Catch up on stories from the past week (and beyond) at the Slashdot story archive

 



Forgot your password?
typodupeerror
×

Comment Re:Likely attack vector: NOAA weather radio (Score 1) 235

The exact format is tricky,

Oh spare me. Its about as complicated as an ancient FSK bell 103 modem, like a 300 baud modem. You want a complicated layer 1, try a 56K modem or heck even the PSK / QAM family would be more complicated.

As for your "tricky" layer 2 message format, again, unimpressed.

A really simple hack would be that they system is heavily overused. Every time one divorced parent is 5 minutes late at prisoner exchange time they call the SWAT team to embarrass and punish. Every time a snow flake falls they send a critical warning. Every time a drop of rain falls, a tornado watch alert is sent. Now yes I'm well aware that once in a while there is a REAL emergency. The point being that you don't need a full set of encoders and decoders, because there is not chronological component or hashing or salting or any crypto at all, a simple tape recorder is all thats needed for chaos.

I would not be surprised if "out there" on the net there's a sort-gray-hat ftp site full of wav files ready to play on a smart phone held up to a broadcast/remote broadcast/wireless microphone.

You don't need a EE degree to write your own SAME encoder, nor do you have to attack the geeks simply for being able to do it. All you need is to know how to use google and how to use wavplayer and/or whatever plays wav files on your smartphone, and ...

Comment Re:Helena too (Score 0) 235

Given the incredible simplicity of the SAME protocol I'm surprised that to the best of my knowledge SAME filters are not common in broadcast engineering.
It seems a pretty trivial filter to add to existing phone patch gear, for example, which would utterly eliminate the chance of your hack above.

Are you seeing multiple 2 or so millisecond bursts of adjacent more or less roughly 1500 and roughly 2000 hz? If so, eat them and output zero to the transmitter stream. Something like a phone patch already has plenty of latency for the echo cans so its no big deal to add.

This is so blindingly obvious that you'd think all phone patch gear would have it, so no one talks about it or even puts it in brochures. Or, as usually happens with security epic fails, they don't, LOL.

Comment Re:Let me guess... (Score 3, Interesting) 235

It's by no means difficult (though highly, highly illegal) to point a few-dozen watt transmitter at the receiving antenna with a highly directional antenna

Its a hell of a lot simpler just to get really close and use a "low" power omni. If "they've" got 1e4 times the power but you're 1e6 times closer, you do the math for who wins the FM capture effect battle. Rather like a cheap mp3 transmitter can override a 50 kilowatt broadcast transmitter, well, for 10 feet or so. You can imagine the range a 50 watt mobile has vs a 1000 watt NOAA/NWS transmitter. This is in the news fairly often. Most commonly someone transmits over the NOAA weather radio freqs this way using some old VHF-hiband mobiles (now there's a well thats running dry...) reprogrammed.

Anybody who's ever written a SAME code decoder for weather radios or a SDR, or ever seriously considered it anyway, would not be very challenged by writing a SAME code encoder, in fact probably had to write one first, to test their decoder.

I enjoy the comedic stories I read in the newspaper about this. Those are real hacks. Like announcing a blizzard in Florida in the summer, heat warning in the frozen north during the winter. If I were still an impulsive teen I'd probably be doing that kind of thing.

However, the people who transmit sorta-plausible stuff intended to scare people are just jackasses. There's a fox news "joke" in there somewhere, or maybe not really a joke.

Comment Whats the internet? (Score 5, Insightful) 295

Whats the internet? They just listed some specific services. I'm on usenet going back to 1989, I believe. Certainly 1991 at worst. Anyone younger than 35 or so pretty much just said "usenet? whats that?"

Amusingly they didn't list what it takes to remove yourself from compuserve (I was on from 1981 till... donno) and prodigy and myspace and ...

30 years from now you'll mention you were on linkedin and the 22 year old girls in HR who filter the resumes will say, "huh? Whats a linkedin?" Ditto facebook, G+, etc.

