This isn't a problem because it has been proven that only Windows can get viruses. Therefore, because it's not possible for viruses to spread with MacOS, security threats are irrelevant.
I carry Finnix. It's a 100MB livecd with no X, but a command-line interface and a lot of tools for the sysadmin in mind. LVM autodetection, very quick boot (remember, no X), niche network utilities like vconfig/mii-diag/iptraf/etc. Memtest86+ via the boot menu of course. It even has a freedos boot profile for when you need to flash a BIOS.
Oh, and I'm kinda required to carry Finnix, since I'm the author. Oops:)
After a failed attempt at getting one at wally world (the manager came out at 7PM and said there were 20 available for midnight, and I was #22), I stopped by Best Buy at 7PM and saw more people, but the people at the end of the line said they had a massive number available (over 100). I grabbed some warm clothing and a folding arm chair and got in line for the night. Tickets would be given out at 8AM, with the store opening at 9AM. Here's what I observed:
* Everybody was friendly, it was easy to make friends. * The line was about 20% Best Buy employees. Sounds like no employees got any special preference. * The front of the line was the quietest; those were the people in tents who got there before the PS3 even started selling. * Much Mario Cart action, and the high point of the evening was when a semi ran over a pizza (I guess you kinda had to be there). * Shortly after midnight, a few cars came by with guys who got midnight Wiis, and tried to sell them to us. Offers ranged from $6 (that's $6, not $6 above retail) to a half-bottle of beer. * Tickets were handed out at 8AM, and everybody in line got one. The people toward the front of the line were half-jokingly yelling at the people at the back of the line who arrived at 7AM. I was #36, my boss (who arrived just before midnight) was #48. * When they opened the doors at 9AM, they let us in 10 at a time so we wouldn't rush the games aisle to get games/accessories. * I commend the manager for his evilness. Basically everybody in line wanted Zelda, but there were only about 10 on the shelves, so those sold out quickly. I wanted Zelda and Excite Truck, so I at least got one that I wanted. Now, while we were waiting in the checkout line with our controllers/games/etc, he comes around with a stack of them that they "just happened to find now". * Speaking of games, I saw most people buying games with their Wiis. By contrast, I heard that out of the ~30 people who bought PS3s at that store, only 6 got a game. (Remember, the Wii comes with a pack-in game, the PS3 does not.) * I got my Wii, Zelda and Excitetruck. By 10AM I was at home, setting up the console. At 11AM, after playing a few rounds of tennis, I fell asleep, having no sleep for the last 26 hours.
For example, our Internet connection at work is managed by OpenBSD. If I rebooted our firewall, no one would notice, because the backup would kick in and it would preserve state for everything, even pre-existing TCP connections. You could be streaming music and it wouldn't even skip. How can I do that with Linux again?
Actually I'm trying to cancel out this goofy definition of MPG when there's electricity involved. Does a pure electric car get Infinity Miles per gallon?
Yes, it does, considering there is no gas involved.
I don't understand what you think is "goofy" about this. I put 10 gallons of gas into my Prius, I get 500 miles out of those 10 gallons. Hence, 50MPG. The fact that there is an electrical aspect is irrelevant.
For previous FreeDOS releases, I used FreeDOS ODIN, which is a single disk with a lot of utilities, similar to those DR-DOS utility disks that come with everything these days. But for today's release, I decided to make my own 1.44MB utility disk, patterned after ODIN: http://www.finnix.org/Balder
Finnix, a small sysadmin livecd I produce, can be easily installed on a thumb drive. Boot the CD, and there's a script called finnix-thumbdrive that takes care of the necessary syslinux configurations to install on a thumb drive and make it bootable. Finnix includes a ton of utilities for sysadmins, and boots up pretty quickly.
(oh, except I had a problem with IDE ICH5 and SATA ICH7 support - no DMA can be really annoying when you are backing up a whole system)
Do "finnix dma" at the boot prompt in 87.0; proper driver/DMA automatic loading will be in the upcoming 88.0 release. As for the SATA controller, I bet 87.0 didn't even probe it... 88.0 will, and will probe any PCI device that the kernel module knows about:)
"Yeah... that fix is totally going to be in the next version"
I just thought I'd do some shameless advertising and mention my distro, Finnix. It's a 100MB livecd that has no X, desktops, productivity tools, etc... but makes up for it by having a ton of sysadmin utilities, such as LVM detection and cryptsetup. It's basically the CD you carry around to help fix broken systems. There's also a PPC port, obviously can be booted from a thumb drive, as well as within Xen/UML virtualization systems.
