And the current story proves that even that is pretty useless.
Yeah, it's useless. So you take steps to protect yourself. In many states (NYS included) you can freeze your credit files for free and require a password and/or pin number before someone can apply for credit in your name. In other states you can do it for a small (usually
Maybe I should start a business teaching people common sense like this. Or I could start another business charging them money for doing what they can do for free themselves. Maybe I'll get some crazy jackass willing to have his own SSN posted on billboards to sell it for me. Yeah, that could work..... ??? Profit!
Even worse, most of the country now uses PACER for electronic filing in Federal Courts. For $.08/page, anyone can access filings in a Federal case. This seems ripe for abuse.
Actually the majority of modern PACER filings redact the SSN. I looked up my bankruptcy case once upon a time and it was redacted in full on the various documents that were available. Some of the older filings leave them exposed though. Remember Mike Tyson? Looked up his Chapter 11 case awhile ago. His SSN is 089-56-9372. Thank you public record!
You can hardly call this protecting us from ourselves when everything from employment to apartment rental to cell phone plans to education require SSNs.
Actually you are welcome to refuse to give out your SSN for any of those purposes. Of course the person on the other end of the business arrangement is also welcome to refuse to do business with you.....
Yeah, cuz it's not like Galileo was purposefully designed to be easy to jam in the event of hostilities..... oh wait......:
The US did not want to lose the ability to themselves use accurate [Global navigation satellite system] while denying enemies the use of accurate GNSS. Some US officials became especially concerned when Chinese interest in Galileo was reported.
This is what led to some US officials to go as far as threatening to potentially shoot down Galileo satellites in the event of a conflict. The EU for a long time held the stance that Galileo was a neutral technology, available to all countries, with no military able to only deny their opponents the use of highly accurate GNSS. For a time, EU officials were considerably unsympathetic towards the US' desire to maintain their ability to use accurate GNSS for military purposes while denying non-US forces access to equally accurate GNSS. However, this EU-US standoff was eventually resolved by the EU agreeing to make Galileo use a different frequency, and the US would be able to locally interfere with/block the Galileo signals at the new frequency without interfering with their "military" GPS signals. In theory however, the "military" GPS signals could also be interfered with/blocked by a suitably equipped adversary, but interfering with either Galileo's signals at the new frequency or "military" GPS signals doesn't automatically block the other.
To be able to block, at the very least the packet header has to be examined. If remote attacker can generate packets faster than you can examine and drop them, you've just been DoS'ed.
You also have to look at the packet header in the course of regular routing decisions. Would it really take more CPU to look at the packet header and drop it into/dev/null than it does to look at the packet header and send it out a different network interface?
but in the case of children, individuals who engage in that need to be kept off the streets.
Who is a child though? Is a 15 year old a child? 16 year old? In a natural setting they would be sexually mature and breeding. Mind you, I don't think that's an excuse for taking advantage of children -- we are one of the few (the only?) species with higher reasoning and should be able to control our urges.
Lock 'em up and throw away the key I say. But at the same time we need to realize the contradictions in a society that allows it's children to dress and act as ours do and then punishes those who respond to such behavior when such a response is encouraged by millions of years of evolution.
As a civil libertarian, this sort of thing is something I very much object to, and think rapes the spirit AND LETTER of the Constitution.
I don't think the Constitution says that cops can't lie to catch criminals. If you want to complain about the Constitution being raped then you should direct your ire towards the fact that the Federal Government is in the business of regulating what substances you can put into your body. I've read the Constitution dozens of times and I have yet to find the language that suggests that the Feds have this power. Naturally nobody gives a shit about this though.
You, however, can be busted for lying to THEM, even if they do not identify themselves as a police officer, and you don't know that they are.
Do you have a citation for that? Every statute I've ever read only applies such punishments when you knew or had good reason to know that you were talking to a member of law enforcement. In any case, why would you lie to law enforcement in the first place? Tell them your name, ask for a lawyer and then SHUT THE FUCK UP. You have nothing to gain from lying to them and everything to lose from opening your mouth.
The OP did say "arrested" and not "convicted." I don't know about you, but my life would be hell on earth for those fifteen months.
Eh, you'd be amazed what you can learn to live with while going through something like that. Once upon a time I was charged with crimes (felonies) I didn't commit. It took eight months to clear my name. During that time frame life was surprisingly normal -- other than the occasional court appearance and the checks I was writing to my attorney. It really sucked knowing those charges were hanging over my head but you push it to the back of your mind and try to get on with life.
