No other shortcomings. Any time a Debian zealot makes reference to the ancient versions of the software packaged as "stable" there is always some comment about "no need for the latest toys". This really turns a blind eye to the fact that software such as postgresql, sendmail, and even perl have had ten trillion bugs fixed since the releases that come with Debian stable. Debian addresses security issues in a reasonably timely fashion (although red hat typically does have them beat now). I would like to see them realize that new versions of software can represent a significant amount of bugs fixed and that it is not necessarily a good thing to just continuously backport security fixes to ages-old versions of these programs.
To point out the good, a base debian installation makes an excellent foundation on which to tarball everything. I have done this to scores of machines (I have four to do this to next week) and it works reasonably well.
If the inclusion of archaic, bug-ridden software is your idea of "quality", then I concur. Postgresql 6.5 is definitely a quality-laden release, the later versions just implement useless features such as "stability".
Mod this guy up and/or mod the parent down! This guy is right, HTML sequences are essentially escape sequences in that the browser stops outputting the text and instead internally processes the escaped data.
Having written both conventional software and web "scripts", I find the coding of a web application of reasonable complexity to be far more complicated than that of a similarly-functioning piece of "normal" software. It really takes a crapload of effort to produce some types of functionality in a web app that would be a no-brainer in a conventional app.
Slash is a great example, it's a gazillion line nightmare from hell that looks and works like crap, but the same thing could be duplicated as a non-web app (probably by the same developers) with a fraction of the effort and the end result would certainly look a hell of a lot better and would probably be more reliable as well.
All attempts to psychoanalyze a certain subculture by people not qualified to do such is most likely an attempt by the "analyst" to maintain illusions of superiority over those in the subculture being "analyzed".
=====
Likewise, we should expect using zero point energy is a virtual impossibility until you understand the physics behind it. So unless this genius in Ireland can explain the precise nature quantum gravity and cosmological inflation I think we can safely assume his is a fraud.
=====
You can expect that but it theoretically is not a requirement. It is entirely possible that someone will stumble across the discovery and consistently be able to produce the desired result without having a scientific understanding of exactly what is going on. It's improbable but certainly not impossible enough to be entirely ruled out.
=====
"Firewall tightening prevented further intrusion beyond the firewalls. What followed was first a Firewall password brute force attack resulting in successful hash and destruction of the firewall," it said.
=====
The firewall password was brute-forced? Kind of makes you wonder about the security of the rest of the network...
You can be certain that the implementation of the player will have DRM.
maru
Re:It's Solutia, not Monsanto, who's at fault
on
Monsanto and PCBs
·
· Score: 2
Merging, unmerging, and whatnot doesn't change the fact that The Industry Giant Formerly Known as Monsanto has a horrific environmental history and have unleashed some really nasty stuff on people and the environment. This would include products from over 30 years ago (Agent Orange) right up to today (RoundUp).
I too am in Florida. Even though it is an employment-at-will state the employer still faces certain legal risks in terminating employees. The employer can greatly increase or decrease their potential liability through certain HR practices. A good way to decrease liability is to provide written notice of deficiencies in advance and to allow the employee to attempt to resolve the issues. This makes it essentially impossible for the employee to win a wrongful termination (discrimination) suit when the employee is subsequently dismissed for being unable to resolve these previously-documented issues. Another method that can be used is to terminate the employee without giving any reason at all. On the other hand, a great way to ensure that your company will be doling out some cash is to fire someone and provide them with a list of reasons, never previously provided to the employee in writing, for the termination. It sounds like this was potentially what was occurring in the original poster's case. This opens the company up for potential liability even in a at-will state since the reasons given for termination may not be truthful, thus theoretically hiding the actual reason for termination (discrimination).
Since I find that very few managers (for whatever reason) will terminate an employee without providing any reason it is best to go the "written deficiency" route to minimize liability.
In order to protect the company from wrongful termination lawsuits, performance or behavioral issues are supposed to be presented in writing, although they are typically discussed verbally first. Failure to spell the issues out explicitly in writing opens a company to liability.
The guy shouldn't be left guessing as to whether or not there is some sort of discrimination occurring. If management has an issue with some aspect of the employee's behavior or performance it is supposed to be brought to the attention of the employee. If management has not specifically mentioned a performance problem to the employee then the employee is right to think that there is not one. It is maneuvers by management such as what is being described by the poster that typically results in a lawsuit. Any halfway decent employer would have shielded themselves against this sort of liability by using standard human resources policies, therefore this employer must suck and the guy should seek employment elsewhere.
