Our local government built an "intermodal" center recently. It cost $16.1 million. $11 million came from federal stimulus package money, about $4.5 million came from state government, and remainder was paid for by local government. The federal money came from the Inter-Modal Surface Transportation Enhancement Act.
The project damaged 5 adjacent properties, including the city's oldest business, which was forced to close from the damages.
The project was intended to provide both train and bus transportation. The local railroad was supposed to roll in during the ribbon cutting ceremony. $16.1 million later, there are no train tracks even running to the station, and there never will be. The tiny local bus transportation company moved it's operations to the center. So now we have a grandiose 16 million dollar empty bus station for an existing bus company. There is no train. There are no new consumers flocking here to spend money at local businesses. It was a complete failure, and a complete waste.
Why did they do it? It was stimulus money = find somewhere to spend it or lose it. So, a few lucky contractors made a fortune. A few folks were temporarily employed.
That's a little better. I don't see it as comparable to syslog with unix/linux shell tools. Then again, I'm a powershell noob and would miss my vim key bindings.
I searched but couldn't locate any way to read the log files via the recovery console. Maybe (I hope) someone will enlighten me here.
I can mostly agree with you. There is one thing you might be missing.
Second, if you log on a machine and that machine gets compromised, I don't see how having checksums and a chained log will keep anyone from just running trashing the whole 'journal'.
rm -rf/var/log
What am i missing here?
Fourth, what happens when our happy cracker destroys those tools?
I think what you are missing is this replacement is intended to prevent "undetected" tampering with the logs. Currently, a cracker can delete the log entries that would identify his or her activities on the machine, thereby going unnoticed. Deleting the log files or destroying the tools, as you suggested, would certainly be a detectable sign that the machine was compromised.
Oh you mean the terribly slow to open, slow to run, tree view application that must be loaded through the GUI? The one where you have to click on each event to view the details? What happens if you can't run this application? How do you access these logs from the Windows recovery console?
The summary states that it can be used with your usual syslog daemon. Therefore you can use your usual tools to analyze your logs, but you still have an audit trail to identify log tampering. The downside of this may be more disk i/o.
External drive bays with hard disk cartridges like the Dell Powervault line work alright for this. I use this at a few places. For example, a local police station. The bay is connected to their server, which serves as a backup manager for itself and the client computers. The drives are labeled (numbered) and rotated daily. One is in the drive bay, the other is locked in a fire proof safe, and the third goes home with the Chief or Sergeant at the end of each day.
I create bash scripts in Cygwin with Cron/Scheduler integration to bypass whatever backup software Dell is pushing with the Powervaults now. It was Yosemite.
I find this to be cheap, fast, and effective for very small businesses or organizations. You have an on-site backup, an on-site backup detached and secured, and an off-site backup.
Perhaps it's a different medical culture here, or a different culture in general - in Nordic countries we generally try to go for consensus on important issues as a wide cultural preference whenever possible.
Here in the US, we generally try to go for consensus on important issues as a wide cultural preference as well. Except, then we do the exact opposite of whatever said consensus might be.
Sorry, I have to respectfully disagree.
If the company retains this history is their working system, then all of the data would still exist more recent backups. If we are talking about data that has been archived, and removed from the working system, then it isn't really a "backup" anymore. I had that covered in the second paragraph of my post, because the OP referred to backups. There is a difference between backups and historical archives, and the same strategy may not be best for both.
Interesting stuff. So, the medicines have existed, but were unpopular due to the dangerous side effects. Now, I'm guessing doctors must resort to these due to the resistant organisms. I'd mod you up if I could.
So nowadays there are cases where doctor/patient literally has to decide, do they risk letting the infection take its course, or do they kill the infection but also kill patient's kidneys/liver alongside the infection.
