Eaxctly, simply put, zoneAlarm does not allow you do to that kind of "filtering when my box is routing".
For example, if you want to allow that, you have to configure zoneAlarm with "low" security settings, wich opens up way too much holes to be of any usefulness security-wise.
It's still going to block the trojan on the machine it runs, tough., but not much else
They want to know what made these old instruments sound so good.
Well, let me see. In the ol'(which maybe was not so good) time, instruments where done by people who where master of their art, which in turn took years to produce.
They were respected for their unique knowledge, and made apprentice of young people that wanted to learn it. Of course, since making a "proper" instrument was a revered art, it took time as well.
But as time passed, this apprenticeship business losed its appeal for the young generations.
Why ? Because after all it was hard, masters tended to be harsh, brutal and extremely demanding. And they wanted their "secrets" to be closely kept too.
This was eventually replaced by mass industrialisation: producing always cheaper goods with far less dedication and quality, but for everybody to access.
The difference here is clear: current instrument maker simply do not have the same goal and values as past ones.
Is it good, or is it bad ? Who knows, and I'm not the one to start the debate.
But even if they manage to find why a stradivarius is a stradivarius, will they simply be willing to reproduce it truly, and not a scaled-down version of "process" ? I doubt it. Because it might take something that is not only technical. Or maybe those instruments are going to be an elite-thing again.
What I just remember of the Boganoff brother is that they were hosting one of the first Sci-fi shows on the french TV (around 1979). Pretty advanced for the time, let's admit it.
They also wrote "la mémoire double", which is one of the first book exploiting the virtual reality theme I ever read.
I did no knew they were physicist up today...
...Obviously from someone in the field, or not so far from the real problems.
My reaction had been driven by some experience I had more than ten years ago, trying to implement traceability for for various chirurgical implants, and especially hip ones.
At that time, (it was in France, btw.), I really had the chance to talk to people all along the delivery and manufacturing chain, and I was under the impression I wrote in my message. However, it might be because of the local market and conditions, and also of the currrent legislation.
I obviously have been a bit too rash about explaining my opinion, and if I shocked you, please accept my apologies. I have personnaly be subject to surgery, and I'm happy with the job my surgeon did.
One of the problem with implants and of course all kind of deep surgery is obviously the fact that it is at a confluent of emotionnal/political/technical/money issues. Which is of course the worse mix you can dream of.
But now I'm an engineer, and even if you cannot open a patient like you unscrew your car parts, I still do believe better solutions exists, but that they encountered roadblocks that had nothign to do with their adequateness with the problem.
That the fucking surgeon just do not give a damn !
I've been working into a plant that made those hip prosthesis. One of the problem with the current model
is that they used high-density polyethylene (plastic) against stainless steel. Of course the friction factor will be very good, but eventually, even the stainless still will wear out. The human body is quite both a fragile and hostile environmment for non-living parts.
Over the course of years, the various mechanical part in friction with eachother will eventually wear each other out.
But instead of allowing the transplant to have replaceable parts (like part of car breaks, for example) the surgeons wanted to have something that would have to be wholly replaced. Just imaging the result of having the whole ten-year-settled femur implant to be replaced by a new one, and you'll get the picture.
The problem is that it's not a easy-to-track down feature into a remote far-not-likely-to-be-used-anyway-freaking-mysterio us-device-driver.
No, it's something into the basic kernel code (/usr/src/linux/kernel/ or/usr/src/linux/include/linux).
I know enough of C/compilation to locate the problem and even attempt to quick-patch it, but I do not have the knowledge (nor the time, I'm afraid) to correct that and submit a patch by myself.
The point is, short of posting that on the kernel mailing list (which maybe I should do), is there a better way to get around that ? I'm quite willing to help, drat I tested about 7 to 10.config file before giving up, but what in hell can I do !?!
I mean I know, the open-source model is suppose to work in a way where I should try hard to figure things out, but hey, if they want a broad testing audience, they cannot force everybody to learn the kernel.
There should be a middle ground here, should'nt it ???
You are quite right, I forgot to mention the picture inconvenient (when something could go well without saiyng, it always go better when you say it anyway).
But again, it will deter the lazy click-jerk in search of an easy picture.
Now that leaves a few open questions:
- Is that technically possible (most probably yes).
- How will the gOOgle people/web infrastructure react ? Are they willing to handle the load ?
- After all, it's up to the site admin/responsible to consider if beeing/. is an ill effect of an indication to upgrade.
