You do realize that this example could be entirely reasonable right ? 51 and 50 are MASSIVELY different figures.
LIterally the difference is higher than the entire official unemployment number for the whole COUNTRY.
Both numbers are much, much further away from official BLS statistics numbers than they are apart from each other, so there is a good chance that both numbers are vastly overstated. Every college student, who does some work on the side, is likely included in both these numbers, although no reasonable person would include them in a credible unemployment statistic.
Allow me to tell you, why both Sanders' and Trump's number is dangerously wrong: people got BLS statistics for years, and learned to correlate these numbers with their real world experience, as in '10% unemployment means x amount of felonies committed per block and year, y% of shops closing due to lack of customers, z amount of less disposable income because wages come down'.
If someone then puts out a much higher number based on totally different assumptions, which both Trump and Sanders did, people will interpret this number as a huge lingering problem. Guess what, both candidates tried to achieve exactly this when they stated these numbers, create excessive alarm in their audience in order to further their own political agenda.
Politifact could have pointed this out, and could have put both numbers into the myth bag, instead they put on their 'Bernie can say nothing wrong' hat and created a discrepancy, which the whole alt-right media cluster wrote about. Instead of dealing with the fallout from this, main stream media still blathered about 'the necessity of fact checking', when fact checking had already lost every trace of credibility in alt-right circles.
An example commonly quoted in alt-right media is Bernie Sander's vs. Donald Trump's number for unemployment among African-American youths. Bernie Sanders claimed "over 51%", and that number was confirmed as "Mostly True" by fact checking site politifact.com. Trump's very similar sounding statement "59%", however, was judged as "Mostly False" by the same site.
Obviously there are differences in wording between Sander's and Trump's statements, which may make one statement more trustworthy than the other one, but the overall impression remains, that fact checking is not always done in a neutral way. As a result, alt-right media had a free path to discredit all fact checking sites, making the important task of fact checking mostly irrelevant and ineffective in these circles.
Basically Wikileaks has nobody there who is competent enough to actually implement a security framework for the site.
So, as a result, it basically becomes a dumping ground for all this crap.
Thus, when examples are pointed out to them, all they can do is nix the examples.
Wikileaks has withstood countless efforts to get their site offline, sometime by dedicated groups and/or state sponsored actors. You may remember how all hell broke loose with cablegate, including DDOS and Senator Lieberman's call to Amazon. Calling Wikileaks incompetent at security is completely ridiculous.
I bet that the whole thing went down like this: author of this backchannel article wanted to rag on Wikileaks for their dissemination of personal details, and wanted to bring up email #117 as prime example (medical bill!!) and got infected herself for lack of security competence. Author then contacted some security outfit to perform a security evaluation, security outfit performed a simple virus scan. Author then cooked up a click bait article, how Wikileaks is out there to recklessly infect everyone with malware.
Let's face it: Wikileaks is plenty competent securitywise, as evidenced by their very presence for so many years. They expect their readers, especially professional journalists scouring their site to bring at least a moderate skill set to the table, and Mrs. Upson apparently failed miserably.
Riyadh al-Adhadh is not some random raghead insurgent whom Laura suddenly decided to fund. He was the primary focus of her film 'My Country, My Country', so little surprise that she was in contact with him and supported him. He was jailed for months on false terrorism charges, and apparently still served as Baghdad Provincial Council Chairman last year.
Evidently she knew him better than the whole bunch of all-seing, all-scanning, all-collecting, "we need to listen to your granny or we can't catch the terrorists" three letter agencies together. We should all sit down and weep in despair, if this wire transfer is still the reason for the ongoing harassment Laura on every single flight.
AFAIK Stephen Henson was the guy who also approved the patch that ultimately led to the heart bleed exploit. Call me paranoid all you want, but I'm getting nervous about OpenSSL at this point.
NIST recklessly broke our trust in them by allowing known to be broken encryption into their standard. Their new document may come with all the best intentions, but it will take years to rebuild that trust. Let's wait for what the crypto community has to say about these documents, before we blindly follow their latest standards.
4. Their report states on page 5, that instead of "PROP" the exploit code used the word "HASHVA" on multiple occasions. While this could be a short form of "hash value", it just by pure coincidence means "thought" in Hebrew...
