Slashdot Mirror
Slashback: Highness, Hominess, Hole-ines
Sometimes being British means self-flagellation. Ferox writes: "The November Web Site Survey from Netcraft reveals something interesting: 'Two years ago the Queen of England became an unlikely icon for the Linux revolution when her webmaster replaced Solaris as the platform for the Royal Family's site, citing the better price/performance of the Dell/Linux platform over the previous incumbent, Sun/Solaris. The open source community celebrated and speculated on when the Apache web server might receive the "By Royal Appointment" moniker. This week the site has changed platforms again, this time to Microsoft-IIS.'"
Keep your hands and passwords inside the car at all times. Niels Provos passed along word of his ongoing research into network security, with some slightly depressing news about the state of Internet security.
Even though the CRC32 bug has been found over a year ago, over 30% of all servers are still vulnerable today. Graph at http://www.citi.umich.edu/u/provos/ssh/crc32.png.
In February 2001, Razor Bindview released their "Remote vulnerability in SSH daemon crc32 compensation attack detector" advisory, which outlined a gaping hole in deployed SSH servers that can lead to a remote attacker gaining privileged access.
In November 2001, Dave Dittrich published a detailed analysis of the "CRC32 compensation attack detector exploit." This exploit is currently widely in use. CERT released Incident Note IN-2001-12.
At the Center for Information Technology Integration, Niels Provos and Peter Honeyman have been scanning the University of Michigan for vulnerable SSH server software to identify and update vulnerable SSH servers. However, scans of the Internet show that system and security administrators must react and update their SSH servers. At this writing, over 30% of all SSH servers appear to have the CRC32 bug.
A simple solution is to remove support for Version One of the SSH protocol. The majority of servers on the Internet support the SSH v2 protocol. To test whether your network has vulnerable SSH servers, you might use the ScanSSH tool.
References: "ScanSSH - Scanning the Internet for SSH Servers", Niels Provos and Peter Honeyman, 16th USENIX Systems Administration Conference (LISA). San Diego, CA, December 2001. This information is also available at http://www.citi.umich.edu/u/provos/ssh/
Don't play with your food, or your games. janolder writes "In the matter of the Civilization III translation project (articles on slashdot, apolyton and heise), the fans have gotten the short end of the stick. The project web site (translation.civ3.de) has been down for a while. Earlier this week, both the web site operator and Kai Fiebach, the project leader, signed Infogrames' cease and desists out of fear of further legal action. The legal position (not to mention the moral postion) of the fans did not appear to be too weak - EULA's are not binding in Germany and supplying patches to a program is certainly not the same as translating a book and distributing the translated manuscript.
Infogrames Germany has issued another press release (translation and my comments) justifying their legal action and position. It makes for an interesting peek into the mindset of a game publisher.
The good news is that Infogrames is considering a more timely release of Civilzation III in Germany.
The bad news is that the cease and desists apparently forbid any modification of Civ3 in any way, shape or form. So no more custom maps for your friends, custom rules or any such copyright infringing activity, please! Is it just me, or has the world suddenly become a less interesting place?"
Not as if Americans always know where we are, either. ByTor-2112 writes "Hate to be the bearer of bad news so soon after a story is posted, but as I commented on the previous story, it appears that galileo has some funding issues. Honestly, did anyone really expect the EU to go through with it? It took them long enough to agree on a common currency!"
Or is the royal web site down? Hmm. Maybe they should have stuck with Linux.
What do you want to bet that a Microsoft Rep walked in and said, "here's free software and hardware if you switch to IIS".
This sig has been temporarily disconnected or is no longer in service
Hey, the data about the Royal Page says that the Windows 2000 server has been up 5.56 days since the last reboot.
Is that a World Record for IIS?
-- Find the Truth...
"Alert
The operation timed out when attempting to contact www.royal.gov.uk."
*snicker*
-dk
Dream with the feathers of angels stuffed beneath your head.
