I originally reported this to ICS-CERT in 2012. The American Association of Railroads denied, deflected, and dismissed the claims for 13 years until CISA finally agreed with me that publication was the only option left to pressure the rail industry to fix this vulnerability. This vulnerability is still unfixed in the USA and all rail operations are vulnerable to it. This could lead to inducing brake failures that could cause a derailment and the ability for anyone to shutdown all rail operations across the USA.
That's a great point. It's one thing to be able to program it yourself, and another to understand enough to ask the right questions about the code to learn how it works.
If they had the ability to QA the outsourced team's work at a semi-granular level, I'd imagine there would be a lot less disconnect between the work done and expectations.
I would not take a startup that is outsourcing their development seriously. All of the institutional knowledge of how a product works goes right out the door. If you cannot fix your own product if it breaks, do you really own it?
Replace 'older candidates' with 'candidates who are less likely to sacrifice their work/life balance.'
1. Candidates that demand compensation for sacrificing their work/life balance are more expensive. Tech isn't that hard to learn. You can get pretty good at a particular tech within 2 years of learning it. Why pay a candidate tons of money for them to give up their work/life balance, when you can hire one that will give it up for little?
2. Candidates that value their non-work time don't know the latest tech. They spend their evenings with their families / kids / friends / hobby whereas those who do are constantly learning the latest stacks at home to benefit their work.
3. Candidates that would rather go do something not work related after work don't pass the 'beer test' with those who's life choices are work-centric.
You don't need a complex guidance package when traditional direction finding and triangulation will produce coordinates that can be used to direct artillery, air strikes, IED, etc. Sigint targeting is quite common.
higher power. The n900's transmitter was 15nW (1.5e-8 W), which is why it was legal. For a claimed 6km radius, I would assume this is about 3-7W output.
It's just a low power FM station with a raspberry pi in it as a controller. It would be highly illegal to use this device in most modern nations without a license.
This seems like a bad idea. It would make targeting dissent with kinetic means very easy. It's one of the whole reasons that shortwave broadcasts are still around.