't, that's more fodder for the media gristmill. You want to cultivate a tone of "What the hell kind of district are you running here? This could be your kid in front of a kangaroo court next...".
Good luck, and make sure Jon gets permission before putting you in his next book:)
More importantly, I wish I had the sense of humor to be a troll. Then again, we've got plenty of funny trolls; if I had a sense of humor I'd be more use as a moderator instead...
Bravo! Annoying as they sometimes are, there's something about having an active and humorous troll culture that just makes/. fun. Maybe because they don't take anything seriously - and wouldn't we all be better off if we were a little less serious? Sometimes I wish I had the time to be a proper troll, but oh well.
I'm thinking that the VLSI/logic design tool Mentor Graphics did this too, although it's been a while since I've used it. It did make life a lot easier once you got used to it.
One tool that this would really help with would be the Gimp. Like Menthol Graphics, it has a ton of menu choices and sometimes it's tough to hunt through them all (at least for a Gimp newbie like me). Mouse squiggles would be a neat addition.
Completely understandable, it's too bad if the article misrepresented things somewhat. I'm just a little defensive about the current media perception that the dot-com era was a total failure - sometimes I wonder if it was technology correspondents who lost the most when the bubble burst, and so now they're bitter about everything online. I think the general population uses the 'net for things that work for them (email, web, and IM mostly), and so the failure of things that don't work for them (boo.com) shouldn't count against the overall increase in 'net usage and importance in our lives.
Good luck with your show, sorry I'm from out of town and won't get a chance to see it.
Like a promise that was held out to a new generation of people coming from
college and it failed utterly. It's really hit a nerve all over town."
I wouldn't call it a total failure - as in all spheres of life, the things that people really care about on the Internet will remain, and all else will pass away. ebusiness (I feel dirty just typing it) is here to stay, no matter how many individual companies went belly-up.
The best analysis I've seen so far (further up the page by now) is that there were no risks in failing since you're using somebody else's money, so everybody went for it even if they didn't have a good plan. Ultimately this just managed to blow off a lot of investors' cash on some very fancy marketing and perks. It was fun while it lasted, and it proves once and for all that you can't trust Wall Street to be "rational investors" all the time.
Slashdot Mirror
How is the honeynet system under more stress than the normal systems? Do you pay hackers to attack it in preference to your other systems? I don't see how that would work, since as soon as a hacker knows that this isn't a real box, they'll move on to more profitable and/or fun targets. If you incite hackers to attack it by making it an easy target, then you're not really testing what would happen to a real system, are you?
I've been hearing about these for a while, but to be honest I don't see how a honeynet will really help your network.
Maybe someone can explain the attraction to me, but it seems that although honeynets may observe a new attack technique every once in a while, on the whole they're not the most effective prevention method. The time would be better spent auditing the security level of your machines, improving your patch application time, analyzing log files from your production machines, etc.
Don't forget the tried-but-true reason: to protect yourself against governments with guns.
I don't know about that, you didn't even have to aim up and down in DOOM :) Just hit the floor and you're safe from any DOOM-trained psychokids.
What's really amazing is that just this weekend I was watching "Heathers" on TV. If there's any one movie that would be Columbine-inspiring, it's "Heathers" - it included black trench coats, shooting the school jocks, and blowing up the school. I like the movie, but it's a surprise given the current atmosphere that anyone will still play it in the U.S.
That's a scary thought, considering that I used to economize on fire departments by just building one and then putting out fires with the bulldozer :)
Well, tobacco, alcohol, sex, skydiving, and driving too fast can kill you too - are all proponents of those things "killers"? It's a little simplistic to say "Drugs are bad, you shouldn't do drugs, mmmmkay?". Like any other choice in your life, drugs can have bad or good consequences.
I agree that kids shouldn't be doing drugs, but that's because
But I really don't care at all if the adults next door choose to partake in drugs in the privacy of their own home. Now if they're mugging people to support their habits, then that mugging should be prosecuted to the full extent of the law, but that's a separate issue. It's true that families are torn apart by drugs, but on the other hand many of those families are torn apart because Daddy's in prison on drug charges, not because of any real breakdown of the family. If there were sufficient education and support services for drug addicts in the U.S., most of those broken families wouldn't have to be broken. The quickest way to decrease demand in the U.S. would be to spend half of the "war on drugs" money on treatment rather than prisons, police property seizures (oh wait, that's revenue not an expense :), and shooting down missionaries in Peru.
