Everybody who didn't pay for a Microsoft email account had the entire contents of their mailbox at risk for the past 6 months...
"...the issue is much worse than previously reported, with the hackers able to access email content from a large number of Outlook, MSN, and Hotmail email accounts, according to a source who witnessed the attack in action and described it before Microsoft’s statement, as well as screenshots provided to Motherboard. Microsoft confirmed to Motherboard that hackers gained access to the content of some customers’ emails."
My first thought when I read the headline was "yeah, right". I checked the source link, saw it was cnn, then read the rest of the summary to see how many holes I could find. I'm sure the actual paper is fine, and they seem to have a decent sample size and timeframe, but the summary leaves out a lot of details that are linkely in there somewhere and substantially alter the final conclusions.
The RHEL/CentOS relationship is not adversarial, and the impact of CentOS on RHEL sales is likely overall or wash or maybe a net positive. It's the "first one is free" mindset. You get people using CentOS for free, so the skillset and familiarity is there for RHEL. If CentOS wasn't there, then a company that would have run it would be saying to itself "well, I guess we'll just pay for RHEL licensing", they would either use another free distro or just use Windows, which is likely cheaper anyways.
Companies that use RHEL will also factor in CentOS to the overall environment cost. A full complement of Dev/Testing/UAT/Prod with RHEL licensing is more expensive than the same deployment with Windows. Use CentOS for all or even a portion of those outside of production and RHEL becomes more cost effective.
A computer is a device that is user-programmable, aka you are not restricted to the apps found in the vendor's app store. The iPad is a content delivery mechanism much like a BluRay player (which has games too thanks to BD-J)
Let's say I start a project. I can easily put a Dogecoin or any other crypto-currency wallet address on the website so people can make donations.
There wouldn't be a PayPal blocking the withdrawal of funds because of "reason X", no credit card company taking their cut and no bank freezing my account.
At least until you try converting your cryptocurrency into govt money and the exchange is "down for maintenance". The exchanges (well, *somebody*) also take a cut when you make a transfer, it's just not of the magnitude that credit card companies do.
HPE? The only thing EDS has ever known how to do is market (read 'blowjobs') to government and Fortune 500, while delivering absolute shit, late and over budget. They can't die quick enough.
EDS is part of DXC since March, but that division is getting spun off again next March....try to keep up.
HPE is basically DEC/Compaq as far as I can tell...they have server hardware, cloud, and some bits and pieces of software.
If someone came up with a phone that got an order of magnitude *more* of my behavioral, locational, and conversational data crunched by big services in order to leverage it all for customization/context/workflows, *that* is something I'd be interested in. Take my data. Make my life faster/better/more convenient.
I don't need someone to make secret the fact that I like show X and buy product Y and often drive to place Z. I need someone to spread the word to as many services as possible and help them to make use of this data to make my life better.
Is this sarcastic? How does all this crap make you life faster/better/more convenient? If anything, I think it has the opposite effect. We're inundated with data now to the point where the only way to truly focus on anything is to turn off the data feed. When you're "connected" you're multitasking all the time slowly accruing stress, and doing whatever you're trying to do not as well as you would if it was your singular focus.
If not sarcastic, then I'm genuinely interested in specific examples of how these help you out. The only use I've seen for any of these sorts of things is wholly marketing and revenue driven, i.e. "customer is within 1/2 mile of your restaurant, so send them a text with a 2-for-1 happy hour drink special in the hopes they stop what they're doing and go to your restaurant instead". The only application of these services where I found a benefit is with a group of friends at a large music festival where we could look at a map and see where the rest of the group was...except the cell towers were so saturated that it really didn't end up working that well.
I guess I see what point you are trying to make, I just don't think you are half as clever as you believe you are. Especially if you are comparing your programming job (I have never worked a an IT job that didn't have flexible hours) with say, a service industry job in the US.
But for the counterpart, as a software dev in the States.
You're also an anomaly. I know far many more people in IT who are working 60 hour weeks and drive an hour each way into the office, get 15 days paid vacation that doesn't roll over to the next year, and any sick time comes out of their 15 days of paid vacation.
