Or even better, when we see nothing at all and Richard M. Stallman is mysteriously elected President in a write-in landslide.
The more I think about this, the more this seems to be a nice solution. Get a bunch of geeks armed with minibar keys and flash cards. Once Mario and Yoshi are the leading candidates in 14 different states, the public will be sure to take voting security seriously.
Of course you will have to deal with a huge election fiasco along with finding enough people willing to commit election fraud.
Looking at some of the comments in his blog, the presence or absence of a warning box is kind of random. However, it might be linked to wether you open the pdf from your browser(no warning) or from your machine.
I got an interesting result on mine (under Linux) in that it asked me if I wanted to config my browser settings. I answered 'yes' and was then directed to a config page where I could input which browser command I wanted to use to launch my browser. It looks like this could easily be set to an intermediate script which could pop up a dialogue with the URL to confirm that you really want to open a link.
Really, it's using pdf supported code to undertake malicious actions. The code may or may not work in other readers depending on wether the specific feature has been implemented, however it is at least known for sure that Adobe Reader has the advanced support in place for the exploitable features.
No, don't you understand, the GP's draconian measures will help breed the child to subvert such measures in the future. If he starts now by hacking the admin password, using seperate browser profiles for dubious surfing, or maintaining a secret email address, he will be prepared tommorow to use Tor to post political dissents to his blog hosted on a machine in Sweden.
(I don't know wether this deserves a sarcasm tag. I want to go for it, but right now I have a little pessimistic voice inside me saying "Maybe... just maybe.")
FATHER: Son what is that your looking at on the Internet?
KID(startled): Dad, it's uhh... it's not what it looks like. I clicked on a link by accident, I didn't mean to go there.
FATHER: I'm not talking about the site; I don't care about that. I'm talking about your browser. How could you? How could you use IE? I thought I had raised you properly to surf porn with a secure browser, but I see where I've failed. This is the last straw; I'm putting Linux on the machine.
KID: But, what about my video games?
FATHER: You'll just have to spend all your time signing petitions for Linux ports or sacrifice a virgin to get them to run with Wine.
This is not the "free market" vs "regulation" problem you are framing it as. Although I generally lean towards libertarian, I do not agree with your argument in this case. The study in question showed that PRIVATE ownership of stations by local networks provided a better level of news coverage as opposed to PRIVATE ownership of stations by huge media corporations. The only regulation in question here is an attempt to loosen anti-monopoly measures dictating how many stations a media corp can own. The study in question supposedly provides hard evidence showing that there is no benefit to consumers in such an action. .
This is just stupid. I consider it a brute force attack at DVR owners, however, I still might miss this commercial thanks to the hidden 30 sec skip feature of the TiVo. (While watching a show: SELECT PLAY SELECT 3 0 SELECT. Your skip 30 min button will now do 30s instead. Repeat whenever an update resets functionality.) While these adds might be reach more DVR owners, they are going to need the most entertaining audio script in the world or they are going to be COMPLETELY boring for average TV viewers.
There is a far more preferable category of commercials targetted at DVR owners: The ones that make you want to stop for them. Some commercials you merely stop for because they either interest you(car commercials when you are car shopping) are are simply well scripted and entertaining(Some of the recent Mac commercials). Then there was also a novel series of commercials that GE was running which had a series of text heavy images that were shown for only a few frames each near the end of the commercial. The point was to create a humorous Easter Egg for DVR owners who would be inclined to pause and advance frame by frame.
There needs to be some kind of readily available interpretive programming language that allows people to start out programming in linear fashion, and later eases them into object-oriented coding.
As DHS points out, just by carrying off such a large scale private-public and multinational exercise creates allows the government to test policies, procedures and communications should an actual attack occur.
This, combined with the submitter's bad line:
a large-scale simulation of combined cyber-physical attacks on U.S. critical infrastructure
Honestly, what's with all hyphenated oxymorons? Normally I'm not a Grammar Nazi, but it feels like the left-right side of my grammar center just got a swift kick in the nuts.
Finally, I found it funny that at the bottom of TFA they had links such as "Digg this!" However, they also had a "Slashdot this!"
