Follow Slashdot stories on Twitter

 



Forgot your password?
typodupeerror

Submission + - Network security devices endanger orgs with '90s era flaws (csoonline.com)

snydeq writes: Built to defend enterprise networks, network edge security devices are becoming liabilities, with an alarming rise in zero-day exploits of what experts describe as basic vulnerabilities, writes CSO's Lucian Constantin in a report on the state of the security product industry. 'Attackers constantly evolve their techniques. Security engineering, inherently challenging, can’t fix everything. All software products have vulnerabilities, even security tools. These would be valid responses if we were dealing with complex flaws, says Benjamin Harris, CEO of cybersecurity and penetration testing firm watchTowr. “But these are vulnerability classes from the 1990s, and security controls to prevent or identify them have existed for a long time. There is really no excuse.”' Constantin talks with security experts on the rising use of network security device vulnerabilities for initial access —and with the vendors on what steps they are taking to stem the tide.

Comment Re:Every military that cares about homeland securi (Score 1) 172

Right, the economist refer to this as "externality". Fossil fuels aren't cheap, if you factor in the costs that people using them transfer to third parties. Theoretically, if the true cost of using fossil fuels were factored into every pound of coal or gallon of gasoline consumed, then we would use *exactly the right amount* of fossil fuels. Probably not zero, but not as much as we do when we pretend pollution isn't a cost.

Comment Re:Nuclear Facility in WA (Score 2) 36

Hanford announced last week that their spent fuel vitrification plant is officially in operation, converting nuclear waste into glass ingots that can be safely stored for millenia. If they keep going for about a century they might be able to vitrify the spent fuel we already have. But we still have no place to store the ingots.

All these small modular reactors have the same deficits. They require high assay low enriched uranium (HALEU) produced only in Russia. They're a proliferation risk. They require a substantial footprint with passive and active defenses, 24/7 armed security, security clearances for all the highly paid professionals involved. They're slow to approve, finance, build. They're more costly even than classic nuclear reactors to build and operate, and those are the slowest building and most costly form of energy which means high energy costs when (if) they are finally built. Traditional nuclear reactor projects have a 95% failure rate from proposal to generation so 19 times of 20 they never deliver a single watt hour. Those times the money is just spent and lost. The one time in 20 that the generation comes online to produce the world's most costly power doesn't even include those costs.

At Hanford cold war nuclear waste continues to seep gradually toward the mighty Columbia river. Inch by inch.

Somewhere in America just now a homeowner just plugged his DIY solar panels into the inverter and battery he bought on Amazon for the first time. It will give power 24/7 for 30 years at no additional cost. It was quick and cheap. He didn't even need permission. It won't kill his family, nor yours, nor mine. There is no chance that his solar panels will result in radioactive salmon or other seafood.

Comment Re: Bad ideas that just won't go away (Score 1) 148

I essentially made the argument that if we want capitalism to work the way we were taught in civics class it is supposed to, companies must be forced by regulation not to undermine the basic assumptions that lead to efficient operation of the free market.

I am neither here nor there on a basic income. I think it depends on circumstances, which of course are changing as more and more labor -- including routine mental labor -- is being automated. We are eventually headed to a world of unprecedented productive capacity and yet very little need for labor, but we aren't there yet.

Comment Re:Bad ideas that just won't go away (Score 1) 148

Anybody who is pushing AI services, particularly *free* AI services, is hoping to mine your data, use it to target you for marketing, and use the service to steer you towards opaque business relationships they will profit from and you will find it complicated and inconvenient to extricate yourself from.

Comment Re:Bad ideas that just won't go away (Score 2) 148

The question is -- ideas that are bad for *who*? This may be a very bad idea for you and me, but it is a very good idea for Microsoft, especially as, like their online services, they will make money off of us and it will be very inconvenient for us to opt out.

In civics-lesson style capitalism, which I'm all in favor of, companies compete to provide things for us that we want and we, armed with information about their products, services and prices, either choose to give them our business or to give our business to a competitor.

