How the heck would they monitor it? You open a bank account in a different country, most likely without income tax regulations, get a VISA/MasterCard (Maestro) for the account and then use that for general expenses or to get cash out of an ATM. You can get $900 per day out of an ATM with a foreign Maestro card - yes I have an oversees account.
We use Mac OS X Server for our infrastructure as well. There is nothing wrong with it. It's just another Unix distro. The frontend is a little too simplified for most advanced uses (as it is geared toward the no-admin-here shop) but all-in-all once you get to it, it's about the level of Debian as far as stable goes.
I don't see why people have such a bad time setting up Linux/Unix systems (whether they be Debian-based, Red Hat-based or Mac-based). For the best results, hire an admin or otherwise talk to the vendor.
We keep hearing about these mishaps. But really, how difficult can it be to build a functional counter? The current electronic voting systems are about as reliable as the average poll on a random website.
It has very similar specs to the Mac Mini and is about the same price. TFA says a 300W power supply however, 80+ means that it is (as far as I can see) EPEAT Silver or Gold. The Mac Mini has a 110W power supply so the losses will be smaller. I wonder if somebody will take those 2 machines to a test soon to see how they compare.
So did we. In most countries, schooling is a full time (36 to 40h/week) activity. So worried about your kids when you have to go to work that you need to bring them by car: drop them off and they'll hang out in a study hall where they can work on whatever they need to work on.
Reducing fat intake will lead to a decrease in obesity. When parents give their kids fatty cheese or hot dogs or hamburgers with ketchup and mayonnaise as a snack something is wrong. Maybe more parents would become aware of the kids and their own obesity and do something about it (you know, like parenting). Right now there is just about enough activity for those youngsters to become slightly obese but not morbidly (there are exceptions) just enough that it's something to watch out for but not something to worry about.
Do you really think that in Europe, China, India,... all those kids are fatty's? I think that only Americans are so much into sports yet so obese. Heck, I only had 2 hours of gym per week in my days but nobody in my class was ever obese nor am I now.
I'm still amazed that you can CHOOSE to opt out of high school calculus. I live in the US now and I know some youngsters that chose to minimize mathematics in their school schedule and then they wonder why they are stuck at pre-calc in 10th grade. Where I went to school in Europe, the girls or anyone didn't really have the choice. It was 8 hours of mathematics a week portioned between statistics (1h), geometry (1h), calculus (3h) and algebra (2h) and sometimes statistics was interchanged with small episodes of chaos theory or applied mathematics or whatever was necessary for a particular group.
I believe that the US schooling system needs a complete overhaul in order to create a better knowledge economy. First thing to do is add at least 1h per day to the school day. I see most kids get home at 2 or 3 in the afternoon even if they have to travel 2 hours because they're in an intercity exchange program. I remember being at school until at least 4pm and then you had to do homework and study for the next day too and if you were going to a specific specialty (eg. art, electronics, sports), traveling could also take 1 or 2 hours. The second thing to do is reduce sports activities during school hours to a maximum of 4 hours per week and fill those voids with science, mathematics and art. And for all those living in rural areas it would be interesting to expand electronic schooling so they only have to go to physical building two or three times a week (hybrid of home schooling and standard schooling). Those times should be devoted to a short overview, lab time and testing to make sure nobody is slacking at home.
So we go back to where we started from: chroot and jails. What really is the benefit of extended virtualization? I haven't "embraced" it as I am supposed to do.
I can see where it makes sense if you want to merge several servers that do absolutely nothing all day into a single machine but a decent migration plan will run all those services on a single 'non-virtual' server. Especially when those machines are getting loaded, the benefits of virtualization quickly break down and you'll have to pay for more capacity anyway.
As far as high availability goes: again, low cost HA doesn't work that well. I guess it's beneficial to management types that count the costs of but don't see the benefit in leaving a few idle machines running.
Then you have virtualized your whole rack of servers into a quarter rack single blade solution and a SAN that costs about the same than just a rack of single servers but you can't fill the rack because the density is too high. And like something that recently happened at my place: the redundant SAN system stops communicating with the blades because of a driver issue and the whole thing comes crashing down.
