You are correct but having password histories unless you completely random shaves off substantial brute force time. The trick is to not allow them any knowledge about the password, not allow them multiple attempts, and a limited area of attack.
I prefer the use of one time password generators that sync with the system + a sub password that the user picks and is changed monthly.
But we really cant afford that kind of tech at my office.
Possibly but isn't safeguarding against brute force attacks a standard op for security? I know most places don't red flag / lock numerous attempts but I do.
Thats pretty smart but what really bugs me is the layers of security.
I have a password to access my system. Than my program, database, website, ect... All have separate unique passwords. Then you overlay all the bank accounts, pin numbers, websites, ect that we have to remember the number of password requests each day becomes laughable.
I don't think that would work for us. But then again I work for a Alzheimer's Clinic. No matter what I try these people can't seem to remember their passwords.
Here at my Florida office I put in password aging and half of the staff seemed incapable of remembering their new passwords. All of the time and what they would end up doing is sticky noting their password in with PASSWORD: XXXXXXXX in big red letters where anyone walking by could see from the other side of the office.
IF you work in a responsible work environment where everyone respects the importance of security then rotating aging passwords is a great safeguard. If they tattoo their current password to their forehead then obviously it becomes a matter of evaluating your security risks vs degraded workflow.
find a scheme like if it is October 2010 make your password 11Nov2010Ber!! If it is December 12Dec2010Ber!! ect Passwords that have rationale behind them are very easy to remember, can be very complex and sometimes easy to type.
Seriously while I agree collecting news and dispersing it is quite costly, the realistic value of MOST of the news out there is next to nothing. For example a news article about a news site charging money for news. WOW that is news to me.
Though wise men at their end know dark is right, Because their words had forked no lightning they Do not go gentle into that good night.
Didnt they use these back in ancient times with someone adjusting the mirrors by hand? Or did they just do that in the movies? I remember they used metal dishes to reflect light to kill the devil in the 1985 movie Legend. I'm sure I've seen other prior usage in film, but that is the oldest movie using the prop I can think of.
I would say that if they could link this technology with fast acting satellite survailance it would go a long way to reducing the cost of solving a homicide in terms of man hours. Since it would be close to the same as a policeman thinking their is a crime in progress I would also think that would cut down on some of the privacy hurdles we all know and love. If you had pinpoint precision, plus satellite & infrared / thermal coverage you could do some real damage to crime.
I doubt it would do much for Murder Rates but it should help solving more murder cases.
I'm curious after DNA testing was introduced did murder rates go down or just having solved cases go up?
Some people even go as far to pay for education. And the best education is on the job training. Not to mention rubbing elbows with other people in the field.
I think it is a horrible practice and that any work needs to be compensated but I at least see the reasoning behind it.
I'm with you and to be honest it is more about perception of the company than anything else really.
When I upgraded to IE 8, their questioneer about what I want IE to do. Everything microsoft related was disabled. If google wants to collect data I could care less because I have a fuzzy warm trust feeling when I use their software. Microsoft on the other hand I feel like I have to keep them at bay.
Same with other companies even ones I trust to provide antivirus software, handle my accounting ect. I just don't put as much blind faith in them. Maybe it is because they have all let me down in the past where in ways that matter to me. New companies have to earn my trust.
I'm curious now. Do you interview all applicants? How do these people make it to your short list of interviews before being able to use your spider senses on them?
Also there are reasons people develop a chip on their shoulder. I've put my time in the trenches. Sure I'm jaded by the process.
For example (Wipe the slate clean on your opinion of me)
I apply for your job against one other candidate.
They are the Daughter of President Obama They are married to the son of the Owner of the company that is your largest client. They went to the same university as you. They are just looking for a fresh start to break into the industry and are not demanding any more salary than me. Their dad is the Pres and the school may have cut them some slack in their grading policy. They are moderately capable of doing the job.
Now Me: I went to school with straight A's Went to the cheapest college I could find. I'm self taught and a quick learner. I'm fully capable of doing the job
1) Kickback (If I Hire X will I be compensated?) ----
a) |----- Family (Am I related to individual [Small form of kickback, sometimes hiring children of political people falls under this catagorey, nothing cuts through red tape like]
b) |--------- Figurehead ( I've seen where people are hired just to be a figurehead ( Astronauts, Politicians, Former CEO's ect )
2) Circle of Friends (Nothing makes them feel better than hiring someone from their Alma mater, charity, ect.) ----
3) Indentured Servitude (Can I pay this kid to do the job what I spent filling up my yacht for my weekend getaway?) ----
4) The Shiny Turd ( I've got a double MBNA Frum Havard. I am Job. ) ---- Lying lips sound the sweetest but when their kissing your ass its even better.
