Root Access

Psycogeek

12:53 AM

How you know you found an open Wi-Fi Hotspot

Pic stolen from here geeksugar.com/…

Anonymous

@Psycogeek all those dumbphones

Psycogeek

Maybey they are only partly dumb? My throwaway phone ($40 go phone) will hop on the web just as easily as the big one. Problem was stopping it from going on the web :-)

Braiam

1:22 AM

flags @terdon comment as obsolete, since it doesn't make any sense now

Journeyman Geek

actually those look too old to be even featurephones

terdon

@JourneymanGeek they're solar powered

@Braiam ???

Journeyman Geek

chuckles First reviews of FF phones are "They're horrible, only as good as first gen smartphones, and slow

terdon

It's not a particularly useful comment no, but how is it obsolete?

Journeyman Geek

@terdon: can I feed the designer to a grue then?

If I designed a solar powered flip phone, I'd have the solar cell on the other side

terdon

1:25 AM

@JourneymanGeek Hey, I'm typing this at 2:24am using a logitech solar powered keyboard!

@JourneymanGeek yes, you might have a point there.

Journeyman Geek

then you can either charge while the phone is closed or /\ position.

and blah, my mom wants me to clear my old lab space. So much stuff

of course, half of it was a printer.

terdon

A printer?

@Braiam stupid terdon, it's obsolete cause the comment you were answering is no longer there, try refreshing the page next time!

Thanks @Braiam I deleted it

allquixotic

@JourneymanGeek I'm not even slightly surprised :P

Braiam

@allquixotic I can read sarcasm there

Journeyman Geek

@allquixotic: I think they need to moderate their expectations ;p

Anonymous

1:34 AM

@JourneymanGeek i'm saying goodbye to my bb torch

Anonymous

@JourneymanGeek i'm upgrading to 2013 and getting a nexus 4

Journeyman Geek

@PatoSáinz: ;p

This is a pretty good time for good cheap phones

Anonymous

true

Anonymous

in between the 16gb Moto /g/ and the 8gb Nexus 4 i'd pick the Nexus 4 (i'm in sort of a tight budget)

Journeyman Geek

1:35 AM

The moto G is positively fantastic. Friend of mine is looking at getting a redmi (roughly similar specs, larger screen, micro sd card and dirt cheap)

though, it has a mediatek processor, and generally people turn up their noses at that

Bob

2:00 AM

Captializing FREE like that makes it seem like your spamming or promoting. — ultrasawblade 4 mins ago

heh

That Brazilian Guy

2:18 AM

> Windows 8.1 Will Start Encrypting Hard Drives By Default

> Windows 8.1 will automatically encrypt the storage on modern Windows PCs. This will help protect your files in case someone steals your laptop and tries to get at them, but it has important ramifications for data recovery.

And this is when I, as an atheist, give thanks to God for not doing repair & tech support anymore

Bob

@ThatBrazilianGuy lordy.

that's not gonna go well.

yet another manager going "hey, d'ya know what would be an awesome idea?"

(oh, and he lost his phone last week)

terdon

@ThatBrazilianGuy Woah! Where's that from? And who gets to set the key?

Bob

@terdon The ~~NSA~~ user.

terdon

tsk, I saw what you did there

Bob

@terdon Traditionally, the user password was the key. Which means...

"I forgot my password", "Here, I reset it for you", "Where's my files?!?!?!"

and, really, anything other than the password makes no sense because then it can be retrieved by an attacker...

summary: this is a stupid idea. beyond normal stupidity.

terdon

2:33 AM

@Bob how so? Are you recommending that your password and encryption key be one and the same?

Bob

@terdon the key must be either derived from or encrypted with the password

the password (or other user-supplied data) must be somehow used to protect the encryption key

if the encryption key were exposed without the password, then an attacker can simply read and use it

terdon

Ah, OK, I see what you mean. But surely the two systems can be separate can't they?

Bob

of course, they could do their online account auth and have that pass a key back, but I sure as hell wouldn't trust that

terdon

AAA!

Bob

@terdon With what scheme could they possibly be separate?

if you can get the key without a password, so can an attacker.

terdon

2:36 AM

Hang on, working it out, I'm not a security guy

I mean, you need the password to log in, once you are logged in, you can decrypt your drive. As long as you have the basic OS files unencrypted and accessible, that should be perfectly easy right?

