Bitcoin Forum
May 27, 2024, 05:01:47 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
  Home Help Search Login Register More  
  Show Posts
Pages: « 1 2 3 4 5 6 7 8 9 10 11 [12] 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 »
221  Bitcoin / Bitcoin Discussion / Re: Someone Random Trademarked "bitcoin" : Now we can't use the term? on: July 06, 2011, 05:14:35 PM
I'm pretty sure the trademark office operates on the "Announce, Listen, Revoke" model.  Doing the research up front is horribly wasteful.  Consider the history of the Linux trademark.

quite so.

the trademark office was really designed as a feeding trough for lawyers...
222  Bitcoin / Bitcoin Discussion / Re: Someone Random Trademarked "bitcoin" : Now we can't use the term? on: July 06, 2011, 05:01:48 PM
right.  google the lawyer's name: Michael S. Pascazi

Does this guy have any idea of the hacker retribtion he will be subject to if this goes through?

probably not.

it's a pretty old-school play.  the world is changing quick...
223  Bitcoin / Bitcoin Discussion / Re: Someone Random Trademarked "bitcoin" : Now we can't use the term? on: July 06, 2011, 04:20:55 PM
right.  google the lawyer's name: Michael S. Pascazi
224  Bitcoin / Bitcoin Discussion / Re: Miners calling it quits? on: July 06, 2011, 05:30:14 AM

I mean, I know people who's tamagotchi is still alive.

Damn really? I had one of those when I was in third grade, it died in a week, how the hell do you keep it alive this entire time?

they have a reset button.

my daughter thought i had supernatural powers...
225  Other / Politics & Society / Re: Seriously, though, how would a libertarian society address global warming? on: July 06, 2011, 05:14:00 AM

don't bother.  he's paid.
226  Bitcoin / Bitcoin Discussion / Re: Miners calling it quits? on: July 06, 2011, 04:56:51 AM
oh please.

you've got a brand new board with 40 new threads - 38 of which have been started by the board owner, and all of which appear to be somewhat negative (despite their titles.  read them.).  those 40 threads have garnered precisely 11 replies.

i don't recognize the names of the other posters.  presumably folks register at different sites using a NIC they've always used:  i always do.  don't you?

and this is cited by the OP as some kind of valid source?

Quote
Miners calling it quits?

seriously?

well, you asked for my thoughts.  those are them...
227  Other / Politics & Society / Re: why do people buy computers, with possible trojans pre-installed? on: July 05, 2011, 05:36:34 PM
as for buying computers, i wouldn't know - haven't bought anything but parts for over twenty years.

where OSs are concerned, i mostly use linux - but i keep XP on a VM, and i have a gaming hard drive ready to boot when i'm in the mood.

it doesn't really matter though - all OSs do the same thing in pretty much the same way.  it's more a matter of figuring out where stuff is, than anything else.
228  Economy / Trading Discussion / Re: About Mt. Gox flaw from a security expert on: July 05, 2011, 04:55:31 PM
well gentlemen, that was one hell of a conversation.

thank you all kindly.  as a lowly network designer, i learned a lot.  didn't cost anything, either.

whattaya youse guys think of Qubes, and their 'security by isolation' approach?

i've got no dog in the fight - but i'd really like to know what your opinions are.

My $0.02.  

I only just read over this and someone correct me if I'm wrong but this appears to be using Xen to isolate (groups of) applications in their own VM on a single host.

My short answer:


This is at best a one trick pony and it's possibly the wrong approach.

Why (or my long answer):

I'm going to talk about some  "classes" of defense here (and these are terms I just made up so feel free to take some shots at them):

i) A defense which foils an attack (or some significant percentage of attacks) forcing attackers to use a completely different approach (ALSR - I'm sure everyones sick of me mentioning this)
ii) A defense which introduces a measurable and significant increase in difficulty to exploiting an existing flaw. (Password complexity rules, firewalls)
iii) A defense that removes one attack vector with known problems and replaces it with another which is less known. (Switching from IIS to Apache in an IIS shop)

I submit that i) is intrinsically superior to ii) and both are superior to iii)

VM isolation is at best a "Type II" defense, as it introduces the problem of detecting and compromising the hypervisor before compromising the machine and at worst it could be considered a Type III defense.  My assumption here is that a successful attack on the hypervisor means complete ownership of the machine.  Ergo,  we have reduced the problem for attackers from attacking application X from a very large selection of applications.   To attacking Hypervisor X for which the list is much smaller.    The upside is that - hopefully this also reduces the attack surface for the defenders.   This would normally be a good thing but it's only true if you assume the hypervisior is more secure than your other applications.

e.g. If I had a machine that had to run a webserver and Tomcat to provide a very simple web service to a very targeted application.  Removing that and replacing it with a few lines of well audited code could be considered reducing the attack surface of that machine.   However the hypervisor isn't a small piece of software and it's attack surface isn't well known.

