The best camera to take a picture is the camera you have available. From a daily carry standpoint, it seems like everyone has a smartphone (with camera), and no one carries a 'good' or even separate camera. The real question is why would you? I can't remember the last time I broke out my DSLR... my phone camera is 'good enough' and the effort to pack/transport/prep actual shooting w/ the DSLR is a huge hassle compared to using the phone camera.
Since you didn't complain about poor signal strength, I'll focus solely on the issue of running out of power. When I had a phone with replaceable batteries, I carried two extra batteries that were always fully charged. Even with opportunistic charging habits, I would regularly swap out to a fresh battery in the early/mid afternoon. For the few times a month I went through both extra batteries, I had a 20k mAhr external battery pack I would fall back on. With this setup, I never ran out of power. I have the RAVPower battery pack and have been immensely satisfied with my purchase. I've also have heard very good things on the Anker line. I used this setup for over two years successfully.
For the past 3 months, I'm using a current gen smartphone without an interchangeable battery (or SD slot! life sucks). I've been relying on a mophie battery case and the battery pack to get me through the day. Honestly, I haven't had to use the battery pack as the energy drain during the day is significantly less and the mophie has been sufficient to keep me charged up.
The primary issue between overhead and underground is the time and cost. The conversion cost from overhead to underground is tremendous and quite frankly, rate payers don't want to pay for it. When the conductor fails (or insulator for underground), the time for repair is also significantly higher.
Regarding reliability, redundancy is how most utilities address it. Power feed redundancy can be addressed on distribution circuits can be fed from either end, midpoint ties and reclosers. However, you'll need a large field force or automation to actually utilize the capability once installed, neither of which is high on the list of things rate payers want to pay for.
Infrastructure age is primarily seen on the transmission and generation side.
Haven't had to do this in years (approximately 15 yrs actually) but when I did, I used FreeS/WAN to hook up a bunch of networks over the internet running on smoothwall. Everything else is routing tables.
Man, what a trip down memory lane.
Funny how managers and executives eventually learn this lesson and then quickly forget about it when there's a whiff of out sourcing. The funny thing is that word will get out and the rumor mill will always make it out worse than the reality.
Video's are nice if you can't spend the time w/ her now. But don't spend too much time/effort on them, spend the time with her AND your wife. Memories are so much more important than a video.
My condolences to you and your family. I've lost two immediate family members to liver cancer and have a significant increased risk to having it myself. This is a matter I've spent more time than most contemplating.
Aka personnel risk assessments generally are time limited. My employer (for various reasons including the drafter, me, thought a forever check was asinine), limits checks to the previous 7 years. There is also an exception process for those that do 'pop' that includes a specific assessment of risk for the hire/employee to have a sensitive position. Depending on the conviction (fraud/theft is more of an issue w/ a trust based position), you just need an inside advocate, as hard as that may be.
ok, I know/. and why bother to read the article. But really you should read (ok skim) the comment. The comment said to look up x and y. It wasn't NAND, OR, or anything else. Please turn in your geek card at the door!
that the quote appearing at the bottom of the page is Mizner's:
"If you steal from one author it's plagiarism; if you steal from many it's research."
As someone mentioned, it's not shocking the prosecution was politically motivated but shocking that they admitted it. I'll add that it's also not shocking that they think they didn't do anything wrong!
Re:The reason a "cyber Pearl Harbor" isn't imminen
on
The One Sided Cyber War
·
· Score: 3, Interesting
So why do they continue to invoke this stuff? To scare people into putting their organization on the US DoD gravy train.
Or maybe because the professianls who do this for a living know something you don't. Imagine for a second that someone shuts down our power grid, something that is easy to do and has been demonstrated in Project Aurora. Without power, the internet is down. Without the internet, the economy grinds to a halt. No ships coming into port, no planes flying, no gasoline being delivered, no power in hospitals, no 911 calls, no critical infratructure working at all. This is the cyber 9/11 people like us (I work in the intelligence community) are worrying about.
Or maybe the professionals (security "consultants", sales, and everyone else in line to make a friggin buck) just wants to hammer home that the sky is falling to keep the good times rolling. And yes, that means you too, Mr I work in the intelligence community.
