[funsec] UFC.com

2012-01-23 Thread RandallM
Piracy retaliation taken on UFC.com

Pinging ufc.com [50.116.87.24] with 32 bytes of data:

Reply from 50.116.87.24: bytes=32 time=48ms TTL=52
Reply from 50.116.87.24: bytes=32 time=49ms TTL=52
Reply from 50.116.87.24: bytes=32 time=48ms TTL=52
Reply from 50.116.87.24: bytes=32 time=48ms TTL=52

http://network-tools.com/default.asp?prog=dnsrechost=ufc.com

-- 
been great, thanks
RandyM
a.k.a System
___
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Re: [funsec] Consumer group accuses Hollywood of 'threatening politicians'

2012-01-23 Thread michael.blanchard
 Is there anyone who would claim a PAC contribution is not a bride
(other than Congress and lobbyists)?

Yes, a PAC contribution is certainly NOT a bride.   now it's sure close to, 
if not a full on, BRIBE if you ask me ;-)

 Sorry, couldn't resist ;-)

Michael P. Blanchard
Senior Security Engineer, CISSP, GCIH, CCSA-NGX, MCSE
Office of Information Security  Risk Management
EMC ² Corporation
32 Coslin Drive
Southboro, MA 01772

-Original Message-
From: funsec-boun...@linuxbox.org [mailto:funsec-boun...@linuxbox.org] On 
Behalf Of Jeffrey Walton
Sent: Saturday, January 21, 2012 11:48 AM
To: FunSec List
Subject: [funsec] Consumer group accuses Hollywood of 'threatening politicians'

Is there anyone who would claim a PAC contribution is not a bride
(other than Congress and lobbyists)?

http://thehill.com/blogs/hillicon-valley/technology/205491-consumer-group-accuses-hollywood-of-threatening-politicians

Consumer group Public Knowledge on Friday accused the Motion Picture
Association of America (MPAA) and its head, former Sen. Chris Dodd, of
trying to intimidate lawmakers into supporting a pair of controversial
anti-piracy bills.

In recent days, Dodd and other top Hollywood figures have threatened
to cut off campaign donations to politicians who do not support their
effort to crackdown on online copyright infringement.

Those who count on quote 'Hollywood' for support need to understand
that this industry is watching very carefully who's going to stand up
for them when their job is at stake. Don't ask me to write a check for
you when you think your job is at risk and then don't pay any
attention to me when my job is at stake, Dodd said on Fox News on
Thursday.
...
___
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.

___
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Re: [funsec] Consumer group accuses Hollywood of 'threatening politicians'

2012-01-23 Thread Valdis . Kletnieks
On Mon, 23 Jan 2012 10:43:59 EST, michael.blanch...@emc.com said:
  Is there anyone who would claim a PAC contribution is not a bride
 (other than Congress and lobbyists)?

 Yes, a PAC contribution is certainly NOT a bride...

Yes it is.  Take a look at the ugly divorces that happen when a politician
wants to leave his PAC. ;)


pgp6zaILSJBWM.pgp
Description: PGP signature
___
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.

[funsec] While everyone's attention was focussed on SOPA ...

2012-01-23 Thread Rob, grandpa of Ryan, Trevor, Devon Hannah
http://www.politico.com/news/stories/0112/71625.html

(To remind you why ITU may not be the safest bet for governance of the 
Internet, remember that these are the people who brought us OSI.  Not the 
model: 
that was decent.  The actual network ...

http://www.acme.com/jef/netgems/osi_alternatives.html )

==  (quote inserted randomly by Pegasus Mailer)
rsl...@vcn.bc.ca sl...@victoria.tc.ca rsl...@computercrime.org
When I was a boy I was told that anybody could become President;
I'm beginning to believe it.   - Clarence Darrow
victoria.tc.ca/techrev/rms.htm http://www.infosecbc.org/links
http://blogs.securiteam.com/index.php/archives/author/p1/
http://twitter.com/rslade
___
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Re: [funsec] While everyone's attention was focussed on SOPA ...

2012-01-23 Thread Jeffrey Walton
On Mon, Jan 23, 2012 at 2:46 PM, Rob, grandpa of Ryan, Trevor, Devon 
Hannah rmsl...@shaw.ca wrote:
 http://www.politico.com/news/stories/0112/71625.html

 (To remind you why ITU may not be the safest bet for governance of the
 Internet, remember that these are the people who brought us OSI.  Not the 
 model:
 that was decent.  The actual network ...

