Slashdot Mirror


User: CrackElf

CrackElf's activity in the archive.

Stories
0
Comments
209
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 209

  1. The biggest question is: on On Starting a Successful ISP? · · Score: 1

    What are you offering that the competition is not? Who is your target market? What will make them choose you instead of a big ol isp? (for instance, in my hometown, someone set up a very successful mom and pop that offered shell accounts and targeted unix geeks and small businesses who wanted a unix web site)
    -CrackElf

  2. Re:Alan Cox reply is quite interesting too. on Linus Responds To Mundie · · Score: 2

    Did you mean here
    -CrackElf

  3. Re:A Point Missed... on Linus Responds To Mundie · · Score: 2

    I think that you have missed the point ... A lot of things that were done in the early (pre - 90's) computer era were free, and microsft used them to get where it is today. So to attack the very culture and community that it climbed on top of to get where it is today is insane. Where would they be if not for the GUI, the command prompt, ASCII, machine language, the mouse interface, animated web sites, email, the tree file structure, and all of the other 'concepts', and 'intellectual property' that others freely shared, or at least did not sue ms for. Ms believes that they are now invincible, and can attack that which brought them into existence. Imagine if someone had patented the command prompt. Heh.
    -CrackElf

  4. Re:Did Linus get Mundie's argument? on Linus Responds To Mundie · · Score: 1

    Ahh, but ms is not a giant (in terms of innovation, not net assets) and they are standing on a lot of shoulders, who they are not paying, and who believed in the science, and who freely published their works. Seeing another entity on shoulders far away, ms loudly protests that the other entity is not charging money for their product, and thus is invalid, ignoring the fact that ms is, in fact, using technology invented by ppl who gave it back to the community. Now, dont get me wrong, i dont blame them for trying to turn a profit. I blame them for attacking the very community that provided them with the means to do what they do. I would like to see ms do without the prompt, ASCII, mice, a graphical interface, the tree structure of directories, and all of the other things that it uses from the cs community.
    -CrackElf

  5. Re:A step at a time... on Reporting Functionality for Web Applications? · · Score: 2

    I'd really recommend reviewing your requirements. Is *anybody* really going to read hundreds of pages of reports? Perhaps you should be building a more flexible query tool so that your users can get the specific data they want without having to wade through mammoth wads of paper?

    You have never worked on a government project, have you?

  6. It sounds like on Reporting Functionality for Web Applications? · · Score: 2

    the client and server on the same lan. So, I must ask, Why, why, why are you considering a web solution if you need things that html will not produce? The right solutions for the right job.
    - CrackElf

  7. My answers on Report From The 2600 Appeal Hearing · · Score: 1

    1) Writing a computer program is as much art and expression as designing a dress or building a motorcycle. Yes, it they are functional. The most beautiful parts are not evident to a lay person. The inner workings (the stitch or the bore of the engine) are not evident to those who are not in the industry. But it is commonly accepted that they are expression, and that connoisseurs of these arts can appreciate and evaluate mastery in the art. The creation of a custom motorcycle, even if it looks to the casual observer like any other bike, is, to me, and most other bikers, a beautiful work of art, the creator's vision echoed in every hand tooled part, every crafted connection, and the humm of the engine. I get the same feeling when i page through well built code, where the author put's in an elegant and efficient shortcut that i would never have dreamed of before, cleverly manages to reuse a variable to keep the memory usage down, or writes a class that will manage some big awkward data structure and creates a simpler interface to manipulate it.

    2) I am not as familiar with fair use, but if I wanted to create a desktop theme from a movie or dvd that I own (and the creators of the movie have not produced a theme) and I am not going to post it, does it not count as fair use? Or, what if I just want to use, say, a clip from a blake's 7 episode that sounds really cool as a startup sound for my computer (and, say I owned said episode on dvd, which i do not, i own them all on vhs)? is that fair use? (IANAL, and I am not sure what is strictly 'legal')
    -CrackElf

  8. Re:What about the poor workers? on Tech Support: Sucking Even More · · Score: 1

    With the bells, and the major corps, have worse tech support than the .coms and the mom and pops. And, in these big corps, upper management and stockholders get ~95% of the $ and the rest get ~5% of the cash. So, dont tell me they can not afford it. They are too cheep to hire ppl with any skill.

