Slashdot Mirror

Please don't recommend this so broadly. Experts should use hijack this to fix systems that can't be fixed any other way. Hijack This alone will miss files that are currently not being executed. Using Hijack This alone without other antispyware software is silly.

Just because it's not running, I am sure you don't want some coolwebsearch files just sitting silently on your system.

Here's my recent techrx post regarding this same subject: http://www.tech-recipes.com/windows_spyware_tips75 8.html

I was recently writing this article for tech-recipes where I was trying to describe how to remove spyware files that are "protected."

http://www.tech-recipes.com/windows_tips778.html

Isn't there a program out there that will tell you which services or programs are protecting a file?

Davak

In the slashdot tradition, try it out yourself!

You can always uninstall it.

You can uninstall a service pack. You can install the individual fixes included in the SP. Please get a clue.

As I have previously mentioned on tech-recipes, I honestly don't see how there is a real war between these webmail services.

Gmail kills them all in spam blocking and space...

Plus, now... they have free pop as well.

The privacy issue is the only thing that has been preventing my complete switch over.

Well, Apple guys/gals... you'll need these...

Complete List of Doom 3 Console Commands
List of Common Doom 3 cheats

To Run it you'll need this...

Mac System Requirements:
Mac OS X 10.3.6 or later
PowerPC G5 1.5 GHz or faster
384MB RAM (512MB recommended)
2.2 GB free disk space
ATI Radeon 8500/nVidia GeForce 3 or better
32MB of Video Ram (VRAM)
DVD drive required to install and play

And you'll have to wait until..

Aspyr Media Inc. on Wednesday announced plans to publish id Software's Doom 3 for the Macintosh. The game is currently in development for the Mac by id, and will be released in February, 2005.
Source

Well, Apple guys/gals... you'll need these...

Complete List of Doom 3 Console Commands
List of Common Doom 3 cheats

To Run it you'll need this...

Mac System Requirements:
Mac OS X 10.3.6 or later
PowerPC G5 1.5 GHz or faster
384MB RAM (512MB recommended)
2.2 GB free disk space
ATI Radeon 8500/nVidia GeForce 3 or better
32MB of Video Ram (VRAM)
DVD drive required to install and play

And you'll have to wait until..

Aspyr Media Inc. on Wednesday announced plans to publish id Software's Doom 3 for the Macintosh. The game is currently in development for the Mac by id, and will be released in February, 2005.
Source

At tech-recipes.com we have customized a version of php-nuke. Like most large systems like this, we have found a ton of security problems and navigation issues.

On of the very first things we did was to redirect those horrible navigation urls. That alone was key in allowing to google spider the site better. (Redirection doubled our google traffic... so get rid of those horrible argument-based urls!)

php-nuke, post-nuke, and similiar systems will get a lot of bad rap here. I never understand that. They are open source, they are free. Is it piece-meal? Of course, what large software packages are not? I don't know how anybody can knock a project that obviously thousands of people have put volunteered huge amounts of hours...

Is it perfect? Absolutely not. Are there large gaping security holes? Certainly. Put these problems are found and fixed very quickly... (I hope.)

Sorry for being a php-nuke fan-boy or whatever the current derogatory term is... I just find the need to defend something that has saved us so much in time and money.

Gmail is much better. I had originally tried to prove this... but my experiment proved difficult.

I had originally created a recipe at tech-recipes detailing my search for the best spam-blocker. However, the hotmail account enhanced filter blocked all good mail as well. I don't see how people ever used hotmail setup this way.

I had started this experiment by filtering all email to one of my domains and echoing it to all the web email accounts. I could compare the numbers to see who was best. The major problem was the all the web mail people started blocking email from my domain because it looked like I was sending in a lot of email. Geesh.

Is there any easy way to run this experiment?

The current gmail marketing campaign is working well...

The invite system allows the system to reduce the amount of load at one time... reduce the amount of beta testing, etc.

GMail, GBrowse, GAnything -- they work because they remind people of this "wonderful" thing called google. As long as the letter G is associated with bigger and better, Google can send rumors of any google product...

Any press... any rumors... is good for google.

You too can learn to link to the NYT without registering.

Here the reg free link...
http://www.nytimes.com/2004/09/20/technology/20sec ure.html?ex=1253419200&en=651229ed583b13bc&ei=5090 &partner=rssuserland

Benchmarking is still easy...

timedemo demoname - run a demo for a benchmark

Here's the list of common cheats and here's the list of all the console commands for you uberdoom guys out there.

Benchmarking is still easy...

timedemo demoname - run a demo for a benchmark

Here's the list of common cheats and here's the list of all the console commands for you uberdoom guys out there.

The U.S. government's Computer Emergency Readiness Team (US-CERT) has also been heavily criticized for providing security advisories to paying customers ahead of coordinated public release.

