You seem to think this system is a bout justice and doing what is right. Or even just respecting the constitution. It is not, the occasional judge that is actually honest and understands things notwithstanding.
Computers help with computers and a very small and specific class of specialized problems that is a tiny sub-set of what people usually run into in their lives. Using computers in teaching is not beneficial even for most subjects you have to learn when getting a CS master degree. Pen & Paper and books for study of secondary material work far better.
I completely agree that the push for computers in education is just the usual greed and complete disregard for the harm done.
The problem here are parents that just do what most of the other parents around them do, without any strategic thinking. Kudos to you for giving your kid a real shot at what this world has to offer!
The best can do well if just given access to information. We had an excellent school library. I spend most of my free time there. It provided much more of the foundations I use today than school itself. For the rest, good teachers (still the exceptions) are as critical as pupils that have their head free to learn and are motivated to learn and for that, parents and their attitudes are extremely critical.
In parents, their education, their intelligence, their cultural background (and here race comes in strongly) determine what positive influence they can have on their children's academic achievements.
Indeed. Of course, learning about computers and what they can do has a place in school, but computer use should be restricted to these times. For the rest, as little distraction from the subject matter as possible is paramount.
I think the primary problem is not lazy students, it is lazy teachers and idiots that want the education system primarily to be cheap. Just more indicators for the end of a civilization. The clock is ticking for the west.
Also: Unless they have iterated encryption high enough as to make brute-forcing impractical, simply obtain one of the "verification mechanisms" and one of the QR-Codes and then throw all 2^36 values at it until you find something you like. Voila, immediate "authentic" fake, that will pass offline "validation".
In practice, this thing is far less secure than a QR-Code label. Instead of reprogramming the 36 bits, just stick a new label to the box, thereby reprogramming all bits, including a new signature.
This is just another utterly immoral attempt to force people to behave in ways some authoritarian POS wants them to. Whatever happened to freedom? The irony is of course that this comes form an "ethicist". Apparently one does not even need to know basic ethics to become an "ethicist".
Fascinating. What an epic fail. I guess Cisco really does not understand security at all. Or they have some collaboration with the NSA to make sure that compromising one system (the network admin's) is enough to get into everything.
In order to do things like authenticity securely, you need to sign the contained data cryptographically. The very least number of bits needed for a signature that can be called secure in any way is around 80 bits today, and you need the data to that is signed in addition.
I conclude that this thing offers no actual security whatsoever, besides the mechanism needed to write the bits.
I am not surprised. Businesses are never forward-thinking these days when it comes to technological advances that do not directly translate into more revenue.
The thing is, a telnet server can be done in very little code. An SSH server is a whole different sort of beast. And in fact, telnet is adequate here, just use a good password. If somebody is snooping on the connection, chances are they already know of the compromise and you are not telnetting into the box you think you are.
Indeed. Patching firmware when you have control over the hardware (or admin privileges) is something every self-respecting firmware coder and hacker can do. Not special. At all.
Not really. It is not that hard to modify router firmware. Maybe on the level of hacking a C64 ROM. I did that back when I was a kid. Sure, it may take you a few weeks and you need a box to experiment on and an a few common reverse-engineering tools, but that is basically it.
My theory is this this is on the top of the box, in contrast to "lowly persistent", which would be on the bottom of the box. It is always goo to know where in the vertical hierarchy everything is!
Well, that is the way people with an actual clue set it up. They may only ssh to the box with everything else off and a limited IP-range allowed for the source, or may use the serial port, via direct connection ("go there") or a hardened terminal server.
Unfortunately, many networking people are cheap and clueless and do what is most convenient. This is really the fault of management that hired cheaper than possible personnel, as has gotten so common in IT these days.
Slashdot Mirror
Only retards "know" this. In order to "know", you actually have to have evidence strong enough for a conviction.
You seem to think this system is a bout justice and doing what is right. Or even just respecting the constitution. It is not, the occasional judge that is actually honest and understands things notwithstanding.
Computers help with computers and a very small and specific class of specialized problems that is a tiny sub-set of what people usually run into in their lives. Using computers in teaching is not beneficial even for most subjects you have to learn when getting a CS master degree. Pen & Paper and books for study of secondary material work far better.
