In the case of the titan rain attacks, US investigator (Shawn Carpenter) broke into the machines that the attackers were bouncing off of, and the trail always stopped at a set of three routers in Guangdong. He set up camp there and watched.
"Carpenter had never seen hackers work so quickly, with such a sense of purpose. They would commandeer a hidden section of a hard drive, zip up as many files as possible and immediately transmit the data to way stations in South Korea, Hong Kong or Taiwan before sending them to mainland China. They always made a silent escape, wiping their electronic fingerprints clean and leaving behind an almost undetectable beacon allowing them to re-enter the machine at will. An entire attack took 10 to 30 minutes."
Rumor has it that the online Rosetta stone version is pretty good. http://www.rosettastone.com/personal/languages/chinese-mandarin/osub I will probably be signing up for that in the next couple weeks. It seems a lot more interactive, and I like the idea of paying for a service that can update as time changes rather than just pay for a single piece of software.
What I would really like to see is a list of good movies and tv shows in Mandarin. Pretty much every good Chinese movie I have ever seen has been in Cantonese, and I have never been able to watch a Mandarin tv show all the way through an episode.
Strange that intrading and electoral-vote.com are pretty similar (exactly the same electoral count), but CNN seems pretty far off. I think we in Oregon have the blue state thing pretty locked down, and CNN seems to have an awful lot of "toss up" states. Also it is predicting new mexico for McCain, which goes against polling data that I have seen.
You know, when that school gets taken over by Russian terrorists, those administrators are going to be very sorry that they deprived the students of the proper training material to take the school back.
Um, phishing and data mining are not just windows problems. Also this may shock and amaze you, but there are websites that will pop linux machines that go to them (all the information that an attacker needs to land on a specific target is in the user agent string).
Also, note that mcafee does more than host AV, and their researchers actually do care about more than just windows.
I don't know, I still think that Linux on the desktop will never happen. I tried to install slackware once, and it was really HARD. What kind of OS makes you go out and download drivers just to get your wireless card working?
Multitouch support is the first step towards finger tracking UIs http://youtube.com/watch?v=txtl51YDMYw This is something I would definitely like to see on my desktop.
On the other hand, you can take advantage of the military's lust for ultimate weaponry to create a world where energy is cheap and efficient.
Symbiosis. It is perfectly reasonable for two groups with different goals to help each other out, especially if it has the potential to benefit both groups.
A good business model is simple and robust enough that it's hard to screw up. If a company is brave enough to try a "free" business model, and it fails, it was probably explained to them in poor and simplistic terms.
Once you start tacking on conditionals and making the model more complex, it is no longer a good business model. Blaming companies that can't figure it out helps no one.
Just because you have an idea that works well in a theoretical context, and there have been a few success stories, does not mean that it's a good model.
Modafinil (provigil) is safer, more effective, and less addictive than caffeine.
Unfortunately, possession without a prescription can get you a year in jail. Strangly, it's chemical predecessor, Adrafinil is perfectly legal to buy over the counter (at about a tenth of the cost as well). It actually turns into modafinil in your stomach, but it takes longer to take effect, and the chemical byproducts cause stomach pains and liver problems.
By the way, I am not knocking on your idea:-) I think it's a great idea for protecting the site operators from legal issues, but it does not help much with the more sketchy tactics that the media companies are turning to.
The problem isn't *IAA putting up fake websites on freenet, the problem is *IAA creating thousands of fake users that can all vouch for each other, and claim all of the real media is fake.
Mediadefender has done this many times in the past (as proven by the email leak), and it is a common tactic that is most likely used by other companies in the business as well. This is a pervasive problem on even the most heavily moderated boards, and it is extremely difficult to deal with in an automated way.
Out of touch media distributors have nothing to offer the world. I use the most efficient media distribution model, and pay whatever they charge for it.
The only honest/reliable way to make money is to provide services. I pay money to theaters, I pay money for internet bandwidth. Hollywood can still make ends meet easily by charging for product placement (a service). Why should anyone get royalties for a service they provided years ago?
I think capitalism works much better when people are actually forced to contribute to society to succeed, and aren't just getting money because of a network of sketchy contracts and hundreds of years of lazy/greedy people manipulating our legal system for their own gain.
I think that the hardest part of adding search to any p2p system is that it is too easy for malicious users (*IAA thugs) to poison search results, and I don't see anything on their page that deals with that.
To design a reliable search system, you need to have a good rating system, and a solid trust model. At the same time, you need to avoid making the trust model so tight that new users cannot get any search results (freenet).
Also, I think it should be noted that a lot of bittorrent usage is moving towards the subscription model, so people should be able to search for channels as well, not just single files.
