I wonder if anyone has tried making a 'spy-resistant' ribbon, where the used ribbon isn't just spooled but first run through a roller or series of rollers to erase any trace of imprints - perhaps by overlaying lots of obscuring lines and letters.
F00F still needed the attacker to be able to execute code. It simply allowed any userspace process to cause a system crash, ignoring permissions. It'd be easy to build in an escalation backdoor - just needs an instruction that bypasses the user/kernal space distinction, keyed to only work if some registers contain a specific value to prevent detection. But that depends upon being able to run code, while my idea of a memory trigger works even if you can't execute anything legitimately.
It breaks things, but in ways you can fix by just changing the SE ACLs. That's the idea - it provides very granular control over permissions, even for processes that run as root.
For low-security applications though, it's usually easier to just disable SELINUX than it would be to configure it correctly.
You'd need a cover that looks suspicious enough to explain why you might be taking efforts to hide it, and has enough sheer volume and complexity to make analysis difficult.
Piracy is ideal. The best cover for a serious crime is a lesser crime - that way when the investigators ask why you were acting like you had something to hide, you can explain why.
The good news is that for linux, this can, in theory, be audited.
For Windows...no. Not a hope. None. At all. Likewise OSX.
Which means that any and every government that might possibly have any future dispute with the US is, right now, going over all their Windows servers and desktops in the military. diplomatic and intelligence services to see how much they can replace.
It'll take months just to write up the reports, and months more to run through the political commitees, and even then it'll be very undiplomatic to openly admit the reason for the switch - but in a year or so, I think we are going to see a lot of governments decide that linux is more 'cost effective' in sensitive roles.
I'm sure they go beyond that. I'm picturing full-length PCI cards with thirty-two cores each, packed sixteen to a 2U box, and a warehouse full of them. All running at 3GHz. Crypto-cracking needs crazy amounts of processing power, but very little network communications. If you wanted to, you could network them all on 10baseT.
And a watercooling system - because the smaller the facility is from the outside, the less any potential opponents will estimate your capabilities to be. Plus it'd be cheaper than trying to air-cool something like that, even on hot/cold aisles.
Backdooring a CPU wouldn't actually be that difficult. You'd need it to recognise a specific command sequence (128-bits long should do it) when reading memory to trigger the backdoor - that way you could activate it by sending a network packet, or reading external media, or routing traffic. And all the backdoor needs to do is run a simple 'set instruction pointer to immediately after this trigger.' It'd be impossible to defend against short of using an un-backdoored CPU to filter the trigger out, and even then it could be snuck through in an SSL session or a fragmented packet.
And best of all, it would *never* be detected. The schematics for a CPU are practically impossible to reverse-engineer from the masks, and both schematics and masks are strictly internal company property. Plus the number of people who could understand them in enough detail to spot a backdoor without years of specialist study could probably fit in one conference hall.
Thus the reason the trial drew such attention. Zimmerman was rather blatantly profileing: He saw a young black man in a hoodie who he didn't recognise, and decided that this walking gangsta stereotype had to be up do no good somehow - based purely on appearance. So he called it in to the police and then went up to confront Trayvon. In this case, he may well have been right - but he still picked a fight based on a racial stereotype.
The IQ test is supposed to be a composite metric of many different forms of intelligence, just to provide a single convenient number for use in comparisons. It's a statistical tool.
Low income means high crime, correlatively speaking. Race and income are strongly related.
Racial equality and non-discrimination are a recent thing, socially. A few decades. Schools in the US were only desegregated in the 50's. There are a lot of lingering statistical and cultural effects. Even if everything goes smoothly it'll take generations of mixing to eliminate the cultural divisions and economic correlations.
There have been a couple of incidents of people getting prosecuted for doing that in the US (Your country may vary). The discarded goods are legally the property of either the city, or whichever company the city contracted for waste disposal. The owners can still get upset and take legal action if people 'steal' any items that could have scrap value. Air conditioners especially.
Events are disputed. Trayvon certainly fought back - gave Zimmerman some nasty head wounds - but it isn't clear who actually started the fight. No witnesses, no good forensics, so it's just Zimmerman's rather biased word.
The concern isn't with them introducing weaknesses into the mathematical descriptions, but implementations. It's possible for an expert to find a deliberate weakness in an algorithm - it's much harder when the weakness is buried deep in the silicon somewhere, or a few bytes of machine code in an obstrucated binary. It's not only possible but likely that they have pressured some US software and hardware vendors to introduce such weaknesses. It wouldn't be that hard to, for example, sneak a deliberately weak RNG into a VPN appliance or web browser.
9. Excess chromosome, child will require extensive care for most of their life and is unlikely to reach independence. 10. Child will be healthy until around the age of fourty, then rapidly lose mental faculties and be reduced to continually asking why their dead wife doesn't come to visit the care home. 11. Child has no immune system, and will require constant hospital care for the few years they survive. 12. Cystic fibrosis. Survival to adulthood is possible, but not without constant and very expensive medication and care that would bankrupt most families.
