I don't normally support regulation and I am not sure I'd vote for this idea if asked to myself but I want to put it out there anyway.
What if we ban, that is right ban, the use ipv4 on publicly accessible networks after say 2018. Make it illegal to route ip4v addressed packet for a third party. This would force the move to ipv6. Which I think is good for freedom and the little guy. Yes that is right a forced migration is good for the little guy.
Its big business that has interests in keeping everyone on IPv4 and its actually big business who have the bigger investment in ipv4 only gear. The little guy can afford migrate.
What this is really about is ipv4 implies NAT. NAT implies third party brokers, which imply track ability, and opportunities to create digital toll booths. You can't just send files directly to each other; oh no they have be posted to some file sharing site so they can show you adds and the NSA has a good opportunity to data mine.
Yeah, maybe they nail him on tax evasion / copyright infringement, but everyone who knows anything about Kim knows that he deserves everything he's getting and then some.
What he deserves is not at issue. What is legal and correct procedure is; as if the current legal frame works is even justifiable. Tax evasion aside, copyright infringement should be an entirely civil matter. It should be incumbent upon content owner to detect an sue violators.
Its not the job the FBI/CIA/State Department to track copyright violators. My tax dollars are being wrongfully converted in my opinion to support someone else's business. In fact actions like this are not helpful where the perception of America in the world is concerned; which might mean these types of actions run directly contrary to the government's Constitutional mission to promote the GENERAL welfare.
Additional actions like these where a "conspiracy" is invented justify state actions against individuals normally not permitted for the real issues at hand is bad for everyone. Its happening everywhere, look at the finanical crisis and what was done to the Chrysler bond holders. The "exceptions" to No Child Left behind are yet another example, even if you agree its a good idea the law does not provide for exceptions the president is not entitled to grand them. If changes to the law need to be made we have a process for that, we should not just ignore it. The current people running our government have reduced the rule of law to a fiction. They have so many laws the simply ignore and so many vague laws that can be used to do anything we might as well live in China.
The rule of law is supposed to be one the things that make our nation unique, special, and great. As a society if we don't start taking it seriously again and looking very critically upon those who bend and pervert it; even for reasons we might find noble we as a society will vanish.
I think a more valid question is why should MegaUpload be expected to prevent you from doing anything illegal? We don't require manufactures of other products to do that.
How come GM is not required to have cars verify all passengers are willing in some way to prevent kidnapping and human trafficking? How come nobody is prosecuting the guys who painted John Edward's house for not verify they were not being paid with illegally converted campaign contributions?
I think setting the precedent that service providers or manufactures are responsible for the actions of their users is wrong.
Yes they would get theirs and no Romney won't do it, neither will Obama. We need a real outsider. Had we not done the bailouts and let AIG go down, they would have most likely taken Goldman, and second tier investment banks wit them. JPM would most likely have survived but it would have been pushed out of the F50 for certain.
We would all be better off in the long run. The great thing about capitalism is its supposed to off mobility; for that to happen the wealthy must be allowed to fail. What we have today is not capitalism its closer to feudalism.
Re:Most programs don't need a 64-bit address space
on
Linux 3.4 Released
·
· Score: 1
Its not going to save any bytes in your code and depending on the implementation may or may not save bytes where data at rest is concerned. Its going to save bytes in your live data which in most cases is bigger than your code larger than the corresponding number of records at rest.
Think about a the basic linked list. At a minimum ( for a single linked list ) you have a pointer on every record, that pointer could either be four or eight bytes. Even something like an office document or a web page of moderate complexity might have millions of elements the rendering software needs to track. That could be 4MB of working storage saved right there.
Yes 16GB of RAM for your desktop is cheap. It will cost more for ECC server memory though. Lots of server apps need to handle thousands of clients. That memory savings might mean a great deal there.
