This case was started with the win98+IE gig right? so, does that mean that the entire case is based on that code? When making the request for the code do they want to look at Win98, Win2k, WinXP,.Net Server, WinCE, what? you got like a million diffrent versions of windows. What version are you going to require them to ship 'stripped down'? Im sure MS would sell the next release of windows CE without IE to make the court happy.
well to make the/. crowd happy maybe we can get the airports to setup a ARCnet network talk about secure.. I dont even think you can get pcmcia ARCnet cards anymore..
I have been reading about everyone screaming 'ohh my god! its wireless! its not secure!' or 'the script kiddies are going to go nuts!'
You _CAN_ secure this and make sure it is only used
by 'good' people (i.e. not the #isosRus user) by simply only allowing IPSec connections out to the world this pretty much elimiates the script kiddie wishing to use 'mad bandwidth' to DoS down someone else and because all the users will be connecting to the rest of the world over a VPN to there office you dont really have to worry about them attacking things from the airport network.
Another point of view would be to require users to
'check-in' by setting up a DHCP server that hands out 'dead ips' that can only access one web page. That web page would be a registration page where the fills in the blanks (MAC address, cell phone number, home address, etc..) then a back end script creates a reservation or some other method to privide a 'live' ip for that user to access the outside world. Said airport might also consider (if said airport is not blocking everything but lets say port 80, 443, and IPSec) going with the transparent proxy server that one of the other users talked about.
Said airport could also use the customers airline ticket SN# to track the person. You could goto great trouble to attempt to curve the abuse by a few people.. Or you could watch for abuse and disable that MAC address on the network. At any rate. Cheers.
Consider this.. Provide Broadband access to multi home's such as apartments this can be done by running circuits to the location and placing your head end equipment at the location so.. if you wanted to provide DSL to a apartment community you would run out your T-1 or what ever to the community place something like a Lucent MAXDSL with two 16 port blades to start, a Xedia AP 450 (because it rocks at QOS) and a Cisco Cat 2924 to connect it all then you just need to punch down the extra pairs of utp going to the homes and boom you are providing DSL service.. You can do the same trick with cable service.. replace the DSLAM with a Nortel CMTS 5k and split off all the cable going to the apartments you will end up running in the 50-60db area.. If you REALLY want to get trick place a Nortel Shasta 5000 at your POP's to provider services like personal firewall etc.. you can also provide Wireless access if you want to.. Adaptive Broadband has about a five mile range for point to point microwave and its not very costly.. you can tie that in with cisco aeronet units to the homes these have (depending on objects in the path) a range of a few houndred yards. And dont forget to provide everything you want to be the 'one stop shop' Provide PC repair consulting shell accounts web hosting games etc..
Shasta 5k = ~$100k US
Lucent Xedia AP 450 = ~$10k US
Nortel CMTS 5k = ~$15k US
Cisco Cat 2924 = ~$1500 US
Lucent MAXDSL = ~$15k US
Private Line = ~$1600/m US
Look on backers face when you go belly up =Priceless
If you do it right this CAN make money but if you do it wrong you will end up with a $4million US burn every MONTH. This would put you in the big time.. Dialup service costs to much. and for it to be worth anything you need to keep a 4/1 customer/modem ratio...
Best of luck - DS
Well, If you WANT to go faster then 150mph you better be at the track in a custom rod. you DONT need to go that fast on PUBLIC roads. it endangers others. No matter how good of a driver you think you are.. you suck. Do you think the quto makers are making cars slower for police.. or are the police making there cars faster?
I know we are all RUNNING to copy all those DVD's we PURCHASED, but before we do that.. Why not just download a.asf or DivX copy of the latest movies out? Why does the MPAA worry about us *nix users watching DVD's we buy at the store and not about the 13 year old running a 'leet movie sight using recordings done with the family camcorder? Im shocked over this entire case. This is WHY the human race makes me sick.
Someone could start a project to create an open source DSLAM that costs next to nothing. Once that it created it would not be hard (using old home alarm copper) to create a large DSL network that anyone with a old DSL modem could plug into. DSL is not rocket science. It would be a nice project to see a user maintained and operated ISP. the 'OpenDSL/OpenISP' project or something.. I dont know.. unless you guys have the money for lots of Lucent MAX DSL's and Redbacks..
Listen to my logic..:> Most of the time I read (and Im SURE Im not alone)/. is at the office. What do most of us do? work in the 'tech sector' what kind of adds does slashdot run? Adds for cool things we... err our companys need. So! we can take some time out of our _BUSY_ days to glance at an add for five seconds as we hit the down button on our keyboard.. afterall it might be something we..err out companys want..:>
This is GREAT change one DoS attack for a new one.
on
DDoS Detection Devices
·
· Score: 1
So let me get this strate.. you place these filters at all the peering points.. so that you can detected traffic from allot of hosts directed.at one poor sucker.. Im sure that they will use some 'advanced attack sig' that will take the script kiddies all of 5 seconds to figure out.. Wont it be GREAT fun when the kiddies start using these little devices to 'filter' all the traffic going to port 80 of say slashdot.org? This sounds like a real winner.. now! WAIT! I know.. someone is going to say 'Well thats not possable!' To thi s I say right.. some brilliant person will find a way.. they will post it to bugtraq.. and watch the chaos boys and girls..
