Linux runs on more architechtures than any other OS. Granted most folks run on an x86 but my box that faces the world is a ppc. Obviosly binaries compiled for the masses won't get too far on my server. And no worm coder in their right mind would compile the binaries for ppc linux thanks to the N^2 problem. If you run linux on a SGI Octane, Indy, Indigo; Sun Sparc, UltraSparc, 3/60; Mac G3/G4/PPC, se/30, 68040; DEC Alpha, cisco 2501, IBM zSeries whatever you are helping to thwart the threat of a linux worm.
Something else you can do is run Labrea . I just started playing with it and it's the coolest white hat security program I've seen. Not only will it slow the spead of any worm that scans subnets, but it will also mess with any script kiddies scanning you IP blocks. Take a look at it especially if lots of folks in you shop run II$.
When he said his canidate had served in the military and was a governor there was a glimmer in my heart that he'd name Gov Jesse Ventura to the position. I mean really who could protect our country better than a pro wrestler? No body wants to mess with that d00d. I bet he could kick Ridge's ass too.
Where I work we have a ton of machines behind a 3640 running NAT. When ever one of these worms pops up the NAT tables fill and the router crawls. I've done a few things to keep the router from doing a complete face plant. The main thing is to enable CEF instead of using process switching (ip cef in global config mode) when used in conjunction with "service nagle" the router can do some effecient packet switching. Even with these preventative measures the router still slowed to almoost a stand still yesterday, at which point I used an access list to filter out all web traffic coming from our internal network destined for the internet. We could browse the web internally by using https://www.safeweb.com/ and email and web requests from the internet functioned better. This is because these worms open tens of connections per second and the router has to add a NAT entry for each attempted connection. Multiply that by 70 infected servers and that's a problem. Especially because many requests aren't responded to and have to be aged out of the NAT tables. To flush the NAT tables use "clear ip nat trans *" and your router will function fine long enough to put an access list on it:) Finally one last good idea is to black hole any private address space your not using because these worms will attempt to send packets to subnets that don't exist. For example: If your using 192.168.1.1/24 the worm might try to open a request to 192.168.3.66. This packet might get stuck in a routing loop needlessly tying up resources you really need. The solution is to "ip route 192.168.0.0 255.255.0.0 null0". This will drop any packets destined for unused subnets in the bit bucket where they won't bother you.
From a Unix machine I checked my logs for probes from hosed machines. Then
prompt> tftp ip.address.of.machine
tftp> bin
tftp> get autoexec.bat
file recieved someKb in blah:time
tftp>quit
if you edit the autoexec.bat file you just nabbed, you'll see it's not a batch file at all but some sort of binary. Weird stuff, just thought I'd share. Also this only works on about 75% of the compromised machines for some reason, the rest just time out on transfer. Thoughts?
As far as I know bin laden is the number one suspect here. I was wondering then if it is proven that he master minded this attack, then could this be considered to be a hate crime? As far as I understand he detests the US because it's not the Islamic based goverenment he envisions. What are people's thoughts on calling this a hate crime? I'm just wondering.
are the damn stripping santa's everyone sends me 5 of at x-mas. I've been using email for 7 years now, yet every friend or relative that signs up for aol thinks I haven't seen it. Sheesh! At an ISP I worked for at Christmas time we saw our email volume quadruple, but the number of messages sent only doubled. I was told it happened every year. Boycott the stripping santa this year!
Katz does have a point about the spam looking like a personal emails. Thank god they don't spoof their from addrress to look normal. Is there anything that can be done about that type of email abuse?
It wasn't until the US government realized that it relied on Ma Bell more than the post office that it decided to break them up. If I "was the gov't" looking at this, I'd remedy M$ so hard they'd have no idea what hit them.
If the gov't relies too much on the product(s) that M$ produces, then it will start to have issues. The gov't does realize the inherent strength in diversity.
On a more serious note, I worked for a company (name with held to protect the guilty:) and we did this all the time. This was 3 years ago and we discovered that the customer's location had to be within about 18,000 feet from our POP to make it work. This is because the circuit goes to the CO first then your POP. The whole length must be taken into account. In upstate NY the "Dry copper circuits" are reffered to as BANA lines. We made sure to specify that we were looking for an unloaded pair when ordering, and we wouldn't accept installation on a loaded pair. On the down side there are no SLAs on BANA circuits other than you can read open/short accross the circuit. An if there is any work being done in the area, BANAs are the first thing to get shuffled around. Cheap... yes, but flakey as hell. Many, many things can break this sort of setup, so I wouldn't recommend it just for "fun" unless you like driving around putting up loops, testing them with a multi-meter and begging bell, er verizon, techs to swap out pairs that were working before but suddenly stopped, which the telco insists is good... etc...etc...etc.. Make sure you bring a bottle of scotch and a carton of smokes to appease any bell, er verizon, tech nice enuff to do this for you. It kept our tech happy.