Bob

the basis of encryption is knowing some secret the attacker does not know

@terdon you need the password

what if you forget the password?

remember, we're talking about encryption-by-default

for normal users

forgotten passwords can probably be measured in occurrences per second

terdon

Fair enough. But what I describe should be feasible right?

Bob

(heck, power users are hardly immune to forgotten passwords)

@terdon that's what's currently done for similar schemes

user profile is encrypted with key protected by user password

terdon

OK, that's what I thought but since I only have one encrypted directory on my system, I'm not very knowledgeable on this

Bob

guess what? if you reset the password, you lose access to the key

terdon

2:39 AM

@Bob OK, that was my next question. So if they do it like this, your encryption key will change every time your password does right?

Bob

@terdon the whole problem is you lose access if you lose your password

@terdon normally you have an encryption key that's protected by or derived from the password

not sure which Windows currently uses for EFS, probably the latter

when you change your password..

Journeyman Geek

@Bob: I suspect since the password is tied into your microsoft account, there should be a way to get it unencypted

I think it re-does your key.

terdon

@Bob You're always talking about encrypting the entire disk right? I don't see any reason why this would be necessary for encrypting specific parts of it.

Bob

basically, the key itself is encrypted with the password

you type in yoru old password ,it's used ot decrypt the key

you type in your new password, the key is re-encrypted with the new password

but if you reset the password, you can't recover the key

5 mins ago, by Bob

of course, they could do their online account auth and have that pass a key back, but I sure as hell wouldn't trust that

where an external entity controls the key with arguably more access than you, FUCK NO

@terdon no, I'm talking about any encryption.

terdon

The whole idea of allowing an external entity to encrypt my drive by default scares the shit out of me

Bob

2:42 AM

to encrypt, you need a key, yes?

terdon

@Bob yes

Bob

where do you store such a key?

better yet, how do you store such a key so that an attacker cannot retrieve it?

terdon

Umm, in an encrypted file?

and what key does that file use, I guess is the next question

Bob

@terdon yes

eventually, the chain must end

and the logical end is the user's password

because that's really the only thing the user knows that an attacker won't

terdon

OK, so how about the Administrator's?

Bob

2:44 AM

it must be something that a user enters

(or selects, in the case of a keyfile)

terdon

In Linux for example, you have encrypted passwords in /etc/shadow

Bob

@terdon What about administrators?

@terdon No. You have hashed passwords.

Rule 1 of password storage: (almost) never encrypt them

terdon

@Bob ah, now we're getting somewhere. That does not count as encryption?

Bob

passwords used for authentication should be stored in an irreversible manner

terdon

So how can they be checked? You enter the password, it gets hashed, the system saves the hashed password and then never needs to access the actual password again

Is that the idea?

Bob

2:45 AM

the only cases where you should ever use reversible encryption are where you need to retrieve the password later to pass onto other services... which is often a major security risk

@terdon and then you hash the passwor dthey enter and compare hashes

terdon

So the basic idea is that the system only knows what the hash of the password should be and not the password itself?

Bob

generally, you don't want to save passwords in any manner that can be reversed

terdon

No, I can see that.

Bob

@terdon yup.

see what Adobe did. they used encryption. not just encryption, broken encryption (EBC is kinda broken)

now the encrypted passwords are released and being reversed trivially

of course, hashes can be brute forced. generally, you want slow hash functions

often, KDFs (key-derivation-functions) are used, especially for encryption

things like bcrypt, scrypt, PBKDF2, are designed to be slow

terdon

slow as in wall time or cpu time or both?

Bob

2:48 AM

SHA1 is also to ofast

MD5 is broken because of collisions and it's too fast

@terdon both.

at the very least wall time

terdon

Yeah but what exactly is slow, the time, to break one or to compute one?

Bob

IIRC MD5 can be brute-forced by testing hundreds of millions per second

codinghorror.com/blog/2012/04/speed-hashing.html

@terdon both

the longer you take to compute a single hash, the longer it'll take to brute-force a lot. that's assuming the algorithm is cryptographically secure in the first place and doesn't suffer from a weakness (brute-forcing itself isn't really a weakness)

terdon

OK, but that's passwords and hashes, keys need to be stored somewhere though right?

Bob

@terdon For encryption, you need a key.

You need some way of getting that key.

