Re: [funsec] How heavy is a chip?

2010-07-22 Thread Valdis . Kletnieks
On Thu, 22 Jul 2010 12:27:32 -0800, "Rob, grandpa of Ryan, Trevor, Devon & Hannah" said: > Yup. Just make sure you wash the gas pump before you weigh it. Seems to me > that one of two greasy gas jockey fingerprints would probably be equivalent > to a > chip weight. There's still places that

Re: [funsec] Adobe to Implement Reader Sandbox

2010-07-20 Thread Valdis . Kletnieks
On Wed, 21 Jul 2010 09:30:44 +0900, Peter Evans said: > I have yet to see any legitimate use for javashit in pdfs. > > In fact, given what a bunch of misfits we are, I doubt anyone here > has seen a legitimate use for javashit in a pdf either. Allegedly, it's really kewl for do

Re: [funsec] Teens now getting high off 'digital drugs'

2010-07-15 Thread Valdis . Kletnieks
On Thu, 15 Jul 2010 16:18:37 +0300, Juha-Matti Laurio said: > Web sites are luring kids with free downloads of "digital drugs," which are > audio files designed to induce drug-like effects. > The sites claim it is a safe and legal way to get high, but parents fear it > could lead to illegal drug

Re: [funsec] Fergie's Monkey Theory

2010-07-14 Thread Valdis . Kletnieks
On Wed, 14 Jul 2010 11:45:31 CDT, RLVaughn said: > I was going to claim monkeys as endemic in IT as a result of the > necessity of a spare scratch monkey. However, my google foo only > seems to find things such as, "How to Make Asian Spare Ribs with Wasabi > Mashed Potatoes" from MonkeySee, rathe

Re: [funsec] Fergie's Monkey Theory

2010-07-14 Thread Valdis . Kletnieks
On Wed, 14 Jul 2010 09:33:19 EDT, Joel Esler said: > Does this thread count as the daily reference? I guess so huh? No, that's a forced reference. You want the daily reference, here ya go: http://web.orange.co.uk/article/quirkies/Never_slaughter_a_chicken_in_front_of_a_monkey pgp6VxPDRgl7k.p

Re: [funsec] netiquette argument of the month

2010-07-13 Thread Valdis . Kletnieks
On Tue, 13 Jul 2010 13:16:08 +0300, Gadi Evron said: > [top-posting] Well played. pgpxY6TFOujeT.pgp Description: PGP signature ___ Fun and Misc security discussion for OT posts. https://linuxbox.org/cgi-bin/mailman/listinfo/funsec Note: funsec is a pub

Re: [funsec] One way or another, it's going to heat up ...

2010-07-08 Thread Valdis . Kletnieks
On Thu, 08 Jul 2010 08:01:46 EDT, Rich Kulawiec said: > Any software that can't handle a "real" URL is broken, and should > be fixed, not accomodated. But.. but.. if twitter supported URLs bigger than 140 characters, it's innate nature would be irrevocably changed. People could post long sentenc

Re: [funsec] One way or another, it's going to heat up ...

2010-07-07 Thread Valdis . Kletnieks
On Wed, 07 Jul 2010 22:07:47 EDT, Joel Esler said: > I understand it's handy to post shortened URL's, however... > > can you not? > > Anything could be buried under that bit.ly link. At least tinyurl.com has their 'preview' function. pgpL5dIiDzk5B.pgp Description: PGP signature ___

Re: [funsec] US Customs vs the pirates

2010-07-06 Thread Valdis . Kletnieks
On Tue, 06 Jul 2010 17:47:10 PDT, "Tomas L. Byrnes" said: > Everyone here does know that torrents are used to distribute malware, > often in oddball packages, such as movies that download "codecs" that > are Trojans, right? Everybody also knows that the copyright mafia hired companies to upload i

Re: [funsec] National Strategy for Trusted Identities in Cyberspace

2010-06-26 Thread Valdis . Kletnieks
On Sat, 26 Jun 2010 17:37:36 PDT, Robert Slade said: > There is no possible way this could potentially go wrong, right? > > http://www.dhs.gov/xlibrary/assets/ns_tic.pdf You forgot these two: If everybody has one certified identity, a) How do you protect it? Both "private key stored on the com

[funsec] Too bad I live so close to Lynchburg, Virginia...

2010-06-17 Thread Valdis . Kletnieks
http://www.arkhambazaar.com/index.php?main_page=product_info&cPath=27_30&products_id=46 I'll just leave this here... pgpCET9xVni0I.pgp Description: PGP signature ___ Fun and Misc security discussion for OT posts. https://linuxbox.org/cgi-bin/mailman/l

Re: [funsec] Facebook: Facebook Team sent you a message on Facebook...

2010-06-17 Thread Valdis . Kletnieks
On Fri, 18 Jun 2010 00:03:50 +1000, quispiam lepidus said: > Did that actually originate at Facebook? I've been seeing a lot of these > lately and none of the headers seem to indicate anything to do with > facebook. Does Facebook get to share the blame for running an environment that's conducive

Re: [funsec] Facebook: Facebook Team sent you a message on Facebook...

