Yeah, because I want to hear KlearChannel, CleerZhanul, KleahChaunuh and an infinite number of variants on "The Greatest Hits of the ($decade - 2)s, ($decade - 1)s, And Today!"
I wonder how many times AlternaBritney's been married, and how many times she's sung about it?
So, in response, your users now write down their passwords because they can't remember them. That's not an improvement.
Yes it is, as long as the place they write them down is the "Password:" field of their mail client. Why would anyone care if their email password is a pain to type? How often do you ever actually enter it?
That's not true on every OS. From FreeBSD's init(8) man page:
The kernel runs with five different levels of security. Any super-user
process can raise the security level, but no process can lower it. The
security levels are:
-1
Permanently insecure mode - always run the system in level 0 mode. This is the default initial value.
0
Insecure mode - immutable and append-only flags may be turned off. All devices may be read or written subject to their permissions.
1
Secure mode - the system immutable and system append-only flags may not be turned off; disks for mounted file systems,/dev/mem,/dev/kmem and/dev/io (if your platform has it) may not be opened for writing; kernel modules (see kld(4)) may not be loaded or unloaded.
2
Highly secure mode - same as secure mode, plus disks may not be opened for writing (except by mount(2)) whether mounted or not. This level precludes tampering with file systems by unmounting them, but also inhibits running newfs(8) while the system is multiuser.
In addition, kernel time changes are restricted to less than or equal to one second. Attempts to change the time by more than this will log the message ``Time adjustment clamped to +1 second''.
3
Network secure mode - same as highly secure mode, plus IP packet filter rules (see ipfw(8) and ipfirewall(4)) cannot be changed and dummynet(4) configuration cannot be adjusted.
I pretty much always run production servers in securelevel three. If you set the immutable attribute on the scripts that set the securelevel at login and your firewall setup so that a hacker with root privileges can't modify them, then nothing short of a kernel flaw will let them modify your firewall. The caveat is that unless you're at the console, forget modifying your firewall ruleset. However, some of my configs have been running for years without modification (deny all by default, allow incoming TCP 22, 25 and 80, allow outgoing keep state) so that's not necessarily a problem in practice.
So, tune your firewall and set your securelevel. If your OS doesn't provide one, then convince someone to make it happen or sit down and write it yourself. I wouldn't rely on it as the sole means of defense (because kernel bugs aren't unheard of), but it certainly eliminates a huge number of security issues.
I agree with what dasunt said. An expanded explanation that says mostly the same is at pbs.org.
Re:No good IPv6 firewalls..
on
IPv6 is Here
·
· Score: 1
Not sure what you mean by "Theo-ized". It was written by Daniel Hartmeier after all, not Theo.
I kind of see OpenBSD and Theo as synonymous.:)
Also, pf is such a "solid choice" that NetBSD and FreeBSD have made own ports of it! Yes, it's a very good packet filter, and far faster than ipf ever was.
I get the impression that you're reading something into my words that I didn't intend. I've heard nothing but good things about pf but have not personally used it, so I can't give it a direct recommendation. I know that it's available as a FreeBSD port (and take your word about its availability on NetBSD), but I can't vouch that it's as well-integrated as ipf or ipfw in FreeBSD, or performs as well as on OpenBSD. I'm not saying that it's not as good, only that I have no first-hand experience with it.
Re:Unfortunately, your provider is being stingy
on
IPv6 is Here
·
· Score: 1
Actually, my provider doesn't offer IPv6. I'm using a tunnel to Hurricane Electric. I did some research when I moved off of Freenet6 and they had the best service offering at that time (and I imagine that they still do).
Science has proven, beyond a reasonable doubt, a number of things that directly conflict with Biblical teachings.
If by "biblical teachings" you mean "dogma", then I would agree with you. My Bible, however, says only that God created the universe. It mentioned nothing of the mechanism behind that event, and I've read nothing in the Bible asserting that "seven days" meant "the time it takes light to travel 1.8e11 kilometers".
