I used to work with someone who was on the team that worked on Visual Fox Pro back in the early days. She said that the company did provide alcohol from time to time (I think it was Fridays, but I could be remembering wrong). I'm not saying that xkcd wasn't a joke, I just wanted to point out that there might be a grain of truth to it.
I used to work for a company where the owner's son owned the domain blahblah.com. It was a way for this guy (in his 30's) to have a forum and talk with what seemed to be teens. Anyway, we had to block all the junk mail that came in. That's when I opted for a spam blocking service through Sprint so that we didn't have to deal with all the traffic. How many times have you put in blah@blahblah.com on some stupid form?
I previewed this several times and completely forgot to put in my point about the article. I wouldn't say that defacements can be "blamed" on the OS, or probably even the web server (at least most of them). Bad PHP/JSP/ASP/Ruby scripts can all be taken advantage of if the web app is written poorly and/or insecurely
I would guess that this was more likely a script-kiddie running some scanner tool trying to make use of a vulnerability in a PHP application (PHPBB, Mambo, Drupal, etc.)
In order for the attack to work, you'd have to enable the allow_url_include option, which is off by default http://www.php.net/manual/en/ref.filesystem.php#ini.allow-url-include. It would probably also need register_globals enabled, which is off by default as of PHP 4.3 (I think 4.3, it started being off in version 4). I think that allow_url_fopen allowed this behavior in PHP 4.3 http://phpsec.org/.
It's unfortunate that there aren't more decent PHP programmers. I suppose it's true of any language. You have to start somewhere.
Awesome post. I'd mod you up if I had points. There are two points that I'd like to make.
1) PC Games typically work for a lot longer than the life of a console. I can still play some of my older Windows 95 games on XP, and DOSBox allows me to play some of my really really old games on anythign DOSBox runs on.
2) The cost of a gaming computer would be better represented by taking the difference in cost of the gaming computer to the base computer. Let's say $1250 - $500 = $750. That's more accurate, though I think that price a bit off too. You can get a decent base computer, throw in some RAM and a decent video card for somewhere around $300. You still have all the functionality of a regular computer when you want to use it for that, but then you can also play games. You can even get handy controllers if that's how you like to play.
Your link was for Zend Platform. Zend Platform != Zend Core. I've downloaded the Linux version for free to mess around with before. Zend Core for Oracle or IBM is also free. http://www.zend.com/en/products/core/ Now what "commercial" support means is another situation.
I agree with you that they're living in a fantasy world when it comes to the TCO... especially in the server market. I've only worked in smaller companies, so I can't speak to the larger shops. When we have replaced a Windows server with a Linux server the number of people in the IT department didn't change, and the salaries definitely didn't change. We already had a few Linux servers, so there was no additional training needed, just a lower TCO because we didn't have to pay for all the licenses (which are more expensive for smaller companies, even with volume licensing).
I do not work for NotchUp. I just knew about it and their target hiring audience is higher level people. Though I suppose it wouldn't necessarily weed out people who have a good resume but are just slightly better at programming that that goo under my sink.
called Uplink *Spoiler alert* at the end of your regular hacker job you find out what the mega-corporation is doing and have to stop their ultimate bad worm with one that patches systems. It was a pretty fun game.
Re:The difference between IT and other professions
on
Ethics In IT
·
· Score: 1
"there is no official body emitting guidelines"
I know I took this a bit out of context, but SANS does publish a code of ethics... SANS just has no authority, so it ends up being more of a suggestion. http://www.sans.org/resources/ethics.php
I know this off-topic, but I find it hard to read anything by the author after the recent comments she posted in response to this article: http://comments.cio.com/node/176250?page=4
Disclaimer: the issue with the posts was the level of professionalism, not necessarily the stances on PHP.
I used to use their beta AJAX site, but it wouldn't work in FireFox (yes, I use Linux as my desktop), so I just switched back to the regular non-AJAX hotmail and started using Gmail. It was just the last straw and I didn't feel like supporting Microsoft anymore. Yahoo Mail works fine (not in FF 3 though), but I can see how it could easily be some cross browser support issue. Making sure things work across all browsers is a real PIA. Without looking through the code it's hard to tell if this was deliberate or not. I would probably say not though. I'm interested to see how long before this issue is resolved though. The article seems to be a lot of douchebaggery.
I'm with you. I think that there's a lot to be said about JavaScript, and this could be a big blow to the community. YUI is right up there with Prototype, etc.
