That having been said, if there is any way you can do a trial of a large number of PINs, it is trivial to try all 10,000 possibilities, and see which one works, no matter how strong the encryption is.
One would certainly hope that after some small number of attempts with incorrect PINs, the payment processor would flag the card. But I don't know anything about that...
It depends on what was compromised. Normally, debit card stuff is encrypted on the pad you swipe the card in. If the pad was wasn't what was compromised, then the key wasn't on what was, because that's the only place the key is kept.
The article I read stated that the key necessary to decrypt the data was never on the systems which encrypted the data, then went on to state that the data was encrypted with triple DES. Oh my lord. Which is it? Symmetric or asymmetric encryption?
SSDs were made to replace harddrives. what happens when you unplug power from harddrives in the middle of a write?
Hard drives do not constantly re-arrange pages into newly-erased blocks, and so do not constantly have to update the mapping of logical blocks to physical location, so with power removed will most likely just drop whatever file data is in cache, instead of dropping the mapping update like an SSD which potentially results in massive corruption.
UPS are cheap and reliable, and give you time to shut down.
BWAHAHAHAHA! Cheap UPSs are not reliable. Seriously, just put in a new NAS this year for user backups, in a building (hospital) with extremely reliable power, but put it on a UPS just in case. And within a few months the UPS failed, abruptly cutting power to the NAS. That is just one story, but I have many others involving cheap UPSs.
LOL. This from a company that uses rounded corners as a patentable way to differentiate themselves from the rest of the market. By that light, being a different color sounds like "innovation" to me;)
Was that sarcasm? It didn't sound like it. So, learn to use a dictionary, start with the word "colorable"...
Meddling in the deals between the carriers and the customers has been a tradition of theirs since the first iPhone.
True. But going back to the first iPhone: do you really think it was bad for Apple to push AT&T to provide unlimited data at a then-unheard-of rate? Do you think it was a good thing that in later years either Apple quit pushing for that or AT&T won the argument, and that rate now gets us a piddly amount of data???
So for code with lots of complex data types (as opposed to big arrays of floating point data), that still has to run fast, it makes sense.
Well, here's the problem. Code that is that performance-sensitive can often benefit a whole lot more from a better design that does not have so many pointers pointing to itty-bitty data bits. (For instance, instead of a binary tree, a B-tree with nodes that are at least a couple of cache lines, or maybe even a whole page, wide.) There are very very few problems that actually require that a significant portion of data memory be occupied by pointers. There are lots and lots of them where the most convenient data structure uses lots of pointers, but if you're going to optimize how much you can cram in cache at once, eliminating pointers is better than shrinking them. Also, in many cases (such as the example I mentioned earlier), chunking things instead of pointers to individual items can greatly improve locality of access. And finally, of course, the irony is an awful lot of problems that are so performance-sensitive need the high performance precisely because they're dealing with large amounts of data. So yeah, it could be useful--but the problems where it is really useful are probably extremely limited.
The downside is that you need a proper fully functional multi-arch system like is slowly getting adopted by Debian in order to handle multiple ABIs. And then you get into iffy things on if you want the faster/usr/bin/perl or one that can handle 6-gig lists efficiently...
You also get into the problem that having two sets of libraries in use is not exactly good for cache pressure;-)
They were sentenced on Monday. Pretty sure Monday morning in Dubai was about a day and a half ago. They were first arrested "several weeks ago", yes but the actual disposition of the case is significant news.
And the summary makes no mention whatsoever that they have now been sentenced.
I guess you're the sort of reality TV viewer who gets all stirred up by some barely newsworthy event then just as quickly gets distracted by whatever the new outrage of the day is and forgets all about what he was upset about the day before. I wouldn't be proud of that if I were you, but rather ashamed.
No, I'm the kind of busy person who expects a fucking decent summary that doesn't make me work to figure out what's the news it's trying to communicate;-)
Well that's nice and all, but considering the recent history of reports that subsequently did not happen, it would certainly have been good to mention that Apple issued a press release announcing this yesterday.
It is a lie, or maybe they don't know what "at worst" means.
When I first read the summary, I seriously wondered if they meant "at best".
Re:Multithreading, web workers, and SMP support?
on
Asm.js Gets Faster
·
· Score: 1
However even IE 8 supports multithreading and having a different thread for each tab. Chrome had this since 1.0. Webworkers require this and security requires this.
Uhm, no, security requires separate processes, not separate threads.
Shit on a 6 core cpu I had for 3 years now I should not have +30 tabs using one damn cpu?!
True, but on the other hand, Flash can only hose 1 core and the performance of the browser, leaving all other processes able to share 5/6 of your CPU power. With process-per-tab, now Flash can hose all your cores and bring the whole box to its knees.
