We look after 12 'off the shelf' unix systems which are supplied as is and supported by the supplier.
For these machiens to work as intended they need:
- network access (with rsh and ftp enabled)
- root access and privledges for anything and everything
The real kicker ? Everyone of these boxes in use (globaly) has the same root password !
Your are free to change it, however this will then brick the server . . . ..
It goes without saying that the supplier of these boxes quite literally doesn't know jack about Linux security.... But, As long as you are forced to use them, make sure you have that CYA document that says you routinely objected to the lax security settings, signed by as many "higher ups" you can manage... Not that it will help with the inevitable happens and they are looking for someone to blame/fire....
IF you don't mind running my installer as a windows admin, I bet I can own your box in short order.... Linux is no different. Don't login to root, just like you don't use your Windows admin account..... You don't right????
However, not allowing root logins, not running services as root, and keeping things in Chroot jails, makes the task of the virus writer gets so much more difficult, even if you get escalated to root on some buffer overflow, injection attack or something. Not to mention, Linux distributions seem to have a lot of different ideas about how and where the configuration files live, what init process they want to run and the default security settings they use for the various services...
Who knows what nutty reaction this might invoke from them... It might be a good time to tap the brakes on such private provocations...
Anyone who has raised children can tell you that you don't prevent tantrums by caving in to them.
I have kids and I agree, you don't cave into an ongoing tantrum. However, that does NOT mean you don't go around avoiding situations that cause the tantrums.
For example, if your kid throws a snit in the cereal isle of the store because they want the latest 90% sugar offering in the bright box at their eye level, and you don't need cereal today, you don't go down the isle. Or if the tantrums happen when they are tired, you make sure they get enough sleep and go to the store when they are well rested. Not that you walk on eggshells, but you don't go looking for trouble if you can avoid it.
No need to poke NK with a private drone flight, so why provoke the tantrum?
Actually, the issue with NK is more about the Kim dynasty and preserving the forces that keep Kim in power. Their external activities are just designed to enforce the dominance of the Kim in power and how they can spin the events to benefit Kim's grip on power. So, as long as the reaction can be couched in "Kim outsmarts the world" or "NK has the dominate military" they will react. So if they shoot the thing down, it will be billed as a glorious triumph of Kim's efforts to protect NK from the evil USA...
Much of the "nuttiness" of NK's foreign policy revolves around the stuff going on INSIDE the country and less about actually dealing with foreign nations. It's about the Kim's staying in power and keeping up appearances to the internal audience and not really about constructively engaging with other countries. The problem with all this is that it's hard for people who are OUTSIDE the country to understand because we don't see the internal propaganda machine, or understand how the average NK citizen sees things.
Actually, this really should scare everybody, but not for the obvious reasons. Once the Kim's loose their grip the resulting internal struggle will be extremely quick and bloody, and we will be lucky if the collateral damage is confined to just China and South Korea. It will be hard to keep the conflict under control, especially if NK really does have a nuclear device or two, because you can bet Kim won't be reluctant to use them to try and stay in power.
Some low-altitude footage of the death camps would be a good thing to do...so far there's only satellite imagery and witness reports to go on.
If the evidence we have doesn't do the trick, I doubt that having low level, low quality armature drone footage will help anything.
What MIGHT help is a bit more public awareness and some new reporting on the subject but whatcha gona do beyond making up some hair brained publicity stunt?
Well his father and his grandfather are largely to blame for that. For all we know he may be trying to fix the system.;-)
I'm no fan of these idiots but the only reason China keeps propping them up is so they have a bargaining chip with the West.
And a fairly large buffer between South Korea and them...
Actually, I think China props them up to avoid the flood of refugees that would flow north if a war did start up again. They are embarrassed with NK and are stuck with the two bit tin pot dictator they helped get into power and stuck with having to defend NK, at least some, to keep their buffer with the south. But as in all things like this, the reasons are complex and hard to accurately explain in a few sentences.
Nothing helps ease tension in a hotbed area run by a bunch of crazies with cannons aimed at Seoul like tiny drones. Good on ya, you bunch of smarties!
Yea, the government of NK gets pretty upset over some people in the south launching balloons with notes and money into their airspace, I'm thinking a "private" drone flying though their airspace might not be very welcome. Who knows what nutty reaction this might invoke from them... It might be a good time to tap the brakes on such private provocations... I'd sure hate to see the Korean war part II play out in my lifetime, complete with another installment of MASH to run nearly a decade on broadcast TV, Loretta Switt just isn't up to another tour of duty.
You need a full head covering there, not just a hat to avoid the mind control fields..
You need to make sure to cover all the way down, well past the neck with foil, making sure it is air tight with no holes and tightly sealed at the bottom. It doesn't need to be tight fitting, just 100% sealed...
You will know you are doing it right if you start to feel light headed and out of breath. That's just the mind control waves wearing off and your brain returning to it's normal state.
When you do this, take a video and pictures and leave a note for your friends to upload them to the Darwin Awards site...
