Evolv-ing Thread

BillW50

Vaping Master
ECF Veteran
Verified Member
Nov 23, 2014
3,429
34,943
US
Fortunately for us, the smart people at Google found these 2 vulnerabilities through security testing – but this security flaw was present dating back to the early 2000’s. That’s pretty f’n serious. This is just an extreme example of a vulnerability, and one that demonstrates that virus software would have no effect on preventing.
You mean unfortunately for us... As closer to the truth is there are most likely 12 vulnerabilities and only 2 of them are known by the good guys. :(
 

SlickWilly

Tinkerer
ECF Veteran
Verified Member
Feb 18, 2013
1,275
20,835
NY
The thing that should scare they hell out of everyone, with ALL the data they collect on each and everyone of us, if one day they decided you're a bad apple they will be able to find something you did wrong and at a minimum ruin your life. And if the wrong people get control of the gov, they could round up half the population, the "undesirables". And who would be able to stop them? Let that sink in for awhile... Sleep well.
 

BillW50

Vaping Master
ECF Veteran
Verified Member
Nov 23, 2014
3,429
34,943
US
There was a story of a guy in the early 80's who showed somebody something on his IBM-PC computer (only DOS back then). Once he was done he shut it off and disconnected the phone line and pulled the power cord from the wall. The other guy said what did you do that for, the computer is off. And he said if you knew what I know (he worked for the CIA or something), you would too. :(
 

SlickWilly

Tinkerer
ECF Veteran
Verified Member
Feb 18, 2013
1,275
20,835
NY
Whistleblower: Google Is Developing AI for 'Planetary Surveillance' | Breitbart

A snippet from link above, who knows if it's true? Scary if it is..

“So Google bought this AI company called DeepMind,” Vorhies replied. “Let me just put it in plain language what that is, DeepMind was creating a god-like AI system that is able to ingest the available public information on the internet and make sense of it. Think of it like Amazon Alexa except much much much more intelligent. This AI system was moved out of the UK I believe and placed into China, and it’s been dubbed the AI Manhattan Project.”

DeepMind disputed Vorhies’ comments in a statement to Breitbart News. A DeepMind spokesperson said: “DeepMind is a scientific research organisation headquartered in the UK and does not have operations in China.”

Vorhies continued: “Peter Thiel — he accused Google of acting in a treasonous way. This is how serious this project is. It’s the most sophisticated and advanced AI project in the world made by an American company and placed in China.”

Vorhies stated: “When people think of surveillance they usually think of country surveillance. This is planetary surveillance of all information that is available on the surface web and also any sources that it can get in the deep web and utilizing Google’s extensive deep analysis of its book scanning stuff. So think of the Library of Alexandria of all available websites that you can search for and all that data gets fused together and a decision-making process gets formed because of that. This is essentially what the Google DeepMind project is all about.”
 

BillW50

Vaping Master
ECF Veteran
Verified Member
Nov 23, 2014
3,429
34,943
US
If you are connected to the interwebz, it is good practice to keep your operating system up to date. Regardless if you Google or not
Yeah well here we disagree. I had taken 12 computers and six I would always update and six I stopped. Used them all on the Internet for many years and I never had anything happen to 11 of them. The one that picked up something minor was one that was always updated. And all of the updated ones had stability problems due to the newer buggy code.

Here is my theory. The older OS have been around long enough that the majority of vulnerabilities and bugs have been corrected many years ago. And today with 20/20 hindsight we know what the weak links are. The latest and greatest OS is a different story. Not only it hasn't been around long to learn where all of the weak links are, but they keep piling on more patches and security patches on that they themselves also contain new bugs and vulnerabilities that hasn't been discovered yet. So you're not getting ahead of the game.

Here is another thing. All of the random attacks are going for what most computers are running. You got it, the latest and greatest with a freshly updated OS. Even hours after a new security patch, hackers are busy and finding the new vulnerabilities right away. So you ain't really gaining any new ground. It's an endless game of cat and mouse.

Now an older OS that hasn't seen updates in years and is probably unsupported anyway, isn't seriously being looked at by random attackers. Why should they? Their numbers are tiny (probably less than 1%) and if they are that old, they most likely have nothing worth stealing anyway. And on top of that, servers and everybody's brother are scanning and deleting those older well known attacks. Thus why I believe older is safer (and my experiment shows it). Notice I didn't say older is better. As surfing the net with old outdated protocols and such isn't really a pleasurable experience. ;)
 

Flavored

Ultra Member
Supporting Member
ECF Veteran
Verified Member
May 11, 2013
1,674
5,793
USA
I feel that the fewer bread crumbs I leave around the lower the likelihood of me having a problem. All of my local purchases, gas, groceries, pizza and so on, are cash and I only use the ATM at my local bank branch. I do shop online but only use one credit card and it has been used nefariously but each time the CC company has caught it and sent me an email asking if I made a purchase of something somewhere. Every time the charge has been eliminated and they send a new card. That hasn't happened in over two years now. I also check the statement, carefully, each month and watch for bogus charges, like $1.00 from someplace I've never heard of, in case someone is testing to see if the data they have will work. I only watch videos on YouTube, no account. I'm not a "twit" and don't use any of the other "popular" social platforms, they're all, basically, sewers anyway. My email is on a secured server that offers encryption if I want it as well and I use a VPN when on the internet to make it a little harder for tracking to be worthwhile.