I am interested in seeing where this project leads, but I don't think people will be completely abandoning the well organized, well moderated torrent sites any time soon, but it will be nice to be able to search quickly for files without needing to open a browser.
So, you think EuSecWest should let Muniz present? If n3td3v is right (and ofcourse he is) this could destroy the internet (I heard he has already put in an application for MI5)
I am not a subscriber of lifelock, so I don't know for certain, but I don't think that people are paying for the credit alerts. The real service being provided is that they get to be the ones making all the phone calls getting the stuff taken care of after someone has stolen the identity.
Most people that I know that have gotten their identities stolen weren't complaining about the money loss, or the wrecked credit. They complain about the massive loss of time (months, and sometimes years) that it takes to get things back in order.
Um, the point of youtube is to allow everyone to be heard, and get their message across. The videos that Lieberman was referring to were politically charged videos about the conflict between Israel and Palestine.
If you want to see morbid violence, go to liveleak.com, if you want to see porn, goto youporn.com. Youtube does not allow either of those, but they are not hard to find on the internet.
I hadn't even noticed that Hamas had so many videos on youtube. Those interested should check out http://youtube.com/watch?v=U8Nj-QKQkCo and related videos.
Also an interesting movie I watched recently was "suicide killers". It contains many interviews with suicide bombers right before they kill themselves, and many interviews with failed suicide bombers in Israeli prisons.
Maybe I am just strange, but I find it absolutely fascinating how a group of people can have such a strong hatred of Israel. It's a really fucked up situation for both sides, but I think it is very important for both sides to be heard.
An important thing to remember is that these security based static analysis tools are tools designed to be used by security analysts. While it is good for developers to see the reports, and understand common security vulnerabilities, too often I see people hooking up static analysis to their code repository, and thinking that they have solved all future security problems.
Slashdot Mirror
It always seemed to me that focused microwave lasers would work very well for taking out large mechanical devices.
This is totally not my field though, and I assume that if it were feasible, it would already be in use. Is there something that I am missing?
In the case of the titan rain attacks, US investigator (Shawn Carpenter) broke into the machines that the attackers were bouncing off of, and the trail always stopped at a set of three routers in Guangdong. He set up camp there and watched.
"Carpenter had never seen hackers work so quickly, with such a sense of purpose. They would commandeer a hidden section of a hard drive, zip up as many files as possible and immediately transmit the data to way stations in South Korea, Hong Kong or Taiwan before sending them to mainland China. They always made a silent escape, wiping their electronic fingerprints clean and leaving behind an almost undetectable beacon allowing them to re-enter the machine at will. An entire attack took 10 to 30 minutes."
http://www.time.com/time/magazine/printout/0,8816,1098906,00.html
Rumor has it that the online Rosetta stone version is pretty good.
http://www.rosettastone.com/personal/languages/chinese-mandarin/osub
I will probably be signing up for that in the next couple weeks. It seems a lot more interactive, and I like the idea of paying for a service that can update as time changes rather than just pay for a single piece of software.
What I would really like to see is a list of good movies and tv shows in Mandarin. Pretty much every good Chinese movie I have ever seen has been in Cantonese, and I have never been able to watch a Mandarin tv show all the way through an episode.
Strange that intrading and electoral-vote.com are pretty similar (exactly the same electoral count), but CNN seems pretty far off. I think we in Oregon have the blue state thing pretty locked down, and CNN seems to have an awful lot of "toss up" states. Also it is predicting new mexico for McCain, which goes against polling data that I have seen.
Of course, but the point is that users that lost data can tuck their harddrives away someplace safe, and hopefully someday recover their data.
You know, when that school gets taken over by Russian terrorists, those administrators are going to be very sorry that they deprived the students of the proper training material to take the school back.
I once spent and hour or so working on a cube before I realized that one of the two color pieces had two colors from opposite sides of the cube :-(
It is pretty annoying when people do the sticker trick to only solve one side of a cube.
This is data ransom, not blackmail.
Um, phishing and data mining are not just windows problems. Also this may shock and amaze you, but there are websites that will pop linux machines that go to them (all the information that an attacker needs to land on a specific target is in the user agent string).
Also, note that mcafee does more than host AV, and their researchers actually do care about more than just windows.
I don't know, I still think that Linux on the desktop will never happen. I tried to install slackware once, and it was really HARD. What kind of OS makes you go out and download drivers just to get your wireless card working?
"This could mean the end of the banana daiquiri as we know it!"
Multitouch support is the first step towards finger tracking UIs
http://youtube.com/watch?v=txtl51YDMYw
This is something I would definitely like to see on my desktop.
