On Fri, February 6, 2015 9:19 am, Always Learning wrote: > > On Fri, 2015-02-06 at 08:40 -0600, mshinn wrote: > >> I recommend reading up on kreb's site: >> >> http://krebsonsecurity.com/2015/02/china-to-blame-in-anthem-hack/ >> >> Not sure the "hack" was an issue with their platforms per se. >> >> " >> “On January 27, 2015, an Anthem associate, a database administrator, >> discovered suspicious activity – a database query running using the >> associate’s logon information. He had not initiated the query and >> immediately stopped the query and alerted Anthem’s Information >> Security >> department. It was also discovered the logon information for additional >> database administrators had been compromised.†> > Flash has always been banned from all my machines, without exception and > regardless of any resulting "hardship". I wonder why so-called Computer > Experts continue to use third-party closed source software which > secretly, and it always has, deposits information on the user's hard > disk. > > Another Lesson to learn: > > *NO* Flash > stronger passwords for SQL > encrypt all the data that is not required for indexed searches. > > There is a war going-on out there and we are the targets ! > At least this I would change in your list: Do not use crappy software, no matter how nicer your life with it becomes. (Except maybe piece of junk computer you are not using for anything of value). Not just flash but any poorly written software. Flash was piece of crap code when it was originally written. Even before original programmers were wrestled out of owning it. I didn't see closed source code, but there always are indications you can observe. One of the indications of poorly written code was: it was written not portably, just for 32 bit (i386) systems. Why I'm saying that? Remember how long flash player/plugin was purely 32 bit binary, even though everything was 64 bit for quite long time already? Adobe even admitted they have to significantly re-write it before they can release 64 bit? and first 64 bit binaries were bad, they didn't re--write code from scratch, but tried to modify... Of course there is more about flash media file standard itself... For those who doesn't program, portable in this case means: you can define sizes of variables (in bytes) using plain numbers (valid for given architecture, say, i386) when defining variables. Alternatively instead of number, you can use (sizeof(integer)) or (sizeof(string). Then the code can be compiled on different architectures and will have correct sizes of variables for given architecture/ CPU word length (sorry, if name CPU word is not correct - that is what we called it back then...). I just randomly searched and this may give you good feeling of what I meant: http://www.delphibasics.co.uk/RTL.asp?Name=SizeOf Anyway, one more lesson: avoid using poorly written software (even if these are only indications of it being written poorly that you can observe). Valeri ++++++++++++++++++++++++++++++++++++++++ Valeri Galtsev Sr System Administrator Department of Astronomy and Astrophysics Kavli Institute for Cosmological Physics University of Chicago Phone: 773-702-4247 ++++++++++++++++++++++++++++++++++++++++