Sounds like all of a sudden there is a market for portable pocket-sized paper shredders. I want my next thinkpad come with a shredder installed! And my PDA too.
There is a good precedent for that that shows that digging through somebodies garbage (located on public property, which it was in that case - mall is a public property) is perfectly legal, though the strongest proponents of that do not like people digging in their own. more on that
I can't remember the last time I tried to access a site with Mozilla, to find that it only worked in IE....then you haven't browsed web for a while. - one of my favorite news sources (www.gazeta.ru) sucks in mozilla, at least their news section - my bank started sucking in mozilla recently - ebay often freaks out on some items in mozilla, so I have to copy that URL and paste it to IE to view the item. - my card company works intermittently with mozilla (citiCards) - MSNBC is sucking up mud in mozilla, even though the put some thought into explicitly supporting mozilla (they are bettern than they used to) - my own employer's website works in quite-reduced functionality, though we spend a lot of effort into making that better.
That's just off the top of my head. I probably could go on and on and on. And guess what happened when I complained to my bank's IT that there site, once looking fine in mozilla, one day started sucking really bad? - "Mozilla? What's that? Oh, the browser, like Internet Explorer... well, don't use it! Why won't you just save yourself some time and use IE? No, we support only IE 5.0 and above on windows 2000 or XP with at least a pentium-3 processor and 128 mb RAM... yes... Thank you for your call, sir. Is there anything else I can do for you?"
Re:Two security specific entries for Linux/Unix
on
New SANS/FBI Top 20 List
·
· Score: 4, Insightful
I'd laugh that a security library from which secure applications are built upon and a protocol to increase security both put one at risk and both made a top ten list.
That's exactly why they are there. Not because they are so badly broken (I bet 99% of apps and libs out there are more broken), but because them being broken is really-really critical. As you said, other apps are built on top of them, so that fact alone will nominate them for that list, no matter how minor or hard-to-exploit the holes are.
The report doesn't try to list the worst or the least secure software. Instead, it tries to list the software that has the greatest potential to cause havoc. And, if anything, I am truly impressed at how responsive the developers are and how quickly the holes are plugged, and, most importantly, how open they are about that.
scp... errr... sftp or anything else sent over an ssh tunnel, if you need it for your own purposes only. If you need to have other people access some data, I guess you are stuck choosing between ftp and https. At least, I don't know of any replacements that can be reasonably expected to reside on most people's computers without the need to install them first.
There aren't two internets running, one for Windows and one for Unix
Yes, there are. One is for IE, and one - for everything else.
(Yes, I am expecting flames to correct my narrow view of internet and tell me that there is more than just web browsing, blah,blah. But you see my point, don't you?)
who is more technologically savvy, your average spammer or your average politician
That's a toss-up. I'd say the spammer wins by a small margin, but both are pretty sad with just a couple notable exceptions on both sides. What's worse yet is that the damage done by both is comparable as well...:(
What a troll. Aiming to trick mods into "Informative", I suppose.
No, he meant to get the "Funny" mods, not "Informative". And, you know, if you actually READ what he said, and read the whole post, you'll see it is FUNNY. Too bad he got modded down and I don't have any mod point left to mod him back up. Anyone else got a mod point to spare?
I'd say mod the parent one down and mod the parent's parent one up. That should be just about fair.
- there are more publicly accessible servers running Linux (e.g. linux/apache webservers)? - you do need to have basic understanding of security and linux skills to make a secure server. There are fewer shrink-wrapped security-enchancing products for Linux, and a lot of people in charge of those Linux servers are the "point and click" kind.
Hire someone from China or India to do it!:)... rated... Funny!
What's wrong with you, people! It's insightful! It's a REAL GOOD PIECE OF ADVICE! Or how do you think I ended up in the US?
P.S. I prefed to write code instead of wiring.... but it really all comes down to how much you are willing to pay, and if someone is willing to pay more for me to write code...
