Slashdot Mirror


User: jroysdon

jroysdon's activity in the archive.

Stories
0
Comments
839
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 839

  1. Re:Is it your cell phone???? on Bell Labs Demos Cell Phone Location Software · · Score: 1


    I've got period where I'm on call 24/7, so how do you solve that? I just have to be reachable, but it's none of my employers business where I'm at.

  2. Patent applies to professions on URLs Patented, Domain Registrars Sued · · Score: 1

    I don't get it... the patent applies to not just name@subdomain.domain, that's just the first half, the second half is that is relates to finding them based on profession... doesn't it have to match both?

    I nearly have prior art, as the whole thing is so stinking "common sense":

    jason.artoo.net which I had jason@artoo.net for the email and that's how all of our users' webspace and emails were set up (see my old email at the bottom of our access request page to confirm the email portion), from 2000.

    Even more obvious was on my surname page which clearly states we'll give any Roysdon their own email forwarding and web-redirection (or hosting for that matter)... but again, alas, it's from 2001.

  3. Re:"VoIP" is not a protocol on Flaws Threaten VoIP Networks? · · Score: 1


    You're 100% correct. My much more informative article with 4 times the links was rejected, no doubt because the title was "H.323 vulnerability affects Cisco, MS, and more (articles,security) (rejected)" and H.323 just isn't "catchy" enough to be an article subject.

  4. Re:meh... on Flaws Threaten VoIP Networks? · · Score: 1

    Actually all of the effected Cisco products are in fact services that run on Windows.

    The 7905 and ATA18X are hardware devices that have no Windows OS.

    All the Cisco IOS routers affected that runs as H.323 gateways, H.323 proxies, NAT and/or CBAC that are affected have no MS product in them whatsoever.

    Furthermore, the CCM issue has nothing to do with the MS ISA server vulnerability as CCM doesn't even ship with or allow you to run ISA server. It is further not affected by the vulnerability with CCM 3.1-3.2 unless you spoof the address of an H.323 gateway that the CCM has pre-defined. If you had no H.323 gateways, there is no vulnerability (not realistic, but the point is that it has nothing to do with the underlying OS). Yes, CCM3.3 is completely vulnerable as it has code to allow for anonymous H.323 gateways, but it has nothing to do with MS.

    As others pointed out, CCM has nothing to do with Exchange. Further, Cisco bought the Unity product line from ActiveVoice and had nothing to do with it's initial development, and Unity isn't affected by this at all (Unity doesn't have any H.323 code). What's more, Unity doesn't require Exchange, as it can run with Domino for the backend.

    Frankly, I'd just have to say you don't know what you're talking about with your first and last sentence (no doubt the second sentence is true, and if it wasn't for NDA I might comment further).

  5. Re:Security Through Obscurity on Exxon And Timex Release The Speedpass watch · · Score: 1


    But then knowing who has seen your card really isn't the point for me... knowing that an unauthorized purchase has occured. Neither Speedpass fob nor CC solve this for me.

    If you use your credit card dozens of times per month and the thief isn't in a hurry (I'm guessing a pro might wait 2-3 months before using each one).

    We had 85 CC purchases of $40 last month (plus some a number of larger purchases, but it all ads up and we get a $10 or $20 gift certificates from Toys R Us each month).

    Someone with dozens of bogus card numbers could easily randomly use them once per month for purchases $20 and go undetected for a long time and I'd not likely know (well, so long as they didn't shop at bizare stores, but my Wife and I both share the account, so unless it's a large amount, I don't bother to ask her about it). Perhaps always cycling thru and using only the most recent hundred CC numbers they had... especially at all the stores these days that let the customer swipe the card themselves.

    I'd really like a smarter credit/fob device that tracked internally when I used it and it could be synced up w/my credit card company when I get home and alert me if there was a charge that my smart device didn't know about. Build it into a cell phone, for instance, and make it part of the charger/dock connection which plugs into not just the power outlet but your rj-45 jack in an ethernet, ip-enabled home ;-).

  6. Re:I need an RFID transceiver on Exxon And Timex Release The Speedpass watch · · Score: 2, Informative

    With RFID, this poster is speculating that the RFID reader not be visible, or even super-close to the RFID chip. With a credit card, you know every time the number is pulled from the card, because you swipe it.

