BACK to Blog


Mr. Kipper. We have some command-and-control issues here, and elsewhere. Here it's bad enough, elsewhere it gets worse by an order of magnitude. That mess at your food bank this morning. That was a C-three issue. That's what happens when command, control, and communication breaks down. Blood. Gets. Spilled.

It was a three-way brawl. The fake communists, the hired royalists and the paid cops.

Businesses and governments won't just make faster and more accurate decisions by tracking big-picture trends in real-time. They will do things completely differently. There will be at least the following four types of impact:
  1. Decisions based on responses to macro-trends will be faster
  2. In some cases, the Pulse will be more accurate than traditional methods of collecting data about major trends
  3. Trends that otherwise would have not seen at all will be visible
  4. Basic models of society will change

It said time travel theory's rot, and historians do affect events, that they have been affecting them all along, but we haven't been able to see it yet because the space-time continuum's been able to cancel out the changes.

You're dining at a five-start restaurant and have ordered a house specialty, Roast Squab with Almond and Truffle Stuffing. Twenty-five minutes later after taking your order, your waiter returns to your table. He tells you, that the kitchen has run out of squab and asks if you'd like to order something else. You get to your feet and say:
a. "What a big fart this turned out to be!"
b. "This place is a cunt."
c. "Fuck it - I'm grabbing a burger at McDonald's"

Anecdotal evidence may be largely worthless as evidence, but it can be highly persuasive. Humans love a story, especially if it's shocking, weird, or emotionally arresting. The more emotional impact the story has, the more memorable it is. As a consequence, a juicy story can psychologically trump a dry statistic, even when the statistic is rather more informative.

The Family, CarderPlanet's politbyro or Cupola, did not especially fear American and European intelligence and policing operations. But the KGB was another matter, and it was no coincidence that the most important resolution of the conference warned against hostile activities inside Russia and Ukraine. If Russian-speaking cyber criminals had turned on Russian banks or businesses, the entire project would have been shut down within five minutes.

Orwellin maailmassa Isoveli oli määrätietoinen totaliristinen systeemi, joka tarkoituksellisesti valvoi kaikkia kansalaisia. Jokuveli ei ole yksittäinen toimija, vaan kokonaisuus, johon kuuluvat julkiset toimijat, kuten poliittiset päättäjät ja viranomaiset, yritykset työnantajina ja tuotteiden sekä palveluiden tarjoajina ja viime kädessä me kaikki kansalaiset, kukin omine intresseinemme.

Hyvässä jokuveli-skenaariossa yhteiskunnallinen kokonaisuus ajautuu koti "lempeän valvonnan, tietämise ja unohtamattomuuden yhteiskuntaa", ilman, että mikään yksittäinen taho sitä ohjaisi.

So here is Bill Gates and all those people going off to sweat lodge retreats and Davos forums, all the while trying to figure out what happens next. What happens next is that they didn't think of Google. They didn't think of social networking. And they didn't think of the iPhone. Ideas don't happen where they're supposed to. Marshall's career is proof of this.

When researchers were looking to solve problems a year out, Larry Page demanded that they work on problems that might be a decade out, or maybe even a problem that would come up only in a science fiction novel. Page's point of view seemed to be, if you are ridiculously premature, how can people catch up to you?

Social engineering psychology is scientific and calculated. Influence and the art of persuasion is the process of getting someone else to want to do, react, think, or believe in the way you want them to.

The information security market was created in chaos and has become even more dysfunctional over the years. Because no single vendor offers a product that eliminates all of your information security threats, there are gaps. The few vendors that attempt to offer full suites don't properly tie them together and often fall short within each of their component products as compared to best-in-breed vendors. Also complicating the industry are vendors that act as primary educators for organizations on information security threats and solutions. This creates natural "blind spots".

Tukifunktion johtajan täytyy ymmärtää, kuinka hänen yksikkönsä voi vaikuttaa yhtiön ydintoimintaan. Jos funktio ja sen johtaja ei tarjoa muuta, kuin mekaanista apua ydinbisnekselle ilman mitään aloitteellisuutta uusien ideoiden suhteen, pitäisi johtaja tai jopa koko tukifunktio heittää ulos niin pian kuin mahdollista. Arvontuotantoverkosto ei siedä siipeilijöitä.

The clones are driving the success here. That's why we need to continue cloning them. Each successive generation is smarter than its predecessor even if they are dying earlier. The fact they're smarter is why our stem cell research is moving so fast and producing results. We need new clones all the time.

Apparently, I'm going to write this book, which appears to be, as far as I can tell, part engineering field manual and part autobiography. Or rather, I already wrote it. Now I just have to write it, which is to say, I have to get to the point in time when I will have written it, and then travel back in time to get shot and then give it to myself, so I can write it. Which all makes sense to me, except one thiong: why the hell would I want to do any of that?

I wonder whether there even is such thing as a secret between two people. I think they are very, very rare. If a sentence began with the words "I'll only tell you if you promise not to pass it on," it was nearly a foregone conclusion that this promise would get broken in another sentence beginning with those same words.

At the nation-state level, there are two possible deterrence strategies: denial and punishment. In cyberspace, both suffer from a lack of credibility. Denial is unlikely due to ease with which cyber attack technology can be acquired, the immaturity of international legal frameworks, the absence of an inspection regime, and the perception that cyber attacks are not dangerous enough to merit deterrence in the first place. Punishment is the only real option, but this deterrence strategy laks credibility due to the daunting challenges of cyber attack attribution and symmetry.

Internet creates a society that is constantly changing yet highly connservative of its past and an empire that embraces the entire globe but has the feel of a village.
...
Cyberspace in the Internet is "a consensual hallucination" in the following sense. Those who use the Net can magically access information from a server they cannot see in some undisclosed location within seconds of tapping into it. It is like manna falling from the sky. Where does this information arrive from? Well if we want to be poetic we say it comes from syberspace and we use this metaphor to describe our magigal experience.

We'd been trained to this stuff. Some of the same tricks they use in the Federal Witness Security Program. I took a bus to Montana, got a Social Security card, which is ridiculously easy to do once you get access to birth and deadth records - which are public. And from there you get all the other identity cards, and you start a credit record. I did my own witness-protection program.

Although the Internet had proven itself enormously popular with the worldwide community and had become increasingly vital to the lives of individuals and the welfare of Fortune 500 companies, interest in safeguarding it wasn't as high as it ought to be. Jeff was convinced that it would take a significant failure of the system or a coordinated cyber-attack to awaken everyone. Just as it had been impossible to put the United States on a proper war footing before Pearl Harbor, the same fate seemed to await the future of Internet security.

Gurumarkkinoijan 10 käskyä
  1. Myy ensin asiantuntemuksesi
  2. Tee asiakkaallesi ehdotus, joka auttaa häntä päättämään
  3. Rakenna asiantuntijoillesi auktoriteetin tunnusmerkit
  4. Älä mäkätä asiakkaalle, mitä hänen tulisi tehdä
  5. Rakenna kiitollisuudenvelkaa järjestelmällisesti
  6. Imartele asiakastasi niin, että hävettää
  7. Elä niin kuin saarnaat
  8. Ryhdy tutuksi
  9. Älä olehelppo nakki
  10. Opettele kertomaan kiinnostavia tarinoita

Sosiaalisen median välttämättömyyttä ja mahdollisuuksia liiketoiminnalle painotetaan, mutta usein epämääräisin perusteluin. On riskialtista lähteä sattumanvaraisesti kokeilemaan sosiaalisen median ratkaisuja ilman suunniteltua strategiaa. Tällöin lopputulos on todennäköisesti pettymys, kun odotettua hyötyä ei saavutetakaan. Syynä voi olla epäonnistunut toteutus, suunniteltujen ratkaisujen huono integrointi organisaatioon, epäonnistunut kommunikointi tai ratkaisujen sopimattomuus yrityksen toimintaan. Tuloksellisen toiminnan rakentaminen sosiaalisen median kautta on osoittautunut haastavaksi ja ongelma onkin, että organisaatio lähtee usein toteuttamaan teknistä ratkaisua sen sijaan, että näkisi ratkaisun ensisijaisesti ajattelutavan ja toiminnan muutoksena, jonka tekninen ratkaisu vain mahdollistaa

"Does the set of all sets which do not contain themselves contain itself?" To which the answer is: "If it does, then it doesn't. And if it doesn't, then it does!" Voilá, "Russell's Paradox"

Women, by and large, are much more perceptive than men. They can instantly spot insincerity and bullshit. So a great pickup artist must either be congruent with his material - and really believe it - or be a great actor. Anyone talking to woman while simultaneously worrying about what she thinks of him is going to fail.

Experienced designers often begin by writing down exactly what they know about the user, the user's purposes of use, and the modes of use. Wise designers also write down explicitly what they don't know but assume about the user and users.

In both psychological and economical phenomenon: as people and companies age, they have more to lose. They're not willing to spend years chasing dreams or endanger what they've worked so hard to build. Attitudes focused on security, risk aversion, and optimization of the status quo eventually become dominant positions, and even become organizational policy at companies that were once young, nimble, and innovative. Even its success enabled it to grow into mainstream businesses, diminishing their interest and capacity for new ideas.

Our natural tendency to avoid the pain of loss is most likely to distort our thinking when we place too much importance on short-term goals. When we adopt the long view, on the other hand, immediate potential losses don't seem as menacing.

All the data - the reason for his entire mission - now suffused through his blood, downloaded at the source of the plug into thousands of microscopic data stores, amalgams of protein and silicon called prochines. The prochines would spend the next hour exchanging data with their blood-borne fellows, performing a kind of bio-backup, until millions of copies spread throughout his body.

Willie Sutton became famous for saying he robbed banks because that's where the money was. It didn't matter Willie Sutton never in his fucking life said it. Once the general public believes he did and thought it was cool thing to say, Willie Sutton's famous.

We think that we are using Internet, but perhaps it will end up using us. We generally assume that knowledge increases over time. The Internet, we therefore assume, is spreading knowledge. But it is always possible that the reverse could be happening. Ignorance could be increasing over time because the sheer volume of digital dross and distraction that is now so easily co-created and distributed is drowning out learning and wisdom.

Of course, it was the tourists who made the game. As full time professional poker players, we were basically "going to the office" every day and playing poker while we waited for the tourists to contribute. But that did a lot for all of our games too. Poker is about winning, but to do that you have to learn about, and from, better players. And if you were already playing at a high level, the Mirage was probably the best place to get your continuing education. If your game wasn't at that level, then the Mirage was where you donated to our education fund. We always made sure that the big game at the Mirage was a fun table to play. Smart pros never, ever scare the fish away.

We believe a business model can best be described through nine building blocks that show the logic of how a company intends to make money. The nine blocks cover the main four areas of a business: customers, offer, infrastructure, and financial viability. The nine building blocks are: customer segments, value propositions, channels, customer relationships, revenue streams, key resources, key activities, key partnerships and cost structure.

In the afternoon, Isidore considers the possibility of exomemory manipulation. He 'blinks until his head pounds with technical information about distributed ubiquitous communication and quantum public key cryptography, Byzantine general problems and shared secret protocols. The exomemory is everywhere. Its tiny distributed sensors - in every piece of smart- and dumbmatter - record everything, from events to temperature fluctuations to object movements to thoughts, with access to it controlled only bu gevulot. But it has been designed to be write-only, with massive redundancy. Hacking into it and editing it would mean nanotechnological and computational resources far beyond the reach of any Oubliette citizen.

Maailman lyhin luovuuskurssi: Pidä huolta, että omaksut joka päivä jotain uutta, jotain odottamatonta, mitä et tiennyt aikaisemmin, mutta rajoittamatta millään lailla sitä, mistä tämän uuden tiedon hankit.

Storing data is so cheap it's essentially free, so data brokers record everything in the hopes that it will have value to someone. The data is aggregated by third parties, linked to individual identities, and sold like any other consumer data. It's not a consipiracy. It's an economy, but an economy these people know nothing about. They're tagged like sheep and have about as much say in the matter as sheep.

Joka ikinen hetki Paša oli lähempänä. Pašan auto ei menisi rikki, Pašan autosta ei loppuisi bensa, Pašan autoa ei varastettaisi,Pašalle ei tapahtuisi sellaisia asioita, jotka voivat viivyttää tavallisten kuolevaisten matkaa, koska tavallisen ihmisen murheet eivät häntä koskettaneet ja hän sai aina tahtonsa läpi. Pašan huonon tuurin varaan ei voinut laskea, koska sitä ei ollut. Hänellä oli rahan tuuri ja se oli aina hyvää tuuria, Paša läheni vääjäämättä.
The elbow is a complicated joint. It's a hinge made out of three bones that come together with a lot of ligaments and tendons. Most people can flex their elbows nearly one hundred and eight degrees. Force it beyond that, and you'll wedge the bony tip of the ulna under the end of humerus, and bad things can happen. The bones can separate, or fracture, or simply snap.
I heard a snap.

The salt of the fucking earth never tells you it's the salt of the fucking earth. People who get scammed, they're all people who don't know that.

Three things involved in cyberspace that make cyber war possible: (1) flaws in the design of the Internet; (2) flaws in hardware and software; and (3) the move to put more and more critical systems online.

"Sammy. They're coming back after us. Those ride people. They did what we thought they'd do, incorporating into a single entity that we can sue once and kill for good, but then they did something else. Do you know what they did Sammy?"
Sammy nodded. "They're countersuing. We knew they'd do that, right?"
"We didn't excpect they'd raise a war chest like the one they've pulled together. They have a business plan built around suing us for the next fifteen years, Sammy. They're practically ready to float an IPO."

Monessa organisaatiossa kuvitellaan kuitenkin, että riskienhallintapäällikkö vastaa yhtiön riskeistä ja jopa huolehtii siitä, että riskejä ei synny. Tämän harhakuvitelman tulisi johtaa siihen, että riskienhallinta johtaa yhtiön liiketoimintaa. Näin ei tietenkään tule olla, vaan riskienhallinnan tulee olla ohjaava osa yhtiön liiketoimintastrategiaa samoin kuin esimerkiksi henkilöstöhallinto, tietohallinto ja tuotanto.

Google CEO Eric Schmidt said it best: "When you say 'collaboration,' the average forty-five-year-old thinks they know what you're talking about - teams sitting down, having nice conversation with nice objectives and a nice attitude. That's what collaboration means to most people." But for Google and many other companies and organizations, collaboration is now a profoundly new approach to orchestrating capability to innovate, create goods and services, and solve problems. Social networking is becoming social production.

While big decisions are important, this bias means that most companies have weak system to ensure that the many small economic decisions are made correctly. Collectively, these small decisions have enormous economic impact...This leads to what we might call the Pareto Paradox: There is usually more actual opprotunity in the undermanaged 80 percent that the overmanaged 20 percent.

I've been hacked, and there's nothing I can do about it except jump through whatever hoops they've laid out for me and hope they kill me cleanly at the end or let me go. Resistance, as they say, is futile. If they've hacked my backup so deeply that they can force a new body plan on me, then they can do anything they want. Mess with my head, run multiple copies of me, access my private keys, even make a zombie body and use it to do whatever they want it to do while masquerading as me. If they can wake me up in the A-gate of another rehab apartment, then they've trapped my state vector. I could run away a thousand times, be tortured to deadth a hundredfold -  and I'd still wake up back in that booth, a prisoner once more. Identity theft is an ugly crime.

As its core, Ebterprise 2.0 is about giving many more people within the organization a voice, letting them interact as equals, and harvesting what emerges. Enterprise 2.0 is about abandoning the assumption that unilateral control is the best way to achieve desired outcomes, and instead trusting in people's ability to interact productively without constant supervision from above. Enterprise 2.0 is hostile to the idea that the "undiscussable" should remain taboo.

Doing nothing about risk management is not actually the worst case...The worst thing to do is adopt a soft scoring method or an unproven but seemingly unsophisticated method and act on it with high confidence.

The movement to stop global warming has taken on the feel of a religion. The core belief is that humankind inherited a pristine Eden, has sinned greatly by polluting it, and must now suffer lest we all perish in a fiery apocalypse...Any religion, meanwhile, has its heretics, and global warming is no exception. Boris Johnson, a classically educated journalist who managed to become mayor of London concluded the following: "Like all the best religions, fear of climate change satisfies our need for guilt, and self-disgust, and the eternal human sense that technological progress must be punished by the gods. And the fear of climate change is like a religion in this vital sense, that it is veiled in mystery, and you can never tell whether your acts of propitiation or atonement have been in any way successful."