You could encrypt the key with the password. You could derive the key from the password. The former is usually used, because then you can change passwords without re-encrypting every file - just the key itself.

But the key (ha ha) here is you must have some method of protecting the key that relies on something the user knows, but not the attacker.

Which is almost always the password. Which presents a problem when the password is forgotten.

terdon

On my Linux machine, I have an encrypted directory. When I mount it, it asks for a passphrase which (if I understand you correctly), is used to decrypt my actual key

None of this is linked to my username

Bob

2:53 AM

The only way around that would be if the password were stored externally with some alternative method of changing it without knowing the old password, but this also means the external entity has access to your encryption key. From a security perspective, this isn't just bad, it's fucking terrible.

@terdon Yea, most likely.

Except this isn't exactly streamlined, and wouldn't work too well for encryption-by-default.

Windows' built-in EFS uses a certificate locked (encrypted?) with the user password. Of course, this isn't actually enabled by default. At least, not in XP/Vista/7/8.

terdon

No, not streamlined at all. OK, I thought I was missing something obvious and that there was no way to avoid bringing in the user name.

Thanks for the crash course @Bob :)

Bob

@terdon You don't really need the user name, you need the password.

It doesn't have to be the user password, but... it must be something only the user knows.

And you're not gonna have much luck asking every user to enter an additional password, especially by default...

@terdon Also, what happens if you forget that password? Boom, data lost? Yea, that's what would happen if the user forgot their password anyway. Except in the external-entity scenario, which is far worse from a security perspective.

Basically, you're doing extra work (encryption takes CPU time and slows things down) and getting a false sense of security, which is worse than none at all.

Sure, your common street thug probably won't be able to retrieve it.

But what if the government wanted in?

What if there was a rogue employee at MS?

terdon

@Bob There's even worse. One of my best friend's dad died a few weeks ago and he had all his data (including such useful things as bank accounts) encrypted and had not thought to give anyone the key

Bob

What if someone socially engineers MS support? (happened to Apple... happened to a lot of other companies...)

@terdon Yea, that's another one.

Also known as hit-by-a-bus if you're a sysadmin :P

terdon

Heh

Bob

2:58 AM

Though that also applies to documenting the system.

terdon

Was horrible though, he had a BIOS password, a strong windows password and a 128bit encrypted drive

Bob

@terdon blog.scorpionsoft.com/blog/2013/09/…

@terdon There's also data retrieval. What happens if your HDD crashes?

Encrypted data is far harder to piece back together.

terdon

@Bob is it even possible? You'd need to first put it back together and then dencrypt I imagine

Bob

@terdon Just be warned that this is all stuff I've picked up and may or may not be correct :P

@terdon pretty much :P

Also, depending on the algorithm and block mode used, a corrupted section in the middle might also damage data at the beginning and/or end.

terdon

@Bob dude, we're geeks, that pretty much describes EVERYTHING we know

Bob

3:01 AM

This can also happen with fragmentation, of course, but encryption tends to make that worse...

(you also can't see the file table to find out where parts of a file are, in the case of full-disk encryption)

terdon

@Bob shit. Of course, and that would block the decryption since the data have changed/are missing right?

Bob

@terdon depends?

Anonymous

github.com/github/dmca/blob/master/2014-02-12-WhatsApp.md

Bob

some decrypters would just keep trying

Anonymous

As soon as facebook bought whatsapp the first shit they did was to send DMCAs

Bob

3:03 AM

some would throw an error

Anonymous

seriously fuck them

Bob

12

A: Is it legal to use WhatsAPI?

To answer your specific question: yes, it is legal to use WhatsAPI. Now for the story, it looks like the initial threats from Whats App to sue WhatsAPI were caused by people using the service for spam, and as such WhatsAPI got a cease and desist letter from WhatsApp lawyer. From what I could ga...

heh.

so much for that.

@PatoSáinz DMCA abuse. What's new?

> WhatsApp has a good faith belief that the infringing content is not authorized by WhatsApp, a WhatsApp agent, or the law.

heh.