Thank you! People need to read the real information. http://www.spamsuite.com/node/351 The first part of that article is opinion, but the bottom is the findings of fact (posted elsewhere on here as well). This guy used the host transfer to gather information to do other not so nice things. Other people have mentioned the "hijacking of computers". It clearly states in here that "He admitted to hacking Verizon and further admitted to doing so without authorization." I think that information was used as a background for intentions, but it could have also been used for hiding his original IP Address (I'm a bit unclear). He did try to use the private information to shut down their usenet activity. The ruling here is to not allow unauthorized people to gather that information. Authorized people in this case are system/network administrators and authorities of the company. Stop the sensationalism and read.
A $100 dollar license fee seems negligible pretty fast Except when you factor that cost per computer (not just employee). At a company size of 100 employees that only have one computer a piece, that gets to be a lot. Office 2007 Pro comes in at $347.99 (according to Amazon anyway... I was lazy to compare prices anywhere else). You're going to run into a cost of $34,799.00. When you're talking about that much money I think that OOo starts looking pretty attractive from a price perspective.
Also considering the level of proficiency, at my company anyway, with MS Office productivity isn't that high on average anyway. Switch them over and add training and you're already more productive.
I'm not as old as some people around here, so I wasn't around for the first pong days, but I was using a PC back around Kindergarten. My dad was/is an accountant and got the computer for his office. I don't remember which one I played first, but there were three of them. Xonix, Bouncing Babies, and Ninja Mission
The reason I got into programming though was combination of Wolfenstein 3D and Doom.
I can only imagine that the only reason they would want to do this is because of pressure from the MAFIAA. This is like a car manufacturer company saying "Cars are used in X% of bank robberies for the getaway vehicle. We need to make the cars not allow you to rob banks" It's not the ISPs place to do this.
IANAAP (I Am Not An Astro Physicist), but the theory seems like it would make sense. When you see explosions of one kind or another, they aren't uniform. This is probably a bad example, but take the explosion of the Death Star, or even fireworks for that matter, they don't make a perfect sphere. More matter is thrown out in some areas than in others. His explanation for the expansion of the universe was a little over my head though. I knew that the observation of time alters relative to your speed, as well as relative to your proximity to large pulls of gravity, but I didn't quite get everything he was saying. Like I said... IANAAP.
Here you go, though today's news from Trixbox isn't exactly comforting, you can still use it if you don't mind being watched. Oh yeah, and hopefully they don't make you use the pro version, cause then you have to configure your system through their networks... oh what a pain that is. Configuration should be done locally.
I know this will be somewhat redundant, but just read the FAQ on Vorbis' website. It explains everything that Nokia needed to know before writing this travesty.
I love it! A person involved with WHATWG and HTML5 reads this and gets upset. Who would have thought:) I would be somewhat upset too if someone dismissed my ideas.
Honestly, everything in the web is getting bloated. ECMA Script 4 is bloated, HTML 5 is bloated, browsers are bloated (call me crazy, but even Opera is bloated for my tastes). I agree with Doug. Let's make the web a safer and easier place to work. Whether or not his suggestions are the best solution is up for debate, but the idea to get rid of bloat and make web programmer's (aka. my) job easier can only be good.
Not to be nitpicky, because you do make some good points, but rdesktop is a very good linux replacement for remote desktop. I use it every day for my company email, since it's on Exchange and Evolution just isn't good enough yet. I have a company laptop with XP on it, so that's my email machine.
I'm a/. reader, so I didn't read the whole thread (just what I could see without clicking on stuff) so I don't know if this was intended as a Ubuntu only comparison. I just took a look at OpenFilter, and it looks pretty darn good. The only issues are the remote access, and probably media streaming, but VLC could handle that (yes, you'd have to set it up). I'm not a big fan of the remote access since I'm concerned about security of those systems, but I'm sure a VPN connection would work well... probably even SSH tunneling would work in a pinch. I'm sure it could handle multiple disks as well, since it creates logical partitions as the snap-shots, so those partitions could go anywhere there's space for them.
I try not to bash Windows too much because it does serve a purpose, but if people already know Linux, then setting the stuff up usually isn't that big of a problem. For the average Joe User, that case is different. The OP could put $169 more money into the hardware without Windows HS with a Linux solution though. It's a question of ease of use vs. cost. I'd opt for cost, but a lot of people would opt for ease of use.
It would also depend on what you need to back up. If you have Linux or Mac computers around the house, I don't think that Windows HS would work out so well. You could probably find a way to mount a share and schedule an rsync or something, but that defeats the purpose of ease of use. If you're in a Windows only environment, then Windows HS is probably best suited for you.
Now I only hope I didn't fan the flames too much and my information is accurate.
