Aside from this nasty RDP bug, how exactly is this "insanely stupid" any more so than leaving a web server connected to the Internet? I've seen plenty of web servers get rooted and turned into zombie spewing infected machines throwing spam and hosting fake AV advertisements.
For over ten years now, a major exploit of RDP is a first that I can recall. And BTW, the RDP connection is encrypted. With VPN, encryption is iffy at best and may not be enabled by default depending on the client you use.
Just because RDP provides a GUI remote desktop and looks more exposed visually doesn't mean it technically is any less secure than other protocols used.
As I know, a BSOD is a kernel panic. The dump file creations and debug splash screen is the last thing it craps out before accepting any further input or output. While I don't know for a fact, but I think at BSOD status, the OS is frozen and halted from performing any additional processing. That means it cannot be rooted.
If what you say can happen, it would have to occur in a small window of time from the moment a malformed RDP packet triggers a fault to when the last line of execution that bring about a BSOD ends.
Throughout history, "peace" has been the exception rather then the rule. I really with that was the case. As a Christian, I hope and pray for peace for every man, women, and child on Earth. But I also cannot afford to remain ignorant man's nature and our history too. It's depressing to think about and it eats away at my faith in mankind's future, but I'm honestly surprised we've lasted this long without a full blown WW3. I suppose the atom bomb changed all that, but there's always a breaking point. Always.
Well no shit! When nations sneak around covert programs that are by and large frowned upon by the international community, it only startles them to hasten the speed by which they develop them. Let me make it crystal clear. The "Axis of Evil" speech did *not* cause them to develop weapons. That's been going on longer than when Clinton was in office. No, it simply pointed out the level of BS going on by these two counties and others (NKorea and Iran). Publicly speaking out about it is equivalent to shining a spotlight on a thief at night. It causes them to either work faster or run away in fear.
GWB speech changed the dynamics. He thought maintaining the current status status quo was unacceptable. Their are arguments to be made that taking a divisive was either the right or wrong course of action.
TSA is a placeholder for people who can't get employed anyplace else. It's all a "make work" job creation racket funded by your tax dollars at work. The $100 fee is to ensure extra money goes into expanding the program even further.
As a conservative, GWB should have known this. Starve the beast, don't feed it! Then again, he was one of the biggest spenders in recent history. Only Obama beats him.
That's a pretty good rough breakdown. Makes me wonder if they'll start pulling a "BlockBuster" or some such. The real profit will be in late fees (no automated billing, just must renew manually each month online) and returned damage fees.
Deep packet inspection will throw off false-positives. Statistically, you can discard a few findings when logging traffic. But, if your aim is to block data based on a dictionary pattern (as my firewalls do), that causes all sorts of hell. Think VOIP, streaming video, or gaming traffic getting dropped because the ACK keeps transmitting the same "dirty" packet over and over hoping to get a response.
Personally, I've seen this happen with over the wire backups. Sometimes the MD5 or SH1 signature (if that's what they use, I don't know) will match but in fact have nothing to do with what's cataloged in the dictionary. When you call firewall vendors guilty of this false positive behavior, their official response is to add an IP source/destination exception or disable that particular false-positive signature.
Oh, and I haven't even touched on buffer hell either.
Not exactly the same, but I got burned by E-Bay-ing something with PayPal. I was selling a used NEC MobilePro which was basically the precursor to the netbook running WinCE. Not cheap. Anyways, the buyer returned it on the 29th day stating it wasn't what he thought it was and that the sell was based on false advertising. That was a lie! He never e-mailed me to complain or work the deal out. Instead, it came back pre-loaded with a bunch of project data indicating a deadline a week before shipping it back to me. That motherfucking cunt bitch ass whore rented it from me on MY DIME!!!
From then on, I never sold on E-Bay or used PayPal. The whole scam is a racket for sellers.
I doubt there's much markup for retail stores selling iPads. Most likely stores will sell iPad units because of all the money they make on 3rd party accessories and other impulse purchases. However, Apple products to tend to retain one of the highest used resell value out there. So that at least might work in their favor to entice the whole try-before-you-buy thing.
