They seemed to put a lot of effort into iData, which was probably pretty damn innovative, but no-one seemed to want. Shame. It will soon, however, be offered for free.
They had a raft of OS X utils, but not necessarily ones you'd pay for (e.g. Clone'X: there's freeware/shell commands that do the same thing). I think more importantly, they were a very "morally sound" company, almost to the extent of being complete hippies... but damn cool coding hippies:) Their attitude will probably be missed more than their final software offerings.
I thought perl was originally for advanced text processing... I can't imagine trying to write half the basic admin/dogsbody scripts I knock together, for general system maintenance or one-off conversions, with only sh, sed and awk. (Of course, the other half I *did* write with sh, sed and awk, just to keep up the chest-hair/real-man quota:) )
Anyway, because the brunt of most simple CGI applications is text processing, perl got moved into being used for that.
You'll be wanting to use Mocha Telnet (www.mocha.de), my friend. $10 donation-ware. Works a treat. TG_SSH sucked big time on my Treo 270.
Only thing is it doesn't send the terminal emulation properly to the server, so you have to manually set your environment variable to vt220 or whatever before things like pine will work...
Oh, I never said Neo was a buddha-figure. But one of the main splits between East and West philosphy is that generally, Eastern reckons on everything working in cycles (reincarnation, the I Ching (Book of Changes), etc), whereas Western revolves around everything going in a straight line (for instance, you're born, you try to achieve getting into heaven, the end).
I don't think the multiple philosphies in the Matrix conflict, I think they're carefully woven in: there to be picked up on if you know what you're looking for.
Personally, I was very taken with the whole ongoing cycles of creation thing. Nice to see some Eastern philosophy understood and incorporated.
To me, the line is becoming more and more blurred between the "good guys" and the "bad guys" as these films go on. Morpheus is turning into some sort of cult leader (and a potentially dangerous one... pure belief is not always the best reason to do things), Neo is getting weirder, and Smith of course played a pivotal role in not getting them killed near the end (by accident, but "everything happens for a reason"). Plus all of the little teasers and odd throw-away lines which tie in with philosophical ideas throughout the ages. I came out of the cinema thinking "wow, finally another movie with intelligence in its core".
And of course, kick-ass fight scenes:) Although the one in the mountain castle was a tad drawn out.
(Given the huge, 10-minute credit list at the end, does anyone else think they should have really taken the piss by having "Hugo Weaving; Hugo Weaving; Hugo Weaving; Hugo Weaving; Hugo Weaving; Hugo Weaving; Hugo Weaving; Hugo Weaving; Hugo Weaving; Hugo Weaving; Hugo Weaving; Hugo Weaving; Hugo Weaving; Hugo Weaving;....." scroll by for 2 minutes solidly?:) )
I think you're missing the point... pf doesn't have bells and whistles. It has a lot of useful functions, that make life for the administrator of a complex firewall much, much simpler. E.g. Tables are a very speed-efficient way of having large groups of IP addresses: you aren't going to get that sort of functionality expanding on the command line. The fact that these functions *are* integrated with the firewall make things speedier and easier. It's not bloat.
Yes, ipfw is a great filter. That doesn't mean it's a great firewall. Firewalls have to do more than just plain old packet filtering with a little keep-state thrown in, and they have to do it efficiently. My case is that ipfw started out as a packet filter, and you can't shove lots of other stuff on top of that and expect it to be as good as something with everything (from nat to altq...) built-in (or provisions put in) from the start.
Just look at all the little details they throw in. You don't *just* get tables, you can define them as being 'const' too, which is rather handy... The whole thing is carefully designed, not thrown together.
I think the sizes of the patches for AltQ stuff for pf and ipfw respectively show how well-written and flexible pf is. I use FreeBSD a lot, and have used ipfw (and ipfw2, although probably not the latest build) extensively. Writing long rule sets to NAT multiple networks, do interesting packet filtering between them and general everyday protecting-of-the-servers is nasty, long and irritating. The ipfw2 ``{}'' notation helps, but not much. What I meant was that creating complicated rulesets is klunky in ipfw and very, very nice in pf. That suggests to me that in some respects the underlying code is klunky/nice respectively. The whole ethos of how the filter works just feels *right* in pf.