Microsoft and the government using the same strategy! I am shocked! (sarcasm mode off)

Other juicy information from the article:

There won't be a patch this month for a "highly critical" bug in Internet Explorer browser's drag-and-drop feature.

So we are suppose to buy access to problems that won't be patched in a timely fashion? You've got to be kidding me.

The only justification that I can see to this might be that microsoft wants to release it to their "elite" first... so that work-arounds and patches might be generated by the community instead of within microsoft. Thus, trying to get one of the open source benefits...

While that's a good theory... I bet it's really just microsoft praying on the security worries of companies. Considering I run a Microsoft network... that's a sad conclusion for me to have to make.

Okay, I am a solaris/sun fan boy. But this sounds like it was crafted by a professional commerical writer...

Ahhh... to be 38 and be this guy. President of Sun at 38 years old... what a life.


This is the silicon for our Project Niagara chip: 8 cores * 4 threads per core = a 32-way computer. On a chip.
And did I mention we have silicon, and not just a JPEG file?
And I saved the best for last. Are you ready?
It's already running Solaris. A volume OS that eats threads for lunch, on the world's most advanced massively parallelized silicon.
That's not just a box.
That's what we call a system. A system built for internet workloads. Not for the expedience of a press release. And a system that gives customers yet more choice, rather than taking choice away.
(And before you ask, yes, we are planning a nicer box when we ship :)


These guys deserve to Microsoft level of success...

Several of sun gurus have given us suggestions and hints at solaris section of our site. Without their early input and links from within the sun website, we would have never been as successful.

These guys are trying to do things big and correctly.

Remember that Microsoft Security is like a paper mache lock painted with gray #12 - looks real enough, but fragile when tested

Block access to USB keys?

Hell, we can do that now!

Remember that SP2 has several new longhorn "features" that were rushed into the service pack in the name of security.

Davak

We ran a sweepstakes at tech-recipes.com not too long ago. The prizes were gift certificates to Amazon, t-shirts, etc. I was amazed how much traffic it brought in.

These sweepstakes sites must just have tons and tons of traffic because they turfed a lot our way. If you promoting a new site, I suggest it highly.

The problem with viral campaigns like VoteOrNot is that it is too easy to have multiple on-line personalities. In these days, nobody has one email account... it's easy for one person to be a ton of people online. That's the problem the company will have.

The problem the rest of us will have is these techniques will likely flood every forum in the world with referrals... much like the free iPod, LCD, hummer, hooker, etc. campaigns have.

Not trolling... just giving something for discussion. If anybody buys me one, I promise I'll add an apple section to tech-recipes. :)

$1,299.00

17-inch widescreen LCD
1.6GHz PowerPC G5
512K L2 cache
533MHz frontside bus
256MB DDR400 SDRAM
NVIDIA GeForce FX 5200 Ultra
64MB DDR video memory
80GB Serial ATA hard drive
Slot-load Combo Drive

$1,499.00

17-inch widescreen LCD
1.8GHz PowerPC G5
512K L2 cache
600MHz frontside bus
256MB DDR400 SDRAM
NVIDIA GeForce FX 5200 Ultra
64MB DDR video memory
80GB Serial ATA hard drive
Slot-load SuperDrive

$1,899.00

20-inch widescreen LCD
1.8GHz PowerPC G5
512K L2 cache
600MHz frontside bus
256MB DDR400 SDRAM
NVIDIA GeForce FX 5200 Ultra
64MB DDR video memory
160GB Serial ATA hard drive
Slot-load SuperDrive

Dell Dimension 4600C Intel® Pentium® 4 Processor (2.80GHz, 533 FSB)
Operating System Microsoft® Windows® XP Home Edition WHXP
Memory 256MB Dual Channel shared DDR SDRAM at 333MHz
Monitors Dell Multifunction LCD TV/Monitor Selected Below TV [320-2913] 5
Video Cards Integrated Intel® Extreme Graphics 2 IV
Hard Drive 40GB Ultra ATA/100 Hard Drive 40 [341-0836] 8
Floppy Drive and Additional Storage Devices No Floppy Drive Included NFD
Mouse Dell® 2-button scroll mouse SM
Network Interface Integrated 10/100 Ethernet IN
Modem 56K PCI Data/Fax Modem DFAX
CD or DVD Drive FREE UPGRADE! 24X CD-RW/ DVD Combo Drive
Dell W1700 LCD TV w/1 Yr Svc Qty 1
FREE Dell 720 Color Printer with 1 Yr Advanced Exchange Service Qty 1
TOTAL: $1,373.00

Is the "what a drag" exploit the same as the drag and drop exploit?

I couldn't open the sample exploit listed in the parent, but I could open he one in the link I provided. The proof is safe and scary.