This really peaked my interest. I wonder if emergency medical care protocols differ than normal doctor visits. I don't recall, in any ER visit, ever being consulted on the treatment. When I went into the hospital for the systemic staph., it was straight in and poked with a bunch of needles to draw blood and run tests. While they were waiting for the tests, they started me on all kinds of drugs in a shotgun approach. Six days or so in the hospital, and I wasn't even told everything in the several IVs I had, let alone being consulted first. Granted, I wasn't in a very good frame of mind, and I would have said yes to anything to feel better.
Yep. I can't remember the last time I needed to pull a backup from over one year ago, because it never happened. Most industries don't need that kind of historical data. What kind of data do you need from 5 years ago that isn't on your most recent backups?
If we are talking about archiving old data, well then that's not really a "backup", is it?
Also, recovering data from a tape is unacceptably slow. Many years ago, while working at an ISP, I had to recover the company's web site and customers' web home directories from tape. It took hours longer to get everything back up and running than it would have if we had backups on hard drives.
The last "line drugs" are surely nasty. I was hospitalized for a week with a systemic staph. infection I got via a brush burn at my grappling school. At the time, I was given vancomycin. I think it was _the_ last resort drug at the time. I was told this has now been trumped by newer antibiotics due to vancomycin resistant infections.
It is also worthy to note that this had to be administered intravenously, which means the resistant strains emerging would not be related to doctors prescribing oral antibiotics. The intravenous modality of these drugs decreases the occurrence of over-prescribing. This drug would quickly "ruin the site" as they said in the hospital, which meant the intravenous entry point had to be relocated frequently.
I get pissed as well. It is bad enough in text messages and casual e-mails. I get this in correspondence from customers though. In important e-mail messages, such as them detailing changes they need made in an application or web site, it takes me forever to figure out what they actually want. I think it's rude and insulting.
The worst is when someone supplies a write-up for a web site in this garbage format. When you give someone an estimate based on the client providing the copy, you don't have time to fix this. These jobs are priced lower than jobs where we supply the copy writing. So, for these people, I started copying and pasting the copy just like they sent it. If they want me to rewrite it in real English ( in my case ), as well as spell check, and proof-read, then it goes beyond the estimate.
(It says something interesting about you that you suggest you're so important that you have to drive just a little bit faster to get somewhre a few minutes earlier. If those few minutes really were a matter of life or death, you'd already have permission in law to exceed the limit.)
Don't be a dick. I didn't even say that I do exceed the limit, and don't act like you never have. I said that punishments for exceeding the speed limit deters people from speeding. If you really think I'm wrong, then why do people slam on their brakes when they see a police car running a speed trap?
he landlord is granted a licence to operate by the local administration acting on behalf of the local people...
Blah blah... entitlement or not, the point I made is that the pub owner kicks people out because he wants to avoid hefty fines. If you don't believe me, then go ask at your local pub. My point stands. You failed here to prove here that the punishment does _not_ deter people from breaking the law.
The same with the income tax. Do you think everyone pays his or her income tax because they ponder the conveniences of society? I bet most people pay income taxes because failing to do so would result in a punishment. You went completely off-topic on this one. The argument isn't about the merits of income tax. The argument isn't about whether I should move somewhere without the protection of government. The argument IS about whether or not punishment deters people from committing crimes. In the example I provided, it does.
The only reason you don't rape and murder is because you'd be punished if you did, right?
No, but the only reason I don't exceed the posted speed limit when I'm late is because I would be punished. The only reason I pay my income taxes is because I would be punished if I did not. The only reason the local pub owner kicks everyone out by 2:00 AM is because he would be punished.
In some cases, fear of punishment works. This is mostly true for violating laws that do not correlate directly to moral principles, as well as victimless crimes.
I thought the exact same thing while reading TFA. I'd mod +1 you if I had any. Registry entries and files located in the %appdata% folders should be sufficient for retaining settings.
Zero power consumption with session written to disk, little power consumption with suspend to ram. No need to shut down. Desktop users just need to be educated.
Our local government built an "intermodal" center recently. It cost $16.1 million. $11 million came from federal stimulus package money, about $4.5 million came from state government, and remainder was paid for by local government. The federal money came from the Inter-Modal Surface Transportation Enhancement Act.
