This needs so many more points. As someone who has been to prison - guilty as charged and pled to it, there are many who were not. There are plenty who were guilty in prison, but one that is not is too many.
One particular case stands out to me. Navy soldier, on leave, drunk. Seen in an altercation in a bar with someone. that someone was known for instigating fights. Person winds up stabbed to death later.
The suspect is arrested, and drunk, and with a huge lack of sleep, under duress from trained psychological tactics confesses. He later recants. Blood at the scene does not match hos or the victims blood type. None matches his. No physical evidence shows he was there. Convicted of 2nd degree murder.
He has a family member (through an attorney) years later make an inquiry if the evidence is still in storage. Murder cases are supposed to have evidence kept for a very long time (if not forever) in my state. They are told yes. Attorney gets innocence project involved. A few months later the innocence project requests evidence, and is told sorry, it was 'lost' in a move between labs, never to be found again.
This man did more than two decades before mandatory release. For a crime he possibly did not commit. He is not the only one with stories like this.
"The degree of civilisation in a society is revealed by entering its prisons." -Fyodor Dostoyevsky
"If you want to see the scum of the earth, go to any prison - at shift change" - Paul Harvey
If these were legitimately violent protesters being arrested..for violence..then by all means search. If this was random jo standing and shouting without violence, then no. Context is important here and TFS and the first linked TFA are not clear on if all who were arrested were violent, nor who had devices/accounts searched.
Part of the reason of that is the opacity with which government treats these things. That makes it hard as hell to be an informed populace and fight overreach. It is also something Obama promised and never delivered, he in fact often did the opposite. This is not a partisan statement, as I have nothing but disdain for or current administration and tend to lean pretty damn liberal. I mention it as a point of fact that few, if any of those in power have your or my interest at heart, regardless of the populist messages they spew.
But if you ask permission... buried in subparagraph 52a, section c page 382, of an on screen EULA with an easy accept (whether you read it or not) button, all is somehow okay.
Seems like you handily forgot Trent Reznor. Who still works at Apple music although he seems to be a whiny little b**** now instead of giving away his music for free he wants to complain about streaming on YouTube
The last one you saw does not equal probably for any others. Your sample size sucks. Mine is not much better, but the last 3 successful crypto attacks I have seen have been through drive by downloads and very well socially engineered emails with attachments.
Yes RDP open on 3389 is stupid, but believe it or not we have clients with legacy software that requires it. Only solution is to reduce attack surface. Frequently check accounts, change passwords etc. Oh, and the last successful RDP breaches I saw did not result in crypto, mostly ID theft and confidential data exfiltration.
Ummm... for this attack it does not matter whether the media file is hosted on a torrent or any other service. It is not the act of downloading it that de-anonymizes, it is opening the file and the player dials home for a DRM check.
"wannabe"
"pr flacks"
number doubting '"less than 1% of our user base." But the firm's incident log says 707 users have lost data"
Why the negative tone? I am not a coder. I do not use GitLab or GitHub except for an occasional download. However, generally competition is good. Sure this company lost data.. so do many. The real questions are is this indicative of a systemic issue or just a one time occurrence. I just don't see why this level of negativity is being pushed against this company.
Good info to have. When I do read on the subject it is only one source. av-test is another. The third is decidedly more anecdotal and subjective, but we see a lot of infected PCs here, with a lot of different AVs. so you do get some clues that way as well.
A question... would you rather have a false positive that stops one or two users from using a program, or a false negative resulting in a crypto virus infection that shuts your entire business down? Our customers pay us monthly, and if there are problematic false positives, we can go straight to the appropriate vendors and get it resolved.
We recently worked a case where some vertifore software was conflicting in a strange way with the BitDefender engine. It took a bit to get resolved as it was a deep issue, but now it is fine. We also had issues in the past with a signature collision with a common Quickbooks DLL. That was resolved faster. Is it a pain, yes, but it is less of a pain than recovering 3-5TB of encrypted data and rebuilding a multi site windows domain. I know, I have done both.
