Take your average computer worm, add this profitable payload, and this makes the bad guys rich. How does this work? What exploit are they using to install the payload?
First she probably used WindowsXP which has dozens of unpatched vulnerabilities which will never be patched since it is EOL. XP has no concept of user priveldges outside of programs so all services run as admin for everything. Drivers too can run as hardware and it has no ASLR or ram scrambling to prevent overflow attacks or stack smashing.
Secibd flash with ads and java is how these infections get in. Websites these days have over 20 ads for each tab. Hack a not stellar non Google Ad network and put a flash ad with a buffer overflow. Boom page loads and you are 0wned.
Best AV advise today is to run Adware. Even IE has support for this now! It may screw small websites but these webmasters do not respect a users security at all PERIOD. I use Java for Android and Teamviewer so I disabled the browser plug in. I also use NortonDNS which will filter out bad domains too and it is free to setup for any pc or router.
Do these and you eliminate 90% of infections. Oh and of course I use a standard user account. I have that and an admin account which is occasionally annoying with UAC but this helps and puts in another layer of security as now the payload will need to bypass this.
Big problem is not nationalization, but a lack of infrastructure. No electricity, roads, internet, strong police presence, and educated workforce are problems. China as communist as it once was put in electricity, roads, educated workforce, police and strong government, etc.
Wrong. Jobs are created by demand. Not the other way around. Look at thr great depression as proof? With no demand due to lack of funding led to no jobs which led back to a lack of demand in a 15 year loop.
This is why web standards exist. Write to them and not to -webkit specific css sheets and you won't have that problem. Only way for a MS browser to implement is drop the legacy garbage without upsetting corporations with their ancient intranet apps.
No I am not a fan of IE nor do I think it is great. It is now well ok or meh. It works with standard code the way other browsers work.
Problem is for MS to redo their code requires breaking bugs for IE 7 and 8 in which the corporations will cry and whine. Also we can't have browser releases coming after 5 to 10 years if we expect HTML 5.1 and CSS 3.1 to take root.
There are dozens of languages that compile to the.NET CLI, including BASIC, C++, Ruby, PHP, Java, JavaScript, Python, Lisp, Pascal, Perl, Scheme, etc. C# is the most popular language to compile to the CLI, yes, but almost any other common language out there can be used too.
Yeah but really who uses them?
95% of.NET is in c#. All the VB jobs are still for legacy 5.x and 6.x code that I see. Take it back 85% c# and 10% c++. Just because it can be done COBOL doesn't mean people use it other than to see if they can write a hello world program.
I welcome it if it is more open and cheaper. 100k to start a website for unlimited licenses is freaking nuts.
But that was a few years ago.
MS is changing because they have lost and can no longer use leverage like they once did. Witness IE and visual studio where lots of free competition exists?
I welcome an alternative to java and hopes it encourages python and php to get their acts together. More competition the better for everyone
The old gray beards today might say the same with IBM or Digital but once market forces correct a monopoly the company either whithers or adapts.
Doesn't mean MS is no different than any other corporation even if that opinion is unpopular here on slashdot. Timewarner/AT&T/Comcast are far more evil and God forbid what Jobs would have in store if Apple won the Pc wars in the 1980s and achieved 90% marketshare! MS would be tame in comparison.
Under a free market people play nice or loose out.
Today I like Microsoft even though I hated them hence my name 13 years ago. Here are the facts in late 2014 1. IE is not a bad browser anymore. It used to be both feared and loathed in the old days as it was a threat to win32 applications. Today they no longer will ever have the control they did in 2004 when you needed to go to a library to use IE 6 if you used a mac or linux to fill out job apps. Yes I remember doing that. Monster.com was optimized for IE 6 quirks back then.IE 11 is modern and has great debugging tools and behaves like a real browser behaves and has the best security with sandboxing. IE 12 will even have an add-on framework ala Chrome/Firefox. I use adblock on IE today 2. Visual Studio 2015 supports Android and Linux Xiarmin development?? No I am lying. Go google it as emulators are included including CLANG support. 3. Office is available for Android and IOS. Full suite is coming soon 4. MS more liberal with pricing for non corporations. Google VS Community edition. It is pro and free! 5. MS is opening sourcing.NET and lots of frameworks 6. Azure supports non win32 operating systems. 7. MS is putting more effort in security and stabilizing and fixing bugs now that competition exists.
