Ok, so that covers the case of "o, I forgot to charge". But what about the "really long road trip" case?
And a lot of places offer their power for free, as a loss leader.
Do you think they'll continue to do so, when everybody will have a car like this? After all, the power still costs money to the store, and with the amounts of energy we are talking here, it will add up. Stores may be ok to let you recharge your mobile, or use your electric shaver, but that's only neglible amounts. Cars will be an entirely different magnitude.
(And for the record, I didn't go into details where I had to recharge my mobile in such a fashion....)
recharge time at a commercial charger in about an hour!:-)
That's ok for your daily commute (just recharge in the evening when you get home...), but not for a long trip (who wants to interrupt his trip for one hour midway through, when he needs recharging) or for poor planners (o, shit, batteries are empty again, now I'll have to wait one hour before I can leave).
To really be viable, they need to make recharge time way quicker.
I don't want to get into a transatlantic pissing match over this.
Why does it scare you more because it's transatlantic. It should scare you less. Indeed, for the company suing you, it becomes much more complicated, as they will have to retain a lawyer in your juridiction, and there is a high probability that they'll back down if you just ignore their mails. Especially if it's only e-mail.
Re:Geek funeral?
on
A Geek Funeral
·
· Score: 0, Offtopic
I could be wrong, but it seems obvious that he meant George "monkey boy" Bush, not Obama, and was referencing stupidity with the "lower primate" comment, not race.
Would be fitting, but unfortunately the math doesn't add up: 1968 + 40 = 2008, not 2000...:-(
The point is, the pirate party got more votes than the Green party back then, despite lack of media attention. How much traction do you think they'll get at the next election, when the media will have to talk about them?
Background note: In German federal elections, parties need to gain at least 5% of the votes (or gain at least three direct seats) in order to properly participate in parliament. Therefore some voters shy away from "wasting" their votes on small parties. It's kind of a chicken and egg dilemma - if a party doesn't already have many voters, your vote effectively doesn't count.
Same as in the US: In US presidential elections, candidates need to gain at least 50% of the votes, in order to properly gain the seat. Therefore some voters shy away from "wasting" their votes on third party candidates. It's kind of a chicken and egg dilemma - if a party isn't already among the top 2, your vote effectively doesn't count.
Indeed, it will educate people to surf with javascript turned off, and it will hopefully educate webmasters to stop programming their sites in a way that requires javascript even for basic functionality.
If the SMS message told you exactly what you were authorizing, it would go a long way towards defeating this kind of attack.
Exactly. And moreover, the attacker could always wait for you to submit a legitimate transaction, and submit his own (with different recipient, and different amount) instead. How would you spot that without the transaction details contained in the SMS?
This really looks as if it had been a "long forgotten" account, whose owner had probably been forgotten about it. Or maybe he was on travelling.
So most likely, the person knew something was up, and could have begun backing up their email messages/contacts.
Including the bank's mail with the sensitive information. Which makes the whole action entirely pointless.
The thing which I don't understand is:
Why didn't google selectively destroy the mis-sent message, while leaving all the others alone
Why didn't google check their logs, and confirm to the bank that the message never had been read. Or that the user didn't even log in during the last 3 months or whatever.
Now we are in a situation where:
In the (probably) hypothesis where the account holder was honest, his account is gone without no fault of his own (except for only checking his google mail every 3 months...)
In the (improbable, but not impossible) hypothesis where the account holder was not honest, he would have "backed up" the infringing message along with all his other data, and nobody would be none the wiser
And even if it hadn't ended up in the spam folder, every "normal" user would have assumed the mails were some kind of Nigerian 419 scam, and deleted the emails right away. Especially the second one.
They had a control group who got a placebo instead of the real vaccine, and compared the infection rates of both. Both groups were drawn from the same demographics. So no need to interview partners, compensate for riskier behavior due to being "protected", etc.
So, assuming you're an IT pro, since LDAP servers and adding machines to a network is that sort of thing, would you care to elaborate on some of these "major changes between releases of Leopard" that are throwing you off?
Just a few:
Disappearance of finder icon
Renaming and then disappearance of Directory Utility
Addition of Search Policy which was not needed before
Introduction of mandatory certificate verification for ldaps
Renaming, then disappearance of Netinfo manager (needed for setting up NFS mounts)
Half-baked automounter, that doesn't actually work, but does still manage to get into the way of manually configured/home mounts
Well, none of them were really throwing me off (in the end, I managed to find my way, after all), but they were bigger changes than just different background colors for the icons.
And a lot of places offer their power for free, as a loss leader.