85-89% is not good when competitors have above 90 and 95%. Read up on av-test and av-comparatives. I have not read for about a year, so things could have changed, but my clients are specifically targeted, plus the normal random probing and targeting that goes on. That 10% difference can be the difference between normal operations and a 1-2 day shutdown to recover a cryptolocked server from online backups. Our bill is big for that but not nearly as big as not having your entire firm run for 1-2 days.
Defender may be well behaved in terms of system utilization and other programmatic things like not install browser hooks, etc, but it has a history of being poor at actually catching viruses. Just a year or so ago it had an 85-89% catch rate. That may have improved as it has been a while since I read the literature.
That said, no AV is a poor prospect too, especially for business. I work for a local break-fix shop that also is branching into MSP work for out small to mid biz clients. Out system uses a modified Bitdefender + site blacklisting. It works well but does have a foot print. I say it is useful though because some of our clients are 30-50 seat law firms, insurance companies, and financial institutions - you would not believe how heavily targed they are with social engineer attacks designed to install malware. Mostly through email attachments, but there have been DOS attacks, password attacks against open ports, and DNS redirect attacks.
User training is #1, but AV and good backups have saved the bacon more than once. We see constant removals of crypto virus installers, only 2x in the past 3 years has one actually gotten through by being too new for detection. How many would that be without an AV with a 95%+ catch rate?
In reality I use Project FI. GSM is typically easier to travel with. I used to keep an old GSM phone around just for that when I was a Ting customer (Sprint only MVNO at the time). With Fi I ride Sprint or T-Mo on a nexus 6 that supports GSM and CDMA. Makes it pretty simple.
Saturated markets can still have movement of swaths of customers between competing providers.
Indeed, but is that news for tech nerds? Finance nerds, perhaps.
Not just finance nerds, which I am not. But still of interest to me, if for no other reason than of the big 4 mobile providers, it is Sprint I like the most. In order of best to worst:
1 Sprint - about as good as a root canal
2 T-Mo - better than having your fingernails ripped off, but not much
3 Verizon - pretty much equal to having your testicals raked across molten salt and nibbled on by piranahs
4 At&T - Smells like shit, tastes like shit, treats everyone like shit, I am sort of surprised they won't take turds as payment. About as fun as having a bag of scorpions funneled into various orifices.
Not to mention safety. I'd hate to be the nearest Fire Department to that place...
Have you ever seen video of a refinery going up? Or a propane storage facility?
You should look sometimes. This is little more dangerous than those. In face with other fuels, things like gas and liquid fuels are transported by pipeline, truck and rail. All have had accidents near populated residential areas.
Any sufficiently dense energy storage can be dangerous if it somehow releases that energy quickly. I would rather that be at a stationary facility that is isolated and perhaps less manned than trucks and rail carrying large volumes of fuel about.
I remember them. In 99-2001 I was working for a DSL startup that was trying to horn in on the local LECs. We had a unique business plan though. While we would server residential, we were mostly looking for small to mid-sized business with more than one location. Networking multiple offices was very expensive then. we had on the edge of our network, a box called a springtide. This company/HW was bought by Lucent and allowed for virtual routers inside this router. It was a layer 2 ATm endpoint and we could then privately connect different offices on a private network and NAT the internet traffic out. Aside from some edgecase NAT issues it worked okay, but there were questions if the Springtide router could scale enough for a large customer base.
Aside from a few small Cisco routers on the management network, and a box Ciscos at the edge (our edge providers were Frame relay, and the Springtide only supported ATM), we were Lucent shop. I was working toward my LCTE and a core engineer for this network when the bubble burst. I saw the writing on the wall and fled for a more local IT position. This shop did not get a 2nd round of venture capital, even though I thought the business plan was solid, and they did not have enough customers to be solvent.
That said I remember the Lucent split, and I also remember that even before then much of the Lucent equipment we used was fragmented. Lucent had absorbed lots of different companies so our main ATM switches had one interface, our endpoint ATM switches another, the Springtide yet another. the DSLAMS used HPUX to manage them and had yet a different OS. Most of the other ATM devices used various management applications on Solaris with a sybase backend.
