Forgot your password?
typodupeerror

Comment Re:Was it a fair test? (Score 1) 76

* Had employees already been through some basic anti-phishing training?

Every year we are required to take anti-phishing training. It's about 20 minutes long and gives examples of what to look for. You also have to take "tests" at the end to see if you learned anything.

Fortunately, for us, the phishing emails IT sends out are fairly easy to recognize if you take a few seconds to look at them. You don't even have to hover over any links.

Comment Re:Let me guess (Score 4, Informative) 48

And I bet you'd love it if we didn't have Russian diesel... imagine what your head of Mexican lettuce would cost.

The same. The first delivery of diesel amounts to 2.5 hours of diesel usage in the U.S. The total delivery comes out to about 3 days worth.

Yeah, totally fantastic to support a dictator deliberately targeting civilians to get for 3 days of fuel. It's sure to substantially drive down costs.

Submission + - Tesla does not allow people to repair their own vehicles (newrepublic.com)

smooth wombat writes: A decade ago, Rich Benoit bought a used Tesla at auction. The car had been flooded and he thought he'd repair it. When he reached out to Tesla to buy parts, they said no.

“They literally just said no,” he said. “I thought it was going to be a lot easier: ‘Hey, I’ll just buy a battery, put a battery in, put a new motor in, you know, buy some new interior parts.’ They literally said no. I’ve never seen anything like that before, and I think that’s what started the journey for me.”

Benoit’s professional background was in I.T., but this launched a new career in fixing electric cars, and he also runs a now 10-year-old YouTube channel with co-founder Carl Hewitt about his work, called Rich Rebuilds. He says nearly every electric vehicle company has responded the same way Tesla did. So his new career intersected quickly with the right-to-repair movement, which argues that companies shouldn’t be allowed to refuse access to the information and equipment people need to make repairs on the products they’ve purchased.

At least nine states have passed right-to-repair laws—most of them blue, along with Texas and Kansas—and every state has debated similar laws that would require at least some manufacturers to provide the tools people need to make repairs on their products. A federal bill is sitting in the House, waiting for potential consideration in the lame-duck session, but it’s unlikely to rise to the top of Congress’s long to-do list. For Benoit, though, this is about much more than just fixing cars. “This kind of encompasses a larger overarching theory that the corporations own what you have,” he said. “You don’t own anything. You just rent it.”

Comment It's not enough (Score 5, Informative) 169

Every data center Ukraine can locate needs to be leveled. That would be far easier if the Russian asset in the White House would stop sucking Putin's dick and help Ukraine do its job.

After that, a systematic destruction of every power generation site surrounding Moscow needs to be undertaken. The city needs to go dark and stay dark during the winter.

If Ukraine hasn't already planned for this, they need to do it now. So long as Russia deliberately Ukrainian power generation and civilian targets, Ukraine needs to do the same. Once Moscow is dark, the muscovite midget's whining will be a joy to hear.

Comment Re:uh no (Score 2) 169

t's true that Ukraine has taken back some number of square kilometers of land (at high cost, mind you),

Yes. Several thousand Russian soldiers are now dead during Operation Vivaldi. A glorious outcome. What took you Russian trolls over a year to do Ukraine did in three months. You not only lost thousands of soldiers trying to take the land, you lost several thousand more losing the land.

Brilliant!

And before you start on, "But what about Ukraine's losses?", they have already admitted they lost soldiers, but in a small number. Nothing near the thousands you slovenly, drunk degenerates lost.

Comment Verizon isn't much better (Score 2) 95

My parents have Verizon and have had them for years. The cost of phone, tv, and internet is roughly $135/month, and that's only for them to get 12 specific channels they choose along with local channels. Neither watch much tv any more which is why they went with this package.

That is still far too much. However, when my dad and I look over what it would cost to drop the tv portion and use something else such as YoutTube TV, they'd only say about $10/month.

We've talked about moving him to Comcast to get the lower rates, but he hasn't made the jump yet.

I have Comcast for internet only and have no problems with them despite the repeated complaints on here.

Comment Re:Not surprising (Score 5, Informative) 42

You people like to lie, don't you? All covid vaccines underwent trials before given to the public. Those trials are how we know of any potential side effects. The ones you people keep claiming were never known.

You must be one of those who claims there's never been a double-blind study for vaccines even though they've been done. This article, published before covid hit, lays out the lies people like you put out and why they're lies.