The project damaged 5 adjacent properties, including the city's oldest business, which was forced to close from the damages.
The project was intended to provide both train and bus transportation. The local railroad was supposed to roll in during the ribbon cutting ceremony. $16.1 million later, there are no train tracks even running to the station, and there never will be. The tiny local bus transportation company moved it's operations to the center. So now we have a grandiose 16 million dollar empty bus station for an existing bus company. There is no train. There are no new consumers flocking here to spend money at local businesses. It was a complete failure, and a complete waste.
Why did they do it? It was stimulus money = find somewhere to spend it or lose it. So, a few lucky contractors made a fortune. A few folks were temporarily employed.
That's a little better. I don't see it as comparable to syslog with unix/linux shell tools. Then again, I'm a powershell noob and would miss my vim key bindings.
I searched but couldn't locate any way to read the log files via the recovery console. Maybe (I hope) someone will enlighten me here.
Second, if you log on a machine and that machine gets compromised, I don't see how having checksums and a chained log will keep anyone from just running trashing the whole 'journal'. /var/log
rm -rf
What am i missing here?
Fourth, what happens when our happy cracker destroys those tools?
I think what you are missing is this replacement is intended to prevent "undetected" tampering with the logs. Currently, a cracker can delete the log entries that would identify his or her activities on the machine, thereby going unnoticed. Deleting the log files or destroying the tools, as you suggested, would certainly be a detectable sign that the machine was compromised.
Oh you mean the terribly slow to open, slow to run, tree view application that must be loaded through the GUI? The one where you have to click on each event to view the details? What happens if you can't run this application? How do you access these logs from the Windows recovery console?
The summary states that it can be used with your usual syslog daemon. Therefore you can use your usual tools to analyze your logs, but you still have an audit trail to identify log tampering. The downside of this may be more disk i/o.
mod parent +1
... not the peak of my lifetime, just the peak while reading this thread
External drive bays with hard disk cartridges like the Dell Powervault line work alright for this. I use this at a few places. For example, a local police station. The bay is connected to their server, which serves as a backup manager for itself and the client computers. The drives are labeled (numbered) and rotated daily. One is in the drive bay, the other is locked in a fire proof safe, and the third goes home with the Chief or Sergeant at the end of each day.
I create bash scripts in Cygwin with Cron/Scheduler integration to bypass whatever backup software Dell is pushing with the Powervaults now. It was Yosemite.
I find this to be cheap, fast, and effective for very small businesses or organizations. You have an on-site backup, an on-site backup detached and secured, and an off-site backup.
Good point. I gave up on it back then. Is it still sequential though?
Perhaps it's a different medical culture here, or a different culture in general - in Nordic countries we generally try to go for consensus on important issues as a wide cultural preference whenever possible.
Here in the US, we generally try to go for consensus on important issues as a wide cultural preference as well. Except, then we do the exact opposite of whatever said consensus might be.
Sorry, I have to respectfully disagree.
If the company retains this history is their working system, then all of the data would still exist more recent backups. If we are talking about data that has been archived, and removed from the working system, then it isn't really a "backup" anymore. I had that covered in the second paragraph of my post, because the OP referred to backups. There is a difference between backups and historical archives, and the same strategy may not be best for both.
So nowadays there are cases where doctor/patient literally has to decide, do they risk letting the infection take its course, or do they kill the infection but also kill patient's kidneys/liver alongside the infection.
This really peaked my interest. I wonder if emergency medical care protocols differ than normal doctor visits. I don't recall, in any ER visit, ever being consulted on the treatment. When I went into the hospital for the systemic staph., it was straight in and poked with a bunch of needles to draw blood and run tests. While they were waiting for the tests, they started me on all kinds of drugs in a shotgun approach. Six days or so in the hospital, and I wasn't even told everything in the several IVs I had, let alone being consulted first. Granted, I wasn't in a very good frame of mind, and I would have said yes to anything to feel better.