Technically it was the quick discharge of the capacitors that required a really high current at substantial voltage that jumped though an arc gap in the bulb. The arc and the quickly changing currents where what generated the EMF spike....
However, in the Pi2, the problem was light related. U19 isn't apparently shielded correctly from light and when the bright strobe light hits is it disrupts the 3.3v power supply regulation of the Pi2. When they block the light from hitting just that chip, all is well.
Well, it's surprisingly easy to build a radio receiver. All you need is a rectifier and a bit of capacitance to convert RF into AC. Most Audio amplifiers have everything you need, except for the circuits that tune the receiver and an antenna. However, audio cables and "luck" can supply what you need for a receiver with very low sensitivity and suffer RFI from very strong RF signals nearby.
So when it is shown that they actually DO donate to laudable causes, you are upset with them because they didn't give enough of their income? This is not much more than just class envy at this point.
IMHO, it doesn't matter how much money somebody makes legally or what they do with it. I don't care if you have more than me or less than me.
They could explain it well enough to show the evidence. I think I could explain with a few power point slides how this all works to a Jury, then demonstrate a few transactions and show them how that gets recorded. All that would be left is to put the publicly obtained block chains into evidence, show the transactions that involved the wallet in question and tie that wallet to the individual through inference if they destroyed the evidence or though tracing actual bank transactions where the BitCoin gets converted into cash.
Dude... Think how cool a brand new TRS-80 would be, complete with the tape recorder.... Or one of those computers with the 8 inch floppy drives... Oh the memories/nightmares!
Slashdot Mirror
another government employee taking for himself. plus interest
Seems that this treasure trove will find it's way into the nation's museums. Neil delivers again!
Prove it....
I'll do it for Buzz, he's getting long in the tooth these days..
"0. It will build without root or not at all."
We look after 12 'off the shelf' unix systems which are supplied as is and supported by the supplier.
For these machiens to work as intended they need: - network access (with rsh and ftp enabled) - root access and privledges for anything and everything
The real kicker ? Everyone of these boxes in use (globaly) has the same root password ! Your are free to change it, however this will then brick the server . . . . .
It goes without saying that the supplier of these boxes quite literally doesn't know jack about Linux security.... But, As long as you are forced to use them, make sure you have that CYA document that says you routinely objected to the lax security settings, signed by as many "higher ups" you can manage... Not that it will help with the inevitable happens and they are looking for someone to blame/fire....
Come on!!!
What vulnerability? What port? What gets attacked?
Is there more than one vulnerability?
I wonder -- I really, really wonder. Are Slashdot "editors" getting kickbacks?
What a loaded pile of crappy advertising.
There you go, thinking like a Windows administrator....Thinking about $...
Somehow they break in, manage to get root, and then, oh gasp, they install something you don't want... Yea, Linux suffers from that kind of thing...
Microsoft shills say "Cannot Happen on Windows!" Investigative reports on Evil Linux Admins...
Film at 11!
IF you don't mind running my installer as a windows admin, I bet I can own your box in short order.... Linux is no different. Don't login to root, just like you don't use your Windows admin account..... You don't right????
Successful ones will indeed be much better...
However, not allowing root logins, not running services as root, and keeping things in Chroot jails, makes the task of the virus writer gets so much more difficult, even if you get escalated to root on some buffer overflow, injection attack or something. Not to mention, Linux distributions seem to have a lot of different ideas about how and where the configuration files live, what init process they want to run and the default security settings they use for the various services...
Taking all that into account will be some feat...
Because on places like Slashdot they read "BitCoin is anonymous!"
Who knows what nutty reaction this might invoke from them... It might be a good time to tap the brakes on such private provocations...
Anyone who has raised children can tell you that you don't prevent tantrums by caving in to them.
I have kids and I agree, you don't cave into an ongoing tantrum. However, that does NOT mean you don't go around avoiding situations that cause the tantrums.
For example, if your kid throws a snit in the cereal isle of the store because they want the latest 90% sugar offering in the bright box at their eye level, and you don't need cereal today, you don't go down the isle. Or if the tantrums happen when they are tired, you make sure they get enough sleep and go to the store when they are well rested. Not that you walk on eggshells, but you don't go looking for trouble if you can avoid it.
No need to poke NK with a private drone flight, so why provoke the tantrum?
Actually, the issue with NK is more about the Kim dynasty and preserving the forces that keep Kim in power. Their external activities are just designed to enforce the dominance of the Kim in power and how they can spin the events to benefit Kim's grip on power. So, as long as the reaction can be couched in "Kim outsmarts the world" or "NK has the dominate military" they will react. So if they shoot the thing down, it will be billed as a glorious triumph of Kim's efforts to protect NK from the evil USA...
Much of the "nuttiness" of NK's foreign policy revolves around the stuff going on INSIDE the country and less about actually dealing with foreign nations. It's about the Kim's staying in power and keeping up appearances to the internal audience and not really about constructively engaging with other countries. The problem with all this is that it's hard for people who are OUTSIDE the country to understand because we don't see the internal propaganda machine, or understand how the average NK citizen sees things.