To which I reply. "You keep using that word, I do not think it means what you think it means."
*Note, I'm not a Nintendo Fanboy, but I do have a bias towards the Wii*
PS3 Haters: The PS3 costs too much Dude 1: Look at your game shelf, odds are you have 10-12 mediocre games there which total up to as much a PS3. Which would you rather have?
Me: A bit of misdirection since it doesn't factor in the extra 10-12 mediocre titles I'm eventually gonna end up with for the PS3
Dude 2: The 360 is only $400, but the PS3 is better with stuff like WiFi plus it's cheaper than any other BluRay player and then there's the cost of Xbox Live.
Me: I'll partly concede. The PS3 is a cheap BluRay drive, but I'm not sure I want a BR drive. I also don't feel that the PS3 will provide a $200 better gaming experience.
Dude 3: Consumer Electronics are getting more expensive, people are used to paying more for advanced technology such as the latest HiDef video camera.
Me: Ya, but that doesn't excuse Sony from having to justify costing more than its two competitors.
The specs for the PS3 keep changing, no HDMI support for the $499 version. Me: This point and resulting counterpoints are lame, I'm skipping it.
Conversely, not many people have High Definition televisions yet. Isn't it a bit early to start pushing so hard for a technology most can't afford? Me: Another semi-lame point. It is true that High Def is not an important feature for many people without the sets for it. I also believe that gameplay is always better than graphics. But I do not think that it is bad to start pushing HD on consoles. I think that HD saturation will become more common as the console's lifetime progresses. It's not like Regular Def TVs are left out (Unless you want to read the text in Dead Rising).
No "shock" in my Dual Shock. Is cheesy tilt-sensing worth the loss of force-feedback? Them: Not really in their control due to patent issues, tilt sensing is a shameless Wii rip off but it could be half decent, and Force Feedback is gimmicky anyways.
Me: I see them both as minor features, I don't think this is a huge issue. That said, the Wii gets movement sensing AND rumble.
Sony says they won't have enough consoles to ship for launch. Only 500,000, they say. Them: Console launches have never had 'enough' units. Plus, it's the units shipped by end of year that really matters. Also, supply shortages have been over dramatized before to create demand
Me: Fair point. Although I fo think that Sony might face a problem if supply is too short and people go in to pick up a Christmas present and end up walking out with a shiny new Wii since the 5 PS3's the store recieved have already been sold.
Sony is putting way too many figurative eggs in their metaphorical Blu-Ray basket. End users don't really care about formats so long as they work. Them: People said this about the PS2 and DVDs
Me: I'm not getting into a HD-DVD vs BluRay vs Good Old DVD debate.
Developers say that the PlayStation 3 is difficult to work with or that the Cell processor is a pain to program for. Dude 1: They said this about the PS2 Emotion Engine. Game developers should get used to the Cell and later PS3 games should look really good.
Me: Well, duh, they're going to get better at it if they use it a lot, but I don't see that doesn't mean its a good architecture.
Dude 2: Launch titles are gonna suck anyways, they'll get better at it, and programmers are whiny.
No comment
Dude 3: Off the record, I have heard of problems from developers. However, a hard architecture means great exclusives, buggy ports.
Me: Great exclusives are always nice, but I don't see Madden 0X running with less bugs on the XBox as a PS3 bonus.
Dude 4: On the flip side the XBox development kit could be to simple or "ametuer" plus the guys working on Full Auto 2 really like
*Intended to be read in the voice of a stoned hippie*
Iternet video is like totally cool and stuff and theres like a bunch of potentail in it and stuff, man. And, uh..., the FCC is like maybe gonna regulate it or something cause you know there could be like child porn and the FCC likes regulating stuff, cause you know this Internet video stuff kinda looks like TV and the FCC regulates that.
*end hipie*
Honestly this article is one of the most useless waste of 2 pages I have ever seen. The one time I RTFA and it turns out to contain less information than the ingredient list of the yogurt I'm eating.
TFPDF lists some ways to prevent this attack vector.