Eli Lilly (couldn't find stats on Roche quickly, so I picked any old famous drug maker)in the last six months had $5.84 billion in sales, of which $1.63 billion was profit (go ahead and check biz.yahoo.com symbol lly).
And that's NET after R&D is paid for. Remember these are companies, any revanues spent on anything, including R&D aren't taxed. Any traditional financial/manufacturing/etc. company would jiz themselves for a 28% profit margin, most have 3-10%
So how much money should a company make off of a drug? More than you and your extended family can earn in 200 years not ajusted for inflation?
Is because it sets the tone that ANY third party widget that some one slaps onto a Microsoft product is subject to their whim. You are to let them use the fruits of your labor as they see fit. And if you don't like it, then in the time it takes for you to win a law suit against them, they will have created a parallel technology and simply code you out of the OS.
This is bad because it establishes the fact that your app/plugin/whatever working in Windows is a priviledge that M$ can revoke if they decide they don't like you or if they want your revanue stream. I hope the US government takes the necessary steps to correct this sorry situation before the entire software industry is M$
I was suprised to see 486 chips on 3com Hiper Arch controllers and router cards and in netscout ethernet probes (586 chips). To AMD's credit it must be hard to compete with the ebay $5 for a bagful of working? chips. So it's probably more profitable to focus on faster procs. Maybe Ti, winchip, or cyrix will pick up the slack. Or this could open a niche for refurbished chips.
... of what Linux looks and feels like, then DemoLinux will give you the most bang for the least effort. Basically you burn the image to a cd, set the bios to boot off the CD and you're pretty much up and running. It comes with a descent ammount of programs installed (unfortunatelt Star Office is the French version even on the English distro). This is not intended to be a permanent desktop environment and it's not the "full" linux experience. But it also requiers almost no effort or dedicated hardware. It's easier to run than windows! I've found it to be the best distro to get a Linux newbie interest and hooked on this incredible OS.
Maybe now we'll be able to afford a killer app....
on
Dynamix Closed Down?
·
· Score: 1
Maybe the price of Tribes2 will start falling so normal people can buy it (I bought mine used at EB fer $25:). If this spells the end for T2 it'd be a shame cause this is the first game in a while that actually looked like it coulda been a killer app. If you look at the minimum requirements you'll see that this game need some descent horse power just to get off the ground, pIII/thunderbird and 3D accel better than voodoo2. Hell.. A friend og mine hase q3 runing on an overclocked p166mmx with a voodoo3. Granted he only gets 30 fps. Too bad T2 was too damn expensive. Oh well, I'm just hoping the Linux version drops in price and the online game finder\player still works.
I'm no longer a teenager (well I could be a 15 year old with a decade of experience) but I "came of age" during the BBS era and I thought that the ammounts of information available to me were astounding, phone specs, bomb making, hacking, phreaking, and sweet sweet porn. Now that the information age has come of age, I feel that there is nothing I can't figure out with the help of a net connection. I could build a house, a business, I could write a book, or frag people I've never seen before. I can't imagine what this would do to some one ten years younger than me who sees his parents as pigeon-holed in their careers. The cynical sneers of their parents must look like an ignorant abomination to their wide eyed wonderment of the sheer number of possibilities. If there is anything a 15 year old should try to learn from their elders, I would say it's "emotional intelligence". Parent's aren't useless, but they can, despite their good intentions, be harmful...
there is the sciencenter's "Einstein's Attic Sale" usually in late September. They have cool computer stuff, science related electronics, labratory glassware, you name it! It's for a good cause and after 2pm the price on "stuff" drops to $25 a pickup truck load (they fill...sorry). They'll post the date of the sale on their site:
To people crying "but copyright violations are illegal" all I can say is so were abortions, drinking, not facing your partner during intercourse, operating a CB radio, etc, etc. It's when our representitives pass st00pid laws that it becomes our duty not to abide by them. To do so would give them more power and make us less free. And honestly, getting your cable modem subscription canceled for flagrant disregard of copyright laws is a small price to pay.