The more commonly known stuff is the first versions of Lotus 1-2-3, OS/2 for Windows 3.0, a few pictogram libraries (for a Commodore) and Laplink. There was a bunch of old hardware thrown out too and now we're tearing out the last 10-Base 5 (transceivers still hanging in) and we threw out a 'router' the size of a full rack.
There is a lot of cable in the ground even for civil use that isn't really on the plans. But the government and it's agencies really have a thing for not documenting anything for whatever reason.
I work in a building that was commissioned by the Atomic Energy Commission for the Manhattan Project. It should've been torn down a long time ago but it was more expensive to do that than to renovate it. Right now we're inheriting the 2nd floor of the building where they have been empty since the end of the Cold War (I recently found a stash of unopened era software) but nobody has any plans to the original layout (they went missing somewhere in the 50's) so the DoE did a (nuclear and structural) survey of the site and mapped it out. However the contractors started working and found a room with a lead door, 15" concrete walls, a chair and a small observation window. Needed to do a whole new nuclear survey and remap the whole thing by an internal team. The architect recreated his plans with the new data and found out that there is a bunch of space missing on the (currently empty) 3rd floor. We're not yet renovating there but for some or another reason the decision was made from higher up to leave the 3rd floor untouched until we really need that space.
I know the issues in those small towns. I was just saying criminality is low especially in "farming" communities. I didn't say anything about the religious nutjobs but those can be found anywhere. It's just less prevalent in the cities. I currently live in the city myself because small towns don't have the need for an IT person like me and there was no cable to be found and DSL wasn't possible on the phone line that also had the local radio station on it in the background (it was fun when they were taken over and went from a 'country/christian' station to hip hop)
Apparently you are not completely up to snuff with your jargon there.
I have worked with the guts of computers long enough to have known ESDI drives (in the PS/2 no less) those had as far as I remember serial data lines (and a separate control line to control head movements). Then came SCSI and IDE (later standardized as ATA, faster versions as EIDE or ATA-2, for CD/DVD/ZIP drives ATAPI and recently known as PATA) which were parallel versions.
The first SCSI drives I used had 8 data lines (SCSI-2) - you could even make your own cables for those things, very robust. Later SCSI's (Wide SCSI) had 32 data lines and a very wide connector with thick cables that would have the whole side of your case covered with cables if you were putting in a dual controller setup - sometimes those cables would have so much tension and take up so much space they wouldn't stay in the drive and then you could start rerouting the whole cable again to find a 'better' way.
ATA had less of an issue as the cable wasn't as wide nor thick but you could only get 2 devices on a cable and the one designated slave (usually CDROM) could tie up your bus and use valuable time so you should've ran a separate cable for each device.
The problem with both Parallel SCSI and Parallel ATA was that you could only drive it up to a certain speed before you would get synchronization issues between the data lines. Serial is much cheaper for that as you can drive up the frequency without caring too much about the synchronization.
Firewire and USB have always been serial. Firewire is technically superior and also more expensive than USB (same as SCSI was far, far, far more superior than any IDE installation for the same reasons) because the devices (both host and target) require internal controllers so as to not tie up the CPU. SCSI also required (sometimes manual) terminations and (before SCSI-3) SCSI ID's
SAS is Serial Attached SCSI, just like SATA is Serial ATA. SCSI (this time serial) is again, more superior but also more expensive than ATA and allows much more flexibility (you can for example attach SATA devices to a SAS controller, not vice versa) and SAS can maintain multiple drives on a single cable while SATA is limited to one device per cable.
Give me Firewire and SCSI over USB and ATA anytime.
Just about any town in rural America. PA, MN, OH, NY all have these towns where you can just walk into anyone's house without a problem. Criminality is low because a) a neighbor or somebody else might see you b) any scoping out before a job is impractical as a stranger in a neighborhood where everybody knows each other c) it's even more impractical to follow the habits of a 3 generation household in a house that stands by itself without anything around for miles d) there is a high chance of getting shot (those people are very acquainted with the second amendment) if somebody is home or even a neighbor will protect somebody else's home e) most of those people don't have very high value electronics or jewelry in their houses. There's also the problem that some of those communities are very far away from the city if you need to fence what you stole.
