Police regularly request and usually receive camera footage from businesses, particularly footage of streets and sidewalks but sometimes internal footage as well.
I worked in the 'security' industry for a while, this has been my direct experience, not hearsay:) I saw dozens of requests over a couple years from 10 storefronts and only once did I see a warrant and I never saw a request refused.
The main impediment to police's unfettered access to camera systems is the diversity of bad systems out there. It's difficult to get info out of some DVR/NVR systems for various reasons, user knowledge, design, and the police's ability to, say, receive emails with attachments or download a file from dropbox.
Seriously. I kid you not.
Anyway, the more networked and user friendly these products become the more the police will have easy unfettered access.
I'm researching the casual carpool setup in the San Francisco bay area to find ways to make it work better. I do *not* nescecarily think this needs an app, in fact I'd be happy if this project didn't result in one, but one thing I've found is currently, there are none. No ride-sharing apps to facilitate casual carpool (or slug-line as they call it on the east coast). Kind of crazy right?
If anyone out there is working on a similar project I'd love to share notes. I have some publicly funded studies in hand, and a small team of people working on their own time on the project. This is conceived as a free beer and speech project not commercial. Message me here, I'll remember to check sometime next week, or find dana dane on fb.
my family members have sickle cell and I for one wholly support anything that makes sickle cell count faster - if we could respond proactively to crisis before they have pathology this would go a LONG way towards improving quality of life and overall health.
I just read recently, and I have not confirmed this from a second source yet, that the plate readers rely on infrared at night. This is *not* how speedcameras like the ones used in toll booths work but it does make sense the on-board cameras might work this way.
Privacy can be improved by adding some IR lights to your licence plate lights. This will blow out the image unless they have image processing on the camera dedicated to dealing with this kind of thing. You will need some decent IR to be effective, some experimentation will be needed to find out how many lumens are needed, but I'm pretty sure it's achievable with modern IR LEDs. In daylight their IR filters will be down and this will be completely ineffective, you can point a 1 watt IR LED directly at a camera with an IR filter and it won't bother it in the least.
Open Garden - I tried version pre v1.0 during anonymous protests of wifi shutdowns on public trans. and it was not working very well (at all) but they're at v 2.0 now from the website:
"Seamless connectivity allows people to connect any supported device to the mesh and thus to the Internet with no effort or configuration... introducing a way to access the Internet over multiple paths at once, improving speed and reliability... Once connected, devices find a path to the Internet also completely automatically. If a path fails, a new one will be chosen; if necessary, new connections will be established. The network is self-healing and self-forming. Each of the nodes operates only with local knowledge; together, they build a network using a probabilistic distributed algorithm."
I've some professional experience with camera systems and I can echo/add the following - 1) use multiple types of sensors. Zigbee based devices, or for a larger office building type scenario something like ubiquiti's mFi. Most cameras have I/O and many have an SDK you can mash up something that fits your exact needs but watch out for 2) all these camera companies have complicated learning curves for their hardware, few on-line support communities compared to other hardware categories I work with, little documentation, few reviews, and pretty insane price levels for their digital offerings which brings me to 3) analog cameras have enormous value, if you do some careful shopping you can find good resolution and features for 1/4th the price of digital - I like CnB's products but there are others equally good. If you go analog you won't get on-camera analytics and will need some additional hardware on the DVR side.
for digital cameras look at Vivotek for value, and Axis for very professional 'just works' functionality. Axis' software and firmware feels properly engineered and well designed, something I can't say for any other brand I've worked with. They're 30%+ more expensive than Vivotek and similar/digress.
on the dvr side, you have to match the software to your needs, there are no 'great' packages out there. I've had good experiences with 3VR, who also have a decent SDK, but they're Axis-level in price. Identify a few of your specific needs and keep a tight focus on just those and you'll find a decent solution. Think hybrid with other types of sensors and keep a level, practical head and expect a lot of effort and you will do well, otherwise find a security systems integrator:)
high levels of arsenic : my boy is still being evaluated, he came down with something... best way to describe it is autism with a 6 week onset at 6 years old, but it's not autism, more ASD, it's hard to describe, but suffice to say horrible, and a very good team of doctors (Dr House style) keep ordering more tests, eliminating things, showing nothing. so far the best lead is he has elevated levels of arsenic. He was in Chile over Christmas, there are copper mines there creating high levels of arsenic and chromium in the drinking water, enough so downstream the shellfish are not completely converting the inorganic arsenic into organic, and both, sad to say, are completely under-studied, especially in children.
