Every website is a publication. Anyone running a website that publishes things for others is therefore a publisher.
Facebook can say whatever they want to the public, doesn't change what they and every other website is. A publication. That's the whole flippin' point of making a website. To get others to look at it. Exactly the same reason to make a book, flier, leaflet, magazine, newspaper... to get people to look at it. Same thing.
Let's take an interesting Hollywood example. Pick any of your choice, the toy of interest is the same, the newspaper of the future (Minority Report, Harry Potter) that has moving pictures, and possibly even speaks to you. Publication. Website is the same flippin' thing.
My phone already has a feature that if it's connected to my vehicle's Bluetooth, it will auto-respond to any text messages informing the sender that I'm driving and cannot respond.
It'd be great to have just an away button I can tap, or part of the do-not-disturb functionality, so yeah, we need an 'away' button that will auto-respond just like my driving thing does.
Obviously the software can already do this, just need some more controls over it.
Ever since NetFlix decided to put a thumbs-up/thumb-down rating system on top of their own 1-5 stars system, the reviews have been buried.
You have to really fuss with the site to get at the reviews and still lingering 1-5 star system buried beneath the forward facing thumb-up/down.
So yeah, nothing really is changing except instead of hard to find the reviews, they'll be harder to find and no longer added to.
Which is fine really, most people I think consult other review sites (Rotten Tomatoes?) rather than NetFlix anyway.
About my only complaint really is the 1-5 star system being buried (is it retiring too?), cuz it seemed like before they put up the thumbs-up/down system, it'd make better recommendations when you could rate stuff 1-5 stars. The new 'percentage rating' based on your prior thumb-up/down ratings, related to unseen shows and films seems cryptic and hard to understand what is generating that percentage. It's entirely possible this is all subjective, that I might have felt I was better impacting the suggestions when I could rate something with 5 different levels, instead of just yes or no.
Partly? BS. This is 100% victims fault. I mean, who gives away their login credentials AND 2FA to a stranger on the phone?
ZERO sympathy, sorry, this is the victim's fault. You don't get to cry foul if you open the door for the thief and point right to the valuables and say "I'll just be in the bathroom wanking off."
This is sheer human stupidity on a whole new level.
The caller asked for his email. He gave it. The caller asked for his Uber account password. He gave him that, too, after a brief hesitation. Then the caller said to tell him the confirmation code he'd be receiving shortly via text. The driver told him the code once he got the text.
Who does all that? THOUSANDS of these drivers are this stupid? Wow. I never knew.
Scammers should have went for the driver's bank info instead, sounds like these drivers will give anyone on the phone anything they ask for. Without question.
it poses a huge threat to aircraft working to suppress the fire and forces them to ground," said Tipton in a statement.
I'm sorry, I don't see this. How the hell? How the hell is a couple pounds of flying plastic going to pose a threat to an AIRCRAFT?
Maybe I'm naive or not seeing it, or whatever else, but really, how the heck is that a threat to safety? What could a drone possibly do to an aircraft in terms of damage and causing the aircraft to abort it's mission or whatever? Is there some evidence of this actually occurring?
I imagine the real story is: Aircraft Pilot: OH FUCK there's a spec of something flying around near the fire, ABORT MISSION!
Really? How does a flying piece of plastic post any more threat than say.. a bird of equal size and mass? Other than the obvious, birds probably not going to be flying near a wildfire.
Someone doesn't want something to be filmed by flying drones, is what I think is the real source of concern.
It's an exploit that can potentially steal bits from another VM or process.
That much is clear. What they're not telling you, is how the hell you get from stealing bit streams and exporting them to the outside world. Also they don't tell you how you go about actually capturing bits you might actually be interested in capturing.
OK, so case 1, you rent a VM from a random provider and start fishing around to try and find out what is sharing the bare metal with you. So what? What are the chances of you landing on a bare metal that has ANYTHING useful running along side your maliciousness?
So case 2, you inject this into an actual webserver of interest, by another exploit of some kind. Assuming this alone didn't set off a ton of alarms for a system admin to come look at, you still have to defeat whatever firewalling is present on your target and have THAT not set off a ton of alarms for a system admin to come look at.