$ But if Russia, India and other countries have their way, that could
$ all change. Models under discussion would potentially give
$ governments more power over Web content and the pipes through
$ which it flows. Critics fret that countries might try to use that new
$ power to monetize Web traffic

(1) It seems we have the monetization now - when I type a non-existent
website in Firefox, Verizon sends me to a page with their ads. This
behavior breaks DNS behavior specified in the RFCs.

(2) The rest of the world does not want to be subjugated by a US
controlled DNS and gestapo legislation such as the PATRIOT Act. And I
don't blame them.

(3) Jon Postel wanted a DNS system shared among nations. He was
working on it before he died. The US authorities vehemently opposed
it.

$ One of the group’s ideas is to establish “international control over the
$ Internet using the monitoring and supervisory capabilities of the ITU,”

(4) This is not palatable, but the US is monitoring nearly all US
voice and data traffic now. Anyone who disagrees should watch the PBS
documentary, The Spy Factory
(http://www.pbs.org/wgbh/nova/military/spy-factory.html). The director
interviews ATT technicians who worked where one of the taps occurs,
and interviews US Army analysts who perform the monitoring.

Jeff
___
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.

Re: [funsec] Issa Announces Oversight Hearing

2012-01-23 Thread Kyle Creyts
How would that help him get re-elected, though?
On Jan 10, 2012 1:38 AM, valdis.kletni...@vt.edu wrote:

 On Mon, 09 Jan 2012 21:08:26 PST, Rob, grandpa of Ryan, Trevor, Devon 
 Hannah said:

  http://j.mp/A9G3fG  (U.S. House)
 
 House Committee on Oversight and Government Reform Chairman Darrell
  Issa (R-CA) today announced that the Full Committee will hold a
  hearing on January 18 to examine the potential impact of Domain Name
  Service (DNS) and search engine blocking on American cyber-security,
  jobs and the Internet community.

 Maybe he should have held the frikking hearings *before* he introduced
 the legislation?

 ___
 Fun and Misc security discussion for OT posts.
 https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
 Note: funsec is a public and open mailing list.

___
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.

Re: [funsec] Dr. Who returns!

2012-01-23 Thread Paul
Well, I personally doubt. Especially when looking at the date of the page.

Page last updated at 02:05 GMT, Wednesday, 1 April 2009 UK

On Tue, Jan 17, 2012 at 9:40 PM, michael.blanch...@emc.com wrote:

 How can they be sure that these are not re-broadcasts of our 50 year old
 signals?  Would a reflection really be as clear as they state?

  25 light years away, that's a hell of a skip!

 Michael P. Blanchard
 Senior Security Engineer, CISSP, GCIH, CCSA-NGX, MCSE
 Office of Information Security  Risk Management
 EMC ² Corporation
 32 Coslin Drive
 Southboro, MA 01772


 -Original Message-
 From: funsec-boun...@linuxbox.org [mailto:funsec-boun...@linuxbox.org] On
 Behalf Of Rob, grandpa of Ryan, Trevor, Devon  Hannah
 Sent: Tuesday, January 17, 2012 3:19 PM
 To: funsec@linuxbox.org
 Subject: [funsec] Dr. Who returns!

 http://www.rimmell.com/bbc/news.htm

 ==  (quote inserted randomly by Pegasus Mailer)
 rsl...@vcn.bc.ca sl...@victoria.tc.ca rsl...@computercrime.org
  __
 || /\ || swiped
 || __ |  | __ || from
 || \ \/ / || Mike
 || /\ || Church
 ||_][_|| @sfu.ca
 victoria.tc.ca/techrev/rms.htm http://www.infosecbc.org/links
 http://blogs.securiteam.com/index.php/archives/author/p1/
 http://twitter.com/rslade
 ___
 Fun and Misc security discussion for OT posts.
 https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
 Note: funsec is a public and open mailing list.

 ___
 Fun and Misc security discussion for OT posts.
 https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
 Note: funsec is a public and open mailing list.

___
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.

Re: [funsec] Corporate social media rules

2012-01-23 Thread Brian Greer
I would always assume that anything you put on somebody else's site is subject 
to their editorial control, regardless of what any published rules or policies 
say.

On Jan 17, 2012, at 19:15, Rob, grandpa of Ryan, Trevor, Devon  Hannah 
rmsl...@shaw.ca wrote:

 An item for discussion:
 
 I've see this stuff in some recent reports of lawsuits.  First people started 
 using 
 social media, for social things.  Then corps decided that socmed was a great 
 way to 
 spam people without being accused of spamming.  Then corps suddenly realized, 
 to 
 their horror, that, on socmed, people can talk back.  And maybe alert other 
 people to the fact that you a) don't fulfill on your promises, b) make lousy 
 products, c) provide lousy service, and d) so on.
 