I really do think the/. community have to do something about it !!!
"As a long-time geek and first-time home buyer, my wife are planning on a complete kitchen remodel. As part of the remodel, I want to put a computer into the kitchen to use for looking up recipes, controling the stereo, watching movies, etc. My only requirements are that it be Internet connected. My wife's requirements are that it be hidden."
Non-geek traduction:
_They_ just bought a new house.
Beeing geek _he_ wants to put a computer inside the kitchen, too (beside the living room, the toilets and the bedchambers). He's trying to make us believe that the recipe part is important, but what he really wants is watching movies.
Beeing female, _she_ wants to organize the kitchen to her liking, and just do not give a damn about the computer: note the "hidden" requirement.
Marketing conclusion: your primary problem here is not technical. What you are into is WR (Wife Relationship), because the thing better have to be:
Usefull
Not in anybody way
Resistant to wet/greasy/small fingers
Rember that wifes tend generate small, noisy and smelly things too ! They usually are called childrens, and will break everything you put in their path (including themself).
Technical conclusion: everything short of an armored version of this won't do. Equip it with a disposable keyboard, screen and mouse. Oh, and you'd better tailor the software you put there to please her, or that machine won't last long. A kitchen is indeed not a computer-friendly environmment !
Well, just to settle (probably too late) that dispute:
You both are probably right.
When you have a PPP link (PPP over ADSL or PPP over ethernet),
since this is a point-to-point link the netmask is 255.255.255.255. This is not a security measure, this is PPP.
Now, if you have a cable modem that is not using PPPOE but DHCP (my case), then this is obviously not a valide netmask (mine is 255.255.255.0).
Go read any TCP/IP and networking-related howto and come back, guys !
<RANT> Without denying MoonFacedAssassin the right to a response to a very pertinent question, I think that posting that on Ask SlashJeeves shows a suprising level of ignorance from Cliff. Or he is at the end of some coding spree? Because this question does dot belong here, but rather on some newsgroup like comp.security.firewall (someone help me there).
Anyway, let me end my RANT section by saying that the level of interest of ask slashdot has regularly reached new lows every day.
I'm worried, to say the least
</RANT>
But let's drop the political/marketing aspect of that and take car of some real technical stuff:
(Yeah you guessed it, I'm getting pedantic during insomnias (it's 3:00 here)).
Get over it: an IP does not get spammed, because scannig block of addresses does not require any kind of disclosure from your ISP. They only have to have a router advertising their block of IP to the internet for those block of addresses to be scanned. Because having such a setup is one of the primary requirements to be an ISP. Sorry.
Even residing into some secret whois database won't change anything there.
Believe me, I've got firsthand experiences of having systems simply plug onto the internet, not even having some DNS record, and beeing scanned after one days of routable IP presence.
And no, you don't want them to "protect" you from that, because if they start going big brother on you, you will notice a real drop on the number of things you can do online. Unless you really want only to surf and e-mail a bit, that will be perfectly understandable.
But that's another debate: since internet is a jungle now, do we want to see some new kind of ISP that babysits theyr not-so-technical users ?
The second thing that worries me is that if you got a window messaging message, this means that you probably have a whole slew of netbios services exposed to the internet. Now listen carefully: if you ever have a shared printer or worst, drive, your machine is already hacked. Even not having shares might no be sufficient to protect you.
I'm not trying to scare you there, it`s just a fact.
In this case, please unplug from the network and reinstall from scratch. Do not backup any executablte. And the first time you re-plug you machine on the internet, please go immediately shopping for a personnal firewall, like ZoneAlarm and such. Once this one is done, either make sure your anti-virus software is up to date, or get you one. This will give you a reasonnable amount of security.
I just can imagine our cats reaction to the system in action (woOoOoF). Eventually, they will give up their landlordship on the couch. Oh heaven: no more f..ing hairs, no more fight for the best place. Now, adding a feature as useful as the "random triggerering of the jumping couch" syndrome to the system will be definitely coOoOo0l.
But Twenty Grands, I can buy a car for that, and obtain very real impressions with it too, though for more $500 of maintenance a year.
Anyway, we have one of those park in montreal where they have a movie theater with 3D glasses and seat motion.
...And I HATE it, because you cannot both look at the movie, hold on to your glasses and avoid to puke at the same time.
Because that involved the FBI and a lot of people worldwide, there should have been some indications that troubles where coming, or did they manage to stay in stealth mode until they hit?