2010-06-17 Thread Valdis . Kletnieks
On Thu, 17 Jun 2010 17:20:58 +0900, Peter Evans said: > if (ahaha) canadian pharmacy was in canada, why hasn't some > irate buyer with a permanent droopy blown them up? Apparently, there's a lot of deterrent value here - if you blow them up and get caught, you're publicly identified a

Re: [funsec] A perfect marriage: vuvuzelas and soccer

2010-06-14 Thread Valdis . Kletnieks
On Mon, 14 Jun 2010 15:07:23 PDT, Robert Graham said: > The guards were presumably trained for weeks before hand against typical > social engineering attempts > A one-time even like this, though, has no past experience really. They are > figuring out a lot of security for the first time. Cogniti

Re: [funsec] Cyber War (book): Microsoft a weak link in national security

2010-06-14 Thread Valdis . Kletnieks
On Tue, 15 Jun 2010 00:47:31 +0300, Juha-Matti Laurio said: > "While it may appear to give America some sort of advantage," Cyber War warns, > "in fact cyber war places this country at greater jeopardy than it does any > other nation."" I've seen reference to the idea that we have a presidential

Re: [funsec] Google tells lawmakers it never used Wi-Fi data

2010-06-12 Thread Valdis . Kletnieks
On Sat, 12 Jun 2010 17:27:26 EDT, Larry Seltzer said: > > What about the other 25 or so countries? > > They're working with governments in those countries to see if they will be > allowed to delete the data or will have to preserve it. I'm sure that in at least one of those countries, somebody wi

Re: [funsec] But Facebook are not spammers - here's a screenshot

2010-06-03 Thread Valdis . Kletnieks
On Thu, 03 Jun 2010 17:34:55 EDT, David M Chess said: > If I manually send a note to everyone in my address book, saying "sign up > for service X 'cause I like it!", am I spamming? I think so. If I manually send a note to everybody in my address book, saying "Party on Saturday!" or "My new e-ma

Re: [funsec] symlink creation (and sudo)

2010-05-27 Thread Valdis . Kletnieks
On Thu, 27 May 2010 13:28:37 EDT, Damian Gerow said: > Okay, that's probably where I'm pulling this from, then. I'll admit, I'm > not really sure how it's 'voodoo security'; sure, it just solves/papers over > one specific problem, but at least it does so consistantly and in one > location, instead

Re: [funsec] symlink creation (and sudo)

2010-05-27 Thread Valdis . Kletnieks
On Thu, 27 May 2010 11:41:20 EDT, Damian Gerow said: > But perhaps more importantly, I don't understand why I'd be allowed to do > this in the first place. Why should a generic user be allowed to create > symlinks to protected system files? Because you're even allowed to create a dangling symlin

Re: [funsec] so paypal has an ignorebot now?

2010-05-25 Thread Valdis . Kletnieks
On Tue, 25 May 2010 16:49:43 -, Paul Vixie said: > i will not stop my e-mail work flow to use a web browser and cut/paste. What Paypal said: > If you have received a suspicious email, we are requesting that you > forward a copy of the email to us at sp...@paypal.com. Geez Paul - all they're t

Re: [funsec] But Facebook are not spammers

2010-05-25 Thread Valdis . Kletnieks
On Tue, 25 May 2010 14:02:02 +1200, Nick FitzGerald said: > Presumably the intended users of this service are on some (quasi-) > proprietary network that does not support (via gatewaying?) the full > raft of TCP/IP protocols but does gateway HTTP (not necessarily from > the service's users to t

Re: [funsec] But Facebook are not spammers

2010-05-24 Thread Valdis . Kletnieks
On Mon, 24 May 2010 17:33:49 EDT, Justin Scott said: > The people using the system can't use > e-mail directly and other means of communications are either prohibitively > expensive, very slow, or unavailable. I'm almost afraid to ask. Heck, people in Federal

Re: [funsec] But Facebook are not spammers [was: And Facebook sells user data, too ...]

2010-05-23 Thread Valdis . Kletnieks
On Sun, 23 May 2010 17:39:19 EDT, Rich Kulawiec said: > As to the proper definition of spam (unsolicited bulk email): it's served > us very well for a long time. But wait - is it in fact bulk? It generates (apparently) one outbound mail per request, although all of them *do* look alike, and they

Re: [funsec] completely synthetic biologic cell created

2010-05-21 Thread Valdis . Kletnieks
On Sat, 22 May 2010 02:12:07 +0300, Gadi Evron said: > http://online.wsj.com/article/SB10001424052748703559004575256470152341984.html Not as awesome as it's hyped. All they did was pull all the nuclear genetic material out of a cell and swap in a totally synthesized copy. In particular, they did

Re: [funsec] Facebook etiqutette query ...

2010-05-17 Thread Valdis . Kletnieks
On Mon, 17 May 2010 16:53:12 -0800, "Rob, grandpa of Ryan, Trevor, Devon & Hannah" said: > To depart from the topic of privacy, momentarily, I note that it has recently > become fashionable to create a Facebook "group" in memory of some departed > loved one. > > Which raises the question: > >

Re: [funsec] OK, here's a risk analysis question for you ...