That's interesting, so the kid who can only communicate through a sip & puff connected to a laptop is better off without a laptop in the classroom? Oh that's an exception? What about the kid with a processing speed deficit who performs their work 3 times faster on a laptop? Another exception? What about a well run classroom where the teachers is supervising what the children are doing, the same way as my teachers called me out when I was doodling at my desk instead of getting my work done?
Like most things involving humans, sweeping conclusionary statements about the educational process are myopic and ill advised, because educational methods should be shaped to the PEOPLE involved. What works for one teacher/student/class will not work for another teacher/student/class combination. That's why teachers are professionals, the same way as IT professionals are, they shape their approach to the situation at hand. (and before someone makes a disparaging remark about teachers, allow me to point out we all know IT people who should be in another profession too)
Min
The study was done on college students, not children. Professors are not going to babysit the class and police what they are doing, and they shouldn't be. If you paid $5000 for a class, then you should probably just leave the laptop at home and take notes with a pen and paper.
So, their office basically looks like it is a basketball court with a few card tables thrown together. Not even some external monitors. No surprise that nobody shows up to that office. At least provide some proper desks and decent KVM setups with dual monitors.
But the companies' (Endgame) blog pages has some actual concrete info. Reading over the site, much of what he talks about is already implemented, or at least there is software out there that companies can get (much of it open source). To quote his page Hunting on hosts:" running processes, active network connections, listening ports, artifacts in the file system, user logs, autoruns", using Yari, etc. BUT, at least this page isn't just "buy my product" but does give some tutorials / examples of how to use various free utilities (like Sysinternals, Yari with Powershell, Elasticsearch) and he even includes CLI examples. I'm bookmarking this and will read over it later when it's not 04:32 and I should be asleep instead of posting on Slashdot LOL.
Exactly. It is not a new concept at all and something I did as a sysadmin 10 years ago when I got bored. You don't need a product, you just need to pay attention and have the management support to spend some time doing it. In more security-evolved companies, everybody contributes x% of their time doing this.
Threat Hunting isn't exactly a new concept, it's been around for ages.
But it seems someone, somewhere decided it is going to be the new "hype-base" for magical next generation boxes.. because the previous hype (Threat Intelligence) is dying.
So yeah, cue 2-3 years of "you must hunt proactively with our products"-hype
Unfortuately, you had to go through 3/4 of the article before he even got to what he was talking about. I was pretty disappointed once I got there, although I was expecting it.
Maybe it is time to set up an on-prem cloud-based hunt team solution?
Feed a lot of it to your grandpa who has arteriosclerosis and an unexpected windfall will be coming your way!
That's also been debunked. Meat and fat don't cause problems; a high carb diet is far worse. So to carry out your plan, feed him pancakes with plenty of syrup.
Everything has been debunked. Eat whatever the hell you want.
Ok, I know it's really silly to draw analogies between using ancient laptops and the team performance. I just want to mention here that since 2013 season McLaren has been been a shadow of its former self.
McLaren finished the 2012 season arguably with the fastest car on the grid, but for the 2013 season they abandoned the 2012 design and started with something entirely new. The 2013 performance was so bad, that there were voices calling for McLaren to go back to its 2012 design. Then 2014 season was even worse. McLaren was basically a mid-field team. They switched to Honda engines in 2015, and amazingly finished a season without scoring a point. In 2016, based on their performance, I'd say McLaren is barely a mid-field team.
They don't use the Compaq laptops for their Formula 1 program, they use them to service McLaren F1s...you know, the supercars from the 90s.
I know...I actually clicked on the article and read it instead of just jumping to conclusions like everybody else commenting. The McLaren F1 is from 1996, and they do not make them anymore. It would make sense that these cars, state of the art at the time, require legacy computing hardware to keep running.
Slashdot Mirror
Everybody who didn't pay for a Microsoft email account had the entire contents of their mailbox at risk for the past 6 months...
"...the issue is much worse than previously reported, with the hackers able to access email content from a large number of Outlook, MSN, and Hotmail email accounts, according to a source who witnessed the attack in action and described it before Microsoft’s statement, as well as screenshots provided to Motherboard. Microsoft confirmed to Motherboard that hackers gained access to the content of some customers’ emails."
https://motherboard.vice.com/e...
