1. Launch very long reel of very strong cable and a counterweight made of an as yet undiscovered material into geosynch orbit 2. Unwind 3. Profit !!! or Profit ???
If you read the Travels of Ibn Battutah (14th Century Muslim scholar cum bullshit merchant who traveled from Morocco to China) you will see that even back then you had to identify yourself and your business before being allowed across national boarders. Sure it wasn't pieces of paper, but it sure beats having to wait several days before the Sultan or one of his cronies, as well providing a large 'gift'.
The only reason we can use paper rather than cruder methods is the trust network in place for passports.
Back on topic though, airlines operating into Australia can be fined for bringing someone in without a valid passport, and I think also have to bear the costs of returning them whence they came. AA were completely out of order IMO, but it would only take an overzealous Aussie Customs official to make airlines think twice about letting people on without fully functioning passport.
Traveling in Eastern Europe in the 90's and early 2000's it was routine for hotels to ask for passports on arrival. I think it might even have been government policy. Had the same experience traveling through Tunisia last year. So don't automatically assume that by doing so you are being stupid.
At the risk of going metaphysical on you, I assume the algorithm to do this existed before Microsoft 'discovered' it. Therefore the analogy is indeed valid.
3 mortgages, 3 credit cards and three accounts covering business personal and share trading. I doubt it would take an hour.
Mail as a second channel does have merit - it is pretty hard for a Russian mafia dude to intercept. But my letterbox sits out at the front of my property. If banks started mailing out username/passwords on a regular basis I can guess what would happen. And that is assuming they don't get diverted by a crooked mail service employee.
Locking down your account makes sense, especially nominating accounts. I have an RSA token so set my non-RSA approved amount to zero. And then RSA went and got themselves hacked *sigh*.
Ultimately though the banks will not implement any security which drives people to their branches. If they had their way they would do away with branches altogether.
Don't underestimate the power of the money that can be made by subverting online banking.
If the machine on which you do banking is not secure it becomes very hard to secure a transaction unless you have a true second channel. For example confirm a transaction with an SMS or phone call, although with smart phones this can no longer be guaranteed to be a second channel.
The latest generation of man-in-the-browser malware sits between the user and the bank and can alter transactions that the user has legitimately entered and authorised, as well as hide the evidence of the results.
At a recent AUScert conference in Australia we heard that such malware can also add additional form fields so that the user confirms their phone number, and use that as a vector to infect their smartphone by exploiting smartphone OS vulnerabilities. Once they have both PC and phone infected, it is game over as far as two factor authentication with the phone is concerned.
This problem can be solved in a very simple (technically, not politically) way, and that is to clean up international banking so that the money trail can be followed. Make the bank that failed to identify the one that ends up with the money liable for repayment (and that includes the likes of Western Union), and in the event of a failed bank make the country in which the bank is registered liable.
Failing that make operating system and software manufacturers liable for security flaws in their products. We do it with cars, so why not software?
What gets me is how this got by the security reviews of the many companies that use the devices. Just about the first question I would have asked was who has access to the seed keys. If the answer was 'we keep them' they would have been sent packing.
If RSA holding the seeds is fundamental to the design of the solution (the seed would probably need to be know at time of manufacture of the token) then the design of the solution is flawed. But at the very least they should have allowed for multiple keys on the server, have a key per batch of RSA keys, and then destroyed their copy of the key once they handed over to the customer. Keeping a master copy was just insane. And even if they kept a copy it should have been on a HSM on an isolated physically protected network or preferably on paper in a safe.
"Nuclear power is just about the best"
Until it goes wrong. Which it always will because people cut corners, get complacent, don't plan for statistically inevitable events or are just plain stupid.
And when it does the costs are astronomical - have you any idea of how much land in an area with a radius of twenty kilometres is worth in Germany?. If nuclear power plants had to ensure themselves fully, none would ever be built.
Renewables are our future. They are clever enough to want to get a jump start on the rest of the world. Good luck to them. It is just a shame that my native Australia, with all it's natural advantages in that regard, is still wedded to coal.
You are a cynical misanthropic bastard (well you did ask to be called that).
A recent unintended "test" at a NZ supermarket (http://www.techeye.net/security/christian-morality-tested-in-new-zealand-supermarket-glitch) found that 50% were lawful good.
I teach my daughter that any random person she approaches for help is probably good, and any random that approaches her is probably not. Seems to work.