On the other hand, you can take advantage of the military's lust for ultimate weaponry to create a world where energy is cheap and efficient.
Symbiosis. It is perfectly reasonable for two groups with different goals to help each other out, especially if it has the potential to benefit both groups.
A good business model is simple and robust enough that it's hard to screw up. If a company is brave enough to try a "free" business model, and it fails, it was probably explained to them in poor and simplistic terms.
Once you start tacking on conditionals and making the model more complex, it is no longer a good business model. Blaming companies that can't figure it out helps no one.
Just because you have an idea that works well in a theoretical context, and there have been a few success stories, does not mean that it's a good model.
Modafinil (provigil) is safer, more effective, and less addictive than caffeine.
Unfortunately, possession without a prescription can get you a year in jail. Strangly, it's chemical predecessor, Adrafinil is perfectly legal to buy over the counter (at about a tenth of the cost as well). It actually turns into modafinil in your stomach, but it takes longer to take effect, and the chemical byproducts cause stomach pains and liver problems.
By the way, I am not knocking on your idea :-) I think it's a great idea for protecting the site operators from legal issues, but it does not help much with the more sketchy tactics that the media companies are turning to.
The problem isn't *IAA putting up fake websites on freenet, the problem is *IAA creating thousands of fake users that can all vouch for each other, and claim all of the real media is fake.
Mediadefender has done this many times in the past (as proven by the email leak), and it is a common tactic that is most likely used by other companies in the business as well. This is a pervasive problem on even the most heavily moderated boards, and it is extremely difficult to deal with in an automated way.
Out of touch media distributors have nothing to offer the world. I use the most efficient media distribution model, and pay whatever they charge for it.
The only honest/reliable way to make money is to provide services. I pay money to theaters, I pay money for internet bandwidth. Hollywood can still make ends meet easily by charging for product placement (a service). Why should anyone get royalties for a service they provided years ago?
I think capitalism works much better when people are actually forced to contribute to society to succeed, and aren't just getting money because of a network of sketchy contracts and hundreds of years of lazy/greedy people manipulating our legal system for their own gain.
I think that the hardest part of adding search to any p2p system is that it is too easy for malicious users (*IAA thugs) to poison search results, and I don't see anything on their page that deals with that.
To design a reliable search system, you need to have a good rating system, and a solid trust model. At the same time, you need to avoid making the trust model so tight that new users cannot get any search results (freenet).
Also, I think it should be noted that a lot of bittorrent usage is moving towards the subscription model, so people should be able to search for channels as well, not just single files.
I am interested in seeing where this project leads, but I don't think people will be completely abandoning the well organized, well moderated torrent sites any time soon, but it will be nice to be able to search quickly for files without needing to open a browser.
So, you think EuSecWest should let Muniz present? If n3td3v is right (and ofcourse he is) this could destroy the internet (I heard he has already put in an application for MI5)
I am not a subscriber of lifelock, so I don't know for certain, but I don't think that people are paying for the credit alerts. The real service being provided is that they get to be the ones making all the phone calls getting the stuff taken care of after someone has stolen the identity.
Most people that I know that have gotten their identities stolen weren't complaining about the money loss, or the wrecked credit. They complain about the massive loss of time (months, and sometimes years) that it takes to get things back in order.
Um, the point of youtube is to allow everyone to be heard, and get their message across. The videos that Lieberman was referring to were politically charged videos about the conflict between Israel and Palestine.
If you want to see morbid violence, go to liveleak.com, if you want to see porn, goto youporn.com. Youtube does not allow either of those, but they are not hard to find on the internet.
I hadn't even noticed that Hamas had so many videos on youtube.
Those interested should check out http://youtube.com/watch?v=U8Nj-QKQkCo and related videos.
Also an interesting movie I watched recently was "suicide killers". It contains many interviews with suicide bombers right before they kill themselves, and many interviews with failed suicide bombers in Israeli prisons.
http://www.amazon.com/Suicide-Killers-Pierre-Rehov/dp/B000NVHWIE
http://www.mininova.org/tor/635799
Maybe I am just strange, but I find it absolutely fascinating how a group of people can have such a strong hatred of Israel. It's a really fucked up situation for both sides, but I think it is very important for both sides to be heard.
An important thing to remember is that these security based static analysis tools are tools designed to be used by security analysts. While it is good for developers to see the reports, and understand common security vulnerabilities, too often I see people hooking up static analysis to their code repository, and thinking that they have solved all future security problems.
Don't worry, China isn't buying it for themselves, they're buying it for US.