That's actually somewhat poignant...if I had to decide a career path in 9th grade, I probably would've gone for marine biology. I loved going to the beach and watching shark week on Discovery. Fortunately, about that same time I got my first computer and grew out of that phase. I've kinda been here ever since.
According to the awards ceremony, nobody fessed up to owning any of them. DT hypothesized that it was because once somebody got into the box, they saw that it was a PIII and felt it wasn't worth their time. He didn't give any more details though.
Perhaps I'm missing something critical here, but wouldn't the complexity of this attack make it largely un-useful. In order to switch the user's DNS back and forth between external and internal, you would need control of that user's DNS server, or at least a DNS server further up the chain. Beyond that, some knowledge of the internal network is required so the attacker knows where to go. Does the javascript exploit change the user's DNS server to something malicious?
In the event that everything lines up, this looks pretty effective, but there also seems to be many ways of getting the same results that are way easier.
How's that site look on the mountain...
on
A Geek On Everest
·
· Score: 4, Funny
(caution: total Flash site) Because nothing says "high latency, low bandwidth" like flash!
After hearing that the car qualified, I watched as the cars were rolled out of the pits and the first few laps of the race, trying to find the car with the linux sponsorship (I only saw the rendering until just now). The car was nowhere to be found, so I completely forgot about it and figured that it blew up/crashed/dq'd on Carburetion Day. Now I see that the entire tux500 project came down to a tiny sticker that was visible on TV for about 5 seconds when the car wrecked. Sounds a bit like a waste.
HP replaced the keyboard on my linux laptop two weeks ago. I have had the hard disk replaced under warranty as well. Where I work, we have 12 HP nc8000 laptops running Linux, and all of them have had hardware replaced under warranty. The original drives all went to hell, and several of the keyboards also broke. The most difficulty I've had with HP's service was when I called to get a replacement keyboard and the HP tech asked me to download windows drivers. As soon as I said Linux, I was transferred over to their "Linux group". These laptops are from the "business" section of their lineup, but I couldn't really find anything that says one line fits under a linux support matrix, and another doesn't.
That's your own fault for not having the infrastructure then. Setup keychain with ssh, and your DST patch would be done in about the time it would take to type for i in `cat serverlist`; do scp localtime adminguy@$i; ssh adminguy@$i "sudo cp localtime/etc"; done
The "infrastructure" required there is ldap authentication and keychain. If you had all of your windows servers installed so they weren't joined to a domain, then it probably would've taken you quite awhile to get them patched. It was only easier because your *nix environment doesn't sound like it was setup with any kind of thought.
This isn't a/. poll, so I'm allowed to complain about this, right? How about using opt-in instead of opt-out to begin with? Any piece of marketing I receive in my mailbox that I didn't say "yes, send me your crap" (and there actually are a few places where I told them to send me their crap), are spam. I do not consider an automatically populated checkbox at the bottom of a "you must make yourself a login account to buy something from us" page as solicitation for marketing. I shouldn't have to work to ensure your business does not send me crap I don't want...if I didn't specifically ask for it, I don't want it. I also wish that these spam buttons worked better since despite labeling ticketmaster's spam as such for every mailing they sent me in the past year, they still show up in my inbox.
I guess it depends on the government. In Florida, all government correspondence is considered public record. If the local newspaper wants to come in and look at an employee's email, they're free to do so....of course there's some bureaucratic hoops involved, but nothing that they aren't used to going through.
Only 1000? A quick check of the network share shows me about 2,600 and 900MB (and that's just my group). We have a woefully underutilized wiki setup that I can't seem to sell...any tips?
Doesn't that rule out everything except IE, then? Firefox came from Mozilla which came from Netscape which came from Mosaic which I remember seeing for sale at Babbages...maybe Safari is still fair game, or lynx and links.
Indoctrinating children and teaching them to "rat" on their fellow citizens to the government!? Why would Chna want to do such a thing!? Next thing you know they'll be controlling what people see and making up their own news to gloss over/contradict any real news that makes them look bad!
Of course, as an enterprise linux admin, the managerial definition of "support" and my definition of "support" seem mutually exclusive. Of the (very) few times where I did not get support from the community (as in 'this is broken, how do I fix it' or 'we need to do x, what product is best, and how is it installed'), the vendor was even less helpful. At least the community will say "I don't know, and you're insane for trying", etc. A vendor will say "Yeah, we can totally do that, let me go find an engineer for you". After which, you will either continue to hear "Yeah, we can totally do that, let me go find an engineer for you" until you give up or your support representative is fired, or the engineer will lead you around in circles for two weeks and waste your time for something that really, in the end, cannot be done. Sure you might have "accountability", "responsibility", "contractual obligation", etc, but none of those things will make your widget work or keep it working.