Do you think they'll continue to do so, when everybody will have a car like this? After all, the power still costs money to the store, and with the amounts of energy we are talking here, it will add up. Stores may be ok to let you recharge your mobile, or use your electric shaver, but that's only neglible amounts. Cars will be an entirely different magnitude.
(And for the record, I didn't go into details where I had to recharge my mobile in such a fashion....)
recharge time at a commercial charger in about an hour! :-)
That's ok for your daily commute (just recharge in the evening when you get home...), but not for a long trip (who wants to interrupt his trip for one hour midway through, when he needs recharging) or for poor planners (o, shit, batteries are empty again, now I'll have to wait one hour before I can leave).
To really be viable, they need to make recharge time way quicker.
It's called a window.
So windows are insecure.... what else is new?
spend my time naked while at home (and while posting to slashdot too).
or worse, while following links in Slashdot... But wouldn't that be as shocking even if you were fully dressed?
I don't want to get into a transatlantic pissing match over this.
Why does it scare you more because it's transatlantic. It should scare you less. Indeed, for the company suing you, it becomes much more complicated, as they will have to retain a lawyer in your juridiction, and there is a high probability that they'll back down if you just ignore their mails. Especially if it's only e-mail.
I could be wrong, but it seems obvious that he meant George "monkey boy" Bush, not Obama, and was referencing stupidity with the "lower primate" comment, not race.
Would be fitting, but unfortunately the math doesn't add up: 1968 + 40 = 2008, not 2000... :-(
Careful, there is patent on this...
or that we'd elect a lower primate for president,
Moderators, how exactly is racism Insightful?
The point is, the pirate party got more votes than the Green party back then, despite lack of media attention. How much traction do you think they'll get at the next election, when the media will have to talk about them?
Or pay with whatever you find in the strongbox of one of the ships foolish enough to sail Somali waters...
Background note: In German federal elections, parties need to gain at least 5% of the votes (or gain at least three direct seats) in order to properly participate in parliament. Therefore some voters shy away from "wasting" their votes on small parties. It's kind of a chicken and egg dilemma - if a party doesn't already have many voters, your vote effectively doesn't count.
Same as in the US: In US presidential elections, candidates need to gain at least 50% of the votes, in order to properly gain the seat. Therefore some voters shy away from "wasting" their votes on third party candidates. It's kind of a chicken and egg dilemma - if a party isn't already among the top 2, your vote effectively doesn't count.
When you show up with your dirty beard, ... Same with Zunes and squirting and all that.
As long as the "dirt" on your beard wasn't from last night's flirt squirting on it...
-One package of Windowsî 7 napkins
Small tissue squares... I wonder where else these might come in handy... You know, they don't have to be on a roll, they'll wipe just as well!
I fucked your dead great grandmother while taking a dump on a gameboy color.
This says way more about you than about a game boy colour!
Well, it does allow to infer that the Gameboy colour is now brown.
Oh, and btw, congrats for the fisht psot! :-)
Indeed, it will educate people to surf with javascript turned off, and it will hopefully educate webmasters to stop programming their sites in a way that requires javascript even for basic functionality.
And if is a bank's responsibility, are they going to go into my PC to fix it?
Here in Luxembourg, some banks actually force you to have an insecure PC. So yes, in that case they should take responsibility if it gets broken into.
If the SMS message told you exactly what you were authorizing, it would go a long way towards defeating this kind of attack.
Exactly. And moreover, the attacker could always wait for you to submit a legitimate transaction, and submit his own (with different recipient, and different amount) instead. How would you spot that without the transaction details contained in the SMS?
they would have to correctly guess your SiteKey image to attempt the attack
They won't have to guess. If they've placed a MITM or rooted your windows box, they can just ask the bank in your name to supply the correct image.
So most likely, the person knew something was up, and could have begun backing up their email messages/contacts.
Including the bank's mail with the sensitive information. Which makes the whole action entirely pointless.
The thing which I don't understand is:
Now we are in a situation where:
And even if it hadn't ended up in the spam folder, every "normal" user would have assumed the mails were some kind of Nigerian 419 scam, and deleted the emails right away. Especially the second one.
They had a control group who got a placebo instead of the real vaccine, and compared the infection rates of both. Both groups were drawn from the same demographics. So no need to interview partners, compensate for riskier behavior due to being "protected", etc.
Gemalto. OpenSC. "Where is the source of libgemsafe0?"
And this was on Mac OSX Server Edition?
??? Why should I need a Server Edition for a client? Or what are you getting at?
So, assuming you're an IT pro, since LDAP servers and adding machines to a network is that sort of thing, would you care to elaborate on some of these "major changes between releases of Leopard" that are throwing you off?
Just a few:
Well, none of them were really throwing me off (in the end, I managed to find my way, after all), but they were bigger changes than just different background colors for the icons.