I would outsource mine to India. Everyone there would install Netware on the servers and they would be compromised twice a day, all while the Indian in charge does nothing about it other than not apply patches.
There are thousands of flights every day that are totally uneventful; no crashes or anything:) It's just that when one plane does crash and kills 200 people, it calls major media attention because... its cool! explosions and stuff man! YEEAH!
Anyway, the point is that every 5 years or so 200 people die in a plane crash. Out of the millions that use it every year. Flying is not a big risk... it just looks that way on TV.
You can use a machine that you're playing on as the server, if you want. That seems a bit easier for 20 minutes of gaming than setting up an entire machine for that purpose:)
Interesting that you bring up student unions. In Chicago, apparently it is politically incorrect to call them student unions. As a result, my University renamed our student unions from "Chicago Circle Center" and "Chicago Illini Union" to "Student Center East" and "Student Center West".
Needless to say, everyone ignores the official names.
Staying on topic, I would like to point you to DJB's page on this issue:
Apparently my University adopted a similar policy in 2003 and this prompted DJB to come up with patentable intellectual property for them: things like a "coin operated elevator" and a "soap saver dish". Beautiful.
Hmm, I'm always out of sight of a clock. Commuting to work, for example: I need a watch to tell me if I can get off the L (Chicago subway, for the uninitiated) and have a quick cup of coffee and still get to work before my boss. Admittedly, I plan to be at work at like 8 and my boss doesn't show up until 10, but you get the point. The L doesn't have a clock and the coffee shop doesn't have a clock, therefore I need a watch. The clocks in the classrooms have a tendency to not reflect reality, also.
Just run your sshd on a higher-than-1024 port and tunnel it over HTTP. The "intrusion" "detection" system that they use will see it as you visiting a web page:)
> I hate them, they rub on my wrist when I try to type.
I have the same problem. The first thing I do when I get to work is to take off my watch and put it somewhere where I won't forget to put it on before I go home. I love the idea of a watch (and I feel like a moron blankly staring at my wrist when I forget to wear one), but if I'm somewhere where there's a clock the lack of comfort annoys me and I take it off:)
(It's a bit too tight, but I lost the extra chunks of metal I would need to make the strap looser. *sigh*)
The tunnels do not touch water, they are buried in the sea floor BELOW the level of the water. It would suck to get stuck down there, but trust me, the engineers planned for earthquakes and you probably wouldn't die.
The debian apologists are dumping package-listing info on you because they don't know what the hell you are asking. Patchlevel. What does that MEAN? Why do you care?
Stop being such an idiot. Debian doesn't have "patchlevels". OK? If you don't like it, don't use it! (And stop fucking whining about it!)
Debian is a set of constantly-changing packages. A lot of us like that, since we'd be updating these packages soon after release anyway. If you want an OS with a patch level, then use Windows and leave use alone, OK.
That doesn't make sense. When you're in the middle of typing a filename, the last thing you want to do is take your hands off the keyboard, mouse over the thing you want, and then repeat that procedure for the next file.
> Saying one is more secure than the other is irrational.
No it's not. Saying one is more secure than the other is simply making a comparison. What does more secure mean? It means less security holes, and less severe security holes. Let's say we have two browsers, exactly the same, except one, when it sees a <command> tag, will execute a shell command. Which is more secure!? (Answer: the one that doesn't execute commands from the unauthenticated network!)
And in reply to the GP. You can have perfectly secure software. Just because people are too lazy to write it doesn't mean it can't happen. Mozilla is just garbage code on top of the garbage Netscape code on top of the garbage Mosaic code. Not the way to go for security. (It works, though, and that's what most people care about.)
If someone had the time, money, and willpower to redesign a modern browser from the ground up, employed the absolute best coders and did regular thorough security audits, then we could have a perfectly secure browser. But I guess we don't need one badly enough. (I think I could do it, but I don't have the time or energy to do it. But I'm sure someone else does.)
NFS was never designed for use on insecure networks. It was to share between a few machines in the server room, behind a router and firewall. Using it for anything else is insane.
Use Coda or Andrew Filesystem, or something else, if you want it to work like SMB.
"Oh, NFS and SMB both involve files or something, so they must be the same thing Lunix suks!!" No. You suck.
Posted on slashdot and no bids! Amazing!
I would outsource mine to India. Everyone there would install Netware on the servers and they would be compromised twice a day, all while the Indian in charge does nothing about it other than not apply patches.
There are thousands of flights every day that are totally uneventful; no crashes or anything :) It's just that when one plane does crash and kills 200 people, it calls major media attention because... its cool! explosions and stuff man! YEEAH!
Anyway, the point is that every 5 years or so 200 people die in a plane crash. Out of the millions that use it every year. Flying is not a big risk... it just looks that way on TV.
Not if you're Intel. Then you just ship a broken one.
OK, set it to 127.0.0.1 and change requests reading:
results.aspx?q=test
to
search?q=test
i.e. s/results\.aspx/search/
Apache's ReWrite modules would be happy to do this for you.