The trouble with the pass phrase concept is that the whole words just become tokens. Most people's vocabulary is not that large. You could use a common spelling dictionary and toss in the like substitutions 0 for o excetra and you don't really have a key space much larger than normal 7 character or so passwords offer
Depends on your product. I would expect Facebook to be a strong market for hipster style affordable bling. Guys and Gals who really want to be seen with their mePhone, StarSmucks Coffee cup, and Abercrumy T-Shirt.
They may not be the target demographic for say Tiffany or $40K+ automobiles. GM needs to sell less expensive cars as well but that market is not discerning. Getting someone to choose a Sonic over a Civic is a matter of getting them into your dealership first in most cases. The giant inflatable gorilla may well be a more effective startegy that Facebook for that market.
Then you'll have an uneducated underclass. Is that what you're after or is it just a pleasant side effect?
I have no doubt that there will a period of adjustment, where college enrollment rate falls. My hope would be that Universities, especially public ones, realize their mission is educating as many students as possible; its not winning NCAA tournaments, not building dormitories fit for royalty, not trying to get the most foreign students, not having the most publications, not even research. They could then restructure their costs accordingly.
There is no reason, college needs to cost 8k a year a public university to live at home. The only reason it costs that much is because they can get it, and they use it fund all manor of secondary objectives. They only way it stop costing that much is if they can't get it.
Suppose you have a router has link A connected at 10Mbs, link B at 10Mbs, and link C at 300Kbps. You have a host on the far end of A sending packets to something on the far end of C. The traffic is highly bursty. TCP does reliability end to end, so if the host on the end of C misses packets because the router discarded them that is all traffic that has to run across link A again, which cuts down the available bandwidth for A to B. If the router had a large buffer the burst of traffic from A for C might have been stored, preventing the retransmit on A. This works for bursty traffic, obviously the buffer will never flush if the A to C flow is continuous.
Buffering is still important. Its just not as simple now that the internet is less bursty. More transfers are large files, streaming media, etc, less push that e-mail message, or 5K webpage and done.
You can't use "investment" and "spending" they way you are. You are mixing meanings and that is exactly what the corrupt politicians want you to do, confuse yourself.
There are revenues, assets, liabilities, and expenses. Spending just means surrendering some assets for something else. You "spend" one asset even if you are investing in another. Investing in Education IS SPENDING, what it may not be is investing.
I'm convinced that a society as a whole greatly profits by providing as much education to as many members as possible.
Well you have to prove that education is asset to society. Can show that we are generating more nominal output with less input as result of our society being more educated ( % of population with a degree is a valid measure of that ) then ever?
helping people get education is not so much "spending" as investing into the future.
I am sorry but you wrong on this point as are both parties at least in the context of the way they are going about it right now. The problem with going to college for most students is not obtaining credit, nor is it the interest rate on the credit even if rates were go up to a whopping 4.5% OMG. The problem is COST.
The cost of college has risen in great excess compared to the general rate of inflation. The cause is to much credit to available and to cheap due to government loan grantee and or direct lending programs. This is exactly the same issue which resulted in the housing bubble. It is a bubble the cost is objectively to high today, outside STEM fields, many, many students will never recoup the time value adjusted cost of getting that education, in better salary or career opportunities. The only way tuition will ever go down is if students stop enrolling because they can't pay.
If you want to fix the problem, you STOP offering loan grantees today. You have Sallie Mai start cutting the number of loans and the amounts it offers each year over a 5-7 year period so students can adjust and find other lenders. You eliminate the special bankruptcy protections student loans enjoy so families who borrow to much have a remedy. This will mean students will have to find cosigners or otherwise collateralize the debt. This will make them cost conscience again. It will no longer be a race between schools to see who can offer the fanciest athletic facility and the best food in the dining hall but who can offer the strongest academic credential at the lowest price, as it should be.
I suspect if your recorded all of your personal interactions for a week, and verified the truthfulness of each statement made by those where were strangers to you when the statement was made; you'd see most people are honest. The number would probably even be more favorable toward honesty if you include statements made by people you know.