Configurable Probing Drivers should include this one anyways to be nice to laptop users. Give the users control of wether active probing is enabled or not. Access points send out announcements by default so you should be able to passively find most access points while conserving power and remaining unidentifiable.
Standardization Just make the time frame duration for probing requests part of the 802.11 standard and this problem goes away.
Automated Noise They say that this isn't a good solution since you'll eat up more power and bandwith. Additionally, signal processing algorithms are getting good at filtering out noise.
Driver Code Modification For the hacker elite. Get your own copy of some OSS wifi drivers and modify the timing in the probing algorithm so that you have your own unique fingerprint and no one knows what the heck you are running.
MAC Address Masquerading Another not so great solution. Their detection method maps the radio signal to your MAC. So if you have two devices with the same MAC both within scanning radius of the fingerprinter then it will get messed up. Still, not a real solution.
Driver Patching One of the weaknesses of the fingerprinting method is that it cannot tell what version driver you are running. More secure drivers and better driver patching mechanisms will narrow this attack vector in the future.
I'm not sure why the submitter brought up WiFi Fingerprinting since these two techniques address different issues. The technique described in the pdf refers to identifying a device driver by categorizing the probing algoritm used. Because the 802.11 spec is loose regarding the probing method, implementations between drivers are inconsistent enough to spot the differences using passive scanning. This allows attackers to then exploit the known vulnerabilities in the specific driver.
OTOH, WiFi Fingerprinting monitors the fluctuations in the radio output caused by minute differences in the hardware(.04% differences between transistors, etc.) which give every single piece of wifi hardware a unique signature. Personally, I'd say that WiFi fingerprinting is cooler and useful for something other than hacking since it can defeat MAC spoofing. I don't know why the submitter thinks that determining the driver used instead of unique characteristics of the hardware is better by a country mile.
It does appear to be legally binding by the tone of the analysis in the TFA.
You pretty much automatically have been granted a license to the listed patents and the only term of use is that you lose the protection if you try to file a patent infringement lawsuit against Microsoft concerning the standard.
Slashdot Mirror
It's not that. It's that he's buying the 'Extra Small' ones. (Sorry, I couldn't help it. It was too good an opportunity to pass up.)
The more I think about this, the more this seems to be a nice solution. Get a bunch of geeks armed with minibar keys and flash cards. Once Mario and Yoshi are the leading candidates in 14 different states, the public will be sure to take voting security seriously.
Of course you will have to deal with a huge election fiasco along with finding enough people willing to commit election fraud.
Looking at some of the comments in his blog, the presence or absence of a warning box is kind of random. However, it might be linked to wether you open the pdf from your browser(no warning) or from your machine.
I got an interesting result on mine (under Linux) in that it asked me if I wanted to config my browser settings. I answered 'yes' and was then directed to a config page where I could input which browser command I wanted to use to launch my browser. It looks like this could easily be set to an intermediate script which could pop up a dialogue with the URL to confirm that you really want to open a link.
Really, it's using pdf supported code to undertake malicious actions. The code may or may not work in other readers depending on wether the specific feature has been implemented, however it is at least known for sure that Adobe Reader has the advanced support in place for the exploitable features.
No, don't you understand, the GP's draconian measures will help breed the child to subvert such measures in the future. If he starts now by hacking the admin password, using seperate browser profiles for dubious surfing, or maintaining a secret email address, he will be prepared tommorow to use Tor to post political dissents to his blog hosted on a machine in Sweden.
(I don't know wether this deserves a sarcasm tag. I want to go for it, but right now I have a little pessimistic voice inside me saying "Maybe... just maybe.")
FATHER: Son what is that your looking at on the Internet?
KID(startled): Dad, it's uhh... it's not what it looks like. I clicked on a link by accident, I didn't mean to go there.
FATHER: I'm not talking about the site; I don't care about that. I'm talking about your browser. How could you? How could you use IE? I thought I had raised you properly to surf porn with a secure browser, but I see where I've failed. This is the last straw; I'm putting Linux on the machine.
KID: But, what about my video games?
FATHER: You'll just have to spend all your time signing petitions for Linux ports or sacrifice a virgin to get them to run with Wine.
