Regardless of whether or not you have a profile already, going from 1.5->2.0 decides to change the default behavior in linux. Frustrating. Existing behavior should never be changed, unless the 'new way' is the only way going forward (obviously not the case for the cases I cited).
Changing existing behavior for no good reason.
on
Firefox Losing Its Way?
·
· Score: 2, Interesting
Messing with behaviors from older versions is a lame thing to do. For example: Replacing the menu hot keys (this totally broke my sage extension hotkey. GRRRRR), and changing the behavior of backspace on the linux platform. Had to dig through about:config to find and fix the latter. No easy way to do the former without messing with your personal css files. Not cool.
It's worked fine for me. That + being on the do not call list and I don't get pestered any more. An automatic dialler hit me today. No message was left. No followup call.
Just prepend the 3 tone SIT to the beginning of your answering machine greeting, and let it answer. They won't leave a message, and they won't autodial again.
We pay for cable tv. So why are there still commercials at all? Same goes for tv-type advertisements that have been showing up in digital movie theaters the past several years.
The menus in 2.0 in linux are now using instead of . This interferes with a couple of plugins, and goes against the conventions I have always used on my system, that every other app adheres to. Playing with ui.key stuff in about:config has not helped.
Do these companies not have data classifications and policies around what must be done with secret/confidential information? Do the employees (including execs) not understand these classifications? Why not?
Any of this is a failure of your organization's ability to create proper security policies and ensure that employees understand what compliance means.
Email is plaintext unless you do something with it. Same goes for any data that is stored on any servers in your company. If it is confidential or secret, then it needs to be handled that way.
This hits on my major problem with buying music online, and with DRM on CDs.
Sell me the damned CD at a good price. Or allow me to take the uncompressed stuff from several while at the store and take home a CD with the mix I choose.
I will then encode it and tag it the way I want.
Why people actually *buy* stuff already encoded, I do not understand.
That's a well-known problem. Simple Nomad did a talk about it at schmoocon this past winter in DC. I believe M$ fixed the problem, but if you are seeing it, have fun with the other holes that are likely also on those laptops.
search "hacking the friendly skies" on google for the presentation.
Not really. There have always been good offerings, and even best practices, that are not signature based. But the general populace doesn't see the value in them b/c they can't be that great if they never have an update against the 'trick the stupid user' du jour!
As the head of a security company I used to work for used to say: "People would rather take an aspirin for their headache than avoid what gives them that headache in the first place"
No offense, but I think we are a different class of company scale-wise. Some of the things we do today, their commercial offerings just began doing. Yes, RP has a good solution that is good for most places. We require the flexibility of their open source tools.
Something I didn't mention before is that we also implement greylisting. That has done much to reduce our spam load as well. My experiments on the home server with greylisting showed a dramatic decrease in junk I was having to process. Good stuff, but you'd be amazed at the amount of broken relays out there that treat a tempfail as a permanent failure and send an error to the original sender.
The technology is the easy part. To be a successful spam fighter you also need the following two process-driven items in place:
Accurate reporting on what is being filtered and why
A process your help desk can follow to properly have things whitelisted, or to escalate other problems to you (we get 1-2 a month on average. Not bad, especially compared to commercial offerings which would certainly probably lose a lot of legitimate mail).
Long ago, there was a very nice program out for OS/2 that I loved to use, but have not found anything like it since (and I can't remember its name!!!). It basically combined vector based and pixel based tools. The most powerful feature was that you could create effects layers (ie blur, pixelate, whatever) and of course that layer could be a shape selected as you would with pixels. The effects could be stacked to provide combinations, and since it was vector-based, you could move things around (including the effects layers) easily to get exactly what you wanted.
I miss that. I don't think GIMP is capable of this, but would love if there was a way to make it happen.
How big is the system you administer? I am the mail gateway administrator for a global company. Last month our servers processed almost 2 *MILLION* messages. Of those, we rejected almost 1 *MILLION* based on XBL/SBL, and some other checks that we do. The rest of the messages must then be processed by our score based filtering system (spamassassin).
The problem is, that yes, we do have a tiered approach. Spamhaus is used by us as a full reject in mimedefang. This helps to keep our server load down, as we can do the quick hits without having to call spamassassin. We reject a LOT of stuff based on the SBL/XBL. If we suddenly could not do that, then our server load would skyrocket due to the increased demands by the score based system (spamassassin).
Now, we also do other checks that will result in an immediate reject. It may be that many of the SBL/XBL rejections would be rejected for other reasons should SBL/XBL go away (forged helo, helo not an address or domain name, etc). That's not a gamble I really want to make.
Google maps when going on a trip in your car, maybe? That's the main use my printer at home gets. It's also much easier to deal with tricky instructions for setting up oddball service $foo on your server if you have it on paper in front of you. I also prefer paper copies of meeting agendas to take notes on in the office.
The better model is portable apps on a thumb drive. Mine is set up for M$ stuff, since that is what most machines I encounter when I don't have my own on hand are.
Now just imagine if there were a standard virtual machine interpreter that was available by default on every end-user OS in existence. Imagine that it worked the same on all platforms and was quick and responsive.
Now imagine having that little suite of programs on your thumb drive written to that VM.
There was a presentation at Blakhat and Defcon last year about this subject. The fact is that there *ARE* groups who actually do use SPAM to transmit covert messages.
Slashdot Mirror
http://kb.mozillazine.org/Browser.backspace_action
Regardless of whether or not you have a profile already, going from 1.5->2.0 decides to change the default behavior in linux. Frustrating. Existing behavior should never be changed, unless the 'new way' is the only way going forward (obviously not the case for the cases I cited).
