guardiangod

>You immediately arrest have any employee interfering with emergency response and throw them in jail.

Imagine that you work for a 3 letter US agency and is storing confidential data on AWS. Would you allow random individuals (yes even for emergency personnel) to have unfetter access to your computation and storage systems? What about health data? What about data belonging to other countries? Do you do a sweep for unauthorized remote access device after the incident?

Oh yeah I used to play on T3Houston all the time, back in ~2003 (as Undead). There weren't that many W3 mod servers that had a consistent player population. I lived in PNW though so the latency was always around ~80ms.

Rome had been the center of the western world for 2000 years, and Paris for 400. You can't compare those "well-trodden" cities to Kyoto, which was relatively secluded from tourists until the invention of jet airliners.

I was in a Shikoku hotel's public bath a couple month ago, and a guy with full on Yakuza back (and arms) tattoo came in to shower. No one batted an eye. Granted no staff was present, so no one enforced the rule. I also did not try to get a glimpse of his pinkies.

Oh a confuse delegate vulnerability. Azure is not the only cloud provider with that oversight, let me tell you.

The gold example the author mentioned is a good indicator.

Would you agree, that in a marriage, that money in a shared account is property owned by both husband and wife? And yet, because of the father's belief, he took the money out and converted them into gold without telling his wife. Is this a mere intellectual disagreement, or is this a physical betrayal rooted from his belief? The trust has been broken and the disagreement is no longer on purely hypothetical ground.

Realize that today the money became gold bars, next time the money might become a donation to a far-right group in Montana. Can the wife trust him after this?

Because the paranoia will worsen, and one day he will accuse you (or your siblings/wife/his siblings) of doing harms to him, even though it's pure paranoia.

Examples include trying to steal assets from him, belittled him with offhanded comments, or betrayed him even though he helped you in some distant past.

>In a way, that's actually kind of an admirable attitude, it's only sad in this case because he's so wildly wrong about what the truth is.

I totally agree. It is indeed admirable that someone can be so convicted in his beliefs. There is a certain beauty in that.

Without going too deeply, I sympathize with the writer on an extremely personal level.

At some point, you have to make a decision- do you continue to maintain a relationship with your father, or do you choose to sever your relationship like most people he knew.

If you choose the former, then you will accept that he will never change, and some day he will even harm you, if he has to choose between you and his beliefs. It's not that your father is out to do bad things- an aggressive dog does not intentionally try to bite your legs off. It's just doing what it believes is best for itself. You will have to learn to accept it, hard as it might be.

If you choose the latter, then realize that your father spent decades of his best life holding behind his beliefs to raise you, and that the least you can do is to make sure he doesn't die alone.

From my armchair research, this kind of change stems from a deep-seated sense of paranoia/threat, that was seeded by childhood traumas. A schizophrenic sense that everything in the world is trying to cause harm to him. When the person was young and was trying to make a living, he can keep those thoughts away. But as he gets older and can see the end of his life, these paranoia thoughts gradually overwhelm him. Having all the sudden free time post-retirement doesn't help either.

I think that if Mozilla is not interested in further developing Firefox, they should split off Firefox to its own entity.

Then the people who wants to work on/support Firefox can solely work on Firefox, and other people who wants to pursue whatever tech-of-the-day is (eg. crypto, VPN, AI) can push whatever agenda they want in their own org.

Instead of the current state where the other-agendas people are riding on Firefox's brand name recognition while starving Firefox into oblivion.

That's incredible. The plane literally turned over and burnt but no casualty. The flight staff must have done as amazing job keeping everyone calm and helped everyone get out of the upside, burning plane.

You probably should stop buying your favorite brand Palo Alto Network then.

https://www.cvedetails.com/vulnerability-list/vendor_id-1283...

He still owes us a dick.

https://thenextweb.com/news/john-mcafee-reneges-on-promise-t...

So you said the IPs are residential IP, but their reverse DNS points to a amazonbot domain? Does that even make sense?

I used to work for malware detection for a security company, and we looked at residential IP proxy services.

They are very, very, very expensive for the amount of data you get. You are paying for per bit of data. Even with Amazon's money, the number quickly become untenable.

It was literally cheaper for us to subscribe to business ADSL/cable/fiber optic services to our corp office buildings and thrunk them together.

The rail grinding noise of those Mark 1 Skytrain cars are really something. They literally made my ears hurt. For reference New York's subway rail noise never made my ears hurt that much.

The explanation I read online is that Translink (the transport authority) lost one of the 2 rail grinders they contracted, and had to buy a grinder for use. So for a few years, while waiting for the grinder to arrive, the rails were not getting the regular grinding needed that'd lessen the wheels-on-rail noise.

An unverified rumor I heard was that Translink cheaped out and bought a batch of substandard rails that are softer than needed. This means the rails wear out and become out of spec faster. The issue was compounded by the fact that the softer rails were used to replace a large portions of routes with sharp curves.

The rolling stocks use linear induction propulsion, which means there is no electric motor on the train. The trains are very light as a result and require different maintenance.

That could be true, but as any New Yorker knows, it is common for a rider to leave his rental bike unattended (leaning beside a scaffold) while the person tend their business in a building (eg. deliver takeout).

