I have a HighPoint 404 in my server at home. It has two RAID-1 arrays on it. The second array was an emergency backup for the first which has had problems. Personally I really question the HighPoint driver. It honestly makes me wish I'd gone with software RAID. It was considerably cheaper than the 3ware card but I also believe I got what I paid for. I would encourage anyone thinking about doing this to first give software RAID a try. If it doesn't perform to their expectations (and assuming they were smart enough to not paint themselves in a corner) then buy a hardware RAID card. That would be my advice.
I agree. Hey, I wrote this in my journal a while back. It talks a way to make the submission process useful. If I had the ability I'd add this to Slashcode myself. Someday maybe. Thought I'd point it out.
...I posted this to Slashdot YESTERDAY. Why is it that all the really good article submissions are rejected and the short detail-lacking ones by ACs are accepted?
You know, that's probably true. What's that phrase people say about their first day of law school? It's something about always sueing the deepest pockets or something like that.
Exactly. Insurance companies are looking for any way to claim that you are a risk and drop your coverage without giving you a pro-rated refund on your premiums. For example my parents just built a log home. Farm Bureau will not insure if it they put a wood-burning stove in that house. My folks built in rural America. It's not exactly across the street from the White House. It's asinine for Farm Bureau to think that a wood-burning stove is any more of a risk than a propane furnace. They will also deny your automotive claim if you failed to have every single recall maintenance done on your vehicle, even if it was unrelated to the claim. That's an interesting one. Insurance companies are a legalized crime organization as far as I'm concerned. I hope to someday be rich enough to be self-insured. Someday...:-)
My understanding is that they are quickly becoming an intrigal part of the on-board computer. If that's true then removal might not be very safe and would definitely void your warranty....
It would be relatively easy for a responsible company to prove that they didn't send the spam. At that point they could countersue Company A for damages and libel. All this talk about spoofing in email is really bullshit. You can't spoof everything. I've been fighting spam professionally for a good many years now. I archive and report tens of thousands of pieces of spam each year. It's not hard to find out where a piece of spam came from if you know where and what to look for.
No problem. I don't mean to sound testy either. Just been a long day.
The reason few domains ever end up in the GTLD without a NS is because most registrars require it. There aren't many reasons to not have one. I can't think of many functional differences between having a bogus NS, having a valid NS with no zone on the NS box, having a valid NS with a null zone on the NS box, or having no NS at all. I believe the reason dorkslayers.com removed their NS records is the same reason they shut down their DNSBL services. They were DDoSed to hell and back. Leaving up even one host with valid NS information (even if it was the NS itself) was a point for spammers turned script kiddies to attack. I don't know if Joker allows domains to not have an NS or if it was something they put through special for dorkslayers.com. That would be one way a domain could not have any NS records.
The other most simple way is for an error to be made somewhere along the way like that one member of NANOG pointed out. I suppose it could be caused by human error, script problems, race condition with change being made at the exact second a lock isn't in place, or who knows what. It's apparently happened before though. Other registrars should definitely use the SRS system though. That sounds like the only truely fool-proof way. Now if only there was a Verislime-proof way....
I mistyped dorkslayers.com once. I typed it correctly the other 4 times I used the domain.
dorkslayers.com did not have NS records in the GTLD zone when Verisign added the wildcard records. The was quite a popular topic among mail administrators shortly after the wildcards were added. There's discussion about it here on the NANOG list, and here on the SpamAssassin discussion mailing list, and here in comp.mail.sendmail, and here in news.admin.net-abuse.email. There are others but these are the ones I frequent.
That said since dorkslayers.com (spelled it right this time) didn't have any NS records in the root GTLD when Verislime added the wildcards.com/.net all queries for the dorkslayers.com domain resulted with a positive response. This included any and all queries for anything hosts and subdomains. To use your example, randomjunk.dorkslayers.com would in fact have resolved to 64.94.110.11 before Bill, the dorkslayers.com owner, re-registered NS servers for dorkslayers.com.