I completely agree that the push for computers in education is just the usual greed and complete disregard for the harm done.
Race often has some correlation with culture. But you are right, the important thing is culture.
The problem here are parents that just do what most of the other parents around them do, without any strategic thinking. Kudos to you for giving your kid a real shot at what this world has to offer!
The best can do well if just given access to information. We had an excellent school library. I spend most of my free time there. It provided much more of the foundations I use today than school itself. For the rest, good teachers (still the exceptions) are as critical as pupils that have their head free to learn and are motivated to learn and for that, parents and their attitudes are extremely critical.
In parents, their education, their intelligence, their cultural background (and here race comes in strongly) determine what positive influence they can have on their children's academic achievements.
Indeed. Of course, learning about computers and what they can do has a place in school, but computer use should be restricted to these times. For the rest, as little distraction from the subject matter as possible is paramount.
I think the primary problem is not lazy students, it is lazy teachers and idiots that want the education system primarily to be cheap. Just more indicators for the end of a civilization. The clock is ticking for the west.
Also: Unless they have iterated encryption high enough as to make brute-forcing impractical, simply obtain one of the "verification mechanisms" and one of the QR-Codes and then throw all 2^36 values at it until you find something you like. Voila, immediate "authentic" fake, that will pass offline "validation".
In practice, this thing is far less secure than a QR-Code label. Instead of reprogramming the 36 bits, just stick a new label to the box, thereby reprogramming all bits, including a new signature.
Just my thought. Cloning this is trivial.
You really, really do not understand crypto. At all. You do not even use the right language.
This is just another utterly immoral attempt to force people to behave in ways some authoritarian POS wants them to. Whatever happened to freedom? The irony is of course that this comes form an "ethicist". Apparently one does not even need to know basic ethics to become an "ethicist".
Fascinating. What an epic fail. I guess Cisco really does not understand security at all. Or they have some collaboration with the NSA to make sure that compromising one system (the network admin's) is enough to get into everything.
In order to do things like authenticity securely, you need to sign the contained data cryptographically. The very least number of bits needed for a signature that can be called secure in any way is around 80 bits today, and you need the data to that is signed in addition.
I conclude that this thing offers no actual security whatsoever, besides the mechanism needed to write the bits.
I am not surprised. Businesses are never forward-thinking these days when it comes to technological advances that do not directly translate into more revenue.
Kurzweil the idiot and Marvin the idiot are on this? Makes sense. Stupidity tends to cluster.
Thanks reinforcing my point that people that want this are exceptionally stupid. Your object example is priceless.
I may also add that nobody with the technology to do so will ever want to revive some frozen religious fuckups.
Indeed. "Problem located between keyboard and chair". The usual reason for such extreme security problems.
The thing is, a telnet server can be done in very little code. An SSH server is a whole different sort of beast. And in fact, telnet is adequate here, just use a good password. If somebody is snooping on the connection, chances are they already know of the compromise and you are not telnetting into the box you think you are.
Indeed. Patching firmware when you have control over the hardware (or admin privileges) is something every self-respecting firmware coder and hacker can do. Not special. At all.
That would be simple: Patch the firmware update to protect it. Not new, not special and not difficult to do for somebody competent.
Not really. It is not that hard to modify router firmware. Maybe on the level of hacking a C64 ROM. I did that back when I was a kid. Sure, it may take you a few weeks and you need a box to experiment on and an a few common reverse-engineering tools, but that is basically it.
My theory is this this is on the top of the box, in contrast to "lowly persistent", which would be on the bottom of the box. It is always goo to know where in the vertical hierarchy everything is!
Well, that is the way people with an actual clue set it up. They may only ssh to the box with everything else off and a limited IP-range allowed for the source, or may use the serial port, via direct connection ("go there") or a hardened terminal server.
Unfortunately, many networking people are cheap and clueless and do what is most convenient. This is really the fault of management that hired cheaper than possible personnel, as has gotten so common in IT these days.
Are songs now secret?
Hibernating mammals do not stop aging while they hibernate....