Slashdot Mirror
Check out the the CVS tree.. they are present.. I just looked at them..
This case was started with the win98+IE gig right? so, does that mean that the entire case is based on that code? When making the request for the code do they want to look at Win98, Win2k, WinXP, .Net Server, WinCE, what? you got like a million diffrent versions of windows. What version are you going to require them to ship 'stripped down'? Im sure MS would sell the next release of windows CE without IE to make the court happy.
well to make the /. crowd happy maybe we can get the airports to setup a ARCnet network talk about secure.. I dont even think you can get pcmcia ARCnet cards anymore..
I have been reading about everyone screaming 'ohh my god! its wireless! its not secure!' or 'the script kiddies are going to go nuts!' You _CAN_ secure this and make sure it is only used by 'good' people (i.e. not the #isosRus user) by simply only allowing IPSec connections out to the world this pretty much elimiates the script kiddie wishing to use 'mad bandwidth' to DoS down someone else and because all the users will be connecting to the rest of the world over a VPN to there office you dont really have to worry about them attacking things from the airport network. Another point of view would be to require users to 'check-in' by setting up a DHCP server that hands out 'dead ips' that can only access one web page. That web page would be a registration page where the fills in the blanks (MAC address, cell phone number, home address, etc..) then a back end script creates a reservation or some other method to privide a 'live' ip for that user to access the outside world. Said airport might also consider (if said airport is not blocking everything but lets say port 80, 443, and IPSec) going with the transparent proxy server that one of the other users talked about. Said airport could also use the customers airline ticket SN# to track the person. You could goto great trouble to attempt to curve the abuse by a few people.. Or you could watch for abuse and disable that MAC address on the network. At any rate. Cheers.
But everyone is forgetting the best part about being a FTE.. DOT COM STOCK OPTIONS!!!!
Consider this.. Provide Broadband access to multi home's such as apartments this can be done by running circuits to the location and placing your head end equipment at the location so.. if you wanted to provide DSL to a apartment community you would run out your T-1 or what ever to the community place something like a Lucent MAXDSL with two 16 port blades to start, a Xedia AP 450 (because it rocks at QOS) and a Cisco Cat 2924 to connect it all then you just need to punch down the extra pairs of utp going to the homes and boom you are providing DSL service.. You can do the same trick with cable service.. replace the DSLAM with a Nortel CMTS 5k and split off all the cable going to the apartments you will end up running in the 50-60db area.. If you REALLY want to get trick place a Nortel Shasta 5000 at your POP's to provider services like personal firewall etc.. you can also provide Wireless access if you want to.. Adaptive Broadband has about a five mile range for point to point microwave and its not very costly.. you can tie that in with cisco aeronet units to the homes these have (depending on objects in the path) a range of a few houndred yards. And dont forget to provide everything you want to be the 'one stop shop' Provide PC repair consulting shell accounts web hosting games etc.. Shasta 5k = ~$100k US Lucent Xedia AP 450 = ~$10k US Nortel CMTS 5k = ~$15k US Cisco Cat 2924 = ~$1500 US Lucent MAXDSL = ~$15k US Private Line = ~$1600/m US Look on backers face when you go belly up =Priceless If you do it right this CAN make money but if you do it wrong you will end up with a $4million US burn every MONTH. This would put you in the big time.. Dialup service costs to much. and for it to be worth anything you need to keep a 4/1 customer/modem ratio... Best of luck - DS
Well, If you WANT to go faster then 150mph you better be at the track in a custom rod. you DONT need to go that fast on PUBLIC roads. it endangers others. No matter how good of a driver you think you are.. you suck. Do you think the quto makers are making cars slower for police.. or are the police making there cars faster?
I know we are all RUNNING to copy all those DVD's we PURCHASED, but before we do that.. Why not just download a .asf or DivX copy of the latest movies out? Why does the MPAA worry about us *nix users watching DVD's we buy at the store and not about the 13 year old running a 'leet movie sight using recordings done with the family camcorder? Im shocked over this entire case. This is WHY the human race makes me sick.
Someone could start a project to create an open source DSLAM that costs next to nothing. Once that it created it would not be hard (using old home alarm copper) to create a large DSL network that anyone with a old DSL modem could plug into. DSL is not rocket science. It would be a nice project to see a user maintained and operated ISP. the 'OpenDSL/OpenISP' project or something.. I dont know.. unless you guys have the money for lots of Lucent MAX DSL's and Redbacks..
Listen to my logic.. :> Most of the time I read (and Im SURE Im not alone) /. is at the office. What do most of us do? work in the 'tech sector' what kind of adds does slashdot run? Adds for cool things we... err our companys need. So! we can take some time out of our _BUSY_ days to glance at an add for five seconds as we hit the down button on our keyboard.. afterall it might be something we ..err out companys want.. :>
So let me get this strate.. you place these filters at all the peering points.. so that you can detected traffic from allot of hosts directed .at one poor sucker.. Im sure that they will use some 'advanced attack sig' that will take the script kiddies all of 5 seconds to figure out.. Wont it be GREAT fun when the kiddies start using these little devices to 'filter' all the traffic going to port 80 of say slashdot.org? This sounds like a real winner.. now! WAIT! I know.. someone is going to say 'Well thats not possable!' To thi s I say right.. some brilliant person will find a way.. they will post it to bugtraq.. and watch the chaos boys and girls..