top BitHammer, the BitTorrent Banhammer
ServerAliveInterval 60, to my $HOME/.ssh/config file just because of appliances that are too dumb to handle long TCP connections.
about a month and a half ago
top Why Military Personnel Make the Best IT Pros
I have worked with IT professionals at a military installation. Their improvisational talent is amazing when it comes to figuring out a way to get something done within the crazy rules they have to follow.
top Hacking USB Firmware
Lock Switch? Then you don't understand the problem. The problem is that in many USB Flash are two chips: a computer and memory. The host PC communicates with the USB controller and the controller talks to the memory. Most controllers are just a version of the 8051 CPU with USB logic bolted on. The lock switch would be a high-level function that returns an error on a generic block device write command. Hacking the USB device isn't hacking the flash memory, it's hacking the firmware on the 8051. The Device Firmware Update function of USB that allowed that 8051 computer to be reprogrammed should be disabled.
top Security Collapse In the HTTPS Market
For example: Hong Kong Post Root; DoD Root CA 2; Federal Common Policy CA; Staat der Nederlanden Root CA - Any of these CA can mint a certificate for ANY website.
Keep in mind that any sufficiently powerful nation is better served sending lawyers rather than hackers. Step One: All it takes is to send a court ordered warrant with gag-order to get the private key for "Go Daddy Root Certificate Authority - G2". Step Two: Mint certificates
We should do two things. 1) Browsers should also start displaying the root CA. If I go to Google and I know it's Google because "Autoridad de Certificacion Raiz del Estado Venezolano" says so, I'd be suspicious. 2) Fix the all or nothing problem. Somehow limit the domain scope of a CA. "Google Internet Authority G2" mints certificates for Google.Com. What's to keep them from minting one for MyBank.com?
top Hackers Demand Automakers Get Serious About Security
I'd worry about people hacking my car about the same time as I'd worry about people cutting my brake lines.
top Ask Slashdot: Datacenter HDD Wipe Policy?
This technique works for data drives not boot drives: 100% full disk encryption. When you decommission the drive, decommission the encryption key. This technique also works with wear leveling SSD drives that might not always properly erase if you attempt to wipe the data.
top OpenWRT 14.07 RC1 Supports Native IPv6, Procd Init System
I'm running the same hardware. It's solid. Love it.
top Overeager Compilers Can Open Security Holes In Your Code
Right. The other part of the issue is why didn't anyone write a test to verify that the buffer overflow detection code actually detects when you overflow buffers?
top One Developer's Experience With Real Life Bitrot Under HFS+
I'm a fan of computing par2 repair blocks at a 15%. Every so often run a par2verify.
top After a Long wait, GNU Screen Gets Refreshed
This is what I use.
alias tm='tmux att || tmux'
top TCP/IP Might Have Been Secure From the Start If Not For the NSA
That and if Novell had implemented a network ID registration entity. Many Novell installations used network ID 00:00:00:01 because that's what was in the manual. This made them unconnectable for all intents and purposes.
top Goodyear's New State-of-the-Art Airship Makes Its First Flight
Thanks for the Command and Conquer reference. It made my day.
top US Intelligence Officials To Monitor Federal Employees With Security Clearances
One word: Contractors.
top Edward Snowden's Lawyer Claims Harassment From Heathrow Border Agent
Perhaps there are deals being worked out. These deals could be between Snowden and the US. Perhaps a deal with some other country. Perhaps a deal with a book publisher. Until a deal is reached, these deals should be private. Lastly, we should be very worried if no one is trying to make a deal because it signals that everyone has an entrenched and unyielding position.
top Why Robot Trucks Could Be Headed To Afghanistan (And Everywhere Else)
My wife is a UPS driver and for a long time I felt that trucking was one field that couldn't be off shored. Stuff has to keep moving.
Then one day I started to think about Google Car and I realized that the "killer app" for Google Car isn't as a car, it's as a truck. I agree it won't happen overnight, but it will happen. According to the U.S. Bureau of Labor Statistics, there are almost 800,000 big rig truck drivers at $40,000/yr in the US. (2012 data) Another 40,000 drive delivery trucks. Politics are the only thing that will save it. It's too large a cohort of workers. I look at the the NAFTA provisions for Mexican drivers to operate in the US that haven't been implemented as evidence that Congress will discourage their adoption. Also, what congressman wants to be on record of approving "Big Scary Robot Trucks" that accidentally drove over the Smith Family minivan killing both parents and Baby Smith too.
top Atlanta Gambled With Winter Storm and Lost
That's been my observation too. Having spent winters as far south as Cincinnati and as far north as Ottawa, Canada I completely agree. When snow is cold and stays cold, it's very similar to sand. Plowing is unnecessary. Chemical de-icing (salt or other) actually makes it more hazardous. I also have to say that no one handles snow as well as Montréal. They have giant snow throwers attached to tractors and pump it into dump trucks and cart it off to snow disposal sites.
top Revolutionary Scuba Mask Creates Breathable Oxygen Underwater On Its Own
You're thinking of fission. There is no evidence this device uses fission. They compare it to gills of a fish which extract oxygen and nitrogen from the dissolved gasses in the water.
top NYC's 250,000 Street Lights To Be Replaced With LEDs By 2017
In 2005, the Commonwealth of Kentucky replaced all 77,000 traffic lights in the entire state with LEDs over the course of about a month.
top What Are the Genuinely Useful Ideas In Programming?
The GUI is not useful. Well, okay, it has its moments. I've seen too many programmers go from mouse to keyboard so often and so frequently that they can skip the gym from the cardio workout it provides.
top OpenZFS Project Launches, Uniting ZFS Developers
The feature I'm waiting for is the v30 feature for filesystem encryption. Full disk encryption is the current fad, but selective encryption just seems cleaner. I see no point of encrypting operating system files only to unencrypt them every time you boot.
Marillion has no journal entries.