It is said that "the best-laid plans of mice and men often go awry" and  that "no battle plan survives contact with the enemy." Hofstadter's law tells us: "It always takes longer than you expect, even when you take into account Hofstadter's law." The fact that we need these aphorisms to  remind us of the inherent difficulty of planning demonstrates the strength of the illusion of knowledge.  The problem is not that our plans go awry - after all, the world is more complex than our simple mental models and,  as Yogi Berra explained, "it's tough to make predictions, especially about future." Even expert project managers don't get it right: They are more accurate than amateurs, but they are still wrong one-third of the time.We all experience this sort of illusory knowledge even for simpler projects. We underestimate how long they will take or how much they will cost, because what seems simple and straightforward in our mind typically turns out to be more complex when our plans encounter reality. The problem is that we never learn to take this limitation into account. Over and over, the illusion of knowledge convinces us that we have a deep understanding of what a project will entail, when all we have is a rough and optimistic guess based on shallow familiarity.
Trinityn mielestä oli yhtä helvettiä ajaa autolla Euroopan halki, koska koko Manner-Eurooppa ajoi härkäpäisesti väärällä puolella...Oli yksinkertaisempiakin tapoja matkustaa Lontoosta Tukholmaan, mutta ikävä kyllä Trinity tuskin olisi voinut kuljettaa reilua kolmeakymmentä kiloa elektroniikkaa Ruotsiin normaalilennolla. Vaikka he olivat ylittäneen kuusi rajavartioasemaa, ei yksikään tullimies tai passintarkastaja ollut pysäyttänyt heitä. Trinity oli lämmin EU:n kannattaja, sillä säännöt helpottivat huomattavasti hänen mannermaankäyntejään.

A marginally intelligent voicemail virus masquerading as an IRS auditor has caused havoc throughout America, garnishing an estimated eighty billion dollars in confiscatory tax witholdings into a numbered Swiss bank account. A different virus is busy hijacking people's bank accounts, sending ten percent of their assets to the previous victim, then mailing itself to everyone in the current mark's address book: a self-propelled pyramid scheme in action. Oddly, nobody is complaining much. While the mess is sorted out, business IT departments have gone to standby, refusing to process any transaction that doesn't come in the shape of ink on dead trees.

Any artificial entity that's willing to upload its neural state vector into a one-kilogram interstellar probe three-quarters of the way to Alpha Centauri without backup or some clear way of returning home has got to be more than a few methods short in the object factory.

Hän käynnisti ohjelman nimeltä Asphyxia 1.3. Se oli hänen käsialaansa ja sen ainoa tehtävä oli vaihtaa Armanskin Internet Explorer uudempaan versioon. Prosessi kesti suunnilleen viisi minuuttia. Kun hän oli valmis, hän otti CD:n koneesta ja käynnisti Explorerin uuden version. Ohjelma näytti alkuperäiseltä ja käyttäytyi täsmälleen kuten se, mutta oli aavistuksen suurempi ja mikrosekunnin hitaampi. Kaikki säädöt vastasivat pilkulleen alkuperäistä, jopa asennuspäivämäärä. Uudessa tiedostossa ei näkynyt mitään, mistä sen voisi jäljittää. Lisbeth kirjoitti hollantilaisen palvelimen ftp-osoitteen ja näkyviin tuli komentoruutu. Hän klikkasi laatikkoa, jossa luki copy ja kirjoitti nimen Armanski/MiltSec ja painoi OK. Kone alkoi välittömästi kopioida Dragan Armanskin kovalevyä hollantilaiselle palvelimelle. Kellon mukaan kopioiminen kestäisi kolmekymmentäneöjä minuuttia.

Armanski huomasi pian, että kehityskeskusteluista, sisäisen koulutuksen projekteista ja muusta liirumlaarumista huolimatta Lisbeth Salander ei aikonut  sopeutua Miltonin normaaleihin toimistorutiineihin. Se asetti Armanskin vaikean paikan eteen.
Lisbeth oli piikki muiden työntekijöiden lihassa, Armanski tiesi itsekin, ettei olisi hyväksynyt, jos kuka tahansa muu hänen työntekijöistään olisi tullut ja mennyt niin kuin huvitti, vaan olisi normaalitapaukseessa pannut tämän seinää vasten. Mutta hän aavisti, että jos tekisi Lisbeth Salanderille samoin tai uhkaisi häntä erolla, tyttö vain kohauttaisi harteitaan. Hänen oli siis joko pakko sanoa Lisbeth irti tai hyväksyä se, että tyttö ei toiminut niin kuin muut ihmiset.

Monet yritykset ovat vielä yhtä hämmentyneitä sosiaalisen median suhteen kuin teini-ikään tulleiden nuorten vanhemmat. Hyvin yleinen reaktio vaikeassa tilanteessa on kieltää pääsy verkkoyhteisöihin työaikana. Tekosyyksi keksitään usein tietoturvariskit. Todellinen syy on tietysti pelko.

Tietojenkäsittelyn seurauksena syntyy tarpeetonta dataa, joka voi väärin käytettynä olla haitaksi ihmiselle ja yhteiskunnalle. Tällainen data on tietoyhteiskunnan saastetta,

VALTA
JOHTAJUUS

Before me measure we should ask five questions:
  1. What is the decision this is supposed to support?
  2. What really is the thing being measured?
  3. Why does this thing matter to the decision being asked?
  4. What do you know about it now?
  5. What is the value to measuring it further?
For useful measurement assumptions:
  1.  Your problem is not as unique as you think
  2.  You have more data than you think 
  3.  You need less data than you think 
  4. There is a useful measurement that is much simpler than you think.

Dwarf shops were doing well these days, largely because they understood the first rule of merchandising, which is this: I have got goods for sale and the customer has got money. I should have the money and, regrettably, that involves the customer having my goods. To this end, therefore, I will not say 'The one in the window is the last one we have, and we can't sell it to you, because if we did no one would know we have them for sale', or 'We'll probably have some more on Wednesday', or "We just can't keep them on shelves', or 'I'm fed up with telling people there's no demand for them'; I will make a sale by any means short of physical violence, because without one I am a waste of space.

Well, you  said you think you know some things. What you mean is, you've constructed simplified representations of how those things work. But don't confuse yourself by thinking your simplified mental constructions are realistic, or worse yet, true...You have to judge them by some criteria other than realism. Nothing useful is real. If it's complicated enough to be realistic, it's too complicated to be useful. That's why we build models. Representations. When we say we know things, we just mean we have mental models of those things that we like. Often we like them because they've been useful. But let's not confuse having a useful model with actual knowing...A model you like for one thing, a representation that is great by one criterion might turn bad when the criterion or the task at hand changes...Managers have a problem like this when they fall in love with a particular model of how something works. When they become convinced that a mental model they have of how something works is the right one. When they decide that they know something. None of us really knows much of anything, when you get right down to it. We like some mental models just because we find them pleasing in some way. We like others because they've been useful in the past. But when we become too wedded to a model, we lose our ability to deal with new situations...It's best to get over feeling that you know things. What you have is a toolbox full of personal theories. You keep those favorite theories - models, tools, whatever you want to call them - for a variety of reasons. All I'm really saying is, you need to be aware of why you're keeping them in your kit. And you need to always remind yourself that they are there not because they're right, or realistic, or true, or anything like that, but because they've been pleasant or helpful in a defined set of circumstances. Sort them, store them, and label them in accordance with the circumstances in which they are valuable. You wouldn't use a hammer for a job that needs a wrench. The best managers, in my opinion, take this sort of toolkit approach to what they do. Bad ones try to use a hammer, or a wrench, or whatever they regards as the one true tool, for everything.

The ientcio wishes to inform you that we have indeed received those messages from SETI and have found them...amusing is probably the best word. Television is much more interesting.

The first question I hear from most excutives is, "Should I be concerned about losing control over where my data is stored?" Although outsiders are particularly focused on this question, the following security implications of the cloud are much more profound:

The most interesting moment was when the gap between gates grew just wide enough to admit a single person. Who would it be? Male of female, old or young, carrying an assault rifle, a baby, a chest of gold, or a backpack bomb?

Perinteisessä kiinalaisessa strategiamaailmassa on lukuisia eri strategiatasoja kuvaavia ja strategiatyötä ohjaavia käsitteitä. Länsimaisissa kielissä ei ole kuin kolme käsitettä ja käsitetasoa - strategia, operaatio ja taktiikka - joiden avulla ja kautta hahmotamme strategiatyötä. Perinteisessä Kiinassa strategiatyön ylintä abstraktiotasoa kuvaavia strategiakäsitteitä on kaiken kaikkiaan kymmenkunta, ja ne voidaan jakaa kolmeen eri kategoriaan, jotka ovat laskennalliseen arvioon ja harhaanjohtamiseen perustuvat strategiakäsitteet sekä neutraali strategiakäsitteistö.

Bra1n was through attacking big companies. Now he would be going after tens of thousands of consumers. On the underground forums where users bought and sold the most sensitive financial information in batches of millions, he bragged that he would never be caught. He lived in Kazakhstan, where the foreign law enforcement had no power and, he said, the local authorities would never arrest him.

Langdon exhaled, fighting the impulse to tell Sato the same thing he constantly told his students: "Google" is not a synonym for "research."  In these days of massive, worldwide keyword searches, it seemed everything was linked to everything. The world was becoming one big entangled web of infromation that was getting denser every day.

All the way back to Topanga, the radio cranked out a Super Surfin' Marathon, all commercial-free - which seemed peculiar unti Doc realized that nobody who would sit through this music-teacher's nightmare of doubled-up blues lines, moronic one-chord "tunes", and desperate vocal effects could possibly belong to any consumer demographic group known to ad business.

But then again if reality is hard and flat and unjust, then it's better to adjust to what really is than to complain that it isn't what you wish. That was what made me lose faith in prophecies, in purpose, even in life, I guess. But having lost it, soon I doubted my lack of faith. There were niggling hints of meaning everywhere. At the end of the day, you choose what you believe and you live with the consenquenses.

Olen aikuinen mies, perheenisä ja valtiomies, pohjoismaisen hyvinvointivaltion kasvatti, kansanliikkeen johtaja, kansainvälinen vaikuttaja. Harkinnan jälkeen olen tullut siihen tulokseen, että nainen on sekä Natoa että Euroopan unionia mutkikkaampi organisaatio. Hänen johtojärjestelmästään on mahdoton piirtää varsinaista kaaviota. Sitä ei ole.

Suojelupoliisi ei koskaan kuuntele. Se salakuuntelee.

The future had arrived so suddenly he didn't know what to do with it. Freedom lay useless in his hands. He didn't know how to feel. It reminded him of Harani iron bulls. He'd never seen one, of course, but it was said they captured the young calves and bound them to a stake with thick chains. By the time the iron bulls were full grown - more than fifteen feet high at their mighty shoulders - they should snap the chains, but they didn't. Their handler's staked them with thin rope. The iron bulls were so sure they couldn't get free, they never tried.

Here's  an interesting bit of trivia I learned about failed colonies: Not counting wildcat colonies, the number one cause of abandoned human colonies is not territorial disputes with other species; it's native bugs killing off the settlers. Other intelligent species we can fight off; that's a battle we understand. Battling an entire ecosystem that's trying to kill you is an altogether trickier proposition.

Only one thing is true about Truth: when everybody claims to be telling it, some of them have to be lying.

It was interesting what you could do, when your enemy was officially your ally. And unaware you knew it was your enemy.

Olimme käyneet vaimoni kanssa viittä vuotta aikaisemmin Suomessa. Täällä oli pimeää ja ankeaa. Edes naapurit eivät tervehtineet toisiaan. Mikä olisi ollut parempi paikka kadota sivistyneestä maailmasta ja piilotua? Sen lisäksi meildän reissullamme meille tarjottiin paikallisina "herkkuina" mämmiä, karjalanpiirakoita ja karjalanpaistia. Aivan uskomatonta sontaa, jos olet maistanut! Kun päätin lähteä Ranskasta, vannoin itselleni etten kokkaisi koskaan, enkä haluaisi olla missään tekemisissä gastronomian kanssa. Suomi oli oivallinen valinta.

If information security is to keep pace, people, processes, and information security technology will need to evolve. The Hollywood security that security professionals snigger at today needs to become a reality tomorrow.

Wars. They were the easiest things to start and hardest things to end.

People might make rational decisions about sharing their personal information in the short tem, but underestimate what might happen to that information as it is indexed, reused, and repurposed by strangers.

First off, you're in good shape now. So don't worry. Having said that, you lost your jaw, your tongue, most of your right cheek and ear. Your right leg was snapped off halfway down your femur; your left one suffered multiple fractures and your left foot was missing three toes and the heel - we think those were gnawed off. The good news there was that your spinal cord was severed below the rib cage, so you probably didn't feel much of that. Speaking of ribs, six were broken, one of which punctured your gallbladders, and you suffered general internal bleeding. Not to mention sepsis and a host of other general and specific infections brought on by having open wounds for days.

Most existing Anti-Virus technologies are about 20 years old. They worked well enough for most of the time to achieve and maintain almost 100% market penetration. So, in a sense, as long as the money keeps flowing in, there isn't a huge economic incentive for big companies that already invested a lot in building their technology to invest a lot more to reinvent it.

Consider a turkey that is fed every day. Every single feeding will firm up the bird's belief that it is the general rule of life to be fed every day by friendly members of human race "looking out for its best interests," as politician would say. On the afternoon of the Wednesday before Thanksgiving, something unexpected will happen to the turkey. It will incur a revision of belief.

Osta hyvälaatuista pastaa.
Osta hyvälaatuista oliiviöljyä.
Osta parmesaani palana ja raasta itse.
Käytä joskus raasteena myös Pecorinoa.
Keitä pasta runsaasti suolatussa vedessä.
Älä lisää keitinveteen öljyä.
Pidä kastike yksinkertaisena.
Panosta raaka-aineisiin.
Älä laita liikaa kastiketta.
Sekoita kastike ja pasta toisiinsa paistinpannussa tai tarjoiluastiassa.
Syö pelkästään haarukalla.
Muista, että tuorepasta ei välttämättä oel parempaa kuin kuivapasta.
Kokeile ja luota omaan makuusi.
Nauti.
Älä suhtaudua asioihin liian vakavasti, vaikka tässä kirjassa niin tehtäisiinkin.

Mercy is always a symptom of weakness. It's just another form of fear - you're secretly afraid that if you don't spare your enemy, someday your enemy might not spare you.

You get a trick hot enough, he'll pay you the same for a hand job as the full ride.

The choice wasn't living or dying, running or fighting, it was facing the death as equal, or hearing it come up on you from behind like a hound, grab you by the scruff of the neck and shake you apart.

In the end he had successfully invited them all to die simply by promising to do it with them. It was all they would ask of any commander.

Most people aren't stong enough for our creed, Kylar, so they believe in comforting illusions, like gods, or Justice, or the basic goodness of man. Those illusions fail in war. It breaks men.

Metrics serve only one purpose: decision support. We measure to manage. We manage to meet objectives in order to achieve desired outcomes.

In order to progress in life, one has to improve every day in an endless process.

Hän [Mannerheim] meni toilettiin, pesi kätensä, katsoi pitkään peiliin ja koska hän oli kuullut Ignatiukselta ja Saksan-jääkäreiltä, että sana saattoi pahassa paikassa lääkitä, hän kuiskasi hiljaa, niin ettei kukaan kuulisi, sydämensä pohjasta, suomeksi: "Ryssät."

He confesses to spending his evenings nursing Scotch before his computer at home, Googling himself until the wee hours. There's a person out there who shares the same name, incredibly enough. Person or persons. He's found himself in Appalachian hiking e-gazettes, antique typewrite societies, and University of Alaska alumni newsletters. I must destroy them, he says.

Eight characteristics or norm, describe typical Net Gener and differentiate them from their Baby Boomer parents. They prize freedom and freedom of choice. They want to customize things, make them their own. They're natural collaborators, who enjoy conversation, not lecture. They'll scrutinize you and your organization. They insist on integrity. They want to have fun, even at work and at school. Speed is normal. Innovation is part of life.

Reuters.com: Spammers Massacred, Thousand Dead - A daring and well-coordinated attack launched monday morning may have claimed the lives of as many as 6,000 prolific spammers in 83 countries. Over two hundred died in Boca Raton, Florida, alone. Authorities are still reeling from the magnitude and sophistication of the strikes. The assailants left behind the same message: "All spammers will die." Since the attacks, ISPs report up to an 80% reduction in amount of spam clogging Internet servers.

Jotkut kertovat juttuja hyviä,
toiset pohtivat syntyjä syviä.

Yhdellä maassa jalat kuin juuret,
toisella päässä visiot suuret.

Joku mieluiten järkeä käyttää,
toiset tunteensa muillekin näyttää.

On päiväohjelma monilla tarkka,
vaan joillakin lipsuu tunti ja markka.

Kaikki kun elämme tyyleillä omilla,
on yhteistyökykymme joskus kovilla.

Media raportoi poikkeuksista. Liikenneonnettomuudet, tulipalot, puolen tunnin sähkökatko Martinlaaksossa, Thaimaan lennon myöhästyminen tai juopuneiden skinien tappelu ravintolan edustalla ovat todellisen elämän marginaalia. Median luoma maailmankuva kuitenkin muodostuu juuri niistä. Syntyy outo paradoksi. Kun median pitäisi tarjota meille käsitys siitä, millaisessa maailmassa elämme, se tarjoaakin meille marginaali-ilmiöitä ja poikkeuksia.

