Sun and StorageTek are right across the highway from each other. A few years ago, a popular new shopping mall sprang up right next to them. Now, Sun has a ton of empty office space.
StorageTek has a huge complex taking up a huger plot of land, a lot of it empty. That land is directly adjacent to a hugely popular mall, so is very valuable. They've been wanting to bulldoze their current residence so they can get more money out of it as shops and residential.
So, I think they'll move everyone from StorageTek into the empty space at Sun, and go ahead and bulldoze and redevelop the old StorageTek space. Their net gain from the real estate issues alone probably make this a good deal.
As a bonus, they'll save huge amounts in recruiting fees, since they'll no longer be stealing each others employees from across the street!
Someone will probably point out that the person who created the malicious file would use a client without this capability. And then this wouldn't work for you until you've already downloaded the file.
How about if the client software could run some basic sanity check on the file before allowing it be shared out. The Unix/Linux "file" command would be just the thing. ("file" determines what sort of file it is by looking inside the file, regardless of file extension.)
Most (all?) Linux distros don't all this, either. Not sure where this happens, if it's bash or something deeper.
If you want to play, try making a script owned by root, which modifies something a normal user can't. Set it SUID (chmod u+s filename). Run it as a normal user. Shouldn't work (except on older OS/X).
Now, try setting vi or a copy of it SUID. (Again, make sure root owns it, and "chmod u+s filename".) Now run it as a normal user, and, say, edit your/etc/shadow. You shouldn't have any troubles doing so.
Now that you're done, get rid of those suid files so nobody else uses them.
I forged a bugzilla email to the software and test groups saying that we had to start supporting OS/2 for our product, due to a potential big government contract.
Since this is just a bugfix release, it doesn't have all the juicy stuff from CVS. Specifically, I'm waiting for the Gatos ATI TV drivers, which are in CVS and should come *native* out with xorg 6.9.
As it is, I'm running FC3 with an xorg RPM I built from CVS code. Just took the SPEC file from the stock 6.8.1 SRPM, modified it a bit, and reran "rpmbuild -bp specfile", removing a patch at a time from the spec file until it stopped complaining. Then it built happily (rpmbuild -bb).
Probably one of the easier installs of the gatos drivers I've done.:-P
You know, there is a reason Debian takes so long to release stable. It is very well tested.
I get the opposite feeling on an old Debian stable install. I start to feel like it can't possibly be secure, because the developers aren't even looking at this version of the code anymore. There have been new major releases of too many packages.
Like running ssh v1 *long* after everyone else has been running v2, and the world has learned about the inherent vulnerabilities of ssh v1.
And they certainly aren't perfect on fixing security issues. Like having the apache process owner also own the apache config files? Dunno how that made it into stable in the first place (very basic config error), but even after a bug was filed, it stayed there for ages, probably til the next version became Stable.
Personally, the feeling I get is that the Debian folks would love to release more often, but they just aren't organized enough to pull the trigger.
"In addition to the regular six-monthly releases, the Ubuntu team may make an Enterprise Release (based on an existing time-based release) that has received additional stabilisation, polish and translation work. These Enterprise Releases will be supported for a longer period than the standard 18 month support of the time based releases. Upgrades will be supported from enteprise release to enterprise release."
Re:I find distributions like Knoppix stupid
on
Knoppix 3.7 Released
·
· Score: 5, Interesting
Yeah, maybe a troll, but I can see how some might not see the benefits of a versatile boot disk. There are two main general uses: (1) rescue disk, (2) fully functional OS for PCs you don't want to modify (be it a damaged OS, the wrong OS, or something you just don't have a login for).
Handy uses for Knoppix: -Burning CDs, perhaps as data recovery before wiping a system -Want to check your webmail, but don't want your friend's/relative's spyware infested PC shoveling your passwords -Scanning Windows for viruses (great irony) -Reading and writing NTFS partitions -Somebody's (your?) PC is just hosed, and you don't have the time to fix it right now.
And you can do crazy stuff with it. Once I set up a security webcam with it, downloaded and compiled "motion", to record only frames where motion was detected, and wrote the images out to an NFS share. All on a Windows PC I didn't have a login for.