There is one other kid who was in chile over christmas with the same symptoms, treated in a different medical center, nothing yet.
wait, so i find a hundred dollar bill on the floor of a bar. I look around, ask people near by, did you drop this? I wait, see if anyone is checking for the bill. I'm supposed to give it to the bartender, or go to the nearest police station to turn it in?
seriously, people. I'm kinda shocked so many people are crying 'thief!'
The llama is correct and that is pretty much how it went down. The issue is 'reasonable attempt' and so long as they define reasonable reasonably then that attempt was made this & will all be fine for everyone involved.
Apple is just throwing a hissy fit and do you have any doubt they leaned on the DA to get this thing rolling?
I run a consulting company currently working on projects to enhance customer-interactivity with staff and entertainers at gentleman's clubs websites. I'm considering several avenues, some of which utilizes AJAX technologies in conjunction with plug-ins for rich media (notably flash but other plug-ins are under consideration). I'm extremely interested in licensing the intellectual property you own for this endeavor in advance of any serious development.
Additionally it would be helpful if I could have a clear picture of which technologies you currently own intellectual rights to so I can map appropriate alternative strategies for deployment in case we fail to come to terms on a licensing agreement for our websites to run fully-interactive embedded applications through the use of plug-ins and AJAX.
The project's initial scope is 11 club websites with a larger rollout possible in the future. I don't know if you require visitor information or just the number of website implementations, please let me know and I can provide additional information.
Please email licensing@eolas.com to inquire about potential licensing arrangements for your organization. They'll appreciate all the new business inquiries.
it doesn't suck (going again this year) BUT you're right, there is symbiosis on Sept... 17th? from at least a music pov it should be *at least* as good, possibly better
I'm not sure this was a troll as modded - in case it wasn't, I'd like to say: BeOS
I don't know how it would look today, but what I remember from the mid 90s is it was a freaking jet fighter compared to the sopwith camels of the day.
The only problem is it's really, really hard to get a new OS going. Even when you have a jet fighter and everyone else has biplanes, it's almost impossible (RIP Be, and Amiga) So, maybe what we need is a better iteration of what we have? Unless virtualization allows new in-roads for OSs that didn't exist before...
This is very true, the actual source materials about this agreement are scarce right now, I'm holding out hope that there will be some exemptions for 501.c and educational institutions at least.
BTW in 2004, the minimum was $500. 2009 - $25,000.
I've spent a few hours reading up on this and everything I've seen says $25k minimum. However, the actual source information is extremely limited (sound exchange website is so bad) and the details are a bit confusing so I'm hoping something will come up (501.c orgs?) but right now every single piece of reliable info says $25k minimum which is the death of all small webcasters.
All the news articles saying this is a victory are a) representing the views of larger webcasters and b) contrasting it to what could have happened if the 2007 library of congress royalty rates held
No one mentioned this jewel yet, you also must keep 4 years of detailed server logs (who listened to what when, etc.) and provide them to the agency managing the royalty payments. If you don't want to keep and submit detailed logs, you can pay an additional fee to get out of most of this reporting requirement (a 'proxy fee' amount unspecified).
The $25,000 minimum fee completely closes webcasting to all but large professional players, which is bad for music. The claim to gross revenues of all activities related to the website makes it impossible for businesses to run webcasts b/c soundsafe will tap into the businesses' gross (bad for web developers). Even without the $25k minimum the royalty rates are outrageous (coming up on 1 cent per song per listener by 2015 - and 14 cents per song per listener for some types of stations (make your own playlists).
It used to be music, then it was the music business, now it's just business. Such a shame.
You're kidding/trolling, right? Or just skimming the comments.
OK let's say you have a passion for some music genre, gregorian chants, and wanted to make a webstation dedicated to playing them. You're willing to foot the cost of streaming, it's your passionate hobby. You're even willing to pay some performance fees. Like radio does (k that's not technically right but they do pay licensing fees) of say.0009 dollars per song per listener. Total per year - a few grand. This is where we were in 2004.
Now, you pay a MINIMUM of $25,000 OR 7% of your TOTAL expenses or up to 25% of your GROSS earnings. For everything. So if your gregorian chant radio station is in a little controller on your blog, you have to pay 25% of your blogs gross earnings too. If it's on your website that advertises your gregorian chant music store, 25% of your music store's earnings.