Civ III was profoundly boring - well, that is, profoundly un-inspiring, I liked CivII and played it forever and was hoping CivIII would be new and neat and I'd get to take over the world again but it's just CivII w/ some improvements (one of which is to make the game much, much harder but just harder is not really that interesting). Between the insipidness of the game and the foolishness of Interplay Germany CivIII & Interplay are now on my shit list alongside notables like Office 2000 vba, Hewlett Packard, and IIS FTP services.
closed minded is as closed minded does
I disagree with the argument that translating and distribution Civ 3 is not the same as translating and distributing Harry Potter. A better analogy would be the translation and distribution of only the first chapter of Harry Potter: It would not be the complete work and it may stimulate sales, but it's still a copyright violation (hence the "in whole or in part" bit in licenses).
See? Valve and Sierra knew what they were releasing. They knew they could either make thousands of hard working, dedicated, skilled programmers, artists, geniuses into either heros or criminals. Back in the day, I actually just copied Half-Life from a friend. But when I started playing things like TFC and Counter-Strike (mods that could have been made illegal by Sierra/Valve if they wanted to), I ran out and bought a copy, because it was cool. I wish I would have pirated Civ 3 now, they're just being stupid about the whole mess. How could they make a profit from it other than by selling Civ3 in other countries at a much higher price than they're selling it here?
Job? I don't have time to get a job! Who will sit around and bitch about being broke and unemployed then?
Alas IP 194.203.40.17 is not answering
Help fight continental drift.
Keeping up to date with the latest OpenSSH releases always helps, but if you want to put an end to those SSH1 attacks (which can affect OpenSSH 2 and above in some cases, and may do so again in the future), add this line to your sshd_config (in /etc or /usr/local/etc):
Protocol 2
This will deny all SSH1 connections and force everyone to use SSH2 to connect.
They that quote Benjamin Franklin on liberty and safety deserve neither.
If you are worried about your machine being out of date, just do this:
% telnet 127.0.0.1 22
Trying 127.0.0.1...
Connected to localhost.localdomain (127.0.0.1).
Escape character is '^]'.
SSH-1.99-OpenSSH_2.9p2
if you see OpenSSH before version 2.3, you may be vulnerable (iff you have fallback to ssh1)
Things were much more fun with the original Civilization. You had to search through and patch the executable file, instead of editing a text file. And the data format wasn't exactly documented either.
Ah, for the days of 0/99/32 settlers...
Tarsnap: Online backups for the truly paranoid
Is it running on a tower server? /.ed? See, royal inbreeding does cause DNA problems.
The enemy is [at the] Gates!
Is HRH trying to upstage Diana's famous crash?
I'd have thought QE version II wouldn't have this bug.
Wait until they cut her off after three Windows Product Activations.
Already
And finally...
"Your highness, the people have no open source..."
"Well, let them run DRDOS!"
where the config files are slightly different than on other unixes:
/Applications/Utilities folder and open Terminal
/etc/sshd_config at the shell prompt and enter the admin user password when prompted
/etc/ssh_config
/etc/hostconfig to determine whether SSH is enabled on your machine
/var/run/sshd.pid` to restart it
1. log in to Mac OS X as an admin user
2. navigate to the
3. type sudo perl -i.bk -p -e 's/#Protocol 2,1/Protocol 2/g'
4. type sudo perl -i.bk -p -e 's/2,1/2/g'
5. type grep SSH
6. if the response is "YES", type sudo kill -HUP `cat
7. Quit the Terminal program
I use Macs for work, Linux for education, and Windows for cardplaying.
In reply to this post's grandparent: it has an uptime of 5 days because that's when they installed the new box.
/var overnight, before I could do something to fix the problem.
So instead of knocking the product because of its predecessors, you're suggesting we use a more valid reason?
How about security: every time Microsoft releases a bug fix, they introduce a new bug.
Not to mention "Behind the scenes" black magic: whenever my proxy sends an ident request to a Windows box, the box responds with a request for http://windowsupdate.microsoft.com/ident.cab -- filling up the server's
Let's not forget their plans for world domination. I must admit that the Linux community wants world domination too, but it would be an open domination, where anybody can change the source code (then patent it in some obscure country [or the US] and make a billion dollars).