Case 3, the end user. The most worthless of all targets, whacha gunna steal? A credit card? Someone's bank account credentials? There's much easier ways to go about this. And more rewarding targets. Bank fraud and computer crimes you'll be charged with are not worth one fuck's bank or credit card. Hell you can just buy that kind of thing on the dark web anyway and charge up some random fuck's credit card.
Bottom line, interesting exploit you have there. Wish it was actually useful in the real-world, but it's not, nor will it ever be. Sorry.
The timings you get from training are only useful if the target machine is IDENTICAL to the training machine. One thing, one little thing to skew the timing just slightly, and it's all over, back to square one.
Like Meltdown and Spectre, this 'exploit' requires a lot of things to be 'just right' for an exploit or data leak to occur.
I'm not saying they're worthless exploits, but again, when I read some of the particulars about the research.. well this popped out:
The team used AI – specifically, a support vector machine classifier – to identify when a program is executing a sensitive operation, such as a cryptographic function, through the TLB latencies, and read out that app's private data as a stream of bits, allowing them to reconstruct things like crypto keys. There are hurdles to overcome, such as address-space layout randomization – however, the team believes these can be defeated in real-world attacks.
So I really don't know a lot about AI implementations, but I'm going to take a liberty and say, that's probably computationally expensive to be doing. That they needed an AI to even get anywhere examples how sensitive this exploit truly is. Expecting to deploy an AI in the wild (malware) and have it grabbing stuff from whatever... it's a pretty big stretch from these laboratory conditions to real-world.
I'm not going to say there's nothing here, but I am going to say: Where's the beef? Cuz it's awfully small with this exploit, there's much easier ways to steal information.
Lastly, it seems isolated to HyperThreading Intel CPUs, from what I read. Yes, it's a big attack surface, but still.. an exploit working in your special setting doesn't really move me much, especially how special these particular set of conditions were.
Browsers could start ignoring DNS answers that point to addresses in the local LAN,
Despite your original post seeming intelligent, this is not. Are you really this naive about the typical home broadband installation? Where almost always the router is doing DNS duty, thereby pushing out on DHCP itself as the first DNS server. This is standard on millions of devices, and you propose breaking it?
But in November 2017, China said enough. The country closed its doors to contaminated plastic,
Which from what I've read is the problem. China is sick of our soiled plastic waste. I mean ffs people, we had one job, clean up the waste so it's not disgusting and China would take it on the cheap. But NOOOOOO, lazy fucking Americans can't even be bothered to rinse stuff off and make their garbage slightly more appealing.
Well, guess what, they're are sick of it and I don't blame them. And you can bet the other countries taking plastic now, they won't put up with it for very long either. Clean it up, or bury it in your own fucking backyard.
They're both trying to undermine the President's efforts at peace. They both hate the President and are inventing any excuse they can to discredit him. This isn't hard to understand.
Last time I checked, the majority of Americans hate Trump. Passionately. Kinda reflects in the government. Our government is of the people, by the people, and surprise surprise, THE PEOPLE fucking hate Trump.
You don't get to be probably the most hated man in America by not stepping on some toes and pissing off people along the way. It's no surprise that the MAJORITY of this country is hell bent on persecuting this POTUS. I can think of no one more deserving. He wanted the spot light on him. He's getting more than he bargained for.
It's just hilariously amusing when people like this guy I quoted spew forth Apple fanboi levels of love and idolage for Mr. Trump. Everything bad said about this man is some conspiracy by the left, every single thing! The left is responsible for everything wrong with Trump. That's just irrational. Which describes Trump's supporters perfectly. Irrational.
A sophisticated hacking campaign launched from computers in China burrowed deeply into satellite operators, defense contractors and telecommunications companies in the United States and southeast Asia, security researchers at Symantec Corp said on Tuesday.
I have no problem believing this. Seems legit. However, the TIMING of this report is extremely suspect. Why now? When there's a nasty trade-war brewing between China and the US. Yeah, suspect and shady as FUCK.
I don't think I've ever seen a president so disrespected.
Well, I have definitely never seen the office of the President of the United States so disrespected. So I think jabbing at Trump is completely justified.
He is making mockery of all of us, and our nation. He's making us all look like him. He's disrespectful to other world leaders (except dictators! weird?) He is disgracing the office of the President and our entire nation.