Is the state of "cyber" security in the various critical infrastructures weak? Absolutely and they need to be improved upon. I too work "in the field" and am very familiar with the state of security for several organizations in a specific critical infrastructure. It's bad. Really bad. The risks are primarily sensitive data (commercial). The weaknesses in controls systems are organizational. That's right, organizational. When the resources are taxed to just maintain the status quo, things slip when you have to engage in new projects. Security improvements fall under new projects and completion/success is declared at some arbitrary implementation level so everyone can get their check mark and move on to the next issue. The core reason? Profits and specifically O&M numbers. Don't fool yourself, it's a business. And security doesn't show up on profit side, only the cost.
So much for using mod points on this discussion...
3-4 years ago, I was the technical lead on a project to encrypt all laptops (mobile data, but not handhelds... *shrug*). The original project team had selected a solution (home directory only encryption) and then commenced to hit the skids. I was brought in to turn the project around. I found security weaknesses on the directory encryption (Hiram's boot cd could easily bypass it). We decided to test a whole disk solution, and went with it. For an environment that had 800+ laptops, ~25% being field crew devices (shared devices, assigned to a truck with crews then assigned to trucks on a daily basis), full deployment took 6 weeks and a dedicated team of 6 people. During the 6 weeks, we trained the IT Support staff on how to support systems w/ whole disk encryption including the decrypt process as well as continuing the roll out for new hardware deployments. Does it add to overhead on support and cause situations where data is "unrecoverable" when otherwise there would be a reasonable chance to recover? Yes. The business determined it was worth it due to the number of laptops lost/stolen.
As a side note, not one user complained about additional system latency. Password sync was easily achieved via LDAP and the keys to the kingdom is held in an enterprise cert that can decrypt/access all devices. PGP WDE is the current solution. So far, so good. No linux support though.
what is this crap, kuro5hin? I'm new here, I actually read it and want the time I wasted back.
and yes, the US will convert to metric just as soon as the entire adult populace is educated past an 8th grade level.
squid as a mitm ssl proxy?
but like so many previous commenters... why? other than messing w/ a roommate (ala http://www.ex-parrot.com/pete/upside-down-ternet.html) this is really useless. but hell, billables are billables!
Can't agree more. If you really want to hand off, you have to find a different EMPLOYER and not a different department/supervisor. Otherwise, every project you've ever lead will be yours forever. Sure, someone may be "responsible" for the day to day stuff and it can be upgraded half a dozen times, but if it falls over and the current guy/gal can't figure it out, you'll be getting the call.
Documentation is great, but it only gets you so far as it's nigh impossible to document everything you did and why, much less what to do when X happens do Y for every case. The other reality w/ documentation is that for it to be useful, someone has to READ it. Good luck with that, RTFM became part of the gestalt for a reason.
Suck it up, follow a previous poster's advice by CC'ing your new supervisor so he/she atleast can see how much time suck is going on and just be helpful as you can to the next guy. After all, it's us vs the users!;)
DO NOT expect protection from the police, that is not what they are there for: they are there to protect PROPERTY. For PERSONAL PROTECTION you need a BODYGUARD.
Not even property protection. Their role is to apprehend criminals, AFTER a crime is committed. To protect and serve is simply their marketing tag line. The only protection law enforcement gives is the potential crime an individual may have committed while they are in custody or incarcerated (and that doesn't stop all criminal activity). If you want protection, regardless for personal or property, you need to provide it yourself!
but seriously, who hasn't enjoyed some Gedankenexperiment and run through all the neat little things one could do to really make someone's life a living hell? The fail here was the evidence trail he left:)
for myself, I intend to jump ship from facebook once a critical mass of my "friends" are available on g+ (and really, just friends, not people who know my friends). Until then, I'll live with fb updates to my inbox and the occasional interactive login to respond... oh wait. that's what I'm doing now!
The best camera to take a picture is the camera you have available. From a daily carry standpoint, it seems like everyone has a smartphone (with camera), and no one carries a 'good' or even separate camera. The real question is why would you? I can't remember the last time I broke out my DSLR... my phone camera is 'good enough' and the effort to pack/transport/prep actual shooting w/ the DSLR is a huge hassle compared to using the phone camera.