At least here in American *most* of what people tell me is either true or correct to the best of their understanding. I am not naive, I know *much* of what I hear does contain lies and omissions. Still most of us are able to safely navigate day to day life using the "unless I have some reason to think otherwise, or the risk is high, default trust" algorithm.
When someone tells you the road is closed three miles ahead, I'd like to be able to take them at their word rather than do a 6 mile round trip to confirm for myself.
It matters because it encourages uttering specifically and dishonesty in general. It sends the message that you to could be one of the 1% if just lie often enough.
I think its harmful to let such blatant false claims go unpunished. Everyone exaggerates from time to time or stretches the truth. There is a bright line somewhere where you move from matters of interpretation to contradiction of fact. He might of said "I studied computer science while at college" which would be okay. Most of us would assume that means he was in CS program. If we don't ask any followup questions and its later revealed what that means is he leafed thru his roommate's text books once; that is our problem. If he says "I have a degree in Computer Science" when he does not that is a strait up lie.
Do you really want to live in a society where the rule is you cannot trust the veracity of specific statements made by people? Do you want to have to get every document notarized? Do you want to have to carry your diploma to every job interview? Force merchants to photo copy your ID every time you write a check?
Its better to enforce punitive action like immediate termination on people who do these things so the rest of us can afford each other some minimal level of trust, knowing that unless someone has a reason to be deceitful, they are most likely being more or less honest as there could be negative consequences if the lie is discovered which they would seek to avoid through honesty.
Well I am just putting it out there, the well being of my pet is orders of magnitude more important to me than some armed invader on my property. If you show up and hurt my pet intentionally there will be no peaceful resolution, no talk. I will be doing whatever I can to take you and your guys out even if it gets me killed.
When an iPhone user is using a Dropbox-enabled app, Apple is bringing that customer to Dropbox
Wrong! Its Dropbox and all the App developers that bring customers to Apple, the proof? Apple's own fondness for the slogan "There's an app for that."
This is a blatant money grab by Apple and its very disrespectful to their ecosystem. What makes IOS good is the huge library of high quality applications. Mobile platforms are basically a commodity now. WP7/8, Droid, and RIM are pretty much just as good, even Woz thinks so! The differences is they either they lack apps or they a collection of apps which are a crappy, buggy, malware ridden byte swamp.
I can't remember the name of the film, and it was not exactly modern stenography, but the plot was the Russians were sending secret messages to and from their embedded spies in the States via a series of porno videos.
Messages were being encoded as bar code segments used to make up the wall paper behind the 'actors'
automation, instrumentation, database engines, database design, very high speed transform / processing (ETL), information security, storage, etc.
BI, at least form the geek perspective uses just about every discipline in IT and CS; which is why lots and lots of professionals get into; its actually a fascinating world to work in. My only question is does it make sense to have BI topic on Slashdot as 80% of all stories covered here could be put into it reasonably.
The content industry might not have liked Hulu and they don't like like Netflix. They key point they are missing though is that Hulu + Netflix, found a price point and model that 20 and early thirty somethings found attractive.
They are not going to back to shelling out $60/mo for cable tv. With the recession and jobs being hard to get post college many will never start. Screwing up Hulu from the inside and killing Netflix through starvation and rate jacking is rock dumb. The result we be segregating the market into people with too much money who buy things on iTunes and everyone else. Rather than extracting a few million form Netflix each quarter and enjoying nearly 100% profit from Hulu, they are instead going to get jack and shit when everyone goes back to warez, and boot legs.
They days of pushing ($+50 CATV + (X * $12.99)) / mo are over you can't turn back the clock.
Another interesting economic question, "is the scale of Titanic" correct for the modern era?
Titanic: Length: 882 ft 6 in Beam: 92 ft
Costa Concordia: Length: 952 ft 1 in Beam: 116 ft 6 in
Queen Mary 2: Length: 1,132 ft Beam: 147.5 ft
As far as "upscale" goes the QM2, is probably near the top today. Even an affordable cruise is typically a bigger ship, Concordia class, than Titanic. While a Concordia is not much bigger, if you going to book some time on fancy floating palace don't you want to be on the very biggest? Was that not part of the Titanic's initial draw?
