Comment Re:Best Part (Score 1) 174
Some intruders download Windows service packs to check the bandwidth available.
Duke Nukem Forever Release Date Revealed 288
stupid_is writes with news that Duke Nukem Forever has now gotten a firm US release date: May 3rd. It will release worldwide three days later. The game was resurrected last fall by Gearbox Software and 2K Games after 3D Realms' 12-year attempt at development came to an end in 2009 when the company closed its doors.
Comment Re:Won't someone please think of the children (Score 1) 256
You said
"HTTPS only works one IP per host, so that gives a positive track to where they were going."
That is not correct. If you inspect HTTPS traffic you'll see that clients issue something like the following:
CONNECT www.myawesomehost.net:443 HTTP/1.1
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1.5) Gecko/20091102 Firefox/3.5.5
Proxy-Connection: keep-alive
Host: www.myawesomehost.net
The same IP address can host www.myawesomehost.net and plenty of other Web sites. With HTTPS the Feds would just track the CONNECT and Host: fields since those are in the clear.
Comment Re:Thanks! (Score 1) 216
"I know the book has pissed some people off, especially when I take on their particular sacred cows (e.g., intrusion detection)."
"Sacred cows" have nothing to do with it. The book just isn't that interesting.
Comment Richard Bejtlich's Observation of CDX 2009 (Score 1) 219
Richard Bejtlich from the TaoSecurity Blog was invited by NSA's Tony Sager to visit the CDX in person:
http://taosecurity.blogspot.com/2009/05/thoughts-on-2009-cdx.html
Bejtlich mentions that CDX participants were given a budget for the exercise. This means it cost them "marks" (in exercise language) to replace the Windows images NSA provided with alternative systems like FreeBSD or Linux. That decision caused the team to have less resources for other tasks.
The Army didn't win just because they used Linux. Bejtlich posts reasons why they won here:
http://taosecurity.blogspot.com/2009/05/lessons-from-cdx.html
Comment Linked pdf is not the result of the 60 day study (Score 1) 133
Watch for a report from Melissa Hathaway, who is leading the effort. The linked
Comment Association of Former Information Warriors (Score 1) 426
As a result of this discussion, the Association of Former Information Warriors was created.
LinkedIn Group:
http://www.linkedin.com/groups?about=&gid=1847393
Blog:
Amtrak Photo Contestant Arrested By Amtrak Police 675
Photographer Duane Kerzic was standing on the public platform in New York's Penn Station, taking pictures of trains in hopes of winning the annual photo contest that Amtrak had been running since 2003. Amtrak police arrested him for refusing to delete the photos when asked, though they later charged him with trespassing. "Obviously, there is a lack of communication between Amtrak's marketing department, which promotes the annual contest, called Picture Our Trains, and its police department, which has a history of harassing photographers for photographing these same trains. Not much different than the JetBlue incident from earlier this year where JetBlue flight attendants had a woman arrested for refusing to delete a video she filmed in flight while the JetBlue marketing department hosted a contest encouraging passengers to take photos in flight." Kerzic's blog has an account of the arrest on Dec. 21 and the aftermath.
Comment Released in 2001 by Sir Dystic at Atlantacon (Score 1) 203
Submission + - Jaguar: World's most powerful computer (nccs.gov)
Protoclown writes: "The National Center for Computational Sciences (NCCS), located at Oak Ridge National Labs (ORNL) in Tennessee, has created the 1.64-petaflop Jaguar supercomputer for use by scientists and engineers, working in areas such as climate modeling, renewable energy, materials science, fusion and combustion. The current upgrade is the result of an addition of 200 cabinets of the Cray XT5 to the existing 84 cabinets of the XT4 Jaguar system. Jaguar is now the world's most powerful supercomputer available for open scientific research."
How To Make Money With Free Software 81
bmsleight writes "The Dutch Ministry of Finance organized an architecture competition to design not a building, but rather the new 5-Euro commemorative coin. The theme was 'Netherlands and Architecture'. The winning design was made 100% with free software, mainly Python, but also including The Gimp, Inkscape, Phatch, and Ubuntu. The design is amazing — the head of Queen Beatrix is made up of the names of architects based on their popularity in Yahoo searches (rendered in a font of the artist's own devising). In the end the artist, Stani Michiels, had to collaborate closely on location with technicians of the Royal Dutch Mint, so all the last bits were done on his Asus Eee PC. Soon, 350,000 Dutch people will use and enjoy the fruits of free software."
The IDA Pro Book 85
An anonymous reader writes "After attending DEFCON in August and seeing the overwhelming interest in this book, I was eager to dive into The IDA Pro Book by Chris Eagle. Chris Eagle's team, School of Root, won the 'Capture the Flag' event at DEFCON this year and Chris gave a presentation on CollabREate, a tool that integrates with IDA Pro to allow collaboration in reverse engineering (RE). All of that — together with the fact that the book sold out — screamed that this book should quickly make it to the top of my list." This review originally appeared on The Ethical Hacker Network.
Comment Re:Someone's lying here... (Score 1) 341
if someone has cancer, and is exhausted and nauseous after receiving their chemotherapy, you should fire him too?
Of course not. You send them home on long-term disability and replace them. Companies have an obligation to be sympathetic, but not outright charitable. There's no reasonable expectation for a company to continue paying someone a full salary and receiving nothing in return, simply because the person has a crippling illness. That's what insurance is for. Salary is payment in exchange for work.
Most medical professionals consider alcoholism a disease.
Provably false and thus unworthy of further comment.
Of course not. You send them home on long-term disability and replace them. Companies have an obligation to be sympathetic, but not outright charitable. There's no reasonable expectation for a company to continue paying someone a full salary and receiving nothing in return, simply because the person has a crippling illness. That's what insurance is for. Salary is payment in exchange for work.
Most medical professionals consider alcoholism a disease.
Provably false and thus unworthy of further comment.
Comment Re:Small world (Score 0, Offtopic) 473
+1 for homeschooling.
We started homeschooling our daughter last yesr (3rd Grader). Our oldest son statred homeschool "kindergarten" this year. Our kids get 1hr of TV time or 1 hr of computer time (they love playing the flash games on nick.com et al), and they can get TV/computer time taken away as punishment (accompanied by wailing and gnashing of teeth)
We started homeschooling our daughter last yesr (3rd Grader). Our oldest son statred homeschool "kindergarten" this year. Our kids get 1hr of TV time or 1 hr of computer time (they love playing the flash games on nick.com et al), and they can get TV/computer time taken away as punishment (accompanied by wailing and gnashing of teeth)
Comment WARNING! (Score 5, Funny) 59
Your children are at risk! While browsing online, they may be exposed to many forms of humor, including parody, sarcasm, and even irony. Most parents are unaware of the dangers these pose. Symptoms of exposure include:
Your child could be reading The Onion at this very moment...exposing thier tiny, unformed brain to a world of raw, hardcore comedy. Take action now! Before it's too late!
- Sassing and Talkback
- Uncontroled Laughing
- Creative Impulses
- Original Thoughts
Your child could be reading The Onion at this very moment...exposing thier tiny, unformed brain to a world of raw, hardcore comedy. Take action now! Before it's too late!
