Recently read through a penetration test we had done, and some of the things in there I didn't know... thankfully they couldn't get into our servers from the outside, but from inside the network wasn't too difficult from a system having some outdated software letting them in...
Anyway the whole deal about LANMan, kerberos and other things storing passwords in memory in a way that is very easy to decrypt was surprising... I also thought that if I told PCs to not store the LM password locally and don't use it, then it would be okay. Nope. have to do that AND have a 15 character or longer password. LM makes the hash of the password regardless of if it will ever use it, so the only defense is a password long enough to break it.
Kerberos... well there is no getting around that one. it's there and if they get admin access on the server they have the plaintext password of anyone logged in interactively. end of game.
Was surprising never being in part of a mitigation team for a test like that.
I also did tech support for Real Networks back in the day (dirty dirty company) and the way they ran cancellations wasn't much better. for every "Save" you got you earned an extra dollar. being in tech support we didn't fall into that pay scheme, but we felt it.
It went something like this, you go online to cancel the subscription you didn't know you agreed to, unless you said you have windows 95, it said you had to call in.
you call in and the person offers free tech support, a few months free etc... then eventually they get to well, how about i give you 3 months free and send you an email. if at any point you decide that you want to cancel, just reply to the email and we will cancel it, but i can only do that if you agree to the email. Thinking you are getting 3 months and canceling anyway, you agree, they get their dollar, you then have to watch for the email to cancel.
They do... With all the cable companies now you get the base rate, then you get promotions that expire... (i just went through this with Uverse)
so promos expire and you call in, the first person offers to take something like $30 off the bill a month for 6 months or a year. you say no and talk to retention, tell them you are looking at time warner, comcast or whoever because $200 a month is ridiculous for internet and cable, and then they knock $70-80 off with a year contract, and in a year you do it again. If you don't like to press the issue, work during the time that retention is open, or for whatever reason don't call, they bend you over every month.
The probe is intercepted by a giant spaceship heading for Earth. When the broadcast is shown, an alien face appears and identifies itself as being a Sycorax. The alien demands Earth's surrender and causes a third of the world's population to go into a hypnotic state. The Sycorax threaten to make these people commit suicide unless they are given half of the world's population as slaves. One of the scientists discovers that all of the hypnotised people share the same blood type (A-positive), the same as contained in a sample on Guinevere One.
Ender's Game using the ansible for instant communication across great distances (the idea that half of it is in one place, the other half somewhere else) and didn't they do that for very short distances already? like a few feet or so?
but also Dr Who comes to mind... depending on what we send out, can they control us with it?
sure it would... the salary of the people doing the work to move money around and account for it.
A few months ago I put a request into the company I work for asking for a $20 piece of software (against policy to buy it and install it myself, gotta go through the process...)
Looking at the process, it would have cost thousands in employee time to document, review and approve the purchase of the $20 piece of software at all the different levels of management involved in it. it's insanely wasteful.
numbers were way off.. but still 5 more cars per minute is impressive.
4 way stop average number of cars through in 15 minutes was 385. Roundabout average number of cars through in 15 minutes was 460. Improvement of about 20%.
If you don't care to watch the video they set up a 4 way stop course and then a roundabout course. They used a bunch of drivers and did two 15 minute tests of each course counting the number of cars that got through and averaged them. The roundabout was a 20 percent improvement over the 4 way stop. And even though they let the drivers practice a bit on the roundabout before the tests they were American drivers that for the most part don't have the day to day experience that European drivers do with roundabouts so I am thinking the efficiency of the roundabout is even greater.
Myth Busters took this on for a very congested test (also very controlled)
They got somewhere around 180 cars through a traditional 4 way stop, and over 300 through the same space as a roundabout. I was floored it was that great of a difference, they said because at any given time there were multiple cars in the roundabout doing their own thing. (may be off on the numbers, but the roundabout was unbelievably better in their test)
Granted the layout of the roundabout matters a TON, and most I have seen around here are cram a roundabout in a tiny space so you don't REALLY know if the car to your left is leaving the roundabout or continuing...
