Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror

Comment $10,000 for a restore? (Score 1) 123

No. I've literally restored 325gb of network share with 4 mouse clicks. Admittedly it took about 12 hours but how inept do you have to be to spend $10,000 on a simple restore.

Even if you had to secure courier the tapes\drive backups from Iron Mountain, at most 2 grand. It's a network share, they aren't doing DLI\BMP loads to a mainframe.

Comment Re:Poor document security control (Score 2) 123

Incorrect. In banking you have:

Public
Internal
Confidential
PCI (Sometimes called Client Confidential)

Which is pretty universal across the banking world.

Customer information is a completely separate status compared to Confidential. In addition there is a 5th status, rarely used, Trade Secret classification.

PCI data is 'need to know' access, usually through a tool called RACF. Very few people have full access to PCI data in banking. Even branch staff are looking at the data via an interface and only see a portion of the data that matches their RACF profile.

DDA and TDA info is separate from Plastic Card data, package codes, transaction (General Ledger) data, etc. All those different data sources are built into views\screen that are controlled by entitlements per user and role (templates). I deal with it daily as I have, based on my role, full view access, but 99% of staff cannot see all the data at once. Collectively it is called 'Separation of Duties" policy.

In banking a single customer's data is actually a collection of 30+ databases woven together. In general and simple terms you have:
* Customer
* DDA
* TDA
* General Ledger
* Automatic Clearing House (ACH usually)
* Packages (Things that apply to accounts, for example A Gold Card versus Platinum Card, Regular Interest, etc. Think of them as video game buffs and curses to products)
* Mortgage
* Wealth Management (Trust funds for example)
* Tax Processing (sometimes called The Year End System)

Each of those could have dozens of databases and each of them could have 1-50 sub-databases all woven together through a security management suite (RACF is an example) and every one of them has their own security requirements and entitlements. At any given bank there is likely less than 20 people that have full access to all of those systems to view that data. On planet Earth there is likely less than 20000 people that have full access to view all that data at once across every single banking institution.

Likely they were storing PDFs for mortgage documents on a network share rather than in a secure document management system or something simple like on-prem Sharepoint, which is fine if they are encrypted. PCI requirements don't cover malicious authorized users from doing dumb shit like deleting files.

That said if the Credit Union was giving blanket full access to all employees, right now, the deleted files and the rogue employee are seriously, the least of their concerns. Visa could drop them for non-compliance of the PCI standards (which Visa pretty much created, many places still call it Visa Compliance versus just PCI) The fines are multi-multi-millions of dollars.

Comment Not good (Score 2) 75

If you can work from home, you can work from India. As someone who has worked from home for over 15 years I've seen THOUSANDS of people get the opportunity to work from home (hell I was on the committee that drafted the rules) and I can tell you with absolute clarity that the only, THE ONLY reason companies are letting people work from home is to field test the ability to offshore that job and they will if possible.

Just at my job alone I saw over 1000 jobs that were allowed to do work from home, ALL OF THEM WERE TERMINATED AND OFFSHORE WITHIN 2 YEARS. ALL OF THEM.

If you can work from home, you can work from India. Unless you are super specialized, if you think you can work from home full time, you job is going to India or eastern Europe.

Comment Offshoring!! (Score 1) 179

No it will make it massively worse. Now that everyone proved their job can be done remotely just wait till the surge of offshoring happens. I'm sitting here looking at a req for 4000 jobs to be off shored. Looks like October is going to be pretty fucking grim. Last nail in the IT\MIS coffin. If this is any indication, 30-40% of the IT jobs are going off shore, soon.

"See I can work from home" = "You job can be done anywhere in the world, cheaper."

Comment Nothing has changed (Score 1) 425

I've been working remotely for the last 15 years. On top of that I am one of those filthy 'preppers' (you know, a boy scout) so to be honest, nothing has changed except I don't go to the gym in the morning to simulate a commute.

For those that are starting I have some advice:

1: Have a commute. Even if it is walking around the block, 15 minutes on a treadmill, etc. Have some physical transition between the work day and you home life.
2: Eat on a schedule. Schedule lunch. Stick to it.
3: Never eat at your desk. Eat at your kitchen table or where ever you normally eat a meal.
4: Breaks. Schedule them on your work calendar. Do pushups, rotate laundry, whatever. Get up and move around.
5: SHOWER. Due to my work load I take a shower on my first 15 minute break (Navy shower here, literally takes 9 minutes).
6: No coffee after 4 PM. For new commuters your sleep will get a bit weird for the first few months.
7: Stand during conference calls. It helps you move around and not wreck your back.

