Log in or Sign up

FYI for the non Geek Sailors and Apple Lovers

Discussion in 'Technical Discussion' started by Old Phart, May 25, 2011.

Page 2 of 3

Capt Ralph, Sep 2, 2011

#21

Capt Ralph Senior Member

Joined:

Sep 8, 2004

Messages:

13,646

Location:

Satsuma, FL

Here are the Google links for the links in question:

I didn't ask. and after 14 postings, anybody else should already have a plan (or opinion).
,
Old Phart, Sep 3, 2011

#22

Old Phart Senior Member

Joined:

Mar 14, 2011

Messages:

1,327

Location:

I dunno

Are you sure?

rcrapps said:

Here are the Google links for the links in question:

I didn't ask. and after 14 postings, anybody else should already have a plan (or opinion).
Click to expand...

Yes, you did.

rcrapps said:

Old Fart running come kind of campaign here? I don't know any of those links or him.
Click to expand...

Again, the purpose of this thread is to educate; not to opine.

Lots of members of the yachting community are of the opinion that their Steve Jobs' incarnation(s) is(are) Black Hat proof.

This thread merely stresses the need to protect one's assets and not to be overly confident with their product of choice.

The event of August, 2011, the 20th birthday of Linux, should be very troubling, disturbing, and a rude awakening.

If all this event means to you is:

rcrapps said:

Old Fart running come kind of campaign here? I don't know any of those links or him.
Click to expand...

and obviously, you use the Internet, I truly hope you will give due diligence to the posts within this thread.

P.S.- Here's the link to verify Linux's 20th birthday:

http://www.gatorlug.org/node/208
Old Phart, Sep 7, 2011

#23

Old Phart Senior Member

Joined:

Mar 14, 2011

Messages:

1,327

Location:

I dunno

DigiNotar lost that lonely feeling

Deja vu:

http://www.globalsign.com/company/press/090611-security-response.html

Question to self: Are people socially disfunctional, if unable to play nice in the Internet sandbox?
Old Phart, Sep 9, 2011

#24

Old Phart Senior Member

Joined:

Mar 14, 2011

Messages:

1,327

Location:

I dunno

Whom do you trust?

Updating = better protection of your assets.

http://support.apple.com/kb/HT4920
Old Phart, Sep 15, 2011

#25

Old Phart Senior Member

Joined:

Mar 14, 2011

Messages:

1,327

Location:

I dunno

Disadvantage of lame work ethics

Lame work ethics take a toll:

ISC Diary | DigiNotar looses their accreditation for qualified certificates
Old Phart, Sep 17, 2011

#26

Old Phart Senior Member

Joined:

Mar 14, 2011

Messages:

1,327

Location:

I dunno

IT Security is like rust - the best never rest

Latest from LinuxFoundation.org (down for maintenance due to a security breach).

http://www.linuxfoundation.org/
Old Phart, Sep 22, 2011

#27

Old Phart Senior Member

Joined:

Mar 14, 2011

Messages:

1,327

Location:

I dunno

It's a wonderful day in the neighborhood for the Black Hatters

Interesting read at isc.sans.org, today, regarding Firefox and cell phone browsers and IT security updating.

ISC Diary | TLS 1.2 - Look before you Leap !

Mozilla/ Firefox - TLS 1.0 only (vote here to get this fixed ==> https://bugzilla.mozilla.org/show_bug.cgi?id=480514 )
Old Phart, Sep 26, 2011

#28

Old Phart Senior Member

Joined:

Mar 14, 2011

Messages:

1,327

Location:

I dunno

Oracle rhetorical

MySQL.com having an off day in the IT sandbox.

ISC Diary | MySQL.com compromised spreading malware
Ju52, Sep 27, 2011

#29

Ju52 Senior Member

Joined:

Aug 28, 2006

Messages:

148

Location:

Frankfurt

Old Phart said: ↑

If only the World were perfect and an Apple were bug resistant.

ISC Diary | Jailbreakme Takes Advantage of 0-day PDF Vuln in Apple iOS Devices
Click to expand...

Using jailbreak works like removing all locks from your home doors.

