People often comment that only a datacentre or intensive database operation needs this kind of speed, but virtualization another application where IOPS are important.
I recently put together a small ESXi server with a couple of Intel 750 Series PCIe SSD's for VM storage, rated at 460,000 random read, 290,000 random write (4k) IOPS. Even with multiple VM's running, the responsiveness is like nothing I've experienced before.
Assuming the motivation for an attack like this is to disrupt the victim's LAN, a more subtle approach would be more effective. If you simply burn out a switch or NIC, it can be easily diagnosed and replaced. Recall that network interface cards are essentially radio devices that operate over wires instead of over the air. They are as susceptible to interference as the radio in your car.
I once worked for a company where every device connected to their switch would intermittently be unable to communicate. I tracked the problem down to a desktop computer with a flaky NIC that would go nuts every other day and (presumably) broadcast a shitstorm of noise. With a managed switch, it's easy to identify which port the culprit is attached to, but with an unmanaged switch a thing like this could drive you nuts if it only happened intermittently and then stopped for a while.
So here's a possible approach, inspired by your ablation technique: Based on the x-ray images, determine the thickness of the outer steel layer. Using an angle grinder, cut a square precisely to that depth, just touching the rubber lining but not cutting through it. (I'm not saying this would be easy). Pop out the square, and then cut a smaller square out of the rubber and foil layers using a razor knife.
Not sure how far they would have got by drilling holes anyway, but perhaps a laser could have punched some holes without completing the sandwich circuit.
Something I always wonder when fraud occurs involving bank transfers - why can't the money be traced? The whole system works on computers, which are inherently good at keeping records. Even if multiple hops are involved, I see only one reason why law enforcement agencies should not be able to trace funds to their destination - the unwillingness of banks to cooperate.
There needs to be an international banking agreement that facilitates tracking. If some shady offshore bank refuses to sign on with the agreement, participating banks should refuse to transfer money to them.
The fact that such an agreement is not already in place points to the corruptness of our finanacial institutions. There is simply no motivation to impede movement of funds by criminals.
Driver updates offered via Windows Update are always listed as "optional". Even with automatic updates enabled they would have to be chosen manually before they would be installed. On top of that, it would be easy to uninstall such an update via "Progams and Features" in Control Panel, or to click on "Roll Back Driver" in Device Manager.
Disabling updates to prevent bad driver installations is both misguided and unnecessary.
If I was writing a script that depended on some service being started or some other condition before it could start, I would check for that condition within my script. I would not expect some external framework to figure out what my script requires and to coordinate its startup.
Risk management is not simply about the probability of an event occurring; it must also take into account how damaging the event would be. For example, events that are very likely to occur but have little consequences might be safely ignored. Events that are very unlikely to occur but have catastrophic consequences merit some effort to prevent.
I've built a fair number of hypervisors, both VMware and Hyper-V. The hardware required to run 16 VM's concurrently is quite substantial. Good luck running 16 instances of Windows XP on a laptop!
A few years ago I bought a top-of-the-line Japanese rice cooker. It cooks any type of rice flawlessly, and easily allows me to specify in advance what time I want the rice to be ready. Yes, it takes up counter space, but it's an investment I appreciate every time I use it.
When you bought your Samsung SSDs you should have known they only support Windows. All their shitty fucking awful firmware tools since the dawn of time have only run on Windows...
If you bothered to look at their download site, you'd see they support Mac in addition to Windows.
This has nothing to do with closed source vs. FOSS. The examples I was referring to are small, non-critical applications where nobody needs to get fired because a cert warning appeared in someone's browser.
I usually figure out that a cert has expired when something breaks. For example, I like to use free certs from StartSSL on Exchange Servers. When they expire, people get warnings when accessing OWA, or smartphones stop connecting.
If it happens to be on an SBS Server it can really be a pain, however, since it will stop working as a Terminal Services Gateway, making it difficult to log back on and replace the cert.
Wow. You sound inordinately passionate about April 1st. If such articles are so much to your liking, perhaps it's you who needs to go elsewhere. May I suggest America's Finest News Source?
As for this site, the motto used to be "stuff that matters". When April Fools articles become so numerous, it's no longer amusing. It's like the same joke being told over and over again. April Fools is not a "huge holiday". It's a day literally intended for fools, and only a fool finds the same joke funny time after time.
OK, this is clearly a bad thing, but I don't think it means that your private LAN is immediately accessible to people all over the world does it? Multiple routers using the same keys means you could be tricked into logging in to someone else's router without knowing, but that would still require some way of directing your traffic to the imposter's device to begin with, such as DNS hijacking.
Knowing someone's keys would also allow you to encrypt/decrypt traffic as that device, facilitating a man-in-the-middle attack, but still, you need a way to get in the middle between two devices. This is not something that's trivial to do from one arbitrary location to another.
I'm not suggesting this isn't a serious problem, but I don't think it's as bad as, say, remote administration being enabled with a known default password.
Slashdot Mirror
People often comment that only a datacentre or intensive database operation needs this kind of speed, but virtualization another application where IOPS are important.
I recently put together a small ESXi server with a couple of Intel 750 Series PCIe SSD's for VM storage, rated at 460,000 random read, 290,000 random write (4k) IOPS. Even with multiple VM's running, the responsiveness is like nothing I've experienced before.