Mind you, I wasn't charged with something that comes with the scarlet letter, but my case did get a lot of publicity when I was arrested and none when I was cleared by the grand jury. That didn't seem really fair but I still live in the same area and have been able to get on with my life without being held back by what happened. None of this is to say that it doesn't suck of course -- but I can think of far worse things that could happen to you than being charged with a crime you didn't commit and eventually being cleared.
typical ipsec overhead on data packets is 52 bytes
Crap that adds at least 0.05 milliseconds to the time it takes to transmit a packet with my upload speed...... Who knew I was holding myself back that badly.
you've also added all the hops between your host and work, the hops inside your corp. network to the DNS server, then the hops back out to the net and all the way to the authoritative server, quite possibly doubling or worse the number of hops for any uncached query. its a crapshoot whether you've reduced or increased the hops for cached answers.
My goal wasn't to reduce the number of hops, it was to be a more polite user of the root nameservers and not to have to deal with Time Warner's NXDOMAIN hijacking.
Do you really have your work name servers resolving your porn URL hostnames?
I don't surf that much porn and even if I did, who cares? I'm the network administrator/bastard operator from hell. I'm not routing my traffic through work, just using the DNS server.
not everybody would want to take a simple udp packet and turn it into god knows how much traffic, adding a ridiculous amount of latency to something that depends on speed. luxury my ass.
Umm, IPSEC doesn't turn it into "god knows how much traffic" and your "ridiculous amount of latency" argument doesn't hold water. Given that the object is to avoid Time Warner's NXDOMAIN hi-jacking it would seem obvious that I can't use their nameservers. So I can either run my own nameserver that serves nobody but me and contacts the root servers for every single domain I visit or I can run it as a local cache using the work nameserver as a forwarder. The nameserver at work serves thousands of clients and has a much better cache to draw upon, hence less queries to the root servers and a faster response time.
It also seems more polite to do what I can to keep the load on the root servers as low as possible, though in the grand scheme of things it doesn't really make that much of a difference.
Comcast has to use more complicated methods to kill accounts (in some places, even send out a truck to put on a filter)
That's kind of silly, given that DOCSIS has provisions to remotely reboot and manage the modems. Time Warner can shut you off with a few keystrokes. Why wouldn't Comcast be able to do the same?
Also, I have road runner now and I don't have a static IP. I just have a dyndns.org hostname I use coupled with their IP update tool that keeps my IP updated. they have free accounts as long as they stay updated. ie. deleted after 30 days without an update but I get nice emails reminding me 5 days in advance. He might be doing the same?
Not if he's using his nameserver as an authoritative nameserver for one or more domains. You can't list those by hostnames, you have to list them by IP address. That said, I don't know how Comcast works but my Roadrunner IP hasn't changed in over a year. That's one of the nice things about them vs. Verizon DSL, where it seems to change on a almost daily basis.
Yes, because hijacking your DNS packets and injecting RST packets to interfere with bittorrent is comparable to putting millions of people in ovens and trying to conquer Eurasia.......
I'm a Comcast user, and I run a DNS server for a few private domains that only I use
Are you running that and hoping that your dynamic IP address doesn't change or do you have a business account with a fixed IP? If it's a business account than I would assume that they aren't redirecting those but could still be redirecting on consumer accounts.
I suppose users could tunnel DNS over some other port if they had to.
I route all of my DNS requests through a VPN to the DNS server at my office. Not everybody has this luxury though. I wonder if OpenDNS would be inclined to set up a VPN solution for people stuck with an ISP as arrogant as Comcast?
If there is another system that hasn't had to raise spending in 30 years, I'd like to see it.
I don't have a problem with spending going up. Obviously that's going to happen. Inflation if nothing else.
I have a problem when spending goes up by several times the inflation rate. NYS just passed a budget that increased spending four times over the inflation rate, using BHO's stimulus money. Before the stimulus money the state was flat broke and looking at cuts. Once they got it they decided to have a massive spending increase, thus kicking the eventual insolvency further down the road.
Slashdot Mirror
It's a felony to post something from the public record? Interesting. Could you provide the statute number and/or a link?
And the current story proves that even that is pretty useless.
Yeah, it's useless. So you take steps to protect yourself. In many states (NYS included) you can freeze your credit files for free and require a password and/or pin number before someone can apply for credit in your name. In other states you can do it for a small (usually
Maybe I should start a business teaching people common sense like this. Or I could start another business charging them money for doing what they can do for free themselves. Maybe I'll get some crazy jackass willing to have his own SSN posted on billboards to sell it for me. Yeah, that could work..... ??? Profit!
