It's what Windows used to use to do authentication (NTLMv1). They improved on it a while ago (NTLMv2) but still transmit the LM hash by default in all authentication - basically rendering the security of NTLMv2 completely useless.
I used to piss off the admins where I last worked by runnig L0hptCrack over their tightly secure network and telling them the admin password every time they changed it:) Luckily I was high enough in the company to get away with it (I was authorised to know the password anyway... just more fun that way).
You can and should switch this off unless you're using just a home LAN (beats me why it isn't off by default). Even better upgrade all your network to at least Win2k then disable NTLM entirely and use kerberos (samba 3 can be a full kerberos domain member).
That used to be true, but with things like IE bugs you never know.
I've got a machine that sits in the corner and generally doesn't get used a lot. The other day it came up with a bizarre dialog - "Windows Messenger is shutting down". Well the messenger service is disabled on that machine, so I pulled the plug and ran AVG across it - found a trojan embedded in the "System Restore" folder (which is also disabled, precisely for that reason, as trojans re-install themselves on reboot if you clean them with that enabled).
That machine has only ever been used to browse.. it doesn't even have enough disk space to do much else. But then I know how easy it is to pickup trojans using IE - this laptop I'm on had this when I first installed it. Installed XP and SP2 from the CDs, connected the LAN cable to get the drivers, browsed to the driver site, installed driver & AVG... AVG found a trojan. Total time to infection less than 10 minutes.
On GCC on AMD64 longs == 64bit, int == 64bit. Perversely long long also == 64bit. This follows other 64bit architectures, such that 99% of code will compile without issue.
On Visual Studio targeting AMD64 is a bit wierd.. ints are 32bit and longs are 32bit. This means you're not *really* targetting 64bit.. you don't get the inherent advantages (64bit time_t for example). Presumably they did this for backward compatibility, then broke it by making size_t 64bit (and of course off_t is 64bit because it has to be) - this is why you get all the portability warnings when you try to compile 32bit software these days. Most software will need some degree of surgery to compile under Win64 because of this.
All of my software works fine in both 32bit and 64bit (I target 64bit Solaris and HPUX as well as 64bit Linux), except W64, which will probably require a special version (no problem because it's in perpetual beta anyway).
It differs by country. Here we *always* put the currency symbol first (actually it looks pretty stupid the other way around).
I just flipped through the Windows regional settings, and it looks like it's about 70% in the front, and 30% at the end. The $ sign is always at the front.
There are a zillion things to sort out before worrying about this one...
It's just one of those junk research papers you get sometimes. Universities will fund anything if you dress it up in enough language, like the guy who got a half million dollar grant for researching "the effect of alchohol on the human body" then spent the next year getting very very drunk.
No, the guy in the article strapped a cardboard box around his neck, wrote 'ipod' on it plus some silver foil to represent the buttons, then proceeded to get his server slashdotted:)
*really* slow news day today... They don't come lamer than this.
Firstly, you don't 'have to keep two copies'. ATRAC is the internal format stored on the disk. You never ever need to deal with it. Just plug the minidisc into the optical out of the sound card or hifi. I tend to go from the hifi as you get better quality that way - PC CD players are universally garbage.
Once you've recorded it onto disk it's there pretty much forever. New disks are dirt cheap.
Secondly, the 'normal player' for 99.999% of prople is the CD. You have to convert to MP3 to load into an iPod, with the added inconvenience that you need an expensive PC and lots of free disk space (plus copies of ripper programs which aren't for the uninitiated).
Remember most people don't even have a PC (maybe about 20% of my friends do) so the ipod isn't an option for them.
The thing that puts me off is how damn cheap the ipods look. They use white casing (gets dirty really easily so it'll look awful after a couple of weeks) and were too cheap to use proper buttons so they used a touchpad instead (touchpads are a personal hate after getting a laptop with one.. ugh!).
I've only met one ipod user, and he got it cheap with a powerbook on educational discount.
Most other people have the standard 128MB MP3 'sticks' as they're a lot more convenient/cheaper/durable.
The best one price-wise (which it pretty much the only thing that matters with thise stuff.. it's an MP3 player, it plays MP3s) seems to be the Thompson, at half the cost of the ipod.
Convenience wise though you'll have to work hard to beat minidisk. Having to plug your player into a PC just to change albums gets old really fast.
The tipping point exists in many things. Once you get over a certain % then you're no longer the also-ran and people start taking you seriously.