Messing with behaviors from older versions is a lame thing to do. For example: Replacing the menu hot keys (this totally broke my sage extension hotkey. GRRRRR), and changing the behavior of backspace on the linux platform. Had to dig through about:config to find and fix the latter. No easy way to do the former without messing with your personal css files. Not cool.
Imagine if patenting software was the thing back then.
I don't eat fish at all, so don't blame me when we run out!
It's worked fine for me. That + being on the do not call list and I don't get pestered any more. An automatic dialler hit me today. No message was left. No followup call.
Just prepend the 3 tone SIT to the beginning of your answering machine greeting, and let it answer. They won't leave a message, and they won't autodial again.
Good luck trying to buy things online. How does one email a web site? How do you even know what form their first email to you will look like?
We pay for cable tv. So why are there still commercials at all? Same goes for tv-type advertisements that have been showing up in digital movie theaters the past several years.
dammit. Why does "plain old text" not escape my #!@$# tags? Yeah I know, use preview.
Above should read "The menus in 2.0 in linux are now using <alt> instead of <control>"
The menus in 2.0 in linux are now using instead of . This interferes with a couple of plugins, and goes against the conventions I have always used on my system, that every other app adheres to. Playing with ui.key stuff in about:config has not helped.
So what?
Do these companies not have data classifications and policies around what must be done with secret/confidential information? Do the employees (including execs) not understand these classifications? Why not?
Any of this is a failure of your organization's ability to create proper security policies and ensure that employees understand what compliance means.
Email is plaintext unless you do something with it. Same goes for any data that is stored on any servers in your company. If it is confidential or secret, then it needs to be handled that way.
This hits on my major problem with buying music online, and with DRM on CDs.
Sell me the damned CD at a good price. Or allow me to take the uncompressed stuff from several while at the store and take home a CD with the mix I choose.
I will then encode it and tag it the way I want.
Why people actually *buy* stuff already encoded, I do not understand.
You can do all of this server side, and that is the proper place. You really shouldn't be dumping data in cookies, other than a session ID.
That's a well-known problem. Simple Nomad did a talk about it at schmoocon this past winter in DC. I believe M$ fixed the problem, but if you are seeing it, have fun with the other holes that are likely also on those laptops.
search "hacking the friendly skies" on google for the presentation.
Not really. There have always been good offerings, and even best practices, that are not signature based. But the general populace doesn't see the value in them b/c they can't be that great if they never have an update against the 'trick the stupid user' du jour!
As the head of a security company I used to work for used to say: "People would rather take an aspirin for their headache than avoid what gives them that headache in the first place"
What does memorizing a number have to do with math?
Um. Maybe not professional athletes, b/c that is all they do. But some of the smartest people I know are elite-level endurance athletes.
Something I didn't mention before is that we also implement greylisting. That has done much to reduce our spam load as well. My experiments on the home server with greylisting showed a dramatic decrease in junk I was having to process. Good stuff, but you'd be amazed at the amount of broken relays out there that treat a tempfail as a permanent failure and send an error to the original sender.
The technology is the easy part. To be a successful spam fighter you also need the following two process-driven items in place:
Long ago, there was a very nice program out for OS/2 that I loved to use, but have not found anything like it since (and I can't remember its name!!!). It basically combined vector based and pixel based tools. The most powerful feature was that you could create effects layers (ie blur, pixelate, whatever) and of course that layer could be a shape selected as you would with pixels. The effects could be stacked to provide combinations, and since it was vector-based, you could move things around (including the effects layers) easily to get exactly what you wanted.
I miss that. I don't think GIMP is capable of this, but would love if there was a way to make it happen.
How big is the system you administer? I am the mail gateway administrator for a global company. Last month our servers processed almost 2 *MILLION* messages. Of those, we rejected almost 1 *MILLION* based on XBL/SBL, and some other checks that we do. The rest of the messages must then be processed by our score based filtering system (spamassassin).
The problem is, that yes, we do have a tiered approach. Spamhaus is used by us as a full reject in mimedefang. This helps to keep our server load down, as we can do the quick hits without having to call spamassassin. We reject a LOT of stuff based on the SBL/XBL. If we suddenly could not do that, then our server load would skyrocket due to the increased demands by the score based system (spamassassin).
Now, we also do other checks that will result in an immediate reject. It may be that many of the SBL/XBL rejections would be rejected for other reasons should SBL/XBL go away (forged helo, helo not an address or domain name, etc). That's not a gamble I really want to make.
Google maps when going on a trip in your car, maybe? That's the main use my printer at home gets. It's also much easier to deal with tricky instructions for setting up oddball service $foo on your server if you have it on paper in front of you. I also prefer paper copies of meeting agendas to take notes on in the office.
The better model is portable apps on a thumb drive. Mine is set up for M$ stuff, since that is what most machines I encounter when I don't have my own on hand are.
Now just imagine if there were a standard virtual machine interpreter that was available by default on every end-user OS in existence. Imagine that it worked the same on all platforms and was quick and responsive.
Now imagine having that little suite of programs on your thumb drive written to that VM.
Oh well.
heh. Reminds me of that fedex or ups commercial (can't remember which one it is). "Are you agitating my dots?"
There was a presentation at Blakhat and Defcon last year about this subject. The fact is that there *ARE* groups who actually do use SPAM to transmit covert messages.
That's what plugins are for. I use sage for RSS feeds.