Slashdot Mirror


User: neurovish

neurovish's activity in the archive.

Stories
0
Comments
564
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 564

  1. Re:WTF!! on $529M Gov't Loan To Develop $89,000 Hybrid Sports Car · · Score: 1

    Actually, I'm looking more for the 10,000 - 15,000 practical everyday driver. 30k is sportscar money!

  2. Re:University of Central Florida on Does Your College Or University Support Linux? · · Score: 1

    I'm guessing you have no courses that make you use Tegrity then. I'm was taking grad courses at UCF until they switched their FEEDS content over to use Tegrity, which was very linux hostile. The professor in charge of FEEDS and choosing the Tegrity system did not really seem to care and had the opinion that if you used linux you were on your own. Their previous system involved recording the lectures, then putting them online in .wmv format, which wasn't the best, but it was at least common enough to work. They switched to the ActiveX based Tegrity because it was "too hard" to record the lectures and put them up as normal downloadable videos. The switch to Tegrity did not seem to be very well received by other students and alienated a sizeable chunk.

  3. Re:RTFS on Password Hackers Do Big Business With Ex-Lovers · · Score: 2, Funny

    If I ever found a female customer service rep that knew what a "hash" is I'd drop a marriage proposal on the spot.

    What if she knew what an octothorpe was?

  4. Re:Palin? on How a Team of Geeks Cracked the Spy Trade · · Score: 1

    Please turn in your geek card.

    No, that would be nerd card. Geeks have social skills.

    You obviously didn't READ the books.

    neither did I. I tried - I really tried.. but they were so horribly boring and long-winded it was impossible for me to make it through even part of the first one.

    Q: Why did the chicken cross the road?

    A by Tolkein: The chicken, sunlight coruscating off its radiant yellow-white coat of feathers, approached the dark, sullen asphalt road and scrutinized it intently with its obsidian-black eyes. Every detail of the thoroughfare leapt into blinding focus: the rough texture of the surface, over which countless tires had worked their relentless tread through the ages; the innumerable fragments of stone embedded within the lugubrious mass, perhaps quarried from the great pits where the Sons of Man labored not far from here; the dull black asphalt itself, exuding those waves of heat which distort the sight and bring weakness to the body; the other attributes of the great highway too numerous to give name. And then it crossed it.

    You left out the part where the chicken bursts into a song for 5 pages.

  5. Re:I'm sorry, but you are wrong. on Microsoft Poland Photoshops Black Guy To White One · · Score: 1

    I am a white American living in Japan. I've been here about 10 years. People say racist things to me all the time. No, they don't mean any offense (usually), but that doesn't mean that I don't get offended. But I didn't used to.

    Last year I visited Tokyo and got assaulted by a group of black adult men in Rappongi. For saying anything? No. Just for being white.

    Actually, it was probably because you were white and not interested in the girly club they were trying to get you to go to, or you were trying to completely ignore them.

  6. Re:Hate to say it... on Three Indicted In Huge Identity/Data Breach · · Score: 1

    PCI compliance is the definition of security theater. I used to work for a credit card processing company, and every month we'd get some new "PCI" rule we had to follow, which did virtually nothing to make us more secure.

    Month 1: Can't store credit card numbers in problem tickets. Must use e-mail. (Internal e-mail, obviously.) Month 2: Can't e-mail credit card numbers internally. Must put them into problem tickets. Month 3: Can't do either one. Now you must provide the credit card numbers verbally (over the phone), or write them down and carry them to the person resolving the ticket.

    Which made resolving card-specific software issues absolutely delightful to deal with - I couldn't even begin to guess how many miles I trudged through the IT floor, distributing sticky notes with credit card numbers written on them, which if you ask me was more of a security risk than having them stored digitally.

    Meanwhile, the things that really mattered were left virtually untouched. I don't even know how many times something was completely and utterly screwed up by someone, somewhere in the company... and we couldn't even figure out who did it because there were no logs of what had happened, or because the logs pointed to a shared account that anybody could have used. My account on the actual card processing front-end system was watched like a hawk, however, nobody would ever have noticed if I'd downloaded a database dump from the FTP server and made off with it.

    PCI has absolutely nothing to do with actually tightening security, and everything to do with making businesses able to say "It's OK! We're PCI COMPLIANT!"

    (Post anonymously? Hmm, I wonder.)

    I'm on the PCI compliance team where I work (well, was...eventually management decided they would rather outsource all credit card transactions and not have to worry about it), and you never were PCI compliant. For one, the numbers can't be stored in cleartext, which sounds exactly like what emailing them and putting them in trouble tickets, or even writing them on a sticky note would do. The actual PCI DSS is pretty normal security procedure and something you would want in place anyways. Aside from a shared account that the three linux admins used, our linux environment was already up to PCI standard before we had even heard of it.

