Slashdot Mirror


User: Fallen+Kell

Fallen+Kell's activity in the archive.

Stories
0
Comments
1,154
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 1,154

  1. Re:Computer security seems an oxy-moron on Chinese Hackers Breach US Navy Contractors (wsj.com) · · Score: 1

    So better get the thing from prototype to production in rather less time than they did with the F35 (does that thing even fly yet? helmet stopped breaking necks maybe?)

    Ummm.... F35 has been in combat sorties and standard rotation since September. So, yes, it flies and blows stuff up too.



    Back to topic, As most people in the security scene know (perhaps they are the only ones who truly do know), the only way to secure a computer is to isolate it in a physical vault with in a faraday cage. Anyone who has physical access to it or any network it is connected to has the ability to breach said computer or network of computers. The problem is that when you tell this to the "business" side, they balk at what that means to operational costs. And wake up if you think the government isn't a business. They bid things out and typically go with the lowest priced bid (without knowing why it is the lowest bid). The companies that are doing decent security get screwed because they can't win bids against the companies that are faking it with lower cost solutions which are breachable. And when the breach later does occur no one does the deep dive to go back all the way to the contract bid process and acceptance/selection committees that allowed it to happen in the first place...

  2. Re:Good job... Real democracy on Switzerland Remains 'Extremely Attractive' For Pirate Sites, MPAA Says (torrentfreak.com) · · Score: 4, Interesting

    Switzerland seems to be one of those rare oddball countries where the government actually works for the benefit of its citizens. Not the benefit of some other countries' citizens, or for the benefit of whoever gave out the most bribes to the politicians.

    Utterly shocking if you're from place with a corrupt government like the United States or the EU.

    That is because Switzerland is a "direct democracy". You see, the people actually vote on things. All it takes is 50,000 citizens (or 8 of the elected politicians) to call for any recently enacted or changed laws to require a direct vote by the citizens (a simple majority yes/no vote). It makes it kind of hard for special interest groups with big pockets to get to all but 50,000 people in the country to prevent a direct vote.

  3. The Justice Department is 100% correct on Justice Department Warns It Might Not Be Able To Prosecute Voting Machine Hackers (vice.com) · · Score: 4, Informative

    The law uses the word "protected computer", which is defined as the following:

    a computerâ" (A) exclusively for the use of a financial institution or the United States Government, or, in the case of a computer not exclusively for such use, used by or for a financial institution or the United States Government and the conduct constituting the offense affects that use by or for the financial institution or the Government; or
    (B) which is used in interstate or foreign commerce or communication, including a computer located outside the United States that is used in a manner that affects interstate or foreign commerce or communication of the United States.


    As voting machines are not a computer for a financial institution or the United States Government (they are a State Government owned device, not the federal "United Stated Government"), and they are also not used in interstate or foreign commerce or communication (they only communicate within their own State), voting machines fail to meet the standards as defined for a "protected computer" under the law.

  4. Re:Why would you expose the admin interface to WAN on Backdoor Account Found in D-Link DIR-620 Routers (bleepingcomputer.com) · · Score: 1

    Yes, but most of those ancient windows systems are behind routers and firewalls which prevents them from being readily accessed from the internet. However, having the firewall/router accessible from the internet just exposed all those systems behind it...

  5. Re:If you have good speakers it's always Laurel. on 'Yanny vs. Laurel' Reveals Flaws In How We Listen To Audio (theproaudiofiles.com) · · Score: 1

    It has plenty to do with the speakers, as well as the compression used. The fact that it is a computer synthesized speech has almost nothing to do with the issue. Listening to a non-compressed, non-mangled version of the computer synthesized voice has no problem discerning the word as being "laurel". People have even tracked it back to a specific site which created the synthesized voice, and discerned what software created it. The problem has everything to do with digital compression, digital to analog converters and output speakers.

  6. Re:Any router... on Ask Slashdot: Which Is the Safest Router? · · Score: 1

    I still have one of those old, coveted Linksys WRT54GL routers in a drawer somewhere, I wonder how much an enthusiast would pay for it today...

    Not much, as it is trivial to go online and order a newer router that supports N and AC with 128 or 256MB of flash storage (vs the 32MB on the GL) and run modern releases of DD-WRT, vs needing to use the completely stripped down mini-releases to fit on 32MB.

  7. Re:Not a drill, not his fault on Hawaii Missile Alert Worker Fired, Will Sue State for Defamation (khon2.com) · · Score: 1

    Because the National Guard doesn't actually guard the nation... They are just yet another branch/level of people to be used for various roles, typically logistics, disaster relief/rescue, and crowd control. They are trained and maintained by the State government which they are deployed within, and not by the Federal Government.

