Slashdot Mirror


User: Monster_user

Monster_user's activity in the archive.

Stories
0
Comments
760
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 760

  1. Funny.

    Happens whenever somebody forgets to update the drivers on a machine connected to the printer, and then it suddenly decides to print a single page.

  2. Re: You MUST have anti-virus with current signatu on Ask Slashdot: Share Your Security Review Tales · · Score: 1

    Hardware fails. Even new hardware. That is why we have "warranties", because there is a period of time where most hardware does not fail, but some outliers do.

    Service to the physical components may be minimal, but is still a necessity. The two most likely to fail being the hard drive and power supply.

    Presumably the PC in the isolated environment is in a clean room, so dust caking the cooling fans isn't a concern. RAM would be expected to be a high quality, and last the life of the PC.

    Hard Drives seem to have a shorter lifespan than any other component. Four to ten years is what I've seen. Presumably the isolated equipment will have redundancies. Such as RAID 1+0. Those drives will need to be monitored and replaced. Which will have to be done by sight on an isolated system.

  3. Re: Why? Which features? on Mozilla To End All Firefox Support For XP, Vista In June 2018 (bleepingcomputer.com) · · Score: 1

    I've had the opposite luck out of tablets and mobile devices. Because they cost as much as a PC anyway, but have a shorter lifespan.

    My iPod touch 2nd Gen was bought after my Vista PC, and has been out of service for at least four years now. Applications just quit working one by one, as the server side was updated and the world left it behind.

    My PC on the other hand recently received an OS upgrade to Windows 7, and can probably run Windows 10 with an upgrade to an SSD. Its still in active service.

  4. Re: You MUST have anti-virus with current signatu on Ask Slashdot: Share Your Security Review Tales · · Score: 1

    A metric to determine how much more safe one is with an antivirus than without?

    An anti-virus conducts inspections of code on the file system.

    Saying one is better off without an antivirus because it may introduce a vulnerability is akin to saying public restaraunts are better off without health inspectors, because the inspector might be a thief.

    The reality is that your argument merely demonstrates that it is foolish to ONLY have an antivirus, and no other failsafes or redundancies should the antivirus fail. An antivirus is a tool, not a magic bullet.

  5. Re: You MUST have anti-virus with current signatu on Ask Slashdot: Share Your Security Review Tales · · Score: 1

    Everything is a vulnerability. An antivirus application is better than nothing.

    There are more secure solutions than anti-virus software, but security must be traded for usability.

    An antivirus allows for the greatest level of usability by a user, without foregoing all security altogether.

  6. Re: No Physical Access on Ask Slashdot: Share Your Security Review Tales · · Score: 1

    Eh. Not really.

    But pair it up with a virtualization cluster and some kind of State Saving software like "Deep Freeze", or snapshots of OS which can be applied to cloned VMs to deploy updates and virus definitions overnight, and/or reverted to nightly, and you've got a wicked system for users to not screw up.

  7. Re: I'm an encryption researcher on Ask Slashdot: Share Your Security Review Tales · · Score: 1

    I think the biggest issue is decryption. You have to be able to find a balance between encryption and decryption performance at the client level, and an impossibly high level of compute cycles required to decrypt the contents without the "key" to insert into the algorithm. I imagine it is also a good idea to secure the algorithm as well.

    Then there is also the matter of getting your clients to trust you regarding your algorithm and encryption technology, to not have a back door or exploit.

  8. Re: You MUST have anti-virus with current signatur on Ask Slashdot: Share Your Security Review Tales · · Score: 1

    I'm agreeing with the parent. Perhaps the system was surrounded by reinforced physical barriers, but what kind of device security was in place?

    How long before somebody engineered an input device to feed malware to the machine or elevate the privileges?

    How many people had access to the physical machine for maintenance if nothing else?

    If it that secure, either you have to lock down the network to only allow traffic to a specific IP. Or be absolutely 100% sure you can trust everybody that enters that room.

  9. Re: You MUST have anti-virus with current signatur on Ask Slashdot: Share Your Security Review Tales · · Score: 1

    I beg your pardon.

    I buy an antivirus because it half-works. And that half-works is enough to alert me to bigger problems, and usually minimize or stop the spread of any infection on the network. It literally is better than nothing, outside of a truly closed system.

  10. Re: User-directed code evaluation on Ask Slashdot: Share Your Security Review Tales · · Score: 1

    When does a user need to launch a specified path, when that user is not responsible for all of the code run on that OS instance?

    An educational environment?

