Um, AWStats isn't written in PHP, but in Perl. This isn't a PHP worm, it's a CGI exploit which happens to target PHP apps, plus the occasional Perl app.
Trivia note: Fibonacci, who is known for the fibonacci number series, is the person who introduced and first promoted the use of the arabic number system to Medieval Europe
And that's only because he couldn't make the Fibbonacci series work using roman numerals.
However, postgrey (an implementation of greylisting) rejects all mail upon first attempt. Trojanned windows boxen spewing spam and/or virii, actual spammers, legitimate mail --- they all get blocked upon HELO, for 300 seconds. The theory is that legitimate mail will be resent, while bogus mail sent by spammers and virii are "fire-and-forget". Each address pair (sender and receiver) are added to the database, and the resent mail is accepted immediately, as is any future mail between the address pair.
It works fantastic --- I've put it on all my mail servers. To say that 95% of my spam problem went away is not an exaggeration.
My mix: postfix, amavis-new (which filters out bad mime types by default on my SuSE box), postgrey (I can't rant about this enough, it's killed 98% of the noise on my domains), ClamAV, and SpamAssassin.
Will they also grow cows up there? I mean, seriously, what fool would submit to years-on-end leaf-eating? If I have to live on another planet, I'm going to be compensated with prime rib every now and then.
That's interesting. This page on fedoralegacy.org says: Please note that support for RHL 7.2 and RHL 8.0 has been suspended, and that new updates are no longer being generated for these versions!
How did they abandon anyone? By no longer putting a RH desktop distro on store shelves? It wasn't profitable.
We can argue about the profitablility aspect. I don't think it costs a lot to press a CD and print a box, though. If you're saying that they thought they could make more money focusing on the "enterprise" market, you're right.
About the abandonment aspect, most Linux geeks were very much put out by Red Hat's decision to discontinue the non-enterprise product and to de-support it. They left everyone in a lurch by doing so, and not just the geeks. As elsewhere noted, when the suits think Linux they think Red Hat, and quite a number of smaller companies that would never consider buying or being forced to upgrade to an enterprise product were stuck with having to either run an unpatched server or pay for an expensive migration to another distro.
After six months or so, if memory serves me, the fedoralegacy.org project was started to provide patches for old Red Hat installations. Too little, too late, in my opinion. Perhaps this new foundation will in fact repair the damage done regarding geek opinion of Redhat/Fedora/whatever_is_next.
...Oh, and hi, Greg! Still gonna buy me lunch? Heh, heh.
This is enteprise, right? I'd set up my own apt repository, and point the flock of boxen at that. Otherwise, you're killing your bandwidth, etc.. Plus, you'd have control over exactly what patches are being rolled out.
Well, almost. My client is purchasing a medical database application that runs on Tomcat and MySQL (save the flames, please), and I already have two projects planned that will add functionality that the vendor doesn't provide.
A sign-in kiosk in the patient waiting room for new patients to input their personal information (name, address, insurance provider,reason for visit, etc.).
An externally-accessible portal for the clinic's customers (they do a lot of occupational medicine) to view information regarding their employees that have been sent to the clinic for drug screens, injuries, etc.. The database vendor provides a hosted web portal for $100 per month, but it's limited in that each patient is required to have his own login, and only one patient is viewable at a time. This limits the employer's ability to view all the employee records, obviously.
My client was already sold on the system (they reviewed three competing products), and my promises of ease-of-extensiblilty utilizing PHP was icing on the cake:-)
...he says he has no physical access to the network itself. He says it here: I also don't have any control over the network infrastructure itself, just over our DHCP server..
I would say that this limited access is enough to do something about the problem:
Determine which IPs (and associated MACs) are spewing malicious traffic (simple enough).
Write a script that places their MAC in a blacklist file.
The next time they renew their lease from the DHCP server, issue them an IP in a non-routable subnet.
When they complain that their "internet is down", read them the riot act and don't remove their MAC from the blacklist until their box is clean.
In fact, $client is asking me to implement this for them.
Linux evangelization at Mensa in New Orleans
on
MSN Sponsors Mensa
·
· Score: 3, Informative
I was contacted back in January by the committee that's putting on MensAGumbo here in July. Apparently RedHat declined their invitation to run a booth or give a presentation, but I readily accepted:-)
I plan on using a variation of these bullet points for my presentation. If any of you slashdotters happen to be at MensAGumbo, please come and cheer me on, say hi, etc.
In addition, Xen allows you to migrate a domain (instance of client OS) to another machine running Xen, live over the network.
VMware's ESX can do this. I saw a demo of this last year in Baton Rouge, LA.
However, the really cool thing to me is the fact that the entire client environment is one file. Backing up or restoring a corrupted instance, or even cloning new servers, is trivial... you copy one file from A to B, and you're done.