Even worse, most of the country now uses PACER for electronic filing in Federal Courts. For $.08/page, anyone can access filings in a Federal case. This seems ripe for abuse.
Actually the majority of modern PACER filings redact the SSN. I looked up my bankruptcy case once upon a time and it was redacted in full on the various documents that were available. Some of the older filings leave them exposed though. Remember Mike Tyson? Looked up his Chapter 11 case awhile ago. His SSN is 089-56-9372. Thank you public record!
You can hardly call this protecting us from ourselves when everything from employment to apartment rental to cell phone plans to education require SSNs.
Actually you are welcome to refuse to give out your SSN for any of those purposes. Of course the person on the other end of the business arrangement is also welcome to refuse to do business with you.....
Do they make enough painkillers to deal with the headaches this'll cause?
Maybe somebody told them that IPV6 makes it easier to inject fake RST packets into TCP connections ;)
Yeah, cuz it's not like Galileo was purposefully designed to be easy to jam in the event of hostilities..... oh wait......:
The US did not want to lose the ability to themselves use accurate [Global navigation satellite system] while denying enemies the use of accurate GNSS. Some US officials became especially concerned when Chinese interest in Galileo was reported.
This is what led to some US officials to go as far as threatening to potentially shoot down Galileo satellites in the event of a conflict. The EU for a long time held the stance that Galileo was a neutral technology, available to all countries, with no military able to only deny their opponents the use of highly accurate GNSS. For a time, EU officials were considerably unsympathetic towards the US' desire to maintain their ability to use accurate GNSS for military purposes while denying non-US forces access to equally accurate GNSS. However, this EU-US standoff was eventually resolved by the EU agreeing to make Galileo use a different frequency, and the US would be able to locally interfere with/block the Galileo signals at the new frequency without interfering with their "military" GPS signals. In theory however, the "military" GPS signals could also be interfered with/blocked by a suitably equipped adversary, but interfering with either Galileo's signals at the new frequency or "military" GPS signals doesn't automatically block the other.
trusting the government at their word is equally foolish
Fixed that for you, you had an extra word in there....
To be able to block, at the very least the packet header has to be examined. If remote attacker can generate packets faster than you can examine and drop them, you've just been DoS'ed.
You also have to look at the packet header in the course of regular routing decisions. Would it really take more CPU to look at the packet header and drop it into /dev/null than it does to look at the packet header and send it out a different network interface?
The question is which is worth more economically to the US, a connection to China which opens the Great Firewall of China to the world's press
Fixed that for you.
The same way you cure people who can't tell a joke from a serious suggestion?
but in the case of children, individuals who engage in that need to be kept off the streets.
Who is a child though? Is a 15 year old a child? 16 year old? In a natural setting they would be sexually mature and breeding. Mind you, I don't think that's an excuse for taking advantage of children -- we are one of the few (the only?) species with higher reasoning and should be able to control our urges.
Lock 'em up and throw away the key I say. But at the same time we need to realize the contradictions in a society that allows it's children to dress and act as ours do and then punishes those who respond to such behavior when such a response is encouraged by millions of years of evolution.
Pedophiles can't be cured of liking children any more than a heterosexual man can be cured of liking skinny 22 year olds with big tits.
They can be cured with a small piece of lead moving between 800-3000 feet per second and aimed at the correct location.....
As a civil libertarian, this sort of thing is something I very much object to, and think rapes the spirit AND LETTER of the Constitution.
I don't think the Constitution says that cops can't lie to catch criminals. If you want to complain about the Constitution being raped then you should direct your ire towards the fact that the Federal Government is in the business of regulating what substances you can put into your body. I've read the Constitution dozens of times and I have yet to find the language that suggests that the Feds have this power. Naturally nobody gives a shit about this though.
You, however, can be busted for lying to THEM, even if they do not identify themselves as a police officer, and you don't know that they are.
Do you have a citation for that? Every statute I've ever read only applies such punishments when you knew or had good reason to know that you were talking to a member of law enforcement. In any case, why would you lie to law enforcement in the first place? Tell them your name, ask for a lawyer and then SHUT THE FUCK UP. You have nothing to gain from lying to them and everything to lose from opening your mouth.
The OP did say "arrested" and not "convicted." I don't know about you, but my life would be hell on earth for those fifteen months.
Eh, you'd be amazed what you can learn to live with while going through something like that. Once upon a time I was charged with crimes (felonies) I didn't commit. It took eight months to clear my name. During that time frame life was surprisingly normal -- other than the occasional court appearance and the checks I was writing to my attorney. It really sucked knowing those charges were hanging over my head but you push it to the back of your mind and try to get on with life.