This is not the "free market" vs "regulation" problem you are framing it as. Although I generally lean towards libertarian, I do not agree with your argument in this case. The study in question showed that PRIVATE ownership of stations by local networks provided a better level of news coverage as opposed to PRIVATE ownership of stations by huge media corporations. The only regulation in question here is an attempt to loosen anti-monopoly measures dictating how many stations a media corp can own. The study in question supposedly provides hard evidence showing that there is no benefit to consumers in such an action.
.
Pfft. The +Funny in GP podt goes all the way to +6.
This would make a good
This is just stupid. I consider it a brute force attack at DVR owners, however, I still might miss this commercial thanks to the hidden 30 sec skip feature of the TiVo. (While watching a show: SELECT PLAY SELECT 3 0 SELECT. Your skip 30 min button will now do 30s instead. Repeat whenever an update resets functionality.) While these adds might be reach more DVR owners, they are going to need the most entertaining audio script in the world or they are going to be COMPLETELY boring for average TV viewers.
There is a far more preferable category of commercials targetted at DVR owners: The ones that make you want to stop for them. Some commercials you merely stop for because they either interest you(car commercials when you are car shopping) are are simply well scripted and entertaining(Some of the recent Mac commercials). Then there was also a novel series of commercials that GE was running which had a series of text heavy images that were shown for only a few frames each near the end of the commercial. The point was to create a humorous Easter Egg for DVR owners who would be inclined to pause and advance frame by frame.
Umm... *cough*Pyhton*cough*
I think you mean
10 POST DUPE
20 GOTO 10
Are they ... going to ... fix up ... the choppy audio ... coming from ... Shatner's ... microphone?
Hmm... I seem to have voted for Cherry, Cherry, Lemon
This, combined with the submitter's bad line:
Honestly, what's with all hyphenated oxymorons? Normally I'm not a Grammar Nazi, but it feels like the left-right side of my grammar center just got a swift kick in the nuts.
Finally, I found it funny that at the bottom of TFA they had links such as "Digg this!"
However, they also had a "Slashdot this!"
To which I reply. "You keep using that word, I do not think it means what you think it means."
Beowulf cluster of these.
Oh, wait. I suppose this will be close enough.
Hmm... that's a strange way to pronounce ZMvnxjowi. My first instinct would be to pronunce it "Zee, Emm, vunks, jowee."
If you are experiencing irregularity in your expressions I would suggest using some laxatives.
Seconded!
Kesch has initiated a vote for a regime change.
(1)Democracy (2)Anarchy (3)Benevolent Dictatorship (4)CS_Dust (5)Remain in current system
*Note, I'm not a Nintendo Fanboy, but I do have a bias towards the Wii*
Dude 1: Look at your game shelf, odds are you have 10-12 mediocre games there which total up to as much a PS3. Which would you rather have?
Me: A bit of misdirection since it doesn't factor in the extra 10-12 mediocre titles I'm eventually gonna end up with for the PS3
Dude 2: The 360 is only $400, but the PS3 is better with stuff like WiFi plus it's cheaper than any other BluRay player and then there's the cost of Xbox Live.
Me: I'll partly concede. The PS3 is a cheap BluRay drive, but I'm not sure I want a BR drive. I also don't feel that the PS3 will provide a $200 better gaming experience.
Dude 3: Consumer Electronics are getting more expensive, people are used to paying more for advanced technology such as the latest HiDef video camera.
Me: Ya, but that doesn't excuse Sony from having to justify costing more than its two competitors.
Me: This point and resulting counterpoints are lame, I'm skipping it.
Me: Another semi-lame point. It is true that High Def is not an important feature for many people without the sets for it. I also believe that gameplay is always better than graphics. But I do not think that it is bad to start pushing HD on consoles. I think that HD saturation will become more common as the console's lifetime progresses. It's not like Regular Def TVs are left out (Unless you want to read the text in Dead Rising).
Them: Not really in their control due to patent issues, tilt sensing is a shameless Wii rip off but it could be half decent, and Force Feedback is gimmicky anyways.
