Slashdot Mirror


User: coryking

coryking's activity in the archive.

Stories
0
Comments
1,534
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 1,534

  1. Re:Easy on Giving Your Greytrapping a Helping Hand · · Score: 1

    PBL IP address ranges are added and maintained by each network participating in the PBL project, working in conjunction with the Spamhaus PBL team, to help apply their outbound email policies.

    Spamhaus PBL

    That list will block a good hunk of botnet spam before it ever gets past HELO.

  2. Why not? on Alaska's Mt. Redoubt Has Erupted · · Score: 4, Funny

    New Orleans don't need government waste like something called "volcano monitoring". We should all move to places like New Orleans where they dont need to waste all that kind of money monitoring something that may or may not happen. ...Good to know I'm not the only one who thought Jindel bashing volcano monitoring was highly ironic.

  3. Gmail is a goldmine on Giving Your Greytrapping a Helping Hand · · Score: 1

    I'm sure it is well worth a spammers time to at least try their luck spamming google. After all, the hard part isn't getting a list of addresses--you just spam a-zzzzzzzzzzz@gmail.com. The hard part is getting past their filter and if you can be the only spammer to gets it right, you win at being a spammer.

    But yeah, something tells me spamming google from a real server would result in getting blocked pretty quickly.

    Stupid spammers.

  4. Re:The problem with that is on Giving Your Greytrapping a Helping Hand · · Score: 1, Troll

    Okay. Fair enough. There are exceptions.

    I'm bitter because the now defunct SWEWs were overzealous assholes who cast a giant net. Our tiny /26 got caught when our upstreams /16 got blocked for whatever reason. We only had a couple clients get their shit rejected--and in those cases our client knew the recipients personally, I just had them call the recipient to inform them they had an idiot running their mail server.

    The people using things like SPEWs to block mail traffic were not thinking like you are. They are either hoping for a quick fix or are on some kind of vigilante mission. The former can be educated by letting them know how much legit shit they've blocked. The latter are hopeless and as I said a few times, it is easier to let the higher-ups know what the deal is.

    If you've got the stats to back it up, that is a whole different ball of wax. If I was in your list, I probably has doing some serious shit. I do the same thing only with comment spammers that have IPs of open proxies. As long as you have the metrics to back things up in the off-chance you do block a little legit traffic, life is cool. But you gotta have the metrics, which means you gotta thing. People who use spite-lists aren't thinking, and that is the problem.

  5. Re:Thats fine with me on Giving Your Greytrapping a Helping Hand · · Score: 0, Troll

    Except you'd be wrong because we aren't spammers and dont have any on our network. "You" are just an overzealous sysadmin who blocked legit email that was meant for your sales staff.

  6. Easy on Giving Your Greytrapping a Helping Hand · · Score: 3, Insightful

    Because it is cheaper in terms of bandwidth and CPU to first reject email based on things other than content. For example, you can quickly weed out about 85% of all spam traffic by just rejecting assholes who use mail-formed HELO's or don't have proper DNS. Filtering based on simple things like that dont eat your CPU and are very effective*. You can also weed out a bunch of trash by simply blocking residentail IP addresses using Spamhaus**. Greylisting will nuke about 10% of the rest, leaving you with 5% for content filtering.

    If spammers buy "real servers" it means they aren't sending you bullshit headers with funky smelling DNS. It means they will eat into your CPU budget because you now have to fall back on content filtering. You dont want to do content filtering. You want to have spammers strike out because they aren't acting like real mail servers. 85% of spam comes from shit that acts nothing like a legit mail server.

    * If you your EHLO doesn't match your reverse DNS record, say HELO to a disconnect. If AOL and Yahoo are doing it, I'll do it too. Cause if you don't have it configured the way the big-boys like it, you have worse problems then me rejecting your email...

    ** whose list of residential IP's are provided by the carriers themselves, not a bunch of spiteful assholes like SPEW's. And if you insist on running some SMTP server at home, you can de-block yourself automatically by visiting their website. Plus I'm pretty sure the bigboys use this list as well, so again, if I block your email, AOL and Yahoo are blocking it too.

  7. Pretty much my experiance as well on Giving Your Greytrapping a Helping Hand · · Score: 3, Interesting

    Just switched a client to google mail for business (really, what is it called? Google Apps? Google Mail? huh) and have heard nothing but complaints. The "gmail" thing gets email that never shows up in their imap folder, their imap folder gets stuff that disappears from their gmail thing.