That might have been a joke. The real joke was slashdotting a geocities site. The poor thing survived probably for 5 minutes or so. What were you thinking?
It would be REALLY COOL IF I could always copy and paste using the same keys, from any app to any other app. For example: - sometimes you can, and sometimes you can't use middle-click for pasting, depending on the app. - Ctrl-C/Ctrl-V won't work on a terminal window running midnight commander. And neither will middle-click pasting. You have to actually use the menu! - Copying from mozilla is a royal pain. Often times the only way to do it is to copy the text selected to kwrite (or sometnig similar), and then paste it into application that was stubbornly refusing to accept the original clipboard contents. - there are more clipboard woes, but these are the most annoying
...and 2.928.000.000 / 78000 ~= 37538 years before every male on this planet has a huge penis and the spam will FINALLY stop!
Nope! While your math skills seem impressive, it'll take a lot more than 37538 years for every idiot on this planet to die. Or maybe not - idiots have already almost killed humanity as we know it.
True. Unfortunately, true. But this isn't as true in any country of the world as much as it is in the US.
It is rather sad when economy of a country depends on its citizens' spending as much as US economy does. If you think about it, any and all marketing money is ultimately wasted. This country-wide.
Marketing doesn't produce anything. You can't export it. You can't use it. It's intangible. Yes, you need to make your potential customers aware of what products are available to satisfy their needs. But give me a break! I know of all the jewelry and excercise machines I have seen on TV 100 times over! Time to stop already! At this point it really IS a major waste. Yes, it is sad to see people loose jobs, but maybe - just maybe - by doing so they will be able to find a job doing something productive? I am not saying marketing people don't do enough - I know they work their butts off. By "productive" I mean making something tangible that other people can use. Some sort of item or a service. Even better, something that is so good and needed that you can export it.
A country's economy can't run exclusively on marketing and buying! Oh, wait...
Your right to free speech does not obligate me, as a private citizen, to provide you a forum in which to exercise that right.
Thus, a spammer's free speech rights have no bearing on my inbox.
While that sounds cool, and stuff, I'd have to disagree. You are not obligated by any means, and neither do you provide a forum. The free speech laws have nothing to do with that, but solicitation laws do. Thus, a spammers free speech is irrelevant regardless of you being a private citizen, or whatever you want to be.
For me it comes down to to the freedom of speech issue -- I've always been told that if you can't handle free speech you don't agree with you obviously can't handle free speech -- and I suppose just because something irritates me doesn't mean that the greater good would be served by silencing that something.
If I keep excercising my right to free speech on a girl next door who can't stand me, she'll call the cops and get a restraining order on me. Did my free speech right get trampled on? Maybe. But not before I trampled on her right not to be annoyed.
I am not attacking you personally, by any means. In fact, I mostly agree with you. It's just when I see the phrase "free speech" a few words away from word "SPAM", it triggers something inside me. Twisting the notion of free speech to support SPAM is just rather sad...
In other words, if SPEWS is too eager to blacklist the whole universe, it's their problem and they have to fix it. It is not a perfect world and bad things happen. False positives are much worse than the SPAM they let through. The more false positives SPEWS allows, the lower their value will be. If this value drops close to zero, then nobody will use them. Until they provide value (albeit, with some false positives), people will use them. It's that simple, and has nothing to do with free speech.
Amen to that! I couldn't have said it better. Neither did I have the time to.
Taking in 10^4% of some goofy supplement/vitamin, especially with sketchy history or unproven results is at best utterly stupid. It can also be dangerous.
Indeed, it is akin to a salesman trying to sell my grandma a 3 GHz pentium-4 to do email. Does she need that? No! But their marketing and money-back guarantees are great, and the numbers seem awesome. C'mon, a 3-GHz machine will do my email 3 times better than a 1 GHz, right? Arghh!!!
I've heard this comment all the time, too, and I used to think it was true. But as time went on, and I heard the comment more and more, and I met more people taking supplements, creatine, and protein bars/mixes/shakes, I noticed something: they did work out. They weren't just taking the pills and sitting on their asses.