I read through the pf man page and was astounded how good it was. (I will wait until 1st May and OpenBSD 3.3 comes out, and do some speed tests against ipfw before making a final judgement though, obviously.) The way that pf has several different stages of filtering, and doesn't require you to use natd as a separate daemon (the 'nat' command in pf is a perfect example of the integration you talk about), already makes it a winner for my internal router. And the scrub command along with the easy anti-spoof and other bits (very intelligent keep-state stuff) would make it a perfect border router. Oh, plus the fact that OpenBSD comes with a built-in FTP proxy:)
As for dedicated hardware: I've just built a very well-specced 6-port router (3 ports are gigabit) for around $1000. Try getting a Cisco that has as many features as pf with gigabit ports for that. We are a registered charity...:)
I think that the more stuff gets loaded onto ipfw2, the slower and less reliable it will be. ipfw was not written flexibly enough in the first place. I agree, it was nice only having one main packet filter for FreeBSD, it meant the tutorials and howtos always worked:) I'm wondering just how well pf on FreeBSD is going to catch on, though: the momentum of ipfw may well keep pf out of the mainstream. Who knows...
If you read the man page for ipfw and compare & contrast with the man page for pf, you can immediately see just how much better pf is.
ipfw is basically a basic packet filter with a few things bodged on top of it (variable expansion, keeping state, etc) (OK, that's a bit unfair, but it's what it *feels* like to use). pf is a built-from-the-ground-up total firewall solution, with a hell of a lot of flexibility, and also several functions which will do in one line what it takes ipfw rather longer to do (e.g. anti-spoofing). Plus the simple command "scrub in all" on your border router immediately renders most TCP-fragmentation attacks benign.
Essentially, if you want a router with a bit of filtering, ipfw will do you. If you want a serious firewall, go for pf. However, if you want a serious firewall, you should already be going with OpenBSD anyway:)
> He attributes it to the rotting meat sitting in his gut.
Then he's wrong.
No offense to your dad, and I'm sorry he got hit with cancer, but I'm sick to death of all this scare story stuff about Atkins. It's just an interesting way of not filling your body with crap, as well as getting your metabolism into shape for a bit. No idea if it works, but it really can't kill you if you're sensible. If stuff he's eating is sitting around in his gut rotting, there's something seriously wrong, Atkins or no.
As a side-note, I've never understood how people can fill their bodies with so much plastic and not even notice. Chris Crosby over at Superosity's trying to lose weight (currently around 500lbs), he went on Atkins for about 2 days before realising the plastic BBQ sauce he was smothering everything in contained loads of carbs. *Come on* people, why this urge to eat random chemicals? Even drinks: Coke, Pepsi, Red Bull, Sunny D (eugh)... where's the pleasure in drinking this shit??? Nice cup of tea, that's what I say:)
Re:beatnik poetry about quantum physics, anyone?
on
Playing with Google
·
· Score: 1
Dammit, I used to make random poetry by grepping through the/usr/share/games/fortune/fortunes file. Got this by doing a serach for 'double' then 'blind': (read it through without pausing at the end of lines, and it's circular so when you reach the end, go straight back to the beginning...)
They suck, and like the double-breasted suit I pray the double lock will keep;
double cheese, or the occasional Mai-Tai? (Remember, living
and his speed doubles every 3.2 seconds, how long will it be before other animals only by certain double-edged manifestations which in the two had the following record: the Vietnam War, Watergate, double- eyes we cannot bear to look out of, we blind them as quickly as It looks like blind screaming hedonism won out. be liable to a fine of one pound. Any animal leading a blind person can wait. Unless it's blind screaming paroxysmally hedonistic... lenses, essentially blind -- could result in the kind of injury where
So if they *usually* respond like that (and are hence in the lower half), then presumably well over 50% of the human race is of below average intelligence:)
Ah, forgetting to plug fans in brings back memories. Got my first Mac, a 7200, and immediately popped some more memory into it... not noticing that when you open the case fully, you rip out the power cable for the internal fan. Mind you, it lasted a year of hefty use without any problems before I noticed...