Or more generally an atmosphere.
You see what happens to a lab rat if you put 'em in a vacuum?
Re:This is not the logic you are looking for
on
Is Sugar Toxic?
·
· Score: 3, Insightful
"with forcing bars & restaurants no smoking"
I have two words for you. Passive Smoking. Not of other patrons, but the staff. An employer has a duty of care to provide a safe workplace, and can't if they allow smoking.
Re:Dramatic effect and scientific precision
on
Is Sugar Toxic?
·
· Score: 1
"Which is why sugared sodas are corn syrup sodas."
I don't think this applies to all countries. I know sugar beet is a big source of sugar in the UK, and cane in Australia. Not sure what they put in the soft drinks though.
The Swedish government collects taxes and then gives them to various religious. If I recall correctly you can opt out, but the government then just keeps the money anyway.
So creating a religion which supports your views may not be such a crazy thing after all.
If it lampoons the established religions which at the end of the day are no more sensible so much the better.
In the US the choice seems to be which right of centre party funded by lots of corporate money to vote for. Not what I would call democracy. It is little better in the other countries that you listed (although parts of the EU do have proportional representation for example). In most of them the country ends up being ruled by a minority.
Any first past the post system with tenure measured in years is not government by the individual. With today's technology there is absolutely no reason why I shouldn't be able to submit my wishes of how I want my taxes to be spent when I pay them. You could build in inertia to avoid massive changes in budget.
Similarly why not allow the whole populous to vote on all important decisions.
Not that any of this would help. The media is controlled by those in power, and will make sure that the right result happens.
IANAE but I would have thought that if you increase the money supply by a certain percentage a year you could avoid charging anyone tax because it has the effect of watering down everyone's existing money (minus any growth in the economy). Since governments already use this as a way of raising revenue anyway it seems to work.
And the beauty would be that no-one could avoid it, and you need minimal bureaucracy to implement it.
Happy for people to shoot me down....
It won't have an exostructure.
1. Launch very long reel of very strong cable and a counterweight made of an as yet undiscovered material into geosynch orbit
2. Unwind
3. Profit !!! or Profit ???
And it will only be the first one that is hugely expensive. Equipment for number 2 onwards can be taken up by the first one.
If you read the Travels of Ibn Battutah (14th Century Muslim scholar cum bullshit merchant who traveled from Morocco to China) you will see that even back then you had to identify yourself and your business before being allowed across national boarders. Sure it wasn't pieces of paper, but it sure beats having to wait several days before the Sultan or one of his cronies, as well providing a large 'gift'.
The only reason we can use paper rather than cruder methods is the trust network in place for passports.
Back on topic though, airlines operating into Australia can be fined for bringing someone in without a valid passport, and I think also have to bear the costs of returning them whence they came. AA were completely out of order IMO, but it would only take an overzealous Aussie Customs official to make airlines think twice about letting people on without fully functioning passport.
Traveling in Eastern Europe in the 90's and early 2000's it was routine for hotels to ask for passports on arrival. I think it might even have been government policy. Had the same experience traveling through Tunisia last year. So don't automatically assume that by doing so you are being stupid.
At the risk of going metaphysical on you, I assume the algorithm to do this existed before Microsoft 'discovered' it. Therefore the analogy is indeed valid.
Unless they discovered the problem and followed a backout script.
3 mortgages, 3 credit cards and three accounts covering business personal and share trading. I doubt it would take an hour.
Mail as a second channel does have merit - it is pretty hard for a Russian mafia dude to intercept. But my letterbox sits out at the front of my property. If banks started mailing out username/passwords on a regular basis I can guess what would happen. And that is assuming they don't get diverted by a crooked mail service employee.
Locking down your account makes sense, especially nominating accounts. I have an RSA token so set my non-RSA approved amount to zero. And then RSA went and got themselves hacked *sigh*.
Ultimately though the banks will not implement any security which drives people to their branches. If they had their way they would do away with branches altogether.
Don't underestimate the power of the money that can be made by subverting online banking.
If the machine on which you do banking is not secure it becomes very hard to secure a transaction unless you have a true second channel. For example confirm a transaction with an SMS or phone call, although with smart phones this can no longer be guaranteed to be a second channel.
The latest generation of man-in-the-browser malware sits between the user and the bank and can alter transactions that the user has legitimately entered and authorised, as well as hide the evidence of the results.
