mlaretallack

I have a background in traffic control and have just started the SANS ICS410 course. It's scary how much the security depends on the network. No defence in depth.

Yes.

I can see a time that software developers (leads at least) will need to be chartered just like someone that designers a bridge.

Its usual for an external watchdog to be added for industrial applications that cannot be disable ( or fail to be enabled) by firmware/software.

Where I work we hit this 4 years ago, the basic outcome was that we could not use the JRE for anything without getting license.

But I have to add we have a real embedded cortex checking everything, just in case ......

Agree completely. Hard real time is possible with Linux, we use it for sub millisecond control of Traffic Lights. The only issue we ever hit is proving that the code running is the stuff we expected to run.

The first that comes to mind is mainframe. Just the only name for cloud computing.

I think you have a point about the Nuclear weapons research, production, and maintenance, however the parent post was saying that the "bomb" was cheap, its getting it to the location its needed was expensive. Airplane and smart bombs are logistics.

The first thing I looked for (and found) was the examples directory.

Give me an example over documentation any day.

This is usually how I work. I only look for the documentation when it does not work.

While not directly silent SMS, SnoopSnitch can check mobile network security and monitor for dome of the message types - https://f-droid.org/app/de.srlabs.snoopsnitch

Was about to say this. The disk cache does get in the way when you want to have realtime response on embedded system. The swapd just seems to cause issues.

Sounds a bit like http://www.servalproject.org

A quick search found the the author of AlgoMusic has moved on to a new project

https://www.soundhelix.com

Some of the examples sound even better. That's my evening sorted.

Years ago I remember listening to algomusic on the Amiga. Every so often I do a search to see if anyone has made a version that works on Linux, but with no luck. This is getting there, but still feels a bit rough around the edges.

Just read the Wikipedia entry.

"Hahn died on Tuesday, September 27, 2016, at the age of 39. At the time, he was a resident of Shelby Charter Township, Michigan.[1][14]Hahn's father has since confirmed that the cause of death was alcohol poisoning.[15]"

It could of been so much different...

This is the second time in a few months that I have heared DCMA and github have come up (GadgetBridge). At this point in time I do feel that github's policy on DCMA tale down notices are a little heavy handed am I right in thinking that DCMA is a US only issue?

Just spent the last 6 months making anpr camera. Now just need to put Python on it. Fun times.

Cryptographic Right Answers is a good place to start

https://gist.github.com/TheZ3ro/fb521a3cde0c91fcb350

If you mean stuff that can run on FPGA's then https://opencores.org/

It would annoy me to know that someone has an interview because they bypassed the rules.

For me, I think this is a difference between "engineering" and "marketing".

For Marketing, this sort of thing is seen as a good characteristic. For engineering, no so much.

I work in the traffic industry and over the last 8 years I have seen the rise of WIFI and Bluetooth journey time monitoring kit and after looking at every solution, I have found that the method of "encrypting" the data has always been just a MD5 hash, or SHA if you are lucky. With with result Hash just been http'ed over to a server on the internet. This usually leads to to question, "OK, so I can just hash the victims MAC address and the look for that in the data stream to find out where the person is instead of just using the MAC directly?" The same is done for ANPR based systems. The word "encrypted" seems to be added to some how make it secure without the solution being secure.

I work in the traffic industry and over the last 8 years I have seen the rise of WIFI and Bluetooth journey time monitoring kit and after looking at every solution, I have found that the method of "encrypting" the data has always been just a MD5 hash, or SHA if you are lucky. With with result Hash just been http'ed over to a server on the internet. This usually leads to to question, "OK, so I can just hash the victims MAC address and the look for that in the data stream to find out where the person is insteadvof just using the MAC directly?"

This sounds like a good idea and a step on the right direction. However working in the embedded world, no one has yet created a system for using https that does not involve a lot of complex steps to prevent the browser from warning of an insecure link.

It would be nice if all browers worked more like Firefox where it is easier to add exceptions.

Going forward I can imagine the conversion I am going to get, "why does the brower say that my traffic controller is insecure?"