happened. NXOS is the Cisco datacenter OS that is *already* based on a Linux kernel. Geez, Cisco's ASA appliances made the move from iOS to Linux years ago. Your next network operating system = your existing network operating system. Wake up/Redundancy/Get a life/I pity you because you've wasted everyone's time.
For employers, or even police: you could easily detect emotional flushes in someone's face when asked certain questions, i.e., a lie detector of sorts. Also, think poker players with this software built into their "Google Glasses".
Hey guys - lets just combine the "good" with the "bad" and they'll neutralize each other! All in favor of "Genetically Modified Organic" say aye! Or wait a sec - is that what GMO already stands for?? I am confused.
Perhaps, but crappy evidence is evidence of crap, IMHO. Take a look at the dude's screen shots. Any power company using such poorly put together screens, with no interesting status info, no proper overview screen with worthwhile data, isn't really a power company, but some kiddies dream.
ATTN: Systems Integrators. Guys, we can’t ignore this one. Stuxnet has taught the whole world what can be done. So it is now orders of magnitude more likely that an attacker could develop a modified version of it or design something similar to it in nature with the potential of doing much more damage than Stuxnet actually caused.
Here’s a worst-case scenario: We’re now in a situation (unlikely, but potential) where an American systems integrator could connect his laptop to a plant in India, pick up something like this, and then bring it back to our in-house systems, where it would then spread to every system they ship. The control systems then start failing, accidents occur, etc.
I don’t think Systems Integrators are at risk to this particular threat (the original Stuxnet) for the following reasons:
The antivirus vendors are all over this one. Its probably in every signature scanner, and its behavioral tricks are probably being watched by all of the behavior-based malware products.
Microsoft issued a fix for the Windows exploit Stuxnet uses in early August (or sooner). So if you’ve done Windows Update since then you’re protected regardless of antivirus status.
The quick policy change I think we need to make is this: 1. Control systems products and Internet surfing must be 100% separated. So if you run Step7 or RSLogix on your native boot laptop, then you need to surf inside a VM. OR, If you surf on your main machine, all your controls programs must run inside VMs. 2. Develop a good firewall procedure for when we connect laptops to foreign plant networks (especially International). We need to block the laptop from accepting inbound IP traffic from any addresses other than the ones in our own panel. This won’t be a big deal to implement and maintain as we travel to different networks. 3. Keep all hosts and VM’s current on Critical updates from Microsoft. 4. Keep current updates on whichever antivirus or antimalware program you’re using. I actually think we’re safer overall if we keep a mix of security products in use (different ones on different machines) rather than picking one single vendor’s solution, because we’re more likely to learn we’ve been infected, even if its just 1 of the products we’re using that detected it. Then we can use appropriate measures to remove it from any systems that didn’t detect it. Is this good enough for now? Too extreme? Other ideas?
I think the issue is that at some point one of your internal network computers will need to communicate to a server that's out on the Internet - and that server will resolve to an IPv6 address. So how does a PC with no IPv6 stack attempt to communicate with such an address outside your NAT'd IPv4->IPv6 firewall? Perhaps if the NAT on the router is sophisticated enough it could translate the DNS lookup to some fake IPv4 address and then your internal network computers wouldn't know the difference, but that seems like a stretch. In the end, the easiest way to NAT IPv6 is probably going to be with full blown end-to-end IPv6.
I'm using a backup scenario which uses swapping out mirrors (RAID 1) in combination with Windows Volume Shadow Copy services. Twice per day my system (Server 2003 or Server 2008) takes a Volume Shadow snapshot (VSS?), which is how you get that "oops" protection - its similar to having an always available, instant restore tape library built right into the filesystem (BTW, Novell had this feature 10 or more years before Microsoft, but I digress). You just need to make sure you have plenty of free space on the drive to accommodate the snapshots, but the algorithm is very efficient since it only grows when files have changed. Then, once per week, for the off-site disaster protection, I swap the external eSATA software mirror drive out, remove the broken mirror under disk manager, import the foreign disk from last week and recreate the mirror. Bingo - just a single drive to keep up with. I have a hot on-site mirror and an offsite mirror no more than a week old. Its quick and convenient and performance is excellent (and cost is minimal since the features are built-in to Windows)
I'm not sure if there's an equivalent to Volume Shadow Copies under Linux, but the software mirroring is there and works quite well.
Whoa, hold the boat. I've had a lot of experience with Dell & HP/Compaq(Proliant) provided RAID systems and they are not sensitive to disks with vastly different innards. All that matters is block count and software mirroring doesn't even care about that, because you'll simply be limited to the size of the smaller disk. If you're using mirroring or RAID, try to go with different makes of the same size. This article talks about MTBF. It turns out if 2 drives of the same exact model comes off the line and end up in your PC, there is a chance they could fail within a very close time to one another. So your mirror or RAID could fail permanently while rebuilding from the first failure. But if all your drives are of a different make, chances are they won't fail at the same time and you'll get the critical time needed to rebuild your array.
