If you are a process controller vendor and you haven't sent your security staff to Idaho then you are out of the game. Because the rest of the process control world will break into your systems while laughing their asses off.
I understand that SCADA systems are notoriously weakly implemented, but is there something about SCADA that resists independent security analysis?
The rest was mostly special forces and other military units.
Did they shoot platitudes out of their rifles? Facetiousness aside, perhaps it was effective, but I can't think of a worse/better example of political misguidedness to compare with a Mexican fence.
I would weakly point out, that Flash for a while wasn't even really a plugin though - it came default with most browsers. But now that's not true of Windows or OS X.
It's always been a plugin; it was called Shockwave before Flash. But with Windows XP Microsoft agreed to bundle Flash and Apple joined on a bit later (was it 10.4?). Ironically, only Google actually integrates Flash into their browser. Apple (and Microsoft?) both see it as a threat to their revenue now, so they've stopped funding their competition.
However, I would add one stronger counterpoint - the Highlander defense, as in : There Can be Only One. Can you realistically see a WebM plugin replacing Flash? How would that happen? You know Adobe would take measures to stop that, including taking VP8 support out of Flash if they thought it was a real threat.
Well, it's been argued that YouTube 'made' Flash. And it's rumored that Google pays a fortune to Adobe to keep that many Flash servers running, on Windows servers no less. My guess is that to get new Google (YouTube, others) features you'll need to be running Chrome, Firefox, or one of the other browsers with a WebM plug-in. You can already join the YouTube HTML5 lab project if you have a new enough browser.
So, that leaves the server end and client-side tools. For the server end - YouTube. The only reason to run your own video server these days is for pure in-house (IP-sensitive) stuff and to sell video (read: porn). My guess is Google does not try to release a competing streaming package but gives people better tools for selling on YouTube. They're probably not going to go into the porn business, but it will be fine for them to have the Flash brand associated primarily with porn.
On the client side, HTML5 should be able to do most of what Flash does, but the toolkit is lacking. Google will probably make a (web-based) tool to make that easy. There was that snazzy Google presentation a few weeks back using their Google Docs presentation tool to do animation. I bet that's a proof-of-concept for an internal sales pitch that just turned out too cool to not release. Obviously, that was a team of artists abusing a tool, but the guts are clearly there.
So, then with a free encoder, free viewer, free hosting, and free authoring tool, there will be more people using the new tools than who have ever bought the Flash authoring package. At that point, wait two years and Google will have Flash's Quickening.
The big thing in this article that stuck out for me was that Siemens participated with the Idaho National Lab to do a security audit of their software.
We now know that cooperating with the US Government in this regard is giving up your customers to them, effectively.
What if the Siemens gear were a few generations ahead and automatically updated itself online? Would they be barred from issuing some fixes? Did Siemens even get a full report of what was found? Was their participation in this exercise a requirement for some other business contract?
We've read previously that Stuxnet used 4 0-days in Windows to propagate. So, we can assume that part of the US Government knows about holes that affect its citizens' economic and real safety, has DHS/US-CERT in place, but does not disclose? Does CERT know about these and sit on them or are they in the dark as well?
I'm not necessarily arguing that the ends weren't justified, but it's important to understand just how everybody's relationship is structured here with regards to computer security.
What we need is some kind of wall to keep out non-citizens. I think the Chinese invented the idea 2500 years ago, when they wanted to stop immigrants from the north, so let's go negotiate with them to build it for us.
The East Germans have more modern experience. They were mostly successful in keeping those dirty Capitalists out with their wall. Yeah, that's the ticket, the Berlin Wall was built to keep the Mexicans, errr, the West Germans *out*. Yeah.
I really thought the final release would be out by now. Remember last year when Mozilla said they were moving away from big releases and adopting a fast release cycle with mixed bug fixes and new features? Whatever happened to that plan?
They wanted to give all of their users time to switch to Chrome. Then they can win them back with how super-awesome Firefox 4 is and really feel the love.
At least, that's the only thing I can think of that makes any sense at all.
The apostrophe is never used to form a plural. Not ever. No, not even then.
You need to mind your p's and q's on this one. There are specific do's and don'ts regarding use of the apostrophe for possessives.