As I said in another post, though, the people that you're referring to are the vocal minority. The United States is predominantly Christian, but the wide majority of us don't go around complaining about these new-fangled scientists and their evil ways - and therefore you don't notice us going about our business.
I didn't add that my nighttime reading this year has included "Six Easy Pieces", "Six Not So Easy Pieces", and "A Brief History Of Time". I assumed that it was understood that those weren't the only two things I ever read.
I can't speak for anyone else, but I get that stupid idea from any number of hardcore-atheist pin heads...
The problem is that we're both annoyed by pin heads. The ones pestering you claim to be religious, and the ones bothering me claim not to be. In both cases, the religious attribute or lack thereof has nothing to do with the fact that those people are pin heads.
Unfortunately, it seems to be popular to hold up pseudo-religious idiots as proof that all religious people act one way. That's not fair to us, and it's not fair to you. Let's agree that neither of us like annoying people of any persuasion and move on to other debates.
Where do people get this stupid (more importantly: wrong!) idea that religion is incompatible with science? I would probably be an ultraconservative fundamentalist by Slashdot readership standards, but I'd love to find out that there used to be (or still is) life on other planets.
Anti-religious Slashdotters, get this through your heads: the wide majority of mainstream Christian denominations have no opinion of extraterrestrial life, any more than they do of quantum physics, black holes, or gravity waves. I don't know where you got the idea that we sit around in church in an absolute panic that the latest scientific discovery will mean the end of our belief system, but we don't. I read the Bible when I want to learn about religion, and Scientific American when I want to learn about science. They are not incompatible, except to people like yourself.
Re:How is it implemened?
on
IPv6 is Here
·
· Score: 1
s/org/net/ and using dig, there are still no AAAA records for that server:
Re:No good IPv6 firewalls..
on
IPv6 is Here
·
· Score: 2, Informative
ipfw and ipf on FreeBSD systems both have excellent IPv6 support. OpenBSD's pf, which is a Theo-ized BSD-licensed version of ipf, should also be solid choice.
Re:v6 could help solve some net problems
on
IPv6 is Here
·
· Score: 3, Informative
Sometimes, although your source doesn't list that as as requirement. From the page you linked:
It is recommended that it be used as 16 bit internal network number and 48 bit MAC address, although sites can do what they liked.
For example, I get a/64 netblock from my IPv6 provider, but I split that out locally to three/80 subnets (LAN, DMZ, and WLAN). Everything I've read indicates that using the MAC address to autoconfig prefixes longer than/64 is impossible, so I have to manually specify the last 48 bits of the IPv6 address on each machine. Fortunately, that means that one host on the LAN is::2, another is::3, and so on.
Re:My coffee grinder needs an IP...
on
IPv6 is Here
·
· Score: 0
And that would affect the average Slashdot reader how?
for a total of about 46.5MB to get a running system with all of the documentation.
46.5MB / 4KB/sec (low estimate of the typical download rate of a 56K modem) equals a bit over 3 hours.
Frankly, if you don't have the patience to run a three-hour download, then I wouldn't want to be around the OpenBSD mailing lists and newsgroups when you start complaining that it takes too long to install it. If you're unwilling to invest that minimal amount of time then OpenBSD isn't for you.
I earn approximately $92,000, taxed at a rate 48% or $44160.
Every time some group in America wants to socialize something, and someone protests, then someone in the first group is certain to yell "but that's how they did it in Canada!"
A 50% tax rate for someone only making $92,000 is the most eloquent counter-argument I can imagine. Thanks for the information!
I believe God is a god of order and that he wouldn't let us stay confused. That would mean that we should be expecting/ looking for more scripture to clarify. What's your opinion on this?
I don't have one, except that perhaps that's what modern science is - the revelation of the mechanics of the universe that God created.