There is another gentleman on the NANOG mailing list that has mentioned more than once since the Verislime incident that he has a client with a domain in use that somehow has gotten left out of the GTLD.com zone. I don't remember his name and I don't really want to sort through the lengthy threads about Verisign to find the posts. They are in the archives though. He discussed the lengths he's gone to to try and get Verisign to fix the problem in excrutiating detail. It sounded like he wasn't having much fun.
Let me make sure I answered all your points for my own sanity's sake. Paragraph 1, check. Paragraph 2, check. Paragraph 3, check. Paragraph 4, check. And Paragraph 5, clarified. Hope that helps.
This comes to you via a posting to the North American Network Operator's Group (NANOG) by Chris Roberts. The author of the HOWTO is Martin A. Brooks. Thanks Martin!
Call 0800-032-2101 and select option 2 for Support.
Explain to the engineer that you have typed in an non-existant domain name and been directed to their sitefinder service.
Explain that you have read the "Terms of Use" and do not agree to abide by them.
Explain that, as you don't agree to the ToU, you are explicitly forbidden from using their service.
Ask them to exclude your IP block from those that will be given the sitefinder IP rather than NXDOMAIN.
Give them your name, company (if appropriate) and a contact telephone number.
I believe ICANN is the authority now. DoC still has some input at some level but I'm not sure what. I don't know how all that works.
If ya'll are interested in real technical discussion about Verislime's actions and the damage it has caused then I encourage you to read the archives of the North American Network Operators mailing list for the past week or so. I would not recommend joining the list and asking questions though. The list is comprised of professionals who really don't have time for novice questions. Not to sound harsh but that's the truth. The list FAQ points it out as well (see #3).
And even your facts aren't "techincally" straight. Not all domains have NS records in the GTLD root servers. dorkslayers.com was a prime example of this. As soon as Verislime implemented their hijacking of.com/.net all dorkslayers.com lookups were suddenly returned as true. Ie all queries against any dorkslayer.com DNSBL gave a return response which then left older installations of SpamAssassin rejecting mail. The dorkslayers.com DNSBLs have been down for some time. The maintainer of dorkslayers.com still owned the domain; it was still a valid registered domain. However it had no NS records of any kind. Verislime's Netfinder "service" didn't care though. The wildcard records covered everything that wasn't explicitly covered with an NS record. They effectively hijacked dorkslayers.com.
It's even more interesting for them to come back with that when they themselves didn't do the very same data gathering and research before implementing the damned thing.
A wildcard GTLD was part of.museum's charter. Therefore it was approved and everything is fine. It was never part of the.com/.net GTLD contract and is not an authorized use of the domains.
Would seeding addresses invalidate your research? Earlier this summer I seeded a little over 525,000 spamtrap addresses to numerous spammer's remove forms. I get more spam than I know what to do with now.:-) I report it all via Razor2 and Pyzor. I was also auto-forwarding it to the FTC and Bob the NANAS bot. Unfortunately my auto-forwarding scripts can't handle bounces so when I was Joe Jobbed I was forwarding the bounces to the FTC and NANAS. I haven't had time to fix that minor detail yet though. If this wouldn't invalidate your research I'd be glad to show you how I did it. If you want me to help, reply to this post.
I hate to sound nieve but isn't this what the US Embassy is for? Aren't US diplomats supposed to do all their secure business via US Embassy resources?
Server keyboards, like those that come with IBM or Dell servers, usually don't have all those BS keys on them. Try searching for OEM keyboards. I'm using an OEM keyboard I got off of ebay that originally came with an IBM server (eServer I think). It only cost me $5 plus shipping. It's action is really nice and it has no BS keys.
My server has a Logitech "Corded Deluxe Access Keyboard", P/N 867091-1100. It has 3 BS buttons but they are out of the way. It also has a nice action.
Give NewEgg's keyboard section a look. They have one for $19 w/ mouse that's called "Logitech Deluxe Desktop (Deluxe Keyboard & S69 Mouse) - OEM." I don't see any BS buttons on it other than the Windows key. If you're like me you glue that bitchin place anyways.
