The problem is malware in sandboxes (web-browser, PDF reader, VMs, Virus-scanners detecting behavior, etc.). Quite obviously though, but if you need that explanation, here it is.
It is not now, but if you do not patch when the patches become available, it may be soon. One problem is that it seems this is exploitable from within a browser sandbox, but it will take some time for the respective exploit-code to be written and working. At the very least you have a couple of weeks. And with a script-blocker, your attack vector is indeed small. But take care that things like PDF readers also execute code from the document in a sandbox and may be affected. At the moment this is unclear.
So don't panic but install the patches when they are finished and you should be fine.
They also do not say that the things that can be read (like credentials and crypto-keys) can of course be used to "corrupt, modify or delete data". A shameless lie by misdirection.
Yes, but the users does not care about this. The users care whether their data is at risk of being "corrupted, modified or deleted" by this severe bug and yes, it very much is. Intel is using the tactics of lying by shameless misdirection here, apparently hoping that nobody understands what they are actually saying.
As Intel has been caught red-handed doing massively illegal things several times, like any good criminal enterprise they of course have a first-rate legal team.
This is on a computer. Apparently, you have no clue what that means. So to educate you (futile, I know): Computers can do tiny things very fast and very often and that results in not-tiny things. You argument is bogus.
Does not "corrupt, modify or delete data". Yes, nice. It can just steal your passwords and encryption keys and then use them to do that corruption, modification or deletion. A shameless lie by misdirection. Intel has no honor at all.
Ah, have you ever observed where a certain type of women gets their spending money from? Sure, "feminists" want men to pay for that without any compensation in the form of, say, sex or bearing children, but men are very much needed as work-slaves for these women.
With apologies to all women that do work to earn their living and that, unlike "feminists", do support equality.
It does not fuel the perverted fantasies of those promoting the "sex trafficking" fairy-tale. There really is no reality to their stories, why would they care about any real problem? They only care about what gets _them_ off.
And if that were true, it would be horrible. It is not. It is a big, organized lie that a lot of truly despicable people profit from. Check who paid for that "study". Also have a careful look at what they call "human trafficking" in the sex-work context. Very likely they include basically every non-domestic prostitute. That is a gross lie as basically none of them are "trafficked" when a sane definition of the word is used. You fell for an instance of what Goebbels called "the BIG lie".
Numbers from sane countries where prostitution is not illegal indicate that people actually forced into it are extremely rare and that usually one of the first customers calls the police to get them freed. That does, of course, only work if said customer does not need to fear prosecution.
Note that the need to work for a living and having selected this as the best option does not qualify as "having been forced into it". Also note that a driver or a bodyguard is not a "pimp", he is a helper employed by his boss, namely the small business owner working as a prostitute.
In essence, this problem does not exist, at least in the west and large parts of the rest of the world. This panic is primarily driven by the perverted fantasies of those promoting it. It has no connection to reality.
And in any sane country, that has happened a long time ago. It is also patently false to think that most women in prostitution are forced into it. Or at least not more forced than anybody that has to work for a living. They just look at their options and decide that it is this one they like best. In countries were prostitution is legal or decriminalized, it is extremely rare to find anybody forced into prostitution, and it is usually one of the first few customers (often the very first one) that calls the police and gets the victim freed. Of course that only works if said customer does not need to fear prosecution....
With the thoroughly insane idea of making prostitution illegal in the US, the prohibitionists get to design the narrative, and they are shamelessly lying to promote their evil agenda. Suddenly, everybody selling sex is "trafficked", when that is very far from the truth indeed. And suddenly there are incredible masses of underage prostitutes, when in actual reality they are very rare. The "average age entering the sex trade" becomes 13, when in actual reality it is more like 22. And do not forget that prostitution being illegal correlates with significantly higher rates of rape. This evil has to stop.
I thought most of these 419 scammers had faded away... but apparently not.
The morons that fall for this crap are still around, so the scammers are still around. Same as with all SPAM. Apparently, one in 10'000 SPAM emails gets a response and that is enough to make it worthwhile. If the idiots would stop answering, SPAM would have been long gone.
Who said anything about _one_ colocation place? And you seem to completely miss that you get all the outages of the cloud-provider for free, but with nothing you can do about them.
It is just bullshit hype. IBM wants a piece of that. For all real uses (except the increasingly discredited idea of crypto-"currencies"), standard revision-proof storage solves all the problems the blockchain solves and it does it better.
You do not need to build your own data-center in order to have your own infrastructure. Co-location of your servers is entirely fine for smaller companies. It wills till be your servers, under your administration. And that is what counts.
For the story: These people want to get rich on the current blockchain craze, nothing else. Ignore them.
As to the problem, best practices and liability are the only way. Yes, I am advocating jailing the CEO and CISO and possibly the board of companies that have large amounts of customer data stolen because of negligence. As an alternative, I would also accept insurance that automatically pays out $1000 to every custromer that has their data stolen (regardless of how much data it was and whether it was misused) and triple the actual damage to any customer that had their data stolen and can prove larger actual damage (losses + cost to fix) than $1000.
