Slashdot Mirror


User: bennini

bennini's activity in the archive.

Stories
0
Comments
82
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 82

  1. FTC wants answers from Facebook on Facebook Faces Class-Action Lawsuit Over Massive New Hack (theverge.com) · · Score: 1

    but doesnâ(TM)t give a shit about the Equifax leak which affected three times as many Americans and resulted in leaking even more sensitive information. What a joke. Nothing happened before..why should it this time?

  2. Re: Want loot boxes? Gotta be 18. on Legislators Take Aim At Star Wars Battlefront II, EA Over 'Gambling In Games' (polygon.com) · · Score: 1

    Don't get me wrong. I hate that video games are rated and effectively censored. But given that this ESRB shit isn't going away, I'm simply suggesting it be used for something good.

  3. Want loot boxes? Gotta be 18. on Legislators Take Aim At Star Wars Battlefront II, EA Over 'Gambling In Games' (polygon.com) · · Score: 1

    The best way to address this would be to get the ESRB involved and force any game that has micro transactions to be labeled A (adult) 18+ only. If game publishers are only allowed to sell games with micro transactions to adults, it will make them think twice before introducing these garbage financial schemes into games. It will probably also avoid situations like 8 year olds racking up $2000 bills on their micro-transaction riddled iPhone game.

  4. Re:Link to files and simple summary on NSA Worried About Implications of Leaked Toolkits (businessinsider.com) · · Score: 1

    And here's the original message provided by The Shadow Brokers
    The original URL hosting the file was taken down but it was mirrored here:
    Shadow Broker Message

    The text is below in case that mirror stops working too.

    From:
    bitmessage = BM-NBvAHfp5Y6wBykgbirVLndZtEFCYGht8
    i2p-bote = [removed to satisfy slashdot form validator]

    Equation Group Cyber Weapons Auction - Invitation

    !!! Attention government sponsors of cyber warfare and those who profit from it !!!!

    How much you pay for enemies cyber weapons? Not malware you find in networks. Both sides, RAT + LP, full state sponsor tool set? We find cyber weapons made by creators of stuxnet, duqu, flame. Kaspersky calls Equation Group. We follow Equation Group traffic. We find Equation Group source range. We hack Equation Group. We find many many Equation Group cyber weapons. You see pictures. We give you some Equation Group files free, you see. This is good proof no? You enjoy!!! You break many things. You find many intrusions. You write many words. But not all, we are auction the best files.

    Picture Urls
    - ------------
    http://imgur.com/a/sYpyn
    https://theshadowbrokers.tumbl...
    https://github.com/theshadowbr...


    File Urls
    - ----------
    magnet:?xt=urn:btih:40a5f1514514fb67943f137f7fde0a7b5e991f76&tr=http://diftracker.i2p/announce.php
    https://mega.nz/#!zEAU1AQL!oWJ...
    https://app.box.com/s/amgkpu1d...
    https://www.dropbox.com/s/g8kv...
    https://ln.sync.com/dl/5bd1916...
    https://yadi.sk/d/QY6smCgTtoNz...


    Free Files (Proof)
    - ------------------
    eqgrp-free-file.tar.xz.gpg
    sha256sum = [removed to satisfy slashdot form validator]
    gpg --decrypt --output eqgrp-free-file.tar.xz eqgrp-free-file.tar.xz.gpg
    Password = theequationgroup


    Auction Files
    - -------------
    eqgrp_auction_file.tar.xz.asc
    sha256sum = [removed to satisfy slashdot form validator]
    Password = ????

    Auction Instructions
    - --------------------
    We auction best files to highest bidder. Auction files better than stuxnet. Auction files better than free files we already give you. The party which sends most bitcoins to address: before bidding stops is winner, we tell how to decrypt. Very important!!! When you send bitcoin you add additional output to transaction. You add OP_Return output. In Op_Return output you put your (bidder) contact info. We suggest use bitmessage or I2P-bote email address. No other information will be disclosed by us publicly. Do not believe unsigned messages. We will contact winner with decryption instructions. Winner can do with files as they please, we not release files to public.

    FAQ
    - ---
    Q: Why I want auction files, why send bitcoin? A: If you like free files (proof), you send bitcoin. If you want know your networks hacked, you send bitcoin. If you want hack networks as like equation group, you send bitcoin. If you want reverse, write many words, make big name for self, get many customers, you send bitcoin. If want to know what we take, you send bitcoin.

    Q: What is in auction files? A: Is secret. Equation Group not know what lost. We want Equation Group to bid so we keep secret. You bid against Equation Group, win and find out or bid pump price up, piss them off, everyone wins.