So in turn, everyone who can, makes a mockery of Trump, in the media, in print, on the web, YouTube, SNL, late night comedy, stand up, everywhere Trump is the punchline of every joke. Because he is a joke. Alas, he is not funny by any stretch.
Beware the power of stupid people in large groups.
In all honesty, assuring me that we'll never see killer robots because we'd have to be incredibly stupid to make such a thing... not much assurance.
You're talking about a species where a not-insignificant number of people believe the earth is flat. Yes. In 2018. It's true.
A majority of humans are convinced there's an invisible man living in the sky who watches everything we do, every minute of every day. Really? And you're trying to assure me that we're not stupid enough to make killer robots?
The next administration might just throw out Tweedie Pai and reverse his policies if enough people get pissed off.
Nope and nope. With NN gone and nothing taking it's place, the conglomerates will move very fast to make reversing NN's current status of gone exceedingly difficult.
We had our chance, it's passed us now. NN is dead, and the big guys will move swiftly to ensure it can NEVER be revived.
In this world, a dollar speaks much louder than a thousand people. Just how it is. People can scream until they're blue in the face, the dollar wins every time.
And there is a lot of easy money to be made by bilking all these internet crybabies out of their hard earned cash, we were spoiled for a long time. The party is over. The bill is due.
This merger is only the beginning of the end. Between this, Net Neutrality getting canned and the EU's broken mandates regarding the internet......
Yeah, it was fun while it lasted.
Now we'll have AT&T Net, Comcast Net, Verizon Net, and you can bet they absolutely do not want to talk to each other, or have their customers streaming content from their competitors.
Wish I could say I'm surprised, but I'm not, the ground work began for this with NN getting kicked to the curb. Now that the gloves are off, these big conglomerates can strangle the internet however they please.
Bitcoins have been seized by the cops already, though. Cryptocurrencies are not a magical end-run around the law like you seem to be implying.
But they are. In the correct hands, with the correct security precautions, your cryptocurrencies can be rendered inaccessable to all but the person who possesses a pass phrase or other 'in mind' key that will unlock whatever storage contains the cryptocurrency wallet.
These cases of seizures of cryptcurrency we've read about.. fools and their money parted cuz fools can't properly secure their wallets. You never hear about the ones that successfully stash ill-gotten gains into cryptocurrency.
Ultimately, what one -should- be doing is renting some cloud based Virtual Machine, storing all your secrets behind a crypted container object on the VM. Pay many years in advance with untraceable currency (those credit cards you buy at walmart are perfect for this!) If you get busted, you have nothing, not even physical copy of your wallet to be seized. As long as there's no traces of you accessing your VM on any of your physical devices, you're home free. You never heard about these guys tho, cuz they got away with it and no one is the wiser.
I can already smell the scam: Get a credit card, buy cryptocurrency, tear up credit card and refuse to pay. Technically, all you have is 'tokens' that're not legal tender in any government. They are technically worthless, so they can't be seized by a court.
And even if by some twist of logic, some court did decide to rule Cryptocurrency isn't a token, but it is in fact a legal tender, or commodity, or whatever.. still, you're going to have a real tough time trying to extract cryptocurrency from any individual.
The normal collections methods are not going to affect cryptocurrencies in any way, shape or form. In REALITY, cryptocurrency coins are literally NOTHING.
But I imagine a clever criminal will find a way to mask the purchase to make this work out, anyway. So.. no solutions here, nothing more than a: Good luck with that!
Regardless of Excel's poor random function, the way this is being described as being done, it sounds pretty legit and random enough. There's no bias on assigning the random number to each name, and the name itself isn't being used to generate the random number. So this should be fine.
Just because it doesn't meet some math/computer geek's standards of proper random number generation, doesn't mean it's not useless for this application. I say thumbs up. The RNG being perfect isn't really necessary.
So someone else who is driving breaks the law and texts you, and you both get punished by having 8313 incoming SMS after your two-hour drive.
No. No court is that stupid, sorry buddy. The text message even says 'Auto-response' in it. Don't be stupid.
Every website is a publication. Anyone running a website that publishes things for others is therefore a publisher.
Facebook can say whatever they want to the public, doesn't change what they and every other website is. A publication. That's the whole flippin' point of making a website. To get others to look at it. Exactly the same reason to make a book, flier, leaflet, magazine, newspaper... to get people to look at it. Same thing.