The tipping point for voters in this country (UK) for example, means that the 3rd party (Liberal Democrats) only has to get around 25% of the votes before their number of seats climbs considerably... that's a statistical anomaly that comes out of the quirky way we do our elections here (eg. in a pure 2 party race it would be theoretically possible to get 49% of the vote and zero seats. You can get 74% of the vote and lose, by the same measure... real world statistics of course aren't that clean).
If Linux got to 20% market share for example, would there be games for it? You bet - who's going to turn down that kind of cash. Would there be preinstalled machines on the high-street? Very likely.
Windows went through the same thing - for long time everyone wrote for DOS because nobody had Windows... then a point was reached where it became economically viable to write for Windows, and DOS went into decline quite rapidly.
The innards may well be crap. If it works, who cares?
I've looked at a lot of code in my time and I'd rate 1% of it as actually 'good'.
It's particularly tragic when people 'update' perfectly good apps with a piece of unmanageable spagetti.. I tend to just keep my distance when that happens.
This is *not* about file extensions or otherwise (Unix has done this right since day one, which is why you don't need to put.bat on the end of your shell scripts) it's about transparently accessing different namespaces.
Windows and OSX are a long way from this. They just about understand http, and even then on at the application level.
I've talked to a bank programmer who used to do the natwest stuff. He couldn't tell me that much due to security but one thing he did say is that everything is transactioned and verified, then checked by an independent system. There is absolutely no way of it losing a transaction (I guess if the entire network, and its backup, went down simultanenously then it might get a bit dodgy).
I started out with a wide open wiki, as a wiki should be. People started running robots across it that randomly selected the 'Delete Page' link. This was scary enough until one succeeded in selecting 'Yes' in the confirmation page right after. That was after less than a week.
Next stage was to lock it down to registered users. I was OK for a couple of months, then Chinese spammers started registering themselves and replacing editing single page with hundreds of links to their porn sites (I suspect it was some kind of bot). The worse case took me two hours reverting pages to get the site back online.
I'm now locked down to only one or two special users. I'll probably abandon the wiki idea altogether in the next website revamp - it doesn't work on the public internet.
I first came across the widespread use of exceptions in COM with ADO code. They really pissed me off - something deep within ADO (usually nothing to do with me) would throw an exception and a random other part of my program would fall over with *no* indication of where the error came from (it didn't help that this was in the VC6 days and the exception handling was nonfunctional - it trashed the stack so you could never recover.. you had just enough time to put up a dialog before your program was doomed).
I ended up having to rewrite the com_error object so it traced out a message with the location of the actual error... much later on I worked out how to stop it being thrown in the first place & to return the documented error codes.
That's the real problem with them - unless you have a catch() after nearly every statement it's basically impossible to work out what went wrong - 'File Not Found' - which file? which function? Why, exactly?
I totally disagree that you mostly don't care where the error was thrown. I *do* care, because I have to fix it. Maybe the end user doesn't care, but even then I want the code to generate an error report that tells me where to look.
So you've recompiled the kernel, and used precompiled binaries for everything else.
That means you have *not* compiled gentoo. In fact you've lost the whole point of running it because you've used someone else's binaries - might as well have used debian.
On an amd64 it takes about 3 days to take gentoo from stage1 to something that runs. That doesn't include KDE, only X (since for some insane reason links on gentoo is dependent on X, you can't even browse during those 3 days).
Last time I tried it KDE wouldn't even compile on amd64, and they didn't support Kerberos or Ldap. That was a few months ago though. Haven't tried since - I can have a working debian in 15-30 minutes and my time is valuable.
Slashdot Mirror
It's what Windows used to use to do authentication (NTLMv1). They improved on it a while ago (NTLMv2) but still transmit the LM hash by default in all authentication - basically rendering the security of NTLMv2 completely useless.
:) Luckily I was high enough in the company to get away with it (I was authorised to know the password anyway... just more fun that way).
t ro l\LSA\LMCompatibilityLevel
I used to piss off the admins where I last worked by runnig L0hptCrack over their tightly secure network and telling them the admin password every time they changed it
You can and should switch this off unless you're using just a home LAN (beats me why it isn't off by default). Even better upgrade all your network to at least Win2k then disable NTLM entirely and use kerberos (samba 3 can be a full kerberos domain member).
(FYI: See:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\con
A value of 0 (the default) means you have no security.