Yep. I can't remember the last time I needed to pull a backup from over one year ago, because it never happened. Most industries don't need that kind of historical data. What kind of data do you need from 5 years ago that isn't on your most recent backups?
If we are talking about archiving old data, well then that's not really a "backup", is it?
Also, recovering data from a tape is unacceptably slow. Many years ago, while working at an ISP, I had to recover the company's web site and customers' web home directories from tape. It took hours longer to get everything back up and running than it would have if we had backups on hard drives.
I guess Ralph followed through.
The last "line drugs" are surely nasty. I was hospitalized for a week with a systemic staph. infection I got via a brush burn at my grappling school. At the time, I was given vancomycin. I think it was _the_ last resort drug at the time. I was told this has now been trumped by newer antibiotics due to vancomycin resistant infections.
It is also worthy to note that this had to be administered intravenously, which means the resistant strains emerging would not be related to doctors prescribing oral antibiotics. The intravenous modality of these drugs decreases the occurrence of over-prescribing. This drug would quickly "ruin the site" as they said in the hospital, which meant the intravenous entry point had to be relocated frequently.
I get pissed as well. It is bad enough in text messages and casual e-mails. I get this in correspondence from customers though. In important e-mail messages, such as them detailing changes they need made in an application or web site, it takes me forever to figure out what they actually want. I think it's rude and insulting.
The worst is when someone supplies a write-up for a web site in this garbage format. When you give someone an estimate based on the client providing the copy, you don't have time to fix this. These jobs are priced lower than jobs where we supply the copy writing. So, for these people, I started copying and pasting the copy just like they sent it. If they want me to rewrite it in real English ( in my case ), as well as spell check, and proof-read, then it goes beyond the estimate.
Should this have been in reply to parent, Hazel Bergeron?
(It says something interesting about you that you suggest you're so important that you have to drive just a little bit faster to get somewhre a few minutes earlier. If those few minutes really were a matter of life or death, you'd already have permission in law to exceed the limit.)
Don't be a dick. I didn't even say that I do exceed the limit, and don't act like you never have. I said that punishments for exceeding the speed limit deters people from speeding. If you really think I'm wrong, then why do people slam on their brakes when they see a police car running a speed trap?
he landlord is granted a licence to operate by the local administration acting on behalf of the local people...
Blah blah... entitlement or not, the point I made is that the pub owner kicks people out because he wants to avoid hefty fines. If you don't believe me, then go ask at your local pub. My point stands. You failed here to prove here that the punishment does _not_ deter people from breaking the law.
The same with the income tax. Do you think everyone pays his or her income tax because they ponder the conveniences of society? I bet most people pay income taxes because failing to do so would result in a punishment. You went completely off-topic on this one. The argument isn't about the merits of income tax. The argument isn't about whether I should move somewhere without the protection of government. The argument IS about whether or not punishment deters people from committing crimes. In the example I provided, it does.
The only reason you don't rape and murder is because you'd be punished if you did, right?
No, but the only reason I don't exceed the posted speed limit when I'm late is because I would be punished. The only reason I pay my income taxes is because I would be punished if I did not. The only reason the local pub owner kicks everyone out by 2:00 AM is because he would be punished.
In some cases, fear of punishment works. This is mostly true for violating laws that do not correlate directly to moral principles, as well as victimless crimes.
It is not a pattern beforehand or during generation because you cannot predict the next element.
... and made the word "and" all lowercase
Making the O in On lowercase would make it more readable.
"Opera's Haakon Wium Lie on CSS, Web Standards, and More" or "Opera CTO, Haakon Wium Lie, on CSS, Web Standards, and More"
I thought the exact same thing while reading TFA. I'd mod +1 you if I had any. Registry entries and files located in the %appdata% folders should be sufficient for retaining settings.
We have a winner!
Zero power consumption with session written to disk, little power consumption with suspend to ram. No need to shut down. Desktop users just need to be educated.