But the world isn't all bad. All these stories about narrowing rights and such can be kind of depressing. I'd like to see Slashdot (and Slashdotters) post more of the non-depressing stuff. There's a lot of good out there too.
A solution to the problem with music today
...@Homelessness?
I know the joke's been made, but come on, it would have been so easy do add it to the title!
Color me silly here and all, but most of the time the teeming masses are not criticizing Microsoft for releasing a buggy web server they're banging on the IIS SysAdmins for not patching their systems. And here we have 30% of all scanned SSH servers wide open due to a dumb bug that has been documented for ages and ages?
C'mon guys. Either clean up your act or stop being the first ones to throw the stone.
The site www.whitehouse.gov is running unknown on Linux.
I like it...
Maybe someone can explain this to me, because it doesn't make any sense. Whenever I try to make a ssh2 connection and the server can't reverse-dns my host, it refuses to authenticate me, regardless of whether I supply the correct keys or passwords. My (minimal) survey seems to indicate that this is construed as a "feature". what's up?
The Royal Website has been slashdotted.. long live royal.gov.uk!
You people will pay for this - Infecting a government website with a virus (windows) and then nuking it (slashdot effect). Don't think just because your bigger than us we can't kick your ass - remember, our soldiers can _aim_
This comment does not represent the views or opinions of the user.
- static u_int16_t n = HASH_MINSIZE / HASH_ENTRYSIZE;
+ static u_int32_t n = HASH_MINSIZE / HASH_ENTRYSIZE;
Seems a bit zealous.
Only OpenSSH versions prior to 2.3.0 are vulnerable. OS X 10.1 uses 2.9p2; IIRC no version of OS X which included OpenSSH was EVER vulnerable to begin with. So, you can of course turn off ssh 1 if you desire, but you need not do so because of this exploit.
ehintz
...shooting heroin.
I can't believe how much time I've wasted on that damn game.... It never ends. Never again.
I want a two hour version.
I don't think the cease and desist order prevents innocent modification of components that Firaxis intended for people to make and distribute. I don't have Civ III (yet), but Civ II was purposely designed so that it could be easily modified by fans. It also included a map editor - I can't imagine that Civ III is any different, but perhaps an owner of the game would like to comment.
Things like rulesets were laid out in simple configuration text files, so that patches could be applied to change the nature and look of the game - right down to individual units and map squares. Civ: CTP 2 (a game I own) also has easily moddable rulesets (the game is so buggy you simply MUST install Apolyton's patch).
Beating down on fans and modding is stupid , the most successful games are those that have been modded (Halflife, StarCraft). Until I see firm evidence of something other than this translation case, I still want Civ III and will enjoy playing it.
"The universe seems neither benign nor hostile, merely indifferent." --Carl Sagan
Yes, it took a while, big changes are always difficult but in some 25 days the Euro will be in our pockets, making the "oh! no!, it will never happen" into something, that in fact, happened.
It will not be anywhere that difficult for Galileo to be approved, an independent positioning system is a strategic technology that is needed and that will be built. Wait and see for yourself.
George W. Bush
Tony Blair
Never underestimate the dark side of the Source
Honestly, did anyone
really expect the EU to go through with it? It took them long enough
to agree on a common currency!
and North America (Canada, Mexico & USA) has
how many currencies.....
M0571y H@rml355.
But with holes.
Yum.
"Would it kill you to put down the toilet seat?" -- Maya Angelou
I download the tgz and I build it and I scan around some web pages but I can't find a decent example of how to compile it and make it do something informative.
...
Takes me a while to find out that I need to do is (1) run nsslookup to get a real, live IP address and then (2) run "/usr/local/bin/scanssh 207.F00.bar", and then (after much mucking about)
I get nice cryptic output "SSH-1.5-1.2.21"
so does the host need an upgrade or NOT ?
and where do I find said upgrade ?
no wonder people go for Micro$oft. they ain't so snotty. they BS you around the block, but they have hyperlinks and installers, and I don't hafta be a damned rocket scientist.
p.s. This IS NOT A TROLL, been runnin' Linux and Java for years now.
