An important difference between WASD en game pad is, that with WASD you will use most of your fingers for movement, while on a game pad you are limited to only use your thumbs.
In what way is their 'social retardedness' their own fault? Does it matter they have Aspergers or not? What's the difference of a person having Aspergers and a person showing the symptoms of Aspergers? How can you tell the difference?
Only logon information about accounts that have logged on onto that device are being cached. Not all accounts, that would too resource intensive. Also that information is not obtained from a domain controller, but from user input.
So you can only compromise accounts that are used on that computer. However if you could steal a domain controller than you are correct. But the same goes for authentication servers from any other vendor.
If you read the article closely, you will notice it is not about the productions systems, but the testing systems of the Quality Assurance Division.
It makes sense to use VM's for Q & A just for flexibility. If your production storage is about a few hunderd PB, 100 TB for testing seems obvious. When you run production on the scale of eBay, Doing Q & A work on just a server or 2 doesn't work out.
I suspect they need 4000 VM's for Q & A, for more than just simulating the production system. For instance they are likely to test on multiple EBay instances for multiple projects or versions of their own software. They might also need a lot of systems to test data replication. And of course they need to simulate a lot of simultaneous clients for performance and reliability test, you need systems for that too. When Q & A work is done on that scale you need to collect, store, and analyze huge amounts of testing data.
Of course when this works out fine, eventually the production storage will likely be equipped with SSD technology as well.
I bet 90% of them have just changed the default route back anyway.
The Grandparent does not talk about changing the default route, but about forcing all trafic, including local traffic which does not use the default route, through the VPN. The VPN client forces this at lower level than IP.
Yes I, this is evil. A better solution is to use Remote Desktop Service through SSL or similar. This way the local webbrowser at home never connect to the business netwerk. However the exploit is stil posible if you use your laptop at home and at work. (Or visit the unsafe websites with your work computer.
No, this would be even worse.
The effect is that every computer will lose internet access at the same time. Which is much like a inverted DDOS attack. Most people will like this.
On the positive side, all internet bandwidth will be available for patch distribution...
Agreed. But I should note that SQL Server 2000/2005 Developer (and trial) editions also run on the Windows Pro operating systems. They include all the functionality of Enterprise Edition (but are licensed for developing and testing purposes only). The trial edition is free, but expires after 180 days. A developer edition license costs about € 65. A license may also be included in a MSDN subscription.
The express edition is limited to 4GB per database (max 16 databases). The product is targeted as an replacement of MSDE 2000, which can be bundled with desktop software (for example for accounting software). But is also marketed to be used for small websites (to compete with free DMBS's). Remote connections are disabled by default.
They do not take into account that a selfrespecting Unix/Linux sysadmin will automate everything he/she can and will not repeat everyday mundane tasks.
I see no reason why a selfrespecting Windows sysadmin would not do the same.
That is the damn difference between a high level Unix sysadmin and a Windows sysadmin in the first place.
Actually, to a high level sysadmin there isn't a lot of difference between administrating Windows and Unix like operating systems.
It's a prejudice to assume that scripting like on Unix is not possible on Windows. On the contrary, many Windows sysadmins use scripting tools to automate everyday mundane tasks. In fact even the archaic MS-DOS from the eighties has its own scripting language built in. Which is used even today by nearly all Windows sysadmins.
It can be a pain, but not as much as you might think. You can process all files under a given directory in one go. The hard part is determining exactly what files you need which permissions for.
Windows 2000 NTFS (and the registry) has a feature called inheritance, which makes it easier to manage permissions.
Windows 2000 also introduces security templates and group policies which can be used to standardize filesystem (and registry) permissions, a la Cfengine.
You can use auditing to log which files are accessed by which program and in what way.
Most Windows developers (and also the rest of the world) are either not aware of the security problems or just very lazy. They always log on as an administrator (or run Windows 98).
It is not a requirement that the the program will run as an unprivileged user. Just put it in the manual that you must run it as an administrator or check at startup and cowardly refuse to run if your not administrator, if it is realy needed or not. They don't care.
Besides everyone runs at administrator, anyway. Security is for big important businesses, but not for home users or gamers. That's silly. Everyone knows that, right?
Slashdot Mirror
There's an app for that.
They use to shoot people after playing video games.
Explains the sharp corners of Microsoft...
Nobody uses WordPad. In fact non geek people don't even know its existence.
An important difference between WASD en game pad is, that with WASD you will use most of your fingers for movement, while on a game pad you are limited to only use your thumbs.
Works with every laptop.
+---------+
| Sarcasm |
+----+----+
|
|
In what way is their 'social retardedness' their own fault? Does it matter they have Aspergers or not? What's the difference of a person having Aspergers and a person showing the symptoms of Aspergers? How can you tell the difference?
