Actually I think it's mentioned in that it wasn't even the store that called the police, it was the customer. The loss prevention guy held the back door of the car open so that they couldn't drive away. The customer said "either call the police or get the f*ck off away from my car. The employee didn't budge and refused to call the police. At which point the customer called the cops and wanted to press charges for unlawful imprisonment. The cop showed up, asked for his ID and then arrested him when he refused to show ID.
That's assuming the user logs in on a regular basis. On a server that isn't a given. If you pull the password hashes, you can bruteforce all of the users passwords generally in under a week on a 1Ghz processor. With this tool it sounds like you could do it significantly faster. I'd probably use both approaches if I was trying to compromise a network.
I wasn't being sarcastic in the least. While I personally see the virtue in things like charity/welfare, I have a number of friends of different political/idealogical persuasions who see them as freeloaders and should be forced to fend for themselves. It was interesting to see it put in a perspective that they might be able to appreciate (ie it's really helping everyone in the end).
The problem with just playing your own mp3 list is that you're not exposed to anything new. I'm not a big fan of DJ'd web music for the very reasons you list. I prefer Pandora, which basically takes the Songs/Artists you like, deconstructs them according to their fundamental nature (like dynamic male vocalist, major key tonality, rhythm guitar, etc) and then using some complex math finds other types of music based on those properties. You then fine tune it using a like/dislike button. It actually works very well and I've found some new music that I really like. Plus I don't find myself fast-forwarding through songs like I do on Yahoo's music service.
Wait, I though the meme this week was to crucify Bush for *not* engaging in foreign affairs? I hate Bush as much as the next person, but it's like he's the freakin' boogieman or something...don't look under the bed or W will git ya!
Space Shuttle? That's creative. And that just barely beat out "Orbit Bus"! Though in retrospect they would've had people lining up to be on the maiden voyage (OB-1).
If you can read/etc/shadow you're root.. which means you aren't gaining anything by it. There are still arbitrary file disclosure vulnerabilities which *only* allow you to view files, not gain access to the server itself. If you pull the password hashes, you can then bruteforce the passwords and gain full root access to the system. Plus it would give you access to any *other* machines on the network which the admin used the same root password. Just rooting a single box wouldn't give you access to any other machines (assuming that didn't share the same initial vuln).
I don't know what kind of access you have to scientific journals but this abstract has a pretty good description of sperm mitochondria and how they are degraded via ubiquitinylation (a common degradation pathway)
There are mitochondria in both sperm and egg. Offspring generally inherit only the mothers mitochondria, though their have been a few reported cases paternal mitochondria inheritance. I believe the theory is that while they are present in both male and female gametes, the males mitochondria are degraded almost immediately after fertilization.
Wolbachia are kind of funky though. They can live inside of host cells (as an intracellular symbiont) which is a bit uncommon for most bacteria. They do weird things like infect female gametes (eggs) and kill male offspring, that way only infect females will be produced. Still doesn't take away from the fact that you have a bacterial genome integrated into it's host. But they're definitely not a run of the mill bacteria.
Unless the clip was used for scholarship, criticism, parody, or a number of other exceptions which fall under the fair use doctrine. And given the usage included commentary, fair use may very well apply. The clip is posted somewhere above. It doesn't fit any of the fair use exceptions: it's not a news clip or parody, it's being shown on a network (VH1) which is profiting from the commercial airtime and they used a substantial (if not all) of his youtube clip. The only thing they added to the clip was some guy who gave an intro "hey look at this clip from youtube".
I say good for them. If they have a legal right to tap someones phone and have obtained a warrant from a judge, then I'm glad that they're able to do the wiretapping as efficiently as possible. It's the warrantless wiretaps that I have a problem with.
I'm not suggesting touchscreens are a cure-all. They are better than a full keyboard. I agree with all of your points otherwise though, particularly about the hardened OS and network restrictions.
Fuck that, he's a US citizen first. He even swore an oath to defend the constitution. He, more than anyone, should know that by rubber stamping the administration's policies he was damaging this country. It's exactly this blind loyalty to our leaders that is taking us down a dangerous road.
did i say it was fool proof? No. Well you did say "it's about as secure as i can imagine" and frankly it's not even remotely secure. There is a good reason that kiosks don't normally come with keyboards and usb ports, because it allows the user to have too much access to secure effectively. With a USB drive you can bring your own tools with you like a bash shell, exploits, rootkits.
