For the best experience on desktop, install the Chrome extension to track your reading on news.ycombinator.com
Hacker Newsnew | past | comments | ask | show | jobs | submit | history | Prefect's commentsregister

Video of the exploit in action (as integrated into Metasploit):

http://praetorianprefect.com/archives/2010/01/the-aurora-ie-...


Yes, definitely, although it was Mandiant that Google brought in, McAfee was working for one of the other companies affected it appears.


They are required to: BGP ports, Telnet Ports, administrative ports...blah blah blah.

What will the router route without ports open?


I had forgotten about BGP. Telnet and administrative access should be on it's own private LAN. I really cannot picture anyone administrating a large router, via telnet, over the public internet.

Ports don't need to be open on the router in order for it to route packets.


DECAF?


I was kind of wondering about something similar, while not exactly that. What if someone does do a transaction (a legitimate one) for 888888.88, does it mess up the bank's handling or total for deposits because its being handled differently?

What if that amount was fraudulently taken from a large balance account, would the bank notice or assume its part of a fraud investigation?


Hyperbole, as you say.

Taken out of context it means nothing. Taken in context it means that as an American I acknowledge our actions around the world aren't always right and don't always make sense.

But this doesn't take away from the validity of the U.S. point of view in this case. Too often arguments bring in outside factors with generalized phrases: "Americans are always trying to control what happens abroad" and other such irrelevant phrases.

Put another way, if you accept that conference dancers are Taiwanese custom, you should also consider accepting that Americans would view this in a poor light, and object not that it happens in Taiwan, but that a U.S. company supports it.


I'm very happy letting the Taiwanese have their own moral standards about lap dancers, much the same as I am perfectly happy with letting San Francisco have its own policy about sex workers.

I try not to get emotionally worked up about something bad, say the absence of women in IT, and then go on a rampage about some other tangential thing, like American companies playing into the cultural norms of some other country. In fact, I would expect American companies to be sensitive to local norms even if such actions were unpopular back here.

Haven't we had enough of telling other people what to do? Or are you specifically focusing on just the American company aspect of it, in which case how would you expect an American company to act overseas? How would you act? You personally? Would you go and tell the naked women dancing that they are degrading themselves? Would you protest the various phallic parades and such that other countries have? Would you make a scene over airlines that still only have women flight attendants in cutesy uniforms? Are you going to sacrifice your life's work because some other people do things that the folks back home think or strange or distasteful?

What I see -- not from you personally, but from a lot of commentators -- is people following a script for what to be outraged about.

I know I wouldn't feel comfortable with the dancers. So guess what? I'd leave. Easy problem. Easily solved. No need to wring your hands, blather on at length about sexism, or any of that other belly-button-gazing nonsense. If you want more women in IT, hire some.


I think American companies do try to be respectful of local norms when it suits a goal, for example when they are trying to do business in that country. I would agree that in order to do business in another country, they would suspend their views of that society's norms. I think a business man or woman in that country would and should go along to get along to be successful.

I also think American acceptance of what American companies do abroad can be stretched beyond reason, as in a case where it is not a company accepting the existence of norms that would be controversial at home, but rather promoting them. I think that's whats happening here, as people are quick to let this case off the hook under the reasoning of cultural differences.

Yes, we shouldn't be telling other people what to do. No I don't walk up to women in strip bars and tell them anything (nor do I think anyone else should). Having been abroad, I don't attempt to convey any belief system on another culture, rather I attempt to learn while I'm there.

But this isn't about anyone's personal actions, its about an American company sanctioning something it should not have in another country, irrespective of that society's norms. It is that American company realizing that a critical mass of its consumers will be uncomfortable with what they're looking at, and heading issues like this off beforehand. Its about being smart when it comes to your global brand.

So I agree with a number of your points, but I didn't argue against them in the first place. You hit the nail on the head that the specific objection this article cites is with the "American company aspect of it". That is the problem. They set up the corporate karaoke bar, they didn't just go to one. That means that examples such as cultural parades and local clubs don't work in this case. Further this is not an American business man or woman attending an event at a Taiwanese company (where local customs would have to be respected).

Yahoo realizes this, and thus they apologized.

I think the article is fairly clinical in its analysis. It makes three points: A. this is what happened B. an American company has to understand that its brand image at home can be affected abroad when those at home will react negatively to what they're seeing C. Women are discouraged from careers in IT, this doesn't help, we would be better off with more women in IT. The only mildly baiting word is objectifying: treating something as an object, which is what goes on at strip clubs and the like (male or female). So no one went on a rampage (I don't think), or a rant, or is emotionally worked up.

However you clearly state you are reacting to what a lot of commentators are saying and the issue at large, as well as what you see as a script for people who outrage easily. I may be lumping reactions together, if I am let me know. I respect that point, and in part share that opinion. Some of the arguments being put forth either way are too simplistic, and ignore or fail to consider nuances such as the cultural differences in play.

This is an aside in my opinion, but a corporate gathering, is not so easy to leave. Its why so many financial firms face these after the fact lawsuits in the US from women who were made, or feel they were made, to attend meetings in strip clubs or put up with degrading behavior in order to survive in the workplace. I don't think that's related to this case, but it answers your point about just being able to leave.

In other to hire more women in IT, we need more women studying IT, which we don't have. Yahoo's portrayal of its corporate culture in Monday's news doesn't help that cause. That is the relationship between the two. Its not our original observation, we picked it up as a sentiment viewing the discourse on Twitter and related sources. We agree that creating a workplace environment that is not hospitable to all will affect all companies ability to attract workers.

As more being omphaloskeptic or navel gazers, its an IT blog, what's there to it if not reflective analysis of things that go on in IT?


what's there to it if not reflective analysis of things that go on in IT?

I think you are exactly correct -- as long as you separate a moral case from a practical one.

I was a bit cranky the other day. Sorry if I went over-the-top in my argument. I'm genuinely concerned about things like Google cooperating with finding Chinese political dissidents and things like this seem to dilute the cause of bigger problems, at least in my mind.


Based on your analysis, that statistic does not hold up and will be removed from the article. We'll credit you on why its being removed.

Thank you for taking the time to educate me on this.


At least Adobe's getting faster on the fixes.


Consider applying for YC's Summer 2026 batch! Applications are open till May 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search:

HN For You