From what us non-insiders know of, a hacker group is somewhat organized with different isolated layers, and very few connections between those layers, but the one needed to make it works. This ends up beeing a kind of CIA-like organisation, more or like.
Of course, the very nature of internet greatly help that, but i'm wondering : from an insider point of view, did this kind of organisation just "emerge", or where you briefed by someone else?
Of course, the lwa-enforcment greatly over-estimated the importance of DrinkOrDie. They need to justify the tax-payer money they are throwing out of the window: see some interesting file.
But overall, how was your oragnisation preceived by its peers cracking groups?
We just tested a steel-belted radius (funk(r)) working with Iplanet (Sun(r)), and go about 600 processed radius requests per seconds, which is largerly enough for you.
I'm not disclosing the full study here (wanna keep my job, guys), but since radius is mainly network/cpu intensive, and because any Database is througput intensive, it make sense to split them over two boxes and to tune those boxes differently.
Besides, it helps if you ever want redundancy, which is probably quite desirable as an ISP.
Which raises a question: what LDAP implementation are you using ?
Another point: why use a stacking of DB, like [Whatever]LDAP over [Whatever]SQL, it is just a waste of ressources, because an LDAP schema is not made to fit into a relationnal database.
Stick to Radius/Ldap, and test your prototype performance. Here is a free
test scripts, though I do not know if it will work with your choice of radius.
If you manage to get a --on floppy or --on cd distro, make sure you have a compiler and enough room to extract the linux kernel sources, and watch out for signal 11.
It's usually a goot burn test/benchmark of disk/cpu/memory.
Every now and then, around once per month, someone in the crowd stands up, and pretends that Linux/Free Software/his favorite mojo is on the brink of a revolution ( 1, 2,
3,
4,
5,
etc...).
Those PR effects of people believing that Open Source is falling asleep is just tiring.
Slashdot Mirror
For example, if you want to allow that, you have to configure zoneAlarm with "low" security settings, wich opens up way too much holes to be of any usefulness security-wise.
It's still going to block the trojan on the machine it runs, tough., but not much else
Well, let me see. In the ol'(which maybe was not so good) time, instruments where done by people who where master of their art, which in turn took years to produce.
They were respected for their unique knowledge, and made apprentice of young people that wanted to learn it. Of course, since making a "proper" instrument was a revered art, it took time as well.
But as time passed, this apprenticeship business losed its appeal for the young generations.
Why ? Because after all it was hard, masters tended to be harsh, brutal and extremely demanding. And they wanted their "secrets" to be closely kept too.
This was eventually replaced by mass industrialisation: producing always cheaper goods with far less dedication and quality, but for everybody to access.
The difference here is clear: current instrument maker simply do not have the same goal and values as past ones.
Is it good, or is it bad ? Who knows, and I'm not the one to start the debate.
But even if they manage to find why a stradivarius is a stradivarius, will they simply be willing to reproduce it truly, and not a scaled-down version of "process" ? I doubt it. Because it might take something that is not only technical. Or maybe those instruments are going to be an elite-thing again.
And in my opinion, there we lose the interest.
What I just remember of the Boganoff brother is that they were hosting one of the first Sci-fi shows on the french TV (around 1979). Pretty advanced for the time, let's admit it.
They also wrote "la mémoire double", which is one of the first book exploiting the virtual reality theme I ever read.
I did no knew they were physicist up today...
Yes, some early-but-proprietary infrastructure exists.
Are you still interested ?
To mister allmonkey:-) there is a difference between the parts of your body and the parts of your car.
Car part does not tend to repair themselves, or more accurtely, the rest of the car does not try to repair something broken.
I would be interested in buying some clone of me though, where is the factory you are talking about ?
My reaction had been driven by some experience I had more than ten years ago, trying to implement traceability for for various chirurgical implants, and especially hip ones.
At that time, (it was in France, btw.), I really had the chance to talk to people all along the delivery and manufacturing chain, and I was under the impression I wrote in my message. However, it might be because of the local market and conditions, and also of the currrent legislation.
I obviously have been a bit too rash about explaining my opinion, and if I shocked you, please accept my apologies. I have personnaly be subject to surgery, and I'm happy with the job my surgeon did.
One of the problem with implants and of course all kind of deep surgery is obviously the fact that it is at a confluent of emotionnal/political/technical/money issues. Which is of course the worse mix you can dream of.