In the mean time almost every one of my wife's co-workers, all heavy social media users and online banking and shopping fans, have been hacked pretty badly and it's cost some of them thousands not to mention the disaster of recovering from it. If you sew a million seeds you're bound to reap one potato. I severely limit the number of seeds I sew.

In terms of the "cloud", what happens when the sun comes out and the cloud evaporates? Then add in how many people can see that cloud. I keep my data to myself on local drives and local backups. Drives are cheap so having enough isn't much of a problem, at leasts compared to ten years ago plus I don't need an internet connection, another security problem, to retrieve that data.

All that said, I also know it's impossible in our connected world to stay completely off the radar. I just want to have the radar signature of a B1 bomber. The thing that bothers the heck out of me is that commercial services, banks, credit card companies, insurance companies, doctors, hospital, and the list goes on for paragraphs worth, can get breached and either announce it months or years after the fact or not even report it at all. Some of them don't even have rudimentary security or don't bother to keep it up to date since that costs money. They all do assure us that the security of our account information is their "highest" priority. I guess they take their cues from politicians.
Turn on text message notifications for every credit card you have, every account you have, and never worry about it costing you again. I have them turned on to text me for every charge over $1, and if I see something that looks unusual, I check with the others that have the card to see if it's legit. Thing about using cash is every retailer has already built in the CC fees in their pricing, so those 2% cash back cards are at least a minor win over cash.
 

SlickWilly

Tinkerer
ECF Veteran
Verified Member
Feb 18, 2013
1,275
20,835
NY
Yeah well here we disagree. I had taken 12 computers and six I would always update and six I stopped. Used them all on the Internet for many years and I never had anything happen to 11 of them. The one that picked up something minor was one that was always updated. And all of the updated ones had stability problems due to the newer buggy code.

Here is my theory. The older OS have been around long enough that the majority of vulnerabilities and bugs have been corrected many years ago. And today with 20/20 hindsight we know what the weak links are. The latest and greatest OS is a different story. Not only it hasn't been around long to learn where all of the weak links are, but they keep piling on more patches and security patches on that they themselves also contain new bugs and vulnerabilities that hasn't been discovered yet. So you're not getting ahead of the game.

Here is another thing. All of the random attacks are going for what most computers are running. You got it, the latest and greatest with a freshly updated OS. Even hours after a new security patch, hackers are busy and finding the new vulnerabilities right away. So you ain't really gaining any new ground. It's an endless game of cat and mouse.

Now an older OS that hasn't seen updates in years and is probably unsupported anyway, isn't seriously being looked at by random attackers. Why should they? Their numbers are tiny (probably less than 1%) and if they are that old, they most likely have nothing worth stealing anyway. And on top of that, servers and everybody's brother are scanning and deleting those older well known attacks. Thus why I believe older is safer (and my experiment shows it). Notice I didn't say older is better. As surfing the net with old outdated protocols and such isn't really a pleasurable experience. ;)

You might be onto something, for some years I've been using those VM machines more and more and I don't let them update, they seem to always be stable. I use them a lot if I want to check out a website that might be risky, if the VM should get slammed with a nasty virus I wouldn't mess with trying to clean it out of the system, I'd just shut it off, delete the VM file, make another clone from the master copy and I'd be starting out new again. If the VM should ever get hacked, there's no emails or personal files, nothing there they can glean from me. And, from what I hope is correct, because no files are set to be shared between the guest and host systems they can't reach through the VM and get into my actual computer.

Started out using a VM because I upgraded to Vista from XP and there were no Vista drivers for my old printer. I remembered listening to Kim Komando on the radio one day talking about using VM's for just this kind of problem so I made an XP VM and printed through that until I found a good deal on a new printer. Then I'd get a sketchy email once in a while and didn't want to open it so I'd open it inside the VM machine, now if I don't know who sent the email I just delete it. ;) Since then there have been times when they are just handy to use, and fun to just play with. On a VM I can dig into stuff I don't dare too on my real computer, play with things like the registry and if I brick it, well no big deal.
 

BillW50

Vaping Master
ECF Veteran
Verified Member
Nov 23, 2014
3,429
34,943
US
Morning Coffee 400.jpg
 

Punk In Drublic

Vaping Master
ECF Veteran
Aug 28, 2018
4,194
17,518
Toronto, ON
Yeah well here we disagree. I had taken 12 computers and six I would always update and six I stopped. Used them all on the Internet for many years and I never had anything happen to 11 of them. The one that picked up something minor was one that was always updated. And all of the updated ones had stability problems due to the newer buggy code.

Here is my theory. The older OS have been around long enough that the majority of vulnerabilities and bugs have been corrected many years ago. And today with 20/20 hindsight we know what the weak links are. The latest and greatest OS is a different story. Not only it hasn't been around long to learn where all of the weak links are, but they keep piling on more patches and security patches on that they themselves also contain new bugs and vulnerabilities that hasn't been discovered yet. So you're not getting ahead of the game.

