Slashdot Mirror


Desktop Linux Sliding in Under the Radar?

Paul Johnson asks: "This article at ComputerWorld describes a sysadmin's discovery that many people in his company are installing Linux on their desktops without consulting IT. The writer is concerned with the security implications, but there is a wider issue. At present the 'official' penetration of Linux into the desktop market is something around 1%. The writer of this article doesn't give figures, but it sounds like he may have stumbled on several times that percentage of desktop Linux installations. If so then this is an important trend. Linux got its foot in the datacentre door in exactly the same way a few years ago, with unofficial installations doing odd server jobs. If you are a sysadmin, in an organization that runs Windows on the desktop, have you stumbled on many unofficial Linux installations?"

742 comments

  1. Not exactly ... by BabyDave · · Score: 5, Funny
    If you are a sysadmin, in an organization that runs Windows on the desktop, have you stumbled on many unofficial Linux installations?"

    I tripped over my mail server last week. Does that count?

    1. Re:Not exactly ... by Jeremiah+Cornelius · · Score: 4, Informative
      This has been going on for YEARS. I was doing so at Schwab in '97 - and reading "Chips and Dips" and "Rob Malda's Window Maker Site".

      I got about 4 or 5 of the Unx admins and a good number of the DBS'a doing this too.

      In small shops - we had 6 Linux desktops running at the Multi-Media Developer I worked at in '94. XFree on ATI Mach32, anyone?

      --
      "Flyin' in just a sweet place,
      Never been known to fail..."
    2. Re:Not exactly ... by MacJedi · · Score: 0, Offtopic
      woot woot Chips and Dips. The kinder, gentler, slashdot.

      /joeyo

      --
      2^5
    3. Re:Not exactly ... by Jeremiah+Cornelius · · Score: 0, Offtopic
      Wow!

      Another low UID! Cool. Somehow, we've remembered old passwords, and still haven't been driven off.

      --
      "Flyin' in just a sweet place,
      Never been known to fail..."
    4. Re:Not exactly ... by VPN3000 · · Score: 5, Insightful

      I am not buying into this article for the fact that I've worked in large 'shops' of 2,000 workstations up to about 8,000. None of these shops would find, then allow a non-approved OS to continue to run on their networks. This type of thing is basic "Information Security did a weekly scan, found it, helpdesk siezed the machine and re-imaged it with Windows 2000" routine.

      I used to agree with giving employees freedom to run whatever OS they are comfortable with, but you have to keep into consideration the Information Security view on things. A *nix OS with a few network tools installed, gcc, and some skills can lead to a lot of problems for the company.

      Think that's silly? Think again. Think about doing technical support for bitter and unthankful lusers. Your boss is an asshole. You make $23k/year and missed your shot as an [insert engineer/developer position here] before the bubble popped. No hope for a future with the company since they have a revolving door system in place where 3/4 of the low-level staff is on temporary contracts that expire every 90-300 days.. I know, it's sad and I've seen a lot of talent from people stuck in these types of jobs and feel terrible for them. But, this is a common person in technical call centers. I've seen enough from that single profile to type pages, but I'll stop and save it for another post.

      Do you trust this employee enough to let him run FreeBSD? You want him having direct access to the 'net without a proxy? I doubt it, especially not after that email where he asked questions about what type of traffic you monitor and how you do audits. What if he's okay but his box ended up getting owned because he downloaded bad BitchX source? That would mean another three day stint of no sleep doing emergency penetration tests, mirroring HD images, finding the exploits, sitting in meetings and explaining what all was affected hoping you didn't miss something critical. That's the tip of the ice berg when it comes to what happens when your office gets owned. Even if workstations are usable, every workstation on the local subnet and server they have ports open to via the firewall have to be investigated. This brings productivity for the money-making sides of the company to a crawl while sysadmins and security folks work to get things safe again. Somewhere around noon, the guy from Public Relations will likely be on the phone wanting to know what to tell CNN when he calls them back. Likely, there will be a news source online with details of how the exploit took place, but completely wrong and now the public and shareholders are going to wonder if credit card numbers were stolen, your ability to properly maintain infrastructure, etc. Then your stock price falls $2/share. That's potential millions depending on how big your company is.

      Sorry to ramble, I just wanted to stress the importance of IT policy and the headaches that can happen when the policy is too lax. I'm very pro-Linux/BSD, but not in an enviroment where it's not needed (All those workstations came with an OS you paid for anyway). I also think this treatment of unapproved OS's is very common due to thoughts and situations like the one above.

      My stories are actual events portrayed by actors.

    5. Re:Not exactly ... by websaber · · Score: 1

      I just visited a flight expo in new york and a lot of the unused overhead screens from different companies showed a red hat desktop. Mayby I shouldn't of been but I was suprised.

      --
      "A good friend will bail you out of jail. A true friend will be sitting next to you saying, 'damn....that was fun!'"
    6. Re:Not exactly ... by shri · · Score: 1

      Amen! And what about standard corporate applications like Siebel, Peoplesoft, SAP etc? Its ok to move some fringe desktops but the majority of the desktops exist for the purpose of running a (number of) specific corporate apps.

    7. Re:Not exactly ... by ParallelJoe · · Score: 3, Funny
      Well, I work at a large company. There are about 800 people in my building alone and they all have at least one computer. I have two on my desk. The first is a corporately supported Windows one. The second runs linux. I just popped in the Knoppix based Morphix live CD, got it working and then 'click' installed it to my hard drive. Well maybe not quite so easy and btw I am an IT guy.

      But the point is that no one knows it is running linux. The funny thing is that when I set it up I named it 'Joe' and then I set up the networking using dhcp. After a bit I wondered about this. Going to a putty terminal on my Windopws box I ssh'd to joe. Yep, corporate dns now has an entry for joe.MyCompany.com!

    8. Re:Not exactly ... by Anonymous Coward · · Score: 0

      No joke, I set-up and ran a Enterprise Level intranet site off of a ProLiant 2500 and Slack 7 while at Schwab.

      Unfortunately that all came to an end last October. Layoffs suck.

      We had just moved the entire beast to our NT-based CF servers when the walking papers came thru, so maybe it was time to leave.

      Most of the Admins knew and my DSO (data security officer) didn't really care, he knew that it was probably one of the most secure machines in the building.

    9. Re:Not exactly ... by Geek+of+Tech · · Score: 5, Insightful
      Not trying to be flaimbait, but, uh, if someone had a desire to compile a program, couldn't they just download MingW32 or DJGPP or something else?
      I don't know about your company, but at my school (I was resident Geek), we set it up so that the DHCP server would automatically set the proxy up as a gateway. We never had any problem about people accessing the internet without going through a proxy.
      And aren't the chances actually better of getting some form of backdoor greater for windows? Picking them up via email, bad downloads, even browser security flaws.

      I see where having an unauthorized anything running could be a problem, but just linux in general, no, danger isn't in the software as much as it is in the hands of the user.

      --
      Stop the Slashdot effect! Don't read the articles!
    10. Re:Not exactly ... by Penguin+Follower · · Score: 1

      if only i had mod points.... i'd mod you up

    11. Re:Not exactly ... by BrokenHalo · · Score: 4, Insightful
      I'm sorry, but I believe your post is largely FUD. It really depends on what type of work your shop needs to do. If you have a large number of people using their computers for a range of operations, it is counter-productive to force staff to use any operating system that, for whatever reason, they see as sub-optimal, no matter whether it be Windows. MacOSX or BeOS.

      In my case (I'm a scientist) I would be seriously inconvenienced if some pointy-headed bureaucratic fool came along and overwrote my Linux partitions with Windows, and my immediate reaction would be to take it up with his boss.

      You seem to be operating on the premise that all staff are luddites, vandals or criminals and not to be trusted. I would have thought that, far from losing sleep over this, you should be pleased that this is one person who is not going to be passing out viruses via Lookout Express. In any base, as long as you implement sensible policies (firewalling, quotas or whatever you need to do) there is no reason why your network should not operate transparently without applying unnecessary restrictions.

    12. Re:Not exactly ... by Malcontent · · Score: 4, Interesting

      Very few large corporations have the time or the tools to patch hundreds of MS desktops. As a result in every corporation there are hundreds if not thousands of vulnarable windows desktops and cluless IE users merrily surfing the web and getting hacked by script kiddies.

      --

      War is necrophilia.

    13. Re:Not exactly ... by Geek+of+Tech · · Score: 1

      Thanks man. It's the thought that counts.

      --
      Stop the Slashdot effect! Don't read the articles!
    14. Re:Not exactly ... by dagamore · · Score: 0

      What are you talking about, in both places I have worked as an IT person (both help desk and on site support) we would push out updates from the server, when they logged on to the network in the am. It is not hard to setup a system the pushes the updates to patch the new (or re-found) holes in windows setups. It does not require a person going on site to every pc and running the windows update util. Also every where I have worked, we had a COE (common operation environment) and if you were not on a testing team, and you did not have the COE desktop/OS/software or had any extra software installed, they would just re-image your workstation to bring it back to the COE standard. And it was nice :D

    15. Re:Not exactly ... by Anonymous Coward · · Score: 2, Insightful
      Jeez. Are you claiming that choice of OS makes it more difficult for discontent workers to do bad stuff inside your firewalls? That's just load of bollocks. There are enough rootkits and sniffers one can run on Windows to make it irrelevant whether someone has a Windows, Linux or BSD work station.

      That is; key distinction is not the OS, but whether the person in question is INSIDE or OUTSIDE your secure network. If they are inside, it's much more difficutl to secure anything in the intranet. Not impossible but difficult; need to make sure users have no admin/root access to their own systems, can not boot from CD or floppy; all the things one would do for publicly accessible terminals. Easiest way to do this would be to use, say, x-terminals (SunRays or such).

    16. Re:Not exactly ... by Anonymous Coward · · Score: 1, Interesting
      Many (most?) corporate apps are (or will be) thin client based web apps. App support is becoming a moot point. It's often the case browser is the only thing a peon needs (email client is nice to have too, but there are enough web-based mail systems available).

      Parent post is overrated nonsense, with some FUD thrown in for good measure. While there are some valid reasons for unifying desk tops (easier maintenance), msot points mentioned were not amongst them. The right option is to say "ok, you run it but we won't support it", not "no you run Windows as its secure".

    17. Re:Not exactly ... by Anonymous Coward · · Score: 0

      Good points...In the enterprise it takes managerial level decisions to truly switch.
      In the NOC it takes disgusted individuals to dual
      boot and make the change something they can live with.

    18. Re:Not exactly ... by tkg · · Score: 5, Interesting

      Well, my employer allows virtually any os that a given user might need to run (we're a research facility). The IT people do regular vulnerability scans of the network and the linux users that I know (myself included) have never failed to pass the scan. The same can't be said for most of the MS users, or event the Solaris users for that matter. I don't hear much from the MAC users.

      I guess my point is that it is not so much what os a person runs as it is the IT policies and how well they're enforced. Keep up with security patches, don't install untrusted software, good password policy, etc. These things aren't unique to any particular desktop OS and any user could potentially violate them. However, any user that depends on their system for everyday tasks isn't going to intentionally munge it up since they lose the use of it while you may be inconvenienced with rebuilding it. There is always the danger of the 'malicious insider' and we risk it every summer with an influx of student help that always includes some idiot that will try 'bad things'. Deal with them swiftly and harshly and make sure everyone knows about it and you can keep it to a minimum, but you can never eliminate the risks completely.

    19. Re:Not exactly ... by hellraizr · · Score: 5, Insightful

      I think most people are missing the point here. most, AND I MEAN MOST companies are not huge corporate giants running 3 flavors of oracle/informix/peoplesoft. in fact, most huge places still don't run windows. I have worked for 3 seperate companies where almost every male employee ran linux. especially in ISP and hosting/datacenter enviornments. this view is typical of the MCSE type IT person who eats, sleeps, sh!t's and breathe's micro$oft and ZDnet. I personally have noticed alot more personal freedom to run whatever OS you choose, as long as your firewalled or are fully capable of doing your job. I haven't used windows in the work place since Netware 5.00 was released and I don't see my self doing it any time soon either. another thing to point out. you made a mention of proxy? again, purely micro$oft induced thinking. proxy servers are great for low bandwidth connections but are extreemly exploitable by nature. in trying to put up a protection point you expose your self to the internet even more. true ip routing and firewalls are your best bets for internet access and security. also they allow you to control alot more of what your company can do online without infringing on exec's ability to communicate in private. the internet and corporate computing were built on unix, are _STILL_ unix based in some variant or another, AND ALLWAYS WILL BE. it still takes a farm of dual xeon windows boxes to do what 1 p3-ghz with 256mb ram unix box can do in it's sleep. in the broader scheme of things I personally see linux coming of age in the workplace as a desktop OS. new tools enable it to be far more expandable, secure, and user-friendly than windows can ever be. if your a stickler for IT security, there is no reason on earth to run windows in a corporation. the NSA said it best "There is not enough man power in the entire US government to secure windows for proper use by federal agencies".

    20. Re:Not exactly ... by RealUlli · · Score: 1
      It's part of the job of a sysadmin to be paranoid WRT his users. That post may largely be FUD, but the social problems he's facing are real. A large percentage of cracking comes from people within the company.

      What he's painting wrong are the non-standard systems being an extra source for breakins. I'd rather think that installing a completely different OS on a machine for work, to do work better (even if it's only subjective) is a sign for superior dedication to the company, because much of that install and maintenance time gets done after hours.

      Then stomping that install might very well *breed* behaviour the grand-parent-post described...

      Regards, Ulli

      --
      Simple things should be simple, complex things should be possible.
    21. Re:Not exactly ... by Nucleon500 · · Score: 1

      The computers and the network belong to the company, so the company can decide what software they will allow them to run. But the computers are in the employees' cubes, and they have complete physical access, yet they are ignorant and possibly malicious. The clients are untrusted! If the integrity and security of the network depends on your complete control of the clients, then the network is badly broken.

    22. Re:Not exactly ... by Anonymous Coward · · Score: 0

      Think about doing technical support for bitter and unthankful lusers. Your boss is an asshole.

      Perhaps as more IT positions are outsourced, "lusers" and bosses will get a little more respect.

    23. Re:Not exactly ... by xombo · · Score: 1

      It totally agree with you. Anothing thing I was thinking was that if an OS is able to send anything over the network that will compromise the network, than their is somthing flawed with the infastructure or way the network was setup. Port 80 to the WAN should be blocked if they don't want people to access the web without a proxy. If a network is able to be infected just becuase of a different OS is being used, then I see no reason why anyone couldn't waltz in with a modded xbox or a sharp zarus and infect the whole network. Security through obsurity doesn't work.

    24. Re:Not exactly ... by xombo · · Score: 1

      * obscurity

    25. Re:Not exactly ... by elvum · · Score: 1

      I think the point is that it's *easier* to keep all your PCs up to date with security patches if they're all running the same OS, which for most companies is going to be Windows NT or a sucessor thereto.

      Also many companies have policies against their employees having root/administrator rights to their own machines, something which is hard to avoid if they installed the operating system themselves secretly.

      Well ok, maybe the parent post didn't make those points, but it should have :-)

    26. Re:Not exactly ... by Kirth · · Score: 1

      I did this in 1996, in an otherwise netware-and-windows 3.11-shop. They were especially amazed about my mars-nwe (a netware-server in 15 minutes, incredible). Well, the linux wasn't shut down, but I wasn't allowed to use mars-nwe anymore, since it confused the users.
      --

      --
      "The more prohibitions there are, The poorer the people will be" -- Lao Tse
    27. Re:Not exactly ... by IamTheRealMike · · Score: 1

      Where I work there are several networks, the global corporate (classified, it's a list X company) network and then a group of disconnected unclass nets. Quite a few of us here run Linux on the unclass nets, and that's cool. Can't do it on the classified net, they run scans constantly for unknown software.

    28. Re:Not exactly ... by Anonymous Coward · · Score: 1, Interesting

      The problem of installing desktop Linuxes on corporate networks isn't whether Linux is secure or not. The real issue is that IT needs to know that 1) is it secure 2) what do they need to do to make it secure 3) how can they keep it secure 4) how they will help users with other problems (altough this would not be so important if only a bunch of Linux enthusiasist would want to install Linux). However they do need to be sure about security, otherwise they are not doing their job.

      Supposing IT is not full of Linux specialists, they would need to learn quite a lot about Linux, take courses, hire more people etc. etc. If you are just managing to control your current 1000 - 8000 or what ever number of desktops, you do not want to make the extra effort without pretty good reasons. Given that the current staff probably knows Windows but not Linux, it would be pretty difficult to find these reasons.

      It's a bit different thing to have Linux servers (maintained by your trusty Linux knowledgeable part of your staff) on your network than to have (by definition) inexperienced users try and install Linuxes all around your network.

      Also, the above does not necessarily apply to your average University etc. With corporate IT, it would be more like this...

    29. Re:Not exactly ... by aziraphale · · Score: 2, Interesting

      It depends a great deal on what kind of shop you're talking about, doesn't it. I'm guessing in the situations you're talking about, the computers were used as basically two things: a replacement for typewriters, pads of paper and filing cabinets; and as terminals for accessing big centralised business applications. This is still what business computing is for most people.

      In that situation, you're not in the business of running a computer network, you're in the business of supplying electronic stationery. You could theoretically replace every machine with a green screen terminal linked in to a big ol' mainframe, and productivity would barely dip. (okay, in some graphics-intensive environments, such as engineering drawing, laying out newspapers, etc., maybe you'd have to use X terminals, or similar, but the effect is the same).

      There are situations where the computers on desks aren't just document-editing dumb terminals, though. They are genuinely used by the employees who work with them as general purpose bits of hardware that help them solve problems. Research groups, software developers, tech support shops, labs, hell, even creative places like design studios, visual FX teams and so on. In shops like that, you're supplying every user with computer equipment to help them do their job. If they want to replace the OS to do their job better, woe betide any sysadmin standing in their way. If an ad agency's client wants a particular visual effect, and the cheapest way to do it is to install Linux, so you can run some bit of software off sourceforge, then you're not going to make yourself popular if your first reaction is to cut the guy's network access off mid download, and send down the two heaviest helpdesk guys to cart the computer away.

      I worked for a long time in a company where I felt the sysadmins had a near impossible job. Half the staff in the company were running multi-boot systems with development Linux kernels, betas of MS operating systems, and running their own web servers, SMTP servers, hell, even setting up their own NT domains. If the sysadmins had stopped people from doing this, then the company's main activities would have come to a grinding halt. That the sysadmins managed to run a network that allowed this kind of anarchy on one level, while ensuring the email always got through and the finance guys could access their SAGE system, was a source of some amazement to me.

      Not every company can treat the computers as dumb terminals and dictate how they're used from a helpdesk console in the sky.

    30. Re:Not exactly ... by Anonymous Coward · · Score: 1, Interesting

      I want your job...

      Windows sucks and it's all they know.

      Is General Motors, North American Operations, big enough? Because they are exactly the idiot you describe with only three options for software.

      Funny thing is, they run a ton of Sun Servers, most of which break at a fantastic rate, and yet they tell me that Perl is not an approved programming language and I'm not allowed to use it.

      I asked them to let me know when they were going to remove Perl from all the servers so I could stay home that day.

      They are considering the possibility of allowing some perl installations to exist even though they consider it to be inherently insecure, unstable, non-practical, and not of enterprise grade

      Most companies are that stupid and few allow any flexability in the software you choose to use. If you think otherwise, then you haven't been around enough in the entire spectrum of industry in America.

    31. Re:Not exactly ... by Anonymous Coward · · Score: 0

      heh... this debate (and seeing the score you received for this information versus the fud you replied to) reminded me of all time favorite Slashdote quote:

      "I see more WindowsXP/NT ignorance in here than I see Linux/Unix ignorance in an AOL newbie room."

    32. Re:Not exactly ... by Ed+Avis · · Score: 1

      The question of whether the machine runs FreeBSD and the question of giving direct unproxied Internet access are completely orthogonal.

      Any bad things you can do with FreeBSD can also be done with Windows. It has a TCP/IP stack too, you know. Downloading bad source or trojaned binaries is no less likely just because you run a different OS. Any attacks that could be launched from a Unix box could equally well be done from Windows. Perhaps on Windows you would need administrator rights to send certain packets; the same applies on Unix with root access.

      A Windows OS with a few network tools installed, gcc, and some skills can lead to a lot of problems for the company. The operating system is not the important thing.

      --
      -- Ed Avis ed@membled.com
    33. Re:Not exactly ... by VPN3000 · · Score: 4, Insightful

      No FUD, sir. Information Security groups have got to view the employees of a large company as untrusted, unproven people as a whole. Our capitalist and litigation happy society requires this. It's not like when you go through any other form of security it's loving and trusting. Look at airport security, the police, anything to do with protection usually starts off with the attitude of not being too terribly trusting.

      Also, I was not trying to give a full IS proceedure, just a quick run of some thoughts of what I have experienced in the past decade.

      For starters:

      Linux, MacOS, etc is not 'sub-optimal', if your corporation purchased copies of Windows with their workstations, it seems like an even larger disregard for cashflow to not utilize what they paid for. Your scientific and my engineering minds think 'Well, I get more done in Linux', of course we do, but when you sit in with a Loss Prevention group the removed/unused copies of software are considered a total loss.

      Your situation is what would be considered a special case by an IT staff. You are a scientist. Silly goose, you will probably need all kinds of things a typical employee will not need. Think about the percentage of scientists versus customer service reps and support people in call centers. Think of the costs associated with each one of these people anually versus what you cost. It's a big difference.

      You speak at the end about trust and the suggestion that a network operate transparently without many restrictions. You have to understand that most companies are not in the ISP business for their employees. If you sit down in front of a computer in an office, it's their network, their assets, their butt on the line, their bandwidth costs, etc.

      For example, I have worked in a group who's new office was suffering terribly. About a 1400 user network, but the bandwidth leaving the building was always pegged. Upon watching traffic for a few days, it appeared that a major portion was porn and streaming media traffic. We implemented a filter file for the proxy and traffic went from ~97% down to ~30% utilization. This sort of thing is very cost effective and saves people from themselves (female employee walks up on porn mongering male, female complains, male goes unpunished, female cooks up discrimination suit, etc -- just preventative medicine, not a cure for a likely issue in the future).

      I guess those who are knocking my tales have never been exposed to a real IT group before. Either that, or they are prepared to lose their jobs someday due to a lack of enforcement or policy that matches your typical fortune 500 company. The suits will not have much pitty for your balls to give excess freedom to employees with their investor-purchased resources.

      The downfall of your average geek is the inability to ever see things from an executive, bean counter, or investor's point of view. Threats are real, liability is real, the end result of your investments are real. The joy of an office behind a very trusting packet filter is short lived and a flagerant disregard for company assets, especially if the company is publically held. Your investors are well within their power to take you to court and sue you for every dime you have if there is big enough loss associated with an act that was easily prevented. We never know the limitations of these types of suits because they are civil and not criminal. In a civil suit, you never know if you are going to be made an example. For instance, the massive settlements on people burning themselves with McDonalds coffee. You just don't know what's going to happen. At least with a criminal case, there are boundries clearly defined by law.

      You go back to being a scientist and I'll go back to saving people like you from yourselves with your lack of understanding regarding the need for real security policy. I promise I won't pick apart or call FUD when you speak of something technical regarding your line of work... That is, if you don't tell me ficticous realities about how e

    34. Re:Not exactly ... by VPN3000 · · Score: 1

      Good thinking, but if you fire someone and make an example out of them that is brought up by managers on a regular basis when dealing with new hires or other employees, you put yourself in the position of facing a possible suit from the fired employee.

      In most companies large enough to have a HR team, you will typically find policies that managers must abide by concerning terminations and what details you share with anyone about them.

      From a company's angle, they must do a bunch of things that sound really silly to cover themself in such situations. All that stuff is silly and sounds like crap until you can honestly speak out during litigation demonstrating evidence that your company did all it could do, in a reasonable means, to protect itself from said situation.

      It's much like having a cop watch you intentionally walk in front of a car in hopes of quick money. Sure, the injury will be the same but you have nobody to collect from since it was your own dumb self that jumped in front of that car with reckless intent.

    35. Re:Not exactly ... by captainfugacity · · Score: 2, Informative

      Actually that's how it is in most companies that have anyone half competent. I'm sysadmin with a real engineering degree, the engineering degree is used more than the sysadmin hat. Everyone on my network is an engineer or scientist. there is NO WAY i would let these people install their own OS, and we are a small house. At the medium sized engineering firm I was at before this, installing your own OS was a termination offense. Having a pHD and years of experience in field doesn't make you some 3l33t3 4u43 with computers. If a user needed that linux partition they should have come to me first. When you call me a bureacratic fool to the VP because I overwrote it, I will calmly explain to him that your actions put us at risk for a hacker to compromise our systems and steal our exposed IP, or allow a disgruntled employee to steal the VPs email. The VP will calm you down and be polite and tell you to put up with the rules and ask IT to install any operating systems you need. IT will have Root on that box. Then he'll privately tell me that he knows you're being arrogant and that security of IP is priority number one and I should come to him if anyone else is putting the future of the company at risk. "Operating on the premise that all staff are luddites, criminals, or not to be trusted..." Go work some time at an IT helpdesk and you'll realize that this is a good assumption.

    36. Re:Not exactly ... by VPN3000 · · Score: 1

      That's why you have firewalls, SMS updates, proper subnetting with segregation of workstations & servers and a tight IT policy. You have to maintain what control you can establish or the end result will be no control.

      Again, my thoughts are not hypothetical and just parts of the practice needed to maintain a minimal security level.

    37. Re:Not exactly ... by schon · · Score: 3, Funny

      The funny thing is that when I set it up I named it 'Joe' and then I set up the networking using dhcp. ... Yep, corporate dns now has an entry for joe.MyCompany.com!

      You should have called it 'www'.

    38. Re:Not exactly ... by madfgurtbn · · Score: 4, Insightful

      You are scaring me... :-)

      First a minor quibble--you say:
      if your corporation purchased copies of Windows with their workstations, it seems like an even larger disregard for cashflow to not utilize what they paid for. Your scientific and my engineering minds think 'Well, I get more done in Linux', of course we do, but when you sit in with a Loss Prevention group the removed/unused copies of software are considered a total loss.

      If a worker is more productive in a differennt OS or Office Suite or whatever, then the monetary cost of that unused software is insignificant. Not to mention that the company shoulnd't be buying software unless it will be used.

      The bigger problem with your entire post and attitude toward users is best seen here:

      People need to quit thinking they have rights to anything in an office. You do what they say or find work elsewhere. There's a big job market out there right now, lots of options, right? :)

      I see the smiley, so I'm hoping this is mostly a joke, but if a company harbors contempt for it's employees, it is doomed. If the option is "my way or the highway", the good employees will eventually choose the highway, regardless of the economy. All you will have left will be compliant losers who don't think for themselves, managed by control freaks who have to do all the thinking for them, deciding which color pen to use.

      Or which OS.

      --
      Send lawyers, guns, and money. Dad, get me out of this.
    39. Re:Not exactly ... by Anonymous Coward · · Score: 0

      You missed enterily the point.

      It is not...
      "no you run Windows as its secure",
      but...
      "you will run [whatever] as it's *approved*"

      On a big enough environment *anything* connected to the corporate network (be it the coffe machine) must be on the *approved list* no matter how good or idiotic it is. It is the only way for some safeguarding (either side: for the corporation, for the user and for the IT personnel).

    40. Re:Not exactly ... by Jarlsberg · · Score: 1

      Heh, your post should be labeled Funny as well as Insightful. FreeBSD folks are not going to like your "one guy running FreeBSD brings down company" thing, but what the h*ll. ;P

    41. Re:Not exactly ... by VPN3000 · · Score: 2, Insightful

      "I see the smiley, so I'm hoping this is mostly a joke, but if a company harbors contempt for it's employees, it is doomed. If the option is "my way or the highway", the good employees will eventually choose the highway, regardless of the economy. All you will have left will be compliant losers who don't think for themselves, managed by control freaks who have to do all the thinking for them, deciding which color pen to use."

      I'm not saying it's the way things should be. It's just the way things have evolved in larger companies. The reality of a 'right to work' state is basically what I said. It's just like office dress codes, codes of conduct, etc in the workplace.

      I would quit dribbling over worries about what OS is used and that sort of thing. Just think about all the poor saps in this world who are stuck having their hair cut a certain way, wearing uniforms, being forced to address any slime-ball customer as 'sir' or 'maam', codes against visible tatoos, etc. These are far more intrusive control measures employers inflict on their employees, not to mention far more widespread than, say, a tight IT policy where Jill can access all the databases required to do her work, but not her favorite manporn site.

      Notice though, how I never said that any of these companies do not allow various OS's in particular circumstances. It's just another of 1000 rules in any corporation. To get around the problem, simply fill out a helpdesk request for permisson/reasons for the need of a 'non-standard' OS to be installed and they can get with your technical lead and make sure the request is valid and you are in the clear if there is a job need for it.

      Anyway, always assume my thoughts in these posts are incomplete. I just type and hit submit. My goal is to generate thoughts more than to give factual details with all my points well covered.

    42. Re:Not exactly ... by Anonymous Coward · · Score: 0

      Real Scenario, Really Happened,

      User: My computer isn't working right can you fix it.
      IT Sup: what's the problem?
      User: i don't know the mouse doesn't work right
      IT Sup: what did you do to the mouse?
      User: nothing i didn't do anything
      IT Sup: ok i'll come and have a look
      at the desk.
      IT Sup: hmmm mouse click on items isn't working. did you change anything?
      User: no
      IT Sup: ok one second.... (checks mouse settings using keyboard shortcuts to get there)... who changed the double click speed to really fast?
      User: oh i was doing something in those options earlier but i didn't change that
      IT Sup: well you changed the double click speed to faster than humanly possible, please just leave the settings alone.

      Would you like me to tell another one of these delightful stories? i have hundreds nay thousands of them.

      User's on the whole including programmers are not to be trusted to either tell you the truth or to know what they are doing with their machines, a great percentage of IT Staff's jobs are taken up by user's doing things they shouldn't be doing, the original poster is correct in what he say's although i don't agree with all of it, but from an IT angle, user's are their own worst enemy.

      and if somebody in that same company had installed an OS on their machine without IT's say so, they would have been frog marched out the building, for good.

      PS not all user's are luddites or theives or hackers or liars, just the majority, you r the diamond in the rough dude!

    43. Re:Not exactly ... by Anonymous Coward · · Score: 0

      A *nix OS with a few network tools installed, gcc, and some skills can lead to a lot of problems for the company.

      No doubt, but the same can be said for any operating system. You do know that network tools and GCC run on many operating systems, including Windows, right? You do know that this software isn't necessary to run a unix-like operating system, don't you?

      Do you trust this employee enough to let him run FreeBSD? You want him having direct access to the 'net without a proxy?

      Erm... huh? There's nothing magic about FreeBSD that lets you access the web where other operating systems can't.

      What if he's okay but his box ended up getting owned because he downloaded bad BitchX source?

      Source on its own does nothing. Why are you letting him install software anyway?

    44. Re:Not exactly ... by chileno · · Score: 1

      I've STFW for this particular quote from NSA, But I couldn't find it.
      I'm trying to convince some people of the convenience of linux in secure environments, and this quote could be extremely useful.
      Thanks.

    45. Re:Not exactly ... by Anonymous Coward · · Score: 0

      Actually, I'm an aerospace engineer witha leading Aerospace company. Before that I was an engineer with a smaller defense contractor. In both places I've run Linux as my primary desktop. I didn't try to hide it from IT ... it was done with their full knowledge & consent, and the understanding that they would only support the corporate standard.

      Frankly, I am far more productive on my Linux box then with a windows box. If nothing else, working with our Unix based computational resources (SGIs, and a Beowulf cluster) is far easier/more transparent.

      Actaully, I think the IT guys like it ... they're mostly old Unix geeks, and when the shit hits the fan on the Winows side, mine is one less box to worry about.

      And finally, regarding trust & employees. I know this sounds condescending, but engineers & scientists are simply not the same as call center employees & such. Frankly, I'm trusted with far more then just some piddly access to the corporate network. Get over yourself.

    46. Re:Not exactly ... by cshark · · Score: 1

      I'm a government contractor.
      Installing any unauthorized software on federal resources could land me in jail.

      It would be nice if they ran linux. In fact, the IT director here thinks Linux is a great idea too. But the CTO has contracts with Microsoft and HP.

      So that's what we're stuck with. We had about a dozen web servers running linux in the organization, but they were recently replaced by windows 2003 boxes in the interets of consistancy.

      Personally, I think Linux is the future of computing. But the governmental agency I work for feels that they have a worth while investment in Windows. Why argue?

      --

      This signature has Super Cow Powers

    47. Re:Not exactly ... by johnnyb · · Score: 2, Insightful

      I'm the IT guy at my (small) company (I also wear many other hats around here). Anyway, my job is to do the following: support everyone else in what they are doing.

      When people buy machines, they don't go through me. They have to justify it through the accounting guy. I only get involved if they don't know how to set it up on the network. In fact, I usually don't know about computer purchases until _after_ they've arrived.

      The reason? People use what they need to get the job done. That's not my business. My business is to help all the computers talk to each other so that we are more productive.

      The threat facing companies is not someone installing their own OS on the computer. The threat is every person who doesn't know about computers running Outlook.

      We run Windows 9x, 2000, XP, Mac OS 9, Mac OS X, and RHL here, and I just keep Appletalk, NFS, and SMB running on the server, as well as DHCP.

      I have never seen a company with a truly secure intranet - most of them are just appearances of security. To have a truly secure intranet it requires that you implement security policies that waste time and productivity. When severe security policies are implemented, the users just go around them, making it even more secure than if there were lax protocols.

      Case in point - the _big_ company I used to work for kept all of their root passwords for their UNIX machines in an access database that was available on the intranet, and on several desktops. I'm sure they had access restrictions on the file, but really, trusting SMB for every server's root password? Putting them all in the same file, in an Access database, where many users copied it locally to their own hard drive?

      If you don't believe me, email me and I'll tell you which company I'm referring to.

    48. Re:Not exactly ... by mwood · · Score: 1

      As far as creating an additional load on the helpdesk, I can't recall the last time I asked ours for help with Linux. Oh, wait, now I remember...it was "never". (But sometimes I *give* help with Linux. Does that make my HD cost negative?)

    49. Re:Not exactly ... by Malcontent · · Score: 1

      Firewalls don't always help. Once the hacker is in via IE they can implant any kind of program and from then on the desktop is initiating the traffic. Most firewall rules will let the desktops go out on commonly used ports and the hackers take advantage of them.

      BTW.

      SMS is big, ugly and expensive. It requires a ton of effort. It pushes the TCO of windows through the roof. It is truly the largest hidden cost of deploying a windows network.

      --

      War is necrophilia.

    50. Re:Not exactly ... by johnnyb · · Score: 1

      "Amen! And what about standard corporate applications like Siebel, Peoplesoft, SAP etc? Its ok to move some fringe desktops but the majority of the desktops exist for the purpose of running a (number of) specific corporate apps."

      Actually, many of these can be run on Linux.

      I ran Oracle Applications 11.0.3 on Linux just fine. The only bug was that sometimes I had to click the menus more than once. Interestingly, at the time, it was more stable on Linux than Windows (I'm not counting UI quirks as stability issues).

      I believe SAP runs on Linux. I know their server does and I _think_ the client does, too.

    51. Re:Not exactly ... by johnnyb · · Score: 1

      Doesn't this happen every time an Outlook user opens his mail?

    52. Re:Not exactly ... by Anonymous Coward · · Score: 1, Insightful

      I think you've completely missed the point that the replies are trying to make.

      You have a very concisely worded, coherent, almost literary post on how the IT department views themselves as the enemy of all computer users in their charge. Nicely done. You've pretty much displayed the epitome of the IT head that every script kiddie in the world is trying to rape.

      There is nothing invalid in your statements on the whole. You've expressed exactly the concerns of upper management and how both people and capital investment are just systems... all can be liquidated and easily replaced. All need to be visciously chained to corporate regulations in an effort to protect yourself from the shadowy unknown of civil liability lawsuits. Thus giving upper management a constant reason to whine, flex their muscles and justify their otherwise palsy existance... and enabling the lawyers to stay on retainer for yet another year.

      Lighten up.

      Most people here are simply trying to tell you that it doesn't matter how the IT runs their department... your going to have to deal with internal damage. It's part of life. Some one is going to use that only open port to connect to the outside world and do what they want to do. Whether that's an ftp connection for exporting intellectual property... or downloading porn. In the end the IT department can only make it more difficult, but can not stop it.

      In reality, if you treat you users like the enemy... you will get your pants torn off and butt F*@# hard, all because you treat your employees like any one else on the streets... and not as part of a team. If they themselves don't know how to do it, I guarantee there's a friend of their's who does. And since you've been so kind as to homognize the system so that all diversity is removed, your vulnerabilities are MUCH more exposed.

      Treat people as if they're jews on the way to Aushwitz, and you're just the engineer... and see what happens.

    53. Re:Not exactly ... by SyniK · · Score: 2, Insightful

      Point 1:
      No one is willing to pay for security any more! No
      one gives a damn! So your Information Security claim is irrevelant. Why is Windows on the desktop? Because it's quick and it's easy and when it gets hacked you just reinstall. It's cheaper to ignore the security problem.

      Point 2:
      Yes threats are real (see point 1), but you have products to ship, contracts to uphold, and work to get done. If Linux allows you to do that faster, it makes good business sense. If you don't want to pay the tech support people $3 more because they have to know Linux as well... It makes good business sense to have Linux be hush, hush.

      --
      -Tom
    54. Re:Not exactly ... by VPN3000 · · Score: 1

      I'm light as a feather. I'm just giving a single view I've seen expressed by multiple corporations.

      It's a dirty world out there, just because I remind folks of it, doesn't mean I support it's practice.

      The funny thing is, you can talk about such practices all day around non-techies and they will see it as a part of business and normal, efficient practice. Speak of giving Sally access to the servers she needs and nothing else to AOL Chat people and generic geeks, and suddenly Hitler, mistreatment of jews, human rights and everything else under the sun comes out as a comparison.

      Also, the engineer isn't the one making IT policy decisions. That's typically done at a VP per the advice of engineers. Perhaps you were speaking of a train conductor/engineer. Beats me. Either way, no human rights are destroyed, no dead babies are born, no other horrible things are going to happen when you give an employee a computer for a job and expect them just to do their job with it.

      For instance, you don't supply construction workers with Internet access while they are digging a ditch. You don't issue a company car for employees to take cross-country personal road trips in. What makes everyone think supplying unrestricted Internet access or OS freedom while at the office is so important? They need to be doing their job. You know, that thing that pays the bills and keeps capitalism flowing. :)

    55. Re:Not exactly ... by winse · · Score: 2, Interesting

      Where I work (big shop 4000+)there is a "cold turkey" project that is a pilot for those interested in running linux. This is to work out any kinks in the original linux on the desktop plan. The bean counters here understand that buying windows and MANY other microsoft products is costing them A LOT of money. Of course you can't do everyone "cold turkey" but a SMART CIO Cxx has a OSS game plan.

      --
      this sig is deprecated
    56. Re:Not exactly ... by BrokenHalo · · Score: 2, Informative
      Hmmm. You seem to agree with much of what I was saying:

      [snip]We implemented a filter file for the proxy and traffic went from ~97% down to ~30% utilization.

      That is exactly what I was talking about when I mentioned applying appropriate security and traffic measures. I fail to see any difference accruing to the user's choice of platform.

      [snip]You go back to being a scientist and I'll go back to saving people like you from yourselves with your lack of understanding regarding the need for real security policy.

      FYI, I spent 15 years as a systems programmer specialising in security before I jumped fields into biotech, so I believe I have a claim to know what I'm talking about :-) and IIRC just about every major Linux distribution I have come across is arguably more secure by default than Windows can be with a lot of tweaking from sysadmins.

      Ultimately, though, security should be applied at the network level, particularly if, as you say, you can't trust your users.

    57. Re:Not exactly ... by redtoade · · Score: 1

      (I wasn't logged in previously, and thus it posted as A.C. My apologies)

      Yes, the train to Auschwitz. It had an engineer. He made no decisions, just went where the track took him. It's exactly the same as an IT person hiding behind corporate policy.

      I guess what ticks me off is that you're obviously intelligent. You're not the typical 14 year old "M$ sux u l0zer" crowd that posts here. And your points are right on the mark, so you've been exposed to the realities of business. To which frankly most here are completely oblivious. (Which is why Linux isn't really on the desktop).

      But it does offend me that even after exposed to it, you almost seem to defend it. Perhaps that wasn't your intent... but you made no counter statement disclaiming your opinion in your first post. Which makes me think that you've just decided to suck it up and live with it. It was your comment about the poor job market that clinched it. As if you didn't have a choice.

      The Auschwitz comment isn't about human rights or dead babies. It's about good men doing nothing. That's all. You obvioulsy know that it's crappy... yet you seem to condone it.

      I am by no means one of the typical "flower-power whacko the-world-sucks-cause-no-one-listens-to-me liberals" that frequent slashdot. So don't get me wrong. You're right on target. (I added you to my friends list even before your last reply.) BUT it is your job as an IT person to express the trade-offs to the management. They need to know how their decisions affect people... especially when they're being made by the non-technical crowd as most fortune 500 managements tend to be.

      For instance, I am what is commonly referred to as a control systems engineeer. I design and install computer systems (robots) on the manufacturing side. That one .NET commercial where the little japanese girl grafittis the car with industrial robots... from her PC in Japan frankly scares the shit out of me. And the propsed solution of M$ security has got to be the funniest thing I've ever seen. BUT, it will most likely be implemented because we live in an atmosphere of "I'm management, computer's are somebody else's problem."

      Gee, great. So they get to make all the decisions... and they end up being bad ones.
      In my field, we don't connect our systems to the outside world. End of story, no security risk. The IT deparment are like remote cousins to us. We feel related to them in a way, but we don't want to invite them over for dinner unless we have to.

      But every once in awhile I need to pass information in to their systems. Whether it be recipe management (what product shall we run today), or data acquisition (how did we do today)... eventually someone in a tie needs info that only my systems can give them. I would much rather just print the damn thing out and have them get off their lazy butt and come down to the production floor and get it... but alas!

      So my resentment of the "we are IT we know better than you" attitude is mostly because I'm sick and tired of paranoia, power struggles, political gambits and all of the other crap that you cited as reasons why normal users should be mistreated, untrusted and otherwise keep their mouths shut until we tell you you can breath...

      The problem isn't the users, it's the IT department is being told to do the impossible. There is no lock down in the world that will keep the great unknown from biting the manangement in the ass. You can't save them from their ignorance... but at least you can try to protect your users from it. :)

    58. Re:Not exactly ... by johnnyb · · Score: 0, Offtopic

      I can't believe I got marked as flamebait. Shoot, I even have my email address in my profile. Why doesn't the moderator email me and ask?

      What I said was true, and I'll repost it here:

      I'm the IT guy at my (small) company (I also wear many other hats around here). Anyway, my job is to do the following: support everyone else in what they are doing.

      When people buy machines, they don't go through me. They have to justify it through the accounting guy. I only get involved if they don't know how to set it up on the network. In fact, I usually don't know about computer purchases until _after_ they've arrived.

      The reason? People use what they need to get the job done. That's not my business. My business is to help all the computers talk to each other so that we are more productive.

      The threat facing companies is not someone installing their own OS on the computer. The threat is every person who doesn't know about computers running Outlook.

      We run Windows 9x, 2000, XP, Mac OS 9, Mac OS X, and RHL here, and I just keep Appletalk, NFS, and SMB running on the server, as well as DHCP.

      I have never seen a company with a truly secure intranet - most of them are just appearances of security. To have a truly secure intranet it requires that you implement security policies that waste time and productivity. When severe security policies are implemented, the users just go around them, making it even more secure than if there were lax protocols.

      Case in point - the _big_ company I used to work for kept all of their root passwords for their UNIX machines in an access database that was available on the intranet, and on several desktops. I'm sure they had access restrictions on the file, but really, trusting SMB for every server's root password? Putting them all in the same file, in an Access database, where many users copied it locally to their own hard drive?

      If you don't believe me, email me and I'll tell you which company I'm referring to.

    59. Re:Not exactly ... by johnnyb · · Score: 1

      For those too lazy to look up my email address, it's johnnyb@eskimo.com.

    60. Re:Not exactly ... by Jeremiah+Cornelius · · Score: 1
      Tons gone from there (Schwab) the past two Octobers... Were you in SIM? E-Brokerage?

