MS does have instructions on their site on how to change the key automatically using group policy for those corp users who legitimately own a corp key that is no longer allowed... This can be done via a vbs script that is executed through group policy....
if using PAM on a redhat/fedora compatible system (could be any PAM aware system);
it is possible to make it so that if they are a member of the wheel group to explicitly "trust" the user when they type 'su'.... {so they can become superuser without knowing the specific root password)
There are several modes for the "automatic" updates; some depend on OS/SP and if you have SUS/WUS installed. (if its a work laptop, they may have SUS/WUS configured for the updating process.)
In 2k and XP, you can
1- do nothing 2- Ask before downloading and before installing. (only admin users can say yes) 3- download updates automatically, but ask for installation (only admin users can install; they are asked if you they want to go ahead with the install) 4- automatically install at a fixed time (default 2 or 3 am); if a reboot is needed when a user logs in, it asks to reboot.
by default its #3.
in 2k, the option can be changed in the control panel (sp3 or higher needed).
in XP, right click on "my computer", properties, go to the automatic updates tab.
And squid would allow you to setup access lists / blocks MUCH easier if you have kids. There are also some pretty neat squid reporting tools to allow better monitoring of the "kids"
1- real bandwidth costs are actually much higher than the price that DSL home users are given. The DSL prices for home users usually contain the assumption that the (border) bandwidth is oversold since users would normally NOT be all active at the same time.
2- I was not talking about amount of traffic, but peak load / sustained load passing through the pipe.
3- School computer fees are not JUST the bandwidth used, but the costs to maintain the equipment (Cisco/nortel/etc service contracts are NOT cheap).
You did not mention what type of school/school system/ district you are in... but it may not be possible since MANY schools/school districts are using traffic shaping software like pacekteerspacketshaper to make sure that their ample bandwidth is not abused.
You may also want to remember that in many cases the bandwidth is there, but not for "full use"; example... One location I know of has multiple 45mb pipes from multiple providers. The pipes each can handle the full rate at 45mbs, but they are only guarenteed ~19mbs for the "base price"; any peak use above that is charged at higher rates. Currently with the packeteer device and tight controls they are peaking at ~30mbs during the extremely heavy usage times. Imagine what it would be if they had no controls at all.....
You may only be using 128kb/s for an hour a day, but if like many schools and school systems, you connect to the district's central network, which then connects the school to the internet, calculate the amount of aggregate bandwidth that 20 students from YOUR school would use; then multiply that by the number of schools in your district....
My biggest complaint about drive up ATMs is that at least in my area (Southern California), most of the drive up ATMs are not almost unusable for anyone driving a regular car. The buttons are touch screen that are geared for people in SUV's and trucks.
How do you know that the software companies are not doing so already with their own products so that they can get a list of users/ip addresses that are willing to use key generators of their products. This would give the software companies an idea of "where" to look for/ crack down on.
This can also be an easy way to distribute "special" keys that can then easily be detected/disabled suddenly by a patch... [all pirated versions would have the same "set" of pirated keys that would make it MUCH easier to disable them suddenly and all at once with a required "protocol" or "minimum service pack" patch....
it does not validate the data, but it does validate that the information is "publicly discussed".
If the information covered by NDA can be found using google, then it might be safer to assume that writing about it/commenting might be ok. [though IANAL... so....]
instead of mouthing off, maybe linking to the LSB standards page that contains the specifications. Thing is, you probably mean theFilesystem Hierarchy Standard/etc/firmware may not be in either documents, but since it is used by MANY rpms, including the kernel-util rpms for microcode data it is the de-facto standard for binary firmware images that need to be accessed by device drivers at boot time....
Not only have you angered open source people, then IBM (general computer people), but now you have angered people in the automotive industry.
This means that you have also angered people from some of the most powerful political lobbyists and poeple who now see you as possible problems to their job security (UNIONS).....
Re:Viruses don't die ..
on
The Virus Squad
·
· Score: 3, Interesting
For situations where within 15 mins of powering up a machine, its infected....
I wish that MS would make the service packs/updates in such a way that it would be
1- latest service pack 2- latest critical OS security patches 3- latest IE critical security patches
so that on a new install, all I would need to do is get a CD (burn one even) that contains the above three files.