Whose 'law enforcement officers'? Any of them? What about Nazi brownshirts in a World War II game - do I read this correctly that Washington State actually passed a law to protect the Nazis?
Yeah, that's stupid, but it's the example that I'm going to bring up to friends and family every time some do-gooders try to ban something like this. No matter how "For The Children!" it may seem, I guarantee that you can find a loophole that demonstrates that the would-be law is pro-Nazi or pro-terrorist.
If legislators want to play dumb games with our laws, then turnabout is fair play. Anyone else in with me?
I bought a two-year-old Olds Intrigue for $346/mo for 48 months (zero down, but you can buy a Lamborghini for $200/mo given a large enough down payment so I won't count that). The minivan we bought to transport three kids, three dogs, and loads of luggage on regular cross-country trips was significantly more than $300.
I'm not suggesting that anyone run out and by an SUV for their daily commute from the suburbs to their downtown office (regardless of whatever strange ideas a previous poster had), and paying more than 30k for a car is as low on my priority list as on yours, but $300 per month is a pretty low threshold to set.
I agree that Amiga users are smarter, on the average. If I hadn't owned an Amiga, I never would have learned how to replace a RTC battery (they only have 10-year lifetimes), solder hardware patches onto my motherboard, or adore standards (since no Amiga software I owned supported anything more than the relevant RFCs).
Of course, that's like saying that the average Fiat owner is a better mechanic than usual. The ownership does create the intelligence, it just acts as a filter to reject those that lack it.
It's like when you go to the doctor -- when they write up their reports, they say "patient complained of..." So, even if you aren't a whiner, they say you are a complainer -- not to put you down, but because it is a term of art...
This happened in my wife's office. I don't consider it confidential because the woman involved was screaming the details for anyone and everyone to hear.
My wife was taking the medical history of a patient, and in due course asked whether the patient use tobacco, drank alcohol, or used recreational drugs. The woman said that she did not, and my wife entered "Patient denies the use of tobacco, alcohol, and recreational drugs".
I don't remember exactly why the woman later needed a copy of her medical file, but I think she'd been in an accident and the insurance company wanted to review her records. When she read "patient denies..." she threw an absolute hissy fit.
Patient: "I am a devout Hindu and I do not use drugs! How dare you say that I'm denying it!"
Office manager: "Umm, do you know what 'deny' means?"
Patient: "It means that I said it but you don't believe me!"
Office manager: disappears to go find a dictionary.
That was the day when I realized that computer guys are absolute newcomers to the world of jargon.
You must buy either all or none of the christian package.
That's fine. I believe that the Bible is the word of God. Having read quite a bit of it, I don't recall seeing:
"Yay, be it known that the manner of Creation was Spontaneous Generation. The manner of Creation was not that of Darwinian Evolution, neither that of Random Genetic Mutation."
Show me where Jesus said that the world was created in seven 24-hour periods and I'll reconsider. However, I'm fairly certain that you won't find it.
You've got a couple different types: the ones that believe the bible is the end all, be all, written word of the almighty God himself; and the ones who believe the bible is something of a history book, with some metaphorical science sprinkled in genesis and whatnot.
I think you've over-simplified significantly, although I agree with your overall message. I was raised in a Southern Baptist church and still practice that faith, which includes believing that the Bible is the literal word of God.
Having said that, I don't believe that the Bible contains all truth. For example, it leaves out molecular genetics, quantum physics, and general relativity, although I know that those exist. I also believe in Creation, although I think it took several billion years rather than 7 days (the Bible uses statements like "a day is as a thousand years" all the time, and if you use "thousand" as a placeholder for "any number so big that people from 2,500 years ago couldn't comprehend it", then I don't see why "7 days" can't mean "mind bogglingly long period of time").
Belief in the Bible as the direct words of God is no indicator that someone doesn't also believe in and value the scientific method. The latter tells me how I got here. The former tells me why.
