"Honey Badger does this https://bitbucket.org/LaNMaSteR53/honeybadger/"
What I think you're missing is a)The lack of consent b)The lack of visibility that it's happening.
16330 publicly visible posts • joined 10 Jun 2009
As a previous poster noted, this does have a use for personalizing spear phishing attacks.
The list is depressingly long.
Fortunately with Windows phones being quite rare beasts the location data is likely to have gaps in it.
You're right I am, and yes I am aware that JPL tend to be quite conservative on the life expectancy of their probes.
Anything that helps maintain control of something around a metric tonne of Mars rover is a very good idea.
3 months at most?
Also it goes into the repository in case they ever need such an algorithm again.
JPL scientists have experience of "road conditions" most Americans will never encounter.
IOW like the road conditions on the rest of the planet Earth.
Why did it take 5 years to get round to it?
I find it very hard to believe there are no other large organisations around the world that wanted smartcard support in a Linux distro. And note, if they feed the changes back upward it will not need to be a "custom" distro, it will the standard Ubunto build.
So Moorfields have an EPR system ready to go?
That is intriguing.
The question is does it cope anything other than eyes?
And you say "browser," I say "universal dumb terminal."
BTW "on demand" pricing for processors and main memory has been a feature of mainframe OS's (EG IBM and Univac) for decades. So you could say that in Mainframe land "Enterprise cloud" has been around for decades. IOW this is not the first time the IT industry has been around this particular block.
As for "always available" the events at AWS East 1 data center should have been a wake up call that you have to make the effort to get any potential reliability improvement, it's not simple and you have to test it. Otherwise it's just like any other data center failure, with added lack of insight into what's going on.
Cloud vendors, like all tech vendors, are keen on customer lock in. Anyone who hands their core systems data to such a vendor needs to realize they have lost a very large amount of control. While everything is humming along PHB's won't mind. CAPEX eliminated, low monthly charges etc.
It's what happens when everything is not rosy that people realize just how hungry a fox is in the hen house and how little they can do about it.
And I agree, once your dependent for even your processing cycles to an outside vendor I don't expect those low, low introductory price deals will last.
Ho ho ho. Very nicely done.
The comic possibilities are nearly endless.
What I had in mind was more what "Shadow Robtics" had created for a "robot chef" system. This uses high power to weight pneumatic "muscles" (essentially balloons inside a strong knitted bag)
Such systems can be as strong as hydraulic systems but as the run on compressed air they can be compliant, so if you push back they "give." Handy for safety issues but still able to lift an adult in an emergency.
Lighter "muscles" means lighter structures and lower power needs, a ripple effect throughout the design.
For the UI I was thinking of putting a screen on the front face like those things at conferences, like Segways with web cams, microphones for the back channel.
The goal is to help people stay in their own homes who are still mobile but with limited mobility.
Agreed.
Where the "Grey vote" is concerned it's not just the codgers who are sh***ing themselves over the costs of community care.
My "techno fix" would be a human sized and shaped remotely operated avatar which was strong enough and agile enough to handle elderly care, eliminating the travel problems and allowing enough time to properly tend to peoples needs and without risking serious injury doing so.
But the issue remains where the money comes from. Life expectancy is going up. In the UK it is expected that 25% of the people alive today will live to 100, an astonishing figure that's been quietly creeping up year by year, 1% at a time.
Across town a carer on minimum wage is performing her third "manual evacuation" of the week on an constipated codger while trying to work out a route to her next appointment that will get here there before she is docked for being late, and which won't need the driving skills of Jason Staitham in The Transporter, or an Audi to do so.
Her employers, who won the contract from the local authority on the faked credentials and bogus social connections of the CEO, will continue to charge the local authority through the nose for this service, because running it in house cannot possibly be a good use of resources because subcon-tractors are soooo much more efficient.
True.
Concorde's noise issues were partly about history. I don't think they expected it would take as long to enter service as it did or that the noise regs would shift as far as they did.
BTW the 17th Concorde onward was planned to be a "block upgrade" using information collected from flight data. Improvements to details aerodynamics (things like wing tips and leading edges, rather than wholesale changes to the planform or wing profile). The goal was to eliminate reheat entirely during both climb and push through transonic IE about M0.9-M1.1. People often forget that Concorde was a "super cruise" aircraft long before the F22, F35 or Typhoon.
That was possible with the technology of the mid 1970's including the 13 "computers," both analogue and digital, running each engine, along with its associate inlet and exhaust).