    Attachments work funny.

    If you delete message from a "thread" in gmail, it will delete every "send" and "reply" message in the whole damn thread and thus nukes all of it in Outlook. If you nuke a single message in IMAP, it fucks up how gmail handles the thread.

    All kinds of things. Their thole thing is great, but the minute you want to use a "real" mail program on top of it (like most businesses I know), trouble brews and shit just doesn't work the way you'd expect. There was a reason Google took so long to add IMAP support--their whole damn system works like no other email program. I bet they had to basically hack the whole damn thing to work like a "real" mail system IMAP was designed for. Basically, using them is a horrible form of lock-in.

    Now I have to move them back to a "real" mail system this coming week so their life can work as it always did.

  8. Except it sucks on Giving Your Greytrapping a Helping Hand · · Score: 2, Interesting

    IMAP is flaky and slow. It is a hack to map googles lack of folders onto IMAP's idea of folders.

    It is a bitch for an administrator. There is no good way for an admin to setup email forwarding accounts--yeah, the user can do it, but you have to create an account for them and they have to do it, you cannot!. Their concept of distribution lists suck. You cannot change somebodies email address without creating a new account. I could go on but I wont.

    Basically, for a business, using Google apps sucks. The only thing it has for it is the webmail interface. But integrating "real" mail programs with it sucks.

    Bottom line is Google apps is 100% lock-in. It does thing in its own unique way and does not integrate with anything else worth a damn.

  9. Thats fine with me on Giving Your Greytrapping a Helping Hand · · Score: 0, Troll

    Cause I'll just email your manager and the sales guy who didn't get my customers email and hopefully you'll be fired.

    Playing email games like that with your own personal mail server is fine. Doing it on a corporate network isn't. And nothing makes me more happy then sicking pissed off sales guys and managers in your company after you. It is far easier to get your manager or sales staff to force you to remove that blacklist then it is to deal with with the assholes like you or the guys running the RBL. The only legit RBL's are places like Spamhaus who have automated ways to remove yourself from their automated list. I have no problems with those lists because botnets will not remove themselves from the list, but legit people just follow the link in the bounce and are removed immediately. Anything else, I try to get assholes who use the list fired from their company.

  10. The problem with that is on Giving Your Greytrapping a Helping Hand · · Score: 0, Troll

    You'll turn into SPEWs, or SORBS, or whoever those assholes are.

    Start blacklisting ISP's who rent them servers, and soon enough You'll have blacklisted pretty much half the internet. Most of them are innocent too.

    Vengeance blacklisting is for assholes. I once had a netblock land in SPEW's snare and rather than try to get de-listed, I just emailed the managers and sales people of the company who refused our email. I figured if I went over the power-tripping asshole running the mail server and went to somebody who understood how much legit email they probably losing, maybe the asshole mail dude would get fired.

    Hope he did get fired too. You can blacklist whoever you want in your basement computer, but it is a whole different story when the company you work for starts rejecting corporate mail based on spite-lists like SPEWs or whatever you are suggesting.

  11. Stats on Giving Your Greytrapping a Helping Hand · · Score: 3, Informative

    For every single message you are getting, google is probably filtering out at least a hundred.

    My own mail servers, tiny in comparison, get about a connection every second. 98% of those connections are rejected out of hand (bad HELO, fucked reverse DNS, residential IP address, bullshit brute-forced email address, etc) and of that remaining 2%, half is legitimate email. Which means for every hundred connections, one is legitimate. So 1% of all our mail traffic as legitimate. 1%.

    In other words, you have no clue at all how fucking bad spam is. It is bad. Really bad.

  12. Re:If you are right, we aren't very smart on Windows and Linux Not Well Prepared For Multicore Chips · · Score: 2, Funny

    our train of though it single-threaded, but that doesn't mean our train of though isn't just a byproduct

    And sometimes, even, our background grammar checker misses things that our background finger-controller mis-types while on auto pilot. thought/though, thing/think are stroke-patterns that my hand-controller mixes up a lot and since this isn't something super-formal, the top-part of my brain never catches.

  13. Re:If you are right, we aren't very smart on Windows and Linux Not Well Prepared For Multicore Chips · · Score: 2, Interesting

    Logically thinking, any single thought can't be easily parallelized, but why couldn't we think two thoughts at the same time?

