Well as having been someone who's gone through a complete trial against the Department of Justice I can tell you what will happen in layman's terms regardless of what expert(s) is/are called. One no one will want to serve as a juror so you will get frustrated persons as jurors. Secondly she won't get a technically competent jury so their attitude will be more or less: "Is this damned thing over with". Thirdly because her jury won't be technical no matter what someone here thinks, the jury will likely be lost in technological talk that will seem foreign to them. Outcome... No one will truly care. Bottom line reality. It may be nice for/.'ers and people across the technology world to think that something big will come out of this case, and it will, because either way both sides win and lose so the write up will be favorable to whomever in either circumstance. That's the reality of it all. Consider this posting a trollish one if you care to, but facts are facts, no one on the jury will care to be there, they will be stuck like deers in headlights no matter how its explained to them, and the outcome won't make much of a difference to the world at the end of it all.
The problem with vendors closing security holes is, they often can't keep up with the volume of it.
In the case of MS, how often do they close one hole only to open up another. I don't want to throw OS' around, but look at team OpenBSD, regardless of the smug attitudes, you have to give Theo and his group credit. They don't release for the sake of keeping up with the Jones'. They're methodical and accurately screening and scrutinizing what their OS does, what its supposed to do and how it does it.
The issue with vendors are, they're in a race to meet stockholder/shareholder demands and are often releasing whatever they can to meet sales forecasts. This leads to shoddy designs and implementations. If you ask me, some of these vendors should be getting fined by governments based on the severity of their holes. I'm sure with that kind of pressure, they'd be more reluctant to release cruddy programs as opposed to hurrying something insecure out the door.
If I were a vendor and all of the sudden I was getting fined for not taking security seriously, I would put on a big old about face and audit the hell out of my code. But what incentives, qualms, repercussions face vendors now? None. People will bitch about MS' security yet go out and buy Vista. How about people start taking things very serious and start suing some of these vendors... "My personal information was compromised because of shoddy program X class action lawsuits." Hit em where it hurts, eventually they will either listen or go broke.
I could see them making a nice chuck of change. Think about the amount of travelers alone who have iPod's... Imagine a USB based kiosk at an airport with movies for downloads. Or... Even a USB next to your chair which would allow you to rent/buy movies at will... How many people get on a plain/train each day... All you need is a fraction to buy a movie. Its apparent whoever wrote the article is not thinking out of the box.
Obviously you misinterpretted...
Author states you can't do this in Windows. Commenters point out that yes, yes you can. Author retorts that you can't do it as easily. Easily, shmeasily. You only have to work out how to do it once.
You can create something undetectable for the moment in Windows. Diff between Windows and Linux is, its easier to find on Windows then it would be on Linux...
* Author states his method can be configured to be undetectable. Highly doubtful; unless it uses a vastly different algorithm every time
Apparently you didn't look at the script.
I could probably develop a heuristic to detect it, and I don't even specialise in this kind of thing. Of course, I will acknowledge the difficulty in detecting it the first time:)
The heuristic used was based of time as a proof of concept. I could have used a random number and chosen a random file period.
Here is the issue with that... Networks suck at times. How would you feel if you're paying $60.00 per month but the connection between broadcaster and your provider keeps having issues? Its not similar to cable in the sense that the only issues you would have with cable would be with the provider. You could call them bitch and moan. Try calling them because some backbone went down and see what they'll tell you. So while you wait for someone outside your cable company to fix their network, I will bitch and moan to my cable provider then seek a month of something for free from them, while you wait...
Browsing through some of the posts here, I'm seeing how people tend to forget the financial aspect of botnets. Spam, malware is big business (obviously) so its no surprise that can become the online equivalent to a Columbian drug war without the murders and guns. There is huge business in bots and whats sad is, the low man on the totem pole is often some American company who's advertisements are being spammed (for the spammers). Vint Cerf stated there are millions of infected machines, I don't know about those numbers, but I can tell you that if I was involved in (dis)organized crime, why should I re-invent the wheel when I could re-program my own bots to take over others' cruddily created bots. This falls in line with a document I wrong (Ubuntu and the Destruction of the Internet) where my logic is, "are you sure you want grandma using Linux"?... With e-Criminals getting savvier, how long will it be before the Internet truly becomes the Wild West... Some may think its not a big deal, but when there are finances involved, that can escalate to physical crimes (shootings, murder, etc.) and its happened a few times where (dis)organized idjits stealing e-money from games were caught up in real life incidents for stepping over "turf".
