Sorry to reply to my own post, but... RFC 1738 specifically says that the username:password scheme is NOT allowable in http URLs. But, RFC 2396 "revises and replaces" RFC 1738, and is rather vague on whether this practice is specifically denied.
So in a nutshell, at this point I'm not sure if IE's little "change" is now violating an RFC or now the only browser conforming to it. All I know is it's going to break a lot of existing functionality.
IE's http auth change is most likely going to break a LOT of functionality (extranets, portals... basically, umm, anything that passes http://user:pass@site, duh). While I've been recommending that people bitten by this switch to Firebird (a nice clickey windows installer for Firebird is here), there is also a registry change you can perform to disable this broken functionality (yes, BROKEN; IE is now violating yet another RFC).
Good idea, but the default port for SMTP over SSL is still port 25.
Actually, the default port for SMTP-over-SSL is 465. However, there is also SSL-over-SMTP (aka STARTTLS), where the client connects to the server on port 25, client does an EHLO, server lists STARTTLS as a capability, client issues STARTTLS command, and from that point on both sides communicate over SSL.
This is a perfect example of why you should never just arbitrarily block email because it comes from an IP on a list. Instead, programs like SpamAssassin are useful because they use blocklists as a factor, one among many, in determining whether to treat a message as "spam".
I ordered a vile of aerogel fragments on ebay, and it arrived yesterday. And I can tell you this: yes, it shatters easily, but it all has to do with size ratios. Aerogel can support up to 1000 times its own weight. When you're dealing with a 6x6x1" piece, it can certainly hold up a brick like in the photos you see. But when you're dealing with a fragment the size of a grain of rice, the force of a set of tweezers claming too hard is definitely more than 1000 times its weight. The result is, well, shattering.
The worm is also called "Bagel" and "Beagle." The writer has included the word "beagle" throughout the code, but antivirus researchers have tweaked the name to avoid calling it what the writer presumably named it.
What, is the worm's creator going to come forward and sue the antivirus companies for trademark infringement?
Or is this a "nyaa nyaa we're not going to call it what you wanted us to call it" thing?
Progeny has already announced two updated packages, one for tcpdump and one for cvs. Can't find a public announcement, but they were sent to subscribers a few days ago.
I bought one of those new emachines athlon64 systems at best buy when they first came out. Having never touched an amd64 system, I wanted to go through the BIOS and see what that was like on the demo unit (as they spend 20 minutes in the back stock room searching for the actual stock... mind you, this was mere hours after the computer was announced). The best buy guy's response was basically "go for it... but you break it, you buy it."
My point is, the helpfulness and cluefulness of a best buy employee is totally random:) I just happened to catch and employee that knew that this "amd64" stuff was different from the usual drivel they sell...
Slightly OT, but I stayed in Lincoln while driving across the country to begin my dot-com life in San Francisco... I stopped at the first place I saw off the highway. Went in and up to the woman behind the front desk:
"Do you have any rooms available?" "Yes we do." "How much is a night?" "Well, you do realize that these are suites and is not a regular hotel..." "How. Much." "$80 per night." "Hell, I'll take 2."
Linux users should avoid this Windows site at all cost.
Yes... I noticed this part in the "cons" section of the Athlon 64: "No 64-bit software". Hmmmmm, I own an Athlon 64 system that currently has 4 operating systems on it and about a thousand pieces of 64-bit software installed.
Oh, I get it. Tom's hardware probably means WinZip64 hasn't been released yet, so that means there is no 64-bit software.
That's the one about publishing all the upgrades and fixes. The most disturbing thing I've heard (but not confirmed) about Red Hat is that they require RHEL customers to keep the service bulletins confidential. That seems directly opposite of the free software spirit to me, and it makes me angry if it's true. Anyone know?
I doubt it. Not only have the openly sent notifications for RHEL errata, but they also provide the SRPMs in accordance with the GPL.
I just uninstalled mandrake 9.2 from one of my home machines thanks to your little press release. I am also regretting buying 9.0 retail not too long ago (which, supplemental to point #1, is your oldest supported version), and I'm no longer considering joining "the club".
Please do not bash other companies to try to make a buck in the name of integrity. I read through your 8 points and could not find one thing that Red Hat violates (I assume this press release is targeted towards Red Hat users). At the very least, the Fedora project is a community project with deep pockets thanks to Red Hat. They are not abandoning their heritage, instead it's a similar project with a different name. The only difference is now, in addition to the hundreds of Red Hat engineers working on the Fedora project, anyone else can contribute openly.