That is the biggest question. They couldn't undercut Apple in the market segment which could mean that Apple's are well priced for what they have to offer? Too little people interested in non-Apple Mac products which could mean that they didn't offer the same service as Apple does or their products were of lower quality? Or did their management just drink all profits that should've been used to expand the company and pay for in-house lawyers?
Artist using new technology is nothing new. I like Apple and the iPhone but this is just a plain "Apple PR News" story, nothing for nerds, nothing that matters.
The main problem with advanced home automation is the cost, inoperability between brands (which works into the cost since you have to buy everything from the same company) and basic problems with those networks. They mostly work in the 2.4GHz band (where the average microwave oven and just about any wireless device operates) which causes random issues with connectivity and synchronization. And then they have the most awful interfaces to program it. They mostly work in Windows and crash at random are difficult to decipher and if you're lucky enough to get a web interface you're stuck with ActiveX controls. And then if you want to make it work with other things, there is no scripting language for it.
1. Downloading and copying original CD's is still considered "illegal" by a large group of people even though it isn't if you paid for it. 2. A lot of people actually like something tangible they can use in their car or they can rip to MP3's themselves. 3. Loss of digital media is still a big problem and easier to do in much more ways than a tangible object (it's more likely to have your disk crash than your house burn down and the hard drive doesn't have insurance). 4. The current digital solutions are still largely unknown and together with DRM they have more headaches than anything. You have to remember to backup your media collection regularly, it takes up space on your hard drive and if you need reinstalling or a new computer, it all disappears. If the vendor put DRM on it and the vendor disappears (even temporarily eg. when their servers are down) the music stops working. It's too bad but that's the way it is.
You're not getting it. It's illegal for the military to use any type of technology to spy on US soil. Even if they bought it from elsewhere, the military wouldn't be allowed to use it.
The DEA afaik doesn't have a satellite and I doubt commercial satellites have the resolution, availability and maneuverability to do very effective (real-time) ground operations.
West Virginia State Board of Education v. Barnette:
The very purpose of a Bill of Rights was to withdraw certain subjects from the vicissitudes of political controversy, to place them beyond the reach of majorities and officials and to establish them as legal principles to be applied by the courts. One's right to life, liberty, and property, to free speech, a free press, freedom of worship and assembly, and other fundamental rights may not be submitted to vote; they depend on the outcome of no elections.
There should be no tyranny of the majority in the US since most of the fundamental rights are not up to vote by the majority.
We detect a hacked of infected machine somewhere in our network DAILY. We have CIA, FBI, and DOD personell here weekly back tracking audit logs and trying to determine if a breach happened or not. We're VERY certain we've never had a breach. Again, if you don't have logs (because the attacker either found an avenue that isn't logged or had access to the log stream before it went onto WORM), there is nothing to look at. And I doubt that highly paid security professionals are willing to look at hours of boring logs. Most likely this is left to an office assistant drone or even a script once the excitement about the new system is over.
Also, we've never seen or heard about a bot that can intercept data from a remote SSH connection to a web API. Yea, you can build a keylogger, but you'd have to know the site's design in order to know what to pull, which at the least requires inside knowledge of our java app design (which changes about every 6 weeks). Also, 90+ % of our cases are opened by incoming callerID, and it's all screen-pop oriented. End users can only enter data into key fields, they can't fill in a complete form, so the only data you can steal via key logger is the account number or the name, not both, and possibly a phone number... We don't use SSN as a key field. none of the medical information is ever typed in by an end user.
Again simply fixed by LOOKING at it. I am talking screenshots here and a lot of random malware has that capability. A bot is of course not good for anything that is custom made but the person that controls the bot might gain some useful information. And most likely people would like to review/print the information that they entered, a big database that can only accept information is about as good as cat/dev/input >/dev/null. A Java App doesn't mean anything to me nor that it changes every 6 weeks (unless you totally redesign it from the ground up) because standard API's probably stay the same, decompiling an app is not a big thing these days, most DRM got cracked in less than 6 weeks.
