What percentage of search warrants and wiretap requests are denied? I challenge you to even find statistics about such things.
I agree finding such a statistic would be challenging... not because a Judge will agree to anything, but because to in order to have a judge even consider your request, you need to prove that you've exhausted EVERY OTHER possible avenue to obtain the information you're after.
Getting to that point is no easy task, so I'm not surprised that once there, a judge will agree with the LEA and most likely grant them the tap.
How can anyone here even make suggestions on the technology for the solution when nobody knows the problem?
It's really a question for the client. Who is the app for? How do they like to work? Will they need remote access? If successful would there be a possiblity to integrate other apps into this platform?
Not to mention that asking ".Net (native client) vs J2EE" (since he's already decided for a.Net client rather then a.Net webservice) is like comparing apples and oranges.
Although I thought most of your post was quite intelligent and interesting, I have to take offence (for Google) to this statement:
In an hour or two I created a VBScript class that could host on the user's machine and use local HTTP to access this data. (snip) This is obviously bad since you could just start searching for passwords and possibly get them.
If I have comprimised a machine to the point that I can CREATE a script AND execute it, basically the you're fucked. All your base are belong to me. I could ftp the ENTIRE harddrive to myself. Or just the password cache. Google can obviously do nothing about this since I have OS level access.
Even if Google were to "lock it down" and not run a server, I could easily write a script to open their app, do a search, and then ftp the screen scrapings.
Is anyone else disapointed that the submitter didn't slip a vulgarity or two when describing the new features?
If I had submitted it I would have at least worked in one... like:
Gmail rolled out a fuck-ton of new features today.
Like at work yesterday, this newbie kid was like:
"How come we don't make a linux version of our software?" My reply was something like
"Because that would take a fuck-ton of money. Dumbass."
Perhaps we should just all (i mean everyone) start using encryption everywhere and make the whole thing pointless just so they give up..
Ummm... I've seen a few comments like this already.
The Gvt doesn't really care if the providers provide encrypted VoIP sessions to end users.
Why? Because the Gvt. will just make the providers decrypt the messages (which is obviously easy to do when they have the key! (they are the server) and they will then have to send that to the Gvt. probe.
Not true. A lot of companies are using the Microsoft server tools (like IIS, SQL Server, Windows Media Server) because they're designed to work with Internet Explorer (and vice-versa).
...
Why not just switch to other open source tools, like Apache?
Developers use IIS and SQL Server for.Net development not because they "work" with IE, but because they all work together. Being able to debug an application starting at the gui, to the web, and into the database is something not possible in the open-source/Apache world.
"All of Canada is going to be the first installation of BS (Broadband Snow technology). As reported in the Toronto Star, wireless access points will be set up on top of snow hills, providing roaming capability throughout the country to all users."
Seriously though, how can they say this is "BPL (Broadband Power Line technology)" when all they're doing is putting WAPs ONTOP of the power lines.
I attended the Kipling cewremony about a month ago at my Uni, Carleton in Ottawa. All I have to say is that this "secret" ceremony was somewhat of a let down.
There was no drinking of goat's blood, no biting-off chicken necks, and no munching of donkey ears.
They did however give us iron rings, and apparently we weren't supposed to eat them. They could have mentioned that beforehand...
Now, unlike most of my Canadian eng. brothers and sisters (but much like my engineering friends from SOVIET RUSSIA), I don't wear the ring... it wears me!
Actually, I do have a win2000/RH 7.2 dual boot system.
Although I sometimes play around in Linux with my website, and whatever else I feel like wasting time with, the fact that I need help to do almost anything in Linux prevents me from using it full time.
Example: To get my ADSL connection up and running it took me well over 2 hours to find roaring penguin, install it, and configure my two network cards. In windows, I needed to click twice on the setup.exe, fill in a few forms, and that was that. In winXP I don't even need the setup.exe.
Keep in mind this is only one example. I haven't written about my printer, scanner, ugly fonts, java, and a whole lotta stuff that's taken a lot of time to find, install, and configure.
