If you aren't a UK citizen or EU citizen with a special (practically free) card, then you technically attract a cost at end of any medical care you receive
Only for follow-up treatment after an emergency, or other non-urgent treatment. Emergency treatment and care is always free. And GP visits are free to anyone legally in the UK on a long term basis ("ordinarily resident" is the legal term, which in tax law means in the country for more than 6 months of the year, so the definition for NHS should be something similar, but their guidelines are more vague).
So yeah. Enough for one person on the flight to stream an HD movie from Netflix.
As long as netflix is using UTP for streaming (IIRC, it does)
I'm not sure how torrent based streaming would help when passengers are watching different movies at different times. But Netflix uses MPEG-DASH over HTTPS anyway.
I'm guessing that's fast enough for one person on the entire flight to stream Netflix. As soon as a second passenger tries it, you're both competing for the same limited bandwidth.
It seems the plate map I looked at before posting was too low resolution - it looked like the plate boundary was almost as far east as UK/Ireland, and I was looking at the little red spot (indicating activity) to the NW a little bit inside the North American plate thinking that must be Iceland.
Hawaii isn't on the Ring of Fire. It has volcanoes, and the earthquakes that come with them, but it is in the middle of the Pacific. The Ring of Fire follows plate boundaries around the outside of the Pacific - from Chile up the coast of South and North America to Alaska, around to Japan, and down to New Zealand through Micronesia and Melanesia, with a branch off through the Philippines and around to Indonesia. Hawaii is one of those isolated spots of activity mid plate that pop up in a few places (Iceland is another).
Your card details can be read while the card is in your wallet and in your pocket.
When I've used my card online, the details available via unauthenticated RFID or by taking a snapshot or imprint of the front of the card (its the same details) are only sufficient to complete a purchase when I deal with US vendors. Everywhere else, I need 2FA or at least the 3 digits from the back of the card to finish the transaction.
Chip and signature in the USA was designed to combat card skimming and cloning of mag stripes
Adding a chip has absolutely no effect on card skimming. The only way to combat that is to remove the mag-stripe, but for backwards compatibility, I'm not aware of anywhere in the world that has done that yet.
Once your mag-stripe data is captured, someone somewhere else in the world (where the backwards compatibility will kick in automatically, because the card is foreign and can't be expected to keep up with local standards) will clone the data onto a magstripe only card, and use it to withdraw money at an ATM.
I saw it for the first time about a month ago, but it didn't actually work when I tried it. I suspect someone forgot to adjust the pre-auth amount to be under the limit for NFC transactions.
None of these is about messing with the brakes. The first three are about being able to operate convenience features like remote unlock and remote start by connecting directly to the car's modem (ie, all the authentication in these systems is server side). The 4th one says that - shock horror - you can update the software in your entertainment system from a USB stick. And the last one is about a bug in the app for Hyundais that let hackers steal your password so they can use the app themselves.
So far it seems that way - Chrysler, Tesla and Tesla. German cars have had firewalled CAN since forever, and Japanese are too conservative to add remote control "features" to their cars before all the quality issues are ironed out. I guess the Koreans and Chinese are probably carrying a similar risk as the US in terms of adding new features based on the latest "cloud" trends without thinking them through.
Did you read the study, or the Snopes article about it? It is basically a meta study (no actual research was done) that makes the bold claim that other studies are wrong because they are part of a Soviet conspiracy to make America look bad. Really, the alarm bells should have been ringing when the Daily Caller was the only publication referencing it, but some people would rather accept their dear leader's proclamations about what is fake news than actually engage their own brain into doing some critical thinking of their own.
Any tips for safely checking the version of npm installed? If npm --help screws things up, I expect npm --version probably isn't a good idea either. I guess something like strings $(which npm) | grep 5\.7 would be the best way to check if I'm compromised?
You are conflating the latest version, which is generally unstable and full of potential zero days, with security patches, which distributions do a good job of backporting to the stable versions they are shipping when the ADHD developers of the upstream are too lazy to maintain anything other than git HEAD.
