Even it works, it implies knowing in advance of at least 1 year that it is coming (and sometimes the time since notice is far shorter, even if should be easier to spot bigger ones). Maybe with more of these we could improve detection rate before is too late.
Not just spin, but also moves, usually at high enough speeds to not be there anymore by the time the 2nd portion of the rocket would hit, unless you are coming from the same direction it goes. The second part will have to hit a different place, at a different time, and taking into account whatever change does the impactor on the rotation or speed on the asteroid (shouldn't be so big difference, if the impactor manages to change something probably the nuke wouldn't be needed anyway).
There are big profits awaiting if you manage to clone one of them. And a lot of patents to fill all in the way toward it. Is the kind of things that could improve, extend, or save the life of only the ones that kindly pays you a lot, for something cheap to produce.
Yes, "best practices" book is good step, specially if they are agnostics about the used solutions (is something that could be easily exploited by their "rulers" to force some particular providers or patented technologies).
The penalties should go in the hand with consumer protection. If a company or government office stores passwords in plain text and is breached, then the users should be able to sue them. And the government maybe should be proactive finding and reporting to the responsible people about vulnerabilities and bad practices (after all, they are scanning the entire internet right now, why not use it in something positive?), but first they must warn and give the opportunity to fix it.
Regarding rewarding white hats and people that reports vulnerabilities, that would be the reasonable thing to do, but they are too far into the dark side to do that, they already punished a lot of people for doing that, they won't go back so easily in that policy.
Key passwords (maybe mail, the password managers ones, places where you must type your password frequently) should be easy to remember, and hard to crack (hint), the rest (there are always a lot of them) should be in one or more password managers (i.e. your browser, with a master password, but also more portable ones like KeePassX) where as are not meant to be remembered are easier to change, to put hardest complexity, and of course, to have all different. And try to avoid automated password trying, specially at fast speed, like using fail2ban or similar when possible or having a keyphrase in your private ssh certficate with PKCS #8 to slow down cracking,
But passwords are just a part of the equation, what run as your user usually have access as the same resources as you (i.e. could read your files, your clipboard, your keyboard input, so could capture passwords, no matter how complex they are), access sites to where you are identified on (i.e. single sign-on systems that enables the IP you are on means that a trojan running in your PC have your privileges, same for vpns, or internal systems not safe from xss attacks). And antivirus aren't as good as protection as they claim to be (Red October was active 5 years before being detected, they can be forced to contain backdoors). Using more secure OSs and browsers (at least, ones with no such overabundance of malware), and security practices (only install from official repositories, stop at mail server level things that don't come from where they claim to come, etc).
And of course, educate people. In real life you know things that are risky and dangerous (i.e. don't walk alone at night in high criminality rate neighbourhoods, drink and drive, touch electric wires, etc ), people should be able to understand what is dangerous or risky in internet too, including their private use at home (even if privacy is a lost cause, there are far more risks)
They own it? Then they should have it, in their blood. Then we could discuss if we want to cure them or not, after all, we don't want to harm their intellectual property.
That the people that should represent the interests of the people of their country worry about profit and not the future of the country/people IS idiocy, either from the politician that gets it, or the people that elects him.
He was right. The workplace where one should have to be concerned about unscrupulous employees is the FBI, that don't have to pay anyone to have that info.
Don't attribute to malice what can be adequately explained by stupidity, idiocy, or politics. Unless lawyers are involved, then it is definately malice.
In the latest news around the mysql ecosystem, one thing that was mostly ignored was that TokuDB went open source, adding an important new storage engine to the table. And comparing TokuDB vs InnoDB performance it could matter a lot more (at least, for more kinds of workloads) than switching from MySQL to MariaDB or Percona Server.
3D printers turns materials i,e, thermoplastic) into a shape. But you still need the base materials. We are far from CHON food syntetizers. They must have some input, and better to be nutrient complete (and not what they think is nutrient complete, but what our body effectively needs). What it will use? Insects?, Soylent green ?