On the "providing updates", "security fixes", etc. side, you'd think that would be the easy part: 1. Updates available, 2. Log into server, 3. Download updates, 4. Install updates. I've seen Novell fail to progress from step 1 to 2 for four months, and the reason given was because they didn't have administrative control over the server hosting their updates, and nobody could talk to the Germans that did control it. I think I "updated" my gentoo boxen at home about 20 times before gaining access to the updates for which we were paying Novell.
...and if you're still interested in the difference between Server/GSX and Workstation here are a few: VM runs in the background, and you connect to it using a client. In workstation, you loaded up VMWare Workstation, ran your VM, shut down your VM, then closed workstation. With VMWare server you run the VMWare client and connect to the server running on localhost or another system and then manage it as you would in workstation. When you close the server client, the VM keeps running in the background. It is also more powerful as far as automation and creating of virtual machine groups.
I see that the auther makes no mention at all of Evolution, and while he does mention how well SLED will work with windows domains for authentication and drive mappings, he says nothing of Exchange. Unless Novell pulls something huge out of their ass and gets Evolution to work well, SLED is doomed for 99% of the workplace. Email is the one 100% gotta be working and will accept no comprimises across the board. If email is not working, then we might as well all take the day off. Evolution's integration with exchange is utter crap. It's slow, unreliable, and frequently crashes. Where I work, there are very few people running linux on their primary machines, and Evolution is to blame. Those that are still going the linux way do so with only pop email support and thunderbird. We have blackberries to manage calendars and meeting notices, so the email client is only used for email. Most(all) users do not work in this way however. When we tested out giving people linux for thier desktop OS (using the hideous NLD), the feedback we got was generall "everything works great...except Evolution, can you fix that?". Now a year later, I think all of those people have made the switch....back to XP and a functional email client. Fix that pile of crap before talking about "taking over the corporate desktop".
Slashdot Mirror
Ouch...I had to switch to minesweeper because of that.
http://nukees.com/d/19970417.html
It might *look* polished...but the phrase "world of pain" comes to mind when I think about the installations that I've seen/dealt with.
Last I heard, it is already possible to get a free college education by fulfilling a 4 year employment mandate.
What is this name of this secret company you work for, so we can view job openings and apply?
That's actually somewhat poignant...if I had to decide a career path in 9th grade, I probably would've gone for marine biology. I loved going to the beach and watching shark week on Discovery. Fortunately, about that same time I got my first computer and grew out of that phase. I've kinda been here ever since.
According to the awards ceremony, nobody fessed up to owning any of them. DT hypothesized that it was because once somebody got into the box, they saw that it was a PIII and felt it wasn't worth their time. He didn't give any more details though.
Perhaps I'm missing something critical here, but wouldn't the complexity of this attack make it largely un-useful. In order to switch the user's DNS back and forth between external and internal, you would need control of that user's DNS server, or at least a DNS server further up the chain. Beyond that, some knowledge of the internal network is required so the attacker knows where to go. Does the javascript exploit change the user's DNS server to something malicious?
In the event that everything lines up, this looks pretty effective, but there also seems to be many ways of getting the same results that are way easier.
gentoo
% objdump -x `which k3b`|grep NEEDED|wc -l
45
CentOS
$ objdump -x `which k3b`|grep NEEDED|wc -l
30
SLES 9
~> objdump -x `which k3b`|grep NEEDED|wc -l
56
Compared to the numbers that show up for rpm-based cent and sles, gentoo looks about "normal".
After hearing that the car qualified, I watched as the cars were rolled out of the pits and the first few laps of the race, trying to find the car with the linux sponsorship (I only saw the rendering until just now). The car was nowhere to be found, so I completely forgot about it and figured that it blew up/crashed/dq'd on Carburetion Day. Now I see that the entire tux500 project came down to a tiny sticker that was visible on TV for about 5 seconds when the car wrecked. Sounds a bit like a waste.
...and I'm sure he'll be just as well received as a Construction site foreman who signs on to head up IT projects.
HP replaced the keyboard on my linux laptop two weeks ago. I have had the hard disk replaced under warranty as well. Where I work, we have 12 HP nc8000 laptops running Linux, and all of them have had hardware replaced under warranty. The original drives all went to hell, and several of the keyboards also broke. The most difficulty I've had with HP's service was when I called to get a replacement keyboard and the HP tech asked me to download windows drivers. As soon as I said Linux, I was transferred over to their "Linux group". These laptops are from the "business" section of their lineup, but I couldn't really find anything that says one line fits under a linux support matrix, and another doesn't.
