Register a SA Forums Account here!
JOINING THE SA FORUMS WILL REMOVE THIS BIG AD, THE ANNOYING UNDERLINED ADS, AND STUPID INTERSTITIAL ADS!!!

You can: log in, read the tech support FAQ, or request your lost password. This dumb message (and those ads) will appear on every screen until you register! Get rid of this crap by registering your own SA Forums Account and joining roughly 150,000 Goons, for the one-time price of $9.95! We charge money because it costs us money per month for bills, and since we don't believe in showing ads to our users, we try to make the money back through forum registrations.
 
  • Locked thread
maskenfreiheit
Dec 30, 2004

A Pinball Wizard posted:

obviously exploiting oversights in the code but the article keeps calling it cheating and I fail to see how it's cheating

using a device to aid you is cheating

card count using autism = 👍
card count using phone = 👮🏻

Adbot
ADBOT LOVES YOU

aardvaard
Mar 4, 2013

you belong in the bog of eternal stench

and casino security will beat you up either way

maskenfreiheit
Dec 30, 2004

jre posted:

The 88% is over all players not individual players, so it doesn't mean you'll lose 12%. You can easily lose 100% or gain 100%

When I worked as a bar man the regulars complained about one of the other staff playing the machine because he would be able to watch it all day, see them losing their money and then jump on and clean it out. It is possible to make bank if you are able to watch the machine for hours, learn the behaviour so that you know when it's going to pay out a jackpot.

i don't get this logic

isn't it pretty well established that random events are independent of each other?

so like, just because a roulette wheel has been black 50 times that doesn't mean the 51st is "due" to be red... in the long run (millions and millions of spins) this is just a blip

https://en.wikipedia.org/wiki/Gambler's_fallacy

Notorious b.s.d.
Jan 25, 2003

by Reene

maskenfreiheit posted:

i don't get this logic

isn't it pretty well established that random events are independent of each other?

so like, just because a roulette wheel has been black 50 times that doesn't mean the 51st is "due" to be red... in the long run (millions and millions of spins) this is just a blip

slot machines don't work this way, though. they're not roulette wheels, and the random events aren't truly independent.

they are obliged to maintain a running average take/payout across some statutorily mandated period. if the take rate across the last 24 hours has been 13%, but the statutorily mandated take rate is 12%, you know they are gonna have to pay out slightly more than usual to get the numbers back in order.

(i don't doubt this strategy works, i just doubt there's enough money in it to matter)

jre
Sep 2, 2011

To the cloud ?



maskenfreiheit posted:

i don't get this logic

isn't it pretty well established that random events are independent of each other?

so like, just because a roulette wheel has been black 50 times that doesn't mean the 51st is "due" to be red... in the long run (millions and millions of spins) this is just a blip

https://en.wikipedia.org/wiki/Gambler's_fallacy

They aren't random, and are audited to make sure they payout at the advertised rate.


Powaqoatse posted:

alright, clarification: "lose 12% in the long run"

This is still wrong unless you are the only person playing the machine

spit on my clit
Jul 19, 2015

by Cyrano4747

flakeloaf posted:

shutting off the ac and killing grandma sounds like the sort of thing you shouldn't be able to do via internet

Case Closed is now real life

anthonypants
May 6, 2007

by Nyc_Tattoo
Dinosaur Gum
https://twitter.com/VickerySec/status/886290921381179392 https://twitter.com/VickerySec/status/886351694459584512

maskenfreiheit
Dec 30, 2004

defcon party tricks dot txt

cinci zoo sniper
Mar 15, 2013




https://www.bleepingcomputer.com/news/security/biggest-data-leak-in-swedens-history-punished-with-half-a-months-paycheck/

The Swedish government has exposed sensitive details on millions of citizens in one of the biggest government screw-ups ever, and the official responsible for the whole fiasco was fined only half of her's monthly salary, which is 70,000 Swedish krona — or around $8,500.