Until you get into the tens of millions of dollars, 32-bit integers are fine for counting currency down to the cent. What kind of "(monetary) transaction processing system" were you talking about?
Well, let's see, in 2007 there were over 200,000 companies in the U.S. with over $10,000,000 in receipts... (http://www.census.gov/econ/smallbus.html)
Update the ecma standard to include a set of features that is meant to be used when compiling a better language (C#, C++, Java, Perl, Python, LISP, Haskell, x86 asm, MUMPS, pig-latin, etc) down to javascript so it will run in any browser. Then I think everyone will be happy.
Fixed that for you;-)
So who needs native code now?
on
Asm.js Gets Faster
·
· Score: 3, Interesting
Anybody who writes performance-sensitive code other than trivial contrived benchmarks.
SV has successful industry and a tax base and some hope of supporting itself. As opposed to the blithering morons who want to secede and form North Colorado (or Metherado as one wag said) who apparently have no idea who is actually paying for their schools and roads and police...
Bill Gates, I think somewhere in his brain he wants to be altruistic for some philosophical reason, but his charity really just pumps M$ products and tries to make teachers be paid by performance.
Uhm, no. He has done some tinkering with that in the US, and has been slammed for it here--rightly, in my opinion. But his real focus has been fighting disease in the 3rd world--childhood vaccinations and anti-malaria efforts, and those are hugely worthy efforts.
The last time I calculated it, it was still more expensive per mile to buy and use E85 in my car.
Yep. That's the market at work, supply and demand. As long as there's enough people to buy at those prices because they can't do the basic math and instead are just mesmerized by the lower $/gal, it will be sold at those prices.
Disconnect the existing thermostat so that it does nothing, but is still available for her to change. Install new real thermostat in a hidden location.
You jest. I knew some guys in a company who did exactly that in their office. Funny thing was, the women who fought every day over the thermostat never even noticed. They continued their daily wars of up->down->up->down without noticing that it no longer did anything.
Slashdot Mirror
That having been said, if there is any way you can do a trial of a large number of PINs, it is trivial to try all 10,000 possibilities, and see which one works, no matter how strong the encryption is.
One would certainly hope that after some small number of attempts with incorrect PINs, the payment processor would flag the card. But I don't know anything about that...
It depends on what was compromised. Normally, debit card stuff is encrypted on the pad you swipe the card in. If the pad was wasn't what was compromised, then the key wasn't on what was, because that's the only place the key is kept.
Ah, thanks for the clarification.
The article I read stated that the key necessary to decrypt the data was never on the systems which encrypted the data, then went on to state that the data was encrypted with triple DES. Oh my lord. Which is it? Symmetric or asymmetric encryption?
SSDs were made to replace harddrives. what happens when you unplug power from harddrives in the middle of a write?
Hard drives do not constantly re-arrange pages into newly-erased blocks, and so do not constantly have to update the mapping of logical blocks to physical location, so with power removed will most likely just drop whatever file data is in cache, instead of dropping the mapping update like an SSD which potentially results in massive corruption.
UPS are cheap and reliable, and give you time to shut down.
BWAHAHAHAHA! Cheap UPSs are not reliable. Seriously, just put in a new NAS this year for user backups, in a building (hospital) with extremely reliable power, but put it on a UPS just in case. And within a few months the UPS failed, abruptly cutting power to the NAS. That is just one story, but I have many others involving cheap UPSs.
LOL. This from a company that uses rounded corners as a patentable way to differentiate themselves from the rest of the market. By that light, being a different color sounds like "innovation" to me ;)
Was that sarcasm? It didn't sound like it. So, learn to use a dictionary, start with the word "colorable"...
There are many of us of a certain age (50ish) who remember during summer vacations being told not to be at home until after dark. Seriously.
Meddling in the deals between the carriers and the customers has been a tradition of theirs since the first iPhone.
True. But going back to the first iPhone: do you really think it was bad for Apple to push AT&T to provide unlimited data at a then-unheard-of rate?
Do you think it was a good thing that in later years either Apple quit pushing for that or AT&T won the argument, and that rate now gets us a piddly amount of data???
Slower rate of change in gems might indicate less need for change.
So for code with lots of complex data types (as opposed to big arrays of floating point data), that still has to run fast, it makes sense.
