Comment Where was the warrant? (Score 1) 233
If the homeowner let a bunch of asshats into their house to perform a search without a warrant signed by a judge
Badge or no badge
The owner is an idiot.
Comment Re:And they're every bit as evil as Facebook (Score 1) 267
I've got news for you: there's no such thing as anonymity on the Internet.
Just ask Anonymous who found out the hard way earlier this week.
Besides, if I'm doing anything online I don't want Google to track, I sure as hell aren't going to be logged-in to my Google account while I'm doing it, will make sure I'm tunneling my connection through several remote proxies, and would probably be using a Live CD distribution of my favorite Linux.
Even then, I'm still not 100% anonymous. Only obfuscated enough to hopefully make it not worth anyone's while to track me down.
I'm sure members of Anonymous did something similar. Only difference was, what they were doing WAS worth somebody's "while" to track them down.
Comment Best value (Score 1) 574
I would seriously pay twice what I'm paying Netflix for now for unlimited streaming and if it helped provide a better selection.
Seriously.
Netflix is by far the best value on the Internet today.
That and they treat their employees with respect. Especially their customer service folks.
My Hulu Plus subscription isn't giving me shit.
Comment pfSense (Score 1) 206
My recommendation: pfSense.
Or ClearOS.
pfSense is FreeBSD based. ClearOS is linux-based.
Comment It's not rocket science. (Score 3, Informative) 182
Easy -
Request, log, and record, only that information that is absolutely necessary and nothing more, and keep it only for as long as you'll need it and not a bit longer.
You can save yourself some heartache by not storing any PII and PFI.
Don't store payment information.
Don't store credentials. Consider using OpenID or Google or (shudder) Facebook Connect for accounts.
Keep sensitive information off any internet-accessible systems.
And last, don't trust any input from your visitors.
Sanitize all input.
Declare all variables.
Don't assume anything.
If you're expecting an integer, make sure you convert the submitted form data to an integer for that variable implicitly.
Same for dates, strings.
Normalize all input.
Sanitize all input.
Never trust any input.
Consider using a database abstraction library with well documented and mature APIs. Don't code things yourself.
Don't turn on ssh password authentication. Require only public/ private keys.
Turn register globals off in PHP. Use safe mode.
Make sure MySQL is on a separate server, with an RFC-1918 address, accessible from a dedicated NIC that is not on the Internet.
Consider a security audit and professional code review if you're planning on taking any money.
Comment Re:As the Iranians found out the hard way... (Score 2) 104
As the Iranians found out the hard way, it's difficult to keep an intruder out despite the obscure nature of PLC (most people probably don't even know what that is.)
Programmable Logic Controllers.
I prefer Allen-Bradley PLCs myself.
Comment Re:Crappy (Score 1) 537
Where do you get "twice as expense per month"? Maybe for DSL.
Not for Comcast Business.
It's $20.00 extra per month.
50/10 residential is $169.95 w/ a 250GB cap.
50/10 business is $189.95 w/ no cap, and I can get static IPs, and run as many servers as I want.
(Atlanta region)
Comment Re:OT (Score 1) 554
You know, for $59.95/ month you can get Comcast Business and have no bandwidth caps, no ports blocked, 4 hour response times in the event something gets frakked, and techs that actually know what the hell they're talking about, and the ability to run whatever servers you want without them saying shit about it.
(You also get your own Sharepoint server and Exchange mailboxes for those that are OS challenged.)
Best decision I ever made. (Switching to Comcast Business).
(Don't get me wrong, I hate Comcast with a passion, but it makes you wonder if Comcast is able to afford unlimited bandwidth for $10/ month than what's the real purpose of those 250GB caps?)
Submission + - Microsoft's fixes critical DNS server and Exchange
Kurtz writes: "Microsoft has fixed critical bugs in Windows, Office and Exchange with its May set of security patches.
http://www.computerworlduk.com/technology/servers- data-centre/network-os/news/index.cfm?newsid=2938"
Submission + - Should developers fix Microsoft's past mistakes?
