Slashdot Mirror


User: adosch

adosch's activity in the archive.

Stories
0
Comments
381
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 381

  1. Microsoft will always be top vulnerability king on Microsoft Says No To Paying Bug Bounties · · Score: 1

    Microsoft will always sit in the highest thrown when it comes to web browser software insecurity because of that very reluctancy to not only seek white-hat/community researcher help in vulnerability assessments and testing, but also because they are too bottom-line driven to see past it.

    We all have an good idea what the average annual salaries some Microsoft employees get paid and up to $3K is a drop in the bucket for someone who will willingly take hours, weeks, months or longer to find a something that will do any Microsoft operating shop or end-user a favor. That's more than getting your money's worth not to mention curbing a bad rap.

    Even from a general security standpoint, having vulnerabilities exposed, fixed and put in a release keeps that particular ace-up-the-sleeve attack run that malicious cracking communities have that much less effective over time.

  2. Go Costner! Boo on BP! on IEEE Looks At Kevin Costner's Oil Cleanup Machines · · Score: 4, Interesting

    This is just a sad point in our world as far as leadership and the quest for the almighty (falling) dollar is concerned. Corruption, apathetic business maneuvers, greed and the "things-are-going-good" mentality caused this whole oil spill to happen. FTFA, I think it's funny how the only plug against this whole centrifuge technology to clean up oil is based on what the end-quality of "oil" will come out of them? How about the end- quality of our oceans, sea life, beaches and aquatic mammals? We all know how oil cleanups work: if it looks good on the surface, time to move on. I hate to don my hippy hate today, but I'm ashamed to associated to humans sometimes.

  3. Re:A solution in need of a problem? on Free Clock Democratizes Atomic Accuracy · · Score: 1

    I think you're missing the point, brilliance and usefulness of this. To put a rest to your argument, being behind a private network is just banter; you can still use a local time clock source from an internal server, server it up with NTP and let all your internal hosts connect to it to sync time. However, the point is that it's not a reliable time source, and even a network time nazi or your basic shell account user will tell you that the times are going to vary enough between your nodes to be bothersome from time to time.

    I've been dabbling with GPS/PSS time sources with NTP for accurate timing for years and the biggest problem that RADclock solves is: the need for crazy expensive accurate timing devices, the time it takes to fine tune them and some crazy ass person (like myself) with a fetish for time keeping to stay on top of it. Instead of buying ridiculously expensive time keeping appliances (which most IT infrastructures do) we're back just being able to maintain very accurate time keeping with the server infrastructure you already maintain. And who gives two shits about 'what application warrants such an accurate clock', even remote server logging alone for log audits or troubleshooting should, alone, get your attention.

    If this ever gets adopted widespread, this is just a big win for server time stability and keeping, in general.

  4. Overhyped Social Engineering on 'Robin Sage' Social Hoax Duped Military, Security Pros · · Score: 2, Interesting

    This isn't really surprising, nor do I think it's worthy of time at Black Hat, IMHO. The U.S. Military set themselves up for failure already a couple months back by allowing soldiers to openly use Twit-Face-book and any other blogging/social-network internet-enabled apparatus on their NIPRNET network and not enforcing any, for a lack of better terms, real punishment for being stupid and giving away whatever the military defines as OPSEC-level information.

    I was surprised myself, being a Iraqi war veteran when I got back home that all the time I was told to be very illusive when talking about where you are located overseas was a joke. Giving up that information, like geo-location, really isn't something to piss your pants over considering all the local middle easterners already know where the hell all our camps/FOBs/bases are at and the fact that it's online already. Just another case of a lonely horn-dog Army bush-wacker, flexing his muscles and telling his war stories online, looking to get some 'tang.

    Keep your troll comments to yourself, I did my time in the military (and was deployed to Iraq), I know, as well as anyone with any amount of common sense, that this is plausible truth.

  5. Re:Good times gone soon... on Price Shocks May Be Coming For Helium Supply · · Score: 1

    Ah yes! Thanks for the correction. I'm a goomba.

  6. Good times gone soon... on Price Shocks May Be Coming For Helium Supply · · Score: 1

    The days of sounding like an oompa-loompa with old birthday balloons are over! Back to plugging my nose.