This made for a lot to learn with so many different management and config systems from ONE manufacturer. At least at the time Cisco IOS was fairly consistent across devices. Bay/Nortel from my previous shop seemed pretty consistent by comparison too.
One particular case stands out to me. Navy soldier, on leave, drunk. Seen in an altercation in a bar with someone. that someone was known for instigating fights. Person winds up stabbed to death later.
The suspect is arrested, and drunk, and with a huge lack of sleep, under duress from trained psychological tactics confesses. He later recants. Blood at the scene does not match hos or the victims blood type. None matches his. No physical evidence shows he was there. Convicted of 2nd degree murder.
He has a family member (through an attorney) years later make an inquiry if the evidence is still in storage. Murder cases are supposed to have evidence kept for a very long time (if not forever) in my state. They are told yes. Attorney gets innocence project involved. A few months later the innocence project requests evidence, and is told sorry, it was 'lost' in a move between labs, never to be found again.
This man did more than two decades before mandatory release. For a crime he possibly did not commit. He is not the only one with stories like this.
Find this video from 2006 and ask has it gotten any better? http://www.cnn.com/CNN/Program...
"The degree of civilisation in a society is revealed by entering its prisons." -Fyodor Dostoyevsky
"If you want to see the scum of the earth, go to any prison - at shift change" - Paul Harvey
Part of the reason of that is the opacity with which government treats these things. That makes it hard as hell to be an informed populace and fight overreach. It is also something Obama promised and never delivered, he in fact often did the opposite. This is not a partisan statement, as I have nothing but disdain for or current administration and tend to lean pretty damn liberal. I mention it as a point of fact that few, if any of those in power have your or my interest at heart, regardless of the populist messages they spew.
That's a salad? I thought it was Bolognese...hmmm
But if you ask permission... buried in subparagraph 52a, section c page 382, of an on screen EULA with an easy accept (whether you read it or not) button, all is somehow okay.
Ever hear of Nine Inch Nails? That is Trent Reznor's project.
Seems like you handily forgot Trent Reznor. Who still works at Apple music although he seems to be a whiny little b**** now instead of giving away his music for free he wants to complain about streaming on YouTube
Modern, 64 bit CPUs also contain things like Intel's IME (or the AMD alternative), a small, always on CPU with network access. This is more secure?
A paper faggot? Interesting, normally they are made out of pre-processed wood. have any images?
Welcome to adulting....have a bag of cynicism and negativity and despair to go with that.
Existing models will be able to be retrofitted with the enhanced shielding, which will allow the monitor to be placed near a router.
For a fee.. on a $1000 piece of hardware that we engineered poorly. Fuck off with that.
Yes RDP open on 3389 is stupid, but believe it or not we have clients with legacy software that requires it. Only solution is to reduce attack surface. Frequently check accounts, change passwords etc. Oh, and the last successful RDP breaches I saw did not result in crypto, mostly ID theft and confidential data exfiltration.
Ummm... for this attack it does not matter whether the media file is hosted on a torrent or any other service. It is not the act of downloading it that de-anonymizes, it is opening the file and the player dials home for a DRM check.
"pr flacks"
number doubting '"less than 1% of our user base." But the firm's incident log says 707 users have lost data"
Why the negative tone? I am not a coder. I do not use GitLab or GitHub except for an occasional download. However, generally competition is good. Sure this company lost data.. so do many. The real questions are is this indicative of a systemic issue or just a one time occurrence. I just don't see why this level of negativity is being pushed against this company.
Good info to have. When I do read on the subject it is only one source. av-test is another. The third is decidedly more anecdotal and subjective, but we see a lot of infected PCs here, with a lot of different AVs. so you do get some clues that way as well.
