Encryption was orginially employed to secure non-known data that is not known to the enemy or hacker.
The problem with CC numbers is that you can thorugh a few rules and use of the mod fucntion generate all valid cc numbers for all major cc companies.
So what we have here is avery unsecure index value if you wil to the actual insecure data of the person themselves, ie address, ss number and etc..
If I encrypt the cc number..its still vunerable to a standard dictonary attack..
A better way would be to use privvate=public encryption key pairs to encrypot the cc numbers and the associated data..
That would stop dictonary attacks on the cc numbers themzselves..
But remeber here tha tyou are building a system where the componenet shave to work together well and work if one fails without compromising anything...saem design requirements for major aircraft, spaceships, and etc.
So How do we challenge CIA data?
on
Data Quality Act
·
· Score: 1
So how do we challenge CIA data?
I assume that now means that no CIA data wil ever be published whether it has been un classified or not..
lets see politician wants to hide acrime..oh thats National Security you can;t have access to it..
Can you see where this is going?
Can We Callanmge the SEC and FAASB?
on
Data Quality Act
·
· Score: 1, Interesting
With all the news about fraudalent accounting can we challegne gov's data from SEC and FAASB concerning frims liek MS and CISco who play accountign scams?
First before I delve into MS Policy towards OpenSource or what it could be lets go over some past background that seems to have been forgotten..
IN MS's past it has from time to time made passive use of OpenSource in either contribution towards a proejct or using the infrastructure..STOP! DONMT THROW YOUR BRICK YET!
The Unix project at MS was I belive started from some free source unix code as framework in order to guide developers..and that was a way long time ago..
Then we have the PErl and winNT example of inderctly MS making ammmends with OpenSource enough to get Perl on winNT.
In both strategies MS did not attack OpenSource as a competitor but saw an opportunity for two very different parties to work together..
And lets us not forget the MS SOAP experience..that was MS working on an open Interent Standard with the likes of IBM and Userland..
So it is possible for MS to work with OpenSource when they stop attacking and spend time on solving problems.
I think the best thing that MS can do right now is realize that all that attacking of other programming efforst has pissed off the 2nd largest customer group of MS products , the developrs themselves..
The best move that MS coudl do right now is have Gates issue a public apology to OpenSource stating "We may have disagreeemtns in what licensing and copyrights mean to our grousp but we both want to use our passion to work together to bring new applications and services to the public and we hope that we can avoid attackign oen another in the process."
This would of course have to be followed up by something extrmely big as a giveway on MS's part..
The reality is that we know that MS is moving winNT development towards a db stylized kernel. We also know that the BSd Mach Unix/Linux kernels are also moving towards this goal. My suggestion is that MS follow Apple's example make the kernel Mach Unix/Linux with their win32 api and graphic api on top.
They would stil be able to sel the product and meet their income goals while at the same time dealing directly with the security problem rather than mess around giving pr statements..
More than likely at this point this option has already been discussed at Microsoft. Anybody want to bet which way they decided on this issue?
RMS has gpled a mountain goat mascot icon as the true representation of UnitedLinux with the follwoing press release:
"Everyone should be calling UnitedLinux, GNU's not LInux United becasue without GNU therre wodu lbe no UnitedLinux. As symbol of this new naming strategy please use the mountain goat icon as you way fo tellign the world that your UnitedlInux is GNUs not Linux United"
HURD definately not Linux or Unix but something that take a long time to develop beyond the curent OS kernel trends into something that.....never is finished?
Myth II SB with WWII p[lugin plays better and you get the modern war plugins to simulate real wars and redesign the game for different world locations..
maybe Army should have bought Bungie before MS swallowed them up!
Slashdot Mirror
The perceptions here are somewhat incorrect..
Let me explain..
Encryption was orginially employed to secure non-known data that is not known to the enemy or hacker.
The problem with CC numbers is that you can thorugh a few rules and use of the mod fucntion generate all valid cc numbers for all major cc companies.
So what we have here is avery unsecure index value if you wil to the actual insecure data of the person themselves, ie address, ss number and etc..
If I encrypt the cc number..its still vunerable to a standard dictonary attack..
A better way would be to use privvate=public encryption key pairs to encrypot the cc numbers and the associated data..
That would stop dictonary attacks on the cc numbers themzselves..
But remeber here tha tyou are building a system where the componenet shave to work together well and work if one fails without compromising anything...saem design requirements for major aircraft, spaceships, and etc.
So how do we challenge CIA data?
I assume that now means that no CIA data wil ever be published whether it has been un classified or not..
lets see politician wants to hide acrime..oh thats National Security you can;t have access to it..
Can you see where this is going?
With all the news about fraudalent accounting can we challegne gov's data from SEC and FAASB concerning frims liek MS and CISco who play accountign scams?
Go to my weblog and click on the Bill Parson's link on right hand side menu..
..Companies with similar Lobbying efforts with same SEC result of slap on wrist:
Than click on the analyst link and read it..
MS has been using fraudalent accounting wrose than Enron for about 10 years..
Now let me ask you why Enron's accounting practies got all the press and SEC focus and not MS?
Can we saw MR Bush got bought?
You think I am kidding
CISCO..
Ye sin fact they did..see Bill Parson's report on how MS pays no fed taxes!
The link is on right hand side on my weblog..
First before I delve into MS Policy towards OpenSource or what it could be lets go over some past background that seems to have been forgotten..
IN MS's past it has from time to time made passive use of OpenSource in either contribution towards a proejct or using the infrastructure..STOP! DONMT THROW YOUR BRICK YET!