Healthcare IT is also rough, we have some government mandated things saying you MUST use IE8, others that the same people use are now saying you must have 9 or 10, and I think there is still a handful that need 7.
The only option for many of these people is either versions in Citrix (MS approved way) or ThinApp, which works great, but MS doesn't like it.
you may be surprised... I found FML reading Sammy the Seal to my kids.
Printed back in the 60s, the page is that Sammy wishes he could spell, and has the blocks XFML in front of him. I thought it was incredibly funny, but couldn't tell my girls why... (too young for that kinda stuff)
So out of curiosity... any idea on the speeds this gives? I make too much to qualify myself, but as a foster parent we regularly have kids in the house we take care of that would qualify... We take advantage of some things the WIC checks offer like discounted museum memberships, since the food checks don't even come close to covering what kids eat.
If it is a decent speed this would be interesting to me.
Collector cars aren't going to be going away, many people won't be able to afford these new fancy cars, many people will do what they can to break the auto part for whatever paranoid belief they feel like, or just the idea of not being in control.
What about the auto insurance industry? all those people will be hurting if there aren't as many accidents for people to carry insurance for.
The normal problem here comes as you take your car across borders, are you paying the per mile to your home state, the state you drove in or the state your vehicle is registered in? When I lived in Washington, my vehicle was still registered in Wisconsin the whole time till I moved back. Who would get those tax dollars? What about trips to Canada or Mexico? You are taxed on something that didn't happen in your country?
not like there is some sort of security force there that could... protect the integrity of the planes, the airfield and to make sure people shouldn't get where they shouldn't be...
Maybe they could come up with something... call them I don't know Transportation Security?
I prefer the Bob and Doug metric conversion. whatever it is, double it and add 32. so a metric 6 pack is actually 44 metric beers. Metric does have it's upsides!
We had one of those a number of years back... 10 years as a computer operator and MCSE.
For every 4 hours of work we could get out of him, it took someone 8 hours to write up what to do and how to do it. The guy struggled with cut and paste. He did braindumps and passed exams, then lost all information within a week.
(10 years as a computer operator, typing in information, never leaving the one program he was supposed to work in)
we get hammered on this... our cost is higher then the price medicare pays... and we are the biggest provider for medicare patients in the state, because we will not turn people away that are on medicare like many other systems in the area that just won't take the people because for instance, for a small practice , they can only see so many medicare people, or they can't cover their own costs.
The last few times I bought a new game it was one I wanted pre-release, so I went to Best Buy, traded in all the games I don't play anymore and put that to a pre-order, which gave additional credit for doing a tradein to put money down on a prerelease, so it made the new game practically free for me after giving up the old games. then each time I do this, the money I put up gets a bit more because now I trade in one game to get one game... I play the crap out of that game to get the cost per hour well below $1 an hour (really cheap entertainment) and move on. if you take the first month you have a game, and play it one hour a month every day, it comes down to $2 an hour quickly. A good game should be multiple months, so it gets cheap for the consumer that way.
I bought 2 xboxes (returned one that died) and only bought one 360. granted I waited until the launch problems went away, but it's been good to me. it just need to be given enough space to spread it's heat out.
We got our MS licensing costs cut quite a bit last go round...
Then we found out the dropped Software Assurance on the desktop, cut support hours, dropped a bunch of software SAs and a bunch of other moves that saved a ton of money, but made everything much harder and pushed off the Windows 7 migration...
I miss Jack in the Box... went there once in a while for lunch when I lived in the Seattle area... they don't come around Wisconsin at all since a lawsuit many years ago wiped them out of the area...
Slashdot Mirror
I use Dashlane https://www.dashlane.com/en/cs... (for 6 month free trial)
I have it on my computer at home, my phone and the website at work.
It's pass phrase encrypted so they claim they can't decrypt the passwords without your passphrase.
Really works well for me.
Recently read through a penetration test we had done, and some of the things in there I didn't know... thankfully they couldn't get into our servers from the outside, but from inside the network wasn't too difficult from a system having some outdated software letting them in...