The nazis gave eugenics an image problem. That doesn't mean it's always a bad idea.
Person flies personal drone over another's property, intentionally or accidentally. Property owner shoots it down. Shooter puts drone guts go on ebay - even as spare parts, they would be worth quite a bit. Original drone owner claims theft.
That also only works if you have the hardware yourself. Only large organisations host things like external websites in their own building - most just pay for hosting, or colocate a server. In which case a government agency can easily turn up with a warrant and a gag order. If you've done something to draw attention of the NSA, I'm sure their experts have devised something like a device that can be hotplugged into a PCI(-e) slot and use DMA to dump the contents of RAM, then spoof comments to the storage controller to get the hard drive contents too without needing to disrupt operations.
It says 'a well-regulated militia.' At most, it could be seen as making sure states have a local army sufficient to defend against any oppressive actions by the federal government - but it certainly isn't there to allow citizens or self-appointed groups of citizens to declare revolution if they feel oppressed.
There are two good reasons: - Cultural tensions. Things the US holds sacred are widely considered unspeakable evils there, and vice versa. In most of the middle easy homosexuality is a capital offense, in parts of the US gay marriage is legal. Free speech vs legal punishments for blasphemy, gender equality vs the ambulatory tents. Even if there were no political considerations, much of the middle east would consider the US to be a pit of sin and evil, a black stain on the morality of mankind - just as the people of the US would consider most of the middle east a collection of oppressive theocracies where all religious dissent is violently opposed and women are considered less than human. - Politically, the middle east has not fared well with the west in general. First there were religious conflicts, then meddling colonials, then proxy wars. Every time western powered have been involved it's been to either invade, exploit or fight someone else by proxy. Unsurprisingly, this has lead to very poor relations. From the perspective of the common person in somewhere like Iraq or Iran, the main role of the US has been to step in and hand resources to one oppressor or another in order to oppose another oppressor. Even Israel, though a great deal better than just about anyone else in the region (Including Egypt), has its share of bulldozed settlements.
Slashdot Mirror
I wonder if anyone has tried making a 'spy-resistant' ribbon, where the used ribbon isn't just spooled but first run through a roller or series of rollers to erase any trace of imprints - perhaps by overlaying lots of obscuring lines and letters.
F00F still needed the attacker to be able to execute code. It simply allowed any userspace process to cause a system crash, ignoring permissions. It'd be easy to build in an escalation backdoor - just needs an instruction that bypasses the user/kernal space distinction, keyed to only work if some registers contain a specific value to prevent detection. But that depends upon being able to run code, while my idea of a memory trigger works even if you can't execute anything legitimately.
It breaks things, but in ways you can fix by just changing the SE ACLs. That's the idea - it provides very granular control over permissions, even for processes that run as root.
For low-security applications though, it's usually easier to just disable SELINUX than it would be to configure it correctly.
You'd need a cover that looks suspicious enough to explain why you might be taking efforts to hide it, and has enough sheer volume and complexity to make analysis difficult.
Piracy is ideal. The best cover for a serious crime is a lesser crime - that way when the investigators ask why you were acting like you had something to hide, you can explain why.
The good news is that for linux, this can, in theory, be audited.
For Windows...no. Not a hope. None. At all. Likewise OSX.
Which means that any and every government that might possibly have any future dispute with the US is, right now, going over all their Windows servers and desktops in the military. diplomatic and intelligence services to see how much they can replace.
It'll take months just to write up the reports, and months more to run through the political commitees, and even then it'll be very undiplomatic to openly admit the reason for the switch - but in a year or so, I think we are going to see a lot of governments decide that linux is more 'cost effective' in sensitive roles.
I'm sure they go beyond that. I'm picturing full-length PCI cards with thirty-two cores each, packed sixteen to a 2U box, and a warehouse full of them. All running at 3GHz. Crypto-cracking needs crazy amounts of processing power, but very little network communications. If you wanted to, you could network them all on 10baseT.
And a watercooling system - because the smaller the facility is from the outside, the less any potential opponents will estimate your capabilities to be. Plus it'd be cheaper than trying to air-cool something like that, even on hot/cold aisles.
Backdooring a CPU wouldn't actually be that difficult. You'd need it to recognise a specific command sequence (128-bits long should do it) when reading memory to trigger the backdoor - that way you could activate it by sending a network packet, or reading external media, or routing traffic. And all the backdoor needs to do is run a simple 'set instruction pointer to immediately after this trigger.' It'd be impossible to defend against short of using an un-backdoored CPU to filter the trigger out, and even then it could be snuck through in an SSL session or a fragmented packet.
And best of all, it would *never* be detected. The schematics for a CPU are practically impossible to reverse-engineer from the masks, and both schematics and masks are strictly internal company property. Plus the number of people who could understand them in enough detail to spot a backdoor without years of specialist study could probably fit in one conference hall.