Am I a fanboy? No. I am agnostic this day but I find MS getting much better and if it were not for Metro I would be a fan even of their desktop products. Windows 7 is a very stable desktop oriented OS. It is not and I repeat not the POS slashdotters who have not run Windows in 15 years remember.
MS woke up and realized oh shoot. IOS and Android are eating our lunch! Eclipse will eat our lunch! Amazon will eat our lunch! Firefox and now I should say Chrome has eating our lunch! Ms has so much competition today on so many fronts it can't go back and use leverage of a monopoly in one area for another. Blocking Android on Windows? Who cares about Windows blah. Block W3C standards iwth IE? Fine I will use another browser etc.
This was unthinkable in 1999. So Linux did not win the desktop wars like we hoped but open source software did win everything else. Browsers are competitive. Mobile operating systems competitive. Development environments are competitive. Clouds and virtual services for legacy win32 apps scare the crap out of them so soon if mega corps want to leave they can.
MS is done. I welcome the new MS. As some (I did not say all folks) products are fairly decent and play well with others.
I was wondering why someone was still employed after reading the story myself. Next they made an ad?? Yeah heads would roll in today's more hostile work environment.
Maybe I just worked for shitty employers recently? But I heard back then you stayed with a company for 30 years. So different today where firing 15% every year is the new rage. Sigh...
This is cool for a project I am working on. I plan to see if I can create a.com that will do business transactions. I need no latency but at the same time require ACID to ensure each transaction will be written to disk:-(
My Idea is to have no sql and sql databases where something like this will do the transactions to ACID.
You are asking a group of people who believe the world is no more than 5,000 years old and there is no evidence (in their eyes a serious intellectual way) that humans evolved from primates for a straight answer why they do not believe? Especially since those that due are liberal which are obviously wrong all the time in their opinion just look at obamacare etc so there is zero credibility.
It is an embarrassment such a solid group even exists in my country! I just can not fathom this in the 21st century people who are afraid of change but they exist and are very gullible. The same political party also supports big business and oil and the other half who votes believe whatever they hear on Fox, Rush, and their church pastor who also gets his information from the same sources who are funded by the energy industry. In other words they perfect combo.
My point of this post is not to go offtopic but to point out it is political. Not scientific. You can't argue with gullable people who think facts are not fact. Only gut feelings.
FYI I am not bashing libertarians who may want to mod me down. I am bashing those in the same wing politically who are social conservatives.
They are. They paid frys and best buy to destroy copies of win 7 and office 2010 to force users to run an OS for tablets.
Like firefox developers will stop focusing on writing for a single browser or os version. Everyone will constantly upgrade.
If they don't Android and I OS will win. SC will probably be tied to updates more to make the transition easier. Look at win 8? Update every 6 months and new version every year.
Agile software development is here to stay and no more 10 year old operating systems
They do. Windows 10 has a Debian style release with fast and slow rings. Slow will cost more while fast and free will be for consumers. MS doesn't want 10 year old software to support so slow is 2 - 3 years max
Understanding netmasks and broadcast addresses is worthy of a certification? Really? Are there really people who work in IT who don't understand the basic concepts of networking? Isn't this taught in the first year of college? I mean we're not in 1980 anymore!
Yes, Yes, Yes, Maybe - but the first year of college is about booze and women - P's get Degrees!
It is worth certification because it is such a fundamental component of the job of an IT person now that the Internet is ubiquitous, and because such a horrifying number of IT people don't have any understanding of switching, routing and subnetting is.
There is a reason CCNA qualifications are so widely sought - it teaches the fundamentals of networking that every IT professional should know.
The CCNA in its current iteration is ridiculous. It is the hardest now of all the tests and requires 5 months and buying your own switches and routers as the training material and simulators do not cover everything. It is says associate but it is like requiring a WAn engineer to take the MCSE so he can troubleshoot login issues. Yes I know the tests progress supposedly but the CCNA you need to know not just subnetting, but span trees, tons and tons of theory, CIDS, and a dozen other topologies and requires like 1500 page books to master the material.
I would think more entry level certifications would be better for a non network engineer to take. If you can pass the CCNA you can setup a network of any size with ease. Not just tell me what a subnet mask is which is the intention of taking it.
Which is why IT departments are now requiring CCNA in addition to the MCSE. Wan engineers are tired of sys admins opening tickets.
