Not that I don't think the US govt. is abusive enough to do this on no evidence, but why not suspect Sony? They're also abusive enough, and have shown willingness to attack innocent parties without even pertended evidence. (Not that N.Korea is innocent of much, but I've heard of no convincing evidence that they are actually behind this.)
OTOH, it could be a third (unmentioned) group playing "Lets you and him fight.".
1) Yes, Anonymous is this stupid. It's an unorganized group of small groups of varying capabilities and talents. Some are only talented at mouthing off stupidly.
2) If Sony is pretending to be Anonymous, they are doing it anonymously, and therefore not doing it under false pretenses.
If this was a targeted attack, then forbidding outbound connections isn't sufficient. That keeps data from being transmitted out, but it doesn't keep malignent distorters from operating. Randomly changing a few bits every once in awhile could do quite a bit of damage, even invalidating backups, and be quite difficult to detect.
More to the point, in a case like this you need multiple nested perimeters. The media *is* the value of the company, so that should be stored on read only media, in multiple copies at different (secure) locations. Possibly encrypted, but then you need a somewhat similar protection for the keys.
Access to the media doesn't need to be available to anyone whose job doesn't involve editing it. So that another perimeter separate from that of the main company. If some management honcho says that he needs access, give him read only access. If he demands read/write access, have him work on a copy.
And, yes, this isn't perfect. Perfection is not available, so you nest near perfection. Now within each perimeter you also need those intrusion detection mechanisms you were talking about, but that doesn't suffice. Too much can happen too quickly.
It's not that simple. Your proposal is rather like people who want to choose which parts of the Federal Government their taxes fund. (Not that that's totally unreasonable, but implementation would be horrendous, and could be expected to increase the costs of most services.)
What do you mean "held accountable"? When was the last time a major political figure was prosecuted for his crimes, rather than becaus his opponents found prosecution a convenient stick? The last time I can think of is Nixon, and I'm not certain about that. (I don't consider sex with consenting women that you aren't married to to be a crime. So don't bring up Clinton. That was clearly political action rather than prosecution.)
He's saying that the phrasing of the headline reveals a bias in the submission. Perhaps he's right. (I don't watch either Dish or Fox, and I haven't followed their dispute, so this is based purely on his argument and your response...with some guidance from other posts both in this story and in past stories.)
It's a reasonable argument whether or not its true in this particular case.
The problem is that if you go back to when unions were relatively powerful, the ones who were powerful were the management of the unions. And they often didn't do well by their members. (Other times they did, but ran afoul of some law or other, some times a reasonable one.)
Centers of power tend to become corrupt, because corrupt people are attracted to them more strongly than those who are not corrupt.
I'd like to disagree. There are things that shouldn't be revealed under FOIA requests. Unfortunately the example of the federal government proves that we cannot trust redation to be applied in a reasonable manner.
Sorry, but why am I expected to have the information to provide an explanation? I'm skeptical about what the government says because they have been shown to lie about as often as to tell the truth. Probably more often in publicized statements, but often you can't tell. This doesn't point at anyone else in particular. There are several plausible candidates. Somebody who's mad about how Pirate Bay has been treated is plausible. So is the Russian Mafia. North Korea's name is in the hat, but until there's some real evidence cutting down the size of the hat it would be foolish to believe that they are the perpetrators. Somebody else suggested Sony itslef, and a variation on that, "it was an inside job", is quite plausible. etc. There's really little limit to the number of plausible perpetrators when there is so little constraining evidence. (An anonymous e-mail isn't evidence of anything unless you can show at least where it was sent from.)
IIUC, the smaller a bubble is, the longer it lasts. This may have something to do with their calculated result. If so, this sounds pretty good.
Only thing is, I think this needs a bit more research: What happens to fish, etc. who swim through these bubbles? Does this change the rate at which gasses diffuse through water? Does it affect the rate of evaporation? If so, what effect does that have? Most of these can probably be answered fairly easily, and maybe they already have been. If not, they should be considered.
Perhaps Bruce Schneier was saying something different. It sounds like he was saying that you, personally, have no way to protect yourself from your employers shitty security practices. I still disagree with him, to an extent. If anyone read the emails on my business account the worst they would get would be terminal bordom. But if you're doing business with someone, you can't protect yourself against their shitty security practices...and you can't even tell that they have any without criminal liability. Credit card numbers lost because someone you did business with was hacked isn't something you can protect against.