*** Yes, he did flee. The claim that Assange was "free to go" as promulgated by Björn Hurtig, a former attorney of Assange's. He tried that same line in court and got smacked down by the judge for trying to deceive the court, and then got an official reprimand from the Swedish Bar Association.
I can't confirm or deny your claim here, but the link you provide doesn't confirm it either:
Riddle was referring to testimony in which Hurtig had said he had been unable to contact Assange last year when he was sought by Swedish prosecutors for questioning.
Nothing is said about whether Assange was free to leave Sweden or not, but a court order banning you from leaving the country usually means you hand over your passport. Since the UK is not part of the Schengen Area, he would have needed a passport to enter the UK from Sweden.
If the variability of muzzle speed between rounds is the limiting factor for accuracy, how would radar guidance be an improvement? It's not like you could control an artillery shell after a shot has been fired...
IIRC, AWS ditched wikileaks.org like a hot potatoe after a simple phone call by some US official. Of all the services suggested here, AWS would probably be the last service one should look at for this purpose.
There is a solution for this class of malware, but it isn't anti-virus. Since cryptolocker only damages user data, the operating system should provide a secure and automatic backup of the user's data. Any time a user's file is changed, the new version is recorded on the backup, with its date. From the user's point of view, the backups are read-only, so malware can't damage them, and the user can retrieve an old version of a file at any time.
I hope you are aware that this could go wrong in terrible ways: there are some files that you actually want to have only in encrypted state. If your operating system always keeps a backup of their unencrypted versions, you may be secure against certain kinds of ransomwares, but open to all kinds of other data leakage.
And to the video that you linked to: that's a nice part they make with that laser machine, but it is thin walled. One wonders how accurate that part will be once it has gone through a few heat cycles.
The video shows a single layer ring welded onto a metal substrate, but nothing of substantional height or volume. Hearing the guy talk in this video tells me he had quite a few software and electronics issues to work out, and he did not show any large parts made my this process. His machine in the present configuration also doesn't provide a method for making overhanging features (a problem already solved by Shape Deposition Manufacturing), so I really wonder when we are going to see the first piece of art coming out of this machine...
There was a project going on, first at Carnegie Mellon University and then at Stanford's Rapid Prototyping Laboratory, where a very similar but more sophisticated process (Shape Deposition Manufacturing) was investigated to make precise metal parts with full strength (unlike the sintering methods mentioned here and elsewhere). A number of methods were used or tried to melt the metal, including TIG welding, laser fusing and induction heating.
The biggest hurdle to success was the huge internal stress that built up in the process. Remember that one puts layer after layer of molten metal on top of the previous one. The new metal layer solidifies and shrinks, creating lots of compressive on the previous layer. Put down enough of these layers and the part will crack.
And no, doing this process with Invar won't help, because Invar doesn't have this beautiful near zero thermal expansion close to its melting point.
Lets hope the blogger reads what has been published about this process before he commits more effort and resources to his project...
Amazon and net neutrality my ass. That was the day I decided to no longer do any business with Amazon. A bookstore and hosting service that engages in politically motivated censorship does not deserve my business, and the story posted here shows how far Amazon is willing to go.
These people filling the coffers of fraudulent exchanges are not necessarily clueless people storing their assets there like they would in a regular bank account.
There has been a large amount of "tidal trading" - where you place buy orders at a low price together with sell orders at a high price, and hope that market volatility will eventually put through both orders with some profit. This way you can profit from rises and falls in exchange rate, well, until yet another a flaky exchange runs with all your assets.
Some questions I would have for a lawyer that actually knows the ins&outs of Florida state law in this field:
1. Is the above, in fact, the case? I.e. are the charges on those accounts completely unrelated to the disclosure of what the purchased material (in this case, Bitcoin) would be used for?
2a. Does that mean that the state of Florida sees Bitcoin as a currency?
2b. If it does not, then how would this same law be applied to e.g. physical goods if used as a material for exchange (e.g. gold nuggets, diamonds, etc.)
3. Would similar apply to a travelers going in opposite directions exchanging their currencies when the value exceeds $300 (something easily possible if you forget to empty out your wallet), rather than going through the official exchange bureaus at the airport (and incurring the rather hefty exchange fees)?