I love it when the media pull a stunt like they did @ Columbine. Any idea how old DOOM was in 1999. It was 6 years old. 6! Do you think any self-respecting gamer (especially a teen) would play a 6 year old game? No. If I went out and shot somebody today the media would say it's because I played Pac Man in my youth. It's utterly irrelevant. It sells newspapers though.
That sounds exactly like all the host-based personal firewall products on the market today. They have to tell you every little thing that's going on all the time and they absolutely MUST sensationalize EVERYTHING.
"Oh dear God! You've been pinged! The sky is falling!! Whew. It's a damn good thing you installed our over-priced over-hyped personal firewall thingy because we just saved your ass!"
Think I'm kidding? Don't. These ass clowns prey on guilible users that simply don't know any better. It's just like what many auto repair shops do to those people whom they don't think know jack about cars.
The belt on your carburetor are about to break. We also had to grease you exhaust bearings and reprogram your warp convertors. That'll be $700 please.
If only we can eliminate stupid people and those that would prey on them (including the media) the world would be a much better place.
Actually only the newest TLDs to do this are com and net. Numerous ccTLDs and one additional gTLD already do this. The complete list of TLDs that return bogus information follows:
This is just like the recent ruling by U.S. District Judge Alvin Hellerstein that said that lawsuits blaming airlines, the Port Authority and the Boeing Co. for injuries and deaths in the September 11 terrorist attacks can proceed. Talk about absurd. How the hell could Boeing have predicted that fanatics might take over an airplane and crash it into a building. Boeing just built the plane and sold to an airline? How the hell could NYC's Port Authority have predicted that fanatics would crash a plane into a building, not to mention how they hell were they supposed to guard against it? This is complete and utter bullshit. Why not sue International for constructing the chassis that Ryder builds their rental vans on that Timothy McVeigh used in the Oklahoma City bombing? Why not sue Stanley for making the side cutters and wire strippers that Wal-Mart sells to a group of terrorists hell bent on creating a bomb? There's a wacko driving around Wichita for the past couple of weeks trying to pick up little girls at school bus stops. Why shouldn't the parents of those little girls sue Ford for making the vehicle that this nut job used to try and pick up girls? Why not sue McDonalds or Pizza Hut for providing food to any old wack job that commits a crime? It's bullshit. If this is the message that this country is sending to the international community then I don't know if US citizenship is really worth claiming. The whole damned legal system is seriously fucked up.
Slashdot Mirror
I have a HighPoint 404 in my server at home. It has two RAID-1 arrays on it. The second array was an emergency backup for the first which has had problems. Personally I really question the HighPoint driver. It honestly makes me wish I'd gone with software RAID. It was considerably cheaper than the 3ware card but I also believe I got what I paid for. I would encourage anyone thinking about doing this to first give software RAID a try. If it doesn't perform to their expectations (and assuming they were smart enough to not paint themselves in a corner) then buy a hardware RAID card. That would be my advice.
I agree. Hey, I wrote this in my journal a while back. It talks a way to make the submission process useful. If I had the ability I'd add this to Slashcode myself. Someday maybe. Thought I'd point it out.
...I posted this to Slashdot YESTERDAY. Why is it that all the really good article submissions are rejected and the short detail-lacking ones by ACs are accepted?
Hey that's good to know. Thanks! This could become VERY useful....
You know, that's probably true. What's that phrase people say about their first day of law school? It's something about always sueing the deepest pockets or something like that.
Exactly. Insurance companies are looking for any way to claim that you are a risk and drop your coverage without giving you a pro-rated refund on your premiums. For example my parents just built a log home. Farm Bureau will not insure if it they put a wood-burning stove in that house. My folks built in rural America. It's not exactly across the street from the White House. It's asinine for Farm Bureau to think that a wood-burning stove is any more of a risk than a propane furnace. They will also deny your automotive claim if you failed to have every single recall maintenance done on your vehicle, even if it was unrelated to the claim. That's an interesting one. Insurance companies are a legalized crime organization as far as I'm concerned. I hope to someday be rich enough to be self-insured. Someday... :-)
My understanding is that they are quickly becoming an intrigal part of the on-board computer. If that's true then removal might not be very safe and would definitely void your warranty....