Free nations are democratic. It's the people (civilians) whom elect their representatives whom in turn command the military. As a serviceman, your protecting your nation and its interests via the will of the people.
Non-free nations are governed by a ruling body or person. However the structure may be, they don't reflect the will of the population. That's an important key distinction. As such, being as serviceman means that you're duty is to protect the regime first and foremost, not the people of the county however you would like to think otherwise. There's no honor in serving a nation that doesn't have an implicit or explicit approval of the people by and large.
The point of an army is to kill or intimidate foreigners and to project national power
No. The point on the army is to follow orders of the executive branch. Men/women in uniform follow orders from the top on down. As a unit, they just don't decide to go on a conquest like a bunch of pirates. Those that run off to go on a shooting rampage are often dealt with to the fullest extent of the law.
Silly me. And here I thought D3 would be another mindless but extremely enjoyable click-through game. That's the whole point of the Diablo series. Why does everyone have to take a winning formula and fuck it all up with extra complexity?!
Stop and think about how our current Internet is cabled. Now, imagine an increase in competition in at the ISP level. Pairing agreements could be created by simply directing your networked neutrino transmitter to an agreed up location. As a consumer, you point your device to an ISP. This of course assuming such technology is cheap, portable, and fast. At the very least, possible at all.
Money/wealth is just a metric by which to measure the difference of importance of what a person can offer society. It's a number by which to assign social value. When you buy and sell, what you're really doing is agreeing upon "attention". Be this an actual product, service, or pure time. It's precisely this why the more social personalities tend to make more money. Be it in entertainment, sales, marketing, or finance. The reason for this goes back to the core element of human nature. In modern terms, we are attempting to quantify that and assign universal fluidity to it. By any other name it's called money.
If you managed to parse what I've just said, you can now understand why deflation is a good thing. It brings people closer to equal footing without huge gaps in wealth inequalities. Make everyone the same value however, and no much will get done in the way of productivity. There's a happy medium somewhere.
Guilty as charged. I admit, I've been known to check out the competition from other sites to ensure I'm not falling behind the curve. My guess is that they perform a reverse DNS lookup of their IP logs and determine that the company's network I'm behind belongs in the same industry as theirs.
True. There is no right or wrong way in evolution. It simply is the successful result of change. But let's face it. Bringing the dead back to life isn't isn't something that's ever happened in nature before and then reintroducing back into the breeding population. This would be a first. I suppose the closest it gets are plant seeds in deep hibernation.
To go along with cloning and breeding into the population is truly walking into uncharted waters for humanity future. There are arguments to be made that we've already disregarded nature on multiple fronts. And actually, I'm sure we've done far more substantial stuff for our race as it is.
Cloning? To what end? Why did they die out in the first place? Ultimately, if they're genetically compatible do you really want to reintroduce their genetic lineage back into the modern human race? Relationships happen. That might be a step backwards for us even if the impact is negligible. Then you start talking about preemptive sterilization.
I can think of at least half dozen ethical issues so far. It's a can of worms I really don't think we should be opening. Just my 2 cents.
I've never seen an official best practice document that says not to make RDP open over a public IP. Where did this myth and misconception that RDP is inherently more insecure than any other protocol out there? Is it because now that you can visually see the Windows sign on screen via GUI that it's too close for comfort? In other words, is it just psychological? The way understand RDP, is that it's just another service that streams data back and forth between the server an client.
Just how did this FUD get started? What was the impetus to have the fear to begin with? I really want to know.
It is a hell of a drug. Extremely addicting to the point of toothless men sucking and swallowing for another hit. If you know what I mean. Dignity? WTF is that???
Slashdot Mirror
For clarification, I didn't mean VPN, I meant VNC.
Aside from this nasty RDP bug, how exactly is this "insanely stupid" any more so than leaving a web server connected to the Internet? I've seen plenty of web servers get rooted and turned into zombie spewing infected machines throwing spam and hosting fake AV advertisements.