Here is another thing. All of the random attacks are going for what most computers are running. You got it, the latest and greatest with a freshly updated OS. Even hours after a new security patch, hackers are busy and finding the new vulnerabilities right away. So you ain't really gaining any new ground. It's an endless game of cat and mouse.

Now an older OS that hasn't seen updates in years and is probably unsupported anyway, isn't seriously being looked at by random attackers. Why should they? Their numbers are tiny (probably less than 1%) and if they are that old, they most likely have nothing worth stealing anyway. And on top of that, servers and everybody's brother are scanning and deleting those older well known attacks. Thus why I believe older is safer (and my experiment shows it). Notice I didn't say older is better. As surfing the net with old outdated protocols and such isn't really a pleasurable experience. ;)

No explanation on your experience, possible a single vulnerability with a specific version of OS was targeted. That’s a common type of attack, but not a guaranteed action. The possibilities are endless. You mentioned you picked up something minor – if security patches are not up to date, then there is no code within the OS to identify what that attempt at a security breach was. You may not know what has infected your older operating systems.

Using Spectre and Meltdown vulnerabilities as an example, this is an exploit that can be initiated on the majority of computers that utilize the x86 architect. This means all Intel based systems dating back to the late 90’s, and the majority of AMD and ARM based systems. That is a s**t load of computers. It does not discriminate OS’s. Linux, Apple, Microsoft, Google and who knows how many others, only released patches for their latest supported OS. Anything that was out of support did not receive a patch, therefore still susceptible.

Another example: The WannaCry Ransomeware exploited a vulnerability in the SMB protocol (Server Message Block) within all versions of Windows, dating back to Win 95. It did not target a specific OS version, but a protocol that is used in many OS’s. It was initiated in May 2017. Microsoft discovered the exploit and issued a security patch with a few days – but the patch was only written for Win Vista and newer OS’s. Win XP and Server 2000 was still in relatively high use at the time, and extremely susceptible to the attack. Do not have exact numbers as to how many of what OS’s were infected, but some experts predicted millions of machines were infected to this date. It is estimated $4 billion US was lost due to this attack.

2 examples of extreme vulnerabilities that display how an exploit does not discriminate against older, unpopular and out of date software. One cannot run on the presumptions that because they are using a older, so called matured version of software that they are not as susceptible.
 
Last edited:

SlickWilly

Tinkerer
ECF Veteran
Verified Member
Feb 18, 2013
1,275
20,835
NY
ETA #2: This coarser grind of BS is not meant for baking! It's for cleaning and deodorizing! Just wanted to make that clear, probably could use if for baking but they don't recommend it. Sorry I didn't make this clear. :(

Totally unrelated but such a deal it would be a shame not to share. Jump on this right now! It could disappear in a matter of minuets!

Arm & Hammer Pure Baking Soda, 5 lb $3.04
https://www.amazon.com/gp/product/B00HNSJSX2

Who doesn't use baking soda? 5LB bag delivered (W/Prime) for $3.04! I ordered a few. We use it for all kinds of things, I keep some in the garage for working on cars, I'll give you a tip on that later. :)

ETA: Oh boy!! As I type this I see UPS is here with those bluetooth earbuds I ordered the other day for $20 on sale! Gotta go get the package off the porch and check them out!
 
Last edited:

SlickWilly

Tinkerer
ECF Veteran
Verified Member
Feb 18, 2013
1,275
20,835
NY
Tip: Keep you auto battery clean, important! Got that white corrosion on the terminals? Mix a little baking soda with water and spray it on your battery, the entire battery, watch that white corrosion melt away like magic! What ratio of baking soda to water? Trial and error, I've been doing it so long I just eyeball it, the more baking soda you use the faster it will clean the battery and you really can't use too much. For a quart of water dump a palm full in your hand, about what it would take to fill a golf ball.

On a acid battery that's dirty enough voltage can cross from one terminal to the other right through the crud on the outside slowly draining the battery. You can test your battery yourself to see if it's dirty enough to cause a drain, take a battery covered in crud, with a DVM, set to millivolts put on lead on the pos terminal and touch the battery first close to that pos terminal then touch spots toward the neg, you'll see higher reading closer. A clean battery is most important on a battery that older/weaker, vehicle that set for weeks without use or in long term storage. On a daily driver you'll probably never have an issue but it's still a good idea to keep the battery clean, I clean the engine compartment every spring to rinse the road salt and crud out, at that time I clean the battery too.

If you also have oil and grease on the battery first use the baking soda mix, let it dry, then use something like engine degreaser, simple green, purple power, ect to remove the oil, don't use brake clean or solvents on battery's. Let dry again the protect the cleaned terminals from future corrosion with a terminal protector, this is the one I've used for decades both on the job and at home. At home one can will serve you, your kids and grandkids.
https://www.napaonline.com/en/p/MCR1073?partTypeName=Battery+Terminal+Protector+-+Spray
 

Users who are viewing this thread