You are not logged in. Login Now
 0-2   2-26   27-51   52-62       
 
Author Message
25 new of 62 responses total.
kip
response 2 of 62: Mark Unseen   Jul 29 14:10 UTC 2003

Sounds a bit like the Foresight Exchange
(http://www.ideosphere.com/fx/docs/FXdocs.cgi) which has been around since
I believe 1994.  Though FX is more of a trading market than just a straight
bet.
remmers
response 3 of 62: Mark Unseen   Jul 29 16:41 UTC 2003

Pentagon Abandons Plan for Futures Market on Terror
From the New York Times

WASHINGTON, July 29 - The Pentagon office that proposed spying electronically
on Americans to monitor potential terrorists has quickly abandoned an idea in
which anonymous speculators would have bet on forecasting terrorist attacks,
assassinations and coups in an online futures market. 

Senator John W. Warner, the Virginia Republican who heads the Senate Armed
Services Committee, said today that he had conferred with the program's
director at the Pentagon, ``and we mutually agreed that this thing should be
stopped.'' 

The senator's announcement - made during a confirmation hearing for retired
Gen. Peter J. Schoomaker, who has been nominated to be Army chief of staff -
signaled the end of a program that was met with astonishment and derision
almost from the moment it was disclosed. 

Under the discarded plan, traders bullish on a biological attack on Israel,
say, or bearish on the chances of a North Korean missile strike would have had
the opportunity to bet on the likelihood of such events on a new Internet site
established by the Defense Advanced Research Projects Agency. 
rcurl
response 4 of 62: Mark Unseen   Jul 29 17:28 UTC 2003

I wonder what the odds would have been for assassination of the president.
bru
response 5 of 62: Mark Unseen   Jul 29 21:18 UTC 2003

It wasn't really a place to "bet".  What it was going to be (from what I
understand) was a place to trade stock in oil markets in the mideast.  By
doing so and watching the market, they would be able to tell wheen something
was likely to happen and where.

If 40% of the stock in iran suddenly switched to saudi arabian oil, you could
assume something was going to happen in Iran that would disrupt the flow of
oil from that state.

The Betting angle was derived because if you were able to make the right
purchase at the right time and then get out before whatever "it" was happened,
you could make a killing.

The same inetelligence could be garnered by watching actual stock market
trends and knowing who was investing where and pulling out when, but that
would require legal wrangleing that the DARPA program would have avoided.

I think it might have worked, but was to fazr outside the box for mass
acceptance.
krj
response 6 of 62: Mark Unseen   Jul 29 23:03 UTC 2003

bdh in resp:0 :: 
> As of last friday the official word on when a viral or worm exploit of
>  the M$ RPC dick-stomp was 7 to 10 days.  However, the most bet of the
>  pool where real people put up real money was 5 days.  Its like betting
>  the track favorite to show.  Thus all of you running a modern M$ OS have
>  about 24 to 48 hours to download and install the "service pak".

Systems at Michigan State started getting probed Monday, it looks like, 
and use of the RPC exploit went ballistic today.   I "lost" a Win2000 
laptop, at least until I make time to rebuild it.
scg
response 7 of 62: Mark Unseen   Jul 30 03:05 UTC 2003

re #5:
        Just like lots and lots of people putting money into into etoys.com
stock accurately predicted the huge longstanding success of etoys.com, right?
;)
polygon
response 8 of 62: Mark Unseen   Jul 30 04:55 UTC 2003

Hmmm, would Zone Alarm protect a WinXP machine from this exploit?
pvn
response 9 of 62: Mark Unseen   Jul 30 06:22 UTC 2003

Have you installed the free patch from M$?
If not the answer is unfortunately well, sorta kinda probably 
definately no.
Any M$ current OS prior to the release of the patch on 071603 that
doesn't have the patch installed is vulnerable OOB (out of the box).
This means that every new Wintel box you buy at the store is likely
vulnerable.  Personal FW software helps but doesn't solve the problem.

I haven't checked today, was too busy, to see who won the pool as today
was supposed to be zero day for 1st generation bad stuff.

Its too bad liberal democrats torpedoed an initiative that might have
set up a system to give quidance where actual lives are at stake - you
kinda wonder who's side they are on exactly.  (Some call it treason)
(I mean you get criticized for not predicting the future and then get
criticized for proposing a system based on proven technology to do
exactly that - you can't win.)

Instead, the time proven tech will continue to be applied to protecting
computers instead of protecting people.

Botton line, people.  Times up.  You really need to have already
installed this patch.  Sure it will break things and it will be fixed in
the future but thats the biz, sweetheart.


sj2
response 10 of 62: Mark Unseen   Jul 30 07:27 UTC 2003

Proven technology?? How so?
sj2
response 11 of 62: Mark Unseen   Jul 30 07:32 UTC 2003

I have an example of how betting affects the outcome. Bookies bet on 
the outcome of a cricket match. Then bookies fix the match by paying 
off a few players!! 