Let's take an interesting Hollywood example. Pick any of your choice, the toy of interest is the same, the newspaper of the future (Minority Report, Harry Potter) that has moving pictures, and possibly even speaks to you. Publication. Website is the same flippin' thing.
My phone already has a feature that if it's connected to my vehicle's Bluetooth, it will auto-respond to any text messages informing the sender that I'm driving and cannot respond.
It'd be great to have just an away button I can tap, or part of the do-not-disturb functionality, so yeah, we need an 'away' button that will auto-respond just like my driving thing does.
Obviously the software can already do this, just need some more controls over it.
I love how the summary makes liberal usage of my favorite word to describe unscrupulous entities.
SHADY AS FUCK!
Ever since NetFlix decided to put a thumbs-up/thumb-down rating system on top of their own 1-5 stars system, the reviews have been buried.
You have to really fuss with the site to get at the reviews and still lingering 1-5 star system buried beneath the forward facing thumb-up/down.
So yeah, nothing really is changing except instead of hard to find the reviews, they'll be harder to find and no longer added to.
Which is fine really, most people I think consult other review sites (Rotten Tomatoes?) rather than NetFlix anyway.
About my only complaint really is the 1-5 star system being buried (is it retiring too?), cuz it seemed like before they put up the thumbs-up/down system, it'd make better recommendations when you could rate stuff 1-5 stars. The new 'percentage rating' based on your prior thumb-up/down ratings, related to unseen shows and films seems cryptic and hard to understand what is generating that percentage. It's entirely possible this is all subjective, that I might have felt I was better impacting the suggestions when I could rate something with 5 different levels, instead of just yes or no.
YES it is partially the victims fault.
Partly? BS. This is 100% victims fault. I mean, who gives away their login credentials AND 2FA to a stranger on the phone?
ZERO sympathy, sorry, this is the victim's fault. You don't get to cry foul if you open the door for the thief and point right to the valuables and say "I'll just be in the bathroom wanking off."
This is sheer human stupidity on a whole new level.
The caller asked for his email. He gave it. The caller asked for his Uber account password. He gave him that, too, after a brief hesitation. Then the caller said to tell him the confirmation code he'd be receiving shortly via text. The driver told him the code once he got the text.
Who does all that? THOUSANDS of these drivers are this stupid? Wow. I never knew.
Scammers should have went for the driver's bank info instead, sounds like these drivers will give anyone on the phone anything they ask for. Without question.
it poses a huge threat to aircraft working to suppress the fire and forces them to ground," said Tipton in a statement.
I'm sorry, I don't see this. How the hell? How the hell is a couple pounds of flying plastic going to pose a threat to an AIRCRAFT?
Maybe I'm naive or not seeing it, or whatever else, but really, how the heck is that a threat to safety? What could a drone possibly do to an aircraft in terms of damage and causing the aircraft to abort it's mission or whatever? Is there some evidence of this actually occurring?
I imagine the real story is:
Aircraft Pilot: OH FUCK there's a spec of something flying around near the fire, ABORT MISSION!
Really? How does a flying piece of plastic post any more threat than say.. a bird of equal size and mass? Other than the obvious, birds probably not going to be flying near a wildfire.
Someone doesn't want something to be filmed by flying drones, is what I think is the real source of concern.
It's an exploit that can potentially steal bits from another VM or process.
That much is clear. What they're not telling you, is how the hell you get from stealing bit streams and exporting them to the outside world. Also they don't tell you how you go about actually capturing bits you might actually be interested in capturing.
OK, so case 1, you rent a VM from a random provider and start fishing around to try and find out what is sharing the bare metal with you. So what? What are the chances of you landing on a bare metal that has ANYTHING useful running along side your maliciousness?
So case 2, you inject this into an actual webserver of interest, by another exploit of some kind. Assuming this alone didn't set off a ton of alarms for a system admin to come look at, you still have to defeat whatever firewalling is present on your target and have THAT not set off a ton of alarms for a system admin to come look at.
Case 3, the end user. The most worthless of all targets, whacha gunna steal? A credit card? Someone's bank account credentials? There's much easier ways to go about this. And more rewarding targets. Bank fraud and computer crimes you'll be charged with are not worth one fuck's bank or credit card. Hell you can just buy that kind of thing on the dark web anyway and charge up some random fuck's credit card.