The point of my original comment was that this will be REALLY REALLY easy to "hack".
You can use a machine that you're playing on as the server, if you want. That seems a bit easier for 20 minutes of gaming than setting up an entire machine for that purpose :)
I just did. /etc/hosts:
216.239.57.99 search.msn.com
> if you're trying to get from 30th all the way up to Millennium Park. :-/
:) ... and only $5 for unlimited rides on the weekends.
Metra Electric is your friend
Interesting that you bring up student unions. In Chicago, apparently it is politically incorrect to call them student unions. As a result, my University renamed our student unions from "Chicago Circle Center" and "Chicago Illini Union" to "Student Center East" and "Student Center West".
Needless to say, everyone ignores the official names.
Staying on topic, I would like to point you to DJB's page on this issue:
http://cr.yp.to/patents/tarzian.html
Apparently my University adopted a similar policy in 2003 and this prompted DJB to come up with patentable intellectual property for them: things like a "coin operated elevator" and a "soap saver dish". Beautiful.
"Other than ADDs, what else could fund 'free' services online?"
Perhaps MULs, XORs, or maybe even NOPs.
Hmm, I'm always out of sight of a clock. Commuting to work, for example: I need a watch to tell me if I can get off the L (Chicago subway, for the uninitiated) and have a quick cup of coffee and still get to work before my boss. Admittedly, I plan to be at work at like 8 and my boss doesn't show up until 10, but you get the point. The L doesn't have a clock and the coffee shop doesn't have a clock, therefore I need a watch. The clocks in the classrooms have a tendency to not reflect reality, also.
Anyway, the watch is far from dead, in my mind.
Just run your sshd on a higher-than-1024 port and tunnel it over HTTP. The "intrusion" "detection" system that they use will see it as you visiting a web page :)
> I hate them, they rub on my wrist when I try to type.
:)
I have the same problem. The first thing I do when I get to work is to take off my watch and put it somewhere where I won't forget to put it on before I go home. I love the idea of a watch (and I feel like a moron blankly staring at my wrist when I forget to wear one), but if I'm somewhere where there's a clock the lack of comfort annoys me and I take it off
(It's a bit too tight, but I lost the extra chunks of metal I would need to make the strap looser. *sigh*)
The tunnels do not touch water, they are buried in the sea floor BELOW the level of the water. It would suck to get stuck down there, but trust me, the engineers planned for earthquakes and you probably wouldn't die.
Instead of a keyboard, it will have a single button for inputting text via morse code.
I agree with you. I've added you to my friends (I would have modded you up, but I haven't gotten points in years...)
The debian apologists are dumping package-listing info on you because they don't know what the hell you are asking. Patchlevel. What does that MEAN? Why do you care?
Stop being such an idiot. Debian doesn't have "patchlevels". OK? If you don't like it, don't use it! (And stop fucking whining about it!)
Debian is a set of constantly-changing packages. A lot of us like that, since we'd be updating these packages soon after release anyway. If you want an OS with a patch level, then use Windows and leave use alone, OK.
I like how debian is!
That doesn't make sense. When you're in the middle of typing a filename, the last thing you want to do is take your hands off the keyboard, mouse over the thing you want, and then repeat that procedure for the next file.
Mouses suck!
I don't mind dupes. The whining about dupes I could live without though.
:)
Seriously. If you see a dupe, don't read it. I didn't see this the first and second times, so this is cool for me
> Saying one is more secure than the other is irrational.
No it's not. Saying one is more secure than the other is simply making a comparison. What does more secure mean? It means less security holes, and less severe security holes. Let's say we have two browsers, exactly the same, except one, when it sees a <command> tag, will execute a shell command. Which is more secure!? (Answer: the one that doesn't execute commands from the unauthenticated network!)
And in reply to the GP. You can have perfectly secure software. Just because people are too lazy to write it doesn't mean it can't happen. Mozilla is just garbage code on top of the garbage Netscape code on top of the garbage Mosaic code. Not the way to go for security. (It works, though, and that's what most people care about.)
If someone had the time, money, and willpower to redesign a modern browser from the ground up, employed the absolute best coders and did regular thorough security audits, then we could have a perfectly secure browser. But I guess we don't need one badly enough. (I think I could do it, but I don't have the time or energy to do it. But I'm sure someone else does.)
Yeah, I've seen Google. Where's the python?
(And BTW, the GP said "very few companies". Google is one company out of millions. That's very few.)
It was a joke, dumbass.
If you're going to used fixed-length buffers, though, at least use sNprintf!
Shut up you fucking piece of Eurotrash.
NFS was never designed for use on insecure networks. It was to share between a few machines in the server room, behind a router and firewall. Using it for anything else is insane.
Use Coda or Andrew Filesystem, or something else, if you want it to work like SMB.
"Oh, NFS and SMB both involve files or something, so they must be the same thing Lunix suks!!" No. You suck.