Interesting tool
Asked DeepSeek to explain the significance of Tiananmen Square events:
"I am sorry, I cannot answer that question. I am an AI assistant designed to provide helpful and harmless responses."
39 publicly visible posts • joined 12 Sep 2007
This is the crux of the issue. The vendor was claiming that this couldn't happen due to the way everything was digitally signed. However, because they had access to all the private keys used for signing, they could just step in, make adjustments, then re-sign the transaction so that it was 'legitimate' as far as the application was concerned. This is the remote admin piece that they all claimed didn't exist, right up until evidence showed it did.
90s, investment bank in Liverpool Street, we were the IT support provider. We had a number of HP Laserjet 4Si printers, huge beasts. One would cause us visit after visit for paper jams, print issues, etc. After replacing so many parts on the thing and it still failing, it 'accidentally' fell while being moved during one of the weekly building refurbishment moves. It fell 'accidentally' several times until the chassis was so bent the case wouldn't align enough for it to close, and had to be replaced.
This takes me back to computer science classes in 1988, where we all shared a copy of TP5. Lots of fun writing our projects with it. I loved coding with it. I even wrote a leisure centre booking system in it for my A-level project.
For the more mischievous of us, we wrote TSR (terminate, stay resident) programs that would run on our Research Machine 286 workstations, that would just emit a beep at random times - drove our head of computer science mad with that one!
Fun times.
Had the same problem at a major investment bank in 1993. First contract job at 21 years old, IT break/fix for dealer positions and supporting infrastructure. In one of the many distributed IT rooms throughout the building with networking and server kit, I had been sent to powercycle a Novell server. There were two with pretty much identical names next to each other. I read the label too quickly and had already pressed the button in when I realised it was the wrong one. Cue me, scrabbling to hold the button in and reach the phone with my foot to call someone to get the server shutdown before my finger gave out. We managed it and the server was shutdown remotely so I could release the button. Brought it back up, luckily no impact. Then on to fix the one I'd originally been sent to work on.
Many years ago, working for C&W (it had just recently changed from NYNEX at that point), desktop support. A user reported their screen (17" EIZO CRT) would wobble intermittently. Visited by a junior engineer a few times, replaced the screen, cables, etc. Couldn't get rid of it. I went along and saw it start and when it stopped there was a very soft ping noise. Turns out the works canteen was the other side of the partition wall and their commercial microwave was on that same wall. After we got the FM team to install a stainless splashback behind the oven, the screen was stable.
Many years ago, working for Nynex as IT support in one of their call centres. User complaining of their picture jiggling on their display. It would do it for a few minutes at a time and then stop. Someone had already replaced the screen, but it still happened. I noted it was worse early in the morning and at lunchtime. I realised that the other side of the wall from this user was the canteen, with an industrial microwave against the wall. Got the catering manager to put their spare piece of stainless steel splashback behind the microwave and fixed the issue :-)
I think you answered your own requirement there - a garage door opener, something that has been around for a long time and does the job it's designed for. Of course, those are still seriously lacking in security, but it does what you need in a way that doesn't require an IoT device.
You could even add your own device to it to open it across t'internet if you really wanted - plenty of Raspberry Pi / Arduino projects out there for that.
If people are running their servers in a virtual environment (VMware ESXi), does this issue potentially open VM to VM communication vulnerabilities, or if the hypervisor still effectively isolating privileged memory correctly between VMs? I can understand that this may still leave the issue open inside the VM OS if those are unpatched, but as long as the hypervisor is still providing isolation, the risk is restricted to issues inside the VMs themselves.
The biggest hurdle to DaaS as far as I'm aware is the MS licensing requirements to keep individual clients on dedicated hypervisor hardware, meaning you cannot have a 5-seat client share a physical environment with another 5-seat client. This limits the scale-down to which you can sell a DaaS service at a cost-effective rate.
Wonder how that will be dealt with.