  9. Re:Common Sense on Send out the Clones? · · Score: 1

    Well, there are some incorrect assumptions implied by your (and other ppl's) statements.
    1) cloning does !include force growing
    2) cloning does !include mind transfer

    So, what you end up with is a baby with the same genetic makeup as the original.
    Spare arms? Not. You would have to wait 15 years for the arm to be mature enough to transplant. Spare Tacos? Not. Mind transfers do not exist. (and one is quite enough).Although it is a prerequisite to many other medical technologies, all this does is create a cute little baby (although your point about evolution is valid, there is already enough inbreeding in royalty and trailer parks :)

    Disclaimer IANADoctor

  10. William Gibson on Worlds.com Patents Quake-like Games? Kinda. · · Score: 1

    Should sue them.

  11. Re:One word on FBI Does A Cracker-Jack Job · · Score: 1

    Ahh, I have a completely different view of law, civic duty, blame (culpability), and crime. I do not blame the victim. I try to proffer advice to people before they become victims. If I am a 'victim' I ignore that fact, and try to contain and stop the current situation. Then I try to ensure that it does not happen in the future. After those are taken care of, I look for the root cause of the circumstances that led to the situation in the first place (and determine if I can effect change on it). I will definitely call the authorities afterward as there is a chance that I will get my possessions back. I might do it out of revenge as well. I personally do not believe that 'justice' (who was it that said that justice is just codified revenge?) is, in fact a deterrent in a significant percentage of crimes. Too often in our society people love to become victims and point the finger at someone else. When does it stop? When does someone say, ohh, i fucked up, i had better fix it and make sure that it does not happen again? When do the parents and teachers at columbine say 'we were not paying attention to the problems in our homes and schools' instead of saying 'those violent video games made those kids bad'.

    Your analogy is a bad example, but i will try to give you my perspective. Although I do feel that a mugger should be taken care of, I feel that this is a mere symptom of a bigger problem. The true problem is the ghetto that has been caused by the greed and stupidity of society. When the only options society gives a teen growing up in that environment are to work in sub standard conditions at minimum wage for the next 50 years or leading a life of crime to receive some of the basic necessities and some pleasures of life, the problem is bigger than a simple mugger. The mugger blames society, society blames the mugger. Blame becomes irrelevant. Personal responsibility does. In the short term, people should avoid walking through certain neighborhoods or dress and act in a manner that will deter mugging, maybe keep the bulk of their cash and id in their sock instead of their wallet. And, as for the mugger, they should determine, and someone should point out to them, what the pro's and con's are of a live of crime as opposed to forcing the system to give him/her/it a proper education so that they are armed to fight for their rights in whatever job they take. And I say that taking one guy off of the street does not change the street nor the conditions that brought about the mugging in the first place. It sure feels good, and you might get your possessions back, and you might feel safer at night. But it wont make the street any more secure, and it wont undo the fact that you were mugged.

    I bring the analogy back to the technical industry. Fix the immediate problem. Make sure that it does not happen again. Try to determine the underlying problem if there is one (like your sensitive databases are on the same server that is on the web, and thus known). Fix it if you are able. By all means go after the bad guys. Wether you feel that it is a deterrent, justice, or revenge. But I feel very strongly that if you do, you should not let that cloud the fact that you need to take responsibility for the security at your site.

    Aside: As for the stats, it shows that even with all of the additional packages (eg: rh comes with many, many optional packages), in most of the years, individual windows platforms are pretty much greater than all but the aggregate of all linux distros followed by this site. Not to mention that I believe that if you separate out actual exploits that allow for uninhibited access to the entire file system or execution of arbitrary code, ms wins the prize.

