Slashdot Mirror


User: Dunall

Dunall's activity in the archive.

Stories
0
Comments
21
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 21

  1. ISP Certification Course? on Security Warrior · · Score: 1

    Unfortunately I find that too many "do-it-yourselfers" are leasing dialups and servers from hosting companies and reselling these dialups and server space without really knowing anything about server work.

    The use of server tools such as plesk makes being an admin for a server an easy job for someone who's never even logged into a shell.

    A class or certification in ISP/Web Server management and server security would greatly benefit from using this type of reading. I've got a friend of mine who is this type of "point and click admin" and he's had to move servers twice now because the leased server became compromised and he had no idea how to fix it. Each time he did learn how to keep the problem from happening again though.

  2. Re:There goes to show... on Falun Gong Hacks Chinese Satellite · · Score: 3, Informative
    Everyone knows that the military are years ahead of civil society in terms ov technological advancement (OK, maybe they weaken out in a couple of things, but you get the picture). So what do you get when the power to easily interfere in satelite communications is available to civil society? Take some guesses...

    Not true... I was using circa 1970 equipment in the mid 90's when I was doing satellite control/operations.

  3. Re:Just great. on Banning Violent Arcade Games Unconstitutional · · Score: 1

    Where do you allow the line to be drawn for this? It's essentially censorship in the highest form and that's where the victory is.

    Who would you rather let choose what your children see, you or a panel of supposed 'experts' on child behavior. Does it stop at video games and then go to books? The bible is quite violent in parts... Why isn't it looked at to be something to be banned? blah.. (flamebait)

    You, as a parent, are the controling factor in their lives. If you can't talk to your children or discuss violence in games, then you've got some serious issues... It's not a matter of controling your children 24/7 ... It's a matter of educating them.

  4. Re:Satellite Security on Satellite Command Security? · · Score: 1

    You really have no idea what your talking about do you? You haven't even taken into account polarization of the signal.. Most satellites have multiple forms of signal polarization (cross polarization being the most common on satellites now and circular polarization more common on military).. Assuming you can get the signal polarized correctly, you still have to know the specific uplink frequencies for C&C on the satellite. Some satellites are now also using SSMA for their uplink, making satellites that more untouchable by people who think they can hack... FYI, SSMA is less succeptable to s/n degedration than a CW carrier.

    1). DOS? Yes, fairly easily. With the programs available now, it is fairly easy to construct an antenna with the sort of gain needed to jam the receiver inputs. The need here is not to take control but deny you control. This can be as simple as just degrading the s/n ratio to the point where you are lost in the noise floor or can't stand out from the crowd. By sending up a signal with noise on it, what you hear is noise. Hard to tell if you're being jammed or just having noisy conditions. In this case you've been jammed, causing DOS and may not even know it. Then there is the case where they just send up a signal with the intent of jamming the input and letting you know that you're being jammed.
    What you lack in raw output power can be compensated for with antenna gain. Odds are you're using short wavelengths which allows you to build "death ray" (very high gain) antennas that really aren't very big. Or use several linked together which makes them even smaller. With a combination of high gain and narrow bandwidth, not only can they deny you access to your bird, but they'll be hard to trace because of the narrow beamwidth. Nowadays, with the increased interest in amateur radio satellite operations, the eqipment needed is cheap and easy to obtain and can be masked as a "ham" setup. There are now solid state options that allow a small transmitter to be constructed capable of 100 or more watts that can do the job. I've seen satellites "captured" with 100 watts and a 23db portable antenna.

  5. Your three questions on Satellite Command Security? · · Score: 2, Informative
    With also being in Satellite control field (military) I can offer insite as to how we addressed these problems.



    1. Jamming the uplink.

    Jamming the uplink can be done, however once it's done, it is easy to find out who is doing this and easy to fix the problem. Since you're in the field, I'm sure you know all about squelching on particular rx beam channel (The main rxing antennate is usually as simple as a honeycomb of waveguide).. All military satellites can give a Lat and Long of the jammer if the threshold is set low enough.