Assuming the motivation for an attack like this is to disrupt the victim's LAN, a more subtle approach would be more effective. If you simply burn out a switch or NIC, it can be easily diagnosed and replaced. Recall that network interface cards are essentially radio devices that operate over wires instead of over the air. They are as susceptible to interference as the radio in your car.
I once worked for a company where every device connected to their switch would intermittently be unable to communicate. I tracked the problem down to a desktop computer with a flaky NIC that would go nuts every other day and (presumably) broadcast a shitstorm of noise. With a managed switch, it's easy to identify which port the culprit is attached to, but with an unmanaged switch a thing like this could drive you nuts if it only happened intermittently and then stopped for a while.
So here's a possible approach, inspired by your ablation technique: Based on the x-ray images, determine the thickness of the outer steel layer. Using an angle grinder, cut a square precisely to that depth, just touching the rubber lining but not cutting through it. (I'm not saying this would be easy). Pop out the square, and then cut a smaller square out of the rubber and foil layers using a razor knife.
Not sure how far they would have got by drilling holes anyway, but perhaps a laser could have punched some holes without completing the sandwich circuit.
The latest incident... precedes 11 previous ones... in the preceding twelve months.
You keep using that word. I do not think it means what you think it means.
How apropos that the Americans used plutonium to fly past Pluto!
Something I always wonder when fraud occurs involving bank transfers - why can't the money be traced? The whole system works on computers, which are inherently good at keeping records. Even if multiple hops are involved, I see only one reason why law enforcement agencies should not be able to trace funds to their destination - the unwillingness of banks to cooperate.
There needs to be an international banking agreement that facilitates tracking. If some shady offshore bank refuses to sign on with the agreement, participating banks should refuse to transfer money to them.
The fact that such an agreement is not already in place points to the corruptness of our finanacial institutions. There is simply no motivation to impede movement of funds by criminals.
Driver updates offered via Windows Update are always listed as "optional". Even with automatic updates enabled they would have to be chosen manually before they would be installed. On top of that, it would be easy to uninstall such an update via "Progams and Features" in Control Panel, or to click on "Roll Back Driver" in Device Manager.
Disabling updates to prevent bad driver installations is both misguided and unnecessary.
Exactly. SourceForge was once my go-to place for open source software. I won't use them again.
If I was writing a script that depended on some service being started or some other condition before it could start, I would check for that condition within my script. I would not expect some external framework to figure out what my script requires and to coordinate its startup.
Sites like AFF require payment. Unless you have a credit card setup under a fake identity, you're going to have to provide real data to use the site.
Risk management is not simply about the probability of an event occurring; it must also take into account how damaging the event would be. For example, events that are very likely to occur but have little consequences might be safely ignored. Events that are very unlikely to occur but have catastrophic consequences merit some effort to prevent.
I've built a fair number of hypervisors, both VMware and Hyper-V. The hardware required to run 16 VM's concurrently is quite substantial. Good luck running 16 instances of Windows XP on a laptop!
The question I was responding to was "does having a single- or limited-purpose device make really make sense?".
The answer too your question is no.
A few years ago I bought a top-of-the-line Japanese rice cooker. It cooks any type of rice flawlessly, and easily allows me to specify in advance what time I want the rice to be ready. Yes, it takes up counter space, but it's an investment I appreciate every time I use it.
Actually, it's an oligarchy.
When you bought your Samsung SSDs you should have known they only support Windows. All their shitty fucking awful firmware tools since the dawn of time have only run on Windows...
If you bothered to look at their download site, you'd see they support Mac in addition to Windows.
I wish I had mod points today, because you nailed this. Well said!
That's a pretty high horse you're on there.
This has nothing to do with closed source vs. FOSS. The examples I was referring to are small, non-critical applications where nobody needs to get fired because a cert warning appeared in someone's browser.
I usually figure out that a cert has expired when something breaks. For example, I like to use free certs from StartSSL on Exchange Servers. When they expire, people get warnings when accessing OWA, or smartphones stop connecting.
If it happens to be on an SBS Server it can really be a pain, however, since it will stop working as a Terminal Services Gateway, making it difficult to log back on and replace the cert.
Wow. You sound inordinately passionate about April 1st. If such articles are so much to your liking, perhaps it's you who needs to go elsewhere. May I suggest America's Finest News Source?
As for this site, the motto used to be "stuff that matters". When April Fools articles become so numerous, it's no longer amusing. It's like the same joke being told over and over again. April Fools is not a "huge holiday". It's a day literally intended for fools, and only a fool finds the same joke funny time after time.
This April Fools nonsense is tedious.
Your example misses the point:
Whatever is in general use in a language (not any use, but general use) is for that reason grammatically correct.
out to be enough for anybody.
OK, this is clearly a bad thing, but I don't think it means that your private LAN is immediately accessible to people all over the world does it? Multiple routers using the same keys means you could be tricked into logging in to someone else's router without knowing, but that would still require some way of directing your traffic to the imposter's device to begin with, such as DNS hijacking.
Knowing someone's keys would also allow you to encrypt/decrypt traffic as that device, facilitating a man-in-the-middle attack, but still, you need a way to get in the middle between two devices. This is not something that's trivial to do from one arbitrary location to another.
I'm not suggesting this isn't a serious problem, but I don't think it's as bad as, say, remote administration being enabled with a known default password.