    Yes, but there is increasing evidence (dont ask me to cite :-) that many of our thoughts are something that some background process has been "thinking about" long (i.e. seconds or minutes) before our actual conscious self does. There are many examples of this in Malcolm Gladwell's "Blink", though I dont feel much like citing them. Part of that book, I think, basically says that we should really trust the underlying parallel part of our brain and "go with our gut" more often then western society often feels comfortable doing.

    Basically, yeah, our train of though it single-threaded, but that doesn't mean our train of though isn't just a byproduct of lower-level processes that have figured stuff out long before "we" become aware of it.

  14. If you are right, we aren't very smart on Windows and Linux Not Well Prepared For Multicore Chips · · Score: 4, Interesting

    But most computing in the world is done using single-threaded processes which start somewhere and go ahead step by step, without much gain from multiple cores.

    The fact that all we do is sequential tasks on our computer means we are still pretty stupid when it comes to "computing". If you look outside your CPU, you'll see the rest of the computers on this planet are massively parallel and do tons and tons of very complex operations far quicker than the computer running on either one of our desks.

    Most of the computers on the planet are organic ones inside of critters of all shapes and sizes. I dont see those guys running around with some context-switching, mega-fast CPU, do you?**. All the critters I see are using parallel computers with each "core" being a rather slow set of neurons.

    Basically, evolution of life on earth seems to suggest that the key to success is going parallel. Perhaps we should take the hint from nature.

    ** unless you count whatever the hell consciousness itself is... "thinking" seems to be single-threaded, but uses a bunch of interrupt hooks triggered by lord knows what running under the hood.

  15. You know on Taxpayers Fund AIG Lawsuit Against US · · Score: 1

    The people getting these bonuses don't have to fucking take them. They can, you know, say "thanks but no thanks, I just dont feel right taking taxpayer money like this". Would you take the money? I know I wouldn't.

    The fact that these people seem to have taken the money means, in my book, they are horrible people so fuck 'em. If they were decent humans, they'd go on Leno or something and say "I refused to take the money" and we would cheer them as heros (or something).

  16. Easy as hell on Obama Administration Promises "Thorough Review" of USTR Policies · · Score: 4, Insightful

    Pick something you support.

    If you are a liberal, label all arguments against your cause as biased crap from a conservative media. Make sure to point out their greed and lack of being right. Make sure to point out how from this day forward you will boycott them.

    If you are a conservative, label all arguments against your idea as biased crap from a liberal media. Be sure to point out their general illogic and lack of being right. Make sure to point out how from this day forward you will boycott them.

    If you are a Ron Paul supporter, you also must point out the media is actually scared of you. Point out that they are a monopoly and if ${GOVERNMENT} busted them up, Ron Paul would win*. Make sure to point out how from this day forward you will boycott them. Also, make sure to flood their phones, blackberries and other electronic devices with profanity laced letters. That will teach them.

    In other words, all media that is against ${YOUR CAUSE} is ${BIASED}.

    * and do this with out any hint of irony, what with asking for the government to intervene with a private entity...

  17. OWN on Obama Administration Promises "Thorough Review" of USTR Policies · · Score: 2, Funny

    I'm sorry, but you didn't spell out what O.W.N. means. Does that stand for "Obama's Winning Number" or "Omaha Women's Network"?

    You are as bad as the editors here. Please define your terms before using them.

    (dare I leave off anything suggesting this isn't snark?)

  18. Re:Whisky Tango Foxtrot on Obama Administration Promises "Thorough Review" of USTR Policies · · Score: 1

    Obviously you know what Wisky Tango Foxtrot means or I wouldn't have brought it up.

    "Humor", by the way, is for unprincipled fools who need acronyms spelled out for them--acronyms like "Whisky Tango Foxtrot". Jokes, too, are for the uneducated, unenlightened hordes just outside the gates of Slashdot Central.

    Where am I going with this? Obviously, *obviously*, anybody with a clue knows already. Obviously, Slashdot editors should never spell out abbreviations of any kind at any time. We here are so smart we already know every acronym in any industry at any point in history. Only an idiot would not know what RKDOD means or even the simple SDOKC* stands for and Slashdot and the elite posters here do not take kindly to idiots.

    * The SDOKC crowd, by the way is dead wrong in their interpretations of DFLF. I always laugh at their foolish ways.

