This has nothing to do with the interview but there is one thing I hope benefits from more emphasis on peer to peer networking: electronic mail.
The current climate encourages non peer to peer mail with lists like MAPS DUL. The theory is that if I want to send mail from my dial up account I should first send it to my isp's mail server and let it send the mail to the destination mail server. This does help to prevent spammers but it forces all of your mail to go through your isp. Do you really want that? Especially when your isp is a bunch of fuckwits like US West? Two important factors are reliability and security.
US West is not reliable. I monitor my DSL connection with Trocki's mon. If their mail server is as reliable as their DSL service I would bet they drop about 5% of the mail.
I do not trust US West to not accidentally expose all my mail in the name of convenience (like placing the password in the url for some web mail scheme they may foist upon us.) Secondly, I do not trust them to not filter my mail for their own spam-tastic purposes or for Big Brother.
I know spam is bad but to put an new twist on an old quote: those who would give up security (and the liberty derived from it) and reliability for convenience deserve
none of the above.
Sounds like cvsq might solve your problem. cvsq was mentioned in a previous ask/. where a user was connected intermittently.
Now, cvsq does not use 2 repositories. It seems you have preconcluded that you need 2 cvs respositories. Rather than forcing a solution to have 2 repositories I suggest analyzing the problem a little more at a higher to determine the requirements.
Well Condor does (and has been doing for quite a while) exactly this with C. Assuming you follow the link, now you can believe it. Basically you link with condor's library and it intercepts i/o calls and sends them back to a central controller. Keep in mind this is distributed processing not distributed i/o.
Static DHCP may not be the most flexible solution but it is easy. First, keep a regular, non-dynamic dns setup. Then configure your dhcp to always give the same ip addr to the same host. There are multiple ways to do this, based in MAC address or whoever the client claims it is.
Keep in mind that using DHCP or allowing a client to update the DNS easily leads to a huge reduction in the security of the systems on the network because IP spoofing can become as easy as asking the DHCP server for a certain IP addr.
Re:Damn, look at these Name.Space clowns
on
ICANN Meetings
·
· Score: 1
What we need is a tld named "".
Thanks for reminding me...
on
ICANN Meetings
·
· Score: 1
...although I'm suprised to find that half of all Americans enjoy fucking the skull of yoda as well.
Perhaps "stating" was meant. I understood the poor editing when/. was a noncommercial entity produced by the grace and kindness of Malda's and Hemos' hearts but now I wonder if the editors, even though they should have the time (and money) now, do not have the skill to produce quality work.
I have no ide how hard that would be, though.
Somebody should reverse engineer those binary modules of xanim too. With access to the xanim source that should be easier.
Presumably cron has addressed all the issues involved in running forever. That is why The Pim recommends it. He wasn't implying that cron wasn't a long running-daemon. Solving these issues again is re-inventing the wheel, and, in this case, re-inventing the square wheel.
Remember when there was a big flamewar between Linus (+ LKML) and Donald over the development process Donald uses? As I recall, there were
threats that the official maintainer of many NIC drivers in the Linux kernel tree was going to be switched from Donald to Jeff G(mumble) and Donald's contributions would no longer make it into the tree. Did that threatend action ever take place?
What is to say that is was meant to happen? I assume that by "X was meant to happen" you mean "X should happen." The sense of "should" used here is moral, e.g., you should be nice to your neigbors, not predictive in the present of incomplete knowledge e.g., when I drop a glass it should break.
Though there are reasons why any species went extinct the question of should they have gone extinct is open. It is up to a moral agents, such as humans, to reason about the goodness of a species becoming extinct.
Perhaps the extinct species would have produced an enzyme that would have lead to an AIDS vaccine. Perhaps the extinct species would have caused every species of bird in the world to become extinct.
There aren't many other species around with a moral faculty. We humans, as a consequence of possessing this faculty, have the obligation to fix things that we believe to be wrong. Being fallible, we may come to the incorrect conclusion of the best fix. That however, does not imply that we shouldn't try.
Their AUP is pretty vague and restrictive. For example: "Customer shall not use, nor shall it permit others to use, the Services for any... immoral... purpose." So porn sites cannot use Internap? ISPs cannot use InterNAP beacuse their users may surf porn?
Also: "Customer shall not use, nor shall it permit others to use, the Services... to alter... [or] disable any security or encryption of any computer file, database or network. Um, huh? Even if it is legal? Bewarned sysadmins: if you use InterNAP do not ssh over to your remote data center and run crack on one of your machine's passwords files to check security. Even using tcpdump to troubleshoot network snafus may be a violation of the AUP.