The bad news is that the cease and desists apparently forbid any modification of Civ3 in any way, shape or form. So no more custom maps for your friends, custom rules or any such copyright infringing activity, please! Is it just me, or has the world suddenly become a less interesting place?"
They've just deep-sixed another game. MMPORGs can take that hit and survive, because learning a map that all must play on gives the learner an edge. But to stay viable, a developing strategy game like CIV III depends on the ability to create your own what-if scenarios and trade them with friends. You see, in time one friend gets a little too good and the rest get sick of playing him. So they play solo until they run out of scenarios and then they move on to the next game. At first it makes business sense because IG can be there to sell the next game grown from your existing code base. But it stinks for players, because they have to wait for it and endure all sorts of hype. However, then games like Freeciv come along filling that void and not costing a dime. So the unspent dimes are spent on games from other genres. Suddenly the IG marketshare has dropped (hey, they can't make every top game in every genre) and the top brass is wondering what went wrong.
Actually, they have changed ISP. Check out the netblock owner section of the Netcraft survey, the change in operation system happens at the same time as the change in ISP backbone.
What's with Adequacy?
Huh?
... is that the site is no longer an internal government one (i.e., one handled by the CCTA), but has been contracted out to the combined developers (such is said in the FAQ in the site, wherever that is), and is now hosted on the UK branch of PIPEX, sorry, UUNET. This can be seen on this ppage. All CCTA sites are still hosted on *NIX systems, as you can see.
James F.
Well, as much as www.royal.gov.uk may have turned to Win2k and IIS, www.parliament.uk is runnning...Microsoft-IIS/4.0 on Solaris???
Even more bizarre is that site's history:
Solaris
Microsoft-IIS/4.0
13-Sep-2001
194.60.38.75
Houses of Parliament
NT4/Windows 98
Microsoft-IIS/4.0
2-Apr-2001
194.60.38.75
Houses of Parliament
Solaris
Microsoft-IIS/4.0
4-Jan-2001
194.60.38.75
Houses of Parliament
BSD/OS
Microsoft-IIS/4.0
2-Nov-2000
194.60.38.75
Houses of Parliament
So, not only does Parliament seem to like changing their minds (sometimes radically) every few months, they also like using impossible combinations of OS and server. Hmm....maybe it's symbolic of something...(just kidding!)
Apparently whitehouse.gov runs on Linux.
o de _w=on&site=www.whitehouse.gov
http://uptime.netcraft.com/up/graph?mode_u=on&m
Move along, nothing to see here.
-Legion
Okay - so I had slacked and wasn't sure if I was up to date with my patches. I read the Razor link above and if you're lazy like I am here's the meat (and this isn't fscking redundant, there's like 30 links above):
..., len=88016, IV=0x0) at deattack.c:138
** Vulnerable:
SSH 1.2.24 - 1.2.31 (ssh.com) -- all versions to date of release of this advisory
F-SECURE SSH 1.3.x -- all recent releases
OpenSSH prior to 2.3.0 (unless SSH protocol 1 support is disabled)
OSSH 1.5.7 (by Bjoern Groenvall) and other ssh1/OpenSSH derived daemons
** Not vulnerable:
SSH2 (ssh.com): all 2.x releases NOTE: SSH2 installations with SSH1 fallback support are vulnerable
OpenSSH 2.3.0 (problem fixed)
SSH 1.2.32 (ssh.com, released 10/22/2001)
SSH1 releases prior to 1.2.24 (vulnerable to crc attacks)
Cisco SSH (own implementation)
LSH (SSH protocol 1 not supported)
** Other SSH daemons: not tested
To test your server, do this:
$ ssh -v -l `perl -e '{print "A"x88000}'` localhost
if you get a seg fault like below, you need to upgrade:
Program received signal SIGSEGV, Segmentation fault.