    You don't eat out much, do you?

    It's way harder to steal somebodies CC number. You have to own (or have good access to) the magnetic card reader.

    Cell phone w/digital camera or a James Bond cig lighter...

    Very fast and relatively cheap way for a dishonest waiter or waitress to quickly snag hundreds of numbers. If someone was really organized, they wouldn't even use the numbers, but sell them.

    While I'm not saying it would be easy, I think it would be significantly easier to steal an RFID code than to steal a CC number (the traditional way)

    Nah, CC is way easier. CC numbers are still printed on a third the receipts I get back (the other 2/3rds just show the last 4 digits), and they're /always/ printed in full on the merchant's sales receipt.

  7. images.google.com on Oscar Screener Leak Traced · · Score: 1

    Carmine Caridi via images.google.com

  8. Re:Why I don't read the tech press on Verisign Plans DNS Changes · · Score: 3, Informative

    If your ISP is well-managed, then they query their upstreams and not the root nameservers.

    That's simply not true. Customers should use their ISP's DNS server, but I don't believe ISP's should ever be forwarding queries upstream. That's just asking for problems. ISP's buy wholesale bandwidth, not services like mail forwarding or DNS forwarding (not that one couldn't do it, but it is asking for an extra level of troubleshooting and delay).

    Once a lookup to the .NET NS is cached from the root servers, it is cached the same for a Tier 1 ISP or a Tier 2, and it doesn't have to be done again. The root nameservers are able to handle the .NET, .COM, .US, etc. lookups just fine. Even the next-level .NET, .COM, .US nameservers are multi-homed and anycast globally and able to handle a huge load. There is no reason to risk problems with an upstream ISP vs. going right to the source for an NS record lookup. Once the NS info is cached for a TLD like msn.com, it's the msn.com NS servers (and the hundreds of thousands (?) of other TLD NS servers) that can each handle their own load just fine.

    It's all meant to scale without having needless delay or problems introduced by forwarding queries to a DNS server you cannot control.

    Perhaps you can point to an RFC that says Teir2/3 ISPs should forwad DNS queries to upstream providers? Nope, thought not, not even a best practice.

  9. Re:Why I don't read the tech press on Verisign Plans DNS Changes · · Score: 1

    Except if your ISP is PacBell/SBC. Their DNS servers are constantly having problems. I've always maintained my own DNS server on my ADSL account and I query it and two DNS servers I maintain at my office instead of PacBell's DNS servers.

  10. Re:Fantastic! on Israel's Finance Ministry To Distribute OpenOffice · · Score: 2, Insightful

    Gas-guzzling autos and tobacco products are also a big part of certain segments of our population's economy.

    I don't think either are acceptable and all need to move to another line of work, and/or adapt. Just because something lines our pocketbooks doesn't mean we should promote or endorse it.

    Just offhand (as my son and I were watching C.S. Lewis' _Voyage of the Dawn Treder_ last night), I believe slavery was a big money maker, and illicit drugs still are. Of course, many ways of handling the last, but my point was that just because something makes a lot of money, doesn't mean it should remain or be propped up as some sacred cow.

    Speaking of sacred cows and money... oh, wait, that's another story.

  11. Re:Not just for Linux on Israel's Finance Ministry To Distribute OpenOffice · · Score: 1

    GNUWin are great projects to point folks at Win32 GNU apps, but you should point folks directly to the source, and not to GNUWin sites which haven't been updated recently... rather point them at the source. Faster mirror too.

    Oh, ack, just as I was double-checking my facts, I see that GNUWin II updated to OOo 1.1.0 today (Dec/29th), but still, my point is valid if this article was posted yesterday or a new version of OOo came out tomorrow.

    I also recommend for Win32 users my own list of [L]GPL apps that I use daily .

  12. 802.11a vs. 802.11b/g on Wireless APs in Homebrew Coffee Shops? · · Score: 2, Informative

    I'd never consider 802.11a at this point, the marketshare is all in 802.11b.

    So, the next question is, should you go 802.11g (~54mbit), which is backward compatible with 802.11b?