Anyway, just giving shape to something that you already have don't seem so big breakthrough. Just making a smoothie with them should be pretty similar.
Need to have a gun, the very mentality that everyone should have a gun, is the first mistake. But if you really want to have one, either for kill or to avoid being killed, why have one that could decide to not fire because misidentified you somewhat? holding it wrong was already pretty bad for iphones, but at least your life wouldn't depended on that, and a blue screen will be of death with those guns too.
And maybe more important, adding intelligence to refuse to fire because one input is opening the door to refusing to fire because other kind of inputs. Would be bad that criminals owning guns fire at police or soldiers, after all, so maybe would be nice to add a provision to avoid all people shooting at them. But for a lot, one of the reasons of having guns is to protect themselves from the tyranny of the government, and that excuse would be nullified by this. And maybe more important, if police/soldiers can identify themselves somewhat to avoid this happens (i.e. with a radio signal or whatever simple but powerful enough approach) it could be used by criminals too.
So, after you got your gun, that you won't be able to use it against a tyrannic government, nor against criminals, against who you will use it?
Terry Pratchett's Small Gods should apply to the letter, You need to have a lot of believers to be "real". And if enough critical mass believes in you, even miracles could happen.
I already was aware of the OS, but the replaceable back cover took me by surprise. It have a lot of disruptive potential. Want keyboard? Better camera? Other sensors? Integrate it with bigger hardware? Could end being the raspberry pi of smartphones.
ANY signal that can be picked by the phone could be used by running malware to activate itself. It could trigger literally by holding it wrong, or being in the wrong place at the wrong time, is not something to particulary worry about, you have it running already, so the max damage they can do is not tied specifically to a random trigger.
Now, if we are talking about triggering the malware when it detects an open wifi, gets an internet connection, connect with a banking site, take a picture, or when you send a SMS, then the potential for doing something harmful is big.
Anyway, there are simpler approachs to carry your payload, i.e. doing a ripoff of a popular app, maybe offering it for free, having more or less the same functionality, but it also sends your personal or account information, or other apps private data, cookies and so on, qualifies as trojan, and the trigger will be the owner of the device, no sensors required.
What about software? Windows? Skype? iOS? Can't even say that Ubuntu won't include it, or be forced by this kind of law to be included in a blob in the linux kernel. They won't do a different version, no backdoor included, for EU, after all, it could enable people to install the EU version in other places. Also, a lot of your information resides in servers, that will or have that backdoors, even if not hosted in US. And any measure to disable or get around it will be treated as a crime, of course.
This is not about freedom. Is about creating a boogeyman to avoid you to stop buying from certain manufacturing industries. Is about not letting the rules change for manufactured objects, right at the start, as they did with digital media with internet.
Mandating that you will have a backdoor in every computer and device will be a boom for security surely, as in nuking it, not security software will tell you that you have that backdoor opened. If you choose to leave part of your data to facebook ot twitter is your option (but better don't try to be funny with your friends, is risky). If someone uses that backdoor to read the password for your bank, or enter effectively to that bank, and steal your money, that isn't your option anymore (maybe stealing from your bank account is a bad example).
You can install CyanogenMod in most android phones and restrict yourself to use only open source apps too. Or try Mer based ones (i.e. Sailfish), Tizen, Ubuntu Touch, or Firefox OS
It will not work against specifically bad people, that with a bit of research could avoid that kind of snooping. Will go against the "normal" people, just in case the kool-aid effect diminishes in big numbers in front of massive evidence of systematic government wrongdoing.,
That they force mandatory backdooring every software will mean that even you in europe will have your computer backdoored too, by US law. And of course, all the services that you use that are hosted or goes thru US will have all communications monitored, even yours. And if you do something they don't like, they are a lot of precedents that they could get you in a way or another. They are spreading their version of "freedom" all around the world by now.
Slashdot Mirror
Even it works, it implies knowing in advance of at least 1 year that it is coming (and sometimes the time since notice is far shorter, even if should be easier to spot bigger ones). Maybe with more of these we could improve detection rate before is too late.
