Keep in mind, this thing was smarter than most jeopardy contestants. I'd take Watson over Mahrahasanahman Nasahamenasesapeem, or "Steve" as he introduces himself.
The answer is you can't tell, and neither can the ISP.
You really don't know that yet. We very well could use deep packet inspection to identify the traffic to a very high degree of accuracy based on the traffic patterns.
Yeah we only do it in the office. It's probably slightly less secure, in theory, but what are the chances someone can break into that specific workstation (behind a firewall) and then still manage to steal one of our iPhones? It would be easier to just hit grab someone with an iPhone, tie them up, and hit them on the head with a wrench until they gave you their password (ala XKCD). Honestly, it would be a lot easier to drive truck through the building at 2am and run off with the e-mail server.
So wait you have to break into the computer that it was activated on? Because we enterprise activate all our devices (it's a command line switch when starting itunes, it's in the IOS Enterprise Deployment Guide).
You know, I thought the same thing, so we piloted a bunch of iPhones. I gave them to what I _thought_ were our more tech-savvy director and executive level folks and they all said the same thing. "It's awesome, the screen is great, web browsing is awesome - but I have to have a keyboard, I can't type on this." And that was after a month demo! I'm still kind of floored. If Apple made an iPhone slider, or maybe the new myTouch 4G could be an option - but they really don't want to give up their hard keyboard. And we dumped quiiiiite a few hours into getting the ActiveSync proxy setup. It would be a total waste if the IT staff wasn't using it at least.
Unfortunately I wouldn't be allowed to give you access to my network until you went through orientation either. Orientation includes agreeing to the "Acceptable Use Policy" and going through the HIPAA security training and we don't give out accounts until after you sign off on all that stuff.
Maybe this is obvious, but if I wanted to do mass scanning/hacking I would use a botnet of compromised machines outside of the US. Makes it much harder for US authorities to target and shut them down. So how do we know who the actual actor is here?
Except, how do you even know he used a password generator to begin with, let alone which one? You're also assuming he didn't modify the generated password at all. i think you're more likely to accidentally guess his password than pull off what you're describing.
"Skype does open a port on your machine, but I think in general don't you use a middle server that connects the two sides ( likely behind firewalls ) together?"
95% of Skype calls are peer-to-peer using STUN, a technique for allowing two nodes behind firewalls to connect directly to one another.
Just to play devil's advocate - you could say the same thing about the transport you buy. Your ISP guarantees you that they never view your confidential data, but can you be sure? You could encrypt it, but you could also encrypt data stored in "the cloud". Again, I'm not a "cloud person" just playing devil's advocate.
this is about support being in the mainline kernel. if you've ever used centos you'll remember having to install a kernel-xen kernel specifically built to support Xen.
By skip I assume you think the logical progression was 2.2->2.4->2.6->2.8->3.0 but in reality there could have been any number of kernels between 2.6 and 3.0. Assuming that you HAVE to go from 2.8 to 3.0 is not correct. You could easily go 2.8->2.10->2.12, etc. There's no guarantee that there would be justified reason to go from 2.8->3.0, it _could_ have been smaller changes than 2.4->2.6.
Originally, the definition required control by a single entity, typically an Internet service provider or a very large organization with independent connections to multiple networks, that adhere to a single and clearly defined routing policy, as originally defined in RFC 1771.[2] The newer definition in RFC 1930 came into use because multiple organizations can run BGP using private AS numbers to an ISP that connects all those organizations to the Internet. Even though there may be multiple Autonomous Systems supported by the ISP, the Internet only sees the routing policy of the ISP. That ISP must have an officially registered Autonomous System Number (ASN).
It's not for everyone. But for lots of people (web developers, game developers, people developing using emulators for other platforms, people who make extensive use of communication tools, etc) it can be very beneficial.
I use two 2407WFPs on an ergotron mount at home and it's perfect. I thought about two 30's but two 24s are absolutely perfect. I can even watch full 1080p on one while I use the other. I also use two desktops (i7 860 and an i7 875k) running fedora and win7 sharing the screen/keyboard using Synergy-Plus. I wouldn't mind upgrading to the new 2408WFP (IPS vs MVA) but other than that, I wouldn't change a thing!
Either way, they actually did studies on this (like TFA points out) and it's been proven to increase productivity by a very significant degree.
There are other metrics to consider as well, like how happy are your employees? A couple hundred bucks for a second monitor to keep employees happy, in a lot of cases, is a drop in the bucket.
Slashdot Mirror
Keep in mind, this thing was smarter than most jeopardy contestants. I'd take Watson over Mahrahasanahman Nasahamenasesapeem, or "Steve" as he introduces himself.
Oh, also honeypots. Intentionally infect a machine with the virus and watch the network traffic to see what it talks to and how often.
The answer is you can't tell, and neither can the ISP.
You really don't know that yet. We very well could use deep packet inspection to identify the traffic to a very high degree of accuracy based on the traffic patterns.
