I've had pretty good success with the community version of Endian firewall, as well as the "commercial" 25 user license. It's got a handy little web accessible interface, can handle up to 6 interfaces (and I use all of them), has baked in snort capabilities, etc. Depending on the hardware route you go, it can support the high speeds you are looking for. I haven't conducted extensive bandwidth tests, however I was able to cap out my FiOS WAN connection at 35/15 Mbps with a 10/100 d-link NIC. Internal tests across gigabit NICs have hovered around 300Mbps, however there's several network devices in play that made it hard to determine the actual choke points. The community version is easily install and play-able, the commercial version as well (but with customization is soooooooo awesome). The downsides are that it doesn't come with a lot of hardware (wireless cards?), and to support that you have to "spin up a development server" to compile the driver into a binary for it to work. (yes, even with the commercial version *grumble*). The Endian company also sells hardware appliances, if you wanted to contact their sales team.
The community version is free, but offers only forum support.
The commercial version (25 user enterprise) runs about $450.
Or maybe all that leakage is just a huuuuuuuge false front of information? maybe they generate all that traffic and nonsense so that if something about this WAS leaked, no one would pay attention to it because everyone would be busy thinking "OUR inept and incompetent government, pull off a scheme like THAT? naaaaah"
Cisco switches iirc are designed to change into broadcast mode when the MAC table overfills.
Also, just because you are on a switch doesn't mean you can't see their traffic, it just means you have to work for it. Enable forwarding and use ARP spoofing to spoof the gateway and their PC and you'll see all the traffic on that segment.
"Students who paid the same tuition as every other student, yet cannot experience the same intellectual freedoms as
their peers
The reason that the NO. FORN classification exist, and especially in this circumstance, is that we cannot know exactly WHO paid for that tuition. Sure, the money flowed from their account to the school's, but was the student given a bag of cash and told to keep their eyes open?
I'm worried about all these highfallutin complex math equations enabling this thing to evolve into skynet, and these guys are worried that it's going to help people with their homework!?!
*adds another layer to tinfoil hat*
They give you about 20% back on your games (my estimate, never calculated when selling them my used games). This is why they are able to turn a huge profit, when they resell for almost the price as a brand new one.
It is so easily hackable as to be laughable. The only reason no one has capitalized on this is because there is no clear way to capitalize on this without being traced. I'd say ACORN has proven paper voter registration, Illegal immigrant, and other "ghost" voting so easily done that either electronic AND paper voting is laughable until we have something that is unique to each person to identify them, at which point we can accurately tally their votes. Unfortunately, once we do that we open all kinds of other cans of worms.
* Dilbert: I discovered a hole in our Internet security.
* PointyHairedBoss: What?!! Good grief, man! How could you put a hole in our Internet?
* Dilbert: I didn't _put_ it there. I _found_ it... And it's not...
* PointyHairedBoss: It's your job to fix that hole. I want you to work 24-7!
* Dilbert: Actually, that's _not_ my job. But I'll inform our network management group.
* PointyHairedBoss: PASSING THE BUCK! YOU'RE A BUCK PASSER!
* Dilbert: Forget it! There's no hole! It got better.
* PointyHairedBoss: That's more like it.
* PointyHairedBoss (thinking to himself): I fixed the Internet.
Taken from http://c2.com/cgi/wiki?PointyHairedBoss
Are to overwrite the harddrive 9 times, then degauss (which makes a loud POP and the magnetic information is GONE, and THEN to drill 6 holes through the drive.
The DoD policy memo can be found here http://www.drms.dla.mil/turn-in/usable/cpu-memo-jun01.pdf
Another critical aspect is the distance/lag between the operater and the drone. THAT, in my unprofession and entirely biased opinion (IANARAWAO "I Am Not Anything Remotely Associated With Aerospace Operations") is that major key. When ms count, operators can be seconds away.
And then there's the whole "what happens when the enemy deploys jammers that interrupt all frequencies" thing..
If you think the detainee's at GITMO are all actually innocent people (NOT people who proclaim their own innocence!) then you deserve the lot of them to be shipped to your front door and dropped off. Their files are full of sometimes pictures or eyewitness accounts placing them at the scenes of shooting, IEDing, or RPGing us or allied troops. A lot of them are also financiers. Also, a lot of them we can't send anywhere because right after our planes dropped them off, those "innocent" people would have bullets through the backs of their heads. There is no easy, simple solution to GITMO. They have to go somewhere, and I sure as hell don't want them in my backyard.