You wouldn't want to go to an Oakland As game - that would be confusing. If you got straight Cs on your report card, folks would think you were a real computer geek.
Since you might be, being on Slashdot, it's possible your colleagues may get confused if you tell them to fix the QoSs on their routers.
(The general rule is to only pluralize with an apostrophe if the resultant plural would look confusing without one. Punctuation, after all, is intended to provide clarity to the written word.)
"The US Bureau of Prisons, however, has decided to make Mr Kernell serve out his term in the low-security prison camp nearly 300 miles from his home in Knoxville, Tennessee."...The USBOP is obviously making an example out of this guy, and I can totally understand why.
Actually it sounds like USBOP is doing him a favor - putting him in a regular Federal rape-cage closer to his home would not be in his best interest. IIRC, his father is well-connected politically.
If the objective were really to populate another planet wouldn't it make more sense to send a bunch of fertile women and a bunch of semen instead of males?
There's actually real talk about sending the first crew as only women. Apparently their psychological profile fits the characteristics of the initial missions better than men.
Now then, all those women secluded for so long... the story may still be relevant. And with proper planning, the funding models are pretty apparent.
I'd love to see how you think that a button serves as DRM.
Perhaps what he was trying to say is that a hard button functions as a control the interface can't spoof. Which may be useful for some DRM schemes - it is for some security protocols, and DRM is just security used for nefarious purposes.
It's a stretch to jump to this conclusion straight out of the gate, though.
Oh, for Pete's sake - just yesterday my daughter (age 7) was wondering why pbskids.org was taking so long to come up, and I showed her how to read the status bar. So now she does and doesn't ask me that question anymore.
How the hell do you change the index of refraction of a material for *both polarizations* simultaneously? Liquid crystals are birefringent, but that's not enough to make a *lens*.
I think what they're saying is that the individual liquid crystal molecules they use have a refractive property themselves, and when aligned together electrically produce a lens.
My knowledge of optics is cursory at best - please check out page 12 of the patent and translate for the ignorant masses.:)
So all this does is mean that Chrome will now be stuck with the same crappy, blurry Theora video you already had to encode to anyway to support Firefox.
Chromium, maybe, but Google is still shipping embedded Flash in Chrome, so they'll just get the Flash-wrapped h.264. It seems that rather than promote WebM, this will cause people to coalesce more around Flash.
Voice calls take priority--any data needs are paused while on a call.
This was rolled out c. 2005-2006 across the Verizon network (I used a Treo 650 at the time and the boards were ecstatic about it). It used to not do that, so there may be some confusion out there.
There are no current formal charges against Assange in Sweden, he is being extradited only for questioning, not to face any current charges. There were charges but they were dropped before he left Sweden.
Right, but Sweden has a history of cooperating with the US Government in regards to 'extraordinary renditions', which is Washington-speak for shipping somebody to a shithole country for torturing.
I call bullshit. We should all know the marketing definition of "unlimited" by now.
There's maxing out your total possible bitstream 24x7x30.4 days per month with your phone seeding torrents, and then there's not having to worry if you should watch that video link or not because of getting smacked with overage charges. Most users on smartphones feel limited. Hit the 99.5th percentile and call it good. 'Practically unlimited' may be the right terminology, just to keep everybody honest. Sorry, no sympathy for the aforementioned seeders, wireless is a shared resource.
I gave up smartphones a few years ago. I'm waiting for an open device with a data plan like this on LTE to get back in. Sounds like 2011 might be my year.
Slashdot Mirror
If you are a process controller vendor and you haven't sent your security staff to Idaho then you are out of the game. Because the rest of the process control world will break into your systems while laughing their asses off.
I understand that SCADA systems are notoriously weakly implemented, but is there something about SCADA that resists independent security analysis?
The rest was mostly special forces and other military units.
Did they shoot platitudes out of their rifles? Facetiousness aside, perhaps it was effective, but I can't think of a worse/better example of political misguidedness to compare with a Mexican fence.
Funny you say that - the least absurd plan I've heard for a 'fence' is to make the whole border into a continuous solar energy generation plant.
I would weakly point out, that Flash for a while wasn't even really a plugin though - it came default with most browsers. But now that's not true of Windows or OS X.