You can check a PDF before opening with a virus scanner - it can reduce the risk but not remove the risk at all!

Thanks for the thread.
Old Phart, Sep 27, 2011

#30

Old Phart Senior Member

Joined:

Mar 14, 2011

Messages:

1,327

Location:

I dunno

Free does not mean free of IT security issues

If you are using Debian GNU/Linux for your OS,
you may find it advantageous to visit the Security Advisories
section of this link, periodically, if not frequently.

Debian -- The Universal Operating System
K1W1, Sep 27, 2011

#31

K1W1 Senior Member

Joined:

Sep 30, 2005

Messages:

7,435

Location:

My Office

Ju52 said: ↑

Using jailbreak works like removing all locks from your home doors.
Click to expand...

No major drama if you have a tripod mounted .50 cal inside the front and back doors as back up for as few Claymores on the outside stairs.
Old Phart, Sep 27, 2011

#32

Old Phart Senior Member

Joined:

Mar 14, 2011

Messages:

1,327

Location:

I dunno

K1W1 said: ↑

No major drama if you have a tripod mounted .50 cal inside the front and back doors as back up for as few Claymores on the outside stairs.
Click to expand...

Feeding the critters results in less clutter in the house.

They tend to protect the hand that feeds them.
Old Phart, Sep 28, 2011

#33

Old Phart Senior Member

Joined:

Mar 14, 2011

Messages:

1,327

Location:

I dunno

Semi-Annual Cisco IOS Software Security Advisory Bundled Publication (updates)

Whilst enjoying the serenity of the corporate yacht, have the IT troops back at the office check this link:

Cisco Event Response: Semi-Annual Cisco IOS Software Security Advisory Bundled Publication - Cisco Systems
Old Phart, Sep 28, 2011

#34

Old Phart Senior Member

Joined:

Mar 14, 2011

Messages:

1,327

Location:

I dunno

man-in-the-middle attacks

Why pay the middleman?

Flip the switch - turn on the feature.

ISC Diary | All Along the ARP Tower!
Old Phart, Sep 30, 2011

#35

Old Phart Senior Member

Joined:

Mar 14, 2011

Messages:

1,327

Location:

I dunno

kernel.org status update

http://kernel.org/

Tic Toc, Tic Toc

Time heals all wounds.

The waiting game continues...

A kernel.org status update [LWN.net]
Ward, Sep 30, 2011

#36

Ward Senior Member

Joined:

Jan 18, 2010

Messages:

277

Location:

Vancouver BC

I can't help wondering, what is the significance to a website/forum about yachts of the status of kernel.org after the site was hacked?

And what's the point of your post about ARP? That post on ISC that you linked to is just a jocular reminder that ARP validation is worthwhile, it's not talking about any demonstrated security risk, which seems to be what this thread was initially about. As a sytems/network admin, ARP issues are somewhat interesting to me, but it's about as relevant to this site as guinea pig dental care.
Old Phart, Sep 30, 2011

#37

Old Phart Senior Member

Joined:

Mar 14, 2011

Messages:

1,327

Location:

I dunno

Ward said: ↑

I can't help wondering, what is the significance to a website/forum about yachts of the status of kernel.org after the site was hacked?

And what's the point of your post about ARP? That post on ISC that you linked to is just a jocular reminder that ARP validation is worthwhile, it's not talking about any demonstrated security risk, which seems to be what this thread was initially about. As a sytems/network admin, ARP issues are somewhat interesting to me, but it's about as relevant to this site as guinea pig dental care.
Click to expand...

If you are as self-described, then you should know the answers to your queries.

Example: man-in-the-middle attack seems to be exemplified in this link:

Does Hannaford Hack Suggest PCI Standards are Flawed?

link said:

Kevin Mandia, president of Alexandria, Va.-based computer security firm Mandiant Corp., said retailers are most vulnerable during the processing of the credit or debit transaction. Hackers can create a type of software called a "sniffer" that acts like a wiretap and can intercept credit and debit card data as it travels between the retailer's point of sale and the credit card processing company. It can be very difficult to detect sniffers.
Click to expand...

link said:

Translation: The hackers snatched the credit/debit card data sometime between when the customer swiped their card in the reader at the register and when that transaction was approved.
Click to expand...