    Q: What if bid and no win, get bitcoins back? A: Sorry lose bidding war lose bitcoin a

  5. Link to files and simple summary on NSA Worried About Implications of Leaked Toolkits (businessinsider.com) · · Score: 1

    The Shadow Brokers github repo was taken down but not before it was mirrored :)

    https://github.com/nneonneo/eqgrp-free-file

    Everything (that was made available in the sample tarball) is inside the Firewall folder.
    Most of the human readable stuff is in Firewall/OPS and Firewall/SCRIPTS.

    From the very little scanning I did, it seems most of the stuff is meant to attack Cisco PIX and Cisco ASA firewalls/routers.

    There are quite a few scripts for preparing/setting up an ops terminal from which an antagonist can launch attacks.

    One of the attack techniques involves instructing a pix/asa to fetch an implant over http (or ftp) from a web server running on an ops terminal.
    So some of scripts install an http server (apache or tiny httpd) on the ops terminal.
    The antagonist supplies the implant (the software bug) on the ops terminal.
    Then they use vulnerabilities in the pix to instruct it to fetch the implant, upgrade the target's OS or load a module into the running system and then that gives them full access.

    The binaries and implants are provided in the repo as well.

  6. Good for them on Stress Is Driving Developers From the Video Game Industry · · Score: 4, Insightful

    I am a software engineer and it's never made sense to me why people would be willing to put up with these types of conditions. Sure it's fun and way cooler that most other programming jobs but I wouldn't want to give up weekends and put up with asshole managers which inevitably make the job NOT fun.

    The employers like EA, Trion, and countless more are exploiting the people's willingness to get treated like slaves in exchange for working in the gaming industry. Engineers need to stop undermining each other by taking these shitty positions and it sounds like this might finally be starting to happen. And they shouldn't fear that the video game industry will go away because it won't. Execs will simply need to reset their profit expectations in light of paying the engineers more.

  7. Counter-threat on Top Five Theaters Won't Show "The Interview" Sony Cancels Release · · Score: 1

    By induction, we should be able to issue a counter-threat to all the movie theaters that do NOT show The Interview this holiday season.

  8. Will these guys get 41 months in jail too? on One In Six Amazon S3 Storage Buckets Are Ripe For Data-Plundering · · Score: 3, Insightful

    This sounds an awful lot like what Andrew Auernheimer did.

    If the justice department or any company affected by this wants to, they could claim Computer Fraud and Abuse.
    Yet somehow I doubt the "researches" will get any jail time.

  9. It blows my mind... on Video Game Industry Starting To Feel Heat On Gun Massacres · · Score: 5, Insightful

    It blows my mind that anyone (especially American lawmakers) would seriously consider banning video games before banning guns.

  10. apples and oranges on A Tale of Two Databases, Revisited: DynamoDB and MongoDB · · Score: 5, Interesting
    We are heavy users of MySQL (Percona) and MongoDB at my work. Recently I have been researching DynamoDB because of a specific use-case. A side project I run uses Google App Engine with Datastore (aka bigtable) for persistence.

    Comparing DynamoDB with MongoDB is like comparing apples and oranges. The only thing the two share in common really is the fact that neither supports SQL (and for that reason are called NoSQL databases). Their intended purpose is completely different which is why I found it strange that the author of the original Slashdot story would pit them against each other the way he did.

    If DynamoDB is to be compared against another datastore, the most similar alternative would probably be Google App Engine's Datastore/big table.

    Similarities between DynamoDB and GAE Datastore
    • both use "schema-less" table structures for storing items (i.e. two items in a single table can have different columns)
    • both support relatively simple primary keys (GAE only allows a single column PK, Dynamo allows a pseudo-two-column PK)
    • both encourage only efficient queries (GAE forces it, Dynamo allows full table scans but they are highly discouraged)
    • both support list properties (a column with multiple string values for example)
    • both are hosted "in the cloud" and scale horizontally almost infinitely
    • both are billed based on reads/writes + total stored data (Dynamo has an extra dimension to cost which is throughput)
    • both have very limited support for referential integrity between items (GAE supports "embedded" entities and recently added basic relationships but nothing like many to many)
    • GAE supports transactions across entities within the same group (i.e. on the same server) and recently added support for XA transactions (tx's across entities in different groups/on different servers). Dynamo does not have transactions but it supports some atomic operations on an individual item like compare and get.

