If Vista is Microsoft's copeland, than the _only_ solution is for MS to make an emulator (or buy Parallels) and rebuild Windows on top of a Unix microkernel-hybrid.
Apple Corporate came out to discuss using their products in a state government environment. The brough up the reduced power consuption over they typical Dell, but they also mentioned that companies are buying the hardware _just_ to run XP. One reason? Some manufacturers are intentionally releasing Vista drivers only (Sony, I'm lookin' at you.)
It's gonna be pretty odd when Apple is one of the few vendors that won't lock you out of XP.
Posh. You make it sound so hard! You just go to the System log, look for errorcode 0x80000000fc, find the filename in question (EBVIA235C.dll), search the registry for the 3rd occurance of that file name, write down the GUID {23301203-12-3-1-2451-2-231-123122312-23), search for _that_, open the file in a editor, search for strings to find the vendor name and search for it on Google.
You're not bending the stats correctly. Rather than saying you'll have one disaster per 100 flights, you should put it in terms of Million Miles Flown per incident.
Then classify an incident as 'unintended disassembly'.
I disagree. The mouse was simply a better way than the arrow keys to move something around the screen.
Changes in User interface don't occur quickly, nor do they appear significant at the time, but going from 0 to 1 million devices containing a change in user interface design IS a big deal.
FWIW, I discoverd Parallels incudes a demo of Kapersky's virus scanner. Installing it on a lark, it discovered a 'proof of concept bluetooth stack' exploit when scanning the folders that Parallels shares with the guest OS.
I have no idea where it came from, and it looks like it didn't activate (the vector is, apparently 'you've received an OOBEX file exchange, do you want to accept it?' at which point it infects the system.
I think our days of blissful ignorance are drawing to a close. That said, I don't believe a Mac virus solution needs to be as overbearing and draconian as the ones I've seen for the PC (Symantec, Norton, etc.)
You can get very VERY long uptimes out of Linux....just not Ubuntu if you plan on leaning on them to keep your system up to date.
Debian (and others) tend to leave the kernel alone, for the most part. Ubuntu's philosophy is to sacrifice uptime to include more features quicker....good for single user home purposes...bad for server implementations.
Other stuff, like year long uptime and file systems that just work have been around for a decade.
You'll not be getting year long uptimes in Ubuntu...they spend WAAAY too much time mucking about with the kernel. (More than I like to see...which is why my servers run Debian.)
I don't update Ubuntu alot on the fileserver because I'd be rebooting friggen WEEKLY, they update the kernel so often.
I don't quite know why everybody though 'microsoft makes you reboot monthly for patch tuesday, so frequent reboots are okay'.
That would be an ARP request...and if they knew what they were talking about, would have been CALLED an ARP request. Sounds like we're not getting the full story here.
I was forever and perpetually forgetting the little stuff til I got that first Newton (and later, the Palm Pilots, iPaqs, etc, right up to my current smartphone)
The ONLY upshot of getting a PDA was the loss of the STRESS of forgetting shit I could never remember anyway.
Actually, that's not true. I'm 37, I have similar vocal-range hearingloss. Loud music? Probably. Which is odd as I didn't much care for 'loud' music, preferring synth and vocals to metal or bass. Based on the assessment from the technician, they're seeing a LOT more of this kind of deafness.
Wrong. One of the standard steps in a forensic examination is checking for physical capacity vs. reported capacity. They WILL get from 0,0,0 to X,X,X where X = full recordable capacity of the drive.
I've heard from the home theater folks that HDMI was a seriously broken implementation. v1.1 wasn't necessarily compatible from device to device, v1.2 only carried stereo, and at the time I was in the,market, only the PS3 used v 1.3....and they weren't necessarily backwards compatible.
They ended up with the comment that the video quality wasn't up there with component.
So, were they blowing sunshine up my skirt, or is HDMI really the tarpit they describe?
[quote] Knowing what I know about the Police, not many know about data integrity or how to analyze a non-windows machine. Most of them have windows at home, and are trained on how to deal with a Windows-based attacker. Yes, they could hire a Unix-admin type for hundreds+$$ per hour and have them figure it out, but unless it's a serious matter, you'll just get off. And if they do attack the file system/computer, you can still get them by claiming that there's no certified tools for data integrity for this specific distribution working on this particular branch of linux and its filesystem. [/quote]
Having toured the Rocky Mountain Computer Forensics Lab, (http://www.rmrcfl.org/) that's a bet I'd not throw a lot of money at. They have experts in unix, RAID, Cellphones/PDA's, as well as the more garden variety stuff. They have an annual budget if a million dollars _for_storage_alone_. The average employee is expected to spend a great deal of their time keeping up to speed on the latest and greatest.
It's still early enough in the forensics game that it's an arms race. And there ARE noticable situations where the folks that say they couldn't be caught...have been.
Some portion of the system has to be dercypted in order to boot. From that point, it's a matter of stepping through the hoops of each encryption barrier to get what you need.
OR they just raid your trash for the evidence.
OR they put a key sniffer on the system
OR they correlate your network traffic to behavior patterns.
OR you don't get caught. That is, in fact, a reasonable possibility.
[homer]bogopig bogopig, does whatever a bogopig does[/homer]
If Vista is Microsoft's copeland, than the _only_ solution is for MS to make an emulator (or buy Parallels) and rebuild Windows on top of a Unix microkernel-hybrid.
