Posts by John Foo

yeap

@mark_t : please study transgenderism a little, examinate more deeply what gender dysphoria is, and come back with a brain. thanks.

and for all the "heterosexual couple is teh norm" over here. we don't speak of 'mother' and 'father' but of 'feminine referent' and 'male referent'. a woman can be a male referent, that has never been proved a problem.

</psychologist ranting>

aside from that, if this kind of event were to be more common place, perhaps we could push more openmindness in the usual normative nutjobs (be them religious or whatever else). kind of a good non-news :)

haven't any of you guys dreamt to give birth ? pregnancy would even give them a look at how bitchy they can be when doubling volume :)

@Matt

oh yes yes ricin is soooo credible in a terror attack

is that the fact that at 3% medium concentration (10% for specificly engineered species) of ricin in ricinus seeds makes pretty spottable the refining ("good morning mister, i would like three tons of castor beans.") of the substance ? no no, let's assume they dispose already of the refined form.

so with a ton of ricinus they will have 30Kg equivalent of somewhat pure ricin. ok now the hard part

LD50 is 1mg/Kg of matter by inhalation or injection means (500mg for ingestion). unlike the Markov case, where the poison was directly administered by a small hollow pellet *directly into the circulatory system, the only somewhat realistic way you'll have to conduct a real terror attack is by aerosol.

so assuming a crowded train station (with your average terrorist being ready do die in horrible suffering by the action of his bomb) you'll have to *diffuse* with appropriate means (compressed gaz with double action valves (we wouldn't want to kill our own jihadi in the lab wouldn't we ?) or low explosive powered deflagration (black powder, nitrate/fuel etc...) with 160Kg of body matter per cubic meter at ground (probably way more at busy hours)

so assuming you want to fill 100 cubic meters of your aerosol that would represent a whooping 160 Kg of ricin to aerosolize by appropriate means (count double weight around effective payload for appropriate aerosolizer/propellant/container)

OH MY GOD NO, HULK HAS A BEARD AND A GINORMOUS SPRAY CAN OF FLY TOX

of course you can consider my ramblings as totally irrelevant. or not.

oh btw a nitrate/fuel bomb is far easier to make, and pretty effective blowing people apart. ask the IRA

Dancho is working in Dutchland

but born in bulgaria, yes.

</pendanticness contest>

happy that theregister quotes him, as not being a hugely known researchers, some errrm.. professionals doesn't hesitate to vaguely rephrase and repost his work.

keep up the good work Dancho, you're our primary source of information on RBN/NMMG

hmm.

ooooh, another cleartext/keys-in-ram-attack.

soooo scary.

ok so to get a hold on my data, the guys will need to

1 : have the box powered, and booted

2 : not hibernated in crypted swap (yes, my ram images are in crypted swap. what's the fscking point of TrueCrypting your whole partition if the guy can straight dump it from memory with a fscking PCI card ?

3 : bootable from other mean that i defined. too hard to prevent, seriously.

4 : freeze the damn dram with nitrogen or whatever will bring the temp down enough to stop the bits from flipping. oh. on a electrically powered machine. wonderful idea, really.

and DO THE WHOLE IN LESS THAN IN A FSCKING MINUTE

motivation needed : high

skill needed : high

time available : *very low*

assessed threat level : near nil.

end of processing, have a good day.

btw, the NSA called, they want their paranoia back. NOW.

@Ru

technically, we speak of "civil" and "military" *grade* encryption. this gets back to the time where 3DES was the NSA standard. civilians (the few who could get their filthy geek hands on a early IBM/PC) where constrained to "low grade" encryption algorithm, "high grade" (such as 3DES) was under the same regulation as war materials. in fact over here in sarkoland we are legally still constrained to a 56bits maximum symetric cypher. not that anyone cares.

as for document authenticity : that's not binary. you can't uniquely identifie a leaked information as "authentic" or "fake" intelligence would be SO much more easy. you'll have to make research, gather contextual information, and yes, if that piece fits perfectly in the puzzle you can say you have a high probability of allegation being true.

PH, because i'd take a wikileak on her face with my friends anytime.

one and for all

recruitement should be based on pure skills (skills has in "man, this guy has *skills*) not on experience, age, gender, or anything else. i have seen 14 yo far better coders than many "i have 20 years of FORTRAN under the belt, so *of course* i am a good C coder. now get back to school *snortling*" so called professional coder.

every day we are confronted with code monkeys/ pseudo sysops which, as they have survived for a decade in the field (mainly by ducking a lot, and a*slicking even more) are screwing with our jobs. one of the exemples today. an application stops working mysteriously. of course, the client calls us (systems & network) bitching around how ne'er do well we are. and after a few hours digging into the binary (we don't have of course access to the source... we don't have their mad coding skills don't we ?) we finally discover a *huge* leak AND THREE OVERFLOWS. in a bubble sort. of course.

what do we do ? we call the dev team (of course, we have no bug management system...) which start to get mad, because that *can't* be them, no it's not worth to look, it just can't be them. they know how to code. we don't know our job. of course it's us. and valgrind ? what's that ? code coverage ? what ? what do you mean by Q&A. WE KNOW HOW TO CODE, UNDERLING !

yeah. IT support most stressful job ? no wonder... would *so much easier* if RH started by filtering the bozo's at all level. we have one in our team too of course. perfect for logging support call, an general monkey work. he will never have any root password. neither should the code monkeys have commit access. hey they can still do the documentation.

well enough renting for today, i have still to hack *his* software to make it looks like its working. or not.

PH, because she is pure emptyness

I For One Welcome Our New Apian Overlady

'nuff said

mine's the sting-proof burqa please

to a banker, we're all hackers.

where's the IT angle ? come on we're speaking of *banks* here, ginormous infra powered by a start up mentality...

i work as a UNIX system engineer (contractor) at a large competitor of SocGen, and what surprise me is that our shitty infrastructure, absent management makes *billions*

i work nearly 60h/w (yeah, some french works, but then i am more confortable with my english coworkers than the french ones) for what ? mending stupid holes, hacking kilometers of *ugly* scripts (seems like every single guy who work/worked here has *his* langage of choice, that *no one else* use. hell, a dev has scripts in *brainfuck*)

SocGen is known for having a not-too-stupid management of its IT assets. i wonder how much we would lose ? (yeah our risk management app, a few thousand blades, ginormous databases, and.... rolling a 10% of its potential because of crap algorithms. and a blade a day to change...)

ah au fait. i am mainly paid of coffee and slaps behind the head.

dominic, whenever you want :)

simple

fscking simple and not subject to discussion in anyway

the victim (yes, whatever his crimes were, he is the victim) as i understand had done its time. which means that on a legal point of view, he was a normal citizen. no more, no less.

he has been killed. period. this is a not even murder, this is assasination (as the suspect has clearly stated). the suspect should be judged, and if sufficiant proof are brought, convicted. period

that's how law works.

whatever the reason of the act is, the sole point we have to consider is "lawful or not"