I just want to say that as someone who had worked on an NMCI team at the washington navy yard, you could not be more right. I never saw an enviroment anywhere else where the techs that were supposed to be running the network and FIXING it when it was down or broken (always) could huddle in their little room across from the server room and sit back and laugh and chill for hours on end until someone came to check up on them. Then it was a quick hush, and everyone getting up from their seats and walking across the hall to the server room to look busy. And without consequence! And this went on for the year that I worked there, probably has gone on for years, and I have no doubt will continue until the contract is rebid.
Worse for me, I can't even put that year of work experience on my resume without techs looking at each other and laughing knowingly when they see that I worked on the NMCI network, and then showing me the door.
DON'T GET SUCKERED INTO AN NMCI CONTRACT POSITION! it could be the end of your IT career.
You've described my experience with that system exactly. I'm sort of pensive to see how TRADOC will go about this, because I think $50 million is on the light side for a system that really works.
For instance: I regularly qualify as expert on the pop up range, and as a civilian have shot in the top 10 in international tournaments. With my weapon of choice (an AI-AWSM.338) I can put an infinite number of rounds inside the X ring at 200 meters. When using this system, shots are all over the place or don't register at all, the equipment is usually so worn out and uncared for that any recoil mechanism that the equipment originally shipped with is long gone, the scenarios would occasionally lock the system, and yes the contractors were oblivious. I don't think any one of them knew how to fix anything, just which buttons to press to start the system and get a simulation running. Using that system was a complete waste of time.
Well for one their bombers have been at it for quite a few years, and so making simple effective bombs are straightforward.
Next is that that way of jihad would have to be signed off by an imam (religious leader), and if the choice was letting a good muslim into heaven by way of jihad or blowing up some infidels, it's no easy choice.
Finally, remote control requires using some sort of transmission. Any jamming device or malfunctioning transmitter just rendered your bomb ineffective except by local detonation. Also, jamming cell phones, radio frequencies, and all other means of communication is pretty rude and tends to piss off the locals.
The problem with satellite tracking and iraq specifically is that insurgents typically move and plant during the night, when you can't really ID who is moving and why.
Tracking movement and conducting surveillance? easy as pie. Interpretation of that information into something usable? not so easy.
So my college was auctioning off its old networking equipment. Much to my surprise, I saw a nortel networks router shell, with the price tag of 25$. Thinking to my geek self that it bore further investigation in the event that it was, in fact, a full fledged router, I investigated. And nearly shit myself when I found it was not only the router, but all the expansion and fiber cards, and dual industrial grade failover sensing power supplies for operating a switched network at above 300,000PPS (packets per second). Shocked, I bought it on the spot.
This is the part of my story where I must claim I am in NO WAY responsible for my neighborhoods blackouts that coincide for when I start that beast.
And if anyone is interested in taking this off my hands, PLEASE contact me.
Because I went thru 5 months of hell, with endless USR techs, supervisors, and finally the VP of their wireless products line getting straightened out a problem with the 8054, where if a wireless phone was on the same channel (2.4GHz, US channel spectrum), the router would reset, hang, reset, hang.. and not change channels without a user manually changing it. Unfortunately, when rebooted the phones did automagically change channels, thus making a nice, vicious cycle. This was eventually fixed thru a firmware update, though I haven't reverse engineered the "new" firmware (it was a couple years ago) to figure out what the change was or how it was fixed. I haven't had that issue any longer (Now the issue is that after 5+ years of use, the router is dead. On their salary range, I doubt they are employing anyone with Jesus' power of Router Resurrection) Today, "Do you have a 2.4GHz wireless phone" is the first question I ask friends when I hear of a wireless router that reboots frequently.
He went wrong by not having the money all deposited in one account, then the lump sum moved over to a swiss bank account or something of that nature. I'd imagine the banks could freeze it at some point however.