In order to be not negligent (note that I use simple negligence, not gross negligence) they will have to: - Develop security critical software only with architects, designers and coders that are understand security (no more paying peanuts for coders...) - Have external reviews of all security critical code by qualified security experts - Have careful and adequate white-box penetration testing performed - Not only fix the issued found in code-reviews and pen-tests, but also fix and investigate the root-causes, such as fire incompetent coders or outsourcers
Do this and the problem vanishes. The human race knows how to produce software that is extremely hard to break into. There are just no incentives to spend the money for it, and, despite my list above looking a bit bombastic, it would not actually be that expensive.
You just do not have enough control and you cannot make sure your core business survives an outage. In addition. it does not really save that much money, it often ends up costing significantly more. Sure, if you do your own infrastructure, you need some competent IT people to run it and make it work well, but maybe refrain from paying peanuts and your IT people will not be monkeys. In the end you do not only get a well-working in-house infrastructure, you get people that care about your company maintaining it and you actual get in-house expertise for all purchases. You just need to realize that IT is critical and that IT is much more important than any of your other functions. That is hard for the "business" side of things.
The organized dysfunction here is that the US has some characteristics of a police-state: The police can do arbitrary criminal things and very rarely are taken to task for it, while ordinary citizens doing the same things get grossly excessive prison sentences. This case here looks very much like criminally negligent manslaughter and should get the shooter and possibly his trainer or commander a few years behind bars. Instead, nothing will happen to them and that is just deeply wrong, but perpetuates the dysfunctionality.
I completely agree. On the book-side, it is not just steampunk, it affects every genre. Initially, even one of the "generic" ones may be fun, but after 2-3 you have seen it all and they become boring. Authors with original ideas and the talent to use them well are rare. And, unfortunately, authors with original ideas almost always seem to do significantly worse commercially that those producing generic re-hashes. Case in point: The Star Wars franchise seems to do very well commercially. Oh, well. At least with modern digital publishing on the book side, we get a lot of new authors that could not get their stuff published before and some are actually pretty good.
Slashdot Mirror
Was just about to point this out. They really have got a nerve.
They got away with similar tactics time and again. "Too big to punish". I really hope that changes. Power without accountability is bad for everyone.
The problem is malware in sandboxes (web-browser, PDF reader, VMs, Virus-scanners detecting behavior, etc.). Quite obviously though, but if you need that explanation, here it is.
It is not now, but if you do not patch when the patches become available, it may be soon. One problem is that it seems this is exploitable from within a browser sandbox, but it will take some time for the respective exploit-code to be written and working. At the very least you have a couple of weeks. And with a script-blocker, your attack vector is indeed small. But take care that things like PDF readers also execute code from the document in a sandbox and may be affected. At the moment this is unclear.
So don't panic but install the patches when they are finished and you should be fine.
This statement nicely illustrates the difference between "belief" and "knowledge". Also refer to "delusion".
AMD does not have the flaw. Try to keep up.
They also do not say that the things that can be read (like credentials and crypto-keys) can of course be used to "corrupt, modify or delete data". A shameless lie by misdirection.
It worked then, it will work now. Fanbois are stupid and do not learn.
Yes, but the users does not care about this. The users care whether their data is at risk of being "corrupted, modified or deleted" by this severe bug and yes, it very much is. Intel is using the tactics of lying by shameless misdirection here, apparently hoping that nobody understands what they are actually saying.
As Intel has been caught red-handed doing massively illegal things several times, like any good criminal enterprise they of course have a first-rate legal team.
This is on a computer. Apparently, you have no clue what that means. So to educate you (futile, I know): Computers can do tiny things very fast and very often and that results in not-tiny things. You argument is bogus.
Does not "corrupt, modify or delete data". Yes, nice. It can just steal your passwords and encryption keys and then use them to do that corruption, modification or deletion. A shameless lie by misdirection. Intel has no honor at all.
Ah, have you ever observed where a certain type of women gets their spending money from? Sure, "feminists" want men to pay for that without any compensation in the form of, say, sex or bearing children, but men are very much needed as work-slaves for these women.
With apologies to all women that do work to earn their living and that, unlike "feminists", do support equality.
It does not fuel the perverted fantasies of those promoting the "sex trafficking" fairy-tale. There really is no reality to their stories, why would they care about any real problem? They only care about what gets _them_ off.
And if that were true, it would be horrible. It is not. It is a big, organized lie that a lot of truly despicable people profit from. Check who paid for that "study". Also have a careful look at what they call "human trafficking" in the sex-work context. Very likely they include basically every non-domestic prostitute. That is a gross lie as basically none of them are "trafficked" when a sane definition of the word is used. You fell for an instance of what Goebbels called "the BIG lie".