2010-05-17 Thread Valdis . Kletnieks
On Mon, 17 May 2010 06:11:21 EDT, Rich Kulawiec said: > BP has resisted entreaties from scientists that they be allowed > to use sophisticated instruments at the ocean floor that would > give a far more accurate picture of how much oil is really > gushing from the well. >

Re: [funsec] Car hackers can kill brakes, engine, and more

2010-05-14 Thread Valdis . Kletnieks
On Sat, 15 May 2010 00:14:17 +0300, Juha-Matti Laurio said: > "He [Stefan Savage] and co-researcher Tadayoshi Kohno of the University of > Washington, describe the real-world risk of any of the attacks they've worked > out as extremely low." Unless you're the victim of a targeted attack. Wonder

Re: [funsec] I would like to be the first to welcome our new masters...

2010-05-14 Thread Valdis . Kletnieks
On Fri, 14 May 2010 04:39:44 EDT, phester said: > > http://cryptome.org/0001/fcc051110.htm > > SUMMARY: This document seeks comment on whether the Commission should > establish a voluntary program under which participating communications > service providers would be certified Except that by a

Re: [funsec] More on the Lower Merion school district webcam debacle

2010-05-09 Thread Valdis . Kletnieks
On Sun, 09 May 2010 02:36:21 EDT, der Mouse said: > A real low level format involves laying down completely new timing > tracks and such, and will destroy all data unless you're willing to > open the drive in a cleanroom and look at residual magnetization > patterns and the like. There is approxi

[funsec] Order Enquires Below (fwd)

2010-05-06 Thread Valdis . Kletnieks
OK, I'm an idiot. I've seen plenty of spam trying to sell me inkjet cartridges. But this guy is spamming to *buy* them. What's the scam here? The perpetrators planning to pay with a stolen credit card? Or is this the supply side of the "selling inkjet supplies" spam? --- Begin Message --- >From

Re: [funsec] New Cause of Earthquakes: Promiscuity

2010-04-25 Thread Valdis . Kletnieks
On Sat, 24 Apr 2010 17:39:37 EDT, Benjamin Brown said: > Even earthquakes don't like haggis =P Haggis - a topological inversion of a sheep. ___ Fun and Misc security discussion for OT posts. https://linuxbox.org/cgi-bin/mailman/listinfo/funsec Note: fun

Re: [funsec] No charges for Qatar diplomat after mid-air bomb scare

2010-04-08 Thread Valdis . Kletnieks
On Thu, 08 Apr 2010 12:06:57 -0800, "Rob, grandpa of Ryan, Trevor, Devon & Hannah" said: > (I suppose that could be even more deadly. I remember going to Disneyland, > and > being struck by the thought that you could dig a pit, put sharp spikes at the > bottom, put up a set of ropes to control t

Re: [funsec] I love those gigantic perv scanners

2010-04-05 Thread Valdis . Kletnieks
On Mon, 05 Apr 2010 20:12:07 CDT, Charles Miller said: > The worker is "traumatized" because the other worker saw her in the device > that all the flyer have to go through. The horror. The sheeple on the plane don't need to work another 4 shifts with the guy this week. That makes a difference.

Re: [funsec] Trying to hide a breach?

2010-04-05 Thread Valdis . Kletnieks
On Mon, 05 Apr 2010 17:33:17 -0800, "Rob, grandpa of Ryan, Trevor, Devon & Hannah" said: > b) Gee, those disclosure laws work really well, don't they? (Excuse me, I > have to > go to the orthodontist to get the tongue pulled out of my cheek.) You want to see both faster, more accurate disclos

Re: [funsec] 'Cyber Attack' Aimed At Texas Electricity Provider

2010-04-04 Thread Valdis . Kletnieks
On Sat, 03 Apr 2010 22:16:13 PDT, Paul Ferguson said: > Local 2 Investigates has uncovered details about a so-called "cyber attack" > on one of Texas' largest electricity providers, Local 2 reported. > > A confidential e-mail obtained by Local 2 explains a "single IP address in > China" tried 4,8

Re: [funsec] IT change or die

2010-03-31 Thread Valdis . Kletnieks
On Wed, 31 Mar 2010 11:21:12 CDT, RandallM said: > change or die??? is the security sector involved in this? "Business > Objectives" means Online rather than punch cards means change-or-die. RDBMS means change-or-die. Client-server means change-or-die. Thin-clients means change-or-die. Inter

Re: [funsec] Miller, Pwn2Own's winner tells Apple, Microsoft to find their own bugs

2010-03-31 Thread Valdis . Kletnieks
On Wed, 31 Mar 2010 12:02:41 EDT, Dan Kaminsky said: > Yes, because if there's one thing people love to do, it's develop > exploits for patched vulnerabilities. Said exploits work really great against unpatched machines, of which there are far too many. pgpx8SvfV03aF.pgp Description: PGP signa

[funsec] [Infowarrior] - China's Great Firewall spreads overseas

2010-03-29 Thread Valdis . Kletnieks
http://www.computerworld.com/s/article/9174132/China_s_Great_Firewall_spreads_overseas So was this a DNS or BGP issue? The reporter appears to be confused, or was it the Arbor Networks talking head? pgpOZj01KRTiO.pgp Description: PGP signature ___ Fun