@terdon, yea, MD5 is so fast it's utterly broken: codinghorror.com/blog/2012/04/speed-hashing.html

> This has one unfortunate ramification for password hashes: very few of them were designed with such massive and commonly available GPU horsepower in mind. Here are my results on my current PC, which has two ATI Radeon 7970 cards generating nearly 16000 M c/s with MD5. I used oclHashcat-lite with the full range of a common US keyboard – that is, including uppercase, lowercase, numbers, and all possible symbols:

all 6 character password MD5s 47 seconds
all 7 character password MD5s 1 hour, 14 minutes

Anonymous

@Bob facebook acquisition

Bob

> MD5 23070.7 M/s
SHA-1 7973.8 M/s
SHA-256 3110.2 M/s
SHA-512 267.1 M/s
NTLM 44035.3 M/s
DES 185.1 M/s
WPA/WPA2 348.0 k/s

Wow. NTLM is even more fucked.

NTLM is the one used by Windows...

terdon

@Bob ah, that's what you mean by fast. It's fast to compute so that the brute force approach is feasible.

Bob

3:09 AM

yup

oh yea, @terdon security.stackexchange.com/q/37155/24507

terdon

@Bob yeah, we had a very good Q on that here too, one of the highest voted ones I've seen

281

Q: How can I give my wife emergency access to logins, passwords, etc.?

I'm the digital guru in my household. My wife is good with email and forum websites, but she trusts me with all our important digital stuff — online banking and other things that require passwords; also family photos and the plethora of other digital things in a modern home. We discuss relevant a...

Bob

random troll

-5

Q: Help, my mouse is retarded

Yesterday I was using my gaming mouse and I tried to plug it into my Game Boy and it didn't work and it was a Game Boy COLOR. COLOR!COLOR!Why doesn't it work.The mouse cost $10,000 so I bought it, but this is dumb because it doesn't even work on my game cube either.

ssl passwords email operating-systems email-spoofing

@terdon oh yea. I was looking on the wrong site -_-

I knew there was one recently :P

terdon

That security.se one is a good read too

@Bob shit, you think he's for real?

Update: I just tried it on my Atari and it doesn't work on that either, I should sue Razor for this retarded device. — Yourmumsdumb 1 hour ago

Trolls don't tend to comment.

Braiam

3:27 AM

@PatoSáinz that's just weird...

Bob

3:44 AM

> The surface is a really impressive piece of hardware. You wouldn't know because it is marketed as a break dancing accessory.

Hello

lo

4:22 AM

hey

Journeyman Geek

6:08 AM

hackaday.com/2014/02/26/… this seems super cool

Utkarsh

6:44 AM

Anyone here?

@ThatBrazilianGuy Do you know what is Digerati?

Journeyman Geek

7:31 AM

-2

A: Using Apple Lossless with Google Play Music

Where do you got your music files? If you rip them from a CD you can rip again to WAV. I think both iTunes and Android Player support it and WAV is better than FLAC or ALAC, though is bigger size. If you insist keeping your current format, you can always try another player like FLAC Player or Go...

>_>

I do believe its called lossless compression

Bob

> WAV is better than FLAC or ALAC

???

completely unsubstantiated dubious claim detected

Journeyman Geek

;p

Bob

> I'm an audiophile, so I'm very sensitive about file format.

Journeyman Geek

(there's wav only audiophile players... mostly for people with more money than sense ;p)

Bob

Hm... could I interest you in some magic pebbles?

Journeyman Geek

7:34 AM

I'm fine, I already had my system tuned holographically.

;p

Bob

@JourneymanGeek Gotta make a distinction between "audiophile" (likes sound [quality]) and "audiophail" (likes... blowing money)...

Journeyman Geek

Audiofool ;p

Bob

That works too :P

Journeyman Geek

7:47 AM

and in my experience the rest of your signal chain's too weak on a phone for flac/lossless to make a difference

Utkarsh

Hi folks!

Journeyman Geek

(and in any case, I prefer lossless cause space is relatively cheap, and I can always reconvert it. Lossess is good for archival more than playback for 99% of folk)

Bob

@JourneymanGeek I just don't care and go lossy :P

Lossless would only be useful for reconverting for me.

I can't hear the difference between 256k and 320k anyway

Utkarsh

@JourneymanGeek you know, what festival is today?

Journeyman Geek

8:31 AM

@Bob: Nothing wrong with that. ;p

Utkarsh

my head is paining a lot!

sorry, i missed that

Oliver Salzburg

8:49 AM

@CanadianLuke Sure, what's your handle? :)

Utkarsh

> i.stack.imgur.com/Jz95J.gif

isn't it awesome?

BlueBug

its coolz but really sad :I

Bob

9:18 AM

@JourneymanGeek heck, I'm happy with 192.