As far as I'm concerned the media conglomerations have abused the original intention of copyrights, namely to give credit where credit is due. For the longest time media giants told us we were paying for the experience of the music/movie/what ever, which many years later we found to be complete BS. I can not take my musical experience of Toto, recorded on an 8-track, to the store and exchange it for the same experience on CD. They tied the experiece to the media and made phat l00t. Now in the digital age their collective panties are in a bunch over the fact that everyone discovered just how media independant the experience can be. And they haven't figured out how to pump us for nearly as much, and probably never will.
In my personal code of ethics, as long as I don't claim to be the creator of "Obladi Oblada", I won't have infringed on MICHAEL JACKSON's copyright no matter how many peeps suck the mp3 off my HD. Thank you, and good evening.
Slashdot Mirror
STRENGTH IN DIVERSITY!
Linux runs on more architechtures than any other OS. Granted most folks run on an x86 but my box that faces the world is a ppc. Obviosly binaries compiled for the masses won't get too far on my server. And no worm coder in their right mind would compile the binaries for ppc linux thanks to the N^2 problem. If you run linux on a SGI Octane, Indy, Indigo; Sun Sparc, UltraSparc, 3/60; Mac G3/G4/PPC, se/30, 68040; DEC Alpha, cisco 2501, IBM zSeries whatever you are helping to thwart the threat of a linux worm.
Something else you can do is run Labrea . I just started playing with it and it's the coolest white hat security program I've seen. Not only will it slow the spead of any worm that scans subnets, but it will also mess with any script kiddies scanning you IP blocks. Take a look at it especially if lots of folks in you shop run II$.
Nah GNU/Linux is more like Unix(tm)
:)
When he said his canidate had served in the military and was a governor there was a glimmer in my heart that he'd name Gov Jesse Ventura to the position. I mean really who could protect our country better than a pro wrestler? No body wants to mess with that d00d. I bet he could kick Ridge's ass too.
If M$ issues the keys then we can count on the back door being
123-1234567
it's a joke, laugh
Where I work we have a ton of machines behind a 3640 running NAT. When ever one of these worms pops up the NAT tables fill and the router crawls. I've done a few things to keep the router from doing a complete face plant. The main thing is to enable CEF instead of using process switching (ip cef in global config mode) when used in conjunction with "service nagle" the router can do some effecient packet switching. Even with these preventative measures the router still slowed to almoost a stand still yesterday, at which point I used an access list to filter out all web traffic coming from our internal network destined for the internet. We could browse the web internally by using https://www.safeweb.com/ and email and web requests from the internet functioned better. This is because these worms open tens of connections per second and the router has to add a NAT entry for each attempted connection. Multiply that by 70 infected servers and that's a problem. Especially because many requests aren't responded to and have to be aged out of the NAT tables. To flush the NAT tables use "clear ip nat trans *" and your router will function fine long enough to put an access list on it :) Finally one last good idea is to black hole any private address space your not using because these worms will attempt to send packets to subnets that don't exist. For example: If your using 192.168.1.1/24 the worm might try to open a request to 192.168.3.66. This packet might get stuck in a routing loop needlessly tying up resources you really need. The solution is to "ip route 192.168.0.0 255.255.0.0 null0". This will drop any packets destined for unused subnets in the bit bucket where they won't bother you.
From a Unix machine I checked my logs for probes from hosed machines. Then
prompt> tftp ip.address.of.machine
tftp> bin
tftp> get autoexec.bat
file recieved someKb in blah:time
tftp>quit
if you edit the autoexec.bat file you just nabbed, you'll see it's not a batch file at all but some sort of binary. Weird stuff, just thought I'd share. Also this only works on about 75% of the compromised machines for some reason, the rest just time out on transfer. Thoughts?
As far as I know bin laden is the number one suspect here. I was wondering then if it is proven that he master minded this attack, then could this be considered to be a hate crime? As far as I understand he detests the US because it's not the Islamic based goverenment he envisions. What are people's thoughts on calling this a hate crime? I'm just wondering.
werd it's all in the subject ^^^
are the damn stripping santa's everyone sends me 5 of at x-mas. I've been using email for 7 years now, yet every friend or relative that signs up for aol thinks I haven't seen it. Sheesh! At an ISP I worked for at Christmas time we saw our email volume quadruple, but the number of messages sent only doubled. I was told it happened every year. Boycott the stripping santa this year!
