Posts by Jamie Jones

Re: "We all want to see hard proof—" No, we don't.

ST, I hope when you leave school and get a job, you'll have calmed down and become more rational - especially if you want to work in the security field.

A healthy dose of suspicion and paraoid is helpful in our field... Out and out tinfoil hattery and shouting down everyone who doesn't agree with you tends to make you less secure (can't see the wood for the trees etc.) and piss your users off more (so they end up writing passwords on sticky notes attached to their screen)

Just reading this thread, AP Veening comes across as a security professional. You...erm. don't.

Re: Telnet IS a backdoor

The fact that most of your post is hysterical bollocks wouldn't be so bad if it wasn't for the fact that you wrote it in a condescending way.

You should have listened to John, but you doubled down.

06:40 (17) ".incomplete" root@thompson# grep telnetd /etc/inetd.conf

#telnet stream tcp nowait root /usr/libexec/telnetd telnetd

#telnet stream tcp6 nowait root /usr/libexec/telnetd telnetd

The telnet server. Most often spawned from inetd (which as John said, mainly is just resposible for firing off other servers. It's a "meta-server" that listens on all the specified ports, launching sub systems when appropriate.. It stems from the time when it was useful to not require each subsytem to run it's own listener, due to memory/processor constraints.

Oh, and the world isn't linux. inetd is still installed on many systems, just not enabled.. Oh, and the telnet client is still present and useful, and I'll be buggered if I'm going to stop using it to access control daemons running on localhost on embedded systems just because you scream SSH or RPC/TLS/HTTPS.

I guess I therefore fail your basic security 101, but then, what value is a qualification from Trump University? :-)

Here are some publically accessable telnet servers on the internet. I'm curious to how they are therefore insecure:

tower.blinkenlights.nl

rainmaker.wunderground.org

towel.blinkenlights.nl (port 666)

Re: GZIP != Encrypted

The article said it's expecting to receive compressed content, not that it's sending compressed content... Nothing to decompress!

But anyway, who said anything about encryption? I assume "lvm"'s point was that this header can appear on any request - it doesn't hint at "expect a large payload in response".

Re: So...

""... we have sent a strong letter to the cleaner in question"

Yeah, a key hint that this story is bollocks!

https://www.snopes.com/fact-check/polished-off/

Re: So...

I find that staggering.... I believe you, but I can't get my head around the mindset of someone who would just unplug somthing else because they wanted a plugl

Re: So...

Fortunately, this "cleaner uplugged the life support" story is a myth.

https://www.snopes.com/fact-check/polished-off/

Wow, if you watch the full video, you'll see that that Facebook representative was an obnoxious arrogant patronising cunt all the way through. He fully deserved that smackdown.

They think they are above the law. They deserve all the punishment they get.

In the future, this will have gone one of two ways:

Either every company knows everything about everyone (as things have been heading)

Or, GDPR etc. promote a new awareness, and future generations will look back in horror that companies publically did this sort of thing without employees being thrown in jail. This whole sort of thing will be illegal and morally and socially unacceptable, just like some "old time" activities are to us today. [ Of course, even in this utopia, the governments will still gather everything, for the sake of the children/counter terrorism etc. ]

Many of us old farts don't have photo id's either! (paper driving license / passport expired)

"A national ID card is exactly the sort of thing I expected to start to roll out once the hard brexiteers got there way after we leave the EU.

I have to agree.

Incidentally, totally off subject, but why aren't expired passports valid proof of ID? I ain't expired along with it!

Re: every data centre job, there were five jobs supported elsewhere in the economy

..Careful with the puns. The haters will get in a flap!

Re: In other news...

No chance! Mine recognised me after being away for 3 months!

Re: Flat Earth

Regular drives *are* sealed. They are just not pressurised. (If you look carefully, you'll see a mini-condom lookalike on your drives which moves in and out to equalize air pressure.

Re: If I might quote from one university's draft Research Data Management document...

<hippy mode>

I was just thinking how great the human race can be when it works together.

It makes Trumps walls and Moggys threats to throw tantrums in the EU even more pathetic.

</hippy mode>

Oh, and Checkmate, flat-eathers!

Re: Meh...

I agree entirely. My point was that facebook et. al. would still consider his threat significant.

VPN's are hardly the thing of the average facebook user, and they'd more readily jump to the new whatsnapbookspace or whatever.