      I left in '99. Was more interested in InfoSec and shiny Dot-Com money. They'd have pink slipped me in Oct 2001.

      --
      "Flyin' in just a sweet place,
      Never been known to fail..."
    61. Re:Not exactly ... by Jeremiah+Cornelius · · Score: 1
      Mars! What part confused them?

      What is this thread? Reunion of the sub-200 UID's?

      --
      "Flyin' in just a sweet place,
      Never been known to fail..."
    62. Re:Not exactly ... by Big+Smirk · · Score: 1

      Yes, know the attitude well. Need to beg IT to use _their_ network. Reminds me of the Burt Renalds "Smokey and the Bandit" movie where the officer pulls over the nemisis and says "You can't drive that POS on MY highway" (emphasis slightly added). At a larger company that I worked for there was an underground engineering conspiracy. We'd watch the IT drones _attempt_ to properly configure routers etc - but more importantly we'd pickup the passwords (and laugh about some - company name backwards?) and when they leave, configure the stuff ourself. They'd arrive the next day to complete the fix after 'reading up on it', and the stuff was magicly working already. We'd say "Great job yesterday, Lets just leave it and see it keeps working" I also did IT support. Learned early on, its impossible to monitor all configurations all the time. Also figured out it didn't make a damn bit of difference. So I tightly managed the machines of the less technical people and got out of the way of the engineers and designers. A brown bag lunch once a month was enough to get the security message out - and the people that cared not only came, but had enough smarts to contribute to the discussion. Critical information should be protected from insiders as well (more so) than from the script kiddie surfing the web. Blanket hard-nose policies are for non-dynamic companies. Companies, with security in mind, need to continually advance and look for new areas and higher productivity in the old areas. If you think you can do that with an IT department that keeps the clamps down on the LAN, let me know which company and I'll make sure I don't invest in them in the long run.

      --
      TODO: create/find/steal funny sig.
    63. Re:Not exactly ... by JessLeah · · Score: 1

      I'm absolutely sick and tired of seeing this happening. "Mac" is NOT an acronym! It's "Mac", not "MAC"!!!!

    64. Re:Not exactly ... by grmoc · · Score: 4, Informative

      Unfortuantely a lot of management/business types really DON'T understand sunk cost.

      You should buy something you want to use.
      Using something simply because you bought it is moronic.

      The waste happens on the purchasing side, not the usage side.

      This is not a 'geek' view, this is a good economist/businessperson's view, and for anyone who disagrees with it, here is a good example.

      You're stuck on a desert island. You knew you would be stuck here. TO prepare for being stuck here, you bought some cyanide-based glue (i.e. superglue). Your major problem is that there is no food on the island. Do you
      1) Eat the cyanide-based glue
      2) Don't eat the cyanide-based glue

      The "Well, it would be going to waste if I don't eat it" argument obviously doesn't work here. If you don't get the right tool for the job, you shouldn't be forced to use it-- The damage is already done, no need to exacerbate it.

    65. Re:Not exactly ... by Sj0 · · Score: 1

      Even beyond that, if some joker decides to keep sendmail on his machine, your network can be blacklisted. Earlier versions of Red Hat kept relays open. I saw it happen at the last place I worked. The guy needed the machine though, so we sent someone down to secure it and ensure there were no mail services installed.

      --
      It's been a long time.
    66. Re:Not exactly ... by Sj0 · · Score: 1

      Hey, not just any windows, OUR copy of windows, which we will ghost onto your drive, which has been prepared to be secure and reliable. Personally, as a tech, I'd rather people not be allowed to install anything on their machines that doesn't pertain to work. A new OS falls under this classification.

      --
      It's been a long time.
    67. Re:Not exactly ... by VPN3000 · · Score: 1

      Amen to that. Yeah, I come across as a bit of an enabler of doom sometimes. It's just what has paid the bills for a while now.

      I remember the good old days when you could tell your boss you saved her $3000 in software licenses with a nifty BSD or Linux web server and come back from lunch to find a stack of gift certificates to buy.com and thinkgeek.com as a reward for a solid contribution to the company.

      I guess I half-heartedly accept the inefficient drama that plays out in most companies. I've seen VP's take multiple, agreeing sets of independantly published results on how well a particular open source and closed source package compare, then go closed source because of 'support contracts' and 'all the other fortune 500 companies are using this now, why aren't we?'. Basically, he was impressed by a vendor or consultant, maybe college buddies with them. I don't know, all I know is that eventually most battles are lost to the commercial applications even when they are lacking.

      It's sad. But I have my priorities. They might not be heroic, but they are highly adaptible.

      Oh, the human rights thing was just for a little umpf for a slow reading thread. :)

    68. Re:Not exactly ... by VPN3000 · · Score: 1

      Yeah, I didn't feel like typing out all the network devices in the chain of things. But yes, a proxy, a good IDS box, proper firewall rules, proper subnetting, keeping antivirus signatures and your Windows updates updated helps a great deal.

      These sort of things minimize your chance of problems. Nothing is truely secure, imo. It just limits your liability if|when the shit hits the fan.

      SMS is nasty, but it works sorta. It's price doesn't matter much when you are F500, though.

      Personally, I want to see the whole world format their collective hard drives and install FreeBSD.

    69. Re:Not exactly ... by Malcontent · · Score: 1

      "SMS is nasty, but it works sorta. It's price doesn't matter much when you are F500, though."

      Actually it matter very much. The problem is that the CIOs don't calculate TCO very well. They don't include the price of SMS for example when calculating the TCO.

      --

      War is necrophilia.

    70. Re:Not exactly ... by llefler · · Score: 1

      What do you do when that non-standard OS breaks your network? Oh, I'm sorry, I didn't know that installing my Linux box on the network with a DHCP server running would keep all my co-workers from getting to their server shares. I meant to start the DHCP client, not the DHCP server. (could also be done by the well meaning employee that just wanted to get a look at Win 2003 server, with the added benefit that is could do some nasty stuff to your ActiveDirectory) At the very least you have kept a lot of people from working, pissed off the CEO, and your IT director is giving you a very odd look that's none too friendly. IE. you're one step closer to a pinkslip.

      As much as IT types like living in the old west, we don't like other people doing it and screwing up our playground. A little restraint and following the standards makes everyones life easier. We can play with our Linux boxen at home. Isn't that why we all have 5 or 6 systems running there?

      --
      It is amazing what you can accomplish if you do not care who gets the credit. -- Harry Truman
    71. Re:Not exactly ... by Anonymous Coward · · Score: 0

      Think about doing technical support for bitter and unthankful lusers. Your boss is an asshole. You make $23k/year and missed your shot as an [insert engineer/developer position here] before the bubble popped. No hope for a future with the company since they have a revolving door system in place where 3/4 of the low-level staff is on temporary contracts that expire every 90-300 days..

      Dude! You just described me!

    72. Re:Not exactly ... by Anonymous Coward · · Score: 0

      MAC is an acronym. Media Access Control. You know, like a MAC address on a NIC?

    73. Re:Not exactly ... by FrankNFurter · · Score: 1

      There are dozens of stories like that on techtales.com. Have fun.

      --
      "Slashdot - the one place on the internet where guys brag about how small it is." - that IT girl
    74. Re:Not exactly ... by Anonymous Coward · · Score: 0

      Jeeze, people get fried over the most trivial things. I take it you're a MAC user.

    75. Re:Not exactly ... by iocc · · Score: 1

      What a sad, boring world you are picturing.
      I work as a sysadmin at an university. We have
      about 500 users at my dept. All have public IPs
      and unfiltered ports (ok, the univ filter like 5-10
      ports like dhcp but thats about it). We dont have
      a proxy.

      I would not want to work where you work. I would
      not like it, its like a prison.

    76. Re:Not exactly ... by xophos · · Score: 1

      > However they do need to be sure about security,
      > otherwise they are not doing their job.

      There is no way what so ever, to be sure about security except that there is none. That applys especialy to Software.

  2. This is unexpected? by James+A.+A.+Joyce · · Score: 1, Interesting

    If users will install random spyware and games on work machines, why wouldn't they do the same for an entire operating system? The only difference is that they have to insert a CD-ROM! And that seems to be what people are doing with their Linux installs as well as their Windows workstations too, according to the article.

    1. Re:This is unexpected? by Noumena · · Score: 5, Funny

      not only that, but my unoffical linux install is a good way for me to know that the corp doesn't have any spyware on my boxen. That and I stopped hitting my monitor so much after I installed linux.

    2. Re:This is unexpected? by Archfeld · · Score: 3, Informative

      how can it be spy-ware when IT IS THEIR BOXEN ? The one thing in our enterprise that MUST be present to access ANY shared resource is the Tivoli agent with the config checksum matching, much with it and you don't get anything from the network. Don't get me wrong I hate the crap too but it IS a place of employment....

      --
      errr....umm...*whooosh* *whoosh* Is this thing on ?
    3. Re:This is unexpected? by swordboy · · Score: 2, Insightful

      If users will install random spyware and games on work machines, why wouldn't they do the same for an entire operating system?

      Ummm... because they can't "click" to install Linux. Sure, some of the bootable installers are pretty easy and click-able but it generally requires removing the Windows partition.

      Users are dumb.

      Create a Windows-installable Linux distro that will coexist/dual-boot on NTFS and you will have tens of MILLIONS of Linux installations. Hell... if you could make it install itself with a pop-up active-x applet, you could pull a Gator and install it without most users even knowing.

      Now *that* would be cool...

      --

      Life is the leading cause of death in America.
    4. Re:This is unexpected? by boomer_rehfield · · Score: 2, Insightful

      god forbid they have a bootable CD of morphix or some shit... Elitists are dumb.(sic)

      --
      Carpe Canem - Seize the Dog
    5. Re:This is unexpected? by Anonymous Coward · · Score: 0

      "Would you like unlimited access to full length hot movies? Just click to confirm download and install our movie viewer OS!"

      "Your computer is broadcasting your IP address! Click here to get our ip-hiding OS!"

      "You may be a winner! Click here to claim your free OS!"

    6. Re:This is unexpected? by nomadic · · Score: 1

      Users are dumb. Create a Windows-installable Linux distro that will coexist/dual-boot on NTFS and you will have tens of MILLIONS of Linux installations. Hell... if you could make it install itself with a pop-up active-x applet, you could pull a Gator and install it without most users even knowing. Now *that* would be cool...

      Yeah, too bad developers are dumb too.

    7. Re:This is unexpected? by enomar · · Score: 1

      Yeah, too bad developers are dumb too.

      While I'm likely to agree, what do you mean? I don't 'get' your point.

      --

      :wq
    8. Re:This is unexpected? by Anonymous Coward · · Score: 3, Insightful

      Because they're doing it behind his back maybe? Methinks you should look up the word spy in the dictionary.

      If I ever found out my employers were spying on me, they would probably have my resignation by the end of the day.

    9. Re:This is unexpected? by GMC-jimmy · · Score: 1

      Replace the word "dumb" with "lazy" and it'll all make more sense.

      --
      __________________________________
      Free your mind - Flush your toilet
    10. Re:This is unexpected? by Anonymous Coward · · Score: 0, Flamebait

      Spy on you? I think you mean, "making sure I'm doing work" since you're not on your own time as soon as you step into the office or clock in or whatever. You're getting paid to do work, and it makes sense that your employer will be checking to make sure you're actually doing it. I'm sure you'll be fired for reading Slashdot before you have a chance to turn in your resignation.

    11. Re:This is unexpected? by Anonymous Coward · · Score: 0

      how can it be spy-ware when IT IS THEIR BOXEN?

      Same way water is still water when it's in their cup.

    12. Re:This is unexpected? by Jedi+Alec · · Score: 5, Interesting

      assuming for a second that the person involved is actually able to install Linux(not stuffing a CD-Rom and/or floppy drive into a machine does wonders) and has sufficient rights under Win2k/XP the answer would be to reduce the main partition a bit in size using for example partition magic, and then happily installing mandrake on the side. Red hat might be an option too, but that'd require installing NTFS "support" separately, which, otoh, isn't all that hard to do either...

      From a personal perspective, my previous employer didn't give a rat's ass what OS I ran, as long as it ran the software we used. The reply I got when I asked if I could was something like "oh sure, but you do it on your own time, and if it breaks, don't come whining to us..."

      --

      People replying to my sig annoy me. That's why I change it all the time.
    13. Re:This is unexpected? by Anonymous Coward · · Score: 1, Interesting

      I expect to be told how I'm going to be monitored if an employer feels that's necessary (and chances are good that if their monitoring is invasive, I won't be taking the job). If it's not spying then it's fine. Nobody goes behind my back, faceless or not. Oh, and hell will freeze over before I get fired for reading /.

    14. Re:This is unexpected? by Anonymous Coward · · Score: 1, Interesting
      there are significant risks of corporate spyware.

      i worked at a large e-commerce site, and one of the credit-card-fraud cases i worked on occurred because of a corporate key-logger captured someone's information when they placed an order at Amazon, and unfortunatelly the company didn't keep their keylogs secure and the credit card #s of people who used work computers for e-commerce were stolen.

      IMHO it's very important for employers to let people know that such logs exist and that any credit-card-numbers typed on such computers may be compromised.

    15. Re:This is unexpected? by makoffee · · Score: 1

      I'm down with a "virus" that just installs linux on any computer it could find.
      [linuxworlddomination]-forceably

      --
      -makoffee
    16. Re:This is unexpected? by G�tz · · Score: 1

      With Mandrake 9.1 you don't even need partition magic, as the installer can resize your NTFS partition reliably. Your Windows partition will be mounted as /mnt/windows after the installation, although it's still read-only.

    17. Re:This is unexpected? by xombo · · Score: 1

      Your sig sucks man.

    18. Re:This is unexpected? by tigersha · · Score: 1

      Actually, if there is an official company policy that states that the Tivoli agentmust run it is not exactly "behind your back". They told you they do it and you know it. It is similar to vidoe cameras in shops to nail shoplifters where there is a sign "These premises are guarded by closed circuit camers". Clear enough?

      --
      The dangers of excessive individualism are nothing compared to the oppressiveness of excessive collectivism
    19. Re:This is unexpected? by Anonymous Coward · · Score: 0

      And they were using work computers for ordering items off Amazon for themselves? Shouldn't they be doing that on their own time and possibly using their own computer?

    20. Re:This is unexpected? by wagemonkey · · Score: 1
      A lot of places let you use the 'net while waiting for stuff to compile/reun etc. If the company is prepared to have more contented staff that's not a problem.
      Or just when you're on your lunchbreak. The computer's are still on and the bandwidth is still paid for so why should the company care? IF it's against company policy then you shouldn't do, but a lot of places are more sensible about this.

      Not to start a flamewar but does anybody else get irritated that smokers are allowed to work less than non-smaokers?

    21. Re:This is unexpected? by roman_mir · · Score: 1

      Yeah, we have that too. They just came in and installed Tivoli on everyone's machine, removed Outlook and installed Lotus Notes blah blah blah (our company was bought by a large company owned by banks.)

      Anyway, the way to deal with it is: go to the control panel, services and stop the Tivoli service and also don't forget to install Zone Alarm.

      Done and done.

    22. Re:This is unexpected? by Anonymous Coward · · Score: 0

      Yep, perfectly clear, but I'm failing to understand your point. Noumena didn't mention anything about policies at all.

    23. Re:This is unexpected? by Archfeld · · Score: 1

      I think it is the EXPECTATION of privacy, and you should have NONE when using a corporate computer resource. If what you are doing requires privacy of a greater nature then you should do it on your OWN machine on your OWN time. Don't get me wrong I think it SUCKS as well but it is THEIR equipment on THEIR SITE, used by you FOR THEIR WORK. NOTE : I am at work surfing on the corporate dime, while working, but I don't expect them to NOT record my 'personal' traffic while using their network. Now if your work loaned you a machine for home and it had this issue I could see the problem, but honestly this is like complaining that someone is listening in on your conversation in a public place....

      --
      errr....umm...*whooosh* *whoosh* Is this thing on ?
  3. I only wish! by pjack76 · · Score: 5, Funny
    I have this fantasy where I walk into work and everyone's installed Linux on their own and I don't have to image another NT workstation ever again, and I realize I've died and gone to heaven where the bad men can no longer hurt me.

    Is the sysadmin sure he wasn't dreaming?

    --

    Wow, a lucrative publishing contract! I don't have to be evil anymore. --Meteor

    1. Re:I only wish! by archen · · Score: 5, Insightful

      Installing Linux on their own is a bit much. My dreams are really simple - like I just have this button that shocks people and they just magicly get a clue - like why sending a 5 meg bitmap to a guy who accesses his email through a 28.8 modem is a dumb idea.

      Actually in all honesty I wouldn't want people installing Linux on their own anyway. All users with admin priveleges? I don't know what kind of heaven you're going to, but count me out! =P

    2. Re:I only wish! by Anonymous Coward · · Score: 0

      like why sending a 5 meg bitmap to a guy who accesses his email through a 28.8 modem is a dumb idea

      I wish mine were that simple. My boss wonders why it takes too long to print out a 40 megabyte PowerPoint file (he wants in done in about 2 minutes max--very impatient).

      His solution: Get a printer(same speed) and hook it straight to his laptop because it takes to long to go through the network(we have a gigabit network).

    3. Re:I only wish! by toddestan · · Score: 4, Funny

      What's so hard about installing Linux? Actually what you need to do is stay late some night, and after everyone leaves put a Knoppix disk in their workstations, and reboot. The looks on everyone's face the next day should be priceless.

    4. Re:I only wish! by Anonymous Coward · · Score: 0

      Super Users rock! That is some funny shit.

    5. Re:I only wish! by Anonymous Coward · · Score: 0

      Sure, if you run such a shoddy operation that the users would be able to do that. Mine for one, cannot boot from CD, cannot get into the BIOS to change that fact, and know that they will be in HR by the end of the day getting fired if they do manage to install any such thing.

    6. Re:I only wish! by Anonymous Coward · · Score: 0

      Wow, your name must be Mr. Happy and you must work in Candyland.

    7. Re:I only wish! by jbolden · · Score: 1

      ... and do all their real work on their laptops and palm pilots so you don't have any backups of company data at all nor any standardization. Me thinks you have serious delisions.

    8. Re:I only wish! by paroneayea · · Score: 1

      If I found out that people were secretly installing Linux on their computers behind my back, I would hug them, probably until they became uncomfortable. Not because I want them to be uncomfortable, I'd just be that happy.
      Then again, I guess I'd have to have a job for such a thing to happen.

      --
      http://mediagoblin.org/
  4. IT headaches by niko9 · · Score: 4, Insightful

    "This article at ComputerWorld describes a sysadmin's discovery that many people in his company are installing Linux on their desktops without consulting IT. The writer is concerned with the security implications,..."

    This could make the case for desktop Linux look worse, if people are not securing their dektops and/or keeping up with security updates.

    1. Re:IT headaches by 1lus10n · · Score: 3, Insightful

      no worse than the average NT/2000/XP install.

      and i highly doubt they were "unsecured", if these people went through the trouble of installing linux on a work machine they probably have moderate clue.

      and im not going to point out that no matter how "secure" your personal workstations are, that once a cracker penetrates that far into your network your screwed.

      this guy sounds like he is getting overly paraniod about something he more than likely doesnt understand.

      --
      "Two things are infinite: the universe and human stupidity; and I'm not sure about the the universe." --Albert Einstein
    2. Re:IT headaches by FattMattP · · Score: 1
      This could make the case for desktop Linux look worse, if people are not securing their dektops and/or keeping up with security updates.
      No worse than windows or mac. Any computer system is going to need a basic level of maintenance to keep it in order.
      --
      Prevent email address forgery. Publish SPF records for y
    3. Re:IT headaches by vsprintf · · Score: 4, Interesting

      I can see where there might be some security concerns, but I think the real concern for IS (IT, whatever) is being in control.

      I work for a company that was heavily Unix (and X-terms) until the LAN somehow became all MS PCs. Now people and projects are insisting on replacing not only MS but Sun and SGI stuff with Linux. We are meeting heavy resistance from IS.

      They are claiming that it costs more to administer a Linux box, even though we've been in meetings and showed that it wasn't true, based on recent experience. They refuse to give even knowledgeable users superuser privileges on their own machines, although Windows users can install anything or delete everything on their boxes at will.

      To me it appears that some of the people in IS are afraid of being made less powerful, less needed, and less relied upon.

    4. Re:IT headaches by Anonymous Coward · · Score: 0

      Obviously it depends on the task, but there are still a lot of tasks that I'd rather tackle with a Sun or SGI box that I wouldn't want to undertake with a Linux box. Despite what many seem to think, Linux is not a one-pack replacement for all existing computing models, Windows included.

    5. Re:IT headaches by Keebler71 · · Score: 2, Interesting

      Are you seriously implying that the default install of Windows XP is less secure than say Redhat 6.1? I seriously doubt it.

      --
      "It takes considerable knowledge just to realize the extent of your own ignorance." - Thomas Sowell
    6. Re:IT headaches by vsprintf · · Score: 1

      Obviously it depends on the task, but there are still a lot of tasks that I'd rather tackle with a Sun or SGI box that I wouldn't want to undertake with a Linux box.

      And I agree with that. But, many of the tasks that we've previously done on Sun or SGI boxes just don't justify the costs any longer. A multi-processor Intel box running Linux is far cheaper, and porting the code is fairly trivial. In some cases, we have even been rewarded with performance increases, but that's just gravy. The much cheaper hardware and vendor support costs are driving the changes.

    7. Re:IT headaches by Anonymous Coward · · Score: 0

      #1, it's a good way to get fired.
      #2, redhat isn't hard to install, and a kernel recompile is beyond most linux nubes.

    8. Re:IT headaches by rivaldufus · · Score: 0

      Unfortunately, I've found that engineers who install linux on their desktop or even on test servers never see the need for patches. It's a curious phenomenon and I think it has something to do with the fact that Linux has such a good reputation; people think "Oh, it's better than windows, so patching won't be necessary.

      I suppose that the biggest threat to security on Linux and on unix in general is the third party applications, such as BIND or Sendmail. Thankfully, newer distributions seem to disable named by default and only run sendmail on 127.0.0.1.

    9. Re:IT headaches by Anonymous Coward · · Score: 0

      It does not take a brain surgeon to install linux or rm -rf directories. These people are probably "trendy" Linux users who think they know something but are really setting their company up for an IT disaster. I don't just mean security, but if people are changing systems then when it's time to fix them the person that needs to work on it doesn't know how it's setup. Formula-for-disaster.

      You are definitely not a sysadmin or if you are you should be fired.

    10. Re:IT headaches by hdparm · · Score: 1
      If his network is fairly secured, Linux desktops would be less headache than Windows ones, if only for not running Outlook.

      I would swap with him any day, though. Some users on my freakin' network have trouble creating folders or sellecting printers from the list, let alone installing (any) OS.

    11. Re:IT headaches by 1lus10n · · Score: 3, Insightful

      why are you comparing a four year old version of linux to the current version of windows ?

      but a standard desktop install of 9 is one HELL of alot more secure by default than any windows version i have seen.

      NOTE: desktop implies no server services.

      --
      "Two things are infinite: the universe and human stupidity; and I'm not sure about the the universe." --Albert Einstein
    12. Re:IT headaches by Anonymous Coward · · Score: 0

      Yes I am. Quite seriously.

    13. Re:IT headaches by Anonymous Coward · · Score: 0

      no worse than the average NT/2000/XP install.

      The "average" corporate installation is probably a lot more secure and well maintained than a typical home setup. I work for a relatively small educational institution, and even with our small staff our office systems are pretty tight, with extensive testing to make sure that the various specialized apps various areas work as expected and are configured in such a way as to minimize potential problems. I'd be surprised if most corporate shops do much worse.

      and i highly doubt they were "unsecured", if these people went through the trouble of installing linux on a work machine they probably have moderate clue.

      I wouldn't doubt it at all. People who think nothing of installing Linux on random systems at work without even mentioning to IT don't exactly inspire my confidence. Anyone who really had a clue wouldn't do that in the first place.

    14. Re:IT headaches by crucini · · Score: 2, Insightful

      I think your view is much too curmudgeonly. The job of IT is to support the organization, not cripple it. If users are setting up insecure Linux machines, you work with them to bring them up to snuff. That's what I've seen from good IT departments.

      I'm talking about desktop PC's. If you're talking about something else, then it's a different ball game.

    15. Re:IT headaches by Anonymous Coward · · Score: 0
      It's not about being in control of the users, it's about keeping the number of calls to the helpdesk at a minimum.

      The company I currently work for has all W2K and XP desktops, locked down tight, and we receive about 25% of the quantity of calls compared to 1 year ago when everyone was local administrator. There's nothing more annoying than some dumbass luser wasting our time to fix their machine because they download and install any crap they come across on the Internet, or they screw around with system settings. Now all our calls are mostly printing and passwords, instead of removing adware apps and other crap to get a machine to run properly. And yes, even the knowledgeable users were also a big problem before the lockdown, because they weren't afraid to screw around like the non computer savvy. If they really knew so much, they would be working in our IT department.

      If management at our company asked for Linux, we would have to say no. None of us know Linux very well, unfortunately. It would cost a fortune in training and hiring as well as the labor involved changing everyone over. Besides, with our Dell account we basically get the OS for free when we buy PC's.

    16. Re:IT headaches by ScrewMaster · · Score: 1

      The mainframe syndrome has reached the desktop. No surprise. This has less to do with computers, per se, as it does with maintenance of one's power base.

      --
      The higher the technology, the sharper that two-edged sword.
    17. Re:IT headaches by Anonymous Coward · · Score: 0

      The problem is not that Linux is less secure, by default, than Windows. The problem is that the IT people aren't prepared to support Linux workstations.

    18. Re:IT headaches by Darby · · Score: 1

      no worse than the average NT/2000/XP install.

      Maybe yes, maybe no. The "average" NT/2000/XP install at a business is done by people whose job it is to do that. In theory, their job is also to have it configured relatively securely and keep up on updates.

      and i highly doubt they were "unsecured", if these people went through the trouble of installing linux on a work machine they probably have moderate clue.

      Again, maybe yes, maybe no. If they know enough about it that they want to install it, then they are probably somewhat clued. To be able to install most modern distributions takes barely more intelligence than your average bag of rocks.
      Will the bag of rocks know to immediately update the system since the CD is most likely already out of date?

      this guy sounds like he is getting overly paraniod about something he more than likely doesnt understand.

      An alternative interpretation for those who read the article would be that he is proactively recognizing a potential hole in his system and putting together a policy and approved install image.
      Sounds more like he knows his job, is happy to have people using Linux, but just wants to make sure his network is protected.

    19. Re:IT headaches by 1010011010 · · Score: 1

      Why would you compare XP and Redhat 6.1?

      Why not XP and Redhat 8 or 9?

      Or Redhat 6.1 and Windows NT4/Win98?

      --
      Napster-to-go says "Fill and refill your compatible MP3 player", which is a lie. It's not MP3. It's WMA with DRM.
    20. Re:IT headaches by Anonymous Coward · · Score: 0

      why are you comparing a four year old version of linux to the current version of windows ?

      because they are equivalent?

    21. Re:IT headaches by Anonymous Coward · · Score: 5, Insightful

      >> If management at our company asked for Linux, we would have to say no.

      Yeah, telling your boss no is such a great way to keep your job. The conversation would go like this.

      Boss: "I hear that this Linux thing is saving other companies millions of dollars a year. Let's do a test pilot."

      You: "No."

      Boss: "OoooooKay... Why not?"

      You: "We don't know anything about Linux in the entire IT department."

      Boss: "But from everything I am reading it is the next BIG THING [TM]"

      You: "We don't know anything. And even though I don't know anything, I am guessing that it costs more to install, train and hire for it."

      Boss: "Isn't that what a pilot program would tell us? I tell you what. Hire someone who knows Linux and have them perform a pilot."

      You: "No."

      Boss: "Look, I am getting a little tired of this. Do what I say."

      You: "No."

      Boss: "You're fired."

      You: "Booo Hoooo!"

      >> None of us know Linux very well, unfortunately.

      You don't know Linux? Is your head buried in the sand? Haven't you been hearing more and more and more about Linux over the past 5 years? Do you have so little motivation that you can't download a free iso image from the internet, burn it to a blank CDROM and then install Linux on an old Pentium computer you have just laying around?

      >>It would cost a fortune in training and hiring as well as the labor involved changing everyone over.

      Actually, the payback for switching over to Linux is immediate and begins paying back the first year, if Linux will work for you at all. Do a pilot program and see if it will work for your company. At the very least, even if you keep using windows look at switching the non power users over to open office.

      >> Besides, with our Dell account we basically get the OS for free when we buy PC's.

      Oh, you pay.

    22. Re:IT headaches by 1u3hr · · Score: 1
      this guy sounds like he is getting overly paraniod about something he more than likely doesnt understand.

      He was unhappy at unauthorised software installs. He said they have a bunch of Linux PCs already so he's not ignorant of the OS. His solution to the rogue installs was not seek and destroy but to make a standard Redhat image and install from that, whihc would obviously be much easier for him to support.

    23. Re:IT headaches by Geek+of+Tech · · Score: 1
      If you're doin your job keeping all the computers up-to-date, wouldn't you tend to notice if someone was using Mozilla in KDE under Mandrake 9.1?

      Course if you're not doin your job, then I could see how it could slip under your radar...

      --
      Stop the Slashdot effect! Don't read the articles!
    24. Re:IT headaches by blind()side · · Score: 1

      His boss is probably not as clever as a guy from your story. If he was, he wouldn't let his whole IT department to stay ignorant.

    25. Re:IT headaches by timeOday · · Score: 1

      Don't forget, it was this kind of unauthorized "smuggling" that started the adoption of personal computers over minicomputer terminals back when. A lot of those IBM PCs and XTs didn't have Corporate Computing Support either. Sometimes companies just don't know what's good for them :)

    26. Re:IT headaches by 1lus10n · · Score: 1

      Sounds more like he knows his job, is happy to have people using Linux, but just wants to make sure his network is protected.

      im not talking about the person who posted the article im talking about the parent.

      most windows sys-admins dont have any clue. just look at the most recent worms/virus's. its mostly crap that has patches available but not applied. because usually the image they use to do their daily restores is also out of date. and they dont run updates immediately.

      --
      "Two things are infinite: the universe and human stupidity; and I'm not sure about the the universe." --Albert Einstein
    27. Re:IT headaches by Keebler71 · · Score: 1

      Easy, its called a typo. My bust. Was going for 7.1 which was released about 6 months prior to XP. In hind sight, a better comparison would be with 7.2 as both were released within about a month of each other.

      --
      "It takes considerable knowledge just to realize the extent of your own ignorance." - Thomas Sowell
    28. Re:IT headaches by Anonymous Coward · · Score: 0

      Spoken like a true Linux advocate. I am curious about a few things though.

      I expect that the workers are your company are highly skilled in some particular profession or craft, engineering maybe? If so, do you really think that it's an efficient use of their time to split between administering Linux boxes instead of performing revenue generating activites? Is it really efficient to have, what, dozens, hundreds, thousands of employees working maintaining their boxes instead of doing their work? Will they be doing it to any particular standard to ensure there is consistency? Consistency sounds boring, but it cuts costs, improves compatibility, interoperability, and security. What standards for OS will there be? Is every user on their own? Or is someone going to be setting standards? IT maybe? Once you start setting standards someone is going to be unhappy. My company was split into Red Hat, SuSE, and Mandrake factions before I joined it. That was a lot of fun to work through. Who will responsible for patching? For security? For maintaining applications? Who has control, and how do they get it, when there is a security incident? Who enforces user level security since a user with root on their box could become anyone? What do you do when applications that you need for business aren't available on Linux? Start installing VMware everywhere? So now everyone has 2 operating systems to maintain? Will everyone be maintaining both, or only one? You claim that Linux isn't more expensive to administer. I'm curious as to how you arrived at that, and does that answer scale? What might be cheap or easy for 1-5 boxes could start becoming harder for 10-20 boxes, and difficult for more. Take patching, for example. A small handful of Linux boxes might be able to get by with free level patching from vendors, although it is a major pain in the butt. Theres no way I would even think of that for more than five. That means starting to pay for vendor support. That means more money. Will these boxes hold data? Who controls access to it? Who is responsible for information security? Export control? Backup? Is Linux going to become a new standard to be forced upon the unwilling, or can they stay with Windows? Or Mac OSX? Or *BSD? Why one and not the other? And hey, if the operating system is up for grabs, why not hardware too? I like what HP is doing with Linux, you might like Dell. Who gets to choose? A stew of different vendors will make a lot of people happy, everyone except accounting. Who gets to decide about what services to run where? Everyone having a personal website is great. Of course, if nobody is doing quality checking of the web site, a few exploitable holes might creek in, but hey.... What do you do when something breaks? Does everyone fix their own? Or does IT get called then, and they have to be superhuman admins to work with what, 25, 100, 1000 different configurations? Or are all of the employees with these systems on their desks going to become experts to fix it all themselves, or by relying on their neighbors?

      I'd be willing to bet that you know your way around Linux fairly well. I would also bet that you have little knowledge or experience regarding the implications of technical and policy choices for an organization of any size.

    29. Re:IT headaches by bolind · · Score: 1

      Besides, with our Dell account we basically get the OS for free when we buy PC's.

      From where I've just been fired from my student job, it appeared as if we got the Dells for free when we bought the OS...

    30. Re:IT headaches by Sven+Tuerpe · · Score: 1
      To me it appears that some of the people in IS are afraid of being made less powerful, less needed, and less relied upon.

      They shouldn't be. Any complex system, be it a computer or computer network, an aircraft, or a nuclear power plant, needs maintenance and repair. Mechanical systems suffer from corrosion, abbrasion, and fatigue of materials. Safety-critical systems also require upgrades and modifications as weknesses of design or flaws in manufacturing processes are discovered by the manufacturer or other users. Any air carrier, for instance, thus has aircraft maintenance staff -- aircraft administrators, if you want -- to deal with these things. Although being bound by lots of formalism, like maintenance manuals and bulletins issued by manufacturers, they are by no means less powerful, less needed, or less relied upon. Whether an aircraft safely arrives at its destination or not depends on both pilots and maintenance people (and many more, like airport ground personnel and air traffic controllers). This is really a team effort. Neither pilots nor maintenance staff nor any other party involved is root in this system.

      There is no reason why computer system and network administration should be any different. Computer systems suffer from degeneration over time just like any mechanical system, and likewise need continuous maintenance. A company running computer systems cannot do without maintenance staff, nor is there a need for maintenance personnel if there are no users.

      This is not to say that there couldn't be some people in IS who confuse technical roles, particularly the root / regular user distinction, with social roles. I guess evolution will finally take care of them.

      --
      http://erichsieht.wordpress.com/category/english/
    31. Re:IT headaches by mangu · · Score: 1
      there are still a lot of tasks that I'd rather tackle with a Sun or SGI box that I wouldn't want to undertake with a Linux box.


      For instance? If you had mentioned true mainframes I would agree with you, but all the time pentium boxes are getting closer to Sun and SGI in performance. Apart from legacy applications, I can't think of any task that runs on Sun or SGI that wouldn't run just as well on a Linux box.

    32. Re:IT headaches by schon · · Score: 1

      I work at a primarily Windows shop - our servers (except one) are all Linux, and the desktops (except mine) are all Windows. I've used Linux (exclusively) on my desktop for 5 years.

      The job of IT is to support the organization, not cripple it.

      But it's OK if the users cripple it? Sorry, that just doesn't fly.

      If users are setting up insecure Linux machines, you work with them to bring them up to snuff.

      No, you make them get management's permission, then you set it up securely for them.

      Users should not be making decisions like this on their own. At a minimum, they need management's permission and knowledge, and management would weigh the pros and cons, and (hopefully) make an informed decision (in my workplace, that would entail management coming to ask me if it's OK - I'd say yes, of course :o)

      It's ultimately self-destructive if users are allowed to do whatever they want with company hardware, and expect IT to clean up after them if they're found out. Everybody should be working towards the same goal.

    33. Re:IT headaches by vsprintf · · Score: 1

      I don't understand why anyone with a serious question would post AC. /. accounts are free if you wish. Most of the parent's questions are just restatements of another, but there seemed to be a few serious points.

      do you really think that it's an efficient use of their time to split between administering Linux boxes instead of performing revenue generating activites? Is it really efficient to have, what, dozens, hundreds, thousands of employees working maintaining their boxes instead of doing their work?

      Normal Linux maintenance is a noise-level activity. Again, it's not everyone in the company, just those projects and people who want Linux, and we have all agreed to go with a single distribution. Is it really efficient to spend two days sitting on your thumb, waiting for an IS person to come and do a 30-second task?

      Who enforces user level security since a user with root on their box could become anyone?

      You lost me -- unless you have very lax security where you work. There are only two real users on a personal Linux box, root and the normal user. There isn't "anyone" else to become.

      You claim that Linux isn't more expensive to administer. I'm curious as to how you arrived at that, and does that answer scale?

      There has been a pilot project using Linux for over two years, and the help-desk calls are a matter of record. We believe it will scale very well, which may be the problem.

      I'd be willing to bet that you know your way around Linux fairly well. I would also bet that you have little knowledge or experience regarding the implications of technical and policy choices for an organization of any size.

      Well, you'd be right -- then you'd be wrong. I've spent some decades working for companies small, medium, and huge, and I've seen companies die when they take the path of least resistance rather than annoy the naysayers.

    34. Re:IT headaches by crucini · · Score: 1
      I guess the IT organization has to be adapted to the company's philosophy. I work in Silicon Valley. Here, as in most places, most of the desktops are Windows. While I'm currently a programmer, I worked in IT at a big company in the valley, and my comments are based on both roles. You say:
      But it's OK if the users cripple it? Sorry, that just doesn't fly.

      In my world (which clearly isn't your world) it isn't up to the IT department to decide what flies. A tech company runs on engineers and salesmen. Everyone else is just there to support them.

      No, you make them get management's permission, then you set it up securely for them.

      We focussed on getting the job done, not political game playing. And if we didn't trust the first person, why would we trust his manager, who's also not an IT expert, and will probably just side with his employee? Are you coming from the very small company where "management" really means the owner?

      I think your mindset is shaped too much by fear. Cleaning up after the users is not a big deal - it's just part of running a big IT department. Your plan seems to be keep everything tightly gripped in your hand, which is appropriate for a very small company where you can personally fill everyone's needs. At a large company with progressive policies, you can pretty much assume that things are "out of hand" to start with. There are so many acquisitions, departments, teams of developers doing their own thing, "appliances" bought under different budgets, that IT has to play catch-up. Attempting to impose a "fascist" IT regime on tens of thousands of highly paid professionals scattered around the world would merely cause resentment and waste everyone's time on political games and finger-pointing.

      Of course, if I start a small company with my savings, I'll handle the IT the way you advocated.
  5. Linux... by Anonymous Coward · · Score: 1, Funny

    Users have no place installing linux in the office without permission. Those who do it should be severely punished and forced to run Windows 95.

    1. Re:Linux... by mwilliamson · · Score: 1, Funny

      or worse... Forced to use the WinME upgrade edition from a base win95a installation

    2. Re:Linux... by Darby · · Score: 1

      or worse... Forced to use the WinME upgrade edition from a base win95a installation

      You are a sick and evil person.
      Now, that said, if I'm ever really pissed off at somebody I'll be consulting you for tips.

    3. Re:Linux... by CaptainMunchies · · Score: 1

      With AOL 9.0 Beta

      --
      Spam removed for the Internet's pleasure ...
  6. I'm not a sysadmin by SquadBoy · · Score: 4, Informative

    but rather a network guy but I have 3 Linux boxen that MIS does not know about and the dept laptop is booted with a Knoppix CD about %90 of the time.

    --

    Cypherpunks: Civil Liberty Through Complex Mathematics. Those who live by the sword die by the arrow.
    1. Re:I'm not a sysadmin by Anonymous Coward · · Score: 0

      So congratulations, maybe you've just tipped them off to this fact?

    2. Re:I'm not a sysadmin by Anonymous Coward · · Score: 0

      Let me guess, Novell is their only form of security?
      I can do the same thing where I work if I want to. Their dhcp server hands out addresses without any form of authentication.

      LOL...idiots.

    3. Re:I'm not a sysadmin by Frymaster · · Score: 4, Funny
      at my previous job (many moons ago) we would install linux on machines in plain view of our boss whose anti-linux stance was legendary (he called it the "hippy os").

      the key was to install cde and tcsh and say it was solaris x86 (which he disapproved of too.. but less). since he never actually used the machines, this was easy.

    4. Re:I'm not a sysadmin by klevin · · Score: 1

      At my previous job, I started out with a handme down, Pentium Pro, test system (I was initially a coop, student, employee). It was barely able to run Windows NT, plus Windows is just annoying. So I brought a Redhat CD from home and installed it to dual-boot. Occasionally, I booted back to NT for Outlook (calendaring didn't work from Netscape Mail), but from then on Linux was my main OS even at work.

      After a couple of years I was working only from Linux (discovered Exchange's web functions), and several other developers ran Linux most of the time. IT only found out about it when a new network admin did a check of the systems on the network. He was pretty cool about it, said as long as we didn't cause him problems, he didn't care.

    5. Re:I'm not a sysadmin by falzer · · Score: 1

      I think your boss posts anonymously on Slashdot.

    6. Re:I'm not a sysadmin by eddie+can+read · · Score: 1

      I have 3 Linux boxen

      A humble request for info. Does "boxen" mean or connote anything aside from "boxes"?

    7. Re:I'm not a sysadmin by DrackenFireBreather · · Score: 2, Funny

      ...but I play one on T.V.

    8. Re:I'm not a sysadmin by Anonymous Coward · · Score: 0

      yes.

      Leetness of course.

    9. Re:I'm not a sysadmin by Tony-A · · Score: 1

      Does "boxen" mean or connote anything aside from "boxes"?

      There is a connotation of coordination in boxen that is not in boxes.
      A cute plural of Vax is (was?) Vaxen.

    10. Re:I'm not a sysadmin by Anonymous Coward · · Score: 0

      Now that Sun is starting to ship Solaris with Gnome instead of cde, such a situation wouldn't be painful at all!

    11. Re:I'm not a sysadmin by thona · · Score: 1

      ::the key was to install cde and tcsh and say it ::was solaris x86 WOuld get you fired here immediatly. Termination of contract without remorse. Reason: you willfully lied about company assets. I see open source == criminal?

  7. Undercover LINUX by Anonymous Coward · · Score: 5, Interesting

    I work at the comptuer science department of a major universtiy, we've got runaway LINUX everywhere. We've gone so far as to restrict our switches by MAC address and no longer allow anyone in our network unless they tell us what OS they are running and have installed all the security updates.

    1. Re:Undercover LINUX by innosent · · Score: 5, Insightful

      We've gone so far as to restrict our switches by MAC address and no longer allow anyone in our network unless they tell us what OS they are running and have installed all the security updates.

      Ok, I'm confused here. What exactly is extreme about limiting access to known MAC addresses? Any sprawling network where access to the backbone (i.e. wallplates) can't be controlled should do this. It's just common sense.
      As for not allowing anyone on without them telling you what they have, how do you make sure they keep updating? Was it fine for people with WinXP boxen to join the network when XP was first released? Being "up to date on patches on 10/07/02" is great, but utterly meaningless if no patches have been installed since then. Having a required set of patches is nice, but having a good security policy is far better.

      Of course, I've always wondered about college networks, since they seem to prefer sending nastygrams or denying access to users, rather than prevent users from doing those things. Want to stop shared folders, file sharing, worms?, set the switches to only allow traffic to pass completely through the switch, not between ports on the switch.
      Besides, the average user has no need to be accessible from any other machine, and especially not from outside the local network. Use NAT, separate users from each other, and be done with it. If a user gets a virus/trojan/worm, f@*k-em, at least it won't spread through the network.

      --
      --That's the point of being root, you can do anything you want, even if it's stupid.
    2. Re:Undercover LINUX by Anonymous Coward · · Score: 0

      Control by MAC? You mean like this?
      ifconfig eth1 hw ether 00:20:78:d9:c3:c8

    3. Re:Undercover LINUX by Spellbinder · · Score: 1
      Besides, the average user has no need to be accessible from any other machine, and especially not from outside the local network.

      should i take this serious???
      there are other things to share then porn and mp3's
      you ever did teamwork?
      or do you prefer to run around with a floppy and collect documents?
      and mail is no solution for this if you like to know what your teammates do

      --


      stop supporting microsoft with pirating their software!!!!!
    4. Re:Undercover LINUX by 200_success · · Score: 1

      But under Linux, it's so easy to spoof a MAC address.