Children won't automatically get addicted to drugs any more than they automatically get addicted to alcohol, cigarettes, or sex. The rampant use of alcohol is widely accepted in our society, but people still don't let kids drink, do they? (OK, some do, but we've already got laws about that.)
Not necessarily. Here in Illinois, ComEd generates 75% of it's power from nuclear fission, without any environmental problems so far. As a result, my electricity bill is always lower than my phone bill or internet access charges. And this includes using electrical heat over the winter. No soaring natural gas bills here!
Not that nuclear energy is always right, but if handled correctly it is a great alternative. With existing safety standards enforced properly, it is probably more environmentally friendly than burning coal.
Well, it's not really confidential any more, is it? It's not like Felten signed an NDA to get the SDMI secrets, and is now publishing them. The whole point of the exercise was for his team to figure it out on their own. I don't see how it can be considered confidential information restricted only to the SDMI group any more, since another party has independently figured it out. It could be argued that Felten's research is confidential to him until he decides to publish, but it's not confidential to the SDMI folks any more.
While I'm at it, kudos to Cryptome! The site is probably one of the most important resources on the 'net, here's hoping it never goes away.
I check my email when I've been working on something for a while and need a break to think about something else. If I didn't check email, I'd have to read /. instead, and we all know what a productivity suck that is :) The average worker is going to waste a certain amount of time every day - email makes it possible to be somewhat productive during "mental task switching" time which would otherwise be involved in gossiping, smoke breaks, or pranks on coworkers. That's why, even with almost an hour "wasted" on email every day, people are more productive now.
Once the American public realizes that you can drop some pretty big rocks on the USA from the Moon, they'll care about it. I think people could get all worked up about another space race and that in fact something like that is needed. Americans are nothing if not competitive; and a large part of the emotional problems we've displayed on the world stage recently are due to the fact that we don't really have an external focus or goal as a nation. Americans don't know how to sit back, relax, and enjoy their success; there always has to be a next goal and when no such goal is in sight, we have problems domestically until a new goal is found.
If President Bush really wanted to be remembered for more than "The Business of America is Business" (actually that was Coolidge IIRC), he'd lay down a Kennedyesque ultimatum to have a fully functional international space station and the start of a permanent lunar settlement before the decade is out. The development program would be good for the U.S. aviation and defense industry, and business could really take it to the next level once they have cheap access to space. Not to mention the millions of other useful advances that a major investment in a space program brings.
Sorry, I got carried away there. Bottom line: humanity has to spread, and if I have to pit China vs. the USA to do it, I'll send a spy plane every day of the week :)
My Dad used to tell stories about how IBM would send out technicians to work on the mainframes and printers, and how they always had to have the same suit and tie, no matter how dirty the actual work was. Nice to hear things have changed...
I wish India the best, but I really hope that the Chinese kick their space program into high gear first, because that's the only thing that would arouse enough competitive spirit to get Uncle Sam off of his couch and back into orbit and beyond. Nationalism isn't great all the time, but it's good for pushing the human race into new frontiers, and so in that regard the more competitive China gets, the better. If recent history has shown anything, it's that the U.S. does better when there's somebody to compete with. Otherwise we get complacent, dumb, and irritable.
Anyone viewing porn in the library can already be asked to leave, under existing library policies and terms of service. Just like if you had a problem with someone whacking off to a physical Playboy mag in the next study carrel. Likewise for school libraries, especially since you could just require students to login. You wouldn't leave kids alone in the classroom to tell dirty jokes and intimidate girls, why would you leave them alone in the school library long enough to do so? (In reality, of course, you can't stop young boys from telling dirty stories no matter what you do, which makes the effort to ban the virtual extension of this all the more addlepated.) Sorry, the intimidation factor is a red herring.
Censorware isn't about preventing porn, it's about control. Although those that want to control information may start off with the best intentions, I refuse to submit to that kind of control.
I agree that in a perfect world there are some things that kids wouldn't be exposed to until they're ready, but in Real Life kids are already talking about it and surfing the Internet for it at home anyway. The only way you can really protect them is to talk to them beforehand and explain how the world really is. If they're forewarned, they aren't going to be any more intimidated by the occasional school library porn than they will be by the myriad jokes they hear in the restroom every day.