Kun olin lapsi, isä kertoi minulle bulgarialaisesta fakiirista. Tämä pystyi työntämään kuuden tuuman rautanaulan kenenkä tahansa takapuoleen tuntematta itse vähäisintäkään kipua.

Vastakuoriutunut idea on heiveröinen. Se pitää auttaa jaloilleen. Tappamaan sen ehtii myöhemminkin.

Only mediocre people are always at their best.

The wicked leader is he whom the people revile.
The good leader is he whom the people revere.
The great leader is he of whom the people say, "We did it ourselves."

In war planning, you must anticipate the actions of the enemy. Be careful lest your preventive measures teach the enemy which of his possible actions you most fear.

People make mistakes. More interestingly, people make a variety of systematic and predictable mistakes.

A well-structured, well-managed IT foundation is inherently less risky than a more complex one. A risk-aware culture helps people recognize and deal openly with threats, risky behaviors, and risk reduction opportunities. And a mature risk governance process systematically develops a comprehensive picture of enterprise risks, bringing the full resources of the business to bear on risks that exceed the resources and authority of any single manager.

Yuri paced around the room, angry, constrained, frustrated. "My God, I was pissed enough when I learned that the Firstborn screwed up the ice caps with their sunstorm. But now this. Mars!"
Still Athena spoke. "Every human in the solar system who chooses may contribute to the discussion that must follow. Speak however you like. Blog. E-mail. Just speak into the air, if you wish. Someone will hear you, and the great AI suites will collate your views, and pass them on to be pooled with others. Lightspeed will slow the discussion; that is inevitable. But no action will be taken, one way or another, until a consensus emerges..."
...
"Jesus Christ on a bike," Paxton said, "I can't believe I'm hearing this mush. Madam Chair - Bella - people will panic. Riots, looting. You'll see. That's why we keep secrets, Ms Duflot. Because people can't handle the truth."
Cassie clanced at the softwall. "Well, that doesn't seem to be true, Admiral. The first responses are coming in..."

"Jesus, you stink," said Jerry Fink, sitting beside Holiday, rattling the rocks in his coctail glass.
"It's called Axe," said Holiday. "The kids were it."
"You ain't no kid, hombre."
"Tell me something I don't know."
"I'm just askin you why you're wearin that swill."
"Very simple. Where I woke up this morning, I didn't have my own toiletries close by, if you catch my drift."
"Here we go," said West.
Holiday grinned and squared his shoulders. He was as rail thin as he had been in his twenties. The only indicator of his forty-one years was the small belly he had acquired from years of drinking. His acquaintances called it "the Holiday Hump."
"Tell us a bedtime story, Daddy," said Bonano

The 5 most significant and enduring drivers of change over the next 50 years: ageing, power shift eastwards, global connectivity, GRIN technologies and the environment.

If we connected up all the computers on the planet and asked the resultant network or grid a question like "Is there a God?" the answer may very well be "There is now".

http://www.nowandnext.com/

But how do people choose which risks to worry about and which to ignore? Our friends, neighbourgs and co-workers constantly supply us with judgments that are a major influence. The media provide us with examples - or not - that Gut feeds into the Example Rule to estimate the likelihood of a bad thing happening. Experience and culture colour hazards with emotions that Gut runs through the Good-Bad Rule. The mechanism known as habituation causes us to play down the risks of familiar things and play up the novel and unknown. If we connect with others who share our views about risks, group polarization can be expected - causing our views to become still more entrenched and extreme.

A unique place among those marketing fear is held by security consultants. They don't campaign like politicians, lobby like police chiefs or advertise like security companies. Instead, they speak to reportes who present them as disinterested experts, although they are anything but disinterested.

Having a process is better than no process, and a good process keeps evolving and growing. But you have to be careful. The methodology is just set of guidelines and principles that is supposed to get designers, developers, and testets thinking about security issues. But it doesn't guarantee security.

I've always admired a good hack - but modern viruses are not displays of skill; they are simple brutes that are polluting and pillaging the Internet landscape. It's the powerful taking advantage of the weak. I'm disgusted at how they [criminal hackers] are so ready and willing to destroy what I view as one of mankind's greatest developments, all for their own selfish greed.

Uhkakuvia kudottiin yhteen monista eri lähteistä: tutkimusraporteista, Ruotsin sotilasasiamiesten muistioista, muiden turvallisuuspalveluiden tiedoista, satelliittikuvista, mediasta. Pöydillä olevien tietokoneiden kautta saatiin puolustusvoimien signaalitiedusteluun ja ja kentällä toimivien agenttien raportteihin perustuvaa salaista SIGINT- ja HUMINT-tietoa, joka oli kovaa valuuttaa muiden valtioiden sisarorganisaatioiden kanssa asioitaessa. Varsinkin uusi televalvontalaki, joka päästi ruotsalaiset seuraamaan aitiopaikalta venäläisten ulkomaille suuntautuvaa viestiliikennettä, toi heille vaihtokauppana paljon kiinnostavaa tietoa Atlantin molemmilta puolilta ja Israelista.

You're a judge. Every time you make a decision someone loses. These guys don't care about the truth, so they can make anything sound bad.

When the cry of "Let's build it ourselves!" arises, geeks are all too happy to rally and cheer. A celebrated (and perhaps apocryphal) bit of graffiti from MIT captures this: "I would rather write programs to help me write programs than write programs."

If you look at software today, it's certainly engineering of a sort - but it's kind of engineering that people without the concept of arch did. Most software today is very much like an Egyptian pyramid with millions of bricks piled on top of each other, with no structural integrity, but just done by brute force and thousands of slaves.

The economics of computing have changed, and it's the new economics that are now guiding progress. The PC age is giving way to a new era: the utility age.

Hän kertoi, miten Fred havaitsi jäävuoren sulavan ja miten he sitten 1) avasivat yhteisön silmät sille, miten tärkeää on tarttua kiperiin kysymyksiin pikaisesti, ja 2) valitsivat huolellisesti työryhmän muutosta toteuttamaan ja 3) visioivat paremman, toteuttamiskelpoisen tulevaisuuden ja 4) välittivät vision toisille sisäistettäväksi ja hyväksyttäväksi, ja 5) poistivat muutoksen tieltä niin monta estettä kuin oli tarpeen ja 6) julkistivat mopeasti edes pienen edistysaskeleen eivätkä 7) antaneet yhtään periksi, ennen kuin uusi elämäntapa oli jo lujasti juurtunut, ja 8) huolehtivat lopuksi siitä, etteivät pinttyneet, vaikeasti murrettavat perinteet pääsisi pysäyttämään muutoksia.

Traditional botnets might have a footprint of a few hundred thousand machines (which would be on the large end). In contrast, building a browser-based botnet with several million or more infected hosts appears relatively easy to do.

"Why are you always in such a hurry, Mr Lipwig?"
"Because people don't like change, but make the change happen fast enough and you go from on type of normal to another."

He was as naked and exposed as a baby lobster. He hoped he'd covered all the angles, but angles were - what did they call it, he'd gone to a lecture at the university...ah yes. Angles were fractal. Each one was full of smaller angles. You couldn't cover them all.

Many of the products and services that the commercial security industry sells simply perpetuate an unsatisfactory status quo. They don't make the problem any worse - they certainly can help. But they often don't address the root cause of the problem. A key observation that can be made about the evolution of security technologies it that new security products are often developed to compensate for the unitended side effects of prior security products.

Three converging global trends are driving the world community toward a point of "hyper-instability". The simultaneous growth in these three areas reinforces each realm and accelerates the movement toward convergence, or hyper-instability - in ordinary language, a global catastrophe. The combined effect is unique in human evolutionary history.

He had wondered, as had most people at one time or another, precisely why an android bounced helplessly about when confronted by an emphathy-measuring test. Emphathy, evidently existed only within human community, whereas intelligence to some degree could be found thoroughout every phylum and order including the arachnida.

I don't care what side of the law you work: You never want to confront your subject while he's still talking. In fact, you don't want to interrupt him at all. Threats are for amateurs; verbal dueling is for fools. A pro knows there's no reason to get your man talking if you're not going to listen.

Since SOA lower barriers, we must rethink the security approaches. Applications can no longer be in charge of security. That is, security models cannot be hard-coded into applications.

Pizzaa ja pastaa ei koskaan syödä samalla aterialla. Ja kun nyt kerran annetaan neuvoja, niin tässä vielä yksi, jota ei koskaan ole toistettu liikaa: Cappucinoa ei ikinä juoda ruuan jälkeen, maitokahvista puhumattakaan. Ikinä!

The Ludovician is a predator, a shark. It feeds on human memories and the intrinsic sense of self. Ludovicians are solitary, fiercely territorial and methodical hunters. A Ludovician might select an individual human being as its prey animal and pursue and feed on that individual over the course of years, until that victim's memory and identity have been completely consumed. Sometimes, the target's body survives this ordeal and may go on to live a second twilight after the original self and memories have been taken. In time such person may establish a 'bolt-on' identity of their own, but the Ludovician will eventually catch the scent of this and return to complete its kill.

"At first, Event Data recorders were just for accidents, and then car rental companies began to use electronic monitoring to identify drivers who were speeding. These days, all new vehicles have attached the black box to the GPS device. Not only do they know the location of your car, but they can tell if you're accelerating, using the brakes, or wearing your seat belt."
"How did they get away with this?"
Mother Blessing pried off the panel, exposing the car's air bag system. "If privacy had a gravestone it might read: 'Don't Worry. This Was for Your Own Good.'"

There are two types of people who come from Brocton. The ones who try to make it putting away pennies every week - what the Government doesn't take, the Church will - and the one who keep on waiting, watching, keeping their eyes peeled for that on big score.

'The fact of it is,' said Monsieur Farigoule, the retired schoolmaster who gives regular dissertations from his perch by the village bar on the worsening state of the world, 'the plain fact of it is that the religion of the French is food. And wine, of course.' He tapped his empty glass with his fingernail to indicate that the might be persuaded to accept a refill. 'We worship the belly, and our high priests are chefs. We would rather sit and eat than kneel and pray. It pains me to say such things about my countrymen, but patriotic sentiment cannot be allowed to hide the truth.'

There are four acknowledged ways of meeting your maker: You can die by natural causes including illness; you can die by accident; you can die by another's hand; and you can die by your own hand. However, if you live in Washington, D.C., there is a fifth way of kicking the bucket: the political deadth. It can spring from many sources: frolicking in a public fountain with an exotic dancer who is not your spouse; stuffing bags of money in your pants when the payer unfortunately happens to be FBI; or covering up a bungled burglary when you call 1600 Pennsylvania Avenue home.

Their idea of power is Powerpoint. They got headsets on their heads and their fingers on keyboards and they think they're macho men when they're just half wimp and half machine. Nothing more than sports-drink-gulping, instant-message-sending, mouse-clicking. iPod-listening, web-surfing pussies, and God didn't mean for the likes of them to run this planet on the backs of real men.

Definition of integrative thinking:
The ability to face contructively the tension of opposing ideas and, instead of choosing one at the expense of the other, generate a creative resolution of the tension in the form of a new idea that contains elements of the opposing ideas but is superior to each.

The threat of global warming might be on everyone's lips, and the polar ice caps might indeed melt but not for a time. What's happening right now because of world-wide interconnection of insecure software gives social problems once limited by geography a new destructive range.

Every other manufacturing industry is subject to product liability laws holding them liable should they send defective products into the global stream of commerce. This is not true for software manufacturers.

The mafia is well known for offering people "a deal they cannot refuse". Of course, software buyers could refuse to sign adhesion contracts just as person could theoretically refuse a deal from the mafia. Both would do so at great personal expense, however. They are free but mordantly so.

The fact that software inevitability contains bugs is not a valid defense by software manufacturers. On the contrary, the software defects are inevitable explicitly dictates the need for applying strict liability.

The software crisis will be hugely expensive, either in the real cost of ignoring it or in the real cost of migitating its impact. It is up to us determine what costs we are willing to bear and the results we are willing to accept.

Being a designer or architect of a new system calls for very different skills from being the successful operator - or even builder - of an already designed business system.

Beliefs are hard to challenge, and even harder to change, particularly after they become translated into action rules and routines. It is easy to remember a rule, and follow it routinely, but to forget the underlying belief.

Cities, in Milgrim's experience, had a way of revealing themselves in the faces of their inhabitants, and particularly on their way to work in the morning. There was a sort of basic fuckedness index to be read, then, in faces that hadn't yet encountered the reality of whatever they were on their way to do.

Ubiikkiteknologian avulla syntyy nopeasti ja laajasti tietoa keräävä, analysoiva ja näiden tietojen perusteella automaattisesti toimintoja käynnistävä tietoympäristö. Sensorien, lukulaitteiden, valvontakameroiden ja verkkopalvelujen keräämää tietoa voidaan myös yhdistellä ja rakentaa
niistä uudenlaisia palveluja. Tehokkaammat tiedonkeruun, yhdistelyn, analysoinnin ja reagoinnin välineiden yhdistelmänä luovat kokonaan
uudenlaisen tietoympäristön.

Paratiisi vai panoptikon?

Riippuvuutemme teknisistä ratkaisuista antaa tekniikan tuottajille mahdollisuuden hallita arkielämäämme. Erilaiset palveluntuottajat tallentavat ja käsittelevät yhä enemmän henkilökohtaisia tietojamme, jotka liittyvät esimerkiksi maksuliikenteeseemme,valokuva-arkistoihimme ja sähköpostiliikenteeseemme. Halutessaan palvelujen tuottajat pystyvät käyttämään informaatiota tarkoituksiin, joihin emme ole osanneet varautua. Vaikka näin ei tapahtuisikaan, pelkkä tietoisuus mahdollisuudesta informaation hyödyntämiseen käyttäjän tietämättä lisää ihmisten epäluuloa ja voi aiheuttaa tekniikkavastaisuutta.

Silmät auki! Tietoyhteiskunnan uhat ja mahdollisuudet

The ultimate solution can only be an on-line credit transfer type of solution where the payer's bank identifies the customer using some kind of hardware solution with a PIN and some form of biological verification. This would point towards convergence of the identification process towards a general model used by all payment instruments.

Payment habits and trends in the changing e-landscape 2010+

A man's character is what he is; a man's reputation is what other people may imagine him to be.

Words can wound. They can destroy a persons' reputation, and in the process distort that persons' very identity. Nevertheless, we staunchly protect expression even when it can cause great damage because free speech is essential to our autonomy and to a democratic society. But protecting privacy and reputation is also necessary for autonomy and democracy. There is no easy solution to how to balance free speech with privacy and reputation. This balance isn't like the typical balance of civil liberties against the need for order and social control. Instead, it is a balance with liberty on both sides of the scale - freedom to speak and express oneself pitted agains freedom to ensure that our reputations aren't destroyed or our privacy isn't invaded.

The Future of Reputation

Muisto Führerin tapaamisesta oli yksi Rolfin vahvimmista muistikuvista - ja yksi salaisimmista. Hän olisi toisaalta halunnut ennen kuolemaansa siirtää sen jälkipolville sinänsä kiusallisena, mutta yhtä kaikki historiallisena tapahtumana, ellei häpeä olisi pakottanut vaikenemaan. Hän oli ollut lapsellinen ja ajattelematon noina vuosina, tieteellisen kunnianhimon sokaisema.

This is the Curse of Knowledge. Once we know something, we find it hard to imagine what it was like not to know it. Our knowledge has "cursed" us. And it becomes difficult for us to share our knowledge with others, because we can't readily re-create our listeners' state of mind.

 Here's our checklist for creating a successful idea: a Simple Unexcpected Concrete Credentialed Emotional Story (SUCCES).

Secession. What America did to itself. I mean - We fucking invented the modern world, Marsalis. We modelled it, on a continental scale, got it working, sold it to the rest of the world. Credit cards, popular air travel, global dataflow. Spaceflight. Nanotech. We put all that in place, you know? And then we let a bunch of fucking Neanderthal bible-thumping lunatics tear it all to pieces? What the fuck is that, Marsalis?

Tällä hetkellä esimerkiksi raha on siirrettävissä yksilöiden välillä ulkomaille muilla järjestelmillä kuin pankkisiirrolla siten, että se on perillä muutamassa minuutissa. Vastaava toimitus pankkien maksuliikejärjestelmän kautta kestäisi useita päiviä...Perinteiset pankit argumentoivat, että rahanvälitys koskee useimmiten pieniä summia ja että laki rajoittaa heidän rahanvälitysnopeutta. Nämä väitteet pitänevät paikkansa, mutta tämä esimerkki osoittaa, että vanhalla tavalla verkottuneiden pankkien joukosta ei löytynyt riittävästi dynamiikkaa haastamaan omia vanhoja tapoja toimia.