    Differences between DynamoDB and GAE Datastore
    One major difference between GAE Datastore and DynamoDB is that GAE supports single and multi property indexes while Dynamo does not support indexes at all aside from a table's primary key. GAE datastore supports efficient queries that use the indexes (if you try to run a query that does not use an index it will fail) along with some basic predicates like equality, inequality, greater than and less than expressions, etc. In DynamoDB, if you want an index, you have to build it yourself in a supplementary table.

    GAE Datastore Self-Merge Joins
    GAE datastore also supports what they call "self-merge joins" which are super powerful. I don't know if any other schema-less datastore has this.

    DynamoDB Purpose
    The main reason one would use DynamoDB is when they need scalable throughput; in other words, when your needs for write and/or read speeds fluctuate drastically and when you know you will occasionally spike to extremely high throughput requirements. For times when you expect to have huge throughput for writing, you can pay to scale for that small period of time and then you can reduce your costs by throttling down to a more sane limit. You can run MapReduce jobs over DynamoDB tables using Amazon Elastic Map Reduce. And you can also copy a DynamoDB table into an Amazon Redshift "warehouse"; once the data is copied into Redshift you can run efficient SQL queries over it and Redshift can efficiently do that over petabytes worth of data.

    MongoDB
    MongoDB, on the other hand, is a "schema-less," document oriented database that is good for organizing clumps of information as a single "item" in the datastore. So for example, you can have a single book document which contains nested information about its authors, keywords, reader reviews, and statistics about word usage in the book....all in a single mondodb "record." This is essentially impossible in DynamoDB (unless you do what the previous article's author did by

  11. Re:Or the reverse on New York Pistol Permit Owner List Leaked · · Score: 1

    I agree that the TSA is worthless. And it was created by a Republican who supposedly believed in smaller government.
    But owning more guns isn't going to make the TSA going away.

    It sounds like you want to justify guns for fear of our government turning into North Korea.
    Sorry, but I think voting is a better deterrent for that than guns.
    Most other civilized countries in the world do not allow regular people to own guns and they are not turning into totalitarian regimes. It would never happen in America. If you think it can, you've watched too many movies. And even if it did, then pistols and rifles in the hands of a bunch of untrained gun fanatics aren't going to prevent it. Our freedom is not sustained by guns, it is sustained by other values.

    Video games and movies don't make people violent. Getting bullied at school, broken families, poverty, lack of family values, and mental disorders cause people to be violent.

    Your theory that people will kill even if they don't have "advanced weaponry" is pretty ridiculous.
    If you have an AR15 , and I have a knife, which of us has a higher chance of taking out 20 people in a movie theatre?

    Honestly, who cares if there are other ways to kill people. Sure I can drive over a person crossing the street. I can put poison in their food. I can strangle them from behind. The objective is to reduce deaths caused by bullets ripping through a person's flesh and bones. If you reduce the number of deaths by one by banning guns, then you have improved society.

  12. Re:Or the reverse on New York Pistol Permit Owner List Leaked · · Score: 1

    Your "solution" does nothing to prevent another newtown. A passive approach where you punish someone after breaking the law only makes sense for non violent crimes. Violence, and most especially gun violence, needs to be preempted and prevented.

    There are two ways of doing this.
    1. Identify people who are violent or potentially violent
    2. Reduce the chances that a violent person will successfully kill others if he/she fails to be identified by 1.

    Obviously 1 is much harder than 2. Getting rid of guns is the easiest solution to 2.

  13. Re:please think of the children on New York Pistol Permit Owner List Leaked · · Score: 1

    well if you are going to get technical about it.... the bullet ripping through the victims flesh, bone and organs followed by the ensuing loss of blood kills them.
    the idea that the assailant may simply try a different weapon if he doesn't have access to a gun doesn't really hold much water. a gun leaves a victim with essentially no possibility to resist death. if the attacker were using a hammer or knife or banana, the victim would have a much better chance of survival.
    in short, yes, guns kill people. the fact that you fail to accept this does not mean it's not true.

  14. Re:Gun control != taking guns away on 27 Reported Killed In Connecticut Elementary School Shooting · · Score: 1

    <quote>A toddler died because his mother was an idiot and let him stand on a ledge at a zoo. Where is your outrage over those deaths?</quote>
    Your arguments would make more sense if a parent's decision to lock their baby in the car resulted in the death of 27 people.

    <quote>Why don't we try to help the nutters before they kill our children?</quote>
    Because in practice it is is much harder to control a person's will, mental state and 20-year upbringing than it is to control the guns and ammunition that he has access to.

    <quote>Since alcohol doesn't benefit society, should we bring back prohibition for the safety of the children?</quote>
    No, a gun with a 9 bullet clip has the potential to cause much more damage than a drunk driver.

