I'm not sure how true that is, but they're definitely required to get you to fill in a form for anything over £10,000 - to avoid money laundering (which this would come under).
I had an inheritance last year, and it couldn't be paid electronically in one go, for this reason, so they transferred £5,000 a day until it was all paid in.
The bank wrote to me on day 3, to offer their advice on how to invest it (while stating that if I already had plans for it, not to worry) and when I called them on an unrelated matter even advised me that leaving it in the current account was 'not the best place'...
So maybe they're looking out for me, maybe they're looking out for trouble coming their way, but my bank at least did a decent job of it.
The worst thing you can do is use a one-time-pad twice, hence the name... If you show them it decrypts one file (innocent.bin) then they're going to try it on every other file in the system.
OTP are unbreakable if used correctly - if used incorrectly they're worse than just marking the file as 'hidden' and hoping no-one knows where the 'show all' option is;)
You used to be able to buy glasses with frames made from this, especially for kids - the idea being you could sit on them, scrunch them up in a bag and they'd just straighten out with body heat, when you put them on. Obviously you got scratch resist lenses too.
We had a similar one - the doors to the switch room were slightly pushed into the room, so there was a one-foot return either side. The switch to unlock the doors was on one side, and thus invisible if you walked up to the doors and started looking.
Guess where the emergency power off switch was? If you said 'right beside the door, unlabelled' you win a long weekend rebuilding disks from backups.
After the 2nd time the cleaner plunger herself into darkness, they added a label, molly-guard and moved the button.
and get more information from those people. You stay classy slashdot.
Rest assured that the blackhats who want this information already know about it.
I agree - and while it's good that more people know about this so they can protect themselves, it wasn't the case that every black hat knew about this already - there'll be a load of script kiddies giving it a go now, so the chances of getting hacked went up.
That said, the people who had a genuine malicious intent were more than likely doing this behind the scenes, while the 'kiddies' tend to go for vandalism and defacement. I'd rather that if I got hacked, it just said 'ask me about teh spam' on my wall, than it silently installed a data-tracking app or something...
But really, what's the issue here? That someone went to the trouble of scraping every public name and profile off the site, or that it wasn't Google?
Mark
PS Why doesn't Chrome recognise Google as a properly spelled word?
Had one like this once too - he stayed, said if we needed anything at all (conf call with the developers, food, drinks, a chance to vent frustrations) to come find him in the next room. He was out of sight so we didn't feel he was hovering, he was right there so we knew his personal life was getting as screwed up as ours, and he was able to catch up on emails and paperwork so he was more effective the next day too!
I promise not to deliberately hand any of this information over to unscrupulous parties. I will use the same protective techniques the UK Ministry Of Defence uses! That should be secure enough!
Don't forget to charge them for the taxi you leave the laptop in, then.
If the many-worlds theory is true, then there already exist an infinite number of universes where the data is already known to the putative attacker...
If I was Bruce Schneier that's what I'd do.... Just doodle a random sequence of digits inside to make you crazy (and make you assume I'm a genius for doing it on the spot).
Either that, or he was trying to solve the morning Sudoku, and used your book as scratch paper...
Each VOIP call uses less bandwidth than a voice call, so it's a transition to get people to do this. You still have a monthly contract, so expect the price of that to go up as people use it more...
Perhaps they have a deal with Skype also, so they get a share of outcall and termination revenue, after all it's only Skype to Skype calls that are free, if I call my friends on their 'real' phones I still get charged.
In fact, that's part of their plan - once I start using it, I nag all my friends to get it too, so we can all call for free. No marketing by '3', all the cash-strapped fans of Skype do it for them!
Nothing, but if you want to use the same mobile number, there's no-one (as far as I'm aware) that allows that.
Ideally someone would come up with a single access number that finds me by the best method - cellphone when I'm out and about, over Skype/VOIP when I'm there, and voicemail when I'm not.
If I switch full time to Skype, I can use it at home, but it's a LOT harder when out and about - as far as I know, only '3' in the UK allow it explicitly on their handsets.
Good call. Talking to people isn't 'politics', unless you're talking about the job. The most effective IT guys I've worked with were the ones who said hello to everyone, came out to the pub with us after work, etc.
Be part of the company, instead of the troll in the basement, and you'll find you start getting respect. If you're the faceless 'no-guy' on the end of the phone (which you never answer) then don't be surprised if people are as mad at you as they are at automated phone menus and off-shore call centres...
Someone once brought this home to me quite nicely - he said if 9 out of 10 doctors said your child had appendicitis, and only 1 said it was trapped gas, would you go home and 'wait and see'? Even if you were nervous about the risks of an operation, the risks of ignoring it are much worse - if it turns out to be appendicitis.
Sure, it might be nothing, just like global warming might not be our fault, but would you take the chance?
"Employers find pictures of irresponsible drunken frat boy on internet. Assume an irresponsible drunken frat boy and decide not to hire him in favor of someone else. News at 11."
It's the 'irresponsible' part that's true - every employer will assume that everyone who went to college got drunk, did something stupid and (probably) regrets it now. But will they hire the guy who still has the pictures posted on Facebook? or the one who took the time and effort to present himself properly for the interview?