Trust me, we host the personal and medical data for a few dozen million people, including every person who's been in the military since the mid 70s. We're CERTAIN you can't get our data with a bot on a workstation at this point. We can't prevent agents from writing data down and selling it in other ways (we've caught a few over the years doing so), but 1 person and a pen stealing credit card numbers is almost meaningless. you're 1000 times more likely to be a victim of identity theft by someone stealing your outgoing mail in your mailbox with the flag up...
I don't have that much but at least a few hundred thousand people (hospital). 1 person and a pen (or screenshots) stealing information (any) can be quite useful. We've had it too, as long as it isn't YOUR information you probably wouldn't care, the 300 somewhat people did care and management cared about the few hundred thousands in credit protection and legal costs. Again, all it takes is one breach, one motivated hacker and enough time before they get disconnected to set you back a few thousand of records. We recently got a few thousand in records lost because somebody found it interesting enough to script access to one-record-at-a-time resources and before it was noticed they got away with 1000 records. They did get noticed because of the heavy resources it was taken but anyone smarter would've gotten away with a lot more before it was noticed.
The fact that you say that it is impossible and it never happened means that you're either talking out of your behind or you're a management type that doesn't understand security.
1: Never going to happen. EVERYBODY wants a promotion or better wages or whatever. That's why you do your job good and some extra here and there. 2: That is legally not allowed. You could sue for some type of harassment (talk to your lawyer, I don't know what exactly). Get it in writing if at all possible. 3: Again, there is no reason you have to do this. If you actually do this you might find yourself without a job faster than you think as that API might just kill the company. If there is no way around 2 or 3 then leave, the economic crisis is only a perception created by the media, I find that if you are actually a good programmer/sysadmin/whatever you won't be without a job for too long.
Slashdot Mirror
Who is at Area 51
aliens (3), Carter (2), Colonel Sanders (2), Hi Group (2) is at Area 51
Who bombed WTC
Al Qaeda (5), Bush (5), Clinton (2), 4 more... bombed the WTC
Who built the pyramids (example on site):
Egyptians (298), aliens (73), Pharaohs (40), 77 more... built the pyramids
What contains antioxidants (example on site):
Coffee (17), Recent scientific research (15), food (6), 5 more... contain significant amounts of antioxidants
-- man, I gotta get me some more recent scientific research.
How the heck would they monitor it? You open a bank account in a different country, most likely without income tax regulations, get a VISA/MasterCard (Maestro) for the account and then use that for general expenses or to get cash out of an ATM. You can get $900 per day out of an ATM with a foreign Maestro card - yes I have an oversees account.
I wouldn't want a window seat if one of those birds gets through and hits the turret, bending it towards the window.
We use Mac OS X Server for our infrastructure as well. There is nothing wrong with it. It's just another Unix distro. The frontend is a little too simplified for most advanced uses (as it is geared toward the no-admin-here shop) but all-in-all once you get to it, it's about the level of Debian as far as stable goes.
I don't see why people have such a bad time setting up Linux/Unix systems (whether they be Debian-based, Red Hat-based or Mac-based). For the best results, hire an admin or otherwise talk to the vendor.
We keep hearing about these mishaps. But really, how difficult can it be to build a functional counter? The current electronic voting systems are about as reliable as the average poll on a random website.
It has very similar specs to the Mac Mini and is about the same price. TFA says a 300W power supply however, 80+ means that it is (as far as I can see) EPEAT Silver or Gold. The Mac Mini has a 110W power supply so the losses will be smaller. I wonder if somebody will take those 2 machines to a test soon to see how they compare.
So did we. In most countries, schooling is a full time (36 to 40h/week) activity. So worried about your kids when you have to go to work that you need to bring them by car: drop them off and they'll hang out in a study hall where they can work on whatever they need to work on.
Reducing fat intake will lead to a decrease in obesity. When parents give their kids fatty cheese or hot dogs or hamburgers with ketchup and mayonnaise as a snack something is wrong. Maybe more parents would become aware of the kids and their own obesity and do something about it (you know, like parenting). Right now there is just about enough activity for those youngsters to become slightly obese but not morbidly (there are exceptions) just enough that it's something to watch out for but not something to worry about.