My first thought when I read the headline was "yeah, right". I checked the source link, saw it was cnn, then read the rest of the summary to see how many holes I could find. I'm sure the actual paper is fine, and they seem to have a decent sample size and timeframe, but the summary leaves out a lot of details that are linkely in there somewhere and substantially alter the final conclusions.
BoooOOOooOOoOoOoOoOoOOOOOOOOOO
The RHEL/CentOS relationship is not adversarial, and the impact of CentOS on RHEL sales is likely overall or wash or maybe a net positive. It's the "first one is free" mindset. You get people using CentOS for free, so the skillset and familiarity is there for RHEL. If CentOS wasn't there, then a company that would have run it would be saying to itself "well, I guess we'll just pay for RHEL licensing", they would either use another free distro or just use Windows, which is likely cheaper anyways.
Companies that use RHEL will also factor in CentOS to the overall environment cost. A full complement of Dev/Testing/UAT/Prod with RHEL licensing is more expensive than the same deployment with Windows. Use CentOS for all or even a portion of those outside of production and RHEL becomes more cost effective.
You could always move to the US, then you would likely be either just the right weight or possibly even a paragon of health.
Have you found any good resources/guidance on doing that? Most I've been able to come up with so far is "nobody really knows".
as a crypto miner ... i agree. i plan to pay every cent i owe (and even after taxes i've had a great year :) )
...and are you deducting your mining gear and electricity/cooling costs?
A computer is a device that is user-programmable, aka you are not restricted to the apps found in the vendor's app store. The iPad is a content delivery mechanism much like a BluRay player (which has games too thanks to BD-J)
How many /. accounts do you have?
The computer in your microwave can also carry out arbitrary instructions.
Really? Can I program it to count down by twos?
Challenge: Accepted!
That will really fuck with people who come over and try using my microwave.
I have a brother printer and it prints just fine from my iPhone. I think your house guest may have been defective.
Let's say I start a project. I can easily put a Dogecoin or any other crypto-currency wallet address on the website so people can make donations.
There wouldn't be a PayPal blocking the withdrawal of funds because of "reason X", no credit card company taking their cut and no bank freezing my account.
At least until you try converting your cryptocurrency into govt money and the exchange is "down for maintenance". The exchanges (well, *somebody*) also take a cut when you make a transfer, it's just not of the magnitude that credit card companies do.
HPE? The only thing EDS has ever known how to do is market (read 'blowjobs') to government and Fortune 500, while delivering absolute shit, late and over budget. They can't die quick enough.
EDS is part of DXC since March, but that division is getting spun off again next March....try to keep up.
HPE is basically DEC/Compaq as far as I can tell...they have server hardware, cloud, and some bits and pieces of software.
If you don't provide your employees better tools for a task, they're going to keep\start using something that's easier for them to use.
Update for the times we live in....If you don't provide your employees better tools for a task, they're going to just use Excel.
If someone came up with a phone that got an order of magnitude *more* of my behavioral, locational, and conversational data crunched by big services in order to leverage it all for customization/context/workflows, *that* is something I'd be interested in. Take my data. Make my life faster/better/more convenient.
I don't need someone to make secret the fact that I like show X and buy product Y and often drive to place Z. I need someone to spread the word to as many services as possible and help them to make use of this data to make my life better.
Is this sarcastic? How does all this crap make you life faster/better/more convenient? If anything, I think it has the opposite effect. We're inundated with data now to the point where the only way to truly focus on anything is to turn off the data feed. When you're "connected" you're multitasking all the time slowly accruing stress, and doing whatever you're trying to do not as well as you would if it was your singular focus.
If not sarcastic, then I'm genuinely interested in specific examples of how these help you out. The only use I've seen for any of these sorts of things is wholly marketing and revenue driven, i.e. "customer is within 1/2 mile of your restaurant, so send them a text with a 2-for-1 happy hour drink special in the hopes they stop what they're doing and go to your restaurant instead". The only application of these services where I found a benefit is with a group of friends at a large music festival where we could look at a map and see where the rest of the group was...except the cell towers were so saturated that it really didn't end up working that well.
I guess I see what point you are trying to make, I just don't think you are half as clever as you believe you are. Especially if you are comparing your programming job (I have never worked a an IT job that didn't have flexible hours) with say, a service industry job in the US.