Numbers from sane countries where prostitution is not illegal indicate that people actually forced into it are extremely rare and that usually one of the first customers calls the police to get them freed. That does, of course, only work if said customer does not need to fear prosecution.
Note that the need to work for a living and having selected this as the best option does not qualify as "having been forced into it". Also note that a driver or a bodyguard is not a "pimp", he is a helper employed by his boss, namely the small business owner working as a prostitute.
In essence, this problem does not exist, at least in the west and large parts of the rest of the world. This panic is primarily driven by the perverted fantasies of those promoting it. It has no connection to reality.
And in any sane country, that has happened a long time ago. It is also patently false to think that most women in prostitution are forced into it. Or at least not more forced than anybody that has to work for a living. They just look at their options and decide that it is this one they like best. In countries were prostitution is legal or decriminalized, it is extremely rare to find anybody forced into prostitution, and it is usually one of the first few customers (often the very first one) that calls the police and gets the victim freed. Of course that only works if said customer does not need to fear prosecution....
With the thoroughly insane idea of making prostitution illegal in the US, the prohibitionists get to design the narrative, and they are shamelessly lying to promote their evil agenda. Suddenly, everybody selling sex is "trafficked", when that is very far from the truth indeed. And suddenly there are incredible masses of underage prostitutes, when in actual reality they are very rare. The "average age entering the sex trade" becomes 13, when in actual reality it is more like 22. And do not forget that prostitution being illegal correlates with significantly higher rates of rape. This evil has to stop.
I thought most of these 419 scammers had faded away... but apparently not.
The morons that fall for this crap are still around, so the scammers are still around. Same as with all SPAM. Apparently, one in 10'000 SPAM emails gets a response and that is enough to make it worthwhile. If the idiots would stop answering, SPAM would have been long gone.
Not everything, but it is a good general assumption and usually quite true.
Who said anything about _one_ colocation place? And you seem to completely miss that you get all the outages of the cloud-provider for free, but with nothing you can do about them.
It is just bullshit hype. IBM wants a piece of that. For all real uses (except the increasingly discredited idea of crypto-"currencies"), standard revision-proof storage solves all the problems the blockchain solves and it does it better.
You do not need to build your own data-center in order to have your own infrastructure. Co-location of your servers is entirely fine for smaller companies. It wills till be your servers, under your administration. And that is what counts.
For the story: These people want to get rich on the current blockchain craze, nothing else. Ignore them.
As to the problem, best practices and liability are the only way. Yes, I am advocating jailing the CEO and CISO and possibly the board of companies that have large amounts of customer data stolen because of negligence. As an alternative, I would also accept insurance that automatically pays out $1000 to every custromer that has their data stolen (regardless of how much data it was and whether it was misused) and triple the actual damage to any customer that had their data stolen and can prove larger actual damage (losses + cost to fix) than $1000.
In order to be not negligent (note that I use simple negligence, not gross negligence) they will have to:
- Develop security critical software only with architects, designers and coders that are understand security (no more paying peanuts for coders...)
- Have external reviews of all security critical code by qualified security experts
- Have careful and adequate white-box penetration testing performed
- Not only fix the issued found in code-reviews and pen-tests, but also fix and investigate the root-causes, such as fire incompetent coders or outsourcers
Do this and the problem vanishes. The human race knows how to produce software that is extremely hard to break into. There are just no incentives to spend the money for it, and, despite my list above looking a bit bombastic, it would not actually be that expensive.
You just do not have enough control and you cannot make sure your core business survives an outage. In addition. it does not really save that much money, it often ends up costing significantly more. Sure, if you do your own infrastructure, you need some competent IT people to run it and make it work well, but maybe refrain from paying peanuts and your IT people will not be monkeys. In the end you do not only get a well-working in-house infrastructure, you get people that care about your company maintaining it and you actual get in-house expertise for all purchases. You just need to realize that IT is critical and that IT is much more important than any of your other functions. That is hard for the "business" side of things.
The organized dysfunction here is that the US has some characteristics of a police-state: The police can do arbitrary criminal things and very rarely are taken to task for it, while ordinary citizens doing the same things get grossly excessive prison sentences. This case here looks very much like criminally negligent manslaughter and should get the shooter and possibly his trainer or commander a few years behind bars. Instead, nothing will happen to them and that is just deeply wrong, but perpetuates the dysfunctionality.
I completely agree. On the book-side, it is not just steampunk, it affects every genre. Initially, even one of the "generic" ones may be fun, but after 2-3 you have seen it all and they become boring. Authors with original ideas and the talent to use them well are rare. And, unfortunately, authors with original ideas almost always seem to do significantly worse commercially that those producing generic re-hashes. Case in point: The Star Wars franchise seems to do very well commercially. Oh, well. At least with modern digital publishing on the book side, we get a lot of new authors that could not get their stuff published before and some are actually pretty good.