Honestly, how different is Independance Day? The original WotW had the Earth get lucky by having a germ take out the invading aliens. Independance Day, they have some lame-ass computer virus that magically works on both Mac and Alien Ship OS!
Both of these firewalls and others do more than just simple signature matching and will continue to add more features to detect unwanted traffic at all layers of the OSI model. They can and do catch stuff tunnelled over HTTP. I would agree they aren't perfect solutions but they can do much more than the simple proxy stuff of days gone by.
Also, with the speed of modern CPUs the performance hit is negligable. We have dual OC-3 pipes and our firewall doesn't break a sweat. Try a copy of Checkpoint's Secure Platform on a cheap but powerful Intel box and just try to get the CPU to be slammed.
". there is simply no way for a firewall at the edge of a network to make intelligent decisions about application data flying past it."
Really, so then PIX fixup does nothing for you? How about Checkpoint's AI? Funny how I have lots of logs for the drops on my firewalls that are exactly because of application data triggering something the firewall doesn't like.
Actually, I read a Reader's Digest article about a similar pump a couple years ago. Some young girl in England had a viral heart infection and would have required a transplant. Instead, they stopped her heartbeat and implanted a constant pump like this. The doctors were all concerned about the effects of not having a pulse, not having 2 bounces for blood pressure measurements.
She lived quite well with the device and the stopping of her heart actually let the heart muscle repair itself. It turned out that resting the muscle was very good for it. She was eventually taken off the device and her heart restarted.
So no, there are not the adverse effects doctors had theorized about.
The NSA already produces their own version of secure Linux. It wouldn't surprise me one bit that they check that code very carefully. I doubt they just grab a copy of the RedHat ISO images and lock down the starup files.
Also, your code would have to be integrated enough into the calculations to only mis-fire when aimed at a certain target or to mis-fire at a set percentage. If the mis-fires were too high they wouldn't buy off on the weapon.
Beware the FUD that comes from articles like this. Last night on 60 minutes they ran an article about the Nevada Yucca mountain site. Totally one sided and full of FUD. At one point they interviewed a guy who said there would be 300 foot long tractor trailer trucks "the length of a football field" hauling this through people's neighborhoods. Last I checked, tractor trailers are 80 feet long. Just lots of sloppy reporting without proper fact checking.
Actually, the Patriot Act has provisions to snoop into the cars you purchase since it is a financial transaction involving tens of thousands of dollars and digging into your credit report. Believe me, if someone shows up wanting a new 15 passenger van and is going to pay cash, it will raise a flag.
The EPA doesn't actually rate the milage by running the car over a course and measuring the amount of fuel to get from A to B. It runs the car on a sniffer much the same as used for emissions testing. It reads the amount of hydrocarbons emitted by the car and BACK CALCULATES to figure out how much fuel must have been used. Obviously, if a car has multiple catalytic converters and doesn't give off much HC emissions, it must be sipping fuel!
I wish I were kidding about how stupid this really is. Basically, a Prius only gives of the emissions of a car getting 50+ mpg. The only Prius actually getting that milage is going downhill with a tailwind. The Hondas are even worse.
Saturn has billions of "moons" if something that small (137 miles?!?) is considered one. The composition of the rings alone makes up a ton. So why is this one more interesting than others?
This was reported on the BugTraq mailing list (archive on www.securityfocus.com). There is some debate as to the findings. I've seen at least one post where the person was unable to reproduce the vulnerability. In fact, being able to get to port 80 and 443 coming from the inside trusted network to the external WAN interface is not a big deal. Coming from an external address does not work on all versions of this device. Looks like they implement a simple firewall that blocks access from external but not internal.
Only 20,799? Heck, aren't there more Starbucks than that? j/k
Seriously, there is no way we can "grow" as much oil as we can suck out of the ground each day. 20,799 individual locations would make this the most successful franchise ever.
I agree as well. I used to do support for the USDA-FSIS. It is much more time and cost effective for a large support shop (>3000 end users to support when I was ther) to have a few spares lying around to just do a quick swap. Why run diagnostics for hours/days when you can put a new modem or NIC in there in 5 minutes and be done?
Now, if you are trying to run a small PC repair place and can't have the overhead of equivalent parts lying around the software MIGHT be useful. Even then, there are other diagnostics you can do with the proper knowledge and background. However, this still takes lots of time. With hardware so cheap, if you burn up 4-8 hours of time at $50/hour the customer should be pissed.