Have you ever installed one wireless access point, and wished you could install a second, within wireless range of the first, without running a second cable?
My Linksys WAP11 can at as a bridge or whatever (I'd have to pull up the pdf manual to know the exact options offered), allowing you to string a line of APs without having to wire any but the first one.
No one seems to have mentioned the whacko things XP Home does, such as try to "bridge" (whatever they think that means) the LAN. Or random DoS events that end up taking down the entire LAN.
I've had this last one happen thrice, and it's not fun --- once when a visiting salesman plugged in is laptop to show off a demo of his stuff. After I yanked the cable out of the wall, our LAN came back up a few minutes later. Scary.
But yes, it does do Nashville-style chord notation - why you'd use that instead of standard jazz notation is beyond me, it pisses me off - to me the key the music is in is important
I agree, but feel that the benefits are worth it. If your band has enough brains to decypher number-based "hieroglyphics" (now there's an old term for you), it's a joy to not have to hold their hands while they figure out how to play a tune in a different key, or modulate a half-step in the middle of one.
Once I figured out Nashville-style, I forgot about all that I[6/4] stuff I learned in music theory. I think in chords, so the key isn't an issue to me... I can play any tune in any reasonable key.
Rosegarden looks neat and all, but does anyone know of an app that does Nashville-style chord notation? I can't seem to do it in HTML, and MathML syntax totally escapes me, though that might be able to render it well enough.
What is it? I guess it's called other things, but basically it's chord progressions jotted down as numbers. Instead of
C...F...G^7...C
Am..Dm..G^7...C
you would write
1...4...5^7...1
6-..2-..5^7...1
Also, instead of putting chords directly above the words, like most guitar charts do, the words are separate from the chords, with the chords commonly in groups of 4 bars per each line, as above.
What really bugs me is the steady diet of junk science we get from the tree-hugger crowd these days. Take this article, for instance... it's a logical fallacy to assume that since there may or may not have been an ice age in the distant past, this automatically implies that we are about to have another one, or that we'll all bake to death due to global warming.
Here's an interesting article that gives a common-sense approach to understanding the reality about climate changes, from a sound scientific standpoint.
Oops, I just broke a rule... I just stated that the emperor has no clothes! My apologies:-/
Quite similiar in effect to the article's method, I suppose, but greylisting is much more elegant. Greylisting means that you reject all mail on the first attempt, on the theory that spammers and trojanned windows boxen spewing malware don't check for 'try back later" errors and won't resend the payload. Legitimate mail servers resend a few minutes later, and the mail is accepted at that time.
I use postgrey with postfix, and it seems to work pretty good. By the way, I also run clamav and spamassassin, both of which are handled by amavis-new, which also rejects mail with errant windows attachments. You can read an extensive description of my setup here.
I don't have a link for this, but saw a documentary on PBS or somewhere that concluded that the skin of the blimp, being made of aluminum, is what ignited, and not the hydrogen. This is easily seen in the newsreels of the event --- the skin vaporized, then the hydrogen expoded from within.
Fact: Linux just doesn't have a Net Neighbourhood/Places GUI.
Actually, KDE's Konqueror (using the lisa daemon) works wonderfully with windows, and also with any *nix servers it finds on the LAN, via FISH. Boatloads of other stuff work too.
Why are they running to the US Patent Office to register a trademark? I was under the impression (having done this for my own company, at least locally) that you went to your Secretary of State in whatever state your business happens to be in and registered your trademarks and tradenames there?
Or do you have to patent (see, this still sounds strange to me) your name if you want it reserved nationally? I thought you patented your inventions, not the name of your business, etc..
Slashdot Mirror
Um, AWStats isn't written in PHP, but in Perl. This isn't a PHP worm, it's a CGI exploit which happens to target PHP apps, plus the occasional Perl app.
And that's only because he couldn't make the Fibbonacci series work using roman numerals.
However, postgrey (an implementation of greylisting) rejects all mail upon first attempt. Trojanned windows boxen spewing spam and/or virii, actual spammers, legitimate mail --- they all get blocked upon HELO, for 300 seconds. The theory is that legitimate mail will be resent, while bogus mail sent by spammers and virii are "fire-and-forget". Each address pair (sender and receiver) are added to the database, and the resent mail is accepted immediately, as is any future mail between the address pair.
It works fantastic --- I've put it on all my mail servers. To say that 95% of my spam problem went away is not an exaggeration.
My mix: postfix, amavis-new (which filters out bad mime types by default on my SuSE box), postgrey (I can't rant about this enough, it's killed 98% of the noise on my domains), ClamAV, and SpamAssassin.
Will they also grow cows up there? I mean, seriously, what fool would submit to years-on-end leaf-eating? If I have to live on another planet, I'm going to be compensated with prime rib every now and then.
That's interesting. This page on fedoralegacy.org says: Please note that support for RHL 7.2 and RHL 8.0 has been suspended, and that new updates are no longer being generated for these versions!