At a recent AUScert conference in Australia we heard that such malware can also add additional form fields so that the user confirms their phone number, and use that as a vector to infect their smartphone by exploiting smartphone OS vulnerabilities. Once they have both PC and phone infected, it is game over as far as two factor authentication with the phone is concerned.
This problem can be solved in a very simple (technically, not politically) way, and that is to clean up international banking so that the money trail can be followed. Make the bank that failed to identify the one that ends up with the money liable for repayment (and that includes the likes of Western Union), and in the event of a failed bank make the country in which the bank is registered liable.
Failing that make operating system and software manufacturers liable for security flaws in their products. We do it with cars, so why not software?
What gets me is how this got by the security reviews of the many companies that use the devices. Just about the first question I would have asked was who has access to the seed keys. If the answer was 'we keep them' they would have been sent packing.
If RSA holding the seeds is fundamental to the design of the solution (the seed would probably need to be know at time of manufacture of the token) then the design of the solution is flawed. But at the very least they should have allowed for multiple keys on the server, have a key per batch of RSA keys, and then destroyed their copy of the key once they handed over to the customer. Keeping a master copy was just insane. And even if they kept a copy it should have been on a HSM on an isolated physically protected network or preferably on paper in a safe.
Nicely said, sir. I tip my hat to you.
"Nuclear power is just about the best" Until it goes wrong. Which it always will because people cut corners, get complacent, don't plan for statistically inevitable events or are just plain stupid. And when it does the costs are astronomical - have you any idea of how much land in an area with a radius of twenty kilometres is worth in Germany?. If nuclear power plants had to ensure themselves fully, none would ever be built. Renewables are our future. They are clever enough to want to get a jump start on the rest of the world. Good luck to them. It is just a shame that my native Australia, with all it's natural advantages in that regard, is still wedded to coal.
You are a cynical misanthropic bastard (well you did ask to be called that). A recent unintended "test" at a NZ supermarket (http://www.techeye.net/security/christian-morality-tested-in-new-zealand-supermarket-glitch) found that 50% were lawful good. I teach my daughter that any random person she approaches for help is probably good, and any random that approaches her is probably not. Seems to work.
How about you legalise meth? And every other bloody drug that the black economy makes so much money on.
Someone please mod as truth :o)
Here is a thought. If you don't understand something on the interwebs, go and google it. Then continue. Simple eh?
Since they were presumably paying you a salary to perform your job, it isn't unreasonable for them to own the output. Just like in the real world.
Thanks for taking the effort, but this is totally unnecessary as no-one RTFA anyway. Way to many words.
Is that one pair, or lots?
Or more generally an atmosphere. You see what happens to a lab rat if you put 'em in a vacuum?
"with forcing bars & restaurants no smoking" I have two words for you. Passive Smoking. Not of other patrons, but the staff. An employer has a duty of care to provide a safe workplace, and can't if they allow smoking.
"Which is why sugared sodas are corn syrup sodas." I don't think this applies to all countries. I know sugar beet is a big source of sugar in the UK, and cane in Australia. Not sure what they put in the soft drinks though.
The Swedish government collects taxes and then gives them to various religious. If I recall correctly you can opt out, but the government then just keeps the money anyway. So creating a religion which supports your views may not be such a crazy thing after all. If it lampoons the established religions which at the end of the day are no more sensible so much the better.
In the US the choice seems to be which right of centre party funded by lots of corporate money to vote for. Not what I would call democracy. It is little better in the other countries that you listed (although parts of the EU do have proportional representation for example). In most of them the country ends up being ruled by a minority. Any first past the post system with tenure measured in years is not government by the individual. With today's technology there is absolutely no reason why I shouldn't be able to submit my wishes of how I want my taxes to be spent when I pay them. You could build in inertia to avoid massive changes in budget. Similarly why not allow the whole populous to vote on all important decisions. Not that any of this would help. The media is controlled by those in power, and will make sure that the right result happens.
IANAE but I would have thought that if you increase the money supply by a certain percentage a year you could avoid charging anyone tax because it has the effect of watering down everyone's existing money (minus any growth in the economy). Since governments already use this as a way of raising revenue anyway it seems to work. And the beauty would be that no-one could avoid it, and you need minimal bureaucracy to implement it. Happy for people to shoot me down....
I think you will find it depends on the country of residence.