Both Bugtraq and CVE are free. The problem is people are reactive to security updates. Rather than being proactive people seem to wait until thier vendor tell them they need to update rather than keeping themeselves informed. Also, in addition to this most Open Source software projects have an "announce" mailing list where security problems are reported.
I have heard information that rpm4 is supposed to support checking of installed libs. This means if they were or were not installed from an rpm. This portion does seem to be supported I have tested this on redhat 7.0 with success. I am not sure of other 'new features' although I have been looking for some info. As far as breaking compatability I am not sure what you mean. They are backward compatable being that you can install 3.x rpms with no problem. You cannot on the otherhand install the 4.x rpm under a 3.x system if this is what you mean. This is typical of alot of software not just rpm.
I had seen a demo of XFS and JFS about 6 months ago. At this time I was already using ReiserFS. At that point XFS and JFS in my opinion had a very long way to go especially XFS. ReiserFS has seemed to be stable for quite some time now I have been used it on production machines without a problem. It has also been included in some distros like Mandrake 7.0. This seems to be a proven product in my eyes. I would hate to see a good product passed up because there is political or commercial (insert IBM logo) motivation.
Also not to leave out ext3, I have not used this but here that it is also very mature at this point. I know some commercial companies are using it for their SANS such as VA. They have been using a modified version of ext3 for thier SANS for at least 6 months now. Also seems proven.
A statement like this whether it is taken out of context or not is pretty typical from a CTO. I dont know about you but any CTO I have worked with had thier head stuck completely up thier ass. If RedHat is smart they will address anything that was taken out of context. Unless all of it was taken out of context the CTO should be fired or publicly repramanded. People need to think before opening thier mouth.
Because 2.4 is going to need a while to be considered 'stable'. On top of that you just dont slap a brand new kernel into a distro without more 'real' world testing. On top of that 7.0 has been built to take full advatage of the 2.4 kernel when it does become stable. And a note to all you debian users who choose to dog redhat. Do you use the linux kernel? Do you use gnome? Well who do you think keeps Alan employed and who do you think is paying for the Gnome development. Dont bite the hand that feeds you and fuck apt! You want to see something that is better than Apt? Then take a look at *BSD ports and packages collection.
Well how cheap is cheap? what type of budget do you have to work with? Are the sites dynamic static or what? Do you know what kind of traffic these sites currently have? Are you looking for high availability and/or redundancy? Do you want load balancing of any sort? Besides frontpage do your customers want anything else like php or zope (this will add to server load)? Are you providing other services like SQL, SMTP etc?
At the company I previously worked for I was told to handle the ordering servers for a linux platform. On a daily basis I dealt with Dell, IBM, Compaq, and VA Linux. After all the drawbacks to each company I decided to go with VA as a hardware provider. My sales rep was awesome never missed appointments and always followed up. They seemed to bend over backwards for most of our needs or worked with us for a comprimise. But my best experience was with thier professional services dept. After dealing with the other major hardware vendors and independent services like Redhat and Linuxcare, VA was the most knowledgable and proffesional. As far as the Mandrake install if VA was to build all distros custom to their hardware (as they do with redhat) then that server would probably cost you alot more. Plus my feeling is that if you want Mandrake then install it yourself and as far as support for it then that should be part of the decision of putting mandrake on your systems. Dont blame others because you want to use something beyond thier scope of support. I am not going to suck VA's dick here though. After contacting their tech support (1st level) I was left with a sour taste in my mouth, but after talking to a higher level tech I was satisfied. So make whatever decision as far as hardwarethat you need mine will be with someone that supports and contributes the community and does not ride the coat tails of linux like Dell and IBM.
Ok I am sick of ppl bitching about shit they know nothing about. "RPM sucks" for example all of the arguments made for this are bullshit.
1. The Debian ppl. "Well I can do apget -install" its called rpmfind 'packagename' (and yes this will satisfy the deps also).
2. The "I only install from source" ppl. Ever hear of a source RPM? Or could you not figure out how to unpack it?
3. The "Well I have to be root" ppl. Build the RPM yourself you whiny fuck.
4. The "It doesnt check against libs I installed from a tarball" ppl. Well keep up to date go and check out RPM 4. Also dont be a jackass and mix and match across your system if possible, build the damn RPM.
Slashdot Mirror
I would like to point out the fact I can't count very well either.
Step one. Keep the goverment out of regulating the internet.
Step two. Hold network providers, colo's etc. responsible for harboring spammers.
Step three. Take responsibility for your system being broken into and quit blaming crackers for you lack of security.
Step four. Quit trying to save the internet.
Step five.