    I agree with your prognosis about corp America. Thus I believe that the long term solution to create better security in corp America is to outlaw pointy hair :)

  12. Re:One word on FBI Does A Cracker-Jack Job · · Score: 1

    Yes, a vanilla webserver is very different than a full-blown e-commerce system w/ back-end databases. The system that I was working on had to do with personnel information for the government. Since the web server was properly isolated from the distributed transaction servers which connected to the databases, the cracker was unable to gain direct access to the databases. And since I had instituted fairly sound policies, he/she/it was unable to gain access to any other servers.

    I am not perfect, and i did not create the perfect system. Nor am I trying to say that. But I am trying to say that most of the security breaches that I have observed were preventable with commonly known policies and procedures. People dont back up. They dont patch. They dont isolate systems. The dont force mixed passwords. (except for isolation, these basic prolicies will not overly compromise useability). They often assume that they will never be cracked. And then when they do get cracked the act so suprised.

    The point is that you should implement policies to minimize the risk and proceedures to minimize the damage before a security problem arises. Instead of trying to get vengeance on the script kiddies (or full fledged crackers) after the fact, since it really does little good, it wont bring back lost data, it will not retrieve lost transactions. There will always be someone else to test the limits of your security.

    BTW: The reason that I believe that NT/IIS is less secure than other systems is the raw quantity of security issues weekly as compared to other systems. Part of this has to do with the fact is that microsoft changes protocols and interfaces very rapidly, and each new protocol or interface will have its own security issues. And part of it has to do with the company's features first, fixes if we have to attitude.

  13. Re:One word on FBI Does A Cracker-Jack Job · · Score: 1

    A web server that was, at the time, my responsibility, was cracked. The system was isolated and backed up, and the damage was minimal. And, after that, I instituted better policies esp. with updates, since it was a known exploit.

    What i did not do was whine about how some malevolent cracker had gotten into my system and fucked things up. If it had not been him (or her, or it), it would have been someone else. It was my fault for not instituting better policies regarding updates and patches (and for allowing my superiors to override me and set up an NT server running IIS, which i do not feel has adequate security).

    I have been on teams where data was lost. I have been on teams where cracks have destroyed weeks of work. And in all of the cases that I personally observed, better policy and procedures regarding updates, detection, isolation, passwords, physical protection, and backups would have prevented and/or minimized damage.

    It sounded like his IT department in this case was totally unprepared for such an attack. While it does not excuse the cracker, neither does it excuse the IT department. That was my point.
    -CrackElf

    Disclaimer: I am not a genius, feakin or otherwise. If I were I would have figured out how to retire by now so that I could work on my own projects in peace.

  14. cracking on FBI Does A Cracker-Jack Job · · Score: 1

    The point of my post is that a system administrator has to have the proper policies and prepare for the most unfortunate contingencies. It does very little good going after the cracker, because the damage is already done. Yeah, it would be nice, but are you really going to be able to arrest and convict all of the script kiddies out there? One should make their system robust. Both through keeping the physical and virtual security up to date and by enacting policies and procedures that will minimize the damage. Most of the security breaches that i have seen in my carear have not been some new, unheard of exploit, and could have been prevented, or at the very least, greatly minimized by the proper policies and procedures.
    -CrackElf

  15. One word on FBI Does A Cracker-Jack Job · · Score: 1

    Backup. It should not take 72 hours to recover the data. And, with a daily backup, you should loose at the absolute most 24 hours. Security and data integrity includes regular backups. Every IT department should be ready for data loss and data leakage scenarios. Because even if you catch the cracker, most of the time it is after the damage is done.