  8. Re:systematic problem in IT on New NSA Leak Exposes Red Disk, the Army's Failed Intelligence System (zdnet.com) · · Score: 1

    That's not really the issue. The real issue is that it is all brought to you by the lowest cost bidder... There is a reason that many of these are the lowest cost bidder, because they are not paying to have real talent in their company to provide those services (as the real talent costs much more to hire and would not be anywhere near the lowest cost). As such, you get people who make mistakes like this.

    On the flip side, it is very difficult to quantify and otherwise rate the benefits of the various contractors placing a bid on performing this kind of work. Any metrics could only be from past performance, which effectively excludes new contractors from being able to make a proper bid, and even then, past performance does not directly dictate future performance (a key person may have left the company...).

  9. Re:its the devil you know... on Russia and The US Fight Over Who Gets To Extradite A Hacker (cnn.com) · · Score: 1

    Chelsea Manning was looking at 60 years in prison from Government prosecutors.

    Except Manning was facing those 60 for leaking classified materials. There were/are proper ways to whistleblow on classified projects and there are ways which it isn't proper. If you go outside the bounds dealing with classified materials and deliberately release them (please note, deliberate is different than inadvertent), you can expect to be facing significant amount of time in jail.

  10. Someone forgot what website they went to. This is slashdot, not 4chan...

  11. Exactly, just let hashes be uploaded on Facebook To Fight Revenge Porn by Letting Potential Victims Upload Nudes in Advance (bleepingcomputer.com) · · Score: 1

    Seriously, just let the hashes be uploaded in the first place and not the photo. If the tool really is just using hashes, there is no need to send the photo. The only thing that the photo could be used for is for all the other data mining that you have already agreed to, such as advertising uses...

    Then of course, there is the insider threat that someone with the keys to the kingdom will have one heck of an amatuer collection on their hands....

  12. Re:If ppl would just put the cell phone down on Government Won't Pursue Talking Car Mandate (apnews.com) · · Score: 1

    I 100% agree about the fact that while in theory, V2V could be great, but in reality, we all know it would be buggy/security hole ridden/hackable as hell. You would absolutely see people spoofing other vehicles and sending bad information which will lead to accidents and fatalities.

  13. Re:Does not get much more sketchy on US Voting Server At Heart of Russian Hack Probe Mysteriously Wiped (theregister.co.uk) · · Score: 1

    Not one single data recovery company has ever said they can retrieve data from a "dd if=/dev/random of=/dev/ bs=1024", even with just a single pass. They all rely on the inodes/data table simply being updated to mark the data as free, or attempt to partially recover data on concatenated disks, or corrupted partition/GPT tables...

  14. Re:Don't bitch about the FCC on FCC Ends Decades-Old Rule Designed To Keep TV, Radio Under Local Control (variety.com) · · Score: 1, Interesting

    It is also the great contradiction that calls itself the GOP. They are all for local government, because local knows the issues better than the national government, but local business doesn't know better than national conglomerates...

    They are for keeping the government out of their homes, except they want it in their bedrooms and bathrooms checking the right people use the right toilet and sleep with the right sex.

    They want prayer in school, as long as it is not some other religion's prayer.

    They want less taxes, as long as those who get the tax break are the ones who have the most disposable income in the world.


    The party shoudln't be called Republicans, it should be called Hypocrites.

  15. Re:First side effect? on FCC Ends Decades-Old Rule Designed To Keep TV, Radio Under Local Control (variety.com) · · Score: 2

    50%? You mean 98%. It will be one national market. New TV will be "slightly" more local than radio and TV, but not much. TV will only be local in the sense of sports and even then, might not be enough in many venues to cover a poorly performing local team vs a national favorite (say in Football, the Cowboys, Packers, or Patriots)... I mean, sorry for Browns, Bengals, or Lions, but the advertisers will pay more to show other games.

    And good luck with the news outside of maybe 6 major venues around the country (New York, DC, Dallas, Chicago, LA, Atlanta), the rest of you are going to lose out big time....

  16. Re:sorry, not sorry on Oracle Staff Report Big Layoffs Across Solaris, SPARC Teams (theregister.co.uk) · · Score: 1

    Solaris+SPARC still one of the best NFS fileservers on the market. Hard to beat 256 threads in a 3U box for handling I/O requests.

  17. Re:Level of Exposure? on Tests Show Workers At Hanford Nuclear Facility Inhaled Radioactive Plutonium (king5.com) · · Score: 4, Informative

    Except you failed at physics of how the different types of radiation work. We are dealing with an internal alpha source, not an external alpha source. Alpha sources are 1000 times more dangerous when inhaled or ingested (1000 times is not a made up number, this has been experimentally shown, see "Effect of Dose Rate on the Induction of Experimental Lung Cancer in Hamsters by Alpha Radiation" 1985 study).

    The reason is quite simple, alpha radiation has extremely poor penetration capability (2-3 layers of paper is enough to stop it, which is less than the layers of dead skin cells we have on top of our actual skin). As a result, external alpha sources are not very dangerous. But put that source inside the body, where it is past the dead skin that protects you, and suddenly, you have a cancer generator sitting right next to cells that it can reach.