Although there are advantages to using Linux, the disadvantages have kept me a windows user, and I expect that will continue for another few years.
Why would I (as a happy windows 2000 user) make the switch to linux?
There is only one answer: SOMEONE needs to convince me that I can be just as happy and productive in a Linux environment. To switch though, I also need some incentive (in this case that would be that Linux is free).
The idea that "users will make the switch all by themselves" is absurd and unfounded. Does the comment author believe that the BILLIONS of dollars Microsoft puts into marketing is wasted?? I don't think so.
What was the point of that article again???
on
The New IT Crisis
·
· Score: 1
"That was a well plotted piece of non clap-trap that never made me want to retch"
Seriously though, so the author apparently had the need to express how IT isn't working at 100% efficiency?
There was not one concrete piece of useful data about the problem or the solution in that entire article... What tough issues will he tackle next?
It seems to only affect windows users dhcp requests, as for *nix it hands off an entirely
different subnet ip address that is not vulnerable. This doesn't stop one from booting
into *nix and manually configuring their ip to be on the vulnerable subnet.
Does anyone else find that funny? Windows users are vulnerable to a security flaw by default (as usual). But, (if they feel left out) Unix users can configure their box to be vulnerable too!!
What percentage of search warrants and wiretap requests are denied? I challenge you to even find statistics about such things.
I agree finding such a statistic would be challenging... not because a Judge will agree to anything, but because to in order to have a judge even consider your request, you need to prove that you've exhausted EVERY OTHER possible avenue to obtain the information you're after.
Getting to that point is no easy task, so I'm not surprised that once there, a judge will agree with the LEA and most likely grant them the tap.
Disclaimer: IANAL - but I play one at parties...
Is anyone else wondering how long it's going to take before slashdot puts out an offer for the microsoftsucks.com domain?
Letely I've been having the feeling that slashdot editors are getting ready for an all out anti-Microsoft news site.
bleh.
It's really a question for the client. Who is the app for? How do they like to work? Will they need remote access? If successful would there be a possiblity to integrate other apps into this platform?
Not to mention that asking ".Net (native client) vs J2EE" (since he's already decided for a .Net client rather then a .Net webservice) is like comparing apples and oranges.
I'd like to moderate the question -1, Dumb.
Another "advertising" story submission.
The editors should've known that Hanu H. Kari just wanted to hype his new "time warp" machine.
Although I thought most of your post was quite intelligent and interesting, I have to take offence (for Google) to this statement:
In an hour or two I created a VBScript class that could host on the user's machine and use local HTTP to access this data. (snip) This is obviously bad since you could just start searching for passwords and possibly get them.
If I have comprimised a machine to the point that I can CREATE a script AND execute it, basically the you're fucked. All your base are belong to me. I could ftp the ENTIRE harddrive to myself. Or just the password cache. Google can obviously do nothing about this since I have OS level access.
Even if Google were to "lock it down" and not run a server, I could easily write a script to open their app, do a search, and then ftp the screen scrapings.
Gmail rolled out a host of new features today.
Is anyone else disapointed that the submitter didn't slip a vulgarity or two when describing the new features?
If I had submitted it I would have at least worked in one... like:
Gmail rolled out a fuck-ton of new features today.
Like at work yesterday, this newbie kid was like:
"How come we don't make a linux version of our software?" My reply was something like
"Because that would take a fuck-ton of money. Dumbass."
Anyways... I digress.
Ummm... I've seen a few comments like this already.
The Gvt doesn't really care if the providers provide encrypted VoIP sessions to end users.
Why? Because the Gvt. will just make the providers decrypt the messages (which is obviously easy to do when they have the key! (they are the server) and they will then have to send that to the Gvt. probe.
... Why not just switch to other open source tools, like Apache?
Developers use IIS and SQL Server for .Net development not because they "work" with IE, but because they all work together. Being able to debug an application starting at the gui, to the web, and into the database is something not possible in the open-source/Apache world.
