Earlier quoted context omitted.
The license.md does not say it is open source :)
The person who has the device never agreed to that license…
...which means that by default they're basically not allowed to do anything with it.
The curious case of the Raspberry Pi in the network closet (2019)
201–210 of 269 posts
Re: The curious case of the Raspberry Pi in the network closet (2019)
#202Re: The curious case of the Raspberry Pi in the network closet (2019)
#203Earlier quoted context omitted.
> So no legal after play and just a slap on the wrist The problem with this is you have no idea what harm the guy actually may have caused; nor what other RPis he may have set up around the company or around town. Next time he may be more careful with his username, set up the disk to be encrypted w/ a network key, &c, making future exploits more difficult to track down.
There is a case to be made for using the legal system as a deterrent. But there is also the case to made to not do that as in the case of Aaron Swartz.
Seems like the decision becomes a matter of whether you agree with the motive then.
But in this case.... the motive seems to be unknown.
Re: The curious case of the Raspberry Pi in the network closet (2019)
#204Earlier quoted context omitted.
Legally that's true but I think you know as well as anyone that people don't just suddenly mature on the day of their 18th birthday.
I wonder what effect treating legal adults as children has on their maturity trajectory.
There's a book about this: https://www.amazon.com/Case-Against-Adolescence-Rediscoverin...
Re: The curious case of the Raspberry Pi in the network closet (2019)
#205Earlier quoted context omitted.
While I'm sure I could configure this on a system, the level of understanding required to actually create it honestly is fantastic. Is this something you created yourself, or was it a community project?
Initial idea and C++ implementation (using TLS with X.509 certificates and explicit UDP broadcasts) was done in 2007 by another person. Redesign of the protocol (to TLS with OpenPGP keys¹ and DNS Service Discovery²), and re-implementation in Python and C, I did in collaboration with that person. In addition to ongoing maintenance, the relatively recent switch from TLS with OpenPGP keys to TLS with Raw Public Keys³ wa…
That looks like an awesome project but I'm not sure building an LFS system would help developing a system like that. Possibly in understanding and configuring it.
I still recall how to build a Linux system from go. Coding what you're working on up in Python/C would take a large unrelated amount of knowledge.
Re: The curious case of the Raspberry Pi in the network closet (2019)
#206This sounds like one of the classic stories by SecurityMonkey a.k.a. Chief:
https://web.archive.org/web/20191006220253/https://it.toolbo...
The individual stories seem to be still available on the non-archived web here: https://www.toolbox.com/user/about/ChiefMonkey/ but not, from what I can find, the convenient story index, which I linked to above.
He seems to have planned a rewrite of all the stories and put them on… Medium.com: https://medium.com/@chiefsecuritymonkey However, the last update is from May, 2020.
Re: The curious case of the Raspberry Pi in the network closet (2019)
#207Earlier quoted context omitted.
This is a silly take. People and orgs have a million reasons why their cables might be unlabeled. Shame on you for binary thinking without considering real world confounding factors.
What I am hearing is that is that it is not practical to expect network admins to be in control of their networks and sub-sequentially it is not practical to ensure no malicious devices are plugged into enterprise networks. Just because it’s difficult to do doesn’t mean it shouldn’t be done.
What you should be hearing is that it’s not necessarily irresponsible for somebody not to know something when they are inheriting a system, and that it’s totally reasonable to expect to encounter poorly done systems in the real world that need someone to fix them.
It’s often the case that somebody slapped something together in an area that wasn’t their expertise, it’s been noticed that it’s a real problem, and someone has been hired to fix that problem. The “not knowing” is often the reason they’ve been hired. Trying to sort out a real world scenario (while also handling other needs of the org) is almost definitionally Taking Responsibility. So let’s not shit on people trying to cleanup a bad situation by calling them irresponsible for not knowing.
Re: The curious case of the Raspberry Pi in the network closet (2019)
#208I'm rather curious, why can't the RPi have soldered flash memory? How much would it cost to add 2, 4, or 8GB of flash memory on it? Because I would gladly pay for a Rpi with such memory if it added 10 dollars. I'm suspecting it would require for them to make a new SOC, breaking compability?
I'd rather have onboard USB serial. No more trying to find a USB serial cable laying around, or enabling SSH and hunting down the IP address.
It already has the USB port for power, surely they could have gotten Broadcom to include USB serial in the SoC for negligible cost by now?
Re: The curious case of the Raspberry Pi in the network closet (2019)
#209Author of the article here. Since I first published this blog post I was getting messages from people asking how it ended. Sadly it's pretty anticlimactic as the owner of the place had a meeting with the guy who put the Pi there (without me as he didn't want the Pi-dropper to feel ambushed) and in the end decided not to escalate it to legal and just basically told him to pack his things and get out. So no legal after…
> cat config.json | jq
cries in UUoC
Re: The curious case of the Raspberry Pi in the network closet (2019)
#210Earlier quoted context omitted.
Do kids in gifted programs go on to become intellectual elites and “captains of industry” at higher rates than their peers?
Not by much, I'd bet. If at all. The poster seems to have confused top-tier private schools and gifted programs. Read enough politician and C-suite and such bios and it's very clear what's going on. You practically never see "attended a pretty decent public high school—but was in the gifted program!" Private college prep secondary schools (at the very least—often it's private schools all the way) on the other hand ar…
> Private college prep secondary schools (at the very least—often it's private schools all the way) on the other hand are overwhelmingly the norm in that set.
To which data set are you referring? Data from 2019 found that 80% of Fortune 100 CEOs hold undergraduate degrees from public institutions[0].
[0]: https://www.forbes.com/sites/kimberlywhitler/2019/09/07/a-ne...