"Maybe you should shut yer yap and start coding. When your OcamlSSH has the same feature set as OpenSSH, and runs on as many archs, then you'll have something to talk about. Until then you're just so much hot air."
I don't have to be an expert in slashdot posts to know that's a stupid remark.
If the same class of people are doing opencvs then should we assume that the only safe environment to run opencvs will be OpenBSD, until otherwise proven?
As for rumours about qmail and djbdns. I'm sure more than a few people would not be able to resist the opportunity to take DJB down a peg or two;).
So far I've only seen 2 decent prospects (found by Guninski), one involves RELAYCLIENT being set a certain way (the admin configures RELAYCLIENT), the other involves sending 2GB of data (and finding a way round the fact that qmail-smtpd doesn't run as root). The others are usually some sort of DoS.
They're bugs but I still don't need to update qmail for ANY of the installations I've done for various people through the years.
And my point still stands - if someone like DJB can't write secure overflow free code in C, then maybe it's time to switch to a different language - one not prone to "runs arbitrary code of the attacker's choice".
I still don't feel like running one of those SSHDs written in Java yet though...
Sure seemed like I had to update OpenSSH more than once in the past 3 years. Do a search on OpenSSH and advisory. Just because it's not "exploitable" if you're running it on OpenBSD doesn't really count. That's like saying a security bug in IE isn't a security bug coz it is not exploitable in Win XP SP2.
In contrast I haven't had to update qmail for security problems since I started using it. Like 5 years ago? Or djbdns.
"the point of opencvs isn't to randomly replace GPL'd code, but to provide a different implementation, that is free of bugs and security issues."
Why don't they work on providing a different implementation of OpenSSH[1] that is free of bugs and security issues? That's more likely to be useful to more people.
But wait... They're already doing OpenSSH! But it's track record isn't that good is it? So why should they be better at opencvs?
Maybe they should reimplement both in OCaml or something fast and less prone to overflows, since it seems like they like most people can't program securely in C or C++.
[1] and OpenSSL.
Re:Ruby seems on the right track.
on
RAD with Ruby
·
· Score: 1
But what's the point?
Don't tell me you have a normal text config file that looks something like:
param1=1 param2=10.2
And then you run it through something to convert it to XML, and then that is parsed by the java application...
That'd be weird.
I still don't get it - e.g. I used the XML style config files for configuring Jetty, and it's bitten me before when I tried to configure something in the XML style (after digging through all the docs and copying the styles). Didn't work, after checking on the mailing list turned out that the XML configuration option just wasn't implemented by Jetty- had to pass it on the _command_ line.. D'oh...
Anyway my suggestion is if you want better control, what you do is to have your DHCP server assign unknown machines to IP addresses in a quarantine network that possibly runs something like nocatauth to tell new users to contact the admin - phone num etc. Heck maybe put each of them in their own/30 network or something.
Once they call you and you've identified the previously unknown machine and the user and everything is OK (scan for viruses, detect worms etc), you can reassign this machine to its own reserved IP - and possibly reconfigure the relevant switch's port to take it out of the special mode that only allows it to talk to one server and not each other (not all switches support this feature).
This could help prevent unknown machines from spreading worms, or automatically getting access to your network.
BTW, I've nothing really against alcoholic drinks. Or even _some_ kids drinking them. If the parents are around and the environment is suitable then sure it's fine - e.g. family party, gathering, traditional event etc.
But I sure won't trust strangers or the equivalent of "Hollywood" to provide a suitable environment or to provide the necessary supervision to make sure that things go well.
If they wanted PG13 movie, why don't they make stuff like Finding Nemo, Toy Story, or other family oriented stuff?
What's wrong with Hollywood? That's like watering down Whiskey enough (to meet regulations) just so they can sell it to EVERYONE's kids.
Doesn't please the fans of whiskey. And still won't please responsible parents.
What's Hollywood up to? Trying to get kids exposed to "whiskey" at a young age? Develop a taste of it?
