The cost of nuclear power was invented by man. The technology itself isn't actually that expensive and the time to build isn't that long either. Most of the nuclear projects spend pathetic little time actually constructing anything.
My own experience was taking so long to install a safety system at a reactor in Spain that the immediate project following it in a chemical plant in Belgium was to rip out the exact model we just commissioned because it was already nearing end of life.
The project in the nuclear industry was simple and took many years to complete. Most of the time was spent sending paperwork with the longest signature lists I've ever seen around. The project in belgium comprised of twice the number of systems both about 5 times the size of what went into the nuclear reactor, and was done in 5 months at a small fraction of the cost.
Same identical hardware. Interestingly in the nuclear industry that hardware came with a mountain of certification which could be measured in 10s of thousands of dollars per page.
Safety is not expensive. Paperwork is expensive. Safety is achieved by implimenting off the shelf components and in the nuclear industry it is done with cookie cutter designs. Then we throw millions of dollars of worthless paperwork at it.
But it would be such a shame, and a blow to the Working Man, if High Frequency Traders can't operate!
You're trying to be funny but your humour by your lack of understanding about what HFT does. HFT is the reason your common man can buy and sell stocks at fixed set points accurately with low transaction costs.
Yes it would be a blow. I certainly don't want it to go back to the way it was years back where every buy and sell operation had to take into account the fees and potential delay costs associated with the transaction.
Signed: A Working Man... well a procrastinating from Working Man.
1) Don't trust another company with your critical IT infrastructure!
Why not? They can provide orders of mangitdue better: "redundant facilities with different ISPs" , and "backup/standby power systems" than you ever could.
Yes, it is expensive
And that's the key here. This wasn't a case of critical infrastructure in the cloud. This was a case of critical infrastructure in a very cheap consumer grade cloud with no SLA. Seriously much of the critical infrastructure of some of the largest companies are hosted by cloud providers now. The difference is that instead of you being unable to call them, they will be actively calling you.
I once was asked why my company pays $5000/m for a shitty little DSL connection. Well when that connection went down and we had technicians from the ISP deployed within 20minutes from a company who's consumer service will happily tell you "someone is coming next week on thursday between 12:00 and 17:00 and then doesn't show up at all, THAT's why you pay for a certain kind of service.
Clouds are no different. Pay peanuts, get monkeys.
Mission-critical functions should be kept in-house. Never farm out anything that can kill your business if your vendor fails to do their job.
-jcr
Don't be so narrow minded. There are many people out there that are far more capable at hosting mission critical functions than even some of the largest companies.
More accurately: Mission critical functions should be covered by service level agreements based on the criticality of the function. "No phone to call" "Customer service chat is off" aren't words associated with cloud vendors. They are associated with someone renting cheap server space.
But if they are your own, you have many more levels of control than if they're in the "cloud"
No you have more personal control. Your cloud provider definitely has more levels of control to deal with outages.
Seriously though, this isn't about hardware. The major cloud providers can show that they provide uptime services that far exceed what even a well funded IT department are capable of. However the big key missing here is the contract management.
Mission critical systems in the cloud isn't a bad idea. The redundancy both in hardware, network connections, and geography are hard to beat. However who the fuck puts a mission critical system on a service without a performance contract that provides 24/7 disaster response, or worse on a service where the provider will arbitrarily cut you off.
If millions of dollars are on the line, you should be running your own systems.
Not quite. If millions of dollars are on the line you should be getting specialists to run your systems with very strict performance contracts and penalties in place.
Seriously cloud based providers are the backbone of much of the Fortune 500. But the key difference is the enterprise agreements that will have people on call 24/7/365 to resolve even the tiniest problem without automatically cutting people off. A lot of people look at consumer grade cloud providers, fly by night companies, and the Google which is renound for customer service in no good ways at all, and apply that the entire concept/industry.
The beastiality industry on the other hand has been completely destroyed. The GP is right that porn represents risk in the general sense, but is very wrong that the payment processors don't also act as a moral police.
Actually it has plenty to do with moral policing. Credit card processors were single handedly implicated in the end of the beasiality porn industry in the USA even before *some* states passed laws banning the practice. Credit card processors have led some very targetted moral campaigns in the past. You're right in the general case that porn represents a high-risk to them, but within the industry they are very effective moral police.
The system isn't judge jury and executioner. The system is just trying to reduce the search space for good old fashioned policing. False positives don't mean that it will only identify 2% of cases, it means from the cases its identified 2% are correct.
If you're looking at a million people, and you're looking for 1 person, having a search space of 49 to go through is an incredible win for policing. Now tracking implications on the other hand are quite severe, but then that is actually helped for privacy advocates by a system which may confuse you with 49 other people.
This is sufficient information to deduce exactly what you are doing on a publically accessible website with high degree of accuracy regardless of encryption.