Do you really think that in Europe, China, India, ... all those kids are fatty's? I think that only Americans are so much into sports yet so obese. Heck, I only had 2 hours of gym per week in my days but nobody in my class was ever obese nor am I now.
I'm still amazed that you can CHOOSE to opt out of high school calculus. I live in the US now and I know some youngsters that chose to minimize mathematics in their school schedule and then they wonder why they are stuck at pre-calc in 10th grade. Where I went to school in Europe, the girls or anyone didn't really have the choice. It was 8 hours of mathematics a week portioned between statistics (1h), geometry (1h), calculus (3h) and algebra (2h) and sometimes statistics was interchanged with small episodes of chaos theory or applied mathematics or whatever was necessary for a particular group.
I believe that the US schooling system needs a complete overhaul in order to create a better knowledge economy. First thing to do is add at least 1h per day to the school day. I see most kids get home at 2 or 3 in the afternoon even if they have to travel 2 hours because they're in an intercity exchange program. I remember being at school until at least 4pm and then you had to do homework and study for the next day too and if you were going to a specific specialty (eg. art, electronics, sports), traveling could also take 1 or 2 hours. The second thing to do is reduce sports activities during school hours to a maximum of 4 hours per week and fill those voids with science, mathematics and art. And for all those living in rural areas it would be interesting to expand electronic schooling so they only have to go to physical building two or three times a week (hybrid of home schooling and standard schooling). Those times should be devoted to a short overview, lab time and testing to make sure nobody is slacking at home.
So we go back to where we started from: chroot and jails. What really is the benefit of extended virtualization? I haven't "embraced" it as I am supposed to do.
I can see where it makes sense if you want to merge several servers that do absolutely nothing all day into a single machine but a decent migration plan will run all those services on a single 'non-virtual' server. Especially when those machines are getting loaded, the benefits of virtualization quickly break down and you'll have to pay for more capacity anyway.
As far as high availability goes: again, low cost HA doesn't work that well. I guess it's beneficial to management types that count the costs of but don't see the benefit in leaving a few idle machines running.
Then you have virtualized your whole rack of servers into a quarter rack single blade solution and a SAN that costs about the same than just a rack of single servers but you can't fill the rack because the density is too high. And like something that recently happened at my place: the redundant SAN system stops communicating with the blades because of a driver issue and the whole thing comes crashing down.
The more commonly known stuff is the first versions of Lotus 1-2-3, OS/2 for Windows 3.0, a few pictogram libraries (for a Commodore) and Laplink. There was a bunch of old hardware thrown out too and now we're tearing out the last 10-Base 5 (transceivers still hanging in) and we threw out a 'router' the size of a full rack.
There is a lot of cable in the ground even for civil use that isn't really on the plans. But the government and it's agencies really have a thing for not documenting anything for whatever reason.
I work in a building that was commissioned by the Atomic Energy Commission for the Manhattan Project. It should've been torn down a long time ago but it was more expensive to do that than to renovate it. Right now we're inheriting the 2nd floor of the building where they have been empty since the end of the Cold War (I recently found a stash of unopened era software) but nobody has any plans to the original layout (they went missing somewhere in the 50's) so the DoE did a (nuclear and structural) survey of the site and mapped it out. However the contractors started working and found a room with a lead door, 15" concrete walls, a chair and a small observation window. Needed to do a whole new nuclear survey and remap the whole thing by an internal team. The architect recreated his plans with the new data and found out that there is a bunch of space missing on the (currently empty) 3rd floor. We're not yet renovating there but for some or another reason the decision was made from higher up to leave the 3rd floor untouched until we really need that space.
I know the issues in those small towns. I was just saying criminality is low especially in "farming" communities. I didn't say anything about the religious nutjobs but those can be found anywhere. It's just less prevalent in the cities. I currently live in the city myself because small towns don't have the need for an IT person like me and there was no cable to be found and DSL wasn't possible on the phone line that also had the local radio station on it in the background (it was fun when they were taken over and went from a 'country/christian' station to hip hop)
Apparently you are not completely up to snuff with your jargon there.
I have worked with the guts of computers long enough to have known ESDI drives (in the PS/2 no less) those had as far as I remember serial data lines (and a separate control line to control head movements). Then came SCSI and IDE (later standardized as ATA, faster versions as EIDE or ATA-2, for CD/DVD/ZIP drives ATAPI and recently known as PATA) which were parallel versions.