The Unix project at MS was I belive started from some free source unix code as framework in order to guide developers..and that was a way long time ago..
Then we have the PErl and winNT example of inderctly MS making ammmends with OpenSource enough to get Perl on winNT.
In both strategies MS did not attack OpenSource as a competitor but saw an opportunity for two very different parties to work together..
And lets us not forget the MS SOAP experience..that was MS working on an open Interent Standard with the likes of IBM and Userland..
So it is possible for MS to work with OpenSource when they stop attacking and spend time on solving problems.
I think the best thing that MS can do right now is realize that all that attacking of other programming efforst has pissed off the 2nd largest customer group of MS products , the developrs themselves..
The best move that MS coudl do right now is have Gates issue a public apology to OpenSource stating "We may have disagreeemtns in what licensing and copyrights mean to our grousp but we both want to use our passion to work together to bring new applications and services to the public and we hope that we can avoid attackign oen another in the process."
This would of course have to be followed up by something extrmely big as a giveway on MS's part..
The reality is that we know that MS is moving winNT development towards a db stylized kernel. We also know that the BSd Mach Unix/Linux kernels are also moving towards this goal. My suggestion is that MS follow Apple's example make the kernel Mach Unix/Linux with their win32 api and graphic api on top.
They would stil be able to sel the product and meet their income goals while at the same time dealing directly with the security problem rather than mess around giving pr statements..
More than likely at this point this option has already been discussed at Microsoft. Anybody want to bet which way they decided on this issue?
Nathan , so does too the amount of people sharing high speed connections..
How many people at any major company or university share the t1 to t3 speed line?
Look at this way, right now our own armed forces watches live real time vidoe from our unmanned raptor planes on digital ip satelitte connection..
Broadband with all its parts is economise of scale and this is what they are afraid of..
But in our case..its the saem argument of when audio cassette tapes came out orginally
In a stunning move today,
RMS has gpled a mountain goat mascot icon as the true representation of UnitedLinux with the follwoing press release:
"Everyone should be calling UnitedLinux, GNU's not LInux United becasue without GNU therre wodu lbe no UnitedLinux. As symbol of this new naming strategy please use the mountain goat icon as you way fo tellign the world that your UnitedlInux is GNUs not Linux United"
So let me get this straight if open source companies band together to do a seat per license
RMS GETS ALL UPSET..
Well now lets jog RMS's memory shall we..
IBM, HP, SUN , and etc have theri won Linux/unix per seat license versions that use GPL code..
Where is RMS views on this? Does he atcullay think with the brain he has..or is he getting senile?
Sorry RMS but the price of renaming everything to GNU something for the pirevelage to GNU GPL is not a good sell..
If you want us not to develop for UnitedLinux than this is the suggested terms:
Stick to calling HURd, GNU HURD and no more renaming linux trantrums.
Start at home in using gpl on all parts of HURD...
We will stop picking on RMS when acknowledges that respect of others and sharing of knwoledge is what free software development is all about..
HURd took ten years becasue RMS did not want to share, a very simple fact.
If he wanted naming rights to all OS systems that use gnu he shoudl have put that in the license..
You do not rule a coding community by overbearing dictatorship..
Ah RMS,
Even Custer siad ow at the Battle of Little Big Horn!
After ten years development including refusing to use email and this is the best you can do?
Sharing is not just a way of life its developmental process..Live by your own code RMS for once in your life!
Fair is Fari RMS..
GNU/HURD should be renamed GNU/Mach/HURD
Surely you can see this logic..without Mach you would not have Hurd..
GNU= GNU not unix
HURD=?
HURD its bitch to to operate
HURD its a RMS that bitches about it operaing
HURD definately not Linux or Unix but something that take a long time to develop beyond the curent OS kernel trends into something that.....never is finished?
lets see...
we would get
a HURD version 3 in 20002 that runs on PowerPC and RMS woudl be clean shaven in multi-colored shirts looking fruity
Why do I get the feeling that HURD will be reresected as OS@ WARP by IBM to head off Sun?
Not that RNS woudl let them if he is alive..but than again IBM has cia contracts...
WATCH OUT RMS!!!!!!!
*this is humor only any other assumption is your stupid ass fault!
HURD 3.Linux supposrt:
All input devices thorugh effective use of decent linux drivers
Allows you to use Apple accessories like ipod!
To be released 2012.....
H.U.R.D
Horribly
Unreasonable
RMS
Delivery of Product
Standards That I accpet:
RMS will always attempt to rename any oS using GNU tools.
Linus will always be the head at Linux
RedHat Linux will always Rock!
Sun and IBM still will not get it!
I like it when Sun shoots themselves in the foot!
So sell printers with half filled ink cartrigdes..
Thats how they will pay for the merger!
Did not Aple try this years ago in late 1990s?
People did not use it then..what maes anyone think they are going to use it now?
Myeb he was listening to that Apple Fellow , Kay?
I am curious..
What year, level, or course is the technique of avoiding buffer voerflows in C, C++, Java, or C# taught?
How many times is MS going to get caught on buffer overflow erros on its production servers before admitting that its programmers are fragged?
Would you trust a new P2P applicaiton from MS? Search on theri research lab site..its there but has not been released as a commercial product.
Myth II SB with WWII p[lugin plays better and you get the modern war plugins to simulate real wars and redesign the game for different world locations..
maybe Army should have bought Bungie before MS swallowed them up!
This is a fake story check out the eyespy magazine for the real story..
You guys got duped..
By the way I am glad i have pgp and gnupgp..
Power of Individuals trumps Censorship and Illegal Control!