Conversely... I'm sorry, what is your oldest supported product again? Also while you say your are committed to providing a free product, your "download" link seems to have disappeared from your home page. Of course digging further reveals it, but then I'm provided with two choices in order to actually download a product:
I agree to support Mandrake Linux, please send me to the Mandrake Linux Users Club Registration page
or:
I'm already a member of the Club or plan on registering soon, please send me to the download page
Does that mean by downloading your free product, I agree to become a member sometime in the future?
fo0bar
(Please forgive my irrational tone. While I believe all I have stated here to be true, my annoyance has taken over my civility, and for that I appologize.)
Yes, vegas would be perfect, but as the SF replacement. IE, go to defcon, take a day off between conferences, then go to linux world without leaving your hotel.
No offence, but I think your concept of "all that great" isn't the same as most of the world. For example, Quake 3 was designed to run comfortably on a 300mhz machine with one of those newfangled "3d accelerator" cards (in my case, a voodoo3 2000). A P4 1.7Ghz with a 2 year old NVidia graphics card would still be considered by many people to be of "gimme gimme gimme!" quality.
I am now the first owner of an eMachines T6000 in Reno (which isn't too suprising considering this town...)
After reading the original story, I tracked down the bestbuy.com page for it, and it said that they had pickup service for this specific item at the local best buy. I called them up and spent about a half hour on the phone while they tracked them down. Turns out they didn't even have them on the floor yet.
I hopped in the car and drove down. Turns out they had 5 in, and I was buying the first one. Nifty. I literally just got back about 10 minutes ago and have just plugged it in, so I don't have much of a review yet, except for this: the 32-bit Windows XP Home that was preloaded took a little under 4 seconds to go from the end of the computer's POST to a start menu.
20:58 <@xi> that is pretty fast
20:59 <@xi> now imagine how fast a *real* OS will boot
I am currently downloading the gentoo amd64 livecd.
You know, I think Wal-Mart is horrible for this country (price fixing, anti-competitive behaviour, etc). This justifies the $20,000 or so worth of merchandise I've shoplifted so far this year.
The big banks are just as bad. They are paying out lower and lower interest rates on savings and money market accounts, and filling their own coffers even more as a result. So that makes it okay that I robbed a Bank of America last month.
And of course, the middlemen in the music industry make buying a CD futile, or at least downloading one from iTMS. I think I'll open up Kazaa again.
Contrary to their words, there are ZERO laws that you must show state issued identification to travel.
<devil's advocate>
Conversely, there is no law that says the airline/hotel/whatever has to provide you service if you refuse to provide ID. Specifically, in the case of airlines, remember that these are private corporations (that happen to be under federal regulation). If they wanted you to hop on one foot while singing Billy Joel before they let you on the plane, they are within their rights.
</devil's advocate>
Sorry to reply to my own post, but... RFC 1738 specifically says that the username:password scheme is NOT allowable in http URLs. But, RFC 2396 "revises and replaces" RFC 1738, and is rather vague on whether this practice is specifically denied.
So in a nutshell, at this point I'm not sure if IE's little "change" is now violating an RFC or now the only browser conforming to it. All I know is it's going to break a lot of existing functionality.
Actually, the default port for SMTP-over-SSL is 465. However, there is also SSL-over-SMTP (aka STARTTLS), where the client connects to the server on port 25, client does an EHLO, server lists STARTTLS as a capability, client issues STARTTLS command, and from that point on both sides communicate over SSL.
This is a perfect example of why you should never just arbitrarily block email because it comes from an IP on a list. Instead, programs like SpamAssassin are useful because they use blocklists as a factor, one among many, in determining whether to treat a message as "spam".
I ordered a vile of aerogel fragments on ebay, and it arrived yesterday. And I can tell you this: yes, it shatters easily, but it all has to do with size ratios. Aerogel can support up to 1000 times its own weight. When you're dealing with a 6x6x1" piece, it can certainly hold up a brick like in the photos you see. But when you're dealing with a fragment the size of a grain of rice, the force of a set of tweezers claming too hard is definitely more than 1000 times its weight. The result is, well, shattering.
What, is the worm's creator going to come forward and sue the antivirus companies for trademark infringement?
Or is this a "nyaa nyaa we're not going to call it what you wanted us to call it" thing?
ClamAV and Kaspersky both seem to be catching them here.
Progeny has already announced two updated packages, one for tcpdump and one for cvs. Can't find a public announcement, but they were sent to subscribers a few days ago.
What good is that when somebody spams you for Gen3r@c v|agar@?
I bought one of those new emachines athlon64 systems at best buy when they first came out. Having never touched an amd64 system, I wanted to go through the BIOS and see what that was like on the demo unit (as they spend 20 minutes in the back stock room searching for the actual stock... mind you, this was mere hours after the computer was announced). The best buy guy's response was basically "go for it... but you break it, you buy it."
:) I just happened to catch and employee that knew that this "amd64" stuff was different from the usual drivel they sell...