Slashdot Mirror
I used to work with someone who was on the team that worked on Visual Fox Pro back in the early days. She said that the company did provide alcohol from time to time (I think it was Fridays, but I could be remembering wrong). I'm not saying that xkcd wasn't a joke, I just wanted to point out that there might be a grain of truth to it.
I used to work for a company where the owner's son owned the domain blahblah.com. It was a way for this guy (in his 30's) to have a forum and talk with what seemed to be teens. Anyway, we had to block all the junk mail that came in. That's when I opted for a spam blocking service through Sprint so that we didn't have to deal with all the traffic. How many times have you put in blah@blahblah.com on some stupid form?
I previewed this several times and completely forgot to put in my point about the article. I wouldn't say that defacements can be "blamed" on the OS, or probably even the web server (at least most of them). Bad PHP/JSP/ASP/Ruby scripts can all be taken advantage of if the web app is written poorly and/or insecurely
I would guess that this was more likely a script-kiddie running some scanner tool trying to make use of a vulnerability in a PHP application (PHPBB, Mambo, Drupal, etc.)
In order for the attack to work, you'd have to enable the allow_url_include option, which is off by default http://www.php.net/manual/en/ref.filesystem.php#ini.allow-url-include. It would probably also need register_globals enabled, which is off by default as of PHP 4.3 (I think 4.3, it started being off in version 4). I think that allow_url_fopen allowed this behavior in PHP 4.3 http://phpsec.org/.
It's unfortunate that there aren't more decent PHP programmers. I suppose it's true of any language. You have to start somewhere.
Awesome post. I'd mod you up if I had points. There are two points that I'd like to make.
1) PC Games typically work for a lot longer than the life of a console. I can still play some of my older Windows 95 games on XP, and DOSBox allows me to play some of my really really old games on anythign DOSBox runs on.
2) The cost of a gaming computer would be better represented by taking the difference in cost of the gaming computer to the base computer. Let's say $1250 - $500 = $750. That's more accurate, though I think that price a bit off too. You can get a decent base computer, throw in some RAM and a decent video card for somewhere around $300. You still have all the functionality of a regular computer when you want to use it for that, but then you can also play games. You can even get handy controllers if that's how you like to play.
Here's a video of the actual interview. I don't think it's the whole thing though.
http://youtube.com/watch?v=LxZ6-O5R1zs
Your link was for Zend Platform. Zend Platform != Zend Core. I've downloaded the Linux version for free to mess around with before. Zend Core for Oracle or IBM is also free. http://www.zend.com/en/products/core/ Now what "commercial" support means is another situation.
I agree with you that they're living in a fantasy world when it comes to the TCO... especially in the server market. I've only worked in smaller companies, so I can't speak to the larger shops. When we have replaced a Windows server with a Linux server the number of people in the IT department didn't change, and the salaries definitely didn't change. We already had a few Linux servers, so there was no additional training needed, just a lower TCO because we didn't have to pay for all the licenses (which are more expensive for smaller companies, even with volume licensing).
NotchUp might be right up your alley.
I do not work for NotchUp. I just knew about it and their target hiring audience is higher level people. Though I suppose it wouldn't necessarily weed out people who have a good resume but are just slightly better at programming that that goo under my sink.
called Uplink *Spoiler alert* at the end of your regular hacker job you find out what the mega-corporation is doing and have to stop their ultimate bad worm with one that patches systems. It was a pretty fun game.
I know I took this a bit out of context, but SANS does publish a code of ethics... SANS just has no authority, so it ends up being more of a suggestion. http://www.sans.org/resources/ethics.php
I know this off-topic, but I find it hard to read anything by the author after the recent comments she posted in response to this article: http://comments.cio.com/node/176250?page=4
Disclaimer: the issue with the posts was the level of professionalism, not necessarily the stances on PHP.
I used to use their beta AJAX site, but it wouldn't work in FireFox (yes, I use Linux as my desktop), so I just switched back to the regular non-AJAX hotmail and started using Gmail. It was just the last straw and I didn't feel like supporting Microsoft anymore. Yahoo Mail works fine (not in FF 3 though), but I can see how it could easily be some cross browser support issue. Making sure things work across all browsers is a real PIA. Without looking through the code it's hard to tell if this was deliberate or not. I would probably say not though. I'm interested to see how long before this issue is resolved though. The article seems to be a lot of douchebaggery.
I'm with you. I think that there's a lot to be said about JavaScript, and this could be a big blow to the community. YUI is right up there with Prototype, etc.