Digital cable will have problems with signal from time to time as well so don't let them lie to you about signal quality. I was at a friends house last night for the SuperBowl and he had all sorts of pixellation problems with the signal to his new LCD set. In my county we have Comcast as the only cable provider and they constantly have outages because the system they inherited (bought) was never built correctly to service the capacity of residents here. My sat (Direct TV) has only had problems when VERY stormy to the point where you shouldn't be watching the TV as lightning may take out more than just signal. Even the recent hurricane didn't disrupt my signal more than 1/2 hour. The service I've had with Direct TV is WAY better than calling the cable company as well. The cable company here doesn't even have a way to speak to a human on the other end. You only get recorded "we are experiencing outages in the following areas (name of cities) and will have them fixed as soon as possible." They don't even give you a realistic timeframe!
Has anyone ever tried to fill in what Mars would look like with oceans filling in the deeper canyons to a depth similar to Earth? I think that would make an interesting picture.
I work doing security consulting of this type. I helped a guy get himself fired simply because his response to our assessment was that security was no big deal. The credit union he worked for didn't agree and let him go. However, this was the final nail in a coffin he'd built for himself over a period of years.
I don't belive for one second you are some poor schmuck that got screwed. Sorry.
Doubtful. If it can be compiled for Linux it can be compiled for Windows too. Just because Windows doesn't come with a compiler doesn't mean you can't do it.
The counter arguments are: 1. Open Source will have a fix out much more quickly than M$. Thus, once a flaw is discovered by anyone with an ounce of ethics it is fixed quickly.
2. You can turn off unused services like RPC on open source platforms which reduces your risk.
3. Just because it has been released now doesn't mean it has never been taken advantage of by someone without any ethics, morals, scruples, etc. It just means we didn't know about it until now.
Slashdot Mirror
Honestly, how different is Independance Day? The original WotW had the Earth get lucky by having a germ take out the invading aliens. Independance Day, they have some lame-ass computer virus that magically works on both Mac and Alien Ship OS!
Fair warning: the review is lengthy, because the book demands it.
Yes, I believe on the inside cover the book EULA stating "All reviews of this material must be over 3 pages in length"
Both of these firewalls and others do more than just simple signature matching and will continue to add more features to detect unwanted traffic at all layers of the OSI model. They can and do catch stuff tunnelled over HTTP. I would agree they aren't perfect solutions but they can do much more than the simple proxy stuff of days gone by.
Also, with the speed of modern CPUs the performance hit is negligable. We have dual OC-3 pipes and our firewall doesn't break a sweat. Try a copy of Checkpoint's Secure Platform on a cheap but powerful Intel box and just try to get the CPU to be slammed.
". there is simply no way for a firewall at the edge of a network to make intelligent decisions about application data flying past it."
Really, so then PIX fixup does nothing for you? How about Checkpoint's AI? Funny how I have lots of logs for the drops on my firewalls that are exactly because of application data triggering something the firewall doesn't like.
Bah, without Pole Position who cares!
Our company uses tokens that change every 60 seconds. Try and guess that one with your computer. Password length is a minimum of 11 characters.
It isn't that hard.
Just remember, if she can sue for damages done to her website, others may try to sue Slashdot for DoS.
Actually, I read a Reader's Digest article about a similar pump a couple years ago. Some young girl in England had a viral heart infection and would have required a transplant. Instead, they stopped her heartbeat and implanted a constant pump like this. The doctors were all concerned about the effects of not having a pulse, not having 2 bounces for blood pressure measurements.
She lived quite well with the device and the stopping of her heart actually let the heart muscle repair itself. It turned out that resting the muscle was very good for it. She was eventually taken off the device and her heart restarted.
So no, there are not the adverse effects doctors had theorized about.
This sums up America so well on so many levels.
The NSA already produces their own version of secure Linux. It wouldn't surprise me one bit that they check that code very carefully. I doubt they just grab a copy of the RedHat ISO images and lock down the starup files.
Also, your code would have to be integrated enough into the calculations to only mis-fire when aimed at a certain target or to mis-fire at a set percentage. If the mis-fires were too high they wouldn't buy off on the weapon.
"who's for MORE deregulation? Anyone? Raise your hands..." Yes, all 8 of them!