Yeah we only do it in the office. It's probably slightly less secure, in theory, but what are the chances someone can break into that specific workstation (behind a firewall) and then still manage to steal one of our iPhones? It would be easier to just hit grab someone with an iPhone, tie them up, and hit them on the head with a wrench until they gave you their password (ala XKCD). Honestly, it would be a lot easier to drive truck through the building at 2am and run off with the e-mail server.
So wait you have to break into the computer that it was activated on? Because we enterprise activate all our devices (it's a command line switch when starting itunes, it's in the IOS Enterprise Deployment Guide).
You know, I thought the same thing, so we piloted a bunch of iPhones. I gave them to what I _thought_ were our more tech-savvy director and executive level folks and they all said the same thing. "It's awesome, the screen is great, web browsing is awesome - but I have to have a keyboard, I can't type on this." And that was after a month demo! I'm still kind of floored. If Apple made an iPhone slider, or maybe the new myTouch 4G could be an option - but they really don't want to give up their hard keyboard. And we dumped quiiiiite a few hours into getting the ActiveSync proxy setup. It would be a total waste if the IT staff wasn't using it at least.
Let me guess, you've never developed software on any platform besides Windows.
What if android software is so much better than iOS/WP7/blackberryOS that a larger percentage of the failures are hardware related?
Unfortunately I wouldn't be allowed to give you access to my network until you went through orientation either. Orientation includes agreeing to the "Acceptable Use Policy" and going through the HIPAA security training and we don't give out accounts until after you sign off on all that stuff.
yes, 1.4m deny entries in a host file for the "added speed". makes perfect sense.
Maybe this is obvious, but if I wanted to do mass scanning/hacking I would use a botnet of compromised machines outside of the US. Makes it much harder for US authorities to target and shut them down. So how do we know who the actual actor is here?
No! The Chinese government is the good guys! With outstanding human rights records and basic freedoms!
Except, how do you even know he used a password generator to begin with, let alone which one? You're also assuming he didn't modify the generated password at all. i think you're more likely to accidentally guess his password than pull off what you're describing.
Setup an Asterisk server and using a soft phone (like installing Cisco IP Communicator in SIP mode, google for it).
"Skype does open a port on your machine, but I think in general don't you use a middle server that connects the two sides ( likely behind firewalls ) together?"
95% of Skype calls are peer-to-peer using STUN, a technique for allowing two nodes behind firewalls to connect directly to one another.
"NAT breaks the Internet"
Yet somehow about a billion people are using it right now. It's a messy hack but it doesn't "break the Internet".
Just to play devil's advocate - you could say the same thing about the transport you buy. Your ISP guarantees you that they never view your confidential data, but can you be sure? You could encrypt it, but you could also encrypt data stored in "the cloud". Again, I'm not a "cloud person" just playing devil's advocate.
I hear they make some mobile software too...
Different events entirely:
http://arstechnica.com/old/content/2008/02/insecure-routing-redirects-youtube-to-pakistan.ars
http://www.technewsworld.com/rsstory/71258.html
this is about support being in the mainline kernel. if you've ever used centos you'll remember having to install a kernel-xen kernel specifically built to support Xen.
and just fyi, the other guests are called "domU"
By skip I assume you think the logical progression was 2.2->2.4->2.6->2.8->3.0 but in reality there could have been any number of kernels between 2.6 and 3.0. Assuming that you HAVE to go from 2.8 to 3.0 is not correct. You could easily go 2.8->2.10->2.12, etc. There's no guarantee that there would be justified reason to go from 2.8->3.0, it _could_ have been smaller changes than 2.4->2.6.
http://en.wikipedia.org/wiki/Autonomous_system_(Internet)
Originally, the definition required control by a single entity, typically an Internet service provider or a very large organization with independent connections to multiple networks, that adhere to a single and clearly defined routing policy, as originally defined in RFC 1771.[2] The newer definition in RFC 1930 came into use because multiple organizations can run BGP using private AS numbers to an ISP that connects all those organizations to the Internet. Even though there may be multiple Autonomous Systems supported by the ISP, the Internet only sees the routing policy of the ISP. That ISP must have an officially registered Autonomous System Number (ASN).
It's not for everyone. But for lots of people (web developers, game developers, people developing using emulators for other platforms, people who make extensive use of communication tools, etc) it can be very beneficial.
I use two 2407WFPs on an ergotron mount at home and it's perfect. I thought about two 30's but two 24s are absolutely perfect. I can even watch full 1080p on one while I use the other. I also use two desktops (i7 860 and an i7 875k) running fedora and win7 sharing the screen/keyboard using Synergy-Plus. I wouldn't mind upgrading to the new 2408WFP (IPS vs MVA) but other than that, I wouldn't change a thing!
Either way, they actually did studies on this (like TFA points out) and it's been proven to increase productivity by a very significant degree.
There are other metrics to consider as well, like how happy are your employees? A couple hundred bucks for a second monitor to keep employees happy, in a lot of cases, is a drop in the bucket.