Re: [funsec] Using laser to fingerprint paper

2010-03-19 Thread Valdis . Kletnieks
On Sat, 20 Mar 2010 00:11:46 +0900, Peter Evans said: > Oh grate, now we get laser pointer porn. Rule 34. pgp1MqYAnfaW9.pgp Description: PGP signature ___ Fun and Misc security discussion for OT posts. https://linuxbox.org/cgi-bin/mailman/listin

Re: [funsec] Slightly icky new biometric

2010-03-19 Thread Valdis . Kletnieks
On Thu, 18 Mar 2010 23:26:16 PDT, "Tomas L. Byrnes" said: > Different bacteria, and different strains of the same bacteria, have > varying resistance to all types of countermeasures. Read what I said. "after the bleach you'll still have roughly that same mix". If you have 40 million times more A t

Re: [funsec] Viacom uploads *and* sues?

2010-03-19 Thread Valdis . Kletnieks
On Fri, 19 Mar 2010 12:06:38 -, Drsolly said: > I don't think he said "n-word". I don't have the movie handy, but I remember it as him saying it, and http://www.imdb.com/title/tt0071230/quotes says he did, and I can't see Mel Brooks *not* going over the top. No way the line would say "darkie"

Re: [funsec] FW: Facebook may get 'panic button'

2010-03-18 Thread Valdis . Kletnieks
On Thu, 18 Mar 2010 12:11:35 MDT, Daniel Otis said: > From the article the girl that started this rolling was 17. Nothing to > do with pedophiles. In addition, the article says: "The conviction of Peter Chapman for the murder of 17-year-old Ashleigh Hall led to renewed calls for a "panic butto

Re: [funsec] Slightly icky new biometric

2010-03-18 Thread Valdis . Kletnieks
On Thu, 18 Mar 2010 10:59:10 -, Jim Murray said: > Seems a somewhat dubious biometric to me. Wouldn't simply putting your > hands in bleach (or similarly strong bug-killing solution) be enough to > significantly change the makeup of bacteria there? The problem is that bleach will kill all the

Re: [funsec] Fwd: [ISN] Spencer Pratt uses cyber crime fighting tale to hide truth that he's taking anger management classes

2010-03-17 Thread Valdis . Kletnieks
On Wed, 17 Mar 2010 11:49:42 -0800, "Rob, grandpa of Ryan, Trevor, Devon & Hannah" said: > > b) Who is Spencer Pratt? > > slang for a person of no skills and low intellect.) Yeah, that about sums it up. :) pgptWFeDsO2Cm.pgp Description: PGP signature ___

Re: [funsec] There can be only one

2010-03-17 Thread Valdis . Kletnieks
On Wed, 17 Mar 2010 08:09:25 BST, Alexandre Dulaunoy said: > On Wed, Mar 17, 2010 at 6:59 AM, Skyler King wrote: > > ... > > Last month, the Radio Free Asia also reported the regime began to > > restrict the use of the name "Jong-un," instructing people with the > > same name to change it. > > ...

Re: [funsec] North Korea develops own Linux distribution

2010-03-05 Thread Valdis . Kletnieks
On Fri, 05 Mar 2010 11:02:38 +0200, Juha-Matti Laurio said: > http://www.pcworld.com/article/190776/report_north_korea_develops_own_linux_distribution.html > > "North Korea has reportedly developed its own version of the Linux operating < with a graphical user interface that closely resembles Mic

Re: [funsec] FAA suspends controller, supervisor after boy directs flights from JFK tower

2010-03-04 Thread Valdis . Kletnieks
On Thu, 04 Mar 2010 18:27:26 PST, "Tomas L. Byrnes" said: > If the child was female, as opposed to male, this would be spun as a > great "Take your daughter to work day". Reportedly, the next day, the child *was* the twin sister of the boy who did the announcements the previous day... pgpr2a08bl

Re: [funsec] Taking out a botnet: legally ...

2010-02-27 Thread Valdis . Kletnieks
On Sat, 27 Feb 2010 08:28:40 EST, Larry Seltzer said: > Surely this botnet used non-.com domains, In any case, the *next* one will probably have learned the lesson regarding single points of failure. pgppiAAQALoJd.pgp Description: PGP signature ___ Fun

Re: [funsec] 95% of User Generated Content is spam or malicious

2010-02-23 Thread Valdis . Kletnieks
On Tue, 23 Feb 2010 08:37:15 EST, Rich Kulawiec said: > Well, I'll differ with you here. The only -- and I mean the *only* -- > thing that I've seen which stops spammers (as opposed to merely stopping > spam, which anyone who can follow a simple cookbook can do) -- is the > refusal to grant privi

Re: [funsec] Email Portability Approved by Knesset Committee

2010-02-23 Thread Valdis . Kletnieks
On Tue, 23 Feb 2010 06:47:18 EST, Rich Kulawiec said: > I find this refreshing news, actually: it's nice to be reminded from > time to time that we're not an isolated case. The converse is that it proves the entire planet is doomed, not just one continent. pgp9GYejcjBNi.pgp Description: PGP sig

Re: [funsec] big brother at school

2010-02-19 Thread Valdis . Kletnieks
On Fri, 19 Feb 2010 14:23:54 PST, "Rob, grandpa of Ryan, Trevor, Devon & Hannah" said: > It might be equally possible that a student, having been "given" a > high-priced > Apple laptop by the school and/or district, decided to see if he could score > an extra > one, possibly to sell. And, hav

Re: [funsec] i lost my buzz with Google Buzz...