We recently worked a case where some vertifore software was conflicting in a strange way with the BitDefender engine. It took a bit to get resolved as it was a deep issue, but now it is fine. We also had issues in the past with a signature collision with a common Quickbooks DLL. That was resolved faster. Is it a pain, yes, but it is less of a pain than recovering 3-5TB of encrypted data and rebuilding a multi site windows domain. I know, I have done both.
85-89% is not good when competitors have above 90 and 95%. Read up on av-test and av-comparatives. I have not read for about a year, so things could have changed, but my clients are specifically targeted, plus the normal random probing and targeting that goes on. That 10% difference can be the difference between normal operations and a 1-2 day shutdown to recover a cryptolocked server from online backups. Our bill is big for that but not nearly as big as not having your entire firm run for 1-2 days.
That said, no AV is a poor prospect too, especially for business. I work for a local break-fix shop that also is branching into MSP work for out small to mid biz clients. Out system uses a modified Bitdefender + site blacklisting. It works well but does have a foot print. I say it is useful though because some of our clients are 30-50 seat law firms, insurance companies, and financial institutions - you would not believe how heavily targed they are with social engineer attacks designed to install malware. Mostly through email attachments, but there have been DOS attacks, password attacks against open ports, and DNS redirect attacks.
User training is #1, but AV and good backups have saved the bacon more than once. We see constant removals of crypto virus installers, only 2x in the past 3 years has one actually gotten through by being too new for detection. How many would that be without an AV with a 95%+ catch rate?
In reality I use Project FI. GSM is typically easier to travel with. I used to keep an old GSM phone around just for that when I was a Ting customer (Sprint only MVNO at the time). With Fi I ride Sprint or T-Mo on a nexus 6 that supports GSM and CDMA. Makes it pretty simple.
Someone will port Android to Apple phones.......
Indeed they can. My post was an argument for battery storage, even without protection mechanisms like firewalls - as opposed to other storage mediums.
Saturated markets can still have movement of swaths of customers between competing providers. Indeed, but is that news for tech nerds? Finance nerds, perhaps.
Not just finance nerds, which I am not. But still of interest to me, if for no other reason than of the big 4 mobile providers, it is Sprint I like the most. In order of best to worst:
1 Sprint - about as good as a root canal
2 T-Mo - better than having your fingernails ripped off, but not much
3 Verizon - pretty much equal to having your testicals raked across molten salt and nibbled on by piranahs
4 At&T - Smells like shit, tastes like shit, treats everyone like shit, I am sort of surprised they won't take turds as payment. About as fun as having a bag of scorpions funneled into various orifices.
Saturated markets can still have movement of swaths of customers between competing providers.
Not to mention safety. I'd hate to be the nearest Fire Department to that place...
Have you ever seen video of a refinery going up? Or a propane storage facility?
You should look sometimes. This is little more dangerous than those. In face with other fuels, things like gas and liquid fuels are transported by pipeline, truck and rail. All have had accidents near populated residential areas.
Any sufficiently dense energy storage can be dangerous if it somehow releases that energy quickly. I would rather that be at a stationary facility that is isolated and perhaps less manned than trucks and rail carrying large volumes of fuel about.
Aside from a few small Cisco routers on the management network, and a box Ciscos at the edge (our edge providers were Frame relay, and the Springtide only supported ATM), we were Lucent shop. I was working toward my LCTE and a core engineer for this network when the bubble burst. I saw the writing on the wall and fled for a more local IT position. This shop did not get a 2nd round of venture capital, even though I thought the business plan was solid, and they did not have enough customers to be solvent.
That said I remember the Lucent split, and I also remember that even before then much of the Lucent equipment we used was fragmented. Lucent had absorbed lots of different companies so our main ATM switches had one interface, our endpoint ATM switches another, the Springtide yet another. the DSLAMS used HPUX to manage them and had yet a different OS. Most of the other ATM devices used various management applications on Solaris with a sybase backend.
This made for a lot to learn with so many different management and config systems from ONE manufacturer. At least at the time Cisco IOS was fairly consistent across devices. Bay/Nortel from my previous shop seemed pretty consistent by comparison too.
Agreed.. this!