      /sbin/nameif aa:bb:cc:dd:ee:ff

      Or, one could transplant a network adapters from one machine to another, especially PCMCIA or USB adapters, and defeat the machine identification unintentionally.

      Checking MAC address is a good attempt to keep out unauthorized machines, but hardly foolproof.

    5. Re:Undercover LINUX by Adrius · · Score: 1

      Besides, the average user has no need to be accessible from any other machine, and especially not from outside the local network. Use NAT, separate users from each other, and be done with it.

      Yeah, that'd be great.

      I'd create a wonderful place for college students to learn about sysadmin, experiment with networking protocols and just generally feel like they have the freedom to express themselves. Or maybe not.

      Post again when you get a clue.

    6. Re:Undercover LINUX by innosent · · Score: 1

      I was referring to systems in non-computer related fields/dorms/labs/etc. Obviously, there are exceptions, but leaving every system exposed to the internet, with no firewalls whatsoever (except maybe in labs...) is just plain stupid, yet many colleges do this. If you want to experiment with site administration while in college, do so on your own dime, not the university's, or at least get permission, at which point you can become an exception. But of the 10,000+ machines on most campuses, only about 50 have a legitimate reason to be accessible, and I thought that was obvious, so I was referring to the other 9,950 machines.

      --
      --That's the point of being root, you can do anything you want, even if it's stupid.
    7. Re:Undercover LINUX by hc00jw · · Score: 1
      Was it fine for people with WinXP boxen to join the network when XP was first released?
      Just guessing, but I seriously doubt that win XP was installed on the network when it was first released... If security is an issue, you hold out until the first patch! Why let an untamed beast out amoung your well trained flock?
    8. Re:Undercover LINUX by Lumpy · · Score: 1

      We've gone so far as to restrict our switches by MAC address and no longer allow anyone in our network unless they tell us what OS they are running and have installed all the security updates.

      so this means that it's 100% ineffective policy then...

      it doesnt stop anyone. as your MAC address doesnt change when you switch OS. and even if it did.. I can emulate ANY MAC addressI damn well desire.

      I even have a pc here with the mac address of all zeros just to piss off corperate weenies in the NOC. they whine about it all the time.

      --
      Do not look at laser with remaining good eye.
    9. Re:Undercover LINUX by Zeriel · · Score: 1

      Good luck guessing the authorized addresses for a port, since authorized addresses can be mapped one per switch port. MAC addresses are a large space to search.

      I suppose you could still spoof it if you were actually employed there and had a legal box.

      --
      "America has done some terrible things. But I know that Americans don't cheer when innocents die." -Dave Barry
  8. true true. by Anonymous Coward · · Score: 0

    this happens a lot in tech. companies

    1. Re:true true. by Anonymous Coward · · Score: 0

      fragment (consider revising)

  9. Protestants were the first hippies by Anonymous Coward · · Score: 0

    Or perhaps the first protestants were hippies?

  10. VMWare rules! by JohnGrahamCumming · · Score: 1, Interesting

    The article mentions VMWare. This is a truly
    excellent application that runs in Windows and Linux and fully virtualizes
    the hardware. You literally "switch on" a machine in a VMWare window and
    you see a BIOS startup and then your favorite operating system starts.

    You can do things like run Linux as your main operating and have Windows
    as a Window within your window manager. Or you could run Windows as your
    main operating system and have Linux in a window. In addition you can have
    multiple versions of each OS. I have, for testing purposes, Windows 98,
    Windows XP and RedHat Linux as VMWare images, at any time I can boot into
    a clean version of them and test software. At the end of the session VMWare
    asks me if I want to save the changes that have occurred in that session. If I
    say "no" then none of the changes get committed to disk. For Windows that means
    even the registry, so I am guaranteed a pristine environment next time.

    At my company about 25% of people run Linux as their desktop with Windows in a
    VM and the others the other way around. It's very cool...

    John.

    1. Re:VMWare rules! by Satan's+Librarian · · Score: 4, Insightful
      Everyone in your company has $400 extra to blow on their computer to run multiple OS's? wow.... What kinda company? Pretty small, right?

      I have a hard time getting my company to purchase anything beyond the minimum tools I need (NuMega and similar were out of my pocket, since I didn't mind owning them myself). VMWare's been on the wish list - but only as a wish.

    2. Re:VMWare rules! by cK-Gunslinger · · Score: 4, Funny

      ..now how much would you pay for VMWare?

      But wait! There's more! The first Karma-whore to post about VMWare on Slashdot will receive some moderation points... absolutely FREE!

      Order your copy now, while there's still time!

      ---

      Sheesh.
      I *wish* I had to time to make obnoxious posts to slashdot all day.
      Er.. wait a minute...

    3. Re:VMWare rules! by JohnGrahamCumming · · Score: 2, Interesting

      The company is Electric Cloud and yes we are rather small (our CEO is John Ousterhout of Tcl fame/infamy): the real web site is going up in early August.

      However we didn't blow $400 on VMWare we needed it. Our product runs cross platform on Windows and Linux and wanted a way for the developers to be able to use both cheaply. Dual booting isn't an option because it's very slow to change context and you don't want to have two email clients, etc. to manage (or only be able to check email etc. when in one operating system), two machines was too expensive ($400 is a lot cheaper than a second PC). So VMWare was the answer.

      We blew the money on two 19" flat screens per developer.

      John.

    4. Re:VMWare rules! by DrPascal · · Score: 1

      So your point is that your company -needs- both Windows and Linux. This applies to the article, how?

      --
      DrPascal: Not the language, the mathematician.
    5. Re:VMWare rules! by amuro98 · · Score: 1

      VMWare sells site liscenses.

      Even then, VMWare + OS is cheaper than getting a second PC (or a 3rd, 4th, 5th...)

      At my company, we simply bought the MSDN, made images of the major OS's we need to support, and put them onto a server where you could download them as needed.

      Otherwise, I'd need at least a painstakingly partitioned multi-boot system to access the 5 or 6 OS's I'm supposed to be testing. It's much easier to just have a directory of VMWare images...

    6. Re:VMWare rules! by Anonymous Coward · · Score: 0

      Ever heard of a crack?

      Serialz, warez?

      Just a thought.

    7. Re:VMWare rules! by kenstcyr · · Score: 1

      VMWare is very cool. I even installed the testdrive on box at home. Unfortunately, I haven't used it much. I can't think of any Windows software I want to run.

      --
      "That machine has got to be destroyed...."
  11. Unofficial installations by cfl · · Score: 5, Interesting

    In a previous job I've found Linux and BeOS
    desktop installations. While I was pro alternatives to Microsoft, there was the concern about security - e.g. open e-mail relays, unpatched servers. The company ended up with a policy of permitting Linux on the desktop, but not supporting it. If you had an application issue - you were on your own. The only users that ran it had a clue and we didn't run into issues. Being a research environment, Linux ended up replacing SGI systems as the scientific workstation standard.

    1. Re:Unofficial installations by Anonymous+Meoward · · Score: 1

      This was the exact case at my last permanent job. We the developers were encourage to use whatever we wanted; our tools were Linux-based anyway. If you wanted Winders, fine, but you had to know how log onto a central Linux build server, build your system, and submit changes via CVS.

      That was it. You could use Cygwin if you liked on your local machine. Or not.

      For a while I had Linux and MacOS X going on the corporate LAN. Our sysadmin was Linux-literate, and didn't give a shit so long as you didn't do anything stupid, like leaving 44 bazmillion ports open and creating an open-relay, etc. etc. You did your own support wherever applicable if you had Linux, but the whole culture of the place was GNU-centric. Hell, the development "VPN" was an SSH server (on another continent); Linux folks could work at home while the Windows point-and-drool types suffered.

      Last I heard, after the company was acquired (and many developers like yours truly thrown out), all developers were marched towards Windows, as part of a larger program to crush any and all employee morale into a fine dust. So very sad.

      Oh well. It's late. Time to go have a fond memory and a good cry *sniff*.

      --
      --- The American Way of Life is not a birthright. Hell, it's not even sustainable.
    2. Re:Unofficial installations by Anonymous Coward · · Score: 0

      Yup, that's how it is here. The "corporate standard" is windows, but I use Linux as my primary desktop, as do some others. Many more run an about-to-be-surplused system as a second desktop running linux. Frankly, it's easier to get at our SGI & Beowulf computational resources from a Unix box.

      All this is done with the full knowledge & consent of IT, and the understanding that they won't support anything but Win2K on the desktop.

  12. Nope, not here by canadiangoose · · Score: 4, Interesting

    Aside from my laptop and my desktop, we have no Linux desktops. I do network scans and such monthly, and aside from a few Linux-powered embeded devices, I've seen nothing interesting. Mind you, I work at a hospital. There are not very many technically inclined folks here.

    --
    Never eat more than you can lift -- Miss Piggy
    1. Re:Nope, not here by RoundTop-VJAS · · Score: 2, Informative

      Speaking as someone who works for a company that does systems for hospitals... I can say that there is normally a reason that we require X windows OS. Normally it is for remote access, or certain features, or it must run certain software.

      This effectively prevents linux replacement. Also of note, these NT boxes are secured down so only admins have access to even the start menu, everyone else it opens the program only and when you close it it closes it out.

      --
      RoundTop

    2. Re:Nope, not here by DerangedYeti · · Score: 1

      Im a sysadmin at a hospital. most people have no idea what Linux is, so installing it would be impossible for them. they have to call me to get a paper jam out of the photocopier!

    3. Re:Nope, not here by drayzel · · Score: 2, Funny

      I work at a hospital. There are not very many technically inclined folks here.

      That's a good thing. I'd hate to have my nurse worrying about incompatiblities with her Wireless NIC and her kernel.

      Or my surgeon trying to get First Post on a Slashdot story during my operation!
      So thanks for making their job easier and my hospital stays safer. Keep those systems up!

      ~Z

    4. Re:Nope, not here by Anonymous Coward · · Score: 1, Interesting

      "Mind you, I work at a hospital. There are not very many technically inclined folks here."

      Uhh, I'd hope a hospital had some technically inclined people in it. I mean, You don't hire a bum off the street to run an MRI machine, or replace a spleen or something.

    5. Re:Nope, not here by Davak · · Score: 2, Funny

      Sometimes I will post and read before performing a case. We have a terminal in our procedure room and it's common for people to email or browse the web as we are waiting for the case to get started.

      I honestly believe that most of the trolls on slashdot are hospital admin people. What the hell else do they do all day?

      Davak

    6. Re:Nope, not here by Barlo_Mung_42 · · Score: 1

      "they have to call me to get a paper jam out of the photocopier!"

      I hate that! It's so depressing. Brain the size of a planet and these are the tasks I find myself assigned to.

    7. Re:Nope, not here by malkavian · · Score: 1

      You wouldn't perchance be an anaesthatist, pretending that your nice little linux box in the theatre is one of the monitors now, would you? :)

    8. Re:Nope, not here by Anonymous Coward · · Score: 0
      do they access to the power switch?


      If I have physical access to the box none of that shit would keep me out!

    9. Re:Nope, not here by llamaluvr · · Score: 1

      I am interning in the IT department at a large manufacturing company, and this sort of thing never happens. Our Windows 2000 images force you to register the machine name with us on about the 4th boot, so, really, a fresh Linux install wouldn't get all that far on the network. Additionally, we only have Windows versions of the production software, so people would have a tough time doing their job.

      Not to mention that EVERYTHING is in MS proprietary formats (I've seen like 1 .pdf in 3 months)...it's a shame, really...

      --
      Insightful: 76, Off-Topic: 379, Flamebait: 24, Funny: 152, Interesting: 201, Underrated: 55, Troll: 9, Total: 896
    10. Re:Nope, not here by Davak · · Score: 1

      Pulmonary and Critical Care.

      We have tons of monitors... but nothing very interesting installed on any of them. (Unless you find blood pressure, heart rate, oxygen saturation rate, etc. interesting.)

      The secretaries, on the other hand, have found a way to install the latest spyware, useless- crapware on all of their win2k boxes--the supposed megalocked-down-for-patient-privacy-sake boxes.

      I had always assumed that the secretaries were really just tricked into installing this crap which installed through the latest, greatest IE exploit... however, now i wonder... maybe they are really 'leet ninja gurus that enjoy punishing their desktops with useless sh!t.

      They probably are all running linux and IRC servers in the background without any of us knowing it.

      And here I thought they were just sitting on their tails playing java games all day...

      Davak

    11. Re:Nope, not here by Anonymous Coward · · Score: 0

      thanks for saying what i was going to say

      everyone knows medicine isn't technical, right?

    12. Re:Nope, not here by CronoCloud · · Score: 1

      My local hospital is weird. It seems most of the machines are running what looks like Win 98 from a quick glance (but is probably NT/2000) But I have seen a machine in the phlebotomy room (where they take out blood for tests) running Sunquest Rhumba Unix. So they have some sort of 'nix server there. They've got a Wireless B network too, as I found out while sitting in a waiting room with my laptop, but they've got their WEP enabled and probably have MAC filtering up.

      This hospital was just recently built and serves a small town and surrounding rural area. The've got hordes of RJ-45 jacks everywhere, even in the cafeteria.

      The secretaries have to be doing something with their time. It probably goes like this:

      Secretary want's to play Bejeweled but the machine is locked down. Secretary plays around and tries to figure out how to play Bejeweled. Secretary asks geek son/husband/brother about how she can play Bejeweled on her locked down box. Geek hands her books/websites etc. Secretary has nothing better to do so becomes an l33t windows hacker. Begins running an IRC channel for other l33t secretary hackers. All this so she could play Bejeweled.

    13. Re:Nope, not here by mav[LAG] · · Score: 1

      We have tons of monitors... but nothing very interesting installed on any of them. (Unless you find blood pressure, heart rate, oxygen saturation rate, etc. interesting.)

      What about the Machine That Goes Ping?

      --
      --- Hot Shot City is particularly good.
    14. Re:Nope, not here by binarytoaster · · Score: 1

      Our Windows 2000 images force you to register the machine name with us on about the 4th boot

      Uh.. that's great. How does that relate at all to Linux? Install it, and you don't have to register jack shit...

      Additionally, we only have Windows versions of the production software, so people would have a tough time doing their job.

      Is it proprietary? Otherwise, I'm sure there's SOMEthing like it...

    15. Re:Nope, not here by Anonymous Coward · · Score: 0

      Mod this guy up for a refrence to Monty Pythons the meaning of life

  13. Remember... by Anonymous Coward · · Score: 2, Insightful

    One datapoint does not a trend make.

    If you told me the guy who runs General Electric's desktops found that 50% were running Linux, then you might be onto something.

    But Jr. Sysadmin flunky at tiny company in bumfuck Iowa means nothing. Nothing.

    Lets apply those critical reasoning skills, people.

    1. Re:Remember... by grungeman · · Score: 5, Insightful

      Yes, and that is exactly why they are asking for other sysadmin's experiences. Got it?

      --

      Signature deleted by lameness filter.
    2. Re:Remember... by Anonymous Coward · · Score: 4, Interesting

      I work at one mega-monolithich US international -- though we're mostly nerds here (R&D).

      I'm not a sysadmin, but I'm one of the people that has installed Linux (I didn't blow away the corporate windows install, for accounting sakes) on his own at work.

      How did I get the corporate mail client (MS only) and other ends to work? I downloaded custom-wrapped wine rpms created (on their spare time) by other coworkers on the other side of the country at another research facility. This was hosted on a un-official internal "Go Linux!" website, for all of the company's employees to see (we're allowed to have personal and "club" websites) and download (they have all of MS Office 2K running smoothly, along with Notes, the corporate e-mail client).

      I got a couple of coworkers excited about Linux -- mind you, we're not just another corporate center, this is a hardware R&D filled with geeks (the sort of people that aren't sysadmins, but might play them on slashdot!) so I imagine we're at one end of the scale in the corporate world. But, thanks to Knoppix (try out a recent Linux distribution with zero liability on the company's computer to see if all your stuff is recognized! What a sale!) I've managed to get even some of the "old crusties" excited about Linux.

      Anyways, my sneaking suspicion (and my hope! so this probably biases my "suspicion") is that there is a large number of uncounted Linux installs, and growing.

      I was concerned about security, but who are we kidding? I know to not rest on laurels and all that (keep this RH73 as up to date as possible), but the alternative for my machine is Win2K, and we've been through the wringer with updates, worms, reboots and virus infected computers on *that* platform .....

    3. Re:Remember... by beatniklew · · Score: 1

      Anyone else think that asking this question on slashdot might slant the sample population a little bit? I mean, I think it's a good question and all, but asking the /. crowd whether or not they've installed linux/seen linux installed is a bit like asking the chess team whether or not Gary Kasparov is an important celebrity.

    4. Re:Remember... by Anonymous Coward · · Score: 0

      I work for GE. Perhaps not EVERY desktop is running Linux, but probably 90% of the employees here either:
      -dual-boot win/linux
      -have a separate machine with linux
      -run XFree86 over the network
      It's popular here

    5. Re:Remember... by nolife · · Score: 1

      If you told me the guy who runs General Electric's desktops found that 50% were running Linux

      I would guess that person should not have been running the desktops's in the first place.

      AC pretty much summed up your post..

      --
      Bad boys rape our young girls but Violet gives willingly.
    6. Re:Remember... by Anonymous Coward · · Score: 1, Interesting

      got it. so here goes

      i work for a large bank in network administration. of 350 users at our site i am the only one to install linux. on a laptop. my boss showed me a memo that forbid installing linux because it was a hacker os - i shit you not. this was a couple of years ago, i think it was redhat 6.0

      so i installed freebsd :D

      when our shitty ms dhcp server stopped handing out ip addresses for two subnets i built a freebsd dhcp server but was never allowed to implement it

      dumbasses

    7. Re:Remember... by Anonymous Coward · · Score: 0

      >If you told me the guy who runs General Electric's desktops found that 50% were running Linux, then you might be onto something.

      Um, wouldn't this also be one fucking data point, mr coward?

    8. Re:Remember... by Anonymous Coward · · Score: 0

      How about Lockheed Martin Enterprise Information Center?

      We had dual boot Redhat (7.0?) on the techies PC's 3 years ago!

    9. Re:Remember... by (l.windthorst) · · Score: 1

      I work at Philips (not quite GE, I know), and in my department of maybe 35 people there are 4 of us, including me, who have Linux running on our desktops -- I have mine dual-boot with Win2K b/c I need to work with Access sometimes and the corporate email system is run by Lotus Notes.

      A co-worker burned me a copy of RedHat 9, and when I was having some troubles the IT guy came down to help me bypass the proxy and get on the Internet.

      Didn't seem like too much of a biggie to me...

    10. Re:Remember... by seb249 · · Score: 1

      Hey Im from Bumfuck Iowa - tis a happening place :)

  14. We did this a couple of times at my old workplace by WillASeattle · · Score: 2, Insightful

    Mostly with "unused" computers.

    Since they cut the training budget, we obviously had to learn new skills somehow ...

    --
    > --- All Of The Above --- >
  15. Policy by spamchang · · Score: 1

    Don't think my company would allow that, security is ubertight. For some reason the majority of OSes are MacOS 9.0. But the techs are running Linux, and a port on the open net around here will let us use any notebook we bring.

    1. Re:Policy by Anonymous Coward · · Score: 0

      This you call ubertight security?

      It doesn't sound like it. A site which allows arbitrary hardware but forbids arbitrary software is probably not clear about security concepts, let alone effective implementation.

      There is one rare exception left to consider. That is if the site cryptographically distinguishes between trusted and untrusted systems, and provides different classes of services accordingly. But if it can do that, it can surely do it more robustly for a highly configurable Linux system than for any Microsoft product!

  16. back in the old days... by setag · · Score: 2, Interesting

    Back in the old days when ummmm... a guy I know was at SCO, people were intalling linux on their systems without consulting IT. That was in 1999.

    I don't have any figures for you though.

    1. Re:back in the old days... by Anonymous Coward · · Score: 1, Funny

      Then they copied code they were working on into Linux, also without telling IT... now look where it's gotten us!

  17. I've done this by Anonymous Coward · · Score: 1, Insightful

    I run Win2000 'officially', by Knoppix Debian on the sly - the only thing stopping me migrating completely is the lack of a working Novel client.

    1. Re:I've done this by amblin · · Score: 2, Informative

      Just in case you didn't already know...
      Novell Client for Linux

  18. Don't reinstall - boot linux from another disk by jgaynor · · Score: 4, Interesting

    I wouldn't dare reformat a work machine with another OS. The feasibility isn't the problem - it's the wrath of an angry sysadmin that is. I would like to keep my job in this economy.

    I DO, however, frequently boot my machine with knoppix. Most corporate IT environments prevent users from installing their own software - but Knoppix has pretty much every app I need. I sacrifice local file storage and some embedded data like PIM stuff, but its just more comfortable and doesn't raise the ire of the lesser IT geeks.

    1. Re:Don't reinstall - boot linux from another disk by Future+Linux-Guru · · Score: 4, Interesting

      The latest version of Knoppix will now allow you to save files on offline storage.

      The question is printing.

    2. Re:Don't reinstall - boot linux from another disk by g00set · · Score: 2, Funny

      1. Find a spare hard drive.
      2. Open compuer case.
      3. Insert spare hard drive.
      4. Install favaroite OS on spare hard drive.
      5. Leave IT *approved* OS on *other* drive.
      6. ????
      7. Profit!


      - I can't believe I just make a for profit post. I must leave now.

      --
      ... and furthermore ... I don't like your trousers.
    3. Re:Don't reinstall - boot linux from another disk by joelgrimes · · Score: 4, Informative

      Very true. It's the coolest thing. Get yourself a $50 keychain drive and make it your persistent storage.

      Then, no matter where you go, any machine you can get your hands on your machine.

    4. Re:Don't reinstall - boot linux from another disk by Anonymous Coward · · Score: 0

      Knoppix supports USB flash devices nicely, so you can have convenient portable storage.
      It's also dandy for slurping data from NT machines whose USB ports are otherwise useless.

    5. Re:Don't reinstall - boot linux from another disk by NanoGator · · Score: 1

      "I DO, however, frequently boot my machine with knoppix"

      What's knoppix provide for you that Windows doesn't?

      (note: If you're talking about 95/98/ME, then you don't need to answer, I already know why you're doing it.)

      --
      "Derp de derp."
    6. Re:Don't reinstall - boot linux from another disk by Antipop · · Score: 1

      is there anything like knoppix, but instead of KDE has Gnome? not a big deal, i just prefer Gnome over KDE because it's what i'm used to (and I think GTK is prettier than QT). knoppix looks interesting.

    7. Re:Don't reinstall - boot linux from another disk by Anonymous Coward · · Score: 0

      > The question is printing.

      Knoppix supports printing. You just have to turn on the priniting server you want.

      # /etc/init.d/cupsd start
      (Or, is it /etc/init.d/cups ?)

      Then, the usual KDE or CUPS printing interfaces will work. You just have to hope the drivers you want are there. (Most drivers are from the Debian distro, so search to see what is offered.)

    8. Re:Don't reinstall - boot linux from another disk by Anonymous Coward · · Score: 0

      www.morphix.com

  19. no...but by pphrdza · · Score: 0, Redundant

    sounds good to me, especially if I can do it without admin rights on an NT or 2000 machine.

  20. Been There Done That by Anonymous Coward · · Score: 0

    I've been running linux without the I.T. departments knowledge for a while, and since my supervisor and myself share the same machine, he really likes it as well. The fact that instead of booting to windows95 and sharing the same desktop, we've both got our own email accounts configured, open office, and excellent safety from the majority of virii.

  21. they better not by aderusha · · Score: 1, Insightful

    i don't deal much with desktops (i'm a server guy), but if i did "stumble across" unauthorized linux desktops, they'd be formatted with extreme prejudice. they almost certainly would have no antivirus software, no agents for our desktop license management, and almost certainly wouldn't be keeping up with security updates.

    the users don't own their machines - the company does. if they want to piss around with _any_ os, let them do it on their own time, on their own network, and on their own equipment.

    1. Re:they better not by SteveAstro · · Score: 1

      they almost certainly would have no antivirus software,

      Isn't that because there are almost certainly no Linux viruses ? What license issues are there with someone running Linux apps ? Aren't folks more likely to be running opensource stuff When was there last a critical user mode security problem in Linux, oh sure there have been a couple of potential nasties in Apache, but a show stopper for Desktop users ?

      Steve

    2. Re:they better not by 1lus10n · · Score: 1

      mod parent up as funny.

      I'm hoping that was one heavy dose of sarcasm, otherwise ......

      --
      "Two things are infinite: the universe and human stupidity; and I'm not sure about the the universe." --Albert Einstein
    3. Re:they better not by Anonymous Coward · · Score: 0, Funny

      You were a hall monitor in high school, weren't you?

      Dicksmacking wankermaster.

    4. Re:they better not by jeffkjo1 · · Score: 1

      if i did "stumble across" unauthorized linux desktops, they'd be formatted with extreme prejudice. they almost certainly would have no antivirus software, no agents for our desktop license management, and almost certainly wouldn't be keeping up with security updates.

      Last time I checked, there weren't any imminent linux virus threats.
      Desktop license management? I thought linux was free.
      If you have the ability to install linux, you probably have the ability to install security updates. Plus, as we've seen time and time again, sysadmins often don't even update their windows boxes and when a malicious bug strikes, whole networks go down... even though a patch was released months before.
      Also, unlike windows, linux is a bit more secure straight out of the box.... or rather, iso.

    5. Re:they better not by Anonymous Coward · · Score: 1, Interesting

      I was laughing as I read, waiting for the punchline, it never came. Either the guy is a master of dry wit, or just about completely witless.

    6. Re:they better not by Vicegrip · · Score: 4, Funny

      "anti-virus software", "desktop license management agents"

      Apparently you've confused Linux for a version of Windows.

      This kind of sysadmin crap is why I prefer working for a small company.

      --
      Do not spread "09 F9 11 02 9D 74 E3 5B D8 41 56 C5 63 56 88 C0" over the internet, thank you.
    7. Re:they better not by pz · · Score: 1, Insightful

      ... they'd be formatted with extreme prejudice.

      And I'm sure you'd be shortly disciplined or out of a job for destroying valuable data, negotiations, documentation, whathaveyou. Sheesh, some moderators don't recognize a troll when they see one.

      --

      Put my fist through my alarm clock with its ding-dong death inside my ear. - The Blackjacks.
    8. Re:they better not by blahtree · · Score: 1

      Piss around with, fine, but to do work with? If someone is more productive with another operating system, what gives you the right to take that away? Sounds like you're hurting the company rather than helping...

    9. Re:they better not by radaos · · Score: 1

      Where I used to work the IT department got mad as hell with people installing Linux, since some of them tried to set up dual boot on their notebooks and trashed their Windows installations. They did agree in the end that people could have it but only by swapping out their hard drive when they wanted to use Linux. None too convenient.

    10. Re:they better not by Chewie · · Score: 5, Interesting

      they almost certainly would have no antivirus software

      Oh, for the miniscule number of Linux viruses?

      no agents for our desktop license management

      Since *most* software that requires license management is either Windows-only or hard for Joe User to come by, I don't see this as a huge problem either.

      and almost certainly wouldn't be keeping up with security updates.

      Ah, now this is a real concern. I would hope that your company has firewalls, but I can certainly understand not wanting them to be your *only* line of defense.

      the users don't own their machines - the company does. if they want to piss around with _any_ os, let them do it on their own time, on their own network, and on their own equipment.

      I can certainly understand this. When you're responsible for eleventy jillion desktops, you can't have people going rogue on you. At least not without knowing that if you have to come fix their PC, it's getting reimaged.

      Now, I personally happen to run a stealth RH install, dual-booting to Win2K for when I just have to do something in Windows. My workstation, however, is well-secured, and has updates applied regularly. I have *never* had to bug the IT department, and my workstation is exceedingly well-behaved on the network. If the IT department decide to be real hard-asses about it and reimage me, I'll understand. Doesn't mean I won't be cranky, though. :)

      --
      49 20 68 61 76 65 20 74 6F 6F 20 6D 75 63 68 20 66 72 65 65 20 74 69 6D 65 2E
    11. Re:they better not by bigdavex · · Score: 1

      i don't deal much with desktops (i'm a server guy), but if i did "stumble across" unauthorized linux desktops, they'd be formatted with extreme prejudice. they almost certainly would have no antivirus software, no agents for our desktop license management, and almost certainly wouldn't be keeping up with security updates.

      I suspect that the risk of virus infection is still lower with the Linux box, regardless.
      There probably aren't any user liscenses to manage.
      Do you think the computers are vulnerable to something more malicious than wiping out entire harddrives?

      the users don't own their machines - the company does. if they want to piss around with _any_ os, let them do it on their own time, on their own network, and on their own equipment.

      It may come as a shock to you - but the IT guys don't actually own the PCs either.

      --
      -Dave
    12. Re:they better not by tashanna · · Score: 1

      Lets see here...

      > no antivirus software

      And no viruses

      > no agents for our desktop license management

      And software that doesn't require licenses

      What was the problem again?!?!

      - Tash

    13. Re:they better not by Anonymous Coward · · Score: 0

      hm you truly are a BOFH

    14. Re:they better not by invoke · · Score: 5, Insightful

      I used to be a manager at Dell, and I can tell you that if you had presumed to format one of my or my developers machines without first getting authorization from me, you'd be fired and "walked out of the building" the following day.

      Maybe the authorization got misrouted.
      Maybe you are wrong about either the authorization or the requirement for it.
      Maybe it was an experiment on a dept. system.
      Maybe it wasn't hooked to the network.
      Maybe we were testing the system's Linux compatibility at the end of the day and left it 'till the morning to finish.

      In my tenure at Dell, all these things were true at some point or another, and no one formatted our systems. We were too busy to get in the pissing matches that would have started.

      Certainly you should quit abusing your very limited power and try to help rather than simply jumping to conclusions.

    15. Re:they better not by Usquebaugh · · Score: 4, Insightful

      This is why IT is not consulted. Extreme prejudice indeed!

      If end users are not supposed to do something it's your job to configure the gear so they can't. Rules forbidding something are a failure in IT.

      If the user has no agent for the desktop license management how is that a problem exactly? Either they are not using any licensed software our your management software is not to hot on the managing front.

      If you're running round playing tattle tale who do you think the finger is really pointing at? Go back to your sever room and lock the door.

    16. Re:they better not by Vaughn+Anderson · · Score: 3, Funny

      Bill is that you? I didn't know you had a puppet on slashdot!

    17. Re:they better not by Anonymous Coward · · Score: 0

      send responses to dennis.omalley@sema.org 'cause I'll be damned if that ain't him.

    18. Re:they better not by pixel_bc · · Score: 2, Insightful

      > Last time I checked, there weren't
      > any imminent linux virus threats.

      That attitude works up until the world gets surprised by the first real nasty one.

      > Desktop license management?
      > I thought linux was free.

      Perhaps, if your time is worthless. But anyhow, he was refering to license management for any potential commercial software they may have illicitly installed.

      > If you have the ability to install linux,
      > you probably have the ability to install
      > security updates.

      Perhaps, but you're assuming people have the attention span. They usually don't. Don't depend on your users to go out of their way here.

      > Also, unlike windows, linux is a bit
      > more secure straight out of the box....
      > or rather, iso.

      And just as easy to make insecure, with the running of a single config script or shell script.

      I feel sorry for IT people. Users aren't generally as saavy as they think they are. :)

    19. Re:they better not by Anonymous Coward · · Score: 0

      the same would happen in our shop here. If a user makes any mod's to their machine without consulting IT they will get their machine confiscated and get it back reimmaged with deep freeze installed and be lucky if their manager isn't notified. Our main reason for doing it is a user will have someone mess with their machine (installing linux etc...) and then come to us for support if/when it blows up. We do allow users who are willing to forgo getting support from us to do whatever they want including installing linux etc...

    20. Re:they better not by mcgroarty · · Score: 1
      Last time I checked, there weren't any imminent linux virus threats.

      I'd bet good money that there are more viruses active and in the wild without Norton or McAffee recognition at any given time than there are UNIX/Linux viruses in total.

      Viruses are yet another area where we find UNIX software to be lacking! Go Redmond!!!

    21. Re:they better not by Soko · · Score: 3, Insightful

      It may come as a shock to you - but the IT guys don't actually own the PCs either.

      It may be suprising to you that his job depends on ensuring corporate standards are in place and enforced on IT infrestructure.

      I understand a user wanting to run thier own show on the workstation assigned to them, but if a major problem with Linux surfaces and the sysadmin didn't do anything about a non-standard installation that they knew about, that's akin to dereliction of duty, and they should be fired. A corporate environment requires stringent management, or it spirals into a huge, black, money sucking pit.

      IOW, it's up to the SA to ensure that everyone plays nice on the network. If you want to use Desktop Linux at work, ask . Maybe the sysadmin be a lot more friendly towards the idea - I know I would.

      Soko

      --
      "Depression is merely anger without enthusiasm." - Anonymous
    22. Re:they better not by chrysrobyn · · Score: 2, Insightful
      the users don't own their machines - the company does. if they want to piss around with _any_ os, let them do it on their own time, on their own network, and on their own equipment.

      I certainly see your point. The company pays to maintain my laptop for me, the company pays for the support and pays for me not to have to worry about it. They pay you to do all that for me.

      I see my employer as someone who pays me to do a job. I'm not that good at windows. I can do many things with *nix better or faster or both. If I asked my manager if I could modify my laptop and my productivity would increase by 10%, she'd approve it. Personally, I can keep a Linux install up to date, well maintained and all the appropriate patches on it. Certainly better than the company can do that to my windows equipped laptop while they tiptoe around taking me down at inconvenient times.

      The company pays you to keep me out of trouble. The company pays me to be efficient. If I can be more efficient and keep myself out of trouble, why should you care that you have one less Windows machine to maintain (to say nothing of the grumpy luser you have to deal with)? Of course, if I get 0wned, you need to come down on me hard and make sure that my manager knows you're here to keep that from happening to me but I didn't let you.

      As far as license management goes, maybe you could work with a rogue Linux user and find out how to satiate your needs and his / hers?

    23. Re:they better not by Anonymous Coward · · Score: 0

      but if i did "stumble across" unauthorized linux desktops, they'd be formatted with extreme prejudice.

      I dare you to "stumble across" mine.

    24. Re:they better not by Frostalicious · · Score: 2, Insightful

      And I'm sure you'd be shortly disciplined or out of a job for destroying valuable data, negotiations, documentation, whathaveyou. Sheesh, some moderators don't recognize a troll when they see one.

      While the parent post is rather harsh, there are plenty of organizations which would discipline you for installing unauthorized software on your machine. I know of some departments where you need authorization to install stupid stuff like ICQ or winzip.

      Lots of managers would wonder why you just spent company time to install a new OS on your machine. You would be expected to justify your actions in that the new OS somehow assists in your job performance. That would be a difficult thing to justify, seeing that if the management team believed in the benefits of Linux, your shop would probably use it already.

    25. Re:they better not by Cyno · · Score: 1

      That attitude works up until the world gets surprised by the first real nasty one.

      Well, wake me when it happens. I'll just be right over there taking a nap.

      And just as easy to make insecure, with the running of a single config script or shell script.

      Hey, at least they won't have to be worried about being compromised by reading their email. ;)

    26. Re:they better not by Beatnick · · Score: 1

      We don't authorize linux or any other OS besides MS on the desktop but if an engineering group (and there has been in our electric distribution and transmission teams) requires a robust OS (such as Linux or any other OS for that matter) for the job, then they are allowed with limited or no support. We inventory it, work with the user to set managability and move on. Instead of being rigid, we must find ourselves to be flexible in todays market. Unlike your team, (as it seems) we are growth oriented and possess a get-the-job-done attitude. We attune ourselves to what the customer requires. They work within our constraints and are typically patient. In an outsourced world (I work for one of the largest), it is best to be open minded than blatantly closed or else someone may have your job. My parent company took over the support of the Fortune 500 company for the same reasons you appear proud to announce. Policies are good ... don't get me wrong but you have to work with a positive attitude and find a workable ground.

      Just my thoughts...

    27. Re:they better not by trippinonbsd · · Score: 1
      Mod parent up.
      If end users are not supposed to do something it's your job to configure the gear so they can't. Rules forbidding something are a failure in IT.
      That is the best paragraph I have read all day.
    28. Re:they better not by Cyno · · Score: 1

      If the IT department decide to be real hard-asses about it and reimage me, I'll understand.

      I wouldn't understand, and I'd kick that bitchy little sysadmin's ass!

      Just try to reimage one of my systems, see what you git!

      (I'm a sysadmin, btw, but I think all users are administrators of their own systems. Its my job to make sure they can do their job, whatever that may be. Its not up to me to choose what software they are allowed to use.)

    29. Re:they better not by 1lus10n · · Score: 4, Insightful

      >> Last time I checked, there weren't any imminent linux virus threats.

      > That attitude works up until the world gets surprised by the first real nasty one.

      should i even bother explaining why it is damn near the most unlikely thing to happen in IT ? or should i just point out that _if_ a virus ever hits a unix there would be open source anti-virus software within a few days ? (few months max) or point out that the unix type of OS is about 30 years old. and to date there havent been any virus's in the "wild". (and dont give me that "not attractive target" for virus writers crap either, unix still runs mainframes, bank computers, ATM's etc .... and linux and BSD run about 50% of the mid-range servers....)

      se the wonderful thing about linux is you dont have to run a damn thing as root, and the few things you do have to run as root can be chroot'd so the virus/worm can't do diddley. some linux distros come like this by default.

      >> Desktop license management? I thought linux was free.

      > Perhaps, if your time is worthless. But anyhow, he was refering to license management for any potential commercial software they may have
      > illicitly installed.

      oh please. take your gartner studies (microsoft funded BTW) and shove em'. the amount of time it takes to install and optimally config a std. linux system is in the hours worth of time. admining that same install MIGHT take 30minutes per month. windows ? yeah friggin right, pick one of their OS's if you spend less than two hours per month admining that box its vulnerable. this argument is moot. since anyone who is going to install linux by choice obviously wasnt bugging the IT guys and hence didnt need to be trained, so there is no time lost their.

      Linux is FREE to any person who knows what they are doing, simply because spending the few hours it takes to install free's them of the years of misery that lies behind them, and the years that would have laid ahead of them if they had still been running windows.

      --
      "Two things are infinite: the universe and human stupidity; and I'm not sure about the the universe." --Albert Einstein
    30. Re:they better not by Nicolas+MONNET · · Score: 1

      Perhaps, if your time is worthless. But anyhow, he was refering to license management for any potential commercial software they may have illicitly installed.


      It's rare to have any sort of commercial software on a Linux installation, and as a result, it's close to impossible to find Linux versions of commercial software on, say, P2P networks.


      Just checking here, I have Quake 3, UT and Oracle installed. Oracle, I downloaded it from their website.

    31. Re:they better not by Ender+Ryan · · Score: 3, Insightful
      Boy am I glad I don't work with you!

      You need to find a good surgeon to remove the stick from your ass...

      Basically, what you're saying is that you aren't confident enough with your security measures that anyone inside your network can wreak havok? In a big company, that's pretty fuckin' pathetic; a rogue user had better not be that big of a security concern!

      the users don't own their machines - the company does. if they want to piss around with _any_ os, let them do it on their own time, on their own network, and on their own equipment.

      IMO, this is exactly what is wrong with corporate America. You're not a person, you're a drone, don't try to learn anything.

      --
      Sticking feathers up your butt does not make you a chicken - Tyler Durden
    32. Re:they better not by Cyno · · Score: 1

      A corporate environment requires stringent management, or it spirals into a huge, black, money sucking pit.

      Get out those whips, boys, we got us some radical slaves to beat back in line.

      People work harder when they are either happy, or under the threat of life, liberty, pursuit of happiness, y'know, all those things those old timers wrote about on that hemp constitution back in the day. I wonder what they were trying to say. Hrmmm.

      You can't pay me enough to put up with that type of bs. I quit!

    33. Re:they better not by Anonymous Coward · · Score: 0

      We do the opposite. For security reasons, we don't let Windows hosts onto our ordinary networks, and we don't offer technical support for them at all. Solaris, AIX, Linux, now those we do support, and that we find very easy because our infrastructure is solid.

    34. Re:they better not by Anonymous Coward · · Score: 0

      what development goes on at dell?

      just curious

    35. Re:they better not by tarquin_fim_bim · · Score: 1

      This also demonstrates that the sysadmins are unapproachable, failure no 1, and not installing the software the users require failure no 2. Time to find another career.

    36. Re:they better not by Slightly+Askew · · Score: 1
      Apparently you've confused Linux with the imaginary Super Magic Happy Fun Ball OS, where there are no virus threats or security vulnerabilities, and all software is free (unlike the pot you're apparently smoking).

      What? 15 vulnerabilities in one week. They must be talking about some other Linux.

      --
      Public use of any portable music system is a virtually guaranteed indicator of sociopathic tendencies. -- Zoso
    37. Re:they better not by Anonymous Coward · · Score: 0

      Unfortunately you neglect to mention that your 'network' consists of two computers connected to your mom's cable modem.

      Try learning how business works, kid.

    38. Re:they better not by fearlessrogue · · Score: 1

      How is the parent not flamebait? What the hell?

      --

      Everything Zen;
      Everything Zen;
      I don't think so!!!
    39. Re:they better not by pixel_bc · · Score: 1

      > Hey, at least they won't have to be worried about being compromised by reading their email. ;)

      The point is, you bloody well might have to if they're doing something silly like running their mail client as root -- which is something they may very well do if IT doesn't have it locked down.

    40. Re:they better not by Anonymous Coward · · Score: 0

      www.dell.com. They do run a fairly complex website you know.

    41. Re:they better not by Anonymous Coward · · Score: 0

      used to be a manager at Dell, and I can tell you that if you had presumed to format one of my or my developers machines without first getting authorization from me, you'd be fired and "walked out of the building" the following day. Ah, ic, so because of that, the IT department fired you instead, so they can format the computers. ;)

    42. Re:they better not by aminorex · · Score: 1

      150,000 moderators on slashdot, and the only ones
      smart enough to recognize such an obvious troll have
      been censored by having m1 turned off.

      --
      -I like my women like I like my tea: green-
    43. Re:they better not by pixel_bc · · Score: 1

      > se the wonderful thing about linux is
      > you dont have to run a damn thing as root,
      > and the few things you do have to run as root
      > can be chroot'd so the virus/worm can't do
      > diddley. some linux distros come like
      > this by default.

      You're assumimg that the people performing these installs and maintaining them are as smart as you are.

      A dangerous assumption...

    44. Re:they better not by Anonymous Coward · · Score: 0

      it spirals into a huge, black, money sucking pit

      not wating to pick a fight, but honestly, can you dream up a worse money sucking pit than running MS in a large corporation? How much do you spend on licenses per quarter? Per year? Company wide?

      To add, upgrades to new versions of software to fix stuff that should have been shipped working ok in the first place isn't an upgrade, it falls into the money sucking pit category.

      You can't go wrong with pushing for anything other than MS, if you are really concerned with saving the company money.

      Yes, there are also security concerns with Linux -- at my job they have scripts available to run against your Linux install to check for gaping holes. It reports and even offers some advice as to how address the lapses in cofiguration (BTW, they have something similar for Windows, but who are we kidding? With what we've been through recently -- well, I'm just waiting for the next vexingly boneheaded MS security flaw to come along and pretty much make moot whatever security precautions you take with MS software in configuration).

      At any rate, I'd imagine you'd do well to encourage whatever migration the users are already making for whatever personal reasons, because, honestly, I can't imagine that it isn't in the bottom-dollar best interests of the company.

    45. Re:they better not by Arandir · · Score: 3, Funny

      If you did format my system with extreme prejudice, you had better be sure you have the authority to do so. The computer doesn't belong to you. It belongs to the company. So check with your boss, his boss, and his boss's boss first. Then double check with my boss, his boss, and his boss's boss.

      Someone did this in my company to a laptop four years ago. Just last week I noticed he was still sitting funny after the impromptu buttectomy the VP gave him.

      --
      A Government Is a Body of People, Usually Notably Ungoverned
    46. Re:they better not by canadian_right · · Score: 1
      Actually, doing a non-standard install can get you fired at many large firms. Banks, and most major finacial institutions have very strict rules about what is installed. A non-standard screen saver can cost you your job at some places.

      Any large business will have desktop standards. Having only one OS to support keeps costs down. Exceptions are made when required, but in general, only smaller companies tolerate users installing their own OS's or software. It's not your computer - its the companies computer.

