Technically It's in the 1970's equivalent of PDF -- text is laid out and formatted using special encoding understood by the printers of the day (i.e. ASCII)
@ScottPack Go is not hipster at all. Hipster is when the the language uses names from at least 90% of the animal kingdom to name elements in its semantic tree.
My goal emerges modelling hosts in an enterprise, so what I mean by modelling ?
I want to come up with some features and create my scripts to observe user behaviors, as an example I can say that in one minute time interval the number of outgoing connections from my hosts is X (max or maybe mean...
@RoryAlsop Brutally harsh! You didn't even start with an apology!! Next time, at least include an IANAC (I am not a Canadian) disclosure, you brute! :D
that's why I exclusively listened to punk in the 80's and onwards, that scene ignored all of that campness of the 80's - 90's pop scene or at least (relatively successfully) ridiculed it
also, all the main characters have their own theme, too - companions, River, etc.
actually very well done, artistically - the music sets the stage and the mood. Once you notice it, it is very noticable - and then you realize it was working even before you noticed it.
If you, a budding terrorist, want to inspire fear in the hearts of the UK and bring the country to a standstill, you don't need a 0-day impacting critical national infrastructure or bio warfare things or whatever the threat-du-jour is. Oh no. What you need is a giant snow machine somewhere off the west coast, aimed squarely at the midlands.
@Nוnɛfוngɛrϛ "What you need is a giant snow machine somewhere off the west coast, aimed squarely at the midlands." That actually sounds kinda James Bond villainish.
Nothing and I mean nothing, not even KASLR-bypassing exploits with SHA256 collisions able to persist in Macbook firmware and control scada interfaces, is more effective than snow.
@TerryChia It's exactly this scenario for which we invented MI6.
@Nוnɛfוngɛrϛ yeah. I always say that the massive traffic jams here every day, and especially after a bit of rain, MUST be the work of some nefarious villian.
it costs the country WAY too much money to not be a conspiracy.
And all sub-zero forms of water, just in case. Terrorists will have nothing to freeze. We'll shine a heat wave into the cold places where terrorists hide.
@AviD Outrageous. I'm afraid American fridge manufacturers and snow machine makers really need to help the security services find and capture terrorists using their machines.
@TerryChia one of the coolest bits in that scene is very meta - Tony keeps eating all those snacks, but that wasnt in the script. they keep trying to get rid of all the food, and IRL the director kept trying to get rid of all the foods - but RDJ kept hiding it all over the place, so eventually they just gave up and let him eat on film.
i want to ask that how can i hack anyones android phone.i want to ask that how can i hack anyones android phone.i want to ask that how can i hack anyones android phone.i want to ask that how can i hack anyones android phone.i want to ask that how can i hack anyones android phone.i want to ask tha...
@Nוnɛfוngɛrϛ Just place cloud ionization system along your west coast. None would fall on UK and even heavier snow in Germany. It's a win win scenario :)
Of course, if it doesn't work quite as expected, you're back to the complete fuckup of Project Cumulus in the 50's
Alternatively, ask US to tune that HAARP to play anything from the Joy Division's Closer album :)
@Nוnɛfוngɛrϛ that's exactly what I was thinking about. They certify cloud services but the service changes after the certification date... is it still certified?
or how much does it have to change before it stops being certified
@RоryMcCune I guess the questions are designed to ask the usual things you'd want to ask about any service like this: not just is it secure right now but do they have policies and procedures for keeping their infrastructure up to date
I'm guessing that's part of the documentation you submit
I mean it's only the same say as security clearance. That only says you were trustworthy when you got the clearance. You can become a security risk before your next review, or whatever.
By bounding it, you control how long a particular risk goes un-noticed
@Nוnɛfוngɛrϛ I was thinking more that the certification looks at service "a" and "b" that are part of the overall piece. then after cert. date the supplier adds "c" and "d" under the same umbrella
@Nוnɛfוngɛrϛ you'd hope. having heard about what the higher levels involve, I don't think I could be bothered going through it. in Pentesting having that clearance generally involves lots of work in bunkers which I'm not a fan of :)
@Nוnɛfוngɛrϛ yeah it's interesting tho' as cloud providers add new bits to services all the time, so that's what prompted my thinking about it. the cert. model was designed for a relatively static target (packaged software) and is now applied to a very dynamic target (cloud services)
@RоryMcCune Yep indeed. I guess the edges are a bit blurred, but I'd say if for example I know you build server images to a certain spec I might "clear" you to supply those with certain services, say http and sftp
but then you decide actually you want to run a sip server
@Nוnɛfוngɛrϛ indeed in an ideal world you'd hope that people were taking a pragmatic view of it, I have a feeling though that people perhaps are trying not to think about it too hard (that said the uk gov digital mob are pretty up on their tech so perhaps they are)
@Simon so when was it you got into Oracle dev stuff?
@RоryMcCune @Nוnɛfוngɛrϛ as I understand it, besides the policies and procedures - which play a huge part here - the big clouds have special "compliant" offerings. So I assume they are commited to not change it substantially without recertification.
@Simon PLS is an acronym commonly used in the Oracle world to denote PL/SQL . I was suggesting obliquely that your impreciation of "pls" actually referred to said sobriquet
I think @Avi might be right here, they're just providing the "compute", "store" type services. I guess it is exactly like the AWS gov compliant versions
> Formally accredited Public Cloud (formerly Impact Level 33x) or Private Cloud services will be subject to a full HMG accreditation and will be hosted within the UK
I don't know what "full HMG accreditation" actually entails
@Nוnɛfוngɛrϛ aha indeed from that "The results will reflect a service at a particular moment in time; as a service evolves, it will need to be regularly re-tested."
@Nוnɛfוngɛrϛ indeed though for me external pen testing which is inevitably not going to happen too frequently, should be adjunct to more frequent internal reviews...
@AviD My point was more that, if you left the situation, it could easily degrade. By repeatedly verifying, in theory, you get an assurance that you don't have any issues.
@AviD well per day costs should obv. be less for internal review, so if they're overall more expensive, it would imply you're giving the internal people more days to achieve the goal....
@AviD oh indeed compliance however would (you hope) come after the security so, the external people are just validating what the internal people already did :)
Another good question, but perhaps you should phrase it "Does PCI harm security".
To answer both questions, I would differentiate very roughly between two types of organizations (even though most fall in between these two extremes):
Security-conscious organizations, that routinely perform b...
No idea but this is now about the third day in a row that someone's flagging all of those as off topic. I agree, not all of them should be closed, tho I did add my vote to some for various reasons (mostly if they're too broad or just the whole thread stalled / out of date).
Another good question, but perhaps you should phrase it "Does PCI harm security".
To answer both questions, I would differentiate very roughly between two types of organizations (even though most fall in between these two extremes):
Security-conscious organizations, that routinely perform b...
