Re:Clever new tools for kernel config
on
Linux 2.6.26 Out
·
· Score: 1
Actually this might be something to go for. Just have a completely modular kernel, everything as modules, then after boot you'd just check which modules actually were loaded and somehow map that to kernel configuration options.
Re:Clever new tools for kernel config
on
Linux 2.6.26 Out
·
· Score: 4, Interesting
Aye - would be great if there would be tool that I could eg. say "Ok, right now, at this moment, I have all my hot-pluggable USB/PCI devices plugged in, please detect and configure the options as needed". After all, that's what I do with a new comp: use lspci and similar tools to find out what's in the guts of the machine and then set options appropriately in menuconfig.
When are the patches at http://people.redhat.com/heinzm/sw/dm/dm-raid45/ going to be included? I'm running a dualboot box so have to run the BIOS-fakeraid that works with Windows. I had to run through a few hoops to get it working with 2.6.24 (https://bugs.launchpad.net/ubuntu/+source/linux/+bug/220493 comments) and for now it works...but what if I want to update kernel at some point?
Promise that amongst everyone who shares their system info, once a week/month/year someone wins a prize (no need to ask delivery info in advance, just that "If you win, you'll be notified via this program and then asked to enter delivery address"). The price can be anything cheap and token-ish (eg. in games, some bonus freebie item), as long as there's something.
The goal of transparency to the transport layer means that the user will not have to configure anything, just install the encryption software and go. It also makes sure that encrypted traffic will travel over IP carriers without trouble (except in the case of mandatory transparent proxying). Current IP-transport encryption using tunneling or IPSec do not have the same property. Many low-cost ISPs filter IP protocols and TCP/UDP ports to block encypted traffic and there is always a cost to the user in configuring key-exchange, NAT-traversal and such. Anonymity can be provided by existing IP-anonymizing networks such as tor and i2p since the encryption is transport-independent.
So they are planning to roll out zeroconf IPSec that doesn't NEED to have specific support for NAT traversal. Now, "NAT Traversal" technically just means UDP encapsulation (which in turn results in all fancy MTU problems).
It seems that they are only interested in encrypting the TCP/UDP payload, with key negotiation happening at the start of the session (SYN/ACK packets for TCP, and as a completely separate negotiation with UDP).
If they can go with this, I sure hope they write an informative RFC..
I recently bought a new, up-to-date PC with dual cores and all the bells and whistles. After playing nothing but WoW, Civ and other less-powerhungry games on my trusty old 1,2 GHz Celeron and Win'98, I could finally check out all the games I missed.
So far: Half-Life 2, Orange Box (consisting of EP1&EP2 too, and Portal). Love it. Also love Steam. It works. Another case: Galactic Civilizations 2. Stardock's Stardock Central (and the parallel, Impulse), rock.
NO Copy protection. No DVD in drive bullshit. No running through the hoops. Before, when I bought a game it was always running via gamecopyworld.com to get the crack. Another game that I got was Crysis. Fine, gamecopyworld has cracks - except there isn't one for the 64-bit 1.21 version. So I was stuck with the DVD in drive..
Then, as an old Baldur's Gate&Torment&Kotor fan, I heard that Bioware had done a new RPG - Mass Effect. To avoid hassle, I googled for what copy protection it's using - and read about the whole phone-home-schema. I can run Steam in offline mode. Stardock Central doesn't phone home. But these guys seriously thought that spyware in your PC is ok?!
If you actually want to enjoy, pick something that you actually have an interest in. Ton of anime junkies have picked up Japanese for example. If you like Bollywood, learn Hindi. And so on...
- Software production&design (Using Rational Rose instead of emacs work for you...leave the coding part for monkeys)
- Networks & Protocols (TCL gets you far here for running eg. simulators)
- Digital signal processing (all you need is Matlab)
- Usability research&development
- Standardization
-...