    All military and major commercial satellites have a redundant, out of band uplink path that's available to the command.. This is usually in the VHF frequency range (as opposed to the GHZ range for comms uplink) and is used for C&C only. This channel usually requires special encryption and commanding sequences, however if both were jammed, you'd be blind until the jammer was brought down. All the satellites that I've worked on has had protection for jamming though.. A few have had systems that would shut off particular beam channels for a given time if they detect a jamming signal.

    There is also the issue of communications protocol.. Most of the systems that we worked with didn't only use encryption, but also particular protocols that wern't widely known.. Here's where obscurity can lend a hand.. though everyone's right.. it's not effective.

    2. Can it be hacked...

    This has already been answered... It probably can, but if the satellite designers had half a mind, it'd be hard... and any attempts to test uplinking would be detected pretty quickly.

    3. Satellite Internet Node.

    Secure or not, it's just not a good idea. Granted, it'd make it easier to get information across either the atlantic or pacific, but with fiber optic systems and the bandwidth that they'll be capable of transmitting these days, it's more cost effective to use a trans-oceanic fiber (When you consider the cost of funding launch, uplink and downlink equipment, maintence of flight path and satellite system etc...).

  6. Re:Tens years? on 1GB USB Drive on a Keychain · · Score: 1

    This was in reference to hanging it from their keychain.. If you look at the pictures it has clips for hanging it in your notebook, pocket etc... not necessarily a keychain dipshit.

    I had no idea that carry it with you meant to carry it on a keychain.. Guess that my pager and cellphone have been in the wrong place all this time.. Gonna make it one big pain in the ass to drive and talk on the phone now.

    STFU... don't get so hostile when someone points out that you're a complete fucking idiot.

  7. Re:Tens years? on 1GB USB Drive on a Keychain · · Score: 1

    Uhh... It says keychain sized... not a HD made to hang from your keychain.

  8. Re:This is rather cool on Photo of First Extra-Solar Planet? · · Score: 1

    Actually they were talking of development of a new telescope for use along with hubbles observations. The new telescope will be similar to the SOHO sattelite that currently observes the sun. With the SOHO there is an arm that covers the mass of the sun so that the outer atmosphere of the sun can be observed. This is also what they're attempting to do with this extrasolar planet... They'll be blocking out the star and attempting to detect photons of the new planet..

    Listening to the nasa broadcast was a bit humerous.. If you had listended you'd know that they asked for the nickname of this new planet and the nasa guys said that they had some that called it 'Jennifer Lopez' ..

  9. Re:Based on National Average on Would You Pay A Penny Per Page? · · Score: 1

    Damnit, muffed up the link.

    Neilson

  10. Based on National Average on Would You Pay A Penny Per Page? · · Score: 1

    Based on the National Average, this really wouldn't be too expensive for anyone in particular, however the logistics of the whole thing are insane.

    This 'subscription' service is already in use today on several websites, however at a much higher price. I know of several web sites that has users subscribing so they don't see banner ads.

    To back up my claims on the national average, go to this link..

    Based on this, the AVERAGE (I know this doesn't represent most surfers of slashdot) charge per family unit will be about $10.00 extra a month. A bit high eh?

  11. Again? on Monster European Environmental Satellite · · Score: 1

    I thought the days of the volkswagon sized scientific satellite was a thing of the past.

    With the price-tag that this thing has, I hope it doesn't become another reason to launch multiple, cheaper/smaller sattelites to do the same thing.

    With the track record of launch vehicles lately, I'd be a bit apprehensive to put that much money on the end of a roman candle.

  12. Re:competes with??????? on IBM (Offically) Launches Linux Box Clustering · · Score: 2, Insightful

    I wouldn't say that Linux was a direct competitor against MS. Instead, I'd say it was an alternative.

    Competitor implies that they're working towards a common goal, just using different methods.

  13. Easier for me on IBM (Offically) Launches Linux Box Clustering · · Score: 1

    This is great. Hopefully it'll help to bring Linux into the corporate world more as a mainstream solution. I find that with about 90% of the solutions I come up with, I'm met with hostility, disdain or disbelief at my suggest of using 'An unproven, unsupported OS'.