      --
      Anarchists never rule
    47. Re:they better not by canadian_right · · Score: 1
      Depends were you work. Some places format and re-image ALL desktop PC's each night. All valuable data is kept on network drives which have proper backups (tape rotations, offsite tapes, mirrored drives, etc...), and security.

      It is very common for well run companies to have tight control over the software installed on the desktop. This keeps support costs down which are MUCH higher than the cost of the license for a desktop OS over three years. This control also helps prevent software piracy. You have to keep in mind that 90% of computer users only use email, calendaring, word processing, and spreadsheets. Most users never install anything other than a screensaver. The few users with the knowledge to actually mess with the OS are generally a real pain to support as they have ten times more problems.

      --
      Anarchists never rule
    48. Re:they better not by 1lus10n · · Score: 1

      no im assuming that people installing linux on a corporate network, without help from the IT team have some moderate clue.

      if they do not then quite frankly re-image the damn thing as windows and lock-down their media access so they cannot *install anything*, let alone a new OS.

      --
      "Two things are infinite: the universe and human stupidity; and I'm not sure about the the universe." --Albert Einstein
    49. Re:they better not by jonesvery · · Score: 3, Insightful
      should i even bother explaining why it is damn near the most unlikely thing to happen in IT ? [...] or point out that the unix type of OS is about 30 years old. and to date there havent been any virus's in the "wild".

      Ummm...actually, in 1988 (fifteen years ago) Robert Morris wrote a worm that attacked UNIX machines via a number of different routes (holes in sendmail, finger, and a few other approaches that I don't recall at the moment). In the space of something like 24 hours, Morris' worm brought thousands of computers to a grinding halt (a fair percentage of the machines that were networked in the US at that time), and those computers were running UNIX.

      This is actually the worrisome issue: a *NIX is not inherently more secure than anything else. I think that there are UNIX-based machines out there that are far more secure than anything else you can find, but that's becuase those particular machines are administered by paranoid freaks...paranoid freaks that are extremely good at what they do... :)

      I'm guessing that this isn't the case, but if your position is that "'I don't have to run a damn thing as root' and therefore my linux box is by definition going to be secure forever," then going to get screwed -- and screwed hard -- one of these days.

      --

      * * *
      It is a dada story -- it has no moral.

    50. Re:they better not by bondjamesbond · · Score: 0

      have you installed *any* late version distro? it's brainless to keep updated. now go reboot your 'doze servers before they crash!

    51. Re:they better not by jazir1979 · · Score: 1


      It's not that rare...
      add VMWare and IntelliJ to your list.

      There are lots of multi-platform, commercial java apps that people could be installing on Linux.

      --
      What's your GCNSEQNO?
    52. Re:they better not by Anonymous Coward · · Score: 0

      slashdot-is-that-you-guy, is that you? where ya' been? Me 'n' the rest of your fans thought you might have gotten a job or something.

    53. Re:they better not by Anonymous Coward · · Score: 0

      If I asked my manager if I could modify my laptop and my productivity would increase by 10%, she'd approve it.

      Oh really? Do you think that taking this action has only the one effect of making you more productive. What if it costs the company $100,000 to rid their systems of the hacker your laptop lets in(which is just an example and not a certainty)? Does this make the *company* more productive? Good managers have an understanding of the big picture, not just what will make Joe Developer more productive.

      The company pays you to keep me out of trouble.

      Once again: Do you really believe this? I am hoping this is an over simplification and or an attempt at being funny. Sysadmins do not exist to baby sit you.

      Of course, if I get 0wned, you need to come down on me hard and make sure that my manager knows you're here to keep that from happening to me but I didn't let you.

      Come down on you!?!? If the sysadmin still has a job, maybe he/she will think about it. You are foolish enough to believe that a sysadmin can just divert the wrath of the company to Joe "Innocent" Developer, because he/she knowingly let you install something that was not company policy. You act as if a sysadmin getting all over you will make things better. Grow up. This is the real world.

    54. Re:they better not by Anonymous Coward · · Score: 0

      In some companies using the zero administration tools might work but in others no. It also requires an army of administrators on hand at all times when someone needs their icons moved to the other side of the desktop.

      When policies are put in place people need to adher to them or face the consequences, it's that simple. They are being paid to do their job and follow the rules. They are not being paid to conflict with IT's rules because they have a stick in their ass one day. Rules are usually put in place to protect the overall network integrity. They are not there so IT can play god, at least not at my place of business.

    55. Re:they better not by Anonymous Coward · · Score: 1, Insightful

      should i even bother explaining why it is damn near the most unlikely thing to happen in IT ? [...] or point out that the unix type of OS is about 30 years old. and to date there havent been any virus's in the "wild".

      Ummm...actually, in 1988 (fifteen years ago) Robert Morris wrote a worm


      WORM, not virus.

      that attacked UNIX machines via a number of different routes (holes in sendmail, finger, and a few other approaches that I don't recall at the moment).

      FYI:

      THE SENDMAIL ATTACK:

      In the sendmail attack, the worm opens a TCP connection to another
      machine's sendmail (the SMTP port), invokes debug mode, and sends a
      RCPT TO that requests its data be piped through a shell.

      THE FINGERD ATTACK:

      In the fingerd attack, it tries to infiltrate systems via a bug in
      fingerd, the finger daemon. Apparently this is where most of its
      success was (not in sendmail, as was originally reported).

      THE RSH/REXEC ATTACK:

      The third way it tried to get into systems was via the .rhosts and /etc/hosts.equiv files to determine 'trusted' hosts where it might be
      able to migrate to.

      The above is from http://www.worm.net/page_worm.txt

    56. Re:they better not by 1lus10n · · Score: 1

      its not only making sure to limit what runs as root. its not that simple. but one virus writen before firewalls or IDS's were evern close to common occurance is not exactly proof of a damn thing.

      and to be more exact there were two virus's in the 80's that affected unix, one of which actually repaired a hole in ftp (IIRC) but left a backdoor onto the system.

      the point is simple, in order to do real damage to unix you need to have root access, thats typically another step in the penetration of the system. that one step can make a big difference.

      i run apache and sendmail in chroot'd jails. simply because with the new GrSecurity in the kernel its WAY outside of the skillset of the kiddies to get out of a chroot'd jail. and yes believe me kiddies are the ones who write virus's and root kits. no real hacker or even a cracker would bother. its like painting a target on your chest and taunting the FBI, or whomever to catch you. and they will.

      --
      "Two things are infinite: the universe and human stupidity; and I'm not sure about the the universe." --Albert Einstein
    57. Re:they better not by Anonymous Coward · · Score: 0

      15 vulnerabilities? Maybe you should remove your shoes and make use of all six toes next time you count, those 'linux' vulnerabilities are 3rd party apps. Of course I'm sure you're a paragon of objectivity and include every vulnerability of every third-party app which runs on Windows a Microsoft fault, right?

    58. Re:they better not by Anonymous Coward · · Score: 0

      Did you actually _read_ any of those advisories? Most of that software is _far_ from Linux specific.

    59. Re:they better not by Seismologist · · Score: 1

      I this why you got laid off from Dell?

      --
      ~ In Trust, We Trust ~
    60. Re:they better not by Brad+Mace · · Score: 1
      if i did "stumble across" unauthorized linux desktops, they'd be formatted with extreme prejudice. they almost certainly would have no antivirus software, no agents for our desktop license management, and almost certainly wouldn't be keeping up with security updates.

      I'm aware of the difficulties of supporting different systems, but I'm inclined to say 'quit your damn whining'. If you're not able to support the boxes, get someone who is. Employees should use whatever OS and programs they can be most productive with, not something dictated by higher-ups. This is especially true when their choice is in most ways better and always cheaper.

      Further, linux viruses are extremely rare, license management virtually irrelevant, and if they can install linux on their own, they can probably handle doing an apt-get dist-upgrade occasionally.

      the users don't own their machines - the company does. if they want to piss around with _any_ os, let them do it on their own time, on their own network, and on their own equipment.

      I doubt many people who install linux at work are 'pissing around'. Most of them are trying to do more work in less time, or just trying to be able to do their job in the first place, which makes it hard to justify companies fighting them on this.

    61. Re:they better not by 1010011010 · · Score: 1


      At least Linux doesn't think .exe/.com/.bat/.vbs/.scr/.etc in a filename means "run this file! it's a program! run it!" like Windows does.

      --
      Napster-to-go says "Fill and refill your compatible MP3 player", which is a lie. It's not MP3. It's WMA with DRM.
    62. Re:they better not by Pieroxy · · Score: 1

      That's what it was all about dude.

    63. Re:they better not by Pieroxy · · Score: 1

      Just a small post to say that "so there is no time lost their" should in fact be "so there is no time lost there".

      Have a nice day.

    64. Re:they better not by Anonymous Coward · · Score: 0

      Hows the weather in Redmond?

    65. Re:they better not by pixel_bc · · Score: 1

      > no im assuming that people installing
      > linux on a corporate network, without
      > help from the IT team have some moderate
      > clue.

      Yes, I understand that.

      I'm saying that's a dangerous/faulty assumption.

    66. Re:they better not by member57 · · Score: 1

      Let me guess, MCSE?? Stop listening to those schools pumping out M$ propoganda. Linux is a real threat to M$ so they are going to push FUD into the minds of all MCSE. Linux, virus? Dude get a clue, or go back to "servers"...

      --
      If Kerry was the answer, it must have been a stupid question.
      The UN - The largest "political" cause of death.
    67. Re:they better not by Leolo · · Score: 1

      > and the few things you do have to run as root can
      > be chroot'd

      It is possible to escape from a chroot jail if you have root privileges. You do have to have greater skill though.

      -Leolo

    68. Re:they better not by 1lus10n · · Score: 1

      as is assuming that an admin who would shoot off about it has any more clue than the average user.

      a SMART admin wouldnt need to post to slashdot about the damn problem, he would ask if they were updated and asses their ability to stay updated.

      remember it takes on to know one, and an admin assuming everyone is clueless is probably clueless himself.

      --
      "Two things are infinite: the universe and human stupidity; and I'm not sure about the the universe." --Albert Einstein
    69. Re:they better not by 1lus10n · · Score: 1

      just a small post to point out that i ain't given a damn about your grammerar nazi crap.

      --
      "Two things are infinite: the universe and human stupidity; and I'm not sure about the the universe." --Albert Einstein
    70. Re:they better not by 1lus10n · · Score: 1

      its possible to break into any networked computer. but you have to have some really kick ass skills to get into solidly secured networks. which i can say this guy wasnt running if someone had the ability to install linux without his knowing right away.

      the princaple of security is to make something as secure as possible while still allowing it to work without much hinderance. not to prevent all intrusians, that is impossible.

      as a side note .... i really suck at spelling.

      --
      "Two things are infinite: the universe and human stupidity; and I'm not sure about the the universe." --Albert Einstein
    71. Re:they better not by temojen · · Score: 1
      the point is simple, in order to do real damage to unix you need to have root access, thats typically another step in the penetration of the system. that one step can make a big difference.

      It'd really suck if all my homedir & /var/spool/mail/`whoami` got deleted, corrupted, or forwarded.

      same goes for trojaning my .xinitrc or adding entries to my .forward .

    72. Re:they better not by Anonymous Coward · · Score: 0

      Uh huh, just like outlook on most of the windows boxes.

    73. Re:they better not by 1lus10n · · Score: 1

      pain in the ass for the user ? yes. but theres a large differance between your homedir, or mail spool and a production website or database.

      --
      "Two things are infinite: the universe and human stupidity; and I'm not sure about the the universe." --Albert Einstein
    74. Re:they better not by temojen · · Score: 1

      With a keystroke logger in my .xinitrc and a copy of my ~/.ssh/id_rsa ... boom! there goes the production website and database.

    75. Re:they better not by Pieroxy · · Score: 1

      Just a small post to thank you very much for your insight on the grammatical matter.

    76. Re:they better not by Nakarti · · Score: 1

      Since *most* software that requires license management is either Windows-only or hard for Joe User to come by, I don't see this as a huge problem either.

      You seem to be forgetting that this is Roger-I-Installed-Linux-On-My-Workstation-and-hid- it-from-IT we're talking about.
      Admitted that I too have been an avid user of freely-licensed software(Win or *nix) since getting into Linux, I found Warez long before I even knew what GNU was.

    77. Re:they better not by Anonymous Coward · · Score: 0

      $ sudo apt-get install clamav amavis-ng

      OR

      $ sudo apt-get install amavis-postfix

      Scanners for files and email exist today and have virus definitions that are updated.

    78. Re:they better not by Beatnick · · Score: 1

      I agree that the non-windows server farms as well as the non-windows workstations require little maintenance and some patching from time to time.

      But I have to say the windows users keeps me in business as they require patching constantly (especially with the recent security issues server side) and all the applications that experience problems, blues screens, etc.
      eh, just a bit of job security. :) now if we solved all the problems, they wouldn't need us would they? it'd be just like the Maytag commercials..sometimes... :)


      To all you sysadmins, take some time and enjoy a cold one. :)

    79. Re:they better not by 1lus10n · · Score: 1

      you use rsa keys to authenticate, that in and of itself is a security hole.

      and a keystroke logger installed on any system poses a security issue, and is a hole that is pretty much un-fixable, unless you plan on somehow encrypting keyboard input. its the same with physical access.

      there is no such thing as perfect security. but there are ways to make it better than not having any at all.

      --
      "Two things are infinite: the universe and human stupidity; and I'm not sure about the the universe." --Albert Einstein
    80. Re:they better not by 1lus10n · · Score: 1

      no stinkin problem homie time any you need it !

      --
      "Two things are infinite: the universe and human stupidity; and I'm not sure about the the universe." --Albert Einstein
    81. Re:they better not by Anonymous Coward · · Score: 0
      they almost certainly would have no antivirus software

      Oh, for the miniscule number of Linux viruses?


      Or maybe for the windows files that are on their system so that when they get copied somewhere else on the network they don't infect the windows PCs? There is a lot of software that runs on Unix (and increasingly Linux) which requires license manager software.

      no agents for our desktop license management

      Since *most* software that requires license management is either Windows-only or hard for Joe User to come by, I don't see this as a huge problem either.


      I'm guessing you haven't heard of flexlm. Its the bane of my existence. Try working in the CAD/CAM field sometime.

    82. Re:they better not by Lumpy · · Score: 1

      This kind of sysadmin crap is why I prefer working for a small company.

      It is also useful for detecting sysadmins that are really faking it and not really skilled people.

      we rooted out over 50% of the IT and IS department here... my location alone went from 15 employees to 3 of us last week and you know who was kept???

      Not the MCSE's or the windows fan-boys/specalists.. only those of us that demonstrated that we could maintain anything and were the most flexible.

      I'm the resident Linux expert.... I kept my job, because I told the corperate VP that the Job of IT is to provide the tools and services to make sure that the rest of the company can continue to increase it's profitability and productivity.

      The guys ranting about being there to enforce security, uniformity, and define specific proceedures and maintain operation are for some reason the ones that are in the Unemployment line.

      Companies need foreward thingking, flexible and CAPABLE IT and IS staff.. not the whiners that fight change.

      --
      Do not look at laser with remaining good eye.
    83. Re:they better not by bigdavex · · Score: 1

      It may be suprising to you that his job depends on ensuring corporate standards are in place and enforced on IT infrestructure.

      I understand a user wanting to run thier own show on the workstation assigned to them, but if a major problem with Linux surfaces and the sysadmin didn't do anything about a non-standard installation that they knew about, that's akin to dereliction of duty, and they should be fired.

      I think the original poster was trolling, in retrospect. I'm pretty sure anyone who formats someone's drive for the offense of running unauthorized software would be fired at my workplace. The network exists to facilitate work, not the other way around.

      --
      -Dave
    84. Re:they better not by Tsu+Dho+Nimh · · Score: 1
      "if i did "stumble across" unauthorized [linux]desktops, they'd be formatted with extreme prejudice"

      I worked for a large multi-state bank that hired a "desktop environment" PC manager with your attitide.

      In the course of the usual hard drive snooping, he discovered that my hard drive had non-standard templates for Microsoft Word with complex macros in them, and a number of non-corporate standard programs for graphics and other things. Without asking anyone such as my boss or even me why they were there, he wiped those abominations off my hard drive one night, replacing all my stuff with the official corporate templates and the official programs. He also deleted my data because corporate standard required ALL data to be stored "on the network".

      The next morning, I had to tell my boss that three months worth of policy and procedure manual development had been deleted, along with the templates, macros, and graphics programs that produced them. I had a shiny new install of a corporate standard desktop that had been done in the dead of night. Then I had the fun of watching the boss (he was head of mainframes, one the people who handled the money) flay the hide off the PC environment guy ... for doing anything in mainframe territory without checking with mainframe staff, and for not making backups of my hard drive before wiping it. I, of course, had backups of everything, but we let him sweat.

  22. So is that 2% of the desktop now? by msgmonkey · · Score: 0

    How much of the desktop market is made up corporate machines? Now that PC's are a commodity it can't be that much.

    On the flip side corporate deals must be a cash cow since alot of money is spent on support, of course RedHat wont be seeing anything from those clandestine installs.

    1. Re:So is that 2% of the desktop now? by kitty+tape · · Score: 1

      I would guess that PCs are a fairly large percent of the desktop market since many people use computers at home and at work.

      --
      ----- "Type theory is like pretzels on crack." -- random friend
    2. Re:So is that 2% of the desktop now? by unconfused1 · · Score: 1

      Well...and this 1% statistic only represents SOLD Linux packages, and has no bearing on the number of different OS's that are downloaded, like some Linux distributions. They (like Gartner) are just tracking marketshare via sales. They really need to do an analysis on operating system USE.

      Like this article states for MacOS, operating system saturation and use is more interesting than just tracked sales are. Linux likely has more like a 5 to potentially 15% saturation by itself (not counting other free OSs) on desktops.

      Some computer sales including MacOS or Windows are reinstalled with Linux or FreeBSD (or other) once they are set up...but those are going to be recorded as sales for Microsoft or Apple. This can be deceiving.

      Here is the article:
      Shattering the five percent myth

  23. Does this count? by AWrinkler · · Score: 5, Interesting

    In the last infrastructure upgrade we did, all 60 machines were identical:
    FreeBSD 4.7, autostart XFree86,
    full-screen RDesktop to central Win2k Terminal Servers.

    User's still think they have a windows
    box(windows splash screen on boot).

    Does this count?

    1. Re:Does this count? by Anonymous Coward · · Score: 0

      Not trying to troll, but what's the point? You still have to have a workstation license for every computer connected to the MS terminal server...

    2. Re:Does this count? by H310iSe · · Score: 2, Interesting

      How's the load handling (how many users per box, how big are the boxes?) Had any network/server problems that made the users scream when they suddenly couldn't do work even though the computer on their desk was working fine?

      Just curious, I did a big NT 4 terminal server install once and it was one of the more challenging times in my life. Hard, it was, and long. Win2k is supposed to be much better, but is it really worthy (stable, etc.) of a thin client environment?

      --
      closed minded is as closed minded does
    3. Re:Does this count? by netsharc · · Score: 4, Informative

      Well one advantage I can think of is: no need to worry about applying MS security patches to those 60 machines.. just one central server to fix, and to break itself every few hours.

      --
      What time is it/will be over there? Check with my iPhone app!
    4. Re:Does this count? by intermodal · · Score: 2

      the point is it's a pain in the ass to re-image every workstation. With BSD it's way easier/less likely to be needed.

      --
      In SOVIET RUSSIA... erm...NSA AMERICA, the Internet logs onto YOU!
    5. Re:Does this count? by Anonymous Coward · · Score: 0

      A TSCAL license is much cheaper than an OS license. That, and with the newer TSCAL patches (at least under win2k) they are recoverable. Any host that doesn't re-request a license every (90?) days looses the lic and the lic is returned to the pool.

      This is pretty cool - i do the same with some linux thin-terms that connect into a clients RDP/ICA (citrix) farm. We use the citrix for the better performance over WANs and the (quasi) load-balancing.

      From what I understand though, the RDP 5.1 in Windows 2003 is going to help hurt citrix alot though...

    6. Re:Does this count? by BoomerSooner · · Score: 1

      NT was crap. 2000/2003 is integrated, you just select it on install. I still prefer ssh and command line apps on linux servers to the windows gui counterparts.

      I will say windows is coming along slowly but surely to a better system of patching/updating.

      I will always prefer linux but windows is a good alternative as long as you check www.microsoft.com/technet daily.

    7. Re:Does this count? by Anonymous Coward · · Score: 0

      I'm under the impression that MS's licensing terms require *both* a TSCAL and an NT Workstation license, because you are displaying their precious Windows GUI on the client device. Can anyone point to a source that says otherwise?

    8. Re:Does this count? by wwest4 · · Score: 1

      people have been using such setups successfully in production for years.

      you use highly available switches, you use highly-available servers in any situation, i would hope.

      for a company of nearly any appreciable size (above 50) TSE is a great way to ease deployment and maintenance overhead if you absolutely need a native Windows environment.

      And, it can get Windows off the desktop (technically speaking).

    9. Re:Does this count? by Anonymous Coward · · Score: 2, Informative

      Each department has it's own TS+PDC, Samba box(Auth off PDC) for long-term storage

      Each TS is 2-way Athlon 1600MP+2Gig+6diskRAID10 - 10 users supported quite happily.

      TS's were NT4, but new printers came along without NT4 (supported) drivers...

      At least we only had 5 servers to upgrade...the rest of the infrastructure magically changed (apparent) OS...sweet!

    10. Re:Does this count? by AWrinkler · · Score: 1

      Woops, sorry, forgot to log back in...

    11. Re:Does this count? by Malcontent · · Score: 1

      "Each TS is 2-way Athlon 1600MP+2Gig+6diskRAID10 - 10 users supported quite happily."

      10 user only? What was the max users on one machine or were you running into problems when you get above ten?

      --

      War is necrophilia.

    12. Re:Does this count? by Daengbo · · Score: 1

      Awesome? You should go to the next level: Linux-based thin clients with a Windows 2000 Term Server. Now you have no desktops to "upgrade."

    13. Re:Does this count? by Anonymous Coward · · Score: 0

      If FreeBSD didn't suck an ass to start with i'd applaud. But it does and you don't have to agree.

    14. Re:Does this count? by AWrinkler · · Score: 1

      10(ish) users is fine during normal use.

      It's when someone yells out, "Check out this site", with an horrible flash intro, and all other users in the department go and load it up, that things get slow.

      But, for most of the time, there's muscle to spare - hopefully enough for the next round of Microsoft Bloat version 2003...

      If a department needs to grow for a short-term contract, etc, we can do it with existing infrastructure.

    15. Re:Does this count? by AWrinkler · · Score: 1

      Why Linux-based thin clients?
      We already run FreeBSD-based thin clients (with W2K TS)
      Each FBSD station automatically checks it's departmental samba box(doing NFS shares as well) for updates every night, and installs them automatically.
      (We put the new packages on samba boxes once we've tested them...)
      (Command to upgrade: ls -1 | xargs pkg_upgrade)
      FreeBSD's stability is what we rely on. Anything else will just cost us money, money that could be in our pockets instead...
      Linux could do it, more work though...

    16. Re:Does this count? by AWrinkler · · Score: 1

      It's such a shame you've had such a bitter personal experience with FreeBSD, and I honestly feel sorry for you.
      We timed the installation of the template workstation:
      Bios config(boot from CD), bare iron FreeBSD install from CD, Networking to DHCP, XFree86 installed, configged to auto-start XFree86(su to non-root user, run X, rdesktop command in .xinitrc)
      Time taken: 28 minutes(ish)
      We've only had good experiences with FreeBSD - that's why we use it for all non-Microsoft dependent services.
      I'm not wanting to flame bait, but if you think it 'sucks an ass', spend a little time taking another look, learn the ports system, learn portupgrade, pkg_*, see the beauty in /etc/rc.*, and /usr/local/etc/*, and read:
      man hier, man tuning, man firewall
      I used Linux when the whole thing fitted on one 3.5" DD (720k) - about kernel 1.0.2(I think). Since then I've managed(and still do) systems running Caldera, RedHat, SuSe, Mandrake, and Scyld Beowulf Linux...They're nice, they work, but they're no FreeBSD.

    17. Re:Does this count? by Daengbo · · Score: 1

      I'm sorry, but your BSD's are not true "thin clients." They are no different than the MS "thin clients." I'm talking about total net boot, with nothing local except PXE or a 32k flashrom in the client. There are several organizations which put out pre-set CDs for just this. Install and work. BSD could do it, more work though... Joking over. I'm not telling you to move from BSD to Linux, just that you might consider bringing your HD based clients over to totally net boot systems and save some steps (precisely, the "ls -1 | xargs pkg_upgrade"). Just a suggestion, not trying to tell you how to do your job, just you should extrapolate the benefits you see with the Win2000 server to your base system, as well. Look at K12LTSP for one of the organizations that facilitates this.

    18. Re:Does this count? by AWrinkler · · Score: 1

      Too right, they aren't as thin as they could be, but they're as thin as they need to be.
      Sure, you get great street cred to have everything netboot, but it was quicker to use the HDD the 60 boxes had in them.
      A CDROM boot is nice, but you need 60 discs, and need to burn 60 every time you update workstations(yearly - bad point, I know...). We haven't had to administer these machines in 2.5 years. Not even a login.
      The last update(XFree 4.3.0_8), was undetected by users, but it happened...
      One day, yeah, netboot would be fun!
      TFTP the kernel, mount read-only /, /usr over NFS, read/write /tmp, /var either to server, or ram disks...it'd be fun.
      But there's work to be done. bugger. no time for play...

    19. Re:Does this count? by AWrinkler · · Score: 1

      Terribly sorry. The above 2.5 years refers to the samba boxes. They are still running FreeBSD 4.2...

      I hate reading over things...I'll learn one day;)

    20. Re:Does this count? by Daengbo · · Score: 1

      Hey, I wasn't actually saying you should drop your working setup and move onto a new system. In fact, except for things like hardware failures, your system is exactly the same as mine. I was just interested in having a decent conversation with someone who has a setup similar to mine. Stick with your BSD, man, and I'll stick with my Linux, mostly because the gov't is really pushing it now, and we can get some support (in the non-service oriented sense of the word) in our setup.

    21. Re:Does this count? by Malcontent · · Score: 1

      Thanks. I was considering putting 50 people on a dual xeon 500 with two gigs of ram but now I know better.

      --

      War is necrophilia.

    22. Re:Does this count? by AWrinkler · · Score: 1

      Groovy.
      Better go check the load average on the head samba box. The main pkg_dist box gets busy around this time of night - darned cron driven rsyncs prior to backup...
      Good chatting with a non-newbie. It's a change around here;-)

    23. Re:Does this count? by Daengbo · · Score: 1

      Last time I looked, you only needed a CAL, not a workstation license. Correct me if this has changed.

  24. Not a problem by Anonymous Coward · · Score: 4, Funny

    i dont have you worry bout this. the people at my organisation aren't clever enough to send an email, let alone install Linux

    1. Re:Not a problem by Doctor+O · · Score: 1

      I feel your pain. How many times can you explain the Eudora address book to the PHB and keep yourself from beating him with a big non-virtual clue-stick?

      I have this baseball bat in my trunk to play baseball, really.

      --
      Who is General Failure and why is he reading my hard disk?
    2. Re:Not a problem by Anonymous Coward · · Score: 0

      HEHEHE, that's what you think...

  25. Article is refreshingly good by laird · · Score: 2, Interesting

    The article is actually pretty good -- it's a reminder that if people are using a platform, that IT has to support it properly. This is a refreshing change from the traditional IT reponse that if IT hasn't decided to support it, it should be prohibited. I congratulate the author on realizing that IT's job is to facilitate people's jobs, not restricting them to what's convenient for IT. Help desks are always horribly overworked, so it's understandable that they start falling back on blaming users for breaking the rules, and refusing to support anything but the standard application set, instead of thinking more creatively to help users get their jobs done. The irony is that _every_ IT support person has tons of weird software on their machines that would cause them to refuse to support the machine if it were someone else's.

    (and I say this as someone who's worked in IT, and managed IT departments, for _years_.)

    1. Re:Article is refreshingly good by h@rbinger · · Score: 1

      As someone who has worked in both the Helpdesk and SysAdmin rolls, I am not so sure I agree. What software to be supported should be a business decision, determining if the time and effort to provide additional training and possible additional helpdesk staff is worth the perceived benefit.

      Trying to support everything some joe blow decided to install on their system would be a nightmare. Figuring out if:

      it conflicts with any other required apps or prevents them from using a required app

      Causes the system to become unstable

      installs spyware

      violates licenses agreements

      pirated?

      Now with all this, my typical un-official policy is if I don't hear anything about it, I don't care. However, if you need help slick and re-install is what you get.

    2. Re:Article is refreshingly good by mshiltonj · · Score: 1

      ..It's.IT's job is to facilitate people's jobs, not restricting them to what's convenient for IT.

      Ha! Ha! That's the funniest joke I've ever heard! You could be the next SeinFeild!

    3. Re:Article is refreshingly good by laird · · Score: 1

      Sure, you can't support every random application that people install on a whim; the spyware bundled into p2p appls, for example, is a nightmare from every perspective. Ditto games.

      But (as is the case in the article, where people are running Linux on their desktops) if someone needs a tool to do their jobs, IT's response should be to figure out how to support it, not to complain that it's not supported. And in many companies, the reaction wouldn't have been "OK, let's figure out how to support Linux" it would have been to bad Linux from the workplace because it confused the MCSE's.

  26. A reason to run Linux on a work PC by MURD3R3R · · Score: 1

    I work for a company with about 150 windows PCs, and surprisingly, a few cubicles down, a fellow worker is running Red Hat on his PC. I asked him, what are you doing? He says, if he ever gets fired, he will just boot to his Red Hat installation, and quickly format the hard drive! I almost fell over in my chair laughing! We all know that windows wouldn't let you do such a thing quickly, but if this needs to be done, linux can do it in a matter of minutes.

    1. Re:A reason to run Linux on a work PC by The+Bungi · · Score: 0, Troll

      That should make management warm up to alternative operating systems.

    2. Re:A reason to run Linux on a work PC by Uthiroid · · Score: 2, Funny

      He says, if he ever gets fired, he will just boot to his Red Hat installation, and quickly format the hard drive!

      Which is exactly why someday management will meet him early christmas morning in the parking lot instead of at his desk......

    3. Re:A reason to run Linux on a work PC by Mike+Hawk · · Score: 1

      While a funny story, this may illustrate a small reason not to allow non-Windows installs. The linux folk are the rebellious type.

      I gotta say I read more stories on /. about what so-and-so would ever do if that person were ever fired. With linux you don't have to worry about malicious code being executed as much as malicious users inside the organization. LOL

    4. Re:A reason to run Linux on a work PC by KevinJoubert · · Score: 1

      Uh... you mean like with just about any boot disk known to mankind?

      --
      -K.
  27. on the sly by Anonymous Coward · · Score: 0, Funny

    I've been going in at night and switching the desktop OS for the people I administer from Linux to BSD. :-) Most of them can't tell the difference, though I got more than a few comments about how much faster their machine feels. :-)

  28. Re:Yeah I run linux ... by Anonymous Coward · · Score: 0

    watched letterman you unoriginal bastard? I hope you are killed tonight.

  29. Ran across? How about installed myself... by Anonymous Coward · · Score: 0

    I make it a habit of loading latest distros on any empty workstation we have before it is re-imaged with Win2k. I do it in the name of research but I'm hoping that visibility will make a difference when it comes time to tender contracts for our OS platform...

  30. I don't buy it by Phantasm66 · · Score: 1

    Try to explain to me why an ordinary user, who requires technical support in the first place, decides to forgo his or her preinstalled XP or something and go to the bother of putting Linux on their machine at all...?? Where is the advantage? The incentive? In may experience, even as a sysadmin in the computing department of a uni, 90% of users couldn't even install XP themselves, never mind linux, whether its getting easier to install or not. Sorry, I don't buy the idea that there are armies of secret linux users installing linux on their PCs at work behind their sysadmin's back. I just can't see it...

    1. Re:I don't buy it by Anonymous Coward · · Score: 0

      Haven't looked lately at the *nix installs, have ya pad're? It's been easy & bulletproof [ on generic P4/XP2xxx hardware ] since ... say RedFat_8. An easier install ( and DSL update !! ) than Win98, WinME, W2K or WinXP.

      Times change ... except, for the Debiolian and Slackmolian weenier_dudes. Better get up-ta-speed yo-whiteAZZ-self.

    2. Re:I don't buy it by Phantasm66 · · Score: 1

      I am fully aware of the fact that certain Linux distros like Red Hat and Mandrake are getting as easy to install as XP, however.... Normal users can't even install XP most of the time.

  31. One step farther... by ccwaterz · · Score: 1

    I work in a development-oriented division so sightings of linux boxes isn't that surprising.

    However, I get my satisfaction when someone comes to me and asks for help on running .

    1. Re:One step farther... by ccwaterz · · Score: 1

      I work in a development-oriented division so sightings of linux boxes isn't that surprising.

      However, I get my satisfaction when someone comes to me and asks for help on running *insert non-RH distros*.

      damn, should have previewed...ya parsed my "insert non-RH distro" as a html tag... Oh well, sorry.

  32. Unofficial Linux installations...? by appler · · Score: 2, Funny

    That's preposterous! You have to get a LICENSE first, remember?

  33. backbone isp by Anonymous Coward · · Score: 1, Interesting

    I used to work for a backbone isp as a *nix admin. Our internal IT said we MUST use M$ on our laptops. I think maybe 30% dual booted, the rest of us just running our choice of linux/bsd. It's not like we needed tech support for getting network printers to work or something.

  34. hey! by Anonymous Coward · · Score: 0

    dfd ffd?

  35. Green Grass. by Anonymous Coward · · Score: 0, Flamebait

    The grass is always greener on the other side of the fence. I can't imagine a bunch of fools installing linux on their own and getting everything to work. That's why we have Windows, so fools can work with it, and all choices are made, no education necessary. I'm using Debian 2.2 now, with Galeon and WvDial on a homebuilt box. Yes, but I love problems and bugs to solve, and have nothing better to do than prowl around Slashdot, looking for places to give my 2 cents worth. If I had real work to do, then I would use XP, and since I'd be getting a salary for said work, then I could afford it. Only problem I have with XP is too much play-time stuff. Who can spend all day listening to music and playing DVD movies?

    1. Re:Green Grass. by tarquin_fim_bim · · Score: 4, Funny

      "If I had real work to do, then I would use XP"

      But you don't because you're an unemployed has been MSCE. haha

    2. Re:Green Grass. by Anonymous Coward · · Score: 0

      hahaha

      You're a faggot. And you didn't even spell MCSE right.

      Go back to your parents' basement and resume trying to upgrade glibc.

      haha

    3. Re:Green Grass. by tarquin_fim_bim · · Score: 4, Funny

      "And you didn't even spell MCSE right"

      I can't spell dinasaur either.

    4. Re:Green Grass. by Anonymous Coward · · Score: 0

      The fact that no one has modded you 'funny' only indicates that almost no one got the joke.
      Too bad.

    5. Re:Green Grass. by Geek+of+Tech · · Score: 1
      I installed Linux on my desktop box. Has a huge ammount of odd hardware. Had a problem or two. Searched for several minutes, got everything fixed. I do all the work I did in Windows. In the same ammount of time. I don't have any problems anymore. I install all sorts of software. I chat. I browse. I share files (well, until the RIAA started get ticked). I program. I type. No problems. And best of all it works the way I want it to. (Or just saying it works, would be enough to make many people cry.)

      --
      Stop the Slashdot effect! Don't read the articles!
    6. Re:Green Grass. by Anonymous Coward · · Score: 0

      Actually, he did get modded to funny. You, OTOH are still a moron asshat. Life is funny that way.

  36. Nope Not at all by visionsofmcskill · · Score: 5, Insightful
    Between Two semi-large internet companies and several smaller ones i have NEVER run into any non-IT unix/linux box amongst my users.... EVER.

    In truth beyond the server farms ive worked with at said companies the only person possessing any *nix varient has been myself (including mac os X...) While i can see this as being an occasional happening in dorkier companies... even then i find it not very likely.

    mainly because buisness use predominataly revolves around outlook exchange's shared meetings and various other stupid stuff.... in addition to the baseline ease of use (overall managerialy) network administration of an all windows environment.

    I would NEVER support a linux desktop distro amongst my users.... MAC OS X ... yes.... but not Linux for any reason on gods green earth... can you say nightmare? I love Linux.... but it just is NOWHERE near as streamlined as windows or macintosh... especialy from a support stance.

    My personal feelings are *nix for network devices.... Windows server/client for data sharing email and so on.... and Mac os X for end users who are more inclined towards media production (basicly people who arent finance/sales).

    This setup puts the *nix boxes in my realm... and id be greatfull that no unwitting user *accidently* installs another DHCP, DNS, SMTP, etc... server on my network. Id also be thankfull not to be asked how to make packages work correctly between KDE, gnome, X, or whatever else joe moron decides to use.... or how to fix their freakin window manager because KDE offers 5 different programs just to change the layout/widgets.... no thank you.

    Of course this poster assumes that the people who do so, do so knowing people like myself wont support them... and more than likely will be highly un-happy with their network being potentialy compromised...

    not trying to spread FUD.... but ill wait for a tighter distro before i promote *nix on the desktop.... only one so far (with flying colors) is OSX.

    --
    --Idiots, Every single one of YOU, A flaming mass of conglomerated morons, hey wait a second, isnt that how RAID works?
    1. Re:Nope Not at all by 1lus10n · · Score: 5, Insightful

      actually your post is pretty much just FUD.

      firstly you wouldnt have to worry about them installing a rogue DHCP server if you didnt give them root. As a matter of fact dont even install KDE if you dont need it. you really must have no experience with modern desktop linux installs, otherwise you would have known that: "Id also be thankfull not to be asked how to make packages work correctly between KDE, gnome, X, or whatever else joe moron decides to use" is rather retarded since most apps work fine nowadays, Redhat has a unified desktop which makes the "visual" differance between kde and gnome moot, and redhat would support any other issues you have if you bought a support contract. same as with any other OS.

      as for streamlined management well you could simply run a local up2date server with cronjobs as neccasary, and run ssh locally on the clients so that when (and this will be very rare) there is an issue you can just ssh into the box and fix it.

      i personally work at an outsourcing company, 3500 employees and we have about a 20% linux desktop install, growing slowly. why ? ease of administration. you have a policy that states what IT supports (evolution, mozilla, gaim etc) and whenever somebody asks for help with something not supported you point and say "No". And the best part is you dont have to have someone running around constantly re-imaging all of those windows boxes....

      --
      "Two things are infinite: the universe and human stupidity; and I'm not sure about the the universe." --Albert Einstein
    2. Re:Nope Not at all by Anonymous Coward · · Score: 0

      firstly you wouldnt have to worry about them installing a rogue DHCP server if you didnt give them root.

      You're assuming he gave them the computer. What if some user comes in with some laptop with Linux and dhcpd running? Believe it or not, these sorts of things happen. Want proof? Talk to enough people who manage networks around college campuses where new CS students try out this Linux thing and just start randomly enabling stuff.

      But simply put it's not common, and more often un updated Windows servers typically pose a bigger threat. In either case MacOSX is typically safer.

    3. Re:Nope Not at all by KevinJoubert · · Score: 1

      heh... I accidently setup a rogue DHCP server on our network by trying to fix my buddy's DSL modem here at work. I plugged it in to get in there and configure it for him before dropping it off after work. The damn thing was serving up DHCP by default and the network nazis disabled my port and came looking for me. When they found me.. I was stretching a 30ft ethernet cable over to someone else's cube for troubleshooting purposes. :)

      --
      -K.
    4. Re:Nope Not at all by dukerobillard · · Score: 1
      Some day, you'll be the a sysadmin for a group of software developers, and your eyes will be opened. :-)

      From 1984 to 1995 I used a real computer every day; first VMS then UNIX. Then the dreaded Windows monster started talking over the developer's desktop. Finally, we've managed to start beating it down, and we're getting our real computers back.

    5. Re:Nope Not at all by Anonymous Coward · · Score: 0
      I would NEVER support a linux desktop distro amongst my users .. but it just is NOWHERE near as streamlined as windows or macintosh... especialy from a support stance.

      apt-get on a cronjob makes it remarkably easy. I am a developer with an engineering firm with over a 1000 employees, there are several Linux boxes both servers and desktops in the organization. The IS department only supports windows solutions. Most Linux boxes are older machines that have fallen out of the organization and do mono-tasks such as bug tracking, CVS, continuous integration, ssh, scp backups etc. I also use a laptop that is exclusively linux at work. One of our main money earners is a seven server configuration that uses Linux as well.

      Despite our company being a known MS only company it is in lots of places throughout the organization. IS has accepted it even if they dont support it. The project mentioned above, the IS department did the network topology and the infrastructure ahead of the servers while we did the servers and applications. It works well.

      One of our IS fellows rang me today to tell me that along with some Cisco product they have, they needed a Linux machine. I cant recall what it was. He said he got a laugh out of it because they were so pro-MS and Cisco sold them a Linux solution.

      It is probably more prevalent than most IS departments assume, it is probably just under the radar.

      omico--

    6. Re:Nope Not at all by Nailer · · Score: 1

      actually your post is pretty much just FUD.

      We know you think you're right. We also don't care. Score -1 redundant.

      you wouldnt have to worry about them installi...redhat would support any other issues you have if you bought a support contract

      You seem to have missed the `under the radar' part of the topic. Users modifying their PCs in environments large enough for this kind of action is a dumb idea and likely a violation of their security policy. Whether that's cracking an admin account on their Windows box or wiping it to install Linux, its still a Very Bad Idea.

      as for streamlined management well you could simply run a local up2date server with cronjobs as neccasary, and run ssh locally on the clients so that when (and this will be very rare) there is an issue you can just ssh into the box and fix it.

      Again, under the radar. It takes time for people to learn how to run Linux.

      you have a policy that states what IT supports (evolution, mozilla, gaim etc) and whenever somebody asks for help with something not supported you point and say "No".

      Indeed, how it should be done.

    7. Re:Nope Not at all by ajs · · Score: 1
      not trying to spread FUD.... but ill wait for a tighter distro before i promote *nix on the desktop

      Tighter in what respect?

      Try installing and managing a Red Hat 9 box. I've got several friends that I do admin for as well as working at a software firm that uses about 80-90% linux on the desktop. I find Linux to be a dream to manage compared to Windows, Mac even other free OSen which have great software, but often poorly supported ports of software that is developed under Linux (and complain as they may about developers who don't write prortable code, as an admin, I have to choose the desktop that works out of the box, and has decent support).

      Id also be thankfull not to be asked how to make packages work correctly between KDE, gnome, X, or whatever else joe moron decides to use

      Allowing joe moron to decide what to use is your first mistake. Here's how you deploy Linux:
      1. Grab 3-5 of your "power users" (preferably a spectrum from techie to non-techie tinkerer) and give them a second desktop with a full install (plus whatever external goodies you find most useful, check freshrpms for example) for a month. Let them go nuts, give them root and let them install/run whatever they like
      2. After that trial period get them all in a room and get them to agree on what they found to be most useful, and define a standard install
      3. Deploy that on their second desktops, and this time, don't allow them to change anything and don't give them root
      4. Repeat the process a month later, and refine the install, this time install about 2-4 times the number of users
      5. During the third trial, start developing your admin infrastructure in earnest. You'll need to decide how you're going to remotely update these boxes (I suggest apt for rpm out of a cron job, but up2date is fine too); what data if any users will be allowed to store locally; etc.
      6. Begin your full-scale deployment.
      It's hard work. Any conversion to a new OS is, but I think you'll find that not worrying about viruses alone makes it worth it.
    8. Re:Nope Not at all by 1lus10n · · Score: 1

      actually your post is pretty much just FUD.

      We know you think you're right. We also don't care. Score -1 redundant.

      actually last i checked i was modded up, so somebody agrees with me. and if you dont care why did you reply ?

      you seem to have missed the 18,000 times i have said "its no longer under the radar" or "if he was doing this right" or "instead of bashing them for installing it find out why they did, also known has DOING YOUR FRIGGIN JOB!"

      the guy that wrote the article had some clue, but there are 40 or 50 posts in this discussion that try to spread FUD about linux on the desktop/workstation. Like the guy i was replying to, who seems to think that linux must have a ton of useless crap lying around, or that he must support things on linux that he doesnt support on windows. which is FUD, and bullshit.