 Gloria ran into this today and asked me about the legalities of it.  I 
 imagine that it 
 has all the legality of any waiver: you can't sign away your rights, and a 
 waiver has 
 slightly less value than the paper it's printed on (or, slightly more, if a 
 fraudster 
 can copy your signature off it  [Sorry, I'm a professional paranoid.  My 
 brain just 
 works that way.]).
 
 Anyway, what she ran into today (a Facebook page that was offering to let you 
 in 
 on a draw if you liked them) (don't worry, we've already discussed the 
 security 
 problems of likes):
 
 We’re honoured that you’re a fan of [us], and we look forward to hearing 
 what 
 you have to say. To ensure a positive online experience for the entire 
 community, we may monitor and remove certain postings. “Be kind and have 
 fun” is the short version of our rules. What follows is the longer version of 
 rules 
 for posts, communications and general behaviour on [our] Facebook page:
 
 [fairly standard we're nice people marketing type bumpf - rms]
 
 The following should not be posted on [our] Facebook pages:
 
 Now, some of this is good:
Unauthorized commercial communications (such as spam)
Content meant to bully, intimidate or harass any user
Content that is hateful, threatening, discriminatory, pornographic, or 
 that
 contains nudity or graphic or gratuitous violence 
 Content that infringes or violates someone else’s rights or otherwise 
 violates 
 the law 
Personal, sensitive or financial information on this page (this includes 
 but is 
 not limited to email addresses, phone numbers, etc.)
Unlawful or misleading posts
 
 Some of it is protecting their brand:
Competitor material such as pictures, videos, or site links
 
 Some has to do with the fact that they are a franchise operation:
Links to personal [agent] websites, or invitations from [agents] to 
 connect 
 with them privately
 
 But some it is limits freedom of expression:
Unconstructive, negative or derogatory comments 
Repeat postings of unconstructive comments/statements
 
 And, of course, the kicker:
 [We] reserves the right to remove any postings deemed to be inappropriate or 
 in 
 violation of these rules.
 
 Now, it's probably the case that they do have the right to manipulate the 
 content 
 on their site/page any way they want to.  But, how far can these rules go?
 
 ==  (quote inserted randomly by Pegasus Mailer)
 rsl...@vcn.bc.ca sl...@victoria.tc.ca rsl...@computercrime.org
 (sqrt(-1)) before (2.71828), except after (186,242 miles/sec)
 victoria.tc.ca/techrev/rms.htm http://www.infosecbc.org/links
 http://blogs.securiteam.com/index.php/archives/author/p1/
 http://twitter.com/rslade
 ___
 Fun and Misc security discussion for OT posts.
 https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
 Note: funsec is a public and open mailing list.
___
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.

Re: [funsec] Did the borg start this way?

2012-01-23 Thread Valdis . Kletnieks
On Tue, 17 Jan 2012 16:24:27 EST, Patrick Laverty said:

 I know Kung Fu.

 Show me.

At which point we'll need even better anti-virus software for memes,
because otherwise you just can't win The Game.



pgpNl5lwFjWbQ.pgp
Description: PGP signature
___
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.

Re: [funsec] Did the borg start this way?

2012-01-23 Thread Nick FitzGerald
Patrick Laverty to Michael Blanchard:

  One philosophical question could arise once we'll be able to
  download a person's whole brain onto a chip and then implant the
  chip into someone else's body.
 
 Not just download, but upload too.

Upload/download -- that just depends on your frame of reference...

 I know Kung Fu.
 
 Show me.

Yeah, but I always liked this more -- not sure why...

   NEO: Can you fly that thing?

   TRINITY: Not yet.

   TANK: Operator.

   TRINITY: Tank, I need a pilot program for a military M-109 helicopter.



Regards,

Nick FitzGerald


___
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Re: [funsec] Did the borg start this way?

2012-01-23 Thread Nick FitzGerald
Valdis to Patrick Laverty:

  I know Kung Fu.
 
  Show me.
 
 At which point we'll need even better anti-virus software for memes,
 because otherwise you just can't win The Game.

Nah -- at that point we will have mandatory file format and data 
structure definitions and _very_ strict conformance checking of the 
same PLUS cross-referencing with the allowable value ranges/performance 
capabilities/etc of the recipient wetware before allowing it to load 
into hardware that interfaces with that wetware instance.

If not -- well, let's just say _you_ are welcome to use it...



Regards,

Nick FitzGerald


___
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.