If they are not going to fix these errors, Microsoft should at least give us a naming system! It's hard to discuss the exploits when we don't know how to name them correctly. :)

Should we call this one "how to skin a windows box"?

Is the "what a drag" exploit the same as the drag and drop exploit?

I couldn't open the sample exploit listed in the parent, but I could open he one in the link I provided. The proof is safe and scary.

If they are not going to fix these errors, Microsoft should at least give us a naming system! It's hard to discuss the exploits when we don't know how to name them correctly. :)

Should we call this one "how to skin a windows box"?

Press releases like these are free ads for Microsoft. Does anybody here not think that Microsoft knew this was going to get released:

We will not cut corners on product excellence. Our powerful vision is intact; our shipment plan changes will let customers get access to parts of the vision faster.

Why don't they just admit that the market is forcing them to release parts of Longhorn (like Monad) earilier than expected! Leaks of betas and press releases like these are easy ways to keep the Microsoft buzz elevated.

If they didn't release a product until 2008, the market (mostly linux) would have time to catch-up.

Yet another way?

Seems like the same old crap to me...

You convince some sucker to download and load something that isn't what it says it is. We've reported aim exploits that hide themselves as screensavers recently.

It's a major security problem when a program blindly executes something. Period.

It's a major security problem when people download untrusted winamp skins on IRC.

What can you do?

What's your favorite help sites?

Computer Hope's Unix
Tech-recipes's Unix
Tek-tips forums
Sun's BigAdmin

Help me add to my favorites...

Davak

Since there is a new IE-related XP SP1 and SP2 exploit out, maybe now would be a good time for people to try out KDE.

I only wish the money people in my division would understand this.

/off to worry about this since there is no fix out

I notice that Cisco isn't displaying this on their front page. It seems like they should be screaming for everybody to fix the problem.

Quick walkthrough that I usually reference:
Easy example how to setup OSPF Authentication

AC

Lucky, heck... until these problems are figured out, we are suggesting to our users not to allow Microsoft to install this puppy.

Microsoft has released an executable and there is a registry hack to prevent SP2 from being automatically updated to SP2.

It's bad enough to install this thing for yourself; you know to be looking for bugs.

However, if this thing rolls across several users' systems in the middle of the night, admins are going to have a bitch the next morning.

I'm not saying that we are not going to ever install SP2. We just want to be able to control and how and when...

XP SP2 is not yet available on CD

Dial-up killing you? :)

Davak

XP SP2: Are P2P, Port Scanning, and Port-Opening Programs Slower?

Check for the error code!

By design SP2 limits the number of simultaneous incomplete outbound TCP connection attempts. Who cares? This mostly stops trojans.

Run the event checker as described in the article above. You'll prove to yourself that you don't have a problem.

Is lindows (aka linspire) the real salvation of linux? A pretty graphical interface? High processor requirements? A prioritary installation process?

How is this better than windows again?

What is we really just teach people how to do unix correctly?

Davak

One of our users posted a walkthrough of this fix this morning. Supposedly there is a new beta version of aim that has been released without this exploit... but I've not seen it yet.

Walkthrough of registry fix for AIM hack

Look like a good reason to upgrade to trillian to me.

Davak

Hello? This is slashdot!

The features we care about most is the ability to tweak it and hack it.

Hiptop_sidekick tweaks and walkthroughs

SSH and IM alone are worth the money to me. Once I installed the development kit, I couldn't quit playing with this thing!

Yes, the "phone" part is sub-par... if they fix that, then they are going to sell a billion of these things. Since I often manage systems remotely, this little baby is worth its weight in gold.

(Sorry, I've plugged my own site twice in two days on here. I'm usually not such a whore.)

Davak

The cheats and consoelc commands have changed some since the alpha version. One of our users posted a pretty good list here:

Doom 3 Console Commands and cheats

If you figure out any more, please let me know.

I didn't really get that old doom feeling until I turned on noclip and walked through a few walls anyway. :)

We keep a running review of a few of the free webmail systems.

Free WebMail Spam and Storage Battles


So far yahoo, excite, and gmail are running about the same...

We'll be updating it again in a couple of days... prelim data looks very similiar. I am shocked how poorly lycos does.

Davak

http://www.networksolutions.com/en_US/whois/result s.jhtml;jsessionid=GBG2FGJRK0RFYCWLEAMBFEY?whoisto ken=8&_requestid=358746

Changing the sessionid does nothing.
Changing the requestid does nothing.

Changing the whois token cycles through different sites somehow. Anybody got a clue what the format of the URL is?

Tech-Recipes.com: Solaris/Linux/Windows Hints = Money

You gotta think if they are selling something this "high-end" that they could afford to purchase some time from an English translator and a web designer.

English isn't the end-all to beat-all language... but there are a whole lot of rich Americans.

