There is the 'Electronic Communications Privacy Act' which I believe forbids disclosing an E-mail to anyone but it's recipient, sender, or the police (through a procedure in the act).
It's from 1986, and was a semi-big deal in the BBS days, but doesn't seem to get much attention anymore.
We had/have a similar problem here in the California Republic, and solved it by destabilizing our leftist government and letting a semi-rightist austrian strongman rise to power in a popular coup.
Well, perhaps not solved the problem, but when the power goes out this summer, we can intimidate our neighbors and have them send us power so that we don't come in an take it--I mean, have you seen that guy's biceps?
Even if you have enough ram to function without swap space, you should enable it and give it some room so that the OS can swap out as it sees fit to make room for a bigger disk cache.
One reason why people are able to place a $2.5 million bid to try to kill off an auction they think is fraudulent is that it doesn't cost anything to place a over-high bid on eBay.
Until two "vigilantes" decide to place those bids and runs up the auction price... and the would-be scammer decides it'd be funny to go buy a telescope and mail it from Andorra w/ free shipping.
a pdf describing "clueless agents" that can search through a dataset (or do other things) without the agent's code itself revealing what they are looking for/about to do.
I imagine the suckers giving someone money to spam on their behalf are where all the money for spam comes from--and if it doesn't work, who cares? There's one born every minute, and some of them have dreams of getting rich quick by a spam-vertized small business.
Spammer to dumb business owner: "the steady stream of hate mail lets you know it's working! You're getting 'mindshare', there's no such thing as bad publicity! Send out another 10 million and the customers will start rolling in!"
I suspect many of them would like to see people like you wiped out on the spot for suppressing their religion, intimidating and screwing with their country and economy, etc.
9/11 al Queda members didn't wake up one day and decide, for no reason at all, to spend their own lives to try to hurt people they saw as oppressors. There was a reason that they feel the way they do[...]
Sure they have reasons for what they do. That doesn't make those reasons legitimate, or compatible with what the rest of the world wants. Violent political islamists like al-Queda want the west to go away because it's corrupting their youth and an embarrasement to the idea that the way for the arab world to regain its lost glory is by looking backward and turing to ever-stricter forms of Islam.
It would actually be possible to give them what they want, and they would probably go away, or at least focus on the fact that their homelands aren't nearly as pious as they'd like...but, it'd me much less inconvenient to western civilization to just blow them off the face of the earth.
and I doubt that trying to use force and intimidation is going to work all that well. It didn't work for the Soviets (and they could be awfully brutal). It just makes more people that hate you enough to die to hurt you.
The Soviets actually wanted to do what Noam Chomsky and friends accuse the US of doing; traditional imperialism, taking over and enslaving the locals to extract resources (rather than just buying the resources from them, and yes there is a difference). The US funding the local opposition against the Soviets couldn't have helped their cause either.
The US is being reasonably careful at not killing people that aren't trying to destroy the west. Avoiding Soviet-style brutality makes us more effective, not less.
Go buy a handful of These. Each one in parallel should draw ~1.0-1.3 Amps across a power jack, and scare the living crap out of whoever's showing you the office.
Or if you're feeling cheap, use These but don't leave them powered for more than 5 seconds. (read the datasheet).
It gets increasingly less practical to fight against modern armies due to the massive supply expense, even if you have a giant contingent of Angry Young Men(tm).
The attack I'm proposing isn't based on defeating the secure communication between the bank's ATM and the smartcard.
It's based on the fact that the user trusts the ATM's keypad and screen to accurately describe the transaction the card is being asked to do--so while the smartcard<->ATM<->bank link is assumed to be totally secure, the human customer<->ATM<->bank link is hardly secure at all. The display reports that the account is being charged $20, and when the customer gets his $20 and a reciept, he has no reason to doubt it.
Even if it were not possible to remotely relay the connection between the smartcard and the ATM (something I wouldn't count on), the attacker could physically transport the victim's smartcard into the real ATM, via a false front mounted on it. This would be a substantially more elaborate device than needed to skim magnetic cards, but it would have the potential to steal thousands of dollars of cash a day.
They probably just do what's become popular in bank robberies (in the US) in recent years--pay off some kids to do it. If the kids get picked up by the police sting, the people running the scam are just out some equipment.
how the hell are they going to duplicate the smartcard
Fake ATM. User inserts smartcard, dials pin, requests $20. Fake ATM transmits smartcard information (the entire 2-way conversation, unmodified) to real ATM nearby, where someone dials in pin and requests $300, signals back to fake ATM to dispense $20.
The data will be 3-DES encrypted unlike the mag-stripe which can be read by anyone.
But the number on the mag-stripe cards is just an account identifier... you don't need to be able to decode anything about it to make a charge, just pass it on to the bank.
Wouldn't either a) the ATM need to be able to decode the information, in which case the 3-DES decode key is public information, or b) the ATM passes on the information encrypted to the bank, in which case it's no different than a random number and the criminal can just record and pass that on?
Slashdot Mirror
What law would that be?
There is the 'Electronic Communications Privacy Act' which I believe forbids disclosing an E-mail to anyone but it's recipient, sender, or the police (through a procedure in the act).
It's from 1986, and was a semi-big deal in the BBS days, but doesn't seem to get much attention anymore.
We had/have a similar problem here in the California Republic, and solved it by destabilizing our leftist government and letting a semi-rightist austrian strongman rise to power in a popular coup.
Well, perhaps not solved the problem, but when the power goes out this summer, we can intimidate our neighbors and have them send us power so that we don't come in an take it--I mean, have you seen that guy's biceps?