This is modded as "interesting"? Give me a break! What in the world are you talking about? This is off-topic as much as it is interesting!
Nobody has a problem with supplements. The guy talks about those who SPAM you and offer you thinkgs that are truly too good to be true. Once I get an offer like Incredible breakthrough. European doctors found a way to loose fat and convert it to muscle. Just order a 60-day supply of that miraculous supplement, and make sure to work your ass off for 4 hours/day, and you will lose weight or your money back!, I'll shut up and say you have a point. Until then please learn to distinguish between SPAM and retail.
An idiot with a large penis would do the same - after all, they are offering a HUGE penis, not just a large one! As seen on national TV! Well, I haven't really seen many penises on national TV lately, but the bigger the better, right?
Do whatever you want with this info but don't blame ME!!!
The next thing you know - a bunch of dorks with cameras will start driving up to his front door snapping pictures of his car, getting aerial views of his house, and subscribing him to every promotional material you can get.
I am more concerned with some poor innocent soul getting their address listed like that on slashdot. Say, I am a boss (I am not, but imagine that for a second), and I fired a person for bad performace. Naturally, they get pissed, go to slashdot and paste my address claiming I am a viagra spammer. Now, a legion of dorks that read slashdot religiously start harrassing me, subscribing me to catalogs, and do all other nasty things, and I don't even have any idea why! Not good...
Slashdot Mirror
Why do you think businesses like paper shredders?
Sounds like all of a sudden there is a market for portable pocket-sized paper shredders. I want my next thinkpad come with a shredder installed! And my PDA too.
There is a good precedent for that that shows that digging through somebodies garbage (located on public property, which it was in that case - mall is a public property) is perfectly legal, though the strongest proponents of that do not like people digging in their own. more on that
I can't remember the last time I tried to access a site with Mozilla, to find that it only worked in IE. ...then you haven't browsed web for a while.
- one of my favorite news sources (www.gazeta.ru) sucks in mozilla, at least their news section
- my bank started sucking in mozilla recently
- ebay often freaks out on some items in mozilla, so I have to copy that URL and paste it to IE to view the item.
- my card company works intermittently with mozilla (citiCards)
- MSNBC is sucking up mud in mozilla, even though the put some thought into explicitly supporting mozilla (they are bettern than they used to)
- my own employer's website works in quite-reduced functionality, though we spend a lot of effort into making that better.
That's just off the top of my head. I probably could go on and on and on. And guess what happened when I complained to my bank's IT that there site, once looking fine in mozilla, one day started sucking really bad? - "Mozilla? What's that? Oh, the browser, like Internet Explorer... well, don't use it! Why won't you just save yourself some time and use IE? No, we support only IE 5.0 and above on windows 2000 or XP with at least a pentium-3 processor and 128 mb RAM... yes... Thank you for your call, sir. Is there anything else I can do for you?"
I'd laugh that a security library from which secure applications are built upon and a protocol to increase security both put one at risk and both made a top ten list.
That's exactly why they are there. Not because they are so badly broken (I bet 99% of apps and libs out there are more broken), but because them being broken is really-really critical. As you said, other apps are built on top of them, so that fact alone will nominate them for that list, no matter how minor or hard-to-exploit the holes are.
The report doesn't try to list the worst or the least secure software. Instead, it tries to list the software that has the greatest potential to cause havoc. And, if anything, I am truly impressed at how responsive the developers are and how quickly the holes are plugged, and, most importantly, how open they are about that.
Oxymoron seeing this here. Secure Shell... ...untill that oxymoron exploits your openssh...
... or your openssl... Both had more than enough holes lately to warrant even higher placements on that list, IMHO.