    In other words, my point is it is fucking snobby as hell to not fucking spell out abbreviations and acronyms your audience probably does not know. The editors of Slashdot need to get off their high horse. Excuse my french.

  19. Whisky Tango Foxtrot on Obama Administration Promises "Thorough Review" of USTR Policies · · Score: 1

    Is itself an acronym. However, I'll take the example set by the Slashdot editors and not spell it out for you. After all, we here at Slashdot know everything already. If we needed to spell it out to you, you really should be working in a field more suitable for you--like picking lint out of driers at a laundromat.

    Now obviously you and I both know what Whiskey Tango Foxtrot stands for. Really I'm just belaboring the obvious while I kill time as the store boys order an extra-wide Top Hat. As you know, it is very hard to find fitted hats that actually fit our large diameter heads. Clearly there much money to be made selling extra-wide hats to highly intelligent individuals but if it would mean bending our principles and reducing ourselves to mere salesmen, forget it.

  20. The ABBR tag! on Obama Administration Promises "Thorough Review" of USTR Policies · · Score: 4, Insightful

    Use it dammit! If you are gonna insist on not spelling out TLA's for us, at least spell them out using the proper HTML!

    That said, it is only polite to spell out your damn acronyms. This audience knows WTF "WTF" stands for and I dont have to spell out HTML either, but KEI? Is that like "Key Enterprise Induction", "Keynan Earned Income", or "Krusty's Entertainment Industry"? Who knows!

  21. Re:the larger degrees are nicer on The 100 Degree Data Center · · Score: 1

    I agree with you both. Metric needs to rule the world, but it's temperature scale doesn't have enough resolution for use in daily existence.

    However, screw inches, feet, yards and however many damn feet are in a mile. We gave up fractional units in the stock market, and it is time to do so with our measurements too.

  22. The problem is on Recovery.gov Not Very Transparent · · Score: 1

    PHP doesn't have a sensible way to set the path it uses for library scanning. And if it does, I've yet to see it in widespread use.

  23. Heh on Ext4 Data Losses Explained, Worked Around · · Score: 1

    it makes sense to patch this particular issue by implicitly inserting fsync()s just before rename()s over existing non-empty files are committed to disk

    I can already visualize the colorful, profanity laced comments your idea will produce. Something like
    /* Bugfix #30534: Workaround for fucking EXT4, who is so fucking stupid it cannot even write out our rename in the proper sequence and might trash the users filesystem. Since the EXT4 guys refuse to fix their shitty ass filesystem, we have to hack around their busted shit by fucking fsyncing any god damn changes we might have done before doing any kind of directory operations. bite me assclowns. */

    ... but my example comment is probably the PG13 version of what it would really look like. I imagine it will be much worse and probably not safe for even some adults.

  24. Re:There are 2 separate issues being confused here on Ext4 Data Losses Explained, Worked Around · · Score: 1

    I really dislike arguments that suggest that we should only design for normal uses, and never design more specialized things that trade off generality for other desirable characteristics.

    You can go hog-wild with crazy, escoteric, features as long they are off by default. The default configuration of a filesystem should leave those things off. If people want turn on the crazy shit, knock them selves out.

    It merely being difficult to use

    If the default configuration is "hose my box, but do it really fucking fast", then it isn't just difficult to use, but it is badly designed. There is no excuse for bad design.

  25. You know on Ext4 Data Losses Explained, Worked Around · · Score: 1

    Ext4 module will be gaining a new mount option that will ensure that a file is written to disk before the renaming occurs

    If they cared about data integrity, they'd have a mount option to turn it *on*. Then in the manual, put a nice fat warning about "if you set this flag, there is a chance we will trash your filesystem, but do it really fast :-)".

    I judge a program by shit like this. PostgreSQL comes out of the box with all kinds of integrity improving, but performance hurting options enabled by default and has nice fat comments about the lines were you can turn off stuff like fsync (which I'd never consider).

    Bottom line, if they want to restore faith in their file system, the default, flag-free option would be the most stable but worst performing. Let us decide when to run the risk of trashing our file system, not find out the defaults sucked after the file system is hosed.

    > this space reserved for nitwits who will claim I should have read the docs before doing anything so I'd know why I should always set this "dont-trash-my-filesystem" flag.... piss off, I dont read the manual before mounting a NTFS formatted USB drive, why should I have to read it before mounting your shitty filesystem?