click170

Not easy?

We have more pot shops in Vancouver BC than I can count. Sure, they may not be entirely legal yet on the federal level, but I'm sure the wheels of government will unstick a bit when they realize how much money is coming their way in the form of taxes. Especially when it doesn't mean defunding other programs or initiatives. This is entirely new funding that will otherwise go to the black market.

I live in Vancouver. Not too long ago we had someone flying their drone in coal harbor quite likely because they didn't realize it was an active airport and float planes take off and land from that exact location.

How sure are you that you know all the relevant things?

http://wwwapps.tc.gc.ca/saf-sec-sur/2/cadors-screaq/rd.aspx?...

I think op meant in a more general sense they are bad at what they are marketted to do because the cost of using the software (user/admin experience, not money) is starting to outweigh the pros of using the software (gets rid of viruses et al).

Sophos AV seems to go a step further, intercepting any outbound telnet connection. Good to know if your company uses Sophos and you used to use telnet for basic connectivity testing.

Most of those aren't even mututally exclusive.

I agree sometimes it takes someone with weight to throw around, but are you saying that person needs to be a Mozilla employee? Because I wouldn't agree with that.

Well, with the exception of shows like The Daily Show, Last Week Tonight, and the like but I agree overall.

With Thunderbird at least, the repo is open and available.

Does the same stand for Persona?

Perhaps instead of asking Firefox to do the legwork we should be contributing some of our own time to the projects we want to see succeed.

Is this posted anywhere besides LinkedIn? Would like to read but am not willing to give page views to LinkedIn.

It seems your right.

And it deeply saddens me to think that it may cost someone's life before anything will change.

As someone who occasionally takes sea planes, which have already had close calls with drones in my area, what I want to know is since when did ignorance of the law become a defense from it?

I wouldn't be allowed to murder someone and then hide behind that excuse.

Throw these people in jail until the message gets across that unsafe flying is not tolerated regardless of the aircraft being piloted.

Thanks for highlighting the repo!

I too had heard development had stopped and misconstrued that to mean all development.

Now I'm wondering if there are any issues I might be able to help fix. I still use Thunderbird so if I can help keep it alive, I'd like to.

As parent pointed out, most of the alternatives are worse.

There is a Linux program called Motion that I use to monitor my IP cameras.

It records to a location of your choosing and has pre and post motion detection hooks allowing you to email the pictures or videos to yourself when motion is detected.

IME it works quite well. I setup one camera and motion uses about 60% CPU, but there was no noticeable increase when I added camera 2 3 and 4.

Meanwhile, Hipchat has been having issues on and off for weeks and nobody says a thing.

You've got a valid point that available resources should factor into the decision making process for having a child.

That said, if that's the only measure then only the rich can afford to have children so clearly there has to be more to this.

What if instead, a CEO is only allowed to take time off equal to or less than the average of every other employee.

Its actually worse then that. If they force you to use insecure equipment and to put your router behind theirs, their router can be hacked providing remote access to your internet connection without you knowing about it. And when you consider that many botnets are just after your internet connection...

Wish we had this over here.

ISPs regularly send customers routers with known security flaws, already-exposed backdoors that hackers can break into and use laughably weak WiFi security by default (if any at all).

Only Canadian company I've found that let's you have some control on the modem is TekSavvy.

Firewalls on hosts should really only be used for protection against inbound traffic, trying to use firewalls on a host to block that host from sending traffic a) doesn't scale on a network of many hosts and b) can be overriden if the thing trying to send traffic has root access to modify the firewall.

Gateway firewalls are much less susceptible to malicious modification this way, and IMO are the best way to protect yourself from this type of corporate spying in general.

That's a fair point, but you gotta start somewhere (if you have an interest and an inkling that is) or just give in and let them take what they want.

I started by configuring it to block everything by default and white listing the traffic I wanted to allow. Most systems will log dropped or anomalous traffic so its very easy to work out what traffic needs to be allowed when some new game's multiplayer features don't work as expected. And as an added bonus you learn a lot about networking at the same time, possibly opening up new career opportunities.

It might not be for everyone but if you value your privacy you owe it to yourself to explore your options. I suggest the Sophos UTM if you're just starting off, the UI is very friendly and helpful.

http://www.sophos.com/en-us/products/unified-threat-manageme...

"Cannot be stopped"

What a crock.

All you have to do is care enough to install a proper gateway firewall that can intercept and block these requests before they leave your network.

Companies will only encroach more and more on your privacy all the while telling you there's nothing wrong and it can't be disabled and that its just a little bit of your privacy [that they're forcibly stealing].

Stop being complicit in it and do something about it. You'll feel much better about everything when you do.

I think there's an argument to be made that these things dont belong in cron, they belong in logic that lives elsewhere.

Do one thing and do it well.

You take another breath every few seconds but you don't do it consciously. Not everything you do is a conscious decision you actively make in the forefront of your mind.

Your comments lead me to believe you have skin in the game because you seem determined to not acknowledge that the value of something is what your customers will pay for it. If they aren't willing to pay for it then it has no value in the market, regardless of the value you've assigned to it.

You've got a GPG key up, which is more than most.

That tells me that you've got a security team (even if its one person who wears other hats too), and it implies that anything encrypted with that key will be forwarded to your security team instead of being triaged by front-line support staff.

It definitely lends creedence to your Application Security offering.

Yeah, I understand that it's possible to configure alerts so that you are notified when your account goes overlimit, but for pet projects, I don't want to be notified and expected to respond, I want it to just stop the server. I don't see them ever actually implementing this though because it wouldn't bring in any additional revenue.

Prepaid credit cards are a very valuable tool for anyone using the AWS free tier of service. Its an extra layer of protection if you ever do get DDoS'd.

No, I don't care if it means amazon doesn't get paid for the bandwidth consumed by an attack. Sometimes all I care about is not getting a 10k or bigger bill at the end of the month for what was advertised as free. IMO they really need a way of automatically shutting down VMs that go over limit instead of just charging the credit card on file.

A good way of determining how seriously an organization takes security is to look for any kind of security incident report page or security contact info. Bonus points for publishing a GPG key for the security account. Pretend you have a found a security issue in their system and look for how to they want that reported.

Also. Unresponsive companies like this contribute to the volume of people who don't bother with responsible disclosure and just go straight to full disclosure, anonymously or not.

Companies need to see a hit on their bottom line or a breach in their own security before they take it seriously, as has been demonstrated time and again.

Did you know that AWS uses their own version of Xen?

Xen was actually written with security in mind, they push as much of the features and driver code out of the hypervisor and onto Dom0 as possible to minimize the attack surface in the hypervisor itself.

Source - The Definitive Guide To Xen - 2007.

There are gpl-like libraries for which this is not true like the Affero GPL which is not as wifely used, but for the GPL itself this statement holds true.

Hm. I'll have to take another look at it then, last I played with it you couldn't add network shared to plex.

Though I still prefer Kodi for its FOSS-ness.

Does plex finally support reading files from network shares?

Plex is based on XBMC (aka Kodi), which supports reading from the network natively, which leads me to believe they disabled this on purpose and I've never understood the rationale behind it. It makes plex almost useless to me and anyone else who uses a nas or similar to store files. Expecting that I will run plex itself from my nas because they disabled network access is laughable.

Also their UI has consistently been going downhill for the last several versions.