You'd have to block a lot of ports with your router -- all of them. Just because viruses and worms have trouble getting past NATs right now, doesn't mean its the be all and end all of network security. There are ways around them, and I'm betting there are going to be a lot more viruses that can get around them in the future, targetted towards "home" routers with unpatched firmware, etc.
And Mac/Linux isn't a way around it either. Just because there are less known vulnerabilities, doesn't mean there are no vulnerabilities, or that there will be no new crippling vulnerabilities. As their market share on the desktop increases, as will the number of vulnerabilities found and
Original Mac OS X didn't even have checksums, so a poisoned DNS cache would screw you over. Then there was the DHCP/LDAP fiasco. And many versions of RedHat, for example, default to an accept all INPUT firewall rule.
An improperly administered Mac or Linux can be just as bad as an improperly administered Windoze box.
My point was that it is still better than ICF. But, just to be devil's advocate:
On a scale of 0 to 5, where 0 is completely unprotected and 5 is completely protected: 0 - no firewall, MS Windows 98 (NOT SE) 1 - Microsoft's Internect Connection Firewall (ICF) 2 - Symantec (Norton) Internet Security 3 - Zone Alarm Pro 4 - FreeBSD Default installation 5 - No connectivity; no drives to load foreign media
So, I stand by my original statement, and rebuttal your statement that NIS is all bad:P
Erm, why don't you just go back to sticking your head in the sand, Mr. Anonymous Coward.
Even simple things like web surfing can release sensitive information, and most everyone using the web has some sort of sensitive information -- from my slashdot username and password, to credit card purchases online.
Regardless of sensitive information, yes, I do care if I have a virus on my system, regardless of whether or not it is affecting performance. Why? Well, if you knew ANYTHING about viruses, you'd know that viruses can be dormant. I.e. it may not affect your system now, but it may affect your system on May 18, 2004 at 6:00 p.m. EST.
Also, from a legal perspective, I wouldn't want anyone taking over one of my computers with a virus/trojan/backdoor. If they use it for illegal activities (i.e. hacking into government sites), then it's your ass that has to explain to the FBI knocking down your door at 4 in the morning.
Which is why the best thing to do is just get a CD of patches, or wait until everything is loaded until you plug the Ethernet into your NIC.
Oh, right, and get rid of that crappy microsoft internet connection firewall and replace it with something half decent. Even Norton Internet Security isn't half bad.
Just because its made by microsoft, that doesn't mean an idiot should administer it. It certainly doesn't mean its going to be secure and stable out of the box.
The huge divide between Unix/Linux and Windows is that Unix/Linux forces you to know what you're doing when you install something on your computer. Windows assumes the opposite.
However, if you do know what you're doing with Windows, problems of this nature are not really problematic. Fixing Windows without reinstalling is easy for competent administrators. Jeez, I can get around in Windows without a mouse and without explorer.exe.
Here's a hint guys: if something breaks on Windows -- don't install a program to fix your computer. It will break it further. Don't install registry cleaners -- they suck. Slick your system, ghost your system, take registry snapshots now and then. Don't install third party software on production machines without testing on crap boxes first. Do know your system in and out.
I, like many others, was thinking the same thing about Papa Johns and Pizza Hut.
Also, I, like many others, would be willing to pay for said software. Perhaps release it under the GPL (Generic Pizza License), in which it is free for those who want to be cheap, or you can get mad $$$ for those who want to give you props for your uber-geekdom. Of course I wouldn't eat Domino's if I were paid to do so, so I certainly wouldn't pay for the current version. Need Papa John's and/or Pizza Hut.
If you./configure it,./make it,./make install it, they will come.
You must be running a PIII. PII only goes up to 450 MHz. http://developer.intel.com/design/PentiumII/prodbr ef/
Unless of course you overclocked a 450MHz PII to 600 MHz by using some sort of refrigeration and water cooling that is...this IS slashdot, so I wouldn't put it past you...I was never able to get mine much above 500MHz without spontaneous reboots...PIIs don't scale well.
But yeah, my old PIII 800 with 512MB ram running debian (woody) runs mozilla quite nicely. Some people are just beyond help.
I mean really, it's a freakin web browser. If you can't even setup a relatively modern system such that a web browser runs smoothly, you shouldn't be visiting this site. You should just go home, take your computer(s), put them back in the boxes and take them back to the store to return them. And when the guys at the returns department asks whats wrong with them, just tell them that you're too stupid to own a computer.
I understand it takes a bit more cost and effort to light extra key sections, but I'm willing to pay extra $$ for a few extra LEDs, you cheap keyboard manufacturing bastards!