The CCNA is way overkill just like requiring network admins to be mcse certified in case they use a shared drive. But to run viritual machines you need to setup viritual networks and subnet and and diagnose connection problems
I am researching taking it as I see job postings requiring them for non network admins.
It is rediculous and overkill and nearly impossible to pass without prepping for 6 months and buying your own switches and routers as the simulators won't cover what you need to pass all for a silly assocites level.
I know employers who want talk to you if you do not have both the ccna and mcsa as much as we bash paper mcses here.
HR uses them as a filtering mechanism and colleagues respect you more. I had perspective employer make the MS certification requirement being current a condition of employment. Goes outdated? You're fired.
I read maximum pc and Google a few others. Samsung and sansdisk are proprietary controllers. Toshiba uses Ocz which supposedly fixed their modded crappy sandforce.
Intel back in 2010 had a few buggy firmwares. New are fine. I do not trust ocz, anything sandforce, or crucial. The newer ones use maxwell too which is ok. But OCZ truly does suck. I still have a mechanical drive for backup files and one drive too.
I have 4 ssds for almost 2 years in 2 raids. Survived probably 10 reimages and full disk writes:-) One volume Sansdisk ultra plus. Other sansdisk pro 840. Have tons of vm s on them with lots of reinstalls. Both proprietary controllers.
Check on the failed ones in your shop? I bet most are ocz or sandforce. Ocz is sandforce with redundancy removed. XP causes them to fail quicker too due to lack of Trim
Oh AND TRIM is essential. This is because when you delete it doesn't erase. Sectors are virtual and the controller keeps looking for data to save. It is strange. I use parted magic to do an internal erase whenever I reinstall an os. Go Google it?
Try a good oNE for 1 week. You won't want to go back. Especially if you have a mechanical disk and cloud backup
Slashdot Mirror
Take your average computer worm, add this profitable payload, and this makes the bad guys rich. How does this work? What exploit are they using to install the payload?
First she probably used WindowsXP which has dozens of unpatched vulnerabilities which will never be patched since it is EOL. XP has no concept of user priveldges outside of programs so all services run as admin for everything. Drivers too can run as hardware and it has no ASLR or ram scrambling to prevent overflow attacks or stack smashing.
Secibd flash with ads and java is how these infections get in. Websites these days have over 20 ads for each tab. Hack a not stellar non Google Ad network and put a flash ad with a buffer overflow. Boom page loads and you are 0wned.
Best AV advise today is to run Adware. Even IE has support for this now! It may screw small websites but these webmasters do not respect a users security at all PERIOD. I use Java for Android and Teamviewer so I disabled the browser plug in. I also use NortonDNS which will filter out bad domains too and it is free to setup for any pc or router.
Do these and you eliminate 90% of infections. Oh and of course I use a standard user account. I have that and an admin account which is occasionally annoying with UAC but this helps and puts in another layer of security as now the payload will need to bypass this.
At least do not click on everything in site and do not use IE anymore.
No it is not socialist. People want something and someone is willing to create it. Simple.
Lack of funding should be phrased as buying. If people aren't then employer cuts jobs to match demand
Big problem is not nationalization, but a lack of infrastructure. No electricity, roads, internet, strong police presence, and educated workforce are problems. China as communist as it once was put in electricity, roads, educated workforce, police and strong government, etc.
It is more than just cheap labor folks
Wrong. Jobs are created by demand. Not the other way around. Look at thr great depression as proof? With no demand due to lack of funding led to no jobs which led back to a lack of demand in a 15 year loop.
This is why web standards exist. Write to them and not to -webkit specific css sheets and you won't have that problem. Only way for a MS browser to implement is drop the legacy garbage without upsetting corporations with their ancient intranet apps.
If you hate IE you should welcome this change.
FYI IE has not had hacks since last decade??
No I am not a fan of IE nor do I think it is great. It is now well ok or meh. It works with standard code the way other browsers work.
Problem is for MS to redo their code requires breaking bugs for IE 7 and 8 in which the corporations will cry and whine. Also we can't have browser releases coming after 5 to 10 years if we expect HTML 5.1 and CSS 3.1 to take root.
There are dozens of languages that compile to the .NET CLI, including BASIC, C++, Ruby, PHP, Java, JavaScript, Python, Lisp, Pascal, Perl, Scheme, etc. C# is the most popular language to compile to the CLI, yes, but almost any other common language out there can be used too.
