If you can read this, either the style sheet didn't load or you have an older browser that doesn't support style sheets. Try clearing your browser cache and refreshing the page.

(BBC-US)   Canada's Tax Agency to send out registered letters concerning stolen Heartbleed data. Good thing Canada still has a postal serv......aw crap   (bbc.com) divider line 25
    More: Followup, Mumsnet, Heartbleed, user information, Canada Revenue Agency, cyber, personal message  
•       •       •

1612 clicks; posted to Geek » on 15 Apr 2014 at 6:30 AM (18 weeks ago)   |  Favorite    |   share:  Share on Twitter share via Email Share on Facebook   more»



25 Comments   (+0 »)
   
View Voting Results: Smartest and Funniest
 
2014-04-15 06:53:34 AM
That's why I never file my taxes.
 
2014-04-15 07:05:09 AM
Yes, because not having door-to-door postal service is the same as not having a postal service at all...
 
2014-04-15 07:55:52 AM

agent00pi: Yes, because not having door-to-door postal service is the same as not having a postal service at all...


Lots of communities in the USA have community boxes in the USA too. Especially if new. It is nice too, if you have a parcel (unless huge) they have parcel boxes and the mailman leaves a key in your box to get it.
 
2014-04-15 08:04:00 AM

Intrepid00: agent00pi: Yes, because not having door-to-door postal service is the same as not having a postal service at all...

Lots of communities in the USA have community boxes in the USA too. Especially if new. It is nice too, if you have a parcel (unless huge) they have parcel boxes and the mailman leaves a key in your box to get it.


Yes I agree, and also there is a letter drop which makes mailing a letter easy.

The biggest thing is if you're away for a week or so you don't end up with a pile of mail at your front door giving it away.
 
2014-04-15 08:04:17 AM

Intrepid00: agent00pi: Yes, because not having door-to-door postal service is the same as not having a postal service at all...

Lots of communities in the USA have community boxes in the USA too. Especially if new. It is nice too, if you have a parcel (unless huge) they have parcel boxes and the mailman leaves a key in your box to get it.


That'd be nice. Here in Australia, you have to go to the Post office. Assuming you survive the journey there...

/subby is still an idiot.
//I'd link the thread, but I'm on mobile.
 
2014-04-15 08:32:45 AM
Does this mean at least some non-trivial methods for exploiting this flaw are detectable?
 
2014-04-15 09:33:40 AM

Yankees Team Gynecologist: Does this mean at least some non-trivial methods for exploiting this flaw are detectable?


I'm confused here as well, all the stories I've read make it sound like an attack via heartbleed is untraceable. Yet the tax agency claims it was discovered they were hacked.
 
2014-04-15 09:39:56 AM

Yankees Team Gynecologist: Does this mean at least some non-trivial methods for exploiting this flaw are detectable?


It sounds like heatbleed was being used to get admin account logins, those admin accounts were then used to get critical data. The detection/logs were probably the admin accounts being used.
 
2014-04-15 09:56:02 AM
Hey, IRS hasn't been hacked yet

/USA! USA! USA!
 
2014-04-15 09:58:17 AM

agent00pi: Intrepid00: agent00pi: Yes, because not having door-to-door postal service is the same as not having a postal service at all...

Lots of communities in the USA have community boxes in the USA too. Especially if new. It is nice too, if you have a parcel (unless huge) they have parcel boxes and the mailman leaves a key in your box to get it.

That'd be nice. Here in Australia, you have to go to the Post office. Assuming you survive the journey there...

/subby is still an idiot.
//I'd link the thread, but I'm on mobile.


How many of your babies have been eaten by dingos?  Have you ever been attacked by a rabid kangaroo or koala?
 
2014-04-15 10:19:47 AM
Much of Canada already have these:

digest.dx3canada.com

Now the rest will too

/I've lived in many communities with these, some even had nice gazebo style shelters for them
//That wasps liked building nests in
 
2014-04-15 10:42:50 AM

the_sidewinder: Much of Canada already have these:

[digest.dx3canada.com image 768x576]

Now the rest will too

/I've lived in many communities with these, some even had nice gazebo style shelters for them
//That wasps liked building nests in


And they had those 35 years ago. Not really a new thing.
 
2014-04-15 10:48:21 AM

Yankees Team Gynecologist: Does this mean at least some non-trivial methods for exploiting this flaw are detectable?


The actual act of the openssl library returning X amount of bytes from memory is undetectable on the host that it occurs. That does not mean that it is undetectable via other means.

The event appears to have happened a day or two after the Heartbleed bug was announced, decent IDS's would have had fingerprints for it by then. That would be one way they may have detected the activity.
 
2014-04-15 11:11:03 AM
Actually, Canada had a functioning post office long after the U.S. consigned theirs to the crap pile.
It took the Canadians until 1981 to follow the American lead (that's lead as in "base metal") and turn
their postal system into an independent agency (the "Post Office Corporation", they called it), and you
can guess what happened....high prices and shiatty service.
 
2014-04-15 12:01:14 PM
Get over it Ontario.
 
2014-04-15 01:01:40 PM

Intrepid00: agent00pi: Yes, because not having door-to-door postal service is the same as not having a postal service at all...