Thus the reason the trial drew such attention. Zimmerman was rather blatantly profileing: He saw a young black man in a hoodie who he didn't recognise, and decided that this walking gangsta stereotype had to be up do no good somehow - based purely on appearance. So he called it in to the police and then went up to confront Trayvon. In this case, he may well have been right - but he still picked a fight based on a racial stereotype.
The IQ test is supposed to be a composite metric of many different forms of intelligence, just to provide a single convenient number for use in comparisons. It's a statistical tool.
This is literally true: So long as we retain the Falklands, the empire spans enough time zones that it is always daytime somewhere.
Correlation with a third value: Income.
Low income means high crime, correlatively speaking.
Race and income are strongly related.
Racial equality and non-discrimination are a recent thing, socially. A few decades. Schools in the US were only desegregated in the 50's. There are a lot of lingering statistical and cultural effects. Even if everything goes smoothly it'll take generations of mixing to eliminate the cultural divisions and economic correlations.
There have been a couple of incidents of people getting prosecuted for doing that in the US (Your country may vary). The discarded goods are legally the property of either the city, or whichever company the city contracted for waste disposal. The owners can still get upset and take legal action if people 'steal' any items that could have scrap value. Air conditioners especially.
Events are disputed. Trayvon certainly fought back - gave Zimmerman some nasty head wounds - but it isn't clear who actually started the fight. No witnesses, no good forensics, so it's just Zimmerman's rather biased word.
The concern isn't with them introducing weaknesses into the mathematical descriptions, but implementations. It's possible for an expert to find a deliberate weakness in an algorithm - it's much harder when the weakness is buried deep in the silicon somewhere, or a few bytes of machine code in an obstrucated binary. It's not only possible but likely that they have pressured some US software and hardware vendors to introduce such weaknesses. It wouldn't be that hard to, for example, sneak a deliberately weak RNG into a VPN appliance or web browser.
The NSA is an agency out of control. To lie to the people is expected of an intelligence agency - to lie to Congress is another matter entirely.
Insurance only works because the company's predictive model is imperfect. The better their model gets, the less useful it is to the customers.
9. Excess chromosome, child will require extensive care for most of their life and is unlikely to reach independence.
10. Child will be healthy until around the age of fourty, then rapidly lose mental faculties and be reduced to continually asking why their dead wife doesn't come to visit the care home.
11. Child has no immune system, and will require constant hospital care for the few years they survive.
12. Cystic fibrosis. Survival to adulthood is possible, but not without constant and very expensive medication and care that would bankrupt most families.
The nazis gave eugenics an image problem. That doesn't mean it's always a bad idea.
To late - someone above got one in at 10:03, more than an hour before you.
This is going to come up some day.
Person flies personal drone over another's property, intentionally or accidentally.
Property owner shoots it down.
Shooter puts drone guts go on ebay - even as spare parts, they would be worth quite a bit.
Original drone owner claims theft.
That Joe isn't very average.
This is what the average Joe sees:
'The internet has a little picture of a padlock in the corner. That means I can put my credit card number in.'
That also only works if you have the hardware yourself. Only large organisations host things like external websites in their own building - most just pay for hosting, or colocate a server. In which case a government agency can easily turn up with a warrant and a gag order. If you've done something to draw attention of the NSA, I'm sure their experts have devised something like a device that can be hotplugged into a PCI(-e) slot and use DMA to dump the contents of RAM, then spoof comments to the storage controller to get the hard drive contents too without needing to disrupt operations.
But that isn't what it says.
It says 'a well-regulated militia.' At most, it could be seen as making sure states have a local army sufficient to defend against any oppressive actions by the federal government - but it certainly isn't there to allow citizens or self-appointed groups of citizens to declare revolution if they feel oppressed.
They at least have the decency not to admit it in public, though. You need to look at the for-right-wing, by-right-wing introverted places to find it.
There are two good reasons:
- Cultural tensions. Things the US holds sacred are widely considered unspeakable evils there, and vice versa. In most of the middle easy homosexuality is a capital offense, in parts of the US gay marriage is legal. Free speech vs legal punishments for blasphemy, gender equality vs the ambulatory tents. Even if there were no political considerations, much of the middle east would consider the US to be a pit of sin and evil, a black stain on the morality of mankind - just as the people of the US would consider most of the middle east a collection of oppressive theocracies where all religious dissent is violently opposed and women are considered less than human.
- Politically, the middle east has not fared well with the west in general. First there were religious conflicts, then meddling colonials, then proxy wars. Every time western powered have been involved it's been to either invade, exploit or fight someone else by proxy. Unsurprisingly, this has lead to very poor relations. From the perspective of the common person in somewhere like Iraq or Iran, the main role of the US has been to step in and hand resources to one oppressor or another in order to oppose another oppressor. Even Israel, though a great deal better than just about anyone else in the region (Including Egypt), has its share of bulldozed settlements.
In accordance with the libertarian paradise, you can always pay some thugs of your own to serve as bodyguards.