If you have ANY device connected to a network, it should be protected (firewalled) from evil-doers.
Sincerely,
GWB
How about building me a keyboard with no keypad. What a useless extension (unless you're an accountant or something).
All it does is force me to reach further for the mouse and give me pains in my wrists.
I've only been able to find one retailer whose keyboards look like they were donated by the 80s:
http://www.intolect.com/mkbvaldetail.htm
Funny, I took the fact that they use server-side Java as meaning they KNOW what they're doing.
Also, please don't confuse JavaScript (client-side) with Java Server Pages (Java on the server-side).
"All of Canada is going to be the first installation of BS (Broadband Snow technology). As reported in the Toronto Star, wireless access points will be set up on top of snow hills, providing roaming capability throughout the country to all users."
Seriously though, how can they say this is "BPL (Broadband Power Line technology)" when all they're doing is putting WAPs ONTOP of the power lines.
What's to stop me from doing anything contradicting what's stated in an EULA?
Laws?
I read in the Ottawa Citizen this morning that this deal (about 22 million CANADIAN) is about 75% of Corel's annual sales.
Cheap? I think so...
Or perhaps the US could solve the problem by not being so damn greedy?
IP Everywhere... not just the US!
For their sake I hope they don't let it get to the 4year mark...
Patent #45560986 Granted to Guy F. Ottawa on April 1, 1999.
Description:
The process of providing a service to individuals (or businesses) who's end result is not conveyed for 4 years (1460 Days).
I read Federal Robot Dogs at first and immediately a picture of Janet Reno popped into my head.
(shudders)
It just goes to show that people should be very careful with their personal information.
Sincerely,
Guy LeBarge
186 Rideau St.
Ottawa, ON
K1A 25U
I attended the Kipling cewremony about a month ago at my Uni, Carleton in Ottawa. All I have to say is that this "secret" ceremony was somewhat of a let down.
There was no drinking of goat's blood, no biting-off chicken necks, and no munching of donkey ears.
They did however give us iron rings, and apparently we weren't supposed to eat them. They could have mentioned that beforehand...
Now, unlike most of my Canadian eng. brothers and sisters (but much like my engineering friends from SOVIET RUSSIA), I don't wear the ring... it wears me!
When a customer's account has been compromised:
(AOL voice) "Hackers got your mail"
From http://dictionary.reference.com/search?q=intimate
intimate
To make known subtly and indirectly; hint. See Synonyms at suggest.
To announce; proclaim.
Although I sometimes play around in Linux with my website, and whatever else I feel like wasting time with, the fact that I need help to do almost anything in Linux prevents me from using it full time.
Example: To get my ADSL connection up and running it took me well over 2 hours to find roaring penguin, install it, and configure my two network cards. In windows, I needed to click twice on the setup.exe, fill in a few forms, and that was that. In winXP I don't even need the setup.exe.
Keep in mind this is only one example. I haven't written about my printer, scanner, ugly fonts, java, and a whole lotta stuff that's taken a lot of time to find, install, and configure.
Although there are advantages to using Linux, the disadvantages have kept me a windows user, and I expect that will continue for another few years.
There is only one answer: SOMEONE needs to convince me that I can be just as happy and productive in a Linux environment. To switch though, I also need some incentive (in this case that would be that Linux is free).
The idea that "users will make the switch all by themselves" is absurd and unfounded. Does the comment author believe that the BILLIONS of dollars Microsoft puts into marketing is wasted?? I don't think so.
Seriously though, so the author apparently had the need to express how IT isn't working at 100% efficiency?
There was not one concrete piece of useful data about the problem or the solution in that entire article... What tough issues will he tackle next?
It seems to only affect windows users dhcp requests, as for *nix it hands off an entirely different subnet ip address that is not vulnerable. This doesn't stop one from booting into *nix and manually configuring their ip to be on the vulnerable subnet.
Does anyone else find that funny? Windows users are vulnerable to a security flaw by default (as usual). But, (if they feel left out) Unix users can configure their box to be vulnerable too!!