Anyway the whole deal about LANMan, kerberos and other things storing passwords in memory in a way that is very easy to decrypt was surprising... I also thought that if I told PCs to not store the LM password locally and don't use it, then it would be okay. Nope. have to do that AND have a 15 character or longer password. LM makes the hash of the password regardless of if it will ever use it, so the only defense is a password long enough to break it.
Kerberos... well there is no getting around that one. it's there and if they get admin access on the server they have the plaintext password of anyone logged in interactively. end of game.
Was surprising never being in part of a mitigation team for a test like that.
I also did tech support for Real Networks back in the day (dirty dirty company) and the way they ran cancellations wasn't much better. for every "Save" you got you earned an extra dollar. being in tech support we didn't fall into that pay scheme, but we felt it.
It went something like this, you go online to cancel the subscription you didn't know you agreed to, unless you said you have windows 95, it said you had to call in.
you call in and the person offers free tech support, a few months free etc... then eventually they get to well, how about i give you 3 months free and send you an email. if at any point you decide that you want to cancel, just reply to the email and we will cancel it, but i can only do that if you agree to the email. Thinking you are getting 3 months and canceling anyway, you agree, they get their dollar, you then have to watch for the email to cancel.
it isn't easy...
They do... With all the cable companies now you get the base rate, then you get promotions that expire... (i just went through this with Uverse)
so promos expire and you call in, the first person offers to take something like $30 off the bill a month for 6 months or a year. you say no and talk to retention, tell them you are looking at time warner, comcast or whoever because $200 a month is ridiculous for internet and cable, and then they knock $70-80 off with a year contract, and in a year you do it again. If you don't like to press the issue, work during the time that retention is open, or for whatever reason don't call, they bend you over every month.
For the Dr Who it was this one http://en.wikipedia.org/wiki/T...
The probe is intercepted by a giant spaceship heading for Earth. When the broadcast is shown, an alien face appears and identifies itself as being a Sycorax. The alien demands Earth's surrender and causes a third of the world's population to go into a hypnotic state. The Sycorax threaten to make these people commit suicide unless they are given half of the world's population as slaves. One of the scientists discovers that all of the hypnotised people share the same blood type (A-positive), the same as contained in a sample on Guinevere One.
They used blood control to control people.
On the Ansible you are probably right.
Idiocracy... it's not just a funny movie, it is the future.
Couple books/shows come to mind...
Ender's Game using the ansible for instant communication across great distances (the idea that half of it is in one place, the other half somewhere else) and didn't they do that for very short distances already? like a few feet or so?
but also Dr Who comes to mind... depending on what we send out, can they control us with it?
Could it be a very weak attack?
sure it would... the salary of the people doing the work to move money around and account for it.
A few months ago I put a request into the company I work for asking for a $20 piece of software (against policy to buy it and install it myself, gotta go through the process...)
Looking at the process, it would have cost thousands in employee time to document, review and approve the purchase of the $20 piece of software at all the different levels of management involved in it. it's insanely wasteful.
numbers were way off.. but still 5 more cars per minute is impressive.
4 way stop average number of cars through in 15 minutes was 385.
Roundabout average number of cars through in 15 minutes was 460.
Improvement of about 20%.
If you don't care to watch the video they set up a 4 way stop course and then a roundabout course. They used a bunch of drivers and did two 15 minute tests of each course counting the number of cars that got through and averaged them. The roundabout was a 20 percent improvement over the 4 way stop. And even though they let the drivers practice a bit on the roundabout before the tests they were American drivers that for the most part don't have the day to day experience that European drivers do with roundabouts so I am thinking the efficiency of the roundabout is even greater.
http://webcache.googleusercont...
Myth Busters took this on for a very congested test (also very controlled)
They got somewhere around 180 cars through a traditional 4 way stop, and over 300 through the same space as a roundabout. I was floored it was that great of a difference, they said because at any given time there were multiple cars in the roundabout doing their own thing. (may be off on the numbers, but the roundabout was unbelievably better in their test)
Granted the layout of the roundabout matters a TON, and most I have seen around here are cram a roundabout in a tiny space so you don't REALLY know if the car to your left is leaving the roundabout or continuing...
