blueskin_

I remember when thinkgeek had a wide variety of genuinely interesting stuff and not just the latest pop culture 'geek' merchandise (sure, they've always had some of that, but years back it wasn't the overriding theme like it is today). This is a sad moment, but probably to have been expected.

Sometimes people don't comment because they don't have anything interesting/useful to add, but still found the article interesting and want it to be more visible, so they upvote it and move on.

Price, mostly. It's good, but there are alternatives that aren't as ridiculously expensive.

>'Cyber'

Literally laughed out loud. It's just become too much of a joke now.

People don't want it because it's binary, not because you can't grep it.

* you need to use a new proprietary tool to interact with them

* all scripts relating to logs are now broken

* binary logs are easy to corrupt, e.g. if they didn't get closed properly.

>You can have a binary index and text logs too! / You can. But what's the point?

The point is having human-readable logs without having to use a proprietary piece of crap to read them. A binary index would actually be a perfect solution - if you're worried about the extra space readable logs take, just .gz/.bz2 them; on decent hardware, the performance penalty for reading is almost nonexistent.

If you generate 100GB/day, you should be feeding them into logstash and using elasticsearch to go through them (or use splunk if $money > $sense), not keeping them as files. Grepping logs can't do all the stuff the author wants anyway, but existing tools can, that are compatible with rsyslog, meaning there is no need for the monstrosity that is systemd.

I had the same feeling - plus the broadband there was terrible. I would never live in a suburb even if I was paid to. The middle of nowhere though, would be even worse than a suburb as it's the same problems but more so and without the (relative) proximity to work.

Not the first time it's been done.

Of course, it's only worked some of the time it's been done, I guess.

Hasn't the US done this too, even if not recently then at least historically?

The Royal Navy still does this today though.

Are people only just realising this?

I would only ever use agent forwarding to a trusted host exactly because of what it does - put a socket on that host that responds with your SSH key... Anyone on that host with root has access to your key.

The article says it uses a second vuln that forces the device to connect to a specific network.

I would love this... if it wasn't by google. I'd rather not have them digging through yet more personal data :(

>I hope to god those contactless credit cards can't be just cloned with a long range rfid reader or else this is gonna be a very funny few years

They can. That's why they require your PIN every N tries (N is configurable by the issuer, I think). All the money spent up to and until N is reached is just lost though, I guess.

This is why I have an RFID-blocking wallet.

Same as the "internet of things" - they are with security where Microsoft was in the 1990s. Security by obscurity is their watchword.

Always remember: "Internet Of Things is also called IOT, because you'd have to be an IDIOT to believe they're secure".