About the only useful "control" missing from my automatic transmission compared with a manual is that the automatic will not let you start off in 2nd. But traction control takes care of situations where that was necessary. If you only use P-R-D, you might also miss engine braking, but the 7 manual steps give me much more control over engine braking than I ever had in a manual car. If you including breaking the camshaft or blowing a cylinder by using the wrong gear, then I guess that control is also missing from a modern automatic, but its not something I would consider useful.
Sure, its easily replicated, but the data has your photo, among other things which are easily verified by the border agent against the person standing in front of them. So replicating it isn't all that useful if you are trying to produce a passport that someone not authorized to have that passport can use. You need to modify the data on it, which breaks the digital signature. Only if border security is not properly verifying the signatures does this become useful for nefarious purposes.
The encryption is published in an ISO standard, so "cracking" it is the domain of snakeoil salesmen. The issue here is not the encryption, it is the digital signatures, and I can assure you that other countries are not as incompetent as the US's Homeland Security in this respect.
That's not a security hole, it is published in the ISO standard that the passports are based on. The data that you get access to by using the key derived from info from the details page is the same info that is on the details page. If you can see the details page to get the key, you can see all that info anyway (except in my case they printed the photo on my passport in black and white, but have the color version on the chip). To verify that information is not forged, it is signed by a certificate of the government that produces it, and it is this that the US system is apparently failing to verify, and this is not something you can forge simply by knowing how to derive the symmetric encryption key that hides your data from people scanning your closed passport as you walk past in the airport.
Slashdot Mirror
If you aren't a UK citizen or EU citizen with a special (practically free) card, then you technically attract a cost at end of any medical care you receive
Only for follow-up treatment after an emergency, or other non-urgent treatment. Emergency treatment and care is always free. And GP visits are free to anyone legally in the UK on a long term basis ("ordinarily resident" is the legal term, which in tax law means in the country for more than 6 months of the year, so the definition for NHS should be something similar, but their guidelines are more vague).
One of Cimon’s greatest exploits was his destruction of a Persian fleet and army at the Battle of the Eurymedon river in 466 BC.
Is this really the android we want to be sharing the confined space of a space station with.
25 Mbps is easily achievable with satellite
So yeah. Enough for one person on the flight to stream an HD movie from Netflix.
As long as netflix is using UTP for streaming (IIRC, it does)
I'm not sure how torrent based streaming would help when passengers are watching different movies at different times. But Netflix uses MPEG-DASH over HTTPS anyway.
I'm guessing that's fast enough for one person on the entire flight to stream Netflix. As soon as a second passenger tries it, you're both competing for the same limited bandwidth.
It also helps accuracy if the satellites you can see are spread out, which is not the case even quite near to the tiny window of your plane.
Is there any way to help them?
You could join their false flag army of "Russian" Twitter and Facebook trolls.
It seems the plate map I looked at before posting was too low resolution - it looked like the plate boundary was almost as far east as UK/Ireland, and I was looking at the little red spot (indicating activity) to the NW a little bit inside the North American plate thinking that must be Iceland.
Hawaii isn't on the Ring of Fire. It has volcanoes, and the earthquakes that come with them, but it is in the middle of the Pacific. The Ring of Fire follows plate boundaries around the outside of the Pacific - from Chile up the coast of South and North America to Alaska, around to Japan, and down to New Zealand through Micronesia and Melanesia, with a branch off through the Philippines and around to Indonesia. Hawaii is one of those isolated spots of activity mid plate that pop up in a few places (Iceland is another).
A magnet does the job, no need to buy overpriced "nano technology" stickers to act as electromagnetic shields.
Your card details can be read while the card is in your wallet and in your pocket.
When I've used my card online, the details available via unauthenticated RFID or by taking a snapshot or imprint of the front of the card (its the same details) are only sufficient to complete a purchase when I deal with US vendors. Everywhere else, I need 2FA or at least the 3 digits from the back of the card to finish the transaction.