    If gun fanatics are so intent on having guns, then we should simply restrict ammunition sales and only permit gun clips that hold 1 bullet.

  15. My experience w/ Invision Power, Jive & vBulle on Ask Slashdot: What Is the Best Way To Add Forums To a Website? · · Score: 1

    I use Invision Power for my website: http://www.styleguise.net and it works very well. My website is comprised of two components: a marketplace that I wrote from scratch using GWT + App Engine and a forum component which use the commercial off the shelf Invision Power suite. I have single sign on between my two applications as well.

    IPBoard (the forum application from Invision power) is highly customizable. You can write a login module for it to integrate with any identity management system. It is written in PHP so you will need to develop your extensions in PHP also.
    They also offers a traditional content management system called IPContent. It works pretty well once you figure out how things are laid out. The index/splash page for my site is simply a page served by the IPContent component.

    I am a member on several forums that use vbulletin. One of them recently migrated to Huddler which I do not recommend at all. The other is still using a very old version of vbulletin. The their migrated to Invision Power. Invision Power seems to release more often and have better features than vbulletin.

    Another option to choose if you have more money to spend is Jive. My company uses it for our customer facing forum system and also internally for content management.

    If you have additional questions feel free to ask.

  16. Square peg....round hole on More Fuel For Facebook Censorship Advocates In India · · Score: 5, Insightful

    The article states that a young man posted a photo on Facebook which offended several people.
    Several of those offended people decided to protest peacefully in front of a police station demanding his arrest.
    Other people decided to protest violently by burning cars, smashing in window stores and just generally acting like idiots.
    Instituting a nationwide internet censorship policy won't address the problem: impulsive, destructive people whose first course of action is violence.

  17. what else do you expect..... on EasyDNS Falsely Accused of Unplugging WikiLeaks · · Score: 1

    when the government system that is in place to protect the people fails, the only recourse left is to revolt. this is simply a "digital revolt" which is different from what people are normally accustomed to. traditional "physical protest" (i.e. forming a chain of people in front of the entrance to a store, marching down a road etc) almost always disrupts standard business practices or day-to-day activities. It sounds like you expect a protest/revolt to not inconvenience anyone.

    additionally, the organizations that pulled support from wikileaks were the first to demonstrate lack of due process. they referenced SLA agreements about "wikileaks using their services for illegal activities" long before illegality had even been proven.

    regardless, the mob's activities pale in comparison to the civil liberties that are currently being trampled upon by the government. in that respect, they may be somewhat justifiable.

  18. People in the middle east already deal with this on A Nude Awakening — the TSA and Privacy · · Score: 2

    For countless years, people in Iraq, Afghanistan, Palestine, Lebanon, Pakistan, India, etc have been dealing with bomb, IED and explosive threats. Countless people have died at the hands of these terrorist attacks. The people in those countries make the choice every day to live their lives normally...in the face of not having any of the "security" mechanisms that we have. They have not chosen to trade human rights for "safety." In this sense, they are already free-er than us.

  19. I'm doing my part on Operation Payback Shuts Down IFPI Site · · Score: 1

    while( true ); do curl --connect-timeout 1 http://www.ifpi.org/ > /dev/null; done

  20. Re:Don't bash AT&T on Consumerist Says AT&T Site Won't Sell iPhone In NYC, Citing Network · · Score: 2, Insightful

    it's not any different than a restaurant declining to take a reservation because they're full. Respectable businesses do this all the time. It's perfectly reasonable.

    If AT&T is either unwilling or unable to provide network support to keep up with consumer demand for the iPhone, then their exclusivity deal should be nullified. I'm surprised the contract they signed with Apple does not include some provisions for dealing with this sort of situation.

    This is exactly why exclusivity deals are bad. People in NY are now stuck with either buying an iPhone and having shitty service or not buying an iPhone.

  21. hideously encumbered?? on YouTube, HTML5, and Comparing H.264 With Theora · · Score: 1
  22. Re:Anecdotal problem on Microsoft Update Quietly Installs Firefox Extension · · Score: 5, Insightful

    Firefox, on its own, should not be capable of locking up the entire machine.

    you must be new to Windows

  23. Ive studied abroad in two different countries on Study Abroad For Computer Science Majors? · · Score: 1

    one of which was University of Cape Town, South Africa. The courses were all in english and most of the professors were either south african or british. The quality of teaching was incredible compared to america. they teach you multiple skill sets (for example in my computer science courses i had to do several technical writing modules and the teacher really pushed students in the right direction when it came to avoiding redundant information, etc but he did it in a way that made the student feel very empowering. before going to SA i made sure the computer science courses would transfer back to my school in upstate ny (i did this by discussing with the actual professors who would have to sign off on it afterards). i highly recommend you do this before u go abroad.

