there's just no possible way to prevent rogue Mac, Linux and Commodore 64 computers from joining secure domains and having complete access to the network
Well, yes, actually, their is. It's called 802.1x and can provide authentication for all capable devices on the network.
In addition, you can also use NAP to limit who can get a DHCP address.
Or there are port level MAC filters on the switches.
You could also firewall your servers from the LAN and use ACLs based on MAC addresses, IPs or L7 rules.
I am sure there are more methods you could choose from, but those are the few I could thing of off the cuff.
I was forced to use Frontier service for a couple of years. I used their DSL service.
I got 2 or three "cease and desist" letters during this time for exceeding 100GB in a month.
This was in the 2009-2010 range. Even then 100GB was not hard at all to hit.
I also gave up trying to ever get any service from them, their tech support was terrible / non-existent. I was having some trouble getting the router that THEY provided me into a bridging mode so that I could use my own firewall. They kept telling me that it was impossible, that "their side" didn't support it.
After a bit of tinkering on my own, I did get their pos router into a bridging mode.
People buy insecure crap all the time. Security is not a priority until they are burned by it.
The thing is, the average user probably isn't going to even know that they have been burned by an insecure IoT device. Even if they realize that they have been hacked, they will never put 2 and 2 together. As in, they will never figure out that the vector into their network was the "smart" light bulb they connected to their wifi last year...
It doesn't have to last a long time or be physically resilient if you can by 4 for 1/4 the price of a dedicated firewall device.
Just swap out the old one if it starts to flake out on you.
The feature set you get with dd-wrt is just plain impressive even today. It turns your commodity hardware into something that has feature parity with a $1000 firewall device.
Yeah, it seems like the smart thing to do would be to just take a cut of any revenue earned or just hire the best of these fan-fiction creators and bring them in to the fold. They could be the YouTube presence... the outreach to a younger audience...
I use Skype a lot but it can be very annoying sometimes
- Having an IM discussion that is replicated to my other Skype devices as unread messages. The annoyance is furthered by having all these unread messages show up as unread text messages on Windows mobile. This always causes me to panic for half a second when I see 40 unread text messages when I look at my phone. - No easy way to mark unread messages as read in the desktop client. You have to click on the person's contact record and open the chat history... dumb! - Browser integration. I disable this immediately. Why would you assume that I want to use Skype to call random numbers on a web page? Seriously... does anyone find this feature useful? - kitchen-sink approach to software development... This is classic MS... create a huge monolithic app that does everything and nothing particularly well. - No IM API for 3rd party chat client integration. TBF, no major chat client really allows this anymore (except FB I guess, but how long until that goes away too?) - No cross compatibility between their Skype for Business (Lync) and Skype clients. If you are going to use the same product names, make them interoperable... it is too confusing otherwise...
I love how the MS Store is a cash grab... ok, I suppose you are right, but then so is Google Play store and Apple store...
Anyway, the value I see in the store is universal Windows apps and games. Buy a game once on the app store and you can then play it on all Win10 platforms, including the xbox... that is certainly less cash grabby than forcing you to buy multiple copies...
I have been using Bing exclusively for the last year. I will occasionally do a cross query to check the quality of the results and it has never been an issue. If I cannot find something on Bing, I cannot find it on Google either.
I also find that Bing has been innovating in search result (don't know what to call them) gadgets. For example, Bing has an inline base64 encode/decode function... you don't have to head out to a 3rd party site.
Call me a shill if you want, but I don't think that Google has the dominance in search any more. Their competitors (or at least Bing) are just as good at least and often better.
I also never understood why their PIX and ASA series had the most flaky power connector of all time... you look at that thing wrong and it will reboot...
Thanks, Cisco. I paid the Cisco tax for a quality hardware firewall but got the hardest thing to configure (it doesn't even follow your own IOS command syntax), uses some bolted on Java-based web configuration utility and reboots if you physically touch it.
Which, as much as you may hate Cisco, their support is still the best in the industry.
I haven't been in this field for a few years but I always thought Adtran support was the best I had ever encountered. Every time I ever needed any CLI help, 1 phone call (no transfers) got me direct to a level 2 support rep who knew their stuff.
I had completely written off normal OTA TV until recently.
Here is my entertainmentflow these days:
- Is there anything in my Hulu queue? - Is there any episodes left in my current series binge on Netflix or Amazon? - Is there any good PBS shows on OTA (Frontline, Downton Abby, etc)? - Watch Buzzr (old game shows) on OTA and play WoW
No, if you carefully read my statement you will see that I used the word "wants". This is key. If Google WANTS to cut off a revenue stream they can do so.
However, there is another alternative that is good for them AND for users: Fix the bugs and make them available to older devices that they want to continue to make money off of.
It doesn't do Google or users any kind of good to allow their older devices to be abandoned malware platforms.
Slashdot Mirror
there's just no possible way to prevent rogue Mac, Linux and Commodore 64 computers from joining secure domains and having complete access to the network
Well, yes, actually, their is. It's called 802.1x and can provide authentication for all capable devices on the network.
In addition, you can also use NAP to limit who can get a DHCP address.
Or there are port level MAC filters on the switches.
You could also firewall your servers from the LAN and use ACLs based on MAC addresses, IPs or L7 rules.
I am sure there are more methods you could choose from, but those are the few I could thing of off the cuff.
I was forced to use Frontier service for a couple of years. I used their DSL service.
I got 2 or three "cease and desist" letters during this time for exceeding 100GB in a month.
This was in the 2009-2010 range. Even then 100GB was not hard at all to hit.