    Encrypt the application layer (https and ssh, no http, telnet, ftp, rsh, etc).
    Don't use dumb passwords.
    Change your password every once in awhile.
    Don't give everybody access to everything.
    Don't share accounts, never use root.
    Don't leave services you don't use running.
    Don't leave sensitive data in cleartext.
    Test and make sure you're actually doing these things.

    I'm sure there's some stuff missing, but that is essentially PCI DSS.

  7. Re:RHEL is safe? on Local Privilege Escalation On All Linux Kernels · · Score: 2, Informative

    You are probably running a kernel that does not have support for vm.mmap_min_addr.
    I'm not sure when it was added, but I have kernel 2.6.23 on my desktop and don't have it.

    Adding it to /proc would do nothing if the kernel doesn't support it.

  8. RHEL is safe? on Local Privilege Escalation On All Linux Kernels · · Score: 3, Informative

    It looks like RHEL's mmap_min_addr (cat /proc/sys/vm/mmap_min_addr) is set to 65536 by default. According to the vulnerability posting:

    Recent kernels with mmap_min_addr support may prevent exploitation if
    the sysctl vm.mmap_min_addr is set above zero. However, administrators
    should be aware that LSM based mandatory access control systems, such
    as SELinux, may alter this functionality.

    So, if you're running stock RHEL 5.3 without SELinux, you should be safe?

  9. Re:Beware of namechanges on RadioShack To Rebrand As "The Shack"? · · Score: 1

    That's weird.
    I stopped by radioshack yesterday since a friend of mine needed a cable that no place else seemed to carry (RCA female to spade), and found that they still had what I needed for wirewrapping a project. They don't pack the random electronic components that they used to, but they have a lot of common things (for about 10 times the going rate, but that's the convenience tax).

  10. Nobody Reads the Subject Anyways on SUSE Studio 1.0 Released · · Score: 1

    This looks like it just moves the normal SuSE installer onto a website, why all the excitement?
    I've been able to make a "customized linux installation" since...forever because that's kind of how they come.
    If you wanted to make a basic template system to install in a few different places, you can already do that with autoyast.
    The build and test stage is interesting, but not anything you couldn't do yourself inside of a VM.

    What does this service offer that didn't exist before?

  11. Re:NX is unstable for me. How about you? on Google Releases Open Source NX Server · · Score: 1

    NX is perfectly fine and stable for me, but I'm also not using it to run simulations or anything where I would come back to it a few days later and see what's up. For that kind of work, VNC might actually work better. These simulations are directly tied to a GUI app? They can't just run in the background?

  12. Re:Still requires creation of user "nx"? Noooooo! on Google Releases Open Source NX Server · · Score: 1

    WTF?
    This isn't the kind of thing that users should install...and from your post, I would say especially not you.

  13. Re:Long time user on Google Releases Open Source NX Server · · Score: 1

    As a longtime NX user, this will be very well received. I feel like I'm one of a couple dozen NX users, however, meaning that I think this will go largely unnoticed by mainstream users. The non-proprietary NX-server packages are very non-trivial to install and all attempts thus far at a completed server setup have remained inadequate and completely fly-by-night/unmaintained. I hope people start to use this more and thus perhaps even push the technology farther.

    Really?
    What distribution are you running?
    There's a FreeNX package in the rpmforge repo, so if you're running RHEL/CentOS, set that up and yum install freenx.

  14. Re:NIH on Google Releases Open Source NX Server · · Score: 1

    Fortunately, I don't have to maintain the FreeNX code.
    Server side, I haven't had any problems with it once they fixed/implemented the suspend/resume functionality

  15. Re:FreeNX on Google Releases Open Source NX Server · · Score: 1

    It runs over SSL without any tricks, each client gets their own X connection, it's fast and usable over slow links...

    About the only thing it has in common with VNC is that it will let you use a mouse on your linux server remotely.
    It has much more in common with xdmcp than vnc.

  16. Re:What I Lack in Open Source Monitoring Solutions on What Would You Want In a Large-Scale Monitoring System? · · Score: 1

    You may have already done this, but the Zabbix dev team are pretty good about listening to their users when it comes to implementing new features. Send them some mail or post on the forums about adding in the syslog event handling and SNMP traps (I thought it already did the SNMP traps though). I've been using tenshi on a centralized log server along with Zabbix to handle alerts from syslog messages.

  17. Re:not sure if this is helpful, but... on What Would You Want In a Large-Scale Monitoring System? · · Score: 1

    sysstat will give you the data you're looking for, and kSar will put it into a GUI.
    You won't need all kinds of diagnostic utilities to be manually installed.

  18. Re:No reliability issues? on What Would You Want In a Large-Scale Monitoring System? · · Score: 1

    Which revision?

    i tried it for a couple of months, and rather like it, but it'd simply stop monitoring stuff, triggers wouldn't fire reliably etc.

    Try out 1.6.4. I had those problems with every version up until this one. It's been stable for the past 3 months and hasn't needed the cronjob that I setup to do a weekly restart of the server processes.

