Ish. I do not envy you that position, but I understand it.
Can you at least firewall off the equipment down to the bare minimums, like ports 80 and 443? Can you hide them behind a transparent proxy that would bear the brunt of the attacks? Can you maybe access them via Citrix, or a Terminal Services Client, or something that is at least a hop away from the raw internet? Are they at least on a separate partition from the other Windows boxes on your network, so when Dr. Red fires up his laptop and starts spreading malware like wildfire, at least your lab equipment is safe?
It just seems like there are plenty of other mitigation strategies you could use to reduce exposure to these machines without removing
Yes, an air gap would be even better, but I read the above to say "we had an air gap but some idiot bridged it." My intent was to provide the bridge as part of the design to let people know that you've already created the path, but to then plaster it with the equivalent of "Road Closed", "Keep Out", and "No Trespassing" signs.
Because the network admin should have the laboratory equipment firewalled off with a "deny all" preceded and followed by comment lines that read " # DANGER -- MEDICAL EQUIPMENT ON THIS SEGMENT -- If you permit so much as one stinking port to pass through this firewall, I will hunt you down and leave nothing behind for the doctors to patch together."
There is no excuse on the planet for letting health care equipment see the cloud. If data has to enter or leave, it should pass through a bastion host. If the requirements are that the equipment really has to reach the internet, the requirements are faulty.
Consider the source. You've got a manager telling you it's unbreakable. Perhaps his cryptographers said to him "it's a good protocol, fixes the weakness in this previous protocol, and FOR ALL YOU KNOW it's unbreakable." They maybe didn't say those capitalized words out loud, because they figured their boss wouldn't know the difference anyway. But they forgot their boss might blab it on to someone else that way.
My point is this is the kind of phrasing that comes out of the mouths of higher-ups who don't know that "unbreakable" has a lot of negative connotations in the cryptographic community, and is usually associated with naïve or unscrupulous snake-oil salesmen.
My condolences on your inability to find a sane woman, and I no longer wish to subscribe to your newsletter. There are many informative web sites I can visit instead.
Moderations should be made accurately, not some other fashion to game the karma system.
The moderation / karma system exists with or without your best intentions. People will use it as they see fit, regardless of whether or not you consider it "use" or "abuse".
Long ago I figured "it's utterly trivial" so I stopped worrying about it. Much easier that way, as I don't have to explain myself to some self-appointed slashdot apologist.
So as a subscriber, I get to see stories before TFA is slashdotted. The preview stories come with this little question: "See any serious problems with this story? Email our on-duty editor." I don't think emailing the Slashdot editors is going to fix the problems I see with this one!
TFA gives the example of a white van involved in some crime. Well, I have a neighbor whose dog barks all night, but drives a brown van. No problem, a little Photoshop here and there, and voilá! "Instant Evidence"! The neighbors dog spends 6-8 months in the kennel while his owner does the same thing.
Who wants to be always led about by the nose through every adventure? We did that before.
Rigid story lines have all the staying power of cut scenes. They're fun once or twice, but then they get in the way of game play, and it doesn't take long for the average player to <esc> their way past them.
Multiplayer is about "players". Let them play with each other. A wizened NPC that tells you "You must not enter the Dungeon of Doom until you have brought me the Ring of Gold" is fine in single player mode, but a group of friends doesn't want to grind, they want to play together.
Fortunately, this is the 21st century, and we now have modern science to thank for assistance in that area. If NASA opts for the "blue capsule" approach, we should be able to set a hard date that will last long enough to satisfy the entire scientific community.
This is the fruit of our lousy political and education systems!
No. This is the fruit of our new Project Management philosophies.
Last time they did this, they asked the engineers "hey, how do you want to build a big rocket?" The engineers answered "strap five of those smaller engines together, and we'll be good to go."
Now it seems like they have to put together a project plan to create each and every nut, bolt and washer. Then they have to have a nut, bolt and washer design document inspection. Don't forget they have to invite the nut, bolt and washer quality control team to the nut, bolt and washer design document inspection. Then they have to create the nut, bolt and washer master test plan. And they have to have another document inspection of the nut, bolt and washer master test plan....