Radio pays squat because radio knew that they were good for the artists, who would then make their money touring and in record sales, etc. Webstations are the same, they're great for the artists, but the music industry saw a chance to force everyone who's not a big player out of the game and bleed the survivors and they freaking pounced.
The only reason this is seen as a victory is because the alternative (library of congress' rules under Bush) was even worse. It's like saying WOOT! Vietnam War! at least it's not WWII. True, but not meaningful.
Pandora is happy ($40 mil in rev last year) but the big get to play and the small are sent away. again.
you bike through devil's slide? you're insane! sure it's pretty and all but the grades and the tight corners...
I don't understand peeps who bike on highway 1 between sf and stinson beach either, but up mt. tam, at least that's kind of a multi-use road.
not that i'm saying you have no right to those roads, i'm just saying you're insane:)
(btw my greatest fear when I was a motorcyclist were bicyclists on those roads, I'm so glad nothing bad ever happened, scared the shit out of me that as I came into a corner at... some great rate of speed there's be a bike right past the apex a little too far into the road)
Want to hijack this trollfest and see if I can get some useful information - the thing city bikes REALLY need is regenerative breaking - compared to cars, bikes suck at acceleration, and trying to conserve precious momentum makes breaking traffic laws way too tempting - some regenerative breaking would solve both problems and more.
Not sure why that is, any additional info/ideas would be welcome. I think it would really transform the urban environment if it could be worked out. And I have fantasies of keeping peddling at stoplights then shooting off @ proper street speeds.
Usually it's clear to me but this time I can't decide if I'm feeding the trolls or not.
I'm in SF, but this applies to DC and NYC as well, not sure about others.
Sidewalks are for pedestrians. Only*. Streets are for wheeled vehicles. Cars have as much and as little right to the streets as bikes do. legally, that's a fact, but I think it's right as well.
let's get this straight - first off 15 in a 45? wtf? city speed limits are 25 unless posted @ 30. I can do 20-25 on a flat, 30 with a little downhill, so let's not worry about the speeds. I *constantly* pass cars that are doing 15-20. Let's just say it sucks to be behind someone slow but it happens, deal with it.
8 feet from the curb? well, 4 of those are taken up by a parked car, another 2 or so by their opened door, so that leaves 2 feet. you're right, 7 feet from the curb is better. apologies for that extra foot someone took, they were wrong.
kamikazi nut jobs? i guarantee there are more of those in cars than on bikes. and they can do SO much more damage in a car, don't you agree? so be glad if a few have climbed on a bike, might save your life that they have, and you just worry about those in cars, or worse, SUVs. I'll take 10 kamikazi on bikes over 1 in an SUV any day.
Finally, can't beat'm? join'm. no worries about parking, work some fat off your ass, do a little tiny bit to save the environment and free the country from dependence on foreign oil (and all the benefits that entails).
K, I think I'm done, sorry for making the trolls fatter but this was just too... very.
I would love to see a thorough real-world user-level and tech-level review of linux -> vm -> windows it seems in theory like the answer to so many problems but I keep hearing it's still just. not. there. yet. Yes, I'm about to do another test install (been... 2 or 3 years since I tried it, was so not ready for the general public back then).
- very very imho - backups don't help your users who might be attacked by your compromised sites but the ability to wipe the bad and restart is great. requires multiple levels of backups, daily, weekly, monthly, all separate.
You can't restart immediately, presumably you'll get nailed by the same exploit when you recover, but at least you'll know there's a specific problem - finding something specific is nearly always easier than finding something general.
also, control your URLs. controlling what can be passed to your site controls a hell of a lot of security problems.
lastly - make sure your logs are good and safe and verbose. if you pay attention to making the logs right, when you have a problem, you can find someone to review the logs and find the issue. if you don't have the logs, well. you're more screwed.
Do those three things and some common sense when coding and you'll be better off than most. Security is always where you draw the line, personally I like it a bit ahead of the curve but no where near perfect.
Slashdot Mirror
Police regularly request and usually receive camera footage from businesses, particularly footage of streets and sidewalks but sometimes internal footage as well. I worked in the 'security' industry for a while, this has been my direct experience, not hearsay :) I saw dozens of requests over a couple years from 10 storefronts and only once did I see a warrant and I never saw a request refused.
