85

Yes those numbers appear to be correct. The Cato instituted published "Terrorism and Immigration A Risk Analysis" in September 2016. From that report: NPR article on the chance of winning the lottery from 2012 notes that it's more likely to be killed by a vending machine. The odds given : 1 in 112 million. And that means it's more likely, at least ...


82

His sources check out The only piece that makes this questionably true is because it's not just for Melania, but the entirety of the Trump family.. See below for the NBC citation. @Chapmanchapman claims his sources in this tweet CNN says Protecting President-elect Donald Trump and his family is costing New York City more than $1 million a day, according ...


77

According to US Citizenship and Immigration Service webpage Refugees & Asylum, last updated in 2015: Asylum status is a form of protection available to people who: •Meet the definition of refugee In other words, not all refugees are asylees, but all asylees are refugees. By not including asylees in the definition of "refugees" the Financial ...


65

It is true that you do not need numbers, special characters, etc for a strong password. If you instead increase the length of the password, the entropy will increase as well. See for example this entropy table. To get 64 bit of entropy, you could have a 14 character lowercase password, or you could have a 10 character password with all printable ASCII ...


62

You can find information about this on Wikipedia ATM SafetyPIN software is a software application that would allow users of automated teller machines (ATMs) to alert the police of a forced cash withdrawal by entering their personal identification number (PIN) in reverse order.1 The system was invented and patented by Illinois lawyer Joseph ...


49

No, this is nonsense. I found an article from The New Yorker, which explored that claim. They asked some lift specialists about it: “It’s just not so,” Charles Buckman, an elevator and escalator consultant in North Carolina, said the other day. “If it happens, it’s just happenstance.” He went on, “There’s no linkage in the control system between the door-...


47

TL;DR: It seems that data densities on HDs have increased to the point where it's not feasible to recover data from zeroed drives. The process of recovering data from a "zeroed" hard drive revolves around the concept of residual magnetism. Essentially, the idea is that if you examine the drive using a magnetic force microscope, there is some tiny ...


34

Yes, they do. From Facebook's privacy page for ads: Everyone wants to know what their friends like. That's why we pair ads and friends—an easy way to find products and services you're interested in, based on what your friends share and like. Learn more about social ads. Here are the facts: Social ads show an advertiser's message alongside ...


31

There was a similar question over on IT Security. I answer here as I answered there, based on my job experience in the alarm monitoring industry. The short answer is that the reverse-PIN system is documented as a possibility, but is not currently in use by any ATM network or manufacturer. The idea of the reverse PIN is the "duress code"; something that ...


31

This claim is currently unproven. According to a Snopes article written today, which rates this claim as unproven, Chapman cited the CNN article linked below as his source for the security cost and he cited the apparently-correct figure of $148 million as the budget of NEA. When asked for sources, Chapman cited a New York Times article estimating the NEA'...


29

According to Ken Thompson, he built the compiler that did this, and never distributed it. From: Ken Thompson <ken@google.com> Date: Wed, Sep 28, 2011 at 6:27 PM Subject: Re: Was compiler from "Reflections" ever built or distributed? To: Ezra Lalonde <ezra@usefuliftrue.com> build and not distributed. On Wed, Sep 28, 2011 at 11:35 AM, Ezra ...


28

It's an optional extra. I've actually seen this working so I wasn't willing to accept the article linked. However I found the Specification for the Otis Elevator Company's GeN2 Regen elevator and on page 12 under the Special Functions section there is this: NSB - Non-stop button: Once the NSB is pressed, all calls outside will not be registered, and the ...


27

An experiment was conducted by Jeremy Clarkson in 2008 to test the hypothesis that it was safe. He published his bank details in the newspaper. The Top Gear host revealed his account numbers after rubbishing the furore over the loss of 25 million people's personal details on two computer discs. He wanted to prove the story was a fuss about nothing. ...


25

The cited Caltech/MIT paper explains at least one impediment to Internet voting in the USA: A third lesson regards voter authentication, which is the subject of debate in many nations, including the United States. In Estonia, the introduction and dissemination of their digital national identification card has opened the door for many uses of that ...


24

The only evidence for the claim that the device must be removed by a medical professional comes from the device creator, on the website of the product. It seems like an important point, since the idea is that in having to have such a device removed the authorities would be alerted and the rapist caught. Testing how hard the device is to remove isn't ...


