IT's the IMSI or IMEI that's likely to be tracked. And since it's possible to track it's also possible to match to a person if that person either has a subscription by a phone company (if the phone company serves the shop with a mapping from IMSI to person data) or by matching the phone data to a certain credit card at the cash register.
And also watch out for those store-discount cards. They are tracking you too, and are even easier for the shop to track you with.
So paying in cash in a store will decrease the privacy invasion.
No they can't tie your cell phone ID to your personal ID. All they have is an anonymous dot on a map, which incidently, the resolution on the location of said dot is barely accurate to 10 feet. Not entirely true. It's possible (but not always practical) to have a close-range reader at the register that matches your phone with the credit card you have.
Just consider that this is a possible privacy violation.
What can be worse is if the cash register matches your phone with your purchase and re-uses that next time you approaches the shop which can make them to play an ad on a screen "Special Offer to Mr. Jones; 10-pack of Strawberry taste condoms" when you approach that store with a wife/girlfriend allergic to latex.
What you can do is to create a replicated database where they can execute their queries and do their mistakes. So if they bring down that secondary server it won't affect the production system.
To be able to decrypt a message it is usually necessary to know the context to where it belongs. Without context it's hard.
And is it really a message, it can be other things too:
A data sampling done by hand with two samplings, the first has three alternatives the second has two. The code in the middle is just thrown in for good measure by a joker.
It's someone's way to compose music. The first part is for a simple instrument with three tones, the last part is another instrument with two alternatives (bongo drums?). The middle part is just markers used to remind the performers about what to sing.
That is assuming that the search/seizure takes place on US ground. It may be a technicality, but many rules and regulations can fall on technicalities.
And another technicality is that if you aren't an US citizen - does the constitution apply then?
"Land of free" - Well, where's that today? You will find out that the only land where you can be free is land where only the toughest can survive.
Just take a look at the arctic regions and the many deserts we have - the few people that live there are tough, and have a strong understanding of the environment they live in, while most of us here aren't fit enough to survive what they think is normal.
I just think that if/when a fatal pandemic strikes it's the people that lives in these conditions that are going to be the survivors.
It's actually because I need to load a device management driver that overrides the BIOS data for the hard disk, but it may actually be worth it for them to try to fiddle around at the MS-DOS prompt...
So the next step is for us running websites to provide a different set of pages for any "services" like Phorm so that they get completely confused. A large set of pages provided that only contains texts in latin about plants and animals.
OK, I'll probably get a lot of bird-seed commercials injected then but WTF...
Isn't the question more if the student is learning something or not? If a student is absent for most of the lessons and scores full at all tests - is there a problem?
Maybe it's better to set up a check that if a student fails three tests in a row and has been absent for most of the time that student isn't fit to be present anyway and can choice between go dumpster diving or attend and learn something.
But of course - it's sure a lot funnier to gang up listening to hip-hop (or whatever it's called today, sounds the same anyway) and smoke pot. But it's not productive. At most these deserves a DA.
Well - if you want the system to know about your new filesystem, e.g. "/db" and the database directory/files there so it can process them during a relabeling process you can't just change the security context of the files/directories. You will also edit the SELinux configuration files to tell that the files in that location shall be relabeled to the specific label you select whenever requested.
And to add to this - if you have a new filesystem, the root of that filesystem has to have an appropriate label too in order to allow the application to access the files.
So what in theory is a simple operation can easily get out of hand and overwhelm anyone with low patience.
Just an example - doesn't have to be a network resource - it can be file I/O, a socket, a shared memory or a device too. In those cases iptables isn't sufficient.
As for what I wrote - I wanted just the single application to be in learning mode, not the whole system. A slight difference that has an impact for developing larger system solutions.
The concept of SELinux is good, but it isn't very friendly for the system administrator and the developers.