Re:Comment from the writer of the Czech article
on
Doom Movie Update
·
· Score: 1
"there is no chance of making big-budget commercial Hollywood movie featuring upside-down crosses and "666" symbols."
Doh. Don't blame us Christians for this one - the "conservative" ones aren't ever going to be willing audiences anyway. Blame Hollywood.
In fact I think a lot of those "conservatives" liked those movies dealing with the End-Times, and there sure are 666 symbols and other nasties.
Maybe Hollywood is afraid of making people think about hell and those people might actually stop going for the amoral/immoral movies that Hollywood likes to make?:)
I mean, why don't Hollywood make more crowd pleasers? Pixar seems to be able to do it. Even Disney has a better batting average... What's wrong with the rest of Hollywood?
Removing Hell from DOOM is like removing Christ from the Passion of Christ.
Looks like Hollywood is either incompetent or up to something really strange. They shouldn't blame others if they can't make money.
Re:what I want to know is why they couldnt
on
Doom Movie Update
·
· Score: 1
Uh. Wasn't there a recent movie - HellBoy?
What's with these people anyway? As a Christian I sure don't get it.
If there's going to be a hell, at least don't make it a paradise or something;). Or if it's going to look like a paradise, have a very chilling/eerie twist (use your imagination, I don't want to - going to sleep soon:) )...
Check for duplicate record. if not found, then insert. else, prompt user."
There's a race condition in this- a window between the checks and the insert.
So you could get an error anyway- a DB error if there's a unique constraint, data corruption if there isn't.
What you could do is lock (prevent other checks and inserts) then check, then insert if would be unique. But the lock could signifcantly affect performance - depends on the locking and the database.
As you say: many people seem to do it wrong. And so confident that it's the right way to do it.
While SQL has a "SELECT... FOR UPDATE" there does not appear to be a "SELECT... FOR INSERT", or a "put row" feature (update if there, insert if not there).
SQL doesn't appear to be that well designed. But it's the defacto standard.
Heh. Kinda funny that movie studios get people who don't know what a "Franchise"/"Brand" is about and pay them to make stuff about it, whereas they shut down people who "live, eat and breathe" it, who are doing it for free.
They are obviously more interested in spreading a different meme than the "Franchise Universe".
Actually Hollywood doesn't appear to care what their viewers like/think.
They have made so many movies that bombed, and they were OBVIOUSLY going to bomb to anyone with common-sense. I doubt a boycott would help much - look at the number of Kevin Costner bombs Hollywood released...
And then they blame their lack of profit on "pirates".
India's film industry (aka Bollywood) knows what their audience likes and they keep giving it to them, over and over and over. Even though it's always "hero and heroine frolicking amongst the trees, dancing on stage etc". Who cares, it makes them money. I'm not their audience.
Same goes for the Hong Kong film industry - they give their target audience what they want.
So it make me wonder what Hollywood is really up to. What is behind their decisions?
If Hollywood really wanted to profit and were really pandering to the Conservative Christians etc, then shouldn't we be see more movies like Finding Nemo- those really really sell - the kids want to watch, the parents have to come along. Next the whole school wants to watch. Family values and all that.
But no. Hollywood appears to have some other agenda (and it's not purely profit driven). Either that or they and their highly-paid consultants are so out of touch with their audiences that it beggars belief.
That's fine if there isn't any congestion. Then you can send cars merrily along ASAP to their destinations.
But if there's congestion, there's no point sending tons of cars to queue up in piles causing even more congestion and making things worse.
It might actually be better to keep the cars back till things clear up a bit.
I believe that's done in some places - different modes of operation for peak and off peak hours. During off peak you get a "green wave". During peak hours you don't - traffic gets "trickled" into the system at whatever rate they think it should be trickled in (doesn't mean they get it right or not).
The city near where I live, when things get really congested - some intersections get blocked up coz drivers miscalculate and go when it's green and the road ahead is congested - they are guessing that the road ahead would clear up before it turns to red. Then the other lanes can't move across when it's their turn.