Your assuming the user has any execute permissions at all Yeah, that will be real useful system with no execute privileges. They won't be able run any applications! You might as well give them an etch-a-sketch. Restricting write access is pointless if they can run a binary from the USB drive; they'll just escalate privileges and change them as they like.
You accuse me of having no imagination, yet fail to put forward a more secure system Custom interface that only allows the user to perform a very strictly defined set of tasks (rudimentary word processing,email, web surfing with no scripting support), no USB port, and a keyboard with only alpha-numeric keys so user can't escape out of applications or drop out of X into the commandline or even better yet a touchscreen.
You don't have a very good imagination then. Adding a keyboard and USB significantly increases the risk, look at the TJ Max breach, they got access using a USB port on a kiosk (shouldn't have been on a trusted network but that's another issue). While I think the thin-client idea significantly helps, you could easily load a recent exploit via the USB drive then sniff traffic or perform other nastiness like ARP poisoning/MITM and grab usernames/passwords/CC info of those on the flight.
Hope they secure these well. With all the business travelers it would be a great place to drop a rootkit. From the article it sounds like each seat actually has a thin client, which would in effect reinstall the OS after each user/flight which is good from a security standpoint. But with access to a keyboard and USB hub, it still sounds a bit more vulnerable to abuse than a standard kiosk.
The problem is that compounds that are sensitive to oxidation make up ~80% of the dry weight of a cell (protein 55%, nucleic acids 24%). There is no way to put such a large percentage of the mass in a volume small enough to allow it to be resistant to freezing. It's like saying you're going to make a car roomier by putting 80% of it in the glove box. No, you'd need a system that could operate in an oxidizing environment rather than a reducing one.
The "vaccine origin" theory has pretty much been shown to be impossible. There were too many HIV strains already around at that time for it to have originated at the Winstar trials in Congo. Winstar supposedly also went back and found some of the original monkey cells that the vaccine was grown in and upon testing showed that they did not contain any HIV and that they were actually Macaque cells which can't be infected by HIV. Plus add in that HIV1 and HIV2 are believed to be derived from different SIV strains which infect different primates, which further makes that impossible.
Slashdot Mirror
Actually I think it's mentioned in that it wasn't even the store that called the police, it was the customer. The loss prevention guy held the back door of the car open so that they couldn't drive away. The customer said "either call the police or get the f*ck off away from my car. The employee didn't budge and refused to call the police. At which point the customer called the cops and wanted to press charges for unlawful imprisonment. The cop showed up, asked for his ID and then arrested him when he refused to show ID.
That's assuming the user logs in on a regular basis. On a server that isn't a given. If you pull the password hashes, you can bruteforce all of the users passwords generally in under a week on a 1Ghz processor. With this tool it sounds like you could do it significantly faster. I'd probably use both approaches if I was trying to compromise a network.
I wasn't being sarcastic in the least. While I personally see the virtue in things like charity/welfare, I have a number of friends of different political/idealogical persuasions who see them as freeloaders and should be forced to fend for themselves. It was interesting to see it put in a perspective that they might be able to appreciate (ie it's really helping everyone in the end).
Interesting to see poverty and welfare put in that context. I feel enlightened for having read it. Thanks.
The problem with just playing your own mp3 list is that you're not exposed to anything new. I'm not a big fan of DJ'd web music for the very reasons you list. I prefer Pandora, which basically takes the Songs/Artists you like, deconstructs them according to their fundamental nature (like dynamic male vocalist, major key tonality, rhythm guitar, etc) and then using some complex math finds other types of music based on those properties. You then fine tune it using a like/dislike button. It actually works very well and I've found some new music that I really like. Plus I don't find myself fast-forwarding through songs like I do on Yahoo's music service.
Wait, I though the meme this week was to crucify Bush for *not* engaging in foreign affairs? I hate Bush as much as the next person, but it's like he's the freakin' boogieman or something...don't look under the bed or W will git ya!
Sounds like a Kurosawa film.