0x806cfbd in detect_attack (
136 for (i = HASH(c) & (n - 1); h[i] != HASH_UNUSED;
Now, happily for me, I didn't have this problem. This is good since I'm logging in remotely to my box in California from Spain, VIA SSH!! I'm an idiot as I've also shut off Telnet and if it DID segfault, I would've been completely screwed.
-Russ
Me
Being British I'd much rather rely on the US GPS system than a European one, you know where you stand and can trust the former yet a EU system could get restricted every time the French go off in a tif, which has happened numerous times. This is one bargaining (read: blackmail) chip we can do without.
;)
As for the Royal web server, I'm mythed, I always thought of the Queen has a neo-marxist with a tendency for anarchy, yet MS is more like a omnipotent unelected and overpowering heritable system of which you have no choice
...to point out there's no such person as the Queen of England? You wouldn't describe George W Bush as "The President of Texas" would you?
Another good tip with the ssh holes, and as a general priniciple, is to restrict IPs that are allowed to connect to port 22 (or wherever you run sshd) at the firewall.
"None are more hopelessly enslaved than those who falsely believe they are free." -- Goethe
He called you a troll because your original post made the "Slashdot is one person" logical fallacy. If one slashdoter states an opinion and another slashdoter states a conflicting opinion, there is no double standard. Only if the same slashdoter expresses conflicting opinions is there a double standard.
Repeat after me: slashdot is not one person. Slashdot is not one person. They don't have to all agree and be logically consistant.
If you want to point out logical problems in posters' philosophies, you need to do so by linking to a post where they say one thing and linking to a post where they say the oposite. And this is best done in reply to one of their messages, not as a parent post to a story.
If you don't understand this, you are stupid, or you are a troll.
This sig is false.
Now timothy, i know you're challenged, but could you please read this before making any comments about mods for civ 3?
From the website:
"One of the enduring strengths of the Civilization franchise has been its ability to be customized by the fans...The editors in Civilization III are only the beginning. Based on feedback from the mod and scenario community we will make additional improvements and incorporate new features. The editors are just tools, ones that the fan community needs to make meaningful by creating new scenarios with.. As those in the 'trenches' of creating new content run into limitations, we'll work on eradicating those barriers. Firaxis is very interested in Civilization III having an active mod community, but need to know where our efforts are best spent. Together we can make Civilization III a potent platform for not only exploring factual history, but also your creativity and interests."
I've used the map editor in civ3 and it's quite good. IMHO your view of them wanting us just to play the game as is and not be creative is too simplistic.
-- Political fascism requires a Fuhrer.
I am really sick of people on /. and elsewhere bashing MS admins for not patching their systems. There is a very good reason why I didn't patch my IIS servers until Code Red came out, and the same reason why I am always slow to roll out MS patches. BTW, I am a MCSE, and a damned good admin.
When I did start rolling out the patch for Code Red I lost two production servers because the patch was incompatible with older Compaq RAID controller drivers. Microsoft eventually made a note of this on the patch download page, but it was too late for me. If I had been able to wait even longer I would have known about it.
So, still to this day, I do not roll out Microsoft patches as soon as they are available. Not because I am not a good admin, but because I have a healty distrust of Microsoft patches. Please stop blaming the MCSE's, we are not all idiots.
Kind thoughts do not change the world
What are soldiers? We just bomb the bejeezus out of anyone until they give up.
I had no idea that you could apply online for your TV License in Great Britain. Or had to have one. Do you have to have one to watch your neighbor's TV through the window?
The latest Cygwin includes openSSH 3.0.1 and supports Protocol 2 (you can even run sshd on a Windows box and ssh into it).
-- Don't Tase me, bro!
"To test whether your network has vulnerable SSH servers, you might use the ScanSSH tool."
Which apparently just checks the version number and will therefor falsely identify Debian stable machines as vulnerable despite their being up to date on security patches.
Warning: this article may contain humor, sarcasm, parody, and perhaps even irony. Read at your own risk.
Suppose Voldemort Publications sells you an PDF of Black Magic for Beginners on CD. The text is copyrighted, but that's not enough for VP. So they make you accept a license agreement that specifies that you can only read the book directly off the CD and you may not manipulate the text in any way.
