Slashdot is powered by your submissions, so send in your scoop

 



Forgot your password?
typodupeerror
×

Comment Re:That's what you get (Score 1) 252

Ehhhh, what? Plug in the the pretend-to-be keyboard and then? Bruteforce the root password? You do realize unix is a multiuser system right? Well, of course you don't.

I absolutely realize that unix is multiuser. I also know that on multiuser systems the physical console of the machine typically has special access. As mentioned above, one could send a keyboard sequence that reboots the machine -- say maybe Magic SysRq or maybe even a simple CTL-ALT-DEL. Sure, the configuration may have disabled these things, but probably not. When the system reboots, keystrokes can be sent to the BIOS directing it to boot off of your USB device (before the OS reloads.) Since presumably the attackers have intimate knowledge of the hardware (they know where to find the USB port), they could likely figure out the timing involved in driving the system through a reboot and alternate startup.

Comment Re:That's what you get (Score 3, Interesting) 252

I don't know any Linux or unix machine which would be compromised merely by plugging a memory stick. Hint, hint: autorun. Furthermore, you presumably wouldn't get administrative access.

It doesn't require autorun. A usb device that emulates a keyboard or other input device would do the trick. Send the keystrokes necessary to break in. Think Linux is immune? How about the keystrokes necessary to reboot the machine and start up in single user mode? Even if single user mode has been protected, the usb device could provide both keyboard emulation and cdrom emulation -- during reboot the hack could boot to alternate media. The real fail is a design that allows access to the hardware (physical access is full access) and not the choice of operating system.

Comment Re:solar pannels are low voltage (Score 1) 579

but if you have sun on the panels there will be a potential some where

Technically true. But the voltage coming out of solar pannels is rather low (and is DC). I can imagine that there are way to keep it safe until it reaches the convertor (which converts it to AC and ramps up voltage to 110 or 220 depending on your region).

Note that unless you are using microinverters (where there is one inverter per panel physically located at each panel), most solar systems "string" together panels in series. The string voltage, which runs in the wiring between the array (usually on the roof) and the inverter (usually at ground level) can be quite high - on the order of 600 volts. This wiring also carries the full current of the array output.

Comment Re:There must be a very good reason... (Score 3, Informative) 579

I could see how it might be dangerous to electrical workers that are working to restore power to your neighborhood, if your house is putting power on the line when they expect nothing on the line, but to firefighters trying to put out a house fire?

Firefighters putting out a fire may need to cut into walls or the roof in order to put out a fire. Since there are potentially energized wires in the walls and in the roof, a hazard exists for firefighters. Normally you can turn off the power to a house by removing the electrical meter (at least here in the US anyway), which emergency personnel may do if they are concerned about cutting into energized wires. If you have a solar system or other local power generation system, the assumption that you can make the house electrically safe by pulling the meter may not be a good one. Electrical code here requires that at the power meter (where the power comes into the house) and at the power distribution panel (inside the house where you would turn off the power) there to be signage indicating that there is a solar system (or alternate power source) in place and how to disable it. In addition, code requires there to be a disconnect switch on the roof next to the solar panels. To protect line workers who are repairing a downed power grid, electrical code here requires that the solar system automatically disconnect itself from the grid if the grid is down. This prevents power from being back fed to the grid while it is potentially being worked on.

Comment Re: So upgrade already (Score 1) 829

I'll be the first to feign ignorance with Windows networking, but do tell me how I "Obtain an IP address automatically" without automatically getting the gateway?

The same way you would solve the problem with non-Windows networking: Configure your DHCP server to have specific reservations for the computers that need special handling. (DHCP Servers don't need to have a single pool of settings handed out to clients, they can have different settings (such as gateway address or lack of gateway address) that applies to separate pools or individual machines.)

Comment Re:Needless expense (Score 1, Informative) 829

People who are still using XP day-to-day are idiots and Microsoft shouldn't encourage them.

Really? People are idiots for not spending money on new equipment that adds precisely zero additional feature that they need? [...] My company uses XP on the majority of our computers and there is nothing whatsoever in Vista, Windows 7 or Windows 8 that is necessary for us.