When I'm going to do mirroring or RAID on hardware that doesn't have high-end dedicated server RAID controller, I use Windows or Linux software RAID. Performance is surprisingly good and I'm not married to a specific hardware implementation. I've had _none_ of the issues you've described with Linux software RAID on several servers for several years. Mdadm has only whined after a power outage or genuine disk failure.
My best corporate experience with management was when another fellow (slightly junior to me) was hired as we grew our city's office. This was back during the Internet bubble (1999-2002) when our startup was hiring 3 to 8 people per month. Our city's office had the smallest IT team in the organization, yet we were consistently more productive - even bringing up services and solutions for other offices. We just cut through all the BS. I didn't worry about asserting my "power" over him - we just fell into a knack where we would brainstorm together. I was good at technical implementation & problem solving, while he was great at organization. We'd run through a plan, go over the dependencies, get cost justification, sell it to the CTO and then knock it out. We didn't let title or official roles hold us back and we had lots of fun. Our users were happy and management loved us. When the company started to implode (as so many Internet bubble companies did) we were some of the last to get laid off. Incidentally, I was let go before he was. It made sense - I had a much higher salary. He may have been the last one left in our city's office.
Epicor Software has had a real live
software product called Vista for over 10 years. My guess is that Microsoft
has already paid these guys for rights to use their trademark for an OS. I have
a couple of clients (machine shops) that use it. The latest version is.NET
based, and the database server can be based on Progress or Microsoft's SQL.
The cell phone theory is a little
weak. From TFA, researchers found that "bees refuse to return to their hives
when mobile phones are placed nearby"?? How nearby? Inside the homes of honeybee
keepers? If that were the case we'd have seen the issue spring up much sooner.
Anyway, bee population scares have come up before. From
this article:
U.S. honeybee
population devastated. Experts say mites, weather killing hives Author: Matt CrensonAssociated Press Publish Date: June 23, 1996
America's honeybees are in a bad way. Already weakened by 12 years of
battling blood-sucking mites, bees have been brought to their knees by a
soggy spring on the heels of many regions' exceptionally cold winter.
Experts estimate that more than 90 percent of wild colonies have been wiped
out nationwide, along with a large number of those tended by beekeepers.
"It's devastated the population of unmanaged bees that are in hollow trees
and old...
So how did the bees make a recovery 11
years ago? Had they even recovered before this current problem? Can anyone find
a bee population trend from the past 50 years?
Another thought: could this have anything to do with the fear of Africanized
honeybees spreading into North America? Sorry for spouting conspiracy theory,
but what if the government tried to use GM to stop the killer bees and it
backfired? (same level of plausibility as the cell phone theory).
If this were a new law being passed that prohibits linking to copyrighted content I would have a problem with it - laws shouldn't try to solve problems when technical solutions are already working. But this is an interpretation of existing law, and I can kind-of see the wisdom of the ruling. A copyright holder ought to be able to control the way in which his/her work is distributed. But it is cost prohibitive to use the courts to solve copyright problems. Wouldn't it be easier to put some energy into the website to prevent anyone from deep-linking? And does this open up a can of worms for copyright owners to retroactively sue for compensation?
This article is an example of how different the digital age is compared to the old days when VHS and Betamax were competing. Today you can get a DVD player at Wal-Mart even cheaper than VHS. Digital tech gets so cheap so fast that most homes have several DVD players. There is really no "risk" to adopting Blu-Ray or HD-DVD right now. Both players will be dirt cheap in 5 years. Combos will exist. You'll want to upgrade to a $50.00 burner in a few years anyway, so why worry about the uber-expensive player you're purchasing today?
My guess is the toolbar successfully installed itself under the 32-bit version of IE. Find the shortcut for that (or go hunt down the.exe) and the toolbar should magically appear.
But wouldn't preventing hurricanes be accomplished by preventing the need for this "release valve"? Under the model you described, if we can find a way to help the energy transfer back up north then the hurricanes might be less likely to form. Yikes - but then the polar caps might melt. Maybe hurricanes are the best compromise...
The default PE Builder install ships with a plug-in called PE Loader 0.4 (unchecked by default) that disables the process and restart limitations, and it is perfectly legal.
Slashdot Mirror
happened. NXOS is the Cisco datacenter OS that is *already* based on a Linux kernel. Geez, Cisco's ASA appliances made the move from iOS to Linux years ago. Your next network operating system = your existing network operating system. Wake up/Redundancy/Get a life/I pity you because you've wasted everyone's time.