PK-yritys 2.0

No matter how big the company, the majority of the world’s wisdom will always remain outside the company. In order to have all the possible resources available for its use, companies have to open up and invite customers – and even complete strangers – to develop its activities. The only way to get them involved is to give them something that will get them to participate. 

It was pointless trying to second-guess one's opponent, especially in wartime. The enemy rarely did what you wanted. You could study them, and plan for contingencies based on their capabilities, but once you began fantasizing that you actually knew their intentions...well, that was folly for decadent novelists, not for statesmen.

"Robbe, mikä mies se on, jolla ei ole maisterin papereita vaan pistooli?"
"Kusipää, jolla on pistooli."
"Hyvä.  Mikä mies se on, jolla on maisterin paperit muttei pistoolia?"
"Kusipää, jolla on maisterin paperit..."
"Hyvä. Mikä mies se on jolla on sekä maisterin paperit että pistooli?"
"Mies, isä!"
"Hyvä, Robertino!"

But do I worry about whether every little thing we do is ethical? No, because you can rationalize anything as ethical. You talk to criminal - a tax dodger, a serial killer, a child abuser - and every one of them will justify their actions. They'll explain to you, totally seriously, why they had to do what they did. Why they're still good people. That's the thing: when people talk about the importance of ethics, they never include themselves. The day anyone, anywhere, admits that they personally are unethical, I'll start taking that whole issue seriously.

There on the receipt was proof that the injection had worked. Not only had it worked, but he had a viable output windows. He could see the results of the injection. This was so much more than he had hoped for...Just looking at a SQL error on a receipt was strange. Receipts had always been useless pieces of paper, but this one was solid gold.

You can build a company that is virtually error and mistake free. You can build a company that is highly adaptable. But you can't do both. In this sense, perfection is the enemy of progress.

Many people make the mistake of believing that building security into information systems is simply a matter of referring to a checklist of technical and procedural controls and applying the appropriate security measures on the list.

"Well, gentleman," the prime minister said after everyone had taken their seats. "The darkest day is upon us, but if we are marked to die, we are enough to do our country loss; and if to live, the fewer men the greater share of honor."
Shakespeare's words fell though four hundreds years into the taut silence of the room.

Each company has one official org chart because the flow of authority needs to be simple and unambiguous for legal reasons, not just to create an efficient decision structure. The chart works in those capacities because it has so much white space. But in the emptiness that simplicity requires, how many different social networks actually exist? "How many do you want?" Krebs answers promptly. Do you want map who works with whom, who talks with whom, who knows whom, who respects whom, who enjoys whom? Do you want to map the path of memos, emails, instant messages, phone calls, and hallway conversations? Do you want to map it all over time? Social networks are necessarily loose-edged and impossible to make fully explicit. If your aim is to come up with a map as simple, uniform, comprehensive, orderly, and explicit as McCallum's, you need to ask only one question: To whom do you report? But if that's all you see, your world is neat, incomplete, misleading, and boring.

Moraali mitataan yön pimeydessä, raivon ytimessä.

Web 2.0:n suurin ansio onkin ehkä juuri siinä, että se nosti näkyviin ensimmäisen kerran kokonaisvaltaisesti monia, mutta ei läheskään kaikkia, internetin yksittäisiä evoluutiopolkuja. Ne olisivat edenneet ilman erityistä termiäkin. Mutta niiden tarkastelu kokonaisuutena on luonut uusia palveluita, jotka yhdistelevät polkuja aiempaa tehokkaammin ja näin ovat kiihdyttäneet kokonaiskehitystä.

http://www.tieke.fi/mp/db/file_library/x/IMG/20815/file/julkaisu_28.pdf

Mktg case study #1: Triple your price. This gives customers the impression of great quality. Helps profits, too.

"You have to remember, Betsy, " Schoendienst would say, "that D.C. is not about solving problems. If we solved problems, there would be nothing else left to do and we would all have to go out and do something honest - like fry hamburgers. No, D.C. is about keeping jobs, which we do by managing problems. There is no higher achievement than making a problem your own, managing that problem, nurtuting that problem along until you've made it to retirement and hopefully mentored a whole new generation of young bureaucrats to whom you can bequeath the problem."

Confucius once said "Who must do hard things? He who can." With Confucius in mind, let's try something hard: mapping information security to the Balanced Scorecard without changing any of the perspectives. In other words, using the Financial, Customer, Internal Process and Learning and Growth Perspectives - straight up.

"They talk about free enterprise but in America it's a myth. They talk about a level playing fields, ha! It's tilted sideways," Sacco declared, "so that every last penny rolls into Bill Gates's pocket. That four-eyed fucker's wired himself a monopoly over the whole damn universe!"

-"You hear what Utrech announced yesterday? They harvested bull stem cells and cultured them in mouse testicles. I would say that is difficult. I would say that is fucking cutting edge."
-"Especially for the bulls."
-"I don't see anything funny here."
-"Can't you imagine the poor mice, dragging around giant purple bulls' balls?"
-"Still not laughing..."

The first and most pervasive cause I see for failures in the software field is our inability to estimate...Why do we so badly at estimation? Probably because we still don't understand this infant field of ours...Why does it matter that our estimates are so bad? Because we are trying to manage to them...I personally believe that the "software crisis," the saying that software is "always over budget, behind schedule, and unreliable," is almost single-handedly caused by poor estimation. If that is so, then this is clearly the most important problem in software engineering.

It wasn't the size of the dog in the fight, it was the size of the fight in the dog.

True sales champions can sit there quietly all day if they have to. It's not easy. You want to say something. but don't. Keep your mouth shut.

You can relax and trust your training. you know you're good.
You can count on coming out of anything alive, you're so damned good.
Say it to yourself: I will live and prosper, and the bad guys will rue the day.

The new art and science of wikinomics is based on four powerful new ideas: openness, peering, sharing, and acting globally.

If God is so smart, why do you fart?

"Tässä tapauksessa salakirjoitusmenetelmä on kokonaan muistiin perustuva yhdistetty korvaus- ja peittomenetelmä numerotekstillä. Siinä otetaan suomenkielisen tekstin ja siihen kuuluvan otsikon merkeille niiden koodiarvot koodiavainsanan mukaan laadittavasta koodipohjasta, jolloin sadaan pohjateksti. Peittojonon avainlauseen merkkien koodipohjasta otetut koodiarvot muodostavat peittopohjan, joka peitetään valitun avainluvun ja siitä muodostuvan täyttöryhmän ohjauksella muodostetulla apupeittojonolla..."
Tönäisin Hirveä olkapäähän niin että se putosi tuolilta.
"Nämä jää joskus soittamaan samaa raitaa. Niitä pitää silloin tällöin hetkauttaa."
Mutka kertoi Pionerskajan radio- ja vakoilukoulussa Moskovan lähellä törmänneensä tyyppiin. Se oli yleismaailmallinen eikä sitä voinut parantaa.

Kolme keskeistä nykyaikaiselta johtajalta vaadittavaa piirrettä (ovat): visioinnin taito, vuorovaikutusorientoituneisuus sekä kyky keskustella niin ylemmän johdon kuin muiden organisaation osien kanssa.

Vielä 1990-luvulla vallinnut teknologiavetoisuus turvallisuuden veturina on muuttunut. Tietotekniikka turvallisuuden veturina on menettänyt määräävän roolinsa ja on osa kokonaisturvallisuutta.

Chief executives don't want a security manager who constantly tells them what they can't do. They want people who will help them to push the boundaries without unduly compromising the company. This means they need people who understand the realities of doing business and who are not security purist.

The Business of Resilience - Corporate security for 21st century 

Point-to-point integraatiossa kokonaisuutta ei voida hahmottaa, ja tietovirtojen tietämys vaipuu hyvin tekniselle asiantuntijatasolle, jolloin prosessien hallinta ei ole lainkaan liiketoiminnasta vastaavien käsissä. Tällaisessa ympäristössä harrastetaan puhdasta asiantuntijavaltaa integraatiotasolla ja toimitaan tekniikan ehdoilla.

She'd often said that without GPS coverage the modern military couldn't find its own arse with both hands in a small, well-lit room. The joke had come back to bite her.

"He has his agents in our city, just as I have in this. So I will do him the courtesy of telling him formally what he will in any case know. That is called politics, Vimes. It is a thing we try to do in the government."
"But...spies? I thought we were chums with the Low King!"
"Of course we are," said Vetenari. "And the more we know about each other, the friendlier we shall remain. We'd hardly bother to spy on our enemies. What would be the point?"

Te suomalaiset olettekin helvetin paljon valmiimpia ottamaan riskejä kuin ruotsalaiset.

The first time an organization deploys an enterprise Web Service, quite a bit of effort will necessary go into answering questions about what the service should provide for itself versus what it should be provided by its underlying infrastructure. Over time, as the organization deploys more services and creates a richer domain and enclave infrastructure, the simpler the questions and their answers become.

"Kun olet komedia-alalla, saat palkkaa jostain, johon sinun todennäköisesti pitäisi saada hoitoa."

Tietoturvallisuus on pieniä tekoja osana jokapäiväistä toimintaa.

The investigation was stale - the poor girl had been dead for more than four years - but it was time to nail someone.

"I want to be clear about this so you understand. If I have to pull my weapon I'll shoot to kill."

Space, let me repeat, is enormous. The average distance between stars out there is over 30 million million kilometers. Even at speeds approaching those of light, these are fantastically challenging distances for any travelling individual. Of course, it is possible that alien beings travel billions of miles to amuse themselves by planting crop circles in Wiltshire or frightening the daylight out of some poor guy in a pickup truck on a lonely road in Arizona, but it does seem unlikely.

If your engineers know nothing about basic security tenets, common security bug types, basic security design, there really is no reasonable change that they will produce secure software. We say this because on average, software engineers know very little about software security. By security, we don't mean understanding security features; we mean understanding what it takes to build and delive secure features.

"All cosmologists know that sun is fueled by fusion fire. What most cosmologists don't know is that only the innermost heart of the sun is fusion reactor. The rest of it is special effects..."

The reasons for this collective failure of the Web development community are many and varied:
- We underestimated the target that Web servers would become
- We rushed too quickly into Web development, forgetting the lessons we had learned from traditional software development projects
- We forgot that the Web is different

The first, and most important ability you can develop in a flat world is the ability to "learn how to learn" - to constantly absorb, and teach yourself, new ways of doing old things or new ways of doing new things.

This is why we fight wars, we humans, he thought; this is why we play this game with the highest of stakes: not for profit, or power, or territory, but for this intense pleasure. Kipling is right: war is fun. It is the dark secret of our kind.

Siniset meret tarkoittavat kaikkia niitä aloja, joita ei vielä ole olemassa; ne ovat tuntemattomia markkinoita.

Sinisille merille ovat ominaisia hyödyntämätön markkinatila, kysynnän aikaansaaminen ja erittäin kannattavan kasvun mahdollisuudet.

You can't hold firewalls and intrusion detection systems accountable. You can only hold people accountable.

Poker is not a game of cards played with money. Poker is a game of money played with cards.

Pokerissa voittamisessa on kyse vain kahdesta asiasta:
1) pistä voittava käsi tienaamaan, ja
2) pistä häviävä käsi voittamaan

Jos pelaa pokeria voittaakseen rahaa, ei pidä haaskata aikaansa hyviin vastustajiin. Voittamalla hyviä pelaajia saat paljon mainetta ja kunnioitusta, mutta vähän mammonaa. Voittamalla heikkoja vastustajia saat vähän mainetta mutta paljon mammonaa.

Jos katsot ympärillesi etkä näe yhtään hölmöä, se olet luultavasti sinä.

"There are three things, and three things only, that can lift the pain of mortality and ease the ravages of life," said Spider. "These things are wine, women and song."

We don't see things as they are. We see things as we are.

Red Hammernut was not a complicated or ruminative person; he was a pragmatist and a fixer and a kicker of asses. He didn't believe in fate or karma or the fortuitous alignment of the constellations. If a tide of bad shit was rolling his way, it meant that somebody down the line has fucked up.

My psychiatrist at the time, Dr. Janet Kim, offered the suggestion that I was "not myself" during this period, and has hinted that "perhaps" drugs and alcohol were "key factors" in what was a "delusional state".

That which is not understood in life is often mistrusted, and there is no reason that information security should be an exception to that rule.

Layer 1 security is rarely an issue on wired networks, but it should always be investigated first on wireless nets.

Use a technolgy which the engineer has developed, but use it with a humble and questioning spirit. Never allow technology to be your master, and never use it to gain mastery over others.

"You don't need to watch everyone if everyone believes they're being watched. Punishment isn't necessary, but the inevitability of punishment has to be programmed into the brain."

"Given all that I've seen, the only possible explanation is that you're a time traveller."
"Ah," Auger said. "That's the problem, you see. I mean, time travel is definitely involved here, but not in quite the way you're thinking."
"It isn't?"
"No. But you're half right. You see, one of the two people in this ship is a time traveller. And it isn't me. Do you want me to carry on?"

Security is an emergent property of a software system. A security problem is more likely to arise because of a problem in a system's standard-issue part (say, the interface to the database module) than in some given security feature.

One cautionary note precedes all others, however, when it comes to security equipment - especially the 'high-tech' variety. Most security equipment salespeople carry business cards identifying them as 'security consultants'. Most of them are not. Salespeople have one interest - to sell you the equipment their company manufactures. If it makes CCTV systems, don't expect them to tell you that what you need is a new alarm system or new gates. You will be told that what you need is CCTV, and that their company is the market leader.

Työyhteisön pitkittyneissä ongelmatilanteisa ihmiset usein tietävät, että jotakin pitäisi tehdä, mutta kukaan ei ota tehtäväkseen tilanteen korjaamista. Syynä on se, että vallitsevien ongelmien kanssa on kuitenkin totuttu elämään ja siksi oletetaan, että niiden kanssa jotenkin selvitään jatkossakin tyytymättömyydestä huolimatta. Sen sijaan ongelmiin tarttuminen nostaa pintaan monenlaisia pelkoja siitä, millaista mielipahaa tai harmia epäkohtien käsittely saattaisi aikaansaada. Siksi työyhteisö kokee turvallisemmaksi pysyä ongelmallisessa mutta tutussa tilanteessa kuin ottaa riski, että saavutettu tasapaino horjuu.

Teksti oli kuin aikakapseli suoraan kristinuskon syntyajalta. Ikämääritys oli lahjomaton. Saara tunsi sisällään täydellisen varmuuden. Tuomaan evankeliumi oli vanhin teksti, ja se oli säilynyt koskemattomana - toisin kuin Uuden testamentin evankeliumit, joita kirkko oli moneen kertaan toimittanut.
Juuri tässä oli yksi syy siihen, miksi kirkko ei ollut tahtonut hyväksyä Tuomaan evankeliumia: siihen kirjatuissa Jeesuksen sanoissa nimenomaan painotetaan, ettei ihmisen tule antaa henkistä ohjaustaan kenenkään ulkopuolisen käsiin.

One of the video camera images caught her eye - a well-heeled fellow walked into the café, ID badge and proxy access card dangling jauntily from his lapel, an proclaiming him an employee of a large nearby investment firm. Natasha zoomed in with the camera, captured the image on the badge, entered it into the databanks, and took several shots of the fellow. The Café had a client who'd expressed interest in marks from this particular firm..even if the fellow declined to pay with a credit card or sign up for their regular biometric coffee service, she now had a name and ID number for them. Natasha made a mental note to investigate more closely the possibility of remote proxy card and RFID readers for the staff to use at moment like this - having the ability to read and duplicate the guy's access card would be a valuable bonus to her clients.

That was an important rule of any game: always make it easy for people to give you money.

The averaging gets to be a problem. I think the single biggest problem afflicting large companies is the difficulty of assigning value to each person's work. For the most part they punt. In a big company you get paid a fairly predictable salary for working fairly hard. You're expected not to be obviously incompetent or lazy, but you're not excpected to devote your whole life to your work.
...
Companies are not set up to reward people, who want to do this [work harder]. You can't go to your boss and say, I'd like to start working ten times as hard, so will you please pay me ten times as much? For one thing, the official fiction is that you are already working as hard as you can. But a more serious problem is that the company has no way of measuring the value of your work.

Salesmen are exception. It's easy to measure how much revenue their generate, and they're usually paid a percentage of it. If a salesman wants to work harder, he can just start doing it, and he will automatically get paid proportionally more.

There is one other job besides sales where big companies can hire first-rate people: in the top-management jobs. And for the same reason: their performance can be measured.

There is thought and there is action. Do not confuse the two. When the time comes to act, your thought must already be complete. There will be no room for it when the action begins.

They were testing programs that would intercept phone messages - the implication was all phone messages - and would analyze conversations for words and phrases that might indicate illegal activity.
"Wouldn't a terrorist talk in code?"
"I don't know, a lot of them are kinda stupid. Even if it didn't work on terrorists, if they got this set up, it sure would let them fuck with everybody else."