I could go on and on about nuts, bolts and washers, but I'm bored typing all this project management crap already, and it's only been one paragraph. Repeat this process for three million parts, and 20 years seems like a bargain.
Come the locusts, I'd rather have the dog food and the buckshot than physical gold under my bed. If I survive, I'll be eating dog food and fending off the people who are starving because they can't eat their gold. Once they die, I expect they'll drop gold and other phat lewt. But just like the games, if every dead body is dropping gold, the value of the gold will plummet.
Of course your point is still valid -- the gold under the bed is still far more valuable than trying to trade with eGold.
50,000 subscribers in a month? That's really, really optimistic.
It sounds to me like that's the goal they set in order to meet some certain existing financial mark (such as paying the current rent and 100% of the reporter's salaries, etc.) Not a safe bet on a real unknown like "who will subscribe to the online version?"
You know what? I have no friggin' idea how HP gets away with those monstruous drivers. It's nuts.
Because people keep buying HP printers. It's that simple.
I switched away from HP many years ago, instead trying a series of printers. First I bought Lexmark (equally crap drivers, I've bought my last of those as well) and Epson, and finally settling on Canon printers. Since I use ink jets, I really liked the Canon because the print head is separate from the tanks, and there are six individual color tanks. Replacement ink is about $10 per tank as opposed to $40 for the three-color+print-head HP cartridge. And the drivers? Pretty much invisible, unless there's a problem.
HP really needs to cut back on the arrogance. We really don't have to buy their sh!t, as there are many better performing alternatives out there, and people are learning.
Oh, absolutely. Next stop: the U.S. House of Representatives. He just has to carpetbag his way around the country until he finds some particularly gullible district and start selling them locally with his trash talk. If he keeps a low profile by making only local appearances and speeches, and picks his battle against an opponent so stupid that he or she doesn't discover his background, he might not rise to enough prominence to be outed by the national media until it's too late.
If we have districts full of Americans that are stupid enough to elect a convicted felon or a deceased candidate, we surely have some that will elect a disbarred lawyer. I'm thinking that in some parts of this country, "disbarred lawyer" might even be proudly worn as some perverse badge of honor: "I was so right about this stuff that they created a conspiracy to kick me out so I wouldn't reveal the TRUTH, the TRUTH they are HIDING from YOU!"
Yes, but make sure all the connectors are gold plated - it helps to improve the quality of the water.
The sad thing is that what you are proposing has more practical value than the gold plated HDMI cables! At least gold won't leach lead into your water supply.
By making that choice you're supporting the "music industry" rather than "the artists". Granted, the producers make as much money either way, but by purchasing directly from the band you would cut the distributors out of the money, and give a proportionally larger amount to the group (who will hopefully put out another album for you to enjoy.)
Put it this way: buying a £9.25 disc from Amazon you'd give £6 to the producer and the RIAA, and £3 to the store, leaving about 25p to the artist. Buying a £14 disc at the show you'd still give £6 to the producer and the RIAA, but £8 to the artist.
'Until 1972, when the modern athletic shoe was invented, people ran in very thin-soled shoes, had strong feet and had a much lower incidence of knee injuries.'
And football supposedly had a much lower incidence of injuries before the introduction of "pads" (which quickly became an offensive weapon allowing harder hits)
Of course, this could just be "numbers". Many of the running injuries treated today are repeat injuries. Prior to the invention of the running shoe was also pretty much prior to modern sports medicine, meaning a single injury would have prevented you from running again. Today's numbers may be higher than historical numbers due to the vast number of people who continue running after recovering from surgery to correct their problems.
I know there are batteries but what size of batteries or what storage setup would be employed in banking the power captured during the day for use during night time?
News flash! This just in! Pope Dies from Exhaustion after blessing 75,000 batteries worth of holy water.
Slashdot Mirror
Ish. I do not envy you that position, but I understand it.
Can you at least firewall off the equipment down to the bare minimums, like ports 80 and 443? Can you hide them behind a transparent proxy that would bear the brunt of the attacks? Can you maybe access them via Citrix, or a Terminal Services Client, or something that is at least a hop away from the raw internet? Are they at least on a separate partition from the other Windows boxes on your network, so when Dr. Red fires up his laptop and starts spreading malware like wildfire, at least your lab equipment is safe?