That's all right, "overrated" is the closest to an accurate negative moderation of one of my posts that I've seen in a while. Usually I end up being "flamebait" or "troll". At least I have posted something in the past which was overrated, so I can consider this to be karmic retribution.
I hope for metamod too (and I like to think I've fixed some things in that phase) but I don't hold out too much hope.
This is OT, but couldn't you just rebuild your kernel with just the security patches, but not patch the top-level makefile so that the module version number remains the same? You wouldn't want to pick up every change from a new kernel version, just the security stuff. I've never tried this, I'm just curious as to whether there would be problems with this approach or not. It would probably be a huge pain to get this to work right, though.
I'm curious, how do you take the proper precautions for a fire alarm (i.e. evacuate the building) but still maintain instructional time? "OK kids, as we file out of the building you'd better be thinking about your multiplication tables!"
That's Doctor Dorf McMoron to you. I didn't spend 6 years at Moron Teaching College to be called Mister, you know.
After all, all of those kids that bullied him will probably live in fear for their lives until they're out of school now :)
But seriously, I think the best thing that father and son could do now is go to the court of public opinion, and fast. Not /., though - I mean the "real media" that the community is exposed to ("what's a slashdot?" - he he). Try to get an interview in the local papers, TV news, etc., or at least write letters to the editor. If you spin the story as "why did our school systems allow things to come to this" you might make an attractive story for the media, especially since he's never been in any kind of trouble before. Make sure going to /. was your first step into the public eye, not your last step or your only one.
Try finding one sympathetic school board member - depending on the politics in your area, if the school board's a highly-contested position, there's probably a political split or two in the board that you can use to advantage. At the very least you might get a quicker hearing on the situation.
I would hesitate to go the legal route, simply because Sean's comments probably did violate the letter of the school policy. However, the school should also have policies on bullying and on considering all sides of the issue before expelling anyone. And if they don't, that's more fodder for the media gristmill. You want to cultivate a tone of "What the hell kind of district are you running here? This could be your kid in front of a kangaroo court next...".
Good luck, and make sure Jon gets permission before putting you in his next book :)
And this was flamebait how? Remember, moderators: it's not just clicking on the little buttons, it's also about reading the post.
More importantly, I wish I had the sense of humor to be a troll. Then again, we've got plenty of funny trolls; if I had a sense of humor I'd be more use as a moderator instead...
Bravo! Annoying as they sometimes are, there's something about having an active and humorous troll culture that just makes /. fun. Maybe because they don't take anything seriously - and wouldn't we all be better off if we were a little less serious? Sometimes I wish I had the time to be a proper troll, but oh well.
Man, I miss MEEPT...
I'm thinking that the VLSI/logic design tool Mentor Graphics did this too, although it's been a while since I've used it. It did make life a lot easier once you got used to it.
One tool that this would really help with would be the Gimp. Like Menthol Graphics, it has a ton of menu choices and sometimes it's tough to hunt through them all (at least for a Gimp newbie like me). Mouse squiggles would be a neat addition.
Completely understandable, it's too bad if the article misrepresented things somewhat. I'm just a little defensive about the current media perception that the dot-com era was a total failure - sometimes I wonder if it was technology correspondents who lost the most when the bubble burst, and so now they're bitter about everything online. I think the general population uses the 'net for things that work for them (email, web, and IM mostly), and so the failure of things that don't work for them (boo.com) shouldn't count against the overall increase in 'net usage and importance in our lives.
Good luck with your show, sorry I'm from out of town and won't get a chance to see it.
I wouldn't call it a total failure - as in all spheres of life, the things that people really care about on the Internet will remain, and all else will pass away. ebusiness (I feel dirty just typing it) is here to stay, no matter how many individual companies went belly-up.
The best analysis I've seen so far (further up the page by now) is that there were no risks in failing since you're using somebody else's money, so everybody went for it even if they didn't have a good plan. Ultimately this just managed to blow off a lot of investors' cash on some very fancy marketing and perks. It was fun while it lasted, and it proves once and for all that you can't trust Wall Street to be "rational investors" all the time.