Miscellaneous News

daifo

Captain
Registered Member
So it's credentials were out for 2 years and the access wasn't fixed? Im not too familiar with databases so I'm not sure I follow what's going on.

Some dummy wrote a blog post and decided it was good idea to copy n paste from some code from his employment. Commented out in that code (which makes it easy not to visually check since everything is the same color from an editor) was the access credentials to the police system. The system isn't publicly accessible so someone either cracked into the network or someone within accessed it.
 

FairAndUnbiased

Brigadier
Registered Member
Why Alibaba would be screwed? It basically says that police uploaded it to a private AliCloud and stored them there unencrypted, they are also the ones responsible for keeping all the passwords and access to the cloud safe. Unless, of course, Alibaba itself was hacked but it does not seem to be the case. So the only ones who are screwed in that situation are the Shanghai policemen.
I know little about IT but a few questions:

1. Why does Shanghai police have 1 billion people on file, many times that of Shanghai population?

2. Why was all the data accessible by a single login credential?

3. Why was the login credential used able to download the original data? Many logins only allow viewing of data.
 

montyp165

Senior Member
I know little about IT but a few questions:

1. Why does Shanghai police have 1 billion people on file, many times that of Shanghai population?

2. Why was all the data accessible by a single login credential?

3. Why was the login credential used able to download the original data? Many logins only allow viewing of data.
Indeed, there are details in the descriptions that don't quite add up, because if one thinks about it logically it would be the equivalent of the NYPD having access to nearly all Federal government records on US citizens like Social Security and FBI records and placing them in Amazon data storage, so I'd say that there's more to this story (including propaganda and disinformation) than what it appears on face value.
 

plawolf

Lieutenant General
Seems like a bullshit fake story that doesn’t pass the smell test.

From a mere practicality point of view, no one is going to create, never mind upload to the cloud, a database with one billion lines. Trying to do anything with that much data is just going be stupidly slow, if any software can even handle that much data.

From a security point of view, such single database should never be created at all, never mind have it easily accessible, that’s before we get into the absurdity of having it in the cloud.

If they need one single database, the only way anyone with even rudimentary data security experience would allow it is if the source data is heavily encrypted and protected, and queries work on the bases of search requests being uploaded and searches against the database being done at source, with only the results transited back to the user.
 

baykalov

Senior Member
Registered Member
Get ready for another round between Putin and the Collective West: :cool:

Please, Log in or Register to view URLs content!

WASHINGTON, June 28 (Reuters) - Group of Seven democracies have had positive and productive discussions with China and India about a plan to cap the price of Russian oil, a source familiar with the G7 discussions said on Tuesday, adding the two major oil consumers would have incentives to comply.

G7 leaders on Tuesday agreed to explore imposing a ban on transporting Russian oil that has been sold above a certain price in an effort to reduce Moscow's revenues and deplete its war chest.

Western sanctions still allow many countries to buy Russian crude, and India and China have increased their purchases at steep discounts. The source said the two countries would be able to buy Russian crude at even lower prices under the plan, calling it an attractive pitch to Beijing and New Delhi.

With the European Union preparing to impose a phased embargo on Russian oil later this year, U.S. Treasury Secretary Janet Yellen has advocated the cap as a way to cut Russia's oil revenues while keeping supplies on the market and avoiding another major price spike that could prompt a recession and Russia to keep producing oil.

If Russia were simply to refuse to sell its crude at the capped price, it would have few options to sell it at higher prices, given the limited number of ships that would be available for subverting the sanctions that are outside of London-based insurance and financing markets, the source said.

With limited storage capacity, Russia would then have to significantly shut down production, reducing its cash flow and causing further damage to its energy sector, the source added.

-----------------------------------------------------------------------------------------------------------------------------------------------------

Bloomberg: JPMorgan Sees ‘Stratospheric’ $380 Oil on Worst-Case Russian Cut​


Global oil prices could reach a “stratospheric” $380 a barrel if US and European penalties prompt Russia to inflict retaliatory crude-output cuts, JPMorgan Chase & Co. analysts warned.

The Group of Seven nations are hammering out a complicated mechanism to cap the price fetched by Russian oil in a bid to tighten the screws on Vladimir Putin’s war machine in Ukraine. But given Moscow’s robust fiscal position, the nation can afford to slash daily crude production by 5 million barrels without excessively damaging the economy, JPMorgan analysts including Natasha Kaneva wrote in a note to clients.

For much of the rest of the world, however, the results could be disastrous. A 3 million-barrel cut to daily supplies would push benchmark London crude prices to $190, while the worst-case scenario of 5 million could mean “stratospheric” $380 crude, the analysts wrote.

“The most obvious and likely risk with a price cap is that Russia might choose not to participate and instead retaliate by reducing exports,” the analysts wrote. “It is likely that the government could retaliate by cutting output as a way to inflict pain on the West. The tightness of the global oil market is on Russia’s side.”

Please, Log in or Register to view URLs content!
 

plawolf

Lieutenant General
Get ready for another round between Putin and the Collective West: :cool:

Please, Log in or Register to view URLs content!



-----------------------------------------------------------------------------------------------------------------------------------------------------

So…China and India gives shrug at idea pitched G7 idiot countries to kneecap their own economies with nonsensical price cap attempt while continuing to buy as much Russian oil and gas as they want.
 

GodRektsNoobs

Junior Member
Registered Member
Get ready for another round between Putin and the Collective West: :cool:

Please, Log in or Register to view URLs content!



-----------------------------------------------------------------------------------------------------------------------------------------------------

Bloomberg: JPMorgan Sees ‘Stratospheric’ $380 Oil on Worst-Case Russian Cut​




Please, Log in or Register to view URLs content!
Please do. Us in Alberta are still waiting for the last peak oil boom. We promise we'll not waste it this time.
 

solarz

Brigadier
has this been posted? is it legit? do you guys have more info on it?


1 billion?

1 billion bytes is 1 gigabyte.

If the average citizen's entire record was 1kb, the total file size would be 1 terabyte. Since each Chinese Unicode character is 3 bytes, that's only enough for about 300 words per record.

The Chinese comment mentions that there are photos. This would mean at least 10 mb per average record, and that's using low resolution images. That would amount to 10 petabytes of data.
 

solarz

Brigadier
Some dummy wrote a blog post and decided it was good idea to copy n paste from some code from his employment. Commented out in that code (which makes it easy not to visually check since everything is the same color from an editor) was the access credentials to the police system. The system isn't publicly accessible so someone either cracked into the network or someone within accessed it.

Sounds like utter bullshit to me.

As I mentioned previously, for 1 billion citizen records, we're realistically talking about petabytes of data. No bloody way they'd all be stored with the same access credential, and there's no way a simple programmer is going to have access to such credentials in any case.
 
Top