I used to listen to 96 wma on this old player with hardly any space :P

Journeyman Geek

eww

Bob

xD

@JourneymanGeek hey, it had 256 MB of space... and I had a lot of music... and I had no idea what those funny numbers were

Oliver Salzburg

9:47 AM

@Utkarsh flipscript.com

Utkarsh

@OliverSalzburg ^

Oliver Salzburg

10:08 AM

wat

@Utkarsh Sucks

Bob

@OliverSalzburg That automatic username...

@OliverSalzburg ...where is this from? It's a joke, right? Right??

Journeyman Geek

10:26 AM

Flag one of those posts with the "other" and explain clearly what is going on. A mod will look into it and do the needful :) — Ɍ.Ɉ 27 mins ago

@Bob @sathya ^ ;p

Bob

@JourneymanGeek o.O

@JourneymanGeek On a related note, what's up with "I will revert"? Another Indianism? :S

Journeyman Geek

Yeah.

Bob

...

Oliver Salzburg

@Bob AngularJS documentation and, yes, hopefully

Journeyman Geek

It means 'to get back to you'

Bob

10:30 AM

Ahhhhhh

Journeyman Geek

Nothing seperates us like the language.

Bob

> I will revert once I hear back from them.

> I will look into the below and revert

excerpts from two mails I recently got from two completely different companies...

had no idea what that meant

Journeyman Geek

"the below"

Also an indianism

Bob

o.O

@JourneymanGeek ok, that I did not expect

Journeyman Geek

;p

Michael Frank

10:34 AM

Just changed my avatar on steam, then I realised that I've had that avatar so long, the computer I made it on was Windows 98. :X

3

Utkarsh

lol

Bob

@MichaelFrank Ugh, you just reminded me of Novell...

Michael Frank

Randomly, I assume.

Bob

@MichaelFrank Had me thinking back to a decade ago.

Wait... longer than that :(

Michael Frank

10:51 AM

Heh..

Utkarsh

11:10 AM

bored! what to torrent?

Piracy bad.

@JourneymanGeek ?

@Bob: I kicked him

o.O

I mean... nothing.

Journeyman Geek

@Bob: In theory, if he did that, he'd get a suspension.

(actually, thats the sort of behaviour that had him suspended yesterday, so I kind of wanted to give him a warning shot)

@Bob: its very likely

Bob

11:15 AM

@kalina how did you post the same message twice in a row? chat just collapses that for me :\

timing

o.O

;p

@kalina seriously, how do you do that? :S

test

Journeyman Geek

I need to work out how to move things

kalina

11:18 AM

damn, I broke it

@JourneymanGeek you uh

click on something, which then allows you to select messages

it's been such a long time since anybody gave me room owner

Bob

test

Journeyman Geek

room owner dosen't let you do it

Bob

test

kalina

@JourneymanGeek does

Journeyman Geek

→ 11 messages moved to Thrash

Bob

11:19 AM

ok. have to post something in a different room in between. wow.

Journeyman Geek

There's multiple rooms for that o0

kalina

moving messages as a room owner requires you to be room owner of both the source and the destination rooms

Bob

@JourneymanGeek that room's desc implies non-mods can move there

@kalina ohh

Bob

2:14 PM

...

whoops?

@OliverSalzburg Just did a /etc/init.d/networking restart via ssh... guess what? :P

allquixotic

bricked networking? :D

Bob

@allquixotic Well, I can't connect to it anymore! :D

luckily it's just a local rpi I can restart

just can't be bothered going over there at 1am

I'll do it later

allquixotic

2:34 PM

@Bob just spent 15 minutes explaining to coworker why SoapUI can't test webpages -_-

short answer: because it has no DOM or JS engine

him: "huh?"
me: \*sigh\*

Braiam

*sigh*

O_o

me *sigh*

Bob

@allquixotic ...you need new coworkers

what kind of testing? sounds like something for selenium :P

..........

> Hi! My name is Anuj Agarwal. I recently launched my startup Feedspot and got reviewed by Techcrunch(article link). Feedspot is a place to organize and read all your favorite News sites and Blogs in one place. It also lets you track google news and google alerts feeds about any topic.
http://www.feedspot.com
After the big Google reader news few months ago, i started this project because i knew there were many people, like me, who couldn't live without the Reader app.