Finnix doesn't really compete with DSL, except for the "damn, this system is hosed, I don't have a recovery CD around, and I don't want to wait to download 700MB for something like Knoppix" crowd.
It's interesting how many of the "how much will a hybrid cost you?" articles compare hybrids to economy cars. I've had a 2002 Prius for almost 4 years now ($20k, give or take), and I would consider it to have all the features I'd expect from a $20k car, ignoring the fact that it's a hybrid. If I didn't buy the Prius, I would have just bought another $20k car. I haven't spend any extra after-market money on the Prius that I wouldn't have on any other car, therefore *I* am actually saving money on gas. YMMV. Of course, if you were looking at a $11k Kia, a $20k hyrbid would not save you $9k in gas costs.
Actually, the cisco training mentality has changed a lot recently. Compare:
CCNA 640-607: OSI is king! OSI is everywhere! If something doesn't conform to the OSI model, squint at it REALLY hard until it starts to conform!
CCNA 640-801: Yeah, umm, we may have been a bit wrong about that whole OSI stuff. Here's that "TCP/IP model" we've been preventing you from learning, and how it relates to the OSI propaganda we've been feeding you for years.
> > NTP is built on top of the TCP/IP protocol suite and is used to ensure accurate time-keeping with a trusted time reference. > Ummm, doesn't NTP run over UDP?
The term "TCP/IP protocol suite" is somewhat of a misnomer. It is a network model that is comprised of: * Application (OSI layers 5-7) * Transport layer (OSI layer 4) * Internetwork layer (OSI layer 3) * Network Interface layer (OSI layers 1 & 2)
As such, UDP is a Transport layer protocol of the TCP/IP network model. Fun, ain't it?
I didn't get a chance to mention this after the defcon talk, but your experience with people blocking you en masse after your experiments reminded me of a project I did back in 2000. I decided to crawl and record the.us cctld by using simple AXFR crawling. I chose.us because it wasn't tiny (you could crawl.za in about 5 minutes), but still had a TLD nameserver who allowed AXFRs as a starting point (uunet). You wouldn't believe how many nameservers back then gladly gave out their entire zone files to anyone who asked.
Anyways, the punchline is my ISP received about 50 complaints of me "hacking" their servers.
(I was going to later try the same thing with.com/net/org; I even got authorization from internic to grab the TLD zones via FTP; but decided that it would have taken forever on my existing 5mbps connection.)
This one baffled me as well. How could you have a "logout" function in a stateless protocol? Logins don't persist beyond the fulfillment of a single request. The storing of a username and password for HTTP authentication is implemented on the client side, it has nothing to do with the web server or even the protocol. Complain to Microsoft/Mozilla/Opera Software or whoever makes your browser if you don't like it.
Exactly. IMHO, when you enter a part of a web site with HTTP auth, there should be a button or something IN THE BROWSER ITSELF that will clear the cached authentication for the realm. Don't blame the spec, and don't blame the server.
I'm using a Customizer 101 key keyboard with buckling springs from PCKeyboard.com. They have them for only $49, which is a bargain considering this thing will probably last several decades. The frame of it is made out of metal, and it is heavy enough that I could probably use it as a club if I wanted to. Also, it doesn't have the Windows keys (But I think they are available if someone wants them).
I also bought a Unicomp keyboard, in my case, a Customizer 104. I also love it, and while $50 is 5 times the price of the previous most expensive keyboard I've bought, I still feel it was worth every penny. Also, I flipped the keyboard upside down, and noticed it had a manufacture date, which was the same date it was shipped out to me.
As for the Mod4 key, I think it gets a bad rap just because it has a logo of a big company on the key cap. I have about a dozen Mod4+Something keyboard shortcuts set up in Fluxbox, and it's great. Even in the windows world, it has a lot of functionality that almost nobody knows about. Most people say "oh, that's just another button you press if you want to bring up the start menu", but as a simple example, did you know you can press Windows+L to instantly lock the display?