Yeah but really who uses them?
95% of .NET is in c#. All the VB jobs are still for legacy 5.x and 6.x code that I see. Take it back 85% c# and 10% c++. Just because it can be done COBOL doesn't mean people use it other than to see if they can write a hello world program.
In essence it is a c# based environment.
I welcome it if it is more open and cheaper. 100k to start a website for unlimited licenses is freaking nuts.
But that was a few years ago.
MS is changing because they have lost and can no longer use leverage like they once did. Witness IE and visual studio where lots of free competition exists?
I welcome an alternative to java and hopes it encourages python and php to get their acts together. More competition the better for everyone
The old gray beards today might say the same with IBM or Digital but once market forces correct a monopoly the company either whithers or adapts.
Doesn't mean MS is no different than any other corporation even if that opinion is unpopular here on slashdot. Timewarner/AT&T/Comcast are far more evil and God forbid what Jobs would have in store if Apple won the Pc wars in the 1980s and achieved 90% marketshare! MS would be tame in comparison.
Under a free market people play nice or loose out.
Today I like Microsoft even though I hated them hence my name 13 years ago. Here are the facts in late 2014 .NET and lots of frameworks
1. IE is not a bad browser anymore. It used to be both feared and loathed in the old days as it was a threat to win32 applications. Today they no longer will ever have the control they did in 2004 when you needed to go to a library to use IE 6 if you used a mac or linux to fill out job apps. Yes I remember doing that. Monster.com was optimized for IE 6 quirks back then.IE 11 is modern and has great debugging tools and behaves like a real browser behaves and has the best security with sandboxing. IE 12 will even have an add-on framework ala Chrome/Firefox. I use adblock on IE today
2. Visual Studio 2015 supports Android and Linux Xiarmin development?? No I am lying. Go google it as emulators are included including CLANG support.
3. Office is available for Android and IOS. Full suite is coming soon
4. MS more liberal with pricing for non corporations. Google VS Community edition. It is pro and free!
5. MS is opening sourcing
6. Azure supports non win32 operating systems.
7. MS is putting more effort in security and stabilizing and fixing bugs now that competition exists.
Am I a fanboy? No. I am agnostic this day but I find MS getting much better and if it were not for Metro I would be a fan even of their desktop products. Windows 7 is a very stable desktop oriented OS. It is not and I repeat not the POS slashdotters who have not run Windows in 15 years remember.
MS woke up and realized oh shoot. IOS and Android are eating our lunch! Eclipse will eat our lunch! Amazon will eat our lunch! Firefox and now I should say Chrome has eating our lunch! Ms has so much competition today on so many fronts it can't go back and use leverage of a monopoly in one area for another. Blocking Android on Windows? Who cares about Windows blah. Block W3C standards iwth IE? Fine I will use another browser etc.
This was unthinkable in 1999. So Linux did not win the desktop wars like we hoped but open source software did win everything else. Browsers are competitive. Mobile operating systems competitive. Development environments are competitive. Clouds and virtual services for legacy win32 apps scare the crap out of them so soon if mega corps want to leave they can.
MS is done. I welcome the new MS. As some (I did not say all folks) products are fairly decent and play well with others.
But it works in IE 6?!!
I was wondering why someone was still employed after reading the story myself. Next they made an ad?? Yeah heads would roll in today's more hostile work environment.
Maybe I just worked for shitty employers recently? But I heard back then you stayed with a company for 30 years. So different today where firing 15% every year is the new rage. Sigh ...
This is cool for a project I am working on. I plan to see if I can create a .com that will do business transactions. I need no latency but at the same time require ACID to ensure each transaction will be written to disk :-(
My Idea is to have no sql and sql databases where something like this will do the transactions to ACID.
The oil industry wants you to burn petrochemicals instead. It is more profitable and less of it than Methane.
You are asking a group of people who believe the world is no more than 5,000 years old and there is no evidence (in their eyes a serious intellectual way) that humans evolved from primates for a straight answer why they do not believe? Especially since those that due are liberal which are obviously wrong all the time in their opinion just look at obamacare etc so there is zero credibility.
It is an embarrassment such a solid group even exists in my country! I just can not fathom this in the 21st century people who are afraid of change but they exist and are very gullible. The same political party also supports big business and oil and the other half who votes believe whatever they hear on Fox, Rush, and their church pastor who also gets his information from the same sources who are funded by the energy industry. In other words they perfect combo.