Valveutuneen riskienhallinnan avulla yritys kykenee toimimaan tavanomaisista poikkeavissa tilanteissa. Hyvin laaditut strategiatkaan eivät auta, jos yritys on laiminlyönyt toimintojen jatkuvuuden varmistamisen. Riskienhallinta vaatii pitkäaikaista panostusta, ja riskikysymyksiä on sitouduttava hoitamaan huoellisesti ja kärsivällisesti vuodesta toiseen.

Viestintä on hyvin satunnainen tapahtuma, jossa vastaanottaja viime kädessä antaa sanomalle merkityksen, teki lähettäjä mitä tahansa.

"It's a very simple plan, gentlemen. It's a question of who kills him."

As a purist whose primary is to make your system secure, you might not be willing to give up a single security feature in favor of any other. But with such an outlook you are likely to fail: others will treat you as a security fanatic who is ignorant of what it means to build a practical system. By being adamant about security to the detriment of other features, you will lose most arguments over system design alternatives, and the system you are trying to influence will probably end up with few meaningful security capabilities. You are more likely to succeed in your goal of establishing a secure system if you remain pragmatic, keeping the primary goals of the system in mind and compromising on nonessential points at appropriate times.

One question people frequently ask me is, "What percent of my budget should be allocated to security?" I really hate that question, because it demonstrates an ignorance of risk. A security program budget should be determined by examining where your security program needs to be, where you are now, and then how you will get to where you need to be.

Most hackers are not technically adept. It is no more reasonable to consider a hacker a computer genius than it is to call a teenager holding a gun a master criminal. Both demonstrate the ability to find the tools of their craft and the willingness to use them. This is hardly genius.

Although it is important for an awareness program to ensure that the right things are covered, the critical success factor for an awareness program is the delivery methods. The advice must be simple. It must be made personal. The awareness program must be ongoing and almost ubiquitous to the day-to-day operations. Advice is generally plentiful and useless. Advice that is realistic, understandable, actionable, and repeated is useful.

Jo TERAn aulassa näkyi asenne, joka yksikön luoneilla veteraaneilla oli: ei sormenjälki-, silmänpohja-, tai iiristunnistimia eikä sirukortteja, vaan ihminen, joka tunsi pienen yksikön jokaisen työntekijän.

Landon looked in amazement. One of the free fallers, an obese woman, maneuvered toward the window. She was being buffeted by the air currents but grinned and flashed Langdon the thumbs-up sign. Langdon smiled weakly and returned the gesture, wondering if she knew it was the ancient phallic symbol for masculine virility.

"We used to have saying, ´It's not the heat...´"
"´...it's the humidity.´"
"We'd never say anything that stupid," Andreno said.
"We used to say, it's not the heat, it's the assholes. Goddamn hot nights, no air-conditioning, what are you gonna do? You're are gonna whack the old lady around, that's what. You get nights like this one's gonna be, there'll be people smacking people all over town."
"Maybe you oughta provide air-conditioning as a public service," Lucas suggested.
"It'd be a plan," Andreno said, seriously. "It'd stop more bullshit than a lot of other plans."

"Do you really think we can afford to have the developing world develop? You think we could have survived the rise of a modern, articulated Chinese superpower twenty years ago? You think we could manage an Africa full of countries run by intelligent, uncorrupted democrats? Or a Latin America run by men like Barranco? Just imagine it for a moment. Whole populations getting educated, and healthy, and secure, and aspirational. Women's rights, for Christ's sake. We can't afford these things to happen, Chris. Who's going to soak up our subsidised food surplus for us? Who's going to make our shoes and shirts? Who's going to supply us with cheap labour and cheap raw material? Who's going to store our nuclear waste, balance out our CO2 misdemeanours? Who's going to buy our arms?"

I walked into this classroom full of law enforcement officers and said, "Do you guys recognize any of these names?" I read off a list of the names. One federal officer explained, "Those are judges in the U.S. District Court in Seattle." And I said, "Well, I have a password file here with 26 passwords cracked." Those federal officers about turned green.

When implemented properly, SETUP attacks give the manufacturer your private keys in such a way that you cannot detect the transgression without reverse engineering the card. In the case of RSA, for example, by virtue of publishing your public key you are giving your corresponding private key to the manufacturer when the manufacturer implements the malicious key generation algorithm. Given the current state of industry standards there is little reason to trust any smart card whatsoever unless you trust the manufacturer entirely. As PKI takes root, the potential payoff for a company that carries out a SETUP attack will only increase.

As far as solving cases went, shaking down suspects to give up other suspects worked better than ballistics and forensics every time.

"Fire you?" Meacham looked as if I'd said something in Serbo-Croatian. "You think I'm talking about firing you? You're a smart guy, you're good at computers and math, you can add, right? So maybe you can add up these numbers. Embezzling funds, that gets you five years of imprisonment and a two-hundred-fifty-thousand-dollar fine. Wire fraud and mail fraud, that's another five years in prison, but wait - if the fraud affects a financial institution - and lucky you, you fucked with our bank and the recipient bank, your lucky day, you little shit - that brings it up to thirty years in prison and a one-million-dollar fine. you tracking? What's that, thirty-five years in prison? And we haven't even got into forgery and computer crimes, gathering information in a protected computer to steal data, that'll get you anywhere from one year to twenty years in prison and more fines. So what have we got so far, forty, fifty, fifty-five years in prison? You're twenty-six now, you'll be, let's see, eighty-one when you get out."

The suit looks at him, annoyed that he is interrupted in his wonderful promotion-supporting presentation. "What exactly do you mean?" he asks back. "Well," Dizzy says, "let's just for a moment assume that someone broke into the WGate system. What open ports would he see to the AGate box and what protocols will run there?" The question hangs in the room for a moment, then the head of the suit consulting team, probably thirty-something years old and the living incarnation of Barbie's Ken says, "Let's try to not get sidetracked here. The SAP ITS communication architecture is used by many important customers and there have never been any problems with it. And additionally, we already placed a firewall between the two systems. So I don't see how these technical details would help us in the current context. We can provide you with the documentation for the product if you are not familiar with it."

On paradoksi, että ne jotka eniten pelkäävät muutoksen haittapuolia, joutuvat ennen pitkää kokemaan juuri muutoksen haittapuolet.

"Oh, it was quite straightforward once I started thinking about it," said Blouse. "It was excatly the same when I had to redesign the department's filing system, you see. People build something that works. Then circumstances change, and they have to tinker with it to make it continue to work, and they are so busy tinkering, that they cannot see that a much better idea would be to build a whole new system to deal with new circumstances. But to an outsider, the idea is obvious."

"I mean, people don't have drug-dealers any more, or psychoanalysts - they have brokers. At least with getting high or being in analysis, it was about you - you were the subject, to be mangled or untangled or whatever - but playing the markets is like surrendering yourself to this vast, impersonal system. It just generates and then feeds off...greed..and it's not as if it's your own individual greed either, it's the same greed as everyone else's. You ever been to Vegas, Mr Spinola? Ever seen those big rooms with the rows and rows of slot machines? Acres of them? I think the stock market today is like that - all these sad, desperate people planted in front of machines just dreaming of the big score they're going to make."

Mikään kriisi ei ole niin vaikea, ettei sitä voisi epäonnistuneella salaamisella vielä pahentaa.

"I am leading to the notion of social control, Peter. To the requirement of every sovereign state to exert control over the behaviour ot its citizens, to keep them orderly and reasonably docile. To keep them driving on the right side of the road - or the left, as the case may be. To keep them paying taxes. And of course we know that social control is best managed through fear."

Generally, as out society relies more on having Internet communications ubiquitously available, the motivations for selectively disrupting them will increase. In the future, the preferred elementary school student excuse for not having completed an assignment might switch from "the dog ate my network" to "DDoS took down the class Web site."

There is a fundamental flaw with the approach that most organizations adopt when it comes to practicing information security. Our natural tendency is to treat information security like  we do many of our other technical practices; throw a lot of money, a handful of technologies, and a lineup of gurus in for a few weeks and then wait for an ending whistle to blow and a nice pie chart to print out. Unfortunately, this is not the way security works.

"You have a lot of faith in your [virus] checker," Violet said, "for a product with buffer-overrun issues."

Lääkkeet, pankkikortti ja matkapuhelin. Niillä pärjää.

Intelligence is nothing more than discussing things with others. Limitless wisdom comes from this. Humanity is something done for the sake of others, simply comparing oneself with them and putting them in the fore. Courage is gritting one's teeth; it is simply doing that and pushing ahead, paying no attention to the circumstances. Anything that seems above these three is not necessary to be known.

Kaikkien aikojen mahtavin imperiumi raiskasi meitä moraalisesti mutta kun aloimme vaatia säännöllisistä raiskauksista säännöllistä korvausta, se ei enää ollut raiskausta vaan maailman vanhimman ammatin harjoittamista valtiotasolla. Me tarjosimme päiväkahvia ja kyllä me otimme pullaa.
Ostakaa meiltä viisi miljoonaa taskutonta toppatakkia.
Ostakaa meiltä jäänmurtajia.
Ostakaa meiltä kombinaatteja.
Ostakaa meiltä koneita ja laitteita.
Ostakaa meiltä vehkeitä ja vekottimia ettei näyttäisi siltä kuin myisimme itsenäisyyttämme.
Ryssä pysähtyi kesällä 1944 Kannakselle, mutta sen varjo jatkoi matkaa ja peitti koko maan.

A good threat model cannot be created by simply brainstorming an adversary's possible intentions. Creating a good threat model requires a more systematic approach. Threats must be determined not by revelations or luck, but by understanding the application's entry points, assets of interest, and requisite trust levels.

If you're winnin', never quit. If you're losin', never quit. If you're hurt, never quit.

Since it is logistically impossible to expect everything, we will teach you not to expect anything. That way, you will be ready for it.

Because attacks are becoming more sophisticated, the notion of what kind of vulnerabilities actually matter is constantly changing. Timing attacks are now common, whereas only a few years ago they were considered exotic. Similarly, two-stage buffer overflow attacks involving the use of trampolines were once the domain of software scientists, but are now used in 0day exploits.

Rather than being reactive, "playing the hand of cards they are dealt," DR planners will need to become more proactive in their efforts. They will need to begin to interact with application architects on an ongoing basis and to begin addressing the recoverability of applications, storage, and IT infrastructure while they are still in their initial design phases. DR planning can no longer be conceived as a "bolt on" or an afterthought: it must become an integral part of systems development.

http://www.drplanning.org/

Perusoikeudet velvoittavat ennen kaikkea lainsäätäjää, eli valtion on huolehdittava lainsäädäntötoimin siitä, että perustuslaissa taatut oikeudet toteutuvat eri elämänalueilla. Lisäksi perusoikeudet on otettava huomioon käytännön hallinnossa ja tuomioistuintoiminnassa. Perusoikeuksilla on siten ollut merkitystä erityisesti julkisen vallan ja yksilön välisissä suhteissa. Tätä kutsutaan perusoikeuksien vertikaalivaikutukseksi.

Vertikaalivaikutusten lisäksi perusoikeuksilla katsotaan olevan horisontaalivaikutus, eli niillä on merkitystä myös yksilöiden keskinäisissä suhteissa. Horisontaalivaikutus voi tulla esiin esimerkiksi yksityisen työntekijän ja työnantajan välisessä oikeussuhteessa. Horisontaalivaikutuksen käytännön merkitys ei kuitenkaan ole osoitettavissa selvästi. Se voi periaatteessa olla välitöntä, jolloin yksilö voi vedota tuomioistuimessa suoraan perustuslain mukaisiin oikeuksiinsa ilman alemmanasteisen lainsäädännön välitystä. Välillinen horisontaalivaikutus taas tarkoittaa sitä, että perusoikeuksiin ei voi vedota suoraan, mutta tavallista lakia sovellettaessa on otettava huomioon perusoikeuksien olemassaolo. Välillinen horisontaalivaikutus vaikuttaa esimerkiksi tavallisen lain tulkintaan, ja tämän ajattelutavan mukaan laki saa sisältöä perusoikeuksista.

Suomen perusoikeusuudistuksessa on lähdetty siitä, että perusoikeuksilla on tietty horisontaalivaikutus, mutta yleensä se on välillistä. Yksilö ei näin ollen voisi vedota tuomioistuimessa suoraan ja pelkästään perustuslain mukaisiin oikeuksiinsa.

Security personnel for politicians never understood the situation, and they hated that fact. They were hired guns, kept in the dark, never sure whether to stand firm in their orders or risk losing their jobs by mule-headely ignoring some obvious crisis.

"Gentlemen, not only does the face of Mona Lisa look androgynous, but her name is an anagram of the divine union of male and female. And that, my friends, is Da Vinci's little secret, and the reason for Mona Lisa's knowing smile."

RBAC is more general than either MAC or DAC. Unlike MAC, which was designed to prevent unauthorized information flow, RBAC is policy-independent, meaning that it can support a variety of policies.


The power to destroy a thing is the absolute control over it.

Alä koskaan anna kahta nuolta aloittelijalle. Jos hänelle antaa kaksi nuolta, tulee hänen mielessään aina olemaan ajatus, että hänellä on vielä varanuoli...


"So who were the guys that grabbed me in the parking lot? Mister Wood and Mister Stone? Who were they?"
Wednesday grunted. "Just spooks. Members of opposition. Black hats."
"I think," said Shadow, "that they think they're the white hats."
"Of course they do. There's never been a true war that wasn't fought between two sets of people who were certain they were in right. The really dangerous people believe that they are doing whatever they are doing solely and only because it is without question the right thing to do. And that is what makes them dangerous."


- Kuolema on varjo, josta emme koskaan pääse eroon. jonakin päivänä tuo varjo muuttuu villieläimeksi, jota emme enää pysty pitämään poissa kimpustamme.
- Toivon, että paranen.
- Jos ette parane, niin suosittelen Bachia. Se on ainut lääke, josta on jotain apua. Siitä saa lohdutusta, hitusen kivunlievitystä, tietyn määrän rohkeutta.


You realize that the important parts of culture are essentially invisible. Culture at this deeper level can be thought of as the shared mental model that the members of an organization hold and take for granted. They cannot readily tell you what their culture is, any more than fish, if they could talk, could tell you what water is.


See, there was the hard way to do things and there was the easy way. The hard way looked good at the time; in fact, it looked like the only way. But it upset your stomach and could break your knuckles. It produces blind spots that could mess you up and cause pain, not to mention losing your ass. The easy way required thinking and remaining cool. Not standing-around cool, but authentic genuine cool. Cool when you wanted to smash something or break down a door. No, hold it right there. Think how to do it the easy way. Then turn the knob gently and the door opens.


To be somebody or to do something. In life there is often a roll call. that's when you will have to make a decision. To be or to do? Which way will you go?


U.N. law governing transfer and ownership of war viruses was clear to the point of bluntness. Inert viral forms could be owned as subjects for study, or even, as one bizarre test case had proved, private trophies. Ownership or sale of an active military virus, or the codes whereby a dormant virus could be activated, was a U.N. indictable offense, punishable with anything between a hundred and two hundred years storage. In the event of the virus actually being deployed, the sentence could be upped to erasure. Naturally these penalties were applicable only to private citizens, not military commanders or govenment executives. The powerful are jealous of their toys.


Information is a product. You can buy it, trick someone out of it, extort it. Muscle it over to your side of the table...even dig for it yourself. But there's no Consumer Reports for the product. You don't always get what you pay for. You have to put it together, piece by piece, always testing the next chunk against what you've got so far. One little flaw in the logic chain, and the gun doesn't fire. Or it blows up in your hand.


The maddog left the recorder's office an walked through another glorious fall day to the library, to the crime section, and began pulling out confessional books by burglars. They were intended, their authors said, to help homeowners protect their property.

From a different perspective, they were also a short course in burglary. He has studied a couple of them before he went into Carla Ruiz' studio. They helped. The maddog believed in libraries.


"And you learned?"

"What breeds respect. Not to walk away from a fight. Take a beating if you have to, but a beating's never as bad as the feeling of shame you get when you back off."

"That's your youth talking right there," said Strange. "One day you're gonna learn, it's all right to walk away."


Similar to software debugging, reverse engineering by definition goes in reverse. In other words, you must be able to think backward. Zen meditation skills will serve you better than many years of formal education training. If you are good at solving verbal brain-teaser riddles on long trips with friends, you will be probably good at RCE. In fact, master reverses like +Fravia recommend cracking while intoxicated with a mixture of strong alcoholic beverages. While for health reasons we cannot recommend this method, you may find that a relaxing cup of hot tea unwinds your mind and allows you to think in revers.


Nick Naylor had been called many things since becoming chief skokesman for the Academy of Tobacco Studies, but until now no one had actually compared him to Satan.


Little did I care. I was telling the truth and damning the consequences. I was a local hero. Subscriptions jumped to almost three thousand. Ad revenue doubled. Not only was I shining a new ligh into the county, I was making money at the same time.


Intelligence gathering had never been easier. Codes intercepted by the NSA entered TRANSLTR as totally illegible ciphers and were spit out minutes later as perfectly readable cleartext. No more secrets.