    Or are we talking about low level IT staff working with a fudged together fix for something or other?

  11. Re: Seriously? Re:The security review was nothing. on Ask Slashdot: Share Your Security Review Tales · · Score: 1

    Work smart, not hard!

  12. Perhaps they are referring to the value of the information obtained.

    Yahoo's database isn't quite the same as Equifax's. One contains grandma's recipe's, the other contains information to steal somebody's identity.

    Also, how many people have more than one Yahoo account? How many of those accounts are disposable, vs how many are tied to important ecosystems (such as iTunes or Microsoft MSA accounts, or even Steam accounts)?

  13. Re: Failure of way more than one person on Former Equifax CEO Blames Breach On One Individual Who Failed To Deploy Patch (techcrunch.com) · · Score: 2

    I think the comment you were replying to, the one which said "weasel words", is expressing frustration that the technology in our jobs is becoming increasingly over utilized, requiring unrealistic levels of up time for the lowest level of funding. Meaning no downtime.

    To put it in laymens terms, the servers are suffering from an alternative to "burn-out", where patches are not applied, infrastructure isn't replaced, and/or eventually internal support has to be provided for products which are no longer viable for vendors or consultants to commercially support.

    There are only so many corners to cut, and some can only be cut for so long, even in the name of profit. And those making the decisions don't have the acumen to understand the yin/yang of it.

  14. Re: Engineers Should Pay Attention to This on Former Equifax CEO Blames Breach On One Individual Who Failed To Deploy Patch (techcrunch.com) · · Score: 1

    Ok. So the choices are jail time if you don't patch it, or getting fired for scheduling a maintenance window. With the getting fired resulting in a black mark and a risk of one's career,...

    So when do maintenance windows become a part of C-Level management strategy? When do they start approving downtime and maintenance?

  15. Re: Failure of way more than one person on Former Equifax CEO Blames Breach On One Individual Who Failed To Deploy Patch (techcrunch.com) · · Score: 1

    Yup. At least that is how I read it.

  16. Sounds like it was never tested. The guy reading the Apache blog never spoke with the CTO.

  17. Re: Failure of way more than one person on Former Equifax CEO Blames Breach On One Individual Who Failed To Deploy Patch (techcrunch.com) · · Score: 1

    The guy that failed was the one reaponsible for creating ticket, from what I understand.

  18. CIO or CTO, depending on how the organization is structured.

  19. A CEO cannot personally manage every aspect of a large organization. It is the CIO's job to receive and review said report. Then to advise the CEO of any items that need his attention.

  20. Re: Ah yes, the blame game on Former Equifax CEO Blames Breach On One Individual Who Failed To Deploy Patch (techcrunch.com) · · Score: 1

    +1, /thread

  21. EXACTLY!

    Never have a single point of failure in any system. And test the system for vulnerabilities.

    People can and do make mistakes.

  22. Re: How do you cover 99.7 one way and not the othe on T-Mobile Won't Stop Claiming Its Network Is Faster Than Verizon's (theverge.com) · · Score: 1

    The difference between just covering homes and offices, and covering their commutes and daily travels about. Such as whether they get cell coverage at a cousin's farm.

    If a cell phone only had coverage in a metropolitan area where phone service is normally had by many means, a cell phone has little use.

    However, if the cell phone has coverage out beyond the city limits, or areas where one is likely to be without access to a phone otherwise, then the cellular phone has significant value. So it is something Verizon would do.

  23. A possible solution: Have individuals who want to be part of the credit system create a secure account with a major credit bureau. Then have businesses advertise which credit bureau they have an aggreement with. A lot like Credit Cards or grocery store discount cards, except the bueaus only track the credit, they don't grant it. Or perhaps like having paypal use other forms of payment, so its just an account to transfer funds through.

  24. I do believe I can verify every question you posted with an answer in the affirmative, with a first hand account.

    I don't think I've heard about a single business dropping Equifax, and definitely not a single one dropping the credit reporting bureaus entirely.

    Is there any other or better aggregate of data to calculate risks regarding loans or "credit" to individuals? Is a sourc exists, is it competitively priced and affordable?

  25. Re: On a desktop it makes sense on Popular Chrome Extension Embedded A CPU-Draining Cryptocurrency Miner (bleepingcomputer.com) · · Score: 1

    Most, if not all my machines are dual cores. One is hyperthreaded, but that is 2/4.

    Same goes for over 90% of the computers my employer uses, if they are even dual core. I don't think quad core machines are that prevalent outside of more affluent communities and the enthusiast market. was not found on this server.