I'm sure all providers have such lame policies but that doesn't mean they have to have one too, especially since they seem to claim to be such and enlightened Linux-luvin' company.
Where is their GPL policy? I didn't see it on the website.
I'm glad they are using Linux but what have they given back to the community? Every man, woman, and child would benefit if they would open their proprietary routing protocol.
If you need to have the tightest control on what leaves your network you need to use application level proxies and block all outgoing traffic from every machine expcept the proxies. You are in for a world of hurt if you are going to try to sniff traffic at the packet level.
I suspect there is no application-level proxy that will suit your needs. You may wish to harness the power of open source to integrate smaller tools to fit your needs. Perhaps starting with the proxies in the firewall toolkit you could build some proxies that have a little language in which you can write rules for blocking traffic. Then you can release it back to the community.
Like one of the other posters said, though, it is very difficult to detect when sensitive information is leaving the network. You usually have to rely on the form of the information (e.g. does it look like a credit card number?) but the form can easily be disguised. Disguises become harder the stricter the format of the data. For example, suppose you only send out bills though mail and the format of the bill is:
Dear (foo),
You owe us (amount). Send it soon or die.
You can block all mail that doesn't match this format, thereby preventing, jpegs, cc lists, etc from being mailed. Information can still be leaked by choosing pregnant values for (foo) and (amount). You could lookup to make sure (foo) was a valid customer but your leak may add (foo) to the customer list to get around that. Limiting (foo) to less than 10 characters will help. Insuring (amount) contains nothing but digits would help too but it isn't too hard to encode a message with numbers only.
There will always be ways to get around whatever measures you put in place but don't let that fact cause you to not put forth any effort at all. The amount of money you spend protecting against leaks should be weighed against the potential loss if certain information is leaked times the likilihood that it will be.
I have the answer! Convince all distro makers to send a message to install-counter@example.com everytime the distro is installed. Suppose the installed machine has no 'net connection? Simple: require one! Disable the sw unless the email is sent (and an encypted and signed receipt using the ethernet card mac addr or some other guid of the machine to prevent spoofing) within 30 days of install. What's that? Its being done already? Well then, time to innovate!
Have a cron job send an email to current-counter@example.com with the current time in the subject once a week. Then we'll know how many running linux boxes there are at any given week.
I'll be damned if I'm going to run linux until I _know_ that there are at least 4.5 million boxes running it. My enterprise MIS CIO CTO MBA training has made me very smart, truly. Sure, I read Information Week. I see the one page ads with linux in 72pt type. But hell, I'm no fool. I need an official report from a $5000/yr newsletter, complete with facts and figures, before I switch my multi-trillion dollar dot-com from Windows 2000 ME Data Center SP4.1 to linux.
This conversation can serve no pupose anymore. Thank you, please drive through.
Is it just me or does the webstandards.org website look horrible? I looked at it with Netscape, Mozilla M16, Amaya, and Internet Explorer.
The diatribes in the source for the homepage are funny too. They whine about all these work-arounds they had to do and yet they produce and ugly site. Here is a suggestion: drop the fancy layout, stick to simple standards, and use no work arounds. If you do that odds are that your site will look good on any browser.
streaming anime of the Kama Sutra of paper sculpture men of Sieg Hall and Christopher Lee in space produced by a pegboard computer while running playcore from a console.
I was in Sieg Hall once because the professor for a post-graduate computer science course decided to distribute the assignments as Word documents. The assignments were only 1 or 2 paragraphs of pure text! Sheesh! Rather than just paste the text into a ascii file and send that out instead he printed them out and left them outside his office (which was in Sieg Hall). (BTW, if you are considering the UW be forewarned that it is a fucking ghost town at night.)
I too loved his acting in the Evil Dead movies but all his other performances have been lackluster: in Brisco County Jr., Xena/Hercules, and Jack of All Trades he produces mediocre results. I don't know why.
His website used to be cool. After reading about some of his excapades (the bicycle trip in Arizona, e.g.) I respected him all the more. He seemes to be a down-to-earth, level-headed, hard-working guy. Now the website is produced by Frontpage 2.0 so it looks like hell in anything other than IE/Windows and many of the information seems to be missing.
This has nothing to do with the interview but there is one thing I hope benefits from more emphasis on peer to peer networking: electronic mail.
The current climate encourages non peer to peer mail with lists like MAPS DUL. The theory is that if I want to send mail from my dial up account I should first send it to my isp's mail server and let it send the mail to the destination mail server. This does help to prevent spammers but it forces all of your mail to go through your isp. Do you really want that? Especially when your isp is a bunch of fuckwits like US West? Two important factors are reliability and security.