Only logon information about accounts that have logged on onto that device are being cached. Not all accounts, that would too resource intensive. Also that information is not obtained from a domain controller, but from user input.
So you can only compromise accounts that are used on that computer. However if you could steal a domain controller than you are correct. But the same goes for authentication servers from any other vendor.
It reduces the risk of sharing or losing passwords. Also it discourges using the same password for multiple accounts.
You are correct.
If you read the article closely, you will notice it is not about the productions systems, but the testing systems of the Quality Assurance Division.
It makes sense to use VM's for Q & A just for flexibility. If your production storage is about a few hunderd PB, 100 TB for testing seems obvious. When you run production on the scale of eBay, Doing Q & A work on just a server or 2 doesn't work out.
I suspect they need 4000 VM's for Q & A, for more than just simulating the production system. For instance they are likely to test on multiple EBay instances for multiple projects or versions of their own software. They might also need a lot of systems to test data replication. And of course they need to simulate a lot of simultaneous clients for performance and reliability test, you need systems for that too. When Q & A work is done on that scale you need to collect, store, and analyze huge amounts of testing data.
Of course when this works out fine, eventually the production storage will likely be equipped with SSD technology as well.
Half of it is reserved for the kernel and the other half is reserved for user applications.
Both are limited to 2 GiB on 32-bit Windows.
Replace the entire computer. Is that thorough enough?
The Grandparent does not talk about changing the default route, but about forcing all trafic, including local traffic which does not use the default route, through the VPN. The VPN client forces this at lower level than IP.
Yes I, this is evil. A better solution is to use Remote Desktop Service through SSL or similar. This way the local webbrowser at home never connect to the business netwerk. However the exploit is stil posible if you use your laptop at home and at work. (Or visit the unsafe websites with your work computer.
Another, less commonly, used word in English is fixed disk, meaning non removeable, or permanent, disk.
Aha! I knew it, digital is just another of those meaningless marketing terms.
No, the 30 GB drive runs 20 times faster out of disk space than the 750 GB one.
Guess I should have used that preview button. Obviously it should be read as most people will not like this.
No, this would be even worse. The effect is that every computer will lose internet access at the same time. Which is much like a inverted DDOS attack. Most people will like this. On the positive side, all internet bandwidth will be available for patch distribution...
Agreed. But I should note that SQL Server 2000/2005 Developer (and trial) editions also run on the Windows Pro operating systems. They include all the functionality of Enterprise Edition (but are licensed for developing and testing purposes only). The trial edition is free, but expires after 180 days. A developer edition license costs about € 65. A license may also be included in a MSDN subscription.
The express edition is limited to 4GB per database (max 16 databases). The product is targeted as an replacement of MSDE 2000, which can be bundled with desktop software (for example for accounting software). But is also marketed to be used for small websites (to compete with free DMBS's). Remote connections are disabled by default.
They do not take into account that a selfrespecting Unix/Linux sysadmin will automate everything he/she can and will not repeat everyday mundane tasks.
I see no reason why a selfrespecting Windows sysadmin would not do the same.
That is the damn difference between a high level Unix sysadmin and a Windows sysadmin in the first place.
Actually, to a high level sysadmin there isn't a lot of difference between administrating Windows and Unix like operating systems.
It's a prejudice to assume that scripting like on Unix is not possible on Windows. On the contrary, many Windows sysadmins use scripting tools to automate everyday mundane tasks. In fact even the archaic MS-DOS from the eighties has its own scripting language built in. Which is used even today by nearly all Windows sysadmins.
The OEM license for Windows XP forbids this.
A more expensive retail license allows this.
For an upgraded license, it depends on if the upgraded license was full or OEM.
It can be a pain, but not as much as you might think. You can process all files under a given directory in one go. The hard part is determining exactly what files you need which permissions for.
Windows 2000 NTFS (and the registry) has a feature called inheritance, which makes it easier to manage permissions.
Windows 2000 also introduces security templates and group policies which can be used to standardize filesystem (and registry) permissions, a la Cfengine.
You can use auditing to log which files are accessed by which program and in what way.
Most Windows developers (and also the rest of the world) are either not aware of the security problems or just very lazy. They always log on as an administrator (or run Windows 98).
It is not a requirement that the the program will run as an unprivileged user. Just put it in the manual that you must run it as an administrator or check at startup and cowardly refuse to run if your not administrator, if it is realy needed or not. They don't care.
Besides everyone runs at administrator, anyway. Security is for big important businesses, but not for home users or gamers. That's silly. Everyone knows that, right?
Please, Microsoft, *disable* ActiveX out of the box
Please, website designers and developers, *do not use* ActiveX at all.