If you have a kickass appsec team you can put them on the job (few companies do these days). If not, hire out a contracting company like ioactive, leviathan, immunity, xforce, etc.
Pass them a list of software you want looked at, and they should be able to send it back to you with ratings on whatever scales interest you (long/short term threat to a corporate network, etc).
I'm not sure if one or any of the companies I mentioned offer services like that. They mostly do product security for the companies that release the software, but still my suggestion would be to write a proposal, pass it around, and see what comes up.
For those that haven't looked into it yet, the JNode project (jnode.org) is attempting something very similar. They use the same basic SIP model where everything runs in its own VM.
It's GPL and built on java instead of.NET
If you are into that sort of thing, I encourage you to go check it out.
My personal theory: xbox will keep microsoft on life support with it's content distribution system, and midori will bring it back as a superpower in the software world.
I happen to be into math, so I started (real) programming when the dinky scripts on my ti86 weren't running fast enough.
I also would chat online a lot, so I had fun writing IRC/AIM bots (most languages should have the appropriate bindings easy enough).
I then started writing some basic network toys (sniffers/scanners etc) because I was getting interested in networking protocols (I was taking a Cisco networking class at the time).
It all depends on what the kid is into. Also, programming bots for various online games is always a fun and practical way to start, and every kid loves web design.
Bullshit, a self signed cert contains almost *NO* protection at all compared to a pure plaintext session. If anything, firefox needs to be more paranoid about things like sending things like session cookies, and posts with password fields in clear text.
When a cert failure occurs, there needs to be more than just an "OK" button to click through.
If you want proof, just sit at an airport with cain open for an hour. I think someone like you would be shocked at how many VPN and email credentials for some major fortune 500 companies you can grab.
Depends on why you are voting. If you vote to make a difference, vote for the candidate most capable of changing the country for the better, if you vote to feel good about yourself, because you promised yourself that you would only vote for a perfect super-messiah, then vote for the candidate who's ideals are closest to your own.
It's been said a million times before, but Powell was not an intelligence officer. His job was to take the intelligence he was given, and hand it off to the UN. When he found out that the people who had given him the intelligence had lied to him, he quit.
Remember though that you need 40 senators to hold a filibuster, which they did not have.
I'm still not sure I understand the logic of voting for a bill you oppose. Everyone who was paying attention knew that he should vote no on this issue. He fought telecom immunity all the way to the end, and even if he voted no, it still would have passed.
I shudder to think, though, what would have happened if Democrats didn't get congress back in 2006. The current FISA isn't great, but we could have been stuck with a whole lot worse.
Still, he just lost a LOT of his strongest supporters, and I can only hope that he still has enough support to pull this off in November.
Anything that can be done with a couple button presses on a calculator isn't real math anyway. It's good to understand how division works, but when was the last time that you needed to solve a long division problem by hand? I remember spending months in 3rd grade doing the same damn math problems over and over again.
I had been using gentoo for about 4 years, and migrated over to ubuntu about a year ago. I miss a lot of things, but I never really noticed any changes in speed.
What I miss is USE flags. Things like "smartcard" and "cjk" etc, and especially all the use flags you can tweak in apache and php etc. They let you compile in experimental patches and extra features, while letting you cut out all the bulk you don't need.
The main reason I left was lack of signed packages, and complete lack of any automatic update system. In this day age, it is simply unacceptable to force users to update packages over clear text without any package authentication. They even built signed packages into portage back in 2004, but noone signs their packages, so you can't even enable the feature.
Realize that the frame of a smart car is built like an eggshell. One of the reasons I was looking at getting a smart car is how safe they look. I would bet that even in the worst tumbles (rollovers etc), you would be safer in a smart car than in any SUV.
Relax, he is doing everything he can. There are maybe one or two people in the senate that have been as loud as him about the immunity issue, and there is not much that can be done when those supporting immunity have a filibuster proof majority.
It is true that members of the senate are not flipping over cars and trying to burn the place down. That does not mean that they lack passion. Democracy is a slow process (by design), and say what you will, but I see the US moving towards more freedoms for the people.
What the hell are you talking about? Public financing means using taxpayer money to pay for his campaign. Since he has opted out, it means every dollar of his campaign finances is donated by private citizens. It does not somehow magically lift the 2300 dollar cap that a private citizen can donate.
Bullshit. I had the chance to talk with Barack at a recent fund raiser in Portland, and made sure to specifically bring up the issues of telecom immunity and network neutrality.
A MAJOR part of his plan to overhaul the way the government works relies on transparency via increased network infrastructure. If companies are allowed to get away with stuff like this, it greatly threatens that plan.
Look at how he has used the internet to promote his message, and tell me again that he will be too busy to keep it free.
I think that Barack, more than anyone else in the senate, has a vested interest in blocking telecom immunity. Unfortunately he is in the minority there, and I only hope the house is able to keep this bill down.
Slashdot Mirror
Still, Lindows got sued.
Sell out to intel? :-)
If you have a kickass appsec team you can put them on the job (few companies do these days). If not, hire out a contracting company like ioactive, leviathan, immunity, xforce, etc.
Pass them a list of software you want looked at, and they should be able to send it back to you with ratings on whatever scales interest you (long/short term threat to a corporate network, etc).
I'm not sure if one or any of the companies I mentioned offer services like that. They mostly do product security for the companies that release the software, but still my suggestion would be to write a proposal, pass it around, and see what comes up.
It's OUR network, primarily build with OUR tax dollars on the condition that they play nice.