Actually, this really should scare everybody, but not for the obvious reasons. Once the Kim's loose their grip the resulting internal struggle will be extremely quick and bloody, and we will be lucky if the collateral damage is confined to just China and South Korea. It will be hard to keep the conflict under control, especially if NK really does have a nuclear device or two, because you can bet Kim won't be reluctant to use them to try and stay in power.
Design? Oh sure... $10,000 is plenty to get a capable design on paper and print up some blueprints.
Build, develop software and test? Not going to happen... The engine(s) alone would burn half that....
Some low-altitude footage of the death camps would be a good thing to do...so far there's only satellite imagery and witness reports to go on.
If the evidence we have doesn't do the trick, I doubt that having low level, low quality armature drone footage will help anything.
What MIGHT help is a bit more public awareness and some new reporting on the subject but whatcha gona do beyond making up some hair brained publicity stunt?
Well his father and his grandfather are largely to blame for that. For all we know he may be trying to fix the system. ;-)
I'm no fan of these idiots but the only reason China keeps propping them up is so they have a bargaining chip with the West.
And a fairly large buffer between South Korea and them...
Actually, I think China props them up to avoid the flood of refugees that would flow north if a war did start up again. They are embarrassed with NK and are stuck with the two bit tin pot dictator they helped get into power and stuck with having to defend NK, at least some, to keep their buffer with the south. But as in all things like this, the reasons are complex and hard to accurately explain in a few sentences.
Nothing helps ease tension in a hotbed area run by a bunch of crazies with cannons aimed at Seoul like tiny drones. Good on ya, you bunch of smarties!
Yea, the government of NK gets pretty upset over some people in the south launching balloons with notes and money into their airspace, I'm thinking a "private" drone flying though their airspace might not be very welcome. Who knows what nutty reaction this might invoke from them... It might be a good time to tap the brakes on such private provocations... I'd sure hate to see the Korean war part II play out in my lifetime, complete with another installment of MASH to run nearly a decade on broadcast TV, Loretta Switt just isn't up to another tour of duty.
I guess we are ALL toast then....
Have you seen "Smart Cars" ???
You need a full head covering there, not just a hat to avoid the mind control fields..
You need to make sure to cover all the way down, well past the neck with foil, making sure it is air tight with no holes and tightly sealed at the bottom. It doesn't need to be tight fitting, just 100% sealed...
You will know you are doing it right if you start to feel light headed and out of breath. That's just the mind control waves wearing off and your brain returning to it's normal state.
When you do this, take a video and pictures and leave a note for your friends to upload them to the Darwin Awards site...
Before anybody corrects me.. It's U16, not U19....
Um.... No...
Technically it was the quick discharge of the capacitors that required a really high current at substantial voltage that jumped though an arc gap in the bulb. The arc and the quickly changing currents where what generated the EMF spike....
However, in the Pi2, the problem was light related. U19 isn't apparently shielded correctly from light and when the bright strobe light hits is it disrupts the 3.3v power supply regulation of the Pi2. When they block the light from hitting just that chip, all is well.
Flash of genius? Blinding intellect?
Or, perhaps it was dark and the subject of the photo was not actually in the tank...
Well, it's surprisingly easy to build a radio receiver. All you need is a rectifier and a bit of capacitance to convert RF into AC. Most Audio amplifiers have everything you need, except for the circuits that tune the receiver and an antenna. However, audio cables and "luck" can supply what you need for a receiver with very low sensitivity and suffer RFI from very strong RF signals nearby.
So when it is shown that they actually DO donate to laudable causes, you are upset with them because they didn't give enough of their income? This is not much more than just class envy at this point.
IMHO, it doesn't matter how much money somebody makes legally or what they do with it. I don't care if you have more than me or less than me.
Too bad, I know of two of his relatives who have more money then they know what is morally correct to do with.
You mean donating $100 million to help build up a hospital in New York isn't morally a good thing?
http://freebeacon.com/blog/koch-brother-donates-money-to-hospital-liberals-protest-not-a-parody/
Another $100 Million for Cancer Research at MIT.
Another $25 Million for Cancer Research at MD Anderson in Huston TX.
Then there are donations to the Arts, National Museums and believe it or not *environmental* projects which are on record...
Yea, these Koch brother guys are the surge of the earth all right, spending all that money on such bad things...
They could explain it well enough to show the evidence. I think I could explain with a few power point slides how this all works to a Jury, then demonstrate a few transactions and show them how that gets recorded. All that would be left is to put the publicly obtained block chains into evidence, show the transactions that involved the wallet in question and tie that wallet to the individual through inference if they destroyed the evidence or though tracing actual bank transactions where the BitCoin gets converted into cash.
Dude... Think how cool a brand new TRS-80 would be, complete with the tape recorder.... Or one of those computers with the 8 inch floppy drives... Oh the memories/nightmares!