The first SCSI drives I used had 8 data lines (SCSI-2) - you could even make your own cables for those things, very robust. Later SCSI's (Wide SCSI) had 32 data lines and a very wide connector with thick cables that would have the whole side of your case covered with cables if you were putting in a dual controller setup - sometimes those cables would have so much tension and take up so much space they wouldn't stay in the drive and then you could start rerouting the whole cable again to find a 'better' way.
ATA had less of an issue as the cable wasn't as wide nor thick but you could only get 2 devices on a cable and the one designated slave (usually CDROM) could tie up your bus and use valuable time so you should've ran a separate cable for each device.
The problem with both Parallel SCSI and Parallel ATA was that you could only drive it up to a certain speed before you would get synchronization issues between the data lines. Serial is much cheaper for that as you can drive up the frequency without caring too much about the synchronization.
Firewire and USB have always been serial. Firewire is technically superior and also more expensive than USB (same as SCSI was far, far, far more superior than any IDE installation for the same reasons) because the devices (both host and target) require internal controllers so as to not tie up the CPU. SCSI also required (sometimes manual) terminations and (before SCSI-3) SCSI ID's
SAS is Serial Attached SCSI, just like SATA is Serial ATA. SCSI (this time serial) is again, more superior but also more expensive than ATA and allows much more flexibility (you can for example attach SATA devices to a SAS controller, not vice versa) and SAS can maintain multiple drives on a single cable while SATA is limited to one device per cable.
Give me Firewire and SCSI over USB and ATA anytime.
Just about any town in rural America. PA, MN, OH, NY all have these towns where you can just walk into anyone's house without a problem. Criminality is low because a) a neighbor or somebody else might see you b) any scoping out before a job is impractical as a stranger in a neighborhood where everybody knows each other c) it's even more impractical to follow the habits of a 3 generation household in a house that stands by itself without anything around for miles d) there is a high chance of getting shot (those people are very acquainted with the second amendment) if somebody is home or even a neighbor will protect somebody else's home e) most of those people don't have very high value electronics or jewelry in their houses. There's also the problem that some of those communities are very far away from the city if you need to fence what you stole.
That is the biggest question. They couldn't undercut Apple in the market segment which could mean that Apple's are well priced for what they have to offer? Too little people interested in non-Apple Mac products which could mean that they didn't offer the same service as Apple does or their products were of lower quality? Or did their management just drink all profits that should've been used to expand the company and pay for in-house lawyers?
Artist using new technology is nothing new. I like Apple and the iPhone but this is just a plain "Apple PR News" story, nothing for nerds, nothing that matters.
The main problem with advanced home automation is the cost, inoperability between brands (which works into the cost since you have to buy everything from the same company) and basic problems with those networks. They mostly work in the 2.4GHz band (where the average microwave oven and just about any wireless device operates) which causes random issues with connectivity and synchronization. And then they have the most awful interfaces to program it. They mostly work in Windows and crash at random are difficult to decipher and if you're lucky enough to get a web interface you're stuck with ActiveX controls. And then if you want to make it work with other things, there is no scripting language for it.
1. Downloading and copying original CD's is still considered "illegal" by a large group of people even though it isn't if you paid for it.
2. A lot of people actually like something tangible they can use in their car or they can rip to MP3's themselves.
3. Loss of digital media is still a big problem and easier to do in much more ways than a tangible object (it's more likely to have your disk crash than your house burn down and the hard drive doesn't have insurance).
4. The current digital solutions are still largely unknown and together with DRM they have more headaches than anything. You have to remember to backup your media collection regularly, it takes up space on your hard drive and if you need reinstalling or a new computer, it all disappears. If the vendor put DRM on it and the vendor disappears (even temporarily eg. when their servers are down) the music stops working. It's too bad but that's the way it is.
I would still rather go with this:
http://www.youtube.com/watch?v=G8fbHpttc5A
It's easier to do than a big helmet.
I doubt the fork will spawn in time (forks of humans take about 20 years to complete) and even if it does, it might not be the same process.