So much for proven *technology*.
pvn
response 12 of 62: Mark Unseen   Jul 30 07:45 UTC 2003

re#11: the exception that proves the rule.  (Hint: bookies don't gamble)

I don't off the top of my pointy geek head know how old the Bayesian
statistic stuff is - seems to me that the specific math is quite old.
Current art is rather active.  Google Bayesian, Monte-Carlo, and Casino
for lots of references.  For a day or so I had a nice check from the
buyout of a company that used the tech in my wallet before it was
diposited - 50 cent per share turning into over 17$US over the course of
ten years or so plus all the dividend payments.
sj2
response 13 of 62: Mark Unseen   Jul 30 09:28 UTC 2003

"Bookies don't gamble". Says who? Are you saying you haven't heard of 
match fixing ever?
remmers
response 14 of 62: Mark Unseen   Jul 30 12:25 UTC 2003

Re #9:  It wasn't liberal Democrats that torpedoed it.  Read
the newspaper.
sabre
response 15 of 62: Mark Unseen   Jul 30 22:00 UTC 2003

It doesn't matter remmers. The header is correct. Liberals ARE stupid.
russ
response 16 of 62: Mark Unseen   Jul 30 22:06 UTC 2003

Re #7:  On the average, better than apparatchiks were able to
run the economy of the USSR with their Marxist wisdom.
pvn
response 17 of 62: Mark Unseen   Jul 31 04:05 UTC 2003

re#13: Ok, you are right, I should rephrase that.  Professional bookies
don't gamble.
sj2
response 18 of 62: Mark Unseen   Jul 31 08:31 UTC 2003

Hehehehe ..... you think people who want to make money care about 
professional ethics??!!!! 
other
response 19 of 62: Mark Unseen   Jul 31 14:39 UTC 2003

Not everyone who wants to make a good living is without ethics.  We just 
hear a lot more about those who are, which tends to color our perceptions 
of the whole lot.
krj
response 20 of 62: Mark Unseen   Aug 1 06:58 UTC 2003

I have a report that the Microsoft patch for the RPC exploit is ineffective
in protecting Windows 2000; it was reported to work in Windows XP Home,
however.
pvn
response 21 of 62: Mark Unseen   Aug 2 06:27 UTC 2003

There are apparently now two variants, dcom.c and dcom48.c, as well as 
"worms" in the wild (none particularly effective apparently nor have I
personally seen any nor have I a copy of dcom48.c and only seen analysis
of (seeing source to dcom.c was enough to cause my heart to skip a
beat)). 

Folk, there is the potential here for a _Perfect Storm_, a confluence of
factors.  There is this fundamental flaw across the board in the M$ OS's
as well as a particularly well developed methodology for propagation. 
Along with it is the high speed interconnectivity of the global Internet
(heck, there are Internet cafe's operating in mosul and baghdad as we
speak only - this Internet thingy is widespread and cheap.)
pvn
response 22 of 62: Mark Unseen   Aug 2 06:30 UTC 2003

Word.  In case you haven't already bothered, right about now would be a
good time to install the latest patches from M$.  Sure they might not be
perfect, and will probably break other things.  But the betting pool is
rather pessimistic in certian circles.
dcat
response 23 of 62: Mark Unseen   Aug 2 19:55 UTC 2003

re: 22 . . . as long as you're not installing the ones going around by email.

dcat, who had 40 of the damn (220KB) things today
russ
response 24 of 62: Mark Unseen   Aug 3 01:22 UTC 2003

Instead of installing the latest M$ patches, why not drop Linux or
OpenBSD boxes in wherever they can be substituted and eliminate the
problem at the source?

Hmmm.  Run Windows as a virtual OS under OpenBSD.  Keep an installed
image around.  Whenever the image shows signs of infection, shut it
down and restore from the backup.
pvn
response 25 of 62: Mark Unseen   Aug 3 05:23 UTC 2003

re#24:  Thats not a particularly helpful suggestion.  There are many
orgs where even if the individual wanted to replace M$ OS entirely the
org rules specify approved OS and that is M$.  And further, 'virtual' M$
OS would in this case be equally vulnerable to the exploit (I gather you
have not seen the exploit code) and whats worse, the ISS free tool for
scanning for vulnerable machines won't find it.  (I have personal
knowlege of this)

Word.  Folk, install the update before its too late.
russ
response 26 of 62: Mark Unseen   Aug 3 20:13 UTC 2003

Hmmm.  If you have the source to the worm it should be really easy
to hack it into a scanner for vulnerable machines, no?  It should
also be really easy to use that source to see what kinds of attack
packets the worm uses, and hack up some firewall software to drop
any coming from outside and ID any infected machines inside.
 0-2   2-26   27-51   52-62       
Response Not Possible: You are Not Logged In
 

- Backtalk version 1.3.30 - Copyright 1996-2006, Jan Wolter and Steve Weiss