      --
      "Two things are infinite: the universe and human stupidity; and I'm not sure about the the universe." --Albert Einstein
    9. Re:Nope Not at all by Nailer · · Score: 1


      actually last i checked i was modded up, so somebody agrees with me.


      But not because you've made the fantastic point of `actually, you're wrong'. /. moderation upwards is certainly no indication of logic. People here are morel likely to support breaking IT policy as much as they're likely to complain about the `I Love You' `virus' under Windows then tell people Linux doesn't get `viruses'.

      and if you dont care why did you reply ?
      Because you infuriate me.

      you seem to have missed the 18,000 times i have said "its no longer under the radar"

      You've said that exactly 0 times in this thread.

    10. Re:Nope Not at all by 1lus10n · · Score: 1

      you seem to have missed the 18,000 times i have said "its no longer under the radar"

      You've said that exactly 0 times in this thread.

      actually that would be once, its no longer under the radar. thats twice.

      infuriated yet ? jackass.

      --
      "Two things are infinite: the universe and human stupidity; and I'm not sure about the the universe." --Albert Einstein
    11. Re:Nope Not at all by Nailer · · Score: 1

      nice retort. I can see my arguments are well and truly refuted.

      don't call me names, you idiotic little bitch. :D

    12. Re:Nope Not at all by 1lus10n · · Score: 1

      i'll call you whatever i damn well please "You smarmy lagerlout git. You bloody woofter sod."

      good ? yes. thought so, biatch !

      --
      "Two things are infinite: the universe and human stupidity; and I'm not sure about the the universe." --Albert Einstein
  37. IT and "official support" by Sky+Lemon · · Score: 1

    Maybe one of the issues is that IT departments especially in larger companies are not very proactive in offering new "official support" for anything besides the latest Windows release, therefore any Linux installations are deemed "unofficial" and are not supported well if at all by IT. Once enough rogue employees are running Linux desktops though or if/when a company starts offering Linux support for their main products IT will probably be forced to catch up at some point by management. It would be nice if companies dropped proprietery mail/groupware/office suite solutions too as that would really make a Linux desktop that much easier to use and support.

  38. Scary perhaps, but not a great risk by freeio · · Score: 1

    From what I have seen, the person who installs GNU/Linux/BSD/etc on a work desktop is generally in the power-user category in the first place. Your average corporate user is not the "culprit" as she is not sufficiently interested in what is under the hood. Your early adopters (who adopted free software years ago) are more likely to install what they need, rather than what the corporate leviathan requires.

    It was interesting to hear that my daughter (Ph.D. Candidate at University of Washington, Seattle) brought her own system into the lab, set it up with Linux, and uses it rather than the department standard systems. The reason? Lyx! UW has the standard dissertation formats all set up for lyx/latex, and so this is the best solution for her. The other reason is that all of the rest of the lab users do not get beyond her login prompt, and so her system does not get used by others and messed up regularly. The IT folks allow her access to the network, so she is fully equipped.

    Free software? Life is good!

    --
    Soli Deo Gloria
    1. Re:Scary perhaps, but not a great risk by Anonymous Coward · · Score: 0

      Do you have any photos of your daughter available to post to this discussion? She sounds like a bit of a hot chick!

  39. yep... by Rev.LoveJoy · · Score: 1
    The first thing that ran through my mind was, why are end users able to boot from anything other than the HDD sitting inside their CPU.

    That's really interesting and all that some compnay someplace has users installing some flavor of linux. Whatever. I have a suspicion this has a lot more to do with sloppy admin-ing than it does 'leet end users.

    Cheers
    -- RLJ

    1. Re:yep... by bfree · · Score: 2, Informative

      Just because you can only boot from the HDD doesn't mean you cannot install anything you want! You just have to work around the problem. For example you could use VMWare to boot your distro and then install to the real hard disk. Alternatively you could simply use rawrite to overwrite the mbr (tricky to construct your mbr ... but possible). Now if your OS that you can boot from won't let you access the mbr and the raw disk, then you'll just have to whip out the hard disk to do your installing and then return it.

      Bottom line is that yes, every desktop in a large install should be secured both physically and through software to prevent the users from modifying anything non-trivial.

      As for personal experiences, I have owned "stealth" linux installs and a good friend of mine who works for one of the largest ISPs in Ireland has one, as he has told me do many others throughout the company.

      --

      Never underestimate the dark side of the Source

    2. Re:yep... by Anonymous Coward · · Score: 0

      A hard-drive INSIDE the CPU?? Is that on-die?

  40. Re:Now that's one of those Ask Slashdots even I ca by appler · · Score: 0, Flamebait

    How are we supposed to have an intellectually enriching conversation with someone who doesn't even understand adverbs?

  41. not very insightful by Anonymous Coward · · Score: 0

    go ahead... format my desktop you sysadmin

    shows what you know.

    It's hundreds of times more secure than running outlook on a windows desktop.

    You should just shut up and be happy these desktop people aren't calling you --- they have found a better solution.

    1. Re:not very insightful by Lurker_2k · · Score: 1

      let's see here, it's not your network, it's the company's. Any sensible netadmin should do the same. Most won't have any problems with people running linux IF THEY ASK. However, an UNAUTHORIZED linux box is a potential security threat.

      This guy actually seems like a competant sysadmin. Hope he's getting paid decently.

    2. Re:not very insightful by Cyno · · Score: 1

      Actually any unauthorized box, reguardless of OS, is potentially a security threat. The only way you know about these potential security threats is by having an active map of all the systems on your network all the time. You must know every MAC address that connects to your network and which system it belongs to, which users and groups, and who is attempting to authenticate from said box.

      Then and only then might you be able to understand how much of a potential security threat a rogue box could be.

    3. Re:not very insightful by An+Onerous+Coward · · Score: 1

      A competent admin would give the user a chance to back up important files before nuking the hard drive. 'nuff said.

      --

      You want the truthiness? You can't handle the truthiness!

    4. Re:not very insightful by Lurker_2k · · Score: 1

      A competant admin would have informed the user beforehand whereon the server they are to place their files. If the user didn't follow instructions in the first place then it's their loss.

    5. Re:not very insightful by An+Onerous+Coward · · Score: 1

      Doesn't matter. It doesn't matter if the employee should have been keeping the project--the one she spent the last six weeks slaving over--on the server. It doesn't matter if the server and network have five-nines reliability, so there was no excuse for her to store it on the hard drive.

      The fact is, she did store it locally, she did lose six weeks of work, and she lost it because some prick admin decided to not even discuss the issue with her before swinging into action.

      Now the admin has the unenviable job of convincing both his boss and her boss that she was totally at fault. He'd better be extremely convincing, because his job is now on the line.

      --

      You want the truthiness? You can't handle the truthiness!

  42. "Insecure" Linux, Cygwin and RedHat by MyHair · · Score: 4, Informative

    I can see how security might be lax. When I was new to Linux I enabled everything whether I needed it or not. I figured I'd get around to playing with bind, sendmail and ftpd sooner or later. Everyone I know who's tried Linux has only dipped his toe in, so to speak.

    Now I know more and have played enough that I disable everything except what I need, make sure it's secure and then put up a firewall just to be sure. But heck, just the other day I realized I hadn't apt-get update'd and apt-get upgrade'd in a couple of months. Oops. I also had weak passwords until about a month ago.

    I'm in a non-tech company, and the Linux penetration is well below 1%. Only one desktop--a dual-boot laptop--as far as I know (except when I boot up KNOPPIX), but I have three rouge servers of my own. (Squid, Nessus, nmap and Snort are my friends.)

    I also have two Cygwin installs, but they're my workstations, not user PCs. Anyone seeing those on desktops yet?

    In this article the guy chose RedHat. If you don't care for commercial support, why would you choose RedHat over Debian or Slackware? Especially if security is a concern.

  43. Live Linux CD's by niko9 · · Score: 2, Informative

    I wonder how many people boot Live Linux Distro's like Knoppix, and reboot into whatever is installed (NT, XP, Win2k)when they only really have to.

    As a ardernt Linux user, I would just change the BIOS settings to boot from CD first, and pop in Knoppix, or leave the CD-ROM tray empty when I wanted to use windows. No one in IT would need to know what I was upto.

    New York City 911 EMS: When you absolutley, positivley cannot call a cab for your toothache

  44. Bad Admin, no donut by Rev.LoveJoy · · Score: 1
    If you're a sysadmin wandering around in userland and somebody has totally overwritten the company provided OS with their own OS of choice, you have not been doing your job. Go take a 90 minute timeout and read up how to lock down your boot media on end user PCs.

    -- RLJ

    1. Re:Bad Admin, no donut by macshit · · Score: 1

      I gotta hope you're a sysadmin for a non-technical company, where that attitude makes a slight bit of sense.

      Of course I don't randomly install a new OS at work (at least on a permanent, networked machine) without giving the sysadmins here a heads-up, because that would be rude, and I want to work with them, not against them. But when it comes down to it, the employees here know what they're doing, and stupid little control-freak anti-user crap like `locked-down boot media' slows me down. Don't do that.

      Sorry, this is turning into a bit of a rant, but this sort of control-freak mentality is a big problem at big companies. Where I work the local machines are not an issue because the sysadmins are local too; I can talk to them, and they're reasonable people. But for instance, if I want to resolve an issue with the company firewall (`I need to use protocol X, I don't think it's a security issue, please let it through'), they more often than not simply try to ignore the problem, bury their heads in the sand, and pretend that everything's OK. If they talked to me, and raised substantive objections to my request, I'd understand -- but they don't; every single time, it's fingers in the ears and La La La La until they think everybody's gone.

      --
      We live, as we dream -- alone....
    2. Re:Bad Admin, no donut by Rev.LoveJoy · · Score: 1
      The 'control freak' mindset is a good counter point to my original statement. Certainly large companies will have classes of users for whom a locked down solution makes no sense - developer groups, QA tester groups. Regardless, I still think it stands that for *most* user classes a locked down solution is a smart bet for managing security issues within an organization.

      Thanks for the response!

      Cheers,
      -- RLJ

  45. jesus fucking cyberfascist punk by Anonymous Coward · · Score: 1, Interesting

    Realize FIRST that you are there to SUPPORT the users NOT stick your nazi baton up their ass. Instead of getting pissed at them for trying something new (unless you are just a jerk and can't help it), pre-empt them by handing out knoppix cd's and have them boot to it. A 5min education and they are off and running. Tired of linux? pull the cd and boot back into windoze. Everyone is happy.

    Sick of stupid ass admins who think that they are important. Without users, we would NOT have jobs...

    1. Re:jesus fucking cyberfascist punk by Anonymous Coward · · Score: 1, Insightful

      I'll bite, you forkin' moron.

      Never supported tens of thousands of users, have you? If you had, you would realize the only way to do it with a high rate of success requires uniformity on the desktop.

      Now go back to your dorm room, and try to convince your English Lit roommate you know what the hell you're talking about.

    2. Re:jesus fucking cyberfascist punk by Rares+Marian · · Score: 1

      Uniformity is the hammer of tyrants.

      You don't need uniformity. You need a clue.

      Uniformity makes you more vulnerable to attacks you dolt.

      --
      The message on the other side of this sig is false.
    3. Re:jesus fucking cyberfascist punk by Usquebaugh · · Score: 1

      The only way to have uniformity is to enforce it technically not with policy. If you can't secure the box then what's the point?

    4. Re:jesus fucking cyberfascist punk by Cyno · · Score: 1

      I've supported tens of thousands of users. Its quite easy to support them when they're using *nix. Their OSs of choice were Irix, AIX, OSF, OSX, HPUX, Solaris, Linux and BSD. Supporting them was no problem.

      Reconfiguring the entire network was also no problem for a single competent systems administrator and their trusty Perl script.

      Uniformity is for closed minded people who don't know Perl.

    5. Re:jesus fucking cyberfascist punk by wrali · · Score: 1

      Supporting thousands of users, will reveal something quite significant: ordinary people chafe under restrictive IT "policies" designed to keep ill-educated, rock-bashing IT administrators in their jobs.

      If one of your users wishes to install Linux because it will improve his work, or save the company money, he should be able to do it. Computer technology was introduced to business to make wokers more productive. Recently, it seems computing department managers and their staff have entrenched the doctrine of "computers are necessary for workers to function, and we are the gods of business computing."

      This little article may not indicate a trend, but attempting to squash out any possibility of change says most about the sort of people who populate IT departments, and want their favourite technologies to remain the "real-world standard for business."

      Take your hand off it, Anonymous Coward.

    6. Re:jesus fucking cyberfascist punk by Anonymous Coward · · Score: 0

      Again, no farkin' clue, and obviously no real-world experience with masses of idiots and limited support staff.

      It's not the well-clued, Linux installing technoid that causes the phones to ring off the hook. It's all the morons sitting next to him, that see him do it, and think they can too. Or even worse - the dipshit who THINKS he knows what he's doing, just cuz he read it on Slashdot, and encourages the other lemmings around him to do the same.

      So - tell me again how these dorks save me money?

    7. Re:jesus fucking cyberfascist punk by Exatron · · Score: 1
      Never supported tens of thousands of users, have you?

      Apparantly, neither have you.

      --
      "I think so, Brain, but 'instant karma' always gets so lumpy." - Pinky
      "Decepticons FOREVER!!!" - Ravage
  46. We did it... by horsie · · Score: 1

    When I was working for a game company, we had 2 Linux boxes in our machine... I installed them both... the only thing the SysAdmins said to me when I did it was, "We won't support that..." which was fine by me...

    I had to Linux boxes to use, and needless to say, my Win2K machine at work became relegated to e-mail only...

    That said, I wouldn't be surprised if there were more people doing the same thing with their office machines...

  47. ROGUE LINUX IN DA HOUSE by m0rphm0nkey · · Score: 1

    Yes folks for every criminal actually caught installing linux there are ten more fiends out there flaunting the authorities and trying to get one over on "the man". But it's only a matter of time till they pay for their deed because here in Champion City we still do a brisk trade....in justice.

    In other breaking news SCO has begun issuing Rogue licensing requests based on calculated potnetial use of rogue linux installations on corporate networks. Darl McBride was quoted as saying "Damn those monkeys, AAAAAGGH BRIGHT COLORS!!!"

  48. I work for M$ by civilengineer · · Score: 5, Funny

    and all our systems have rouge linux installs. Its true! ;)

    --

    New year Resolution: Don't change sig this year
    1. Re:I work for M$ by Eudial · · Score: 1

      If you indeed do work for M$ they're going to lynch you when they find out you've been haning out on a pro linux site such as slashdot.

      --
      GAAH! MY PRINTER IS ON FIRE!!! PUT IT OUT! PUT IT OUT!
    2. Re:I work for M$ by civilengineer · · Score: 1

      Whoa people! Before you all nuke me, I confess, I was just kidding!

      --

      New year Resolution: Don't change sig this year
    3. Re:I work for M$ by Anonymous Coward · · Score: 0

      You know /. is more "anti-microsoft" than it is "pro-linux" It's kind of disturbing...

    4. Re:I work for M$ by Anonymous Coward · · Score: 1, Interesting

      That isn't entirely a joke. When I was there for an interview about a year ago, one of my interviewers had a Red Hat Linux retail box on his desk. I asked him about it and he told me that he was going to be using it to do some security testing on some portions of Windows. His justification was that there are more cracking tools available for Linux/*nix than there are for Windows.

      Strange but true.

    5. Re:I work for M$ by Anonymous Coward · · Score: 0

      It's so hard to be pro-Microsoft.

    6. Re:I work for M$ by whterbt · · Score: 1

      and all our systems have rouge linux installs. Its true! ;)

      This must be that new Rouge Hat Linux distro I've been hearing about.

      --
      Too late to be known as Bush the First, he's sure to be known as Bush the Worst.
  49. Slicker by Elote · · Score: 1

    If the slicker project ever gets going again then KDE will be FAR ahead of any other desktop IMHO, and become more just a ripoff of other UIs. The CVS is already quite usable, but has only 5% of the features they say that they are working on.

  50. Re:Now that's one of those Ask Slashdots even I ca by Anonymous Coward · · Score: 0

    Well, we can discuss the fate of Linux on desktop. Adverbs are for Harvard-graduate wannabees and lower-level marketing executives. Real intellectuals use nouns and adjectives.

  51. Re:Now that's one of those Ask Slashdots even I ca by innosent · · Score: 5, Funny

    Well, it's redundant because it's not a troll, it's not flamebait, and it's not offtopic. I suppose it could be overrated instead, but the point of the article was to hear experiences from people who have found desktop installations at work, not hear 600,000 "No" answers from people who haven't. If there was a "-1 Pointless Comment" mod, you'd have gotten that, but there isn't.

    --
    --That's the point of being root, you can do anything you want, even if it's stupid.
  52. Using this logic... by fuali · · Score: 0, Offtopic

    I have sores all over my dick. How many other developers out there have sores on their dicks. This could be a huge trend, oh my god, write to all the medical journals, developers have sores on their dicks.

    My lord you know what this means?

    ...nothing.

  53. Not on the network?! by Anonymous Coward · · Score: 1, Informative

    My company has quite a large LAN with at least 20,000 Windows NT/200 PC's. There are some SGI machines floating around for specialized jobs...but for %99.9 of people involved Microsoft is the only machine allowed to be connected to the network.

    And the sysadmins keep it that way. >:(

    Well...this naturally sucks if you are an engineer and need something that fits: "I can make this with things I already have...for FREE!".

    I currently have Slackware 9.0, w/ Apache, MySQL running for a development program I am writing in PHP. It works well on the *spare* PC (read: old and nobody wants)...but as all computers it will be forever limited as it can only talk to 127.0.0.1.

  54. Might not be a good idea. by MtViewGuy · · Score: 1

    In my personal opinion, unless the IT department approves, corporate machines should NOT have operating systems installed that are not officially sanctioned by the IT department.

    The reason is simple: system and network maintainance. When the IT help desk clearly knows what operating system each desktop machine is running, they can easily standardize on setup, security, what apps need to be installed, and so on.

    Clearly, right now the situation for corporate IT setups is often going to be Linux or BSD variants for servers, Windows 2000 Pro or Windows XP Pro for x86 desktop clients or MacOS X 10.x versions for newer Macintosh machines.

    1. Re:Might not be a good idea. by Arandir · · Score: 1

      The reason is simple: system and network maintainance.

      Funny, my FreeBSD machine is a well behaved netizen. It's all those Windows machines on the network that are screwing everything up. A quick glance at the packets passing by my NIC is frightening!

      they can easily standardize on setup, security, what apps need to be installed, and so on.

      How the heck do you know what apps I need? Are you psychic or something? About 90% of the users can get by with the basic stuff you set out for them, but the remaining 10% are going to need stuff not on your approved list, and they won't want to be waiting around for two weeks while your committee approves their software.

      --
      A Government Is a Body of People, Usually Notably Ungoverned
    2. Re:Might not be a good idea. by Tsu+Dho+Nimh · · Score: 1
      When the IT help desk clearly knows what operating system each desktop machine is running, they can easily standardize on setup, security, what apps need to be installed, and so on.

      The apps installed should not be a function of the OS. The apps installed should be a function of the WORK the person using the computer needs it to do ... from that you can decide what OS you need - whatever OS runs the required productive software, not what OS is easiest for a IT weenie to "support". And as for standardizing ... unless you have a herd of clerks all doing the same thing, there is no such thing as a "one size fits all" standard desktop. Part of a typical assignment for me includes writing, text editing, graphics editing, CD production, page layout, maybe a bit of software testing ... let me tell you what I need, don't try to pick my apps for me.

  55. As. If. by titzandkunt · · Score: 2, Insightful


    And "we all know" that if he gets fired, he'll be marched straight from being told, empty his desk under supervision, and be escorted off the premises.

    Any company that lets him near a pc, networked or not, after he's been told that he's going to pursue opportunities elsewhere is being run by dolts.

    T&K.

    --
    Political language ... is designed to make lies sound truthful and murder respectable...
    1. Re:As. If. by Anonymous Coward · · Score: 0

      And that's why I use cryptofs for my Home Directory, and always logout at night -- without my login password, they can't get in, and as it prompts for the filesystem password on bootup, they can't access the files directly. Best of both worlds :)

  56. Yes, and terminated by Anonymous Coward · · Score: 2, Funny
    If you are a sysadmin, in an organization that runs Windows on the desktop, have you stumbled on many unofficial Linux installations?

    This was a regular occurrence in our engineering department for some time, and as any MCSE knows, Linux is insecure. As IT director, I was initially given the task of physically removing hardware when rogue Linux installations were found, but employees were actually discovered bringing in their own laptops to run Linux or using VMWare to host virtual Linux machines with active and unique MACs on the corporate network. To better battle this, I asked for and received the right to terminate employees. After several high-profile firings, our network is once again safe, and it has become policy to perform more extensive background checks on job applicants with a UNIX or Linux background to ensure that they haven't caused similar grievance elsewhere.

    1. Re:Yes, and terminated by Anonymous Coward · · Score: 0

      Can you just post your address so I may come by and shoot you in your head and put you out of your misery. Thanks

  57. User Installed *anything* by Baron_Yam · · Score: 2

    I dunno about everyone else, but as a sysadmin there are only two reasons for unapproved installs of ANYTHING in an organisation for which I'm working - I'm not doing MY job, or the IT management is refusing to stand firm on policy.

    1. Re:User Installed *anything* by Usquebaugh · · Score: 1

      If you need a policy then you are not doing you're job. If they're not meant to do it then make sure they can't. No ifs or buts.

    2. Re:User Installed *anything* by TheAwfulTruth · · Score: 1

      Unless you are running everyone on remote terminals, you KNOW there is no way to do that. Were not talking about installing gator on an otherwise managed machine here. If a user has physical access to a machine, they can own it.

      The typical Linux installer will have NO problem opening the case, resetting the bios to remove any password protection, set the CD-R to be bootable, then own the machine with a Linux install disk.

      Every computer would have to be locked in a cage, when was the last time you walked in to an office building and saw every desktop locked in a cage?

      The only REAL way to do it (after properly locking down the machines so that CASUAL installers will think twice) is to make installing anything without permission a firing offense. That's right, a "policy". Then inspect, detect and discipline.

      (BTW the same goes for ANY Linux install, no matter HOW locked down. I could install Windows on any typical desktop machine I had access too.)

      --
      Contrary to popular belief, coding is not all free blow-jobs and beer. Those things cost MONEY!
    3. Re:User Installed *anything* by Usquebaugh · · Score: 1

      I feel we'll dis-agree over this point.

      There is no way to secure a machine that a user has access to. There are however steps to be taken. Remove the CD, change the bios. Lock with a small padlock.

      Further more, a network sweep can identify machines OS, automatic cut off of network port when authorised machine found.

      A policy of firing people for un-authorised software is open to abuse by the company. Only lowly grunts are going to be dismissed.

    4. Re:User Installed *anything* by KevinJoubert · · Score: 5, Insightful

      I think we are forgetting something fundamental here... the whole idea of policies and security with respect to installing rogue applications stems from the fact that Windows and Windows networks are so damn easy to completely break.

      If I install a program as a user on my Linux box, or even in my user space on the departmental server... it has no effect WHATSOEVER on the rest of the server or the other users. Thats what a multi-user OS "is". You can't even TOUCH that with ANY Windows implementation.

      This discussion is not about "Oh, I can break into any box and install Linux". Sure you can. There is no way to stop. Lock it up? pick the lock. Remove the floppy and cdrom? install one or do a network install via crossover cable and another box. Blah blah blah.

      The idea is that Linux IS in far more places than people know. And it will only grow in the future. Will it supplant MS as the "King of the desktop"? Who the hell cares... but people have a choice now.. and they ARE choosing it.

      --
      -K.
  58. I Run It by mrcparker · · Score: 1

    But then again, I am a Unix developer. On my desktop I have my workstation running HPUX 11i and my laptop with Gentoo.

    People ask me about it all of the time and there have been more than a few people go out and install Red Hat on test boxes.

    Even though I love my Gentoo box and all of my Unix work is done through ssh, I don't recommend it to others or go around trying to promote it. I figure that eventually it will just sort of catch on the same way it has slowly made its way into our server room.

  59. The definition of.. by pixelgeek · · Score: 1

    ...YMMV

    Since when is anecdotal discussions of possible Linux installs at a single location even worth discussing?

    Is the general Linux audience this starved for success stories that they need to pay any attention to this sort of thing?

  60. MOD PARENT DOWN by Anonymous Coward · · Score: 0
    1. Re:MOD PARENT DOWN by Anonymous Coward · · Score: 0

      >> he is a known copy and paste troll

      So did you type those urls or copy and paste?

  61. I'm under the radar by pz · · Score: 3, Interesting

    Where I work (part of Harvard University), Linux is definitely growing, but is a distant third behind Windows and MacOS. The IT department here is pretty strict about what they say you can and cannot do (kind of odd in an academic environment, if you ask me); as an example, one is not supposed to deploy ethernet hubs without seeking permission first. This just to give you an idea about them.

    I've been here 3 years. Last year and the year previous to that, all of the IT web pages said that the only officially supported OSes were Windows and MacOS, with a stern implication that that was it (and don't you think about using anything else, grrr!). This year, they've acknowledged that Linux exists, and are giving some support for it. The IT folks are at least aware of Linux now, a change for the better.

    Why is this happening? Because there are a few researchers (including me) who have installed Linux on their desktop/analysis machines, and are doing their own system administration. But, these users still need to fit into the global IT picture, for example, communicating with the email servers. As we have migrated from one email system to another recently, the IT folk have visited every single user (no, not kidding) to move their email system over. The fact that I was running Linux was not only no big deal, but they even correctly guessed which mail client I was using, given that I was running Linux. We are, slowly, winning.

    --

    Put my fist through my alarm clock with its ding-dong death inside my ear. - The Blackjacks.
    1. Re:I'm under the radar by sonpal · · Score: 2, Informative
      FYI, the ethernet hub policy is correct, although dated. Ethernet has a maximum distance that you cannot exceed... hubs work at a low level and simply connect all the devices to the same "bus". After the bus reaches a certain maximum length, collision detect no longer works, and you have random denial-of-service on the entire bus.

      Ethernet switches are different. They work at a higher level and actually process the packets. This lets them direct packets between various ports as well as allow for unlimited cascading. We noticed problems with ethernet hubs when we deployed them at my University in the mid-90's. Faculty members would decide to connect hubs to their network outlets and entire departments would lose connectivity when we tried to bring a different section of the building online.

    2. Re:I'm under the radar by KjetilK · · Score: 1
      AOL. Well, I wasn't under the radar of the sysadmins, but I wouldn't have made statistics. I've been using Linux in two office environments where I was the only one. In one of them, the sysadmin was really happy, he was running Linux on all his servers, and knew he'd never have a problem with me running Linux. The other guy was highly confused, they had NT on everything, pretty much every port on the network is open to intrusion, but he don't know how to close it (and I couldn't tell him, though I suggested they run a Linux firewall instead). Hm, checking now, it still looks bad.

      Yeah, and my university institute is running Tru64. They don't particulary like me to run Linux there, but at least they understand it. They're starting a transition to Linux too. Tru64 is dying.

      --
      Employee of Inrupt, Project Release Manager and Community Manager for Solid
  62. I wish by Anonymous Coward · · Score: 0

    I couldn't get away with this although I've been tempted. Our company has standardized on too many MS products for me to get away with this. One penguin among 4000 is even lonelier than the one in the "I just gotta be me" Far Side cartoon.

  63. Yep.. on the Win9x call center floor... by drayzel · · Score: 1

    While I was working at Convergys doing outsourced Windows 95/98/ME tech support for Microsft I would install various ditros on the second "Break box" machines all the time. Sometimes I'd add it to the existing 95/98/ME triple boot, other times I'd do a clean install, sometimes I'd just use Knoppix.

    It didn't increase productivity, but it did increase employee morale (well, mine at least).

    All ther cubicle where 'communal' so I'd usualy have to sit at a differnet station each day.
    Reimaging the things to the Triple MS-OS config was as easy as using a custom boot floppy... but it sure was fun watching some of those techs look at the Linux screen and wonder what happened to the Start Button and the My Computer Icons, or try and step a cutomer though t a printer install... humm... maybe I'm to blame for all this MS bashing! nah... that started long before Linux was around.

    ~Z

  64. Waaay too general. by Jade+E.+2 · · Score: 1
    I wonder if the submitter even read the article, or just skimmed it. If you actually read the article you'll see the line "The Linux desktops mostly belonged to developers or quality assurance and technical support staffers responsible for supporting our company's software on Linux." In other words, this isn't some random company, it's a software company that writes software for linux. No wonder they're seeing installs.

    Oh, and to actually answer the question, I run a 350 workstation .gov network and haven't seen a single linux install. (There's 1 apple, though.)

  65. the creeping server marketshare parallel is wrong by sbma44 · · Score: 1

    I don't buy the analogy between desktop and server market penetration. Servers interoperability is not an issue -- the standards for HTTP, SMTP, FTP aren't moving targets. MS networking standards are not as well supported by linux -- interoperability is far from assured. The point is that dropping the odd linux server into your data center is unlikely to be as big a hassle as getting a working desktop install, and the average desktop user is much less technically sophisticated than the average person responsible for making changes to a company's server farm.

    Besides, aesthetics don't matter for server UI the same way they do for desktops -- and although habituation to Windows is the main culprit, there is a lot more work to be done on a linux install to get what a normal desktop user would consider an equivalent aesthetic experience.

    I suspect this article is simply borne of a new generation of employees coming up with a higher percentage falling under the "tech savvy" category and the traditional percentage falling under "bored at work"

  66. Issue of security customization. by MtViewGuy · · Score: 1

    While Linux desktop versions may not have the issues of virus attacks (for the most part) or licensing issues, the default installations of the current distributions of Red Hat, Mandrake and SuSE Linux may not be set up to have the proper security precautions in a networked environment.

    I'd rather have an IT department-approved setup of a Linux distribution that already has been configured by the IT department so when it is push-installed onto a client machine over a network the installation already has all the proper security settings for the corporate network in place.

    1. Re:Issue of security customization. by Anonymous Coward · · Score: 0

      Absolutely. And it saves everyone effort and confusion if the site provides a simple way to put a system into a canonical state. Want to add a few hundred new hosts to the network? No problem. Workstation had a drive failure and needs to be reinstalled? No problem. Want to ensure that all your systems pass a given security benchmark? No problem.

      Being able to install systems into a canonical state as you've described is the first and most important step towards securing a site. The granularity of this operation is, however, rather coarse. As the second step at larger sites, it can be very worthwhile to investigate incremental system configuration a la cfengine. For performance reasons these latter techniques tend to use a pull model of propagation.

  67. Since May by WindBourne · · Score: 1

    A company that I own has sold over 1000 desktop Linux computers into a small business market. These are diskless systems. During the user setup, we arrange to have konqueror send MSIE id. Not because we want to, but because it causes us less admin work. We are anticipating selling about another 1000 systems in the next month. No doubt that it is taking off.

    --
    I prefer the "u" in honour as it seems to be missing these days.
    1. Re:Since May by Daengbo · · Score: 1

      Well, since I'm interested in this, but you give no homepage or email for contact, I'm going to ask for more details on your company.

  68. Linux on the desktop by sloanster · · Score: 1

    I have done work for a number of companies over the past 5 years, and there has been one recurring theme: wherever you find the techies - programmers, sys admins, webmasters, etc - you find linux desktops in use, often under the radar to avoid the involvement of clueless managers who feel threatened by what they don't understand.

    Fortunately for us, in these lean times, managers are having to start thinking about how to get the most bang for the buck, and maximize their IT investments. This has opened the door for linux somewhat, despite the fear and ignorance which motivates so much of the opposition to it.

    I remember one large well known company where I worked as webmaster a few years ago. The inner circle of web techies used mostly linux or macs, because we were using what best empowered us to do our jobs. At one point an extreme microsoft-head manager took over and began a huge move in a microsoft direction, much to our dismay. One of his first moves was to switch our remote access server to windows nt. surprise, surprise, all of a sudden the mac and linux users could no longer connect from home. bad move. The microsoft tech support troops came around and fumbled and puzzled over our setups, making comments like "why on earth aren't you using ms windows?" and "why do you have to be different?" We tried all their suggestions and never could connect, so the company was forced to reinstall the old remote access server. This was some years ago, but the last I heard the microsoft-head manager had been canned, and things were moving back in a more sane direction.

    The good news is that linux desktop trickle appears to be turning into a stream.

  69. Re:Now that's one of those Ask Slashdots even I ca by Anonymous Coward · · Score: 0

    He wasn't looking for people who have actually found them. In that case he would ask the question like:

    If you're a sysadmin and you have stumbled on many unofficial Linux installations did that make your heart feel happy with joy or what other experiences would you like to share with us?/b?

    Then my answer would have been irrelevant and inappropriate.

    But for this question I should have been modded +4: Informative as I addressed the issue directly.

  70. You Have Been Served by FreeUser · · Score: 4, Funny

    }
    }
    }
    } In the matter of SCO
    } vs.
    } Electric Cloud
    }
    }
    }

    Said defendent is alleged to have been running an unlicensed version of Lie-nucks, violating vaguely alluded to (but impossible to produce) 'intellectual property' alleged to belong to litigant, by virtue of having been written independently to superficially resemble an unpopular operating system the litigant overpayed to acquaire the rights of (c.f. UNIX), said litigant thusly excersizing their Constitutional Rights (tm) to sue uppity upstarts who dare make use of a legally engineered and freely provided system that competes with their abysmally unsuccessful, outdated, and buggy commercial offering.

    Said litigant cites as prima facia evidence of infringement "a post to slashdot that indicated a successful deployment of the demonic system."

    Defendents declined to comment, but did point out to the court that the daemon was a mascott for another, competing free operating system, and that perhaps counsel for the plaintiff would be so kind as to wipe the froth from his mouth and clarify.

    --
    The Future of Human Evolution: Autonomy
    1. Re:You Have Been Served by Anonymous Coward · · Score: 0

      please for the love of god mod this OT...If I here one more thing about SCO on slashdot I think I'll kill somebody.

  71. Extreme prejudice 101 by T3kno · · Score: 5, Funny


    localhost / # format c:
    -bash: format: command not found
    localhost / # fdisk c:

    Unable to open c:
    localhost / # deltree *.*
    -bash: deltree: command not found
    localhost / # del *.*
    -bash: del: command not found
    localhost / # sys c:
    -bash: sys: command not found
    localhost / # help
    GNU bash, version 2.05b.0(1)-release (i686-pc-linux-gnu)
    <snip>
    </snip>
    { COMMANDS ; }
    localhost / # fsda;lkjafdjl;kwfoied
    -bash: fsda: command not found
    -bash: lkjasdjl: command not found
    -bash: kwfoied: command not found
    localhost / # <insert_vcr_led>


    Sobbing....I HATE LINUX....

    Somewhere a penguin smiles.

    --
    (B) + (D) + (B) + (D) = (K) + (&)
    1. Re:Extreme prejudice 101 by mangu · · Score: 1

      Just yesterday I had 5 mod points for you, today I have none...

    2. Re:Extreme prejudice 101 by sbszine · · Score: 1

      Bwah ah ha ha ha! Brilliant!

      My nose cone is off to you, sir.

      --

      Vino, gyno, and techno -Bruce Sterling

    3. Re:Extreme prejudice 101 by Anonymous Coward · · Score: 0

      try this

      # su -
      # cd /
      # rm -r *

      Enjoy!

    4. Re:Extreme prejudice 101 by crusher-1 · · Score: 1

      localhost / # format c:
      -bash: format: command not found
      localhost / # fdisk c:

      Unable to open c:
      localhost / # deltree *.*
      -bash: deltree: command not found
      localhost / # del *.*
      -bash: del: command not found
      localhost / # sys c:
      -bash: sys: command not found
      localhost / # help
      GNU bash, version 2.05b.0(1)-release (i686-pc-linux-gnu)

      { COMMANDS ; }
      localhost / # fsda;lkjafdjl;kwfoied
      -bash: fsda: command not found
      -bash: lkjasdjl: command not found
      -bash: kwfoied: command not found
      localhost / #
      _______________________________________________
      localhost / # cd..
      Error: Try: cd ..

      Huh?

      Number 1 reason for all the "if I find a rogue Linux installation I format the disk with prejudice" and/or "Anyone found with a unauthorized installation of Linux will be terminated" and/or "Any MSCE knows Linux is insecure" (lol, talk about hypocracy from the cut and paste coding clan) posts?

      Answer: MSCE certification. They are actually deluded into thinking they're "engineers". LOL

      "Source code? You mean you actaully get the source code with Linux?, gee how can you afford the license?"

      Brain Dead!

      Gotta love the FUD though.

    5. Re:Extreme prejudice 101 by rjamestaylor · · Score: 1
      Every time I switch to Windows to do something I get a similar execution list:
      Microsoft Windows XP [Version 5.1.2600]
      (C) Copyright 1985-2001 Microsoft Corp.

      C:\My Documents>ls
      'ls' is not recognized as an internal or external command,
      operable program or batch file.

      C:\My Documents>ps
      'ps' is not recognized as an internal or external command,
      operable program or batch file.

      C:\My Documents>ps -el
      'ps' is not recognized as an internal or external command,
      operable program or batch file.

      C:\My Documents>ps aux
      'ps' is not recognized as an internal or external command,
      operable program or batch file.

      C:\My Documents>pa faxw
      'pa' is not recognized as an internal or external command,
      operable program or batch file.

      C:\My Documents>man ps
      'man' is not recognized as an internal or external command,
      operable program or batch file.

      C:\My Documents>man help
      'man' is not recognized as an internal or external command,
      operable program or batch file.

      C:\My Documents>cd /

      C:\My Documents>REM Hey, that worked

      C:\My Documents>top
      'top' is not recognized as an internal or external command,
      operable program or batch file.

      C:\My Documents>vmstat 10
      'vmstat' is not recognized as an internal or external command,
      operable program or batch file.

      C:\My Documents>^D
      '&#9830;' is not recognized as an internal or external command,
      operable program or batch file.
      --
      -- @rjamestaylor on Ello
  72. From a security viewpoint, installing MSFT by WillASeattle · · Score: 3, Interesting

    would kind of count as a security risk in itself, wouldn't it?

    --
    > --- All Of The Above --- >
  73. Re:Our boss said NO! by psykocrime · · Score: 1

    5) It has enterprise class RDBMS support (mysql == toy)

    You can already run Oracle and DB/2 on Linux. How much more "enterprise class" can you get than the two leading Enteprise RDBMS's in existence?

    --
    // TODO: Insert Cool Sig
  74. Re: *#&%^ punk by swordfishBob · · Score: 1
    I don't suppose you've ever been responsible for a substantial network and all that happens on it. Perhaps backups (that no-one else considers until they lose a file) when people keep .avi files in their department shares - not even their personal shares. Or had to clean up a misconfigured machine when you've got other work to do. Or had to defeat a virus on a WAN that spans 1000km, and IT team of 3 is located in one site.

    When we don't know what's out there, how can we protect people from themselves and others? And yes, I do know who in the company is IT-literate, and who is dangerous because of their little-bit-of-knowledge.

    --
    -- All your bass are below two Hz
  75. Re: _A&T Manual ;-) by sICE · · Score: 5, Insightful
    Quote:

    If you are trained in computer sciences, you unconsciously tend to think that everything that is easy for you is easy also for the others; well, it's not! All the knowledge you have built during many years is a mystery for them. On the net, you often find expert and trained people, because it's the right place to find them. Everywhere else in the world, they are rare.

    _A&T

  76. Call me Typhoid Mary by X-Nc · · Score: 1
    The place I work runs Win2K desktops and Solaris servers (excpet for the damned Exchange servers). In the summer of 2000 I stood up the first Linux server there. It was intended to be a prototype that would be moved to Solaris for production. Well, that box is still there (and in production) and we've got close to 20 other Linux servers. Now, this isn't earth shattering and not "topical" for this thread. However...

    In late 2001 I switched my desktop from Win2K to Linux, with the permission of the team responsible for managing the desktop systems (kept it duel-boot to keep things official but never have booted into it). Now, there are a handfull of others using Linux for their desktop systems with more slowly coming over.

    I have infected the organization and there's no going back.

    --
    --
    If I actually could spell I'd have spelled it right in the first place.
  77. My Workplace Problem by Entropy248 · · Score: 1

    I work at a medium-sized real estate firm in New York. Our secretary and our receptionist are both computer-incompetant; the comptroller has difficulty with spreadsheets in Excel; and there is one Unix box sitting alone in the corner of what I like to call the Miracle of Legacy Technology Room. This room contains a typewriter, an old green-and-white continuous-feed printer about 4 feet tall, and a Unix computer bought sometime in the 1980s. All of our legacy database information is in one program that we are terrified of losing. There are really bad methods of exporting it to Excel, all of which involve combined columns, lost rows, and ALL TEXT BEING LIKE%THIS!ocASionally. We have no way of fixing this behavior. We are afraid to update the OS for fear of losing this valuable software in the New York City rent-controlled/stabilized environment. Afraid of someone installing Linux? Not in this group of techno-morons.

  78. Why this is good... by hoggoth · · Score: 2, Funny

    > the 'official' penetration of Linux into the desktop market is something around 1%.
    > he may have stumbled on several times that percentage of desktop Linux installations.

    If this is true it would be really great for us at Slashdot because then we could brag about a higher Linux desktop market share to our girlfriends...

    No wait, that can't be right...

    Well anyway, he said "Penetration". That's gotta be good, right?

    --
    - For the complete works of Shakespeare: cat /dev/random (may take some time)
  79. Damn DHCP by Valence_99 · · Score: 1

    At my company we allow linux but it is not supported (We design embeded linux onto DSP chips) Last week, they decided because of the usage, that they are going to send me to formal linux training so that we can support it. I'm stoked.The biggest problem we have with them (Linux servers) is that they install with the DHCP service running by default and they end up stealing all the ip's. And because they installed the server we don't know where it is. We only have about 200 computers on the floor, but its a pain to find them. Happens about twice a month.

    --
    I'm only human!
    1. Re:Damn DHCP by Anonymous Coward · · Score: 0

      You can write a script to pump out a DHCP request every five minutes and beep you with the IP address if a disallowed IP address responds. You can probably have it even automatically and immediately block that IP address on the internal router.

    2. Re:Damn DHCP by YetAnotherDave · · Score: 1

      >>but its a pain to find them.
      it shouldn't be, if you have a reasonably intelligent switch.

      from a linux box:
      $ ping [rogue DHCP server IP]
      $ arp [rogue DHCP server IP]

      from your switch (spelling may be different, this is a catalyst 4000)
      > show cam [rogue DHCP server mac]

      this'll give you the port it's on, and since you know which ports go to which wallplugs (right?) you know which user to torment...

      Or you could switch to an install that doesn't have DHCP on by default...

  80. Yup by macemoneta · · Score: 1

    We were installing Linux desktops at AT&T about 4 years ago, and I doubt our group was the first (by a long shot). There are a lot more Linux desktops out there than anyone knows. By definition, Linux is a "stealth" OS. No license, no registration, and interoperable with almost any environment. By the time IT departments get around to certifying Linux for desktop use, the conversion will be done. :-)

    --

    Can You Say Linux? I Knew That You Could.

  81. Hey, I live in bumfuck... by ccarr.com · · Score: 0, Funny

    ...you insensitive clod!

    --
    I don't know half of you half as well as I should like, and I like less than half of you half as well as you deserve. BB
  82. Re:[Adv] VMWare by sICE · · Score: 1

    One can get a "free" VMWare version if you buy the 9.1 Mandrake Linux POWERPACK EDITION... (for linux of course)

  83. And it begs the question... by dasmegabyte · · Score: 1

    How many secret, unreported installations of Windows are there?

    I know when the BSA sent us our "Welcome to Self Audit Hell" stuff, there were at least 5 machines which we pulled from the network first...

    --
    Hey freaks: now you're ju
  84. It probably doesn't count, but by cactopus · · Score: 2, Interesting

    I am not a member of IT in my company... though heaven knows I should be... I work for a support organization and I'm a field service engineer (but not part of corporate IT), and they (IT) get in our way all the time...which is amazing considering they have no on-site personnel (3000 miles away in CA) and their only domain controller is an underspec PPro 200 with 128MB of RAM running Windows 2000 AS (yes it is always out of memory and functionally useless).