I guess it would even be possible to knock the server down just by visiting http://payment.example/default.asp?id=3;SHUTDOWN  (Hey, don't do it!)


Individuals, as we've seen, don't care much about privacy in the aggregate at all: Faced with a choice between privacy and exposure, many people would rather be exposed than be private, because the crowd demands no less. Concerned mainly about controlling the conditions of their own exposure, many people are only too happy to reveal themselves promiscuously if they have the illusion of control.


Lyhyesti sanottuna ihmisen elämä on kriisistä toiseen etenevää matkaa. Aivan kuin olisitte tivolin kummitusjunassa seisaallanne ja selkä menosuuntaan: näette vain menneen ja tämän hetken ettekä koskaan tiedä, milloin iskette takaraivonne seuraavaan kattoparruun. Mutta varmasti iskette. Sellaista on elämä.


At the core of the design in the superworm is the use of an anonymous Chord network. Through the use of the Chord system, each node in the network can be reached by any other node at a maximum of O (log N) hops. Furthermore, any node only has to keep track of O (log N) of its peers. For a network of 10 million nodes, a maximum distance of 23 hops separates any two nodes or entries in its host table. The dramatic reduction in the network view for any node immediately assists in the scaling of the worm network for a fully connected system.


A security pattern describes a particular recurring security problem that arises in a specific security context and presents a well-proven generic scheme for a security solution.


Monessa liemessä keitetty: Positiivinen ilmaus henkilöstä, jonka elämänkokemus on karttunut monissa ammateissa. Executive product program manager, joka on työskennellyt viiden viime vuoden aikana viidessä työpaikassa, on monessa liemessä keitetty. Siivousteknikko, jolla on samassa ajassa yhtä monta työnantajaa, on tiimityöskentelyyn sopeutumaton tulevaisuuden syrjäytyjä. Sanonnan gastronomisesta ilmiasusta huolimatta elintarvikealalla ei tunneta useammassa liemessä keittämistä.


"I can't believe she'd kill her husband for money. She seemed so devoted to him."

"Sean, for you all intelligence and sophistication, sweetie, you really know shit about women."


That was always the dream, wasn't it? I wish I'd known then what I know now? But when you got older you found out that you now wasn't you then. You then was a twerp. You then was what you had to be to start out on the rocky road of becoming you now, and one of the rocky patches on that road was being a twerp.


Phrenology, as everyone knows, is a way of reading someone's character, aptitude and abilities by examining the bumps and hollows on their head. Therefore - according to the kind of logical thinking that characterizes the Ankh-Morpok mind - it should be possible to mould someone's character by giving them carefully graded bumps in all the right places. You can go into a shop and order an artistic temperament with a tendency to introspection and side order of hysteria. What you actually get is hit on the head with the selection of diferent size mallets, but it creates employment and keeps the money in circulation, and that's the main thing.


If you want to spend your time "putting out fires," do it right - join the fire department because you will not be a successful ISSO.


Kaiken kaikkiaan Sonera on varoittava esimerkki siitä, mitä tapahtuu, kun omistajaohjaus ontuu ja sisäinen hallinto romahtaa. Pörssiyhtiölle valtio-omistus on edelleen riski. Kun ministeri vaihtuu, yhtiön strategia voi vaihtua sen mukana. Politiikka ja populismi alkavat ohjata yhtiön käyttäytymistä, kuten Soneran optiopäätös ja päätöksen peruminen keväällää 2001 osoittavat.


Moottorit ovat esimerkiksi miehisiä....Mutta voiko mies ommella ompelukoneella? Vispata kermaa sähkövatkaimella? Lypsää lehmiä lypsykoneella? Tai tyhjentää astioita pesukoneesta? Voiko tosimies imuroida autonsa ja silti säilyttää kasvonsa. Siinäpä teille muutama kysymys pohdittavaksi.


It's strange how hacker's mind work. You might think that white hat hackers would be on one end of the spectrum and black hat hackers on the other. On the contrary, they are both at the same end of the spectrum, with the rest of the world on the other end. There really is no difference between responsible hacking and evil hacking. Either way, it's hacking. The only difference is the content. Perhaps that's why it's so natural for a black hat to go white, and why it's so easy for a white hat to go black. The line between the two is fine, mostly defined by ethics and law. To the hacker, ethics and laws have holes, just like anything else.


What the journalists don't understand is that, given a slightly different set of chilhood influences, hackers would be wearing rubber forehead prostheses and talking Klingon at Start Trek conventions. They're just immature, poorly socialized punks; they are not a military or social threat to the world order.


When the new U.S. Embassy building in Moscow was being constructed in the 1980s, Navy Seabees (construction specialists) were brought in to monitor the movements of the Russian workers, some of whom were thought to be KGB spies. One Seabee considered himself an expert in the field of espionage - after all, he'd read nearly every James Bond novel. He suggested to his fellow Seabees that each day, while they were working at the embassy site, the KGB was entering their hotel rooms and searching their luggage. So the clever Seabee devised a trap: He rigged a piece of luggage with a can of shaving cream that would discharge on the person attempting an unauthorized opening.

At the conclusion of work that day, he and his colleagues rushed back to his room to see if the trap had worked. And it had. The suitcase was partially open, and shaving cream was all over the place. While congratulating himself for outwitting the KGB, the Seabee detected an odd odor. He opened the luggage and discovered that someone had defecated on his packed clothes. Moral of the story: Never claim to know spy shit unless you really do.


Snort is dependent on libpcap to be portable to almost every OS. Libpcap is a great sniffing library, but it was never intended to acquire traffic beyond a saturated 100 Mb pipe. Snort really starts to gasp for air above 100 Mb, even with Barnyard installed.


Muori virnisti. "Sekin on eräänlaista magiaa."

"Mitä, asioiden tietäminen vai?"

"Sellaisten asioiden, mitä toiset ihmiset eivät tiedä."


When the technology is changing beneath your feet daily, there is not much point in hiring for a specific, soon-to-be-obsolete set of skills. You have to try to hire for a general problem-solving capacity, however difficult that may be.

Five pirates on an island have one hundred gold coins to split among themselves. They divide the loot as follows: The senior pirate proposes a division, and everyone votes on it. Provided at least half the pirates vote for the proposal, they split the coins that way. If not, they kill the senior pirate and start over. The most senior (surviving) pirate proposes his own division plan, and they vote by the same rule and either divide the loot of kill the senior pirate, as the case may be. The process continues until one plan is accepted. Suppose you are the senior pirate. What division do you propose? (The pirates are all extremely logical and greedy, and all want to live.)


Suomessa tehtiin maailman ensimmäinen graafinen web-selain, Erwise.

Erwise oli suomalaisen tietoyhteiskuntakehityksen käännekohta. Se tehtiin TKK:n opiskelijatyönä hypertekstin selaamiseen. Sitten se heitettiin roskiin. Kenellekään ei tullut mieleen tuotteistaa järjestelmää. Erwisen demossa kerrottiin, että "World Wide Web on työkaluohjelmisto, jonka avulla on mahdollista toteuttaa sähköinen tietosanakirja".


Web Services change the risk levels associated with deploying software because of the increased ability to access data, and as a consequence, security is becoming an important design issue for any e-business software component.


Critical security vulnerabilities can often result not from coding or design mistakes, but merely from unanticipated interactions between system elements that by themselves are neither unsecure nor badly engineered.

As a bridge-playing expert that we know observed after a disastrous tournament result, "No one made any mistakes. Only the result was ridiculous."


Nokia spends about a hundred times more money per phone on battery security than on communications security. The security system senses when a consumer uses a third-party battery and switches the phone into maximum power-consumption mode; the point is to ensure that consumers buy only Nokia batteries. Nokia is prepared to spend a considerable amount of money solving a security problem it perceives - it loses revenue if customers buy batteries from someone else - even thought that solution is detrimential to consumers. Nokia is much less willing to make trade-offs for a security problem that consumers have.


"You know, Kidd, you told me once that revenge doesn't make any sense, because the dead guy won't know what you're doing and won't care, because he's dead. So what I'm wondering is, What are we doing?. Jack won't know and Jack won't care."


Though the intent of the Movie [War Games] was to warn audiences across North America that crackers could break into any computer system, as the 414-gang had, many viewers walked away from the film perceiving that attractive youg women could actually become attracted to previously ignored computer geeks.

In the world of computers, he was Zyklon, the aggressive "cracker" named after a poison gas, who had the skill to break into the Web sites of movie studios, universities, and even the Chinese government.
But on the other side of the monitor - according to federal prosecutors-Zyklon was really Eric Burns, a lanky, shy 19-year-old, a former student at Shorewood High School with few friends, several run-ins with the law, and an unhealthy obsession with a woman who didn't know anything about him.

He had some classes with her and she was dating someone else and he would tell you how much he loved her on these sites. One of his friends showed her [what he'd done] and I don't think she liked it very much. I don't think many high school girls are impressed with someone hacking a Web site in their name...Flowers and a poem might have gotten the job done better.


Jälleen yksi opetus, hän sanoi.  - Vaikka asiat suunnittelisi kuinka hyvin, aina tapahtuu jotain yllättävää. Mutta juuri siksi tarkka suunitelma on välttämätön. Jos sellainen on olemassa, niin on olemassa myös improvisoinnin mahdollisuus. Jos asiat eivät ole järjetyksessä, yllätykset aiheuttavat vain kaaosta ja sekaannusta.


Security has discovered an extra bag and was now determined to match it with a passanger - a primitive, yet effective deterrent to nonsuicidal bombers. Simon chukled to himself - in the hightech world of computers, X-ray scanners, and bomb-sniffing machines, the ultimate safety measure came down to each passanger having to step forward, stick out a finger, and point.


Solutions nearly always come from the direction you least expect, which means there's no point trying to look in that direction because it won't be coming from there.


The Master said, 'To lead uninstructed people to war, is to throw them away.'


'I always hate having to do that,' Palloid muttered. 'Goddam lawyers.'

'Signatures can be forged, Pal. Same with fingerprints, cryptociphers, and retinal scans. But a soul-seal is unique.'


"Look, that's why there's rules, understand? So that you think before you break 'em." 
-- Lu-Tze


Turner showed him how to press his palm against a glass pad and stare into a retinal scanner. "It knows you", Turner said. "Better still, it likes you."

"Thank god," Dicken said

"Security is god here," Turner said. "The atomic age was a firecracker compared with what's on the other side of that door."


Without numbers, there are no odds and no probabilities; without odds and probabilities, the only way to deal with risk is to appeal to the gods and the fates. Without numbers, risk is wholly a matter of gut.


Traditional bugs are found by looking for behaviors that don't work as specified. Security bugs are found by ignoring the specifications and looking instead at additional behaviors, their side effects, and the implications of interactions between the software and its environment.


The battle analogy is a useful way to think about software testing. A good wartime general can get into the mind of his enemy, understand what capabilities the enemy possesses, and create ways of disrupting those capabilities.


There is a misguided belief in the market that people who can break into systems are also the people who can secure them. Hence, there a lot of would-be consultants who believe that they need some trophies mounted on their wall for people to take them seriously. You don't want your product to be a head on someone's wall!


There has been a gradual paradigm shift in the way security is viewed, from one of risk to reward.


Buffer overflow problems have been known for 40 years. Perfectly good solutions to avoid them have been available for the same amount of time. Some of the earliest high-level programming languages, such as Algol 60, completely solved the problem by introducing mandatory array bounds checking. Even so, buffer overflows cause about half of the security problems on the Internet. And still people refuse to banish them by using better tools. We consider this criminal negligence. It is comparable to a car manufacturer making the gas tank out of waxed paper. Sure, if everything goes right, there's no problem, but we'd throw the CEO into jail all the same. For some reason, large part of our IT industry act as if they were not responsible for the consequences of their actions. With this prevailing attitude, we sometimes wonder whether it's worth attempting something as advanced as cryptography at all.


Because the XMLDSIG standard provides a very flexible digital signature mechanism, there are lots of ways to misuse it and produce insecure or misleading results.


Luotettavuus, toimintavarmuus on määritelty "kohteen kykynä pystyä suorittamaan vaaditut toiminnat määritellyissä olosuhteissa ja määrättynä ajanjaksona. Teknologian alue, joka pyrkii paikallistamaan kohteen viat ja löytämään keinoja niiden eliminoimiseksi".


Delivery on a new Gulfstream 5 would be a minimum of twenty-two months, probably more, but the delay was not the biggest obstacle. The current price tag was $44 million, fully loaded, of course, with all the latest gadgets and toys.


They (Arkan, Basaev, Catli) all began with back-alley shooting and ended up in economics. This is the natural career arc of a modern warlord. Sooner or later he comes to realize that true domination is about the money and not about the guns. Because money will get you guns much more easily than guns will ever get you money. Some dealt drugs, some dealt arms, but all three of them dealt in oil. Drugs are toxic, and arms often more trouble than they are worth. But no modern society can exist without oil.

In the world's black markets, the dieselashi is king. Even the squeamish Americans will climb out of their Stealth planes and risk a bloody land war for the black gold of the oil fields. For both the New World Order and the New World Disorder, oil is the number one source of global insecurity. Without question, oil is the most dangerous contraband in the world.


The challenge is to ensure that the firewall rules are in sync with the Web Services themselves - and it seems obvious that UDDI and WDSL should be used for this purpose.

The next challenge is to ensure that only permitted traffic travels out of the network to third-party Web Services.


A fact about JAR files that many developers don't know is that they can also be used for security purposes, both allowing code to be signed and by allowing the packages they contain to be sealed.


When Hans Kruuk studied hyenas in the Serengeti, he found that putting paint on an animal quaranteed it would be killed in the next attack. That was the power of difference.

So the message was simple. Stay together. Stay the same.


She knows, now, absolutely, hearing the white noise that is London, that Damien's theory of jet lag is correct: that her mortal soul is leagues behind her, being reeled in on some ghostly umbilical down the vanished wake of the plane that brought her here, hundreds of thousands of feet above Atlantic. Souls can't move quickly, and are left behind, and must be awaited, upon arrival, like lost luggage.


There are many things experts can see that are invisible to everyone else:


There are two guidelines for a reliable alerting mechanism: Keep it simple, and keep it redundant. Keeping alerts simple means to use known, stable technology that consistently works. Yes, it would be great to have XML-based alerting mechanism that tunnel over the Internet, using SSL for encryption and certificate keys for authentication. Then these alerting mechanisms would upload into an interactive database that calls a user's home phone number and in a computer-generated voice explains the situation to the security administration. While highly secure and functional, would it work? The more complexity and pieces you add to the process, the more likely something will break down somewhere.


There's a fine line between healthy mistrust of humanity and outright paranoia. It's perfectly okay to think that Microsoft is cloning huge attack dogs to further its goal of total global domination, but you don't want to say it out loud. Then, when the dogs attack, and you're the only one wearing Kevlar underpants, you'll have the last laugh.


They say a lie can run round the world before the truth has got its boots on.


He watched Lamar move slowly through the courtyard, not too fast like he was scared, chin level, squared up. Strange thinking, You learned early, Lamar, and well. To know how to walk in a place like this was a key, a basic tool for survival. Your body language showed fear, you weren't nothin' but prey.


Finally Brian spoke. "Why didn't you say something when I sent that email with the product specs and source code?"

"What email!?"

Brian stiffened. "Oh...shit!"

(see the missing chapter, http://www.wired.com/news/culture/0,1284,56187,00.html


Hunter's First Law: The network is an amplifier

Hunter's Second Law: When everything is known, no one knows everything

Second Corollary: People see only what they want to see, and that's usually what lies on the path of least resistance.

Third Corollary: People mostly see the exceptions: those things at the very bottom, or very top, of any scale.


What a laugh, though. To think that one human being could ever really know another. You could get used to each other, get so habituated that you could speak their words along with them, but you never knew why other people said what they said or did what they did, because they never even knew themselves. Nobody understands nobody.

And yet somehow we live together, mostly in peace, and get things done with a high enough success rate that people keep trying. Human beings get married and a lot of marriages work, and they have children and most of them grow up to be decent people, and they have schools and businesses and factories and farms that have results at some level of acceptability - all without having a clue what's going on inside anybody's head.

Muddling through, that's what human beings do.


Suurin harppaus sitten SIM-korttien käyttöönoton tullaan ottamaan lähivuosina pankkimaailmassa. EMV-standardin käyttöönotto tulee korvaamaan nykyiset magneettijuovat älykorteilla vuoteen 2002 mennessä.


We start confusing quality with elegance, brightness, weight, and other subjective things. Then even those get compared when we talk about good quality, bad quality, high and low quality, and all those things. So far today we've used the word quality fifteen or twenty times, and each meaning has been different. If we're going to have a quality improvement program, we have to agree on what the word means. We don't want an elegance improvement program, do we?