It would be relatively easy for a responsible company to prove that they didn't send the spam. At that point they could countersue Company A for damages and libel. All this talk about spoofing in email is really bullshit. You can't spoof everything. I've been fighting spam professionally for a good many years now. I archive and report tens of thousands of pieces of spam each year. It's not hard to find out where a piece of spam came from if you know where and what to look for.
Strip the leading 0 and quit complaining. :-)
The reason few domains ever end up in the GTLD without a NS is because most registrars require it. There aren't many reasons to not have one. I can't think of many functional differences between having a bogus NS, having a valid NS with no zone on the NS box, having a valid NS with a null zone on the NS box, or having no NS at all. I believe the reason dorkslayers.com removed their NS records is the same reason they shut down their DNSBL services. They were DDoSed to hell and back. Leaving up even one host with valid NS information (even if it was the NS itself) was a point for spammers turned script kiddies to attack. I don't know if Joker allows domains to not have an NS or if it was something they put through special for dorkslayers.com. That would be one way a domain could not have any NS records.
The other most simple way is for an error to be made somewhere along the way like that one member of NANOG pointed out. I suppose it could be caused by human error, script problems, race condition with change being made at the exact second a lock isn't in place, or who knows what. It's apparently happened before though. Other registrars should definitely use the SRS system though. That sounds like the only truely fool-proof way. Now if only there was a Verislime-proof way....
dorkslayers.com did not have NS records in the GTLD zone when Verisign added the wildcard records. The was quite a popular topic among mail administrators shortly after the wildcards were added. There's discussion about it here on the NANOG list, and here on the SpamAssassin discussion mailing list, and here in comp.mail.sendmail, and here in news.admin.net-abuse.email. There are others but these are the ones I frequent.
That said since dorkslayers.com (spelled it right this time) didn't have any NS records in the root GTLD when Verislime added the wildcards .com/.net all queries for the dorkslayers.com domain resulted with a positive response. This included any and all queries for anything hosts and subdomains. To use your example, randomjunk.dorkslayers.com would in fact have resolved to 64.94.110.11 before Bill, the dorkslayers.com owner, re-registered NS servers for dorkslayers.com.
There is another gentleman on the NANOG mailing list that has mentioned more than once since the Verislime incident that he has a client with a domain in use that somehow has gotten left out of the GTLD .com zone. I don't remember his name and I don't really want to sort through the lengthy threads about Verisign to find the posts. They are in the archives though. He discussed the lengths he's gone to to try and get Verisign to fix the problem in excrutiating detail. It sounded like he wasn't having much fun.
Let me make sure I answered all your points for my own sanity's sake. Paragraph 1, check. Paragraph 2, check. Paragraph 3, check. Paragraph 4, check. And Paragraph 5, clarified. Hope that helps.
If ya'll are interested in real technical discussion about Verislime's actions and the damage it has caused then I encourage you to read the archives of the North American Network Operators mailing list for the past week or so. I would not recommend joining the list and asking questions though. The list is comprised of professionals who really don't have time for novice questions. Not to sound harsh but that's the truth. The list FAQ points it out as well (see #3).
And even your facts aren't "techincally" straight. Not all domains have NS records in the GTLD root servers. dorkslayers.com was a prime example of this. As soon as Verislime implemented their hijacking of .com/.net all dorkslayers.com lookups were suddenly returned as true. Ie all queries against any dorkslayer.com DNSBL gave a return response which then left older installations of SpamAssassin rejecting mail. The dorkslayers.com DNSBLs have been down for some time. The maintainer of dorkslayers.com still owned the domain; it was still a valid registered domain. However it had no NS records of any kind. Verislime's Netfinder "service" didn't care though. The wildcard records covered everything that wasn't explicitly covered with an NS record. They effectively hijacked dorkslayers.com.