Comment Preppers (Score 1) 85

Don't forget it was that film that launched the modern 'Prepper' movement. Prior to when that film came out it was an obscure pseudo-movement. Most preppers I've met cite that film as the wake up call (specifically what Wahlberg's character has to deal with). Coupled with Hurricane Katrina that pair were mom and dad of the modern Prepper movement.

Comment Same Shit (Score 1) 200

Yeah yeah we also remember they wanted to use mines and hollowed out mountains to store compressed air to generate power and it fell apart because it took more power then you get out. It is almost like there is some kinda law in nature where you can't get more energy out of a system then you put in. If only there was a way to capture some of that free energy the giant nuclear furnace in the center of our solar system throws out rather then keep trying trivial inefficient FOTM technology.

Comment Virtual Goods (Score 2) 57

I warned about this nearly a decade ago and we are getting closer and closer. If Crypto-currencies have 'intrinsic monetary value' then your WoW or MMO gold will also. You bet your ass the IRS is looking into taxing virtual goods value. Remember the Diablo Auction House. That had a tie to Virtual to Real currency exchange rates. How about Eve Online's PLEX which also strongly tied a virtual currency to real dollar valuation. If Bitcoin, a virtual currency is recognized by the government as an object with real world value without legislation, that opens the floodgates for ANY virtual currency to be pegged a real value. If you can buy a Path of Exile Exalt orb for $X then that ties a currency valuation to it. If the IRS is backdooring Bitcoin as something that can be taxed, anything virtual can be taxed then. I can't find any law that ties virtual currencies to real values (establish virtual goods as a recognized fiat currency) so likely IRS is trying to backdoor that. If that backdoor passes the obvious court case that would arise then bam, ANY and I mean ANY virtual good, could be taxable. Just like gambling winnings.

"Hey we notice in Diablo 4 that your Sword of Infinite Truth you got in that raid is worth nearly $2000 dollars in real world currency. Please note you must claim that as earned income on this year's tax return. In addition we like to remind you that if you sell that sword or vendor it you must collect the appropriate state sales tax for your state of residence as well as any VAT tax where applicable as well as any local taxes for the location of the data center where your virtual goods are stored. We've already established a partnership with Blizzard Entertainment to track all drops and prepare a Virtual Currency and Item log that is reported quarterly to the IRS for the purpose of valuation and income reporting. Thank You. Please note that all sales must comply with the applicable sales laws of the country you are a resident in, the country in which the data is stored, and the country of the recipient of those virtual goods."

Don't laugh, I spent 6 years studying money laundering in virtual economies and yes discussions like that have taken place on "The economic viability of recuperating lost tax revenue in virtual economies and grey market transactions." It was around the time the news caught on about Second Life and people flipping goods in EQ and other MMOs "So and so made $100,000 on selling virtual goods" new reports.

The ONLY reason they are not taxing the fuck out of you on virtual goods like in-game gold and items, is these fuckers couldn't agree how to split the revenue between state, local, and Fed and reconcile international law when data centers are abroad. Add in loot boxes as a vector to legitimize virtual goods having economic viability and you see that pattern. You are on the hook when you sell something already based on the money you collected. They only stalled on getting the goods in the first place. Funny on how all the attention lately was on loot boxes and how it is considered gambling... must be there to protect the children... yeah... nothing to do with taxing gambling winnings... and empowering game developers to literally control the generation of said gambling winnings out of thin air.... it's for the children!

It isn't just about bleeding customers with gambling when it comes to loot boxes, it's also about positioning gaming companies to be on par with the Federal Reserve in the ability to literally print fucking money. And Uncle Sam is all for that as long as they get their cut. The risk for money laundering, market tampering, insider trading, etc... is huge. "Sorry we had to scale back the drops of X because we don't want the real market value to drop since we have to pay inventory tax on each drop logged in the database. But we did give ourselves 200 of X before this press release which should drive up the value even more which we will be posting on the in-game AH over the next few weeks."

The idea that the government gets to decide if a purely virtual good is a legitimate Fiat currency that can be taxing without legislation is the third scariest thing I've heard.

Comment Color Me Suprised (Score 1) 704

But looking at the comments it is clear few, if any, read the transcript (including most reporters apparently.) It is clear why he asked and the idea that it is purely political research against an opponent is a stretch. It seems more a response to the Clinton E-Mail server charges\cover up\mess.

I mean he did campaign on "Lock Her Up" after all. Seems like he's just doing his job and the other side is crying foul.

Slashdot Top Deals

Some of my readers ask me what a "Serial Port" is. The answer is: I don't know. Is it some kind of wine you have with breakfast?

Working...