...and let's say that, over the course of a year, the number of servers grows to 123. What is the likelyhood that you will still be able to group similarly-functioned servers together?
...or some other equally geeky, frequently used concept. I see greek gods a lot in NT houses. LOTR has been done to death in unix shops.
I have only named two networks. One has devices named after parts of the human body and the other has devices named after vegetables that people typically are not fond of.
Fiber is pretty pricey per foot but the termination is a killer. You'd have to have a contractor do it to be cost effective. The connectors (something like a Siecor Uni-cam) are around $30 bucks a pop, the termination kit to be able to put them on runs around $600, and it takes about 10 connectors worth of practice to be able to do it properly.
Uh, STP is 150 ohm cabling typically used for token ring. It doesn't meet the TIA 568 standards although you can use it with ethernet if you use baluns (ugh). Generally speaking, STP is not for ethernet.
=====
This is a function of your browser as much as it is Slashdot.
=====
Not really, the browser reacts to the caching headers that were sent to it. If the headers indicate no-caching, IE will reload the page from the server and clear all form data.
http://www.aquaria.net/lawsuit.html contains details about a current issue where the company "Pets Warehouse" has a $15,000,000 lawsuit filed against a dozen or so members of the "Aquatic Plants Digest" mailing list. In my opinion, the defendants were complaining in a manner typical of the complaints about various business one would see in message forums across the internet (bad service, dont shop here, blah blah blah). This lawsuit is real and the defendants have all been served. This lawsuit seems to be even more frivolous than the one mentioned in the newsbyte article.
Your message is possibly one of the most intelligent I have ever read on Slashdot. It seems like the cause of many security issues is something that seemed fine yesterday that was today discovered to be flawed. The general canon you mention is also excellent. I wish your message could make it to +5 because I am sure many neophytes could benefit from that simple one-sentence security tip.
No other shortcomings. Any time a Debian zealot makes reference to the ancient versions of the software packaged as "stable" there is always some comment about "no need for the latest toys". This really turns a blind eye to the fact that software such as postgresql, sendmail, and even perl have had ten trillion bugs fixed since the releases that come with Debian stable. Debian addresses security issues in a reasonably timely fashion (although red hat typically does have them beat now). I would like to see them realize that new versions of software can represent a significant amount of bugs fixed and that it is not necessarily a good thing to just continuously backport security fixes to ages-old versions of these programs.
To point out the good, a base debian installation makes an excellent foundation on which to tarball everything. I have done this to scores of machines (I have four to do this to next week) and it works reasonably well.
maru
If the inclusion of archaic, bug-ridden software is your idea of "quality", then I concur. Postgresql 6.5 is definitely a quality-laden release, the later versions just implement useless features such as "stability".
maru
Mod this guy up and/or mod the parent down! This guy is right, HTML sequences are essentially escape sequences in that the browser stops outputting the text and instead internally processes the escaped data.
maru
I live in South Florida and my Netflix discs arrive consistently in 4 business days.
Given the crappy selection at the local video store, I think Netflix is the neatest thing since sliced bread and I am on the 5 disc plan.
maru
Having written both conventional software and web "scripts", I find the coding of a web application of reasonable complexity to be far more complicated than that of a similarly-functioning piece of "normal" software. It really takes a crapload of effort to produce some types of functionality in a web app that would be a no-brainer in a conventional app.
Slash is a great example, it's a gazillion line nightmare from hell that looks and works like crap, but the same thing could be duplicated as a non-web app (probably by the same developers) with a fraction of the effort and the end result would certainly look a hell of a lot better and would probably be more reliable as well.
maru
All attempts to psychoanalyze a certain subculture by people not qualified to do such is most likely an attempt by the "analyst" to maintain illusions of superiority over those in the subculture being "analyzed".
maru
=====
Likewise, we should expect using zero point energy is a virtual impossibility until you understand the physics behind it. So unless this genius in Ireland can explain the precise nature quantum gravity and cosmological inflation I think we can safely assume his is a fraud.
=====
You can expect that but it theoretically is not a requirement. It is entirely possible that someone will stumble across the discovery and consistently be able to produce the desired result without having a scientific understanding of exactly what is going on. It's improbable but certainly not impossible enough to be entirely ruled out.
maru
Am I reading this right?
=====
"Firewall tightening prevented further intrusion beyond the firewalls. What followed was first a Firewall password brute force attack resulting in successful hash and destruction of the firewall," it said.