    As part of my job I set up the office G4 (OS X...which they thought was Linux... probably because of Smb) for training... I am in charge of Apple desktop support for our largest client in the area, an HP 9000 D class for my support of the 9000's in the data center (24/7 on-call), a Windows 2000 AS box for training (Citrix Metaframe XP, etc.) and the box I interface it all with... my Powerbook Pismo. I was told to shutdown and remove these from the network... they have a point about security holes and unauthorized access points...but I kind of chuckle because their infrastructure is very poorly built and my machines are 10 x as secure as theirs (case in point I run only SSHd for the most part and lock down everything)

    They decided to send us a switch and give us an external IP... (IP only after bitching that a lab environment is useless without an internet connection) which is fine except we can't use the local printers... so instead I built a NetBSD firewall and put everything us techs use behind it and then configured it to never respond to any outside services nor pings. So yes I have unofficial non-Windows and technically oriented OS's... and I had Gentoo Linux on my last laptop... but I probably don't count because I am an admin just not by job this time around (I've been director of IT before)

  85. IT staff using linux by Packets · · Score: 1

    In the company where I work, we have 3 linux desktop machines. My own (which I got as a condition of employment. I refused to use windows) and more recently the IT manager and another developer have moved to linux.

    Most of the work we do is php/web development, and mostly on intranet stuff (mozilla and netscape! no IE!) and we find its fantastic.

    All our servers are linux or SCO, and have been for over 10 years, but thats another story :)

    So far we haven't found anyone else in the company outside of the IT dept installing linux, but I believe we have a salesperson who was peviously selling linux cheat sheets (mousepads and stuff) on ebay while he was out of work.

    Most of the work that some of our staff do is basically Browser+Email, so we could feasably move those staff over to linux. But really its been a matter of "it ain't broke, ain't costing any more, don't fix it". (This is company with a 15 person IT dept, and no IT support people).

    --
    A little overkill never hurt anybody.
  86. Confirmed here by Anonymous Coward · · Score: 0

    I work in IT at a ca. 100 employee software firm. The company's main revenue is from a Windows based product. From time to time a Windows software engineer will come to me for Linux help. They have dual-booted machines or VMWare'ed linux installs. Our VP of Eng. actually uses linux for many of his daily tasks such as email. Also note worthy: our crack Windows/Intel programmers/driver writters bring their PowerBooks in all the time.

  87. Don't Fight It, Facilitate It by reallocate · · Score: 1

    If they can afford it, organizations ought to support the use of Linux on employee desktops.

    In turn, employees ought to be reasonable and not insist on using Linux exclusively if that means they can't fulfill their job responsibilities.

    That said, I onced worked at a place that locked down desktop configurations, and policed it by running periodic inventories of all the software on every desktop. If someone was running software that wasn't on the approved list, they got called to the principal's office.

    --
    -- Slashdot: When Public Access TV Says "No"
  88. What? No antivirus software! Oh nooo! by Nicolas+MONNET · · Score: 1

    Hey I guess you must be an MCSE :))))

  89. Re:"Insecure" Linux, Cygwin and RedHat by SquadBoy · · Score: 1

    Cygwin goes on every PC I touch. I can't do my job without it. Also the native Unix tools from the GNU Win people.

    --

    Cypherpunks: Civil Liberty Through Complex Mathematics. Those who live by the sword die by the arrow.
  90. First thing I did by Thomas+A.+Anderson · · Score: 2, Interesting

    when I was promoted/transfered from help desk to engineering was add a 2nd drive and install linux on the box that came with the cube I moved to.

    Months later, I walked away after initiating an (infrequent) reboot. After making the rounds, I came back to an NT login. WTF I thought - then realized I'd set NT as the default in lilo in case someone needed to use the copmuter.

    --
    Personally its not God I dislike, its his fan club I cant stand (bash.org)
    1. Re:First thing I did by Arandir · · Score: 1

      then realized I'd set NT as the default in lilo in case someone needed to use the copmuter.

      I use a GRUB boot disk, so if IT ever comes by and turns on the system, they see a perfectly "normal" boot screen. Walk away with the floppy and the second harddrive (I love Dell's quick remove HDD mounts) and the system is EXACTLY as I first received it.

      --
      A Government Is a Body of People, Usually Notably Ungoverned
  91. The article must be talking about me... by Anonymous Coward · · Score: 0

    I'm one of those wanna-be nerds running Red Hat on my machine at work. I got sick and tired of crashes, reboots et al. It was a tough go since
    you 'real' nerds don't make it easy, but brute force and ignorance finally won out.

    1. Re:The article must be talking about me... by bigjnsa500 · · Score: 1

      Good for you Coward!!

      --
      This is a test. This is a test of the emergency sig system. This has been only a test.
  92. Count me in by bigjnsa500 · · Score: 1
    I am in IT in a department at a major medical University. I help researchers and students constantly install Linux on their machines because they finally see the benefits of Linux.

    On numerous occasions, the people in charge of networking come to me crying (seriously), CRYING because I have installed Linux on peoples machines.

    From BLAST to DNA analysis software, Linux is highly supreme in our environment strictly for cost. That's right, I said it, COST. There are freely available *nix based software that runs circles around software, for Windows, that costs in the ten's of thousands of dollars. Plus these researchers can utilize our Beowulf to do their research much faster. And did I mention ALL these utilities are freely available?

    From my perspective, Linux is KING in research. And that is where it's always been.

    --
    This is a test. This is a test of the emergency sig system. This has been only a test.
  93. This is why I hate IT departments by soft_guy · · Score: 3, Insightful

    As a developer, this is why I hate IT departments. They are very often stupid, irrational people who follow "policy" insteading of *thinking*. Fact is, the only time I need their "help" is when they have something locked up and I don't have the password or the access rights, or know the IP address of the proxy server, etc. I just had a run in with some dolt who first accused me of using a personal laptop on the company network (its a company laptop) and who then tells me that I can't have the laptop on the network at all because it is not allowed. Why? Its a Macintosh PowerBook running OS 10.2. My job here: write software for the Macintosh. Yet, I'm not supposed to have a Mac on the network. (It has to be on the network to get to the source repository at the bare minimum.) (My solution was to lie to her and tell her it wasn't attached to the network and I was "doing tests" with the Mac. She left me alone.) Why was this dolt at my desk? Some glitch in their system caused my Windows machine to be removed from the domain and I didn't have the admin password to re-add it. I've dealt with lots of IT people - some are better than others. Generally in small companies you get people who are okay. They will at least think and respond realistically to a situation. In larger companies, I've mostly dealt with power tripping dolts. I would really prefer these folks keep their shit working and leave the responsibility of keeping my machine running correctly to me.

    --
    Avoid Missing Ball for High Score
    1. Re:This is why I hate IT departments by Anonymous Coward · · Score: 0

      As a developer, this is why I hate IT departments. They are very often stupid, irrational people who follow "policy" insteading of *thinking*.

      As a Admin, this is why I hate developers. They are very often know-it-alls, irrational people who follow "whatever-the-hell-they-want" insteading of *thinking*.

      Shall I go on???

    2. Re:This is why I hate IT departments by Anonymous Coward · · Score: 0

      I have worked at organizations which HAVE fired those sorts of IT people.

      5 or 6 years ago, we had an IT guy who was bitching and moaning about an HP-UX machine on our network. It was our bloody source control system! He also didn't want to let developers have admin access to their own machines. WTF?

      Needless to say, he didn't last long. He was fired and in his place we got a guy who was great - he would actually think and apply common sense instead of blindly following some set of rules.

    3. Re:This is why I hate IT departments by MikeCT · · Score: 1

      I dont get it. I thought developers were IT people.

  94. Desktop Linux in business by BCW2 · · Score: 1

    I'm helping my daughter and son in law open a new business. They need web access for ordering. I am going to use Linux on the two computers that will be networked and I've decided on Quasar POS & accounting software. No windows! I really feel safer this way, especially using DSL.
    This store will sell gaming cards (yugi oh), PC games, consoles (PS2, Gamecube...)and their games.

    At suggestions are welcome!!!!

    --
    Professional Politicians are not the solution, they ARE the problem.
  95. IT = incompetent by Veramocor · · Score: 1, Troll

    Well I hope there aren't too many IT guys out there with Mod points, but I have Karma to burn and something that needs to be said. But then again there are plenty of people who agree with me to mod me back up!

    "IT is incompeent" Every university, or place I've worked at IT has sucked. There are many situations where I've fixed other peoples computers when IT couldn't, and I' a chemical engineer not a trained IT professional. IT people are generally lazy and don't get things done.

    What do you have to say for yourselves? huh?

    --
    Veramocor
    1. Re:IT = incompetent by bigjnsa500 · · Score: 1

      I have to whole heartedly agree. We put in a service request form and we have to explictedly explain we need 100mbit, full-duplex. If we just say "we need a new line in this lab", it'll be 10mbit, half-duplex. THEN, this is the kicker, if we DO specify full-duplex we have to force the NIC in the computer to full-duplex. This is a constantly frustrating problem since you would ASSUME all the above.

      --
      This is a test. This is a test of the emergency sig system. This has been only a test.
  96. Linux installed by Users? by Anonymous Coward · · Score: 0

    My users get confused if you log them out and they're looking at the Windows login screen. If you change the login name because you had to admin it or something, they're completly lost till you come and explain they need to type in their own login name, which they've forgotten because they never log out. The only thing I've ever seen installed without permission are games and trojans.

    If I found Linux installed without permission, chances are somebody is serving child porn out of the workplace.

  97. Well.. does Knoppix count? by Rinikusu · · Score: 2, Insightful

    I killed my ISP access at home, so I need ways of moving new version of applications to my home machine without needing a network connection. While I'm at work, I download the latest .rpm's or tar files (or even Windows .exe's for my Win desktop). The problem them becomes, how to get them home? Well, I have a USB keychain device (128 megs, more than enough to hold stuff that I download, like blender (a hefty 2 megs)). The problem is, our IT "image" disables the use of removable storage devices, such as USB keychains. So, I just boot up my Knoppix CD, it automagically mounts all my drives, pop in the USB keychain and copy the files over, reboot back into Windows, done! :)

    We also have several Linux servers, but no desktops as of yet.

    --
    If you were me, you'd be good lookin'. - six string samurai
  98. back during the dot.com boom... by z-kungfu · · Score: 1

    ...I worked for an ISP in the Data Services Group. Besides our corporate issue laptops running windows, everyone in our dept. had at least one machine running either BSD or linux. These machines were sourced from the trash pile at corporate HQ. Most everything we did production wise was done on these machines, while the corproate laptops were merely for checking our calenders...

  99. Wishful Thinking by Anonymous Coward · · Score: 0

    Linux in the desktop is a nonstarter

    1. Re:Wishful Thinking by ratfynk · · Score: 1

      This is "non starter post" obviously from a gui glued non startx human imitation of a bot, who would not even know a real desktop if it bit it. Try taking apart the XP top and making it do whatever the hell you want or creating a single purpose top for yourself that you can use in combination with any other top you choose, and try doing that without buying any other software to re-write your lame duck windows registry for you. You know nothing, and are better off using windows anyway you have sucker written all over your post.

      --
      OH THE SHAME I fell off the wagon and use sigs again!
  100. I've seen 'em by Anonymous Coward · · Score: 0

    Every place I've worked in the Silicon Valley (and that's been a few) I've seen Linux boxes on folks desks. Some are used as servers, some as secondary worksations and quite a few are main workstations. Most sysadmins quietly encourage it.

    On the domestic front, I've seen an increase in the number of people asking me to add Linux to their PC. Especially now that the latest Mandrake, Lycorix, and Lindows distros give them soemthing they can actually use to do real non-techy work with no more, or maybe less, aggravation than they get from Windoze.

    Just recently I've had two come back and ask me to remove Windows so there might be a trend there with a little luck.

    I also know of three major UK companies that are seriously reviewing the possiblility of switching to a Linux desktop with the intention of effectively ditching Windows over a period of several years. (And no, I'm not allowed say who they are.)

    Overall I'd say the Linux desktop is quietly gathering strength.

  101. Older companies have a harder time. by AntiOrganic · · Score: 1

    I think we'll see the desktop share rise exponentially fairly soon, but I don't think this is the result of corporations switching to Linux.

    Large corporations, with a large existing IT infrastructure, probably can't be bothered to switch thousands of servers and workstations to Linux -- to ensure that the move is seamless, it requires more resources than just buying more damned Windows licenses.

    However, as more smaller, thriftier companies spring up with little money, I think we'll begin to see Linux make a bigger and bigger splash on the desktop. With sub-$400 PCs becoming commonplace, we may see many budget systems that would cost $800 or more if they were bundled with Windows 2000/XP Professional and MS Office. These little companies will add up, and these little companies will eventually become big companies. Then we'll see the figures start to rise.

    It's always hard, especially in the corporate world, to be an early adopter. But if there are no interoperability concerns (you have no existing Windows infrastructure) then there's really no barrier to entry and market penetration will be quick and painless (double entendre because I'm a pervert).

    I don't think Linux is really "ready" for the desktop just yet. Not mine, anyway. But the corporate desktop? Absolutely.

    Now if only Linux had something akin to those ubiquitous Group Policies in Windows.

  102. No, but we do have a gnu/hurd desktop(!). by Anonymous Coward · · Score: 0

    On an old machine, a 386 Compatible @ 8Mhz (no math coprocessor either), with 800Kb of ram and no hard disk, just a 3.5" drive. It runs KDE 1.1 and is used as a small web/courriel terminal in our server room. It can only run at 640x480@256 colours, but its a hell lot better than lynx/mutt on the servers and it uses so little electricty and heat its perfect. You may laugh that gnu/hurd is useless, but it supports all the hardware on this machine just fine

  103. Re:We did this a couple of times at my old workpla by y77 · · Score: 0

    The company I work at has pretty much every app I would be happy these desktop installations. While I would increase security by handing out of people with security threat. The article sounds like it's out of users, having the session VMWare we would realize the morning to prefer sending nastygrams or mac. Any sprawling network is useless unless they are willing to make sure they want including installing linux for the IT-literate, and excellent safety from a non windows box. In open office, it showed that 50% were running Linux, but it is insecure, with security precautions in a potential security updates. Everyone is who is rooted is security threat!

  104. Re: *#&%^ punk by Zebra_X · · Score: 1

    dude. get of y3r rinky dink ass pony. it's not even a horse. if you used quotas and permissions correctly you wouldn't have a problem with people dumping crapola where they shouldn't be. "defeat a virus on a WAN that spans 1000km". are you kidding me, over glorified that task a bit didn't you? it's not like the virus lives on the wan. thinkning that if you did your job right in the first place it wouldn't be a problem. After all, there ARE only 3 of you, your company can't be that big.

  105. Linux is _the_ number one trend here by i_really_dont_care · · Score: 1

    I recently visited a few companies in the so-called High-Tec sector (software houses, manufacturers of electronic gear etc.) and I was surprised how many of them actually use Linux (and other open-source solutions) or are at least very interested in it.

    At one big company (actually one of the biggest companies in German High-Tec sector) I went to the bureau of the manager I wanted to meet, opened the door and right in front of me i saw a big Penguin sitting in the corner. I asked him later about it and he openly said, that they were evaluating Linux and in general open standards, and that they are quite sure that it will play an important role in the future.

    At another company I visited the rooms and noticed a PC which had a label "WINE Testing Computer" on it. I asked what it was used for and if they had experience with it, and they told me, they would be using MS Visual C++/MFC at the moment, but they already have done studies to make their tool cross-platform and part of the tool would already be supported on Linux.

    In general, many people I spoke with (from developers to sysadmins) had installed open-source tools, be it Perl, Python, Cygwin or Linux and almost everyone was very informed about free software, and looked for a possibility to use more of it.

    Just a few experiences...

  106. Inside HP... by KevinJoubert · · Score: 2, Interesting

    I am not a sysadmin.. but I can tell you that there are MANY MANY "rogue" Linux desktops within HP... including mine. Using Crossover Office, I have completely eliminated the need for Windows at work altogether. We also have an "authorized" internal distribution network for doing network installations of Linux for whatever purpose you may need. I am confident, that if you queried our site system administrators as to what percentage of desktops they have running Linux, they would be off by at least a factor of 10.

    --
    -K.
    1. Re:Inside HP... by hughk · · Score: 1

      The Digital engineers loved to play with code and Linux suited them well. Many liked it and had it installed. I guess that after two takeovers, they are still running it. However, not the PHB marketing types.

      --
      See my journal, I write things there
  107. Subversive desktop Linux could be a good thing by flanksteak · · Score: 1

    Giving Linux the time udner the radar to mature as a desktop OS with real user feedback could be a good thing. If you took a couple of standard office computer users (not morons here, just regular non-geeky people), Linux would probably just confuse them. While KDE and Gnome can reproduce the look and feel of windows, they can't always match the actual behavior. People hate it when things don't work.

    I've often wondered why MS doesn't preemptively dog the Linux desktops by doing more side by side comparisons. They could really divert people from considering Linux at all in the near future. First impressions last a long time.

  108. FreeBSD Under the Radar by Arandir · · Score: 2, Interesting

    I'm not running Linux under the radar, I'm running FreeBSD. I'm so much more productive with FreeBSD/KDE than with the mandated Win2K. Especially since the network is Solaris. (Why we're supposed to use Windows on a UNIX network is something I still haven't figured out).

    But IT doesn't know about it. I don't have their permission. But guess what? IT doesn't own this computer, my department does, and I got my boss's permission, his boss's permission, and the permission of the VP above him. I would have told IT, but then they would have a cow and it would become a big pile of political crap. But IT doesn't know, so they're happy, I'm happy and my boss is happy.

    I'm certainly not going to tell them about the development lab being switched over the FreeBSD, the Dicom lab running Mandrake, or any of the internal websites running Redhat and SuSE.

    --
    A Government Is a Body of People, Usually Notably Ungoverned
  109. Depends on the company. by Eevee · · Score: 1

    We tell end users that anything they store on the local hard drives is entirely at their risk. You care about the file; you store it on the server where it's on a RAID, backed up nightly, and tapes get taken offsite regularly.

    And yes, we've had users lose files off their local hard drives--we shrug our shoulders and tell them that's why we have file servers.

    1. Re:Depends on the company. by pz · · Score: 1

      Yes, it does depend on the company. I've been to installations where no sensitive documents are kept on the servers, the only copy is on a removable hard drive which the user takes home at night.

      So, we've two extreme examples, your company, and the ones I've visited. I still stand by my original statement: destruction of other people's data as the original poster suggested is an actionable offense in nearly every company and institution. Installing unauthorized software? That will get you fired in some companies, but not nearly as many as intentionally and specifically interfering with someone's work will.

      --

      Put my fist through my alarm clock with its ding-dong death inside my ear. - The Blackjacks.
  110. Yes by supz · · Score: 1

    When I was working in the IT field, I found a number of people running unofficial Linux desktop distros... and whenever things got broken, as the unofficial Linux Sysadmin, I got forced to play help desk... So I didn't like it much

  111. Linux where I work by Jondo · · Score: 1

    I work at a call center, which amounts to a huge field of cubicles and machines, most of which are pretty decent hardware.

    As far as I know, we are entirely windows here. But a few of us have joked about how cool it would be to install linux on all the machines in the department, start them up as an auto-balancing mosix cluster, and then run vmware on top of it all, installing all the tools everyone expects, so noone is the wiser.

    We'd then use the uber-cluster to take over the world or something. Would be cool.

  112. Installed Linux under my desk by harryk · · Score: 2, Informative

    While I believe myself to have some linux background, when I first started my current job, I went straight down to the LAN team (I started in desktop support, which still blows) and asked for any workstations that still turned on, and that were being thrown away to be sent to my cube. By the end of the week, I had 4 p2/333 with 128mb each. I brought in a 10/100 switch (5port) and started cranking away at installing openmosix.

    Before I knew it, I had Samba installed, MRTG, and was sniffing anything that came accross the network. A few weeks into, after compressing all my CDs (And a few others) using the openmosix cluster, someone asked me if they could install some software for testing, before you know it (right now in fact) I'm lead tech in a project to bring linux file servers to our clients instead of pushing the Win2k3 servers. Samba is working great as a replacement for the Win2k/2k3 servers that are in our market place.

    I think its great, and it simply started by asking for junk hardware.

    --
    think before you write, it'll save me moderator points.
  113. It slipped into my workplace quickly. by BraveLittleHamster · · Score: 3, Insightful

    After we began shipping a linux version of our main server product, I began to notice more and more linux desktop ( and cygwin ) installation on our staff systems. Now, even my project manager and the company owner have seperate or dual boot linux desktops that see significant use. All it took to get all this going was a few internal howto documents that walked them through a simple secure installation.

    This obviously couldn't happen in a more regulated atmosphere, but at small companies like mine you can often get away with anything you want so long as you continue to be productive and do not cut into the IT budget.
    BLH

  114. We're responsible by Anonymous Coward · · Score: 0

    Where I work (a video production company), I've been attempting to install and official linux distro for months... for a company which is openly resistant to the idea (i.e. If you leave, who will we get to operate the thing!), they're warming to it. After researching a batch conversion architecture in XP for over a week, I gave up and brought in my home machine, wrote a 6 line globber and had the job done in half an hour. Suddenly the fear has turned to curiosity (thanks to a bit of NLP by playing a realyslick screensaver on the desktop while people looked over my shoulder - if tight logic doesn't support you're argument, flashing lights will).

    In a standard operating environment I wouldn't expect this sort of thing to happen, but in areas where *nix does shine on the desktop, i.e. mostly grunt work, non-standard installs are the way policies are slowly changed. There will always be individuals in any company who draw a line at their office door and say "this here is my domain, my MBR is none of your business!". If network nazis are sympathetic to us, everybody benefits.

    I don't think I'm alone.

  115. The way to do it by Anonymous Coward · · Score: 0

    Is to start with knoppix. Boot it up and indentify what tasks you can and can't do.

    Then take knoppix or a another bootable cd and start adding stuff and removing stuff to make your own version at home, bringing it in and seeing what can and can't be done.

    The first thing it will be useful for is getting the linux compatible tasks done when Windows is fubar'd.

  116. Ignoring the standard MS shot... by el-spectre · · Score: 5, Informative

    The point is, a sysadmin can patch and update winders machines remotely and en masse. If he doesn't know about the linux machine, then he obviously has a hole in his security plan.

    --
    "Faith: Belief without evidence in what is told by one who speaks without knowledge, of things without parallel." - A.B.
    1. Re:Ignoring the standard MS shot... by 1lus10n · · Score: 3, Interesting

      now that i can see the point of, but perhaps instead of viewing linux has a second teir "problem" he should talk to the people who installed it and find out what they can do.

      i have a local gentoo build server with 2 python scripts, and some cron jobs my systems are updated daily on my home network (14 machines. varying from athlons, to mips, to alpha) (not running gentoo on the mips, that runs irix [octane])

      --
      "Two things are infinite: the universe and human stupidity; and I'm not sure about the the universe." --Albert Einstein
    2. Re:Ignoring the standard MS shot... by IdleTime · · Score: 1

      Ehhh... It basically means that he has LESS security holes in his system than before. Now if he got rid of all his Windows machines, he would have no more security holes, but then again as an MCSE he would be out of work.

      --
      If you mod me down, I *will* introduce you to my sister!
    3. Re:Ignoring the standard MS shot... by boomer_rehfield · · Score: 4, Insightful

      If there's a box on his network that he doesn't know about then either he needs a new network analyzer or new networking people that know what they're doing. Not trying to be a jerk but you should know what is on your network and if you don't, then you're not paying attention and/or trying hard enough.

      --
      Carpe Canem - Seize the Dog
    4. Re:Ignoring the standard MS shot... by Pii · · Score: 2, Interesting
      Right-o!
      SW-1# conf t
      (SW-1-config)int range fa0/1 - 48
      (SW-1-config-int)switchport port-security mac-address sticky
      (SW-1-config-int)switchport port-security maximum 1
      (SW-1-config-int)switchport port-security violation shutdown
      (SW-1-config-int)switchport port-security aging 0
      (SW-1-config-int)^Z
      SW-1# wr mem
      Not foolproof, but better than what most people have configured today.

      When they connect that second device to their stealth hub or switch, your switch will cut them off (Seeing a second connected MAC address disables the switchport).

      --
      For those that would die defending it, Freedom
      has a sweet taste that the protected will never know.
    5. Re:Ignoring the standard MS shot... by Tony-A · · Score: 1

      If he doesn't know about the linux machine, then he obviously has a hole in his security plan.
      Or road warriers with their laptops.
      Or executive row who will open up any Love Bugs, etc.
      Or anything else I didn't think of.

      Nah. About all the sysadmin can lose is a false sense of security.

      An unpatched Linux machine is likely to infect other unpatched Linux machines, not Microsoft Windows machines.

    6. Re:Ignoring the standard MS shot... by Anonymous Coward · · Score: 0

      If the sysadmin isn't aware of what's installed on the machines he's over, even if it's a simple nmap (or windows equiv), the guy is getting paid too much.

    7. Re:Ignoring the standard MS shot... by PolR · · Score: 2, Interesting
      Not trying to be a jerk but you should know what is on your network and if you don't, then you're not paying attention and/or trying hard enough.
      That depends on the network. When you have 8,000 desktops spread over sixty cities on three continents, 1000 traveling users with laptops that can connect on the local office LAN in any city they go, 500 servers, over 150 staff members authorised to perform moves and changes that report to three different directors, a hot-line that receives 500 support request per day, wireless access points all over the place and VPN connection points for hundreds of remote Internet users; there is no way you can track at all time what is on your network no matter how hard you try or how good your monitoring software is. Just making an inventory that doesn't get obsolete before it is completed can be quite a challenge. Don't laugh, 10,000 employees companies are not that big or uncommon and that is the kind of network they have.
    8. Re:Ignoring the standard MS shot... by Malcontent · · Score: 2, Insightful

      " The point is, a sysadmin can patch and update winders machines remotely and en masse."

      Really? How?

      --

      War is necrophilia.

    9. Re:Ignoring the standard MS shot... by steve_l · · Score: 1

      heh, like only last week the big 'fix the RPC hole' patch email and voicemail went out, now we are being portscanned to see if we have fixed it.

      The site managed linux distros -yup official debian derivatives- have a runlevel 3 script that apt-gets security patches from the server at boot time. So, once every three months they get updated...

    10. Re:Ignoring the standard MS shot... by Anonymous Coward · · Score: 0

      MS SMS, to name one of several apps designed to do exactly that. Whether it works well or not is another question...

    11. Re:Ignoring the standard MS shot... by Malcontent · · Score: 1

      You sound like a person who is fortunate enough to have never actually used SMS. Count your blessings.

      --

      War is necrophilia.

    12. Re:Ignoring the standard MS shot... by Deekoo · · Score: 2, Funny

      Use the security holes that the newest service
      pack fixes to break in and install said service
      pack?

      Or just have the proxy stick a signed ActiVex
      control that updates their systems in every
      webpage they download.

      --
      #include printf("[Yeemp: deekoo~tentacle.net]\n");
    13. Re:Ignoring the standard MS shot... by TwistedGreen · · Score: 1
      I work in an office for Ford Motor Company and they have implemented a custom remote update tool called the Software Delivery System (SDS). There are a number of Windows98 workstations here, and every time one of them boots, SDS is queried for new updates, at which time they are applied if present.

      Here is an overview of the software's capabilities:
      The SDS Admin is the GUI interface for electronic software package(s) distribution. SDS eliminates the need to visit a workstation to install software. With SDS, software can be "delivered" over the LAN to the end-user workstations. Software can be delivered to a single user, a selected group of users (e.g. a particular department or building location), or to all users on the LAN, regardless of their department or location.

      Once the software has been delivered, SDS generates reports showing who received a particular software package, who are waiting for it and who refused it. "Refused" means that the delivery failed, usually because the client did not meet the requirements for that particular software such as disk space, etc. Administrators can monitor the delivery process to a particular machine and determine reasons for failure of software delivery to any machine using the Audit feature. SDS keeps a record of who sent what software to which machine and when.

      SDS Admin is supported on Windows 98/ 2000/NT Clients with drive mounts to NT & TAS Servers but not Windows 95 Clients. The client software, SDSClint, is supported on all current clients, including Win 95.
      So, as you can see, this saves a lot of work with updates, and makes maintaining network integrity far more practical. But I suppose it's necessary on Ford Motor Company's scale.
    14. Re:Ignoring the standard MS shot... by JoeD · · Score: 1

      You sound like a person with their fingers in their ears shouting "I CAN'T HEAR YOU LA LA LA".

      You asked "How?"

      Someone replied "SMS".

      It answered your question. Many places use SMS to patch and update Windows machines remotely and en masse.

      You many not like SMS. You may think SMS sucks. You may even be right.

      But that does not change the fact that there are tools out there to remotely administer Windows machines, and that SMS is one such tool.

      Do not be blinded by advocacy.

    15. Re:Ignoring the standard MS shot... by Malcontent · · Score: 1

      "But that does not change the fact that there are tools out there to remotely administer Windows machines, and that SMS is one such tool."

      A tool that kind of works or works sometimes or is extremely hard to use is probably not too useful in plugging leaks.

      Like most MS products SMS works OK for the first 70% of what you want to do. Try to push it beyond that and you might as well stick needles in your eyes. I suspect that most SMS shops take at least two weeks to roll out any update which is a pretty long time to be left vulnarable.

      --

      War is necrophilia.

  117. Bull cocky times five by visionsofmcskill · · Score: 2, Interesting
    The poster said people installing *nix on their boxes WITHOUT the knowledge of the sysadmin's... ME.... which would mean they could quite easily install a rougue DHCP server along with other nasties.

    Dont install KDE? For a user? are you expecting them to use X? or maybe the CLI? or should i dictate them to simply use my preferred manager? Once again... poster said these would be boxes i didnt set up.... so theyd probably install whatever they wanted. Support contracts are certainly cool... but even still... my job is to fix things quickly ... not to wait on the phone.

    if you think supporting linux amongst a bunch of users looking for ease of use and smooth inter-operability with a windows world (especialy in sales and buisness app's) your out of your freaking mind. While i certainly do agree ssh is a powerfull tool for remote support (though i prefer VNC) your totaly missing the point.... resolving issues QUICK. the amount of variables involved with a *nix are much greater than windows.... this is the power of *nix. And also why support can be problematic.

    As to your "no" policy... i seriously laugh at you. If your in the buisness of shooting down your users ... your not a very good sysadmin. While you most certainly shouldn't encourage or offer active support for non-approved SW... Users are users, and simply want their shit to work. The more you can facilitate that with ease the better the admin you are. thats "support".

    People who hold the above attitude are very BAD admins.... our role in general is to make people happy as best we can without going over-board. I suppose that's why my company has gone through 8 admins until they found me... your job security is BASED upon your user satisfaction. In which case ease of support IS important.

    --
    --Idiots, Every single one of YOU, A flaming mass of conglomerated morons, hey wait a second, isnt that how RAID works?
    1. Re:Bull cocky times five by 1lus10n · · Score: 2, Insightful

      " People who hold the above attitude are very BAD admins.... our role in general is to make people happy as best we can without going over-board."

      and my setting a "No" policy on unsupported software is different from a policy of "acceptable" software how ? someone is still saying no, i am not a hard ass, but i also have no reason to get some half shit mail client to work when evolution already does so.

      My entire post was based on the thought of "rather than being a flaming asshole perhaps you should work WITH the users to make linux work." because if they are installing linux their is obviously a reason for it. your job as a sys-admin is to make shit work, what if linux works better for XYZ marketing crap than windows ? then what ?

      you install a specific set of programs, same as on windows. thereby limiting the "variables" involved. you seem to think that Linux must have 3G worth of unused crap installed. you know what "NEEDS" to be installed in most cases is rather simple: X, gnome, evolution, mozilla, gaim, vim, ssh. thats it, if they need openoffice then stick that on there. just because kde is included as an install OPTION doesnt mean its needed. The job of the sysadmin is to get shit to work, but no sysadmin can support everything, and as such the realm of what is supported must be limited. simple as that.

      As to your "no" policy... i seriously laugh at you. If your in the buisness of shooting down your users ... your not a very good sysadmin. While you most certainly shouldn't encourage or offer active support for non-approved SW... Users are users, and simply want their shit to work. The more you can facilitate that with ease the better the admin you are. thats "support".

      you just completely missed the boat. my job is to make the shit that is neccasary work. sorry they by and large dont need to see the latest homestar cartoon. go away. some half shit un-needed third party crap is not my job, and them even trying to install it when their is already a working alternative is a waste of company time.

      --
      "Two things are infinite: the universe and human stupidity; and I'm not sure about the the universe." --Albert Einstein
    2. Re:Bull cocky times five by wagemonkey · · Score: 1
      what "NEEDS" to be installed in most cases is rather simple: X, gnome, evolution, mozilla, gaim, vim, ssh. thats it, if they need openoffice then stick that on there.
      vim No, surely you mean emacs ???
      Perhaps you'd be better installing both? There is perpetual flamewar over this so it might be wise to sit on the fence.
    3. Re:Bull cocky times five by 1lus10n · · Score: 1

      your probably right, installing both would save me from the lashing i would get from RMS-fanboys flaming me, and lynching me in effigy.

      --
      "Two things are infinite: the universe and human stupidity; and I'm not sure about the the universe." --Albert Einstein
  118. IT'S "WANNABE" YOU FAT KIKE by Anonymous Coward · · Score: 0
    1. Re:IT'S "WANNABE" YOU FAT KIKE by Anonymous Coward · · Score: 0

      I love wasabi

  119. Linux is BANNED in my cumpany. by Anonymous Coward · · Score: 1, Funny

    Use linux, even trying to slip in a knoppix disk will get you FIRED! Why? Because KDE gave my boss nightmares due to its persittant use of the K, Kde, Kthis, kthat, kshit, kcrap, kkk. So our boss who is ironicly called Kharles Klapton has banned linux pernamently.

    Posting anoynmously from Kracksburg korporation.

    1. Re:Linux is BANNED in my cumpany. by kfuq · · Score: 1

      maybe you should have used gnome..


      LOL

      --
      iF yOu WAnT to C YOUr iP agaIn gAThEr tWO MilLIon dOLLArS IN Non - cONsEcuTivE TweNtY's AnD AWaiT FuRThER iNstrUctIoN
  120. where I work by jafac · · Score: 3, Interesting

    Company shall remain nameless for my protection -

    The home office has a special network security "swat team". Last year, they did a security audit of our site, which consisted of trying to hack into our network, from the inside.

    They found several rogue Linux boxes, and were able to hack into them through ftpd. Holy hell was raised. All Linux was purged from our network. Oddly enough, here it is, 8 months later, and nearly every developer has a second box on his or her desk, with, you guessed it, Linux. However, it's a distribution and configuration, approved and controlled by IT.

    It's all about control with these guys. . .
    You'd think that black leather keyboards with spikes and clamps would be popular with these freaks.

    --

    These are my friends, See how they glisten. See this one shine, how he smiles in the light.
    1. Re:where I work by dustoffx · · Score: 1

      Maybe they do.

      Well, for mice, anyway.

      --
      Receive Heaven's Punishment!
    2. Re:where I work by Anonymous Coward · · Score: 1, Insightful

      My bet is that in this case had developers asked for Linux boxes they would have got them. Holy hell was raised because of the sloppy and insecure user installs, not out of some vocational personality defect.

    3. Re:where I work by Arandir · · Score: 1

      ...from the inside...

      Next up on Nightly News: Internal Affairs discovers firearm without a safety lock in Police Chief's desk drawer.

      I shouldn't laugh. My own company has a policy about locking your file cabinets, even though the building has locks five times as secure on all the doors.

      --
      A Government Is a Body of People, Usually Notably Ungoverned
    4. Re:where I work by Shimbo · · Score: 1

      They found several rogue Linux boxes, and were able to hack into them through ftpd.

      It's all about control with these guys. . .


      So users install Linux, are unable to do it properly and compromise the site security. System guys take over and instead of banning Linux they evilly provide them with properly configured boxes.

      Geez your head really is screwed on ass backwards.

  121. I don't believe it by msafar · · Score: 1

    The number of "end-users" with the skills, permission and motivation to install Linux on their work desktop is extremely low. I don't doubt the trend, but I do doubt that it would have any significant effect on desktop penetration.

    The Linux crowd cracks me up. Yes, Linux is important on the server. Yes, it poses a threat to Windows 2003. But let's not forget that Windows took a full 10 years from 1.0 until 95 when it really busted out on the desktop and took over DOS once and for all. The Linux desktop hasn't even started down that path in my opinion, except with hobbyists, UNIX-bigots and a few European workers that are finally glad they have a PC.

    When Open Office can read and write MS Word/Excel files with absolutely no damage to the file or the rendering, then I'd think Microsoft needs to start worrying. Until then, it's just a hobby.

    1. Re:I don't believe it by KevinJoubert · · Score: 2, Insightful

      Actually, in almost any corporate environment ...
      " The number of end-users with the skills, permission and motivation to install" WINDOWS or any other OS "on their work desktop is extremely low."

      I really can't stand it when people proclaim that Linux is some how more complicated than Windows. It most certainly is NOT. Its simply different.
      There is something fundamentally wrong with the world when something like a Linux desktop is rejected not for its own faults, but because its "different" than what we are used to... and what we are used to... it sucks.
      I doubt very seriously that any corporate environment, excluding a place that actually DOES computer support or development of some kind, has more than a handful of people that could install anything on any system.

      I think what MS needs to really worry about is the world waking to the fact that there are other options beside MS's proprietary document formats. In the meantime... CrossOver office anyone?

      --
      -K.
    2. Re:I don't believe it by sloanster · · Score: 1

      These microsoft heads crack me up with their smug assurance that linux will never threaten the near monopoly of microsoft on the desktop.

      When one version of ms office can successfully read and write ms office files of different versions with absolutely no damage to the file or the rendering, then I'd think maybe microsoft is getting a clue.

      Until then open, standard file formats are the only thing that makes sense. Your microsoft worship is a luxury you may not always be able to afford.

    3. Re:I don't believe it by KevinJoubert · · Score: 1

      "When one version of ms office can successfully read and write ms office files of different versions with absolutely no damage to the file or the rendering, then I'd think maybe microsoft is getting a clue."

      fscking classic... and oh so true.

      --
      -K.
    4. Re:I don't believe it by Anonymous Coward · · Score: 0

      But let's not forget that Windows took a full 10 years from 1.0 until 95 when it really busted out on the desktop and took over DOS once and for all.

      Windows didn't break out on it's own to take over from DOS. Microsoft forced Windows on it's users by bundling Windows with DOS in the form of Windows 95. (Gee...that sounds remarkably familiar....) That's not people choosing Windows....that's MS choosing Windows for you.

    5. Re:I don't believe it by msafar · · Score: 1

      Hmmmm...there seems to be a lot of misunderstanding of what I'm saying. I think, in a vacuum, Linux is a fine desktop operating system. But we don't live in a vacuum, we live in a world where corporate IT standardizes on a single platform, and that platform has to support application choice and interopability with customers, suppliers and partners.

      The result is: If my workstation can't open a complex Word or Excel document, edit it, and send it back with perfect rendering, I've got a problem.

      I won't claim to be an expert, but I believe the Windows 2000/XP desktop to be far more supportable in a large IT environment than Linux.

  122. Re:[Adv] VMWare by molarmass192 · · Score: 1

    There's a HUGE difference between getting the SOFTWARE and getting a LICENSE. SuSE gives you the software too, but no license. Ditto for Mandrake. You still need to shell out $300 for a license. This is the sole reason why I refuse to purchase a VMWare license and stick with my $90 Win4Lin. If VMWare offered their product for $100-$125, then they'd get me as a customer.

    --

    Good people do not need laws to tell them to act responsibly, while bad people will find a way around the laws-Plato
  123. Uhhhhh Not exactly. by TheLinuxWarrior · · Score: 1
    Stumbled? No.

    Created? Yes.

    I work for a huge company 100K+ people 190+ subsidiaries. Until recently, Linux on anything was a no no. I'm happy to report that tomorrow we're scheduled to receive our 32 node HPC Linux cluster from IBM (and we actually got it through official channels).

    If for some reason I disappear over the weekend, then I guess that'll just go to prove that someone at corporate really doesn't want Linux in there.

  124. Your Fantasy... by Anonymous Coward · · Score: 0

    ...is lame. Go experience something in hopes that you might have better fantasies.

  125. We try to encourage it here... by Uriel · · Score: 1

    ...but nobody wants to do it. Even the programmers don't seem to want to, sadly.

    1. Re:We try to encourage it here... by sloanster · · Score: 1

      That is sad, you seem to be working with very dull people - perhaps they are all mcses, working on nothing other than microsoft-centric technologies. For them, linux is a threat, something best ignored in the hope that it will all just go away, so that they won't have to learn anything new.

  126. Yet another reason why Ghost rules by wernst · · Score: 1

    Formatted with extreme prejudice, eh?

    Its for nimrods like you with wonton disregard for my data that Ghost was invented. Every few weeks (or days, sometimes) I Ghost my machines to another drive (or CD rom in some cases, or now USB external drives) just because some idiot in IS decides that my data is less important than his/her rules.

    I can't tell you how many times being able to roll back a "fix" has saved my fat from the fire.

    And I'm not talking about when a security patch gets installed that actually works seamlessly. When I don't know about IS updates, I'm happy, because I'm still working. I'm talking about those Monday mornings when you boot up your machine and it crashes every time you try to print, or click the Start button, or move the mouse. Yup, some IS genuis didn't bother to reboot the system and check to make sure things worked AS THEY FOUND IT before moving on to the next PC to "update". I've had co-workers lose months of work because the IS "solution" to a crashing PC after an update was to reformat and reinstall. Fucking brilliant!

    As for Rogue OS'es, in my experience, the average IS person isn't skilled enough to recognize one if it bit them in the rear. If they did and they reformatted my drive without asking, well, not only would I have a Ghost image to get right back where I was, but there'd be a quite a few angry calls, I think.

    1. Re:Yet another reason why Ghost rules by Anonymous Coward · · Score: 0

      Let me get this straight... your colleagues work on something for months, without bothering to backup their work in any way? They are morons, and if you don't see that as their problem, you are also. There's never an excuse to lose more than a day's work, even if your computer spontaneously bursts into flame.

  127. MS IT gui based button pushers are the problem. by ratfynk · · Score: 1

    The only qualification for most IT workers is a little piece of paper that says you can run Windows
    Server. This does not mean you really need to know squat. Just which GUIs to use to assign priviledge, and how to set up networking clients for business, if you need big data bus application links then you need someone with real knowledge. After taking an MS IT course you might as well be brain dead. Which unfortunately most MS trained IT people are.

    --
    OH THE SHAME I fell off the wagon and use sigs again!
  128. Look at the sysadmins waving their wangs around by hayden · · Score: 4, Insightful
    "It's my network and anything that I don't know about gets trashed" blah blah blah *thumps chest*

    If you were actually any good at your jobs you should be asking why these people (who may or may not be risking their jobs) feel the need to install linux? What is it that the current policy doesn't provide? Why has sysadmin become so unapproachable that they did it without asking (this should be an easy one)?

    Actually do something useful rather than wandering around the network marking your territory.

    --
    Nerd: Derogatory term typically directed at anybody with a lower Slashdot ID than you.
    1. Re:Look at the sysadmins waving their wangs around by swordgeek · · Score: 2, Insightful

      Balls!

      First of all, I don't do desktop support--I work entirely on the heavy server end, and am fairly regularly calling the desktop guys for permission to install this software or that on my PC (if I have one--most of the time these days, a Sun box does everything I need).

      But any medium+ sized company will have a policy (and it's generally a blanket policy) about installing software without authorisation. This is a Good Thing, with a Good Reason: Companies are LIABLE for their machines!

      Install a virus on your work PC and infect half the planet? The company is liable. Put Kazaa (etc.) on your machine and download (or worse--share out) hundreds of movies? The company is liable for the copyright violations. Install Linux and cause various problems due to bad software (which is what the article indicated), and the company's liable. Install Linux, lock it down intelligently, and do your job productively with it, and...there's no real liability. Should the company then have a SPECIAL rule for ***YOU*** because you're so elite and well, special? No. It's very simple. If the policy is there, then anyone who violates it deserves to be dealt with ruthlessly, regardless of the motives.

      ASK your administrator, dammit! Even those funny Windows folks are usually Good People, and quite happy to let you do your job better, as long as it doesn't screw up the rest of the company. If you decide to ignore them and do what you want, and then get in trouble, do you know how much sympathy you get?

      Zero.

      And do you know how much sympathy you deserve?

      Zero.

      --

      "People who do stupid things with hazardous materials often die." -- Jim Davidson on alt.folklore.urban
    2. Re:Look at the sysadmins waving their wangs around by cranos · · Score: 1

      So speaks a user. As a sys admin it is a dog getting support calls for stuff that you didn't know was on the system and hence have no idea how to support. Also you don't know what sort of security issues come with the new software, nor do you know what the hell it does.