Granted, most of this requires some "programming", but that counts, at tops, some shell scripting and really basic stuff.
I'm a longtime fan of sorts of this one. The "ergoforce" concept actually works and makes typing feel nice (idea is that keys that are pressed with index finger require more force than the ones pressed with your little finger).
Problem: I cannot find these anywhere anymore - at least not in Europe. No hope in getting the Finnish/Swedish keyboard layout (I've searched around) but it seems that they are not anywhere anymore. Some webstores have them in listings and usually always out of stock.
So: What's a good keyboard that would have similar ergonomic feel (I *hate* MS Natural keyboards with their "split" design - and Logitech seems to have their keyboards full of crap), would have the standard AT/E IBM layout (that my brain has been hardwired to over the years), no fancy multimedia keys, and QUIET.
Das Keyboard would be very interesting but the noise drives me away from it.
My friends include a woman who writes 100-line SQL statements embedded in a perl-script. You need a magic decoder ring just to see what's there.
A male colleague, OTOH, likes to write code in style such as
for (unsigned int i=0;ij;i = i + 1)// Loop counts from i to j, with increments of one
{.... }...and no, his job does not include teaching basics of programming.
There, I've the counterpoint for the article with my own biased view!
Canon at least is, in their DSLRs, have the option to put on "authenticity verifier". Basically it's a hash of camera's serial number, the image, and some private key, and it's stored as a EXIF tag. The idea is that if you take the pic straight out of camera without doing any modifications you can vouch that it's authentic.
Problem of course is that you could just generate the image on a computer and photograph it off a display screen...
- Web (Http and https, maybe also 8080)
- DNS (UDP:53)
- Mail (SMTP, IMAP, POP3 (including SSL versions))
- IRC (if you use)
- FTP
- SSH, Telnet
- All TCP acknowledgement packets.
- Maybe some gaming protocols (Directplay, WoW, etc - these unfortunately require checking docs for each game)
that way, you have whitelisted most of the "interactive" protocols that suffer from loaded link. No need to keep chasing after the latest encrypted, onion routed P2P application that happens to be flavor of the month. The biggest problem is the online gaming stuff.
and it's actually originating from IBM. Personally I'm *glad* that Linux desktop environments are also pretty much implementing the standard - I *like* being able to always hit F1 for help, Shift+F12 for save etc. I've even seen CUA bindings setup for Emacs but cannot find a link right now..
I mean, I've been running Windows software under WINE for *years*. What's their definition of "1.0"? Does it really mean anything, or will we be getting 1.0.1, 1.0.2, etc monthly afterwards anyway just like before? Or is 1.0 some "complete feature set" release, suggesting that I can now run any windows software (I doubt that's true, considering that even MS Office is still a bit shaky).
I got 10 mod points about a week ago (I've used to get batches of 5), but since then I've observed same thing as you - scores of >3 are very rare, so there must be too few mod points going around.
I was introduced to the guy whose mother this lady is at IETF in Chicago. Working for a networking hardware vendor kinda gives perks.
Anyway, even if the bandwidth is free I wouldn't call it cheap - the CPE device takes (I think) 3kW of power. So yeah, you can dry clothes on it quite easily..
It's not so hard if you install Webif2 "X-wrt" from http://x-wrt.org/ - ok, before the webui is running you need to log in and use the ipkg to install the darn thing, but past that point you can do pretty much anything via web interface.
I _really_ fail to understand the rationale for DHCPv6.
IPv6 was designed o that stateless autoconfig resulted in routable addresses.
Informing client about DNS, NTP etc servers is just icing on cake.
The primary purpose is accounting (And insert whatever Orwellianisms you want here). Especially in enterprise networks. ISPs also are interested, to provide equivalent functionality to DHCPv4 "option 82" or similar ones that tie specific IP to specific user or at least DSL connection. So basically the driver is requirement to have managed IPv6 addressing without random hosts just deciding whatever they want to use (EUI-64, CGAs, whatever). In fact, the recent trend seems to be that when deploying network, DHCPv6 is not only preferred option, it seems to become the *only* allowed option. (Basically: Filter traffic so that only the DHCPv6-allocated address is allowed to communicate.)