We can argue about the profitablility aspect. I don't think it costs a lot to press a CD and print a box, though. If you're saying that they thought they could make more money focusing on the "enterprise" market, you're right.
About the abandonment aspect, most Linux geeks were very much put out by Red Hat's decision to discontinue the non-enterprise product and to de-support it. They left everyone in a lurch by doing so, and not just the geeks. As elsewhere noted, when the suits think Linux they think Red Hat, and quite a number of smaller companies that would never consider buying or being forced to upgrade to an enterprise product were stuck with having to either run an unpatched server or pay for an expensive migration to another distro.
After six months or so, if memory serves me, the fedoralegacy.org project was started to provide patches for old Red Hat installations. Too little, too late, in my opinion. Perhaps this new foundation will in fact repair the damage done regarding geek opinion of Redhat/Fedora/whatever_is_next.
The sun works on nuclear fusion, not fission.
This is enteprise, right? I'd set up my own apt repository, and point the flock of boxen at that. Otherwise, you're killing your bandwidth, etc.. Plus, you'd have control over exactly what patches are being rolled out.
My client was already sold on the system (they reviewed three competing products), and my promises of ease-of-extensiblilty utilizing PHP was icing on the cake :-)
I would say that this limited access is enough to do something about the problem:
- Determine which IPs (and associated MACs) are spewing malicious traffic (simple enough).
- Write a script that places their MAC in a blacklist file.
- The next time they renew their lease from the DHCP server, issue them an IP in a non-routable subnet.
- When they complain that their "internet is down", read them the riot act and don't remove their MAC from the blacklist until their box is clean.
In fact, $client is asking me to implement this for them.I plan on using a variation of these bullet points for my presentation. If any of you slashdotters happen to be at MensAGumbo, please come and cheer me on, say hi, etc.
VMware's ESX can do this. I saw a demo of this last year in Baton Rouge, LA.
However, the really cool thing to me is the fact that the entire client environment is one file. Backing up or restoring a corrupted instance, or even cloning new servers, is trivial... you copy one file from A to B, and you're done.
My Linksys WAP11 can at as a bridge or whatever (I'd have to pull up the pdf manual to know the exact options offered), allowing you to string a line of APs without having to wire any but the first one.
I've had this last one happen thrice, and it's not fun --- once when a visiting salesman plugged in is laptop to show off a demo of his stuff. After I yanked the cable out of the wall, our LAN came back up a few minutes later. Scary.
That's illegal, according to these guys. DMCA and all that. Defeating their encryption scheme is against the law.
Less sunlight is reaching the earth, yet the earth is going to get 18 degrees Fahrenheit hotter in the next 95 years?
I agree, but feel that the benefits are worth it. If your band has enough brains to decypher number-based "hieroglyphics" (now there's an old term for you), it's a joy to not have to hold their hands while they figure out how to play a tune in a different key, or modulate a half-step in the middle of one.
Once I figured out Nashville-style, I forgot about all that I[6/4] stuff I learned in music theory. I think in chords, so the key isn't an issue to me... I can play any tune in any reasonable key.
What is it? I guess it's called other things, but basically it's chord progressions jotted down as numbers. Instead of
C...F...G^7...C
Am..Dm..G^7...C
you would write
1...4...5^7...1
6-..2-..5^7...1
Also, instead of putting chords directly above the words, like most guitar charts do, the words are separate from the chords, with the chords commonly in groups of 4 bars per each line, as above.
What really bugs me is the steady diet of junk science we get from the tree-hugger crowd these days. Take this article, for instance... it's a logical fallacy to assume that since there may or may not have been an ice age in the distant past, this automatically implies that we are about to have another one, or that we'll all bake to death due to global warming.
Here's an interesting article that gives a common-sense approach to understanding the reality about climate changes, from a sound scientific standpoint.
Oops, I just broke a rule... I just stated that the emperor has no clothes! My apologies :-/
I use postgrey with postfix, and it seems to work pretty good. By the way, I also run clamav and spamassassin, both of which are handled by amavis-new, which also rejects mail with errant windows attachments. You can read an extensive description of my setup here.
I don't have a link for this, but saw a documentary on PBS or somewhere that concluded that the skin of the blimp, being made of aluminum, is what ignited, and not the hydrogen. This is easily seen in the newsreels of the event --- the skin vaporized, then the hydrogen expoded from within.
Actually, KDE's Konqueror (using the lisa daemon) works wonderfully with windows, and also with any *nix servers it finds on the LAN, via FISH. Boatloads of other stuff work too.
Or do you have to patent (see, this still sounds strange to me) your name if you want it reserved nationally? I thought you patented your inventions, not the name of your business, etc..
That's fine if you don't care about your data. If one drive goes out, all of your data is totally gone, end of story.