Mind you, I wasn't charged with something that comes with the scarlet letter, but my case did get a lot of publicity when I was arrested and none when I was cleared by the grand jury. That didn't seem really fair but I still live in the same area and have been able to get on with my life without being held back by what happened. None of this is to say that it doesn't suck of course -- but I can think of far worse things that could happen to you than being charged with a crime you didn't commit and eventually being cleared.
Where'd my wife and the extra seat from my car go?
(Yeah, bad taste.... I'm going directly to hell ;)
typical ipsec overhead on data packets is 52 bytes
Crap that adds at least 0.05 milliseconds to the time it takes to transmit a packet with my upload speed...... Who knew I was holding myself back that badly.
you've also added all the hops between your host and work, the hops inside your corp. network to the DNS server, then the hops back out to the net and all the way to the authoritative server, quite possibly doubling or worse the number of hops for any uncached query. its a crapshoot whether you've reduced or increased the hops for cached answers.
My goal wasn't to reduce the number of hops, it was to be a more polite user of the root nameservers and not to have to deal with Time Warner's NXDOMAIN hijacking.
not an efficient solution, to say the least.
Got a better suggestion, Mr. Nitpicker?
Do you really have your work name servers resolving your porn URL hostnames?
I don't surf that much porn and even if I did, who cares? I'm the network administrator/bastard operator from hell. I'm not routing my traffic through work, just using the DNS server.
not everybody would want to take a simple udp packet and turn it into god knows how much traffic, adding a ridiculous amount of latency to something that depends on speed. luxury my ass.
Umm, IPSEC doesn't turn it into "god knows how much traffic" and your "ridiculous amount of latency" argument doesn't hold water. Given that the object is to avoid Time Warner's NXDOMAIN hi-jacking it would seem obvious that I can't use their nameservers. So I can either run my own nameserver that serves nobody but me and contacts the root servers for every single domain I visit or I can run it as a local cache using the work nameserver as a forwarder. The nameserver at work serves thousands of clients and has a much better cache to draw upon, hence less queries to the root servers and a faster response time.
It also seems more polite to do what I can to keep the load on the root servers as low as possible, though in the grand scheme of things it doesn't really make that much of a difference.
Comcast has to use more complicated methods to kill accounts (in some places, even send out a truck to put on a filter)
That's kind of silly, given that DOCSIS has provisions to remotely reboot and manage the modems. Time Warner can shut you off with a few keystrokes. Why wouldn't Comcast be able to do the same?
Also, I have road runner now and I don't have a static IP. I just have a dyndns.org hostname I use coupled with their IP update tool that keeps my IP updated. they have free accounts as long as they stay updated. ie. deleted after 30 days without an update but I get nice emails reminding me 5 days in advance. He might be doing the same?
Not if he's using his nameserver as an authoritative nameserver for one or more domains. You can't list those by hostnames, you have to list them by IP address. That said, I don't know how Comcast works but my Roadrunner IP hasn't changed in over a year. That's one of the nice things about them vs. Verizon DSL, where it seems to change on a almost daily basis.
Scary fucking eeeeevil. Nazi evil.
Yes, because hijacking your DNS packets and injecting RST packets to interfere with bittorrent is comparable to putting millions of people in ovens and trying to conquer Eurasia.......
I'm a Comcast user, and I run a DNS server for a few private domains that only I use
Are you running that and hoping that your dynamic IP address doesn't change or do you have a business account with a fixed IP? If it's a business account than I would assume that they aren't redirecting those but could still be redirecting on consumer accounts.
I suppose users could tunnel DNS over some other port if they had to.
I route all of my DNS requests through a VPN to the DNS server at my office. Not everybody has this luxury though. I wonder if OpenDNS would be inclined to set up a VPN solution for people stuck with an ISP as arrogant as Comcast?
while only the crotchety remain.
It's not nice to talk about someone like that when I'm^Wthey are around ;)
If there is another system that hasn't had to raise spending in 30 years, I'd like to see it.
I don't have a problem with spending going up. Obviously that's going to happen. Inflation if nothing else.
I have a problem when spending goes up by several times the inflation rate. NYS just passed a budget that increased spending four times over the inflation rate, using BHO's stimulus money. Before the stimulus money the state was flat broke and looking at cuts. Once they got it they decided to have a massive spending increase, thus kicking the eventual insolvency further down the road.
California has been doing the same for years.