Healthcare IT is also rough, we have some government mandated things saying you MUST use IE8, others that the same people use are now saying you must have 9 or 10, and I think there is still a handful that need 7.
The only option for many of these people is either versions in Citrix (MS approved way) or ThinApp, which works great, but MS doesn't like it.
you may be surprised... I found FML reading Sammy the Seal to my kids.
Printed back in the 60s, the page is that Sammy wishes he could spell, and has the blocks XFML in front of him. I thought it was incredibly funny, but couldn't tell my girls why... (too young for that kinda stuff)
There's no logical explanation, so it MUST be aliens.
http://knowyourmeme.com/memes/...
Wisconsin and Illinois did this with state taxes...
Illinois was then voted worst place to live by it's residents (1 out of 4 said this)
http://www.gallup.com/poll/168...
Wisconsin ended middle of the pack I think around 40-50% saying it is the best place to live (may be off on the numbers)
Wisconsin saw job growth and lower taxes, Illinois saw jobs leave, higher taxes, pension scandals etc...
So out of curiosity... any idea on the speeds this gives? I make too much to qualify myself, but as a foster parent we regularly have kids in the house we take care of that would qualify... We take advantage of some things the WIC checks offer like discounted museum memberships, since the food checks don't even come close to covering what kids eat.
If it is a decent speed this would be interesting to me.
This also assumes all cars go automatic...
Collector cars aren't going to be going away, many people won't be able to afford these new fancy cars, many people will do what they can to break the auto part for whatever paranoid belief they feel like, or just the idea of not being in control.
What about the auto insurance industry? all those people will be hurting if there aren't as many accidents for people to carry insurance for.
The normal problem here comes as you take your car across borders, are you paying the per mile to your home state, the state you drove in or the state your vehicle is registered in? When I lived in Washington, my vehicle was still registered in Wisconsin the whole time till I moved back. Who would get those tax dollars? What about trips to Canada or Mexico? You are taxed on something that didn't happen in your country?
not like there is some sort of security force there that could... protect the integrity of the planes, the airfield and to make sure people shouldn't get where they shouldn't be...
Maybe they could come up with something... call them I don't know Transportation Security?
it's still strong...
I prefer the Bob and Doug metric conversion. whatever it is, double it and add 32. so a metric 6 pack is actually 44 metric beers. Metric does have it's upsides!
We had one of those a number of years back... 10 years as a computer operator and MCSE.
For every 4 hours of work we could get out of him, it took someone 8 hours to write up what to do and how to do it. The guy struggled with cut and paste. He did braindumps and passed exams, then lost all information within a week.
(10 years as a computer operator, typing in information, never leaving the one program he was supposed to work in)
we get hammered on this... our cost is higher then the price medicare pays... and we are the biggest provider for medicare patients in the state, because we will not turn people away that are on medicare like many other systems in the area that just won't take the people because for instance, for a small practice , they can only see so many medicare people, or they can't cover their own costs.
you pay more for them to stay afloat.
The last few times I bought a new game it was one I wanted pre-release, so I went to Best Buy, traded in all the games I don't play anymore and put that to a pre-order, which gave additional credit for doing a tradein to put money down on a prerelease, so it made the new game practically free for me after giving up the old games. then each time I do this, the money I put up gets a bit more because now I trade in one game to get one game... I play the crap out of that game to get the cost per hour well below $1 an hour (really cheap entertainment) and move on. if you take the first month you have a game, and play it one hour a month every day, it comes down to $2 an hour quickly. A good game should be multiple months, so it gets cheap for the consumer that way.
I bought 2 xboxes (returned one that died) and only bought one 360. granted I waited until the launch problems went away, but it's been good to me. it just need to be given enough space to spread it's heat out.
We got our MS licensing costs cut quite a bit last go round...
Then we found out the dropped Software Assurance on the desktop, cut support hours, dropped a bunch of software SAs and a bunch of other moves that saved a ton of money, but made everything much harder and pushed off the Windows 7 migration...
I miss Jack in the Box... went there once in a while for lunch when I lived in the Seattle area... they don't come around Wisconsin at all since a lawsuit many years ago wiped them out of the area...