And really, only problems I saw were the fact that it's pain in the ass to get automatic DHCPv6 working. The idea is that IPv6 stateless autoconfig (router advertisement) has a bit that tells the client if they should get ALL config via DHCP or just additional (like DNS addresses). However, no easy way to make Linux kernel execute DHCPv6 client based on the received stateless autoconfig bit.
Anyway, after statically configuring DNS servers, things were very smooth. Google et al worked, I could access entire IPv4 web via sixxs.org (just go http://slashdot.org.sixxs.org/ to access Slashdot via IPv6), I could SSH to my home servers...only things that seemed a bit odd were failing reverse DNSes on some hops when running traceroute. Jabber worked, IRC worked.
I'm not an aussie but I understood that their new Prime Minister (Kevin Rudd) started to gain support in polls over Howard AFTER it was leaked that he had gone to a strip club in Washington visit. Apparently the general image had been that the guy is absolutely boring bean counter, but after the news broke people were saying "Wow, that guy actually has a life....I could vote for him".
Mind you, this is COMPLETELY based on a random faction in media on the other side of the world..
Actually this might be something to go for. Just have a completely modular kernel, everything as modules, then after boot you'd just check which modules actually were loaded and somehow map that to kernel configuration options.
Aye - would be great if there would be tool that I could eg. say "Ok, right now, at this moment, I have all my hot-pluggable USB/PCI devices plugged in, please detect and configure the options as needed". After all, that's what I do with a new comp: use lspci and similar tools to find out what's in the guts of the machine and then set options appropriately in menuconfig.
When are the patches at http://people.redhat.com/heinzm/sw/dm/dm-raid45/ going to be included? I'm running a dualboot box so have to run the BIOS-fakeraid that works with Windows. I had to run through a few hoops to get it working with 2.6.24 (https://bugs.launchpad.net/ubuntu/+source/linux/+bug/220493 comments) and for now it works...but what if I want to update kernel at some point?
Remedy:
Promise that amongst everyone who shares their system info, once a week/month/year someone wins a prize (no need to ask delivery info in advance, just that "If you win, you'll be notified via this program and then asked to enter delivery address"). The price can be anything cheap and token-ish (eg. in games, some bonus freebie item), as long as there's something.
I'm wondering how much overlap there will be compared to Better-than-nothing-security.
Not really, from their site
The goal of transparency to the transport layer means that the user will not have to configure anything, just install the encryption software and go. It also makes sure that encrypted traffic will travel over IP carriers without trouble (except in the case of mandatory transparent proxying). Current IP-transport encryption using tunneling or IPSec do not have the same property. Many low-cost ISPs filter IP protocols and TCP/UDP ports to block encypted traffic and there is always a cost to the user in configuring key-exchange, NAT-traversal and such. Anonymity can be provided by existing IP-anonymizing networks such as tor and i2p since the encryption is transport-independent.
So they are planning to roll out zeroconf IPSec that doesn't NEED to have specific support for NAT traversal. Now, "NAT Traversal" technically just means UDP encapsulation (which in turn results in all fancy MTU problems).
It seems that they are only interested in encrypting the TCP/UDP payload, with key negotiation happening at the start of the session (SYN/ACK packets for TCP, and as a completely separate negotiation with UDP).
If they can go with this, I sure hope they write an informative RFC..
Valve has a nice vision:
http://www.eurogamer.net/article.php?article_id=160866
Have to say I agree with them.
I recently bought a new, up-to-date PC with dual cores and all the bells and whistles. After playing nothing but WoW, Civ and other less-powerhungry games on my trusty old 1,2 GHz Celeron and Win'98, I could finally check out all the games I missed.