Make the three files availible from a single location. Update #2 and #3 as soon as a new individual patch is released.
every 6-9 months, incorperate #2 into #1
OR
release them as SP 4 (base) then as a new OS patch is released, release SP4.1 SP4.2
etc, so when getting a SP for installation I would just get the latest and be assured that I have all the security patches that have been released (single file)
As a consultant, I now NEVER plug in a new PC to the "regular" network or the internet before installing patches / drivers and an AV solution.
This policy was started as a result of a colleague of mine installing windows 2000 had a machine infected WITHIN 15 mins of bringing the machine online (even before he was able to go to windows update or put in a cd with the SP4 and minimal patches; the machine got infected during the reboot/hardware detection phases after the initial install)
yeah... but if you have ever forgotten where you left your car.... [dont laugh... it happens.... parking lots in Southern California are painful in that sense.... ever been to disneyland?] Some manufacturers now have a "car finder" feature that makes the lights flash, as well as a compass/distance gadget that points you to where the car is parked...
If SCO wins, MANY of the sites that you use online would have to pay fees to SCO to use the operating system. ISPs may have to increase their fees since they may be using servers that use Linux. Embedded device makers may have to pay for licenses making their devices more expensive to produce.... (devices like gateways/routers/etc) that allow you to access the network...
This also means that many of the sites that you love will not be accessible since thay may not be able to afford the licenses...
It amazing what hidden treasures some "little" cities may have.
I know from personal experiance working with such places where they have upgraded the infrastructure during the.com boom.
For example... One city I know of required the cable company to place alot of fiber when they changed cable company providers {they were going to have to dig up the streets anyway so it was easier to do it once}. The fiber is owned by the city. They HAVE used a minute amount of it to connect the main library w/ city hall. There is still ALOT of unused fiber ready for use. Their only restriction is that the fiber must be used "to better the city and the living conditions of its citizens"....
Slashdot Mirror
MS does have instructions on their site on how to change the key automatically using group policy for those corp users who legitimately own a corp key that is no longer allowed... This can be done via a vbs script that is executed through group policy....
in Q328874
and it now can be remote controlled as a service..
:-)
A new feature in RAZA2.0.0 is that you can now login to the application remotely and manage your downloads/uploads and do searches...
if using PAM on a redhat/fedora compatible system (could be any PAM aware system);
it is possible to make it so that if they are a member of the wheel group to explicitly "trust" the user when they type 'su'.... {so they can become superuser without knowing the specific root password)
But the one that the have now is the Feb 2004 version which only has updates released up to dec 2003.
It does NOT have any of the recent important fixes....
There are several modes for the "automatic" updates; some depend on OS/SP and if you have SUS/WUS installed. (if its a work laptop, they may have SUS/WUS configured for the updating process.)
In 2k and XP, you can
1- do nothing
2- Ask before downloading and before installing. (only admin users can say yes)
3- download updates automatically, but ask for installation (only admin users can install; they are asked if you they want to go ahead with the install)
4- automatically install at a fixed time (default 2 or 3 am); if a reboot is needed when a user logs in, it asks to reboot.
by default its #3.
in 2k, the option can be changed in the control panel (sp3 or higher needed).
in XP, right click on "my computer", properties, go to the automatic updates tab.
And squid would allow you to setup access lists / blocks MUCH easier if you have kids. There are also some pretty neat squid reporting tools to allow better monitoring of the "kids"
Things to consider:
1- real bandwidth costs are actually much higher than the price that DSL home users are given. The DSL prices for home users usually contain the assumption that the (border) bandwidth is oversold since users would normally NOT be all active at the same time.
2- I was not talking about amount of traffic, but peak load / sustained load passing through the pipe.
3- School computer fees are not JUST the bandwidth used, but the costs to maintain the equipment (Cisco/nortel/etc service contracts are NOT cheap).
You did not mention what type of school/school system/ district you are in... but it may not be possible since MANY schools/school districts are using traffic shaping software like pacekteers packetshaper to make sure that their ample bandwidth is not abused.
You may also want to remember that in many cases the bandwidth is there, but not for "full use"; example... One location I know of has multiple 45mb pipes from multiple providers. The pipes each can handle the full rate at 45mbs, but they are only guarenteed ~19mbs for the "base price"; any peak use above that is charged at higher rates. Currently with the packeteer device and tight controls they are peaking at ~30mbs during the extremely heavy usage times. Imagine what it would be if they had no controls at all.....
You may only be using 128kb/s for an hour a day, but if like many schools and school systems, you connect to the district's central network, which then connects the school to the internet, calculate the amount of aggregate bandwidth that 20 students from YOUR school would use; then multiply that by the number of schools in your district....
