Slashdot Mirror


User: quinto2000

quinto2000's activity in the archive.

Stories
0
Comments
470
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 470

  1. Use standard software and keep it up to date on Ask Slashdot: Do-It-Yourself Security Auditing Tools? · · Score: 4, Insightful

    From the way you describe your goal, you are building mostly one-off websites. For small companies and the like? You'll be best off just using popular open source products like Drupal, WordPress, or ModX and keeping up to date with security updates. Many of these will automatically notify you of security updates and you can apply them right away. Don't try to host the websites on your own server either. Get a hosting product from a company that will keep the underlying OS, Apache, and PHP up to date and secure. This will reduce your exposure quite a bit. You still need to make sure to choose good passwords. Nessus or OpenVAS are also an option.

  2. Re:When do we get compression? on Fedora Aims To Simplify Linux Filesystem · · Score: 1

    This does solve an important problem in the Windows server space. Windows generates big log files, and there's no good log rotation built in. I do routinely end up compressing the log directories on many of my Windows servers. However, Linux has several good standard log rotators, so it's less of a concern. I've actually never run into the problem of a log directory filling up on Linux. What's the other use case where you have 1 TB of text files, other than logs?

  3. Re:what I did on Learning Programming In a Post-BASIC World · · Score: 1

    I agree with Pascal--first "real" programming I used after playing around with Basic interpreters on the Mac II. It's much easier to start with than C, but has C-like syntax so it's not hard to transition.

  4. Re:Should have used vsftpd on ProFTPD.org Compromised, Backdoor Distributed · · Score: 1

    You're saying it's possible to secure a known username. Who cares? Suppose 90% of attacks are on those known usernames (I don't have actual figures, but that seems plausible, based on my own experience with publicly accessible Linux machines). Just eliminate 90% of the attacks (and the chance of brute force breaking through) by eliminating those known accounts from remote login.

    Why wouldn't you do this? You can still secure the rest of your accounts. Hackers, botnets and script kiddies go after the low-hanging fruit. Reduce your attack surface, and you are clearly better off. There's almost no hassle to having to su to root once you log in with a normal user account.

    By the way--logging in to a console in public is completely different from remote root access. If someone can see over your shoulder--there are lots of other ways for them to engineer an attack. But we all have to be aware of the greater risk of unknown users on the Internet just scanning IP ranges and trying to login. If you've ever had a public web server, you will see that this happens to every machine. Much more common than someone we know trying to crack into our box.

  5. Re:Should have used vsftpd on ProFTPD.org Compromised, Backdoor Distributed · · Score: 1

    Pretty real security risk--first thing any good sysadmin does is disable remote access to known account names like "root" and "administrator"--you greatly reduce your attack surface by doing so. Take a look at ssh access logs and see how many denied attempts there were for "root".

  6. "One seat majority" on 2010 Election Results Are In · · Score: 1

    Currently the Democrats have 51 confirmed seats, which is expected to reach as high as 53. 51 seats means a two-seat majority, while 53 would mean a six-seat majority. Basic math time, folks.

  7. Re:Offer custom maps on Can an Open Source Map Project Make Money? · · Score: 1

    I think I used JOSM as well--it was a while ago. But I don't think JOSM allowed any rendering, so once I got a map segment with JOSM I had to render it with Mapnik.

  8. Offer custom maps on Can an Open Source Map Project Make Money? · · Score: 1

    When I got married, I decided I wanted to make maps for my guests, none of whom lived in our small exurb. It turns out this is a pretty common task. I didn't want ugly, low resolution mapquest printout maps though. I wanted to be able to put in points of interest, I wanted a high level of street detail and I wanted some control over the rendering. I was excited to find out about OSM. It turns out, the Open Street Map website allows you to download a section of the map as SVG. Great! However, one problem: it has a pretty small limit on how big it can be, which limits either map size or level of detail. I ended up downloading the entire map, the rendering software and Mapnik style sheets, and having to compile the renderer myself. Then I edited the map in Inkscape, but there are some boundary issues when you just want a small segment of a big map. It was a pretty complicated project, but I think ultimately worth it.

    If OSM offered a paid or advertising supported service to help make custom maps, I think it would be pretty popular. I've toyed around with the idea myself of offering this service, but I don't have the time.

  9. Re:It's not the words... on Justice Department Seeks Ebonics Experts · · Score: 1

    I don't think that's real language--it's made up for the movie Airplane!

  10. Nope on Does Net Neutrality Violate the Fifth Amendment? · · Score: 1

    No. Almost nothing is a regulatory taking. There's a very narrow area that's protected, and this almost certainly does not fall in that area.