On the flip side of the coin... Take into the consideration the fact that not everyone is Internet Savvy enough to watch TV via their machines. For broadcasting companies to think I will sit down on my monitor and watch television there is absurd. For one, me personally, my flat screen has a bigger and better picture. Secondly bear in mind not everyone has a high speed connection, so just because companies are throwing fiber to the home, it doesn't mean that everyone will be jumping on the bandwagon. Not to mention in certain areas, high speed connections are unfeasible. It would be nice to have it as an option, but would a disastrous business model for any broadcaster to ditch the ways of old for the unstable, illogical ways of new just because they're hip at the moment. Come on now, how many hip technologies have become dinosaurs before they were even of the production assembly line... Laser Disc, Betamax, (dare I say... Blu Ray)... Not EVERYONE wants a digital life...
On an early Monday morning, all I want to know is 10Tb is an interesting number. That's a megabit for every second in a year -- there are roughly 10 million seconds per year. That's enough to store a live DivX video stream Does that translate to faster porn downloads or not *sheesh*
I once wrote a document called Ghost in the Shell which dealt with crypto/stego. I wonder if I can sue Google for stealing the concept name in order to pay back the anime producer who will sue me after they get wind of it..
With all of the information people are throwing out there about themselves, they deserve to have it used against them in any shape form or fashion. If you want to be the moron who posts everything about yourself on YouTube, MySpace, Facebook and all those other sites, you have nothing but yourself to blame. They fired me for using drugs! If you're the moron with a picture of you happily holding a bong on MySpace and expected no one but friends to see it, you shot your own self in the foot. Its amazing the level of stupidity some people can get to then come back around and point the finger at everyone but themselves. On other notes... Information pertaining to just about anything on the planet is already readily available. Court records, financial information... All this misuse/abuse of information is made possible by the same people bitching who often turn their cheeks when future misuse in the making is present. You didn't say nothing then... Why bother bitching now... YOU GAVE AWAY YOUR RIGHTS TO PRIVACY BY NOT ACTING BEFORE WHY BITCH ABOUT IT NOW?
I shall now make this article waste a few minutes of my life. But on a rebounding note, I shall sue Slashdot for using 10 seconds of my time and bandwidth in getting me to make a pointless response.
I think the new "fleet" (if I could call them that) of sysadmins are too inexperienced and are often thrown into a wild west of "our infrastructure works like this!... With an infrastructure that many times hasn't been planned out too well, is highly misconfigured, is a nightmare in progress. Often those sysadmins will have to adjust to someone else's tailored system and will fail miserably...
I've seen it for years on end, horribly designed systems with no documentation, horribly managed systems butchered to perform a task. No two systems will be alike and I believe its this same scenario which makes or breaks an admin... However with the newer sysadmins coming around, and I've seen plenty in the past 3-4 years, they're inexperienced... Running Linux @ home or your own personal webserver does not make you a bonafide sysadmin. At least not in my little space... I know admins who strictly know perl... Good for you. Now go fix this legacy system which by the way doesn't have perl on it, and you're not allowed to install perl... Would you know how to do so in say awk and sed? To me a sysadmin knows things from the core up, not from a yum install *something*, apt-get *make-me-look-nice*, or whatever other command.
Just my two centavos
According to the article... Embarrassed state officials are scrambling to fix the problem. Does this mean they'll revamp the fuzzy math to attract more (*cough* suckers*) wonderful customers?