That's why it's security compliance and not security. You get what you measure, and you're measuring the minimum.
Gotta wonder if this will replace all those XP machines that the Navy still has? http://tech.slashdot.org/story...
Since you didn't complain about poor signal strength, I'll focus solely on the issue of running out of power. When I had a phone with replaceable batteries, I carried two extra batteries that were always fully charged. Even with opportunistic charging habits, I would regularly swap out to a fresh battery in the early/mid afternoon. For the few times a month I went through both extra batteries, I had a 20k mAhr external battery pack I would fall back on. With this setup, I never ran out of power. I have the RAVPower battery pack and have been immensely satisfied with my purchase. I've also have heard very good things on the Anker line. I used this setup for over two years successfully. For the past 3 months, I'm using a current gen smartphone without an interchangeable battery (or SD slot! life sucks). I've been relying on a mophie battery case and the battery pack to get me through the day. Honestly, I haven't had to use the battery pack as the energy drain during the day is significantly less and the mophie has been sufficient to keep me charged up.
I've been lurking here since 98. If they can maintain half the engagement and clean up SF as mentioned, I'll keep visiting.
The primary issue between overhead and underground is the time and cost. The conversion cost from overhead to underground is tremendous and quite frankly, rate payers don't want to pay for it. When the conductor fails (or insulator for underground), the time for repair is also significantly higher. Regarding reliability, redundancy is how most utilities address it. Power feed redundancy can be addressed on distribution circuits can be fed from either end, midpoint ties and reclosers. However, you'll need a large field force or automation to actually utilize the capability once installed, neither of which is high on the list of things rate payers want to pay for. Infrastructure age is primarily seen on the transmission and generation side.
Industry has already developed safety protocols to address this (LOTO) and three way communications to lower the risk of misunderstandings.
Haven't had to do this in years (approximately 15 yrs actually) but when I did, I used FreeS/WAN to hook up a bunch of networks over the internet running on smoothwall. Everything else is routing tables. Man, what a trip down memory lane.
Funny how managers and executives eventually learn this lesson and then quickly forget about it when there's a whiff of out sourcing. The funny thing is that word will get out and the rumor mill will always make it out worse than the reality.
Video's are nice if you can't spend the time w/ her now. But don't spend too much time/effort on them, spend the time with her AND your wife. Memories are so much more important than a video. My condolences to you and your family. I've lost two immediate family members to liver cancer and have a significant increased risk to having it myself. This is a matter I've spent more time than most contemplating.
Write one, test it, maintain it. Otherwise by the time you realize you need one it's too late.
Aka personnel risk assessments generally are time limited. My employer (for various reasons including the drafter, me, thought a forever check was asinine), limits checks to the previous 7 years. There is also an exception process for those that do 'pop' that includes a specific assessment of risk for the hire/employee to have a sensitive position. Depending on the conviction (fraud/theft is more of an issue w/ a trust based position), you just need an inside advocate, as hard as that may be.
Separately, or together?
ok, I know /. and why bother to read the article. But really you should read (ok skim) the comment. The comment said to look up x and y. It wasn't NAND, OR, or anything else. Please turn in your geek card at the door!
I'm here to help.
"If you steal from one author it's plagiarism; if you steal from many it's research."
As someone mentioned, it's not shocking the prosecution was politically motivated but shocking that they admitted it. I'll add that it's also not shocking that they think they didn't do anything wrong!
So why do they continue to invoke this stuff? To scare people into putting their organization on the US DoD gravy train.
Or maybe because the professianls who do this for a living know something you don't. Imagine for a second that someone shuts down our power grid, something that is easy to do and has been demonstrated in Project Aurora. Without power, the internet is down. Without the internet, the economy grinds to a halt. No ships coming into port, no planes flying, no gasoline being delivered, no power in hospitals, no 911 calls, no critical infratructure working at all. This is the cyber 9/11 people like us (I work in the intelligence community) are worrying about.