Something like..
swiss account | temporary account | Many, many temporary accounts
He's done nothing constructive to date that I know of, he has caused nothing but trouble for everyone. Throw him in guantanamo bay! (the facility, not the actual bay itself.. I wouldn't want him to pollute that pristine caribean water)
Slashdot Mirror
I've had pretty good success with the community version of Endian firewall, as well as the "commercial" 25 user license. It's got a handy little web accessible interface, can handle up to 6 interfaces (and I use all of them), has baked in snort capabilities, etc. Depending on the hardware route you go, it can support the high speeds you are looking for. I haven't conducted extensive bandwidth tests, however I was able to cap out my FiOS WAN connection at 35/15 Mbps with a 10/100 d-link NIC. Internal tests across gigabit NICs have hovered around 300Mbps, however there's several network devices in play that made it hard to determine the actual choke points. The community version is easily install and play-able, the commercial version as well (but with customization is soooooooo awesome). The downsides are that it doesn't come with a lot of hardware (wireless cards?), and to support that you have to "spin up a development server" to compile the driver into a binary for it to work. (yes, even with the commercial version *grumble*). The Endian company also sells hardware appliances, if you wanted to contact their sales team.
The community version is free, but offers only forum support.
The commercial version (25 user enterprise) runs about $450.
Both can be found at: http://www.endian.com/
Or maybe all that leakage is just a huuuuuuuge false front of information? maybe they generate all that traffic and nonsense so that if something about this WAS leaked, no one would pay attention to it because everyone would be busy thinking "OUR inept and incompetent government, pull off a scheme like THAT? naaaaah"
Cisco switches iirc are designed to change into broadcast mode when the MAC table overfills. Also, just because you are on a switch doesn't mean you can't see their traffic, it just means you have to work for it. Enable forwarding and use ARP spoofing to spoof the gateway and their PC and you'll see all the traffic on that segment.
So google Erin Andrews ;)
(if you've been hiding in a cave for the last week, your flash player does NOT need to be updated!)
Can it find Sarah Connor?
"Students who paid the same tuition as every other student, yet cannot experience the same intellectual freedoms as their peers
The reason that the NO. FORN classification exist, and especially in this circumstance, is that we cannot know exactly WHO paid for that tuition. Sure, the money flowed from their account to the school's, but was the student given a bag of cash and told to keep their eyes open?
I'm worried about all these highfallutin complex math equations enabling this thing to evolve into skynet, and these guys are worried that it's going to help people with their homework!?! *adds another layer to tinfoil hat*
They give you about 20% back on your games (my estimate, never calculated when selling them my used games). This is why they are able to turn a huge profit, when they resell for almost the price as a brand new one.
It is so easily hackable as to be laughable. The only reason no one has capitalized on this is because there is no clear way to capitalize on this without being traced. I'd say ACORN has proven paper voter registration, Illegal immigrant, and other "ghost" voting so easily done that either electronic AND paper voting is laughable until we have something that is unique to each person to identify them, at which point we can accurately tally their votes. Unfortunately, once we do that we open all kinds of other cans of worms.
* Dilbert: I discovered a hole in our Internet security. * PointyHairedBoss: What?!! Good grief, man! How could you put a hole in our Internet? * Dilbert: I didn't _put_ it there. I _found_ it... And it's not... * PointyHairedBoss: It's your job to fix that hole. I want you to work 24-7! * Dilbert: Actually, that's _not_ my job. But I'll inform our network management group. * PointyHairedBoss: PASSING THE BUCK! YOU'RE A BUCK PASSER! * Dilbert: Forget it! There's no hole! It got better. * PointyHairedBoss: That's more like it. * PointyHairedBoss (thinking to himself): I fixed the Internet. Taken from http://c2.com/cgi/wiki?PointyHairedBoss
Are to overwrite the harddrive 9 times, then degauss (which makes a loud POP and the magnetic information is GONE, and THEN to drill 6 holes through the drive. The DoD policy memo can be found here http://www.drms.dla.mil/turn-in/usable/cpu-memo-jun01.pdf
Another critical aspect is the distance/lag between the operater and the drone. THAT, in my unprofession and entirely biased opinion (IANARAWAO "I Am Not Anything Remotely Associated With Aerospace Operations") is that major key. When ms count, operators can be seconds away.
And then there's the whole "what happens when the enemy deploys jammers that interrupt all frequencies" thing..
Wow. Every time I read that document, I get chills.
VIVA LE REVOLUCION!
If you think the detainee's at GITMO are all actually innocent people (NOT people who proclaim their own innocence!) then you deserve the lot of them to be shipped to your front door and dropped off. Their files are full of sometimes pictures or eyewitness accounts placing them at the scenes of shooting, IEDing, or RPGing us or allied troops. A lot of them are also financiers. Also, a lot of them we can't send anywhere because right after our planes dropped them off, those "innocent" people would have bullets through the backs of their heads. There is no easy, simple solution to GITMO. They have to go somewhere, and I sure as hell don't want them in my backyard.
I just want to say that as someone who had worked on an NMCI team at the washington navy yard, you could not be more right. I never saw an enviroment anywhere else where the techs that were supposed to be running the network and FIXING it when it was down or broken (always) could huddle in their little room across from the server room and sit back and laugh and chill for hours on end until someone came to check up on them. Then it was a quick hush, and everyone getting up from their seats and walking across the hall to the server room to look busy. And without consequence! And this went on for the year that I worked there, probably has gone on for years, and I have no doubt will continue until the contract is rebid. Worse for me, I can't even put that year of work experience on my resume without techs looking at each other and laughing knowingly when they see that I worked on the NMCI network, and then showing me the door. DON'T GET SUCKERED INTO AN NMCI CONTRACT POSITION! it could be the end of your IT career.
Because it's painfully clear your don't understand computer forensics either.
You've described my experience with that system exactly. I'm sort of pensive to see how TRADOC will go about this, because I think $50 million is on the light side for a system that really works. For instance: I regularly qualify as expert on the pop up range, and as a civilian have shot in the top 10 in international tournaments. With my weapon of choice (an AI-AWSM .338) I can put an infinite number of rounds inside the X ring at 200 meters. When using this system, shots are all over the place or don't register at all, the equipment is usually so worn out and uncared for that any recoil mechanism that the equipment originally shipped with is long gone, the scenarios would occasionally lock the system, and yes the contractors were oblivious. I don't think any one of them knew how to fix anything, just which buttons to press to start the system and get a simulation running. Using that system was a complete waste of time.
Well for one their bombers have been at it for quite a few years, and so making simple effective bombs are straightforward. Next is that that way of jihad would have to be signed off by an imam (religious leader), and if the choice was letting a good muslim into heaven by way of jihad or blowing up some infidels, it's no easy choice. Finally, remote control requires using some sort of transmission. Any jamming device or malfunctioning transmitter just rendered your bomb ineffective except by local detonation. Also, jamming cell phones, radio frequencies, and all other means of communication is pretty rude and tends to piss off the locals.
Now instead of elemental shammies, I'll bet we'll see multiboxers using enhancement shammies instead and praying for the random big crits.
The problem with satellite tracking and iraq specifically is that insurgents typically move and plant during the night, when you can't really ID who is moving and why. Tracking movement and conducting surveillance? easy as pie. Interpretation of that information into something usable? not so easy.
I had exactly the same thought. Either the judge isn't mentally in this century, or he's been paid some amount or favor to come to this conclusion.
So my college was auctioning off its old networking equipment. Much to my surprise, I saw a nortel networks router shell, with the price tag of 25$. Thinking to my geek self that it bore further investigation in the event that it was, in fact, a full fledged router, I investigated. And nearly shit myself when I found it was not only the router, but all the expansion and fiber cards, and dual industrial grade failover sensing power supplies for operating a switched network at above 300,000PPS (packets per second). Shocked, I bought it on the spot. This is the part of my story where I must claim I am in NO WAY responsible for my neighborhoods blackouts that coincide for when I start that beast. And if anyone is interested in taking this off my hands, PLEASE contact me.
Because I went thru 5 months of hell, with endless USR techs, supervisors, and finally the VP of their wireless products line getting straightened out a problem with the 8054, where if a wireless phone was on the same channel (2.4GHz, US channel spectrum), the router would reset, hang, reset, hang.. and not change channels without a user manually changing it. Unfortunately, when rebooted the phones did automagically change channels, thus making a nice, vicious cycle. This was eventually fixed thru a firmware update, though I haven't reverse engineered the "new" firmware (it was a couple years ago) to figure out what the change was or how it was fixed. I haven't had that issue any longer (Now the issue is that after 5+ years of use, the router is dead. On their salary range, I doubt they are employing anyone with Jesus' power of Router Resurrection) Today, "Do you have a 2.4GHz wireless phone" is the first question I ask friends when I hear of a wireless router that reboots frequently.
He went wrong by not having the money all deposited in one account, then the lump sum moved over to a swiss bank account or something of that nature. I'd imagine the banks could freeze it at some point however.
Something like..
swiss account
|
temporary account
|
Many, many temporary accounts
He's done nothing constructive to date that I know of, he has caused nothing but trouble for everyone. Throw him in guantanamo bay! (the facility, not the actual bay itself.. I wouldn't want him to pollute that pristine caribean water)