While not as "cool looking" as a Google Map, the USGS has a very nice recent earthquake map that is clickable, down to coordinates & fault name.
Yes, I visit that site often, but I made my site because 1) the USGS doesn't list earthquakes under 1.0 magnitude (with good reason though, it's nearly impossible to verify those events), and 2) because I could:)
I created a map hack for all recent recorded Nevada and Eastern California earthquakes a couple weeks ago. A few days ago, the hack stopped working. I noticed Google changed their code and many of the map hack sites stopped working. "Oh well, maybe I'll fix it later."
But with today's announcement, I grabbed a key, read the documentation, and had the site back up (and with a few new features) within about an hour. Their API documentation is VERY good.
I feel pretty sorry for the state of events concerning sarge the last 2 days... I had copies of the netinst/businesscard isos sunday night (since I am a l33t hax0r), but they were unusable until the following morning when the tags on the mirrors changed sarge from "testing" to "stable". At that time I installed from businesscard, got the error about the security repository, and noticed the commented out repo line.
"This has to be me. No way can a problem this big be universal." So I continued looking into it throughout the day, occasionally checking the mailing lists and IRC, and not seeing anything about this. Tuesday morning, I found the source of the problem on the CDs, and finally admitted to myself that it was a widespread problem, and filed a bug report. Of course, while I was doing that, there was a post to debian-devel-announce about this. Doh.
Of course the ISOs have been updated since tuesday night, but many many thousands of people have already downloaded the flawed ISOs. This is bad for the debian community: if word doesn't get spread around about this, you have people unknowling not getting security updates, if it does get spread around, it looks bad for Debian. (One bit of comfort is an error is thrown during base-config after installing from the flawed images, and while it's a bit cryptic, it should give users SOME idea that something is up.)
Oh well, sarge is still a kickass disto. Until I start pining for etch, that is.
Slashdot Mirror
This isn't a problem because it has been proven that only Windows can get viruses. Therefore, because it's not possible for viruses to spread with MacOS, security threats are irrelevant.
Please, try the veal.
When Google Answers first opened up, I thought I'd find out the answer to the age-old question, who's yer daddy?
Turns out it's usually the one who married yer mommy. But not always.
I carry Finnix. It's a 100MB livecd with no X, but a command-line interface and a lot of tools for the sysadmin in mind. LVM autodetection, very quick boot (remember, no X), niche network utilities like vconfig/mii-diag/iptraf/etc. Memtest86+ via the boot menu of course. It even has a freedos boot profile for when you need to flash a BIOS.
:)
Oh, and I'm kinda required to carry Finnix, since I'm the author. Oops
After a failed attempt at getting one at wally world (the manager came out at 7PM and said there were 20 available for midnight, and I was #22), I stopped by Best Buy at 7PM and saw more people, but the people at the end of the line said they had a massive number available (over 100). I grabbed some warm clothing and a folding arm chair and got in line for the night. Tickets would be given out at 8AM, with the store opening at 9AM. Here's what I observed:
* Everybody was friendly, it was easy to make friends.
* The line was about 20% Best Buy employees. Sounds like no employees got any special preference.
* The front of the line was the quietest; those were the people in tents who got there before the PS3 even started selling.
* Much Mario Cart action, and the high point of the evening was when a semi ran over a pizza (I guess you kinda had to be there).
* Shortly after midnight, a few cars came by with guys who got midnight Wiis, and tried to sell them to us. Offers ranged from $6 (that's $6, not $6 above retail) to a half-bottle of beer.
* Tickets were handed out at 8AM, and everybody in line got one. The people toward the front of the line were half-jokingly yelling at the people at the back of the line who arrived at 7AM. I was #36, my boss (who arrived just before midnight) was #48.
* When they opened the doors at 9AM, they let us in 10 at a time so we wouldn't rush the games aisle to get games/accessories.
* I commend the manager for his evilness. Basically everybody in line wanted Zelda, but there were only about 10 on the shelves, so those sold out quickly. I wanted Zelda and Excite Truck, so I at least got one that I wanted. Now, while we were waiting in the checkout line with our controllers/games/etc, he comes around with a stack of them that they "just happened to find now".
* Speaking of games, I saw most people buying games with their Wiis. By contrast, I heard that out of the ~30 people who bought PS3s at that store, only 6 got a game. (Remember, the Wii comes with a pack-in game, the PS3 does not.)