Mark
PS My first job came after an interview where they basically hired on the basis of 'do you drink, and do you smoke'... A 'yes' to one question was acceptable, but a 'yes' to both was preferred.
I've run the C-172M checklist several hundred times, and let me tell you, it's *very* easy to lose track of your place in the list, and forget whether your memory of having completed a given item is from this evening's flight, or from the one you did this morning.
That is a problem, but it's much less likely that you'll fall for it when you're working to the checklist, rather than trying to remember what you need to check also. 'Are the tyres OK? I'm sure they were'...
I've *never* caught a condition with my checklist that would have killed me, had I missed that item.
No, but does that mean you don't need to do it? I went through the checklist one time before a flight and discovered no fire extinguisher on board - I didn't need it, as it happens. But the reason it wasn't there was that the engine had caught fire the previous week, and they'd used it. You can be damn sure that guy was glad he checked for it! And there was no way I was starting the engine without it, either.
That said, it had been flown at least twice since then, and no-one else had spotted the missing extinguisher, despite it being on the checklist. If it hadn't been, would I have thought of it? I doubt it...
My personal experience leaves me wondering if it's possible that checklists could cause obvious things to be *missed*.
Sure - if the checklist doesn't say 'ensure wings are attached' someone will claim it's useless to have a checklist. We use checklists for software upgrades all the time (non-aviation), and it doesn't prevent errors, mistakes or other problems. It does however provide evidence that you checked, and prevents any number of issues from biting you.
I think part of the problem is that it provides a paper trail - if the patient dies, the first stop for the lawyers will be 'did they do everything on the list' and some doctors might be afraid that the existence of a checklist might incriminate them.
Pilots seem to cope OK though - and in emergencies are expected to know what to do, without a list. Doctors shouldn't be any different.
South African do too - and it was constantly crashing, rebooting, sluggish and poor.
Obviously any implementation can be rubbish, regardless of the underlying OS - but when you're on a 12 hour flight you would really rather not spend 2 of them trying to interrupt the boot sequence with the in-seat controller just to see if running fsck will help;)
Slashdot Mirror
I'm not sure how true that is, but they're definitely required to get you to fill in a form for anything over £10,000 - to avoid money laundering (which this would come under).
I had an inheritance last year, and it couldn't be paid electronically in one go, for this reason, so they transferred £5,000 a day until it was all paid in.
The bank wrote to me on day 3, to offer their advice on how to invest it (while stating that if I already had plans for it, not to worry) and when I called them on an unrelated matter even advised me that leaving it in the current account was 'not the best place'...
So maybe they're looking out for me, maybe they're looking out for trouble coming their way, but my bank at least did a decent job of it.
Mark
I think it was a Tuesday...
It can be done, but it's not being done - that's why this happens.
The worst thing you can do is use a one-time-pad twice, hence the name... If you show them it decrypts one file (innocent.bin) then they're going to try it on every other file in the system.
OTP are unbreakable if used correctly - if used incorrectly they're worse than just marking the file as 'hidden' and hoping no-one knows where the 'show all' option is ;)
Mark
You used to be able to buy glasses with frames made from this, especially for kids - the idea being you could sit on them, scrunch them up in a bag and they'd just straighten out with body heat, when you put them on. Obviously you got scratch resist lenses too.
They seem to do them for adults now too http://www.framesdirect.com/flexon/
Mark
We had a similar one - the doors to the switch room were slightly pushed into the room, so there was a one-foot return either side. The switch to unlock the doors was on one side, and thus invisible if you walked up to the doors and started looking.
Guess where the emergency power off switch was? If you said 'right beside the door, unlabelled' you win a long weekend rebuilding disks from backups.
After the 2nd time the cleaner plunger herself into darkness, they added a label, molly-guard and moved the button.
and get more information from those people. You stay classy slashdot.
Rest assured that the blackhats who want this information already know about it.
I agree - and while it's good that more people know about this so they can protect themselves, it wasn't the case that every black hat knew about this already - there'll be a load of script kiddies giving it a go now, so the chances of getting hacked went up.
That said, the people who had a genuine malicious intent were more than likely doing this behind the scenes, while the 'kiddies' tend to go for vandalism and defacement. I'd rather that if I got hacked, it just said 'ask me about teh spam' on my wall, than it silently installed a data-tracking app or something...
But really, what's the issue here? That someone went to the trouble of scraping every public name and profile off the site, or that it wasn't Google?
Mark
PS Why doesn't Chrome recognise Google as a properly spelled word?
I have a truly remarkable proof of this, but my brain is too small to contain it.
And that every other country in the world agrees....
Had one like this once too - he stayed, said if we needed anything at all (conf call with the developers, food, drinks, a chance to vent frustrations) to come find him in the next room. He was out of sight so we didn't feel he was hovering, he was right there so we knew his personal life was getting as screwed up as ours, and he was able to catch up on emails and paperwork so he was more effective the next day too!
Win-win, yet they seem such a rare breed.
Mark
I promise not to deliberately hand any of this information over to unscrupulous parties. I will use the same protective techniques the UK Ministry Of Defence uses! That should be secure enough!