I think Jammie should fsck her lawyer first though.
You're not getting it. It's illegal for the military to use any type of technology to spy on US soil. Even if they bought it from elsewhere, the military wouldn't be allowed to use it.
The DEA afaik doesn't have a satellite and I doubt commercial satellites have the resolution, availability and maneuverability to do very effective (real-time) ground operations.
West Virginia State Board of Education v. Barnette:
The very purpose of a Bill of Rights was to withdraw certain subjects from the vicissitudes of political controversy, to place them beyond the reach of majorities and officials and to establish them as legal principles to be applied by the courts. One's right to life, liberty, and property, to free speech, a free press, freedom of worship and assembly, and other fundamental rights may not be submitted to vote; they depend on the outcome of no elections.
There should be no tyranny of the majority in the US since most of the fundamental rights are not up to vote by the majority.
We detect a hacked of infected machine somewhere in our network DAILY. We have CIA, FBI, and DOD personell here weekly back tracking audit logs and trying to determine if a breach happened or not. We're VERY certain we've never had a breach.
Again, if you don't have logs (because the attacker either found an avenue that isn't logged or had access to the log stream before it went onto WORM), there is nothing to look at. And I doubt that highly paid security professionals are willing to look at hours of boring logs. Most likely this is left to an office assistant drone or even a script once the excitement about the new system is over.
Also, we've never seen or heard about a bot that can intercept data from a remote SSH connection to a web API. Yea, you can build a keylogger, but you'd have to know the site's design in order to know what to pull, which at the least requires inside knowledge of our java app design (which changes about every 6 weeks). Also, 90+ % of our cases are opened by incoming callerID, and it's all screen-pop oriented. End users can only enter data into key fields, they can't fill in a complete form, so the only data you can steal via key logger is the account number or the name, not both, and possibly a phone number... We don't use SSN as a key field. none of the medical information is ever typed in by an end user.
Again simply fixed by LOOKING at it. I am talking screenshots here and a lot of random malware has that capability. A bot is of course not good for anything that is custom made but the person that controls the bot might gain some useful information. And most likely people would like to review/print the information that they entered, a big database that can only accept information is about as good as cat /dev/input > /dev/null. A Java App doesn't mean anything to me nor that it changes every 6 weeks (unless you totally redesign it from the ground up) because standard API's probably stay the same, decompiling an app is not a big thing these days, most DRM got cracked in less than 6 weeks.
Trust me, we host the personal and medical data for a few dozen million people, including every person who's been in the military since the mid 70s. We're CERTAIN you can't get our data with a bot on a workstation at this point. We can't prevent agents from writing data down and selling it in other ways (we've caught a few over the years doing so), but 1 person and a pen stealing credit card numbers is almost meaningless. you're 1000 times more likely to be a victim of identity theft by someone stealing your outgoing mail in your mailbox with the flag up...
I don't have that much but at least a few hundred thousand people (hospital). 1 person and a pen (or screenshots) stealing information (any) can be quite useful. We've had it too, as long as it isn't YOUR information you probably wouldn't care, the 300 somewhat people did care and management cared about the few hundred thousands in credit protection and legal costs. Again, all it takes is one breach, one motivated hacker and enough time before they get disconnected to set you back a few thousand of records. We recently got a few thousand in records lost because somebody found it interesting enough to script access to one-record-at-a-time resources and before it was noticed they got away with 1000 records. They did get noticed because of the heavy resources it was taken but anyone smarter would've gotten away with a lot more before it was noticed.
The fact that you say that it is impossible and it never happened means that you're either talking out of your behind or you're a management type that doesn't understand security.
1: Never going to happen. EVERYBODY wants a promotion or better wages or whatever. That's why you do your job good and some extra here and there.
2: That is legally not allowed. You could sue for some type of harassment (talk to your lawyer, I don't know what exactly). Get it in writing if at all possible.
3: Again, there is no reason you have to do this. If you actually do this you might find yourself without a job faster than you think as that API might just kill the company. If there is no way around 2 or 3 then leave, the economic crisis is only a perception created by the media, I find that if you are actually a good programmer/sysadmin/whatever you won't be without a job for too long.