First they turn on their capitalist landowners and now they have turned on their Submarine Internet Cable! Don't you know what's good for you, Cuba?
In the Future, *all* restaurants are Taco Bell! ...finally, I got something out of seeing that crappy movie :)
For employers, or even police: you could easily detect emotional flushes in someone's face when asked certain questions, i.e., a lie detector of sorts. Also, think poker players with this software built into their "Google Glasses".
yep, you nailed it.
Hey guys - lets just combine the "good" with the "bad" and they'll neutralize each other! All in favor of "Genetically Modified Organic" say aye! Or wait a sec - is that what GMO already stands for?? I am confused.
There is science to back up the existence of your peanut allergy. There is no science to back up harm caused by GM foods - that's the point of TFA.
Absence of evidence is not evidence of absence.
Perhaps, but crappy evidence is evidence of crap, IMHO. Take a look at the dude's screen shots. Any power company using such poorly put together screens, with no interesting status info, no proper overview screen with worthwhile data, isn't really a power company, but some kiddies dream.
Allen Bradley is out there quite heavy. in fact I saw far more of it than siemens stuff.
AB is big in the US only. Siemens is by far the largest controls systems provider internationally.
ATTN: Systems Integrators.
Guys, we can’t ignore this one. Stuxnet has taught the whole world what can be done. So it is now orders of magnitude more likely that an attacker could develop a modified version of it or design something similar to it in nature with the potential of doing much more damage than Stuxnet actually caused.
Here’s a worst-case scenario:
We’re now in a situation (unlikely, but potential) where an American systems integrator could connect his laptop to a plant in India, pick up something like this, and then bring it back to our in-house systems, where it would then spread to every system they ship. The control systems then start failing, accidents occur, etc.
I don’t think Systems Integrators are at risk to this particular threat (the original Stuxnet) for the following reasons:
The antivirus vendors are all over this one. Its probably in every signature scanner, and its behavioral tricks are probably being watched by all of the behavior-based malware products.
Microsoft issued a fix for the Windows exploit Stuxnet uses in early August (or sooner). So if you’ve done Windows Update since then you’re protected regardless of antivirus status.
The quick policy change I think we need to make is this:
1. Control systems products and Internet surfing must be 100% separated. So if you run Step7 or RSLogix on your native boot laptop, then you need to surf inside a VM. OR, If you surf on your main machine, all your controls programs must run inside VMs.
2. Develop a good firewall procedure for when we connect laptops to foreign plant networks (especially International). We need to block the laptop from accepting inbound IP traffic from any addresses other than the ones in our own panel. This won’t be a big deal to implement and maintain as we travel to different networks.
3. Keep all hosts and VM’s current on Critical updates from Microsoft.
4. Keep current updates on whichever antivirus or antimalware program you’re using. I actually think we’re safer overall if we keep a mix of security products in use (different ones on different machines) rather than picking one single vendor’s solution, because we’re more likely to learn we’ve been infected, even if its just 1 of the products we’re using that detected it. Then we can use appropriate measures to remove it from any systems that didn’t detect it.
Is this good enough for now? Too extreme? Other ideas?
I think the issue is that at some point one of your internal network computers will need to communicate to a server that's out on the Internet - and that server will resolve to an IPv6 address. So how does a PC with no IPv6 stack attempt to communicate with such an address outside your NAT'd IPv4->IPv6 firewall? Perhaps if the NAT on the router is sophisticated enough it could translate the DNS lookup to some fake IPv4 address and then your internal network computers wouldn't know the difference, but that seems like a stretch. In the end, the easiest way to NAT IPv6 is probably going to be with full blown end-to-end IPv6.
I'm using a backup scenario which uses swapping out mirrors (RAID 1) in combination with Windows Volume Shadow Copy services. Twice per day my system (Server 2003 or Server 2008) takes a Volume Shadow snapshot (VSS?), which is how you get that "oops" protection - its similar to having an always available, instant restore tape library built right into the filesystem (BTW, Novell had this feature 10 or more years before Microsoft, but I digress). You just need to make sure you have plenty of free space on the drive to accommodate the snapshots, but the algorithm is very efficient since it only grows when files have changed.
Then, once per week, for the off-site disaster protection, I swap the external eSATA software mirror drive out, remove the broken mirror under disk manager, import the foreign disk from last week and recreate the mirror. Bingo - just a single drive to keep up with. I have a hot on-site mirror and an offsite mirror no more than a week old. Its quick and convenient and performance is excellent (and cost is minimal since the features are built-in to Windows)
I'm not sure if there's an equivalent to Volume Shadow Copies under Linux, but the software mirroring is there and works quite well.