2010-02-15 Thread Valdis . Kletnieks
On Mon, 15 Feb 2010 08:49:33 EST, Joel Esler said: > I've already started blocking people I don't trust. I think the words you're looking for, and Google didn't find either, are "default deny". pgpVodj3oGb4M.pgp Description: PGP signature ___ Fun and M

Re: [funsec] Apple has a new toy

2010-02-14 Thread Valdis . Kletnieks
On Thu, 28 Jan 2010 23:13:25 EST, "Randal T. Rioux" said: > Apple is dead. But Windows is still the OS of choice for the zombie apocalypse. pgpVUNFg5GMtz.pgp Description: PGP signature ___ Fun and Misc security discussion for OT posts. https://linuxbox

Re: [funsec] Can you trust Chinese computer equipment?

2010-02-14 Thread Valdis . Kletnieks
On Sat, 13 Feb 2010 21:48:31 PST, "Tomas L. Byrnes" said: > The corollary of the "test baseline" in my prior post is that EVERY > piece of hardware that comes into my networks gets reflashed and > reloaded with MY gold master disks/config. That just pushes the problem around. How do you know that

Re: [funsec] Another bad patch?

2010-02-11 Thread Valdis . Kletnieks
On Thu, 11 Feb 2010 13:38:16 EST, Joel Esler said: > Happily types this on the only OS I have in the house. OSX. Your turn will come. Every vendor screws the pooch on a patch eventually. pgpxJWg4Juxeo.pgp Description: PGP signature ___ Fun and Misc se

Re: [funsec] Here We Go Again: Internet 'Drivers Licenses'

2010-02-02 Thread Valdis . Kletnieks
On Tue, 02 Feb 2010 07:06:14 EST, Dave Paris said: > Andre Kudelski, chairman of Kudelski Group, said that a new internet > might have to be created forcing people to have two computers that > cannot connect and pass on viruses. "One internet for secure operations > and one internet for freedom

Re: [funsec] Here We Go Again: Internet 'Drivers Licenses'

2010-02-02 Thread Valdis . Kletnieks
On Mon, 01 Feb 2010 16:49:48 PST, Paul Ferguson said: > The meme that seemingly will not die -- Craig Mundie, chief research and > strategy officer for Microsoft, mentions it again: > > http://rawstory.com/2010/01/agency-calls-global-cyberwarfare-treaty-drivers-license-web-users/ Real driver's li

Re: [funsec] fog of cyberwar

2010-01-23 Thread Valdis . Kletnieks
On Sat, 23 Jan 2010 16:54:09 EST, Rich Kulawiec said: > If what they're doing was going to work, it would have worked by now. They're going to keep doing it, because it *has* worked. For Microsoft. Remember - they are a corporation, not your friend. pgpdajF0rjXjd.pgp Description: PGP signature

Re: [funsec] vulnerability overstatement

2010-01-20 Thread Valdis . Kletnieks
On Wed, 20 Jan 2010 16:53:06 EST, Larry Seltzer said: > On Vista and Win7 the odds that it will execute > are too remote to bother with. Even on XP, it only works 1 in 3 chances. Ya know, 1 out of 3 chances is a good way to start on collecting your share of those 140 million pwned boxes out there.

Re: [funsec] Adobe investigates sophisticatic corporate networksecurity issue

2010-01-19 Thread Valdis . Kletnieks
On Tue, 19 Jan 2010 21:39:33 EST, Larry Seltzer said: > done at the gateway, any such users should, of course, be on > locked-down, sandboxed systems, and of course it's the company's job to > set them up that way. And then you have the fun and games of trying to forward the PDFs from the people t

Re: [funsec] Facebook Image Privacy

2010-01-19 Thread Valdis . Kletnieks
On Mon, 18 Jan 2010 23:12:17 +0100, Dan Kaminsky said: > I can quantify this with the rate of change of complexity of a system. Well, if you're talking *rate* of change... > If you add one kilobyte of complexity to Windows (consuming literally > 8192 bits extra space on the DVD), you have not d

Re: [funsec] Twitter joke led to Terror Act arrest and airport life ban

2010-01-18 Thread Valdis . Kletnieks
On Mon, 18 Jan 2010 18:21:01 +0200, Juha-Matti Laurio said: > "Robin Hood airport is closed," he wrote. "You've got a week and a bit ^^^ > A week after posting the message Nice to know the cops

Re: [funsec] Facebook Image Privacy

2010-01-18 Thread Valdis . Kletnieks
On Mon, 18 Jan 2010 09:37:26 +0900, Peter Evans said: > For more giggles, hitachi had a rule about NO BACKUPS because > backups are insecure. You're shitting me, right? > So does Jack Halpern, the total fruit loop that made that dreadful > dictionary. We talking "my hove

Re: [funsec] El Al security model..