Chip and signature in the USA was designed to combat card skimming and cloning of mag stripes
Adding a chip has absolutely no effect on card skimming. The only way to combat that is to remove the mag-stripe, but for backwards compatibility, I'm not aware of anywhere in the world that has done that yet.
Once your mag-stripe data is captured, someone somewhere else in the world (where the backwards compatibility will kick in automatically, because the card is foreign and can't be expected to keep up with local standards) will clone the data onto a magstripe only card, and use it to withdraw money at an ATM.
I saw it for the first time about a month ago, but it didn't actually work when I tried it. I suspect someone forgot to adjust the pre-auth amount to be under the limit for NFC transactions.
None of these is about messing with the brakes. The first three are about being able to operate convenience features like remote unlock and remote start by connecting directly to the car's modem (ie, all the authentication in these systems is server side). The 4th one says that - shock horror - you can update the software in your entertainment system from a USB stick. And the last one is about a bug in the app for Hyundais that let hackers steal your password so they can use the app themselves.
The card number is not read from the cards mag stripe.
How do you control the skimming device to ensure that?
So far it seems that way - Chrysler, Tesla and Tesla. German cars have had firewalled CAN since forever, and Japanese are too conservative to add remote control "features" to their cars before all the quality issues are ironed out. I guess the Koreans and Chinese are probably carrying a similar risk as the US in terms of adding new features based on the latest "cloud" trends without thinking them through.
Did you read the study, or the Snopes article about it? It is basically a meta study (no actual research was done) that makes the bold claim that other studies are wrong because they are part of a Soviet conspiracy to make America look bad. Really, the alarm bells should have been ringing when the Daily Caller was the only publication referencing it, but some people would rather accept their dear leader's proclamations about what is fake news than actually engage their own brain into doing some critical thinking of their own.
Any tips for safely checking the version of npm installed? If npm --help screws things up, I expect npm --version probably isn't a good idea either. I guess something like strings $(which npm) | grep 5\.7 would be the best way to check if I'm compromised?
You are conflating the latest version, which is generally unstable and full of potential zero days, with security patches, which distributions do a good job of backporting to the stable versions they are shipping when the ADHD developers of the upstream are too lazy to maintain anything other than git HEAD.
And you wonder why the rest of the world doesn't buy American made cars...
About the only useful "control" missing from my automatic transmission compared with a manual is that the automatic will not let you start off in 2nd. But traction control takes care of situations where that was necessary. If you only use P-R-D, you might also miss engine braking, but the 7 manual steps give me much more control over engine braking than I ever had in a manual car. If you including breaking the camshaft or blowing a cylinder by using the wrong gear, then I guess that control is also missing from a modern automatic, but its not something I would consider useful.
If you're paranoid enough, breathing is a security risk.
Sure, its easily replicated, but the data has your photo, among other things which are easily verified by the border agent against the person standing in front of them. So replicating it isn't all that useful if you are trying to produce a passport that someone not authorized to have that passport can use. You need to modify the data on it, which breaks the digital signature. Only if border security is not properly verifying the signatures does this become useful for nefarious purposes.
The encryption is published in an ISO standard, so "cracking" it is the domain of snakeoil salesmen. The issue here is not the encryption, it is the digital signatures, and I can assure you that other countries are not as incompetent as the US's Homeland Security in this respect.
That's not a security hole, it is published in the ISO standard that the passports are based on. The data that you get access to by using the key derived from info from the details page is the same info that is on the details page. If you can see the details page to get the key, you can see all that info anyway (except in my case they printed the photo on my passport in black and white, but have the color version on the chip). To verify that information is not forged, it is signed by a certificate of the government that produces it, and it is this that the US system is apparently failing to verify, and this is not something you can forge simply by knowing how to derive the symmetric encryption key that hides your data from people scanning your closed passport as you walk past in the airport.
Meanwhile, I have a free app on my phone that is able to verify the signatures on any ICAO compliant NFC passport or identity card.