I am anything but a lawyer, but TFA actually references the laws applicable to the case for everyone to read. If I read these laws correctly, then
1. Yes, you can not simply do trades between currencies or equivalent valuables without a license, and that license seems tied to stiff reporting rules as soon as higher values are involved
2. The law doesn't require that, it suffices if bitcoin is seen a payment instrument.
It would have been fairly trivial for the Germans to have rendered Enigma unreadable, possibly for the duration of the war, by a number of means they had readily at hand and could have implemented with simple commands. The result would have been at best a much longer and bloodier war. The result could very easily have been either a stalemate, or even a loss by the Allies.
The position of the Allies, their ability to sustain their war effort and avoid Britain being starved into submission, was all dependent upon the people with knowledge of the Ultra program keeping the ability of the Allies to read the German codes a secret. The Allies were able to do that. It was a shock to the Germans when they found out 30 years later that the Allies had broken the Enigma codes. At times they had suspected, but they passed it off as unlikely, and did relatively little compared to what they could have done had they known.
You imply that the modern bad guys were not aware that they were spied on until Snowden broke the news, but that's factually incorrect. Osama Bin Laden did not communicate from a home computer, did not send commands by phone, he did not store his heinous plans in the iCloud, and neither has any worthy adversary of the western world done any of that for over a decade. They all knew that western SIGINT could and would track computers and communications, and anyone reading about anti terror operations conducted during the last 10 years knew that as well.
Even the Germans must have overcome their hubris in the mean time, since monitoring of Angela Merkel's phone was long over before Snowden provided information about this. We can safely assume that Snowden did not provide anything that was not well known in the intelligence community, including both good guys and bad guys. Word about ECHOLON was out for years and assuming that the NSA suddenly stopped doing it would be very naive at best. Likewise only naive people ever assumed that a motherboard with components and CPU designed in the US or by close allies would not have an NSA back door. There's a reason why high strength crypto engines sold today are not based on PC hardware or chips made/designed in the US.
So what's left, pretty much the only ones really surprised, are members of the public in the US, who thought that government agencies and officials felt somehow bound by their constitution. Those people were the only ones really tricked by their intelligence agencies, and I wouldn't dare compare public trust in their officials to the "hubris" of the Nazi German high command. Mind you, so far the American population did not see itself as an enemy at war with the US government.
Let's just ignore the inconvenient truth that nobody new has been admitted to Gitmo in years, those who are there were all captured on foreign battlefields and received the due process entitled to them under the Geneva conventions, and the titanic P/R disaster that would ensue if any American administration (never mind this administration) were to send him there.
Look at how Bradley (Chelsea) Manning was treated and you will realize that horrific abuses of the judical system appear even outside of Guantanamo Bay with the full support of the US government and in broad daylight for everyone to see. The US goverment willingly accepted the resulting "titanic P/R desaster" and currently goes through another major embarrassment with this Snowden story.
Not all inmates of Guantanamo Bay were enemy combattants, by the way, there were prominent cases of innocent inmates who were exposed to secret rendition flights, torture and other forms of mistreatment before they ended up in Guantanamo Bay, where they were held for years.
Suggesting that the US goverment has stopped treating their constitution as toilet paper or cares in the least about how the world perceives their actions is naive at best.
HTTPS is completely pointless when it comes to stopping spies. Even the Iranian government was able to snoop on gmail communications thanks to compromised root certificates.. While the Iranians had to actually compromise a CA, the US could just coerce a US based CA into cooperating without anyone else ever hearing about it.
All these banks employ nothing but the highest levels of security expertise, that's how, for instance, scores of Bank of America ATM terminals got infected with Code Red or Nimda back then.....
Slashdot Mirror
You do realize that this example could be entirely reasonable right ? 51 and 50 are MASSIVELY different figures.
LIterally the difference is higher than the entire official unemployment number for the whole COUNTRY.
Both numbers are much, much further away from official BLS statistics numbers than they are apart from each other, so there is a good chance that both numbers are vastly overstated. Every college student, who does some work on the side, is likely included in both these numbers, although no reasonable person would include them in a credible unemployment statistic.