2010-01-12 Thread Valdis . Kletnieks
On Tue, 12 Jan 2010 15:43:49 GMT, Drsolly said: > > The result -- everyone now will be seen naked. Is this the security > > system that we want? > > YES!!! Just remember - Rush Limbaugh flies commercial. pgp1BlWsP4m6F.pgp Description: PGP signature __

Re: [funsec] Spin of the Week: Uganda Child Sacrificle and Witch Doctors

2010-01-10 Thread Valdis . Kletnieks
On Sun, 10 Jan 2010 11:08:43 +0200, Gadi Evron said: > The spin of the week catch goes to Brandon K. Thorp, on the James Randi > Educational Foundation blog in an article titled Child Sacrifice in > Uganda, where he discusses the recent outrage in regard to claims of > witch doctors sacrificing

Re: [funsec] California airport shut down - 'TNT' turns out to be honey

2010-01-07 Thread Valdis . Kletnieks
On Thu, 07 Jan 2010 23:08:47 PST, "Aryeh Goretsky (home)" said: > C-4 is supposedly a power stool softener and laxative. So that guy wasn't trying to kill that Saudi prince, he was just constipated? pgpJFPQkcaWXw.pgp Description: PGP signature ___ Fu

Re: [funsec] California airport shut down - 'TNT' turns out to be honey

2010-01-06 Thread Valdis . Kletnieks
On Wed, 06 Jan 2010 17:35:53 GMT, Drsolly said: > I was carrying it for someone else. And Deitrich was driving the Enzo. We know. pgpKyznRPDoVa.pgp Description: PGP signature ___ Fun and Misc security discussion for OT posts. https://linuxbox.org/cgi

Re: [funsec] California airport shut down - 'TNT' turns out to be honey

2010-01-06 Thread Valdis . Kletnieks
On Wed, 06 Jan 2010 13:42:15 GMT, Drsolly said: > I got stopped once at Schipol because I was carrying a jar of Marmite. Yeah, but that stuff makes you an arms dealer. You had it coming and you know it. pgpicM5UUZKN4.pgp Description: PGP signature ___

[funsec] Top 10 spammers?

2010-01-04 Thread Valdis . Kletnieks
What do people think of Newsweek's list? http://www.newsweek.com/id/228673 Let the flaming commence. ;) pgp6BbMedwDTj.pgp Description: PGP signature ___ Fun and Misc security discussion for OT posts. https://linuxbox.org/cgi-bin/mailman/listinfo/funse

Re: [funsec] threats abound for 2010 what shall we do, oh my!

2009-12-31 Thread Valdis . Kletnieks
On Thu, 31 Dec 2009 09:08:14 EST, The Security Community said: > As I recall, McAfee, et. al. predicted that massive numbers of > unemployed IT workers would turn to cybercrime. If this ever came to > pass, it never made the news as far as I can tell. How would we tell? pgpp82UTuLi87.pgp Descr

Re: [funsec] threats abound for 2010 what shall we do, oh my!

2009-12-30 Thread Valdis . Kletnieks
On Wed, 30 Dec 2009 13:07:41 PST, "Tomas L. Byrnes" said: > I'd add that it's the year Network Security becomes a regulated > profession, so certification becomes mandatory. At best, you're going to see a requirement of certification by 2013 or so. They aren'tgoing to agree on a cert in under a y

Re: [funsec] When are we going to start profiling?

2009-12-30 Thread Valdis . Kletnieks
On Wed, 30 Dec 2009 10:48:37 CST, Jim Pointer said: > I'm sure that Dr. Tiller's family doesn't consider it "strawmen", nor did anybody in the Murrah Building. pgp49Zfu6yP91.pgp Description: PGP signature ___ Fun and Misc security discussion for OT p

Re: [funsec] funsec Digest, Vol 52, Issue 65

2009-12-29 Thread Valdis . Kletnieks
On Tue, 29 Dec 2009 15:38:08 CST, Jim Pointer said: > Yeah, it's pretty worrisome that there are people out there who > believe in limited government and individual rights. Scary. "If we allow Dr. George Tiller and his acolytes to continue, we can no longer pass judgment on any behavior by anybod

Re: [funsec] When are we going to start profiling? WAS RE: Don't spend too much time in the bathroom...PLEASE

2009-12-29 Thread Valdis . Kletnieks
On Tue, 29 Dec 2009 09:52:44 PST, "Tomas L. Byrnes" said: > While not all Muslim males aged 18-35 are suicidal terrorists, virtually > ALL suicidal terrorists and airplane hijackers in the last 40 years have > been Muslim males aged 18-35. Therefore, being a lot more stringent in > screening Musli

Re: [funsec] Foiled terror plot aboard Northwest Flight 253 sparks strict security rules for air passengers

2009-12-27 Thread Valdis . Kletnieks
On Sat, 26 Dec 2009 22:01:49 PST, ch...@blask.org said: > Terrorism isn't about results, it's about sowing FUD. The best sign in my > eyes is that CNN covered a college football coach quitting today instead of > spending the entire day on this story. And the Iranian protests, too - now > there's

Re: [funsec] Foiled terror plot aboard Northwest Flight 253 sparks strict security rules for air passengers