That's your own fault for not having the infrastructure then. Setup keychain with ssh, and your DST patch would be done in about the time it would take to type for i in `cat serverlist`; do scp localtime adminguy@$i; ssh adminguy@$i "sudo cp localtime /etc"; done
The "infrastructure" required there is ldap authentication and keychain. If you had all of your windows servers installed so they weren't joined to a domain, then it probably would've taken you quite awhile to get them patched. It was only easier because your *nix environment doesn't sound like it was setup with any kind of thought.
Most people who buy servers know better than to buy Dell. Consumers are more easily fooled however.
This isn't a /. poll, so I'm allowed to complain about this, right?
How about using opt-in instead of opt-out to begin with?
Any piece of marketing I receive in my mailbox that I didn't say "yes, send me your crap" (and there actually are a few places where I told them to send me their crap), are spam. I do not consider an automatically populated checkbox at the bottom of a "you must make yourself a login account to buy something from us" page as solicitation for marketing. I shouldn't have to work to ensure your business does not send me crap I don't want...if I didn't specifically ask for it, I don't want it. I also wish that these spam buttons worked better since despite labeling ticketmaster's spam as such for every mailing they sent me in the past year, they still show up in my inbox.
Definitely gentoo.
I guess it depends on the government. In Florida, all government correspondence is considered public record. If the local newspaper wants to come in and look at an employee's email, they're free to do so....of course there's some bureaucratic hoops involved, but nothing that they aren't used to going through.
Only 1000?
A quick check of the network share shows me about 2,600 and 900MB (and that's just my group). We have a woefully underutilized wiki setup that I can't seem to sell...any tips?
If it's that bad, and you're not fairly compensated, then why stay?
Doesn't that rule out everything except IE, then? Firefox came from Mozilla which came from Netscape which came from Mosaic which I remember seeing for sale at Babbages...maybe Safari is still fair game, or lynx and links.
Indoctrinating children and teaching them to "rat" on their fellow citizens to the government!? Why would Chna want to do such a thing!? Next thing you know they'll be controlling what people see and making up their own news to gloss over/contradict any real news that makes them look bad!
Of course, as an enterprise linux admin, the managerial definition of "support" and my definition of "support" seem mutually exclusive. Of the (very) few times where I did not get support from the community (as in 'this is broken, how do I fix it' or 'we need to do x, what product is best, and how is it installed'), the vendor was even less helpful. At least the community will say "I don't know, and you're insane for trying", etc. A vendor will say "Yeah, we can totally do that, let me go find an engineer for you". After which, you will either continue to hear "Yeah, we can totally do that, let me go find an engineer for you" until you give up or your support representative is fired, or the engineer will lead you around in circles for two weeks and waste your time for something that really, in the end, cannot be done. Sure you might have "accountability", "responsibility", "contractual obligation", etc, but none of those things will make your widget work or keep it working.
On the "providing updates", "security fixes", etc. side, you'd think that would be the easy part: 1. Updates available, 2. Log into server, 3. Download updates, 4. Install updates. I've seen Novell fail to progress from step 1 to 2 for four months, and the reason given was because they didn't have administrative control over the server hosting their updates, and nobody could talk to the Germans that did control it. I think I "updated" my gentoo boxen at home about 20 times before gaining access to the updates for which we were paying Novell.
...and if you're still interested in the difference between Server/GSX and Workstation here are a few:
VM runs in the background, and you connect to it using a client. In workstation, you loaded up VMWare Workstation, ran your VM, shut down your VM, then closed workstation. With VMWare server you run the VMWare client and connect to the server running on localhost or another system and then manage it as you would in workstation. When you close the server client, the VM keeps running in the background. It is also more powerful as far as automation and creating of virtual machine groups.
VMWare Server is GSX.
I see that the auther makes no mention at all of Evolution, and while he does mention how well SLED will work with windows domains for authentication and drive mappings, he says nothing of Exchange. Unless Novell pulls something huge out of their ass and gets Evolution to work well, SLED is doomed for 99% of the workplace. Email is the one 100% gotta be working and will accept no comprimises across the board. If email is not working, then we might as well all take the day off. Evolution's integration with exchange is utter crap. It's slow, unreliable, and frequently crashes. Where I work, there are very few people running linux on their primary machines, and Evolution is to blame. Those that are still going the linux way do so with only pop email support and thunderbird. We have blackberries to manage calendars and meeting notices, so the email client is only used for email. Most(all) users do not work in this way however. When we tested out giving people linux for thier desktop OS (using the hideous NLD), the feedback we got was generall "everything works great...except Evolution, can you fix that?". Now a year later, I think all of those people have made the switch....back to XP and a functional email client. Fix that pile of crap before talking about "taking over the corporate desktop".