Step six. Profit.
Both Bugtraq and CVE are free. The problem is people are reactive to security updates. Rather than being proactive people seem to wait until thier vendor tell them they need to update rather than keeping themeselves informed. Also, in addition to this most Open Source software projects have an "announce" mailing list where security problems are reported.
Google it.
If you look closely he is obviously a Dell fan. I think I will pass.
Dude, your *not* getting hired.
Seems like more of a rip of what Oreilly has done with Safari.
I have heard information that rpm4 is supposed to support checking of installed libs. This means if they were or were not installed from an rpm. This portion does seem to be supported I have tested this on redhat 7.0 with success. I am not sure of other 'new features' although I have been looking for some info. As far as breaking compatability I am not sure what you mean. They are backward compatable being that you can install 3.x rpms with no problem. You cannot on the otherhand install the 4.x rpm under a 3.x system if this is what you mean. This is typical of alot of software not just rpm.
I had seen a demo of XFS and JFS about 6 months ago. At this time I was already using ReiserFS. At that point XFS and JFS in my opinion had a very long way to go especially XFS. ReiserFS has seemed to be stable for quite some time now I have been used it on production machines without a problem. It has also been included in some distros like Mandrake 7.0. This seems to be a proven product in my eyes. I would hate to see a good product passed up because there is political or commercial (insert IBM logo) motivation. Also not to leave out ext3, I have not used this but here that it is also very mature at this point. I know some commercial companies are using it for their SANS such as VA. They have been using a modified version of ext3 for thier SANS for at least 6 months now. Also seems proven.
A statement like this whether it is taken out of context or not is pretty typical from a CTO. I dont know about you but any CTO I have worked with had thier head stuck completely up thier ass. If RedHat is smart they will address anything that was taken out of context. Unless all of it was taken out of context the CTO should be fired or publicly repramanded. People need to think before opening thier mouth.
Because 2.4 is going to need a while to be considered 'stable'. On top of that you just dont slap a brand new kernel into a distro without more 'real' world testing. On top of that 7.0 has been built to take full advatage of the 2.4 kernel when it does become stable. And a note to all you debian users who choose to dog redhat. Do you use the linux kernel? Do you use gnome? Well who do you think keeps Alan employed and who do you think is paying for the Gnome development. Dont bite the hand that feeds you and fuck apt! You want to see something that is better than Apt? Then take a look at *BSD ports and packages collection.
Well how cheap is cheap? what type of budget do you have to work with? Are the sites dynamic static or what? Do you know what kind of traffic these sites currently have? Are you looking for high availability and/or redundancy? Do you want load balancing of any sort? Besides frontpage do your customers want anything else like php or zope (this will add to server load)? Are you providing other services like SQL, SMTP etc?
At the company I previously worked for I was told to handle the ordering servers for a linux platform. On a daily basis I dealt with Dell, IBM, Compaq, and VA Linux. After all the drawbacks to each company I decided to go with VA as a hardware provider. My sales rep was awesome never missed appointments and always followed up. They seemed to bend over backwards for most of our needs or worked with us for a comprimise. But my best experience was with thier professional services dept. After dealing with the other major hardware vendors and independent services like Redhat and Linuxcare, VA was the most knowledgable and proffesional. As far as the Mandrake install if VA was to build all distros custom to their hardware (as they do with redhat) then that server would probably cost you alot more. Plus my feeling is that if you want Mandrake then install it yourself and as far as support for it then that should be part of the decision of putting mandrake on your systems. Dont blame others because you want to use something beyond thier scope of support. I am not going to suck VA's dick here though. After contacting their tech support (1st level) I was left with a sour taste in my mouth, but after talking to a higher level tech I was satisfied. So make whatever decision as far as hardwarethat you need mine will be with someone that supports and contributes the community and does not ride the coat tails of linux like Dell and IBM.
I used a modified version of this. I feel it is a good template. http://www.valinux.com/products/parts/partition.ht ml
Ok I am sick of ppl bitching about shit they know nothing about. "RPM sucks" for example all of the arguments made for this are bullshit.
1. The Debian ppl. "Well I can do apget -install" its called rpmfind 'packagename' (and yes this will satisfy the deps also).
2. The "I only install from source" ppl. Ever hear of a source RPM? Or could you not figure out how to unpack it?
3. The "Well I have to be root" ppl. Build the RPM yourself you whiny fuck.
4. The "It doesnt check against libs I installed from a tarball" ppl. Well keep up to date go and check out RPM 4. Also dont be a jackass and mix and match across your system if possible, build the damn RPM.
I say fry 'em. The Chinese have the right idea.