There is some info on it at the Wikipedia page for mitochondrion:a tion_and_gene_inheritance t ochondrial_inheritance
d &Cmd=ShowDetailView&TermToSearch=12672125
http://en.wikipedia.org/wiki/Mitochondrion#Replic
http://en.wikipedia.org/wiki/Mitochondrial_DNA#Mi
I don't know what kind of access you have to scientific journals but this abstract has a pretty good description of sperm mitochondria and how they are degraded via ubiquitinylation (a common degradation pathway)
http://www.ncbi.nlm.nih.gov/sites/entrez?Db=pubme
Hope that helps.
Better all of you, than me!
There are mitochondria in both sperm and egg. Offspring generally inherit only the mothers mitochondria, though their have been a few reported cases paternal mitochondria inheritance. I believe the theory is that while they are present in both male and female gametes, the males mitochondria are degraded almost immediately after fertilization.
Wolbachia are kind of funky though. They can live inside of host cells (as an intracellular symbiont) which is a bit uncommon for most bacteria. They do weird things like infect female gametes (eggs) and kill male offspring, that way only infect females will be produced. Still doesn't take away from the fact that you have a bacterial genome integrated into it's host. But they're definitely not a run of the mill bacteria.
Well by all means enlighten us. Maybe you can start by pointing out which of the fair use provisions covers it.
I say good for them. If they have a legal right to tap someones phone and have obtained a warrant from a judge, then I'm glad that they're able to do the wiretapping as efficiently as possible. It's the warrantless wiretaps that I have a problem with.
Did you have a point to make, tool?
I'm not suggesting touchscreens are a cure-all. They are better than a full keyboard. I agree with all of your points otherwise though, particularly about the hardened OS and network restrictions.
It's especially amusing considering how insightful and well written the rest of his post is and then "roarshark" comes out of nowhere.
Fuck that, he's a US citizen first. He even swore an oath to defend the constitution. He, more than anyone, should know that by rubber stamping the administration's policies he was damaging this country. It's exactly this blind loyalty to our leaders that is taking us down a dangerous road.
Your assuming the user has any execute permissions at all Yeah, that will be real useful system with no execute privileges. They won't be able run any applications! You might as well give them an etch-a-sketch. Restricting write access is pointless if they can run a binary from the USB drive; they'll just escalate privileges and change them as they like.
You accuse me of having no imagination, yet fail to put forward a more secure system Custom interface that only allows the user to perform a very strictly defined set of tasks (rudimentary word processing,email, web surfing with no scripting support), no USB port, and a keyboard with only alpha-numeric keys so user can't escape out of applications or drop out of X into the commandline or even better yet a touchscreen.
You don't have a very good imagination then. Adding a keyboard and USB significantly increases the risk, look at the TJ Max breach, they got access using a USB port on a kiosk (shouldn't have been on a trusted network but that's another issue). While I think the thin-client idea significantly helps, you could easily load a recent exploit via the USB drive then sniff traffic or perform other nastiness like ARP poisoning/MITM and grab usernames/passwords/CC info of those on the flight.
Hope they secure these well. With all the business travelers it would be a great place to drop a rootkit. From the article it sounds like each seat actually has a thin client, which would in effect reinstall the OS after each user/flight which is good from a security standpoint. But with access to a keyboard and USB hub, it still sounds a bit more vulnerable to abuse than a standard kiosk.
The problem is that compounds that are sensitive to oxidation make up ~80% of the dry weight of a cell (protein 55%, nucleic acids 24%). There is no way to put such a large percentage of the mass in a volume small enough to allow it to be resistant to freezing. It's like saying you're going to make a car roomier by putting 80% of it in the glove box. No, you'd need a system that could operate in an oxidizing environment rather than a reducing one.
The "vaccine origin" theory has pretty much been shown to be impossible. There were too many HIV strains already around at that time for it to have originated at the Winstar trials in Congo. Winstar supposedly also went back and found some of the original monkey cells that the vaccine was grown in and upon testing showed that they did not contain any HIV and that they were actually Macaque cells which can't be infected by HIV. Plus add in that HIV1 and HIV2 are believed to be derived from different SIV strains which infect different primates, which further makes that impossible.
v ery I O/498BIOonline-essays/hw3/files/HW3-Villa.pdf
http://www.avert.org/origins.htm
http://en.wikipedia.org/wiki/Hiv#Origin_and_disco
http://guava.physics.uiuc.edu/~nigel/courses/598B