All in all, it does pretty well as "the only bootable disk you'll ever need", rather than having separate boot CDs/floppies for Linux grub/lilo repair, virus scanning, etc. And it does lots of things that standard rescue disks can't.
The Windows admins at a place I used to work let the web developers admin an IIS server. They were forced to revoke admin privs later, when they discovered that, among other travesties, they had granted system-wide full-control file access to the guest account.
So, I can understand the perspective of the admins, and it's not necessarily just a power trip.
Though, of course, there are plenty of good books with clearly delineated moral lines, as well. Tolkien, etc. Orcs and trolls are almost always evil characters, although the Dragonlance series also does some stereotype-breaking stories about traditionally "pure evil" characters.
People are looking for a simplicity in their fictional worlds where good and evil are clearly delineated
If this was true, Raistlin wouldn't be such a popular character. Some of my favorite fiction books have explored moral boundaries. The Chung Kuo series by David Wingrove, for instance, has characters where you're not always sure who the good guy is, because of their human nature.
A:tar preserves more about the files than scp, for example, scp follows symbolic links, tar copies the links themselves.
And a symlink back to a higher directory can put "scp -r" into an infinite loop.:-) So if it seems like it's taking forever, maybe it is. (The "-r" means "recursive", as in directories. Otherwise it'll just do files.)
The first thing that comes to mind is the "motion" project. It's a nice motion detection program for webcams. Saves drive space by only saving frames where something seems to be moving. You can also have it make movies of the motion frames, which makes it really easy to "check the logs".
Because if you wait, the price of going into space will go down, the quality will improve, and you'll get a much better deal.
Yes, but the price of space will go down much more quickly if we actually try to drive the price down.
Of course, NASA will probably never drive the price down. They're much more focused on driving the complexity up. It'll be companies like Scaled Composites and Armadillo Aerospace that drive the price down, IMO.
While our sun is expected to go red giant in 4-5 billion years, it is expected to expand enough to make Earth uninhabitable within a mere *2 BILLION YEARS*!!!
And I haven't even started packing! The time to panic is NOW!!!
But seriously, if we plan to make it the long run, we need to make backups of ourselves on other planets, and eventually in other solar systems. Why wait?
Slashdot Mirror
Others are saying that the City of Louisville (where StorageTek is located) won't let them rezone the land for residential and retail anyway.
Here's how I think this is going to play out.
Sun and StorageTek are right across the highway from each other. A few years ago, a popular new shopping mall sprang up right next to them. Now, Sun has a ton of empty office space.
StorageTek has a huge complex taking up a huger plot of land, a lot of it empty. That land is directly adjacent to a hugely popular mall, so is very valuable. They've been wanting to bulldoze their current residence so they can get more money out of it as shops and residential.
So, I think they'll move everyone from StorageTek into the empty space at Sun, and go ahead and bulldoze and redevelop the old StorageTek space. Their net gain from the real estate issues alone probably make this a good deal.
As a bonus, they'll save huge amounts in recruiting fees, since they'll no longer be stealing each others employees from across the street!
Someone will probably point out that the person who created the malicious file would use a client without this capability. And then this wouldn't work for you until you've already downloaded the file.
But it would prevent it from spreading.
How about if the client software could run some basic sanity check on the file before allowing it be shared out. The Unix/Linux "file" command would be just the thing. ("file" determines what sort of file it is by looking inside the file, regardless of file extension.)
Most (all?) Linux distros don't all this, either. Not sure where this happens, if it's bash or something deeper.
/etc/shadow. You shouldn't have any troubles doing so.
If you want to play, try making a script owned by root, which modifies something a normal user can't. Set it SUID (chmod u+s filename). Run it as a normal user. Shouldn't work (except on older OS/X).
Now, try setting vi or a copy of it SUID. (Again, make sure root owns it, and "chmod u+s filename".) Now run it as a normal user, and, say, edit your
Now that you're done, get rid of those suid files so nobody else uses them.
I forged a bugzilla email to the software and test groups saying that we had to start supporting OS/2 for our product, due to a potential big government contract.
:-)
Got a couple people wound up.