Trouble is, if they don't go, sometimes there won't be a gap - because any gaps will keep getting filled by another lane.
The ironic thing is - the city has to resort to using traffic policemen to direct traffic in order to improve the traffic situation.
Previously when the traffic cops were doing that the motorists complained that the cops were making things worse. So one day the cops all stopped directing traffic, left it to the lights and things were really bad!
I don't see easy solutions - when there's just too much traffic, you're going to have to wait.
Some say that Methuselah meant "When he dies, judgement", or "When he is dead it shall be sent", and that the flood actually came after he died. This could be the case.
If so, it is interesting that Methuselah lived so long (he even outlived his son Lamech) and thus it took quite a while before the flood was sent.
"In the course of time Cain brought some of the fruits of the soil as an offering to the LORD . 4 But Abel brought fat portions from some of the firstborn of his flock. The LORD looked with favor on Abel and his offering, 5 but on Cain and his offering he did not look with favor. So Cain was very angry, and his face was downcast."
I'm more inclined to interpret it as Cain did not offer his "best" to God, whereas Abel did. God looks at the heart.
Also: I don't see why you imply there can't be sacrifices which you don't eat. BTW, the laws governing sacrifices in the later books were for Israel's contract with God, and so unlikely to apply in Cain and Abel's time. And even in them there are sacrifices which were not to be consumed. See Leviticus if you are interested.
The Israelites did grow and consume grain - there were laws regarding land and harvesting.
You may be extrapolating a bit too much from very few verses of the Bible, and thus getting a skewed view of things.
Slashdot Mirror
Yes, but often the people with wide knowledge are the ones who _integrate_ these new things into something more useful than the single new thing.
"Maybe you should shut yer yap and start coding. When your OcamlSSH has the same feature set as OpenSSH, and runs on as many archs, then you'll have something to talk about. Until then you're just so much hot air."
I don't have to be an expert in slashdot posts to know that's a stupid remark.
If the same class of people are doing opencvs then should we assume that the only safe environment to run opencvs will be OpenBSD, until otherwise proven?
;).
As for rumours about qmail and djbdns. I'm sure more than a few people would not be able to resist the opportunity to take DJB down a peg or two
So far I've only seen 2 decent prospects (found by Guninski), one involves RELAYCLIENT being set a certain way (the admin configures RELAYCLIENT), the other involves sending 2GB of data (and finding a way round the fact that qmail-smtpd doesn't run as root). The others are usually some sort of DoS.
They're bugs but I still don't need to update qmail for ANY of the installations I've done for various people through the years.
And my point still stands - if someone like DJB can't write secure overflow free code in C, then maybe it's time to switch to a different language - one not prone to "runs arbitrary code of the attacker's choice".
I still don't feel like running one of those SSHDs written in Java yet though...
Sure seemed like I had to update OpenSSH more than once in the past 3 years. Do a search on OpenSSH and advisory. Just because it's not "exploitable" if you're running it on OpenBSD doesn't really count. That's like saying a security bug in IE isn't a security bug coz it is not exploitable in Win XP SP2.
In contrast I haven't had to update qmail for security problems since I started using it. Like 5 years ago? Or djbdns.
In the Spyware Infested Internet, scripting languages use you!
"the point of opencvs isn't to randomly replace GPL'd code, but to provide a different implementation, that is free of bugs and security issues."
Why don't they work on providing a different implementation of OpenSSH[1] that is free of bugs and security issues? That's more likely to be useful to more people.
But wait... They're already doing OpenSSH! But it's track record isn't that good is it? So why should they be better at opencvs?
Maybe they should reimplement both in OCaml or something fast and less prone to overflows, since it seems like they like most people can't program securely in C or C++.
[1] and OpenSSL.
But what's the point?
Don't tell me you have a normal text config file that looks something like:
param1=1
param2=10.2
And then you run it through something to convert it to XML, and then that is parsed by the java application...
That'd be weird.