For anyone who has assempled even the most rudimentary Web site, you know this is a daunting task. Faced with the security limitations of existing protocols like HTTP, as well as the ever-accelerating onslaught of new technologies like WebDAV and XML Web Services, the act of designing and implementing a secure Web application can present a challenge of Gordian complexity.


Sekä TSM (Total Safety Management) että TSEM (Total Safety and Environmental Management System)  ovat sellaisenaan ominaisuuksiltaan rajoittuneita soveltumaan joustavasti kokonaisvaltaisen yritysturvallisuusjohtamisen malleiksi...laadunkehittämisen mallit (ISO9000, TQM) kokonaisuutena soveltuvat selkeästi paremmin yritysturvallisuuden johtamisen malliksi kuin perinteiset turvallisuusjohtamisen mallit.


Kun kansalaisten toiminta paljastuu yhä selvemmin valvojille, näiden tulee paljastaa vastaavasti omaa toimintaansa ja sitä, mitä kerätyillä tiedoilla tehdään. Valvonta ei saa johtaa yksipuoliseen kontrolliin, vaan molemminpuolisen avoimuuden lisääntymiseen.


Most software process definitions lump security into the same class as other non-functional system requirements, such as reliability, availability, portability, performance, and testability. Security does not belong within a system in a same manner as these other non-funtional requirements, however, and cannot be treated in a uniform manner.

We believe that this situation is a fundamental cause of many of the difficulties associated with introducing security into a system's architecture.


I imagine one could say: "Why don't you leave me alone?! I want no part of your Internet, of your technological civilization, of your network society! I just want to live my life!"  Well, if this is your position, I have bad news for you. If you do not care about the networks, the networks will care about you, anyway. For as long as you want to live in society, at this time and in this place, you will have to deal with the network society. Beacuse we live in the Internet Galaxy.


Mortlach 16-year-old 43%

Massiivinen tuoksu: lihaisa, savuinen ja nahkainen, siitä löytyy myös mehiläisvahaa, kuivattua luumua ja palo cortado-sherryä. Maku tulvii pitkin kitalakea jättäen jälkeensä parkittua nahkaa, mustaherukkaa ja kriikunaa. Suunnaton. ****


Remember, the enemy's gate is down


A belief in God would demand one hundred percent obsessive devotion, influencing every waking moment of this brief life on earth. But your four billion so-called believers do not live their lives in that fashion, except for a few. The majority believe in the usefulness of their beliefs - an earthly and practical utility - but they don't believe in the underlying reality.


Maybe the hardest game on the planet is convincing a hooker you're not a trick.


If there's no punishment, there's no discipline.


Harri Koponen toimi aiemmin Ericssonin USA:n matkapuhelinmyynnin vice presidenttinä eli hän ei ollut Ericssonin ylimmän johdon jäsen, vaan kuului välijohtoon. Koposella ei ole akateemista loppututkintoa. Markkinat ja asiantuntijat olivat pettyneitä siihen, että Soneran oli pakko tyytyä näin kevyen sarjan toimitusjohtajaan. Koponen on kuitenkin huimasti parempi ratkaisu Soneran toimitusjohtajana kuin Relanderin jatko tehtävässään. Jos Relanderin tilalla Soneraa olisi vuosina 2000–2001 johtanut vaikkapa kummituseläin Papua Uusi Guineasta, olisi Sonera nyt kaikin puolin huimasti paremmassa kunnossa.


Pakkanen on tappanut enemmän suomalaisia kuin sota.


I have also been involved in numerous dot-com companies and high-tech firms throughout the country where nobody but the original programmer ever sees the computer code that gets installed in the final system.


But Hiram, his troubles dismissed, grasped the implications immediately. He glared into the air. "I wonder how many of them are watching us right now?"
Mavens said, "Who?"
"In the future. Don't you see? If he's right this is a turning point in history, this moment, right here and right now, the invention of this, this past viewer. Probably the air around us is fizzing with WormCam viewpoints, sent by future historians. Biographers. Hagiographers."
He lifted up his head and bared his teeth. "Are you watching me? Are you? Do you remember my name? I'm Hiram Patterson! Hah! See what I did, you arseholes!"

And in the corridors of the future, innumerable watchers met his challenging gaze.


There is simply no substitute for applications that employ secure defaults.


The coding cowboy's day is done. There was a time when everyone admired the brilliant programmer who worked in self-imposed isolation, creating powerful functions and elegant user interfaces, ingratiating himself with the user community while ignoring his colleagues and his project manager. He had the panache of a rock star and the vanity of a prima donna. Unfortunately, when he rode off into the sunset his code turned out to be undocumented, unextendable, and unmaintainable.


If death could snatch such heavy hitters as Elvis and JFK, a nobody like me is easy pickings.


Never trust anyone you don't understand.


"Did you get a phone call from someone you love?" Cousins asked.

"Yeah," I said.

"Your dead wife?"

"Yeah..."


"What was your cut?" Ray asked.

"Fifty percent off the top for the lawyers, then expenses, the rest went to the clients. That's the bad part of a contingency contract - you have to give half to the client. Anyway, I had other lawyers to deal with, but I walked away with three hundred million and some change. That's the beauty of mass torts, Ray. Sign 'em up by the truckload, settle 'em by the trainload, take half off the top"


So the Web is moving from what we could call the HTML Web - the Web that Tim Berners-Lee developed to publish information - to what will be a next-generation semantic Web, in which information will still be linked and so forth but won't be intended principally for human consumption. It will be intended and structured for processing by software, and if that happens we'll still call it the Web but it will be based not on HTML but on XML. Still, my guess is that the next big Web will be something more - something that we haven't thought of yet or that Tim Berners-Lee hasn't thought of yet, because that's the way it usually goes on the Web. Surprise, surprise, surprise.

...

"The Internet was never built for commerce!" they swoon. "The purpose of the Internet was..." - and then they simply make up stuff about what the purpose was, as if it matters what the purpose was at the beginning. It doesn't matter what was, it just matters what is. And what the Internet has proven, despite the inflation and deflation of the dot-com bubble, is the future of commerce.

Bob Metcalfe


An investment is not a statement of who you are. Stocks are simply a way to increase your wealth.


Sivistys, niin kuin sen itse ymmärrän, on ensisijaisesti vapaa-ajan tuote. Sivistyksen taito on siis ennen kaikkea vetelehtimisen taitoa. Se, joka on kaikkein viisaimmin jouten, on kiinalaisesta näkökulmasta kaikkein sivistynein. Kiireen ja viisauden välillä näyttää nimittäin olevan filosofinen ristiriita. Viisaat eivät pidä kiirettä, ja liian kiireiset eivät voi olla viisaita. Viisain on siis se, joka vetelehtii kaikkein kauneimmin.

Lin Yutang, 1938


Even if you trust a man not to play certain cards, there's no point in dealing them to him.


Suomessa analyytikot ovat tuttuja vieraita yritysten hiihtomatkoilla Saariselällä. Jopa viikon kestävät kevätseminaarit sisältävät vähän asiaa ja paljon vapaa-aikaa. Analyytikot ovat päässeet nauttimaan yritysten vieraanvaraisuudesta myös formulakisoihin maailman kilparadoille. Kyllä toimitajiakin Lappiin kutsutaan ja heihin yritetään vaikuttaa, mutta yritysjohdon ja analyytikkojen välinen kanssakäyminen on suoraviivaisempaa. Jos analyytikko pettää luottamuksen, ja laatii negatiivisen raportin, sen tuntee helposti nahoissan.


"Here, my dear, is what we did last Christmas. Six thousand, one hundred dollars we spent on Christmas. Six thousand, one hundred dollars."

"I heard you the first time."

"And precious little to show for it. The vast majority of it down the drain. Wasted. And that , of course, does not include my time, your time, the traffic, stress, worry, bickering, ill-will, sleep loss - all the wonderful things that we pour into the holiday season."


Oma periaatteeni on aina ollut, ettei mulkkujen kanssa tehdä päivääkään töitä, ja  uskon että valtaosalla wapitilaisista oli sama filosofia. Niinpä yksi tärkeimmistä keinoista pitää ihmiset töissä on olla olematta mulkku.


Bad software is to blame.


Viime kädessä yrityksen tai palveluyrityksen toimitusjohtaja vastaa siitä, että yrityksen järjestelmät tuottavat oikeaa tietoa.


Kuten vanha sijoitussääntö kuuluu: sijoittamisessa täytyy muistaa vain kaksi asiaa.

1) Älä koskaan häviä rahaa.
2) Muista aina sääntö numero 1.


Laitakari puhui kiihkeästi."...jos analysoitte meidän tuotteitamme, huomaatte että olemme edelläkävijöitä. Olemme kehittäneet ensimmäisen langattomien lähiverkkojen tietoturvan takaavan..."

Tommilan kuiva nauru keskeytti Laitakarin vuodatuksen: "Ensimmäinen ei mekitse mitään. Boeing 747:n siipien väli on pidempi kuin Wrightin veljesten ensimmäinen lento. Me olemme kehittänet teidän ainoan kunnollisen tuotteenne toimivaksi", hän sanoi.


Nyt alkaa juhlivan viherväen ja jopa rauhallisuudestaan kuuluisan kuuluttajan kärsivällisyys pettää. Kun osallistutaan tällaisille päiville, joilla pohditaan maapallon tulevaisuutta, niin kannattaa vähän miettiä, miten käyttäytyy. Muut on otettava huomioon. Siis kerran vielä. Olkaamme toistemme veljiä. Ystävällisesti pyydämme tätä mulkkua, joka ei voi millään siirtää Ford Escortia Yleisradion auton edestä, siirtämään sen purkkinsa ja sassiin. Tiedonvälitys kärsii. Sananvapautta rajotetaan. Siirrä heti, kuka oletkin arvoisa kansalainen, autosi vittuun.


Four basic values of project management:


Overnight the Finns had gone from being celebrated mainly for their tendency to drink too much and then kill themselves to being heralded as the geniuses who built the most advanced communications industry on the planet. They done this in spite of being personally uncommunicative, the only people I have ever met who, as they become drunk, grew even more silent.


Vuonna 1986 Kairamo puhui Tukholmassa suomalais-ruotsalaisen kauppakamarin 50-vuotisjuhlilla. Hänen aiheensa oli varsinaisesti "Pohjoismainen teollisuus ja pohjoismaiset yritykset". Puhe saavutti huippukohtansa, kun Kairamo otti taskustaan kännykkänsä, joka oli liitetty puhujapöntön mikrofoniin. Hän soitti Tukholman taksikeskukseen tilatakseen taksin. Hän odotti ja odotti. Mitään ei tapahtunut. Sitten puhelunvälittäjä vastaa:
- Ei ole vapaita autoja. Joudutte odottamaan hetken.
Näin Kari Kairamo havainnollisti, mihin kilpailun rajoitukset johtavat.


People in the computer industry are well aware of the innumerable difficulties, but they sometimes defend their failed practices as part of the price we must pay for progress and innovation. One often hears the statement "There are always bugs." Such an outlook makes it sound as if defective products and flawed systems are inevitable. And it quickly becomes an excuse for shoddy work - software products that are badly designed, poorly tested and rushed into the marketplace.


A recurring theme is the correlation between quality and security. For example, it has been shown that investment in software quality will reduce the incidence of computer security problems, regardless of whether security was a target of a quality program or not; and that most effective quality measure from the security point of view is the code walk through.


Yhtiön tärkein yksittäinen menestystekijä on sen toimitusjohtaja. Loppujen lopuksi yhtiön menestys tai menestymättömyys riippuu ratkaisevasti yhden henkilön taitavuudesta ja tarmokkuudesta. Sijoitus pörssiosakkeeseen on samalla sijoitus ihmiseen. Pörssiyhtiöitä verrataan tunnuslukujen valossa, mutta yhtä tärkeää on selvittää tunnuslukujen taustat. Liikeyritys ei ole mitään ilman ihmisiä ja erityisesti sen avainhenkilöä, joka kantaa vastuun päätöksistä.


Anyway, my sister was telling me how she thought that Stephen was a cyber virgin, or did she say virtual virgin?

Oh dear, now what was the distinction again?

You know, a cyber virgin has never had intercourse outside of virtual reality, whereas a virtual virgin has never had intercourse with a real person, even in virtual reality.

How about someone who has never been intimate with a real or simulated person in real or virtual reality?

Hmm, we don't seem to have a term for that.


There has never been a lack of hostile people with a motive to attack. Aggression is as old as Cain and Abel. Until recently, very few people had the means or the opportunity. The geometric growth of the Internet has provided attackers with these last two ingredients.

One result of the Internet's growth has been an upsurge of attacks against people, products, and institutions that can be launched anonymously and, therefore, with impunity. Fake names and addresses easily conceal the true identity of the user. The Internet thus allow anyone to make fun of Mike Tyson's lisp from the safety of his own den, something he would never do if he saw Tyson on the street.


What would be the point of cyphering messages that very clever enemies couldn't break? You'd end up not knowing what they thought you thought they were thinking...


On May 3, 1863, Idestam visited Lüders's factory and persuaded his colleagues to demonstrate the operations of the mill. As they were displaying the new manufacturing equipment, Lüders heard of the presentation and rushed to the scene. He had spent years designing the new process, had invested significant capital in the new machinery. and had no desire to be a gracious host. Lüders ejected Idestam for trying to gather information on a proprietary technology - what he deemed to be industrial espionage. Despite the precipitous end to Idestam's visit, he had seen and heard enough to believe he could create in Finland what he had seen in Germany.


Humans are destined to be party animals, and technology will follow.


Don't design your CRM systems from the inside out to serve your employees. Design them from the outside in to serve your customers...Then give that same information and assistance to the employees who serve your customers...Once you've provided customers and customer-facing employees with the information and streamlined processes that customers care about, you can add functionality that may be of value to your direct sales organization or to your marketing department.


That's the thing about being a Labrador retriever - you were born to fun. Seldom was you loopy, freewheeling mind cluttered by contemplation, and never at all by somber worry; every day was a romp. What else could there possibly be to life? Eating was a thrill. Pissing was a treat. Shitting was joy. And licking your own balls? Bliss. And everywhere you went were gullible humans who patted and hugged and fussed over you.


Security staff are paid to be paranoid. It's a definite job requirement and should be listed in the job advertisements.


The NSA, the CIA, and the FBI all want to prove they are the best at apprehending criminals, so the president gives them a test. He releases a rabbit into the forest and commands each of them to catch it. The NSA places animal informants throughout the forest and interrogates all plant and mineral witnesses. After three months of extensive investigation, it concludes that rabbits do not exist. The CIA, after two weeks with no leads, burns down the forest, killing everything in it, including the rabbit, which an unnamed agency source announces had it coming. The FBI takes only two hours to emerge from the forest with a badly beaten bear. The bear is yelling: "Okay, okay, I'm the rabbit, I'm the rabbit."


None of the architectures is perfect for all situations. Each PKI architechture has its own strengths and weaknesses. By understanding your organization and its requirements, you will be able to choose the architecture that best meets those needs: 


Did these pioneers of cryptography indeed use their own system to protect their ideas? "I remember our decision was, 'Naaah, it's too much trouble,' " says Adleman. "Too much work to encrypt it. And we never did." The irony was lost on them. But the reality was they were harboring big-time hopes for a technology that even its inventors considered a pain in the ass to use!


In the past, you belonged to the elite when you no longer had to run from one place to the next, working all the time; nowadays, the elite consists of people perennially on the move, taking care of urgent business on their mobile phones and always trying to survive some deadline.

http://www.hackerethic.org/


GNU/Linux and the open source projects are not about software code only - they are also about freedom, sharing, and community; they are about creation, beauty, and what hackers call "fun" - though "joy" would be nearer the mark. They are about the code within that is at the root of all that is best in us, that rebels against the worst, and that will exist as long as humanity endures.


He'd have furnished it (the gun) with no questions asked. But now I'd have to get it somewhere else. Because now he would know what I wanted it for. He might provide it, but my asking for it would be an abuse of our friendship. And that is something I take seriously. like sobriety, or suicide.


They were farmers, hardworking men who embraced pessimism only when discussing the weather and the crops. There were too much sun, or too much rain, or the threat of floods in the lowlands, or the rising prices of seed and fertilizer, or the uncertainties of the markets. On the most perfect of days, my mother would quietly say to me, "Don't worry. The men will find something to worry about."


While inside DeTeMobil, SKiMo also learned how to interpret some of the mapping and signal-strength data. The result? If one of the company's customers has his mobile turned on, SKiMo says he can pinpoint the customer's geographic location to within one kilometre. The customer doesn't even have to be talking on the mobile. All he has to do is have the phone turned on, waiting to receive calls. 

SKiMo tracked one customer for an afternoon, as the man travelled across Germany, then called the customer up. It turned out they spoke the same European language. 

`Why are you driving from Hamburg to Bremen with your phone on stand-by mode?' SKiMo asked. 

The customer freaked out. How did this stranger at the end of the phone know where he had been travelling? 