I think that people that need to format and reinstall every month are either using their system as a test-bed for installation of all of their porn codecs and players, or simply don't know squat about windows administration and the registry...
The only time I reboot my multi-user (myself, my girlfriend, her little brother and sister) Windows XP Pro box is when I need to reboot after a security patch. And the system hasn't needed a reinstall for...well, since I installed it.
If you lock it down and setup permissions adequately for all users on your system(s) that don't know any better, then you should be fine. Worst case scenario that I've encountered is the need to reboot because of some network drive problem crushing my memory.
Any weird problems and rogue applications can almost always be easily removed. Sometimes they take a little bit of effort, but not much if you know what youre doing. general rule of thumb. delete most everything from hklm|hkcu/software/microsoft/windows/currentversio n/run, startup entries and system services. sad if people cant even get that far.
christ, i even resource hacked my explorer.exe and screwed it up royally and was able to fix it just fine without having to reinstall. the need for explorer is a myth!
I prefer to compile most important programs from source.
For example, if I'm running a web server, I'll install and configure apache, php, some database, etc. from source. But I really won't care if I have vim or cron or jabber or whatever installed from a package. If you do a base OS install with all basic/necessary components regardless of the application of the server, and then install important software from source, this will generally be the case.
The key to managing this is creating a separate directory for your crap. I.e. don't just shove your stuff in/usr/local with everyone elses crap. If you're compiling it from source, it's important enough that it should be separated.
Then, if someone else comes in you can say, "Everything is packaged, except for important software which is in this directory. All the source and configure files for that software are located in this directory, in case you need to figure something out."
We've all been hearing about how great fuel cells are for years. We've been hearing about new products being put out that use fuel cells, such as laptops, and how energy efficient, convenient and cheap they are.
But when am I actually going to be able to buy one (in the US)? I thought toshiba was supposed to have put out a fuel cell laptop by now, but nooooooo.
Is there some sort of lithium-ion conspiracy keeping fuel cells from reaching the market, just like the gas companies keeping efficient hydrogen cars from hitting the market?
I mean when will we be able to walk into a convenience store and refill your fuel cells? (you do refill them, right?) Is the day near? Anyone have any feedback?
poor analogy. as in worlds best hamburger, "best" is a subjective adjective. if, however, i saw an ad for the worlds biggest hamburger, then one would have to assume it is gargantuan enough to be in the guiness book of world records.
words like "fastest" and "largest" can be accurately measured. words like "best" and "niftiest" can not.
if apple would have put a little asterisk next to fastest and had a micron-sized disclaimer at the bottom, this could have been avoided. but as is typical, apple was being arrogant.
side note, if apple had 98% market share like microsoft theyd be even more screwed than MS based on their practices. bundling windows media player? HAH! how about bundling freakin everything, from server tools to dvd authoring software?! not that thats necessarily a bad thing...but really, where are the games?! a distro needs good games bundled, even if its simply mahjong (i know i spelled that horribly heh)
Errr, I personally like my tech stuff to be functional AND look cool. I mean when I invite someone to my "crib" I've personally gotta have riced out neon lights all over my tech gear...
installs the common file swapping software (kazaa, winmx, etc.) and shares a users' mp3 files on it. that way everyone can just claim that they got a virus and didn't break the law. and some nice person may even be nice enough to bring up racketeering charges against the riaa on the grounds that they created the virus just to sue people. woot.
lol, yeah well they can *try* to mug me, in front of the bank camera, when i'm in my car, and driving away from the drive-through atm -- if they *really* want to. not to mention that i'm a rather large and fit guy...
Something similar happened to me with my bank (SunTrust), but the money was never taken out of my account.
I find that the best thing to do is only go to your bank's ATM -- and not the mini portable ATMs, but the ones embedded in the wall of the bank where you have to insert your card (not swipe, which could be intercepted by an intermediary swiper). Then when you get your cash, be sure to count it in front of the camera. I've had less money come out once but because I counted it in front of the camera, it was all right and I got my money.
an extra processor would speed things up too...
on
Ultimate Cooling System
·
· Score: 0, Redundant
and cost less to boot...at least in time and energy consumption.
Slashdot Mirror
You'd have to block a lot of ports with your router -- all of them. Just because viruses and worms have trouble getting past NATs right now, doesn't mean its the be all and end all of network security. There are ways around them, and I'm betting there are going to be a lot more viruses that can get around them in the future, targetted towards "home" routers with unpatched firmware, etc.
And Mac/Linux isn't a way around it either. Just because there are less known vulnerabilities, doesn't mean there are no vulnerabilities, or that there will be no new crippling vulnerabilities. As their market share on the desktop increases, as will the number of vulnerabilities found and
Original Mac OS X didn't even have checksums, so a poisoned DNS cache would screw you over. Then there was the DHCP/LDAP fiasco. And many versions of RedHat, for example, default to an accept all INPUT firewall rule.