U10 Open Secure Sockets Layer (SSL)
scp... errr... sftp or anything else sent over an ssh tunnel, if you need it for your own purposes only. If you need to have other people access some data, I guess you are stuck choosing between ftp and https. At least, I don't know of any replacements that can be reasonably expected to reside on most people's computers without the need to install them first.
There aren't two internets running, one for Windows and one for Unix
Yes, there are. One is for IE, and one - for everything else.
(Yes, I am expecting flames to correct my narrow view of internet and tell me that there is more than just web browsing, blah,blah. But you see my point, don't you?)
See?! Telnet & FTP aren't on the list anymore.
Right, right... Ehrm... to quote the guy a couple postings before you...
# U5 Clear Text Services
Vulnerability of SANS own site to slashdotting!
:)
At least it sure looks slashdotted now...
who is more technologically savvy, your average spammer or your average politician
:(
That's a toss-up. I'd say the spammer wins by a small margin, but both are pretty sad with just a couple notable exceptions on both sides. What's worse yet is that the damage done by both is comparable as well...
What a troll. Aiming to trick mods into "Informative", I suppose.
No, he meant to get the "Funny" mods, not "Informative". And, you know, if you actually READ what he said, and read the whole post, you'll see it is FUNNY. Too bad he got modded down and I don't have any mod point left to mod him back up. Anyone else got a mod point to spare?
I'd say mod the parent one down and mod the parent's parent one up. That should be just about fair.
- there are more publicly accessible servers running Linux (e.g. linux/apache webservers)?
- you do need to have basic understanding of security and linux skills to make a secure server. There are fewer shrink-wrapped security-enchancing products for Linux, and a lot of people in charge of those Linux servers are the "point and click" kind.
looks like they are just desperate looking for new nominations for a darwin award...
Hire someone from China or India to do it! :)... rated... Funny!
What's wrong with you, people! It's insightful! It's a REAL GOOD PIECE OF ADVICE! Or how do you think I ended up in the US?
P.S. I prefed to write code instead of wiring.... but it really all comes down to how much you are willing to pay, and if someone is willing to pay more for me to write code...
That was ALSO a joke right?
That might have been a joke. The real joke was slashdotting a geocities site. The poor thing survived probably for 5 minutes or so. What were you thinking?
It would be REALLY COOL IF I could always copy and paste using the same keys, from any app to any other app. For example:
- sometimes you can, and sometimes you can't use middle-click for pasting, depending on the app.
- Ctrl-C/Ctrl-V won't work on a terminal window running midnight commander. And neither will middle-click pasting. You have to actually use the menu!
- Copying from mozilla is a royal pain. Often times the only way to do it is to copy the text selected to kwrite (or sometnig similar), and then paste it into application that was stubbornly refusing to accept the original clipboard contents.
- there are more clipboard woes, but these are the most annoying
...and 2.928.000.000 / 78000 ~= 37538 years before every male on this planet has a huge penis and the spam will FINALLY stop!
:(
Nope! While your math skills seem impressive, it'll take a lot more than 37538 years for every idiot on this planet to die. Or maybe not - idiots have already almost killed humanity as we know it.
Idiots are like lemmings - they never stop
Tiny dicks AND no brains? Hopefully a side effect of these pills is sterilization...
No worries. No brains is a good thing. Provides entertainment when they get nominated for Darwin awards.
At least telemarketing provides jobs.
True. Unfortunately, true. But this isn't as true in any country of the world as much as it is in the US.
It is rather sad when economy of a country depends on its citizens' spending as much as US economy does. If you think about it, any and all marketing money is ultimately wasted. This country-wide.
Marketing doesn't produce anything. You can't export it. You can't use it. It's intangible. Yes, you need to make your potential customers aware of what products are available to satisfy their needs. But give me a break! I know of all the jewelry and excercise machines I have seen on TV 100 times over! Time to stop already! At this point it really IS a major waste. Yes, it is sad to see people loose jobs, but maybe - just maybe - by doing so they will be able to find a job doing something productive? I am not saying marketing people don't do enough - I know they work their butts off. By "productive" I mean making something tangible that other people can use. Some sort of item or a service. Even better, something that is so good and needed that you can export it.