      If you don't like what you use, then get your boss to ask for something better. Don't automatically blame the Sys Admin. Sure there are some shocking IT Support teams out there but for the most part they know what they are doing.

    3. Re:Look at the sysadmins waving their wangs around by D'Arque+Bishop · · Score: 1

      "It's my network and anything that I don't know about gets trashed" blah blah blah *thumps chest*

      As opposed to, "It's my workstation and I should have the right to install whatever tools I want on it?"

      As a previous poster pointed out, most medium+ sized companies have a policy they follow. Corporate management folks LIKE policies. It's not the user's job to determine whether said policy is right or wrong. If you want something other than the standard, would it really hurt to ask? I think a good reason a lot of these posts about Linux installs bother me is because it seems like a number of them didn't even think to ask IT. Who knows... if you have a good enough reason, maybe they'll let you do it! If they don't let you, don't just assume that it's because they're on a power trip. They've got their own problems and policies they have to deal with.

      I work desktop support and some server administration for a medium-sized company. Our standard desktop OS is Windows XP Professional. On the other hand, right now I'm using a Powerbook with Mac OS X 10.2 as my primary work PC, and before that I used a Compaq laptop running Red Hat Linux 9. Even though I'm IN IT, I asked the sysadmin for permission before running these OS'es. If someone wants to run something other than WinXP here, they should ask permission. I ask no less of myself.

      Just my own personal $.02, which does not reflect the views of my employer in any way, shape, or form....

    4. Re:Look at the sysadmins waving their wangs around by Tsu+Dho+Nimh · · Score: 1
      Good thinking, and I regret the lack of mod points to bestow on you.

      When ways to bypass IT's policies start springing up like mushrooms, it is a clear sign that the corporation's infrastructure rules have become so inflexible that they are getting in the way of getting real work done. Usually this means that the PHBs have been sold a bill of goods by someone, and didn't take the time to check with the people who actually make money for the corporation what they need.

  129. Re:"Insecure" Linux, Cygwin and RedHat by natmsincome.com · · Score: 2, Insightful

    Management!

    I don't really care about support either. Most of the time I don't use it and when I'm forced to I'm often way out of there league already.

    The main reason why you pay for support that you don't need is for managemnet. Support is like insurance you don't really want to use it but if something goes wrong you want it to be fixed. If you died tommorow they want someone that can fix it if it breaks.

    So while it doesn't make sence at first in the end it does.

  130. If IT only knew... by Anonymous Coward · · Score: 0

    I know of MANY "under-the-radar" Linux installations at the large defense-industry company I work for. Linux is the OS of choice here for running batches of system simulations (the SGIs are a pain). Red Hat is the most commonly installed distro but there are some Mandrakes as well and I am a Debian zealot. We have a (small) Linux Users Group with regular meetings to help newbies get started and generally promote free software. However, I avoid letting IT know specifically about my Linux installations because Windows is THE officially supported desktop OS and who needs hassle from the man. I wonder how much the company is paying for the Windows software installed but unused on my "officially imaged" drive.

  131. anyone sign a Computer Usage Policy? by pigfukr · · Score: 1

    All the places I've worked had them and an unauthorized replacement your OS or what was most probably pirate software (VMWare) would easily be seen as grounds for termination. ...or did I always work for pricks? :)

    --
    pigfukr
  132. This IS the 1% by pelorus · · Score: 2, Informative

    I'd love to know where they get this 1% from anyway.

    Last big company worked for there were maybe 150 people with Linux installed at the desk. Out of 96 thousand employees.

    I'd REALLY like to know where they get the 1% figure from. (looks at the boxed, downloaded and magazine-front Linux CDs on the shelf and his ZERO Linux installations)

    1. Re:This IS the 1% by KevinJoubert · · Score: 1

      Truth is.. its total bull. No way to know how many Linux desktops are out there. Can't do it with servers either. (Sorry IDC).

      It could be far less or far more. No way to tell.

      --
      -K.
  133. Not exactly.. by Anonvmous+Coward · · Score: 1

    "If you are a sysadmin, in an organization that runs Windows on the desktop, have you stumbled on many unofficial Linux installations?"

    No, but I do have a software dev team that is running Win2k under VM-Ware because their desktop experiences with Linux haven't exactly been grande. In Linux's defense, though, our dev platform is Redhat 7.3, and RH isn't exactly well known as a desktop OS. If we were using SuSE or something I'm not sure that'd be happening.

  134. Unbelievable! by Anonymous Coward · · Score: 0

    Currently, we write incident reports in Microsoft Word using a template and save them on a shared drive accessible only to the security team. When an incident occurs that might be similar to something that happened in the past, the only way to find such incidents is to do word searches or read through past reports.

    What kind of retard would think this is a good idea? An IT department that can't come up with a sensible way to manage its own data is inexcusable. It's flabbergasting.

  135. Damn.. and I just made the switch... by marcushnk · · Score: 1

    I wish they'd told me earlier.. now I'm going to have to rebuild ans swap back :-( :-P

    --
    "Consider how lucky you are that life has been good to you so far. Alternatively, if life hasn't been good to you so far
  136. about 10% here by Orthogonal+Jones · · Score: 1

    We have about 145 Linux machines here. Windows desktops of laid-off employees are re-formatted and added to the penguin cluster.

    But those aren't desktop machines. Most of the 60 or so desktops are Windows.

    I have 6 Linux desktops scattered around the lab for lab control and display. And the one in my cube is, of course, Linux.

    Just easier in an engineering firm, I guess.

  137. It depends why by xixax · · Score: 1

    I am posting this from a Debian desktop that used to be a corporate Win NT desktop until one fateful evening. ;-p

    Simply put, the change order process is too slow for dev work. I want something changed, I change it. This all came about because of the glacial nature of our outsourced support and is now an accepted part of how we do things. I have promised BOFH that I will not to do stupid things like advertise my desktop as a primary domain controller, and apps go into production through the normal channels.

    Virii? *if* such a beast appeared and *if* I was stupid enough to run it, it would trash my userland stuff.

    Desktop licence management? There's not a single proprietary application on this box.

    Security? security.debian.org. And it's not visible to the Real World anyway.

    As you said, the *company* owns the machine. Be sure you check with the relevant exec lest you trash something important.

    --
    "Everything is adjustable, provided you have the right tools"
    1. Re:It depends why by Nakarti · · Score: 1

      Contrary to your point(it seems) your machine is now authorized, given that you have checked in with the SA about it.

  138. Underground network by Nucleon500 · · Score: 2, Interesting

    At the government lab where I work, Linux has penetrated much more than IT knows. We have an extremely braindead IT staff, and the five-year-old unpatched Groupwise servers simply don't work. The email system is completely bogged down with the viruses everyone trades. The people in my research group got fed up, so we finally just set up our own network. It's mostly Ethernet, with some patchy WiFi. The cables are hidden in PVC piping. This is a lab, so nobody notices when new pipes get put up. We have a few Linux servers doing mail, a website with a Tiki, Jabber, and a few other assorted tasks, as well as a bridge to the real network. IT has no idea, but I can't help feeling that in a few years, they're going to notice that all the scientists are using Linux.

  139. Sigh, Linux FUD... by Anonymous Coward · · Score: 0

    Let's see. Any anymous writer claims that some
    unknow number of rouge installations have
    occurred in his unamed company by not just
    developers and admins but average joe users
    Uh-huh, very believable. Your average joe user
    doesn't have a clue as to how to install Linux.
    Having used Linux desktops I can only say that
    compared to XP or OS X they suck. Big-time.

    1. Re:Sigh, Linux FUD... by sloanster · · Score: 1

      Surprise, surprise - clueless ravings from an anonymous coward... I suppose I wouldn't want anyone to know who I was either, were I to go around spouting such silly nonsense...

    2. Re:Sigh, Linux FUD... by Anonymous Coward · · Score: 0

      You're either a liar or stupid. I'll let you choose.

  140. Dear civilengineer by Letter · · Score: 1
    Dear civilengineer,

    By the powers vested in me by the gods on Mount Pentium I hereby proclaim you a verifiable .NUT.

    billg

  141. ARGHGHG!! There's no such word as "boxen"!!! by TrollBridge · · Score: 0, Troll

    You people sound like fucking morons when you say that! It's just as bad as "virii"!

    --
    There's a Mercedes gap too. I want one and can't afford one, but it's not government's job to do anything about it.
  142. Linux licence manager by xixax · · Score: 1
    No, really! There is such a thing as a Linux Licence Manager.

    Xix.

    --
    "Everything is adjustable, provided you have the right tools"
  143. ugh.....firewalls? by mytador · · Score: 1

    What I dont get is how a desktop behind a firewall by mere nature of installing Linux on it present a greater security risk than any other OS? Nobody from the outside world should be able to connect to it, so the vulnerabilities mentioned in the articles such as issues with ftp/ssh services, etc dont matter much. As far as having some spyware/trojan connect to the outside host and pipe some secret data over, well there are much more of thos for the Windows platform I suppose. So I dont get whats the issue here? A knowledgeable sysadmin should be able to restrict external access as much as possible while allowing the employees do their job regardless of the OS they are running.

    1. Re:ugh.....firewalls? by KevinJoubert · · Score: 1

      The issue is... "Please don't expose my lack of knowledge, foresight, and talent at doing my job."

      --
      -K.
  144. Total FUD, par for the Computerworld course. by twitter · · Score: 3, Interesting
    Security? Give me a break. The article was written by someone plauged by a windoze worm. That's how they made the "discovery", the poor man had to walk all around the building to fix the thing. How does anyone leap to the total non-sequetor:

    The weaknesses from the rogue installs ...come from the installation of third-party applications and utilities, which can leave a desktop or server vulnerable to attack if set up incorrectly.

    Huh? What total Microsoft brain washing! What is a "third party application" in the free software world? This dude has his head shoved so deep into the M$ world that he confuses all the crap and spyware that accumulates on windoze boxes and runs as root with free software. I don't know how he's transfered his complete lack of control over Windoze onto software that works. I don't get it.

    He goes on, after mentioning that he might be man enough to run Red Hat. He thinks it could do his company good to replace the hideous pile of Word Docs that is their QA tool because it sucks to have to do a "word search" to find information in the 300 reporst/year they generate. So true, just putting those things on a Samba server so you can use grep and find would be really helpful. Imagine how nice his life would be with a nice little mySQL/PHP webform for entry and search instead of a Word template. Progress, forge on brave man!

    But, oh no, he shrinks from the fear of vulnerability:

    For example, there always seem to be vulnerabilities associated with programs such as file transfer protocol, sendmail and Apache. And other open-source software is vulnerable, especially when the developer hasn't written the program with security in mind.

    Poop. Plain and simple poop. Sendmail handles most email. Apache handles most web sites. Who needs ftp when you've got ssh? Well, anonymous ftp is a nice way to share big piles of files and programs like proftp are plenty secure. This is total shit to scare people who don't know what file tranfer protocal is, but like the ease of windoze file sharing. It's ignorant if not intentionally misleading. This line says volumes:

    We can't eliminate Linux

    No, but some fools wish they could. Other people everywhere are learning all the good things free software can do for them.

    Anyone who's worried about security should use Debian's stable distribution. Not only is it all field tested, upgrades can be applied everyday from http://security.debian.org via shell script. Unlike the windows world, these updates install easily and don't break other "third-party" applications.

    You say:

    This could make the case for desktop Linux look worse, if people are not securing their dektops and/or keeping up with security updates.

    That seems to be the intent of the article. Fortunately, only the very ignorant will pay attention to such nonsense and it can easily be deflated. Microsoft is going to have to try much harder than this to keep people away from superior software. Then again, I'm not sure how they can do that. The thing that makes the best case against the Windows desktop is it's record. That now including the author's laborious treck around his company caused by yet another Windows failure. There is not software anywhere with such bad performance.

    --

    Friends don't help friends install M$ junk.

  145. Unoffical instals of ANYTHING is not allowed by nurb432 · · Score: 2, Insightful

    While many here may think its cute, its a bad bad bad thing to have users running around installing an OS on your network with out your prior approval.

    Not cool.

    --
    ---- Booth was a patriot ----
    1. Re:Unoffical instals of ANYTHING is not allowed by Anonymous Coward · · Score: 0
      Wow, your dick must be so big! Let us all kneel before the master of IT and lick his mighty balls! It's my network, mine, I tell you! Don't make me piss on it again! Hey, the left one's getting dry, keep it coming! The company's net today, the world tomorrow. I will build an empire of neutered software, and feed on the blood of users. Don't stop! Bwahahah!

      *bite*

      OW!

  146. Linux by DarkAngel777 · · Score: 1

    I have 1 user that installed linux, because I was messing with creating a linux router box, and now he has linux duel booting on his box, and on all of his home pc's, he convinced one of my techs to put it on his laptop, and now I have 2 pcs duel booting linux to learn it better. I am about to install my 3rd duel boot on my PVR box to see if I like some of the linux PVR software better than the ATI PVR which isn't very good at all. So I'd say that no it wasn't hidden, but it's spreading around IT like wildfire.

  147. Re:MS IT gui based button pushers are the problem. by Anonymous Coward · · Score: 0

    ITT shit eating grin loosers.

  148. Security Patches by willy134 · · Score: 1

    Isn't there a problem with getting windows users to update their machines? Everywhere I have worked they never have put in the security patches.

    Wasn't there a virus the used this knowledge??

    --
    Can you ping me now?... Good!
  149. Dream On by nzyank · · Score: 0

    You'll see what you want to see. Do you really think hordes of people are installing Linux on their office machines?

    1. Re:Dream On by RevSmiley · · Score: 1

      Or they are compromised as soon as they boot up.

      --
      As you can see I don't care about my karma.
  150. close, by Anonymous Coward · · Score: 0

    but if "a sysadmin .... obviously has a hole in his security plan....."

    I was going to comment on where the obvious hole actually is (ok, I can't resist, its above his or her shoulders), but the bottom line is if a sysadmin, or more acurately from what is described, a network admin doesn't know about the linux boxen, he shouldn't be admin'ing said network.

  151. Re:ARGHGHG!! There's no such word as "boxen"!!! by WatchMaster · · Score: 1

    boxen = German-style plural for "box", especially popular with KDE fans. Weissen?

  152. He's got a point you know by adagioforstrings · · Score: 2, Insightful
    A lot of people here are bashing this guy, some even with some good reasons. However, it really comes down to company policy. At my workplace, and probably his, there is little room for interpretation or bending of the rules. My company is Fortune 200, so standardization is a very big thing. We use Windows, which wouldn't be my choice of an OS, but it's not my choice!

    The company makes volume licensing agreements which means we HAVE to use certain software. Since software licensing can be a liability, ALL machines are required to have audit software, including *nix boxes! In fact, Linux is explicitly prohibited except where VP approval is obtained, so as SA for my site, I definitely would show extreme prejudice if I found a Linux installation. Moreover, we even tell users that we reserve the right to reimage their PCs at any time. They keep things on their local drives at their own risk. Again, it's not about the way *I* think things should be (because I definitely hate administering Windows boxes), it's about what I'm paid to do (and when I'm ready to find another job because I don't like these software policies, I'll do that).

    The point is, if it's against the rules, prepare to face the consequences, whatever they may be (be happy if your workplace doesn't care). If you get approval to run a box, good for you, but your local IT damn well should know about.

    1. Re:He's got a point you know by Anonymous Coward · · Score: 0

      Moreover, we even tell users that we reserve the right to reimage their PCs at any time. They keep things on their local drives at their own risk.

      Do you occasionally burn all their papers as well?

    2. Re:He's got a point you know by adagioforstrings · · Score: 1
      I know you're trying to be cute, but you seem to totally misunderstand the point of doing this. Users have private folders on network drives to keep their files. The network drives are backed up, which local drives are not. Their profiles are stored on these network drives, so they don't have to lose anything when we reimage.

      Basically, if the computer exhibits those wierd problems that are difficult or take a long time to fix, we save everybody's time by reimaging. The user loses only the things which they kept on the local HD (which is what the network drives are for) and that's it.

  153. Re:"Insecure" Linux, Cygwin and RedHat by g4sy · · Score: 1

    I quote the article: "The problem is that each Linux installation is different, and that's a security issue."


    What he means to say, or should say, is "The problem is that we don't feel like security policies for the various distributions that exist". Let me explain.

    Cracking 101: a homogenous network is really easy to break. I'm not revealing anyone's trade secrets here. That's basic security. The dream network to have if you never want to get rooted, is a network with many linux, osX, beOS, *BSD or any other modern unix variant, being correctly configured. This is heterogenity. It is a balace. It is the yang of sysadmin

    Having several years of sysadmin under my belt, I know that this might require more thinking and potentially more working on the security guys part (i'm a security guy). But it's the best.

    If you can think like a cracker, try to imagine finding some foo on how to root a router running Dell Unix System V/386 R4.04 issue 2.2 or perhaps ESIX System V R3 and R4. Ok i know that redhat kinda likes to use system V type scripts sometimes, but i don't think that there are very many EASY cracks for all of the variety. Go try googling for how to hack a network with every OS in use today

    I'm not condoning tring to install a different distro or even different unix on everyone's desk, that would be too much of the ying of sysadmin and not enough yang. But we need to get away from M$-type "security from obscurity" and "usability from homogenity" type ideaology. Today's booming antivirus and security industry shows that microsoft's ideas don't make the world a more secure place.


    --
    somewhere, on a Big Red Sign:
    if(color==blue){speed--;}
  154. Poorly managed Unix boxen... by Kris_J · · Score: 1

    I have friends who work in IT where Linux boxes are popping up "unauthorised". Mostly they're compromised within hours of being installed and provide real headaches for support. I think anyone that pulls this stunt gets sent the bandwidth bill and has their IP addresses blocked at the gateway to the organisation, but don't quote me.

  155. Only You Can Prevent OS Monopoly by handy_vandal · · Score: 1, Funny

    "If you are a sysadmin, in an organization that runs Windows on the desktop, have you stumbled on many unofficial Linux installations?"

    And if you are a sysadmin in an organization that runs Windows on the desktop, but you have not stumbled on many unofficial Linux installations ... get busy!

    --
    -kgj
  156. Re:Now that's one of those Ask Slashdots even I ca by uberdave · · Score: 1

    Well, I don't know about +4. "No" is not particularly informative. Now, "I admin 500 workstations at a manufacturing plant (lots of CAD), plus do on the side consulting for an insurance company, and I've never seen a linux desktop, nor have I ever been asked about one. When I brought it up at our weekly IT meeting, I got a lot of blank stares. (Hey, at least their eyes were open [grin])" might have earned you a +4.

  157. not in this world by Anonymous Coward · · Score: 0

    i do not know about you. but my work does not hire the best. they are alway firing someone to replace them with lower wage employee's. so when you hire bottom rung people, you get bottom rung results. These people can barly turn the computers on. they just shut them off also. (do not shutdown properly) I know I am asking too much. My thing is if you are having that many problems you should find a diffrent line of work......

  158. Re: _A&T Manual ;-) by husker_man · · Score: 1


    Personally, I prefer my experts well done, with a bit of parsley on the side ;=)

  159. Re:Uhhhhh Not exactly. by kill-1 · · Score: 1
    I'm happy to report that tomorrow we're scheduled to receive our 32 node HPC Linux cluster from IBM (and we actually got it through official channels).

    Just out of curiosity: What are the unofficial channels to get such a cluster from in a 100K+ employees company?

  160. Attempting linux corporate desktop by snafui · · Score: 1

    At my company, my friend and I run IT and use a Win2k domain. Another guy runs our public servers and uses a mixed *nix set.

    I'm a BSD man at heart and use a BSD machine as my primary workstation for coding, managing the network, and I use X2VNC from it to connect to a Windows workstation just for using the "computer management" tool on the domain and a few other Windows centric tools.

    Since I started using a FreeBSD machine on the LAN, a few others have asked me if they could too including our NOC and my other IT guy. This is great for us unix and network junkies, but what about the common corporate desktop user?

    With the help of the other two guys I mentioned above, I've started a project of setting up a linux desktop that any of the employees can use. I'd love to give some of the more experienced computer users the option to try it for a few weeks and teach them about unix at the same time.

    We've got some Windows apps that are used quite heavily (and were priced heavily too) that I have to contend with. For starters, and my nemesis thus far, Interactive Intelligence (I3) Client for our Cisco IP Phone system. I've managed to get it working with WineX but not so stable with Wine.
    Next on the list of course is Outlook and the MS Office suite. I haven't seen anything nearly as tight as the Office suite and certainly not compatible with it. Yes yes people say "open office, evolution, etc" but my experiences have proven that the average corporate bonehead doesn't want or need the hassles I've had with these apps when Office integrates them so smoothly. I'm not dismissing open office and evo, but they aren't there yet.

    All the other apps we use I've managed to squirrel away into Citrix. The citrix ica client for linux is great (but seems to have probs with xinerama btw). I've taken apps that we never intended or needed to be on citrix and put them on it just for easy use in linux. I'm still not quite sure how licensing will work with those apps but I'd say that if your citrix server(s) can handle it, get your windows apps on there and linux desktops are cake.

    I read a post, maybe on ./ one day, of someone saying they rolled out linux desktops at work and to manage application installs on workstations they made everyone mount /home and /usr/local via NFS. That way all they did was pump out a basic image with some /etc tweaks and everyone mounted their homes and applications via NFS so setting up a new workstation was incredibly painless. I'm a huge fan of this idea and definately want to try it.

    Another idea lulling around was the linux terminal server project. We tested it on a 100mb lan with an AMDk-2 500 w/ 256mb ram as the terminal server and the same machines as clients and it was pretty darn quick, almost no noticible lag. I'd have to say with a beefy server we could support a good number of people off it.

  161. fire them all. by chemburn · · Score: 1

    Do you guys have policies against installing things like that? If so, get those policies reversed to say that anyone that doesn't install something is fired. Then fire everyone who doesn't install linux.

    1. Re:fire them all. by RdsArts · · Score: 1

      And remember: It's about choice.

  162. Woops, I'm sorry by Anonymous Coward · · Score: 0

    I'm one of those non IT guys who secretly installed linux. IT found out blew a fit, and told me to get rid of it. I've been really busy, and I still haven't got around to it.... :)

    We run crappy win98 here, and I really got sick of it crashing....

  163. Re:they better not-Divisions. by Anonymous Coward · · Score: 0

    "You can't pay me enough to put up with that type of bs. I quit!"

    [And from a nearby unemployment office a shout arises. Coming from a geek who's been unemployed for a year. While off to the side, shuffling noises come from the feet of one Cyno, recently unemployed because he couldn't tell work from play. NEXT! the clerk shouts.]

  164. Typical arrogant IP puke by Anonymous Coward · · Score: 0

    You may moderate this down to (Score -1: Truth Hurts)

    If engineering management wants one or more Linux box(es) for product development or other reasons that advance the business goals of the company and IT objects, too bad. It is the company's network, not the IT guy's.

    Hopefully the two would work together and make sure that there are no problems (security or otherwise), but in your case, I doubt that it could happen since you act like your employer's network is your own personal fiefdom.

    And you wonder why many engineers think IT monkeys should be taken out and shot.

    Think I'm just being a smart-ass? Our IT moron tried to have me written up for exactly that - installing a Linux box and connecting it to his precious network. He lost. He was involuntarily removed from his position a few weeks later (I wasn't the first one he did this to).

    Engineering overrules IT, but like I said, it is better for all to work together to avoid any problems. You should be more cooperative while making sure the network continues to function properly.

  165. Re:[Adv] VMWare by Anonymous Coward · · Score: 0

    They used to.

    I bought a license a while back and it was good for a couple of updated versions too.

    but that is also offtopic (but moderately insightful to the already offtopic parents)

  166. booting with knoppix by Anonymous Coward · · Score: 0

    Knoppix is a very cool distro, it actually feels much crisper and looks better than my redhat 9 installs.

    The only thing about knoppix that concerned me, was that an 'iptables -v -L ' will show you that the default has no firewall rules at all! Granted that all knoppix is running is and Xserver and dchpclient by default, maybe it is not a problem?

  167. Re:where I work-Abuse me. by Anonymous Coward · · Score: 1, Funny

    "You'd think that black leather keyboards with spikes and clamps would be popular with these freaks."

    Hey! I wouldn't mind a keyboard done in leather and crome, with clamps, and rings. Whips and chains...er, um. Excuse me I got to go. My dominatrix is call me.

  168. Gentoo myself by iso · · Score: 1

    When I started my current job in January I was given a Windows 98 box (just like everybody else in the sales department). After having a slew of (usual) problems with 98, I started asking around and found that many of the developers were running Red Hat. I decided to avoid Red Hat but needed something more reliable than Windows 98 so one weekend with the help of Partition Magic I installed an "undercover" copy of Gentoo.

    FWIW I had never used desktop Linux before (except one brief stint in '95 that didn't go well), though I have been running Linux on the server side for years (mostly Debian). So far I've been a thousand times more productive on KDE than I was in Windows. It's amazing to see the things that are difficult or impossible to do on Windows that I can't live without now.

    I'm officially a convert! Gentoo & Mac OS X at home and Gentoo at work. And yes, my box at work is very secure :).

  169. Oh, they know. by twitter · · Score: 1
    No one in IT would need to know what I was upto.

    They might start watching you when your computer does go down with the latest worm, like the author had to go hunt down on foot. Runnig from a CD is one of the least secure ways to run free software, but it will never be 1/10 as bad as running Windows. These click and drool administrators live in Microsoft's reality and have no clue.

    Microsoft is working hard to eliminate this. Look for them to tell their slaves to password bios till Paladium comes. The idiot author summed up his position in that article with, "We can't eliminate Linux" as if that were a desirable goal. Computerworld sucks.

    --

    Friends don't help friends install M$ junk.

  170. I run it by Anonymous Coward · · Score: 0

    I run a Linux desktop within a Fortune 150 company. Some of the research staff I work with have their desktop machines dual booting (with one of the partitions being rarely used). I'm pretty sure none of these boxes show up on the 'official' radar as anything by Windows boxes.

  171. Please think before firing up the flame-o-matic! by Anonymous Coward · · Score: 0

    Installing VMWare can save HUGE amounts of time for users who do product development and testing. I happen to work for a very large (about $5,000,000.00/year in sales) company and we find it to be a major productivity booster. It also helps relieve the load on our already strained IS staff (they no longer need to re-install a virgin version of the OS for us to test applications as we develop them.)

  172. Re:I'm not a sysadmin ("infiltrating" a MS office) by RedneckNinja · · Score: 1

    I'm not a sysadmin either, but primarily a hardware guy. I kinda snuck Linux onto my workstation without anybody actually noticing for some time. Basically I started with an XP install...and a 4 gig drive on an old Pentium II. I complained about a lack of space, and was given another drive..I installed Debian into a 1 GB partition carved off the new drive, and started to experiment to see how well I could get it to work on our exclusively Windows network.

    Initially I still used Windows for most of my work. But I eventually got file and print to work with SAMBA, and the Lotus Notes client to work with WINE (using instructions from IBM's website, no less!). I found I had to upgrade WINE to a later version for Notes to work 100% correctly, I upgraded Mozilla to 1.2.1, and installed OpenOffice.org and mplayer. Almost everything else is from Debian stable.

    When I was found out (boss noticed me switching desktops in Windowmaker), there wasn't much fuss. He was impressed that Notes was running, and obviously I was getting all my work done using Linux...so no problem. It's a very small company, so there weren't really network security concerns. I was able to do some other things that got their attention, like changing the login screen to feature the company logo, and access Windows sessions using rdesktop. And I was happy because I had an environment I was comfortable with.

    In the long run, Linux has even touched the server side of the company. Basically being a Sun reseller, we had stuff running on a 280-R. During a period recently where we had to change T-1 providers, we had a scenario in which we had to purchase more licensing for our Checkpoint firewall on another Solaris box in order to have some extra IPs for the transfer. I suggested a Linux solution and used a four-line iptables ruleset on an Ultra5 running Debian to replace a few hundred dollars worth of licenses. That raised a few eyebrows and along with some customer inquiries about Linux on Intel, things changed course somewhat...

    I became the company's first RHCE and with the coming of our second RHCE soon we are anticipating becoming a Red Hat distributor.

    RN

  173. Re:Uhhhhh Not exactly. by TheLinuxWarrior · · Score: 1
    Well, I suppose we could have taken the pallets of Dell desktops that were phased out in favor of newer equipment and used those. Since we're research and have our own facilities resources, we could've kept that quiet for a while.

    However, the machines we would've ended up using would have of course not been anywhere near the dual 2 GHz servers that we bought. The other downside if we had tried to do it ninja style is that we wouldn't have been able to buy vendor support.

  174. Dual Boot by AHumbleOpinion · · Score: 1

    New machines are not necessarily needed. I'm guilty of such Linux/BSD installations but my systems are configured to dual boot, a small FAT32 partition to transfer files locally, ...

  175. Re:Now that's one of those Ask Slashdots even I ca by Anonymous Coward · · Score: 0

    well it didn't earn you jack shit.

  176. you realise it's trivial to spoof a mac, right? by Anonymous Coward · · Score: 0

    subject is the message

  177. yes by Anonymous Coward · · Score: 0

    Hi,
    I am a sysadmin, in an organization that runs Windows on the desktop. I have stumbled on many unofficial Linux installations lately. IMHO, Linux is sliding in under the radar.

  178. I had to. by Anthony+Boyd · · Score: 1

    At my job, about 6 months ago, I moved from one part of a building to another. I had been using an NT system for a couple years -- it was slow, but it rarely crashed. When I moved, IT wanted to upgrade the computer to XP. I balked, but they did it anyway. Short summary: over the next 2 months, they did 3 RE-installs, with my downtime being almost 100% the entire period. I worked from home, I complained, I brought in my own laptops, but they refused to let me do an installation myself, and they refused to put me back on NT.

    Finally, I realized that my work was suffering so badly that my boss was ready to blame me. But my boss is the head of IT, and knew of the problems. So at last I took the broken computer they gave me -- which was heavily locked down (no admin rights for me, no CMOS access), pulled off the cover, pulled out the battery, waited for CMOS to clear, then installed SuSE Linux 8.1, and finally set YAST to manage packages via the network (so I didn't have to keep bringing in my CDs if I needed a new app).

    Finally, I was productive. I've had some problems for the last 3 months, though. Mozilla on Linux can't do those IE-only logins via HTTPS (the ones that require username, password, and domain), and we're heavily into Exchange server, so I had a very difficult time doing email/calendaring. Also, OpenOffice is mostly good, but some of my presentations looked BAD when I'd bring 'em up in PowerPoint. And I couldn't shut off the frigging autocomplete in Quanta. But the intranet, which is where I do most of my work, displayed fine. So I finally got some good work done. Recently, they gave me a new XP machine with some admin rights, and it's been a little better. I can fix my own problems, usually. But I've kept the Linux box, just in case. :)

  179. Yeah, yeah, yeah by Anonymous Coward · · Score: 0

    The good thing about desktop penetration versus datacenter is that every desktop users is bound to connect to the web, so it's usually very easy to gather web stats on OS changes. Of course the linux "movement" would like to ignore this fact I imagine.

    Linux is great and it has it's place, but it's never going to be on the majority of desktops. Ever. Not even 20%. Never.

  180. Oh, you have to keep it well secured by SuperKendall · · Score: 1

    Or else "they" reinstall Windows! How many Windows users have security to the level of chaining the PC to the desk and padlocking the case shut?

    Yes, it takes some careful planning to foil the evil minions of Desktop Support.

    --
    "There is more worth loving than we have strength to love." - Brian Jay Stanley
  181. Gentoo/Cygwin by axxackall · · Score: 1
    In our company developers (~20) are on the middle of their way to use Cygwin for build automation (cvs, ssh, make, gcc, python, etc). The only problem was so far when we've been using unfamous cygwin's setup - very buggy, very unstable program, a bright illustration why GUI is worse than CLI for advanced users. This problem is recently gone - now we use Cygwin port of Portage (from Gentoo) for Cygwin installation.

    Some of developers also use Xfree under Cygwin to run remotely GUI applications from few Linux servers.

    Many our developers use Linux as a desktop at home, does it count?

    --

    Less is more !
    1. Re:Gentoo/Cygwin by MyHair · · Score: 1

      That is freakin' cool. I do hate the Cygwin installer. I'm used to apt, but everyone seems to love portage, so I'll probably give it a try. (Unless someone ported apt to Cygwin already.)

      I use the Cygwin X server sometimes, too. I haven't bothered to get the rootless version working, but that will probably be cool.

      Of course your developers use Linux at home. No it doesn't count. :-)

  182. opps. by twitter · · Score: 1

    They might start watching you when your computer does go down with the latest worm is supposed to be "when your computer does NOT go down".

    --

    Friends don't help friends install M$ junk.

  183. I wish by AssFace · · Score: 1

    the users at our company can barely use Windows. If they ever did something like install Linux on their systems, I'd fight for them to get an increase in pay.

    so much of our software is vital to what we do, and it has to be on MS. I have repeatedly requested that I have permission to just port it all over to a Unix system - and they are all for it, they just don't want to have to pay for it... so I basically would have to do it all at home in my free time.
    Can't say I really want to give up my own interests to then just do it at home.

    --

    There are some odd things afoot now, in the Villa Straylight.
  184. Rogue Installs... Allow me to Retort... by Angry+Pixie · · Score: 4, Funny

    So there I am in my cubicle playing my usual rounds of mental foursquare with three other cube-mates. One of them still refers to her desktop wallpaper as a "screensaver." One of the men passes corrupted floppy disks around with the glee of an idiot passing out used condoms; and the other still thinks no one can see him playing Solitaire. As for me, I routinely spill coffee and break the no smoking policy while clogging the email system with idiotic Flash movies...

    So who and where the hell are these marauding rogue agents running around installing Linux on office desktops. It can't be IS, they're too busy, and it can't be cube workers, they're afraid of their CDROMs!

  185. hrm... stumbled... not exactly... by Simkin1 · · Score: 2, Interesting

    well... heh... I actually haven't stumbled over any installations of Linux... when I was first hired on, there was no linux... So I helped ... er... "introduce" linux to a couple of useless windows boxes. Actually I've been very active in encouraging the switching over from Windows to Linux within our organization, and am happy to say that it's giving the 'MS certified - legit' SA's of the organization fits. Funniest thing is watching their faces when the users tell them they don't want Windows re'installed... Windows Purchase = $300, Hardware Purchase = $3000, Looks on SA's faces when told their jobs are going to go away because the users like Linux = Priceless.

  186. MOD PARENT UP by Anonymous Coward · · Score: 0

    For taking the time to shoot a troll with expertise and precision. If only we could all be as talented as this man.

  187. We used to be a windoze only shop... by twoslice · · Score: 2, Interesting

    Then I installed Linux at work on a spare server (supposed to be for DRP but what the hey!). The best part is that I set it up with PXE support. I have about 25% of the company running linux without touching their OS on their systems. Just set the workstation to network boot and presto Linux (similar to Knoppix). They like it alot better 'cause they are sharing a 2.8Ghz Xeon with 4GB of RAM. Most were used to PII300's. They can always skip the network boot and boot into Windows but they are doing it less and less now Especially since I have really cool games on the server =).

    I hope to have the whole company converted by christmas!

    --

    From excellent karma to terible karma with a single +5 funny post...
  188. Actually by Bruha · · Score: 1

    Today I was browsing the network neighborhood to remap a drive to a new server and I did notice

    MDKGROUP

    So I'm pretty sure someone out there has a Mandrake install running on the network.

    1. Re:Actually by jlanthripp · · Score: 2, Funny
      Yup...either a Mandrake installation, or a Wesley Snipes/Sylvester Stallone/Sandra Bullock fan...

      Or maybe I'm the only one here who saw "MDK*" and thought MurderDeathKill...

      --
      "Alcohol, Tobacco, & Firearms" should be a convenience store, not a government agency.
  189. Actually.. by Simkin1 · · Score: 1

    Actually, the real issue with having users installing boxes, is that statistically, the majority of hacking/cracking doesn't come from outside sources, but from within an organization. I know this may sound arrogant to some, but I've found that 90% of the SA's I've met are little more than MSCE's running around touting their rubber stamp cert as professional qualifications -- or to put it more bluntly, they're morons; and frankly when it comes down to it, I can secure my own system better than any SA I've met, on top of that, since I'm the only user, and I'm constantly on there, that I will be the one to notice when things go screwy...

  190. Uhm.... by Simkin1 · · Score: 1

    Uh... actually it's very simple to find out how many linux box you have in an organization... Use a software package like SARA and restrict the ip searches to the domain/subnet of the company... you'll be able to get a full listing of each system in the subnet and a generic idea of what OS is being run... from that point... do the math.

    1. Re:Uhm.... by pelorus · · Score: 1

      that would have worked for our class A subnet and the hundreds of wee subnets we acquired through takeovers. nmap currently has no idea what OS I'm running

      Besides, the only OS that fingerprinters can reliably detect in any reasonable time is Windows.

  191. uh... ok by Simkin1 · · Score: 0, Flamebait

    well... first off, I'm SO embarassed for you. Seriously... that's the dumbest load of crap I've ever seen in response to a comment... I imagine that you're a 30 year old dork who still plays with his d&d dolls and is a member of that moronic society that goes out and practices sword fighting... ... simply embarrassing...

  192. Re:ARGHGHG!! There's no such word as "boxen"!!! by 1u3hr · · Score: 2, Informative
    boxen = German-style plural for "box"

    I thought it was in analogy with ox/oxen (which comes from Old English, so in the same family as German). It's easier to pronounce -xen than -xes endings, so rather a shame it's not in more general use.

  193. Whoops - to be clear... by wernst · · Score: 1

    Months of work refers to settings and tools in a production environment that took months to stabilize. Projects get archived in Notes and such.

    These days *I* am the backup routine around our department for environments. Ghost to USB drives, burn them to CDs.

    IS has no backup routines at all anymore. Apparently they were taking up too much server space! Why the hell is it there then?!

  194. Runaway Linux - Oh Yeah by techsoldaten · · Score: 1

    Oh yeah, we've got this going on in the federal government. We are standardized on Windows 98, but several prominent users are getting sick of BSOD / lost work and doing something about it.

    Several directors at the agency I work for (not saying which) have taken an interest in Linux purely out of curiousity. I spend a lot of time answering questions from folks I usually never speak to, mostly about features of Gnome, and some of the people who work for them are starting to notice and do the same. About 10% of our laptops right now are linux or dual boot linux / Win98 machines.

    I enjoy helping people understand the features of Linux (and don't take this next comment out of context), but it is really annoying when someone comes to you wanting to know all about this amazing new feature in Linux that is also present in Windows. For instance, someone recently told me Windows would be a lot more fabulous if someone would just put a calculator in it like there is in RedHat...

    M

  195. Printing? by phorm · · Score: 1

    Whilst I haven't gotten into it deeply, I've heard that knoppix is debian-based (unstable). As a debian user, printers are a pain, but not impossible. Is this not so on knoppix?

  196. WinXxxx Only Option on IT Forms by Nishi-no-wan · · Score: 2, Interesting
    The powers-that-be send out a questionaire twice a year to know how many licenses to purchase for what. In the questionaire, there is a question for primary OS and, if applicable, dual boot OS. The primary OS ONLY lists Win 95, Win 98, Win NT, Win 2000, etc. Secondary OS can be the whole MS lineup plus Linux and Sun OS.

    Running FreeBSD as the primary and only OS on three machines at work, I have a really hard time with these forms. What further investigation revealed (as I wanted to give them the CORRECT information despite their problematic form) was that their bonehead Access database required a primary OS from the list, with an optional secondary OS from the secondary list - no other options could be entered. So my three computers were registered as Win 2000 primary OS and Linux for secondary OS. Despite repeated pleas by me, we're paying Microsoft for three unnecessary liceses.

    What annoys me most is that when ever I say "FreeBSD," my supervisors always hear "Linux." They aren't against Linux (or FreeBSD for that matter) as it seems many of your bosses are. Linux is a keyword in marketspeak, so it's acceptable. When asked about why they hear "Linux" when I say "FreeBSD," I was told that the "Free" in "FreeBSD" makes it sound cheap (in quality) to administration and potential customers. Using it is OK, but not to the outside world (or department).

  197. Talk about hitting the nail on the head by digidave · · Score: 2, Interesting

    I installed Red Hat on my Thinkpad two years ago and bought Crossover Office so I could run Outlook to connect with the Exchange server. I never authenticated on the domain, so I'd login to somebody else's computer once a month for the mandatory password change so I could still get my email and use the network shares.

    All worked beautifully until IT migrated to Active Directory and EVERYTHING stopped working. Well, actually only the shares and Outlook stopped working, but not having email is enough to end my Linux using days. IT wouldn't help at all on the AD server so my options are running low. SCO actually has software that would help, but I shiver at the thought of using a SCO product.

    IT is now going to open up Outlook Web Access... I thought this would solve everything, but they are somehow locking it down so every client that connects to OWA will need to be running some sort of Windows-only Symantec software (we also use a Symantec firewall... maybe this is some sort of PPTP client, but IT wouldn't say). This makes me doubtful of getting it to work under Linux unless I can emulate the Symantec software.

    Where I am going with this is that I used Linux on my work desktop for two years and some helpdesk guys even knew about it, but I was out on my own when IT went to AD, so this sort of thing sure isn't going to get any support from many IT departments. Good luck to you in running Linux at work. I wish I had more luck.

    --
    The global economy is a great thing until you feel it locally.
    1. Re:Talk about hitting the nail on the head by RealAlaskan · · Score: 1
      Lay out the bucks for VMWare. Run the Windows that your company is probably already paying for under that, and use Windows under Linux for email (and maybe shares?). Problem solved, for a couple day's pay. That's a cheap price to minimize the irritation of Windows. I'm thinking about doing that myself.

      Cygwin helps minimize that MS irritation, too, as does tweakui.

  198. Re:"Insecure" Linux, Cygwin and RedHat by MyHair · · Score: 1

    Cygwin goes on every PC I touch. I can't do my job without it.

    That's cool. I've thought about doing that at work as you can do a whole lot of useful stuff with sshd running as a service :-). You can even run cmd.exe and have a remote cmd shell! (Although some things don't work well in it, especially ANSI colors.)

    Also the native Unix tools from the GNU Win people.

    Why both? I haven't bothered installing GNU Win stuff because all the Cygwin tools work natively under Windows once the Cygwin DLL is installed and the path includes %cygwin%/bin. What do you get from GNU Win that you don't get from Cygwin (or vice versa; I haven't tried GNU Win yet.)

    I have used some DJGPP tools on PCs where I don't have Cygwin installed. Specifically unzip32.exe, gzip.exe and tar.exe. Very handy; who needs WinZip anymore? (Actually I use the free Power Archiver when I want a GUI zipper.)

  199. History Repeats Itself (again...) by Anonymous Coward · · Score: 2, Informative

    In the 80's, IT departments were concerend about the deployment of Personal Computers without IT knowledge or approval.

    In the 90's, it was departmental servers. First on NetWare, then on Windows NT.

    Today, it's wireless networks, cr^h^hblackberry devices, and (you guessed it) Linux.

    Anyone see a trend? What's deployed behind the backs of the IT department today is often an intergal part of the computing environment tomorrow.

  200. You missed a few too... by Anonymous Coward · · Score: 0

    He mentions specifically:
    For example, there always seem to be vulnerabilities associated with programs such as file transfer protocol, sendmail and Apache.

    Why in the hell would anyone within the corporate LAN be running Apache? And why in the hell does anyone within the corporate LAN have unrestricted access to FTP or mail ports? These are examples he pulled outa his ass (and old news reports about Linux vulnerabilties, all long since fixed).

    Sounds to me like:
    a. he's not doing his job right to begin with
    b. he doesn't know how to do his job right
    c. he doesn't understand Linux and it scares him
    d. he's just spreading FUD!

  201. Re:Now that's one of those Ask Slashdots even I ca by Anonymous Coward · · Score: 0

    Me neither.

  202. Something else under the radar. by EdlinUser · · Score: 2, Funny

    I was surprised by the number of posts that mentioned Knoppix. Almost no mention of Knoppix in C/ZD NET, Gartner, PC Mag, etc.
    Yet, lots of people here are using it.
    I'm using it right now.

    Back in the 60s it was a fun thing to turn people on to marihuana for the first time. I've had fun giving Knoppix CDs away. Interestingly, with both Knoppix and marihuana, the first word was often: Wow!