Dell PowerEdge 6600, 6650, 7250...b oard/Xeo n800/. html
IBM xSeries 336, 346...
http://www.supermicro.com/products/mother
http://www.tyan.com/products/html/barebone
In short, every place I've checked so far.
Since this is just a bugfix release, it doesn't have all the juicy stuff from CVS. Specifically, I'm waiting for the Gatos ATI TV drivers, which are in CVS and should come *native* out with xorg 6.9.
:-P
As it is, I'm running FC3 with an xorg RPM I built from CVS code. Just took the SPEC file from the stock 6.8.1 SRPM, modified it a bit, and reran "rpmbuild -bp specfile", removing a patch at a time from the spec file until it stopped complaining. Then it built happily (rpmbuild -bb).
Probably one of the easier installs of the gatos drivers I've done.
I get the opposite feeling on an old Debian stable install. I start to feel like it can't possibly be secure, because the developers aren't even looking at this version of the code anymore. There have been new major releases of too many packages.
Like running ssh v1 *long* after everyone else has been running v2, and the world has learned about the inherent vulnerabilities of ssh v1.
And they certainly aren't perfect on fixing security issues. Like having the apache process owner also own the apache config files? Dunno how that made it into stable in the first place (very basic config error), but even after a bug was filed, it stayed there for ages, probably til the next version became Stable.
Personally, the feeling I get is that the Debian folks would love to release more often, but they just aren't organized enough to pull the trigger.
Yeah, maybe a troll, but I can see how some might not see the benefits of a versatile boot disk. There are two main general uses: (1) rescue disk, (2) fully functional OS for PCs you don't want to modify (be it a damaged OS, the wrong OS, or something you just don't have a login for).
Handy uses for Knoppix:
-Burning CDs, perhaps as data recovery before wiping a system
-Want to check your webmail, but don't want your friend's/relative's spyware infested PC shoveling your passwords
-Scanning Windows for viruses (great irony)
-Reading and writing NTFS partitions
-Somebody's (your?) PC is just hosed, and you don't have the time to fix it right now.
And you can do crazy stuff with it. Once I set up a security webcam with it, downloaded and compiled "motion", to record only frames where motion was detected, and wrote the images out to an NFS share. All on a Windows PC I didn't have a login for.
All in all, it does pretty well as "the only bootable disk you'll ever need", rather than having separate boot CDs/floppies for Linux grub/lilo repair, virus scanning, etc. And it does lots of things that standard rescue disks can't.
The Windows admins at a place I used to work let the web developers admin an IIS server. They were forced to revoke admin privs later, when they discovered that, among other travesties, they had granted system-wide full-control file access to the guest account.
So, I can understand the perspective of the admins, and it's not necessarily just a power trip.
Though, of course, there are plenty of good books with clearly delineated moral lines, as well. Tolkien, etc. Orcs and trolls are almost always evil characters, although the Dragonlance series also does some stereotype-breaking stories about traditionally "pure evil" characters.
And a symlink back to a higher directory can put "scp -r" into an infinite loop.
I'll second the motion for AVG anti-virus.
The first thing that comes to mind is the "motion" project. It's a nice motion detection program for webcams. Saves drive space by only saving frames where something seems to be moving. You can also have it make movies of the motion frames, which makes it really easy to "check the logs".
If you get sufficiently close to light speed, the distance decreases, thanks to the wonders of relativity.
I mean, if nobody drives sharks (a reasonable assumption), you get a division by zero, making sharks infinitely more dangerous than cars.
Yes, but how many people drive sharks?
Yes, but the price of space will go down much more quickly if we actually try to drive the price down.
Of course, NASA will probably never drive the price down. They're much more focused on driving the complexity up. It'll be companies like Scaled Composites and Armadillo Aerospace that drive the price down, IMO.
While our sun is expected to go red giant in 4-5 billion years, it is expected to expand enough to make Earth uninhabitable within a mere *2 BILLION YEARS*!!!
And I haven't even started packing! The time to panic is NOW!!!
But seriously, if we plan to make it the long run, we need to make backups of ourselves on other planets, and eventually in other solar systems. Why wait?