Apple Corporate came out to discuss using their products in a state government environment. The brough up the reduced power consuption over they typical Dell, but they also mentioned that companies are buying the hardware _just_ to run XP. One reason? Some manufacturers are intentionally releasing Vista drivers only (Sony, I'm lookin' at you.)
It's gonna be pretty odd when Apple is one of the few vendors that won't lock you out of XP.
Posh. You make it sound so hard! You just go to the System log, look for errorcode 0x80000000fc, find the filename in question (EBVIA235C.dll), search the registry for the 3rd occurance of that file name, write down the GUID {23301203-12-3-1-2451-2-231-123122312-23), search for _that_, open the file in a editor, search for strings to find the vendor name and search for it on Google.
Easy peasy!
You're not bending the stats correctly. Rather than saying you'll have one disaster per 100 flights, you should put it in terms of Million Miles Flown per incident.
Then classify an incident as 'unintended disassembly'.
I disagree. The mouse was simply a better way than the arrow keys to move something around the screen.
Changes in User interface don't occur quickly, nor do they appear significant at the time, but going from 0 to 1 million devices containing a change in user interface design IS a big deal.
This was back in 94 or so. (not that you'll see this, the thread's pretty stale.)
FWIW, I discoverd Parallels incudes a demo of Kapersky's virus scanner. Installing it on a lark, it discovered a 'proof of concept bluetooth stack' exploit when scanning the folders that Parallels shares with the guest OS.
I have no idea where it came from, and it looks like it didn't activate (the vector is, apparently 'you've received an OOBEX file exchange, do you want to accept it?' at which point it infects the system.
I think our days of blissful ignorance are drawing to a close. That said, I don't believe a Mac virus solution needs to be as overbearing and draconian as the ones I've seen for the PC (Symantec, Norton, etc.)
I stopped relying on Consumer Reports when their gripe for a Mitsubishi eclipse was: "Trunk too small for a wheelchair."
You can get very VERY long uptimes out of Linux....just not Ubuntu if you plan on leaning on them to keep your system up to date. Debian (and others) tend to leave the kernel alone, for the most part. Ubuntu's philosophy is to sacrifice uptime to include more features quicker....good for single user home purposes...bad for server implementations.
I don't update Ubuntu alot on the fileserver because I'd be rebooting friggen WEEKLY, they update the kernel so often. I don't quite know why everybody though 'microsoft makes you reboot monthly for patch tuesday, so frequent reboots are okay'.
But what if the company is state government? I doubt we'll see a coup d'état anytime soon.
I use netflix for my offline storage.
That would be an ARP request...and if they knew what they were talking about, would have been CALLED an ARP request. Sounds like we're not getting the full story here.
I was forever and perpetually forgetting the little stuff til I got that first Newton (and later, the Palm Pilots, iPaqs, etc, right up to my current smartphone)
The ONLY upshot of getting a PDA was the loss of the STRESS of forgetting shit I could never remember anyway.
Actually, that's not true. I'm 37, I have similar vocal-range hearingloss. Loud music? Probably. Which is odd as I didn't much care for 'loud' music, preferring synth and vocals to metal or bass. Based on the assessment from the technician, they're seeing a LOT more of this kind of deafness.
What makes you think he bought new? 3 of my 4 gamecube games (bought post Wii) were used.
Wrong. One of the standard steps in a forensic examination is checking for physical capacity vs. reported capacity. They WILL get from 0,0,0 to X,X,X where X = full recordable capacity of the drive.
I've heard from the home theater folks that HDMI was a seriously broken implementation. v1.1 wasn't necessarily compatible from device to device, v1.2 only carried stereo, and at the time I was in the ,market, only the PS3 used v 1.3....and they weren't necessarily backwards compatible.
They ended up with the comment that the video quality wasn't up there with component.
So, were they blowing sunshine up my skirt, or is HDMI really the tarpit they describe?
[quote]
Knowing what I know about the Police, not many know about data integrity or how to analyze a non-windows machine. Most of them have windows at home, and are trained on how to deal with a Windows-based attacker. Yes, they could hire a Unix-admin type for hundreds+$$ per hour and have them figure it out, but unless it's a serious matter, you'll just get off. And if they do attack the file system/computer, you can still get them by claiming that there's no certified tools for data integrity for this specific distribution working on this particular branch of linux and its filesystem.
[/quote]
Having toured the Rocky Mountain Computer Forensics Lab, (http://www.rmrcfl.org/) that's a bet I'd not throw a lot of money at. They have experts in unix, RAID, Cellphones/PDA's, as well as the more garden variety stuff. They have an annual budget if a million dollars _for_storage_alone_. The average employee is expected to spend a great deal of their time keeping up to speed on the latest and greatest.
It's still early enough in the forensics game that it's an arms race. And there ARE noticable situations where the folks that say they couldn't be caught...have been.
Some portion of the system has to be dercypted in order to boot. From that point, it's a matter of stepping through the hoops of each encryption barrier to get what you need.
OR they just raid your trash for the evidence.
OR they put a key sniffer on the system
OR they correlate your network traffic to behavior patterns.
OR you don't get caught. That is, in fact, a reasonable possibility.
The machine was testing 500,000 attempts a _second_. If it's a manglable dictionary word or set of words, it'd find it given enough time.