A toolkit that allows for easy integration of new applications into SELinux and adaptations of already defined applikations would be useful. There are some around, but none are really good. The best would be if SELinux could allow for a "learning" mode for a single application in addition to the modes it has. Something like the Zonealarm firewall that is a bit noisy in the beginning, but as soon as it has learned what's permitted it goes silent. This will of course require a user-space application listening to the SELinux events. So a mode that allows SELinux to be permissive for a single application while strict for the rest of the system would be a nice thing.
One common problem that I have experienced is that databases like MySQL are defined in SELinux, but it's very common that the data storage is going to be relocated in a production environment. This is a cumbersome process that costs a lot of work and pain.
Another problem is the issue of semantics involved. It's not always clear and takes a lot of time to get familiar with.
And still - SELinux is a "static" security measure, which only controls the permitted access between application and resource. It doesn't consider any frequency or volume. For example - a mail program may do a limited number of connections to port 25 per second, which is a normal situation, but if a higher frequency occurs that means that there may be a problem that has to be checked. OK - It's not easy to be intelligent about things like this, but system behavior pattern is a critical point in security too.
So from a view of security SELinux is still only a step on the way, the threats of tomorrow has to be predicted and handled. This means that SELinux has to be a lot easier to work with for the average person to allow it to become a wide-spread security base.
I have a setup where I use a configuration of Sendmail as first line protection and I use several sources for spam filtering.
dnsbl/enhdnsbl is enabled for zen.spamhaus.org, bl.spamcop.net, combined.njabl.org, list.dsbl.org, dnsbl-1.uceprotect.net, dnsbl-2.uceprotect.net, dnsbl-3.uceprotect.net and sbl-xbl.spamhaus.org. With all these enabled there are very few spam messages falling through.
Adding to this I am using Mozilla Thunderbird which has a very good intelligent junk mail filter. The only disadvantage is that the junk mail filter has to learn what's junk or not.
The use of dnsbl/enhdnsbl also does bounce back to the sender with a reasonable message for the cases where a message is denied so the sender shall be informed about any messages that are denied. Of course - it isn't fool-proof, but it works for me.
Don't forget that the space shuttle design was partly decided on a military basis to be able to launch military equipment. If it was to be a person transportation shuttle it would have been a lot smaller.
At least it has been useful to launch a lot of various heavy items during it's time, among them the Hubble telescope. I don't know if there have been much military use in reality of that large cargo space, and I suppose that is has been a lot of waste since most military satellites has been a lot smaller and launched by Delta rockets and similar.
But a better design would have been a modular design where the person part of the shuttle could have been launched separately. And just add a cargo module on demand.
Silverlight is insignificant as a technology as long as it exists only for Windows, and even then it will be adopted by a very limited amount of web sites.
Most sites making commercials will probably stay with Flash and animated images as a backup unless Silverlight allows them to create yet more annoying CPU-demanding commercials.
Slashdot Mirror
And also watch out for those store-discount cards. They are tracking you too, and are even easier for the shop to track you with.
So paying in cash in a store will decrease the privacy invasion.
What can be worse is if the cash register matches your phone with your purchase and re-uses that next time you approaches the shop which can make them to play an ad on a screen "Special Offer to Mr. Jones; 10-pack of Strawberry taste condoms" when you approach that store with a wife/girlfriend allergic to latex.
What you can do is to create a replicated database where they can execute their queries and do their mistakes. So if they bring down that secondary server it won't affect the production system.
And is it really a message, it can be other things too:
I have a copy, I converted it to a PNG, and I also have the JPG if you really think it helps, but you will have to change the suffix yourself!
But why not build an image wall placing them side by side and play something using X-Windows.
Just install Linux with X11 on each and you have a multi-screen solution!
And another technicality is that if you aren't an US citizen - does the constitution apply then?
Just take a look at the arctic regions and the many deserts we have - the few people that live there are tough, and have a strong understanding of the environment they live in, while most of us here aren't fit enough to survive what they think is normal.
I just think that if/when a fatal pandemic strikes it's the people that lives in these conditions that are going to be the survivors.