For those that haven't looked into it yet, the JNode project (jnode.org) is attempting something very similar. They use the same basic SIP model where everything runs in its own VM.
It's GPL and built on java instead of .NET
If you are into that sort of thing, I encourage you to go check it out.
My personal theory: xbox will keep microsoft on life support with it's content distribution system, and midori will bring it back as a superpower in the software world.
Take a train.
I happen to be into math, so I started (real) programming when the dinky scripts on my ti86 weren't running fast enough.
I also would chat online a lot, so I had fun writing IRC/AIM bots (most languages should have the appropriate bindings easy enough).
I then started writing some basic network toys (sniffers/scanners etc) because I was getting interested in networking protocols (I was taking a Cisco networking class at the time).
It all depends on what the kid is into. Also, programming bots for various online games is always a fun and practical way to start, and every kid loves web design.
Bullshit, a self signed cert contains almost *NO* protection at all compared to a pure plaintext session. If anything, firefox needs to be more paranoid about things like sending things like session cookies, and posts with password fields in clear text.
When a cert failure occurs, there needs to be more than just an "OK" button to click through.
If you want proof, just sit at an airport with cain open for an hour. I think someone like you would be shocked at how many VPN and email credentials for some major fortune 500 companies you can grab.
Depends on why you are voting. If you vote to make a difference, vote for the candidate most capable of changing the country for the better, if you vote to feel good about yourself, because you promised yourself that you would only vote for a perfect super-messiah, then vote for the candidate who's ideals are closest to your own.
Everyone has their own strategy.
Remember, you aren't voting for "guy I want to have beer with". You are voting for a direction that you want the country to go.
Some of us believe that "complacence" is choosing not to vote while the country is getting raped.
It's been said a million times before, but Powell was not an intelligence officer. His job was to take the intelligence he was given, and hand it off to the UN. When he found out that the people who had given him the intelligence had lied to him, he quit.
Yes, shitty I agree.
Remember though that you need 40 senators to hold a filibuster, which they did not have.
I'm still not sure I understand the logic of voting for a bill you oppose. Everyone who was paying attention knew that he should vote no on this issue. He fought telecom immunity all the way to the end, and even if he voted no, it still would have passed.
I shudder to think, though, what would have happened if Democrats didn't get congress back in 2006. The current FISA isn't great, but we could have been stuck with a whole lot worse.
Still, he just lost a LOT of his strongest supporters, and I can only hope that he still has enough support to pull this off in November.
Anything that can be done with a couple button presses on a calculator isn't real math anyway. It's good to understand how division works, but when was the last time that you needed to solve a long division problem by hand? I remember spending months in 3rd grade doing the same damn math problems over and over again.
6 bits should be enough for anyone
Unlike ubuntu, you can actually keep using the system while it is installing packages :-)
The blocking in apt seems a bit excessive.
My cronjobs (in gentoo) used to run when I was sleeping, so it didn't matter much.
I had been using gentoo for about 4 years, and migrated over to ubuntu about a year ago. I miss a lot of things, but I never really noticed any changes in speed.
What I miss is USE flags. Things like "smartcard" and "cjk" etc, and especially all the use flags you can tweak in apache and php etc. They let you compile in experimental patches and extra features, while letting you cut out all the bulk you don't need.
The main reason I left was lack of signed packages, and complete lack of any automatic update system. In this day age, it is simply unacceptable to force users to update packages over clear text without any package authentication. They even built signed packages into portage back in 2004, but noone signs their packages, so you can't even enable the feature.
Realize that the frame of a smart car is built like an eggshell. One of the reasons I was looking at getting a smart car is how safe they look. I would bet that even in the worst tumbles (rollovers etc), you would be safer in a smart car than in any SUV.
http://www.youtube.com/watch?v=ju6t-yyoU8s
I completely agree. The best way to fix any system is to change it from the inside.
The logic applies to all things, the police force, NSA/CIA/FBI, microsoft, telecom companies, etc.
Relax, he is doing everything he can. There are maybe one or two people in the senate that have been as loud as him about the immunity issue, and there is not much that can be done when those supporting immunity have a filibuster proof majority.
It is true that members of the senate are not flipping over cars and trying to burn the place down. That does not mean that they lack passion. Democracy is a slow process (by design), and say what you will, but I see the US moving towards more freedoms for the people.
What the hell are you talking about? Public financing means using taxpayer money to pay for his campaign. Since he has opted out, it means every dollar of his campaign finances is donated by private citizens. It does not somehow magically lift the 2300 dollar cap that a private citizen can donate.
https://donate.barackobama.com/page/contribute/independencefeature
Bullshit. I had the chance to talk with Barack at a recent fund raiser in Portland, and made sure to specifically bring up the issues of telecom immunity and network neutrality.
A MAJOR part of his plan to overhaul the way the government works relies on transparency via increased network infrastructure. If companies are allowed to get away with stuff like this, it greatly threatens that plan.
Look at how he has used the internet to promote his message, and tell me again that he will be too busy to keep it free.
I think that Barack, more than anyone else in the senate, has a vested interest in blocking telecom immunity. Unfortunately he is in the minority there, and I only hope the house is able to keep this bill down.
w00w00 amazon is the new digg :-)
If done properly, it seems like you would be able to arc the control circuitry without igniting the fuel line.
FYI, Obama's main "web 2.0 consultant" is Chris Hughes, one of Mark Zuckerberg's roommates.
http://en.wikipedia.org/wiki/Chris_Hughes_(Facebook)
http://youtube.com/watch?v=6XmOYliJpiM
http://www.linkedin.com/in/davidall