It just seems like there are plenty of other mitigation strategies you could use to reduce exposure to these machines without removing
Yes, an air gap would be even better, but I read the above to say "we had an air gap but some idiot bridged it." My intent was to provide the bridge as part of the design to let people know that you've already created the path, but to then plaster it with the equivalent of "Road Closed", "Keep Out", and "No Trespassing" signs.
Because the network admin should have the laboratory equipment firewalled off with a "deny all" preceded and followed by comment lines that read " # DANGER -- MEDICAL EQUIPMENT ON THIS SEGMENT -- If you permit so much as one stinking port to pass through this firewall, I will hunt you down and leave nothing behind for the doctors to patch together."
There is no excuse on the planet for letting health care equipment see the cloud. If data has to enter or leave, it should pass through a bastion host. If the requirements are that the equipment really has to reach the internet, the requirements are faulty.
Consider the source. You've got a manager telling you it's unbreakable. Perhaps his cryptographers said to him "it's a good protocol, fixes the weakness in this previous protocol, and FOR ALL YOU KNOW it's unbreakable." They maybe didn't say those capitalized words out loud, because they figured their boss wouldn't know the difference anyway. But they forgot their boss might blab it on to someone else that way.
My point is this is the kind of phrasing that comes out of the mouths of higher-ups who don't know that "unbreakable" has a lot of negative connotations in the cryptographic community, and is usually associated with naïve or unscrupulous snake-oil salesmen.
Holy crap! I just googled alien lizards who control the earth and got 498,000 hits! I seriously thought you were making this shit up.
My condolences on your inability to find a sane woman, and I no longer wish to subscribe to your newsletter. There are many informative web sites I can visit instead.
the alien lizards who control the Earth
Your ideas intrigue me and I wish to subscribe to your newsletter.
Moderations should be made accurately, not some other fashion to game the karma system.
The moderation / karma system exists with or without your best intentions. People will use it as they see fit, regardless of whether or not you consider it "use" or "abuse".
Long ago I figured "it's utterly trivial" so I stopped worrying about it. Much easier that way, as I don't have to explain myself to some self-appointed slashdot apologist.
So as a subscriber, I get to see stories before TFA is slashdotted. The preview stories come with this little question: "See any serious problems with this story? Email our on-duty editor." I don't think emailing the Slashdot editors is going to fix the problems I see with this one!
TFA gives the example of a white van involved in some crime. Well, I have a neighbor whose dog barks all night, but drives a brown van. No problem, a little Photoshop here and there, and voilá! "Instant Evidence"! The neighbors dog spends 6-8 months in the kennel while his owner does the same thing.
Who wants to be always led about by the nose through every adventure? We did that before.
Rigid story lines have all the staying power of cut scenes. They're fun once or twice, but then they get in the way of game play, and it doesn't take long for the average player to <esc> their way past them.
Multiplayer is about "players". Let them play with each other. A wizened NPC that tells you "You must not enter the Dungeon of Doom until you have brought me the Ring of Gold" is fine in single player mode, but a group of friends doesn't want to grind, they want to play together.
Fortunately, this is the 21st century, and we now have modern science to thank for assistance in that area. If NASA opts for the "blue capsule" approach, we should be able to set a hard date that will last long enough to satisfy the entire scientific community.
This is the fruit of our lousy political and education systems!
No. This is the fruit of our new Project Management philosophies.
Last time they did this, they asked the engineers "hey, how do you want to build a big rocket?" The engineers answered "strap five of those smaller engines together, and we'll be good to go."
Now it seems like they have to put together a project plan to create each and every nut, bolt and washer. Then they have to have a nut, bolt and washer design document inspection. Don't forget they have to invite the nut, bolt and washer quality control team to the nut, bolt and washer design document inspection. Then they have to create the nut, bolt and washer master test plan. And they have to have another document inspection of the nut, bolt and washer master test plan. ...
I could go on and on about nuts, bolts and washers, but I'm bored typing all this project management crap already, and it's only been one paragraph. Repeat this process for three million parts, and 20 years seems like a bargain.
Well I'll be! It is in your department tag. Maybe I should read those once in a while.
After reminiscing about the gaudiness of some of those crappy old pages, I'd have to say they were more like the MySpace of the '90s.