SKiMo said he was from Greenpeace. `Don't drive around so much. It creates pollution,' he told the bewildered mobile customer. Then he told the customer about the importance of conserving energy and how prolonged used of mobile phones affected certain parts of one's brain. 

http://www.underground-book.com/ 


From start the finish, it took the Bank of Bermuda 25 months to implement the PKI.

From start to finish, Perot Systems implemented PKI for VPN within 25 months.

Idaho National Engineering and Environmental Laboratory took just 17 months from conception to its first PKI production rollout.

It took U.S. Patent and Trademark Office just three months from the time it finished developing its master plan to deploying its first PKI pilot, and an additional 15 months for its first deployment for internal operations.

Where Ruesch knew that it would use some form of authentication and encryption, it took the company only six months to implement its PKI from start to finish.


The law and justice are not synonymous, amigo. Not in this country, not in my country, not in any country. Never have been. Never will be.


Mundus vult decipi


Poliitikolle ja sudelle oli yhteistä se, että molemmat hakivat johtajuutta. Oli raaka luonnonhistoriallinen totuus, että johdettavuus on ihmiselle ja monille muille nisäkkäille kuuluva tärkeä yhteinen biologinen ja periytyvä ominaisuus. Nisäkäs nimeltä Homo sapiens alistui vaistomaisesti johdettavaksi - ilman johtajuuden kunnioittamista lauma ja yhteisö ei toimisi.


Fermentaatio on taianomainen kemiallinen prosessi, jonka monimutkaista kulkua ei täysin tunneta. Tupakan kemiallinen koostumus muuttuu jokaisen fermentaatiovaiheen aikana. Nikotiinin, tervan, ammoniakin ynnä muiden epäpuhtauksien määrä vähenee ja tupakan happamuusaste alenee. Tämän seurauksena sikaritupakka on maukkaampaa, miellyttävämpää ja yleisen arvion  mukaan myös vähemmän haitallista kuin vähemmän käynyt tavallinen savuketupakka.


I have nothing more to say than this: We are all of us standing on the brink of Hell.


"Bless me, Fatha, for I have sin. I kill seven people that time I'm still a boy and we kill the inyenzi, the cockroaches. I kill four persons in the church the time you saying the Mass there and you see it happen. You know we kill five hundred in Nyundo before we come here and kill I think one hundred in this village before everybody run away."


This is the nature of the Internet. Flame wars target people with unpopular views, attack the weak networks, ignore the web sites with nothing to offer, and support an ecommerce engine bound to continue creating untold billions in paper wealth as we learn how to coexist with this global network we have built.


Dabbling in U.S. domestic politics, hackers have made their presence felt. In the early days of her campaign, some Web surfers found it impossible to reach Hillary Clinton's Web site (www.hillary2000.org). Their browsers would go automatically to a rival site (www.hillaryno.com), maintained by Friends of Giuliani (her former potential rival for a New your Seanate seat) instead.


Information security laws:


If J. Random Websurfer clicks on a button that promises dancing pigs on his computer monitor, and instead gets a hortatory message describing the potential dangers of the applet - he's going to choose dancing pigs over computer security any day.


The users of an intrusion detection system hold the keys to the ultimate success or failure of the technology. Knowledgeable users can compensate for the inherent weaknesses of a particular package, whereas inept or hostile users can nullify the value of even the best system design and implementation.


"Yksi tuttu investointipankkiiri kertoi minulle hiljattain, että heille oli tullut taas kolme kappaletta hakemuksia, joissa haettiin riskirahoitusta wappi-deitti-palvelun tekemiseen."

"Minähän olin revetä, kun tietää, miten vähän wappeja on ja minkälaisilla ihmisillä. Mieletön nissipalvelu: homoinsinöörit voi deittailla keskenään! Miksi rakentaa deittipalvelu sellaisille laitteille, joiden käyttäjäkunnassa ei ole yhtään naista?"

 Sallamaari Muhonen


A consistent directory strategy across and between enterprises is becoming more critical. This is due to the changing nature of business relationships and the need for more accurate information, reduced administration costs, and better security, as well as the complexity of distributed computing platforms.


Our boss came in and asked, "Wendl! What are you doing?"
 Wendl said, "I'm thinking." 
And the boss said, "Can't you do that at home?"


There's three things in software: quality, features and schedule. The problem is that you only get to pick two.


Unfortunately, this category of secrecy is itself so secret that its very existence is secret, and so he can't actually reveal it to anyone - unless he finds someone else with Ultra Mega clearance.


She was talking to a kid with brain damage, right? A kid who doesn't get out of the house too much, right, because he gets lost in the neighborhood? And she asked him if he had ever found a system that he couldn't eventually get into. And Matt Singer paused a long time before giving his considered response: No.


There are infinitely many ways to lose a day...but not even one to get one back.


Intrusion detection is the process of identifying and responding to malicious activitys targeted at computing and networking resources.


"Matter of fact, I got a car. An American fuckin' car. Made in the motor city US-fuckin'-A, out of sweat and American steel" - Wayne's voice began to rise - " not some fuckin' wop, faggot, greaseball-built pile of tin shit for queers! A Lamborghini! Bruce, I am surprised at you."


At conferences, the number one question people ask me is, "How much does it cost to build a good web
site?" What do these people want to hear? They want to hear some low number, so they can go ahead
with their plans. They expect me to say something like, "Well, for a small site, it's this much; for a
medium-sized site with a shopping cart, this much." They want to hear the secret to saving money.
Instead, I give the same answer every time: "How much does it cost to have a baby? The lifetime cost of
keeping your commitment is much higher than the initial cost of delivery."

http://www.futurizenow.com/


 

The history of computing is littered with unsuccessful standards that sought reliability through specification rather than experience.


IP networks and security technology will become increasingly integrated over the next several years. Regardless of organizational or philosophical barriers, network and security managers should plan on being bunkmates and close collaborators for the long term.


Networks become less like fixed plumbing and more like ad hoc furniture arrangements configured for particular, temporary purposes.


"It's called extortion, Quince, and you're caught. It's cruel and mean and criminal, and I don't care. I need money, and you have it."


She guessed that was what they meant by it being addictive. That she'd gotten just that little edge of it off the country singer sticking his tongue in her mouth and now the actual molecules of diz were twanging at receptor sites in her brain, saying gimme, gimme.


suomalaisten yritysten tietoturvallisuusasioiden ylläpitoon ja kehittämiseen liittyvät asiat ovat huonolla tasolla verrattuna vastaaviin hyvin hoidettuihin ulkomaalaisiin yrityksiin


You're too busy "doing business" to answer our e-mail? Oh gosh, sorry, gee, we'll come back later. Maybe.

http://www.cluetrain.com/


Enterprise Javabeans promises to revolutionize the way we think about developing mission-critical enterprise software. It combines server-side components with distributed object technologies such as CORBA and Java RMI to greatly simplify the task of application development. It automatically takes into account many of the requirements of business systems: security, resource pooling, persistence, concurrency, and tranactional integrity.


Within a day and a half, I had compromised twenty-eight of the company's twenty-nine top development projects and collected over a billion dollars' worth of sensitive information. And no one even noticed me.


En halunnut riitaa. En sanonut, että vain naiset pitivät keskustelua muusta elämästä irrallisena tapahtumana, jossa istutaan sohvalla, pidetään toista kädestä ja ynistään moneen kertaan sovittuja asioita. Tajusin, että minun pitäisi lähiaikoina käydä keskustelu, jossa käytetään ilmauksia "avautua" ja "voimmeko me kohdata ihmisinä". Otin kynän ruukusta ja merkitsin asian muistiin Hesarin kulmaan, jonka repäisin taskuuni. Vaimo kysyi mitä tein. Sanoin pelastavamme liittomme.


I just sat there and took it. The way I always do - fear and rage dancing inside me, nothing showing on my face.


"You're saying you get an indicator that she is returning before she has left?"


Security should present no impediment to the user in terms of hindering him/her from doing the tasks
that need to be done. Security should require of the user no special knowledge, should demand of the
user no special procedures, and should burden the user with no special delays.


"For years I've been waiting for nature to react our environmental bullshit, tell us to stop overpopulating
and depleting resources, to shut up and stop messing around and just die. Species-level apoptosis. I think
this could be the final warning - a real species killer"


"Time is a gentle deity," said Sophocles. Perhaps it was, for him. These days it cracks the whip.


The krewe always played poker with European cash. There was American cash around, flimsy plastic stuff, but most people wouldn't take American cash anymore. It was hard to take American cash seriously when it was no longer convertible outside U.S. borders. Besides, all the bigger bills were bugged.


Kun myynti sujuu, elämä hymyilee. Kun myynti ei suju, pyhimmätkin lehmät teurastetaan.


Out of the box, NT is configured to give away just about any piece of information a hacker would desire, and then some.


Nowhere is the labor market so twisted as in Silicon Valley. At the Shoreline Cineples in Mountain View, before the lights go down and the previews roll, all the ad slides between movie trivia questions are for jobs. Outside every expresso shop stand shiny blue news racks stuffed with thick, free career magazines: zero percent editorial, 100 percent recruitment advertising. One of the best ways to get rid of a troublesome coworker is simply to give out his name to a few headhunters, who will quickly bombard the guy with so many offers that he will resign on his own within the month. In the ultimate perversion, companies hire headhunters to telephone their own employees (without identifying that's who they're really working for), in order to discover which ones are unhappy and vulnerable to being picked off. Do they fire these troublemakers? Odds are they'll be placated with a raise or a spontaneous performance bonus of two thousand stock options.


The venator had looked at him. Peter had sensed the wildness and the pent-up fury. He felt as if he had stared into the throat of a tornado and just barely escaped.


1.Build a Brand That Stands for Solving Problems 
2.Allow Your prices to Fluctuate Freely with Supply and Demand 
3.Let Affiliate Partners Do Your Marketing for You 
4.Create Valuable Bundles of Information and Services 
5.Sell Custom-Made Products Online, Then Manufacture Them 
6.Add New Value to Transactions Between Buyers and Sellers 
7.Integrate Digital Commerce with Absolute Everything 


Roy looks at me, he says, "I'm getting out of here before I catch that new kind of AIDS." Boylan says, "What kind is that?" Roy says, "Hearing AIDS. You get it from listening to assholes."


You sure that's what you want to say? `If I was fucking with you, man, you'd know it?´ The `If I was fucking with you´ part is okay, if that's the way you want to go. But then,`you'd know it´- come on, you can do better than that.


The incident handling team needs to have a senior executive in the organization as its sponsor or champion. The handler must be able to look that very young, very successful program manager droid, who has axed many a promising technical person on a whim, in the eye and say, "Yes, I know how important this system is . We will save as much of data as your people have properly backed up, but the operating system is toast."


And down whirr I grew up, in Baker County, theh's a saying: "When the tailgate drops, the bullshit stops".

Yritykset, jotka hallitsevat asiakkuuksia verkossa, voivat ottaa vahvan roolin verkkokaupassa ilman, että niiden tarvitsee rakentaa toimitusketjua ja asiakaspalveluun liittyviä järjestelmiä. Nämä toiminnot voidaan ulkoistaa näille alueille erikoistuneille yrityksille.


Software is always whining at me with confirmation dialog boxes and bragging to me with unnecessary little status bars. I don't want or need to know how hard the computer is working. I am not interested in program's crisis of confidence about whether or not to purge its recycle bin. I don't want to hear its whining about not being sure where to put a file on disk. I don't need to hear the modem whistling or see information about computer's data transfer rates and it's loading sequence, any more than I need information about the bartender's divorce, the hairdresser's broken down car, or the doctor's alimony payments.


A system needed to be developed that has all the benefits of X.500, but which is easy to implement and runs on the widespread TCP/IP protocols. This is where LDAP comes in.


Information security is mostly an inarticulate, incomplete, incorrect folk art disguised as an engineering and business discipline.


"Victor," JD shouts from behind me. "Can you tell the difference between a platitude and a platypus?"
"One's a ... beaver?"
"Which one?"
"Oh god, this is hard," I moan. "Where's my publicist?"


Hyvän salausjärjestelmän tulee toteuttaa Kerckhoffin periaate (Auguste Kerckhoff, 1835-1903), minkä mukaan järjestelmä on varma, vaikka kaikki sen salaus- ja purkuprosessien yksityiskohdat julkistetaan lukuunottamatta salaista avainta.


Wow, look at all the places someone can screw up security!


LDAP directories have risen from a relatively obscure offshoot of an equally obscure field to become oneof the linchpins of modern computing on the Internet. Increasingly, LDAP directories are becoming the nerve center of an organization's computing infrastructure, providing naming, location, management, security and other services that have traditionally been provided by network operating systems.


Rottakuningas tarkoittaa sitä, että liian monta rottaa elää liian pienessä tilassa liian kovan paineen alaisena. Niiden hännät kietoutuvat yhteen ja mitä enemmän ne yrittävät ponnistella päästäkseen vapaiksi, sitä tiukemmaksi kiristyy solmu, joka sitoo ne yhteen, kunnes tuloksena on tiukasti yhteen kasvanutta kudosta,


I don't care who gets the money. But I do care very much who doesn't get it.


It is clear that over the next 10 to 20 years, the role and function of government will change more than it has over the previous 200 years.


Lähivuosina television, tietokoneiden, pelikoneiden ja pelihallien viihdetuotantoon on tulossa useita uusia muotoja (kyberelämät, pelimaailmat, virtuaaliseikkailut, oppimismaailmat, verkkoviihteen uudet muodot jne.). Oleellista on, että suuri osa niiden tuotannosta edellyttää isoja investointeja. Koska ihmisten elmästä todennäköisesti yhä suurempi osa kuluu viihteen parissa, viihteen tuotantotavoilla on huomattava merkitys. Tämä vaikuttaa mm. ihmisten asenteisiin ja arvoihin, maailmankuvaan, viihdetuottamisen muotoihin ja rakenteisiin, taloudellisiin rakenteisiin sekä jopa politiikan tekemisen muotoihin.


Noihin aikoihin hän löysi laboratorion roskakorista palkkashekin kannan. Se kuului eräälle teknikolle, joka oli tullut paikalle Portsmouhtista. He olivat ensiluokkaisia teknikkoja, ja koska he olivat teknikkoja, he saivat maksun ylitöistä. Insinöörit olivat ammattilaisia, heille ei niistä maksettu. 

Holberger silmäili kantaa. Hän ei voinut asialle mitään. Hän oli ällistynyt. Mekaanikot saivat yli kaksi kertaa enemmän kuin hän noiden ylitöidensä ansioista.

"Savolainen yritti kaapata lentokoneen - Finnair ei ostanut!"


"Kun alkaa vittuilla, pitää kanssa osata."


"Miten mehiläispuusta saa hunajaa", sanoi Puh kiireesti, koska hän ei halunnut jäädä keskustelusta syrjään
ja sitä paitsi halusi todella kuulla ratkaisun. "Se on pohdittava kysymys ja myös vaikeasti ratkaistava asia
jota koetetaan selvittää, jos mehiläiset ovat vastahakoisia."


If a civil liberties group can build a DES Cracker for $200,000, it's pretty likely that governments can do the same thing for under a million dollars. (That's a joke.) Given the budget and mission of the US National Security Agency, they must have started building DES Crackers many years ago. We would guess that they are now on their fourth or fifth generation of such devices. They are probably using chips that are much faster than the ones we used; modern processor chips can run at more than 300 MHz, eight times as fast as our 40 MHz chips. They probably have small "field" units that fit into a suitcase and crack DES in well under a day; as well as massive central units buried under Ft. Meade, that find the average DES key in seconds, or find thousands of DES keys in parallel, examining thousands of independent intercepted messages.


XML doesn't go nearly as far as SGML in requiring conformance to standards, but it may still come as a shock to HTML developers. XML standards refer to processors (parsers), not to browsers, because much XML development will be intended for machine-readable data applications rather than graphically exciting web pages.


- "All I can do is to quote Confucius's greatest line."
- "What's that?"
- "It beats the shit out of me, baby."


The most effective way to improve the performance of PC hardware running Windows is to erase Windows and install a version of Unix for Intel, such as Linux, Solaris x86, FreeBSD, BSDI, or SCO Unix.


It is a very humbling experience to make a multimillion-dollar mistake, but it is also very memorable.


The man-month is a fallacious and dangerous myth, for it implies that men and months are interchangeable.


How does a project get to be a year late?
...One day at a time.


Three axioms of insecurity:
1. Insecurity exists
2. Insecurity cannot be destroyed
3. Insecurity can be moved around

If you have to add a sign that says push or pull then this indicates that the door is not as simple as is possible; it's design is faulty. 


I perform keiko in order to strike just one perfect men.


Anything that make employees unhappy makes the stock price go up.


Search engines become bandages for sites with poorly designed browsing system.


How in hell can anyone disguise an entire star system?


Most projects are 10% ideas, 20% implementing them, and 70% communication.


Few false ideas have more firmly gripped the minds of so many intelligent men than the one that, if they just tried, they could invent a cipher that no one could break.