It might be safer if I couldn't already do half the job: Detect running in a VM.   For lots of people who haven't installed the vmware tools on their host a simple check of the time with an external source will tell you that you're running on a VM.   Depending on the guest OS I've read about at least fifty different markers for VM detection.

Also it's worth noting that the point of Qubes seems to be the antithesis of what I understand to be best practice with regard to VM's these days.  Some of us think that depending on VM isolation is a bad idea.  It violates the principle of DiD.  So, like in my shop we consider it a bad idea to mix VMs with differing security privileges on the same host.  In other words we don't run the payment gateway software on a VM on the same machine we are running the Drupal VM.  Yet this seems to be the whole point of Qubes.  

This is a good presentation. http://handlers.sans.org/tliston/ThwartingVMDetection_Liston_Skoudis.pdf

More info on the VMChat teaser at the end: http://www.foolmoon.net/cgi-bin/blog/index.cgi?category=Security%20News



thanks for that.

i do like the bare-metal approach, but yes - "My assumption here is that a successful attack on the hypervisor means complete ownership of the machine."

i also like that networking runs in an untrusted security ring.

i've got a play machine ready to install, and i guess i'll have to see how it goes with the newly released beta.  the isolation rule sets appear to be key.  oughtta be fun, anyway...
229  Economy / Trading Discussion / Re: Camp BX delayed? on: July 05, 2011, 08:36:51 AM
i note they've taken down their testnet.

as far as non-US times, that's kind of strange.  although i do recall reading on the testnet that they were US only.  not sure.

reckon we'll find out...
230  Economy / Trading Discussion / Re: About Mt. Gox flaw from a security expert on: July 05, 2011, 08:31:46 AM
well gentlemen, that was one hell of a conversation.

thank you all kindly.  as a lowly network designer, i learned a lot.  didn't cost anything, either.

whattaya youse guys think of Qubes, and their 'security by isolation' approach?

i've got no dog in the fight - but i'd really like to know what your opinions are.
231  Economy / Trading Discussion / Re: Camp BX delayed? on: July 05, 2011, 07:28:36 AM
i've got 6 hours and some minutes to go.

clear your cache?
232  Other / Politics & Society / Re: Seriously, though, how would a libertarian society address global warming? on: July 05, 2011, 05:16:18 AM
ownership is really the right to borrow a government's capacity for violence against trespassers, no?

Not if I can help it.

*cocks gun*

The government doesn't even protect us anyhow. Americans aren't entitled to it according to a court ruling.

what do you think ensures your ownership of anything?

your little gun (or my big and well-used one) mean nothing, against what can be brought to bear.

the guns we own are for personal protection against the occasional lone crazy.  they're useless against governments, criminal gangs, etc.  if you think they are, you're sadly deluded.
233  Other / Politics & Society / Re: Seriously, though, how would a libertarian society address global warming? on: July 05, 2011, 05:10:12 AM
Well, because it's not pretty, of course. People have a right to look at pretty land. Even if its not theirs. Especially if its not theirs.

That's one good reason. Here are a few more:

1. Perhaps the owner will die one day, and someone else would like to the owner of it?

2. Perhaps the vegetation and ecosystem which was stripped off of it contained information in its natural complexity that current technology could not understand, but future technology will.

3. Perhaps the drainage networks that the land depends upon on either side are severely disrupted, resulting in issues downstream.

4. Perhaps it disrupts the migration routes of fauna, which has a disruptive effect on the ecology outside of the owner's jurisdiction.

5. Perhaps his mining equipment pollutes the environment, both in the air and in the water, which flows downstream.

6. Perhaps his mining equipment makes excessive noise for his neighbors.

7. And most importantly, by picking this low hanging piece of fruit, it's no longer there for prosperity. He would've been better off abstaining, and biting the bullet by developing more efficient technologies which would obviate the need to strip mine in the first place.

all yes.

* sigh *

10-15,000 years of civilization, more or less - and we still refuse to do things without burning shit.  even though now the tech exists to conduct ourselves otherwise.