The main impediment to police's unfettered access to camera systems is the diversity of bad systems out there. It's difficult to get info out of some DVR/NVR systems for various reasons, user knowledge, design, and the police's ability to, say, receive emails with attachments or download a file from dropbox.
Seriously. I kid you not.
Anyway, the more networked and user friendly these products become the more the police will have easy unfettered access.
I'm researching the casual carpool setup in the San Francisco bay area to find ways to make it work better. I do *not* nescecarily think this needs an app, in fact I'd be happy if this project didn't result in one, but one thing I've found is currently, there are none. No ride-sharing apps to facilitate casual carpool (or slug-line as they call it on the east coast). Kind of crazy right? If anyone out there is working on a similar project I'd love to share notes. I have some publicly funded studies in hand, and a small team of people working on their own time on the project. This is conceived as a free beer and speech project not commercial. Message me here, I'll remember to check sometime next week, or find dana dane on fb.
my family members have sickle cell and I for one wholly support anything that makes sickle cell count faster - if we could respond proactively to crisis before they have pathology this would go a LONG way towards improving quality of life and overall health.
I just read recently, and I have not confirmed this from a second source yet, that the plate readers rely on infrared at night. This is *not* how speedcameras like the ones used in toll booths work but it does make sense the on-board cameras might work this way. Privacy can be improved by adding some IR lights to your licence plate lights. This will blow out the image unless they have image processing on the camera dedicated to dealing with this kind of thing. You will need some decent IR to be effective, some experimentation will be needed to find out how many lumens are needed, but I'm pretty sure it's achievable with modern IR LEDs. In daylight their IR filters will be down and this will be completely ineffective, you can point a 1 watt IR LED directly at a camera with an IR filter and it won't bother it in the least.
Open Garden - I tried version pre v1.0 during anonymous protests of wifi shutdowns on public trans. and it was not working very well (at all) but they're at v 2.0 now from the website: "Seamless connectivity allows people to connect any supported device to the mesh and thus to the Internet with no effort or configuration... introducing a way to access the Internet over multiple paths at once, improving speed and reliability... Once connected, devices find a path to the Internet also completely automatically. If a path fails, a new one will be chosen; if necessary, new connections will be established. The network is self-healing and self-forming. Each of the nodes operates only with local knowledge; together, they build a network using a probabilistic distributed algorithm."
I've some professional experience with camera systems and I can echo/add the following - 1) use multiple types of sensors. Zigbee based devices, or for a larger office building type scenario something like ubiquiti's mFi. Most cameras have I/O and many have an SDK you can mash up something that fits your exact needs but watch out for 2) all these camera companies have complicated learning curves for their hardware, few on-line support communities compared to other hardware categories I work with, little documentation, few reviews, and pretty insane price levels for their digital offerings which brings me to 3) analog cameras have enormous value, if you do some careful shopping you can find good resolution and features for 1/4th the price of digital - I like CnB's products but there are others equally good. If you go analog you won't get on-camera analytics and will need some additional hardware on the DVR side.
for digital cameras look at Vivotek for value, and Axis for very professional 'just works' functionality. Axis' software and firmware feels properly engineered and well designed, something I can't say for any other brand I've worked with. They're 30%+ more expensive than Vivotek and similar /digress.
on the dvr side, you have to match the software to your needs, there are no 'great' packages out there. I've had good experiences with 3VR, who also have a decent SDK, but they're Axis-level in price. Identify a few of your specific needs and keep a tight focus on just those and you'll find a decent solution. Think hybrid with other types of sensors and keep a level, practical head and expect a lot of effort and you will do well, otherwise find a security systems integrator :)
exactly, this differs from what you can do with a new moto (or other snapdragon) phone... how? I mean, maybe I miss something
high levels of arsenic : my boy is still being evaluated, he came down with something ... best way to describe it is autism with a 6 week onset at 6 years old, but it's not autism, more ASD, it's hard to describe, but suffice to say horrible, and a very good team of doctors (Dr House style) keep ordering more tests, eliminating things, showing nothing. so far the best lead is he has elevated levels of arsenic. He was in Chile over Christmas, there are copper mines there creating high levels of arsenic and chromium in the drinking water, enough so downstream the shellfish are not completely converting the inorganic arsenic into organic, and both, sad to say, are completely under-studied, especially in children.
There is one other kid who was in chile over christmas with the same symptoms, treated in a different medical center, nothing yet.
*sigh*
We don't know yet, it's only correlation.