A country's economy can't run exclusively on marketing and buying! Oh, wait...
Your right to free speech does not obligate me, as a private citizen, to provide you a forum in which to exercise that right.
Thus, a spammer's free speech rights have no bearing on my inbox.
While that sounds cool, and stuff, I'd have to disagree. You are not obligated by any means, and neither do you provide a forum. The free speech laws have nothing to do with that, but solicitation laws do. Thus, a spammers free speech is irrelevant regardless of you being a private citizen, or whatever you want to be.
For me it comes down to to the freedom of speech issue -- I've always been told that if you can't handle free speech you don't agree with you obviously can't handle free speech -- and I suppose just because something irritates me doesn't mean that the greater good would be served by silencing that something.
If I keep excercising my right to free speech on a girl next door who can't stand me, she'll call the cops and get a restraining order on me. Did my free speech right get trampled on? Maybe. But not before I trampled on her right not to be annoyed.
I am not attacking you personally, by any means. In fact, I mostly agree with you. It's just when I see the phrase "free speech" a few words away from word "SPAM", it triggers something inside me. Twisting the notion of free speech to support SPAM is just rather sad...
In other words, if SPEWS is too eager to blacklist the whole universe, it's their problem and they have to fix it. It is not a perfect world and bad things happen. False positives are much worse than the SPAM they let through. The more false positives SPEWS allows, the lower their value will be. If this value drops close to zero, then nobody will use them. Until they provide value (albeit, with some false positives), people will use them. It's that simple, and has nothing to do with free speech.
Amen to that! I couldn't have said it better. Neither did I have the time to.
Taking in 10^4% of some goofy supplement/vitamin, especially with sketchy history or unproven results is at best utterly stupid. It can also be dangerous.
Indeed, it is akin to a salesman trying to sell my grandma a 3 GHz pentium-4 to do email. Does she need that? No! But their marketing and money-back guarantees are great, and the numbers seem awesome. C'mon, a 3-GHz machine will do my email 3 times better than a 1 GHz, right? Arghh!!!
I've heard this comment all the time, too, and I used to think it was true. But as time went on, and I heard the comment more and more, and I met more people taking supplements, creatine, and protein bars/mixes/shakes, I noticed something: they did work out. They weren't just taking the pills and sitting on their asses.
This is modded as "interesting"? Give me a break! What in the world are you talking about? This is off-topic as much as it is interesting!
Nobody has a problem with supplements. The guy talks about those who SPAM you and offer you thinkgs that are truly too good to be true. Once I get an offer like Incredible breakthrough. European doctors found a way to loose fat and convert it to muscle. Just order a 60-day supply of that miraculous supplement, and make sure to work your ass off for 4 hours/day, and you will lose weight or your money back!, I'll shut up and say you have a point. Until then please learn to distinguish between SPAM and retail.
"an idiot with a small penis "
An idiot with a large penis would do the same - after all, they are offering a HUGE penis, not just a large one! As seen on national TV! Well, I haven't really seen many penises on national TV lately, but the bigger the better, right?
Braden Bournival
561 Montgomery. St, Manchester, NH 03102
Tel. #: (603) 669-7422
Email: frappe_boy@yahoo.com
Do whatever you want with this info but don't blame ME!!!
The next thing you know - a bunch of dorks with cameras will start driving up to his front door snapping pictures of his car, getting aerial views of his house, and subscribing him to every promotional material you can get.
I am more concerned with some poor innocent soul getting their address listed like that on slashdot. Say, I am a boss (I am not, but imagine that for a second), and I fired a person for bad performace. Naturally, they get pissed, go to slashdot and paste my address claiming I am a viagra spammer. Now, a legion of dorks that read slashdot religiously start harrassing me, subscribing me to catalogs, and do all other nasty things, and I don't even have any idea why! Not good...