All that is missing is a ".local" for people that want to set up internal RFC1918 type dns zones without registering a "real" zone...
bah... meant... "are almost unusable for....."
My biggest complaint about drive up ATMs is that at least in my area (Southern California), most of the drive up ATMs are not almost unusable for anyone driving a regular car. The buttons are touch screen that are geared for people in SUV's and trucks.
So... do you REALLY trust those generators?
How do you know that the software companies are not doing so already with their own products so that they can get a list of users/ip addresses that are willing to use key generators of their products. This would give the software companies an idea of "where" to look for/ crack down on.
This can also be an easy way to distribute "special" keys that can then easily be detected/disabled suddenly by a patch... [all pirated versions would have the same "set" of pirated keys that would make it MUCH easier to disable them suddenly and all at once with a required "protocol" or "minimum service pack" patch....
it does not validate the data, but it does validate that the information is "publicly discussed".
If the information covered by NDA can be found using google, then it might be safer to assume that writing about it/commenting might be ok. [though IANAL... so....]
instead of mouthing off, maybe linking to the LSB standards page that contains the specifications. Thing is, you probably mean theFilesystem Hierarchy Standard /etc/firmware may not be in either documents, but since it is used by MANY rpms, including the kernel-util rpms for microcode data it is the de-facto standard for binary firmware images that need to be accessed by device drivers at boot time....
when using a NASA site... just be sure that the units are what you expect them to be.... :-)
I asked the same questions a short while back on a different cell phone related slashdot article, and mkop kindly pointed me to this site....
Not only have you angered open source people, then IBM (general computer people), but now you have angered people in the automotive industry.
This means that you have also angered people from some of the most powerful political lobbyists and poeple who now see you as possible problems to their job security (UNIONS).....
For situations where within 15 mins of powering up a machine, its infected....
I wish that MS would make the service packs/updates in such a way that it would be
1- latest service pack
2- latest critical OS security patches
3- latest IE critical security patches
so that on a new install, all I would need to do is get a CD (burn one even) that contains the above three files.
Make the three files availible from a single location. Update #2 and #3 as soon as a new individual patch is released.
every 6-9 months, incorperate #2 into #1
OR
release them as SP 4 (base)
then as a new OS patch is released, release
SP4.1
SP4.2
etc, so when getting a SP for installation I would just get the latest and be assured that I have all the security patches that have been released (single file)
Think of it... how many programs/tools use nmap as a back end scanner?
This would also mean that nessus and other tools like it would not be able to use nmap's "features" when running on SCO "stuff"...
As a consultant, I now NEVER plug in a new PC to the "regular" network or the internet before installing patches / drivers and an AV solution.
This policy was started as a result of a colleague of mine installing windows 2000 had a machine infected WITHIN 15 mins of bringing the machine online (even before he was able to go to windows update or put in a cd with the SP4 and minimal patches; the machine got infected during the reboot/hardware detection phases after the initial install)
yeah... but if you have ever forgotten where you left your car.... [dont laugh... it happens.... parking lots in Southern California are painful in that sense.... ever been to disneyland?] Some manufacturers now have a "car finder" feature that makes the lights flash, as well as a compass/distance gadget that points you to where the car is parked...
Google also allows you to do a lookup on a UPC code.. (it actually uses the database from www.upcdatabase.com)
works great if you have one of those modified cue cats
The problem is that they are NOT fraudulent numbers. They are REAL tops from REAL bottles.
The only difference might be in that the ODDS are that the person winning IS going to redeem it...
If SCO wins, MANY of the sites that you use online would have to pay fees to SCO to use the operating system. ISPs may have to increase their fees since they may be using servers that use Linux. Embedded device makers may have to pay for licenses making their devices more expensive to produce.... (devices like gateways/routers/etc) that allow you to access the network...
This also means that many of the sites that you love will not be accessible since thay may not be able to afford the licenses...
It amazing what hidden treasures some "little" cities may have.
.com boom.
I know from personal experiance working with such places where they have upgraded the infrastructure during the
For example... One city I know of required the cable company to place alot of fiber when they changed cable company providers {they were going to have to dig up the streets anyway so it was easier to do it once}. The fiber is owned by the city. They HAVE used a minute amount of it to connect the main library w/ city hall. There is still ALOT of unused fiber ready for use. Their only restriction is that the fiber must be used "to better the city and the living conditions of its citizens"....