You're right that AFAIK there are no large pure turbojet engines left. All are in fact low bypass ratio turbo fans (c 1.1 to 1.2x the core turbojet flow).
The joker in the pack is that the operating temperature of the front fan can be extended by cooling the intake airflow with a precooler. Unfortunately that would mean switching to a cold fuel, like Methane or in extreme cases LH2. This is exactly the technology Reaction Engines have been developing and were partly funded by the EU for the LAPCAT I and II programmes, except operating up to M5.
Yes.
The downside of such cargo is that it places a minimum size on the whole vehicle, and with that form factor it's going to be biiiig.
Concorde, at 100 seats, was finally accepted by the French as the minimum size for an SST. Most people who've looked at this since have said you need at least 300 passengers (plus baggage) to make this viable. You also need a minimum range from day one of roughly Frankfurt to New York.
One interesting idea is that the maximum use temperature of plastics has been gradually rising. In principle CFC would be viable up to about 250C today. Likewise stainless steel could be an option up to 300c with laser welding or diffusion bonding.
That's a trickier one.
Where do you draw the line?
Your external input has gone through validation functions and you've documented all valid parameter ranges, so later devs know what they can and can't do.
You don't pass huge hundred field data structures around (used in a dozen different ways, set by a control field) because that's been known to be a complex, error prone development approach since the late 1970's.
What more can you do?
Agreed. Most people would consider it an inappropriate choice for a capability to include in this sort of program. Although I'm sure the same could be said of various other functions in various other programs, where what should have been done was a smooth, common interface to the rest of the system.
However if you have decided to include it to begin with then being suspicious of external input (from anywhere, including stuff that is nominally coming from another program) seems like the basic precaution to follow.
Leaving aside why this particular bit of SW is even doing this function. If fails what seems like it should be rule #1
Never unconditionally trust input from outside your code, in size or content.
Not if it's user input.
Not if it's from removeable media
Not if it's down a wire (or a wireless link) from A.N.Other computer.
I know, this protocol is from the dawn of the internet when all the sysadmins knew each other, all played nice etc. However it's the implementation that's insecure, not the protocol.
That said this option is off by default.
So IRL who has been using it and why?
Non Americans find this absurd level of security hilarious, given that every 9/11 plane was on an internal flight.
We find Trumps travel bans on even more hilarious given the #1 source of the terrorist was Saudi Arabia.
Those facts alone tell you that this is "theatre" in the sense of "A performance put on to entertain an audience."
You, and people like you, are that audience.
It does make you wonder why they would bother, given there are various ways around this.
Unless....
Do you think there could be another reason for doing this?
Of course getting someone to do it for you is not very sporting.
Then again terrorists aren't really known for their good sportsmanship.
That point is quite correct.
Strip the Jihad rhetorical BS from the issue and you're closer to the mark.
It's estimated the US invasion of Iraq let US companies and individuals steal about $13 000 000 000 000 from the country.
I'd be pi***e if someone came to my country and did that too.
Here's the question.
What is Probability(number of Lithium batteries in hold) Vs Probability(laptop with plastic explosive in battery compartment or elsewhere) ?
My instinct is the former is >> than the latter and if the hold is un-pressurized the pressure and thermal stresses will be much more severe on those batteries.
I think you need to re-read my post.
Not turning the country into a police state might be described as the PoV of the "flower children."
It's usually the "ordinary decent law abiding (blah blah)" types who scream at the slightest threat to their life style who demand the most absurdly repressive measures. They don't really cope with anyone who's not exactly like them very well.
People can mistake broad tolerance for weakness. I once drank in bar were most of the regulars were ex-cons. They were very tolerant of casual visitors, provided they were well behaved. The bar did not have door staff because it didn't need them. People who were unwise enough to mistake their tolerance for weakness regretted it.
No. I chose 12 years as post 7/7 but let's include them.
And while we're at it let's include the Brazillian electrican that got shot for wearing a heavy jacket on the wrong day as well. That's 57, not 56. And the English nutter terrorist that ran into a group of Moslems leaving their Ramadam prayers in North London and killed one as well. That's a "terrorist" incident as well.
And let's not forget Lee Rigby, Victim of a pair of "terrorists," or 2 people with mental health issues who should have been sectioned?
That's 94 people over a 13 year period, who might (not would, might) be alive today if anyone's encrypted traffic could be compromised at will by "The State," for "The Greater Good." BTW Most of them, including the 7/7 bombers were "Known to the authorities" already.