Even if you have enough ram to function without swap space, you should enable it and give it some room so that the OS can swap out as it sees fit to make room for a bigger disk cache.
One reason why people are able to place a $2.5 million bid to try to kill off an auction they think is fraudulent is that it doesn't cost anything to place a over-high bid on eBay.
Until two "vigilantes" decide to place those bids and runs up the auction price... and the would-be scammer decides it'd be funny to go buy a telescope and mail it from Andorra w/ free shipping.
In the box: an invoice for $2.5 million.
a pdf describing "clueless agents" that can search through a dataset (or do other things) without the agent's code itself revealing what they are looking for/about to do.
world.std.com is about to go under from a Slashdotting.
Yeah, both it and Street Smarts are filmed in the LA area... I hope that was the joke.
(tries to stifle laughter as you get modded up as interesting)
I prefer Hydrogen Oxide.
Being that these gents did business in the US by sending their spam to Yahoo addresses, they're fully culpable under US law.
But it does take a bit of Chutzpah considering how much they howled about the French going after their Nazi memorabilia auctions...
I imagine the suckers giving someone money to spam on their behalf are where all the money for spam comes from--and if it doesn't work, who cares? There's one born every minute, and some of them have dreams of getting rich quick by a spam-vertized small business.
Spammer to dumb business owner: "the steady stream of hate mail lets you know it's working! You're getting 'mindshare', there's no such thing as bad publicity! Send out another 10 million and the customers will start rolling in!"
I suspect many of them would like to see people like you wiped out on the spot for suppressing their religion, intimidating and screwing with their country and economy, etc.
9/11 al Queda members didn't wake up one day and decide, for no reason at all, to spend their own lives to try to hurt people they saw as oppressors. There was a reason that they feel the way they do[...]
Sure they have reasons for what they do. That doesn't make those reasons legitimate, or compatible with what the rest of the world wants. Violent political islamists like al-Queda want the west to go away because it's corrupting their youth and an embarrasement to the idea that the way for the arab world to regain its lost glory is by looking backward and turing to ever-stricter forms of Islam.
It would actually be possible to give them what they want, and they would probably go away, or at least focus on the fact that their homelands aren't nearly as pious as they'd like...but, it'd me much less inconvenient to western civilization to just blow them off the face of the earth.
and I doubt that trying to use force and intimidation is going to work all that well. It didn't work for the Soviets (and they could be awfully brutal). It just makes more people that hate you enough to die to hurt you.
The Soviets actually wanted to do what Noam Chomsky and friends accuse the US of doing; traditional imperialism, taking over and enslaving the locals to extract resources (rather than just buying the resources from them, and yes there is a difference). The US funding the local opposition against the Soviets couldn't have helped their cause either.
The US is being reasonably careful at not killing people that aren't trying to destroy the west. Avoiding Soviet-style brutality makes us more effective, not less.
Go buy a handful of These. Each one in parallel should draw ~1.0-1.3 Amps across a power jack, and scare the living crap out of whoever's showing you the office.
Or if you're feeling cheap, use These but don't leave them powered for more than 5 seconds. (read the datasheet).
That's a bit of an unfair example, The various works of Tesla are something of a kook magnet.
I'm guessing people at work with a beefy workstation but no 3d support.
Counterstrike and Halflife are old enough to be playable like that...
You can see the obvious cycle.
RPG rounds cost a whole lot more than AK rounds.
It gets increasingly less practical to fight against modern armies due to the massive supply expense, even if you have a giant contingent of Angry Young Men(tm).
I'm not really sure how this is a "cycle" though.
Who do you think operates US army tanks, well-adjusted 40 year olds?
The attack I'm proposing isn't based on defeating the secure communication between the bank's ATM and the smartcard.
It's based on the fact that the user trusts the ATM's keypad and screen to accurately describe the transaction the card is being asked to do--so while the smartcard<->ATM<->bank link is assumed to be totally secure, the human customer<->ATM<->bank link is hardly secure at all. The display reports that the account is being charged $20, and when the customer gets his $20 and a reciept, he has no reason to doubt it.
Even if it were not possible to remotely relay the connection between the smartcard and the ATM (something I wouldn't count on), the attacker could physically transport the victim's smartcard into the real ATM, via a false front mounted on it. This would be a substantially more elaborate device than needed to skim magnetic cards, but it would have the potential to steal thousands of dollars of cash a day.
They probably just do what's become popular in bank robberies (in the US) in recent years--pay off some kids to do it. If the kids get picked up by the police sting, the people running the scam are just out some equipment.
How does the card know what the user dialed into the ATM's keypad? It would recieve the signal for $300 withdrawl from the legit ATM.
This could be solved by a trustworthy input or output device kept by the user or part of the card, but afaik ATM smart cards don't have that.
how the hell are they going to duplicate the smartcard
Fake ATM. User inserts smartcard, dials pin, requests $20. Fake ATM transmits smartcard information (the entire 2-way conversation, unmodified) to real ATM nearby, where someone dials in pin and requests $300, signals back to fake ATM to dispense $20.
The data will be 3-DES encrypted unlike the mag-stripe which can be read by anyone.
But the number on the mag-stripe cards is just an account identifier... you don't need to be able to decode anything about it to make a charge, just pass it on to the bank.
Wouldn't either a) the ATM need to be able to decode the information, in which case the 3-DES decode key is public information, or b) the ATM passes on the information encrypted to the bank, in which case it's no different than a random number and the criminal can just record and pass that on?
Or am I missing something?
now anyone can buy one on the black market and push the big red button
Then why hasn't it happened yet?
Our schools get more money than they need. Compared to private schools, they are massively overfunded.