  16. As with all power on FBI Does A Cracker-Jack Job · · Score: 1

    The power of government must be held in check, unless the government is to be trusted. And that means trusting every money grubbing power hungry politician that seeks out a place in the structure. Now, I am not saying that every person that works for the government is evil, or even that every politician is. I am just saying that those who are most likely to abuse power are the same ones who will most diligently seek it out. Those that seek it out are the most likely to aquire such power. And that means that a signifigant number of the people in power are willing to abuse it. And even if that were not the case, I do not think that we should condone the government committing the electronic equivalent of unlawful search and seizure.
    -CrackElf

  17. Re:( 4 6 9 ) 7 4 2 - 4 0 0 0 on Sean In The Middle · · Score: 1

    Look at this they boast how progressive they are with the wireless laptop computers. They even have a technology master plan!
    -CrackElf

  18. Shure ... on Red Hat Linux 7.1 Release Announcement · · Score: 1

    I get around to downloading the beta this wkend .. and they go and release the non - beta :) looking forward to playing with the new kernel.
    -CrackElf

  19. I think that a person on FBI Turns To Private Sector for Data · · Score: 1

    should be able to own their own information. I mean, these companies are making big bucks off of me. And i don't see one cent of it. I might not mind entering into a contract with a company, if I was paid, say, 3 for every dollar that they made. I think that if the big corps can pull the intellectual property bs, we should be able to, at the very least, own our own data.

  20. Re:ahhh ... at last ... on No X Box for Xmas? · · Score: 1

    Ahhh ... no, it is not idiocy, but frustration from years of bitter experience. I do not know why the troll tempts me ... but i feel the need to lay down my credentials for some reason. I have supported, developed and felt the pain of dos products, win 3.11 products, win95 products, win NT products, and win 2k products. I have administered NT, linux, sun solaris, and novell networks to a greater or lesser degree. Of the ms products, dos had the best architecture. Honestly, win95 might have made the grade if they had released the win95C first (or released the previous two as beta versions.) As for the nick, it has to do with a bunch of freaks and geeks, myself included, hanging out at 3 in the morning at the local ihop. Apparently, at that time, I quite resembled an elf on crack (not that i have ever seen an elf on crack).

    How to spot a true idiot ... someone who attacks without knowing his/her/its enemy.
    -CrackElf

    What are your credentials troll? (neither playing everquest till 4 in the morning nor hanging out in aol chatrooms count)

  21. Re:Irony on No X Box for Xmas? · · Score: 3

    And I don't how the hell to classify "ten thousand spoons when all you need is a knife"

    In the same category as having 10k ms workstations when all you need is one reliable network server?

    not ironic ... really annoying
    -CrackElf

  22. ahhh ... at last ... on No X Box for Xmas? · · Score: 1

    M$ is finally specializing in the only thing that it was ever good at ... making a gaming platform :) Of course, if they follow their pattern, only 3rd party games will be any good. And, unlike other platforms, you may have to reboot this sucker every hour or two ... heh. I wonder if you will be required to register it with a m$ workstation before it will work?
    -CrackElf

  23. Re:Constitutionality on Implications Of The International Cybercrime Treaty · · Score: 1

    I agree. I do not think that it will affect anyone who is not doing something that is illegal in both the country persecuting and the country of residence. I believe that all that it will effectivly do is allow law enforcement agencies of these nations to cooperate, which they pretty much do anyway, it just takes longer. The only interesting situations that i can see arising is the storage of information illegal in the originating country in a country where such information is not illegal. (for instance, if a German citizen put up a hate site on an american server).
    -CrackElf

  24. Re:This is an unnecessary concession on New Security Module For Kernel 2.5 · · Score: 1

    It does not discredit linux. It is enhancing it's current security. It is simply responding to the growing need for less technically apt people to implement security (and the modular approach is much less intimidating than the kernel patch approach).

    "Perhaps it's time to release a completely closed-source version of Linux. One that doesn't let hackers find holes like these. One that'll protect our vital national secrets from the eyes of those who would steal them. "

    Errr ... it did not work for microsoft ... please tell me that this is sarcasm?
    -CrackElf

  25. Re:Piracy on Tribes2 and Alpha Centauri for Linux · · Score: 1

    Actually there is a cool games store in the local mall that stocks loki games (who does best buy anyway???):)
    -CrackElf