Don't forget to charge them for the taxi you leave the laptop in, then.
So make it a spiral instead
If the many-worlds theory is true, then there already exist an infinite number of universes where the data is already known to the putative attacker...
So you're damned already. Somewhere.
If I was Bruce Schneier that's what I'd do .... Just doodle a random sequence of digits inside to make you crazy (and make you assume I'm a genius for doing it on the spot).
Either that, or he was trying to solve the morning Sudoku, and used your book as scratch paper...
Mark
It's alright, we killed it.
The site, I mean - not the wacky organism...
http://www.google.com/search?q=red+stapler
You're welcome.
Each VOIP call uses less bandwidth than a voice call, so it's a transition to get people to do this. You still have a monthly contract, so expect the price of that to go up as people use it more...
Perhaps they have a deal with Skype also, so they get a share of outcall and termination revenue, after all it's only Skype to Skype calls that are free, if I call my friends on their 'real' phones I still get charged.
In fact, that's part of their plan - once I start using it, I nag all my friends to get it too, so we can all call for free. No marketing by '3', all the cash-strapped fans of Skype do it for them!
Mark
Nothing, but if you want to use the same mobile number, there's no-one (as far as I'm aware) that allows that.
Ideally someone would come up with a single access number that finds me by the best method - cellphone when I'm out and about, over Skype/VOIP when I'm there, and voicemail when I'm not.
If I switch full time to Skype, I can use it at home, but it's a LOT harder when out and about - as far as I know, only '3' in the UK allow it explicitly on their handsets.
Good call. Talking to people isn't 'politics', unless you're talking about the job. The most effective IT guys I've worked with were the ones who said hello to everyone, came out to the pub with us after work, etc.
Be part of the company, instead of the troll in the basement, and you'll find you start getting respect. If you're the faceless 'no-guy' on the end of the phone (which you never answer) then don't be surprised if people are as mad at you as they are at automated phone menus and off-shore call centres...
Mark
And the iPhone already uses Wi-Fi when available, and 3G (or GPRS if you got an old one) when it's not.
It seamlessly switches, and you never use the telco network when you're at home...
Something tells me any Mac with a 3G card in would do the same.
Mark
Someone once brought this home to me quite nicely - he said if 9 out of 10 doctors said your child had appendicitis, and only 1 said it was trapped gas, would you go home and 'wait and see'?
Even if you were nervous about the risks of an operation, the risks of ignoring it are much worse - if it turns out to be appendicitis.
Sure, it might be nothing, just like global warming might not be our fault, but would you take the chance?
Mark
"Employers find pictures of irresponsible drunken frat boy on internet. Assume an irresponsible drunken frat boy and decide not to hire him in favor of someone else. News at 11."
It's the 'irresponsible' part that's true - every employer will assume that everyone who went to college got drunk, did something stupid and (probably) regrets it now. But will they hire the guy who still has the pictures posted on Facebook? or the one who took the time and effort to present himself properly for the interview?
Mark
PS My first job came after an interview where they basically hired on the basis of 'do you drink, and do you smoke'... A 'yes' to one question was acceptable, but a 'yes' to both was preferred.
Actually we call it 'Imperial' units.
Damn colonials are getting uppity again, Ponsenby...
Mark
I've run the C-172M checklist several hundred times, and let me tell you, it's *very* easy to lose track of your place in the list, and forget whether your memory of having completed a given item is from this evening's flight, or from the one you did this morning.
That is a problem, but it's much less likely that you'll fall for it when you're working to the checklist, rather than trying to remember what you need to check also. 'Are the tyres OK? I'm sure they were'...
I've *never* caught a condition with my checklist that would have killed me, had I missed that item.
No, but does that mean you don't need to do it? I went through the checklist one time before a flight and discovered no fire extinguisher on board - I didn't need it, as it happens. But the reason it wasn't there was that the engine had caught fire the previous week, and they'd used it. You can be damn sure that guy was glad he checked for it! And there was no way I was starting the engine without it, either.
That said, it had been flown at least twice since then, and no-one else had spotted the missing extinguisher, despite it being on the checklist. If it hadn't been, would I have thought of it? I doubt it...
My personal experience leaves me wondering if it's possible that checklists could cause obvious things to be *missed*.
Sure - if the checklist doesn't say 'ensure wings are attached' someone will claim it's useless to have a checklist. We use checklists for software upgrades all the time (non-aviation), and it doesn't prevent errors, mistakes or other problems. It does however provide evidence that you checked, and prevents any number of issues from biting you.
I think part of the problem is that it provides a paper trail - if the patient dies, the first stop for the lawyers will be 'did they do everything on the list' and some doctors might be afraid that the existence of a checklist might incriminate them.
Pilots seem to cope OK though - and in emergencies are expected to know what to do, without a list. Doctors shouldn't be any different.
Mark
South African do too - and it was constantly crashing, rebooting, sluggish and poor.
Obviously any implementation can be rubbish, regardless of the underlying OS - but when you're on a 12 hour flight you would really rather not spend 2 of them trying to interrupt the boot sequence with the in-seat controller just to see if running fsck will help ;)