  203. Statistics? by slashfucker · · Score: 1

    At present the 'official' penetration of Linux into the desktop market is something around 1%. The writer of this article doesn't give figures, but it sounds like he may have stumbled on several times that percentage of desktop Linux installations.

    What the hell is that supposed to mean? Has the author examined 5% of the PCs in the entire world? Or is he saying "1 out of 20 PCs in this department are Lunix, therefore the statistics are all wrong!!!"

    Just to stay on topic, I happen to be employed at a Fortune 100 company with about 2.5 billion in revenue yearly. Several months ago, our Sr. VP and CIO was on the "Lunix buzzword kick".

    He wanted us to consider using the Lunix wherever possible and feasible in the enterprise, because he had recently told an interviewer that we were using Lunix (We don't really even have any Unix, unless you count a z/OS mainframe).

    So anyways, we were trying to get him to realize that there are certain places where Lunix is a good fit, and it's not like we were going to drop it on people's desktops and suddenly erase our licensing costs (well we would, but the business would be well-fucked since it depends on a lot of custom VB stuff, as well as some items which I could not find a good open soarce alternative for--trust me, Wine wouldn't help)

    Just the other day I heard that Mr. CIO had heard something about the SCO lawsuit, and got cold feet altogether. The Lunix enthusiasm was on hold until further notice. As a matter of fact, don't touch it with a 10 foot pole.

    Amazing how this industry works.

  204. Unoffical Linux desktops I know of by Lossenelin · · Score: 1

    I had a downloaded copy of Redhat 9 which I have installed, I have lent it to 2 friends who have also installed it, one of them also has a computer running Mandrake 8.2 which he got free with a copy of a computer magazine.
    Would these be included in the 1% statistic? because if that stats just going by sales of Linux distros its way off

  205. Troll of the year by Anonymous Coward · · Score: 0

    This troll has more responses than some slashdot stories. You win the grand prize! Congrats :)

  206. Re:ARGHGHG!! There's no such word as "boxen"!!! by HermanAB · · Score: 1

    mouse, mouses box, boxen virus, viruses That is is known as American English I suppose.

    --
    Oh well, what the hell...
  207. um yeah... by makoffee · · Score: 1

    Im that dude, I sneek it on where-ever I can.
    So far I'm up to a samba server, ldap, ftp, and my desktop.

    --
    -makoffee
  208. MOD PARENT UP by Anonymous Coward · · Score: 0

    Future versions of vrms will include an option to also display text from the public writings of RMS and others that explain why use of each of the installed non-free packages might cause moral issues for some in the Free Software community.

    it's raining outside, I'm all alone trying to debug a scheme app, but that still managed to make me laugh :)

  209. Re:Not exactly ... [n/t] by serial+frame · · Score: 1

    > I have worked for 3 separate companies where almost every male employee ran linux.

    So what did the female employees use?

    I don't mean to nitpick here; I agree on all other points, but perhaps you could clarify which view was represented by the MCSE type you've specified.

    --

    -
    And the Angel said unto me, "These are the cries of the carrots! The cries of the carrots!"
  210. Re:ARGHGHG!! There's no such word as "boxen"!!! by Anonymous Coward · · Score: 0

    It's slang, drop it. This is how languages evolve. I think we'll be lucky if in 30 years we don't have a language barrier to worry about, and character set issues aaarrrgggggggggx50.
    Strange though, why do most countries have issues with foreign words, english greatfully accepts new foreign words all the time, where some countries insist on keeping thier language pure? How do computer languages evolve?

  211. Er, wait a second... by dasunt · · Score: 1

    The parent poster writes:

    and id be greatfull that no unwitting user *accidently* installs another DHCP

    I believe that, with a standard Windows OS (98, ME, 2k, XP), its rather trivial to start a DHCP server with the supplied Windows OS.

    I've never found it to be a problem though. Windows users are more likely to install/be tricked into installing every inane app out there.

  212. Re:VMWare rules? by frovingslosh · · Score: 1
    $400 is a lot cheaper than a second PC

    Actually, I doubt that it is, and certainly not a lot cheaper if any. My reasoning:

    The Linix box certainly does not need to pay the Windows tax.

    You can avoid multiple monitors by rather inexpensive monitor/keyboard/mice switches.

    If using multiple PC's rather than multiple OS's then you can get buy with a little less hard drive on each, but ever large drives are inexpensive nowadays. I would expect you could easily have set the developers up with second PC for Linux around the $400 price.

    One downside to this argument that I see is if you keep upgrading hardware it could cost you more long run to upgrade more systems, as long as there are no reoccuring or update costs that you would incur with VMWare. But I don't see VMWare as a really atractive alternative to two real system at a $400 price point. And there are certainly advantages to running the computers in real world non-VMWare environments that justify electing to do with seperate systems.

    --
    I'm an American. I love this country and the freedoms that we used to have.
  213. Not Exactly by tigre222 · · Score: 1

    what happens here. 150 desktops. 1 Linux co residing with Win2000. People can barely cope with 98/2000/xp let alone anything with more options.

    --
    Where ever I go, there I am
  214. By that logic a camera in the bathroom is ok ... by Anonymous Coward · · Score: 0
    how can it be spy-ware when IT IS THEIR BOXEN ?

    By that logic it seems that a camera in the bathroom, would be perfectly acceptable. Their building ... their toilet .... their camera ....

    So obviously you missed something :)

  215. Re:Not exactly ... [n/t] by SgtChaireBourne · · Score: 1

    I'd guess a Macintosh, they're stable, easy to use and have a low TCO. These days the purchase price is even competitive.

    --
    Beta is broken and the link to classic doesn't work. Stop wasting our time or there won't be anybody left here.
  216. Definately more than reported by TLouden · · Score: 0

    "If you are a sysadmin, in an organization that runs Windows on the desktop, have you stumbled on many unofficial Linux installations?"

    I'm not the sysadmin (not many schools would have a 15 year old take that possition) but I do work with the sysadmin for my highschool, they tech support staff, and with all the tech geeks and I can tell you that more than 1% of the 460+ desktops in the school have linux on them as a secondary OS (or use bootable linux eg. knoppix, dynebolic) and a handfull of them have only linux but they are certainly not recorded in any statistics. These computers get reformatted during the summer but by the end of the year linux well have worked its way back onto them.

    Also many of my friends (yes I have a few, is it so hard to believe) have installed linux on their computers but don't report it and we all use the same disks so there is no way of recording installs from downloads.

    --
    -Tim Louden
  217. Linux as a desktop... + by LLWhipist · · Score: 1

    Where I work there are 15 or 20 people who run linux as a desktop beside their windows pcs. For the most part, these are qa (like myself) or development users.

    Shocking I know.

    Would you believe that our arts & crafts department (multimedia) uses Macintosh?

    I think it's all about what you need to do your job. We can all pick our own OS (provided you have the ability to maintain it on a basic level yourself) and we are tasked, as professionals, to getting our jobs done. period.

    if we need linux, we use it. if we need window$, we use it. and yes, we do even use macs where we have to.

    Just what I see where I work. I can understand security concerns, but believe most of them to be groundless where it comes to OS. if a standard user in a company has the rights to affect anything of import in a lan or wan... someone has screwed up setting up the security in general.

    Cheers

  218. Just an Idea.. by kfuq · · Score: 0, Flamebait

    Take all the money you would pay for all that m$ licensing and hire some ** COMPETENT ** IT personell with some.. uhh i dunno.. BRAINS??

    Send all those stupid, button pushing id10ts to the unemployment line..

    let the people with some brains take a turn for a while...

    --
    iF yOu WAnT to C YOUr iP agaIn gAThEr tWO MilLIon dOLLArS IN Non - cONsEcuTivE TweNtY's AnD AWaiT FuRThER iNstrUctIoN
  219. Not a good idea if you want to keep working ... by thempstead · · Score: 1
    Firstly, I'm a sysadmin and look after various Unix systems for various customers, (i think thats vague enough not to cause any problems with management), I don't support desktops and I run Linux exclusively at home.

    We don't have Linux desktops at work and whilst they would be nice we wouldn't even consider putting them on ourselves without permission from our management. To do so would at the very least be a disciplinary offense as it would be a breach of various IT and Security policies, no matter if running Linux would actually be more secure.

    The relative security and ease of admin of running Linux or Windows is not the issue. It doesn't matter if running Evolution on SuSE 8.2 is better then running Outlook on an NT4 Workstation. The machines which you are using are company property and if you are using them then you are subject to the companies policies over the use of that equipment. At the end of the day it doesn't matter what you do or what you know; it doesn't matter if you support dozens of high end Unix boxes as far as the company desktop is concerned you are, right or wrong as it may be, just another user. You would not expect your mail users to come along without telling you and reinstall your Exchange server to run PrimeOS running Text/Memo (hardware incompatibilities aside!!!) ...

    If you have a genuine need to run a desktop OS rather than your corperate standard one then you really need to do the following:

    • Firstly, do you REALLY need to run it ... not "I want to run Linux 'cos I like it" or "I want to run Linux because its the cool thing to do". If you can justify why you need to run Linux then you are more likely to be able to convince people of this. Document this.
    • Can your current desktop hardware handle what you want to do ... shouldn't really be so much of a problem these days but you really don't want to be halfway through a Linux install and find something vital is proprietry and just won't work leaving you with no OS. If possible testing with a Knoppix CD and dual booting when you do install may be an idea here (just in case).
    • Will you be able to do everything that you are required to do at your job, i.e. can you access everything you need to access if you used an alternative OS to the one provided?
    • If you can tick off the above three points then speak to your manager ... if you can get them around to the idea then you should be able to have a stronger case if you do try it. If possible get it in writing.

    Tim

  220. You've got to be kidding by 0x0d0a · · Score: 4, Insightful

    1) You have to be kidding. You can use attack software on *any* OS. Linux is no weaker (and actually a bit stronger in that it has some semblance of local security) than Windows here.

    2) If you sieze machine and reimage them to fit with some policy you're following, your ass would be heading out of town from mass user complaints at any company I've been at. You are IT. You are present to help workers get their damn work done, not to push some random personal agenda. If you wipe an entire system and kill that employee's work, you are a serious impediment to getting work done. I simply am amazed at the total lack of regard for the employee, and lack of perspective you've displayed. You could disconnect the thing from the network. You could ask the user to move his files to another machine so that you can reformat it, though I think you're already pushing the limits. But when you simply grab a machine and reformat it, you're in a position where you are a liability to your company. When the developer tells his boss that IT wiped out his work, his boss tells his boss, and his boss tells his VP, I guarantee that your boss will not cover for you.

    You want him having direct access to the 'net without a proxy?

    WTF does this have to do with what OS you're running?

    I doubt it, especially not after that email where he asked questions about what type of traffic you monitor and how you do audits.

    This is ridiculously paranoid. I've seen the occasional IT type who considers the users he is supporting his enemies, but this is beyond belief.

    What if he's okay but his box ended up getting owned because he downloaded bad BitchX source?

    What if the same damn thing happened because he downloaded a Word file to his Windows box? Which of the two happens in far greater numbers?

    That would mean another three day stint of no sleep doing emergency penetration tests, mirroring HD images, finding the exploits, sitting in meetings and explaining what all was affected hoping you didn't miss something critical.

    You've worked in an 8,000 unit shop and you honestly believe you have zero penetrations? And your setup is such that you need to spend three days and nights mirroring HD images *after* an attack?

    This brings productivity for the money-making sides of the company to a crawl while sysadmins and security folks work to get things safe again

    And again, WTF does the OS have to do with this?

    Likely, there will be a news source online with details of how the exploit took place, but completely wrong and now the public and shareholders are going to wonder if credit card numbers were stolen, your ability to properly maintain infrastructure, etc. Then your stock price falls $2/share.

    Ridiculous. This is a theoretically possible but completely impractical story of what might happen in an attack.

    Sorry to ramble, I just wanted to stress the importance of IT policy and the headaches that can happen when the policy is too lax.

    Amazing. God, I'm glad the IT people that support me have different views.

    (All those workstations came with an OS you paid for anyway).

    The infamous sunk cost fallacy. Which they teach you to avoid in Business 101.

    I also think this treatment of unapproved OS's is very common due to thoughts and situations like the one above.

    It's not. That kind of behavior from IT would generate serious user complaints where I work. Matter of fact, IT is trying to quickly adapt to support people that want to use Linux here, and has compiled resources for them. That's what I consider doing a good, solid job. Helping the users instead of attacking them.

    1. Re:You've got to be kidding by schon · · Score: 3, Interesting

      While I agree that the previous poster is overzealous, there is a kernel of truth in some of what he says.

      You are IT. You are present to help workers get their damn work done, not to push some random personal agenda. If you wipe an entire system and kill that employee's work, you are a serious impediment to getting work done

      In most companies, the standard OS is hardly a "personal agenda" - and the worker that installs a new OS on his/her computer without authorization is hardly "getting work done".

      Most large companies I know don't allow you to keep your work on your local machine, as it makes all kinds of problems for backups, upgrades, and hardware trouble. Instead employees save all of their work to a central fileserver, which gets backed up on a regular basis. Re-imaging a machine is not a big deal. Even the place I work now (total of 20 employees) does this.

      WTF does the OS have to do with this?

      If the sysadmins don't know Linux, then they won't be able to fix the breakin.

    2. Re:You've got to be kidding by Chazmyrr · · Score: 1

      You make some interesting points but I think your perspective is from smaller companies. Let me provide a perspective from a much larger corporation.

      The company I work for has 100k desktops in North America. No, that isn't a typo. 100,000. Including the rest of the world, it's more like 200k. We have a standard operating environment for desktops. Currently it happens to be Win2k. Every desktop is either running 2000 or is running NT 4 and on a schedule to be upgraded. We have a substantial IT organization in place to support these desktops. They have a lot to do. Every patch or update or new software version has to be tested to ensure it doesn't break any of the other applications in use at the company.

      To allow alternate operating systems would increase our IT costs substantially. It isn't going to happen because Joe down in accounting likes Gnumeric better than Excel. It will happen because solid system management software is available for that platform and there is a large enough user population that see a tangible financial benefit to justify the extra support infrastructure.

      As an employee, if you decided to run another operating system on your desktop instead of the corporate standard software, the best that would happen is that you would have your machine reimaged. It might not happen for a month or two. It may take that long to see that your machine hadn't posted it's software inventory to the system management server and send someone over to do it manually. Once they found out why, your machine would be reimaged that day. The tech that did it wouldn't be out the door. He's not pushing some personal agenda, he's following company policy and doing his job. If you lost something important, well now you've also ignored the policy for saving work on a network drive that gets backed up frequently. If you're a developer, your code should have been in a source control repository. If you lost critical code because you blantantly ignored several company policies, you would be the one out the door, not the tech.

    3. Re:You've got to be kidding by Anonymous Coward · · Score: 1, Interesting


      honestly... we don't have 100k desktops and those
      desktops we have are, yes, w2k... but I am allowed
      to run virtualpc. I load up freebsd and put it into full screen mode. 200 days uptime and I get all the stuff I want *and* I'm (local/virtual) root. I'm happy, the w2k standard is still in place, etc.

      Yes, some places are more open to alternatives... because they are scientific, research, educational, etc... other places are businesses where w2k cybercops think pushing policy is better than sex.

      I don't care if anyone else runs unix/linux -- but I *do* care about MS trying to make open source / unix / linux be illegal (ie: legislation, drm, licensing, etc).

      This whole line about having to buy a license if you use linux to access terminal services or citrix is very very very very very wrong.

    4. Re:You've got to be kidding by Sj0 · · Score: 1

      1)there is a HUUUUUUUUUUGGGGGGGGEEEEEEEEEE difference between a secured corporate installation and the OS some guy put on his machine on the weekend.

      2)That's doubtful. If some know it all user is putting the entire organizations security at risk because he doesn't want to use windows, the person who did the unauthorized OS installation (and the one who didn't follow the policy of working off the networked drive, as most places I've worked do) will be out on his ass faster than the IT guy cracking down on said unauthorized OS installations. What makes you think that he wouldn't? It's like saying the VP would be angry that you didn't get to a conference because you stole a car and got pulled over by the police.

      All the other stuff you've responded to seems to be a pretty good description of a worst-case scenario breakin, which could happen a lot more easily with an unsecured, unauthorized installation of an OS than with an IT department crafted OS installation designed to be secure.

      Personally, I've worked for an IT department that serviced thousands of users over hundreds of miles. After working there, you begin to understand just how crucial a secure, consistent platform created by the IT dept is, especially when it's a machine in some remote community that will take a days drive to get to. On the other hand, since the users have been under our care for over ten years, most of them realize the (very good!) reasons why we are so strict about security -- because to them, security and reliability are inseperable.

      --
      It's been a long time.
    5. Re:You've got to be kidding by Sj0 · · Score: 1

      Amen. I think there are too many people in this discussion who have run a 5 or 10 computer network and think it makes them an authority on effective policies for actual enterprise networks. Frightening, isn't it? That's one good reason I'm so jaded with the entire IT industry -- everybody thinks knowing how to set an IP address in windows 98 makes them an expert. That's the reason why so many techs consider users the enemy -- they think they know better than the techs themselves because they can surf the web or install an OS.

      --
      It's been a long time.
  221. The head of CSFB firewall team did this... by Anonymous Coward · · Score: 1, Interesting
    In a big investment bank named something like Crackit Sweet Frost Bacon, the head of the "Global Internet Firewall Team", a guy with a name something like "Colin Sargeant" (Now a director of CSFB), was running Red Hat Linux on his corporate IBM Thinkpad.

    Now this is a big bank, with thousands of desktops, and very strict policies on what you can run on your desktop (ie: you can run the heavily modded and locked down corporate build of Windows 2000, or you can work elsewhere), and this guy, global head of one of the two network security bits flaunted the rules - talk about setting an example.

    He ran VMWare on his Red Hat box, and had the corporate build of Windows 2000 running on that.

    He took great delight in quietly telling the story that he ran up Red Hat, and ran up the virtual machine with the corporate build on it and asked the 'corporate build' team to check it out and tell him if they found anything up with it. They didn't.

    When you consider that around 50% of this particular corporate's network security is in the hands of someone who behaves like this, you start to wonder how secure some of these large corporates can possibly be!

  222. What about live distributions? by frithioff · · Score: 0

    Thissurprises me, as our lab is very much a windows only shop (with some large UNIX/LINUX servers and
    Exceed used to operate on them) and they'd come down on us like a ton of bricks if we went around installing linux on things. But I wonder, what about live distributions like Knoppix ? You could install it and use it during the day and when you went home there'd be no evidence you'd been using it right?

  223. I've installed Debian alongside Windows by Anonymous Coward · · Score: 0

    Know something funny? The tech support folks at my office (at least the 20-something guy who shows up periodically to update Norton Antivirus on all the boxes) have never even heard of Linux. I am a surgeon in a large group practice that is part of a larger organization with around 400 employees. I mention this only because the IT department wouldn't really have the authority to reformat or confiscate my box because they work for me. So anyway, the computer support guy walked past my office one day, and I showed him my Debian partition with KDE 3.1, etc, and demonstrated how I could do everything a typical desktop user needs with completely free software. I asked if the organization had considered using free software to save money (we are pinched for cash currently). I was met with a vacant stare. He had heard the term "linux" before but only knew that it was vaguely related to unix. He *did* know that he knew nothing about unix and that his job was strictly limited to helping users with Windows, so he just said "Wow that's cool Dr. Bruce" and went on to the next Norton Antivirus update.

    I hope this guy's boss has at least heard of Linux, but I'm not too sure.

  224. How about official Linux desktops, sorta. by yelmalio · · Score: 2, Interesting

    The mob I work with is a very large organisation that has ongoing severe financial problems. Think national air carrier for .uk here. Desktops are pure MS with *nix and MS servers in abundance.

    Some one in IT has realised the beauty of Opensource, it's cheaper than MS. Cheap is good, saving money is good. Where an open source solution exists that can replace a commercial solution, it is on the desktop. Out went eXceed, in came Xfree 86 on Cygwin. Out went Reflections, in came Putty. And so on.

    Several servers are already running Linux and I've heard they are trialling a rack of blades using Linux for something or other. I envisage more servers going over to Linux to save money and more of the desktop converting to Linux or at least Cygwin/Opensource for the same reason.

  225. Obvious reasons by Eunuchswear · · Score: 1
    This week's journal was written by a real security manager, "Mathias Thurman," whose name and employer have been disguised for obvious reasons.
    Maybe I'm dim, but I can't figure out what the "obvious reasons" are.
    --
    Watch this Heartland Institute video
  226. This doesn't surprise me, I've done it :-) by kevinbarsby · · Score: 1

    About 4 years ago I was working for a largeish European computer supplier in their laptop software install development team.

    I started to run Linux on my desktop (a laptop ironically) and made a point of trying to do everything though Linux.

    When IT came round making sure everyone was upgraded to the latest version of MS Office, I was away from my desk, I came back to a note saying, "we couldn't install this because we don't know your username and password, I have left the CD so you can do it yourself."

    I certainly don't think they were aware that this was going on.

    My coup de grais was evangelising enough so a couple of other colleages (including my boss) had a play with Linux :-)

  227. Adv: SYSADMIN OF 15-YEAR OLD COMPANY ... by Penguin · · Score: 2, Funny

    SYSADMIN OF 15-YEAR OLD COMPANY - find 71,000 Linux installations hidden in his company.

    Does this headline look familiar? Of course it does. You most likely have seen this story recently featured on a major nightly news program (USA).

    This 15 year old company's sysadmin was cleaning and putting backups away when he came across a large brown department that was suspiciously buried beneath some red tape and a WindowsXP EULA in the back of the 15-year-old company's closet. Nothing could have prepared him for the shock he got when he opened the department and found it was full of linux installations. Red Hat, SuSE, Debian, Slackware and Gentoo - all neatly beowulf-clustered in labeled piles...

    --
    - Peter Brodersen; professional nerd
  228. Which is why Dell doesn't support linux. by Anonymous Coward · · Score: 0

    We've been through this at $orkplace.

    Buy Dell laptop "Yes, we will support linux"

    Have hardware problem. Ring tech support.
    "You must reinstall windows before we will talk to you. Goodbye" [click]

    We used to spend around $25kyear with Dell. Not any more.

  229. I installed rlogin, instead of Linux by Anonymous Coward · · Score: 0

    Our sysadmin knows how to format a drive with extreme prejudice: he takes out the old one, puts in a new one, and takes the old one back to his lab where he can take it apart at liesure. After about the fifth time of that, I figured out how to get Linux on my machine. I installed rlogin. Then I went over and installed Linux on *his* machine. Problem solved!

  230. Where do you people work? by centron · · Score: 1

    Where do you people work that you have users that have time to reinstall the OS on their desktop machines?

    Where I work there are a few factors preventing this sort of thing. First, people have actual work to do, and don't have time to be reinstalling their software. Second, we have a lot of custom apps that require Windows. I'm sure you might argue that there are functional equivalents, but you'd be wrong. Call Center software, cellular radio equipment, mapping software... None of it has anything similar on Linux. Finally, most of the users here have difficulty plugging in a keyboard. I wish they had the savvy to understand what an OS is, even the ones that are fond of telling us they "know a lot about computers".

    I don't really need to worry though: the desktops for regular users don't have CD-ROMs.

    --

    XeoMage

  231. "Knowledgable users" by jotaeleemeese · · Score: 1

    If the 'knowledgable users" will never ever require IT support again for their machine(i.e. they become their own little SA) then they are very welcomed to have the root password.

    Actually I would demand they change it and I don't want to know it.

    --
    IANAL but write like a drunk one.
    1. Re:"Knowledgable users" by vsprintf · · Score: 1

      If the 'knowledgable users" will never ever require IT support again for their machine(i.e. they become their own little SA) then they are very welcomed to have the root password.

      Actually I would demand they change it and I don't want to know it.

      The "knowledgeable users" know how to administrate Linux and should not have to wait for days for "IT" to show up and perform a simple task on their personal box. It's no different from all the Windows users who have control over their boxes.

  232. Hell yeah by Anonymous Coward · · Score: 0

    Where I work I've seen several 'unofficial' linux installations on workstations, a variety of distributions, and after some tweaking they were able to do all the work they were required to do for the job.

  233. and you sir... by tolan-b · · Score: 1

    have no sense of humour!

  234. Yaromat by jacksonai · · Score: 1

    or just point their brower to here

    --
    Like Sweepstakes? Try out my service @ http://www.yourpowersweeps.com -- Free 21 day trial, no cc needed.
  235. Interesting. by Anonymous Coward · · Score: 0

    We've been secretly running Linux, QNX, or BSD in our office for years. The day that I saw an admin attempting to spy on my Windows 98 box with SMC was the day that I stopped running Windows. I can access the NT resources over the network with programs like Samba. Besides... Out department paid for these PCs. They aren't IT's. As far as I'm concerned, we'll do what we wish with them.

  236. Re:ARGHGHG!! There's no such word as "boxen"!!! by Anonymous Coward · · Score: 0

    Except that in German "Box" doesn't mean box, it means loudspeaker, so if you tell a German that your boxen are kaputt, s/he is liable to think you are talking about your stereo system.

  237. Insightful my a@@ by jotaeleemeese · · Score: 1

    I have seen instances of one single, non accounted for, machine bringing down corporate services on its own.

    A badly compiled program like top brought one enterprise wide service (formed of 4 big servers) to its knees.

    Do not tell me I am marking my territory. I love Linux and I do anything I can to promote it, but once a policy is agreed I will ensure it is complied with because otherwise everybody can be affected. This means $$$ which is what pays my salary and the one of the jock that thinks he is too 3l33t to follow corporate policies.

    --
    IANAL but write like a drunk one.
  238. "Hidden OS" by Anonymous Coward · · Score: 0

    Hi,

    I am working as a sys admin for eight years.

    It's hard to convince people that you are able to choose the right tools.

    So occasionly I installed FreeBSD and told them that it's a Linux distribution;-)

    Recently I read an article about file servers in APC (Australian PC magazine) subtitled "Windows or Linux". The majority of the tested "Linux" boxes are in fact FreeBSD based..

    It's a stupid world..
    Peter

  239. Bullshit by jotaeleemeese · · Score: 1

    I have seen top killing NIS+ servers running ins Solaris desktop.

    I have seen one Linux workstation DOSing big NFS servers.

    I have seen a Gnome sound applet generating so many syslog messages that our monitoring servers could not check for real alerts.

    Take your cavalier attitude to where it belongs: to your home network.

    --
    IANAL but write like a drunk one.
  240. Stealth Linux by sms · · Score: 1

    In 1997, I was on a government project. The platform was NT, but I needed a DNS server to meet some requirements, too, so I set it up in Linux. I never told them. I guess they must have found out after I left....

    On my current project, I took a box that was just sitting around, a P2/400 running W98, and installed Debian on it so I could have a sandbox where I could do things as root (as a contractor, they won't give me root on their machines). They took the box away when I was out on holiday. When I came back, I shrugged, figured they had decided to clean house, and found another old machine,abandoned in a storeroom that wasn't being used. Turns out they delivered my original machine to some intern at their corporate HQ for a desktop machine. I hear they were very puzzled when, instead of the comforting Windows 98 splash screen, they saw: "Linux login:" :-) // sms

  241. Stealth Linux has its benefits by Phoenix666 · · Score: 2, Interesting

    Through the crazy fortunes of the New York IT industry these last couple of years, I find myself heading up a QA team in an office in Midtown Manhattan. They're basically a bunch of out of work actors moonlighting as online product reviewers. So, I untangle the mess my predecessor left (who got fired because it was a mess) and I figure the reviewers should be able to get through X number of products a day. But they're not. I can't figure it out. Then I catch them chatting on AIM or Yahoo IM all day.

    So I'm thinking, and decide to wipe their machines and install a nice RH distro on all of them. Set them up with StarOffice, Mozilla, and Samba and hey presto they're doing 50% more products per day now (I'm not naive--I know they're gonna write emails, but it's not the time sink IM-ing is). Furthermore, their old Pentium machines are faster, and I can SSH into their boxes to fix anything that's wrong.

    That last bit is key, because the tech dept. at this company is so bad they don't even know what an IP address is. But, they like to spy. There are cameras everywhere, and believe me, they ain't protecting national secrets at this place. So I figure, if they like to spy on you with cameras, they probably also like to spy on your computer. So with linux, no more spyware.

    Yep, stealth linux works for me.

    --
    Do what you can, with what you have, where you are.
  242. You didn't forget about Cygwin, did you? by EvilNight · · Score: 2, Informative

    It's a bit difficult for a corporate user to get away with flat out installing Linux on his box, as that sort of thing shows up rather quickly in security audits.

    Where I work, we have 3 or 4 developers who use Linux. They requested it when hired, and other than making sure they don't have rogue DHCP servers screwing up our networks, we have a hands-off policy where we don't officially support the box because it's not Windows. Unofficially I help them all the time, of course. ;)

    What gets me is Cygwin. The last time I ran a software audit, I checked for Cygwin just for a goof. HALF THE COMPANY (that's 50 people) has Cygwin installed. Well, why not? It lets you comply with management's wishes for a Windows world, but still gives you the lion's share of Linux's power. If you count Cygwin I'll wager you'll find the 1% figure to be much lower than reality.

    Of course, if you're comfortable with Cygwin, switching to Linux is that much easier.

    --
    Hell is being intelligent in a world full of idiots.
  243. Don't be stupid by Anonymous Coward · · Score: 0

    50% of GE's desktops running linux would mean the biggest company in the world was running Linux on half its desktops.

  244. Another satisfied Linux desktop by Anonymous Coward · · Score: 0

    I also installed Linux on a corporate computer, unbeknownst to IT.
    The corporate network of several thousand users is a totally MS/Active Directory shop w/ about 10% Mac clients. With all the garbage pushed onto my machine from IT to inventory software, check for viruses, manage my login, and who knows what else, using linux is a whole lot faster from startup to shutdown and everything in between. I'm still forced to use Crossover Office to get my my mail, but things work pretty well.

  245. Not here, but there. by panda · · Score: 1

    At my current position, I haven't seen this. There's only 8 of us in the office where I work now, and even I use Win2K on the desktop here in my office. (I just started last month, maybe after I get more comfortable in my position, I'll switch my desktop to GNU/Linux.) In case you're wondering, I'm basically CIO for a consortium of 35 libraries, so I pretty much get to decide what technology is used in our main office and on the network. I can also recommend what the individual libraries use, but not make them buy any particular product.

    At my previous position, as a UNIX sys. admin. on a college campus, I used to see all kinds of GNU/Linux installations that we weren't told about, usually after the machine had been compromised and used as a warez or pr0n server. People would complain about their network segment being slow and sure enough there'd be a compromised box on it.

    Of course, we also had a number of "official" desktop GNU/Linux installations, usually on a second desktop computer next to the prof's Windows box. Generally, they'd use GNU/Linux for their own software to do those tricky calculations where Windows just won't cut it. (It was an engineering school.) IIRC, the CS dept. all had GNU/Linux on the desktop, it was a requirement there or something.

    Oh, and those unofficial GNU/Linux desktops would become official, once we scrubbed the disks and installed a more recent distro. It's amazing how many people were installing unpatched RH 6.2 on these things and just letting them sit there.

    --
    Just be sure to wear the gold uniform when you beam down -- you know what happens when you wear the red one.
  246. Not many by Anonymous Coward · · Score: 0

    Some of you guys live in weird world.

    This is not happening in the wider world. You may see it amongst the junior sysadmins of the world, but I promise you, there is no Knoppix trend.

  247. Re:ARGHGHG!! There's no such word as "boxen"!!! by GlamdringLFO · · Score: 1

    Isn't 'en' an archaic dual ending (when you have 2 of them, i.e., a yoke of oxen)? Doesn't it go to 'oxes' when there are more than two?

    So, if you have 3 machines, a Win2k and a linux and a solaris, you have 2 *nix boxen, 3 boxes, and a box.

    --
    Skal! AMS
  248. I have by hoz · · Score: 1

    when I was working at HP, i had to repartition my disk on my laptop to install RH Linux. The IT guys freaked. I was "cut off" from support. I was on my own, which really sucked especially after my hard drive went.

  249. Well... by Anonymous Coward · · Score: 0

    As Network Manager for my company, if I came across someone installing programs, much less an OS, that I didn't approve of, their machine would immediately be re-imaged and their manager informed.

    The again, I make it very difficult for them to boot the machines via floppy (since there are none) or CD-ROM (last thing on the boot list) and password protected the BIOS so they can't change it.

    Sounds like a security lapse in the sysadmin's setup of his local machines by allowing folks ot install whatever they want. An oversight like that in a lot of places would jeopardize his job - a position easily filled by any one of the bajillion IT folks looking for jobs in the world right now.

  250. Linux on the Desktop? Not likely in many orgs by jelyon · · Score: 1

    I was a sysadmin at a law school. Granted, that was years ago, but your average law professor doesn't have the chops to install and use Linux. That's _average._ There are exceptions. I didn't work with any. They could hardly handle Windows. Hell, some could hardly handle DOS.

    I was a sysadmin at a law firm. Again. Your average lawyer doesn't have the chops. Danny is an exception. There are others. I didn't work with any. They could hardly handle Windows.

    I'm a network admin in a small department in a huge multinational corporation. The employees here, Todd excepted, don't have the chops to install and use Linux. Most of the employees at my current employer (my immediate coworkers excepted) have a hard enough time with Windows.

    I could see in some industrial design shop, or research lab, or other, more technical shops the surreptitious installation of Linux on the Desktop.

    But in most businesses? I can't see it. And a well run and organized IT shop should notice a non-'doze host quite quickly.

    1. Re:Linux on the Desktop? Not likely in many orgs by Vexler · · Score: 2, Interesting

      I agree. Most users do not like to waste time on a piece of machinery when they know that they have legitimate work to do. Frankly, as you pointed out, most of them do not have what it takes to install, configure, and support it.

      I am the network engineer for a manufacturing firm, and I can tell you that (not counting the guys in production lines) our office workers could probably handle cut-and-paste on a good day. So I get to teach them how to add a printer while doing other system and network admin stuff.

  251. Keep dreaming by austegard · · Score: 1

    Linux servers entered into the server rooms because

    1. the people there had a need for them, and
    2. the people there knew what to do with them
    Unless you're working in a technology consulting company, or some other computer-related business where the average employee actually knows a thing or two about computers, then your average office-worker is a complete idiot as far as computers go and won't be capable of installing anything beyond a screensaver or - of course - KaZaa.
    The average office user also doesn't need Linux, because Linux doesn't offer them anything that Windows doesn't provide. Yet.
  252. Re:ARGHGHG!! There's no such word as "boxen"!!! by 1u3hr · · Score: 1
    Doesn't it go to 'oxes' when there are more than two?

    Not according to the Oxford Dictionary (plural of Oxford?).

  253. Small companies by Nelm646 · · Score: 1

    I work for what would be considered a small business based solely on the number of employees we have. The people in our network operations center, myself included have moved our own workstations over to RH 9 and I couldn't be happier with it. The IT guy (yes we only have one) found out, asked a couple questions and then scratched our names off the list of people that he needed to get XP licences for in an upcoming upgrade. We were also able to get rid of the very expensive licences we held for an xwindows server since this is build into linux. The only thing I have noticed that we lack is really good image editing software since I find Gimp difficult to use and clumsy compared to Illustrator or Photoshop. ~Nelm

  254. The article is full of common sense... by Dr.+Smeegee · · Score: 1

    unlike a lot of posts in this subject! :-)

    This is very positive. The author is not fighting the change, but facilitating it by narrowing the focus to a single distro and a limited number of applications. Sensible.

  255. 1 in 60 is 'countable' by drwho · · Score: 2, Interesting

    This is a guesstimate, but I have installed Linux (and some *BSD) boxes at various job sites without managements knowledge or permission, often on 'surplus' hardware (someones old PC sitting in a closet), for about 8 years now. Only about 1 in 60 of these was in some way countable by outsiders.

    This starts to be the question, how is Linux counted? Three broad categories: media sales, net scans, and installation reports.

    Media Sales - simple count up the sales reports from major vendors. Using this method alone, one would get an unrealisticly low estimate of Linux users. Though I have installed Linux on over 250 machines, I have only purchased CDs from a vendor twice (OpenBSD 2.7 and Slackware 3.3). I have purchased CDs from other sources: flea markets, computer stores, etc - but these are not 'official' pressings and probably are not counted.

    Net Scans - Netcraft does a srvey to see what OS / web server various sites are using. WHile this is handy, a lot of the servers I have installed have not been accessible to the outside world, for security reasons. Ones that are available to the outside world have a limited number of services running, and a firewall (usually the Linux machine itself) for access control. So this still isn't accurate.

    Installation Reports - Various OSs request permission to inform a central location of a new Linux installation upon the installs completion. The ease of this process varies quite a bit. I used to never report, out of general paranoia, but I have started to in the past few years. I think we all should. I also think that there needs to be a standard method on installtion counting and reporting: some way to determine if a specific install is actually an upgrade, a switch, or whatever, and a way to protect users' privacy, but give some good statistics about the install. For instance, it would be great to report the platform (including CPU type & speed, memory, HD space, peripheral cards) and even the package selections. I know this is what redhat does with their RH network stuff, and though some people may find it annoying and opt out it does provide useful information to help developers and businesspeople in their decisions about where to concentrate support resources.

    Here's an interesting bit of historical trivia: Back years ago, mayb 1996 or so, I was running tcpdump and noticed some very strange DNS queries. Every so often my Slackware machine would query to root servers for what turned out to be the last line of my /etc/hosts file -- which was a comment. I think it was every 30 or 60 minutes or something. Years later, I was talking to a friend of mine who worked at a site that housed one of the root servers, and he was in a position to count how many of these queries came in...there were HUGE numbers. What is interesting is that we found that older versions of Red Hat also had this odd DNS behavoir, but that newer versions of RH and Slackware did not. So this was an interesting method of counting older installs of a few types of linux, but in the end not effective.

  256. I work with a Government Security Team by LucidityZero · · Score: 1

    I work with a Government Network Security Team, and just about the entire team is running Linux on the desktop. We use rdesktop to connect to one central terminal server to run exchange clients and things like the ticketing system here

    --
    Sig.i>
  257. I found one! by sad_ · · Score: 1

    I have found such an install at my place of work. it's my laptop ;)

    seriously, i am a unix administrator, and w2k is the default operating system in our company. all my other coleagues continue to use w2k. They are always amazed with the flexibility and easy of how i work with all our boxes.

    Sure, you could do all this on your windows box, i have been helping some of them to find suitable replacements under windows, but in the end none of them match what linux can do for other unix boxes.

    my manager knows too, he did come by one day to take a look at 'how i did things'. he said i could keep my linux install, while others who installed xp were ordered to go back to w2k.

    recently i discovered that our the people working in our in house unix dev. department are now mostly switched over to linux too.

    regular users however, most of them are clueless, i doubt they will ever take the initiave to install any other os.

    --
    On a long enough timeline, the survival rate for everyone drops to zero.
  258. I died and went to heaven... by DrCode · · Score: 1

    When I started at my current job late last year, the sysadmin asked me what I wanted for a desktop, with the choices being:
    1. RH Linux.
    2. RH Linux + Win2k, dual-boot.
    3. RH Linux + VMware/Win2k
    4. Win2k
    5. A Sparc/Solaris box
    Everyone has what he/she wants here, with most desktops being Linux.

  259. I asked to install Linux... by chrisatslashdot · · Score: 1

    I am a plant engineer at a food plant. I wrote a web-database application using PHP/MySQL/Apache to track maintenance work orders. During coding I ran it all off of my Win200 machine at work and Linux at home. After it was polished enough to go live I requested a computer to use as a server from our IT dept. I informed the them that it need not be fast because I was going to use Linux. The head IT guy's first question was: 'Do have licenses for this or is it something you are bringing from home?'

    Sometimes it sucks to be the mechanical engineer that is more tech savvy than the entire PC support staff.

    --


    Simple people talk of people, better people talk of events, great people talk of ideas.
  260. Re:Now that's one of those Ask Slashdots even I ca by uberdave · · Score: 1

    Most people don't read this far down, I guess

  261. Linux Under the Radar by Anonymous Coward · · Score: 1, Interesting

    I have been using Linux for years on the desktop. I started by moving my Windows needs to a VMware session and lately, moving to CrossOver Office.

    Now the developers are starting to ask how to create the same setup.

    Our company is only about 300 users...but I have worked for Fortune 500s before - and while they tend to be slower in implementation of good technologies, the fact that we are starting to see users outside of the Infrastructure group want to run a *nix as their desktop tells me that it should not be long before the larger companies follow suite.

  262. ... dreams do come true... by Simkin1 · · Score: 1

    I agree with your post ... almost... What you actually should have stated in the end was:
    The average office user also doesn't need Windows, because Windows doesn't offer them anythig that Linux doesn't already provide, and have already improved upon. Period.

  263. Informative, yet stupid at the same time... by Simkin1 · · Score: 1

    As a Network Manager, you should know that the more you secure the system, the less likely it is to be secure. Clearing the bios is a simple matter of dip switchs, and unlike you, I appreciate folks that take the incentive to learn an OS that you can't seem to appreciate. Despite your bravado, and beating your chest at your own sense of self importance, the reality is that if I was in your organization, I would install linux first, lock you out, and then when you attempted a reformat, would have to you terminated. The reality is that some folks are much higher in the 'pecking' order than you. It would behoove you 'to learn your place', and mind that you don't step on the toes of someone with the ability to end your career. Just a thought of course...

  264. Horseshite by iendedi · · Score: 1

    What you write is simply gobledygook, for the following reason:

    No company with half a brain would allow users access to data and systems that they don't need to get their work done. And if a user cannot be trusted with the data and systems they need to get their work done, they should be fired.

    I know, however, that many companies ARE stupid enough to do this wrong. And then they have to chase the dragon, as you point out.

    But it doesn't matter. Joe hacker brings his laptop pre-configured with every hacking kit available to work, plugs it in, create an IP-over HTTP tunnel right through the web-proxy, bridging the intranet with the Internet and does whatever mischief he wants.

    And there is nothing you can EVER do about it, except assume that it will happen and architect your networks accordingly. The most important aspect of corporate network architecture are DOMAINS and SEGMENTATION. Do not allow engineers access to marketing, and vice versa. Even in engineering, create small domains and strongly seperate them. Do it with CABLES and FIREWALLS not with *passwords*.

    The common Intranet should *never* contain anything that would cause a scandal if it hit the streets.

    Moral of the story? Let the engineers and sysadmins do whatever the hell they like, in their domains - they need to anyway in order to be productive. Running around imaging machines DOES NOT PREVENT the disaster scenario that you are invoking and it makes everyone unhappy and less efficient.

    --

    It is your personal duty to fight for what is right on a daily basis. Ignoring injustice is identical to approving
  265. A tiny squirt of power can be a bad thing.. by iendedi · · Score: 1

    You go back to being a scientist and I'll go back to saving people like you from yourselves with your lack of understanding regarding the need for real security policy. I promise I won't pick apart or call FUD when you speak of something technical regarding your line of work... That is, if you don't tell me ficticous realities about how employees are to be trusted.

    You are damned lucky you never encountered me in your control-freak carreer. You and your kind create the atmosphere that you talk about with such disdain (employee is not trusted, enemy of corporation).

    You have no clue how to build or operate a secure network which empowers it's users and provides them with the FLEXIBILITY and FREEDOM REQUIRED for them to DO THEIR JOBS.

    Let me give you a hint: DOMAINS and SEGMENTATION with CABLES and FIREWALLS. Not a bunch of winny little software nazis running around abusing the tiny squirt of power they have. I have encountered your kind before, trying to waylaste productivity in order to ego masterbate. I enjoy bleeding people like you, slowly, before putting you in the HR meatgrinder.

    While you are running around pissing off all of those that you are jealous of becuase they have better jobs than you, the dude in the corner with the laptop is sucking data off the sensitive fileservers that you set up (with the mistaken belief that no-one could connect to them because everyone is running your software).

    --

    It is your personal duty to fight for what is right on a daily basis. Ignoring injustice is identical to approving
  266. Crack kills by Anonymous Coward · · Score: 0

    Support free [as in libre] software instead. :p

  267. Dead Linux CDs by fm6 · · Score: 1

    Well, if this technique becomes popular, the IS people will proably go around disable boot-from-cd, then password-protecting the BIOS configuration!

  268. Re:Now that's one of those Ask Slashdots even I ca by Anonymous Coward · · Score: 0

    I don't think hobbyist should comment on issues beyond their understanding.

  269. Yes, but... by Anonymous Coward · · Score: 0

    ...you are wrong.