* I got my Wii, Zelda and Excitetruck. By 10AM I was at home, setting up the console. At 11AM, after playing a few rounds of tennis, I fell asleep, having no sleep for the last 26 hours.
(This was the Reno Best Buy, if you care.)
keepalived.
But, you know, your elitist attitude was fun too. Please, continue.
PSone? Back in 2000, while the PS2 was struggling with launch stock, the PSones were flying off the shelves.
(There were similar, but not as successful slim redesigns of the NES and SNES toward the end of their runs.)
Actually I'm trying to cancel out this goofy definition of MPG when there's electricity involved. Does a pure electric car get Infinity Miles per gallon?
Yes, it does, considering there is no gas involved.
I don't understand what you think is "goofy" about this. I put 10 gallons of gas into my Prius, I get 500 miles out of those 10 gallons. Hence, 50MPG. The fact that there is an electrical aspect is irrelevant.
GM foods are made with lasers. Lasers are evil.
Duh.
iMacs were available in G5 models. It was the minis that were G4-only.
For previous FreeDOS releases, I used FreeDOS ODIN, which is a single disk with a lot of utilities, similar to those DR-DOS utility disks that come with everything these days. But for today's release, I decided to make my own 1.44MB utility disk, patterned after ODIN: http://www.finnix.org/Balder
(Shameless plug ahoy!)
Finnix, a small sysadmin livecd I produce, can be easily installed on a thumb drive. Boot the CD, and there's a script called finnix-thumbdrive that takes care of the necessary syslinux configurations to install on a thumb drive and make it bootable. Finnix includes a ton of utilities for sysadmins, and boots up pretty quickly.
You know, I once used giant enemy crab nanosensors to attack its weak point for massive damage. True story.
Do "finnix dma" at the boot prompt in 87.0; proper driver/DMA automatic loading will be in the upcoming 88.0 release. As for the SATA controller, I bet 87.0 didn't even probe it... 88.0 will, and will probe any PCI device that the kernel module knows about
"Yeah... that fix is totally going to be in the next version"
I just thought I'd do some shameless advertising and mention my distro, Finnix. It's a 100MB livecd that has no X, desktops, productivity tools, etc... but makes up for it by having a ton of sysadmin utilities, such as LVM detection and cryptsetup. It's basically the CD you carry around to help fix broken systems. There's also a PPC port, obviously can be booted from a thumb drive, as well as within Xen/UML virtualization systems.
Finnix doesn't really compete with DSL, except for the "damn, this system is hosed, I don't have a recovery CD around, and I don't want to wait to download 700MB for something like Knoppix" crowd.
"Does that dummy have a brother?"
It's interesting how many of the "how much will a hybrid cost you?" articles compare hybrids to economy cars. I've had a 2002 Prius for almost 4 years now ($20k, give or take), and I would consider it to have all the features I'd expect from a $20k car, ignoring the fact that it's a hybrid. If I didn't buy the Prius, I would have just bought another $20k car. I haven't spend any extra after-market money on the Prius that I wouldn't have on any other car, therefore *I* am actually saving money on gas. YMMV. Of course, if you were looking at a $11k Kia, a $20k hyrbid would not save you $9k in gas costs.
Actually, the cisco training mentality has changed a lot recently. Compare:
CCNA 640-607: OSI is king! OSI is everywhere! If something doesn't conform to the OSI model, squint at it REALLY hard until it starts to conform!
CCNA 640-801: Yeah, umm, we may have been a bit wrong about that whole OSI stuff. Here's that "TCP/IP model" we've been preventing you from learning, and how it relates to the OSI propaganda we've been feeding you for years.
> > NTP is built on top of the TCP/IP protocol suite and is used to ensure accurate time-keeping with a trusted time reference.
> Ummm, doesn't NTP run over UDP?
The term "TCP/IP protocol suite" is somewhat of a misnomer. It is a network model that is comprised of:
* Application (OSI layers 5-7)
* Transport layer (OSI layer 4)
* Internetwork layer (OSI layer 3)
* Network Interface layer (OSI layers 1 & 2)
As such, UDP is a Transport layer protocol of the TCP/IP network model. Fun, ain't it?