Comment Re:About time... (Score 3, Funny) 77

100 years ago before the advent of the computer that might be true. Today though?

A large part of the modern educational system is geared precisely toward that. We are easily the best prepared 1913 workforce the world has ever seen. Our 10000 man factories will be staffed by fully qualified drones, our draftsmen are fast and precise when hand drawing blueprints... The more you think about it, the truer it is. The bell rings, just like a factory whistle. Rows of desks just like rows of (hand/human operated) machines on the factory floor. Not much has changed in over a century.

Comment Re:Up to the parents now, as it used to be. (Score 2) 77

We're pretty much at this point with retail cashiers right now.

Back when I worked retail management as a starving student (admitted a couple decades ago, now) we had to fire a girl because she didn't know how to make change. Like the cash register reads 37 cents, now which coins to you hand to a customer? She simply could not figure it out. Even after trying to teach her to count up, she simply couldn't add numbers fast enough. I'm sure she's probably a CEO or accountant now.

Comment Recordings? (Score 2) 25

I've always enjoyed watching the recorded HOPE and debconf videos, I looked at the schedule and there's a few I'd like to see, but not at the $1000 (approx total) it would cost me to attend... does this con video the presentations and then distribute? A pitiful attempt at searching did not yield previous con videos, but its awful hard to prove a negative. Not living on the coasts means I can afford to drop $1000 without blinking (well, without blinking too much) but I'm too cheap and over scheduled to go.

I LOL at cons that make a big deal about both advertising to the entire world and reducing the ticket price from $50 to $40 or whatever. Yeah that is a big deal for the local student population, but only a couple percent of my airline ticket / hotel / meals / whatever. You could let non-locals in for free, or charge non-locals $400, and it wouldn't really change the overall individual's budget very much. Also I'm not 18 anymore so spare me the claims that I can hitchhike to the con, sleep on a park bench and catch and roast pigeons so its not really that expensive, if I'm taking a vacation I'm taking it easy... Looking the other way, isn't LA kinda like Manhattan where a years worth of rent there is more than my entire suburban house cost, so the locals should be able to drop $500 at a blink just like me... Its something I've never really understood about con economics.

Comment Re:When you get upset at Salman... (Score 1) 69

Or more directly, is that your personalized ringtone and what was salman's reaction the first time he heard it?
I used to have a personalized ringtone that said something like "Wife Alert" whenever my wife called, she was pretty pissed about it, still don't know why. Probably thought I had a "Girlfriend Alert" ringtone too.

Comment Re:Verification (Score 1) 69

nor would I have any other way of proving my knowledge to other schools or potential employers

Google for CLEP tests, older than dirt or at least older than me.

One school I attended only allowed two CLEP tests per semester. I have absolutely no idea why both in this practical situation or in theory. Also they only accepted CLEP tests for certain classes. I'm pretty sure calc was one of them, but if there is a CLEP test for diffeqs and you pass yet they refuse to accept it via the xfer process, you're pretty much SOL other than the appeals process.

Potential employers don't seem to care about much other than granted degrees. HR doesn't care about anything other than Bachelors, Masters, and Doesn't have a PHD.

Comment lead dev (Score 1, Interesting) 69

Lead dev, eh? I'm betting you sit in on lots of spec definition meetings. Maybe with The Man himself. Does he give informal presentations just like the real lectures or ? Feel free to lie if the answer would get you fired. Hmm maybe this question sucks.

Ah F it that was dumb lets ask something more realistic. I always ask coder/tech types whats their coolest hack / coolest piece of code. Not something else someone else did, not some giant overall project or vague thing like "world peace" just your coolest isolated to one individual "thing" hack. Something they did personally not hired someone else to do, or something their boss did. Maybe in your LOB its an amazing caching technique, or an astounding way to compress video or whatever. Or some astounding workflow thingy. A short story just a paragraph no more. The kind of thing a /. audience would respond with "cool!" when they read it.

Slashdot Top Deals

UNIX was not designed to stop you from doing stupid things, because that would also stop you from doing clever things. -- Doug Gwyn

Working...