Meanwhile the confirmed death toll of 1 UK tower block due to either inadequate fire regulations, or their enforcement, is up to 80 (the other 18 are still listed as "missing" IE they can't match the remains found to an actual person, yet). Meanwhile every block so far tested (with similar cladding) has failed fire tests. There are about 600 such blocks in the UK.
BTW 94 is just over 10.5Hrs of smoking related deaths in NHS hospitals for 2014.
I think most of the UK readers of this site who lived through the IRA activities of the 1970's, 80's and 90's would consider compromising end to end encryption (as used for home banking and shopping) a grossly disproportionate response against what might be fairly described as a bunch of "shabolic motherf**kers," compared to the activities of the IRA.
The NHS figure (even better housing safety regs) says there are a lot better ways to save lives than this, but I don't think that's what you're concerned with. :-( .
If you, or someone you know, has been a victim of a terrorist incident I have a special message for you and them.
<profanity filter off>
Shit happens.
</profanity filter off>
You or they were very unlucky to be in the wrong place at the wrong time. It was grossly unfair. But that was the event, which has passed.
It's time to start thinking rationally again.
Most people have lost people who've died before they think they should have. Most deaths are preventable if you're prepared to sacrifice enough money, time or effort to do so.
The question is should you?
The purpose of a terrorist is to make you terrified.
If you (or someone you know) are terrified, they have won.
If you live you life making every decision based on wheather it (might) make you being the victim of a terrorist incident more or less likely, they have won.
When you refuse to be terrified, they lose. Fear is your choice. But understand it is your choice, not anyone elses.
A cold hard assessment of what these proposals will do with the reduction in terrorism, versus the reduction in everyone's security and privacy would conclude they are literally not worth the money they will cost.
But I don't believe "security" is the reason this is wanted. I believe it's a convenient excuse to introduce it. They just as happily use the risk of internet paedophiles, money laundering or drug dealing to justify it as well.
Data fetishists have no shame. They will hijack any issue to drive their agenda through.
In the UK the entire death toll of terrorist incidents for the last 12 years was 37.
The UK has spent probably several £500m -£1Bn a year and will no doubt point to all the people who would have been killed (but they cannot actually provide an estimate for that number) if they hadn't
It's time to confront the real enemy.
The cabal of data fetishists who have a pathological desire to know everything, about everyone, all the time, forever.
Strong encryption is indeed an enemy of theirs.
But their real enemy are people's desire for privacy. How dare we want to have times when we want to keep our thoughts, our feelings (and finances) private. Don't we know that "Caring is sharing (with them)?"
This communique is exactly the result of the echo chamber you get when these groups get together and reinforce their shared, delusional belief system.
Possibly the second most honest statement in this article and its comments.
The "experts" were doing this before it had a name.
The "experts" probably don't think what they do is anything like what people describe as "DevOps" so you won't find them in a "DevOps" conference.
There are always (by definition) damm few of them
The best I can come up with was some kind of token which is compared when the packet gets to its destination (matching token == destination) and a return token that indicates a "direction" in which the packets needs to "diffuse" in order to get it nearer to its destination, rather than an actual path to follow.
Sadly I have no idea how you'd encode that idea of "direction" or wheather that "token" should be the same for all packet streams going to or from the same end point, or different ones for each different session with that end point, or how you stop MIM attacks by token spoofing etc. Not to mention sizing this so it can accommodate the size of the internet, as well as allowing for future growth.
Basically I'm just not smart enough to figure out how to solve this problem.
But I really hope someone can....
IIRC the Co-Op Bank CEO was a Methodist minister who had a liking for hiring rentboys, Ketamine and posting about doing both on Face Book.
Which probably explains why they are mostly (or totally) owned by a NY based VC firm.
As for this part of the co-operative movement...
Not yet.
"We'll decide what the charges are based on the results of the interrogations."
Handy hint.
You call on a law abiding citizen at 3am with no search warrant and no reason to call at a time when you expect them to be asleep. They have a perfect right to ask why are you doing this?
In the US Kaspersky needs to realize the correct response is find a law firm and lawyer up.
In a nutshell why government IT is so very challenging if done properly.
Big system X multiple interfaces X complex data issues X high reliability X multiple jurisdiction X P88s poor formal salary structures. --> Poor candidates + poor implementations
You need some one who's excited, not terrified by that level of complexity. Historically the UK Civil Service did train its in house staff and they could have a career (with associated pension) in the UKG. Naturally that ended decades ago and they thought it a genius grade idea to not just gut themselves of their technical staff, but also their technical management stuff.
Meaning they relied on their con-tractors to tell them what was what.
Like the Australian Tax office trusting HPE.