The leak happened in September 2015, when the Swedish Transport Agency (STA) decided to outsource the management of its database and other IT services to companies such as IBM in the Czech Republic, and NCR in Serbia.

The entire STA database was uploaded onto cloud servers belonging to these two companies, and some employees got full access to the database, as Sweden fired its IT technicians.

flakeloaf
Feb 26, 2003

Still better than android clock

maskenfreiheit posted:

defcon party tricks dot txt

the auditing software we use has the same problem so everyone whose scanners create documents dated in 2032 has to be checked manually

My PIN is 4826
Aug 30, 2003

cinci zoo sniper posted:

https://www.bleepingcomputer.com/news/security/biggest-data-leak-in-swedens-history-punished-with-half-a-months-paycheck/

The Swedish government has exposed sensitive details on millions of citizens in one of the biggest government screw-ups ever, and the official responsible for the whole fiasco was fined only half of her's monthly salary, which is 70,000 Swedish krona — or around $8,500.

The leak happened in September 2015, when the Swedish Transport Agency (STA) decided to outsource the management of its database and other IT services to companies such as IBM in the Czech Republic, and NCR in Serbia.

The entire STA database was uploaded onto cloud servers belonging to these two companies, and some employees got full access to the database, as Sweden fired its IT technicians.

best part isn't even mentioned in this article - the STA database is public domain information, so it's passed around to advertisers as a service. however, this one time they all got an un-redacted database that included things like people in the witness protection programs.

the obvious solution would be to send out the redacted version and tell recipients to destroy the old one, but instead they sent out a list of who to remove from the first database :smithicide:

Volmarias
Dec 31, 2002

EMAIL... THE INTERNET... SEARCH ENGINES...

My PIN is 4826 posted:

best part isn't even mentioned in this article - the STA database is public domain information, so it's passed around to advertisers as a service. however, this one time they all got an un-redacted database that included things like people in the witness protection programs.

the obvious solution would be to send out the redacted version and tell recipients to destroy the old one, but instead they sent out a list of who to remove from the first database :smithicide:

:piss:

cinci zoo sniper
Mar 15, 2013




My PIN is 4826 posted:

best part isn't even mentioned in this article - the STA database is public domain information, so it's passed around to advertisers as a service. however, this one time they all got an un-redacted database that included things like people in the witness protection programs.

the obvious solution would be to send out the redacted version and tell recipients to destroy the old one, but instead they sent out a list of who to remove from the first database :smithicide:

wwow. this is even more hosed up than measly 80k sek fine

Maximum Leader
Dec 5, 2014
whats even more hosed up is that she got a retroactive raise to cover the fine

Maximum Leader fucked around with this message at 15:36 on Jul 23, 2017

Volmarias
Dec 31, 2002

EMAIL... THE INTERNET... SEARCH ENGINES...
.

anthonypants
May 6, 2007

by Nyc_Tattoo
Dinosaur Gum
i like how

it links to a falkvinge article which says, "It goes to show, again, that governments can’t even keep their most secret data under wraps"

maskenfreiheit
Dec 30, 2004

My PIN is 4826 posted:

best part isn't even mentioned in this article - the STA database is public domain information, so it's passed around to advertisers as a service. however, this one time they all got an un-redacted database that included things like people in the witness protection programs.

the obvious solution would be to send out the redacted version and tell recipients to destroy the old one, but instead they sent out a list of who to remove from the first database :smithicide:

jesus

also, i'm kind of suprised something like a witness protection db isn't paper based

then again i'm here in the us where it would be paper based due to deep dysfunction of state and local government rather than a measured choice on the costs to productivity vs the benefits to security

Shame Boy
Mar 2, 2010

maskenfreiheit posted:

jesus

also, i'm kind of suprised something like a witness protection db isn't paper based

then again i'm here in the us where it would be paper based due to deep dysfunction of state and local government rather than a measured choice on the costs to productivity vs the benefits to security

i'm more surprised that it would just be in the same database as everyone else and i guess they just set the "SECRET PERSON DO NOT REVEAL" column to true?

anthonypants
May 6, 2007

by Nyc_Tattoo
Dinosaur Gum
microsoft will officially block emet in the fall windows 10 update https://support.microsoft.com/en-us/help/4034825/features-that-are-removed-or-deprecated-in-windows-10-fall-creators-up

akadajet
Sep 14, 2003

And they are removing some remnants of outlook express that were left over lol.