Come the locusts, I'd rather have the dog food and the buckshot than physical gold under my bed. If I survive, I'll be eating dog food and fending off the people who are starving because they can't eat their gold. Once they die, I expect they'll drop gold and other phat lewt. But just like the games, if every dead body is dropping gold, the value of the gold will plummet.
Of course your point is still valid -- the gold under the bed is still far more valuable than trying to trade with eGold.
I've got a lamer Ask Slashdot than that: "What is the lamest Ask Slashdot article ever?"
It's so lame it's meta-lame!
Qin Gang denied involvement in computer espionage. 'Some people outside of China are bent on fabricating lies of so-called Chinese computer spies,'
"So-called Chinese computer spies"? Let's just shut off the routers involved and see exactly which country complains.
It probably won't be China doing the complaining, because China will be cut off from the net about that time.
50,000 subscribers in a month? That's really, really optimistic.
It sounds to me like that's the goal they set in order to meet some certain existing financial mark (such as paying the current rent and 100% of the reporter's salaries, etc.) Not a safe bet on a real unknown like "who will subscribe to the online version?"
You know what? I have no friggin' idea how HP gets away with those monstruous drivers. It's nuts.
Because people keep buying HP printers. It's that simple.
I switched away from HP many years ago, instead trying a series of printers. First I bought Lexmark (equally crap drivers, I've bought my last of those as well) and Epson, and finally settling on Canon printers. Since I use ink jets, I really liked the Canon because the print head is separate from the tanks, and there are six individual color tanks. Replacement ink is about $10 per tank as opposed to $40 for the three-color+print-head HP cartridge. And the drivers? Pretty much invisible, unless there's a problem.
HP really needs to cut back on the arrogance. We really don't have to buy their sh!t, as there are many better performing alternatives out there, and people are learning.
Oh, absolutely. Next stop: the U.S. House of Representatives. He just has to carpetbag his way around the country until he finds some particularly gullible district and start selling them locally with his trash talk. If he keeps a low profile by making only local appearances and speeches, and picks his battle against an opponent so stupid that he or she doesn't discover his background, he might not rise to enough prominence to be outed by the national media until it's too late.
If we have districts full of Americans that are stupid enough to elect a convicted felon or a deceased candidate, we surely have some that will elect a disbarred lawyer. I'm thinking that in some parts of this country, "disbarred lawyer" might even be proudly worn as some perverse badge of honor: "I was so right about this stuff that they created a conspiracy to kick me out so I wouldn't reveal the TRUTH, the TRUTH they are HIDING from YOU!"
So, yeah, how did that shielded unshielded twisted pair work out for ya?
Kinky.
Yes, but make sure all the connectors are gold plated - it helps to improve the quality of the water.
The sad thing is that what you are proposing has more practical value than the gold plated HDMI cables! At least gold won't leach lead into your water supply.
By making that choice you're supporting the "music industry" rather than "the artists". Granted, the producers make as much money either way, but by purchasing directly from the band you would cut the distributors out of the money, and give a proportionally larger amount to the group (who will hopefully put out another album for you to enjoy.)
Put it this way: buying a £9.25 disc from Amazon you'd give £6 to the producer and the RIAA, and £3 to the store, leaving about 25p to the artist. Buying a £14 disc at the show you'd still give £6 to the producer and the RIAA, but £8 to the artist.
'Until 1972, when the modern athletic shoe was invented, people ran in very thin-soled shoes, had strong feet and had a much lower incidence of knee injuries.'
And football supposedly had a much lower incidence of injuries before the introduction of "pads" (which quickly became an offensive weapon allowing harder hits)
Of course, this could just be "numbers". Many of the running injuries treated today are repeat injuries. Prior to the invention of the running shoe was also pretty much prior to modern sports medicine, meaning a single injury would have prevented you from running again. Today's numbers may be higher than historical numbers due to the vast number of people who continue running after recovering from surgery to correct their problems.
"Ahh, screw the whole thing."
I know there are batteries but what size of batteries or what storage setup would be employed in banking the power captured during the day for use during night time?
News flash! This just in! Pope Dies from Exhaustion after blessing 75,000 batteries worth of holy water.