I'm still struggling to figure out how a live, well run network could be in danger. What I mean is to implement this exploit takes a system that is already more screwed up than anything you could do with the exploit.
Directly no, but that is not really the issue at all. The way to win in security is consistency, consistency, and consistency. You do the right things every time, every where you know of in hopes that it might save in the places you don't.
I have seen command and control shell codes that look enough like plain Jane http to not get flaged by most ids, and the target is not in everyones URL filters yet that is getting past the firewall and over the proxy. Couple that with a little social engineering and someone is on your internal lan segment right next to your vulnerable box, no firewalls, no IPS, and little to get in their way. That's how.
There is no real incentive for the CC companies to make audit compliance difficult. Remember that when a charge-back happens the seller pays.
Really the financial to do a good job and really be PCI compliant already falls on the merchant. For the most part PCI standards make sense. If you as business don't implement PCI properly and then find some rubber stamp audit firm to sign off its disservice to yourself. Just ask Sony; I bet they wish they'd have taken PCI more seriously!
It might be a hassle for your customers having your e-comm site be pwn'd might very well hurt you too. You might have to eat the cost of all kinds of inventory shipped to fraudsters, and your public image might be destroyed.
Poor auditors are a problem, but the root cause is the foolish people who hire them. They have missed judged the risks associated with doing it wrong.
All very good points. The other issues is most governments (certainly ours) need untraceable currency to conduct their business. The FBI and CIA deal in cash all the time.
Its not hard to image why some (legal and otherwise beneficial) operations require payments made in a way nobody can say where they came from. Mostly our political leaders consist of they inept and the foolish but there are still a few grown ups in the room who get these things.
Slashdot Mirror
I don't normally support regulation and I am not sure I'd vote for this idea if asked to myself but I want to put it out there anyway.
What if we ban, that is right ban, the use ipv4 on publicly accessible networks after say 2018. Make it illegal to route ip4v addressed packet for a third party. This would force the move to ipv6. Which I think is good for freedom and the little guy. Yes that is right a forced migration is good for the little guy.
Its big business that has interests in keeping everyone on IPv4 and its actually big business who have the bigger investment in ipv4 only gear. The little guy can afford migrate.
What this is really about is ipv4 implies NAT. NAT implies third party brokers, which imply track ability, and opportunities to create digital toll booths. You can't just send files directly to each other; oh no they have be posted to some file sharing site so they can show you adds and the NSA has a good opportunity to data mine.
Yeah, maybe they nail him on tax evasion / copyright infringement, but everyone who knows anything about Kim knows that he deserves everything he's getting and then some.
What he deserves is not at issue. What is legal and correct procedure is; as if the current legal frame works is even justifiable. Tax evasion aside, copyright infringement should be an entirely civil matter. It should be incumbent upon content owner to detect an sue violators.
Its not the job the FBI/CIA/State Department to track copyright violators. My tax dollars are being wrongfully converted in my opinion to support someone else's business. In fact actions like this are not helpful where the perception of America in the world is concerned; which might mean these types of actions run directly contrary to the government's Constitutional mission to promote the GENERAL welfare.
Additional actions like these where a "conspiracy" is invented justify state actions against individuals normally not permitted for the real issues at hand is bad for everyone. Its happening everywhere, look at the finanical crisis and what was done to the Chrysler bond holders. The "exceptions" to No Child Left behind are yet another example, even if you agree its a good idea the law does not provide for exceptions the president is not entitled to grand them. If changes to the law need to be made we have a process for that, we should not just ignore it. The current people running our government have reduced the rule of law to a fiction. They have so many laws the simply ignore and so many vague laws that can be used to do anything we might as well live in China.
The rule of law is supposed to be one the things that make our nation unique, special, and great. As a society if we don't start taking it seriously again and looking very critically upon those who bend and pervert it; even for reasons we might find noble we as a society will vanish.