I still don't get it - e.g. I used the XML style config files for configuring Jetty, and it's bitten me before when I tried to configure something in the XML style (after digging through all the docs and copying the styles). Didn't work, after checking on the mailing list turned out that the XML configuration option just wasn't implemented by Jetty- had to pass it on the _command_ line.. D'oh...
So what are the advantages?
Anyway my suggestion is if you want better control, what you do is to have your DHCP server assign unknown machines to IP addresses in a quarantine network that possibly runs something like nocatauth to tell new users to contact the admin - phone num etc. Heck maybe put each of them in their own /30 network or something.
Once they call you and you've identified the previously unknown machine and the user and everything is OK (scan for viruses, detect worms etc), you can reassign this machine to its own reserved IP - and possibly reconfigure the relevant switch's port to take it out of the special mode that only allows it to talk to one server and not each other (not all switches support this feature).
This could help prevent unknown machines from spreading worms, or automatically getting access to your network.
BTW, I've nothing really against alcoholic drinks. Or even _some_ kids drinking them. If the parents are around and the environment is suitable then sure it's fine - e.g. family party, gathering, traditional event etc.
But I sure won't trust strangers or the equivalent of "Hollywood" to provide a suitable environment or to provide the necessary supervision to make sure that things go well.
If they wanted PG13 movie, why don't they make stuff like Finding Nemo, Toy Story, or other family oriented stuff?
What's wrong with Hollywood? That's like watering down Whiskey enough (to meet regulations) just so they can sell it to EVERYONE's kids.
Doesn't please the fans of whiskey. And still won't please responsible parents.
What's Hollywood up to? Trying to get kids exposed to "whiskey" at a young age? Develop a taste of it?
"there is no chance of making big-budget commercial Hollywood movie featuring upside-down crosses and "666" symbols."
:)
Doh. Don't blame us Christians for this one - the "conservative" ones aren't ever going to be willing audiences anyway. Blame Hollywood.
In fact I think a lot of those "conservatives" liked those movies dealing with the End-Times, and there sure are 666 symbols and other nasties.
Maybe Hollywood is afraid of making people think about hell and those people might actually stop going for the amoral/immoral movies that Hollywood likes to make?
I mean, why don't Hollywood make more crowd pleasers? Pixar seems to be able to do it. Even Disney has a better batting average... What's wrong with the rest of Hollywood?
Removing Hell from DOOM is like removing Christ from the Passion of Christ.
Looks like Hollywood is either incompetent or up to something really strange. They shouldn't blame others if they can't make money.
Uh. Wasn't there a recent movie - HellBoy?
;). Or if it's going to look like a paradise, have a very chilling/eerie twist (use your imagination, I don't want to - going to sleep soon :) )...
What's with these people anyway? As a Christian I sure don't get it.
If there's going to be a hell, at least don't make it a paradise or something
Yah I remembered that incident! Many copies of someone singing Star Spangled Banner, and crap like that.
First thing I tried, but it doesn't really work - once you try to do queries you get the new interface.
Sure looks like something is wrong with their targeting/locking...
The lasers are painting the target audience (which is letting out a lot of hot air to make it easy).
But they switched to using the wrong sort of missiles - they're Hollywood Director guided.
"Many people code unique inserts like this.
... FOR UPDATE" there does not appear to be a "SELECT ... FOR INSERT", or a "put row" feature (update if there, insert if not there).
Check for duplicate record.
if not found, then insert.
else, prompt user."
There's a race condition in this- a window between the checks and the insert.
So you could get an error anyway- a DB error if there's a unique constraint, data corruption if there isn't.
What you could do is lock (prevent other checks and inserts) then check, then insert if would be unique. But the lock could signifcantly affect performance - depends on the locking and the database.
As you say: many people seem to do it wrong. And so confident that it's the right way to do it.
While SQL has a "SELECT
SQL doesn't appear to be that well designed. But it's the defacto standard.
Heh. Kinda funny that movie studios get people who don't know what a "Franchise"/"Brand" is about and pay them to make stuff about it, whereas they shut down people who "live, eat and breathe" it, who are doing it for free.
