If the subject knows that the violence they are watching is fake then the brain wouldn't have to worry about filtering out violent behavior because it is not violent behavior. Perhaps the brain is just being efficient.
I'd be more interested in seeing the results of people watching real violence on T.V and knowing it, or seeing the results of a child who doesn't know that fake violence in a movie is not real.
I was attempting to do some research at the California DMV web site yesterday and kept getting 404's. Google cache to the rescue. Maybe they can rebuild from that alone!
Maybe there should be a repository of "obvious patents". Any new patent that only does simple combinations from these "obvious patents" should also then be added to the repository... Somewhat, though to a lesser degree, what the GPL does with open source code. Expired patents would also fall into the repository, as would any patent a company wanted to "donate".
If your system suffered a successful intrusion, you wipe.
The trick, of course, if knowning when you've suffered a successful intrusion. The whole point of this exploit is not to be detected in the first place.
I still don't see how this or any other rootkit can get past a clean bootdisk + scan, like Bart's PE for Windows, or something like rescue disk + chroot + rpm -qV for linux.
I recently purchased a car stereo with digital support and can say that the AM digital stuff sounds absolutely terrible! You really hear the digital artifacts... tinny, cellphone-ish sounds. Also, the analog signals aren't in sync with the digital ones so that when the stereo goes from one to the other, you either miss something, or hear the same thing over again... typically around 4 seconds worth. Get into an area where the AM signal isn't too great, and the stereo repeately goes back and forth between analog to digital. It's enough to drive you insane.
Hopefully digital AM will get dropped as people realize how terrible it sounds.
FM, on the other hand, sounds great and doesn't have the sync problem.
If I can only figure out how to turn off the digital AM support in my stereo!!!
In case this is just a fluke, here are the details: AM 740 in San Francisco. Headunit: Kenwood KDC-890 Digital Box: Kenwood KTC-HR100
How about copying the data off of the old CDs to new CDs, or to whatever new format is avaliable (hd-dvd/blue ray). Even if CDs last forever, the drives that read them will eventually stop being manufactured... Wasn't this the exact problem that a big corporation/government had with old tape archives?
If port 80 is a concern, couldn't one just set up port forwarding on their asterisk server which would take traffic coming into port 80 and redirect it to the port that asterisk is listening on?
http://www.asterisk.org
I know it's therapeutic to attribute "Pure Evil" to script kiddies, but come on now.. It's one thing to cause mass mayhem on the internet.. quite another to cause mass murder. I'd be really surprised if script kiddies had that kind of carnage in them... Especially when they wouldn't be able to protect themselves from their own creation.
I'd be much more worried about the non-hacker, well funded, professional genetic researcher.
Jason Nadel needs to do a bit more research about what Microsoft's current products can do. First of all you can do "file aliases" NOW in XP. "fsutil hardlink create" for help in the matter... These aren't the same as directory unions btw...
And then there is WMI. Here's a little vb script to do the same thing in his example, and it's all built-in to XP/2000 too:
strComputer = "." ' Dot (.) equals local computer in WMI
Set wbemServices = GetObject("winmgmts:\\" & strComputer)
Set wbemObjectSet = wbemServices.InstancesOf("Win32_Process")
Lets take this a step further and hide rfid tags on other people too. How about a gun rfid tag in someone's luggage at the airport? Tehe! And think about how easy it will be to mug people now! No more mystery about how much someone has in their wallet...
Seriously though, people are forgetting that rfid tags will have the same problem as barcodes. There isn't any central database that contains the definition for every barcode. Ever use the:cuecat? Most of the time you'd scan something and not get back any results on the item scanned. Last I checked it wasn't a requirement for companies that use rfid tags to make their tag-to-item information public either. Kinda makes it hard to translate a rfid tag back to the item.
Innoculation is mostly useless against today's viruses simply because viruses don't need to modify files to spread anymore.
These days viruses just copy themselves to a place on your hd and add an entry in the HKLM\Software\Microsoft\CurrentVersion\Run. They're more interested in turning your system into a DDOS machine or infecting other computers for that same reason then they are trying to corrupt your system.
There's also the fact that there are a lot of "executable" files that really aren't compiled code and thus couldn't realistically be innoculated. Word Documents are a good example of this.
Although innoculation does help to protect some files (Microsoft uses a form of this to protect its' system files in win2k and xp, and you can sign your executables using certificates in.NET) it still isn't nearly as protective against viruses as it once was.
It should be stated that if you have backup mail servers, you'll have to block that ip address range on all the servers since blocking it at one will only cause the spammer to choose your secondard MX instead. A better block would be to add the rule to your access file (Assuming you're using sendmail). Possible examples for that 8.0.0.0/8 range:
This will tell the sender that they've been blocked before the e-mail content is sent.
200. REJECT
This will accept the spam but silently/dev/null it.
200. DISCARD
Btw, does anyone know if the access file accepts cidr or netmasks for an ip address range?
