Become a fan of Slashdot on Facebook

 



Forgot your password?
typodupeerror
×

Comment Re:This makes sense. (Score 1) 280

Recently read through a penetration test we had done, and some of the things in there I didn't know... thankfully they couldn't get into our servers from the outside, but from inside the network wasn't too difficult from a system having some outdated software letting them in...

Anyway the whole deal about LANMan, kerberos and other things storing passwords in memory in a way that is very easy to decrypt was surprising... I also thought that if I told PCs to not store the LM password locally and don't use it, then it would be okay. Nope. have to do that AND have a 15 character or longer password. LM makes the hash of the password regardless of if it will ever use it, so the only defense is a password long enough to break it.

Kerberos... well there is no getting around that one. it's there and if they get admin access on the server they have the plaintext password of anyone logged in interactively. end of game.

Was surprising never being in part of a mitigation team for a test like that.

Comment Re:We're sorry we got caught? (Score 1) 401

I also did tech support for Real Networks back in the day (dirty dirty company) and the way they ran cancellations wasn't much better. for every "Save" you got you earned an extra dollar. being in tech support we didn't fall into that pay scheme, but we felt it.

It went something like this, you go online to cancel the subscription you didn't know you agreed to, unless you said you have windows 95, it said you had to call in.

you call in and the person offers free tech support, a few months free etc... then eventually they get to well, how about i give you 3 months free and send you an email. if at any point you decide that you want to cancel, just reply to the email and we will cancel it, but i can only do that if you agree to the email. Thinking you are getting 3 months and canceling anyway, you agree, they get their dollar, you then have to watch for the email to cancel.

it isn't easy...

Comment Re:We're sorry we got caught? (Score 1) 401

They do... With all the cable companies now you get the base rate, then you get promotions that expire... (i just went through this with Uverse)

so promos expire and you call in, the first person offers to take something like $30 off the bill a month for 6 months or a year. you say no and talk to retention, tell them you are looking at time warner, comcast or whoever because $200 a month is ridiculous for internet and cable, and then they knock $70-80 off with a year contract, and in a year you do it again. If you don't like to press the issue, work during the time that retention is open, or for whatever reason don't call, they bend you over every month.

Comment Re:Signals (Score 1) 144

For the Dr Who it was this one http://en.wikipedia.org/wiki/T...

The probe is intercepted by a giant spaceship heading for Earth. When the broadcast is shown, an alien face appears and identifies itself as being a Sycorax. The alien demands Earth's surrender and causes a third of the world's population to go into a hypnotic state. The Sycorax threaten to make these people commit suicide unless they are given half of the world's population as slaves. One of the scientists discovers that all of the hypnotised people share the same blood type (A-positive), the same as contained in a sample on Guinevere One.

They used blood control to control people.

On the Ansible you are probably right.

Comment Re:Signals (Score 1) 144

Couple books/shows come to mind...

Ender's Game using the ansible for instant communication across great distances (the idea that half of it is in one place, the other half somewhere else) and didn't they do that for very short distances already? like a few feet or so?

but also Dr Who comes to mind... depending on what we send out, can they control us with it?

Could it be a very weak attack?

Comment Re:Email is expensive? (Score 2) 130

sure it would... the salary of the people doing the work to move money around and account for it.

A few months ago I put a request into the company I work for asking for a $20 piece of software (against policy to buy it and install it myself, gotta go through the process...)

Looking at the process, it would have cost thousands in employee time to document, review and approve the purchase of the $20 piece of software at all the different levels of management involved in it. it's insanely wasteful.

Comment Re:waste of time (Score 1) 380

numbers were way off.. but still 5 more cars per minute is impressive.

4 way stop average number of cars through in 15 minutes was 385.
Roundabout average number of cars through in 15 minutes was 460.
Improvement of about 20%.

If you don't care to watch the video they set up a 4 way stop course and then a roundabout course. They used a bunch of drivers and did two 15 minute tests of each course counting the number of cars that got through and averaged them. The roundabout was a 20 percent improvement over the 4 way stop. And even though they let the drivers practice a bit on the roundabout before the tests they were American drivers that for the most part don't have the day to day experience that European drivers do with roundabouts so I am thinking the efficiency of the roundabout is even greater.

http://webcache.googleusercont...

Comment Re:waste of time (Score 4, Informative) 380

Myth Busters took this on for a very congested test (also very controlled)

They got somewhere around 180 cars through a traditional 4 way stop, and over 300 through the same space as a roundabout. I was floored it was that great of a difference, they said because at any given time there were multiple cars in the roundabout doing their own thing. (may be off on the numbers, but the roundabout was unbelievably better in their test)

Granted the layout of the roundabout matters a TON, and most I have seen around here are cram a roundabout in a tiny space so you don't REALLY know if the car to your left is leaving the roundabout or continuing...

Comment Re:You want IE to be relevant? (Score 1) 105

Healthcare IT is also rough, we have some government mandated things saying you MUST use IE8, others that the same people use are now saying you must have 9 or 10, and I think there is still a handful that need 7.

The only option for many of these people is either versions in Citrix (MS approved way) or ThinApp, which works great, but MS doesn't like it.

Slashdot Top Deals

Receiving a million dollars tax free will make you feel better than being flat broke and having a stomach ache. -- Dolph Sharp, "I'm O.K., You're Not So Hot"

Working...