  7. Child Exploitation for an Almighty Dollar on "David After Dentist" Made $150k For Family · · Score: 1

    This is just a whole new breed of exploitive human beings pimpin' themselves out for coin. This is really no worse than Jon and Kate + 8, Balloon Boy and all those other reality-ites that big their train wreck of a life and family to make a living and support them. In this case, congratulations to them for making a 150K of a viral video of your son dopey on novocain, but know your limit. And quitting your job? Seriously. Your 15 minutes of frame is probably about ticked dry...

  8. Re:When school is home on Schools, Filtering Companies Blocking Google SSL · · Score: 1

    Shouldn't someone who lives at school have the same rights in the dorm room that he rents that anyone else has in an apartment?

    We're not talking about renter's rights. RTFA much? Could we get any more trolls or buffoons?

  9. Re:Not your home network? No right to complain on Schools, Filtering Companies Blocking Google SSL · · Score: 1

    Was that before or after you had to google that?

  10. Not your home network? No right to complain on Schools, Filtering Companies Blocking Google SSL · · Score: 3, Insightful

    I've never understood or comprehended, for that matter, why people/employees/students, ect. think they have rights on a controlled government or educational internet-enabled network. Quite honestly, if you're doing things like online purchases, bill paying, senseless surfing, looking at soft-porn, chatting, facebooking, tweeting, ect. at school or work on a fairly regular basis several times a day, and you somehow are pissed because your rights are infringed? You're delusional and should go read your network agreement policy again. If you, as an employee or student, are that security conscious of your local big brother system administrator being told to troll logs and give web reports to upper management, then use good common sense. People shouldn't be using these networks for anything other than business as usual IMHO. Anything else, is just subject to interpretation against you. This isn't new people, it's the way shit works now.

    As a system administrator, I deal with these same dilemmas on a daily basis and all I have to say is: Yes, I have an easier way to get away with things like this, however, I'm still held just as accountable as Joe Typist down the cube row. Everyone knows about ethics and morals just as much as they know absolutely every thing you do on a digital device these days is logged, recorded and stored somewhere. So keep your personal business... at home unless it's absolute emergency, your cable bill is past due or you flat don't give a shit.

  11. Neat and cool, but necessary? on Google Wave Out of Beta · · Score: 2, Insightful

    Besides the Grocery List, Map Gadget and the Yes/No/Maybe gaget extensions, I don't see Google Wave making much of a dent in the social networking arena if that's their ultimate plan. This seems more of a collaboration tool for work, new ideas, coding, entrepreneurial type stuff. It has potential, but it's not developed around being friendly for someone to use personally on a daily basis. I like it, but it's something 'else' I have to log into to use it.

    If Google were to integrate it into Gmail, then I'd be more apt to force myself into using it. But then again, I feel I have all the communication tools I need in Gmail: gtalk, e-mail and Buzz, not to mention my cell phone, txt messaging, ect. This whole drive by Big Company to come up with the next medium for real-time social interaction is exhausting; I don't want 10,000 ways to talk to my family and friends, I just want one that works.

  12. Crime Forcasting? on In NJ, Higher Tech Lowers Crime · · Score: 2, Insightful

    Can't wait until the next time I am in New Jersey and do the "did I forget my wallet in my car?" pat-down in public, I will probably be sitting in the county jail overnight on suspicion of mugging.

    I'm glad to see someone throwing out an out-of-the-box idea on how to prevent or neutralize crimes before they actually happen, but now instead of dealing with a crime after it's been committed, you get to watch it unfold while it's happening. Perhaps a bit more video evidence to look at on law enforcements side, but what does this do for Joe Americana and their privacy rights? You know this network is going to get used for more than it's initial intention. Unfortunately, bad apples spoil the whole pie sometimes and no one wins.

  13. Re:Balance is key on Hooked On Gadgets, and Paying a Mental Price · · Score: 1

    Sounds like you're both inefficient to me. You either don't have a clue what runs where on your network, don't understand the 'big picture' operations at your department or company you support or you don't even monitor your server infrastructure, which includes what apps run on them. Regardless of requesting a reminder e-mail, you should have noticed it yourself IMHO if that's your job.