    How fast is your internet access going to be? Is it even going to be faster than 802.11b will provide (11mbit)? If users want to do laptop to laptop transfers, they should just use a crossover ethernet cable (100mbit). Hint: Most ADSL is 384kbit and will let you grab ~1mbit when things aren't busy at the ISP. 1mbit is "fast" for most folks.

    IHMO, the owner should just see is as a way to increase his customer base for his existing revenue model, and have a cool thing to do when things are slow (but need to keep the other employees in check if things aren't getting done and he's not there all the time).

    Futher, I'd suggest a caching engine like Squid, which can help with content filtering as well (say for employees, make them login before they can surf so you can track their time, etc.). Squidguard is my filter preference for filtering and there are many free content DBs online.

    I'd be filtering porn sites, probably gambling, probably hate sites, etc., as I'd not want one customer offending another with graphic images. Of course, you could say MYOB and tell the guy to sit where no one can see his laptop, whatever...

    NoCat is a good authentication model as well just so you can track folks in case something illegal is taking place.

  13. Re:Compare to Cisco's SoftPhone on Toshiba Adds VoIP to PCs · · Score: 1


    Further, Cisco's softphone runs on the iPaq and works just great over 802.11b. If you've got the bucks, I'd say get a Cisco 7960 802.11b hardware phone.

  14. Re:2003 was a wormy year. on Looking Back At Windows Security In 2003 · · Score: 1

    To me, I think the biggest difference is that in 1998 with the RTM Worm *NIX people started to think "hey, if this box is going to be connected a network , it needs to be secure." In other words, if it could possibly have a network stack, it needed to be secured.

    Microsoft didn't start thinking about that, what 13 or 14 years later, when Code Red and the lot started to hit. It wasn't rocket science, it was just a matter of time. I think it was just the beginning...

    You know what scares me the most? China has access to Microsoft source code [1, 2]. What if some Chinese government insider's son decides to take the knowledge of exploits learned and release something (no different than RTM did in 1988)? What if China wanted to wage "cyberwar" on Taiwan and a worm with a multiple nasty exploits (3+) got lose to the US and abroad?

  15. Re:One good reason they may have on TiVo Goes After Sites Hosting Image Backups · · Score: 1

    A HUGE amount. I know of a dozen folks personally who I've helped replace it with a NIC option instead, and then they don't need to make calls anymore (all have broadband of some sort).

    I'd love to also see the figure on how many hard drives have died. I know I've personally replaced 3 failed drives for different friends. Using these images was my only option as each had a different hardware version than my Tivo.

  16. Very annoyed - ftp.abs.net images were great on TiVo Goes After Sites Hosting Image Backups · · Score: 1

    I've personally used images from ABS to restored failed HDDs of friends. These were friends who had never opened their TiVo's and never hacked. All we did was restore a custom image to a replacement HDD of the same size.

    I've got a backup image of my DTiVO DSR6K that I made the minute I got it, but that doesn't help friend who has a different model.

  17. Why pay? RH7.3 - RH9 updates from Fedora Legacy on Progeny To Offer Support For Red Hat 8.0 and 9 · · Score: 1

    Fedora Legacy will be offering free updates for RedHat versions 7.3, 8.0 and 9.

    The only reason I'd see to pay for support is when things break... Kind of like car insurance you can buy after an accident... hmm.

  18. Re:What an overelaborate scheme... on Fake ATM Fraud Expose · · Score: 1

    That's why I write "ASK FOR ID!" on the first part of the signature strip and sign my card on the other half. I thank folks that ask me and I chide those that do not with comments like, "With clerks like you verifying signatures, I can't believe someone would try to use a stolen credit card." Some don't even get my sarcasm, some then double-check the card and/or ask for ID right away. The point is that at least they're being called on not checking the signature - which would then force them to ask for ID as I've written on all my cards.

    Of course, gas stations and the newer credit card readers that allow the customer swipe the card themself and the clerk never see it (or the self-shop checkout at Home Depot or WalMart) bug me a bit.

    But at least with credit cards you're much more protected. I've never heard what the situation is with an ATM card... I'm sure it varies bank by bank, but you might just be SOL if someone clears out your account and they aren't caught.