Not just spin, but also moves, usually at high enough speeds to not be there anymore by the time the 2nd portion of the rocket would hit, unless you are coming from the same direction it goes. The second part will have to hit a different place, at a different time, and taking into account whatever change does the impactor on the rotation or speed on the asteroid (shouldn't be so big difference, if the impactor manages to change something probably the nuke wouldn't be needed anyway).
There are big profits awaiting if you manage to clone one of them. And a lot of patents to fill all in the way toward it. Is the kind of things that could improve, extend, or save the life of only the ones that kindly pays you a lot, for something cheap to produce.
At least the comment system is now self aware enough to show the dupe from over a month ago. Dice.com will be renamed to sky.net any time soon?
Trading virtual goods could put you in jail now, no matter in which country you are at now. And that includes virtual towels too.
Yes, "best practices" book is good step, specially if they are agnostics about the used solutions (is something that could be easily exploited by their "rulers" to force some particular providers or patented technologies).
The penalties should go in the hand with consumer protection. If a company or government office stores passwords in plain text and is breached, then the users should be able to sue them. And the government maybe should be proactive finding and reporting to the responsible people about vulnerabilities and bad practices (after all, they are scanning the entire internet right now, why not use it in something positive?), but first they must warn and give the opportunity to fix it.
Regarding rewarding white hats and people that reports vulnerabilities, that would be the reasonable thing to do, but they are too far into the dark side to do that, they already punished a lot of people for doing that, they won't go back so easily in that policy.
Key passwords (maybe mail, the password managers ones, places where you must type your password frequently) should be easy to remember, and hard to crack (hint), the rest (there are always a lot of them) should be in one or more password managers (i.e. your browser, with a master password, but also more portable ones like KeePassX) where as are not meant to be remembered are easier to change, to put hardest complexity, and of course, to have all different. And try to avoid automated password trying, specially at fast speed, like using fail2ban or similar when possible or having a keyphrase in your private ssh certficate with PKCS #8 to slow down cracking,
But passwords are just a part of the equation, what run as your user usually have access as the same resources as you (i.e. could read your files, your clipboard, your keyboard input, so could capture passwords, no matter how complex they are), access sites to where you are identified on (i.e. single sign-on systems that enables the IP you are on means that a trojan running in your PC have your privileges, same for vpns, or internal systems not safe from xss attacks). And antivirus aren't as good as protection as they claim to be (Red October was active 5 years before being detected, they can be forced to contain backdoors). Using more secure OSs and browsers (at least, ones with no such overabundance of malware), and security practices (only install from official repositories, stop at mail server level things that don't come from where they claim to come, etc).
And of course, educate people. In real life you know things that are risky and dangerous (i.e. don't walk alone at night in high criminality rate neighbourhoods, drink and drive, touch electric wires, etc ), people should be able to understand what is dangerous or risky in internet too, including their private use at home (even if privacy is a lost cause, there are far more risks)
They own it? Then they should have it, in their blood. Then we could discuss if we want to cure them or not, after all, we don't want to harm their intellectual property.
That the people that should represent the interests of the people of their country worry about profit and not the future of the country/people IS idiocy, either from the politician that gets it, or the people that elects him.
He was right. The workplace where one should have to be concerned about unscrupulous employees is the FBI, that don't have to pay anyone to have that info.
Don't attribute to malice what can be adequately explained by stupidity, idiocy, or politics. Unless lawyers are involved, then it is definately malice.
In the latest news around the mysql ecosystem, one thing that was mostly ignored was that TokuDB went open source, adding an important new storage engine to the table. And comparing TokuDB vs InnoDB performance it could matter a lot more (at least, for more kinds of workloads) than switching from MySQL to MariaDB or Percona Server.
Maybe is for that that NATO is now recomending the assessination of hackers, and is very easy to fall into their definition.
3D printers turns materials i,e, thermoplastic) into a shape. But you still need the base materials. We are far from CHON food syntetizers. They must have some input, and better to be nutrient complete (and not what they think is nutrient complete, but what our body effectively needs). What it will use? Insects?, Soylent green ?