Allow me to tell you, why both Sanders' and Trump's number is dangerously wrong: people got BLS statistics for years, and learned to correlate these numbers with their real world experience, as in '10% unemployment means x amount of felonies committed per block and year, y% of shops closing due to lack of customers, z amount of less disposable income because wages come down'.
If someone then puts out a much higher number based on totally different assumptions, which both Trump and Sanders did, people will interpret this number as a huge lingering problem. Guess what, both candidates tried to achieve exactly this when they stated these numbers, create excessive alarm in their audience in order to further their own political agenda.
Politifact could have pointed this out, and could have put both numbers into the myth bag, instead they put on their 'Bernie can say nothing wrong' hat and created a discrepancy, which the whole alt-right media cluster wrote about. Instead of dealing with the fallout from this, main stream media still blathered about 'the necessity of fact checking', when fact checking had already lost every trace of credibility in alt-right circles.
An example commonly quoted in alt-right media is Bernie Sander's vs. Donald Trump's number for unemployment among African-American youths. Bernie Sanders claimed "over 51%", and that number was confirmed as "Mostly True" by fact checking site politifact.com. Trump's very similar sounding statement "59%", however, was judged as "Mostly False" by the same site.
Obviously there are differences in wording between Sander's and Trump's statements, which may make one statement more trustworthy than the other one, but the overall impression remains, that fact checking is not always done in a neutral way. As a result, alt-right media had a free path to discredit all fact checking sites, making the important task of fact checking mostly irrelevant and ineffective in these circles.
Basically Wikileaks has nobody there who is competent enough to actually implement a security framework for the site.
So, as a result, it basically becomes a dumping ground for all this crap.
Thus, when examples are pointed out to them, all they can do is nix the examples.
Wikileaks has withstood countless efforts to get their site offline, sometime by dedicated groups and/or state sponsored actors. You may remember how all hell broke loose with cablegate, including DDOS and Senator Lieberman's call to Amazon. Calling Wikileaks incompetent at security is completely ridiculous.
I bet that the whole thing went down like this: author of this backchannel article wanted to rag on Wikileaks for their dissemination of personal details, and wanted to bring up email #117 as prime example (medical bill!!) and got infected herself for lack of security competence. Author then contacted some security outfit to perform a security evaluation, security outfit performed a simple virus scan. Author then cooked up a click bait article, how Wikileaks is out there to recklessly infect everyone with malware.
Let's face it: Wikileaks is plenty competent securitywise, as evidenced by their very presence for so many years. They expect their readers, especially professional journalists scouring their site to bring at least a moderate skill set to the table, and Mrs. Upson apparently failed miserably.
Riyadh al-Adhadh is not some random raghead insurgent whom Laura suddenly decided to fund. He was the primary focus of her film 'My Country, My Country', so little surprise that she was in contact with him and supported him. He was jailed for months on false terrorism charges, and apparently still served as Baghdad Provincial Council Chairman last year.
Evidently she knew him better than the whole bunch of all-seing, all-scanning, all-collecting, "we need to listen to your granny or we can't catch the terrorists" three letter agencies together. We should all sit down and weep in despair, if this wire transfer is still the reason for the ongoing harassment Laura on every single flight.
AFAIK Stephen Henson was the guy who also approved the patch that ultimately led to the heart bleed exploit. Call me paranoid all you want, but I'm getting nervous about OpenSSL at this point.
NIST recklessly broke our trust in them by allowing known to be broken encryption into their standard. Their new document may come with all the best intentions, but it will take years to rebuild that trust. Let's wait for what the crypto community has to say about these documents, before we blindly follow their latest standards.
4. Their report states on page 5, that instead of "PROP" the exploit code used the word "HASHVA" on multiple occasions. While this could be a short form of "hash value", it just by pure coincidence means "thought" in Hebrew ...
*** Yes, he did flee. The claim that Assange was "free to go" as promulgated by Björn Hurtig, a former attorney of Assange's. He tried that same line in court and got smacked down by the judge for trying to deceive the court, and then got an official reprimand from the Swedish Bar Association.