Change it to 3 on your clients, or 5 on your Domain controller)
Tryt s/pre sident/
http://www.cnn.com/ELECTION/2004/pages/resul
The other link needs registration.
That probably happens every day.
Heck, I even do it when coding. I keep saying I'm a few days off finishing etc. so that I've got some slack (and don't end up with a rush-job).
A lot of governments *are* terrorists.
Civilised ones, however, don't use their armed forces to intimidate or frighten, just to defend and aid.
He should get a virtual server. I get 100GB/mo for $20... and I serve some quite large files, too.
Writable DVD is about the same price as Writable CDR at the moment... it's bottomed out.
Dual layer, however, is still stupid money - it's just not cost effective any more.
That used to be true, but with things like IE bugs you never know.
I've got a machine that sits in the corner and generally doesn't get used a lot. The other day it came up with a bizarre dialog - "Windows Messenger is shutting down". Well the messenger service is disabled on that machine, so I pulled the plug and ran AVG across it - found a trojan embedded in the "System Restore" folder (which is also disabled, precisely for that reason, as trojans re-install themselves on reboot if you clean them with that enabled).
That machine has only ever been used to browse.. it doesn't even have enough disk space to do much else. But then I know how easy it is to pickup trojans using IE - this laptop I'm on had this when I first installed it. Installed XP and SP2 from the CDs, connected the LAN cable to get the drivers, browsed to the driver site, installed driver & AVG... AVG found a trojan. Total time to infection less than 10 minutes.
On GCC on AMD64 longs == 64bit, int == 64bit. Perversely long long also == 64bit. This follows other 64bit architectures, such that 99% of code will compile without issue.
On Visual Studio targeting AMD64 is a bit wierd.. ints are 32bit and longs are 32bit. This means you're not *really* targetting 64bit.. you don't get the inherent advantages (64bit time_t for example). Presumably they did this for backward compatibility, then broke it by making size_t 64bit (and of course off_t is 64bit because it has to be) - this is why you get all the portability warnings when you try to compile 32bit software these days. Most software will need some degree of surgery to compile under Win64 because of this.
All of my software works fine in both 32bit and 64bit (I target 64bit Solaris and HPUX as well as 64bit Linux), except W64, which will probably require a special version (no problem because it's in perpetual beta anyway).
It differs by country. Here we *always* put the currency symbol first (actually it looks pretty stupid the other way around).
I just flipped through the Windows regional settings, and it looks like it's about 70% in the front, and 30% at the end. The $ sign is always at the front.
There are a zillion things to sort out before worrying about this one...
It's just one of those junk research papers you get sometimes. Universities will fund anything if you dress it up in enough language, like the guy who got a half million dollar grant for researching "the effect of alchohol on the human body" then spent the next year getting very very drunk.
No, the guy in the article strapped a cardboard box around his neck, wrote 'ipod' on it plus some silver foil to represent the buttons, then proceeded to get his server slashdotted :)
*really* slow news day today... They don't come lamer than this.
Yes this gideon bloke keeps leaving his behind in the hotels I visit.
Damn forgetfull, if you ask me....
Someone actually spent time dropping bits of paper to try to work out why they didn't fall straight?
Nice work if you can get it. I bet they were paid handsomely too.
Firstly, you don't 'have to keep two copies'. ATRAC is the internal format stored on the disk. You never ever need to deal with it. Just plug the minidisc into the optical out of the sound card or hifi. I tend to go from the hifi as you get better quality that way - PC CD players are universally garbage.
Once you've recorded it onto disk it's there pretty much forever. New disks are dirt cheap.
Secondly, the 'normal player' for 99.999% of prople is the CD. You have to convert to MP3 to load into an iPod, with the added inconvenience that you need an expensive PC and lots of free disk space (plus copies of ripper programs which aren't for the uninitiated).
Remember most people don't even have a PC (maybe about 20% of my friends do) so the ipod isn't an option for them.
The thing that puts me off is how damn cheap the ipods look. They use white casing (gets dirty really easily so it'll look awful after a couple of weeks) and were too cheap to use proper buttons so they used a touchpad instead (touchpads are a personal hate after getting a laptop with one.. ugh!).
Eh? When's the last time you looked at comparable products then?
Ipod is 1.5 - 2* the price of its nearest competitor. It's just 'coolness' that keeps it selling.
All HD MP3 players have roughly the same storage options, even at the lower price.