You need to drink more during your talks.
.us cctld by using simple AXFR crawling. I chose .us because it wasn't tiny (you could crawl .za in about 5 minutes), but still had a TLD nameserver who allowed AXFRs as a starting point (uunet). You wouldn't believe how many nameservers back then gladly gave out their entire zone files to anyone who asked.
.com/net/org; I even got authorization from internic to grab the TLD zones via FTP; but decided that it would have taken forever on my existing 5mbps connection.)
I didn't get a chance to mention this after the defcon talk, but your experience with people blocking you en masse after your experiments reminded me of a project I did back in 2000. I decided to crawl and record the
Anyways, the punchline is my ISP received about 50 complaints of me "hacking" their servers.
(I was going to later try the same thing with
This one baffled me as well. How could you have a "logout" function in a stateless protocol? Logins don't persist beyond the fulfillment of a single request. The storing of a username and password for HTTP authentication is implemented on the client side, it has nothing to do with the web server or even the protocol. Complain to Microsoft/Mozilla/Opera Software or whoever makes your browser if you don't like it.
Exactly. IMHO, when you enter a part of a web site with HTTP auth, there should be a button or something IN THE BROWSER ITSELF that will clear the cached authentication for the realm. Don't blame the spec, and don't blame the server.
I'm using a Customizer 101 key keyboard with buckling springs from PCKeyboard.com. They have them for only $49, which is a bargain considering this thing will probably last several decades. The frame of it is made out of metal, and it is heavy enough that I could probably use it as a club if I wanted to. Also, it doesn't have the Windows keys (But I think they are available if someone wants them).
I also bought a Unicomp keyboard, in my case, a Customizer 104. I also love it, and while $50 is 5 times the price of the previous most expensive keyboard I've bought, I still feel it was worth every penny. Also, I flipped the keyboard upside down, and noticed it had a manufacture date, which was the same date it was shipped out to me.
As for the Mod4 key, I think it gets a bad rap just because it has a logo of a big company on the key cap. I have about a dozen Mod4+Something keyboard shortcuts set up in Fluxbox, and it's great. Even in the windows world, it has a lot of functionality that almost nobody knows about. Most people say "oh, that's just another button you press if you want to bring up the start menu", but as a simple example, did you know you can press Windows+L to instantly lock the display?
Oh, and 3) I thought it would be neat to drill down to an epicenter at street level, which unfortunately you cannot do with the USGS site.
While not as "cool looking" as a Google Map, the USGS has a very nice recent earthquake map that is clickable, down to coordinates & fault name.
:)
Yes, I visit that site often, but I made my site because 1) the USGS doesn't list earthquakes under 1.0 magnitude (with good reason though, it's nearly impossible to verify those events), and 2) because I could
I created a map hack for all recent recorded Nevada and Eastern California earthquakes a couple weeks ago. A few days ago, the hack stopped working. I noticed Google changed their code and many of the map hack sites stopped working. "Oh well, maybe I'll fix it later."
But with today's announcement, I grabbed a key, read the documentation, and had the site back up (and with a few new features) within about an hour. Their API documentation is VERY good.
I feel pretty sorry for the state of events concerning sarge the last 2 days... I had copies of the netinst/businesscard isos sunday night (since I am a l33t hax0r), but they were unusable until the following morning when the tags on the mirrors changed sarge from "testing" to "stable". At that time I installed from businesscard, got the error about the security repository, and noticed the commented out repo line.
"This has to be me. No way can a problem this big be universal." So I continued looking into it throughout the day, occasionally checking the mailing lists and IRC, and not seeing anything about this. Tuesday morning, I found the source of the problem on the CDs, and finally admitted to myself that it was a widespread problem, and filed a bug report. Of course, while I was doing that, there was a post to debian-devel-announce about this. Doh.
Of course the ISOs have been updated since tuesday night, but many many thousands of people have already downloaded the flawed ISOs. This is bad for the debian community: if word doesn't get spread around about this, you have people unknowling not getting security updates, if it does get spread around, it looks bad for Debian. (One bit of comfort is an error is thrown during base-config after installing from the flawed images, and while it's a bit cryptic, it should give users SOME idea that something is up.)
Oh well, sarge is still a kickass disto. Until I start pining for etch, that is.