Beware the FUD that comes from articles like this. Last night on 60 minutes they ran an article about the Nevada Yucca mountain site. Totally one sided and full of FUD. At one point they interviewed a guy who said there would be 300 foot long tractor trailer trucks "the length of a football field" hauling this through people's neighborhoods. Last I checked, tractor trailers are 80 feet long. Just lots of sloppy reporting without proper fact checking.
Actually, the Patriot Act has provisions to snoop into the cars you purchase since it is a financial transaction involving tens of thousands of dollars and digging into your credit report. Believe me, if someone shows up wanting a new 15 passenger van and is going to pay cash, it will raise a flag.
The EPA doesn't actually rate the milage by running the car over a course and measuring the amount of fuel to get from A to B. It runs the car on a sniffer much the same as used for emissions testing. It reads the amount of hydrocarbons emitted by the car and BACK CALCULATES to figure out how much fuel must have been used. Obviously, if a car has multiple catalytic converters and doesn't give off much HC emissions, it must be sipping fuel!
I wish I were kidding about how stupid this really is. Basically, a Prius only gives of the emissions of a car getting 50+ mpg. The only Prius actually getting that milage is going downhill with a tailwind. The Hondas are even worse.
Saturn has billions of "moons" if something that small (137 miles?!?) is considered one. The composition of the rings alone makes up a ton. So why is this one more interesting than others?
This was reported on the BugTraq mailing list (archive on www.securityfocus.com). There is some debate as to the findings. I've seen at least one post where the person was unable to reproduce the vulnerability. In fact, being able to get to port 80 and 443 coming from the inside trusted network to the external WAN interface is not a big deal. Coming from an external address does not work on all versions of this device. Looks like they implement a simple firewall that blocks access from external but not internal.
Only 20,799? Heck, aren't there more Starbucks than that? j/k
Seriously, there is no way we can "grow" as much oil as we can suck out of the ground each day. 20,799 individual locations would make this the most successful franchise ever.
Computer Weekly
I agree as well. I used to do support for the USDA-FSIS. It is much more time and cost effective for a large support shop (>3000 end users to support when I was ther) to have a few spares lying around to just do a quick swap. Why run diagnostics for hours/days when you can put a new modem or NIC in there in 5 minutes and be done?
Now, if you are trying to run a small PC repair place and can't have the overhead of equivalent parts lying around the software MIGHT be useful. Even then, there are other diagnostics you can do with the proper knowledge and background. However, this still takes lots of time. With hardware so cheap, if you burn up 4-8 hours of time at $50/hour the customer should be pissed.
Digital cable will have problems with signal from time to time as well so don't let them lie to you about signal quality. I was at a friends house last night for the SuperBowl and he had all sorts of pixellation problems with the signal to his new LCD set. In my county we have Comcast as the only cable provider and they constantly have outages because the system they inherited (bought) was never built correctly to service the capacity of residents here. My sat (Direct TV) has only had problems when VERY stormy to the point where you shouldn't be watching the TV as lightning may take out more than just signal. Even the recent hurricane didn't disrupt my signal more than 1/2 hour. The service I've had with Direct TV is WAY better than calling the cable company as well. The cable company here doesn't even have a way to speak to a human on the other end. You only get recorded "we are experiencing outages in the following areas (name of cities) and will have them fixed as soon as possible." They don't even give you a realistic timeframe!
Has anyone ever tried to fill in what Mars would look like with oceans filling in the deeper canyons to a depth similar to Earth? I think that would make an interesting picture.
I work doing security consulting of this type. I helped a guy get himself fired simply because his response to our assessment was that security was no big deal. The credit union he worked for didn't agree and let him go. However, this was the final nail in a coffin he'd built for himself over a period of years.
I don't belive for one second you are some poor schmuck that got screwed. Sorry.
Doubtful. If it can be compiled for Linux it can be compiled for Windows too. Just because Windows doesn't come with a compiler doesn't mean you can't do it.
The counter arguments are:
1. Open Source will have a fix out much more quickly than M$. Thus, once a flaw is discovered by anyone with an ounce of ethics it is fixed quickly.
2. You can turn off unused services like RPC on open source platforms which reduces your risk.
3. Just because it has been released now doesn't mean it has never been taken advantage of by someone without any ethics, morals, scruples, etc. It just means we didn't know about it until now.
03-039 will overwrite 03-026 and make your machine appear to be vulnerable to Blaster when it really isn't. Read the release notes on 03-039.