For over ten years now, a major exploit of RDP is a first that I can recall. And BTW, the RDP connection is encrypted. With VPN, encryption is iffy at best and may not be enabled by default depending on the client you use.
Just because RDP provides a GUI remote desktop and looks more exposed visually doesn't mean it technically is any less secure than other protocols used.
As I know, a BSOD is a kernel panic. The dump file creations and debug splash screen is the last thing it craps out before accepting any further input or output. While I don't know for a fact, but I think at BSOD status, the OS is frozen and halted from performing any additional processing. That means it cannot be rooted.
If what you say can happen, it would have to occur in a small window of time from the moment a malformed RDP packet triggers a fault to when the last line of execution that bring about a BSOD ends.
Throughout history, "peace" has been the exception rather then the rule. I really with that was the case. As a Christian, I hope and pray for peace for every man, women, and child on Earth. But I also cannot afford to remain ignorant man's nature and our history too. It's depressing to think about and it eats away at my faith in mankind's future, but I'm honestly surprised we've lasted this long without a full blown WW3. I suppose the atom bomb changed all that, but there's always a breaking point. Always.
The last 100 years in 10 minutes
Well no shit! When nations sneak around covert programs that are by and large frowned upon by the international community, it only startles them to hasten the speed by which they develop them. Let me make it crystal clear. The "Axis of Evil" speech did *not* cause them to develop weapons. That's been going on longer than when Clinton was in office. No, it simply pointed out the level of BS going on by these two counties and others (NKorea and Iran). Publicly speaking out about it is equivalent to shining a spotlight on a thief at night. It causes them to either work faster or run away in fear.
GWB speech changed the dynamics. He thought maintaining the current status status quo was unacceptable. Their are arguments to be made that taking a divisive was either the right or wrong course of action.
TSA is a placeholder for people who can't get employed anyplace else. It's all a "make work" job creation racket funded by your tax dollars at work. The $100 fee is to ensure extra money goes into expanding the program even further.
As a conservative, GWB should have known this. Starve the beast, don't feed it! Then again, he was one of the biggest spenders in recent history. Only Obama beats him.
That's a pretty good rough breakdown. Makes me wonder if they'll start pulling a "BlockBuster" or some such. The real profit will be in late fees (no automated billing, just must renew manually each month online) and returned damage fees.
Deep packet inspection will throw off false-positives. Statistically, you can discard a few findings when logging traffic. But, if your aim is to block data based on a dictionary pattern (as my firewalls do), that causes all sorts of hell. Think VOIP, streaming video, or gaming traffic getting dropped because the ACK keeps transmitting the same "dirty" packet over and over hoping to get a response.
Personally, I've seen this happen with over the wire backups. Sometimes the MD5 or SH1 signature (if that's what they use, I don't know) will match but in fact have nothing to do with what's cataloged in the dictionary. When you call firewall vendors guilty of this false positive behavior, their official response is to add an IP source/destination exception or disable that particular false-positive signature.
Oh, and I haven't even touched on buffer hell either.
A result of stagflation I presume?
Not exactly the same, but I got burned by E-Bay-ing something with PayPal. I was selling a used NEC MobilePro which was basically the precursor to the netbook running WinCE. Not cheap. Anyways, the buyer returned it on the 29th day stating it wasn't what he thought it was and that the sell was based on false advertising. That was a lie! He never e-mailed me to complain or work the deal out. Instead, it came back pre-loaded with a bunch of project data indicating a deadline a week before shipping it back to me. That motherfucking cunt bitch ass whore rented it from me on MY DIME!!!
From then on, I never sold on E-Bay or used PayPal. The whole scam is a racket for sellers.
I doubt there's much markup for retail stores selling iPads. Most likely stores will sell iPad units because of all the money they make on 3rd party accessories and other impulse purchases. However, Apple products to tend to retain one of the highest used resell value out there. So that at least might work in their favor to entice the whole try-before-you-buy thing.
Inflation is a bitch, ain't it? Tracking wages is like rubbing salt into an open wound.