22

Here's an independent verification of the leak, analyzed in further detail: http://gizmodo.com/almost-none-of-the-women-in-the-ashley-madison-database-1725558944 While you can remain skeptical of this source, as well, you could also download the data leak yourself and analyze the data. Similar to faking the moon landing, it would take more effort to ...


20

Are Lawful Interception Features considered "flaws" or "backdoors"? Many developers and organizations include flaws quite consciously to allow government intelligence and law enforcement as well as other purported stakeholders (usually copyright and software-patent vigilantes) multiple layers of to access end-user systems. There is a misclassification ...


20

Brian Krebs (noted and respected infosec analyst and blogger) reported this on 27th Jan. 27 Jan 18 First ‘Jackpotting’ Attacks Hit U.S. ATMs ATM “jackpotting” — a sophisticated crime in which thieves install malicious software and/or hardware at ATMs that forces the machines to spit out huge volumes of cash on demand — has long been a threat for ...


18

We have a theoretical explanation of the mechanism for why outdoor nighttime lights are counterproductive for the purpose of reducing crime. Someone breaking into your house needs to see. If your house is lit, that problem is solved. If not, they must use a flashlight (which is more suspicious to you and neighbors) or they must navigate in the dark, with the ...


16

This question is way too generic, because there is a variety of locks and they can differ quite a lot in what principle they're based on. However one thing can be said: most depictions of lock picking in movies and TV are inaccurate to say the least. They look more like the actors are handling a padlock (from the way they move the tools :)) than one in a ...


16

This question has already been addressed by: Snopes [the claim is] erroneous, an expression of the mistaken belief that the use of some simple legal talisman — knowing enough to ask the right question or post a pertinent disclaimer — will immunize one from some undesirable legal consequence. The law just doesn't work that way. [...] the basic premise ...


16

It depends upon your definition of "off", "track", and "phone". Some phones will keep the baseband chip powered when the device has been shut down. In some cases, security agencies have "updated" the baseband sofware on a large number of phones in order to make them trackable when shut down. It's certainly possible to install OTA updates with almost ...


15

http://en.wikipedia.org/wiki/Domain_Name_System Without name servers the DNS would not exist. But that's not the end of the internet, it's just the end of easy communication without having to remember sequences of numbers as addresses rather than words. And of course the US can't (as you all but pointed out) shut down the DNS as they don't control all the ...


14

First, a few links: Over on Security Stack Exchange we have discussed this exact case. Noted security commentator Bruce Schneier has some interesting discussion - and in fact it is a recurring theme. Most fingerprint readers have independently measured EER of 5%; the best ones allegedly get down to about 0.2%. That means that when the system is set ...


14

No, it's not legit (in the sense you used the word). Perhaps the file won't appear inside their application, but doesn't mean that nobody else will be able to open it again. “Favorite” files so you can access them offline Ok. You install their program in some computer, mark the file as favorite, and it's downloaded to that program. Then you disconnect from ...


14

Evidence: There is an application for a search warrant documented in court by FBI that a US hacker named Chris Roberts hacked into the electronic entertainment systems of airplanes [1] and that he had taken control of an airplane’s engines mid-flight using his laptop and an Ethernet cable [2]. Chris Roberts had also earlier claimed that he had changed the ...


13

Evidence: Experts warn against the usage of internet voting in USA unless the vote data is transmitted in a safe, secure and verifiable process over the internet. In 2008, 32 respected computer scientists from universities across the country, including Stanford University, Princeton University, John Hopkins University, Carnegie Mellon University, Indiana ...


13

There is no single right answer to how much entropy a password has: the result will depend on the assumptions the attacker will make about it, and these are unknown. More or less reasonable guesses can be made about these assumptions, giving more or less reasonable entropy values. This article at explainxkcd covers the comic in question. It explains the ...


13

The presidential alerts are part of a bigger system that also includes AMBER alerts and alerts for bad weather and "other threatening emergencies". These alerts are called Wireless Emergency Alerts (WEA). FEMA explains how it works: Does WEA know where I am? Is it tracking me? No. Just like emergency weather alerts you see on local TV, WEAs are ...


12

Yes, the number comes direct from the 2012 Report on Security Clearance Determinations that was released by the Office of the Director of National Intelligence (Wikipedia). Table one on page three breaks things down as follows: As of 10/1/12: Conf/Secret Top Secret Government: 2,757,333 791,200 Contractor: 582,524 483,263 ...


Only top voted, non community-wiki answers of a minimum length are eligible