How did the FBI get the ip address of the computer that uploaded the virus when the privacy policy for easynews specifically states that is should be impossible for such a thing to happen:
We do not keep HTTP access logs
We do not keep NNTP access logs
We do not use IP addresses to link to personally identifiable information. IP addresses are used for administrative purposes only to ensure the Web site is running smoothly.
Here's a link to the complete policy:
Privacy Policy
Lets remember a couple of things here:
A. It's not our responsibility to notify anyone of anything. If the dope hasn't patched his system by now, he's not going to. Besides, have you seen just how many hits servers are getting in a day? Have you been taking the time to lookup and call each infected system that has tried to infect yours? I doubt it.
B. It IS our responsibility to keep our own server running well. If this mean going on the offensive, then so be it.
This is simply another public nuisance combined with neglect situation that we see so often in the real world. From children being taken away from neglecting parents to people not mowing their lawns, the public has a history of taking control of a situation when the owner does not.
Simply put, if you neglect your servers, you will loose control of them... Either by hacker, or perhaps your isp.
If this program only searches for certain byte code sequences, or looks for link-time libraries, wouldn't it fail to find anything when the binary is compressed or otherwise protected?
Btw, same goes for ipv6 support in Mozilla for windows... the *nix versions have had ipv6 support for a while now, right?
Are there any other ipv6 alternatives for windows? IE and Windows Media Player both have ipv6 support for win2k sp3 and up as well as XP, but I'd rather not use those if possible.
Unless you've got a class C or larger ip block to yourself, you probably won't be able to use OE. Dynamic ip addressers need not apply either.
If you've got a static ip block that is smaller than 255 addresses, most ISPs will only let you assign names/keys/other to your ip addresses through classless reverse delegation (RFC 2317 http://www.ietf.cnri.reston.va.us/rfc/rfc2317.txt)
.
The problem I ran into was that KEY requests never reached my servers (CNAME, TXT, others worked fine). This made it impossible for other OE enabled systems to communicate with me since my box seemed to be configured to talk OE, yet they could never get my key to begin negotiation.
Another terrible side effect from this was that any OE server I DID try to communicate with would KEEP TRYING to negotiate with me forever until I could get them to shutdown their OE...
Lets not forget that a much needed web site won't work without IE...
http://windowsupdate.microsoft.com
Pretty much means that everyone who doesn't like to screw with their user-agent field every time they hit an "uncompatible site" will still keep IE around.
Slashdot Mirror
They've already been dropping support for legacy systems. Firefox 3.x doesn't run on OS X below version 10.4:
http://www.mozilla.com/en-US/firefox/system-requirements-v3.html
Thankfully, the 2.x version is still available.
I'd be more interested in seeing the results of people watching real violence on T.V and knowing it, or seeing the results of a child who doesn't know that fake violence in a movie is not real.
I thought FDA stood for Food and Drug Administration. This is a blood test which is neither.
I was attempting to do some research at the California DMV web site yesterday and kept getting 404's. Google cache to the rescue. Maybe they can rebuild from that alone!
Maybe there should be a repository of "obvious patents". Any new patent that only does simple combinations from these "obvious patents" should also then be added to the repository... Somewhat, though to a lesser degree, what the GPL does with open source code. Expired patents would also fall into the repository, as would any patent a company wanted to "donate".
Don't worry, it'll probably happen at night, thus saving the planet.
If your system suffered a successful intrusion, you wipe.
The trick, of course, if knowning when you've suffered a successful intrusion. The whole point of this exploit is not to be detected in the first place.
I still don't see how this or any other rootkit can get past a clean bootdisk + scan, like Bart's PE for Windows, or something like rescue disk + chroot + rpm -qV for linux.
BartPE http://www.nu2.nu/pebuilder/
Laugh while you can, Monkey Boy!
I recently purchased a car stereo with digital support and can say that the AM digital stuff sounds absolutely terrible! You really hear the digital artifacts... tinny, cellphone-ish sounds. Also, the analog signals aren't in sync with the digital ones so that when the stereo goes from one to the other, you either miss something, or hear the same thing over again... typically around 4 seconds worth. Get into an area where the AM signal isn't too great, and the stereo repeately goes back and forth between analog to digital. It's enough to drive you insane.
Hopefully digital AM will get dropped as people realize how terrible it sounds.
FM, on the other hand, sounds great and doesn't have the sync problem.
If I can only figure out how to turn off the digital AM support in my stereo!!!
In case this is just a fluke, here are the details:
AM 740 in San Francisco.
Headunit: Kenwood KDC-890
Digital Box: Kenwood KTC-HR100
How about copying the data off of the old CDs to new CDs, or to whatever new format is avaliable (hd-dvd/blue ray). Even if CDs last forever, the drives that read them will eventually stop being manufactured... Wasn't this the exact problem that a big corporation/government had with old tape archives?
Opera doesn't even support UNC paths...= 97184&page=1#comment995835
http://my.opera.com/community/forums/topic.dml?id
Roaming Profile users beware.
If port 80 is a concern, couldn't one just set up port forwarding on their asterisk server which would take traffic coming into port 80 and redirect it to the port that asterisk is listening on? http://www.asterisk.org
I'd be much more worried about the non-hacker, well funded, professional genetic researcher.
mkdir /System/Settings
ln -s /etc/X11/ /System/Settings/X11
Couldn't this also work?