But now I'm an engineer, and even if you cannot open a patient like you unscrew your car parts, I still do believe better solutions exists, but that they encountered roadblocks that had nothign to do with their adequateness with the problem.
Big stupid grin
Yeah, I know mod this down -1: Lame/Troll/Redundant/Overrated
Slayer help us, there must be something vampiric going one. Watch it, you'll be the next to be sacrified !!!
I've been working into a plant that made those hip prosthesis. One of the problem with the current model is that they used high-density polyethylene (plastic) against stainless steel. Of course the friction factor will be very good, but eventually, even the stainless still will wear out. The human body is quite both a fragile and hostile environmment for non-living parts.
Over the course of years, the various mechanical part in friction with eachother will eventually wear each other out.
But instead of allowing the transplant to have replaceable parts (like part of car breaks, for example) the surgeons wanted to have something that would have to be wholly replaced. Just imaging the result of having the whole ten-year-settled femur implant to be replaced by a new one, and you'll get the picture.
Maybe this has changed nowadays...
The problem is that it's not a easy-to-track down feature into a remote far-not-likely-to-be-used-anyway-freaking-mysterio us-device-driver.
No, it's something into the basic kernel code (/usr/src/linux/kernel/ or /usr/src/linux/include/linux).
I know enough of C/compilation to locate the problem and even attempt to quick-patch it, but I do not have the knowledge (nor the time, I'm afraid) to correct that and submit a patch by myself.
The point is, short of posting that on the kernel mailing list (which maybe I should do), is there a better way to get around that ? I'm quite willing to help, drat I tested about 7 to 10 .config file before giving up, but what in hell can I do !?!
I mean I know, the open-source model is suppose to work in a way where I should try hard to figure things out, but hey, if they want a broad testing audience, they cannot force everybody to learn the kernel.
There should be a middle ground here, should'nt it ???
You are quite right, I forgot to mention the picture inconvenient (when something could go well without saiyng, it always go better when you say it anyway).
But again, it will deter the lazy click-jerk in search of an easy picture.
Now that leaves a few open questions:- Is that technically possible (most probably yes).
- How will the gOOgle people/web infrastructure react ? Are they willing to handle the load ?
- After all, it's up to the site admin/responsible to consider if beeing
I really do think the /. community have to do something about it !!!
Then let /. point to the google cached version instead of the original one, scripting that should not be too hard.
That should reduce the /. effect by at least the amount of click-jerk reaction !
Eveybody knows that a totaly silent PC is a virtual one: all the other are too noisy to compare anyway !!!
Non-geek traduction:
_They_ just bought a new house.
Beeing geek _he_ wants to put a computer inside the kitchen, too (beside the living room, the toilets and the bedchambers). He's trying to make us believe that the recipe part is important, but what he really wants is watching movies.
Beeing female, _she_ wants to organize the kitchen to her liking, and just do not give a damn about the computer: note the "hidden" requirement.
Marketing conclusion: your primary problem here is not technical. What you are into is WR (Wife Relationship), because the thing better have to be:
Technical conclusion: everything short of an armored version of this won't do. Equip it with a disposable keyboard, screen and mouse. Oh, and you'd better tailor the software you put there to please her, or that machine won't last long. A kitchen is indeed not a computer-friendly environmment !
Well, just to settle (probably too late) that dispute:
You both are probably right. When you have a PPP link (PPP over ADSL or PPP over ethernet), since this is a point-to-point link the netmask is 255.255.255.255. This is not a security measure, this is PPP.Now, if you have a cable modem that is not using PPPOE but DHCP (my case), then this is obviously not a valide netmask (mine is 255.255.255.0).
Go read any TCP/IP and networking-related howto and come back, guys !
I concur with you danielrose.
<RANT> Without denying MoonFacedAssassin the right to a response to a very pertinent question, I think that posting that on Ask SlashJeeves shows a suprising level of ignorance from Cliff. Or he is at the end of some coding spree? Because this question does dot belong here, but rather on some newsgroup like comp.security.firewall (someone help me there).
Anyway, let me end my RANT section by saying that the level of interest of ask slashdot has regularly reached new lows every day.
I'm worried, to say the least
</RANT>But let's drop the political/marketing aspect of that and take car of some real technical stuff:
(Yeah you guessed it, I'm getting pedantic during insomnias (it's 3:00 here)).- Get over it: an IP does not get spammed, because scannig block of addresses does not require any kind of disclosure from your ISP. They only have to have a router advertising their block of IP to the internet for those block of addresses to be scanned. Because having such a setup is one of the primary requirements to be an ISP. Sorry.