Notorious b.s.d.
Jan 25, 2003

by Reene

the most surprising thing in this list is removing screensaver support

RFC2324
Jun 7, 2012

http 418

Why would they remove TPM support?

anthonypants
May 6, 2007

by Nyc_Tattoo
Dinosaur Gum

RFC2324 posted:

Why would they remove TPM support?
it doesn't look like they're removing tpm support, just deprecating parts of it they'll replace in the future maybe. it says the "owner password management" thing is legacy so maybe it already has a replacement? i don't do much tpm/bitlocker administration so i don't know how it all works

EssOEss
Oct 23, 2006
128-bit approved
they are removing code for the TPM owner password feature, which is not the same as TPM support for doing TPM things

quote:

Only the TPM owner can enable, disable, or clear the TPM without having physical access to the computer (for example, by using the command-line tools remotely).

TPM usage in Windows has evolved a lot in recent years and so as has the TPM spec (1.2 -> 2.0), so I am not entirely up to date on how the latest implementation in Windows is. i would wager the "owner password" implementation was superseded by integrating it directly into the Windows security system (if you are an administrator, you are the owner - no need for a second layer as there is already a physical aspect involved). though I might be wrong - there is a lot of stuff happening under all those one-click TPM related features in Windows.

ps. anyone know of a TPM-capable bitlocker alternative for linux that is not 5 years old abandoned horseshit? some sort of TPM-using loader for luks, presumably. all i found was some trustedgrub abandonware and its owner company did not even want my money for maintaining it. and veracrypt authors don't even seem to know what a TPM is for.

EssOEss fucked around with this message at 19:16 on Jul 23, 2017

RFC2324
Jun 7, 2012

http 418

Thanks for the clarification. It seemed insane to remove TPM, and since I am not really sure how it works(other than there is a chip in the system that provides a password for decryption) it read like important parts were being deprecated.

anthonypants
May 6, 2007

by Nyc_Tattoo
Dinosaur Gum
it's also cool that rc4 ciphers will finally be disabled by default, in the year 2017

Rooney McNibnug
Sep 2, 2008

"Life always hopes. When a definite object cannot be outlined, the indomitable spirit of hope still impels the living mass to move toward something--something that shall somehow be better."
https://twitter.com/apt1337/status/884782754818396161

jre
Sep 2, 2011

To the cloud ?




:eyepop:

Daman
Oct 28, 2011

it's only deprecated in that patch because WD exploit guard reaches feature parity then, probably.

this is emet baked in by default which is a Good Thing

keseph
Oct 21, 2010

beep bawk boop bawk

RFC2324 posted:

Thanks for the clarification. It seemed insane to remove TPM, and since I am not really sure how it works(other than there is a chip in the system that provides a password for decryption) it read like important parts were being deprecated.

TPM.msc is all 2003-style interface so it was bound to get chopped eventually. The important points are that since 1603(?) there is by design no built-in way to set a TPM owner password because literally no one was using it to do Good Things and it was just one more stupid password for users (especially business ones) to set to something trivially guessable and reused across the entire fleet. Now, at install time or any time you reset your TPM, Windows sets it to a random value and throws it away because there are other, better ways to perform BitLocker key recovery through consumer cloud or MBAM to get your data back if your motherboard goes poof.

Pair it up with SecureBoot and it all "just works" which is ideal for the 99.99% of businesses who scarcely know what they're doing with security.

maskenfreiheit
Dec 30, 2004
http://kstp.com/news/wisconsin-company-to-implant-microchips-in-employees-three-square-market/4549459/

quote:

A Wisconsin company is about to become the first in the U.S. to offer microchip implants to its employees.