Free nations are democratic. It's the people (civilians) whom elect their representatives whom in turn command the military. As a serviceman, your protecting your nation and its interests via the will of the people.
Non-free nations are governed by a ruling body or person. However the structure may be, they don't reflect the will of the population. That's an important key distinction. As such, being as serviceman means that you're duty is to protect the regime first and foremost, not the people of the county however you would like to think otherwise. There's no honor in serving a nation that doesn't have an implicit or explicit approval of the people by and large.
The point of an army is to kill or intimidate foreigners and to project national power
No. The point on the army is to follow orders of the executive branch. Men/women in uniform follow orders from the top on down. As a unit, they just don't decide to go on a conquest like a bunch of pirates. Those that run off to go on a shooting rampage are often dealt with to the fullest extent of the law.
Silly me. And here I thought D3 would be another mindless but extremely enjoyable click-through game. That's the whole point of the Diablo series. Why does everyone have to take a winning formula and fuck it all up with extra complexity?!
“There are old pilots and there are bold pilots; but there are no old bold pilots.”
Pretty much applies to everything in life. No?
Heroes are "disposable". Serving the military of a free nation is as much of an honor as it is a sacrifice. Equally so.
Stop and think about how our current Internet is cabled. Now, imagine an increase in competition in at the ISP level. Pairing agreements could be created by simply directing your networked neutrino transmitter to an agreed up location. As a consumer, you point your device to an ISP. This of course assuming such technology is cheap, portable, and fast. At the very least, possible at all.
Being last in a race is often better than not finishing at all. Someone's going to be in fourth, might as well make it to the list at least.
Money/wealth is just a metric by which to measure the difference of importance of what a person can offer society. It's a number by which to assign social value. When you buy and sell, what you're really doing is agreeing upon "attention". Be this an actual product, service, or pure time. It's precisely this why the more social personalities tend to make more money. Be it in entertainment, sales, marketing, or finance. The reason for this goes back to the core element of human nature. In modern terms, we are attempting to quantify that and assign universal fluidity to it. By any other name it's called money.
If you managed to parse what I've just said, you can now understand why deflation is a good thing. It brings people closer to equal footing without huge gaps in wealth inequalities. Make everyone the same value however, and no much will get done in the way of productivity. There's a happy medium somewhere.
Guilty as charged. I admit, I've been known to check out the competition from other sites to ensure I'm not falling behind the curve. My guess is that they perform a reverse DNS lookup of their IP logs and determine that the company's network I'm behind belongs in the same industry as theirs.
True. There is no right or wrong way in evolution. It simply is the successful result of change. But let's face it. Bringing the dead back to life isn't isn't something that's ever happened in nature before and then reintroducing back into the breeding population. This would be a first. I suppose the closest it gets are plant seeds in deep hibernation.
To go along with cloning and breeding into the population is truly walking into uncharted waters for humanity future. There are arguments to be made that we've already disregarded nature on multiple fronts. And actually, I'm sure we've done far more substantial stuff for our race as it is.
Cloning? To what end? Why did they die out in the first place? Ultimately, if they're genetically compatible do you really want to reintroduce their genetic lineage back into the modern human race? Relationships happen. That might be a step backwards for us even if the impact is negligible. Then you start talking about preemptive sterilization.
I can think of at least half dozen ethical issues so far. It's a can of worms I really don't think we should be opening. Just my 2 cents.
I've never seen an official best practice document that says not to make RDP open over a public IP. Where did this myth and misconception that RDP is inherently more insecure than any other protocol out there? Is it because now that you can visually see the Windows sign on screen via GUI that it's too close for comfort? In other words, is it just psychological? The way understand RDP, is that it's just another service that streams data back and forth between the server an client.
Just how did this FUD get started? What was the impetus to have the fear to begin with? I really want to know.
It is a hell of a drug. Extremely addicting to the point of toothless men sucking and swallowing for another hit. If you know what I mean. Dignity? WTF is that???
In all seriousness watch this. http://www.pbs.org/wgbh/pages/frontline/meth/