Not to say that stuff doesn't *ever* happen, but it's really hard to make a buck as a business that way. So what sufficiently large or well-placed businesses do is earn money *other* ways, by entangling consumers in business relationships that are opaque and which they don't have control over, may not even be fully aware they're signing on to, and which are complicated and awkward to extricate themselves from. In other words a well placed company, like Microsoft or Google or Facebook, will constantly be looking at ways to make money outside the rigorous demands of free market economics.

Comment Re:We used to mine these materials in the US (Score 2) 146

It wouldn't be cost-effective in China either were it not for state support.

There is no doubt that global free trade in commodities, in the absence of any government support, would be the most economically efficient thing to have. But China -- probably correctly -- identifies dependency on foreign supply chains for critical materials as a *security* issue. So they have indirect and direct subsidies, as well as state owned enterprises that operate on thin or even negative profit margins.

Since China does this kind of support on a scale nobody else does, China produces more rare earths than any other country, even though it is not particularly well endowed with deposits. This solves China's security problem with the reliability of the supply, but creates a security problem for other countries.

China thinks like Japan did before WW2, like empire building European countries did in the 1800s. Control over resources is a national security weapon, both for defense and offense.

Comment Re:Hunger and population. (Score 4, Informative) 101

The behavioral model you have isn't supported by data. When you raise the standard of living and food security of population, the fertility rate goes down. When you have nothing, children are economic assets whose labor can support the family. It's not a great option, but some people live in conditions where there are no good options.

Comment Re: How is this even "tech" anymore? (Score 5, Informative) 42

One example is AlphaFold an AI program which predicts folded protein structures "with near experimental accuracy" from amino acid base sequences. This ability is going to have a huge impact on many practical problems like pharmaceutical development, agricultural science, and engineering custom proteins. For example, since the human genome has been long since sequenced, the program means we now, with a fairly high degree of certainty, know what all the protein coding sequences make.

I'd say that's a pretty significant result.

If you work in technology long enough, you see this over and over. Every time something new comes along, it's actual usefulness gets buried in the breathless media response by a mountain of bullshit. But that doesn't mean the uses aren't real.

Comment Re:Why should we care what the Pope says? (Score 2) 53

I had no concern with Joe Biden being Catholic, but I *would* think something was fishy with the *Electoral College* if six of the last nine presidents were Catholic given that fewer than one in five Americans are Catholic.

I'm not saying Catholics (or Jews) shouldn't serve on the Supreme Court, although maybe it would be good idea to have some justices who weren't Catholic or Jewish. Maybe an atheist, or polytheist.

Comment Re:"Burst of ions?" (Score 1) 132

One of the casualties of the Internet has been newspaper science desks. In the post Sputnik era, major city newspapers built teams of reporters with science and technology backgrounds to cover breaking science stories. To make use of that manpower in between big stories, they'd do a weekly science supplement, which was one of my favorite parts to read. These bureaus even had people on staff who could cover breaking news in *mathematics*.

That's all gone now, and you can see the impact of that in the scientifically ignorant summary you are objecting to. Twenty years ago, no major city newspaper would ever print anything that stupid. Today just the New York Times and Washington Post still have a newspaper science desk, and those are much reduced. Smaller newspapers barely cover local government anymore, they tend to just reprint opinion, purchased content, and press releases by politicians and corporations, and dueling reading letters on hot button issues. Actual shoe leather find out the facts journalism is in steep decline. In other words cheap content is more profitable, and science reporting is the least profitable content of all. The most widely consumed remaining sources of science information are non-profit -- the public broadcasting outlets.

Comment Re:Why should we care what the Pope says? (Score 1) 53

I'm not implying anything. I'm saying the Pope's opinion is particularly significant to more than half the Supreme Court. They won't necessarily take those words as marching orders; I doubt that they would even agree that all the other Catholics on the court are good Catholics. But it means those words are automatically more weighty than if, say the Dalai Lama or the Lubavitcher Rebbe said them.

Slashdot Top Deals

If at first you don't succeed, you must be a programmer.

Working...