I would like to invite you to Feedspot and give you one year complimentary Feedspot Pro subscription for free.

I have two questions.

1. where did you get my email?!

Utkarsh

Anuj?

Bob

2. why are you sending me this??

Utkarsh

Indian name

@Bob from that shoe shop

@Bob because i am stupid!

Bob

2:39 PM

More interesting is that site actually looks halfway legitimate

Utkarsh

Seems like a blue coloured bug has entered the room

Bob

@JourneymanGeek You heard of this? ^

...

Utkarsh

No, thanks

Anonymous

Boeing Black is a highly secure and modular Android smartphone

Bob

even weirder: that email came from Amazon Simple Email Service

this... isn't your typical random spammer

Anonymous

2:42 PM

Anonymous

we've got CAT indestructible iphones

Anonymous

we've got boeing phones

Bob

...this guy is spamming this shit everywhere

groups.google.com/forum/#!topic/bioufpr2011/MSOmmysBF3o

what is this, Indian spammer turned entrepreneur?

incidentally, the domain is registered to an Indian address...

registered 2004, updated 2012 O.O

I'm so confused

Utkarsh

@Bob its written california below in that mail. maybe he is using a fake name?

Bob

Considering other places he's spammed (mostly blog owners), he might've gotten my email address from my domain registrations... but... :S

Oliver Salzburg

2:49 PM

@Bob Did you recover it already? :D

Bob

@OliverSalzburg Nah, it's gonna be down till I go physically restart it in the morning.

Oh well, just means some people won't have internet access. At 2 am. I really can't be arsed.

Oliver Salzburg

Ouch :(

Bob

Our modem's been crashing all day because one of the people being routed through the Pi is opening #WTF number of connections

been trying to implement a connection limit all night

really, at this point, it's their fault

Anonymous

not utk again

Anonymous

whatever

Bob

2:56 PM

Incidentally, the modem hasn't crashed since the Pi went down :D

Journeyman Geek

@Bob: I'm running ttrss + g2ttrss for my rss needs

Bob

@JourneymanGeek just wondering if you've heard of this one

weirdest combination of legitimate(-looking) site + spamming I've seen

Canadian Luke

@Oliver my Gmail username is also my handle

Journeyman Geek

@Bob: nope

Bob

damn

Journeyman Geek

3:04 PM

waiiit

the name seems VAGUELY familiar

ahh no

not what I was thinking

allquixotic

@Bob we're using Selenium

but he likes SoapUI's interface (he also is doing web service testing)

he just wanted to keep using SoapUI because he knows enough about it now to be dangerous

Bob

@allquixotic ...........shit

so, he's reached the point of "I can use it, I like it, but I have no clue what it does"?

allquixotic

we use Selenium (transitioning away from HP Unified Functional Testing) for web site testing, and SoapUI for web service testing. this is how it should be. my whiteboard is now covered in diagrams and drawings after explaining to him why you can't use one for the other.

well technically you could use Selenium for service testing, but with a metric ton of custom code to handle all the XML and WebService-Security (WSS) stuff, etc.

SoapUI is soo much easier... for service testing... but useless for the purposes we use Selenium for

Bob

@allquixotic You'd end up effectively reimplementing a chunk of the browser, wouldn't you?

Much like we're trying to do with the chatbot, actually...

allquixotic

XD

@Bob well for web service testing (SOAP) you could use Selenium to drive a web browser to make the appropriate requests and responses, assuming you could directly control the HTTP Body and Headers of the browser's requests

and then grab the response body and headers out of the response... basically treating the browser as an HTTP client

although I'm not sure if Selenium lets you directly do that, because it's not really designed to

the API is mostly geared toward web platform testing, not HTTP-level testing; for that, there's Apache HttpClient

Bob

3:20 PM

@allquixotic I'm so glad I don't have to worry about that.

Our webapp's client and server are pretty tightly coupled.

And undocumented. Joy.

Bob

3:55 PM

@allquixotic this one sounds fun:

4

Q: How do I explain to my boss what a 'Virtual Machine' means?

Most probably my boss didn't write a single word on a keyboard in his entire life. He saw computers and he has a cell phone. He is a smart man. How can I explain to him what a 'virtual machine' is? (VM as in VMWare + virtual Box, not the VM as in Java, LLVM, .NET) One of the reasons for aski...

virtual-machine non-technical-manager

Transcript for