I think a more valid question is why should MegaUpload be expected to prevent you from doing anything illegal? We don't require manufactures of other products to do that.
How come GM is not required to have cars verify all passengers are willing in some way to prevent kidnapping and human trafficking? How come nobody is prosecuting the guys who painted John Edward's house for not verify they were not being paid with illegally converted campaign contributions?
I think setting the precedent that service providers or manufactures are responsible for the actions of their users is wrong.
Yes they would get theirs and no Romney won't do it, neither will Obama. We need a real outsider. Had we not done the bailouts and let AIG go down, they would have most likely taken Goldman, and second tier investment banks wit them. JPM would most likely have survived but it would have been pushed out of the F50 for certain.
We would all be better off in the long run. The great thing about capitalism is its supposed to off mobility; for that to happen the wealthy must be allowed to fail. What we have today is not capitalism its closer to feudalism.
Its not going to save any bytes in your code and depending on the implementation may or may not save bytes where data at rest is concerned. Its going to save bytes in your live data which in most cases is bigger than your code larger than the corresponding number of records at rest.
Think about a the basic linked list. At a minimum ( for a single linked list ) you have a pointer on every record, that pointer could either be four or eight bytes. Even something like an office document or a web page of moderate complexity might have millions of elements the rendering software needs to track. That could be 4MB of working storage saved right there.
Yes 16GB of RAM for your desktop is cheap. It will cost more for ECC server memory though. Lots of server apps need to handle thousands of clients. That memory savings might mean a great deal there.
The trouble with the pass phrase concept is that the whole words just become tokens. Most people's vocabulary is not that large. You could use a common spelling dictionary and toss in the like substitutions 0 for o excetra and you don't really have a key space much larger than normal 7 character or so passwords offer
Depends on your product. I would expect Facebook to be a strong market for hipster style affordable bling. Guys and Gals who really want to be seen with their mePhone, StarSmucks Coffee cup, and Abercrumy T-Shirt.
They may not be the target demographic for say Tiffany or $40K+ automobiles. GM needs to sell less expensive cars as well but that market is not discerning. Getting someone to choose a Sonic over a Civic is a matter of getting them into your dealership first in most cases. The giant inflatable gorilla may well be a more effective startegy that Facebook for that market.
Then you'll have an uneducated underclass. Is that what you're after or is it just a pleasant side effect?
I have no doubt that there will a period of adjustment, where college enrollment rate falls. My hope would be that Universities, especially public ones, realize their mission is educating as many students as possible; its not winning NCAA tournaments, not building dormitories fit for royalty, not trying to get the most foreign students, not having the most publications, not even research. They could then restructure their costs accordingly.
There is no reason, college needs to cost 8k a year a public university to live at home. The only reason it costs that much is because they can get it, and they use it fund all manor of secondary objectives. They only way it stop costing that much is if they can't get it.
Depends...
Suppose you have a router has link A connected at 10Mbs, link B at 10Mbs, and link C at 300Kbps. You have a host on the far end of A sending packets to something on the far end of C. The traffic is highly bursty. TCP does reliability end to end, so if the host on the end of C misses packets because the router discarded them that is all traffic that has to run across link A again, which cuts down the available bandwidth for A to B. If the router had a large buffer the burst of traffic from A for C might have been stored, preventing the retransmit on A. This works for bursty traffic, obviously the buffer will never flush if the A to C flow is continuous.
Buffering is still important. Its just not as simple now that the internet is less bursty. More transfers are large files, streaming media, etc, less push that e-mail message, or 5K webpage and done.
Education is investment not spending
You can't use "investment" and "spending" they way you are. You are mixing meanings and that is exactly what the corrupt politicians want you to do, confuse yourself.
There are revenues, assets, liabilities, and expenses. Spending just means surrendering some assets for something else. You "spend" one asset even if you are investing in another. Investing in Education IS SPENDING, what it may not be is investing.