It's always been a plugin; it was called Shockwave before Flash. But with Windows XP Microsoft agreed to bundle Flash and Apple joined on a bit later (was it 10.4?). Ironically, only Google actually integrates Flash into their browser. Apple (and Microsoft?) both see it as a threat to their revenue now, so they've stopped funding their competition.
However, I would add one stronger counterpoint - the Highlander defense, as in : There Can be Only One. Can you realistically see a WebM plugin replacing Flash? How would that happen? You know Adobe would take measures to stop that, including taking VP8 support out of Flash if they thought it was a real threat.
Well, it's been argued that YouTube 'made' Flash. And it's rumored that Google pays a fortune to Adobe to keep that many Flash servers running, on Windows servers no less. My guess is that to get new Google (YouTube, others) features you'll need to be running Chrome, Firefox, or one of the other browsers with a WebM plug-in. You can already join the YouTube HTML5 lab project if you have a new enough browser.
So, that leaves the server end and client-side tools. For the server end - YouTube. The only reason to run your own video server these days is for pure in-house (IP-sensitive) stuff and to sell video (read: porn). My guess is Google does not try to release a competing streaming package but gives people better tools for selling on YouTube. They're probably not going to go into the porn business, but it will be fine for them to have the Flash brand associated primarily with porn.
On the client side, HTML5 should be able to do most of what Flash does, but the toolkit is lacking. Google will probably make a (web-based) tool to make that easy. There was that snazzy Google presentation a few weeks back using their Google Docs presentation tool to do animation. I bet that's a proof-of-concept for an internal sales pitch that just turned out too cool to not release. Obviously, that was a team of artists abusing a tool, but the guts are clearly there.
So, then with a free encoder, free viewer, free hosting, and free authoring tool, there will be more people using the new tools than who have ever bought the Flash authoring package. At that point, wait two years and Google will have Flash's Quickening.
seeing as NYT is certainly not the fount of truth and honesty in reporting and fact-finding
Oh, c'mon now, it's not like Jayson Blair over at one of Murdoch's rags. Oh, wait...
The big thing in this article that stuck out for me was that Siemens participated with the Idaho National Lab to do a security audit of their software.
We now know that cooperating with the US Government in this regard is giving up your customers to them, effectively.
What if the Siemens gear were a few generations ahead and automatically updated itself online? Would they be barred from issuing some fixes? Did Siemens even get a full report of what was found? Was their participation in this exercise a requirement for some other business contract?
We've read previously that Stuxnet used 4 0-days in Windows to propagate. So, we can assume that part of the US Government knows about holes that affect its citizens' economic and real safety, has DHS/US-CERT in place, but does not disclose? Does CERT know about these and sit on them or are they in the dark as well?
I'm not necessarily arguing that the ends weren't justified, but it's important to understand just how everybody's relationship is structured here with regards to computer security.
when has ANY browser plugin been "the most commonly supported format".
Flash. The impetus for this whole thing.
What we need is some kind of wall to keep out non-citizens. I think the Chinese invented the idea 2500 years ago, when they wanted to stop immigrants from the north, so let's go negotiate with them to build it for us.
The East Germans have more modern experience. They were mostly successful in keeping those dirty Capitalists out with their wall. Yeah, that's the ticket, the Berlin Wall was built to keep the Mexicans, errr, the West Germans *out*. Yeah.
I really thought the final release would be out by now. Remember last year when Mozilla said they were moving away from big releases and adopting a fast release cycle with mixed bug fixes and new features? Whatever happened to that plan?
They wanted to give all of their users time to switch to Chrome. Then they can win them back with how super-awesome Firefox 4 is and really feel the love.
At least, that's the only thing I can think of that makes any sense at all.
The apostrophe is never used to form a plural. Not ever. No, not even then.
You need to mind your p's and q's on this one. There are specific do's and don'ts regarding use of the apostrophe for possessives.
You wouldn't want to go to an Oakland As game - that would be confusing. If you got straight Cs on your report card, folks would think you were a real computer geek.
Since you might be, being on Slashdot, it's possible your colleagues may get confused if you tell them to fix the QoSs on their routers.
(The general rule is to only pluralize with an apostrophe if the resultant plural would look confusing without one. Punctuation, after all, is intended to provide clarity to the written word.)