Yes, you read that right. Microchip implants.
Advertisement

"It's the next thing that's inevitably going to happen, and we want to be a part of it," Three Square Market Chief Executive Officer Todd Westby said.

The company designs software for break room markets that are commonly found in office complexes.

Just as people are able to purchase items at the market using phones, Westby wants to do the sam thing using a microchip implanted inside a person's hand.

"We'll come up, scan the item," he explained, while showing how the process will work at an actual break room market kiosk. "We'll hit pay with a credit card, and it's asking to swipe my proximity payment now. I'll hold my hand up, just like my cell phone, and it'll pay for my product."

More than 50 Three Square Market employees are having the devices implanted starting next week. Each chip is about the size of a single grain of rice.

Along with purchasing market kiosk items, employees will be albe to use the chip to get into the front door and log onto their computers.

Each chip costs $300 and the company is picking up the tab. They're implanted between a person's thumb and forefinger. Westby added the data is both encrypted and secure.

"There's no GPS tracking at all," he said.

No one who works at Three Square Market is required to get the chip implant.


oh boy, encrypted AND secure? what could possibly go wrong!

Subjunctive
Sep 12, 2006

✨sparkle and shine✨


nothing, because there's no GPS tracking

Jabor
Jul 16, 2010

#1 Loser at SpaceChem
can't wait for the FW: Fw: Fw: FW: Fw: email chains about this

anthonypants
May 6, 2007

by Nyc_Tattoo
Dinosaur Gum

Jabor posted:

can't wait for the FW: Fw: Fw: FW: Fw: email chains about this
mark of the beast

mrmcd
Feb 22, 2003

Pictured: The only good cop (a fictional one).

Employee ID implant chips + a company so cheap you have to pay for your lovely coffee and potato chips at work = Charlie Booker sighs wistfully and shreds another Black Mirror script draft.

OTOH, this was arguably already done in Fifteen Million Merits.

mrmcd
Feb 22, 2003

Pictured: The only good cop (a fictional one).

Also related: https://www.theverge.com/2017/7/21/15999544/biohacking-finger-magnet-human-augmentation-loss

The best part is where she goes to a "human augmentation" conference sponsored by a video game company. Except all the actual doctors are like "please stop paying the guy at your local tattoo and piercing studio to jam random smartphone components inside you. That doesn't make your a cyborg."

maskenfreiheit
Dec 30, 2004

mrmcd posted:

Employee ID implant chips + a company so cheap you have to pay for your lovely coffee and potato chips at work = Charlie Booker sighs wistfully and shreds another Black Mirror script draft.

OTOH, this was arguably already done in Fifteen Million Merits.

I have a friend who's an employment loler lawyer I'll have to see if you can argue religious discrimination or something if they fire you for refusing

i suspect his response will be lol employment at will

mod saas
May 4, 2004

Grimey Drawer

mrmcd posted:

Also related: https://www.theverge.com/2017/7/21/15999544/biohacking-finger-magnet-human-augmentation-loss

The best part is where she goes to a "human augmentation" conference sponsored by a video game company. Except all the actual doctors are like "please stop paying the guy at your local tattoo and piercing studio to jam random smartphone components inside you. That doesn't make your a cyborg."

"people just aren't excited for the future anymore" says man who profits from idiots sticking magnets in their fingers that wipe your hotel key card as you hold it

Cocoa Crispies
Jul 20, 2001

Vehicular Manslaughter!

Pillbug

mod saas posted:

"people just aren't excited for the future anymore" says man who profits from idiots sticking magnets in their fingers that wipe your hotel key card as you hold it

magnets that apparently wear out in a matter of years lol

Adbot
ADBOT LOVES YOU

maskenfreiheit
Dec 30, 2004

Cocoa Crispies posted:

magnets that apparently wear out in a matter of years lol

loving magnets how do they work

  • Locked thread