Or maybe the professionals (security "consultants", sales, and everyone else in line to make a friggin buck) just wants to hammer home that the sky is falling to keep the good times rolling. And yes, that means you too, Mr I work in the intelligence community. Is the state of "cyber" security in the various critical infrastructures weak? Absolutely and they need to be improved upon. I too work "in the field" and am very familiar with the state of security for several organizations in a specific critical infrastructure. It's bad. Really bad. The risks are primarily sensitive data (commercial). The weaknesses in controls systems are organizational. That's right, organizational. When the resources are taxed to just maintain the status quo, things slip when you have to engage in new projects. Security improvements fall under new projects and completion/success is declared at some arbitrary implementation level so everyone can get their check mark and move on to the next issue. The core reason? Profits and specifically O&M numbers. Don't fool yourself, it's a business. And security doesn't show up on profit side, only the cost.
So much for using mod points on this discussion... 3-4 years ago, I was the technical lead on a project to encrypt all laptops (mobile data, but not handhelds... *shrug*). The original project team had selected a solution (home directory only encryption) and then commenced to hit the skids. I was brought in to turn the project around. I found security weaknesses on the directory encryption (Hiram's boot cd could easily bypass it). We decided to test a whole disk solution, and went with it. For an environment that had 800+ laptops, ~25% being field crew devices (shared devices, assigned to a truck with crews then assigned to trucks on a daily basis), full deployment took 6 weeks and a dedicated team of 6 people. During the 6 weeks, we trained the IT Support staff on how to support systems w/ whole disk encryption including the decrypt process as well as continuing the roll out for new hardware deployments. Does it add to overhead on support and cause situations where data is "unrecoverable" when otherwise there would be a reasonable chance to recover? Yes. The business determined it was worth it due to the number of laptops lost/stolen. As a side note, not one user complained about additional system latency. Password sync was easily achieved via LDAP and the keys to the kingdom is held in an enterprise cert that can decrypt/access all devices. PGP WDE is the current solution. So far, so good. No linux support though.
what is this crap, kuro5hin? I'm new here, I actually read it and want the time I wasted back. and yes, the US will convert to metric just as soon as the entire adult populace is educated past an 8th grade level.
squid as a mitm ssl proxy? but like so many previous commenters... why? other than messing w/ a roommate (ala http://www.ex-parrot.com/pete/upside-down-ternet.html) this is really useless. but hell, billables are billables!
Can't agree more. If you really want to hand off, you have to find a different EMPLOYER and not a different department/supervisor. Otherwise, every project you've ever lead will be yours forever. Sure, someone may be "responsible" for the day to day stuff and it can be upgraded half a dozen times, but if it falls over and the current guy/gal can't figure it out, you'll be getting the call. Documentation is great, but it only gets you so far as it's nigh impossible to document everything you did and why, much less what to do when X happens do Y for every case. The other reality w/ documentation is that for it to be useful, someone has to READ it. Good luck with that, RTFM became part of the gestalt for a reason. Suck it up, follow a previous poster's advice by CC'ing your new supervisor so he/she atleast can see how much time suck is going on and just be helpful as you can to the next guy. After all, it's us vs the users! ;)
DO NOT expect protection from the police, that is not what they are there for: they are there to protect PROPERTY. For PERSONAL PROTECTION you need a BODYGUARD.
Not even property protection. Their role is to apprehend criminals, AFTER a crime is committed. To protect and serve is simply their marketing tag line. The only protection law enforcement gives is the potential crime an individual may have committed while they are in custody or incarcerated (and that doesn't stop all criminal activity). If you want protection, regardless for personal or property, you need to provide it yourself!
but seriously, who hasn't enjoyed some Gedankenexperiment and run through all the neat little things one could do to really make someone's life a living hell? The fail here was the evidence trail he left :)
for myself, I intend to jump ship from facebook once a critical mass of my "friends" are available on g+ (and really, just friends, not people who know my friends). Until then, I'll live with fb updates to my inbox and the occasional interactive login to respond... oh wait. that's what I'm doing now!
Thanks Charlie and James! I'm rockin and rollin!
looks like matt grabbed the AC's invite. if there's anymore out there, i'd love to receive it! gyshin(@)g mail . com