This rocks... if there were information in English, most likely many news organizations would be all over it.

DK

Win Prizes For Your Guru Linux, Windows, Solaris, and Internet Tricks

http://www.tech-recipes.com's Step by Step Directions to Disable AutoRun

Somebody posted this link previously above.

If you don't believe in this crap, download the beastie torrent.

That site also has some newbie instructions on how to disable autorun.

They have better linux and solaris stuff if you are interested.

If you don't believe in this crap, download the beastie torrent.

That site also has some newbie instructions on how to disable autorun.

They have better linux and solaris stuff if you are interested.

If you don't believe in this crap, download the beastie torrent.

That site also has some newbie instructions on how to disable autorun.

They have better linux and solaris stuff if you are interested.

Here's the way I do it.

AC

Ways to submit free links...

Here's one way it is done...

-=shameless plug mode on=-

We've had a lot of success using a "recipe" model at our current web site tech-recipes.com.

People submit the recipes. People review and grade the information. Then you have a good little collection of worthwhile "tech" recipes.

We did computer-related information because our geek factor >> cooking factor.

-=slameless plug mode off=-

I agree that a large internet cookbook database would be wonderful...however, the problem with most "recipes" is that they are instructions -- not lessons. I don't want to know that I should add the milk after the flour; I want to know WHY I should add the milk after the flour.

By personality, geek-type people want to hack and explore stuff. Blindly creating food dishes from instruction is not very creative nor stimulating.

I think that is why so many people here on Slashdot love Alton Brown. He teaches and informs.

Forget the database of food recipes...

I want a database of food lessons... or at least to encourage people posting recipes to explain the science and thoughts behind their suggestions.

What is getting even worse is that Microsoft is using the web for many of its new "features."

For example, on tech-recipes I point out how Microsoft sends information to a web service to provide translation in Word 2003.

All users see is "translate" in the context menu when they right click. They don't know where it is going... nor do most of them care.

Microsoft will use this subtle integration to direct users where they want them to go.

Users like us may see the trouble with this practice; however, the normal mom and pop user doesn't notice nor care... they think that it is neat to be able to get translation now in Word 2003.

I have little doubt that google will win this battle. They have data... and microsoft just has software. However, Microsoft will use its reign of the desktop to fight the battle as hard as possible.

Davak

Google has more data that Microsoft. Google is a better search engine than MSN. I don't think that anybody disagrees with this. However...

The next step, inevitably, will be to integrate such search functions into Windows, on the grounds that it constitutes a core technology that should be part of the operating system. In his keynote speech at last November's Comdex show in Las Vegas, Mr Gates demonstrated a prototype technology called "Stuff I've Seen" which does just that. It allows computer users to search for context-specific words in e-mails and in recently visited web pages, as well as in documents on their computers.


Microsoft has it's reaches into the majority of homes and businesses in the world. As broadband always-on internet becomes more popular, more and more services will really be clicks to other sites.

Here I describe one of the ways that microsoft uses this in the new version of Word as a translation machine. The information goes out onto the internet and word brings you back the information pretty seemlessly.

This is where Microsoft knows how to crush their enemies. By using easy clicks with integration, they can direct people to Microsoft search, translation, music, or whatever.

As the article states, before long your searches and data will be references my Windows software in multiple ways. Windows doesn't just want the web integrated into your system... they want their web integrated into your system.

Davak

Errr... can somebody point me to a site that uses this technology? A google search for "we use Peppercoin" gives me nada.

Honestly, searching google finds me no sites using this technology. I like to see this in action before I start trying it out on my own site.

We originally ran tech-recipes.com to help our family and friends keep up with the unix/solaris/etc hints that we gave them... however, we've been looking for a way to turn this into a profit-making business.

Micropayments would seem nice! A couple of cents per recipe viewed and we would be doing well.

Anybody actually using this technology?

AC

while it is not a substitute for a good security policy, it is an excellent augmentation. the old saying goes that the only secure computer is one that isn't connected to the network. well, that's not really possible if yr running a web server, but you definitely don't need to advertise that you're connected... or how you're connected.

let's use a military analogy (ugh). you may put your soldiers in an armoured transport... but they still wear camoflauge.

i mean, after all, we all turn off ping before we put our servers up... don't we?

Hell, Google converts everything else!

How to use google to convert units.

Medicine life has been better... some recent hard losses. You know how its the young ones who always try to die.

I haven't seen you around much either. The new job must be tearing you away from the wonders of slashdot.

Computer life is going much better. Check out... http://www.tech-recipes.com. It's a little site a couple of buddies and I have been working on. Traffic is starting to flow in. Finally.

Been thinking of a similar site for us health-related professionals. Tricks of the trade and such...

Good to see you are still around.

Davak