An improperly administered Mac or Linux can be just as bad as an improperly administered Windoze box.
My point was that it is still better than ICF. But, just to be devil's advocate:
:P
On a scale of 0 to 5, where 0 is completely unprotected and 5 is completely protected:
0 - no firewall, MS Windows 98 (NOT SE)
1 - Microsoft's Internect Connection Firewall (ICF)
2 - Symantec (Norton) Internet Security
3 - Zone Alarm Pro
4 - FreeBSD Default installation
5 - No connectivity; no drives to load foreign media
So, I stand by my original statement, and rebuttal your statement that NIS is all bad
Erm, why don't you just go back to sticking your head in the sand, Mr. Anonymous Coward.
Even simple things like web surfing can release sensitive information, and most everyone using the web has some sort of sensitive information -- from my slashdot username and password, to credit card purchases online.
Regardless of sensitive information, yes, I do care if I have a virus on my system, regardless of whether or not it is affecting performance. Why? Well, if you knew ANYTHING about viruses, you'd know that viruses can be dormant. I.e. it may not affect your system now, but it may affect your system on May 18, 2004 at 6:00 p.m. EST.
Also, from a legal perspective, I wouldn't want anyone taking over one of my computers with a virus/trojan/backdoor. If they use it for illegal activities (i.e. hacking into government sites), then it's your ass that has to explain to the FBI knocking down your door at 4 in the morning.
Which is why the best thing to do is just get a CD of patches, or wait until everything is loaded until you plug the Ethernet into your NIC.
Oh, right, and get rid of that crappy microsoft internet connection firewall and replace it with something half decent. Even Norton Internet Security isn't half bad.
...why stupid people shouldnt use computers.
Just because its made by microsoft, that doesn't mean an idiot should administer it. It certainly doesn't mean its going to be secure and stable out of the box.
The huge divide between Unix/Linux and Windows is that Unix/Linux forces you to know what you're doing when you install something on your computer. Windows assumes the opposite.
However, if you do know what you're doing with Windows, problems of this nature are not really problematic. Fixing Windows without reinstalling is easy for competent administrators. Jeez, I can get around in Windows without a mouse and without explorer.exe.
Here's a hint guys: if something breaks on Windows -- don't install a program to fix your computer. It will break it further. Don't install registry cleaners -- they suck. Slick your system, ghost your system, take registry snapshots now and then. Don't install third party software on production machines without testing on crap boxes first. Do know your system in and out.
if someone can manage to hear the frequencies my keyboard emits over my blaring mp3s, they deserve my password.
i guess this is just ANOTHER good example of why blaring techno music is good in the workplace. screw my boss!
am i missing something, or does it seem that this doesnt deserve an award?
http://art.teleportacia.org/exhibition/GRAVITY/
peoples voice winner under the net art category. wtf is this site supposed to be/do?! its a stupid rocket ship. a bad one at that.
I, like many others, was thinking the same thing about Papa Johns and Pizza Hut.
./configure it, ./make it, ./make install it, they will come.
Also, I, like many others, would be willing to pay for said software. Perhaps release it under the GPL (Generic Pizza License), in which it is free for those who want to be cheap, or you can get mad $$$ for those who want to give you props for your uber-geekdom. Of course I wouldn't eat Domino's if I were paid to do so, so I certainly wouldn't pay for the current version. Need Papa John's and/or Pizza Hut.
If you
You must be running a PIII. PII only goes up to 450 MHz. http://developer.intel.com/design/PentiumII/prodbr ef/
Unless of course you overclocked a 450MHz PII to 600 MHz by using some sort of refrigeration and water cooling that is...this IS slashdot, so I wouldn't put it past you...I was never able to get mine much above 500MHz without spontaneous reboots...PIIs don't scale well.
But yeah, my old PIII 800 with 512MB ram running debian (woody) runs mozilla quite nicely. Some people are just beyond help.
I mean really, it's a freakin web browser. If you can't even setup a relatively modern system such that a web browser runs smoothly, you shouldn't be visiting this site. You should just go home, take your computer(s), put them back in the boxes and take them back to the store to return them. And when the guys at the returns department asks whats wrong with them, just tell them that you're too stupid to own a computer.
I understand it takes a bit more cost and effort to light extra key sections, but I'm willing to pay extra $$ for a few extra LEDs, you cheap keyboard manufacturing bastards!
OK, what is the name of that really annoying dog in WinXP when you want to search for something? I wish someone would kick his ass.
UI Designers: People don't need stupid animated characters in "professional" versions of your software. cut that shit out.
