I will abstain from providing details that could easily be used to track down my real identity. Rest assured I've contributed plenty of security fixes to software you probably use on a daily basis.
Probably not an option. Since the OS decision is usually based upon what what software will be running on it.
which is why management should talk to security people BEFORE buying any software/hardware. just because you are fucked now, doesn't mean the solution has changed.
How can hospitals guard themselves against these attacks when perpetrators can adapt almost instantly to new security measures while hospitals are constrained by operating concerns?
even though NASA could have simply purchased already available software that other launch companies were using successfully, the agency decided to write its own.
NASA decided to use existing software that was known to work and was fully understood rather than rely on commercial software which could be total shit. besides, they wouldn't be purchasing the software, they would be licensing it which means they would likely have to pay $X for Y computers for Z years. also, what happens when they want to add feature XYZ and they are unable to? freedom isn't free... it's 207 million dollars.
well in the past couple weeks, AMD has dropped a whopping 150k lines of code to add to the kernel. the reason it's so obscenely large is it includes duplicate functionality that is already in the kernel and a lot of abstractions. therefore, the code is being worked on to rip out the redundant crap and actually use existing kernel functionality before it's accepted and thusly not making it into 4.6. after it's whittled down to just the code that's actually needed, it can be added to the kernel.
i'm not a fan of hackers but honestly, the NSA and FBI are much larger threats to our security. they have been and are actively trying to undermine the protection that encryption affords us. so how about we put the directors of the FBI and NSA at the top of that list?
This attack requires that the victim use an external power supply so that you can measure the power usage while they are performing the transfer. An unlikely attack configuration but smartphone makers could thwart all attack of this type by ensuring current draw while charging is consistent as to make it impossible to determine what the phone is doing.
people don't understand the difference between POLA and the way things are done now
the problem is that they don't understand the issue (nor want to) which in turn is why they refuse to invest in proper security. it is the lack of a feedback mechanism (pain/sound/etc) to indicate something is going wrong that allows them to continue on until they are completely fucked. effectively you have a person being told they are on the verge of a stroke and then replying that they don't need treatment because they feel fine. it's only until after they have a stroke that they want help.
Should app vendors get to scan our address book, read our messages, tap our mic, and collect our position 24/7?
no of course not.
that just a few of the things we have already lost.
those are just a few of things people have forfeit in the name of convenience. sure, i don't have the latest whizbang bullshit but i still have my privacy.
I fail to see why this needs FDA approval to get on the market
it doesn't. however, it does need FDA approval for it to be considered a medical device that could be covered by medical insurance. the same thing is true of wheelchairs.
Slashdot Mirror
I will abstain from providing details that could easily be used to track down my real identity. Rest assured I've contributed plenty of security fixes to software you probably use on a daily basis.
LOL. you are so full of shit. well done.
who said anything about FOSS? also, they didn't attack the medical software, they attacked the operating system.
so tell me, what is this alleged FOSS medical software that you exploited and how did you do it? kinda sounds like you a full of shit.
Probably not an option. Since the OS decision is usually based upon what what software will be running on it.
which is why management should talk to security people BEFORE buying any software/hardware. just because you are fucked now, doesn't mean the solution has changed.
Take some time to familiarize yourself with the economy of malware. This is not an operating system problem.
security is about reducing risk and windows is the highest risk operating system by a HUGE margin. it's not the entire solution but it is most of it.
How can hospitals guard themselves against these attacks when perpetrators can adapt almost instantly to new security measures while hospitals are constrained by operating concerns?
STOP USING WINDOWS!
even though NASA could have simply purchased already available software that other launch companies were using successfully, the agency decided to write its own.
NASA decided to use existing software that was known to work and was fully understood rather than rely on commercial software which could be total shit. besides, they wouldn't be purchasing the software, they would be licensing it which means they would likely have to pay $X for Y computers for Z years. also, what happens when they want to add feature XYZ and they are unable to? freedom isn't free... it's 207 million dollars.
I remember the Objective C toolchain was included on a version of Slackware I used to run in 1995. Maybe Google should switch to Objective C.
i don't know if you are a masochist or a sadist but you are definitely one of the two.
I'm looking forward to when Google finally decides to discontinue supporting Java.
LibreOffice would have enabled him to embezzle all $105 million. ;)
dictating your lives since you had lives to dictate.
i my iphone was curved before it was cool. ;)
well in the past couple weeks, AMD has dropped a whopping 150k lines of code to add to the kernel. the reason it's so obscenely large is it includes duplicate functionality that is already in the kernel and a lot of abstractions. therefore, the code is being worked on to rip out the redundant crap and actually use existing kernel functionality before it's accepted and thusly not making it into 4.6. after it's whittled down to just the code that's actually needed, it can be added to the kernel.
i'm not a fan of hackers but honestly, the NSA and FBI are much larger threats to our security. they have been and are actively trying to undermine the protection that encryption affords us. so how about we put the directors of the FBI and NSA at the top of that list?
This attack requires that the victim use an external power supply so that you can measure the power usage while they are performing the transfer. An unlikely attack configuration but smartphone makers could thwart all attack of this type by ensuring current draw while charging is consistent as to make it impossible to determine what the phone is doing.
"We don't want to end up like Nokia's handset business, which was once hugely profitable... then disappeared,"
then don't partner with Microsoft because that is exactly what killed Nokia's handset business.
Next Unit of Computing (NUC) is a small-form-factor (SFF) personal computer (PC) designed by Intel.
so intel released a machine for an obscure proprietary form factor. color me unimpressed.
someone forgot to put a cover sheet on the TPS report. ;)
people don't understand the difference between POLA and the way things are done now
the problem is that they don't understand the issue (nor want to) which in turn is why they refuse to invest in proper security. it is the lack of a feedback mechanism (pain/sound/etc) to indicate something is going wrong that allows them to continue on until they are completely fucked. effectively you have a person being told they are on the verge of a stroke and then replying that they don't need treatment because they feel fine. it's only until after they have a stroke that they want help.
the problem isn't that we don't know how to make good security, the problem is they are not willing to pay for good security.
I have good news and bad news. The good news is we got rid of our Elop problem! The bad news is that we had to sacrifice Australia to do it.
Should app vendors get to scan our address book, read our messages, tap our mic, and collect our position 24/7?
no of course not.
that just a few of the things we have already lost.
those are just a few of things people have forfeit in the name of convenience. sure, i don't have the latest whizbang bullshit but i still have my privacy.
don't trust them.
WHY THE HELL ARE YOU NOT MIGRATING TO SOMETHING ELSE??!!!? ...
The abuse will not stop!
at this point, i'm convinced they like the abuse.
I fail to see why this needs FDA approval to get on the market
it doesn't. however, it does need FDA approval for it to be considered a medical device that could be covered by medical insurance. the same thing is true of wheelchairs.
give someone a windows 7 PC and tell them the windows 10 upgrade will break it. that's psychological warfare on the cheap.