  14. FINALLY! A solution to my pain... on Artificial Cornea To Reach Patients This Year · · Score: 1

    I can finally get replacement eyes for all the stupid acts of humanity I've witnessed in my short lifetime that have dulled my sensitivity to this world.

  15. Balance is key on Hooked On Gadgets, and Paying a Mental Price · · Score: 2, Insightful

    FTFA, IMHO, the guy clearly has an addiction to the internet. He just needs to find a balance between his digital life and his real life. I find slinging code, programming AVR microcontrollers, hacking around in Linux, ect. ect. ect. on top of being a UNIX/Linux sysadmin for a living to be quite the wet dream, but it doesn't consume my life. Who wouldn't overwhelmed with hundreds of e-mails in their inbox on a daily basis? I know I am when I'm gone even a long weekend at work. The problem is technologies like text messages, e-mail and instant messaging get abused and often, more times than none, used for the completely wrong situations. What could be solved in a simple hall way conversation gets exacerbated in some bloated, word-smithed e-mail or instant message. Everyone does it for CYA, I get it. They think our brains are going to be re-wired is a big problem? Look at how real, human social interaction has tappered off the face of the earth. Kids next to eachother text one another in the mall. People refuse to pick up a phone and talk to someone because they want their Facebook profile to tell them all the information without any contact.

    I mean, anyone wanting to buy my xyz-online company better have met me in person and at least take me out for dinner to discuss the proposal or I'd pass it off as another Nigerian e-mail scam.

  16. Re:Just don't use facebook and stop crying on A Call For an Open, Distributed Alternative To Facebook · · Score: 1

    I didn't see anyone freaking about Facebook other than you so far. So what did you use 4 years ago when Facebook wasn't popular? Oh, that's right: phone and e-mail. So "realistically", it could be the case. I don't think anyone is making it a Facebook flamewar except you. What works for me, works for me. What works for you, is bandwagon.

  17. Re:Just don't use facebook and stop crying on A Call For an Open, Distributed Alternative To Facebook · · Score: 1, Insightful

    Agreed. I see no added value to even use a service like Facebook to keep in contact with friends and family. Most of the people I want to keep in contact with have my cell phone number, know my address (or e-mail) and know where I work. Out of those three things, if you want and have the ambition to keep in touch, now you have it.

    The reason Facebook has even worked so well for that is luck, popularity, publicity, hype and curiosity. And curse Ryan Singel for even proposing there should be an 'alternative' to Facebook. Hello, McFly! You just got done bitching about Facebook, why would you want yet another down the internet block that will be solely driven to 'improve' on what you already hate about Facebook? Hypocrite.

  18. I can see US Government getting owned on this on Crackdown On Counterfeit Networking Gear · · Score: 4, Interesting

    The only reason I'm *not* surprised that there was an actual U.S. Goverment/Military faction mentioned ITFA is the government's flame war over fair compete in regards to their many contracts that they bid out and most of the time going to the lowest bidder.

    I'm a federal government IT contractor and we're going through the same heartache in the sense that we put requirements together for Enterprise XYZ switch/router/server with good justifications why we want this XYZ brand, but we may never get that item. The government people in charge of procurements will just 'internet-window' purchase something off-brand or knock-off because it was 'like' requirements we asked for, or they will go with some reseller who we've NEVER heard of before, barely has a website and their phone number is disconnected because it was cheaper than the reputable reseller we were going through by 10-fold. I'm just really not all surprised. I'd really be leery of hacked or altered firmware that make some sort of port-knocking backdoor into your network.

  19. Mystery solved! Doomsday cancelled! on Mayan Plumbing Found In Ancient City · · Score: 1

    Guess we all know where all Mayans sacrificial human remains got flushed into now. I'm sure it'll be no time before some archaeological hippy is down there collecting petrified poo and proving the Mayan doomsday 2012 calendar wrong.

  20. Tough to Top on "Lost" and the Emergence of Hypertext Storytelling · · Score: 3, Informative

    Lost has been probably one of the most influential television shows in the past 10-20 years, easily. Especially with the cult following it's created by its story-telling has been pretty niche so far in this era of TV-movie-saga-shows.

    Lost, for me, has equated to reading 'The Hobbit' + 'Lord of the Rings' trilogy as a young kid: Everything from that point on has extreme potential to copy-cat, suck and lose my interest very quickly because there's such strong intention to try and top the topper.