...leaving entirely aside the small matter of 'ownership'.  you can own dirt?  really?  that always kinda gave me pause...

ownership is really the right to borrow a government's capacity for violence against trespassers, no?  until some trespasser with more money than you wants something on your land.  eminent domain.  mineral rights.  water.  easements.  it's all bullshit.

there may be no greater failure of one's humanity than accepting the commodification of The Commons.
234  Other / Politics & Society / Re: Seriously, though, how would a libertarian society address global warming? on: July 05, 2011, 12:50:26 AM
Practices such as clear-cutting and pollution are not long-term profitable.
Then why do organizations and societies engage in these activities?

they don't, for long.

ever been to spain?

the clear-cutting they did there for the Armada still shows...
235  Other / Politics & Society / Re: Seriously, though, how would a libertarian society address global warming? on: July 05, 2011, 12:40:49 AM
Private ownership of resources is the best way to ensure their conservation.

even non-renewable resources?

i suspect not.  where is the advantage to exxon's CEO - who will get a multi-billion dollar bonus depending on sales - to conserve oil?  he'll only be in his position for five or so years, and he worked all his life to get there.  and the next guy?

we agree, more or less, on renewables.

people who own trees or water or other renewables are essentially farmers - albeit of a different sort than a food-farmer.  but yes - their advantage lies in conservation.
236  Other / Politics & Society / Re: Seriously, though, how would a libertarian society address global warming? on: July 05, 2011, 12:20:02 AM
'k. So, What's with
4.) are willing to bribe, steal, kill, lie and cheat to keep their power and wealth.  and
5.) won't get caught, since they write the laws.
that?

What does that have to do with a Libertarian society?

nothing.  but those kinds of people exist in all societies, and always will.  the cream (that is, expressed neutrally) will rise to the top:  the toughest, the most able, or those born with the most advantages, etc.  and that will be the same in any society, from communist to libertarian.  whoever is good enough or smart enough to beat the system, wins.

Disraeli and Stalin were both perfect examples - street punks and infighters.

so again...

How would a libertarian society deal with those who are willfully damaging our lives and the planet we all share, for their own profit?

because that's really the question.

so that's the answer i want.  it should translate to any more-or-less free society.
237  Bitcoin / Bitcoin Discussion / Re: good bitcoin article on Gizmodo on: July 05, 2011, 12:08:35 AM
I think it's huge that a Howard Johnson hotel is taking Bitcoins.

yeah.  +1.
238  Other / Politics & Society / Re: Seriously, though, how would a libertarian society address global warming? on: July 04, 2011, 11:56:52 PM
Remind me again what the title of the thread is?


Quote
Seriously, though, how would a libertarian society address global warming?

in a very real sense, i take that question to mean:

How would a libertarian society deal with those who are willfully damaging our lives and the planet we all share, for their own profit?

...because global warming is no longer an idle speculation.  and the immense resources devoted to the denial industry (and it is an industry) simply cannot be looked at as an exercise in free-market capitalism.
239  Other / Politics & Society / Re: Seriously, though, how would a libertarian society address global warming? on: July 04, 2011, 11:29:17 PM
It does. The individuals who recognize this oncoming disaster will curtail their damage, and encourage others to do so as well. Those who agree will avoid the ones who don't, and if enough agree, disaster will be averted. Or it won't. Either way, Planet keeps on chugging, regardless of what we do. It's not 'Save the Planet!'. it's 'Save the Status Quo!!'

there's a problem with that.

Quote
The individuals who recognize this oncoming disaster will curtail their damage, and encourage others to do so as well.

those who profit the most...

1.) don't care, because they've got theirs.
2.) are in the upper 1% of wealth-holders on the planet, and want more.
3.) are in the upper 1% of political power-holders, and won't let go of that.
4.) are willing to bribe, steal, kill, lie and cheat to keep their power and wealth.  and
5.) won't get caught, since they write the laws.

did you know that there was actually a law proposed, banning the ownership of geiger-counters (and other, benign detection devices) in New York?

http://www.villagevoice.com/2008-01-08/news/nypd-seeks-an-air-monitor-crackdown-for-new-yorkers/

it's a stacked deck, and your "individuals who recognize this oncoming disaster" have too little power.

i also note, again:

http://forum.bitcoin.org/index.php?topic=13344.0

so far (and i'm still looking) there is no way for a site-moderator to recognize when this kind of software is being used.  but there will be.
240  Bitcoin / Bitcoin Discussion / Re: bitcoin economy on fire on: July 04, 2011, 11:12:26 PM
agreed - brilliant.

a valuable economic indicator.
Pages: « 1 2 3 4 5 6 7 8 9 10 11 [12] 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 »
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!