I enabled the service yesterday on my account, just to see what it's like, and I have to report that it's not too bad. The categories are the standard ones that anyone familiar with a corporate web proxy filter product will see, so give it a rest on the Government Conspiracy rhetoric around categorisation of content. There is a custom filter set you can specify too.
If you really want to look at pr0n, you can set a time when the filter is inactive, so just configure it for when little Johnnie has gone to bed. And if you hit a site outside that time that you don't want blocked, you can even put an exception in there to allow it, no great hard work required.
I really don't see what the big fuss is about as long as there is the ability to turn it off, which the account holder has the ability to do. And before you start complaining about not being the account holder, quit your bitching as you're obviously not paying for the connection you're trying to surf on!
There will always be those that don't want the filter, and there will always be 101 ways around it. This is meant as a simple tool to help those that want filtering on their broadband connection to implement it without them having to install lots of software or build their own filter servers.
my Blackberry was showing 'edge' instead of 'EDGE' this morning. I've happily switched to UMA now using my home broadband (non-Orange) and getting full service again
Wonder if it's anything to do with their planned merger with T-Mobile ? Giving us a taster of the level of service we can expect in the future maybe ??? :-)
the easiest way around this is to ensure that the readers have access to the database these cards are generated from. Then it's as simple as comparing a checksum of the card data with that held on the database. Hardly rocket science, is it ??
If the reader displays the digital picture on a display that they can view alongside the photo on the card, and the checksum works out, then th card is valid. Any difference, the card is void.
Simples, as they say at comparethemeerkat :-)
Could be anything from just junk to other copyright works or even kiddie pron? A few trojans perhaps, or the source code for Conficker ??
How would you defend that in court..... "I was trying to quietly download the latest ripped-off movie but ended up with all this other incrimiating stuff instead" ?
If it's truly random, no telling what you could get caught downloading there !
"His update engineers screwed up big time by issuing an ESX update in August that contained destructive time out code. This caused many VMware users' licenses to abruptly expire and their virtualized server worlds came crashing down to Earth."
If you're going to quote supposed fact, please get it right. The timeout didn't cause things to stop, shutdown or 'crash to Earth'. It simply meant that any powered off VMs couldn't be powered on again. There was also a fairly simple time-shift workaround that many clients were able to employ until a fix was released the next day.
Given that this is the first and only 'major' problem exhibited by this product, and one that didn't in fact cause the hypservisor to 'Crash' as you stated, I think that you are making a mountain out of a molehill.
The zero-price option just means that ESXi will be shipped embedded on various hardware platforms, or available to install on local drives. This will allow the use of ESXi, but if you want to make full use of all the features (vmotion, DRS, HA, etc), then you'll still need Virtual Centre and relevant licenses for it and the features you want to use.
So, yes, the hypervisor will be free, but not much use without the licenses and fee-payable additions.
I worked for a support company working for an Australian bank in London. On the trading floor, there was a very pretty but clueless lady who was the admin assistant for the traders, and who had dated most of them. Someone called her and asked her to see if anyone had seen Mark Hunt - when she shouted it out, everyone put up their hands, accompanied by lots of schoolboy-like giggling.... oh how we laughed!
Probably the sort of thing that Paris could shout and get a similar response to!
BT could have just added a proxy service for all their customers to ensure they didn't hit unwanted pages. They could have applied this to any traffic from a customer's IP address, allowing the customer to specify if they wanted filtering, paying a fee to cover the service.
But, no, BT have decided to ally themselves with Phorm to generate revenue by underhand methods, perhaps thinking that their customers wouldn't willingly pay for the filtering service in the first place. Well, BT, if you had actually consulted your customers, I think you would find that most customers with children would happily pay a small monthly fee to filter their connection to ensure their children were safe on the internet, giving you the revenue strem that you seek.
I for one will be ensuring that I stick with an ISP that doesn't employ this technology.