You pop the CD in your computer and discover that the text is in Ancient Etruscan. When you call up to complain, they explain that the English translation is licensed to Massively Manipulative Monopolies. No they don't know when it will come out.
No problem. You go to the Hogwarts web site and download a translation spell. But as soon as you begin to incant Logos Anglicia! a VP legal troll appears in a puff of yellow-green smoke. He accuses you of violating the no-manipulation clause in your license agreement. You try to tell him that such a clause is unenforceable, but he just shrugs and says, "We think it will stand up in court. You're welcome to consult your own lawyer, of course."
"This is ridiculous!" you say. "I acquired the book legitimately, and I have a right to read it."
"Well, we have a right to maximize our return on our investment. That's why MMM is handling the English version -- they're much better at marketing to muggles than we are. Now cut it out. This agreement is enforcable in the Court of Giant Warts!"
This wouldn't have been an issue with free software (modifying software is one of the fundamental freedoms all software users should have!). Stop spending your time and with proprietary software and spend that time with free software. Even if you're legally on the right side you'll get hassled by people who don't share the ethics of free software (corporation lawyers and government agencies that areunfortunatelyrapidly adopting a US view of copyrights, trademarks and patents).
Indeed she does still hold that title. I used to know her full grand gitre but it's slipped out of my mind for some reason. The natural place to look it up is on the Royal Family's website, but, oddly enough since they moved to IIS (another fine Microsoft product) it's down right now. Funny, I never can remember it going down before...
(I think it highly unlikely that it's slashdotted. Government servers designed for worldwide access are generally well able to handle this kind of load.)
OK, so I found it at the alt.talk.royalty FAQ. In the UK, she's called "United Kingdom: Elizabeth the Second, by the Grace of God of the United Kingdom of Great Britain and Northern Ireland and Her other Realms and Territories Queen, Head of the Commonwealth, Defender of the Faith". In her other realms and territories, she's styled slightly differently. The full list is rather lengthy, so check the FAQ to see it. Although "Queen of England" isn't found in there, it's certainly not incorrect to call her that.
And the brethren went away edified.
You get an advisory for something, anything... then you check versions and patch the software. It really don't matter what the advisory says. After all, they aren't going to send out an advisory for something trivial. If it's on a security mailing list, it's a potential hack or DoA, or at the very least, a user escalation.
:)
Especially for SSH. If -ANYTHING- for ssh comes up, just shut yo mouth and upgrade the damn software
Zodiac Survey
...But all our people have guns.
The average American both has, and knows how to use weapons, not just in Quake!
Our average guys here in the south can shoot off a fly's nads at fifty yards.
Didn't you ever watch Jethro and Jed Clampett?
Truth isn't Truth - Guliani
I hate MS as much as the next guy, but in supporting several hundred business clients I have to work with their products all day every day.
In short, if Win2K is locking daily then yes, something is misconfigured (try setting your CMOS to safe defaults) or actually broken (bad RAM or mbd) or you have a virus.
Sorry!
You may still be able to make other modifications to their software and distribute the patches, whether they like it or not.
Of course, instead of contributing to a commercial game without getting compensated for your work, why not just contribute to FreeCiv or similar games? Civilization itself seems mostly like a clone of older games anyway.
8 * "Sysadmins have to patch their systems."
How the HECK did you get past the compression filter?
Answering everyone at once, when I do "apt-get update; apt-get upgrade" I still get (open)ssh 1.2.3.
Installing "unstable" is *not* an option at many (most?) sites. You install an unstable package on a live server, you die. Or at least you lose all root access on the live servers. The problem isn't any single unstable package, it's their tendency to pull in other unstable packages. This can get out of control real fast.
Even installing from pool is problematic, but usually acceptable since you're compiling it locally and can avoid creeping dependencies... but some Debian tools require Perl 5.5 which breaks stable systems. If you're willing to devote a system to unstable, you might be able to create an installable package... but this is not something Joe User is going to be able to do.