Only these drives are serial-ATA, and if the Apple's RAID server is anything like their XServes, you can't buy your own HDDs to put in them, you have to buy a caddy complete with hard drive from Apple.
I wouldn't mind so much, only they appear to put IBM GXP disks in there, and I've already had a GXP60 go completely belly up in another machine. Not the most reliable disks...
*That's* the reason I still want text-mode startup. Since the weasel card captures the VGA output and works out what the text is (based on character shape and screen position) and then sends it as plaintext down to your remote terminal, it's kind of screwed if you have a graphical BIOS...
I've no idea what I've done: I've moved all Apple apps back into their original positions, fixed permissions, everything, but *no* Apple installer will work on my machine any more. 10.2.4. iCal 1.0.2. They all crash (OK, 'unexpectedly quit') as soon as they start looking for things.
Looks like a complete reinstall job. And I *swear* I haven't buggered about with things that much, if at all... Pah.
That said, I love OS X. Bloody masochist that I am...:)
From the few frames I saw of an incredibly bad model of the Bank of England falling over incredibly badly, I'm tempted to err on the side of "the worst thing ever".
Cinematography looks reasonably good, though (a bit Dark City-ish), so maybe not all bad...
Not always, my bank uses a javascript trick to work out if you're using IE or Netscape, and if your browser is *shock* standards-compliant, it won't let you in. No way round that:(
They seemed to put a lot of effort into iData, which was probably pretty damn innovative, but no-one seemed to want. Shame. It will soon, however, be offered for free.
:) Their attitude will probably be missed more than their final software offerings.
They had a raft of OS X utils, but not necessarily ones you'd pay for (e.g. Clone'X: there's freeware/shell commands that do the same thing). I think more importantly, they were a very "morally sound" company, almost to the extent of being complete hippies... but damn cool coding hippies
I thought perl was originally for advanced text processing... I can't imagine trying to write half the basic admin/dogsbody scripts I knock together, for general system maintenance or one-off conversions, with only sh, sed and awk. (Of course, the other half I *did* write with sh, sed and awk, just to keep up the chest-hair/real-man quota :) )
Anyway, because the brunt of most simple CGI applications is text processing, perl got moved into being used for that.
OK, I'm crap... www.mochasoft.dk.
Normal service will resume shortly.
You'll be wanting to use Mocha Telnet (www.mocha.de), my friend. $10 donation-ware. Works a treat. TG_SSH sucked big time on my Treo 270.
Only thing is it doesn't send the terminal emulation properly to the server, so you have to manually set your environment variable to vt220 or whatever before things like pine will work...
Quoth the article: "If she's within range of public Wi-Fi wireless networks, Trepia also trolls those."
So apparently, the software automatically posts provocative comments on politics, religion and the GPL?
Or did they mean *trawls*?
Oh, I never said Neo was a buddha-figure. But one of the main splits between East and West philosphy is that generally, Eastern reckons on everything working in cycles (reincarnation, the I Ching (Book of Changes), etc), whereas Western revolves around everything going in a straight line (for instance, you're born, you try to achieve getting into heaven, the end).
I don't think the multiple philosphies in the Matrix conflict, I think they're carefully woven in: there to be picked up on if you know what you're looking for.
Excellent review.
:) Although the one in the mountain castle was a tad drawn out.
....." scroll by for 2 minutes solidly? :) )
Personally, I was very taken with the whole ongoing cycles of creation thing. Nice to see some Eastern philosophy understood and incorporated.
To me, the line is becoming more and more blurred between the "good guys" and the "bad guys" as these films go on. Morpheus is turning into some sort of cult leader (and a potentially dangerous one... pure belief is not always the best reason to do things), Neo is getting weirder, and Smith of course played a pivotal role in not getting them killed near the end (by accident, but "everything happens for a reason"). Plus all of the little teasers and odd throw-away lines which tie in with philosophical ideas throughout the ages. I came out of the cinema thinking "wow, finally another movie with intelligence in its core".