Bottom line, interesting exploit you have there. Wish it was actually useful in the real-world, but it's not, nor will it ever be. Sorry.
No, the expensive part is training a model,
The timings you get from training are only useful if the target machine is IDENTICAL to the training machine. One thing, one little thing to skew the timing just slightly, and it's all over, back to square one.
So again...where's the beef?
Like Meltdown and Spectre, this 'exploit' requires a lot of things to be 'just right' for an exploit or data leak to occur.
I'm not saying they're worthless exploits, but again, when I read some of the particulars about the research.. well this popped out:
The team used AI – specifically, a support vector machine classifier – to identify when a program is executing a sensitive operation, such as a cryptographic function, through the TLB latencies, and read out that app's private data as a stream of bits, allowing them to reconstruct things like crypto keys. There are hurdles to overcome, such as address-space layout randomization – however, the team believes these can be defeated in real-world attacks.
So I really don't know a lot about AI implementations, but I'm going to take a liberty and say, that's probably computationally expensive to be doing. That they needed an AI to even get anywhere examples how sensitive this exploit truly is. Expecting to deploy an AI in the wild (malware) and have it grabbing stuff from whatever... it's a pretty big stretch from these laboratory conditions to real-world.
I'm not going to say there's nothing here, but I am going to say: Where's the beef? Cuz it's awfully small with this exploit, there's much easier ways to steal information.
Lastly, it seems isolated to HyperThreading Intel CPUs, from what I read. Yes, it's a big attack surface, but still.. an exploit working in your special setting doesn't really move me much, especially how special these particular set of conditions were.
Browsers could start ignoring DNS answers that point to addresses in the local LAN,
Despite your original post seeming intelligent, this is not. Are you really this naive about the typical home broadband installation? Where almost always the router is doing DNS duty, thereby pushing out on DHCP itself as the first DNS server. This is standard on millions of devices, and you propose breaking it?
But in November 2017, China said enough. The country closed its doors to contaminated plastic,
Which from what I've read is the problem. China is sick of our soiled plastic waste. I mean ffs people, we had one job, clean up the waste so it's not disgusting and China would take it on the cheap. But NOOOOOO, lazy fucking Americans can't even be bothered to rinse stuff off and make their garbage slightly more appealing.
Well, guess what, they're are sick of it and I don't blame them. And you can bet the other countries taking plastic now, they won't put up with it for very long either. Clean it up, or bury it in your own fucking backyard.
6.7 million USD? Is that a joke? Apple probably spends more on cardboard packaging than that, a year.
In the face of such a horrifically crippling punishment, I'm fully confident Apple will never ever try anything shady again!
They're both trying to undermine the President's efforts at peace. They both hate the President and are inventing any excuse they can to discredit him. This isn't hard to understand.
Last time I checked, the majority of Americans hate Trump. Passionately. Kinda reflects in the government. Our government is of the people, by the people, and surprise surprise, THE PEOPLE fucking hate Trump.
You don't get to be probably the most hated man in America by not stepping on some toes and pissing off people along the way. It's no surprise that the MAJORITY of this country is hell bent on persecuting this POTUS. I can think of no one more deserving. He wanted the spot light on him. He's getting more than he bargained for.
It's just hilariously amusing when people like this guy I quoted spew forth Apple fanboi levels of love and idolage for Mr. Trump. Everything bad said about this man is some conspiracy by the left, every single thing! The left is responsible for everything wrong with Trump. That's just irrational. Which describes Trump's supporters perfectly. Irrational.
A sophisticated hacking campaign launched from computers in China burrowed deeply into satellite operators, defense contractors and telecommunications companies in the United States and southeast Asia, security researchers at Symantec Corp said on Tuesday.
I have no problem believing this. Seems legit. However, the TIMING of this report is extremely suspect. Why now? When there's a nasty trade-war brewing between China and the US. Yeah, suspect and shady as FUCK.
I don't think I've ever seen a president so disrespected.
Well, I have definitely never seen the office of the President of the United States so disrespected. So I think jabbing at Trump is completely justified.