So far: Half-Life 2, Orange Box (consisting of EP1&EP2 too, and Portal). Love it. Also love Steam. It works.
Another case: Galactic Civilizations 2. Stardock's Stardock Central (and the parallel, Impulse), rock.
NO Copy protection. No DVD in drive bullshit. No running through the hoops. Before, when I bought a game it was always running via gamecopyworld.com to get the crack. Another game that I got was Crysis. Fine, gamecopyworld has cracks - except there isn't one for the 64-bit 1.21 version. So I was stuck with the DVD in drive..
Then, as an old Baldur's Gate&Torment&Kotor fan, I heard that Bioware had done a new RPG - Mass Effect. To avoid hassle, I googled for what copy protection it's using - and read about the whole phone-home-schema. I can run Steam in offline mode. Stardock Central doesn't phone home. But these guys seriously thought that spyware in your PC is ok?!
I was already firing up my torrent client, but then I read http://games.slashdot.org/article.pl?sid=08/05/09/2318229 about EA loosening the DRM and actually bought the game instead.
Gotta love Valve. And Blizzard.
Mandarin Chinese.
If you actually want to enjoy, pick something that you actually have an interest in. Ton of anime junkies have picked up Japanese for example. If you like Bollywood, learn Hindi. And so on...
Try these:
- Software production&design (Using Rational Rose instead of emacs work for you...leave the coding part for monkeys) ...
- Networks & Protocols (TCL gets you far here for running eg. simulators)
- Digital signal processing (all you need is Matlab)
- Usability research&development
- Standardization
-
Granted, most of this requires some "programming", but that counts, at tops, some shell scripting and really basic stuff.
I'm a longtime fan of sorts of this one. The "ergoforce" concept actually works and makes typing feel nice (idea is that keys that are pressed with index finger require more force than the ones pressed with your little finger).
Problem: I cannot find these anywhere anymore - at least not in Europe. No hope in getting the Finnish/Swedish keyboard layout (I've searched around) but it seems that they are not anywhere anymore. Some webstores have them in listings and usually always out of stock.
So: What's a good keyboard that would have similar ergonomic feel (I *hate* MS Natural keyboards with their "split" design - and Logitech seems to have their keyboards full of crap), would have the standard AT/E IBM layout (that my brain has been hardwired to over the years), no fancy multimedia keys, and QUIET.
Das Keyboard would be very interesting but the noise drives me away from it.
As others pointed out, blame Slashdot (and me for not using preview, I guess).
My friends include a woman who writes 100-line SQL statements embedded in a perl-script. You need a magic decoder ring just to see what's there.
// Loop counts from i to j, with increments of one .... } ...and no, his job does not include teaching basics of programming.
A male colleague, OTOH, likes to write code in style such as
for (unsigned int i=0;ij;i = i + 1)
{
There, I've the counterpoint for the article with my own biased view!
Canon at least is, in their DSLRs, have the option to put on "authenticity verifier". Basically it's a hash of camera's serial number, the image, and some private key, and it's stored as a EXIF tag. The idea is that if you take the pic straight out of camera without doing any modifications you can vouch that it's authentic.
Problem of course is that you could just generate the image on a computer and photograph it off a display screen...
Raise priority for
- Web (Http and https, maybe also 8080)
- DNS (UDP:53)
- Mail (SMTP, IMAP, POP3 (including SSL versions))
- IRC (if you use)
- FTP
- SSH, Telnet
- All TCP acknowledgement packets.
- Maybe some gaming protocols (Directplay, WoW, etc - these unfortunately require checking docs for each game)
that way, you have whitelisted most of the "interactive" protocols that suffer from loaded link. No need to keep chasing after the latest encrypted, onion routed P2P application that happens to be flavor of the month. The biggest problem is the online gaming stuff.