And of course, kick-ass fight scenes
(Given the huge, 10-minute credit list at the end, does anyone else think they should have really taken the piss by having "Hugo Weaving; Hugo Weaving; Hugo Weaving; Hugo Weaving; Hugo Weaving; Hugo Weaving; Hugo Weaving; Hugo Weaving; Hugo Weaving; Hugo Weaving; Hugo Weaving; Hugo Weaving; Hugo Weaving; Hugo Weaving;
I think you're missing the point... pf doesn't have bells and whistles. It has a lot of useful functions, that make life for the administrator of a complex firewall much, much simpler. E.g. Tables are a very speed-efficient way of having large groups of IP addresses: you aren't going to get that sort of functionality expanding on the command line. The fact that these functions *are* integrated with the firewall make things speedier and easier. It's not bloat.
Yes, ipfw is a great filter. That doesn't mean it's a great firewall. Firewalls have to do more than just plain old packet filtering with a little keep-state thrown in, and they have to do it efficiently. My case is that ipfw started out as a packet filter, and you can't shove lots of other stuff on top of that and expect it to be as good as something with everything (from nat to altq...) built-in (or provisions put in) from the start.
Sorry, the pf.conf manpage... my mistake.
o nf&apropos=0&sektion=0&manpath=OpenBSD+Current&arc h=i386&format=html
http://www.openbsd.org/cgi-bin/man.cgi?query=pf.c
Just look at all the little details they throw in. You don't *just* get tables, you can define them as being 'const' too, which is rather handy... The whole thing is carefully designed, not thrown together.
I think the sizes of the patches for AltQ stuff for pf and ipfw respectively show how well-written and flexible pf is. I use FreeBSD a lot, and have used ipfw (and ipfw2, although probably not the latest build) extensively. Writing long rule sets to NAT multiple networks, do interesting packet filtering between them and general everyday protecting-of-the-servers is nasty, long and irritating. The ipfw2 ``{}'' notation helps, but not much. What I meant was that creating complicated rulesets is klunky in ipfw and very, very nice in pf. That suggests to me that in some respects the underlying code is klunky/nice respectively. The whole ethos of how the filter works just feels *right* in pf.
:)
:)
:) I'm wondering just how well pf on FreeBSD is going to catch on, though: the momentum of ipfw may well keep pf out of the mainstream. Who knows...
I read through the pf man page and was astounded how good it was. (I will wait until 1st May and OpenBSD 3.3 comes out, and do some speed tests against ipfw before making a final judgement though, obviously.) The way that pf has several different stages of filtering, and doesn't require you to use natd as a separate daemon (the 'nat' command in pf is a perfect example of the integration you talk about), already makes it a winner for my internal router. And the scrub command along with the easy anti-spoof and other bits (very intelligent keep-state stuff) would make it a perfect border router. Oh, plus the fact that OpenBSD comes with a built-in FTP proxy
As for dedicated hardware: I've just built a very well-specced 6-port router (3 ports are gigabit) for around $1000. Try getting a Cisco that has as many features as pf with gigabit ports for that. We are a registered charity...
I think that the more stuff gets loaded onto ipfw2, the slower and less reliable it will be. ipfw was not written flexibly enough in the first place. I agree, it was nice only having one main packet filter for FreeBSD, it meant the tutorials and howtos always worked
If you read the man page for ipfw and compare & contrast with the man page for pf, you can immediately see just how much better pf is.
:)
ipfw is basically a basic packet filter with a few things bodged on top of it (variable expansion, keeping state, etc) (OK, that's a bit unfair, but it's what it *feels* like to use). pf is a built-from-the-ground-up total firewall solution, with a hell of a lot of flexibility, and also several functions which will do in one line what it takes ipfw rather longer to do (e.g. anti-spoofing). Plus the simple command "scrub in all" on your border router immediately renders most TCP-fragmentation attacks benign.
Essentially, if you want a router with a bit of filtering, ipfw will do you. If you want a serious firewall, go for pf. However, if you want a serious firewall, you should already be going with OpenBSD anyway
> He attributes it to the rotting meat sitting in his gut.