They were probably trying to locate the $5 bill held in place with a paper clip in the passport and failed.
They have probably seen that before...
But I think that "1 minute to auto-destruct" can be a bit too bad.
It's actually because I need to load a device management driver that overrides the BIOS data for the hard disk, but it may actually be worth it for them to try to fiddle around at the MS-DOS prompt...
OK, I'll probably get a lot of bird-seed commercials injected then but WTF...
Or just change to only browse sites with HTTPS. If they manage to insert ads or other junk into HTTPS then it's time to close the web.
They are probably using Debian.
Maybe it's better to set up a check that if a student fails three tests in a row and has been absent for most of the time that student isn't fit to be present anyway and can choice between go dumpster diving or attend and learn something.
But of course - it's sure a lot funnier to gang up listening to hip-hop (or whatever it's called today, sounds the same anyway) and smoke pot. But it's not productive. At most these deserves a DA.
And to add to this - if you have a new filesystem, the root of that filesystem has to have an appropriate label too in order to allow the application to access the files.
So what in theory is a simple operation can easily get out of hand and overwhelm anyone with low patience.
As for what I wrote - I wanted just the single application to be in learning mode, not the whole system. A slight difference that has an impact for developing larger system solutions.
A toolkit that allows for easy integration of new applications into SELinux and adaptations of already defined applikations would be useful. There are some around, but none are really good. The best would be if SELinux could allow for a "learning" mode for a single application in addition to the modes it has. Something like the Zonealarm firewall that is a bit noisy in the beginning, but as soon as it has learned what's permitted it goes silent. This will of course require a user-space application listening to the SELinux events. So a mode that allows SELinux to be permissive for a single application while strict for the rest of the system would be a nice thing.
One common problem that I have experienced is that databases like MySQL are defined in SELinux, but it's very common that the data storage is going to be relocated in a production environment. This is a cumbersome process that costs a lot of work and pain.
Another problem is the issue of semantics involved. It's not always clear and takes a lot of time to get familiar with.
And still - SELinux is a "static" security measure, which only controls the permitted access between application and resource. It doesn't consider any frequency or volume. For example - a mail program may do a limited number of connections to port 25 per second, which is a normal situation, but if a higher frequency occurs that means that there may be a problem that has to be checked. OK - It's not easy to be intelligent about things like this, but system behavior pattern is a critical point in security too.
So from a view of security SELinux is still only a step on the way, the threats of tomorrow has to be predicted and handled. This means that SELinux has to be a lot easier to work with for the average person to allow it to become a wide-spread security base.
It is a reject that in turn generates a bounce in the sending mailer, but if it's a stupid spam mailer it doesn't bounce.
dnsbl/enhdnsbl is enabled for zen.spamhaus.org, bl.spamcop.net, combined.njabl.org, list.dsbl.org, dnsbl-1.uceprotect.net, dnsbl-2.uceprotect.net, dnsbl-3.uceprotect.net and sbl-xbl.spamhaus.org. With all these enabled there are very few spam messages falling through.
Adding to this I am using Mozilla Thunderbird which has a very good intelligent junk mail filter. The only disadvantage is that the junk mail filter has to learn what's junk or not.
The use of dnsbl/enhdnsbl also does bounce back to the sender with a reasonable message for the cases where a message is denied so the sender shall be informed about any messages that are denied. Of course - it isn't fool-proof, but it works for me.
At least it has been useful to launch a lot of various heavy items during it's time, among them the Hubble telescope. I don't know if there have been much military use in reality of that large cargo space, and I suppose that is has been a lot of waste since most military satellites has been a lot smaller and launched by Delta rockets and similar.
But a better design would have been a modular design where the person part of the shuttle could have been launched separately. And just add a cargo module on demand.
The solution is even simpler, it just adds a resistor in the circuit so that the current flowing through the detonators are below ignition current.
Most sites making commercials will probably stay with Flash and animated images as a backup unless Silverlight allows them to create yet more annoying CPU-demanding commercials.