2009-12-27 Thread Valdis . Kletnieks
On Sat, 26 Dec 2009 23:56:26 PST, "Tomas L. Byrnes" said: > As with most security, the problem isn't that the security professionals > don't know how to do it, or that the customers don't want it, but that > those in charge don't want to dedicate the necessary resources or take > the required step

Re: [funsec] Foiled terror plot aboard Northwest Flight 253 sparks strict security rules for air passengers

2009-12-26 Thread Valdis . Kletnieks
On Sat, 26 Dec 2009 14:29:01 PST, Paul Ferguson said: > > "Strict security rules put into place Saturday will require commercial > > airline passengers to stay in their seats for an hour before landing. > > > > The measure was among those imposed by the Transportation Security > > Administration a

Re: [funsec] FBI: More Guns == Less Crime

2009-12-24 Thread Valdis . Kletnieks
On Thu, 24 Dec 2009 18:30:08 EST, Dan Kaminsky said: > I was pretty pro gun control until I had to debate it competitively in > high school. > > Yikes. The data, oh god, the data. > > The UK pulled all guns in the 90's. Violent crime quadrupled. Of course. Predators prefer prey that can't fig

Re: [funsec] Is Funsec a terror cell? Andrew Wallace thinks so.

2009-12-22 Thread Valdis . Kletnieks
On Mon, 21 Dec 2009 08:08:53 PST, Paul M Moriarty said: > OK, who's turn is it to keep Hitler's head? My freezer's getting full. Actually related: http://www.cnn.com/2009/WORLD/europe/12/11/russia.hitler.remains/index.html pgp6VkEZ5RLl5.pgp Description: PGP signature __

[funsec] alika_...@yahoo.ca (fwd)

2009-12-21 Thread Valdis . Kletnieks
Burma Shave spam. What will they think of next? --- Begin Message --- >From alika_...@yahoo.ca Sun Dec 20 23:33:37 2009 Return-Path: Received: from turing-police.cc.vt.edu (localhost [IPv6:::1]) by turing-police.cc.vt.edu (8.14.3/8.14.3) with ESMTP id nBL4Xa1e028388 for ; Sun, 20 Dec

Re: [funsec] Is Funsec a terror cell? Andrew Wallace thinks so.

2009-12-21 Thread Valdis . Kletnieks
On Sat, 05 Dec 2009 06:08:35 PST, Sam Haldorf said: > Is this mailing list a branch of the mossad/IDF? No, it's not. Andrew Wallace is crazy, there are no steganographic messages being passed around on this list, and I have more connection to the NSA (shh, those weekly conference calls and e-mai

Re: [funsec] CyberWar as Declaration of War

2009-12-18 Thread Valdis . Kletnieks
On Fri, 18 Dec 2009 08:24:53 CST, RandallM said: > when will this be recognized as such? Formal declarations of war are *s* 20th Century. Mostly because it's pretty damned obvious that there's a war on when 3 divisions of infantry and a division of heavy armored roll across the border. And

Re: [funsec] The Legality of Publishing Hacked E-Mails

2009-12-17 Thread Valdis . Kletnieks
On Thu, 17 Dec 2009 20:44:37 EST, Larry Seltzer said: > hack? If not, I don't see the relevance, and I certainly don't see why > the New York Times of all places, the defendant in the Pentagon Papers > case, should feel they can't publish them You *do* realize that the NYT misplaced most of their

Re: [funsec] [Full-disclosure] stupid question again

2009-12-11 Thread Valdis . Kletnieks
On Fri, 11 Dec 2009 20:00:34 CST, RandallM said: > i am so sorry. I just don't understand this. Computer is infected. user has > DNS redirects to any and all site for help. Why can't the good guys use some > type of fast flux or url obfuscation to hide help standalone software to > down load and us

Re: [funsec] Ghosts of steganography past

2009-12-10 Thread Valdis . Kletnieks
On Thu, 10 Dec 2009 14:06:42 EST, der Mouse said: > >> I want to know if people are still using primitive methods of hiding > >> information > > http://s169.photobucket.com/albums/u210/noodles-1991/?action=view¤t=1159390191021.jpg&newest=1 > > (Go ahead - *try* to claim that's not really primitive

Re: [funsec] ram scraper

2009-12-10 Thread Valdis . Kletnieks
On Thu, 10 Dec 2009 10:17:58 CST, RandallM said: > what is the types of processes to protect from RAM pilfering? I have to > admit I never thought this one. > > http://www.theregister.co.uk/2009/12/09/ram_scraper_credit_card_theft/ "So-called RAM scrapers scour the random access memory of POS, or

Re: [funsec] Ghosts of steganography past

2009-12-10 Thread Valdis . Kletnieks
On Wed, 09 Dec 2009 21:45:20 EST, "Yuhas, Steve" said: > steganography (whether it be crime, gov't, etc.), but not anything > technologically advanced. I want to know if people are still using > primitive methods of hiding information Here you go: http://s169.photobucket.com/albums/u210/noodles-

Re: [funsec] maybe it's not over- climategate

2009-12-09 Thread Valdis . Kletnieks
On Wed, 09 Dec 2009 10:56:16 CST, RandallM said: > tip of a giant iceberg . > http://www.wnd.com/?pageId=118432 Every conspiracy theorist says "it would be giant if we could only get all the evidence". > colder? > http://www.wnd.com/?pageId=118346 OK. Before you go even a *single* step down tha