He is making mockery of all of us, and our nation. He's making us all look like him. He's disrespectful to other world leaders (except dictators! weird?) He is disgracing the office of the President and our entire nation.
So in turn, everyone who can, makes a mockery of Trump, in the media, in print, on the web, YouTube, SNL, late night comedy, stand up, everywhere Trump is the punchline of every joke. Because he is a joke. Alas, he is not funny by any stretch.
Imagine THAT! CNN trying to provoke a war to defeat peace so they can get a dig in at the president.
Just so we're crystal clear, CNN reported on a DHS alert. So yeah. There's that.
Beware the power of stupid people in large groups.
In all honesty, assuring me that we'll never see killer robots because we'd have to be incredibly stupid to make such a thing... not much assurance.
You're talking about a species where a not-insignificant number of people believe the earth is flat. Yes. In 2018. It's true.
A majority of humans are convinced there's an invisible man living in the sky who watches everything we do, every minute of every day. Really? And you're trying to assure me that we're not stupid enough to make killer robots?
The next administration might just throw out Tweedie Pai and reverse his policies if enough people get pissed off.
Nope and nope. With NN gone and nothing taking it's place, the conglomerates will move very fast to make reversing NN's current status of gone exceedingly difficult.
We had our chance, it's passed us now. NN is dead, and the big guys will move swiftly to ensure it can NEVER be revived.
In this world, a dollar speaks much louder than a thousand people. Just how it is. People can scream until they're blue in the face, the dollar wins every time.
And there is a lot of easy money to be made by bilking all these internet crybabies out of their hard earned cash, we were spoiled for a long time. The party is over. The bill is due.
This merger is only the beginning of the end. Between this, Net Neutrality getting canned and the EU's broken mandates regarding the internet......
Yeah, it was fun while it lasted.
Now we'll have AT&T Net, Comcast Net, Verizon Net, and you can bet they absolutely do not want to talk to each other, or have their customers streaming content from their competitors.
Wish I could say I'm surprised, but I'm not, the ground work began for this with NN getting kicked to the curb. Now that the gloves are off, these big conglomerates can strangle the internet however they please.
Bitcoins have been seized by the cops already, though. Cryptocurrencies are not a magical end-run around the law like you seem to be implying.
But they are. In the correct hands, with the correct security precautions, your cryptocurrencies can be rendered inaccessable to all but the person who possesses a pass phrase or other 'in mind' key that will unlock whatever storage contains the cryptocurrency wallet.
These cases of seizures of cryptcurrency we've read about.. fools and their money parted cuz fools can't properly secure their wallets. You never hear about the ones that successfully stash ill-gotten gains into cryptocurrency.
Ultimately, what one -should- be doing is renting some cloud based Virtual Machine, storing all your secrets behind a crypted container object on the VM. Pay many years in advance with untraceable currency (those credit cards you buy at walmart are perfect for this!) If you get busted, you have nothing, not even physical copy of your wallet to be seized. As long as there's no traces of you accessing your VM on any of your physical devices, you're home free. You never heard about these guys tho, cuz they got away with it and no one is the wiser.
I can already smell the scam: Get a credit card, buy cryptocurrency, tear up credit card and refuse to pay. Technically, all you have is 'tokens' that're not legal tender in any government. They are technically worthless, so they can't be seized by a court.
And even if by some twist of logic, some court did decide to rule Cryptocurrency isn't a token, but it is in fact a legal tender, or commodity, or whatever.. still, you're going to have a real tough time trying to extract cryptocurrency from any individual.
The normal collections methods are not going to affect cryptocurrencies in any way, shape or form. In REALITY, cryptocurrency coins are literally NOTHING.
But I imagine a clever criminal will find a way to mask the purchase to make this work out, anyway. So .. no solutions here, nothing more than a: Good luck with that!
"When you are dead, you do not know you are dead. It's only painful & difficult for others. The same applies when you are stupid." --someone
Regardless of Excel's poor random function, the way this is being described as being done, it sounds pretty legit and random enough. There's no bias on assigning the random number to each name, and the name itself isn't being used to generate the random number. So this should be fine.
Just because it doesn't meet some math/computer geek's standards of proper random number generation, doesn't mean it's not useless for this application. I say thumbs up. The RNG being perfect isn't really necessary.