Step 1. Become disabled Step 2. Collect economic assistance from the state Step 3. Create business cards with "Game historian" printed on the front Step 4. Profit
I especially like the quip about the exclamation marks.
It reminds me of a Flight of the Conchords episode.
Greg: Murray? Murray: Yeah. Greg: Uh, I wanted you to okay the new subway poster. Murray: Oh wow, Greg. What about another exclamation mark? Greg: I don't think that's necessary. Murray: Not necessary, no. Greg: That's good.
How about "Luc Luc" the half man, half Ewok, half Wookie who is always bringing up stuff that never really happened but earnestly insists that it's true.
If you are a terrorist organization and are planning a sophisticated attack, why in the world would you "tip your hand" this far in advance?
Why not cut the cables a couple of hours in advance?
Not saying it isn't a valid concern, but something doesn't seem right. I think the more obvious explanation is that there are disgruntled (that is probably one of the funniest words in the English language, btw) people in the area who want to shit on everyone else.
I was thinking of driver update utilities that are pushed from the manufacturer's driver download web page.
I mean, you've already gotten that far and done about 85% of the work (identifying the hardware, finding the manufacturer web site, navigating to the download section) and NOW is when you get the "easy mode" option.... just click 2 or 3 more times and get the driver directly.
I guess my point is, if you know that you need to update a driver AND you have made it to the manufacturer web site to download the driver AND you have navigated to the driver download page where the updater is likely to live anyway, how much extra work is it to just find the driver directly?
I think that attackers are increasingly sophisticated.
All you would need to do is set up an open wifi hotspot, have someone connect to it, and inject some kind of message that they need to update their driver software and then link/redirect to the legit Intel web site. The user doesn't even have to be fooled, they are downloading a genuine Intel software product.
Then, when they go to update their driver, the MITM captures the XML and puts their own links in.
More like someone could easily MITM an unencrypted HTTP stream and redirect the user to a different download.... then, when the person executes the malicious payload.... bam! cryptowall!
I mean... it's like the oldest malware install vector of all time... download this driver update utility! We will abstract away that awful task of identifying your hardware and downloading software....
Who on Earth savvy enough to update drivers uses a black box utility to download and install low level pieces of software (that require admin privs to install) like this?
MAC address is hardly a personal identifier.... at best it identifies hardware... but it would still need to be proved that you were using that hardware.
I never expected our small org to be the recipient of a "spear phishing" attack but it was.
Apparently these scams are on the rise. The attacker takes the time to learn as much as they can about the org using public information. In our case, the "attacker" waited for the xmas holiday when she knew that people would be out of the office (and therefor have auto-replies set up) to harvest some e-mail addresses (complete with sigs).
Once she had that, she was able to create an e-mail that looked identical a normal internal message which requested a wire transfer.
It was only due to the fact that we regularly do phishing audits on our users that the scam was detected. The accountant the message targeting was ready to authorize the transfer but then thought to forward the message to me for analysis.
So yeah, you just have to be aware of what you are putting out there.
I think the most dangerous part about Trump is this "filter" (or lack thereof) problem he has on his mouth.
There are some people out there who will be stirred up by this so much that they will take action.
The most dangerous part about Trump being president is not that he would have any political power. I am sure the dems (and probably a lot of repubs) will block him ever step of the way should he be president. I think the problem is that the presidency will give his voice disproportionate power and when he says something stupid and hateful, someone out there will take it as a call to action and do something terrible.
Of course, the angry redneck and the stupid sophomore both have one thing in common: You can't tell either one of them a damned thing right now which refutes their little dreams.
That's not limited to "the redneck and stupid sophomore". Damn near the entire population of the US is like that anymore. It's strange how we have better communication and more access to information than ever before in this country, and people are more narrow minded than ever.
I don't buy it. I think that most people are considered and reasonable. I think that the extremes are just more interesting and consequently receive disproportional attention.
Not everyone who votes Republican is a fundamental Christian NRA wingnut. Not everyone who votes Democrat is a tree hugging, socialist nutjob.
I believe that the truth (as is usually the case in my experience) is somewhere in the middle. Most people just want to live and not be hassled.
You may vote repub because you are fiscally conservative. You may vote dem because you care about social programs... I don't know the reasons people vote the way they do, but in my experience we all have the same basic desires.
Besides, our system of government doesn't really give all that much power to the president without the help of the other branches. So no matter who is president, you are pretty much guaranteed the same thing you have now.... for better or worse... I think that is by design.
Don't get me wrong, I definitely lean left and I think it would really say something about this country if Trump were to win, but I also know that even if he does, nothing will change. It will just be the same thing we have now (with slightly more comedy perhaps).... but nothing will really change...
I mean, think about the biggest thing Obama "rammed" through during his presidency... Obamacare... and now tell me how your life is now ruined because of it...
My favorite is the "Made in the USA" bottle opener that bends a little bit every time you use it to open a beer bottle.
I think crap can be made anywhere...
I have also seen good quality Chinese tools. I did some computer work for an Amazon shop that only sells Chinese-made tools. A lot of it was junk, sure, but there were some tools I got from there which I continue to use regularly.
Slashdot Mirror
Step 1. Become disabled
Step 2. Collect economic assistance from the state
Step 3. Create business cards with "Game historian" printed on the front
Step 4. Profit
Unless you steal from Steve Jobs...
I especially like the quip about the exclamation marks.
It reminds me of a Flight of the Conchords episode.
Greg: Murray?
Murray: Yeah.
Greg: Uh, I wanted you to okay the new subway poster.
Murray: Oh wow, Greg. What about another exclamation mark?
Greg: I don't think that's necessary.
Murray: Not necessary, no.