    Given that this was Hanford, it was most likely Pu-239 that we are dealing with, which has a half-life of 24,100 years. The only way it will exit the body once ingested or inhaled is if it manages to be coughed up (unlikely), or absorbed into the blood stream/lymphic system and manage to travel out as excrement without getting trapped in say the liver, kidneys, lymph nodes, or any of the other pathways within the body (at which point it will then most likely cause enough DNA damage to surrounding cells to create cancer).

  18. Re:$1,250,000? Get over yourself on Font Maker Sues Universal Music Over 'Pirated' The Vamps Logo (torrentfreak.com) · · Score: 2

    Still is no different than RIAA/MPAA suing for $150,000 for each MP3 which would cost $0.99 to purchase.

  19. Because they go to school much longer than US students. They start have Kindergarten starting from age 2-5. The college prep line goes to 13 years (instead of 12 in the US), and the school year is 40 weeks long verses typical 34-35 weeks in the US. All told they have 6-7 years worth of more classtime than a typical US student does before they even go to college!

    And people wonder why the US is lagging in international test performance....

  20. So it's all about the singer? on As Streaming Booms, Songs Are Getting Faster and Shorter (japantoday.com) · · Score: 1

    It makes sense that if the environment is so competitive, artists would want to try to grab your attention as quickly as possible

    In other words, we want the "artists" singing right away because we know we don't promote bands anymore that play music and need talent to play a challenging instrumental, and so we want the only talent we are promoting to be doing something in the songs sooner so that you are not listening to a studio/backup band.

  21. Re:Consider why they moved to Intel in th first pl on Apple Developing Custom ARM-Based Mac Chip That Would Lessen Intel Role (bloomberg.com) · · Score: 3, Insightful

    They're gambling that ARM CPUs (SoCs) will become powerful enough to accomplish the tasks people ask of from Macs, while revenue from phone, tablet, and other small device sales (e.g. Apple TV) will be enough to sustain R&D to keep it progressing as rapidly as Intel CPUs.

    It won't happen, and mainly for the exact reasons you stated. Phones and tablets have already taken over the "I don't do much other than browse the internet/watch youtube/update facebook/snapchat/twitter/email" jobs that low performance CPUs can handle. The only reason someone has a need to purchase a real computer now is because they have a real need for processing power (gaming, photo/video editing, developing software, running simulations). Everything else is already being done by the lightweight CPUs.

  22. Re:Why not buy Intel? on Apple Developing Custom ARM-Based Mac Chip That Would Lessen Intel Role (bloomberg.com) · · Score: 4, Funny

    Only problem is that Apple would have to finally pay taxes on the cash to use it when purchasing Intel, at which point, Apple wouldn't have enough cash to do so anymore.

  23. 90% of big box locks are crap on Ask Slashdot: How Should I Furnish (And Secure) My Work-From-Home Office? · · Score: 1

    Seriously, locks are generally crap. Most all can be easily bump'ed. The touch pad locks are just a few dirt smudges away from giving away your code (or a simple video recording...), and the wireless ones just beg to be hacked.

    There are only a couple locks on the market that have any real security, and as such command some real price to them. But the lock is only part of the battle, the door is just as important, and quite frankly, I wouldn't trust a single door out there that you can get at a big box store. I am sure there are other doors out there, but the one I have seen was made by SUR which is what I would call an actually secure door (your wall would fail before the door and lock would).

  24. The entire premise is pure BS on Apple, Facebook, IBM, and Microsoft Sign White House Pledge For Equal Pay (fortune.com) · · Score: 3, Insightful

    When will people wake up and stop eating up this stuff? The entire notion that there isn't equal pay for equal work is pure crap. If it wasn't crap, all these companies would have been hiring women all the time for every position because they could pay them less.

    Lets do a little common sense here, I am a hiring manager and just interviewed two people with very similar qualifications, backgrounds, and work ethic, but one of them I can save ~20% on pay/benefits.... Wow, I wonder who I am hiring...

    Wait, but you mean to say that the market doesn't work in this case, that all the financial market theory, best practices, etc., all cease to function once someone introduces the gender of an employee. Go back to college if you still think that (or more to the point go to college in the first place, just make sure you study a STEMS field, apparently we need more of them to drive costs down because we can't hire enough, and thus need more H1Bs, and yet wages are still mostly stagnant...).

  25. Re:Ahh: More than you think: Bottling plants... on 6 Million Americans Exposed To High Levels of Chemicals In Drinking Water, Says Study (businessinsider.com) · · Score: 2, Interesting

    You fail to realize that there are quite a few bottling plants located in some of those high affected regions. Guess where all the Pepsi in the USA is made? Yep, right in the middle of this highest concentrations of both those chemicals on the map (eastern PA, NJ, southern NY). That also goes for all Pepsi products, not just Pepsi itself...