They are obviously more interested in spreading a different meme than the "Franchise Universe".
One of greed and tyranny perhaps?
Actually Hollywood doesn't appear to care what their viewers like/think.
They have made so many movies that bombed, and they were OBVIOUSLY going to bomb to anyone with common-sense. I doubt a boycott would help much - look at the number of Kevin Costner bombs Hollywood released...
And then they blame their lack of profit on "pirates".
India's film industry (aka Bollywood) knows what their audience likes and they keep giving it to them, over and over and over. Even though it's always "hero and heroine frolicking amongst the trees, dancing on stage etc". Who cares, it makes them money. I'm not their audience.
Same goes for the Hong Kong film industry - they give their target audience what they want.
So it make me wonder what Hollywood is really up to. What is behind their decisions?
If Hollywood really wanted to profit and were really pandering to the Conservative Christians etc, then shouldn't we be see more movies like Finding Nemo- those really really sell - the kids want to watch, the parents have to come along. Next the whole school wants to watch. Family values and all that.
But no. Hollywood appears to have some other agenda (and it's not purely profit driven). Either that or they and their highly-paid consultants are so out of touch with their audiences that it beggars belief.
That's fine if there isn't any congestion. Then you can send cars merrily along ASAP to their destinations.
But if there's congestion, there's no point sending tons of cars to queue up in piles causing even more congestion and making things worse.
It might actually be better to keep the cars back till things clear up a bit.
I believe that's done in some places - different modes of operation for peak and off peak hours. During off peak you get a "green wave". During peak hours you don't - traffic gets "trickled" into the system at whatever rate they think it should be trickled in (doesn't mean they get it right or not).
The city near where I live, when things get really congested - some intersections get blocked up coz drivers miscalculate and go when it's green and the road ahead is congested - they are guessing that the road ahead would clear up before it turns to red. Then the other lanes can't move across when it's their turn.
Trouble is, if they don't go, sometimes there won't be a gap - because any gaps will keep getting filled by another lane.
The ironic thing is - the city has to resort to using traffic policemen to direct traffic in order to improve the traffic situation.
Previously when the traffic cops were doing that the motorists complained that the cops were making things worse. So one day the cops all stopped directing traffic, left it to the lights and things were really bad!
I don't see easy solutions - when there's just too much traffic, you're going to have to wait.
Yeah. I bet your crystal's red too.
What's in it for Lenovo?
What would they get and how much would they have to pay for it?
Lenovo could use the same money to market their brand instead.
Acer lags in brand-recognition coz their computers used to be suckier than the rest (I don't know about now) and they weren't cheaper either.
Tons of US people buy Japanese cars. Now the Korean cars are gaining share.
How about filling up condoms with helium?
Glowing balloons could be fun too at night. Think of the UFO reports...
That said, the shortage of Helium seems to be quite a significant imminent problem.
One version.
Some say that Methuselah meant "When he dies, judgement", or "When he is dead it shall be sent", and that the flood actually came after he died. This could be the case.
If so, it is interesting that Methuselah lived so long (he even outlived his son Lamech) and thus it took quite a while before the flood was sent.
See Gen 4.
"In the course of time Cain brought some of the fruits of the soil as an offering to the LORD . 4 But Abel brought fat portions from some of the firstborn of his flock. The LORD looked with favor on Abel and his offering, 5 but on Cain and his offering he did not look with favor. So Cain was very angry, and his face was downcast."
I'm more inclined to interpret it as Cain did not offer his "best" to God, whereas Abel did. God looks at the heart.
Also: I don't see why you imply there can't be sacrifices which you don't eat. BTW, the laws governing sacrifices in the later books were for Israel's contract with God, and so unlikely to apply in Cain and Abel's time. And even in them there are sacrifices which were not to be consumed. See Leviticus if you are interested.
The Israelites did grow and consume grain - there were laws regarding land and harvesting.
You may be extrapolating a bit too much from very few verses of the Bible, and thus getting a skewed view of things.
I recommend reading a fair bit more.