From: gregg.drwho8@gmail.com (Gregg Levine)
Subject: [TUHS] Happy birthday, Ken Thompson!
Date: Tue, 6 Feb 2018 00:05:16 -0500 [thread overview]
Message-ID: <CAC5iaNGrsoVF3me0R9NB0A1nUyW9mD=DGuW_6UshcrCK72jMfw@mail.gmail.com> (raw)
In-Reply-To: <20180206045822.GA17801@thunk.org>
Hello!
In NYC the machines who sell MTA transit cards and refill them are
running Windows Embedded. And not the most up to date version. I've
watched them cause the classic BSOD more then once, and sometimes
worse.
The actual hardware that's delivers the cards and the single use ones
are running something else, and appear to be VME based. The whole
thing is a revolting kludge that's asking for trouble.
Oh and Dan Cross? Thank you for your service to this country, again and again.
-----
Gregg C Levine gregg.drwho8 at gmail.com
"This signature fought the Time Wars, time and again."
On Mon, Feb 5, 2018 at 11:58 PM, Theodore Ts'o <tytso at mit.edu> wrote:
> On Mon, Feb 05, 2018 at 05:54:57PM -0500, Dan Cross wrote:
>> Speaking of things like that...This just landed in my inbox:
>>
>> http://www.mymtaalerts.com/m?78F2F
>>
>> The metrocard vending machines in the NYC subway are little PCs. I could
>> swear I've seen either an OS/2, Windows, or Linux startup sequence on one
>> or more of them before (maybe all three).
>> Anyway, what do you want to bet that the MTA is making people go around
>> with media and manually install updates for Spectre/Meltdown across the
>> transit system?
>
> No bet. How much do you want to bet the MTA isn't bothering to update
> gazillions of *other* already published and known security holes that
> were zero days years ago? Holes that are probably *Way* easier to
> exploit than those using Spectre/Meltdown?
>
> If it's anything like the MBTA in Massachusetts their security is
> limited to trying to sue graduate students[1] in an attempt to impose
> prior restraint on their research (and including the presentation[2]
> as an exhibit on the lawsuit and letting it be published on the
> court's website for all to see?).
>
> [1] https://en.wikipedia.org/wiki/Massachusetts_Bay_Transportation_Authority_v._Anderson
> [2] http://tech.mit.edu/V128/N30/subway/Defcon_Presentation.pdf
>
> - Ted
next prev parent reply other threads:[~2018-02-06 5:05 UTC|newest]
Thread overview: 51+ messages / expand[flat|nested] mbox.gz Atom feed top
2018-02-03 20:57 Dave Horsfall
2018-02-03 21:12 ` Donald ODona
2018-02-03 21:59 ` Andy Kosela
2018-02-04 0:52 ` Dave Horsfall
2018-02-04 1:07 ` Lyndon Nerenberg
[not found] ` <CAM4FNSvnR+ZkgMyJ-0+p7LKKAYzts-7268RgApteLoT9q=TtYA@mail.gmail.com>
[not found] ` <CAM4FNSu-eQkt=AeUJ=2uvEwN=BQe7qdWn6ZCQmfFjb9at6uf_w@mail.gmail.com>
2018-02-04 1:29 ` Daniel Camolês
2018-02-04 1:35 ` Lyndon Nerenberg
2018-02-04 1:14 ` Warner Losh
2018-02-04 13:59 ` Theodore Ts'o
2018-02-05 13:13 ` Tony Finch
2018-02-05 15:45 ` Bakul Shah
2018-02-05 16:19 ` Clem Cole
2018-02-05 17:41 ` Bakul Shah
2018-02-05 21:58 ` Andy Kosela
2018-02-05 22:47 ` Dave Horsfall
2018-02-05 22:52 ` Toby Thain
2018-02-05 22:54 ` Dan Cross
2018-02-06 4:58 ` Theodore Ts'o
2018-02-06 5:05 ` Gregg Levine [this message]
2018-02-03 21:35 ` Will Senn
2018-02-03 21:49 ` Arthur Krewat
2018-02-03 22:59 ` Dave Horsfall
2018-02-04 0:51 ` Steve Simon
[not found] ` <CAM4FNStCAj-iFfg_DxyhkZMQu3dTx_4SeSsimALb3e1ktav2KQ@mail.gmail.com>
[not found] ` <CAM4FNSv41x28yGYcmVLhwjh9LUNfBPNq=dpgtv5jSNuRemsY8A@mail.gmail.com>
[not found] ` <CAM4FNSvMXLciCPUqZqaWLz7i0OMGesSWcPvETM4+p2Gj0zMPZw@mail.gmail.com>
[not found] ` <CAM4FNSsNomfRc6LNzFLFeA8EvgAgL7suJ9Zy_1gbVFsU2tkDDw@mail.gmail.com>
[not found] ` <CAM4FNSu-Ktx5e0UmBkw+ceJzZaM5Y-gWi1DT05jS3eTAoV=tcA@mail.gmail.com>
[not found] ` <CAM4FNSvxCrOiS=Qg9ntGrDA6P-7MW4pqTis7GpzBcLtTmj5NaA@mail.gmail.com>
[not found] ` <CAM4FNSsYZx3h35s1509M4La50Gc_AyGtU4SWzg9iQMziuBUDNw@mail.gmail.com>
[not found] ` <CAM4FNSsYNpdohKZPUaYsyHxUvCTbJ59KgLObZcRcmdsKuRLr5Q@mail.gmail.com>
[not found] ` <CAM4FNStyCWwPTYVoZ1pcEJqTn-60P-1PTZdv=+P5F38tpUiLqg@mail.gmail.com>
2018-02-04 1:51 ` Daniel Camolês
2018-02-04 17:33 ` Toby Thain
-- strict thread matches above, loose matches on Subject: below --
2019-02-04 23:42 Doug McIlroy
2019-02-05 3:49 ` Larry McVoy
2019-02-04 1:09 [TUHS] Happy Birthday " Doug McIlroy
2019-02-03 20:23 [TUHS] Happy birthday, " Dave Horsfall
2019-02-03 21:39 ` Greg 'groggy' Lehey
2019-02-03 22:07 ` Dave Horsfall
2019-02-03 22:33 ` Clem Cole
2019-02-04 2:03 ` Paul Winalski
2019-02-04 3:57 ` Jason Stevens
2019-02-04 6:25 ` Peter Jeremy
2019-02-04 7:59 ` Steve Nickolas
2019-02-04 15:04 ` Dave Horsfall
2019-02-04 15:39 ` Toby Thain
2019-02-04 17:08 ` Al Kossow
2019-02-03 22:39 ` Michael Kjörling
2019-02-03 22:55 ` Steve Nickolas
2019-02-03 23:37 ` Andy Kosela
2019-02-04 0:32 ` Larry McVoy
2019-02-04 1:00 ` Steve Nickolas
2019-02-04 9:43 ` Donald ODona
2018-02-03 21:46 Norman Wilson
2017-02-03 20:00 Dave Horsfall
2017-02-04 12:38 ` Michael Kjörling
2017-02-04 12:44 ` Steve Nickolas
2017-02-04 13:15 ` Michael Kjörling
2016-02-03 17:38 Dave Horsfall
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to='CAC5iaNGrsoVF3me0R9NB0A1nUyW9mD=DGuW_6UshcrCK72jMfw@mail.gmail.com' \
--to=gregg.drwho8@gmail.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).