I also gave up trying to ever get any service from them, their tech support was terrible / non-existent. I was having some trouble getting the router that THEY provided me into a bridging mode so that I could use my own firewall. They kept telling me that it was impossible, that "their side" didn't support it.
After a bit of tinkering on my own, I did get their pos router into a bridging mode.
I don't believe you are correct.
People buy insecure crap all the time. Security is not a priority until they are burned by it.
The thing is, the average user probably isn't going to even know that they have been burned by an insecure IoT device. Even if they realize that they have been hacked, they will never put 2 and 2 together. As in, they will never figure out that the vector into their network was the "smart" light bulb they connected to their wifi last year...
I was thinking the same thing.
Perhaps the differentiator is that they set up and manage the devices too?
That sounds like a whole different nightmare though.
Exactly right.
It doesn't have to last a long time or be physically resilient if you can by 4 for 1/4 the price of a dedicated firewall device.
Just swap out the old one if it starts to flake out on you.
The feature set you get with dd-wrt is just plain impressive even today. It turns your commodity hardware into something that has feature parity with a $1000 firewall device.
Crow T. Robot is so jealous...
I do use np++ a lot for note taking, but I don't like to have to disable the function autocomplete feature every time I want to take general notes.
The session saving feature does make it nicer for taking general notes, though. Not having to save a document before you close is kind of awesome.
Still, I prefer notepad.exe for general note taking.
When I want to take quick notes, I just use a text editor.
They load fast, come pre-installed on all operating systems and work just fine.
If I want to share notes or save them for later, I will paste them into OneNote.
I rarely use OneNote directly to take notes because it takes too long to load.
Do people expect that CEOs have some magical power or distinction that make them somehow less vulnerable to hacks?
I would expect that, because of celebrity status, they would be hacked more than other people, not less.
Yeah, it seems like the smart thing to do would be to just take a cut of any revenue earned or just hire the best of these fan-fiction creators and bring them in to the fold. They could be the YouTube presence... the outreach to a younger audience...
They look for things... things to make them go...
I tend to agree. I am not a huge fan of the new 'lens flare' Abrams movies either.
They are ok... but I would never watch any of them in the theater (redbox ftw!)
you must be new to the interwebs...
Of course, if they just didn't use the gold plated monster cables and cable risers, the cost would be couple hundred bucks...
Just don't by Netgear (unless you want it to be a botnode)
I am now going to spend the rest of the day muttering moo-mimo under my breath....
I use Skype a lot but it can be very annoying sometimes
- Having an IM discussion that is replicated to my other Skype devices as unread messages. The annoyance is furthered by having all these unread messages show up as unread text messages on Windows mobile. This always causes me to panic for half a second when I see 40 unread text messages when I look at my phone.
- No easy way to mark unread messages as read in the desktop client. You have to click on the person's contact record and open the chat history... dumb!
- Browser integration. I disable this immediately. Why would you assume that I want to use Skype to call random numbers on a web page? Seriously... does anyone find this feature useful?
- kitchen-sink approach to software development... This is classic MS... create a huge monolithic app that does everything and nothing particularly well.
- No IM API for 3rd party chat client integration. TBF, no major chat client really allows this anymore (except FB I guess, but how long until that goes away too?)
- No cross compatibility between their Skype for Business (Lync) and Skype clients. If you are going to use the same product names, make them interoperable... it is too confusing otherwise...
I love how the MS Store is a cash grab... ok, I suppose you are right, but then so is Google Play store and Apple store...
Anyway, the value I see in the store is universal Windows apps and games. Buy a game once on the app store and you can then play it on all Win10 platforms, including the xbox... that is certainly less cash grabby than forcing you to buy multiple copies...
I am excited to get a fully functional bash (Ubuntu) in Windows! You cannot deny that is pretty awesome... The year of desktop Linux indeed!
I have been using Bing exclusively for the last year. I will occasionally do a cross query to check the quality of the results and it has never been an issue. If I cannot find something on Bing, I cannot find it on Google either.
I also find that Bing has been innovating in search result (don't know what to call them) gadgets. For example, Bing has an inline base64 encode/decode function... you don't have to head out to a 3rd party site.
Call me a shill if you want, but I don't think that Google has the dominance in search any more. Their competitors (or at least Bing) are just as good at least and often better.
I also never understood why their PIX and ASA series had the most flaky power connector of all time... you look at that thing wrong and it will reboot...
Thanks, Cisco. I paid the Cisco tax for a quality hardware firewall but got the hardest thing to configure (it doesn't even follow your own IOS command syntax), uses some bolted on Java-based web configuration utility and reboots if you physically touch it.
Which, as much as you may hate Cisco, their support is still the best in the industry.
I haven't been in this field for a few years but I always thought Adtran support was the best I had ever encountered. Every time I ever needed any CLI help, 1 phone call (no transfers) got me direct to a level 2 support rep who knew their stuff.
Perhaps things are different now...
I had completely written off normal OTA TV until recently.
Here is my entertainmentflow these days:
- Is there anything in my Hulu queue?
- Is there any episodes left in my current series binge on Netflix or Amazon?
- Is there any good PBS shows on OTA (Frontline, Downton Abby, etc)?
- Watch Buzzr (old game shows) on OTA and play WoW
No, if you carefully read my statement you will see that I used the word "wants". This is key. If Google WANTS to cut off a revenue stream they can do so.
However, there is another alternative that is good for them AND for users: Fix the bugs and make them available to older devices that they want to continue to make money off of.
It doesn't do Google or users any kind of good to allow their older devices to be abandoned malware platforms.
I am guessing that you don't think highly of the Irish...