Greg: That's good.
How about "Luc Luc" the half man, half Ewok, half Wookie who is always bringing up stuff that never really happened but earnestly insists that it's true.
If you are a terrorist organization and are planning a sophisticated attack, why in the world would you "tip your hand" this far in advance?
Why not cut the cables a couple of hours in advance?
Not saying it isn't a valid concern, but something doesn't seem right. I think the more obvious explanation is that there are disgruntled (that is probably one of the funniest words in the English language, btw) people in the area who want to shit on everyone else.
Use a white envelope.
Still.... I wouldn't want to go toe-to-toe with the postmaster general.... he checks his blood sugar and checks it often...
Fair enough.
I was thinking of driver update utilities that are pushed from the manufacturer's driver download web page.
I mean, you've already gotten that far and done about 85% of the work (identifying the hardware, finding the manufacturer web site, navigating to the download section) and NOW is when you get the "easy mode" option.... just click 2 or 3 more times and get the driver directly.
I guess my point is, if you know that you need to update a driver AND you have made it to the manufacturer web site to download the driver AND you have navigated to the driver download page where the updater is likely to live anyway, how much extra work is it to just find the driver directly?
I disagree.
I think that attackers are increasingly sophisticated.
All you would need to do is set up an open wifi hotspot, have someone connect to it, and inject some kind of message that they need to update their driver software and then link/redirect to the legit Intel web site. The user doesn't even have to be fooled, they are downloading a genuine Intel software product.
Then, when they go to update their driver, the MITM captures the XML and puts their own links in.
Reminds me of the "Trace Buster" from The Big Hit
More like someone could easily MITM an unencrypted HTTP stream and redirect the user to a different download.... then, when the person executes the malicious payload.... bam! cryptowall!
I mean... it's like the oldest malware install vector of all time... download this driver update utility! We will abstract away that awful task of identifying your hardware and downloading software....
Who on Earth savvy enough to update drivers uses a black box utility to download and install low level pieces of software (that require admin privs to install) like this?
There is already a planet with that name.... so, in true gamer fashion, we will not let that deter us.
We shall call it: xXPlutoXx
I do the same. I just run noscript. I have for many years.
This really has the same effect as ad blocking since most ads these days are JS.
Simple choice for advertisers though... just make your ad text or image based and you are fine.
I am sure there will always be "Internet backwaters" in the New World Web... but only criminals will use those...
As long as you can roam between cells you have all the freedom in the world...
MAC address is hardly a personal identifier.... at best it identifies hardware... but it would still need to be proved that you were using that hardware.
With the rise of social networks and federated authentication, I don't think we are that far off from this.
I think it is only a matter of time before we all have a private key bound to an identification card or something similar.
I never expected our small org to be the recipient of a "spear phishing" attack but it was.
Apparently these scams are on the rise. The attacker takes the time to learn as much as they can about the org using public information. In our case, the "attacker" waited for the xmas holiday when she knew that people would be out of the office (and therefor have auto-replies set up) to harvest some e-mail addresses (complete with sigs).
Once she had that, she was able to create an e-mail that looked identical a normal internal message which requested a wire transfer.
It was only due to the fact that we regularly do phishing audits on our users that the scam was detected. The accountant the message targeting was ready to authorize the transfer but then thought to forward the message to me for analysis.
So yeah, you just have to be aware of what you are putting out there.
Go ahead, throw your vote away!
Popular vote has nothing to do with the POTUS anyway.
I think the most dangerous part about Trump is this "filter" (or lack thereof) problem he has on his mouth.
There are some people out there who will be stirred up by this so much that they will take action.
The most dangerous part about Trump being president is not that he would have any political power. I am sure the dems (and probably a lot of repubs) will block him ever step of the way should he be president. I think the problem is that the presidency will give his voice disproportionate power and when he says something stupid and hateful, someone out there will take it as a call to action and do something terrible.
Of course, the angry redneck and the stupid sophomore both have one thing in common: You can't tell either one of them a damned thing right now which refutes their little dreams.
That's not limited to "the redneck and stupid sophomore". Damn near the entire population of the US is like that anymore. It's strange how we have better communication and more access to information than ever before in this country, and people are more narrow minded than ever.
I don't buy it. I think that most people are considered and reasonable. I think that the extremes are just more interesting and consequently receive disproportional attention.
Not everyone who votes Republican is a fundamental Christian NRA wingnut. Not everyone who votes Democrat is a tree hugging, socialist nutjob.
I believe that the truth (as is usually the case in my experience) is somewhere in the middle. Most people just want to live and not be hassled.
You may vote repub because you are fiscally conservative. You may vote dem because you care about social programs... I don't know the reasons people vote the way they do, but in my experience we all have the same basic desires.
Besides, our system of government doesn't really give all that much power to the president without the help of the other branches. So no matter who is president, you are pretty much guaranteed the same thing you have now.... for better or worse... I think that is by design.
Don't get me wrong, I definitely lean left and I think it would really say something about this country if Trump were to win, but I also know that even if he does, nothing will change. It will just be the same thing we have now (with slightly more comedy perhaps).... but nothing will really change...
I mean, think about the biggest thing Obama "rammed" through during his presidency... Obamacare... and now tell me how your life is now ruined because of it...
It's the brain *implant* that's supposed to dissolve? Oh geez, I got it backwards... it's my first day....
My favorite is the "Made in the USA" bottle opener that bends a little bit every time you use it to open a beer bottle.
I think crap can be made anywhere...
I have also seen good quality Chinese tools. I did some computer work for an Amazon shop that only sells Chinese-made tools. A lot of it was junk, sure, but there were some tools I got from there which I continue to use regularly.