For those who may be curious about the legitimacy of the hack, this link is offered:

Three indicted for hack attacks on Heartland, Hannaford - Computerworld

Again, the purpose of this thread is to inform; not to opine.
Ward, Oct 1, 2011

#38

Ward Senior Member

Joined:

Jan 18, 2010

Messages:

277

Location:

Vancouver BC

Old Phart said: ↑

Example: man-in-the-middle attack seems to be exemplified in this link:
Click to expand...

I don't see anything about man-in-the-middle in that story, it suggests data was compromised by "sniffing" on a store's network. Nor in the second link.

Old Phart said: ↑

Again, the purpose of this thread is to inform; not to opine.
Click to expand...

Data becomes information when it has some structure. As far as I can tell you're just posting random news stories on security incidents. My questions weren't technical, they were pragmatic, and amount to: "What is your point?"
Old Phart, Oct 1, 2011

#39

Old Phart Senior Member

Joined:

Mar 14, 2011

Messages:

1,327

Location:

I dunno

Ward said: ↑

I don't see anything about man-in-the-middle in that story, it suggests data was compromised by "sniffing" on a store's network. Nor in the second link.

Data becomes information when it has some structure. As far as I can tell you're just posting random news stories on security incidents. My questions weren't technical, they were pragmatic, and amount to: "What is your point?"
Click to expand...

Your opinion is yours.

Speaking of data, it is what it is - structured or not.

Data - Definition and More from the Free Merriam-Webster Dictionary

Did this thread touch a nerve?

Think - point, counter point.

If you disagree with a post, simply offer a counter point.

Seafarer might appreciate an explanation as to why kernel.org was hackable and why it has been down for maintenance for such a long time.

Seafarer said: ↑

This old chestnut... Care to quote market share off the top of your head?

It's currently about 10% - somewhere around 10 million sold a year. 10% is statistically significant no matter how you slice it. Market research also puts Mac buyers in a higher earning demographic than PC buyers (which makes sense, considering you can pick up a PC bundle and get onto your local dial-up provider for about $300... not many people in the trailer park will shell out $3k for a laptop). A new PC every Christmas? Sure. A new Mac every 3-5 years? That's about right.

For thieves, that's a lucrative target. But what they can't penetrate in quality they make up for in quantity by going after susceptible Win boxes.

If you notice a common thread, the "viruses" for OSX are not viruses at all, but trojan horses, and are generally as easy as rebooting your system to get rid of. Linux being the basis of OSX, and Linux also being the OS of choice for the world's supercomputers, as well as the choice OS of the people writing the viruses, one would expect to find a lot more Linux exploits. But there aren't.

And that's not because there's no value in exploiting Linux security holes. It's because there aren't really any holes to exploit, and those that exist are patched at least as quickly as they are found. The beauty of open source.
I'm not a fanboy. I've done my years in PC system and network support. I've got Macs in the field with my people and I use one for most of my work as well. They are a much better system from firsthand experience. I would not have said the same before the Intel-chip/OSX generation came along in 2006, when I made the jump.

Recently I've been working in a business that is mid-migration to Windows 7 from XP. Guess what? It's still NT behind it all... without the NT reliability. 15+ year old software with new pretty pictures facing the user. 15+ year old vulnerabilities and weaknesses. 15+ year old problems and 15+ year old patches. 25+ year old memory management and file naming conventions. But they're cheap and ubiquitous, so people put up with the trouble.
Click to expand...

Just a constructive thought.

If you prefer destructive thoughts, then simply PM the Webmaster and request that this thread be deleted and I be banned.

Life is really that simple.
Ward, Oct 1, 2011

#40

Ward Senior Member

Joined:

Jan 18, 2010

Messages:

277

Location:

Vancouver BC

It's impossible to offer a counter-point to someone who won't say what their point is. I don't know if the ignore function will stop this thread from showing up when I click "Read New Posts," but I'm sure I'll find a way to stop noticing it.

(You must log in or sign up to reply here.)

Page 2 of 3

XenForo add-ons by Waindigo™ ©2015 Waindigo Ltd.