My point of this post is not to go offtopic but to point out it is political. Not scientific. You can't argue with gullable people who think facts are not fact. Only gut feelings.
FYI I am not bashing libertarians who may want to mod me down. I am bashing those in the same wing politically who are social conservatives.
SystemD was cool and innovative back then. It is now cool to hate and bash it 3 months ago from an article posted here.
Now you're a troll if you talk about benefits and insightful for stiring misgivings. It is political as no one gave a crap until recently
It may not be systemD but does this mean it gets a free pass?
They are. They paid frys and best buy to destroy copies of win 7 and office 2010 to force users to run an OS for tablets.
Like firefox developers will stop focusing on writing for a single browser or os version. Everyone will constantly upgrade.
If they don't Android and I OS will win. SC will probably be tied to updates more to make the transition easier. Look at win 8? Update every 6 months and new version every year.
Agile software development is here to stay and no more 10 year old operating systems
They do. Windows 10 has a Debian style release with fast and slow rings. Slow will cost more while fast and free will be for consumers. MS doesn't want 10 year old software to support so slow is 2 - 3 years max
Cisco has skewed the definitions and those who with certs say the CISCO versions to show how smart they are.
Understanding netmasks and broadcast addresses is worthy of a certification? Really? Are there really people who work in IT who don't understand the basic concepts of networking? Isn't this taught in the first year of college? I mean we're not in 1980 anymore!
Yes, Yes, Yes, Maybe - but the first year of college is about booze and women - P's get Degrees!
It is worth certification because it is such a fundamental component of the job of an IT person now that the Internet is ubiquitous, and because such a horrifying number of IT people don't have any understanding of switching, routing and subnetting is.
There is a reason CCNA qualifications are so widely sought - it teaches the fundamentals of networking that every IT professional should know.
The CCNA in its current iteration is ridiculous. It is the hardest now of all the tests and requires 5 months and buying your own switches and routers as the training material and simulators do not cover everything. It is says associate but it is like requiring a WAn engineer to take the MCSE so he can troubleshoot login issues. Yes I know the tests progress supposedly but the CCNA you need to know not just subnetting, but span trees, tons and tons of theory, CIDS, and a dozen other topologies and requires like 1500 page books to master the material.
I would think more entry level certifications would be better for a non network engineer to take. If you can pass the CCNA you can setup a network of any size with ease. Not just tell me what a subnet mask is which is the intention of taking it.
Which is why IT departments are now requiring CCNA in addition to the MCSE. Wan engineers are tired of sys admins opening tickets.
The CCNA is way overkill just like requiring network admins to be mcse certified in case they use a shared drive. But to run viritual machines you need to setup viritual networks and subnet and and diagnose connection problems
I am researching taking it as I see job postings requiring them for non network admins.
It is rediculous and overkill and nearly impossible to pass without prepping for 6 months and buying your own switches and routers as the simulators won't cover what you need to pass all for a silly assocites level.
I know employers who want talk to you if you do not have both the ccna and mcsa as much as we bash paper mcses here.
HR uses them as a filtering mechanism and colleagues respect you more. I had perspective employer make the MS certification requirement being current a condition of employment. Goes outdated? You're fired.
I read maximum pc and Google a few others. Samsung and sansdisk are proprietary controllers. Toshiba uses Ocz which supposedly fixed their modded crappy sandforce.
Intel back in 2010 had a few buggy firmwares. New are fine. I do not trust ocz, anything sandforce, or crucial. The newer ones use maxwell too which is ok. But OCZ truly does suck. I still have a mechanical drive for backup files and one drive too.
I have 4 ssds for almost 2 years in 2 raids. Survived probably 10 reimages and full disk writes :-) One volume Sansdisk ultra plus. Other sansdisk pro 840. Have tons of vm s on them with lots of reinstalls. Both proprietary controllers.
Check on the failed ones in your shop? I bet most are ocz or sandforce. Ocz is sandforce with redundancy removed. XP causes them to fail quicker too due to lack of Trim
Oh AND TRIM is essential. This is because when you delete it doesn't erase. Sectors are virtual and the controller keeps looking for data to save. It is strange. I use parted magic to do an internal erase whenever I reinstall an os. Go Google it?
Try a good oNE for 1 week. You won't want to go back. Especially if you have a mechanical disk and cloud backup