My point is, the helpfulness and cluefulness of a best buy employee is totally random
(standard disclaimer: born and raised 18 years in green bay, wi, so I am permitted to make fun of my hometown)
Slightly OT, but I stayed in Lincoln while driving across the country to begin my dot-com life in San Francisco... I stopped at the first place I saw off the highway. Went in and up to the woman behind the front desk:
"Do you have any rooms available?"
"Yes we do."
"How much is a night?"
"Well, you do realize that these are suites and is not a regular hotel..."
"How. Much."
"$80 per night."
"Hell, I'll take 2."
Yes... I noticed this part in the "cons" section of the Athlon 64: "No 64-bit software". Hmmmmm, I own an Athlon 64 system that currently has 4 operating systems on it and about a thousand pieces of 64-bit software installed.
Oh, I get it. Tom's hardware probably means WinZip64 hasn't been released yet, so that means there is no 64-bit software.
What configuration? If they got you 2x512MB sticks (~$160 total), they are cheap bastards and should be treated as such.
However, if it is a 1GB stick (~$500 last time I checked), you truly have a kickass family.
Did you handcuff yourself to it to give it an extra sense or realism?
I doubt it. Not only have the openly sent notifications for RHEL errata, but they also provide the SRPMs in accordance with the GPL.
I just uninstalled mandrake 9.2 from one of my home machines thanks to your little press release. I am also regretting buying 9.0 retail not too long ago (which, supplemental to point #1, is your oldest supported version), and I'm no longer considering joining "the club".
Please do not bash other companies to try to make a buck in the name of integrity. I read through your 8 points and could not find one thing that Red Hat violates (I assume this press release is targeted towards Red Hat users). At the very least, the Fedora project is a community project with deep pockets thanks to Red Hat. They are not abandoning their heritage, instead it's a similar project with a different name. The only difference is now, in addition to the hundreds of Red Hat engineers working on the Fedora project, anyone else can contribute openly.
Conversely... I'm sorry, what is your oldest supported product again? Also while you say your are committed to providing a free product, your "download" link seems to have disappeared from your home page. Of course digging further reveals it, but then I'm provided with two choices in order to actually download a product:
I agree to support Mandrake Linux, please send me to the Mandrake Linux Users Club Registration page
or:
I'm already a member of the Club or plan on registering soon, please send me to the download page
Does that mean by downloading your free product, I agree to become a member sometime in the future?
fo0bar
(Please forgive my irrational tone. While I believe all I have stated here to be true, my annoyance has taken over my civility, and for that I appologize.)
Ehh. There are some areas of San Francisco that are worse than that.
THANK YOU. I thought I was the only one who noticed that this sound effect has been used in every car commercial for the last 8 years or so.
Now it's entirely possible that the Doom guys ripped it off from somebody else, but I still call it "the Doom II sound".
Yes, vegas would be perfect, but as the SF replacement. IE, go to defcon, take a day off between conferences, then go to linux world without leaving your hotel.
No offence, but I think your concept of "all that great" isn't the same as most of the world. For example, Quake 3 was designed to run comfortably on a 300mhz machine with one of those newfangled "3d accelerator" cards (in my case, a voodoo3 2000). A P4 1.7Ghz with a 2 year old NVidia graphics card would still be considered by many people to be of "gimme gimme gimme!" quality.
"Brand Necrophilia"
After reading the original story, I tracked down the bestbuy.com page for it, and it said that they had pickup service for this specific item at the local best buy. I called them up and spent about a half hour on the phone while they tracked them down. Turns out they didn't even have them on the floor yet.
I hopped in the car and drove down. Turns out they had 5 in, and I was buying the first one. Nifty. I literally just got back about 10 minutes ago and have just plugged it in, so I don't have much of a review yet, except for this: the 32-bit Windows XP Home that was preloaded took a little under 4 seconds to go from the end of the computer's POST to a start menu.
20:58 <@xi> that is pretty fast
20:59 <@xi> now imagine how fast a *real* OS will boot
I am currently downloading the gentoo amd64 livecd.
Yes, I love downhillbattle's logic towards iTMS.
You know, I think Wal-Mart is horrible for this country (price fixing, anti-competitive behaviour, etc). This justifies the $20,000 or so worth of merchandise I've shoplifted so far this year.
The big banks are just as bad. They are paying out lower and lower interest rates on savings and money market accounts, and filling their own coffers even more as a result. So that makes it okay that I robbed a Bank of America last month.
And of course, the middlemen in the music industry make buying a CD futile, or at least downloading one from iTMS. I think I'll open up Kazaa again.
<devil's advocate>
Conversely, there is no law that says the airline/hotel/whatever has to provide you service if you refuse to provide ID. Specifically, in the case of airlines, remember that these are private corporations (that happen to be under federal regulation). If they wanted you to hop on one foot while singing Billy Joel before they let you on the plane, they are within their rights.
</devil's advocate>