Well, here's the problem. Code that is that performance-sensitive can often benefit a whole lot more from a better design that does not have so many pointers pointing to itty-bitty data bits. (For instance, instead of a binary tree, a B-tree with nodes that are at least a couple of cache lines, or maybe even a whole page, wide.) There are very very few problems that actually require that a significant portion of data memory be occupied by pointers. There are lots and lots of them where the most convenient data structure uses lots of pointers, but if you're going to optimize how much you can cram in cache at once, eliminating pointers is better than shrinking them. Also, in many cases (such as the example I mentioned earlier), chunking things instead of pointers to individual items can greatly improve locality of access. And finally, of course, the irony is an awful lot of problems that are so performance-sensitive need the high performance precisely because they're dealing with large amounts of data. So yeah, it could be useful--but the problems where it is really useful are probably extremely limited.
The downside is that you need a proper fully functional multi-arch system like is slowly getting adopted by Debian in order to handle multiple ABIs. And then you get into iffy things on if you want the faster /usr/bin/perl or one that can handle 6-gig lists efficiently...
You also get into the problem that having two sets of libraries in use is not exactly good for cache pressure ;-)
The phrase "has been imprisoned" implies such.
No, it most certainly does not. One can be imprisoned for years, decades even, while awaiting trial...
They were sentenced on Monday. Pretty sure Monday morning in Dubai was about a day and a half ago. They were first arrested "several weeks ago", yes but the actual disposition of the case is significant news.
And the summary makes no mention whatsoever that they have now been sentenced.
I guess you're the sort of reality TV viewer who gets all stirred up by some barely newsworthy event then just as quickly gets distracted by whatever the new outrage of the day is and forgets all about what he was upset about the day before. I wouldn't be proud of that if I were you, but rather ashamed.
No, I'm the kind of busy person who expects a fucking decent summary that doesn't make me work to figure out what's the news it's trying to communicate ;-)
Weeks old. Yes, it's important. But sheesh, it was news several weeks ago, now it's just a really lame, stale, old dupe.
Well that's nice and all, but considering the recent history of reports that subsequently did not happen, it would certainly have been good to mention that Apple issued a press release announcing this yesterday.
Did any of them declare losses of -$2147483648 to the IRS?
Ahem, -$21,474,836.48? Yes, certainly. And many more reported total revenue of that or more.
(Yes, you get to round to dollars for the IRS, but no that does not mean your accounting system can ignore cents.)
It is a lie, or maybe they don't know what "at worst" means.
When I first read the summary, I seriously wondered if they meant "at best".
However even IE 8 supports multithreading and having a different thread for each tab. Chrome had this since 1.0. Webworkers require this and security requires this.
Uhm, no, security requires separate processes, not separate threads.
Shit on a 6 core cpu I had for 3 years now I should not have +30 tabs using one damn cpu?!
True, but on the other hand, Flash can only hose 1 core and the performance of the browser, leaving all other processes able to share 5/6 of your CPU power. With process-per-tab, now Flash can hose all your cores and bring the whole box to its knees.
Until you get into the tens of millions of dollars, 32-bit integers are fine for counting currency down to the cent. What kind of "(monetary) transaction processing system" were you talking about?
Well, let's see, in 2007 there were over 200,000 companies in the U.S. with over $10,000,000 in receipts... (http://www.census.gov/econ/smallbus.html)
Update the ecma standard to include a set of features that is meant to be used when compiling a better language (C#, C++, Java, Perl, Python, LISP, Haskell, x86 asm, MUMPS, pig-latin, etc) down to javascript so it will run in any browser. Then I think everyone will be happy.
Fixed that for you ;-)
Anybody who writes performance-sensitive code other than trivial contrived benchmarks.
SV has successful industry and a tax base and some hope of supporting itself. As opposed to the blithering morons who want to secede and form North Colorado (or Metherado as one wag said) who apparently have no idea who is actually paying for their schools and roads and police...
Let's just make sure he gets added to the list, then see how he feels about the subject!
Bill Gates, I think somewhere in his brain he wants to be altruistic for some philosophical reason, but his charity really just pumps M$ products and tries to make teachers be paid by performance.
Uhm, no. He has done some tinkering with that in the US, and has been slammed for it here--rightly, in my opinion. But his real focus has been fighting disease in the 3rd world--childhood vaccinations and anti-malaria efforts, and those are hugely worthy efforts.
The last time I calculated it, it was still more expensive per mile to buy and use E85 in my car.
Yep. That's the market at work, supply and demand. As long as there's enough people to buy at those prices because they can't do the basic math and instead are just mesmerized by the lower $/gal, it will be sold at those prices.
Disconnect the existing thermostat so that it does nothing, but is still available for her to change. Install new real thermostat in a hidden location.
You jest. I knew some guys in a company who did exactly that in their office. Funny thing was, the women who fought every day over the thermostat never even noticed. They continued their daily wars of up->down->up->down without noticing that it no longer did anything.