US West is not reliable. I monitor my DSL connection with Trocki's mon. If their mail server is as reliable as their DSL service I would bet they drop about 5% of the mail.
I do not trust US West to not accidentally expose all my mail in the name of convenience (like placing the password in the url for some web mail scheme they may foist upon us.) Secondly, I do not trust them to not filter my mail for their own spam-tastic purposes or for Big Brother.
I know spam is bad but to put an new twist on an old quote: those who would give up security (and the liberty derived from it) and reliability for convenience deserve none of the above.
Sounds like cvsq might solve your problem. cvsq was mentioned in a previous ask /. where a user was connected intermittently.
Now, cvsq does not use 2 repositories. It seems you have preconcluded that you need 2 cvs respositories. Rather than forcing a solution to have 2 repositories I suggest analyzing the problem a little more at a higher to determine the requirements.
There are going to build the world's largest Beowolf cluster. Imagine a 286 topping the SPEChpc results!
Well Condor does (and has been doing for quite a while) exactly this with C. Assuming you follow the link, now you can believe it. Basically you link with condor's library and it intercepts i/o calls and sends them back to a central controller. Keep in mind this is distributed processing not distributed i/o.
There is no way that floppies have a throughput rate of 500KB/sec. If that were the case you could write a 1.44MB floppy in 3 seconds.
For example, using the generic floppy drive on a FreeBSD box I get 7709 bytes/sec:
$ dd if=/dev/urandom of=/dev/fd0 bs=1024 count=1024
1024+0 records in
1024+0 records out
1048576 bytes transferred in 136.025992 secs (7709 bytes/sec)
Static DHCP may not be the most flexible solution but it is easy. First, keep a regular, non-dynamic dns setup. Then configure your dhcp to always give the same ip addr to the same host. There are multiple ways to do this, based in MAC address or whoever the client claims it is.
Keep in mind that using DHCP or allowing a client to update the DNS easily leads to a huge reduction in the security of the systems on the network because IP spoofing can become as easy as asking the DHCP server for a certain IP addr.
What we need is a tld named "".
...although I'm suprised to find that half of all Americans enjoy fucking the skull of yoda as well.
Perhaps "stating" was meant. I understood the poor editing when /. was a noncommercial entity produced by the grace and kindness of Malda's and Hemos' hearts but now I wonder if the editors, even though they should have the time (and money) now, do not have the skill to produce quality work.
LaTeX converts to many fine formats such as postscript, plain text, and html. You cannot beat the quality of the output (at least the ps).
Though not an XML application, it is possible to parse.
LyX is a good wysiwg editor.
Are you implying that 95% of the people that read /. aren't US citizens or are you implying that 100% of the world's population reads /.?
I have no ide how hard that would be, though. Somebody should reverse engineer those binary modules of xanim too. With access to the xanim source that should be easier.
"Violence, when it's sanctioned by the state, is acceptable to us because we regard individual acts of violence with repugnance, and revulsion."
Presumably cron has addressed all the issues involved in running forever. That is why The Pim recommends it. He wasn't implying that cron wasn't a long running-daemon. Solving these issues again is re-inventing the wheel, and, in this case, re-inventing the square wheel.
Remember when there was a big flamewar between Linus (+ LKML) and Donald over the development process Donald uses? As I recall, there were threats that the official maintainer of many NIC drivers in the Linux kernel tree was going to be switched from Donald to Jeff G(mumble) and Donald's contributions would no longer make it into the tree. Did that threatend action ever take place?
What is to say that is was meant to happen? I assume that by "X was meant to happen" you mean "X should happen." The sense of "should" used here is moral, e.g., you should be nice to your neigbors, not predictive in the present of incomplete knowledge e.g., when I drop a glass it should break.
Though there are reasons why any species went extinct the question of should they have gone extinct is open. It is up to a moral agents, such as humans, to reason about the goodness of a species becoming extinct.
Perhaps the extinct species would have produced an enzyme that would have lead to an AIDS vaccine. Perhaps the extinct species would have caused every species of bird in the world to become extinct.
There aren't many other species around with a moral faculty. We humans, as a consequence of possessing this faculty, have the obligation to fix things that we believe to be wrong. Being fallible, we may come to the incorrect conclusion of the best fix. That however, does not imply that we shouldn't try.
Their AUP is pretty vague and restrictive. For example: "Customer shall not use, nor shall it permit others to use, the Services for any ... immoral ... purpose." So porn sites cannot use Internap? ISPs cannot use InterNAP beacuse their users may surf porn?