    after undergrad i decided to to the university of stuttgart in germany to do a masters in information technology/embedded systems. the program involved 1.5 years of courses. a 3-6 month internship at a company of your choosing (i chose IBM in germany) and a 6 month thesis. the whole program was in english and was free (even post graduate is subsidized there). they recently increased "tuition" though so now its 500 euros per semester...still way cheaper than in america. the courses are completely different from here in that your grade is based on a your performance during a 1-2 hour exam at the end of the semester. there is never really any homework that is collected. germans are pretty strict about doing lots of practice/study of their own accord so their policy is that you are responsible for preparing/doing work...not the professors. i dont like it but the stuff they teach is very high quality and done in a proper way. you really learn how to be meticulous about decisions you make and to justify everything you do. they are just really technical in general (as can be seen in their cars and other products for example). as an added benefit i learned fluent german (which many of the other foreign students didn't bother to do).

    so all in all, i did 2 years at a community college in upstate ny, 2 years at suny albany. 0.5 years in south africa and then 2.5 years in germany. after all that i came back to america and got a job making 110k per year. i spent a lot of my freetime doing extra curricular computer-related activities though so i wouldnt attribute it entirely to "school-learned skills."

  24. liar liar, your pants...are on FIRE!! on Windows Mobile 7 Phone Release Delayed Again · · Score: 1

    Let's also not forget that for a significant number of business users, WM 6 is quite sufficient and still beats the iPhone, Android, and Blackberry hands-down in a corporate environment.

    roflnoob? u have to be joking..i have an HTC artemis (wm6 pro) and the only reason i havent dumped it for something else is because it comes with tom tom navigator and a built in gps which works amazing. everything else is pure crap. let me enumerate the ways:

    • i have to go to task manager to end processes (lest they just endless take up memory and never auto close)
    • the interface looks like crap
    • everything is inconsistent
    • setting up networking makes zero sense, its all designed around this concept of connecting to the "internet" or to "work"
    • there is a config screen for "wlan" and another for "wireless", then there is a "communication manager" (which lets me turn on wifi, the phone antannae, bluetooth...and vibrate, makes no sense).
    • from the "communication manager" i can get to the "wlan" config screen (where u can see signal strength and the network ur connected to) but not the "wireless screen" which is where you actually define access points.
    • windows media player is complete garbage
    • i cant read pdfs
    • internet explorer is total crap, it doesnt support javascript, flash or applets
    • some windows show a little square X in the top right corner to hide it (remember you cant really close an app without the task manager) while others have a circle that says OK instead of the X.
    • sometimes i have to reset the phone to make a phone call
    • i cant sync it with anything other than windows and in windows i need to install outlook (which doesnt come with windows) in order to backup contacts and calendar items....everything else doesnt need outlook, so thats inconsistent
    • if i want to use msn messenger i need to download ALL contacts on my hotmail account into the address book in my phone, i cant selectively choose anyone, and since hotmail likes to automatically create users in its address book for anyone i send/receive an email to/from, i have like 300 random contacts in hotmail that i have zero interest in having in my phone. so basically i cant even use msn messenger
    • windows live is a joke, it searches the windows msn live site and returns listing for sites internet explorer cant even view...not to mention that everything on msn live is just swamped with crap ads
    • it has windows update but not a single update has ever been made available
    • i could go on and on...

    id say the second best thing after tom tom is office mobile. these phones are only used by businesses that want to punish their employees. blackberries, nokias and the iphone are a million times more productive, responsive, elegant and understandable. the only reason these phones were remotely poplar in businesses is because MS forced it down their throats and at the time there was no competition. its a simple fact, windows mobile is complete and utter garbage. what was the difference between wm5 and wm6??? the skin and bug fixes! and this is what MS delivers with a major version number increment?!? up until now, the OS has not changed at all...all major version increments have simple bug fixes and updated skins. the fundamental problems are all still there. windows mobile 7 will be the same crap. mark my words

  25. Re:It shouldn't be... on Why Do We Have To Restart Routers? · · Score: 1
    mod parent up and mod grandparent way down.

    There's nothing about being "an embedded OS" that should make it any more or less stable.

    ??? are you joking? this statement couldn't be more wrong. this person has obviously no knowledge of embedded and/or real-time systems. the point of an embedded OS is to focus on core requirements and tasks. minimizing features in an OS (or any piece of software, really) almost always results in a more stable system.