=====
The firewall password was brute-forced? Kind of makes you wonder about the security of the rest of the network...
maru
Right, and stay with the decades-old packaged versions of sendmail, proftpd, etc.
maru
"Now, to shut down, the user moves his hand to the start switch". -- driver's ed. instructor.
maru
You can be certain that the implementation of the player will have DRM.
maru
Merging, unmerging, and whatnot doesn't change the fact that The Industry Giant Formerly Known as Monsanto has a horrific environmental history and have unleashed some really nasty stuff on people and the environment. This would include products from over 30 years ago (Agent Orange) right up to today (RoundUp).
maru
I too am in Florida. Even though it is an employment-at-will state the employer still faces certain legal risks in terminating employees. The employer can greatly increase or decrease their potential liability through certain HR practices. A good way to decrease liability is to provide written notice of deficiencies in advance and to allow the employee to attempt to resolve the issues. This makes it essentially impossible for the employee to win a wrongful termination (discrimination) suit when the employee is subsequently dismissed for being unable to resolve these previously-documented issues. Another method that can be used is to terminate the employee without giving any reason at all. On the other hand, a great way to ensure that your company will be doling out some cash is to fire someone and provide them with a list of reasons, never previously provided to the employee in writing, for the termination. It sounds like this was potentially what was occurring in the original poster's case. This opens the company up for potential liability even in a at-will state since the reasons given for termination may not be truthful, thus theoretically hiding the actual reason for termination (discrimination).
Since I find that very few managers (for whatever reason) will terminate an employee without providing any reason it is best to go the "written deficiency" route to minimize liability.
maru
In order to protect the company from wrongful termination lawsuits, performance or behavioral issues are supposed to be presented in writing, although they are typically discussed verbally first. Failure to spell the issues out explicitly in writing opens a company to liability.
maru
The guy shouldn't be left guessing as to whether or not there is some sort of discrimination occurring. If management has an issue with some aspect of the employee's behavior or performance it is supposed to be brought to the attention of the employee. If management has not specifically mentioned a performance problem to the employee then the employee is right to think that there is not one. It is maneuvers by management such as what is being described by the poster that typically results in a lawsuit. Any halfway decent employer would have shielded themselves against this sort of liability by using standard human resources policies, therefore this employer must suck and the guy should seek employment elsewhere.
maru
While this tactic may work with software I don't think it will be too cost-effective with hardware.
maru
...or some other equally geeky, frequently used concept. I see greek gods a lot in NT houses. LOTR has been done to death in unix shops.
I have only named two networks. One has devices named after parts of the human body and the other has devices named after vegetables that people typically are not fond of.
maru
maru
Fiber is pretty pricey per foot but the termination is a killer. You'd have to have a contractor do it to be cost effective. The connectors (something like a Siecor Uni-cam) are around $30 bucks a pop, the termination kit to be able to put them on runs around $600, and it takes about 10 connectors worth of practice to be able to do it properly.
maru
Uh, STP is 150 ohm cabling typically used for token ring. It doesn't meet the TIA 568 standards although you can use it with ethernet if you use baluns (ugh). Generally speaking, STP is not for ethernet.
maru
=====
This is a function of your browser as much as it is Slashdot.
=====
Not really, the browser reacts to the caching headers that were sent to it. If the headers indicate no-caching, IE will reload the page from the server and clear all form data.
maru
http://www.aquaria.net/lawsuit.html contains details about a current issue where the company "Pets Warehouse" has a $15,000,000 lawsuit filed against a dozen or so members of the "Aquatic Plants Digest" mailing list. In my opinion, the defendants were complaining in a manner typical of the complaints about various business one would see in message forums across the internet (bad service, dont shop here, blah blah blah). This lawsuit is real and the defendants have all been served. This lawsuit seems to be even more frivolous than the one mentioned in the newsbyte article.
maru
If what you say is true, you should post the relevant information to bugtraq because there is currently no known exploit for the wu globbing bug.
maru
Your message is possibly one of the most intelligent I have ever read on Slashdot. It seems like the cause of many security issues is something that seemed fine yesterday that was today discovered to be flawed. The general canon you mention is also excellent. I wish your message could make it to +5 because I am sure many neophytes could benefit from that simple one-sentence security tip.
maru
Learn more about security before offering advice:
k .h tml
d vi sory-1223.html
Breaking chroot jail:
http://www.bpfh.net/simes/computing/chroot-brea
Proftpd globbing bug:
http://www.linuxsecurity.com/advisories/other_a
maru