But for the counterpart, as a software dev in the States.
You're also an anomaly. I know far many more people in IT who are working 60 hour weeks and drive an hour each way into the office, get 15 days paid vacation that doesn't roll over to the next year, and any sick time comes out of their 15 days of paid vacation.
Start creating sites that don't break as soon as you start using TLS 1.2.
That's interesting, so the kid who can only communicate through a sip & puff connected to a laptop is better off without a laptop in the classroom? Oh that's an exception? What about the kid with a processing speed deficit who performs their work 3 times faster on a laptop? Another exception? What about a well run classroom where the teachers is supervising what the children are doing, the same way as my teachers called me out when I was doodling at my desk instead of getting my work done?
Like most things involving humans, sweeping conclusionary statements about the educational process are myopic and ill advised, because educational methods should be shaped to the PEOPLE involved. What works for one teacher/student/class will not work for another teacher/student/class combination. That's why teachers are professionals, the same way as IT professionals are, they shape their approach to the situation at hand. (and before someone makes a disparaging remark about teachers, allow me to point out we all know IT people who should be in another profession too)
Min
The study was done on college students, not children. Professors are not going to babysit the class and police what they are doing, and they shouldn't be. If you paid $5000 for a class, then you should probably just leave the laptop at home and take notes with a pen and paper.
So, their office basically looks like it is a basketball court with a few card tables thrown together. Not even some external monitors. No surprise that nobody shows up to that office. At least provide some proper desks and decent KVM setups with dual monitors.
Can I be the first to say:
In CIA America, TV watches YOU!
I feel like I may already be too late though.
But the companies' (Endgame) blog pages has some actual concrete info. Reading over the site, much of what he talks about is already implemented, or at least there is software out there that companies can get (much of it open source). To quote his page Hunting on hosts:" running processes, active network connections, listening ports, artifacts in the file system, user logs, autoruns", using Yari, etc. BUT, at least this page isn't just "buy my product" but does give some tutorials / examples of how to use various free utilities (like Sysinternals, Yari with Powershell, Elasticsearch) and he even includes CLI examples. I'm bookmarking this and will read over it later when it's not 04:32 and I should be asleep instead of posting on Slashdot LOL.
Exactly. It is not a new concept at all and something I did as a sysadmin 10 years ago when I got bored. You don't need a product, you just need to pay attention and have the management support to spend some time doing it. In more security-evolved companies, everybody contributes x% of their time doing this.
Threat Hunting isn't exactly a new concept, it's been around for ages.
But it seems someone, somewhere decided it is going to be the new "hype-base" for magical next generation boxes.. because the previous hype (Threat Intelligence) is dying.
So yeah, cue 2-3 years of "you must hunt proactively with our products"-hype
Unfortuately, you had to go through 3/4 of the article before he even got to what he was talking about. I was pretty disappointed once I got there, although I was expecting it.
Maybe it is time to set up an on-prem cloud-based hunt team solution?
Feed a lot of it to your grandpa who has arteriosclerosis and an unexpected windfall will be coming your way!
That's also been debunked. Meat and fat don't cause problems; a high carb diet is far worse. So to carry out your plan, feed him pancakes with plenty of syrup.
Everything has been debunked. Eat whatever the hell you want.
Ok, I know it's really silly to draw analogies between using ancient laptops and the team performance. I just want to mention here that since 2013 season McLaren has been been a shadow of its former self.
McLaren finished the 2012 season arguably with the fastest car on the grid, but for the 2013 season they abandoned the 2012 design and started with something entirely new. The 2013 performance was so bad, that there were voices calling for McLaren to go back to its 2012 design. Then 2014 season was even worse. McLaren was basically a mid-field team. They switched to Honda engines in 2015, and amazingly finished a season without scoring a point. In 2016, based on their performance, I'd say McLaren is barely a mid-field team.
They don't use the Compaq laptops for their Formula 1 program, they use them to service McLaren F1s...you know, the supercars from the 90s.
I know...I actually clicked on the article and read it instead of just jumping to conclusions like everybody else commenting. The McLaren F1 is from 1996, and they do not make them anymore. It would make sense that these cars, state of the art at the time, require legacy computing hardware to keep running.
I thought K5 died at least 5 years ago.