But I've never heard of Qt before today
Maybe you have that Slashdot section turned off in your preferences.
http://www.google.com/search?q=qt+site:slashdot.org
"The US Bureau of Prisons, however, has decided to make Mr Kernell serve out his term in the low-security prison camp nearly 300 miles from his home in Knoxville, Tennessee." ...The USBOP is obviously making an example out of this guy, and I can totally understand why.
Actually it sounds like USBOP is doing him a favor - putting him in a regular Federal rape-cage closer to his home would not be in his best interest. IIRC, his father is well-connected politically.
If the objective were really to populate another planet wouldn't it make more sense to send a bunch of fertile women and a bunch of semen instead of males?
There's actually real talk about sending the first crew as only women. Apparently their psychological profile fits the characteristics of the initial missions better than men.
Now then, all those women secluded for so long... the story may still be relevant. And with proper planning, the funding models are pretty apparent.
I've said enough.
I'd love to see how you think that a button serves as DRM.
Perhaps what he was trying to say is that a hard button functions as a control the interface can't spoof. Which may be useful for some DRM schemes - it is for some security protocols, and DRM is just security used for nefarious purposes.
It's a stretch to jump to this conclusion straight out of the gate, though.
Is there an "Whatever I did, I did it in the interest of the American people" exception...
Yes, it's called getting let out after the Revolution is over.
No State survives forever. The only question is whether Manning will live to see the day.
, and disingenuous (nobody uses it!).
Oh, for Pete's sake - just yesterday my daughter (age 7) was wondering why pbskids.org was taking so long to come up, and I showed her how to read the status bar. So now she does and doesn't ask me that question anymore.
How the hell do you change the index of refraction of a material for *both polarizations* simultaneously? Liquid crystals are birefringent, but that's not enough to make a *lens*.
I think what they're saying is that the individual liquid crystal molecules they use have a refractive property themselves, and when aligned together electrically produce a lens.
My knowledge of optics is cursory at best - please check out page 12 of the patent and translate for the ignorant masses. :)
the PS3's security barriers changed dramatically following the removal of OtherOS
If this can be shown, perhaps the game vendors, which in theory stand to suffer from illegal duplication, have cause against Sony.
So all this does is mean that Chrome will now be stuck with the same crappy, blurry Theora video you already had to encode to anyway to support Firefox.
Chromium, maybe, but Google is still shipping embedded Flash in Chrome, so they'll just get the Flash-wrapped h.264. It seems that rather than promote WebM, this will cause people to coalesce more around Flash.
Agreed! I've had near-zero spam for a good period of time, and noticed a distinct leap in the last 2 or 3 weeks.
Oh, does AOL use it? That's when my AIM spam pegged the meter (now set to buddies-only...).
Voice calls take priority--any data needs are paused while on a call.
This was rolled out c. 2005-2006 across the Verizon network (I used a Treo 650 at the time and the boards were ecstatic about it). It used to not do that, so there may be some confusion out there.
Government is not reason, it is not eloquence, it is force; like fire, a troublesome servant and a fearful master.
There are no current formal charges against Assange in Sweden, he is being extradited only for questioning, not to face any current charges. There were charges but they were dropped before he left Sweden.
Right, but Sweden has a history of cooperating with the US Government in regards to 'extraordinary renditions', which is Washington-speak for shipping somebody to a shithole country for torturing.
Wasn't the whole point of these new phones all the little windows constantly being updated with the latest Twitter, etc data?
Sure, it's certainly not tracking data that Microsoft can convert into a revenue stream.
I call bullshit. We should all know the marketing definition of "unlimited" by now.
There's maxing out your total possible bitstream 24x7x30.4 days per month with your phone seeding torrents, and then there's not having to worry if you should watch that video link or not because of getting smacked with overage charges. Most users on smartphones feel limited. Hit the 99.5th percentile and call it good. 'Practically unlimited' may be the right terminology, just to keep everybody honest. Sorry, no sympathy for the aforementioned seeders, wireless is a shared resource.
I gave up smartphones a few years ago. I'm waiting for an open device with a data plan like this on LTE to get back in. Sounds like 2011 might be my year.