I can't confirm or deny your claim here, but the link you provide doesn't confirm it either:
Riddle was referring to testimony in which Hurtig had said he had been unable to contact Assange last year when he was sought by Swedish prosecutors for questioning.
Nothing is said about whether Assange was free to leave Sweden or not, but a court order banning you from leaving the country usually means you hand over your passport. Since the UK is not part of the Schengen Area, he would have needed a passport to enter the UK from Sweden.
If the variability of muzzle speed between rounds is the limiting factor for accuracy, how would radar guidance be an improvement? It's not like you could control an artillery shell after a shot has been fired ...
IIRC, AWS ditched wikileaks.org like a hot potatoe after a simple phone call by some US official. Of all the services suggested here, AWS would probably be the last service one should look at for this purpose.
You have to tell them, that flashing firmware could be used for bypassing DRM, and they'd force push out signed firmware the minute after :-P
There is a solution for this class of malware, but it isn't anti-virus. Since cryptolocker only damages user data, the operating system should provide a secure and automatic backup of the user's data. Any time a user's file is changed, the new version is recorded on the backup, with its date. From the user's point of view, the backups are read-only, so malware can't damage them, and the user can retrieve an old version of a file at any time.
I hope you are aware that this could go wrong in terrible ways: there are some files that you actually want to have only in encrypted state. If your operating system always keeps a backup of their unencrypted versions, you may be secure against certain kinds of ransomwares, but open to all kinds of other data leakage.
And to the video that you linked to: that's a nice part they make with that laser machine, but it is thin walled. One wonders how accurate that part will be once it has gone through a few heat cycles.
The video shows a single layer ring welded onto a metal substrate, but nothing of substantional height or volume. Hearing the guy talk in this video tells me he had quite a few software and electronics issues to work out, and he did not show any large parts made my this process. His machine in the present configuration also doesn't provide a method for making overhanging features (a problem already solved by Shape Deposition Manufacturing), so I really wonder when we are going to see the first piece of art coming out of this machine ...
There was a project going on, first at Carnegie Mellon University and then at Stanford's Rapid Prototyping Laboratory, where a very similar but more sophisticated process (Shape Deposition Manufacturing) was investigated to make precise metal parts with full strength (unlike the sintering methods mentioned here and elsewhere). A number of methods were used or tried to melt the metal, including TIG welding, laser fusing and induction heating.
The biggest hurdle to success was the huge internal stress that built up in the process. Remember that one puts layer after layer of molten metal on top of the previous one. The new metal layer solidifies and shrinks, creating lots of compressive on the previous layer. Put down enough of these layers and the part will crack.
And no, doing this process with Invar won't help, because Invar doesn't have this beautiful near zero thermal expansion close to its melting point.
Lets hope the blogger reads what has been published about this process before he commits more effort and resources to his project ...
That 22.7 number is going to get numerologists going. Remember, that in ancient times 22/7 was a common approximation for pi ...
Amazon: Big on Net Neutrality, not so much on Book Neutrality.
And biggest hypocrits, too. Remember the wikileaks saga? Wikileaks was hosted on Amazon cloud - for a few days, until some congress critters gave Amazon a nice phone call.
Amazon and net neutrality my ass. That was the day I decided to no longer do any business with Amazon. A bookstore and hosting service that engages in politically motivated censorship does not deserve my business, and the story posted here shows how far Amazon is willing to go.
... and a pack of inept/corrupt law makers could wipe their butts with that document and laugh in your face.
These people filling the coffers of fraudulent exchanges are not necessarily clueless people storing their assets there like they would in a regular bank account.
There has been a large amount of "tidal trading" - where you place buy orders at a low price together with sell orders at a high price, and hope that market volatility will eventually put through both orders with some profit. This way you can profit from rises and falls in exchange rate, well, until yet another a flaky exchange runs with all your assets.
Some questions I would have for a lawyer that actually knows the ins&outs of Florida state law in this field: 1. Is the above, in fact, the case? I.e. are the charges on those accounts completely unrelated to the disclosure of what the purchased material (in this case, Bitcoin) would be used for? 2a. Does that mean that the state of Florida sees Bitcoin as a currency? 2b. If it does not, then how would this same law be applied to e.g. physical goods if used as a material for exchange (e.g. gold nuggets, diamonds, etc.) 3. Would similar apply to a travelers going in opposite directions exchanging their currencies when the value exceeds $300 (something easily possible if you forget to empty out your wallet), rather than going through the official exchange bureaus at the airport (and incurring the rather hefty exchange fees)?