I don't think you're odd...
o n/run, startup entries and system services. sad if people cant even get that far.
I think that people that need to format and reinstall every month are either using their system as a test-bed for installation of all of their porn codecs and players, or simply don't know squat about windows administration and the registry...
The only time I reboot my multi-user (myself, my girlfriend, her little brother and sister) Windows XP Pro box is when I need to reboot after a security patch. And the system hasn't needed a reinstall for...well, since I installed it.
If you lock it down and setup permissions adequately for all users on your system(s) that don't know any better, then you should be fine. Worst case scenario that I've encountered is the need to reboot because of some network drive problem crushing my memory.
Any weird problems and rogue applications can almost always be easily removed. Sometimes they take a little bit of effort, but not much if you know what youre doing. general rule of thumb. delete most everything from hklm|hkcu/software/microsoft/windows/currentversi
christ, i even resource hacked my explorer.exe and screwed it up royally and was able to fix it just fine without having to reinstall. the need for explorer is a myth!
"You have this luxury 24 hours a day, 7 days a week, 365 days a year. Find a human to do that."
Isn't that why people have kids? I can't imagine anyone would want them otherwise...
Errr, except that OJ didn't really have the option to settle...
And when he did have the option to settle in his civil suit, he didn't. And lost.
I bow before you, king of screwed up analogies!
Tell that to the GPU manufacturers as well. FX, MX, Ti, WTF, Pro, Se, WTF.
I prefer to compile most important programs from source.
/usr/local with everyone elses crap. If you're compiling it from source, it's important enough that it should be separated.
For example, if I'm running a web server, I'll install and configure apache, php, some database, etc. from source. But I really won't care if I have vim or cron or jabber or whatever installed from a package. If you do a base OS install with all basic/necessary components regardless of the application of the server, and then install important software from source, this will generally be the case.
The key to managing this is creating a separate directory for your crap. I.e. don't just shove your stuff in
Then, if someone else comes in you can say, "Everything is packaged, except for important software which is in this directory. All the source and configure files for that software are located in this directory, in case you need to figure something out."
Just my two cents.
We've all been hearing about how great fuel cells are for years. We've been hearing about new products being put out that use fuel cells, such as laptops, and how energy efficient, convenient and cheap they are.
But when am I actually going to be able to buy one (in the US)? I thought toshiba was supposed to have put out a fuel cell laptop by now, but nooooooo.
Is there some sort of lithium-ion conspiracy keeping fuel cells from reaching the market, just like the gas companies keeping efficient hydrogen cars from hitting the market?
I mean when will we be able to walk into a convenience store and refill your fuel cells? (you do refill them, right?) Is the day near? Anyone have any feedback?
poor analogy. as in worlds best hamburger, "best" is a subjective adjective. if, however, i saw an ad for the worlds biggest hamburger, then one would have to assume it is gargantuan enough to be in the guiness book of world records.
words like "fastest" and "largest" can be accurately measured. words like "best" and "niftiest" can not.
if apple would have put a little asterisk next to fastest and had a micron-sized disclaimer at the bottom, this could have been avoided. but as is typical, apple was being arrogant.
side note, if apple had 98% market share like microsoft theyd be even more screwed than MS based on their practices. bundling windows media player? HAH! how about bundling freakin everything, from server tools to dvd authoring software?! not that thats necessarily a bad thing...but really, where are the games?! a distro needs good games bundled, even if its simply mahjong (i know i spelled that horribly heh)
how do we know you REALLY said it and didn't just think it and then type it!? You're mute and you know it!
Errr, I personally like my tech stuff to be functional AND look cool. I mean when I invite someone to my "crib" I've personally gotta have riced out neon lights all over my tech gear...
installs the common file swapping software (kazaa, winmx, etc.) and shares a users' mp3 files on it. that way everyone can just claim that they got a virus and didn't break the law. and some nice person may even be nice enough to bring up racketeering charges against the riaa on the grounds that they created the virus just to sue people. woot.
lol, yeah well they can *try* to mug me, in front of the bank camera, when i'm in my car, and driving away from the drive-through atm -- if they *really* want to. not to mention that i'm a rather large and fit guy...
Something similar happened to me with my bank (SunTrust), but the money was never taken out of my account.
I find that the best thing to do is only go to your bank's ATM -- and not the mini portable ATMs, but the ones embedded in the wall of the bank where you have to insert your card (not swipe, which could be intercepted by an intermediary swiper). Then when you get your cash, be sure to count it in front of the camera. I've had less money come out once but because I counted it in front of the camera, it was all right and I got my money.
and cost less to boot...at least in time and energy consumption.
bout freakin time.