376
Living Room / Re: badBIOS revisited - it is possible to bridge the airgap after all
« Last post by Vurbal on December 09, 2013, 09:21 PM »I'll stick with Motorhead for my malware protection. 

Why can't Windows 8 find the Startup Folder?
http://support.microsoft.com/kb/2806079
- Win+R
- Type the following text in Run dialog box and click OK: shell:startup
-erikts (October 30, 2013, 09:52 PM)
Can you make that into something like a desktop shortcut?-TaoPhoenix (October 30, 2013, 10:28 PM)
Yeah but there's already consumer products on the shelves that do this- the MyCloud device I mentioned that I installed at work, I picked that up off the shelf at Staples when replacing an external hard drive.
Instead of having to install and configure such a solution, you can just buy a device that is web-configured like any other soho box and have a ready to use private cloud with the data physically located in a stand alone device in your household- or anywhere convenient with suitable network access. It even attempts to upnp its way through your router if enabled, or you can configure the ports manually for those so inclined.-SeraphimLabs (October 25, 2013, 10:10 PM)
^^ +1 for what @Vurbal said: Spot-on. Some food for thought.Yes, an audit could help to "prove" things, but then you'd need to audit the other crypto-g schemes (MS, Norton/Symantec, etc.), as a basis of comparison, to establish a level playing field.Why? ...-IainB (October 10, 2013, 06:20 PM)-Vurbal (October 25, 2013, 05:42 AM)
My comment was kinda tongue-in-cheek, as I couldn't see a particularly compelling and valid reason for selecting TrueCrypt out of the stack, almost at random, and it could arguably be a complete waste of time, mostly for the reasons you pointed out.
I only said it could help, I didn't say it would necessarily prove anything. Audits of anything always have potential value.-IainB (October 28, 2013, 11:16 PM)
However, recommending audits can be a damaging thing. Suggesting out of the blue that something "needs to be independently audited" carries with it an unfounded and implicit suggestion that scrutiny is required as there is or may be or could be something dubious about it - it's a bit like casting aspersions. Anyway, that's when my BS alert went off and I suspected FUD. I guess I've seen it too often before not to be wary of it.
Alex and I have a bunch of Roku channels loaded.
What we mainly watch is something we usually found on:
- Netflix
- TED
- Hulu+
But we're more the full movie and educational/science show types so YMMV.-40hz (October 25, 2013, 02:25 PM)
In the meantime, OwnCloud seems to be gaining traction. But (I say) if ya gotta authenticate through THEIR server... what's the sense in that?-saralynn (October 24, 2013, 06:04 PM)
I'd go with the HAL 9000. Already proven against the human threat.-Vurbal (October 25, 2013, 02:20 PM)
HAL9000 was still just a computer that only had control of its own direct environment. Lawnmower Man (by the end of the movie) was a pure energy being ... So he could travel up the wire and kill the hacker in their own home. Which would greatly simplify security response times because you don't have to waste time analyzing the attack to mount a counter strategy. Because you could simply kill the person launching it.
...And no I couldn't say that IRL with a straight face.-Stoic Joker (October 25, 2013, 02:55 PM)
What's the better response to this article? Crickets and Silence? Or Laughter?-wraith808 (October 25, 2013, 12:25 PM)
WOOHOO!
I'm going to send them in a robot that unplugs computers!-Renegade (October 25, 2013, 10:28 AM)
That was a great post Vurbal, and it reflects many of my thoughts on licensing as well.
As I wrote, I can understand his need to make money, and lifetime licenses are a short-term solution in many cases. My concerns were with the way he implemented the change -- someone on the forum even called it a coup.
Like you say, lifetime licenses are sometimes used to get into a market. I think they can also work for some more mature products, if you sell them at a high enough premium that you feel reasonably confident they cover a large part of what revenue you could have realistically expected from one customer through regular paid upgrades (2.5-3 times the normal price seems to be a popular level).
Paid upgrades have the drawback that you have to periodically actually make enough useful changes that your users see justification in paying again. As you described, most software reaches a level of maturity where this becomes harder to achieve.
For many products, the ideal solution for the developer seems to be subscription based licenses, where you are guaranteed a steady stream of income, as long as you (at least appear to) continue updates.-Jibz (October 25, 2013, 07:18 AM)
Yes, an audit could help to "prove" things, but then you'd need to audit the other crypto-g schemes (MS, Norton/Symantec, etc.), as a basis of comparison, to establish a level playing field.-IainB (October 10, 2013, 06:20 PM)
That's kind of what I was assuming. I thought the buffers had something do do with getting around bandwidth issues. I don't know how it translates calculation-wise...the question is still "How much kbps do I need?"-superboyac (October 09, 2013, 09:03 AM)
Probably got lucky with the OOB default of having Simple File Sharing enabled, which shares everything with everyone IIRC.-Stoic Joker (October 21, 2013, 03:34 PM)
Closest thing to that in 7 is a HomeGroup.
...But if I say HomeGroup one more time I think 40hz is going to shoot me.
So how do we sum up everyone's feelings about Flash??
How about this: (see attachment in previous post)-Stoic Joker (October 17, 2013, 11:32 AM)
I have been on the receiving end of a patent troll who tried to (unsuccessfully) extort/intimidate me away from a software program on an absolutely silly basis. Despite the fact that the patent troll failed, I came out of the experience firmly convinced that the patent system is completely broken, and is yet another industry which has built a fiefdom out of extracting maximum legal costs, and benefit those corporations with the largest bank reserves.
Having said that -- I have to disagree with those who say that the very idea of intellectual property protection is unimportant. I think that without some system to ensure that inventors are properly compensated for their discoveries, the result would be large corporate marketing giants what come in like vampires and simply do a better job of mass producing/marketing/monopolizing/bullying/etc than the original inventors.-mouser (October 20, 2013, 11:00 AM)
So I believe there has to be some middle ground. I don't have the answers but we could start by removing the middlemen between the inventors and the producers.