I'm convinced that a society as a whole greatly profits by providing as much education to as many members as possible.
Well you have to prove that education is asset to society. Can show that we are generating more nominal output with less input as result of our society being more educated ( % of population with a degree is a valid measure of that ) then ever?
You have no control so good luck.
helping people get education is not so much "spending" as investing into the future.
I am sorry but you wrong on this point as are both parties at least in the context of the way they are going about it right now. The problem with going to college for most students is not obtaining credit, nor is it the interest rate on the credit even if rates were go up to a whopping 4.5% OMG. The problem is COST.
The cost of college has risen in great excess compared to the general rate of inflation. The cause is to much credit to available and to cheap due to government loan grantee and or direct lending programs. This is exactly the same issue which resulted in the housing bubble. It is a bubble the cost is objectively to high today, outside STEM fields, many, many students will never recoup the time value adjusted cost of getting that education, in better salary or career opportunities. The only way tuition will ever go down is if students stop enrolling because they can't pay.
If you want to fix the problem, you STOP offering loan grantees today. You have Sallie Mai start cutting the number of loans and the amounts it offers each year over a 5-7 year period so students can adjust and find other lenders. You eliminate the special bankruptcy protections student loans enjoy so families who borrow to much have a remedy. This will mean students will have to find cosigners or otherwise collateralize the debt. This will make them cost conscience again. It will no longer be a race between schools to see who can offer the fanciest athletic facility and the best food in the dining hall but who can offer the strongest academic credential at the lowest price, as it should be.
House is right but its not the "rule".
I suspect if your recorded all of your personal interactions for a week, and verified the truthfulness of each statement made by those where were strangers to you when the statement was made; you'd see most people are honest. The number would probably even be more favorable toward honesty if you include statements made by people you know.
At least here in American *most* of what people tell me is either true or correct to the best of their understanding. I am not naive, I know *much* of what I hear does contain lies and omissions. Still most of us are able to safely navigate day to day life using the "unless I have some reason to think otherwise, or the risk is high, default trust" algorithm.
When someone tells you the road is closed three miles ahead, I'd like to be able to take them at their word rather than do a 6 mile round trip to confirm for myself.
It matters because it encourages uttering specifically and dishonesty in general. It sends the message that you to could be one of the 1% if just lie often enough.
I think its harmful to let such blatant false claims go unpunished. Everyone exaggerates from time to time or stretches the truth. There is a bright line somewhere where you move from matters of interpretation to contradiction of fact. He might of said "I studied computer science while at college" which would be okay. Most of us would assume that means he was in CS program. If we don't ask any followup questions and its later revealed what that means is he leafed thru his roommate's text books once; that is our problem. If he says "I have a degree in Computer Science" when he does not that is a strait up lie.
Do you really want to live in a society where the rule is you cannot trust the veracity of specific statements made by people? Do you want to have to get every document notarized? Do you want to have to carry your diploma to every job interview? Force merchants to photo copy your ID every time you write a check?
Its better to enforce punitive action like immediate termination on people who do these things so the rest of us can afford each other some minimal level of trust, knowing that unless someone has a reason to be deceitful, they are most likely being more or less honest as there could be negative consequences if the lie is discovered which they would seek to avoid through honesty.
Well I am just putting it out there, the well being of my pet is orders of magnitude more important to me than some armed invader on my property. If you show up and hurt my pet intentionally there will be no peaceful resolution, no talk. I will be doing whatever I can to take you and your guys out even if it gets me killed.
When an iPhone user is using a Dropbox-enabled app, Apple is bringing that customer to Dropbox
Wrong! Its Dropbox and all the App developers that bring customers to Apple, the proof? Apple's own fondness for the slogan "There's an app for that."
This is a blatant money grab by Apple and its very disrespectful to their ecosystem. What makes IOS good is the huge library of high quality applications. Mobile platforms are basically a commodity now. WP7/8, Droid, and RIM are pretty much just as good, even Woz thinks so! The differences is they either they lack apps or they a collection of apps which are a crappy, buggy, malware ridden byte swamp.