"Ctrl+C" isn't just "Windows" standard, it's actually coming from much older days. You are looking for
http://en.wikipedia.org/wiki/Common_User_Access
and it's actually originating from IBM. Personally I'm *glad* that Linux desktop environments are also pretty much implementing the standard - I *like* being able to always hit F1 for help, Shift+F12 for save etc. I've even seen CUA bindings setup for Emacs but cannot find a link right now..
I mean, I've been running Windows software under WINE for *years*. What's their definition of "1.0"? Does it really mean anything, or will we be getting 1.0.1, 1.0.2, etc monthly afterwards anyway just like before? Or is 1.0 some "complete feature set" release, suggesting that I can now run any windows software (I doubt that's true, considering that even MS Office is still a bit shaky).
http://www.winehq.org/?announce=1.0-rc1 pretty much has a list of bugfixes&features, just like any other release. Where's the beef in "1.0"?
I got 10 mod points about a week ago (I've used to get batches of 5), but since then I've observed same thing as you - scores of >3 are very rare, so there must be too few mod points going around.
I was introduced to the guy whose mother this lady is at IETF in Chicago. Working for a networking hardware vendor kinda gives perks.
Anyway, even if the bandwidth is free I wouldn't call it cheap - the CPE device takes (I think) 3kW of power. So yeah, you can dry clothes on it quite easily..
Unfortunately not in the UK yet :(
Watched the entire season 11 during last week, and I'm from Finland. Worked just fine.
It's not so hard if you install Webif2 "X-wrt" from http://x-wrt.org/ - ok, before the webui is running you need to log in and use the ipkg to install the darn thing, but past that point you can do pretty much anything via web interface.
Clicked on wrong link and replied at wrong place in thread - reply at http://slashdot.org/comments.pl?sid=488070&cid=22754460
I _really_ fail to understand the rationale for DHCPv6.
IPv6 was designed o that stateless autoconfig resulted in routable addresses.
Informing client about DNS, NTP etc servers is just icing on cake.
The primary purpose is accounting (And insert whatever Orwellianisms you want here). Especially in enterprise networks. ISPs also are interested, to provide equivalent functionality to DHCPv4 "option 82" or similar ones that tie specific IP to specific user or at least DSL connection. So basically the driver is requirement to have managed IPv6 addressing without random hosts just deciding whatever they want to use (EUI-64, CGAs, whatever). In fact, the recent trend seems to be that when deploying network, DHCPv6 is not only preferred option, it seems to become the *only* allowed option. (Basically: Filter traffic so that only the DHCPv6-allocated address is allowed to communicate.)
And really, only problems I saw were the fact that it's pain in the ass to get automatic DHCPv6 working. The idea is that IPv6 stateless autoconfig (router advertisement) has a bit that tells the client if they should get ALL config via DHCP or just additional (like DNS addresses). However, no easy way to make Linux kernel execute DHCPv6 client based on the received stateless autoconfig bit.
Anyway, after statically configuring DNS servers, things were very smooth. Google et al worked, I could access entire IPv4 web via sixxs.org (just go http://slashdot.org.sixxs.org/ to access Slashdot via IPv6), I could SSH to my home servers...only things that seemed a bit odd were failing reverse DNSes on some hops when running traceroute. Jabber worked, IRC worked.
Great experience and experiment.
Take a look at http://tools.ietf.org/html/draft-irtf-ipnrg-arch-01 and check out cool ASCII-art figures about example topology. (Basically, they are thinking about adding a "bundle layer" between IP and TCP to make TCP work without timeouts becoming issue..)
I'm not an aussie but I understood that their new Prime Minister (Kevin Rudd) started to gain support in polls over Howard AFTER it was leaked that he had gone to a strip club in Washington visit. Apparently the general image had been that the guy is absolutely boring bean counter, but after the news broke people were saying "Wow, that guy actually has a life....I could vote for him".
Mind you, this is COMPLETELY based on a random faction in media on the other side of the world..