Whoa, hold the boat. I've had a lot of experience with Dell & HP/Compaq(Proliant) provided RAID systems and they are not sensitive to disks with vastly different innards. All that matters is block count and software mirroring doesn't even care about that, because you'll simply be limited to the size of the smaller disk. If you're using mirroring or RAID, try to go with different makes of the same size. This article talks about MTBF. It turns out if 2 drives of the same exact model comes off the line and end up in your PC, there is a chance they could fail within a very close time to one another. So your mirror or RAID could fail permanently while rebuilding from the first failure. But if all your drives are of a different make, chances are they won't fail at the same time and you'll get the critical time needed to rebuild your array.
When I'm going to do mirroring or RAID on hardware that doesn't have high-end dedicated server RAID controller, I use Windows or Linux software RAID. Performance is surprisingly good and I'm not married to a specific hardware implementation. I've had _none_ of the issues you've described with Linux software RAID on several servers for several years. Mdadm has only whined after a power outage or genuine disk failure.
My best corporate experience with management was when another fellow (slightly junior to me) was hired as we grew our city's office. This was back during the Internet bubble (1999-2002) when our startup was hiring 3 to 8 people per month. Our city's office had the smallest IT team in the organization, yet we were consistently more productive - even bringing up services and solutions for other offices. We just cut through all the BS. I didn't worry about asserting my "power" over him - we just fell into a knack where we would brainstorm together. I was good at technical implementation & problem solving, while he was great at organization. We'd run through a plan, go over the dependencies, get cost justification, sell it to the CTO and then knock it out. We didn't let title or official roles hold us back and we had lots of fun. Our users were happy and management loved us. When the company started to implode (as so many Internet bubble companies did) we were some of the last to get laid off. Incidentally, I was let go before he was. It made sense - I had a much higher salary. He may have been the last one left in our city's office.
So our yellow sun... ...really can give Superman his powers!!!
Epicor Software has had a real live software product called Vista for over 10 years. My guess is that Microsoft has already paid these guys for rights to use their trademark for an OS. I have a couple of clients (machine shops) that use it. The latest version is .NET
based, and the database server can be based on Progress or Microsoft's SQL.
The cell phone theory is a little weak. From TFA, researchers found that "bees refuse to return to their hives when mobile phones are placed nearby"?? How nearby? Inside the homes of honeybee keepers? If that were the case we'd have seen the issue spring up much sooner.
Anyway, bee population scares have come up before. From this article:
So how did the bees make a recovery 11 years ago? Had they even recovered before this current problem? Can anyone find a bee population trend from the past 50 years?
Another thought: could this have anything to do with the fear of Africanized honeybees spreading into North America? Sorry for spouting conspiracy theory, but what if the government tried to use GM to stop the killer bees and it backfired? (same level of plausibility as the cell phone theory).
Headline poster is from Soviet Russia!
If this were a new law being passed that prohibits linking to copyrighted content I would have a problem with it - laws shouldn't try to solve problems when technical solutions are already working. But this is an interpretation of existing law, and I can kind-of see the wisdom of the ruling. A copyright holder ought to be able to control the way in which his/her work is distributed. But it is cost prohibitive to use the courts to solve copyright problems. Wouldn't it be easier to put some energy into the website to prevent anyone from deep-linking? And does this open up a can of worms for copyright owners to retroactively sue for compensation?
I thought Tux was a kernel-based http server.
This article is an example of how different the digital age is compared to the old days when VHS and Betamax were competing. Today you can get a DVD player at Wal-Mart even cheaper than VHS. Digital tech gets so cheap so fast that most homes have several DVD players. There is really no "risk" to adopting Blu-Ray or HD-DVD right now. Both players will be dirt cheap in 5 years. Combos will exist. You'll want to upgrade to a $50.00 burner in a few years anyway, so why worry about the uber-expensive player you're purchasing today?
My guess is the toolbar successfully installed itself under the 32-bit version of IE. Find the shortcut for that (or go hunt down the .exe) and the toolbar should magically appear.
But wouldn't preventing hurricanes be accomplished by preventing the need for this "release valve"? Under the model you described, if we can find a way to help the energy transfer back up north then the hurricanes might be less likely to form. Yikes - but then the polar caps might melt. Maybe hurricanes are the best compromise...
The default PE Builder install ships with a plug-in called PE Loader 0.4 (unchecked by default) that disables the process and restart limitations, and it is perfectly legal.
..to those running OSx86 on non Intel GMA900 hardware?
It don't mean a thing if it aint got Quartz Extreme
doo wop!