Thank you! People need to read the real information. http://www.spamsuite.com/node/351 The first part of that article is opinion, but the bottom is the findings of fact (posted elsewhere on here as well). This guy used the host transfer to gather information to do other not so nice things. Other people have mentioned the "hijacking of computers". It clearly states in here that "He admitted to hacking Verizon and further admitted to doing so without authorization." I think that information was used as a background for intentions, but it could have also been used for hiding his original IP Address (I'm a bit unclear). He did try to use the private information to shut down their usenet activity. The ruling here is to not allow unauthorized people to gather that information. Authorized people in this case are system/network administrators and authorities of the company. Stop the sensationalism and read.
Also considering the level of proficiency, at my company anyway, with MS Office productivity isn't that high on average anyway. Switch them over and add training and you're already more productive.
I'm not as old as some people around here, so I wasn't around for the first pong days, but I was using a PC back around Kindergarten. My dad was/is an accountant and got the computer for his office. I don't remember which one I played first, but there were three of them. Xonix, Bouncing Babies, and Ninja Mission
The reason I got into programming though was combination of Wolfenstein 3D and Doom.
I can only imagine that the only reason they would want to do this is because of pressure from the MAFIAA. This is like a car manufacturer company saying "Cars are used in X% of bank robberies for the getaway vehicle. We need to make the cars not allow you to rob banks" It's not the ISPs place to do this.
IANAAP (I Am Not An Astro Physicist), but the theory seems like it would make sense. When you see explosions of one kind or another, they aren't uniform. This is probably a bad example, but take the explosion of the Death Star, or even fireworks for that matter, they don't make a perfect sphere. More matter is thrown out in some areas than in others. His explanation for the expansion of the universe was a little over my head though. I knew that the observation of time alters relative to your speed, as well as relative to your proximity to large pulls of gravity, but I didn't quite get everything he was saying. Like I said... IANAAP.
There's a new idea for a reality TV series! (on a side note: good post)
Here you go, though today's news from Trixbox isn't exactly comforting, you can still use it if you don't mind being watched. Oh yeah, and hopefully they don't make you use the pro version, cause then you have to configure your system through their networks... oh what a pain that is. Configuration should be done locally.
Okay, enough ranting, and more links.
http://www.trixbox.com/products/appliance
I know this will be somewhat redundant, but just read the FAQ on Vorbis' website. It explains everything that Nokia needed to know before writing this travesty.
http://www.vorbis.com/faq/#fan
I love it! A person involved with WHATWG and HTML5 reads this and gets upset. Who would have thought :) I would be somewhat upset too if someone dismissed my ideas.
Honestly, everything in the web is getting bloated. ECMA Script 4 is bloated, HTML 5 is bloated, browsers are bloated (call me crazy, but even Opera is bloated for my tastes). I agree with Doug. Let's make the web a safer and easier place to work. Whether or not his suggestions are the best solution is up for debate, but the idea to get rid of bloat and make web programmer's (aka. my) job easier can only be good.
Now for some real fun. JSON vs XML... go!
Not to be nitpicky, because you do make some good points, but rdesktop is a very good linux replacement for remote desktop. I use it every day for my company email, since it's on Exchange and Evolution just isn't good enough yet. I have a company laptop with XP on it, so that's my email machine.
/. reader, so I didn't read the whole thread (just what I could see without clicking on stuff) so I don't know if this was intended as a Ubuntu only comparison. I just took a look at OpenFilter, and it looks pretty darn good. The only issues are the remote access, and probably media streaming, but VLC could handle that (yes, you'd have to set it up). I'm not a big fan of the remote access since I'm concerned about security of those systems, but I'm sure a VPN connection would work well... probably even SSH tunneling would work in a pinch. I'm sure it could handle multiple disks as well, since it creates logical partitions as the snap-shots, so those partitions could go anywhere there's space for them.
I'm a
I try not to bash Windows too much because it does serve a purpose, but if people already know Linux, then setting the stuff up usually isn't that big of a problem. For the average Joe User, that case is different. The OP could put $169 more money into the hardware without Windows HS with a Linux solution though. It's a question of ease of use vs. cost. I'd opt for cost, but a lot of people would opt for ease of use.
It would also depend on what you need to back up. If you have Linux or Mac computers around the house, I don't think that Windows HS would work out so well. You could probably find a way to mount a share and schedule an rsync or something, but that defeats the purpose of ease of use. If you're in a Windows only environment, then Windows HS is probably best suited for you.
Now I only hope I didn't fan the flames too much and my information is accurate.
Correct. That's what I meant. Next time I'll check my facts before submitting :)