Me: I see them both as minor features, I don't think this is a huge issue. That said, the Wii gets movement sensing AND rumble.
Them: Console launches have never had 'enough' units. Plus, it's the units shipped by end of year that really matters. Also, supply shortages have been over dramatized before to create demand
Me: Fair point. Although I fo think that Sony might face a problem if supply is too short and people go in to pick up a Christmas present and end up walking out with a shiny new Wii since the 5 PS3's the store recieved have already been sold.
Them: People said this about the PS2 and DVDs
Me: I'm not getting into a HD-DVD vs BluRay vs Good Old DVD debate.
Dude 1: They said this about the PS2 Emotion Engine. Game developers should get used to the Cell and later PS3 games should look really good.
Me: Well, duh, they're going to get better at it if they use it a lot, but I don't see that doesn't mean its a good architecture.
Dude 2: Launch titles are gonna suck anyways, they'll get better at it, and programmers are whiny.
No comment
Dude 3: Off the record, I have heard of problems from developers. However, a hard architecture means great exclusives, buggy ports.
Me: Great exclusives are always nice, but I don't see Madden 0X running with less bugs on the XBox as a PS3 bonus.
Dude 4: On the flip side the XBox development kit could be to simple or "ametuer" plus the guys working on Full Auto 2 really like
*Intended to be read in the voice of a stoned hippie*
Iternet video is like totally cool and stuff and theres like a bunch of potentail in it and stuff, man. And, uh..., the FCC is like maybe gonna regulate it or something cause you know there could be like child porn and the FCC likes regulating stuff, cause you know this Internet video stuff kinda looks like TV and the FCC regulates that.
*end hipie*
Honestly this article is one of the most useless waste of 2 pages I have ever seen. The one time I RTFA and it turns out to contain less information than the ingredient list of the yogurt I'm eating.
Drivers should include this one anyways to be nice to laptop users. Give the users control of wether active probing is enabled or not. Access points send out announcements by default so you should be able to passively find most access points while conserving power and remaining unidentifiable.
Just make the time frame duration for probing requests part of the 802.11 standard and this problem goes away.
They say that this isn't a good solution since you'll eat up more power and bandwith. Additionally, signal processing algorithms are getting good at filtering out noise.
For the hacker elite. Get your own copy of some OSS wifi drivers and modify the timing in the probing algorithm so that you have your own unique fingerprint and no one knows what the heck you are running.
Another not so great solution. Their detection method maps the radio signal to your MAC. So if you have two devices with the same MAC both within scanning radius of the fingerprinter then it will get messed up. Still, not a real solution.
One of the weaknesses of the fingerprinting method is that it cannot tell what version driver you are running. More secure drivers and better driver patching mechanisms will narrow this attack vector in the future.
I'm not sure why the submitter brought up WiFi Fingerprinting since these two techniques address different issues. The technique described in the pdf refers to identifying a device driver by categorizing the probing algoritm used. Because the 802.11 spec is loose regarding the probing method, implementations between drivers are inconsistent enough to spot the differences using passive scanning. This allows attackers to then exploit the known vulnerabilities in the specific driver.
OTOH, WiFi Fingerprinting monitors the fluctuations in the radio output caused by minute differences in the hardware(.04% differences between transistors, etc.) which give every single piece of wifi hardware a unique signature. Personally, I'd say that WiFi fingerprinting is cooler and useful for something other than hacking since it can defeat MAC spoofing. I don't know why the submitter thinks that determining the driver used instead of unique characteristics of the hardware is better by a country mile.
It does appear to be legally binding by the tone of the analysis in the TFA.
You pretty much automatically have been granted a license to the listed patents and the only term of use is that you lose the protection if you try to file a patent infringement lawsuit against Microsoft concerning the standard.
Who needs expansions when you have HORSE ARMOR! I don't know about you guys, but I spend hours walking around on my armored horse.
All the villagers are like "Oh, wow! Is that an armored horse. That is simply amazing. You are the coolest person ever."
My ego is so big now that I had to mod Oblivion to get more bag space so I could hold it all.
Honestly, it was the best 5 bucks I ever spent.