    Further, I think CC companies should be required to put a photo on cards. Yeah, it'd be a hassle as you'd have to go in and get a photo taken, but I'd feel much better. I'd even like to have two sets of cards, one that can be used over the phone or with automated things without photo, and the photo one which could only be used at places with a live human checking.

    *shrug* I really like MBNA's Shopsafe feature that allows you to generate a new card number for each online purchase, set an expiration date, and a limit amount. My Wife and I each have one of these cards and use the Shopsafe feature for all our online purchases. Best of all, you can get a Linuxfund pengiun logo'd one that supports Open Source.

  19. Re:Nope on Will TiVo Destroy Ad-Supported TV? · · Score: 1

    Uhm, 'cept that I have a cell phone and never use a payphone. The weekend I didn't have a cell phone when I changed jobs (had to turn in my phone on Friday and didn't get a new one until Monday), it was hell trying to find payphone when I was outside Circuit City. In fact, I ended up asking someone if I could pay them a buck to use their cell - which they let me use for free (same as I'd have done for anyone else that asked).

  20. Re:Alvin Toffler predicted this 24 years ago. on Will TiVo Destroy Ad-Supported TV? · · Score: 1

    Err, that should have said "most people I know who bought blank VCR tapes"...

  21. Re:Alvin Toffler predicted this 24 years ago. on Will TiVo Destroy Ad-Supported TV? · · Score: 1

    I knew only one other kid at school whose family used a VCR to record shows, and that was because we both wanted to record our shows that were on during the sports seasons.

    Of those that bought VCRs, I doubt there were many that used it to record shows... I know for myself it was a PITA as other family members would turn off "Timer" mode or eject my blank tape, or back then when the cable tuner wasn't built-in to the VCR you had to leave it set on the channel and they'd change the cable box channel. Very annoying.

    Heh, most people I know who bought VCRs did it to record movies off HBO, etc. or dupe movie rentals.

  22. Re:Yeah but... on Will TiVo Destroy Ad-Supported TV? · · Score: 1


    About once per sitting (so 2-3 "hours" of shows minus the commercials) I'll see a commercial and rewind to watch it.

    Mainly on TechTV where they have the more "Geeky" commercials, like this new 20MPH electric scooter product for $795 (I thought I'd be great for getting around a downtown area or mail carriers or the paperboy).

    Trailers as well, although usually I just fire up apple.com/trailers when I hear about a new movie.

    But yeah, why pay to advertise feminine products to a guy? Why advertise anti-smoking products to a totally non-smoking house? Why advertise new cars to a house that has bought two in the last year and has no plans to be another in 3-4 years? Better to somehow get the consumer to let the advertiser know a bit about them (anonymously) in trade for getting rid of "annoying" commercials.

    Hell, even give me a "thumbs up" and "thumbs down" feature for commercials. Not that I won't zap past them still, but at least you'll know which ones I found didn't apply or perhaps a "lame commercial" button ;-p

  23. Re:I don't get it? on Will TiVo Destroy Ad-Supported TV? · · Score: 1


    Or if you have a DirecTivo you can hit the down button and choose the other tuner and surf (or keep the other tuner on VH1 or whatever). What I like about this is that I can surf or watch a video or two, then come back to my show which might already be 1-2 minutes back into it, but rewind back. You get a 60 minute buffer on each tuner, so long as you don't change the channel (and each tuner can be on a different channel).

  24. Re:That's Easy on NDIS Wrapper For Wireless LAN Cards Under GPL · · Score: 1

    How about some 802.11g cards?

  25. Re:unofficial #fedora FAQ on OSNews Rates Fedora Core 1 Mild Disappointment · · Score: 2, Informative

    BTW: We the FAQ contains info for nVidia and RhythmBox.

    You'd think the guy would at least try RedHat's suggested support mechanism: irc://irc.freenode.net#fedora where we link to this unofficial FAQ and will help users solve these problems.

    Folks there have been solving these questions as they pop up. Sometimes there is no fix, sometimes it turns out to be something stupid in FC1 that shouldn't be that way, but it is a .0 release, and there often are work-arounds or fixes.