Have a nice life
wait, so i find a hundred dollar bill on the floor of a bar. I look around, ask people near by, did you drop this? I wait, see if anyone is checking for the bill. I'm supposed to give it to the bartender, or go to the nearest police station to turn it in?
seriously, people. I'm kinda shocked so many people are crying 'thief!'
The llama is correct and that is pretty much how it went down. The issue is 'reasonable attempt' and so long as they define reasonable reasonably then that attempt was made this & will all be fine for everyone involved.
Apple is just throwing a hissy fit and do you have any doubt they leaned on the DA to get this thing rolling?
lol email address is already bouncing. Seems I wasn't the first. trying info@...
my email to Eolas:
I run a consulting company currently working on projects to enhance customer-interactivity with staff and entertainers at gentleman's clubs websites. I'm considering several avenues, some of which utilizes AJAX technologies in conjunction with plug-ins for rich media (notably flash but other plug-ins are under consideration). I'm extremely interested in licensing the intellectual property you own for this endeavor in advance of any serious development.
Additionally it would be helpful if I could have a clear picture of which technologies you currently own intellectual rights to so I can map appropriate alternative strategies for deployment in case we fail to come to terms on a licensing agreement for our websites to run fully-interactive embedded applications through the use of plug-ins and AJAX.
The project's initial scope is 11 club websites with a larger rollout possible in the future. I don't know if you require visitor information or just the number of website implementations, please let me know and I can provide additional information.
Thank you for your time and consideration.
[sig line]
Please email licensing@eolas.com to inquire about potential licensing arrangements for your organization. They'll appreciate all the new business inquiries.
it doesn't suck (going again this year) BUT you're right, there is symbiosis on Sept... 17th? from at least a music pov it should be *at least* as good, possibly better
I'm not sure this was a troll as modded - in case it wasn't, I'd like to say:
BeOS
I don't know how it would look today, but what I remember from the mid 90s is it was a freaking jet fighter compared to the sopwith camels of the day.
The only problem is it's really, really hard to get a new OS going. Even when you have a jet fighter and everyone else has biplanes, it's almost impossible (RIP Be, and Amiga) So, maybe what we need is a better iteration of what we have? Unless virtualization allows new in-roads for OSs that didn't exist before...
It makes me smile in a sad way that sound exchange is nonprofit.
50% goes to the artists and 50% to the copyright holder (usually the record company), I read somewhere.
Sound exchange is run by an 18 member board, 1/2 represent artists and 1/2 industry.
This is very true, the actual source materials about this agreement are scarce right now, I'm holding out hope that there will be some exemptions for 501.c and educational institutions at least.
BTW in 2004, the minimum was $500. 2009 - $25,000.
I've spent a few hours reading up on this and everything I've seen says $25k minimum. However, the actual source information is extremely limited (sound exchange website is so bad) and the details are a bit confusing so I'm hoping something will come up (501.c orgs?) but right now every single piece of reliable info says $25k minimum which is the death of all small webcasters.
All the news articles saying this is a victory are a) representing the views of larger webcasters and b) contrasting it to what could have happened if the 2007 library of congress royalty rates held
No one mentioned this jewel yet, you also must keep 4 years of detailed server logs (who listened to what when, etc.) and provide them to the agency managing the royalty payments. If you don't want to keep and submit detailed logs, you can pay an additional fee to get out of most of this reporting requirement (a 'proxy fee' amount unspecified).
The $25,000 minimum fee completely closes webcasting to all but large professional players, which is bad for music. The claim to gross revenues of all activities related to the website makes it impossible for businesses to run webcasts b/c soundsafe will tap into the businesses' gross (bad for web developers). Even without the $25k minimum the royalty rates are outrageous (coming up on 1 cent per song per listener by 2015 - and 14 cents per song per listener for some types of stations (make your own playlists).
It used to be music, then it was the music business, now it's just business. Such a shame.
You're kidding/trolling, right? Or just skimming the comments.
OK let's say you have a passion for some music genre, gregorian chants, and wanted to make a webstation dedicated to playing them. You're willing to foot the cost of streaming, it's your passionate hobby. You're even willing to pay some performance fees. Like radio does (k that's not technically right but they do pay licensing fees) of say .0009 dollars per song per listener. Total per year - a few grand. This is where we were in 2004.
Now, you pay a MINIMUM of $25,000 OR 7% of your TOTAL expenses or up to 25% of your GROSS earnings. For everything. So if your gregorian chant radio station is in a little controller on your blog, you have to pay 25% of your blogs gross earnings too. If it's on your website that advertises your gregorian chant music store, 25% of your music store's earnings.
