131–140 of 505 posts
Earlier quoted context omitted.
Why are power stations on the same network with some guy with a USB key?
Because people still use USB drives to copy information to airgapped computers. It is easier than the alternatives.
Earlier quoted context omitted.
I understand that people love open source, but how is that relevant here? For example OpenSSL is open source, yet it didn't prevent Heartbleed and other exploits from happening?
OpenSSL was an example of open source done badly; neither of our communities can claim to be universally perfect. The solution, was to fork and replace OpenSSL with a superior project: LibreSSL. That part of the story, is a success for open source. It shows us recovering quickly and permanently from the worst catastrophe imaginable.
Can't law enforcement follow the transactions of the public address of the ransom bitcoin wallet until the bitcoin is sold?
There are services that will mix your coins making it impossible to track because he will receive other people coins from the pool.
From the Guardian: "He adds that the fear is that the ransonware cannot be broken and thus data and files infected are either lost or that the only way to get them back would be to pay the ransom, which would involve giving money to criminals." The new terrorism. https://www.theguardian.com/society/live/2017/may/12/england...
How is it terrorism if the purpose is to get money?
As you may have gathered, my original statement is more eloquent.
We are seeing bullet holes from what seem to have been cyber warfare between the former cold war foes.
Earlier quoted context omitted.
In defense of these medical devices, that is actually a FDA requirement. The entire combination of the system is certified to work, and even one patch for a security vulnerability leaves open the possibility that the patch breaks something and people die! Of course it goes without saying that you need to ensure that a virus cannot run on this machine by some other means. If these machines can get infected they automa…
This 100x. I know it's extremely easy to Monday morning quarterback hospital IT but it's not as simple as people think. There's legal and, far more importantly, medical implications to updating software at a hospital. Oh you think it's ridiculous we use i.e. 7 in compatibility mode? It's because our mission critical emr only works in that (well it really works in everything but it's certified in 7) and if we use anyt…
The long and short don't use standard desktop Windows (or even standard embedded Windows), Linux or MacOS to run these devices.
I think this is an excellent example that we can all reference the next time someone says that governments should be allowed to have backdoors to encryption etc. This shows that no agency is immune from leaks and when these tools fall into the wrong hands the results are truly catastrophic.
To be completely fair, it's not the NSA's fault that software has faults. Its the software manufacturers'. The ethical concern here is whether the NSA should have reported the holes to the manufacturers and the failure to handle its privileged knowledge in a safe manner.
Earlier quoted context omitted.
OpenSSL was an example of open source done badly; neither of our communities can claim to be universally perfect. The solution, was to fork and replace OpenSSL with a superior project: LibreSSL. That part of the story, is a success for open source. It shows us recovering quickly and permanently from the worst catastrophe imaginable.
How widely is LibreSSL used, compared to OpenSSL?
Earlier quoted context omitted.
In defense of these medical devices, that is actually a FDA requirement. The entire combination of the system is certified to work, and even one patch for a security vulnerability leaves open the possibility that the patch breaks something and people die! Of course it goes without saying that you need to ensure that a virus cannot run on this machine by some other means. If these machines can get infected they automa…
Seems like the FDA should certify on software tests and not software versions.