  11. Re:What I want on Google's Chrome OS To Launch In Fall · · Score: 1

    Sounds like a research project at CMU called Internet Suspend and Resume. http://isr.cmu.edu/

  12. Re:Fat Chance on FSF Asks Apple To Comply With the GPL For Clone of GNU Go · · Score: 1

    Congress passed a law, the Communications Decency Act, which protected "service providers" from liability for distribution of information published on their forums by others. This covers Youtube, but not someone like Apple who is essentially a software reseller.

  13. Re:House Rules on Scrabble To Allow Proper Nouns · · Score: 1
    Or...you can just accept the Scrabble rules, which rely on lexicographers to determine the acceptability of a word. I'm not sure why you think you're better at determining what a "word" is than the committees of lexicographers who edit dictionaries. The original Scrabble rules are simple and avoid arbitrary classifications. Should we also eliminate rarely used scientific or medical words? Notes on the musical scale, which have english names? (do, re, mi, etc.) Is laser acceptable (light amplification by stimulated emission of radar)? Usage is what determines acceptability of something as a "word" in the English language, and determines inclusion in a dictionary.

    Basically what you are saying, is that it's hard for you to remember these words. Part of the fun of Scrabble is in expanding your vocabulary. Accept the challenge instead of limiting yourself. There's already a clear, concise Scrabble word list. Use it.

    By the way, ETC* is not acceptable, because it's not a word--it's an abbreviation without its own pronunciation. Amp, ref, and ex are all commonly used English words, so I'm not sure why they offend you. How often do you really say "amperage" or "ampere" rather than amp?

  14. Re:Just in case, article text on RIAA Recommends Students Drop out of College · · Score: 1

    well, not quite. but you're right that the states are not required to provide a trial by jury for civil suits in all cases.

  15. Re:Don't do the CRIME if you can't do the TIME on RIAA Recommends Students Drop out of College · · Score: 1

    whoah there, brother. the fourth and 14th amendments only apply to the federal government and the states, not to private actors.

  16. Re:It's an Education Project on Negroponte Responds to $100 Laptop Criticisms · · Score: 1

    you realize that this is just a summary of the same presentation discussed in the main article, right? it adds no new information except about the bloatedness of linux.

  17. Re:Uh oh... on Duke Nukem Forever to Arrive December? · · Score: 1

    you could have even mixed semaphores if you wanted.

  18. Re:Clean water first??? on Making Ice Without Electricity · · Score: 1

    that's antarctic, arctic.

  19. Re:In Soviet America... on Making Ice Without Electricity · · Score: 1

    I'm pretty sure this is completely false. FEMA had full authority to act, but certainly they may have chosen to wait until they were asked at each step.

    Why does this crap get modded "informative"??

  20. Re:In Soviet America... on Making Ice Without Electricity · · Score: 0, Flamebait

    And of course...class is never determined by race.

  21. Re:Legal Liability on Orkut Linked To Drug Ring Bust · · Score: 1

    believe it or not, shooting to wound is generally less legal than shooting to kill (in defensive situations).

  22. Re:What if sustainability isn't efficient? on China Planning For Sustainable Cities · · Score: 2, Informative

    In the small town where I grew up, yes, the recyling program cost more money than it brought in. But it also saved money compared to dumping the garbage, and this is in a town where we had to pay for every bag of garbage that we wanted brought to the landfill.
    There are many reasons that recyling makes sense. When calculating its cost, you can't just ignore the fact that there is a cost associated with dumping as well. At least with recycling, you recover part of the cost.

  23. Re:Mod parent "uninformative" on Large Scale Production of Artificial Meat · · Score: 1

    most animals are fed grain and other animals, not grass. I'm not sure what century you live in :)

    And there is indeed a crisis in global clean, fresh water resources. If you use google you will see several journal articles discussing this. http://ag.arizona.edu/AZWATER/awr/dec99/Feature2.h tm

  24. Re:Mod parent "uninformative" on Large Scale Production of Artificial Meat · · Score: 1

    You miss the point. Animal protein's cost=vegetable cost + animal cost. It will never be less than the vegetable growing cost, and surely you're not claiming with any sincerity that no resources are consumed in raising animals. What's more, while there may be land that animals can be raised on that vegetables can't be grown on, fresh, clean water is a limited resource that is dwindling in modern times. See this post which links to a few concrete figures on resource consumption: http://sugarrocket.com/vegan/why-i-am-vegan.php

  25. Mod parent "uninformative" on Large Scale Production of Artificial Meat · · Score: 2, Insightful

    Oh come on, this is absurd.

    Do you realize how many more resources -- land and fresh water -- are consumed in producing meat than in producing vegetable crops? Livestock are either fed other livestock or vegetable crops. There is no possible way to use fewer resources to produce a pound of animal protein vs a pound of soy protein.

    That ethical reason is what motivates me in limiting my meat intake to fish and chicken and limiting my intake of those as much as I can. The most resources are used in producing red meat, followed by pork, then fish and chicken, but a pure-vegetable diet uses the least.