Cost of Solar Powered Hardware $15,000 Tax rebate and reimbursement from state (50%) $7,500 $7,500 over 10 years $750
Hidden truths... Property tax increase.1% Environmental fuzzy save the birds you're killing from the reflection of your solar panels tax.2% New-soon-to-be-imposed "Green Tax".1%
So on a reverse Mastercard like commercial for the state and greased pocket goons: Cost of Solar Powered Hardware $15,000 Suckered homeowners 10,000 Revenue in our pockets from suckered homeowners... Priceless
So giving away customers' data is the right of the first amendment... That would mean companies like TJX whose data was compromised could argue that it wasn't their responsibility to protect the customer's data since it was distributed in free speech fashion as well no...
Think about the logics of the argument...
Verizon: "We gave the data away because its our first amendment right. We can do as we see fit..."
TJX: "We weren't compromised. We gave your personal data away. Its our first amendment right."
How many companies will follow this misleading notion. And how many greased-pocket (monkey)judges will side with VZ on this. This country is becoming one big capitalist wild west where privacy means nothing.
After she's done suing MySpace, she can sue Anheuser Busch for making the beer... ABC showing cool commercials, and so on... I say sue em all. Then sue/. for posting her (by then) copyrighted name without her consent.
Actually, I develop stuff for myself out of... "I wonder if I can automate this so I won't have to do it again..." Typical lazy sysadmin stuff. Most of the times I end up creating my own little program of sorts and at times I usually post stupid/handy little scripts. Does it qualify for open source, perhaps. Maybe that's why I'm always bored, I've been automating my work for too long
Slashdot Mirror
Well as having been someone who's gone through a complete trial against the Department of Justice I can tell you what will happen in layman's terms regardless of what expert(s) is/are called. One no one will want to serve as a juror so you will get frustrated persons as jurors. Secondly she won't get a technically competent jury so their attitude will be more or less: "Is this damned thing over with". Thirdly because her jury won't be technical no matter what someone here thinks, the jury will likely be lost in technological talk that will seem foreign to them. Outcome... No one will truly care. Bottom line reality. It may be nice for /.'ers and people across the technology world to think that something big will come out of this case, and it will, because either way both sides win and lose so the write up will be favorable to whomever in either circumstance. That's the reality of it all. Consider this posting a trollish one if you care to, but facts are facts, no one on the jury will care to be there, they will be stuck like deers in headlights no matter how its explained to them, and the outcome won't make much of a difference to the world at the end of it all.
The problem with vendors closing security holes is, they often can't keep up with the volume of it.
In the case of MS, how often do they close one hole only to open up another. I don't want to throw OS' around, but look at team OpenBSD, regardless of the smug attitudes, you have to give Theo and his group credit. They don't release for the sake of keeping up with the Jones'. They're methodical and accurately screening and scrutinizing what their OS does, what its supposed to do and how it does it.
The issue with vendors are, they're in a race to meet stockholder/shareholder demands and are often releasing whatever they can to meet sales forecasts. This leads to shoddy designs and implementations. If you ask me, some of these vendors should be getting fined by governments based on the severity of their holes. I'm sure with that kind of pressure, they'd be more reluctant to release cruddy programs as opposed to hurrying something insecure out the door.
If I were a vendor and all of the sudden I was getting fined for not taking security seriously, I would put on a big old about face and audit the hell out of my code. But what incentives, qualms, repercussions face vendors now? None. People will bitch about MS' security yet go out and buy Vista. How about people start taking things very serious and start suing some of these vendors... "My personal information was compromised because of shoddy program X class action lawsuits." Hit em where it hurts, eventually they will either listen or go broke.
I could see them making a nice chuck of change. Think about the amount of travelers alone who have iPod's... Imagine a USB based kiosk at an airport with movies for downloads. Or... Even a USB next to your chair which would allow you to rent/buy movies at will... How many people get on a plain/train each day... All you need is a fraction to buy a movie. Its apparent whoever wrote the article is not thinking out of the box.
You mean I could no longer get a job with my pimped geocities/xoom/fortunecity skills?
Obviously you misinterpretted... Author states you can't do this in Windows. Commenters point out that yes, yes you can. Author retorts that you can't do it as easily. Easily, shmeasily. You only have to work out how to do it once. You can create something undetectable for the moment in Windows. Diff between Windows and Linux is, its easier to find on Windows then it would be on Linux... * Author states his method can be configured to be undetectable. Highly doubtful; unless it uses a vastly different algorithm every time Apparently you didn't look at the script. I could probably develop a heuristic to detect it, and I don't even specialise in this kind of thing. Of course, I will acknowledge the difficulty in detecting it the first time :)
The heuristic used was based of time as a proof of concept. I could have used a random number and chosen a random file period.
They could never pull that off in NY... Those kindergarteners don't play that!
Here is the issue with that... Networks suck at times. How would you feel if you're paying $60.00 per month but the connection between broadcaster and your provider keeps having issues? Its not similar to cable in the sense that the only issues you would have with cable would be with the provider. You could call them bitch and moan. Try calling them because some backbone went down and see what they'll tell you. So while you wait for someone outside your cable company to fix their network, I will bitch and moan to my cable provider then seek a month of something for free from them, while you wait...
Browsing through some of the posts here, I'm seeing how people tend to forget the financial aspect of botnets. Spam, malware is big business (obviously) so its no surprise that can become the online equivalent to a Columbian drug war without the murders and guns. There is huge business in bots and whats sad is, the low man on the totem pole is often some American company who's advertisements are being spammed (for the spammers). Vint Cerf stated there are millions of infected machines, I don't know about those numbers, but I can tell you that if I was involved in (dis)organized crime, why should I re-invent the wheel when I could re-program my own bots to take over others' cruddily created bots. This falls in line with a document I wrong (Ubuntu and the Destruction of the Internet) where my logic is, "are you sure you want grandma using Linux"?... With e-Criminals getting savvier, how long will it be before the Internet truly becomes the Wild West... Some may think its not a big deal, but when there are finances involved, that can escalate to physical crimes (shootings, murder, etc.) and its happened a few times where (dis)organized idjits stealing e-money from games were caught up in real life incidents for stepping over "turf".
On the flip side of the coin... Take into the consideration the fact that not everyone is Internet Savvy enough to watch TV via their machines. For broadcasting companies to think I will sit down on my monitor and watch television there is absurd. For one, me personally, my flat screen has a bigger and better picture. Secondly bear in mind not everyone has a high speed connection, so just because companies are throwing fiber to the home, it doesn't mean that everyone will be jumping on the bandwagon. Not to mention in certain areas, high speed connections are unfeasible. It would be nice to have it as an option, but would a disastrous business model for any broadcaster to ditch the ways of old for the unstable, illogical ways of new just because they're hip at the moment. Come on now, how many hip technologies have become dinosaurs before they were even of the production assembly line... Laser Disc, Betamax, (dare I say... Blu Ray)... Not EVERYONE wants a digital life...
On an early Monday morning, all I want to know is 10Tb is an interesting number. That's a megabit for every second in a year -- there are roughly 10 million seconds per year. That's enough to store a live DivX video stream Does that translate to faster porn downloads or not *sheesh*
I once wrote a document called Ghost in the Shell which dealt with crypto/stego. I wonder if I can sue Google for stealing the concept name in order to pay back the anime producer who will sue me after they get wind of it..
With all of the information people are throwing out there about themselves, they deserve to have it used against them in any shape form or fashion. If you want to be the moron who posts everything about yourself on YouTube, MySpace, Facebook and all those other sites, you have nothing but yourself to blame. They fired me for using drugs! If you're the moron with a picture of you happily holding a bong on MySpace and expected no one but friends to see it, you shot your own self in the foot. Its amazing the level of stupidity some people can get to then come back around and point the finger at everyone but themselves. On other notes... Information pertaining to just about anything on the planet is already readily available. Court records, financial information... All this misuse/abuse of information is made possible by the same people bitching who often turn their cheeks when future misuse in the making is present. You didn't say nothing then... Why bother bitching now... YOU GAVE AWAY YOUR RIGHTS TO PRIVACY BY NOT ACTING BEFORE WHY BITCH ABOUT IT NOW?
I shall now make this article waste a few minutes of my life. But on a rebounding note, I shall sue Slashdot for using 10 seconds of my time and bandwidth in getting me to make a pointless response.
far from it ... mys*ace/dvlzadvcte
I think the new "fleet" (if I could call them that) of sysadmins are too inexperienced and are often thrown into a wild west of "our infrastructure works like this!... With an infrastructure that many times hasn't been planned out too well, is highly misconfigured, is a nightmare in progress. Often those sysadmins will have to adjust to someone else's tailored system and will fail miserably... I've seen it for years on end, horribly designed systems with no documentation, horribly managed systems butchered to perform a task. No two systems will be alike and I believe its this same scenario which makes or breaks an admin... However with the newer sysadmins coming around, and I've seen plenty in the past 3-4 years, they're inexperienced... Running Linux @ home or your own personal webserver does not make you a bonafide sysadmin. At least not in my little space... I know admins who strictly know perl... Good for you. Now go fix this legacy system which by the way doesn't have perl on it, and you're not allowed to install perl... Would you know how to do so in say awk and sed? To me a sysadmin knows things from the core up, not from a yum install *something*, apt-get *make-me-look-nice*, or whatever other command. Just my two centavos
I just did a yum remove Vista ... I'm going to Disney!
According to the article... Embarrassed state officials are scrambling to fix the problem. Does this mean they'll revamp the fuzzy math to attract more (*cough* suckers*) wonderful customers?
.1% .2% .1%
Cost of Solar Powered Hardware $15,000
Tax rebate and reimbursement from state (50%) $7,500
$7,500 over 10 years $750
Hidden truths...
Property tax increase
Environmental fuzzy save the birds you're killing from the reflection of your solar panels tax
New-soon-to-be-imposed "Green Tax"
So on a reverse Mastercard like commercial for the state and greased pocket goons:
Cost of Solar Powered Hardware $15,000
Suckered homeowners 10,000
Revenue in our pockets from suckered homeowners... Priceless
Its obvious that anyone expressing their discontent with this new ID is affiliated with Al-Qaeda (© 2001, 2002, 2003, 2004, 2005, 2006, 2007 ONI/CIA/DISA). On a serious note though, with all of the data breaches, etc., what's the worst that could happen. This place has gone to hell in a handbasket since 2000. I see no reason to avoid it lest I want to be thrown on the no fly list because I didn't want this card... S'what will end up happening like it or not...
I show my irc grouphug bot compassion all the time
<rwxr--r--> grouphug!
<rwxr--r-->when i was little i used to poop behind a tree in my backyard.
Nice little bot...
How Ubuntu and Linux for luser will erode the Internet
Why should I really worry about security anyway they've either thrown away my information in a dumpster or were compromised...
Scott Trade
Verizon
Bank of America
Choicepoint
Mastercard
AT&T
Department of Edumacashun
Chase
So giving away customers' data is the right of the first amendment... That would mean companies like TJX whose data was compromised could argue that it wasn't their responsibility to protect the customer's data since it was distributed in free speech fashion as well no... Think about the logics of the argument... Verizon: "We gave the data away because its our first amendment right. We can do as we see fit..." TJX: "We weren't compromised. We gave your personal data away. Its our first amendment right." How many companies will follow this misleading notion. And how many greased-pocket (monkey)judges will side with VZ on this. This country is becoming one big capitalist wild west where privacy means nothing.
After she's done suing MySpace, she can sue Anheuser Busch for making the beer... ABC showing cool commercials, and so on... I say sue em all. Then sue /. for posting her (by then) copyrighted name without her consent.
echo "slash dot"
Actually, I develop stuff for myself out of... "I wonder if I can automate this so I won't have to do it again..." Typical lazy sysadmin stuff. Most of the times I end up creating my own little program of sorts and at times I usually post stupid/handy little scripts. Does it qualify for open source, perhaps. Maybe that's why I'm always bored, I've been automating my work for too long