:)
Then he's wrong.
No offense to your dad, and I'm sorry he got hit with cancer, but I'm sick to death of all this scare story stuff about Atkins. It's just an interesting way of not filling your body with crap, as well as getting your metabolism into shape for a bit. No idea if it works, but it really can't kill you if you're sensible. If stuff he's eating is sitting around in his gut rotting, there's something seriously wrong, Atkins or no.
As a side-note, I've never understood how people can fill their bodies with so much plastic and not even notice. Chris Crosby over at Superosity's trying to lose weight (currently around 500lbs), he went on Atkins for about 2 days before realising the plastic BBQ sauce he was smothering everything in contained loads of carbs. *Come on* people, why this urge to eat random chemicals? Even drinks: Coke, Pepsi, Red Bull, Sunny D (eugh)... where's the pleasure in drinking this shit??? Nice cup of tea, that's what I say
OK, enough ranting...
$3/5min == $36/hour, I think...
But point taken anyway. Ooo, to be paid $36/hour.....
Yeah, but those 2 weren't posted by the same person...
*Ahem* Keynote *Ahem*
:)
Dammit, I used to make random poetry by grepping through the /usr/share/games/fortune/fortunes file. Got this by doing a serach for 'double' then 'blind': (read it through without pausing at the end of lines, and it's circular so when you reach the end, go straight back to the beginning...)
...
;)
They suck, and like the double-breasted suit
I pray the double lock will keep;
double cheese, or the occasional Mai-Tai? (Remember, living
and his speed doubles every 3.2 seconds, how long will it be before
other animals only by certain double-edged manifestations which in
the two had the following record: the Vietnam War, Watergate, double-
eyes we cannot bear to look out of, we blind them as quickly as
It looks like blind screaming hedonism won out.
be liable to a fine of one pound. Any animal leading a blind person
can wait. Unless it's blind screaming paroxysmally hedonistic
lenses, essentially blind -- could result in the kind of injury where
Ted Hughes eat your heart out
Oliver.
So if they *usually* respond like that (and are hence in the lower half), then presumably well over 50% of the human race is of below average intelligence :)
Ah, forgetting to plug fans in brings back memories. Got my first Mac, a 7200, and immediately popped some more memory into it... not noticing that when you open the case fully, you rip out the power cable for the internal fan. Mind you, it lasted a year of hefty use without any problems before I noticed...
Yes, it's just that you can't get a plain caddy, so you end up with a spare drive if you swap out the IBM for a more reliable model. Annoying.
Only these drives are serial-ATA, and if the Apple's RAID server is anything like their XServes, you can't buy your own HDDs to put in them, you have to buy a caddy complete with hard drive from Apple.
I wouldn't mind so much, only they appear to put IBM GXP disks in there, and I've already had a GXP60 go completely belly up in another machine. Not the most reliable disks...
http://www.realweasel.com
*That's* the reason I still want text-mode startup. Since the weasel card captures the VGA output and works out what the text is (based on character shape and screen position) and then sends it as plaintext down to your remote terminal, it's kind of screwed if you have a graphical BIOS...
I've no idea what I've done: I've moved all Apple apps back into their original positions, fixed permissions, everything, but *no* Apple installer will work on my machine any more. 10.2.4. iCal 1.0.2. They all crash (OK, 'unexpectedly quit') as soon as they start looking for things.
:)
Looks like a complete reinstall job. And I *swear* I haven't buggered about with things that much, if at all... Pah.
That said, I love OS X. Bloody masochist that I am...
From the few frames I saw of an incredibly bad model of the Bank of England falling over incredibly badly, I'm tempted to err on the side of "the worst thing ever".
Cinematography looks reasonably good, though (a bit Dark City-ish), so maybe not all bad...
Not always, my bank uses a javascript trick to work out if you're using IE or Netscape, and if your browser is *shock* standards-compliant, it won't let you in. No way round that :(
No, not a hoax. Try here: http://www.tivofaq.co.uk/tivosfuture.htm
Thompson really have stopped manufacturing hardware. The Tivo servive will continue, but buying new boxes is going to become impossible pretty soon.