  21. (De)Evolving with the times on Cub Scouts To Offer Merit Pin For Video Gaming · · Score: 1

    I really almost see this as an attempt by Boy Scouts as a selling point to get more of the younger "Nintendo-and-Mt-Dew baby" generation interested in Boy Scouts itself in their parents already can't. Unless your child has a really identifiable personality and has no problem being an individual than a follower, of course it's going to be a struggle on a parent or club organization level to have any child be motivated to earn badges without feeling embarrassed, stupid, or get razzed at school because they helped some old lady across the street wearing their navy blue shorts, brown button-up and their sash.

    I just think it's a real stretch for Boy Scouts to add this as something you 'earn'. Most parents get their children involved in an organization like this to get their children out of the house and away from TV and video games. There's already a Computer merit badge that you can earn, so it's tough to accept this idea as any more than lure bait or to re-gain interest in the club.

  22. Anyone ever tackle Alexander's Star? on Lego Robot Solves Bigger and Harder Rubik's Cubes · · Score: 4, Interesting

    I have spent a good chunk of time trying to solve Rubik's cube my brute force (when I started) and after understanding the true mechanics and a small big of mathematics, I've gotten better, not nothing that rivals these Legato Storms!

    However at a garage sale awhile back, I found Alexander's Star, which is a 12-pointed star cube oddity similiar (or rival) to the Rubik's cube I could only assume. I'd love to see a Mindstorm tackle this bad boy; I still haven't come even close to figuring this one out.

  23. OPSEC is a fallacy on Tweeting From the Front Line · · Score: 2, Insightful

    Being in the military and deployed during the first and second rotation of Operation Iraqi Freedom (which was during the dawn of MySpace and Facebook just 'starting' to get popular when I was heading back to the states), I think my opinion would hold some weight as to say there are very few tradeoffs unless you make sure soliders Twitter and Facebook profiles are private and stay that way. I think with that, it would be no more insecure than having a weak password associated with your web-email account.

    E-mail may not be 'cool' anymore to do, but it works and it's effective. I think the U.S. military caves on this because they share the same belief I do: it's a lost cause and too hard to corral. If you discipline or 'educate' your enlisted folk not to use it, some officer is going to break their own rules and do it and it's *always* going to be too-much-information leaked.

    If you have 'that' much free time on your hands in a war zone, as a solider, to be updating your profile and status on social networks several times a day, you probably have absolutely zero business being there in the first place.

  24. Testing before deploying? on McAfee Retracts Lowball Bug Damage Estimate · · Score: 1

    I've read a few interviewed accounts where the story was much like this:

    We applied the updates, and rebooted, then I went on to kick off the others. When I went back to the first couple of servers, I noticed they had rebooted again... then I knew something was wrong.

    I know things can't be 100% perfect in an IT world, and yes, virus definitions can be touchy when sometimes zero-day shit can really cause havoc, but I, myself, have of test boxen on my network that I test all patches/updates/virus definitions on for *NIX and Windows boxen. It's not perfect, because to test and interrogate everything is impossible, but I don't apply things blindly. And yes, I've had a few fallout where the package/patch/update applied fine, but there was a bug in it that affected something. But at least you had some comforting notion that you prepared as best as you could. It just is mind numbing that 1) things still get deployed blindly at the enterprise level and 2) for the amount we all in an IT organization fork out for trust and support from these companies for services and big fallouts are happening.

  25. Earth on crash course? on Japanese Spacecraft Bringing Back Space Rock · · Score: 2, Interesting

    Anyone catch the doomsday paragraph at the end FTFA:

    ''If we're on a collision course with an asteroid we need to know if they are rock-solid or if they are piles of rubble,'' he said. ''That will help us predict how best to deal with them.''

    ...how many sinister space asteroid scares have we had in the past decade claiming utter calamity on the earth? I''m not claiming conspiracy theory on this one (so stay in your caves, trolls!) but it'll be cool to see what kind of composition and materials are uncovered on that thing; because it would be good to know. It's nice to get good, "rock" solid evidence to back up a lot of theories and guessed accuracies of our solar system that are mostly data interpreted facts and not visual or tangible.