Anyway, just giving shape to something that you already have don't seem so big breakthrough. Just making a smoothie with them should be pretty similar.
Need to have a gun, the very mentality that everyone should have a gun, is the first mistake. But if you really want to have one, either for kill or to avoid being killed, why have one that could decide to not fire because misidentified you somewhat? holding it wrong was already pretty bad for iphones, but at least your life wouldn't depended on that, and a blue screen will be of death with those guns too.
And maybe more important, adding intelligence to refuse to fire because one input is opening the door to refusing to fire because other kind of inputs. Would be bad that criminals owning guns fire at police or soldiers, after all, so maybe would be nice to add a provision to avoid all people shooting at them. But for a lot, one of the reasons of having guns is to protect themselves from the tyranny of the government, and that excuse would be nullified by this. And maybe more important, if police/soldiers can identify themselves somewhat to avoid this happens (i.e. with a radio signal or whatever simple but powerful enough approach) it could be used by criminals too.
So, after you got your gun, that you won't be able to use it against a tyrannic government, nor against criminals, against who you will use it?
Terry Pratchett's Small Gods should apply to the letter, You need to have a lot of believers to be "real". And if enough critical mass believes in you, even miracles could happen.
I already was aware of the OS, but the replaceable back cover took me by surprise. It have a lot of disruptive potential. Want keyboard? Better camera? Other sensors? Integrate it with bigger hardware? Could end being the raspberry pi of smartphones.
ANY signal that can be picked by the phone could be used by running malware to activate itself. It could trigger literally by holding it wrong, or being in the wrong place at the wrong time, is not something to particulary worry about, you have it running already, so the max damage they can do is not tied specifically to a random trigger.
Now, if we are talking about triggering the malware when it detects an open wifi, gets an internet connection, connect with a banking site, take a picture, or when you send a SMS, then the potential for doing something harmful is big.
Anyway, there are simpler approachs to carry your payload, i.e. doing a ripoff of a popular app, maybe offering it for free, having more or less the same functionality, but it also sends your personal or account information, or other apps private data, cookies and so on, qualifies as trojan, and the trigger will be the owner of the device, no sensors required.
What about software? Windows? Skype? iOS? Can't even say that Ubuntu won't include it, or be forced by this kind of law to be included in a blob in the linux kernel. They won't do a different version, no backdoor included, for EU, after all, it could enable people to install the EU version in other places. Also, a lot of your information resides in servers, that will or have that backdoors, even if not hosted in US. And any measure to disable or get around it will be treated as a crime, of course.
This is not about freedom. Is about creating a boogeyman to avoid you to stop buying from certain manufacturing industries. Is about not letting the rules change for manufactured objects, right at the start, as they did with digital media with internet.
Mandating that you will have a backdoor in every computer and device will be a boom for security surely, as in nuking it, not security software will tell you that you have that backdoor opened. If you choose to leave part of your data to facebook ot twitter is your option (but better don't try to be funny with your friends, is risky). If someone uses that backdoor to read the password for your bank, or enter effectively to that bank, and steal your money, that isn't your option anymore (maybe stealing from your bank account is a bad example).
You can install CyanogenMod in most android phones and restrict yourself to use only open source apps too. Or try Mer based ones (i.e. Sailfish), Tizen, Ubuntu Touch, or Firefox OS
That you are in another country make you feel safer? What if they force your country to have laws that follow their interests?
It will not work against specifically bad people, that with a bit of research could avoid that kind of snooping. Will go against the "normal" people, just in case the kool-aid effect diminishes in big numbers in front of massive evidence of systematic government wrongdoing.,
That they force mandatory backdooring every software will mean that even you in europe will have your computer backdoored too, by US law. And of course, all the services that you use that are hosted or goes thru US will have all communications monitored, even yours. And if you do something they don't like, they are a lot of precedents that they could get you in a way or another. They are spreading their version of "freedom" all around the world by now.