And then there is WMI. Here's a little vb script to do the same thing in his example, and it's all built-in to XP/2000 too:
strComputer = "." ' Dot (.) equals local computer in WMI
Set wbemServices = GetObject("winmgmts:\\" & strComputer)
Set wbemObjectSet = wbemServices.InstancesOf("Win32_Process")
For Each wbemObject In wbemObjectSet
WScript.Echo "Name: " & wbemObject.Name & vbCrLf & _
" Handle: " & wbemObject.Handle & vbCrLf & _
" Process ID: " & wbemObject.ProcessID
Next
simply save this a s a .vbs file and then "cscript filename.vbs"
Lets take this a step further and hide rfid tags on other people too. How about a gun rfid tag in someone's luggage at the airport? Tehe! And think about how easy it will be to mug people now! No more mystery about how much someone has in their wallet... Seriously though, people are forgetting that rfid tags will have the same problem as barcodes. There isn't any central database that contains the definition for every barcode. Ever use the :cuecat? Most of the time you'd scan something and not get back any results on the item scanned. Last I checked it wasn't a requirement for companies that use rfid tags to make their tag-to-item information public either. Kinda makes it hard to translate a rfid tag back to the item.
Innoculation is mostly useless against today's viruses simply because viruses don't need to modify files to spread anymore.
.NET) it still isn't nearly as protective against viruses as it once was.
These days viruses just copy themselves to a place on your hd and add an entry in the HKLM\Software\Microsoft\CurrentVersion\Run. They're more interested in turning your system into a DDOS machine or infecting other computers for that same reason then they are trying to corrupt your system.
There's also the fact that there are a lot of "executable" files that really aren't compiled code and thus couldn't realistically be innoculated. Word Documents are a good example of this.
Although innoculation does help to protect some files (Microsoft uses a form of this to protect its' system files in win2k and xp, and you can sign your executables using certificates in
It should be stated that if you have backup mail servers, you'll have to block that ip address range on all the servers since blocking it at one will only cause the spammer to choose your secondard MX instead. A better block would be to add the rule to your access file (Assuming you're using sendmail). Possible examples for that 8.0.0.0/8 range:
/dev/null it.
This will tell the sender that they've been blocked before the e-mail content is sent.
200. REJECT
This will accept the spam but silently
200. DISCARD
Btw, does anyone know if the access file accepts cidr or netmasks for an ip address range?
How did the FBI get the ip address of the computer that uploaded the virus when the privacy policy for easynews specifically states that is should be impossible for such a thing to happen:
We do not keep HTTP access logs
We do not keep NNTP access logs
We do not use IP addresses to link to personally identifiable information. IP addresses are used for administrative purposes only to ensure the Web site is running smoothly.
Here's a link to the complete policy: Privacy Policy
The biggest clue-in for me was the use of "down loaders" twice...
Lets remember a couple of things here:
A. It's not our responsibility to notify anyone of anything. If the dope hasn't patched his system by now, he's not going to. Besides, have you seen just how many hits servers are getting in a day? Have you been taking the time to lookup and call each infected system that has tried to infect yours? I doubt it.
B. It IS our responsibility to keep our own server running well. If this mean going on the offensive, then so be it.
This is simply another public nuisance combined with neglect situation that we see so often in the real world. From children being taken away from neglecting parents to people not mowing their lawns, the public has a history of taking control of a situation when the owner does not.
Simply put, if you neglect your servers, you will loose control of them... Either by hacker, or perhaps your isp.
If this program only searches for certain byte code sequences, or looks for link-time libraries, wouldn't it fail to find anything when the binary is compressed or otherwise protected?
Good... Maybe someone else will have better luck convincing Nullsoft that ipv6 actually IS desired:
9 5119a267d91817195a9ad715&threadid=125475&highlight =ipv6
http://forums.winamp.com/showthread.php?s=3b5228a
Btw, same goes for ipv6 support in Mozilla for windows... the *nix versions have had ipv6 support for a while now, right?
Are there any other ipv6 alternatives for windows? IE and Windows Media Player both have ipv6 support for win2k sp3 and up as well as XP, but I'd rather not use those if possible.
If you've got a static ip block that is smaller than 255 addresses, most ISPs will only let you assign names/keys/other to your ip addresses through classless reverse delegation (RFC 2317 http://www.ietf.cnri.reston.va.us/rfc/rfc2317.txt)
.
The problem I ran into was that KEY requests never reached my servers (CNAME, TXT, others worked fine). This made it impossible for other OE enabled systems to communicate with me since my box seemed to be configured to talk OE, yet they could never get my key to begin negotiation.
Another terrible side effect from this was that any OE server I DID try to communicate with would KEEP TRYING to negotiate with me forever until I could get them to shutdown their OE...
http://windowsupdate.microsoft.com
Pretty much means that everyone who doesn't like to screw with their user-agent field every time they hit an "uncompatible site" will still keep IE around.