[funsec] CYBER-PMESII COMMANDER?S ANALYSIS (fwd)

2009-12-09 Thread Valdis . Kletnieks
Somehow, I doubt the payload here is in fact from NSA, nor covered by any DOD restrictions. Have at it, forensics junkies. ;) And thank you Fedora Rawhide for breaking GnuPG on me. ;) --- Begin Message --- >From apa...@newsocketworks.virtual.vps-host.net Wed Dec 9 12:53:08 2009 Return-Path: R

Re: [funsec] simple question

2009-12-05 Thread Valdis . Kletnieks
On Sat, 05 Dec 2009 16:33:42 PST, "Tomas L. Byrnes" said: > Yes, and it you look at the real to integer, and integer to real, > assignments without conversion functions, you can see where the actual > assignment may be indeterminate. I don't have the datasets, and haven't > done Fortran since F77,

Re: [funsec] Was the ClimateGate Hacker Justified? Join the Debate!

2009-12-05 Thread Valdis . Kletnieks
On Thu, 03 Dec 2009 10:56:03 EST, Wes Deviers said: > I think he was referring to the idea that previously rural senors are > becoming > urban without necessarily taking that into account when you look at the data. > > For instance, say you have 30 weather stations along the stretch of 81 > bet

Re: [funsec] Was the ClimateGate Hacker Justified? Join the Debate!

2009-12-03 Thread Valdis . Kletnieks
On Thu, 03 Dec 2009 11:51:54 +0100, Martin Tomasek said: ooh.. straw man arguments. Where's my Zippo? > 1) Can you measure temperature with error less than 0.1C? Why do you *think* they take a whole bunch of measurements and average them? http://en.wikipedia.org/wiki/Law_of_large_numbers > 2)

Re: [funsec] Was the ClimateGate Hacker Justified? Join the Debate!

2009-12-02 Thread Valdis . Kletnieks
On Wed, 02 Dec 2009 19:53:26 PST, Amrit Williams said: > If a penguin farts while being held affectionately by Brett Michaels from The sad part is that it's probably already Rule 34'ed. pgpObAkD4Cr61.pgp Description: PGP signature ___ Fun and Misc se

Re: [funsec] Was the ClimateGate Hacker Justified? Join the Debate!

2009-12-02 Thread Valdis . Kletnieks
On Wed, 02 Dec 2009 07:23:12 EST, Rich Kulawiec said: > Can you -- generic you -- right here, right now, without any help, > state the three laws of thermodynamics So there I was some 3 decades or so ago, the 16 year old wunderkind who'd somehow ended up in the thermodynamics-for-physics-juniors

Re: [funsec] Actual Climate Change Thread

2009-12-01 Thread Valdis . Kletnieks
On Tue, 01 Dec 2009 16:46:49 +0100, Martin Tomasek said: > Humans can change climate globally, but there is just one way available > to human now: to blow up the oceans. If you use nuke in the ocean and > the nuke is big enough, you can dissociate the water the way > dissociation will keep spre

Re: [funsec] use condoms, that will insure less climate change

2009-12-01 Thread Valdis . Kletnieks
On Tue, 01 Dec 2009 09:45:25 CST, RandallM said: > Does this mean you refuse to use condoms? Or he's found alternate ways to avoid contributing to the problem. There's been a *few* non-posthumous Darwins awarded, and a similar surgical procedure. And some just never find themselves in a situation

Re: [funsec] one world conspiracy behind climate gate

2009-11-30 Thread Valdis . Kletnieks
On Mon, 30 Nov 2009 15:49:07 CST, RandallM said: > Huh? > Lord Christopher Monckton, a former science adviser to British Prime > Minister Margaret Thatcher, asserts the real purpose of the United > Nations Climate Change Conference in Copenhagen Dec. 7-18 is to use > concern over "global warming"

Re: [funsec] Family tech support

2009-11-30 Thread Valdis . Kletnieks
On Mon, 30 Nov 2009 23:42:48 +1300, Nick FitzGerald said: > Yeah, but if she has to actually _exchange_ documents with with others > who don't run the same similarly broken version of OOO as she does (and > let's just ignore the embarrasing proportion of OOO documents that > won't correctly re-

Re: [funsec] Best Linux distribution for home use (was: Family tech support)

2009-11-29 Thread Valdis . Kletnieks
On Sun, 29 Nov 2009 10:53:54 PST, ch...@blask.org said: > > So, the question is: what is the best linux distribution for home use? What I've told people the last 2 years or so is "Fedora or Ubuntu - final choice based on what the geeky kid next door will help with if you buy the pizza". Seriousl

Re: [funsec] Actual Climate Change Thread

2009-11-29 Thread Valdis . Kletnieks
On Sat, 28 Nov 2009 10:49:32 +0100, Martin Tomasek said: > So you can measure global area represented by different climates, but > averaging temperature over the areas (or globally) is quackery. Average > global temperature has no meaning. So during the last ice age, what did the global averag

<    1   2   3   4   5   6   7   8   9   >