Lots of communities in the USA have community boxes in the USA too. Especially if new. It is nice too, if you have a parcel (unless huge) they have parcel boxes and the mailman leaves a key in your box to get it.


Because nobody would ever be nefarious enough to copy that key and then check the parcels box every single day for free goodies.
 
2014-04-15 01:15:16 PM

poisonedpawn78: Intrepid00: agent00pi: Yes, because not having door-to-door postal service is the same as not having a postal service at all...

Lots of communities in the USA have community boxes in the USA too. Especially if new. It is nice too, if you have a parcel (unless huge) they have parcel boxes and the mailman leaves a key in your box to get it.

Because nobody would ever be nefarious enough to copy that key and then check the parcels box every single day for free goodies.


Why? When a portable drill works faster.
 
2014-04-15 01:31:26 PM
When are people going to learn - Open source software is not safe.  Nobody owns it.  Nobody is responsible for it.  It's free and you get what you pay for.

You can sleep well knowing all your private data has been available to hackers for the last 1-2 years because the companies you do business with/your government are too cheap to pay for software.
 
2014-04-15 01:44:08 PM

Intrepid00: agent00pi: Yes, because not having door-to-door postal service is the same as not having a postal service at all...

Lots of communities in the USA have community boxes in the USA too. Especially if new. It is nice too, if you have a parcel (unless huge) they have parcel boxes and the mailman leaves a key in your box to get it.


Great unless both of your roommates are gone for the holidays and, for some reason, each grabbed one of the two mailbox keys from the key drawer.  Because I guess they wanted to make sure they could check the mail while they were hundreds of miles away.  I put a note to the carrier in the outgoing mail slot asking if they'd please, please, please drop my mail on the porch for a few days.  S/he did.
 
2014-04-15 03:17:28 PM

strangeluck: Yankees Team Gynecologist: Does this mean at least some non-trivial methods for exploiting this flaw are detectable?

I'm confused here as well, all the stories I've read make it sound like an attack via heartbleed is untraceable. Yet the tax agency claims it was discovered they were hacked.


i didn't read TFA but another article I read today implied that the tax servers are behind two or three gateways, one of which may or may not be "Secret".  Anyway, I took that to mean that there's logging in place... should be trivial to filter out the one IP that was repeatedly sending requests.  If it was one IP... if the IP is from a country where they can do anything, if, if, if...
 
2014-04-15 05:10:52 PM

vsavatar: agent00pi: Intrepid00: agent00pi: Yes, because not having door-to-door postal service is the same as not having a postal service at all...

Lots of communities in the USA have community boxes in the USA too. Especially if new. It is nice too, if you have a parcel (unless huge) they have parcel boxes and the mailman leaves a key in your box to get it.

That'd be nice. Here in Australia, you have to go to the Post office. Assuming you survive the journey there...

/subby is still an idiot.
//I'd link the thread, but I'm on mobile.

How many of your babies have been eaten by dingos?  Have you ever been attacked by a rabid kangaroo or koala?


It's the Drop Bears you need to worry about.
 
2014-04-15 09:11:26 PM

jtown: Intrepid00: agent00pi: Yes, because not having door-to-door postal service is the same as not having a postal service at all...

Lots of communities in the USA have community boxes in the USA too. Especially if new. It is nice too, if you have a parcel (unless huge) they have parcel boxes and the mailman leaves a key in your box to get it.

Great unless both of your roommates are gone for the holidays and, for some reason, each grabbed one of the two mailbox keys from the key drawer.  Because I guess they wanted to make sure they could check the mail while they were hundreds of miles away.  I put a note to the carrier in the outgoing mail slot asking if they'd please, please, please drop my mail on the porch for a few days.  S/he did.


Then you need to kill your roommates
 
2014-04-16 01:02:26 AM

Intrepid00: agent00pi: Yes, because not having door-to-door postal service is the same as not having a postal service at all...

Lots of communities in the USA have community boxes in the USA too. Especially if new. It is nice too, if you have a parcel (unless huge) they have parcel boxes and the mailman leaves a key in your box to get it.


That's the way it is for most Canadians too.  In small towns like the one I live in, you still have to go to the Post Office unless you live in an apartment building that has it's own community box.
 
2014-04-16 02:21:30 AM

Intrepid00: poisonedpawn78: Intrepid00: agent00pi: Yes, because not having door-to-door postal service is the same as not having a postal service at all...

Lots of communities in the USA have community boxes in the USA too. Especially if new. It is nice too, if you have a parcel (unless huge) they have parcel boxes and the mailman leaves a key in your box to get it.

Because nobody would ever be nefarious enough to copy that key and then check the parcels box every single day for free goodies.

Why? When a portable drill works faster.


because you want to be able to repeat the crime and be sneaky while doing it. Drilling a lock is kinda obvious.
 
2014-04-16 03:23:55 AM

the_sidewinder: Much of Canada already have these:

[digest.dx3canada.com image 768x576]

Now the rest will too


Sure, except they might look more like this for much of the year....

i.cbc.ca


/canada can afford to have door-to-door delivery for everybody
//fark the tories
 
Displayed 25 of 25 comments

View Voting Results: Smartest and Funniest


This thread is closed to new comments.

Continue Farking
Submit a Link »






Report