Radio pays squat because radio knew that they were good for the artists, who would then make their money touring and in record sales, etc. Webstations are the same, they're great for the artists, but the music industry saw a chance to force everyone who's not a big player out of the game and bleed the survivors and they freaking pounced.
The only reason this is seen as a victory is because the alternative (library of congress' rules under Bush) was even worse. It's like saying WOOT! Vietnam War! at least it's not WWII. True, but not meaningful.
Pandora is happy ($40 mil in rev last year) but the big get to play and the small are sent away. again.
fuckers.
you bike through devil's slide? you're insane! sure it's pretty and all but the grades and the tight corners...
I don't understand peeps who bike on highway 1 between sf and stinson beach either, but up mt. tam, at least that's kind of a multi-use road.
not that i'm saying you have no right to those roads, i'm just saying you're insane :)
(btw my greatest fear when I was a motorcyclist were bicyclists on those roads, I'm so glad nothing bad ever happened, scared the shit out of me that as I came into a corner at... some great rate of speed there's be a bike right past the apex a little too far into the road)
Want to hijack this trollfest and see if I can get some useful information - the thing city bikes REALLY need is regenerative breaking - compared to cars, bikes suck at acceleration, and trying to conserve precious momentum makes breaking traffic laws way too tempting - some regenerative breaking would solve both problems and more.
http://www.halfbakery.com/idea/Regenerative_20Brake_20Bike here are some http://www.physicsforums.com/archive/index.php/t-206514.htmllinks but it seems while everyone agrees 'it's tricky but can be done' no one has actually done it.
Not sure why that is, any additional info/ideas would be welcome. I think it would really transform the urban environment if it could be worked out. And I have fantasies of keeping peddling at stoplights then shooting off @ proper street speeds.
Usually it's clear to me but this time I can't decide if I'm feeding the trolls or not.
I'm in SF, but this applies to DC and NYC as well, not sure about others.
Sidewalks are for pedestrians. Only*. Streets are for wheeled vehicles. Cars have as much and as little right to the streets as bikes do. legally, that's a fact, but I think it's right as well.
let's get this straight - first off 15 in a 45? wtf? city speed limits are 25 unless posted @ 30. I can do 20-25 on a flat, 30 with a little downhill, so let's not worry about the speeds. I *constantly* pass cars that are doing 15-20. Let's just say it sucks to be behind someone slow but it happens, deal with it.
8 feet from the curb? well, 4 of those are taken up by a parked car, another 2 or so by their opened door, so that leaves 2 feet. you're right, 7 feet from the curb is better. apologies for that extra foot someone took, they were wrong.
kamikazi nut jobs? i guarantee there are more of those in cars than on bikes. and they can do SO much more damage in a car, don't you agree? so be glad if a few have climbed on a bike, might save your life that they have, and you just worry about those in cars, or worse, SUVs. I'll take 10 kamikazi on bikes over 1 in an SUV any day.
Finally, can't beat'm? join'm. no worries about parking, work some fat off your ass, do a little tiny bit to save the environment and free the country from dependence on foreign oil (and all the benefits that entails).
K, I think I'm done, sorry for making the trolls fatter but this was just too... very.
*maybe skateboards, and of course, wheelchairs
I would love to see a thorough real-world user-level and tech-level review of linux -> vm -> windows it seems in theory like the answer to so many problems but I keep hearing it's still just. not. there. yet. Yes, I'm about to do another test install (been ... 2 or 3 years since I tried it, was so not ready for the general public back then).
- very very imho -
backups don't help your users who might be attacked by your compromised sites but the ability to wipe the bad and restart is great. requires multiple levels of backups, daily, weekly, monthly, all separate.
You can't restart immediately, presumably you'll get nailed by the same exploit when you recover, but at least you'll know there's a specific problem - finding something specific is nearly always easier than finding something general.
also, control your URLs. controlling what can be passed to your site controls a hell of a lot of security problems.
lastly - make sure your logs are good and safe and verbose. if you pay attention to making the logs right, when you have a problem, you can find someone to review the logs and find the issue. if you don't have the logs, well. you're more screwed.
Do those three things and some common sense when coding and you'll be better off than most. Security is always where you draw the line, personally I like it a bit ahead of the curve but no where near perfect.