This is sufficient to deduce for a small website with static content. It's another great lab based attack that isn't relevant on much of the internet.
why the FUCK would I need HTTPS to view a page that has been sitting around since 1998, is static HTML, likely has no ads plastered all over its face, and contains information on something obscure and random that newer pages don't have anymore?
Since when does any of the above determine how sensitive the content may be? Interestingly you've described a good portion of websites which may or may not be hosting copies of the Anarchist's Cookbook, the possession and accessing which has come up in court cases in the past.
It's not up to the content provider to determine what you are being persecuted for accessing. Not everything is about logins and bitcoins.
Speaking of banking information, can you help me with something: Why do people in the USA insist on keeping this stuff secret? Do your banks typically allow others to withdraw from your account with your bank details? In most places I've lived that just isn't the case and I have no problem giving people bank account numbers, in fact I actively do because usually when I do the balance increases.
How long would it take before your hands have the bacteria level of a 5 second wash ?
Imagine having a 5 second was combined with your phone. Speaking of bacteria level where did you get your phone from? Your soft tissue pocket that was rubbing against your screen?
The odds of you picking up something from a device only you use and that spends it's time against fabric (bacteria survive best on solid warm surfaces with moisture) are quite low compared to something like shaking someone's hand.
Plus you should wipe your phone.
You should understand the exposure and transmission of disease. I didn't just come up, wipe my snotty nose in my hands and then reach over and grab you by your belt buckle, stick my hand in your pocket and fondle your.... phone.:-)
You're not protecting against yourself by washing your hands, you're protecting against others. For that you should focus on things that come in contact with others. I'm not a clean freak, but the one thing that truly freaks me out is a communal keyboard with visible gunk on it.
Speaking of what you *should* be worried about, ever notice that in areas where food is served in many countries they offer anti-bacterial gel dispensers? Ever wonder why specifically in *that* area, hint: It has nothing to do with your pocket.
Washing you hands in dirty water is pretty pointless.
Wow, found someone who doesn't know what soap is.
the US has some of the shitiest water in the entire developed world, really, really bad. Lead, fracking chemicals, pesticides, all sorts of infectious agents
The US has quite average water and is borderline poison in some places, but infectious agents? Get a grip man. Even in 3rd world shitholes (actual shitholes, not Trump shitholes) you're better off washing your hands than not.
I mean, who gives away their login credentials AND 2FA to a stranger on the phone?
Yeah who gives some credentials to their employer when asked and are already desperate enough to be working for Uber in the first place?
Vicitm blaming doesn't help anything. I work for a multinational company with quite high standards when it comes to hiring technically capable people and we still go through bimonthly training on digital security, phishing, not handing out passwords, etc. At *my* company you can 100% blame the victim. You don't get to do that to the people you've never educated on the topic, and even less for people whom are in a desperate enough situation to be earning $600/week most of which will go to expenses.
I don't like Uber but fuck what more can you do to protect someone that voluntarily puts a gun to their head and pulls the trigger.
Educate them? You're posting from a position of privilage. Either you're a tech savy Slashdot users or an office worker surrounded by technology, passwords, etc. My own multinational employeer comes up with a new IT security training scheme every two months. Currently the theme is phishing. The mat under my mouse right now says "Phishing: Don't get caught" along with a picture of some goldfish and fishing hooks, and some dot point advice on not ever giving your password out, and a reminder that you didn't win an iPad from a competition you didn't enter.
Something tells me the nobjobs running Uber don't provide anything of the sort to their *employees*.
You do not speak your password aloud, ever. You do not send your password to another person, ever. You most certainly do not read aloud the CONFIRMATION CODE that gets sent when someone has entered your password.
And most importantly: You do not hear any of this if you are a very low class low income earner driving an uber for a few hundred bucks a week and sleeping in your car at a SevenEleven to make ends meet.
Yeah I get what you're saying. So does every office worker who's ever had an email from IT, so do tech savy people who are around computers a lot. But there are an entire class of people who would never have received this advice and are getting calls not from unsolicitated strangers about their broken Windows installation or their non-existant PayPal accounts, but rather from what they think is their only lifeline: their very shitty employer (contract parent company?... no. EMPLOYER).
Slashdot Mirror
The cost of nuclear power was invented by man. The technology itself isn't actually that expensive and the time to build isn't that long either. Most of the nuclear projects spend pathetic little time actually constructing anything.
My own experience was taking so long to install a safety system at a reactor in Spain that the immediate project following it in a chemical plant in Belgium was to rip out the exact model we just commissioned because it was already nearing end of life.
The project in the nuclear industry was simple and took many years to complete. Most of the time was spent sending paperwork with the longest signature lists I've ever seen around. The project in belgium comprised of twice the number of systems both about 5 times the size of what went into the nuclear reactor, and was done in 5 months at a small fraction of the cost.