I know that various different tyrants have claimed that to be true. That doesn't mean it ever was true. Politicians have always been liars. Dracula had it said about his kingdom, too, and there was a Persian Emperor who claimed that a virgin with a bag of gold could walk the entire lenght of the silk route unmolested. I never heard of one that tried.
I thought that was what histones were for. DNA that's wrapped can't be read, so you control what is wrapped to decide what is available for expression. And epigenetic tags freeze or thaw the wrapping. This requires sections of DNA that function as labels, but it doesn't directly control the folding (more accurately rolling into a cylinder) that's handled by the histones, and when they decide to roll it up is decided by what tags are attached to the labels.
Don't worry. When the governments keep changing eventually you get a real winner at the head. I'm still expecting India and Pakistan, or some other pair of "friendly neighbors" to put the nuclear autumn model to the test. Unless something worse happens first. Hopefully, however, not this decade.
Threats are cheap. Is there even any evidence they come from the same source as the original hack? (Mind you, I have no idea who did it, and don't believe anything the government says anymore unless they have verifyable evidence to prove it.)
Now once someone *acts* on one of those threats, then there will be more belief that it was done with someone with either excessive zeal or lots of backing. Right now even that's lacking. Threats on the internet are so common that they've *got* to be ignored, even though that's frequently difficult.
They didn't purposely deceive people, because they didn't care whether it was true or not. If that had known their claims were false, that would have been purposeful deception. However they didn't care whether the claims were true or false, but only that they were useful That's probably a bit worse than intentional deception.
What you have demonstrated is that there is no politically acceptable proof, not that it didn't happen, and not that the document did not match something from the NSA database.
I haven't followed this, so I don't really have an opinion one way or the other, but what you have provided does not constitute proof that it was a hoax.
Slashdot Mirror
Not that I don't think the US govt. is abusive enough to do this on no evidence, but why not suspect Sony? They're also abusive enough, and have shown willingness to attack innocent parties without even pertended evidence. (Not that N.Korea is innocent of much, but I've heard of no convincing evidence that they are actually behind this.)
OTOH, it could be a third (unmentioned) group playing "Lets you and him fight.".
You're forgetting Georgia (U.S.) which was also a British penal colony.
Why should they bother to make it legal when they can just decline to prosecute the police? Which they already do.
Yes, even Finnegan's Wake had paragraphs. Of course one of them was, I think, three pages long. And a single sentence.
Not all corporate IT security is a joke. Some of it you don't hear news stories about.
Well, OK, but some of it actually is pretty good.
1) Yes, Anonymous is this stupid. It's an unorganized group of small groups of varying capabilities and talents. Some are only talented at mouthing off stupidly.
2) If Sony is pretending to be Anonymous, they are doing it anonymously, and therefore not doing it under false pretenses.
If this was a targeted attack, then forbidding outbound connections isn't sufficient. That keeps data from being transmitted out, but it doesn't keep malignent distorters from operating. Randomly changing a few bits every once in awhile could do quite a bit of damage, even invalidating backups, and be quite difficult to detect.
More to the point, in a case like this you need multiple nested perimeters. The media *is* the value of the company, so that should be stored on read only media, in multiple copies at different (secure) locations. Possibly encrypted, but then you need a somewhat similar protection for the keys.
Access to the media doesn't need to be available to anyone whose job doesn't involve editing it. So that another perimeter separate from that of the main company. If some management honcho says that he needs access, give him read only access. If he demands read/write access, have him work on a copy.
And, yes, this isn't perfect. Perfection is not available, so you nest near perfection. Now within each perimeter you also need those intrusion detection mechanisms you were talking about, but that doesn't suffice. Too much can happen too quickly.
It's not that simple. Your proposal is rather like people who want to choose which parts of the Federal Government their taxes fund. (Not that that's totally unreasonable, but implementation would be horrendous, and could be expected to increase the costs of most services.)
What do you mean "held accountable"? When was the last time a major political figure was prosecuted for his crimes, rather than becaus his opponents found prosecution a convenient stick? The last time I can think of is Nixon, and I'm not certain about that. (I don't consider sex with consenting women that you aren't married to to be a crime. So don't bring up Clinton. That was clearly political action rather than prosecution.)