It's even more interesting for them to come back with that when they themselves didn't do the very same data gathering and research before implementing the damned thing.
A wildcard GTLD was part of .museum's charter. Therefore it was approved and everything is fine. It was never part of the .com/.net GTLD contract and is not an authorized use of the domains.
Would seeding addresses invalidate your research? Earlier this summer I seeded a little over 525,000 spamtrap addresses to numerous spammer's remove forms. I get more spam than I know what to do with now. :-) I report it all via Razor2 and Pyzor. I was also auto-forwarding it to the FTC and Bob the NANAS bot. Unfortunately my auto-forwarding scripts can't handle bounces so when I was Joe Jobbed I was forwarding the bounces to the FTC and NANAS. I haven't had time to fix that minor detail yet though. If this wouldn't invalidate your research I'd be glad to show you how I did it. If you want me to help, reply to this post.
I hate to sound nieve but isn't this what the US Embassy is for? Aren't US diplomats supposed to do all their secure business via US Embassy resources?
My server has a Logitech "Corded Deluxe Access Keyboard", P/N 867091-1100. It has 3 BS buttons but they are out of the way. It also has a nice action.
Give NewEgg's keyboard section a look. They have one for $19 w/ mouse that's called "Logitech Deluxe Desktop (Deluxe Keyboard & S69 Mouse) - OEM." I don't see any BS buttons on it other than the Windows key. If you're like me you glue that bitchin place anyways.
I love it when the media pull a stunt like they did @ Columbine. Any idea how old DOOM was in 1999. It was 6 years old. 6! Do you think any self-respecting gamer (especially a teen) would play a 6 year old game? No. If I went out and shot somebody today the media would say it's because I played Pac Man in my youth. It's utterly irrelevant. It sells newspapers though.
Once again parents are trying to pass the buck for their own errors. I hope the judge seriously slaps these people down.
"Oh dear God! You've been pinged! The sky is falling!! Whew. It's a damn good thing you installed our over-priced over-hyped personal firewall thingy because we just saved your ass!"
Think I'm kidding? Don't. These ass clowns prey on guilible users that simply don't know any better. It's just like what many auto repair shops do to those people whom they don't think know jack about cars.
The belt on your carburetor are about to break. We also had to grease you exhaust bearings and reprogram your warp convertors. That'll be $700 please.
If only we can eliminate stupid people and those that would prey on them (including the media) the world would be a much better place.
gTLDs (Generic Top-Level Domains):
ccTLDsCountry-Code Top-Level Domains:
Whew. I don't know about the rest of you but knowing that Theo has a new shirt to wear sets my mnd at ease. :-)
This is just like the recent ruling by U.S. District Judge Alvin Hellerstein that said that lawsuits blaming airlines, the Port Authority and the Boeing Co. for injuries and deaths in the September 11 terrorist attacks can proceed. Talk about absurd. How the hell could Boeing have predicted that fanatics might take over an airplane and crash it into a building. Boeing just built the plane and sold to an airline? How the hell could NYC's Port Authority have predicted that fanatics would crash a plane into a building, not to mention how they hell were they supposed to guard against it? This is complete and utter bullshit. Why not sue International for constructing the chassis that Ryder builds their rental vans on that Timothy McVeigh used in the Oklahoma City bombing? Why not sue Stanley for making the side cutters and wire strippers that Wal-Mart sells to a group of terrorists hell bent on creating a bomb? There's a wacko driving around Wichita for the past couple of weeks trying to pick up little girls at school bus stops. Why shouldn't the parents of those little girls sue Ford for making the vehicle that this nut job used to try and pick up girls? Why not sue McDonalds or Pizza Hut for providing food to any old wack job that commits a crime? It's bullshit. If this is the message that this country is sending to the international community then I don't know if US citizenship is really worth claiming. The whole damned legal system is seriously fucked up.