Same identical hardware. Interestingly in the nuclear industry that hardware came with a mountain of certification which could be measured in 10s of thousands of dollars per page.
safety is expensive
Safety is not expensive. Paperwork is expensive. Safety is achieved by implimenting off the shelf components and in the nuclear industry it is done with cookie cutter designs. Then we throw millions of dollars of worthless paperwork at it.
But it would be such a shame, and a blow to the Working Man, if High Frequency Traders can't operate!
You're trying to be funny but your humour by your lack of understanding about what HFT does. HFT is the reason your common man can buy and sell stocks at fixed set points accurately with low transaction costs.
Yes it would be a blow. I certainly don't want it to go back to the way it was years back where every buy and sell operation had to take into account the fees and potential delay costs associated with the transaction.
Signed: A Working Man ... well a procrastinating from Working Man.
1) Don't trust another company with your critical IT infrastructure!
Why not? They can provide orders of mangitdue better: "redundant facilities with different ISPs" , and "backup/standby power systems" than you ever could.
Yes, it is expensive
And that's the key here. This wasn't a case of critical infrastructure in the cloud. This was a case of critical infrastructure in a very cheap consumer grade cloud with no SLA. Seriously much of the critical infrastructure of some of the largest companies are hosted by cloud providers now. The difference is that instead of you being unable to call them, they will be actively calling you.
I once was asked why my company pays $5000/m for a shitty little DSL connection. Well when that connection went down and we had technicians from the ISP deployed within 20minutes from a company who's consumer service will happily tell you "someone is coming next week on thursday between 12:00 and 17:00 and then doesn't show up at all, THAT's why you pay for a certain kind of service.
Clouds are no different. Pay peanuts, get monkeys.
Mission-critical functions should be kept in-house. Never farm out anything that can kill your business if your vendor fails to do their job.
-jcr
Don't be so narrow minded. There are many people out there that are far more capable at hosting mission critical functions than even some of the largest companies.
More accurately: Mission critical functions should be covered by service level agreements based on the criticality of the function. "No phone to call" "Customer service chat is off" aren't words associated with cloud vendors. They are associated with someone renting cheap server space.
This isn't about hardware. This is about someone hosting a million dollar system on a service that you pay for with an end user credit card.
More importantly, with millions on the line why was a credit card even part of the discussion. Doesn't sound like an enterprise grade system to me.
But if they are your own, you have many more levels of control than if they're in the "cloud"
No you have more personal control. Your cloud provider definitely has more levels of control to deal with outages.
Seriously though, this isn't about hardware. The major cloud providers can show that they provide uptime services that far exceed what even a well funded IT department are capable of. However the big key missing here is the contract management.
Mission critical systems in the cloud isn't a bad idea. The redundancy both in hardware, network connections, and geography are hard to beat. However who the fuck puts a mission critical system on a service without a performance contract that provides 24/7 disaster response, or worse on a service where the provider will arbitrarily cut you off.
If millions of dollars are on the line, you should be running your own systems.
Not quite. If millions of dollars are on the line you should be getting specialists to run your systems with very strict performance contracts and penalties in place.
Seriously cloud based providers are the backbone of much of the Fortune 500. But the key difference is the enterprise agreements that will have people on call 24/7/365 to resolve even the tiniest problem without automatically cutting people off. A lot of people look at consumer grade cloud providers, fly by night companies, and the Google which is renound for customer service in no good ways at all, and apply that the entire concept/industry.
Don't be like one of those people.
The beastiality industry on the other hand has been completely destroyed. The GP is right that porn represents risk in the general sense, but is very wrong that the payment processors don't also act as a moral police.
it's not nothing to do with moral policing.
Actually it has plenty to do with moral policing. Credit card processors were single handedly implicated in the end of the beasiality porn industry in the USA even before *some* states passed laws banning the practice. Credit card processors have led some very targetted moral campaigns in the past. You're right in the general case that porn represents a high-risk to them, but within the industry they are very effective moral police.
The system isn't judge jury and executioner. The system is just trying to reduce the search space for good old fashioned policing. False positives don't mean that it will only identify 2% of cases, it means from the cases its identified 2% are correct.
If you're looking at a million people, and you're looking for 1 person, having a search space of 49 to go through is an incredible win for policing. Now tracking implications on the other hand are quite severe, but then that is actually helped for privacy advocates by a system which may confuse you with 49 other people.
You can walk into libraries ...snip... Nobody maintains it
The average public library has a budget of $1m per year in the USA which includes among many things security and access control.
This is sufficient information to deduce exactly what you are doing on a publically accessible website with high degree of accuracy regardless of encryption.
This is sufficient to deduce for a small website with static content. It's another great lab based attack that isn't relevant on much of the internet.
Depends on the malware source. If its delivered by a MITM then it absolutely prevents it. If it is provided by the host then of course it won't.
It costs more than $0 for the fully qualified domain name
Which is irrelevant since the GP was postulating being demoted in search results, something Google already does if you don't have a FQDN.
i.e. if you're in a position to worry about your place in Google's results, then you're also in a position to pickup a SSL cert for free.
why the FUCK would I need HTTPS to view a page that has been sitting around since 1998, is static HTML, likely has no ads plastered all over its face, and contains information on something obscure and random that newer pages don't have anymore?
Since when does any of the above determine how sensitive the content may be?
Interestingly you've described a good portion of websites which may or may not be hosting copies of the Anarchist's Cookbook, the possession and accessing which has come up in court cases in the past.
It's not up to the content provider to determine what you are being persecuted for accessing. Not everything is about logins and bitcoins.
Unless you're trying to obtain a certificate for the administration interface of an internal device on your home LAN
If someone is MITMing you on your home LAN you have bigger problems.
A large percentage of the web doesn't need to be encrypted during transmission.
It's not up to the person sending the information to decide if the person receiving it could be persecuted for doing so.
Right I was thinking in terms of the BTC itself.
Speaking of banking information, can you help me with something: Why do people in the USA insist on keeping this stuff secret? Do your banks typically allow others to withdraw from your account with your bank details? In most places I've lived that just isn't the case and I have no problem giving people bank account numbers, in fact I actively do because usually when I do the balance increases.
How long would it take before your hands have the bacteria level of a 5 second wash ?
Imagine having a 5 second was combined with your phone. Speaking of bacteria level where did you get your phone from? Your soft tissue pocket that was rubbing against your screen?
The odds of you picking up something from a device only you use and that spends it's time against fabric (bacteria survive best on solid warm surfaces with moisture) are quite low compared to something like shaking someone's hand.
Plus you should wipe your phone.
You should understand the exposure and transmission of disease. I didn't just come up, wipe my snotty nose in my hands and then reach over and grab you by your belt buckle, stick my hand in your pocket and fondle your .... phone. :-)
You're not protecting against yourself by washing your hands, you're protecting against others. For that you should focus on things that come in contact with others. I'm not a clean freak, but the one thing that truly freaks me out is a communal keyboard with visible gunk on it.
Speaking of what you *should* be worried about, ever notice that in areas where food is served in many countries they offer anti-bacterial gel dispensers? Ever wonder why specifically in *that* area, hint: It has nothing to do with your pocket.
Washing you hands in dirty water is pretty pointless.
Wow, found someone who doesn't know what soap is.
the US has some of the shitiest water in the entire developed world, really, really bad. Lead, fracking chemicals, pesticides, all sorts of infectious agents
The US has quite average water and is borderline poison in some places, but infectious agents? Get a grip man. Even in 3rd world shitholes (actual shitholes, not Trump shitholes) you're better off washing your hands than not.
Let me guess, you don't shower either?
I mean, who gives away their login credentials AND 2FA to a stranger on the phone?
Yeah who gives some credentials to their employer when asked and are already desperate enough to be working for Uber in the first place?
Vicitm blaming doesn't help anything. I work for a multinational company with quite high standards when it comes to hiring technically capable people and we still go through bimonthly training on digital security, phishing, not handing out passwords, etc. At *my* company you can 100% blame the victim. You don't get to do that to the people you've never educated on the topic, and even less for people whom are in a desperate enough situation to be earning $600/week most of which will go to expenses.
I don't like Uber but fuck what more can you do to protect someone that voluntarily puts a gun to their head and pulls the trigger.
Educate them? You're posting from a position of privilage. Either you're a tech savy Slashdot users or an office worker surrounded by technology, passwords, etc. My own multinational employeer comes up with a new IT security training scheme every two months. Currently the theme is phishing. The mat under my mouse right now says "Phishing: Don't get caught" along with a picture of some goldfish and fishing hooks, and some dot point advice on not ever giving your password out, and a reminder that you didn't win an iPad from a competition you didn't enter.
Something tells me the nobjobs running Uber don't provide anything of the sort to their *employees*.
You do not speak your password aloud, ever.
You do not send your password to another person, ever.
You most certainly do not read aloud the CONFIRMATION CODE that gets sent when someone has entered your password.
And most importantly: You do not hear any of this if you are a very low class low income earner driving an uber for a few hundred bucks a week and sleeping in your car at a SevenEleven to make ends meet.
Yeah I get what you're saying. So does every office worker who's ever had an email from IT, so do tech savy people who are around computers a lot. But there are an entire class of people who would never have received this advice and are getting calls not from unsolicitated strangers about their broken Windows installation or their non-existant PayPal accounts, but rather from what they think is their only lifeline: their very shitty employer (contract parent company? ... no. EMPLOYER).