And here's the results of a double-blind study on the effectiveness of the MMRV vaccine from 2016. How timely considering Kennedy lies about the measles vaccine.

Comment Re:PHP (Score 4, Interesting) 95

These are also many of the most looked at, most often fuzzed, SAST scanned, valgrind'd things in the world.

I really don't think it will be as bad as all that. We have not seen Apache, Nginx, etc pwnd like this, or OpenSSH, or Bind, or postfix ...

I could go on. I think the actual posture and condition of most of these project is far better than you apparently expect. (I guess we are going to see who is right).

What AI is finding is stuff the other scanners miss, which is stuff where there is a clear temporal component. We are going to see races, toc-tou, probably more stuff like these PHP issues which if I understand correctly is a use-after-free or something you could at least force into that taxonomy.

So there are going to be new bugs found, even seriously impactful appearing ones, but the reach-ability and chances of successful exploitation outside laboratory conditions is going be low... Do they work when it is a VM on you lab server you can hammer away at with 1000 threads yes; when there is a AWS ELB in-front or a waf that has any impact on request ordering or pipe-lining, good luck..

I am not saying people won't be spending more hours patching over the next year or so than they have been, they will but the sky probably also isn't falling

Comment Re:PHP (Score 5, Interesting) 95

People say that but I think they say it without a lot of real understand of what the web was like when it was born, and second that PHP5(+) does not look much like PHP 4(-)

Before PHP there were CGI scripts/programs, which were Perl, sh, or C or if you were on Windows classic-asp. If you wanted maintainability your wrote in Perl (yeah I am being serious) and if you wanted performance or needed to do something complicated you wrote it in C. Remember we are talking 1995-97 here there isn't even a C++ standard yet! These were you main choices for 'web development'.

PHP let people do what demanded C in something that did not have to be compiled and did require understanding C style memory management. Here comes the big BUT though, all the really good, really useful library code out there was C. All those library authors did not talk to each other so everyone was different in terms of conventions, who allocates the the caller or the called, who frees, are we passing references or values for primitives, etc. All different and php did not attempt to hide any of that as it pulled in those libraries it wrapped them in its runtime and memory management without attempting make their use orthogonal and part of some consistent ecosystem.

It wasn't a 'hack' it just was not a complete abstraction.

That was 'fine' for people who came to PHP from writing C, and were using PHP because it let them make changes on the fly, saved writing a lot of boiler plate request life-cycle management stuff, etc. It all made sense, if you can at it not from C though it was confusing mine-filed of gotchas. It made web development possible for a whole lot of people who never got access to compiler. That was cool, but it also put a lot of power in the hands of people the way the Visual Basic "Declare" keyword did, and unsurprising they did hack-y things with it, cause themselves all sorts of problems..

Comment Re:May? (Score 2) 64

Meanwhile in America the bleeding hearts want âoejusticeâ for a botched lethal injection death, and guilt-trip society when our Military wants to put a mass murderer in front of a firing squad. Pathetic.

And give pardons to the terrorists who attacked the Capitol in an attempt to overthrow the election, attacked police and put one in the hospital after he was repeatedly beaten and tasered, and destroyed and stole government property.

Submission + - Government web sites go dark after severe PHP vulnerabilities disclosed (reuters.com)

smooth wombat writes: PHP disclosed two critical vulnerabilities in their programming language and urged web site operators to immediately apply the fix. As a result, government web sites in Europe and elsewhere temporarily went dark on Wednesday as operators worked to protect their systems.

Dane Knecht, the chief technology officer of Web and cloud security firm Cloudflare (NET.N), opens new tab, said that attacks were emerging and Cloudflare was updating its firewall rules as a stopgap measure.

"We are seeing early attacks emerging and are updating mitigations as new vectors show up. This is a STOPGAP only. Patch as soon as PHP releases the update," he said on X.

Officials have said that all PHP versions from PHP 5 onward could be affected, although PHP has not yet disclosed which versions are vulnerable.

Comment Re:More compute is not needed (Score 1) 22

I don't understand that instead of spending a few million on improving the code and the algorithmd they are instead spending billions on infrastructure?

The same could be said for computers. Why spend all the money on increasing processor or RAM speed or new video cards when you could just update the code behind the OS and software? We'd still be using 486 machines!

Slashdot Top Deals

How much net work could a network work, if a network could net work?

Working...