He's saying that the phrasing of the headline reveals a bias in the submission. Perhaps he's right. (I don't watch either Dish or Fox, and I haven't followed their dispute, so this is based purely on his argument and your response...with some guidance from other posts both in this story and in past stories.)
It's a reasonable argument whether or not its true in this particular case.
The problem is that if you go back to when unions were relatively powerful, the ones who were powerful were the management of the unions. And they often didn't do well by their members. (Other times they did, but ran afoul of some law or other, some times a reasonable one.)
Centers of power tend to become corrupt, because corrupt people are attracted to them more strongly than those who are not corrupt.
I'd like to disagree. There are things that shouldn't be revealed under FOIA requests. Unfortunately the example of the federal government proves that we cannot trust redation to be applied in a reasonable manner.
I don't see a good answer.
Sorry, but why am I expected to have the information to provide an explanation? I'm skeptical about what the government says because they have been shown to lie about as often as to tell the truth. Probably more often in publicized statements, but often you can't tell. This doesn't point at anyone else in particular. There are several plausible candidates. Somebody who's mad about how Pirate Bay has been treated is plausible. So is the Russian Mafia. North Korea's name is in the hat, but until there's some real evidence cutting down the size of the hat it would be foolish to believe that they are the perpetrators. Somebody else suggested Sony itslef, and a variation on that, "it was an inside job", is quite plausible. etc. There's really little limit to the number of plausible perpetrators when there is so little constraining evidence. (An anonymous e-mail isn't evidence of anything unless you can show at least where it was sent from.)
IIUC, the smaller a bubble is, the longer it lasts. This may have something to do with their calculated result. If so, this sounds pretty good.
Only thing is, I think this needs a bit more research:
What happens to fish, etc. who swim through these bubbles?
Does this change the rate at which gasses diffuse through water?
Does it affect the rate of evaporation? If so, what effect does that have?
Most of these can probably be answered fairly easily, and maybe they already have been. If not, they should be considered.
Perhaps Bruce Schneier was saying something different. It sounds like he was saying that you, personally, have no way to protect yourself from your employers shitty security practices. I still disagree with him, to an extent. If anyone read the emails on my business account the worst they would get would be terminal bordom. But if you're doing business with someone, you can't protect yourself against their shitty security practices...and you can't even tell that they have any without criminal liability. Credit card numbers lost because someone you did business with was hacked isn't something you can protect against.
I know that various different tyrants have claimed that to be true. That doesn't mean it ever was true. Politicians have always been liars. Dracula had it said about his kingdom, too, and there was a Persian Emperor who claimed that a virgin with a bag of gold could walk the entire lenght of the silk route unmolested. I never heard of one that tried.
I thought that was what histones were for. DNA that's wrapped can't be read, so you control what is wrapped to decide what is available for expression. And epigenetic tags freeze or thaw the wrapping. This requires sections of DNA that function as labels, but it doesn't directly control the folding (more accurately rolling into a cylinder) that's handled by the histones, and when they decide to roll it up is decided by what tags are attached to the labels.
Which?
OK, if they'd thought of it they'd have wanted to do it. That's hardly proof they did it.
Don't worry. When the governments keep changing eventually you get a real winner at the head. I'm still expecting India and Pakistan, or some other pair of "friendly neighbors" to put the nuclear autumn model to the test. Unless something worse happens first. Hopefully, however, not this decade.
Threats are cheap. Is there even any evidence they come from the same source as the original hack? (Mind you, I have no idea who did it, and don't believe anything the government says anymore unless they have verifyable evidence to prove it.)
Now once someone *acts* on one of those threats, then there will be more belief that it was done with someone with either excessive zeal or lots of backing. Right now even that's lacking. Threats on the internet are so common that they've *got* to be ignored, even though that's frequently difficult.
They didn't purposely deceive people, because they didn't care whether it was true or not. If that had known their claims were false, that would have been purposeful deception. However they didn't care whether the claims were true or false, but only that they were useful That's probably a bit worse than intentional deception.
What you have demonstrated is that there is no politically acceptable proof, not that it didn't happen, and not that the document did not match something from the NSA database.
I haven't followed this, so I don't really have an opinion one way or the other, but what you have provided does not constitute proof that it was a hoax.
Sure it's possible, but given their history how could you trust them?