That's really a chicken-and-egg problem. I'd love to do 3D stuff on my Linux system, but I can't because I'd have to use closed drivers and trust that they're well-behaved and will continue to be supported. If there were Free drivers for a halfway reasonable 3D card, I think a new market would bloom in no time.
Slashdot Mirror
I wonder how many times AlternaBritney's been married, and how many times she's sung about it?
Yes it is, as long as the place they write them down is the "Password:" field of their mail client. Why would anyone care if their email password is a pain to type? How often do you ever actually enter it?
I pretty much always run production servers in securelevel three. If you set the immutable attribute on the scripts that set the securelevel at login and your firewall setup so that a hacker with root privileges can't modify them, then nothing short of a kernel flaw will let them modify your firewall. The caveat is that unless you're at the console, forget modifying your firewall ruleset. However, some of my configs have been running for years without modification (deny all by default, allow incoming TCP 22, 25 and 80, allow outgoing keep state) so that's not necessarily a problem in practice.
So, tune your firewall and set your securelevel. If your OS doesn't provide one, then convince someone to make it happen or sit down and write it yourself. I wouldn't rely on it as the sole means of defense (because kernel bugs aren't unheard of), but it certainly eliminates a huge number of security issues.
I agree with what dasunt said. An expanded explanation that says mostly the same is at pbs.org.
I kind of see OpenBSD and Theo as synonymous. :)
Also, pf is such a "solid choice" that NetBSD and FreeBSD have made own ports of it! Yes, it's a very good packet filter, and far faster than ipf ever was.
I get the impression that you're reading something into my words that I didn't intend. I've heard nothing but good things about pf but have not personally used it, so I can't give it a direct recommendation. I know that it's available as a FreeBSD port (and take your word about its availability on NetBSD), but I can't vouch that it's as well-integrated as ipf or ipfw in FreeBSD, or performs as well as on OpenBSD. I'm not saying that it's not as good, only that I have no first-hand experience with it.
Actually, my provider doesn't offer IPv6. I'm using a tunnel to Hurricane Electric. I did some research when I moved off of Freenet6 and they had the best service offering at that time (and I imagine that they still do).
If by "biblical teachings" you mean "dogma", then I would agree with you. My Bible, however, says only that God created the universe. It mentioned nothing of the mechanism behind that event, and I've read nothing in the Bible asserting that "seven days" meant "the time it takes light to travel 1.8e11 kilometers".
As I said in another post, though, the people that you're referring to are the vocal minority. The United States is predominantly Christian, but the wide majority of us don't go around complaining about these new-fangled scientists and their evil ways - and therefore you don't notice us going about our business.
I didn't add that my nighttime reading this year has included "Six Easy Pieces", "Six Not So Easy Pieces", and "A Brief History Of Time". I assumed that it was understood that those weren't the only two things I ever read.
The problem is that we're both annoyed by pin heads. The ones pestering you claim to be religious, and the ones bothering me claim not to be. In both cases, the religious attribute or lack thereof has nothing to do with the fact that those people are pin heads.
Unfortunately, it seems to be popular to hold up pseudo-religious idiots as proof that all religious people act one way. That's not fair to us, and it's not fair to you. Let's agree that neither of us like annoying people of any persuasion and move on to other debates.
Anti-religious Slashdotters, get this through your heads: the wide majority of mainstream Christian denominations have no opinion of extraterrestrial life, any more than they do of quantum physics, black holes, or gravity waves. I don't know where you got the idea that we sit around in church in an absolute panic that the latest scientific discovery will mean the end of our belief system, but we don't. I read the Bible when I want to learn about religion, and Scientific American when I want to learn about science. They are not incompatible, except to people like yourself.
ipfw and ipf on FreeBSD systems both have excellent IPv6 support. OpenBSD's pf, which is a Theo-ized BSD-licensed version of ipf, should also be solid choice.
And that would affect the average Slashdot reader how?