No, people are idiots for believing that security isn't a feature that is needed. People are also idiots for believing that a for profit company (like Microsoft) is obligated to provide free updates to a product forever.

You appear to be saying that there is nothing in post-XP versions of Windows that is necessary for your company. Do you really believe that security of your systems is not necessary? Do you really believe that Microsoft should spend the money (in either direct or opportunity costs) to provide those updates to you for free forever?

Comment Re:American Revolution 2? (Score 2) 183

Maybe it's time to start discussions of the 2nd American Revolution. Our government from the office of the President, to congress to the Supreme Court are completely out of control.

And after your revolt, what system of government would you replace the current one with? Be specific. What would prevent your proposed system from morphing into or having similar problems that our current government has? If you don't know how to change the overall system but just want to "throw the bums out", what is your plan to prevent the new "bums" from being just like the old ones?

I hear lots of folks ranting on how bad government is, but I don't hear many coherent or comprehensive suggestions about what to do about it. I do, by the way, agree with you that the second amendment is about creating a fail safe to protect the people from the government and I support having that fail safe in place. I do not however, believe that we are anywhere near needing to trigger that fail safe and even if we were, I would want a concrete plan as what to do after your revolution so that we do not end up in the same place again.

Comment Re:There is only one reason. (Score 1) 271

The submitter fails to understand that people only buy TVs like this to demonstrate penis size to their neighbors.

The submitter fails to understand that people only buy TVs like this to display penis size to their neighbors.

Fixed that for you. It is hard to see a penis through the window and across the street with a small screen.

Comment Re:Asterisk (Score 1) 497

How does asterisk even work from the hardware side? I looked at their site and they just have software instructions. Is there some physical card or box that interfaces computers to landline phones?

Read a bit more to find out. In short, it is a bunch of software that does the same thing that commercial phone switch does. "Phone switch" being a PBX or Private Branch Exchange - The kind of phone system you would find at a business. The phone switch you set up (Asterisk or otherwise) has connections to individual landlines via interface hardware, or you can have it talk directory to VoIP providers. There are several software distributions that make setting it up easy. PBX in a Flash is one. Nerd Vittles has a good getting started guide.

Comment Re:Asterisk (Score 3, Informative) 497

Asterisk is a good solution if you can and don't mind hosting it (or having it hosted somewhere). I set up a simple IVR system within Asterisk that answers the phone and plays a simple message: "I don't take calls from robots, press 'H' for human to prove you are not a robot." If you press 4, then my phones actually ring and then go to voice mail if I don't answer. If you don't press 4, the call gets dropped and I am not bothered. This has eliminated the problem with robocalls for me. I still get an occasional manually dialed polling or sales call. However if someone, even a salesperson, bothers to actually make an effort and dial the phone, I don't mind talking to them, even if only to say that I am not interested. I did white list the local reverse 911 number because that sort of robocall I might want to hear. (For the non-US readers, reverse 911 is a system that allows governmental emergency services to call everyone in a city or neighborhood to play an automated emergency message.)

Comment Re:Over the air update (Score 1) 487

"Tesla is about to push an 'over-the-air update' to its vehicles' air suspension that will create more ground clearance at highway speeds."

Think of the hack potential. Synchronized hydraulics anyone? (So yeah it's an air system, but having all the Tesla's on the road bouncing in sync would be a sight to behold.)

Comment Re: deja vu... (Score 1) 93

didn't the fcc do something very similar with home broadband routers?

They gave out routers to selected volunteers around the country. The routers measured and sent data automatically. May be if they were to give out cheap Android phones, this would probably be more successful

I have one of these and the program is still running. Details of the program can be found here. As stated above, they gave out routers that perform intensive testing on your broadband connection over time. Looking at the website they are announcing a new mobile application, so I assume that it is an extension of the same overall program.

Slashdot Top Deals

The key elements in human thinking are not numbers but labels of fuzzy sets. -- L. Zadeh

Working...