MythMoth writes: "We've heard all about the pain and discomfort of working with Windows' User Account Control (UAC) switched on, but now Ian Griffiths is explaining that the developers are the problem — they brought it on themselves.
In earlier articles we have heard that Microsoft think that everyone should do it like this — Ian does acknowledge that things are better in the Unix world, but is he right? Is the onus now on the developers to help fix a problem that they did not cause?
Should Microsoft maybe use the dialog that Ian proposes to push the point home?"
In earlier articles we have heard that Microsoft think that everyone should do it like this — Ian does acknowledge that things are better in the Unix world, but is he right? Is the onus now on the developers to help fix a problem that they did not cause?
Should Microsoft maybe use the dialog that Ian proposes to push the point home?"
Submission + - Guessing robots navigate faster
holy_calamity writes: A new navigation technique for robots has them make predictions about what's around the corner based on where they've been already. It works well in repetitive environments like office buildings. If this were a Japanese project I'd say it'd be useful for robotic secretaries new on the job, but since it's an American one I suppose it'll be used for automated SWAT teams.
Submission + - ZFS will offer a new level of Data Protection
widhalmt writes: "According to a blog posting by Richard Elling, a further release of Suns ZFS Filesystem will introduce a technique called "ditto blocks" which will allow to automatically copy data within one storage device or meta device.
As you can set this per filesystem one can create one large metadevice out of e.g. many Raid devices and create "low security" filesystems without ditto blocks and and "high security" filesystems with instant copies spread over the different raid arrays. Even if one whole Raid Array fails, the filesystem with ditto blocks enabled will still work as normal.
This adds further levels of data protection to really important data as well as more granularity to chose how "secure" your data should be.
Some Maths about what combination of raidlevels and copy levels is best suited for your needs can be found within the posting linked above."
As you can set this per filesystem one can create one large metadevice out of e.g. many Raid devices and create "low security" filesystems without ditto blocks and and "high security" filesystems with instant copies spread over the different raid arrays. Even if one whole Raid Array fails, the filesystem with ditto blocks enabled will still work as normal.
This adds further levels of data protection to really important data as well as more granularity to chose how "secure" your data should be.
Some Maths about what combination of raidlevels and copy levels is best suited for your needs can be found within the posting linked above."
Submission + - VW-Lan Hack: Thoughts on how to hack mom's wlan
Vinh writes: The blog entry describes a pretty interesting and simple way how to hack paid wireless lan hotspots using nothing but a Volkswagen and a laptop. Cool that it's not too technical but is rather based on a really simple idea. Hehe...funny that a broken wireless lan and a lingerie shop can make you so creative! Here's the link:
http://romanceculture.com/blog/2007/05/thoughts-on -how-to-hack-your-moms-wlan.html
Submission + - Lockheed Martin to run UK census?
jimkillock writes: Lockheed Martin are bidding for the UK's census data collection, according to the New Statesman. Following disruption of the census in Canada, also run by Lockheed Martin, the story raises questions about public confidence over digital data storage, especially when public servants use private contractors. In this case the background of the company as a firm involved in mass surveillance and interrogation could undermine public confidence in the census, the data from which is used exptensively in formation of government policy.
Submission + - Finally, procfs for Mac OS X
An anonymous reader writes: Have a burning desire to browse processes as files on your Mac like you can on most UNIX type systems? Amit Singh over at the Mac OS X Internals site has released an open source procfs filesystem for OS X. The implementation uses Google's MacFUSE which brought all the goodness of user filesystems to Mac earlier this year. In addition to things like Mach task and thread info, virtual memory, ports etc... The procfs also shows motionsensor and lightsensor data so you can simply cat these files to get sensor readings. Just like on Linux. There's also code to show TPM chip info. Cool! PS: didn't know kernel is pid 0 :)