Bigger? Who cares? We're not talking laptop size here..
Odd.. must be a US thing.
I've only met one ipod user, and he got it cheap with a powerbook on educational discount.
Most other people have the standard 128MB MP3 'sticks' as they're a lot more convenient/cheaper/durable.
The best one price-wise (which it pretty much the only thing that matters with thise stuff.. it's an MP3 player, it plays MP3s) seems to be the Thompson, at half the cost of the ipod.
Convenience wise though you'll have to work hard to beat minidisk. Having to plug your player into a PC just to change albums gets old really fast.
The tipping point exists in many things. Once you get over a certain % then you're no longer the also-ran and people start taking you seriously.
The tipping point for voters in this country (UK) for example, means that the 3rd party (Liberal Democrats) only has to get around 25% of the votes before their number of seats climbs considerably... that's a statistical anomaly that comes out of the quirky way we do our elections here (eg. in a pure 2 party race it would be theoretically possible to get 49% of the vote and zero seats. You can get 74% of the vote and lose, by the same measure... real world statistics of course aren't that clean).
If Linux got to 20% market share for example, would there be games for it? You bet - who's going to turn down that kind of cash. Would there be preinstalled machines on the high-street? Very likely.
Windows went through the same thing - for long time everyone wrote for DOS because nobody had Windows... then a point was reached where it became economically viable to write for Windows, and DOS went into decline quite rapidly.
UCLA: bud
Stanford: weis
Slashdot: e...NO CARRIER
The innards may well be crap. If it works, who cares?
I've looked at a lot of code in my time and I'd rate 1% of it as actually 'good'.
It's particularly tragic when people 'update' perfectly good apps with a piece of unmanageable spagetti.. I tend to just keep my distance when that happens.
Huh? Did you even read the summary?
.bat on the end of your shell scripts) it's about transparently accessing different namespaces.
This is *not* about file extensions or otherwise (Unix has done this right since day one, which is why you don't need to put
Windows and OSX are a long way from this. They just about understand http, and even then on at the application level.
I've talked to a bank programmer who used to do the natwest stuff. He couldn't tell me that much due to security but one thing he did say is that everything is transactioned and verified, then checked by an independent system. There is absolutely no way of it losing a transaction (I guess if the entire network, and its backup, went down simultanenously then it might get a bit dodgy).
I started out with a wide open wiki, as a wiki should be. People started running robots across it that randomly selected the 'Delete Page' link. This was scary enough until one succeeded in selecting 'Yes' in the confirmation page right after. That was after less than a week.
Next stage was to lock it down to registered users. I was OK for a couple of months, then Chinese spammers started registering themselves and replacing editing single page with hundreds of links to their porn sites (I suspect it was some kind of bot). The worse case took me two hours reverting pages to get the site back online.
I'm now locked down to only one or two special users. I'll probably abandon the wiki idea altogether in the next website revamp - it doesn't work on the public internet.
I first came across the widespread use of exceptions in COM with ADO code. They really pissed me off - something deep within ADO (usually nothing to do with me) would throw an exception and a random other part of my program would fall over with *no* indication of where the error came from (it didn't help that this was in the VC6 days and the exception handling was nonfunctional - it trashed the stack so you could never recover.. you had just enough time to put up a dialog before your program was doomed).
I ended up having to rewrite the com_error object so it traced out a message with the location of the actual error... much later on I worked out how to stop it being thrown in the first place & to return the documented error codes.
That's the real problem with them - unless you have a catch() after nearly every statement it's basically impossible to work out what went wrong - 'File Not Found' - which file? which function? Why, exactly?
I totally disagree that you mostly don't care where the error was thrown. I *do* care, because I have to fix it. Maybe the end user doesn't care, but even then I want the code to generate an error report that tells me where to look.
So you've recompiled the kernel, and used precompiled binaries for everything else.
That means you have *not* compiled gentoo. In fact you've lost the whole point of running it because you've used someone else's binaries - might as well have used debian.
On an amd64 it takes about 3 days to take gentoo from stage1 to something that runs. That doesn't include KDE, only X (since for some insane reason links on gentoo is dependent on X, you can't even browse during those 3 days).
Last time I tried it KDE wouldn't even compile on amd64, and they didn't support Kerberos or Ldap. That was a few months ago though. Haven't tried since - I can have a working debian in 15-30 minutes and my time is valuable.