Do not pass go. Do not visit any monetized web site. Go directly to App store and deposit two Dollars.
I can't remember the name of the film, and it was not exactly modern stenography, but the plot was the Russians were sending secret messages to and from their embedded spies in the States via a series of porno videos.
Messages were being encoded as bar code segments used to make up the wall paper behind the 'actors'
Right nobody reading Slashdot cares at all about:
automation,
instrumentation,
database engines,
database design,
very high speed transform / processing (ETL),
information security,
storage,
etc.
BI, at least form the geek perspective uses just about every discipline in IT and CS; which is why lots and lots of professionals get into; its actually a fascinating world to work in. My only question is does it make sense to have BI topic on Slashdot as 80% of all stories covered here could be put into it reasonably.
The content industry might not have liked Hulu and they don't like like Netflix. They key point they are missing though is that Hulu + Netflix, found a price point and model that 20 and early thirty somethings found attractive.
They are not going to back to shelling out $60/mo for cable tv. With the recession and jobs being hard to get post college many will never start. Screwing up Hulu from the inside and killing Netflix through starvation and rate jacking is rock dumb. The result we be segregating the market into people with too much money who buy things on iTunes and everyone else. Rather than extracting a few million form Netflix each quarter and enjoying nearly 100% profit from Hulu, they are instead going to get jack and shit when everyone goes back to warez, and boot legs.
They days of pushing ($+50 CATV + (X * $12.99)) / mo are over you can't turn back the clock.
Another interesting economic question, "is the scale of Titanic" correct for the modern era?
Titanic:
Length: 882 ft 6 in
Beam: 92 ft
Costa Concordia:
Length: 952 ft 1 in
Beam: 116 ft 6 in
Queen Mary 2:
Length: 1,132 ft
Beam: 147.5 ft
As far as "upscale" goes the QM2, is probably near the top today. Even an affordable cruise is typically a bigger ship, Concordia class, than Titanic. While a Concordia is not much bigger, if you going to book some time on fancy floating palace don't you want to be on the very biggest? Was that not part of the Titanic's initial draw?
Someones been reading to man Cussler novels
What the hell happened? Are we losing this 'war on terror'?
No war on Terror is going pretty well actually. Its the war for reason that we lost.
I'm still struggling to figure out how a live, well run network could be in danger. What I mean is to implement this exploit takes a system that is already more screwed up than anything you could do with the exploit.
Directly no, but that is not really the issue at all. The way to win in security is consistency, consistency, and consistency. You do the right things every time, every where you know of in hopes that it might save in the places you don't.
I have seen command and control shell codes that look enough like plain Jane http to not get flaged by most ids, and the target is not in everyones URL filters yet that is getting past the firewall and over the proxy. Couple that with a little social engineering and someone is on your internal lan segment right next to your vulnerable box, no firewalls, no IPS, and little to get in their way. That's how.
There is no real incentive for the CC companies to make audit compliance difficult. Remember that when a charge-back happens the seller pays.
Really the financial to do a good job and really be PCI compliant already falls on the merchant. For the most part PCI standards make sense. If you as business don't implement PCI properly and then find some rubber stamp audit firm to sign off its disservice to yourself. Just ask Sony; I bet they wish they'd have taken PCI more seriously!
It might be a hassle for your customers having your e-comm site be pwn'd might very well hurt you too. You might have to eat the cost of all kinds of inventory shipped to fraudsters, and your public image might be destroyed.
Poor auditors are a problem, but the root cause is the foolish people who hire them. They have missed judged the risks associated with doing it wrong.
All very good points. The other issues is most governments (certainly ours) need untraceable currency to conduct their business. The FBI and CIA deal in cash all the time.
Its not hard to image why some (legal and otherwise beneficial) operations require payments made in a way nobody can say where they came from. Mostly our political leaders consist of they inept and the foolish but there are still a few grown ups in the room who get these things.