Also: "Customer shall not use, nor shall it permit others to use, the Services ... to alter ... [or] disable any security or encryption of any computer file, database or network. Um, huh? Even if it is legal? Bewarned sysadmins: if you use InterNAP do not ssh over to your remote data center and run crack on one of your machine's passwords files to check security. Even using tcpdump to troubleshoot network snafus may be a violation of the AUP.
I'm sure all providers have such lame policies but that doesn't mean they have to have one too, especially since they seem to claim to be such and enlightened Linux-luvin' company.
Where is their GPL policy? I didn't see it on the website.
I'm glad they are using Linux but what have they given back to the community? Every man, woman, and child would benefit if they would open their proprietary routing protocol.
You do not talk about the *lympics.
If you need to have the tightest control on what leaves your network you need to use application level proxies and block all outgoing traffic from every machine expcept the proxies. You are in for a world of hurt if you are going to try to sniff traffic at the packet level.
I suspect there is no application-level proxy that will suit your needs. You may wish to harness the power of open source to integrate smaller tools to fit your needs. Perhaps starting with the proxies in the firewall toolkit you could build some proxies that have a little language in which you can write rules for blocking traffic. Then you can release it back to the community.
Like one of the other posters said, though, it is very difficult to detect when sensitive information is leaving the network. You usually have to rely on the form of the information (e.g. does it look like a credit card number?) but the form can easily be disguised. Disguises become harder the stricter the format of the data. For example, suppose you only send out bills though mail and the format of the bill is:
Dear (foo), You owe us (amount). Send it soon or die.You can block all mail that doesn't match this format, thereby preventing, jpegs, cc lists, etc from being mailed. Information can still be leaked by choosing pregnant values for (foo) and (amount). You could lookup to make sure (foo) was a valid customer but your leak may add (foo) to the customer list to get around that. Limiting (foo) to less than 10 characters will help. Insuring (amount) contains nothing but digits would help too but it isn't too hard to encode a message with numbers only.
There will always be ways to get around whatever measures you put in place but don't let that fact cause you to not put forth any effort at all. The amount of money you spend protecting against leaks should be weighed against the potential loss if certain information is leaked times the likilihood that it will be.
I have the answer! Convince all distro makers to send a message to install-counter@example.com everytime the distro is installed. Suppose the installed machine has no 'net connection? Simple: require one! Disable the sw unless the email is sent (and an encypted and signed receipt using the ethernet card mac addr or some other guid of the machine to prevent spoofing) within 30 days of install. What's that? Its being done already? Well then, time to innovate!
Have a cron job send an email to current-counter@example.com with the current time in the subject once a week. Then we'll know how many running linux boxes there are at any given week.
I'll be damned if I'm going to run linux until I _know_ that there are at least 4.5 million boxes running it. My enterprise MIS CIO CTO MBA training has made me very smart, truly. Sure, I read Information Week. I see the one page ads with linux in 72pt type. But hell, I'm no fool. I need an official report from a $5000/yr newsletter, complete with facts and figures, before I switch my multi-trillion dollar dot-com from Windows 2000 ME Data Center SP4.1 to linux.
This conversation can serve no pupose anymore. Thank you, please drive through.
I recommend getting the source rpms. Then you find out exactly how it was built and installed. You can also make some changes and remake the SRPM.
Is it just me or does the webstandards.org website look horrible? I looked at it with Netscape, Mozilla M16, Amaya, and Internet Explorer.
The diatribes in the source for the homepage are funny too. They whine about all these work-arounds they had to do and yet they produce and ugly site. Here is a suggestion: drop the fancy layout, stick to simple standards, and use no work arounds. If you do that odds are that your site will look good on any browser.
streaming anime of the Kama Sutra of paper sculpture men of Sieg Hall and Christopher Lee in space produced by a pegboard computer while running playcore from a console.
I was in Sieg Hall once because the professor for a post-graduate computer science course decided to distribute the assignments as Word documents. The assignments were only 1 or 2 paragraphs of pure text! Sheesh! Rather than just paste the text into a ascii file and send that out instead he printed them out and left them outside his office (which was in Sieg Hall). (BTW, if you are considering the UW be forewarned that it is a fucking ghost town at night.)
I too loved his acting in the Evil Dead movies but all his other performances have been lackluster: in Brisco County Jr., Xena/Hercules, and Jack of All Trades he produces mediocre results. I don't know why.
His website used to be cool. After reading about some of his excapades (the bicycle trip in Arizona, e.g.) I respected him all the more. He seemes to be a down-to-earth, level-headed, hard-working guy. Now the website is produced by Frontpage 2.0 so it looks like hell in anything other than IE/Windows and many of the information seems to be missing.