  19. Re:A more interesting question on What Would You Want In a Large-Scale Monitoring System? · · Score: 1

    When was this?
    I had that problem with zabbix for awhile too. I never did figure out why it died or what the trigger was, but I had a cron setup to poke it with a stick every week. That was kind of the only thing keeping me from bringing it out of the sandbox and using it for anything really important. I'm running 1.6.4 now on a Gentoo server (that's the sandbox) and haven't had problems since.

  20. Re:Odometer on GPS-Based System For Driving Tax Being Field Tested · · Score: 1

    My car is registered as "odometer exempt" due to the high miles on the chassis ...the odometer also doesn't work either, and the gauge cluster containing the odometer is from another car anyways. If anything, it's been rolled forward.

    Odometers aren't very reliable, and using them for taxation purposes wouldn't be backwards compatible.

  21. Re:Urban jungles on The Worst US Cities To Work In IT · · Score: 1

    Except that half the people in Clearwater are Scientologists.

    Only if you're downtown/near downtown...and then it's more like 80%
    Clearwater Scientologists don't really hassle you anyways; it's the ones in Tampa and St. Pete that are always trying to "help" you.

  22. Re:Urban jungles on The Worst US Cities To Work In IT · · Score: 1

    By conveniences, I mean things like not having to drive an hour to another town to get to a store that doesn't in "Mart" like most of my family (they live in small towns of under 50K). Having real medical facilities, and maybe even some culture (museums, theater, etc).

    That is very true...I sometimes forget places like that exist.

    As populations go, if you look at counties, yes, we are very high. If you look at the area, we actually aren't that bad. The Tampa Bay area has a population density that's well below the SFL region.

    I can count on one hand the cities in this country that have a public transportation system that doesn't blow.

    Nightlife? I thought that's what Ybor was for. Let all the club hoppers stay on that side of the bridge. Other than bars and the godawful theme park spots, what places normally stay open past 10-ish in any but handful of giant cities? We're not a twenty-something-club-hopping town, and I *like* it that way.

    ...I also consider most US cities to not really have city conveniences since they're lacking in the public transit sector. If you have to have a car to go about daily life without suffering massive inconvenience, then you're living in a suburb...even if that suburb has a name like "LA". Ybor's nightlife has been dull ever since it became "safe" in the 90s (doors have to close at 3am?)...you don't need to be a twenty-something-club-hopping town, but some variety would be nice. It's sad when one of the best nightspots is a chain restaurant/bar. Not everywhere needs to be South Beach, but it would be nice if there was something like that close by. In large cities, you can find almost anything open late at night that you would during the day...good places to get some food, coffee, or somewhere to just chill. I don't need an entire town telling me that I should either be in bed or at a bar.

    There is a noticeable difference in temperature. Our summer highs are about the same, but TB has lower lows than SFL, and our highs drop more rapidly outside of the summer months. The recent heat index spike is likely an anomaly. It certainly isn't the norm for this time of year.

    I do notice a difference between TB and SFL in the winter, but it's the summer highs that are killer.

    The area would be nice enough to come back to and retire or maybe raise a family, but it's lacking in variety and kinda dull if you're not ready for either one of those.

  23. Nobody reads subjects anyways on How Do You Sync & Manage Your Home Directories? · · Score: 1

    Fileserver and an NFS export.
    My home directories generally don't contain anything that I need distributed. If I need something in a home directory that is not there, then I will copy it there from wherever it does exist. I only really have two computers that I actively use though, so I just do document versioning by hand if there happens to be something I was working with on my laptop and desktop. This is really a problem for people? I would think that anybody who regularly uses more than two computers (desktop + laptop) would be sufficiently capable of setting up something that works for them....otherwise, they probably really don't need to be using so many different computers.

  24. Re:Funny to say the least. on The Worst US Cities To Work In IT · · Score: 1

    Maybe try Price Waterhouse, Raymond James, HSN, SAIC, Lockheed, IBM, CAE, Gunn Allen, Disney?

  25. Re:The complete list on The Worst US Cities To Work In IT · · Score: 1

    I recently was in Boston for the first time on business. I thought it was a great city as there was plenty of good food and night life as well as viable mass transit. Unfortunately there were the downsides too. I thought the city was "old" and "dirtier" than what I am accustomed to in Minneapolis and I definitely didn't feel terribly safe wandering around by myself at night. Would I live there compared to Minneapolis? Probably not but do I see why it's on both the best and the worst, yes.

    I was also recently in Boston for the first time for a few days, and found it wasn't nearly as great as all of the (ex)Bostonians make it out to be. The Subway shuts down at 12am, but bars/clubs don't close until 2am (...seriously, they close?). It also seems to be impossible to get beer at a store after 11pm. My brief stay in New York for a couple days after that was most refreshing...anybody who thinks that Boston is the greatest place in the world is seriously deluded.

    There wasn't anywhere I felt unsafe walking around at night, but I also didn't go out looking for trouble.