5) Needle In the Haystack ( This is you and me ) -----
I'm not a scientist but I would think that the water temperature has been getting warmer and that the experiment would offset the increase in temperature.
If on the other hand it makes the ocean a giant ice cube killing all marine life to cool the earth by 3 C then that would probably be a bad idea.
On page 6, article 2.3 paragraph 2:
Where it says materials and implements does that mean if i use a infringing line of code or part to make a product like a Ferrari, then the whole item can possibly be forfeited?
Um no.... GT-5 was not successful here is why. When I bought my ps3 years ago it was for one purpose. GT-5.
I played the demo's of gt-5 and prologue and now they will not have any of my money.
Their system works in reverse.
Now when they come out with the next gen game this fanboy who would have bought it just on the name alone will not.
I was going to reply to you in binary but the damn slashdot filter wouldn't let me.
Your right. But it's a slippery slope and I don't think china is ever gonna let this one slide.
It is too bad that Microsoft has learned what we have all known for years. It's software is a virus, infecting our lives and bank accounts for years.
I wish there was a way to filter updates. The addition of Hide Update was a major improvement but now if we could just Block any Service Pack, BitDefender, and patch less than 2 months old from updating that would be wonderful.
It is not like microsoft reacts in a timely manner to its vulnerabilities anyway, what is another 2-6 months of being unprotected?
I think the people in QA need a pay bump.
The only reason I can come up with is they are payed so low that after they are done milking Microsoft and get fired they can always find a better paying job in the food industry.
Yes but luckly the AT&T store took it back.
I exchanged it from a htc to a Iphone for her.
Ever since she got the Iphone she spends much less time talking on it then any of her other phones but she is constantly using it.
Just curious but cant we do both?
Developing IP employs how many people?
Ever look at the top companies that earn the most money?
How many people do they employ?
Slashdot Mirror
You are correct but having password histories unless you completely random shaves off substantial brute force time. The trick is to not allow them any knowledge about the password, not allow them multiple attempts, and a limited area of attack.
I prefer the use of one time password generators that sync with the system + a sub password that the user picks and is changed monthly.
But we really cant afford that kind of tech at my office.
Possibly but isn't safeguarding against brute force attacks a standard op for security? I know most places don't red flag / lock numerous attempts but I do.
Thats pretty smart but what really bugs me is the layers of security.
I have a password to access my system. Than my program, database, website, ect... All have separate unique passwords.
Then you overlay all the bank accounts, pin numbers, websites, ect that we have to remember the number of password requests each day becomes laughable.
I don't think that would work for us. But then again I work for a Alzheimer's Clinic. No matter what I try these people can't seem to remember their passwords.
Here at my Florida office I put in password aging and half of the staff seemed incapable of remembering their new passwords. All of the time and what they would end up doing is sticky noting their password in with PASSWORD: XXXXXXXX in big red letters where anyone walking by could see from the other side of the office.
IF you work in a responsible work environment where everyone respects the importance of security then rotating aging passwords is a great safeguard.
If they tattoo their current password to their forehead then obviously it becomes a matter of evaluating your security risks vs degraded workflow.
find a scheme
like if it is October 2010 make your password
11Nov2010Ber!!
If it is December
12Dec2010Ber!! ect
Passwords that have rationale behind them are very easy to remember, can be very complex and sometimes easy to type.
Seriously while I agree collecting news and dispersing it is quite costly, the realistic value of MOST of the news out there is next to nothing.
For example a news article about a news site charging money for news. WOW that is news to me.
Though wise men at their end know dark is right,
Because their words had forked no lightning they
Do not go gentle into that good night.
Didnt they use these back in ancient times with someone adjusting the mirrors by hand?
Or did they just do that in the movies? I remember they used metal dishes to reflect light to kill the devil in the 1985 movie Legend.
I'm sure I've seen other prior usage in film, but that is the oldest movie using the prop I can think of.
I would say that if they could link this technology with fast acting satellite survailance it would go a long way to reducing the cost of solving a homicide in terms of man hours.
Since it would be close to the same as a policeman thinking their is a crime in progress I would also think that would cut down on some of the privacy hurdles we all know and love.
If you had pinpoint precision, plus satellite & infrared / thermal coverage you could do some real damage to crime.