So I stand by my point. If you require SSH protocol 2 (supported by OpenSSH 2.x and 3.x), you will knock out most Debian users until either Woody is released or somebody takes a honking big clue-stick at the appropriate Debian maintainers and openssh 2.x is released as a Potato security bug-fix.
For every complex problem there is an answer that is clear, simple, and wrong. -- H L Mencken
The dude mails Infogrames. The mail goes unread. The dude starts localizing the Civ3 files. The dude gets a shit-o-gram. The dude complies. Then another bunch of dudes come up and take the localization work underground under pseudonymes and they can't be tracked. Who lost here?
www.reptilianagenda.com
Royal.gov.uk is back
And it's displaying M$'s default page...
Snapshot
Clearly, Microsoft marketting saw this move to Linux as a major threat just as they did with the city of Largo in Florida. This time, they got through... who knows how they got past the "price/performance" issue though... (maybe they paid the guy off)
Anyway, I'm sure there are enough vigilantes out there who will be targetting this IIS implementation eh? Hehehehe
(...why do I get this creepy feeling as I write this? Ah well, I'll just take a nap... Oh yeah, disclaimer -- I don't really advocate or invite illegal activities. I'm just saying in my own way that I can see it happening.)
Disclaimer: I have no idea what I am talking about.
My beliefs do not require that you agree with them.
How the HECK did you get past the compression filter?
Sysadmins have to patch their systems.
Sysadmins have to patch their systems.
Sysadmins have to patch their systems.
Sysadmins have to patch their systems.
Sysadmins have to patch their systems.
Sysadmins have to patch their systems.
Sysadmins have to patch their systems.
Voila
IN> How about security: every time Microsoft releases a bug fix, they introduce a new bug.
C>Bzzt. Try again. Got a non-knee-jerk-propganda example? No?
It's the same thing for all programmers. See?
PROGRAMMER'S DRINKING SONG
100 little bugs in the code,
100 bugs in the code,
fix one bug, compile it again,
101 little bugs in the code.
101 little bugs in the code.....
EULA's are not legally binding in Germany.
I'll be the first to say that, all jokes aside.. as a Canadian, I find Americans, in general, to respect us as a country, and neighbor.
However.. ever heard of "manifest destiny"?
IT has long been part of the American culture tha the whole continent should be the United States.
Dear all, Thank you for your comments on the new UK Royal website. I am the lead developer of the web site and the content management system that powers it. We have spent the last 2 months feverishly working to get the site ready for launch day and all went well thankfully. The new site features many improvements including a Kid's Zone with Painting games, a complete and concise History of the Monarchy, and much much more. Please feel free to take a browse! Unfortunately, the recent outage (from about 8am GMT Tuesday 4th dec 2001 to 1pm Wednesday 5th dec 2001) was due entirely to out internet connection being physically severed. The line is owned by our ISP, and as such there was nothing we could do from our side as regards connectivity. Needless to say, the Windows 2000 servers stayed running the entire time during this outage. As an Internet company, we appreciate the benefits of many different operating systems, Linux included. But, considering the budget, the maintenance costs, and the development costs of this particular project, Windows 2000 is a no-brainer! I hope this clears up any questions you may have, and thank you for your opinions.
Point is that people who sell IP want to control how it's distributed. That's what drives their decision making. And the law, be it copyright, licensing, whatever, is almost always is on their side. Given the way the law is made, that's hardly suprising.
From the POV of consumers and artists, the results are often absurd. German gamers who can't play games they've paid for is one example. Another is music and literature that you can't listen to or read because the copyright holder is sitting on it. I myself know a couple of musicians who feel damn frustrated because their work is controlled by publishers who won't release or sell it back. Unfair? Absolutely. But perfectly legal.
.. in a production shop where NO PATCH WILL BE APPLIED TO A PRODUCTION SERVER UNTIL IT HAS BEEN TESTED AND CERTIFIED IN HOUSE.
And yes, I'm yelling here! This is a cardinal rule -- don't break it or your out the door.