    Thank god! Mabye my job will be a bit easier now.

  14. Business Solutions on Business @ the Speed of Stupid · · Score: 2, Interesting

    This review looks excelent. With my father-in-law starting his own company and wanting to use me as one of the group IT directors, I see a few more points I need to address. These types of book are invaluable for those starting their own companies.

    I do find that all too many points brought up with this book are completely true. One of the things we're persuing, is re-doing the current web pages for several of our customers. Most, if not all of the ones we've looked at are absolutely horrible!

    I guess the best reason for using this book is to at least show you that pile of shit that the last few failed companies stepped in on their path to wealth.

  15. Re:4 is 4, right? on ArsTechnica Compares the P4 and G4e: Part II · · Score: 1

    Uhh, in a word, No.

    It'd be easy to use this in the video card realm as well. 2 is 2, right? Voodoo2 and a GeForce2.. I won't touch the microsoft jab.

  16. Re:Question? on Lego Mindstorms In Space · · Score: 1

    Yeah, I used to be a satellite controller for the Military and our communications satellites used gyro's to adjust positioning. During the day if a small adjustment was needed it would suddenly 'kick' the gyros which would cause just enough movement (very little actually) to slightly face the satellite more towards what we wanted it pointed towards. We used an earth sensor and a sun sensor in conjunction to keep the bird pointed precisely at the earth. (And to align the solar arrays.) This gyro kick happened several times a day and was almost always an automatic response to it's sensors, though we could initiate it manually if we wanted to.

    I suppose if you were to spin up a series of gyro's at once you could produce enough movement to make it a lot more noticable.

  17. Re:OLIGOPOLY FIRESALE on WorldCom Bids On Various Rhythms Assets · · Score: 1

    Since when has the FAA made any decisions concerning telecom?

  18. Re:I hope... on U.S. Attack -- More Updates · · Score: 1

    Name me *1* person who would have been a ble to prevent this. God I hope you're not suggesting what I think you are.

  19. Great site for more info on Code Red Goes The Way Of Y2K · · Score: 1
    http://www.caida.org has tons of info tracking the virus so far. At present they're showing that there are more than 100K systems infected but the number just suddenly dropped off.. Probably problems with their data.

    http://worm-security-survey.caida.org/

    Shows actually how many people gave a damn about the alerts and actually did something.. That's just a small sample and the Unpatched IIS servers remains about the same the entire time.

    Here's a quote from an E-mail that I just got ...

    (david moore with help from a bunch of elves)

    http://www.caida.org/analysis/security/code-red/au g1-live-hosts.gif

    was exponential till about an hour ago, we're not sure if leveling off is due to our monitor load or an actual peak in the data.

    log-scale version http://www.caida.org/analysis/security/code-red/au g1-live-hosts-log.gif

    will put on main caida home page later today and update every minute (you'll have to hit reload, and you won't actually notice changes at a minute granularity so please no per-minute cron jobs to reload :) )

    note the corresponding graph for 19-20 july:

    http://www.caida.org/analysis/security/code-red/gi fs/cumulative-ts.log.gif

    no per AS stats for this outbreak yet, also under construction.

  20. Re:People underestimate the bandwidth of the 'net on Code Red Goes The Way Of Y2K · · Score: 1

    But if it keeps on it's current track, I think we're going to see a LOT more infected hosts than we did last time.. That could start to add up.

  21. Re:When are virus/worm writers going to get seriou on Code Red Goes The Way Of Y2K · · Score: 1
    Simply because several servers DOSing isn't a problem... with several hundred thousand DOSing, it's gonna eat up quite a bit of bandwidth nationwide.

    It's a simple case of, was this virus really just meant to DOS a server, or hurt the backbone of the internet?

    If it's the latter, the writer(s) has a little more upstairs that people gave him/her credit for... The simple ping flooding of whitehouse.gov could have been an ingenious smoke-screen..