Even residing into some secret whois database won't change anything there.
- The second thing that worries me is that if you got a window messaging message, this means that you probably have a whole slew of netbios services exposed to the internet. Now listen carefully: if you ever have a shared printer or worst, drive, your machine is already hacked. Even not having shares might no be sufficient to protect you.
- If you followed me this far, well thank you !!!
Now, welcome to a brave new world !Believe me, I've got firsthand experiences of having systems simply plug onto the internet, not even having some DNS record, and beeing scanned after one days of routable IP presence.
And no, you don't want them to "protect" you from that, because if they start going big brother on you, you will notice a real drop on the number of things you can do online. Unless you really want only to surf and e-mail a bit, that will be perfectly understandable.
But that's another debate: since internet is a jungle now, do we want to see some new kind of ISP that babysits theyr not-so-technical users ?
I'm not trying to scare you there, it`s just a fact.
In this case, please unplug from the network and reinstall from scratch. Do not backup any executablte. And the first time you re-plug you machine on the internet, please go immediately shopping for a personnal firewall, like ZoneAlarm and such. Once this one is done, either make sure your anti-virus software is up to date, or get you one. This will give you a reasonnable amount of security.
By some definition of liquid mechanics, a laminar flow is the contrary of a turbulent flow.
This means that the molecules are supposed to flow nicely, together, instead of acting like theNow, if you look at their pictures, those flows does not look laminar, but rather turbulent.
They are not slashdotted already, so please could you update the link ?
And gOOgles gives this, for examples. I assume that's what you are mentionning in your post.
I just can imagine our cats reaction to the system in action (woOoOoF). Eventually, they will give up their landlordship on the couch. Oh heaven: no more f..ing hairs, no more fight for the best place. Now, adding a feature as useful as the "random triggerering of the jumping couch" syndrome to the system will be definitely coOoOo0l.
But Twenty Grands, I can buy a car for that, and obtain very real impressions with it too, though for more $500 of maintenance a year.
Anyway, we have one of those park in montreal where they have a movie theater with 3D glasses and seat motion.
...And I HATE it, because you cannot both look at the movie, hold on to your glasses and avoid to puke at the same time.How did you get caught, from your point of view ?
Because that involved the FBI and a lot of people worldwide, there should have been some indications that troubles where coming, or did they manage to stay in stealth mode until they hit?
From what us non-insiders know of, a hacker group is somewhat organized with different isolated layers, and very few connections between those layers, but the one needed to make it works. This ends up beeing a kind of CIA-like organisation, more or like.
Of course, the very nature of internet greatly help that, but i'm wondering : from an insider point of view, did this kind of organisation just "emerge", or where you briefed by someone else?
Of course, the lwa-enforcment greatly over-estimated the importance of DrinkOrDie. They need to justify the tax-payer money they are throwing out of the window: see some interesting file.
But overall, how was your oragnisation preceived by its peers cracking groups?We just tested a steel-belted radius (funk(r)) working with Iplanet (Sun(r)), and go about 600 processed radius requests per seconds, which is largerly enough for you.
I'm not disclosing the full study here (wanna keep my job, guys), but since radius is mainly network/cpu intensive, and because any Database is througput intensive, it make sense to split them over two boxes and to tune those boxes differently.
Besides, it helps if you ever want redundancy, which is probably quite desirable as an ISP.Which raises a question: what LDAP implementation are you using ?
Another point: why use a stacking of DB, like [Whatever]LDAP over [Whatever]SQL, it is just a waste of ressources, because an LDAP schema is not made to fit into a relationnal database.
Stick to Radius/Ldap, and test your prototype performance. Here is a free test scripts, though I do not know if it will work with your choice of radius.
If you manage to get a --on floppy or --on cd distro, make sure you have a compiler and enough room to extract the linux kernel sources, and watch out for signal 11.
It's usually a goot burn test/benchmark of disk/cpu/memory.Every now and then, around once per month, someone in the crowd stands up, and pretends that Linux/Free Software/his favorite mojo is on the brink of a revolution ( 1, 2, 3, 4, 5, etc...).
Those PR effects of people believing that Open Source is falling asleep is just tiring.
And of course, it's 120 mm = 12cm != 12 inches ~= 36 cm...
Because CD-media size is a must !Basically, they: