> Or that you'll accidentally shoot a family member coming in late at night?
That's sure as heck what I do. I load up on whiskey with my shotgun in my lap. If I hear even the smallest sound I start blazing off shots in the dark in all directions.
> There is nothing in this about video-ing the perps.
I disagree. That's there to mitigate the damage.
They break in and steal shit. Ok. But you have video tapes and can clearly identify them. Great, the police might chance them and you might get your stuff back.
Getting your stuff back from police might be preferred over getting an insurance claim
A few things I can think off hand: Computers that don't have proper back ups. Your wife's gold necklace (that also happened to be passed down for 5 generations). Your cat or other things that have sentimental value.
I have a watch from my grandpa. It's probably worth $50 at most in an insurance claim. It's worth a lot more to me though.
That $100 thing from Phillips isn't rock solid either. It's not like it has redundant power sources, redundant transmitters, etc... At best they probably have a battery back up. Most any consumer grade equipment won't be.
Secondly that's not even the point. It's not like you leave your kid in a far away location in life threatening situations for long periods of time while maintaining radio silence and amuse everything is correct unless you hear a mayday call.
Third, just because you "build" a monitor yourself, doesn't mean you have to design every single piece of hardware from scratch. I setup one, it's a very simple solution. We have web cam + mic + speakers in room and then have a net book with mic/speakers and screen.
You can see everything going on clearly. There is also two way communication, my spouse can talk to little bobby while she's cooking dinner. If there is ever any question what so ever about if the device is reliability communicating, we would check up in person. In fact, one time the wifi went out, my spouse yelled up "Bobby come play in the kitchen till dinner is ready". Problem solved.
This setup actually work betters than ever monitor we looked at. She can glance over and see what he's doing. Voice-only doesn't work if he's unconscious or otherwise unable to communicate.
> Actually, we found that s "Beware of the bees" sign (with a couple of hives in the back yard) had a much higher deterrent value than a "Beware of the dog." sign.
How exactly did you determine deterrent value?
Are these people getting robbed enough on a regular bases that you could actually perform tests to see which sign deterrents more thieves?
If something isn't working out for you, use excessive amount of violence and XML. Not only is that how I develop all my apps, that's also how I manage my relationships and everything else. Including baby sitting and camping.
If you are in a situation were someone is willing to pop out your ram after shutdown to "read your secrets"; then you're going to need a very custom setup for your security needs and not just buying drives from toshiba.
Secondly, freebsd has encrypted temporary file systems. I have both my/tmp and swap setup this way. It creates a key at boot, creates an encrypted volume with that key and then mounts/swaps it as normal. When the system is powered down, the key is no longer anywhere. Well, it's in ram if you can sneak it out in under 10 minutes. But effectively the data isn't available any more.
You can also zero out swap at shutdown if you are really paranoid. Nothing says you couldn't also fill/tmp up with complete crap before shutdown either, umount it an d/dev/rand your tmp partition, etc. Lastly, I bet you could "zero out" a large chunk of the ram at shutdown by just allocating a lot of chunks from/dev/rand. You couldn't get 100% of it, but you could get whatever the OS and your program isn't using.
On boot, if it realizes it doesn't have a key; then just write random data to as many random sectors as you can in say 1-5 seconds.
Breaking AES256. That's kind of tricky.
Breaking AES256 when your container is corrupted and can't tell the difference between good and bad sectors? Now, there a hard problem.
I have a home server/workstation with 4 gigs of memory (max supported by chipset). I'm already tight on memory (imap, squid [huge], some crappy java chat server that eats 450+ megs, http, ssh, X desktop + apps, firefox (enuff said)).
My/tmp is 30 gigs. Disk is cheap. Super cheap. If I'm untaring some achieve, I don't want no "disk is full" crap.
> 8: A special hard disk just for/tmp. If one thinks about it, this type of HDD is absolutely perfect for the/tmp filesystem in the classic sense of it being zeroed out on reboot.
You can do this with FreeBSD. Both/tmp and swap. It creates a random key on boot, encrypts everything with that and once it reboot, on noes! Were is the key!? That's alright, we'll just create another one with a random key.... here we go. Will work normally and transparently.
WinRar is decent, but their is better.
Compression: 7zip - has way better compression. Binary, text, etc... way smaller file size. Try it. I did a bunch of tests last year, it beats zip in every single case I threw at it (small files, large files, binary blobs, text, etc). It beat WinRar in 90% of the cases to (some were really close though)
Encrypt: True Crypt. Lots more encryption options, can use password and key. Hidden volumes, etc.
Both of these are 100% free, even at the source code level.
Last time I looked WinRar was shareware of sorts.
You can also have encrypted containers instead of encrypted containers with true crypt. They heard you liked encryption, so they put encryption in your encryption so you can encrypt while your encrypting.
From the handbook it suggests you drop down to single user mode (see #4): http://www.freebsd.org/doc/handbook/makeworld.html
pfft, I usually skip that step and just shutdown anything important (dbs, mail, www, etc); but could get all wacky.
Anyways, now days you can get IPMI on a lot of servers/motherboards. I like SuperMico, nice solid boards and IPMI that works "good enough". HP also has nice ilo cards (but more costly to get an HP server).
Slashdot Mirror
wow, you seem like a grade a jerk.
It's an new generation Atom, dual gig nics, 4 HDDs and a SSD. It uses 23 Watts at 100% load (CPU and IO cranking away).
Great! Show me a 10 year old Linux distro that does that?
Hell, show me a 10 year old Linux distro that has support for modern sound cards.
Couldn't you set it up so if web cam detected motion then use X10 to say, turn on some lights, TV and maybe play a dog barking on your stereo?
A theif is going to be jump as it is. If weird stuff starts happening and/or he think someone is home, it might be enough to spook him.
> Or that you'll accidentally shoot a family member coming in late at night?
That's sure as heck what I do. I load up on whiskey with my shotgun in my lap. If I hear even the smallest sound I start blazing off shots in the dark in all directions.
> There is nothing in this about video-ing the perps.
I disagree. That's there to mitigate the damage.
They break in and steal shit. Ok. But you have video tapes and can clearly identify them. Great, the police might chance them and you might get your stuff back.
Getting your stuff back from police might be preferred over getting an insurance claim
A few things I can think off hand: Computers that don't have proper back ups. Your wife's gold necklace (that also happened to be passed down for 5 generations). Your cat or other things that have sentimental value.
I have a watch from my grandpa. It's probably worth $50 at most in an insurance claim. It's worth a lot more to me though.
That $100 thing from Phillips isn't rock solid either. It's not like it has redundant power sources, redundant transmitters, etc... At best they probably have a battery back up. Most any consumer grade equipment won't be.
Secondly that's not even the point. It's not like you leave your kid in a far away location in life threatening situations for long periods of time while maintaining radio silence and amuse everything is correct unless you hear a mayday call.
Third, just because you "build" a monitor yourself, doesn't mean you have to design every single piece of hardware from scratch. I setup one, it's a very simple solution. We have web cam + mic + speakers in room and then have a net book with mic/speakers and screen.
You can see everything going on clearly. There is also two way communication, my spouse can talk to little bobby while she's cooking dinner. If there is ever any question what so ever about if the device is reliability communicating, we would check up in person. In fact, one time the wifi went out, my spouse yelled up "Bobby come play in the kitchen till dinner is ready". Problem solved.
This setup actually work betters than ever monitor we looked at. She can glance over and see what he's doing. Voice-only doesn't work if he's unconscious or otherwise unable to communicate.
> Actually, we found that s "Beware of the bees" sign (with a couple of hives in the back yard) had a much higher deterrent value than a "Beware of the dog." sign. How exactly did you determine deterrent value?
Are these people getting robbed enough on a regular bases that you could actually perform tests to see which sign deterrents more thieves?
If something isn't working out for you, use excessive amount of violence and XML. Not only is that how I develop all my apps, that's also how I manage my relationships and everything else. Including baby sitting and camping.
If you are in a situation were someone is willing to pop out your ram after shutdown to "read your secrets"; then you're going to need a very custom setup for your security needs and not just buying drives from toshiba.
/tmp and swap setup this way. It creates a key at boot, creates an encrypted volume with that key and then mounts/swaps it as normal. When the system is powered down, the key is no longer anywhere. Well, it's in ram if you can sneak it out in under 10 minutes. But effectively the data isn't available any more.
/tmp up with complete crap before shutdown either, umount it an d/dev/rand your tmp partition, etc. Lastly, I bet you could "zero out" a large chunk of the ram at shutdown by just allocating a lot of chunks from /dev/rand. You couldn't get 100% of it, but you could get whatever the OS and your program isn't using.
Secondly, freebsd has encrypted temporary file systems. I have both my
You can also zero out swap at shutdown if you are really paranoid. Nothing says you couldn't also fill
On boot, if it realizes it doesn't have a key; then just write random data to as many random sectors as you can in say 1-5 seconds.
Breaking AES256. That's kind of tricky.
Breaking AES256 when your container is corrupted and can't tell the difference between good and bad sectors? Now, there a hard problem.
I have a home server/workstation with 4 gigs of memory (max supported by chipset). I'm already tight on memory (imap, squid [huge], some crappy java chat server that eats 450+ megs, http, ssh, X desktop + apps, firefox (enuff said)).
My /tmp is 30 gigs. Disk is cheap. Super cheap. If I'm untaring some achieve, I don't want no "disk is full" crap.
> 8: A special hard disk just for /tmp. If one thinks about it, this type of HDD is absolutely perfect for the /tmp filesystem in the classic sense of it being zeroed out on reboot.
You can do this with FreeBSD. Both /tmp and swap. It creates a random key on boot, encrypts everything with that and once it reboot, on noes! Were is the key!? That's alright, we'll just create another one with a random key.... here we go. Will work normally and transparently.
Print out a 100 random numbers. Ask them were in PI this number is located.
WinRar is decent, but their is better. Compression: 7zip - has way better compression. Binary, text, etc... way smaller file size. Try it. I did a bunch of tests last year, it beats zip in every single case I threw at it (small files, large files, binary blobs, text, etc). It beat WinRar in 90% of the cases to (some were really close though) Encrypt: True Crypt. Lots more encryption options, can use password and key. Hidden volumes, etc. Both of these are 100% free, even at the source code level. Last time I looked WinRar was shareware of sorts.
You can also have encrypted containers instead of encrypted containers with true crypt. They heard you liked encryption, so they put encryption in your encryption so you can encrypt while your encrypting.
From the handbook it suggests you drop down to single user mode (see #4): http://www.freebsd.org/doc/handbook/makeworld.html pfft, I usually skip that step and just shutdown anything important (dbs, mail, www, etc); but could get all wacky. Anyways, now days you can get IPMI on a lot of servers/motherboards. I like SuperMico, nice solid boards and IPMI that works "good enough". HP also has nice ilo cards (but more costly to get an HP server).
pfft, just cut any extra cables off.
If you are in middle of no where don't get you tons of long distance charges racked up on your hotel bill?