cones688

Its not the actual individuals - its the culture it creates, "HA! We caught you, you dumbass, here's 2hrs of training". This means people are afraid to report or take ownership over looking out for phishing as it creates no benefit for them, its just there to make the security team smug.

Having been part of and designed these campaigns before (with open source options like https://getgophish.com/), there is no way to report as phishing or reward users who detected but therefore didn't interact with it. This means in your example - did the other 81% just not open it, ignored it, or actively thought it was phishing? These are key metrics a company needs to know their potential attack surface.

"I was pissed"

How do you balance/deal with "security shaming", which is proven to put you further at risk as an organization?

There is some interesting research from the UK Government in this space - https://www.ncsc.gov.uk/blog-post/trouble-phishing#section_3

The relevant bit:

"If just one user reports a phish, you can get a head start on defending your company against that phishing campaign and every spotted email is one less opportunity for attackers...but phishing your own users isn't your only option.

Try being more creative; some companies have had a lot of success with training that gets the participants to craft their own phishing email, giving them a much richer view of the influence techniques used. Others are experimenting with gamification, making a friendly competition between peers, rather than an 'us vs them' situation with security."

I find it amazing they offer a brilliant online streaming service but you have to be abroad (Gamepass - I'm UK based).

I pay something like 20GBP a month during football season and get every game live in HD via chromecast, iOS, Web or Android plus redzone. They evidently have the chops and infrastructure to do it but its all a question of running the oligolpoly with the broadcasting services in the US.

FYI - your domain is currently rated with Bluecoat as suspicious so will get caught on most corp proxies.

http://sitereview.bluecoat.com/sitereview.jsp#/?search=submi...

I think has a lot to do with manual transmission which allows for natural and controlled engine breaking, thus not creating the brake light to come on (and therefore the wave of copy-cat type braking).

why not just do both?

our product stores all the logs raw in flats files on the file system, we don't use databases for keeping the logs in, this allows you to scale massively (ingestion limit is that of the correlation engine and disk bandwidth). You then just need an efficient search crawler and use of metadata so search performance is good too.

Issue is if you every need to pull the logs for court and you have messed with them (i.e. normalized them and stuffed them into a DB) then your chain of custody is broken.

Best of both worlds means parsed out normalisation so I don't have to remember that Juniper calls source ip srcIP and Cisco SourceIP, but the original logs under the covers for grepping if you need.

Moved to PFSense a few months ago and I cannot recommend it enough, I have it on a Thinkserver tower which hosts all my VMs on ESX and out of a second NIC comes my wifi router.

Pfsense is such a great piece of software, DNS forwarder and build in OpenVPN.

appreciate the sentiment but HSBC didn't take a dollar, pound or Euro of bailout money.

I feel lucky like yourself of being in one of the divisions with massive growth.

I don't think people appreciate the size and breadth of IT IBM does, my "tiny" division of security if an independent company would be the 3rd biggest Security vendor in the market.

This is becoming a massive issue in London with the met actively conceding that gangs have the codes for JLR cars such as Range Rovers.

http://www.standard.co.uk/news/london/pull-over-all-range-ro...

I think you are underestimating the scale of what a Z system can run... You might not have a use but every fortune 500 and banking institution in the world does - and they need it to work, 5 9's isn't good enough.

IBM Hursley laboratory director Rob Lamb says: “There are 6,900 tweets, 30,000 Facebook likes and 60,000 Google searches per second." The mainframe CICS runs 1.1m transactions per second, which equates to 10bn per day [0]

[0] http://www.computerweekly.com/feature/Can-the-mainframe-rema...

This means that you don’t have to touch the accelerator during stop and go traffic because it will do it for you

To be fair this kind of technology has been on top end Mercedes for a while (10yrs plus) https://www.youtube.com/watch?v=eU83G3OaJuU#t=115

I drove one a few summers ago as a chauffeur for Farmers Classic, it was all in/around LA so was incredible on jammed freeways, It's nothing new though or Tesla specific.

Do any of these allow to run offline? i.e local

Edit: Looks like Regexr can be run locally with node https://github.com/gskinner/regexr/

He was a soldier in the Army, so very likely he got reprimanded rather strongly by his CO. I am not sure where "poor" and "rich" people come into this?

Arrived slightly later and not known who the perpetrator was or have admissible evidence to that effect. The guy had already run away onto another street - it's likely he wouldn't have been caught.