I doubt it would do much for Murder Rates but it should help solving more murder cases.
I'm curious after DNA testing was introduced did murder rates go down or just having solved cases go up?
Some people even go as far to pay for education. And the best education is on the job training. Not to mention rubbing elbows with other people in the field.
I think it is a horrible practice and that any work needs to be compensated but I at least see the reasoning behind it.
I'm with you and to be honest it is more about perception of the company than anything else really.
When I upgraded to IE 8, their questioneer about what I want IE to do. Everything microsoft related was disabled.
If google wants to collect data I could care less because I have a fuzzy warm trust feeling when I use their software.
Microsoft on the other hand I feel like I have to keep them at bay.
Same with other companies even ones I trust to provide antivirus software, handle my accounting ect. I just don't put as much blind faith in them. Maybe it is because they have all let me down in the past where in ways that matter to me. New companies have to earn my trust.
I'm curious now.
Do you interview all applicants?
How do these people make it to your short list of interviews before being able to use your spider senses on them?
Also there are reasons people develop a chip on their shoulder. I've put my time in the trenches. Sure I'm jaded by the process.
For example (Wipe the slate clean on your opinion of me)
I apply for your job against one other candidate.
They are the Daughter of President Obama
They are married to the son of the Owner of the company that is your largest client.
They went to the same university as you.
They are just looking for a fresh start to break into the industry and are not demanding any more salary than me.
Their dad is the Pres and the school may have cut them some slack in their grading policy.
They are moderately capable of doing the job.
Now Me:
I went to school with straight A's
Went to the cheapest college I could find.
I'm self taught and a quick learner.
I'm fully capable of doing the job
Who would you honestly hire?
I find that jobs are handed out in this order.
1) Kickback (If I Hire X will I be compensated?)
----
a) |----- Family (Am I related to individual [Small form of kickback, sometimes hiring children of political people falls under this catagorey, nothing cuts through red tape like]
b) |--------- Figurehead ( I've seen where people are hired just to be a figurehead ( Astronauts, Politicians, Former CEO's ect )
2) Circle of Friends (Nothing makes them feel better than hiring someone from their Alma mater, charity, ect.)
----
3) Indentured Servitude (Can I pay this kid to do the job what I spent filling up my yacht for my weekend getaway?)
----
4) The Shiny Turd ( I've got a double MBNA Frum Havard. I am Job. )
----
Lying lips sound the sweetest but when their kissing your ass its even better.
5) Needle In the Haystack ( This is you and me )
-----
I'm not a scientist but I would think that the water temperature has been getting warmer and that the experiment would offset the increase in temperature. If on the other hand it makes the ocean a giant ice cube killing all marine life to cool the earth by 3 C then that would probably be a bad idea.
On page 6, article 2.3 paragraph 2: Where it says materials and implements does that mean if i use a infringing line of code or part to make a product like a Ferrari, then the whole item can possibly be forfeited?
Um no.... GT-5 was not successful here is why. When I bought my ps3 years ago it was for one purpose. GT-5. I played the demo's of gt-5 and prologue and now they will not have any of my money. Their system works in reverse. Now when they come out with the next gen game this fanboy who would have bought it just on the name alone will not.
I was going to reply to you in binary but the damn slashdot filter wouldn't let me. Your right. But it's a slippery slope and I don't think china is ever gonna let this one slide.
Thats the motto of my life my friend.
your right sorry I jumped the gun and confused bitdefender with windows defender
It is too bad that Microsoft has learned what we have all known for years. It's software is a virus, infecting our lives and bank accounts for years. I wish there was a way to filter updates. The addition of Hide Update was a major improvement but now if we could just Block any Service Pack, BitDefender, and patch less than 2 months old from updating that would be wonderful. It is not like microsoft reacts in a timely manner to its vulnerabilities anyway, what is another 2-6 months of being unprotected? I think the people in QA need a pay bump. The only reason I can come up with is they are payed so low that after they are done milking Microsoft and get fired they can always find a better paying job in the food industry.
Imagine Hollywood movie studios requiring this. Or California's gov.
Yes but luckly the AT&T store took it back. I exchanged it from a htc to a Iphone for her. Ever since she got the Iphone she spends much less time talking on it then any of her other phones but she is constantly using it.
Just curious but cant we do both? Developing IP employs how many people? Ever look at the top companies that earn the most money? How many people do they employ?
I actually bought my girlfriend a windows phone. That thing was such a POS you could not force me to use it.
Why the hell wasn't a full refund the lowest option.