I would guess the assassin would not bother to shoot the guy, run to a dock, scan the QR code, unlock the bike and escape. He would have done so _before_ the assassination.

I literally played the 'Highway of Death' CoD:MW 2019 mission last night (before it crashed and I called it a night).

That game has no self-awareness at all. US good, Russians bad, must kill bearded brown people.

I am reminded of a revelation from a man who has seen it all

From the creator of Windows' kernel:

https://www.windowscentral.com/software-apps/windows-longhor...

>Cutler found what he terms "the worst code he has ever seen," some IME code developed in Japan. He states that the code had no regard for bugs and that it got to a point where they couldn't fix some of the overflow plugs.

In the very same article he said:

>However, progress on this project halted as Windows XP's security had gone from bad to worse. Cutler states that his team alone fixed over 5,000 bugs while turning over some of the system's code.

His team fixed over 5000 mostly security bugs in Windows XP, and he still thinks it's still better than "some IME code developed in Japan". The mind boggles.

I used to use dual monitors 50:50 in front of me, but after a few years I started getting neck pain.

Now I put a monitor directly in front of me, and a secondary monitor on the side. No more neck pain.

I've been reading his drivels (in a good way) since the 90s. God speed "Mad" Mike Magee.

Supposingly he was friend with the current CEO of Intel, Pat Gelsinger. In the 90s during a meeting with Intel staff, Magee asked a very uncomfortable question and Gelsinger, then an engineer at Intel, kicked him under the table to stop him.

Since then whenever Mike reported news on Gelsinger he would write his name as "Kicking" Pat Gelsinger.

Magee also started Charlie Demerjian's career by hiring him as a freelancer at The Inquirer. Demerjian then made a name for himself by being a very accurate pain in the ass for Intel and Nvidia for years to come.

Most RFID card systems in the world uses MIFARE Classic due to its cost and long history.

MIFARE (not just the Classic family) have a UID (32 bits) and x blocks of encrypted data (12 for Classic). Each block is protected by a A key and a B key.

The earliest card system only uses UID for authentication ie. if the card says the right UID the card passes authentication.

Obviously, anyone can forge a card with said UID, so the latter system start to use the 12 encrypted fields for authentication. The card reader would challenge the card to encrypt the nonce plus stored identification. Only cards with the correct key can respond with the correct encrypted data + nonce.

The authentication uses symmetric encryption. Depending on how the system is setup, A key is used for Read only, Read Write, or A is used for read and B is used for write, or both A/B is need for read write.

The original Mifare Classic uses a proprietary crypto crypto-1. Due to various reasons (eg. weak PRNG, collisions, etc.) , it can be trivial to crack a traditional Mifare Classic key. However there are harden keys that still could not be cracked due to various countermeasures.

The paper seems to found a hardcoded A/B key A396EFA4E24F for a particular brand of RFID cards (I just skimped the paper and its been years since I worked on RFID. I might be wrong on the detail).

It seems that 2 issues are conflated together-

1. The badge manufacturing issue and subsequent non-payment due to contract dispute.

2. The firmware author (not hired by the manufacturer) put in unauthorized 'easter egg' code that asks for money via crypto.

I am not familiar with 1 so I can't comment on a contract dispute.

But 2 is definitely over the line, and this is coming from me who is supportive of some usage of cryptocurrency. You don't put in unexpected monetization mechanisms into your volunteer work, without asking the charity organization for permission. Asking for money secretly is way different than putting in a harmless Easter egg. At that point, it's not a harmless easter egg anymore.

Maybe the money is for the manufacturer. In that case, do what a normal person would do and raise the issue on a social channel (eg. Twitter, Thread, blog).

>low-level exploitation is rarely needed in cybersecurity

Sadly that's true. I am transferring from a low level pentester to web app security engineer. That's where all the jobs are. People don't really care how much you know about low level.

Done forget to have a secondary identifier to further divide the seat. I recommend using a short to represent the 65536 possible slices a seat can split.

Then on the ticket, there would be an extension section that tells you the alias of the person that is about to board. We can call it SNI or Sitter Name Indicator. Another section could be an indicator if the rider is alive when boarding. We can call the extension a heartbeat extension.

Target tried to enter the Canadian market and lost $5.4 billion. Yes it's not a grocer but the idea is similar: Canada is a hard country for foreign companies to enter. The countries is filled with failed foreign entrances: cellular, grocer, clothing brands.

It's not tragedy of the commons for the simple reason that it is the creators of the project that're issuing the CVEs. If anything, it was the prior situation that was the real tragedy of the commons- the freeloaders were not contributing resources back to the Linux developers for security assessment.

Now everyone gets to do their own, which they should have been doing in the first place.

That's what the article is arguing though. That a certain individual is 'killing' (not killed yet) Google Search. A different title would be misleading.

Exactly. Can you imagine swapping the name from Mozilla to Google, and donors to advertisers? People would call bloody murder on Google. Google is too big and is a corporation? What if this happened to Google back in 2001? Would people still trust Google as the webs search engine?

Edit: and the post is gone from the front page. No controversial topic folks.

I mean, it's one banana. What could it cost? 10 dollars?

All those firewalls with Application Control IPS (Checkpoint, Palo Alto Network, Fortinet etc.) can already block OpenVPN connections, so this is no surprise that you can fingerprint them.