I am anything but a lawyer, but TFA actually references the laws applicable to the case for everyone to read. If I read these laws correctly, then
1. Yes, you can not simply do trades between currencies or equivalent valuables without a license, and that license seems tied to stiff reporting rules as soon as higher values are involved
2. The law doesn't require that, it suffices if bitcoin is seen a payment instrument.
3. It would seem like that. Read the law yourself: http://www.flsenate.gov/Laws/S...
It would have been fairly trivial for the Germans to have rendered Enigma unreadable, possibly for the duration of the war, by a number of means they had readily at hand and could have implemented with simple commands. The result would have been at best a much longer and bloodier war. The result could very easily have been either a stalemate, or even a loss by the Allies.
The position of the Allies, their ability to sustain their war effort and avoid Britain being starved into submission, was all dependent upon the people with knowledge of the Ultra program keeping the ability of the Allies to read the German codes a secret. The Allies were able to do that. It was a shock to the Germans when they found out 30 years later that the Allies had broken the Enigma codes. At times they had suspected, but they passed it off as unlikely, and did relatively little compared to what they could have done had they known.
You imply that the modern bad guys were not aware that they were spied on until Snowden broke the news, but that's factually incorrect. Osama Bin Laden did not communicate from a home computer, did not send commands by phone, he did not store his heinous plans in the iCloud, and neither has any worthy adversary of the western world done any of that for over a decade. They all knew that western SIGINT could and would track computers and communications, and anyone reading about anti terror operations conducted during the last 10 years knew that as well.
Even the Germans must have overcome their hubris in the mean time, since monitoring of Angela Merkel's phone was long over before Snowden provided information about this. We can safely assume that Snowden did not provide anything that was not well known in the intelligence community, including both good guys and bad guys. Word about ECHOLON was out for years and assuming that the NSA suddenly stopped doing it would be very naive at best. Likewise only naive people ever assumed that a motherboard with components and CPU designed in the US or by close allies would not have an NSA back door. There's a reason why high strength crypto engines sold today are not based on PC hardware or chips made/designed in the US.
So what's left, pretty much the only ones really surprised, are members of the public in the US, who thought that government agencies and officials felt somehow bound by their constitution. Those people were the only ones really tricked by their intelligence agencies, and I wouldn't dare compare public trust in their officials to the "hubris" of the Nazi German high command. Mind you, so far the American population did not see itself as an enemy at war with the US government.
Doesn't light fall off from a point source follow an inverse square law? It's certainly not an expoential law unless you have a very lossy medium.
Looks like Vermeer knew more than the editors of Vanity Fair ...
Let's just ignore the inconvenient truth that nobody new has been admitted to Gitmo in years, those who are there were all captured on foreign battlefields and received the due process entitled to them under the Geneva conventions, and the titanic P/R disaster that would ensue if any American administration (never mind this administration) were to send him there.
Look at how Bradley (Chelsea) Manning was treated and you will realize that horrific abuses of the judical system appear even outside of Guantanamo Bay with the full support of the US government and in broad daylight for everyone to see. The US goverment willingly accepted the resulting "titanic P/R desaster" and currently goes through another major embarrassment with this Snowden story.
Not all inmates of Guantanamo Bay were enemy combattants, by the way, there were prominent cases of innocent inmates who were exposed to secret rendition flights, torture and other forms of mistreatment before they ended up in Guantanamo Bay, where they were held for years.
Suggesting that the US goverment has stopped treating their constitution as toilet paper or cares in the least about how the world perceives their actions is naive at best.
HTTPS is completely pointless when it comes to stopping spies. Even the Iranian government was able to snoop on gmail communications thanks to compromised root certificates.. While the Iranians had to actually compromise a CA, the US could just coerce a US based CA into cooperating without anyone else ever hearing about it.
All these banks employ nothing but the highest levels of security expertise, that's how, for instance, scores of Bank of America ATM terminals got infected with Code Red or Nimda back then .....