It also very much changed the officer handling us behaviour I would imagine, as usually in such brawls they detain everyone then get he said/she said stories. Instead he knew the guy had run across the street after we hadn't even acknowledged him, so knew my friend was the "victim".

He got fined about £300, which hopefully taught him a lesson.

It's interesting as the only involvement I have had with CCTV was positive.

On a night out in a city, myself and my friend were walking home from a club about 3.30am. We were joking about me being from the North and him being southern (a common UK joke), this was unfortunately overheard by someone nearby who took it personally and started punching my friend in the head, I managed to break it up and the other chaps mates pulled him away as his was rather inebriated. A girl nearby ran over after seeing this and called the police and within a minute a police officer had arrived - the most interesting and relevant part was that the officer had been dispatached by CCTV operators who had seen the whole incident. The policeman was being relayed that the perpetrator had been already arrested by a colleague down the street (after CCTV identified him), the officer with us knew it was an unprovoked attack as the CCTV operator saw at no point did we interact with the assailant, so treated us with respect and started explaining the options for prosecution.

I appreciate the flip side of the coin but personally now feel much safer when in an area with CCTV.

engine still burns fossil fuels

It does, it's just centralised and called a power station... it's incredibly naive to think a Telsa isn't contributing to burning fossil fuels - it's just not in front of your face.

Also I am not sure whether any modern power grid in the world could cope if even 10% of cars became PHEV, imagine the spike when everyone got home and plugged in their car - would be like a "TV Pickup[0]" on steriods, they usually cover these with short term solutions such as hydro pump but this wouldn't run the time it takes to charge a car.

[0] http://en.wikipedia.org/wiki/TV_pickup

I don't know who you are using but..

my password, username, etc

I would immediately reply to the company rescinding my account and informing them this highlights a total lack of understanding of securing peoples personal details.

It will end up being a similar situation as money dashboard, where using it voids your banks fraud protection.

Height above water is 73m which I would imagine would make it a real challenge to scale....

[0] http://www.gizmag.com/triple-e-maersk-worlds-largest-ship/17...

sliding off into oblivion

At which point the entire worlds banking and transactional services will grind to halt. I don't think you quite appreciate how much of the world runs on IBM kit.

There's something quite ironic about this statement if you swap out Pinkmeth and nude photographs and replace with US government:

"Pinkmeth has intentionally intruded on Plaintiffs solitude, seclusion or private affairs. Specifically, Pinkmeth gained unauthorized access to nude photographs constituting the property of Plaintiff"

abuse team

Every domain provider must have an abuse team or at least an address to send abuse notices too [http://who.is/whois/cloudapp.net/], that PR statement from No-IP states no facts or figures of many abuse notices they combat - which I would cite if my abuse team actually did stuff "look how amazing our team is - we had x,000's requests and took down x00 of malicious hosts just last month."

not a good match for a dispute like this

I don't understand why everyone thinks MS should have given the notice, then noIP would have sent emails to all their customers "MS is about to take all our domains down" and the C&C's would have had time to reconfigure or transfer domains etc.

Speed and silence were key to the botnets being taken down.

Also it is very naive to think noIP doesn't know that it makes a lot of it's money from botnet hosters - according to previous discussions the abuse@ address does not respond and they don't take action against malicious hosts.

It is a very serious story but the reporting is all a little bit odd, why do they quote the girlfriend who couldn't hear the conversation yet not get the boyfriend to recount what "Tom" was talking about,

She overhead a strange conversation with Tom mumbling things like

Also frustratingly it seems another case of leveraging their website to ensure they get their refund.

Shortly after being contacted by Business Insider for this story, Airbnb took down the listing and banned the host permanently

all emails are shown in your feed with no need to open threads to read or reply.

Do people just sit and read email all day, surely you then have to "action" them at the very least? In which case you then have to go merrily scrolling back up to see which ones you missed whilst you weren't intently staring at your news feed of emails.

I'd be interested to know who the devs are targetting here? Is there a certain business area?

BlackBerry 10 has had this for the last year or two, but who cares right?

http://developer.blackberry.com/design/bb10/active_frames.ht...

"The controversy centres on an app provided to Uber's drivers - which is separate from the one used by the public - that calculates the journey distance and time taken, and then relays this information to remote computer servers to determine the fee."

Also allows you to correlate them with backend services, Web App Firewalls etc to see if there is an current attacks or threats.