- base35.tgz - 30MB
- bsd - 5MB
- etc35.tgz - 1.5MB
- floppy35.fs - 1.5MB
- man35.tgz - 6.5MB
- misc35.tgz - 2MB
for a total of about 46.5MB to get a running system with all of the documentation.46.5MB / 4KB/sec (low estimate of the typical download rate of a 56K modem) equals a bit over 3 hours.
Frankly, if you don't have the patience to run a three-hour download, then I wouldn't want to be around the OpenBSD mailing lists and newsgroups when you start complaining that it takes too long to install it. If you're unwilling to invest that minimal amount of time then OpenBSD isn't for you.
Insightful, my foot. That's just lazy.
Every time some group in America wants to socialize something, and someone protests, then someone in the first group is certain to yell "but that's how they did it in Canada!"
A 50% tax rate for someone only making $92,000 is the most eloquent counter-argument I can imagine. Thanks for the information!
I don't have one, except that perhaps that's what modern science is - the revelation of the mechanics of the universe that God created.
Yeah, that's stupid, but it's the example that I'm going to bring up to friends and family every time some do-gooders try to ban something like this. No matter how "For The Children!" it may seem, I guarantee that you can find a loophole that demonstrates that the would-be law is pro-Nazi or pro-terrorist.
If legislators want to play dumb games with our laws, then turnabout is fair play. Anyone else in with me?
I'm not suggesting that anyone run out and by an SUV for their daily commute from the suburbs to their downtown office (regardless of whatever strange ideas a previous poster had), and paying more than 30k for a car is as low on my priority list as on yours, but $300 per month is a pretty low threshold to set.
Of course, that's like saying that the average Fiat owner is a better mechanic than usual. The ownership does create the intelligence, it just acts as a filter to reject those that lack it.
How's that Geo Metro working out for you?
$300/month? Oh, how I wish.
This happened in my wife's office. I don't consider it confidential because the woman involved was screaming the details for anyone and everyone to hear.
My wife was taking the medical history of a patient, and in due course asked whether the patient use tobacco, drank alcohol, or used recreational drugs. The woman said that she did not, and my wife entered "Patient denies the use of tobacco, alcohol, and recreational drugs".
I don't remember exactly why the woman later needed a copy of her medical file, but I think she'd been in an accident and the insurance company wanted to review her records. When she read "patient denies..." she threw an absolute hissy fit.
Patient: "I am a devout Hindu and I do not use drugs! How dare you say that I'm denying it!"
Office manager: "Umm, do you know what 'deny' means?"
Patient: "It means that I said it but you don't believe me!"
Office manager: disappears to go find a dictionary.
That was the day when I realized that computer guys are absolute newcomers to the world of jargon.
That's fine. I believe that the Bible is the word of God. Having read quite a bit of it, I don't recall seeing:
Show me where Jesus said that the world was created in seven 24-hour periods and I'll reconsider. However, I'm fairly certain that you won't find it.
I think you've over-simplified significantly, although I agree with your overall message. I was raised in a Southern Baptist church and still practice that faith, which includes believing that the Bible is the literal word of God.
Having said that, I don't believe that the Bible contains all truth. For example, it leaves out molecular genetics, quantum physics, and general relativity, although I know that those exist. I also believe in Creation, although I think it took several billion years rather than 7 days (the Bible uses statements like "a day is as a thousand years" all the time, and if you use "thousand" as a placeholder for "any number so big that people from 2,500 years ago couldn't comprehend it", then I don't see why "7 days" can't mean "mind bogglingly long period of time").
Belief in the Bible as the direct words of God is no indicator that someone doesn't also believe in and value the scientific method. The latter tells me how I got here. The former tells me why.
That's really a chicken-and-egg problem. I'd love to do 3D stuff on my Linux system, but I can't because I'd have to use closed drivers and trust that they're well-behaved and will continue to be supported. If there were Free drivers for a halfway reasonable 3D card, I think a new market would bloom in no time.