Katz does have a point about the spam looking like a personal emails. Thank god they don't spoof their from addrress to look normal. Is there anything that can be done about that type of email abuse?
From my
localhost# cat/proc/cpuinfo
Mwaahahhahahhaaaa!
If Chewbacca lives on Endor, you must aquit.
appollogies for poor spelling
It wasn't until the US government realized that it relied on Ma Bell more than the post office that it decided to break them up. If I "was the gov't" looking at this, I'd remedy M$ so hard they'd have no idea what hit them.
If the gov't relies too much on the product(s) that M$ produces, then it will start to have issues. The gov't does realize the inherent strength in diversity.
You can make your own DSL modem too!
:) and we did this all the time. This was 3 years ago and we discovered that the customer's location had to be within about 18,000 feet from our POP to make it work. This is because the circuit goes to the CO first then your POP. The whole length must be taken into account. In upstate NY the "Dry copper circuits" are reffered to as BANA lines. We made sure to specify that we were looking for an unloaded pair when ordering, and we wouldn't accept installation on a loaded pair. On the down side there are no SLAs on BANA circuits other than you can read open/short accross the circuit. An if there is any work being done in the area, BANAs are the first thing to get shuffled around. Cheap... yes, but flakey as hell. Many, many things can break this sort of setup, so I wouldn't recommend it just for "fun" unless you like driving around putting up loops, testing them with a multi-meter and begging bell, er verizon, techs to swap out pairs that were working before but suddenly stopped, which the telco insists is good... etc...etc...etc.. Make sure you bring a bottle of scotch and a carton of smokes to appease any bell, er verizon, tech nice enuff to do this for you. It kept our tech happy.
On a more serious note, I worked for a company (name with held to protect the guilty
Eli Lilly (couldn't find stats on Roche quickly, so I picked any old famous drug maker)in the last six months had $5.84 billion in sales, of which $1.63 billion was profit (go ahead and check biz.yahoo.com symbol lly).
And that's NET after R&D is paid for. Remember these are companies, any revanues spent on anything, including R&D aren't taxed. Any traditional financial/manufacturing/etc. company would jiz themselves for a 28% profit margin, most have 3-10%
So how much money should a company make off of a drug? More than you and your extended family can earn in 200 years not ajusted for inflation?
http://www.dvdjukebox.com/
Talk about m4d 3r337!
Is because it sets the tone that ANY third party widget that some one slaps onto a Microsoft product is subject to their whim. You are to let them use the fruits of your labor as they see fit. And if you don't like it, then in the time it takes for you to win a law suit against them, they will have created a parallel technology and simply code you out of the OS.
This is bad because it establishes the fact that your app/plugin/whatever working in Windows is a priviledge that M$ can revoke if they decide they don't like you or if they want your revanue stream. I hope the US government takes the necessary steps to correct this sorry situation before the entire software industry is M$
I was suprised to see 486 chips on 3com Hiper Arch controllers and router cards and in netscout ethernet probes (586 chips). To AMD's credit it must be hard to compete with the ebay $5 for a bagful of working? chips. So it's probably more profitable to focus on faster procs. Maybe Ti, winchip, or cyrix will pick up the slack. Or this could open a niche for refurbished chips.
The server we built is a dual-933 with 3GB of memory, and 18GB of disk,this goes for about $9500 USD. Hope you got a tube of KY with that!
... of what Linux looks and feels like, then DemoLinux will give you the most bang for the least effort. Basically you burn the image to a cd, set the bios to boot off the CD and you're pretty much up and running. It comes with a descent ammount of programs installed (unfortunatelt Star Office is the French version even on the English distro). This is not intended to be a permanent desktop environment and it's not the "full" linux experience. But it also requiers almost no effort or dedicated hardware. It's easier to run than windows! I've found it to be the best distro to get a Linux newbie interest and hooked on this incredible OS.
Maybe the price of Tribes2 will start falling so normal people can buy it (I bought mine used at EB fer $25 :). If this spells the end for T2 it'd be a shame cause this is the first game in a while that actually looked like it coulda been a killer app. If you look at the minimum requirements you'll see that this game need some descent horse power just to get off the ground, pIII/thunderbird and 3D accel better than voodoo2. Hell.. A friend og mine hase q3 runing on an overclocked p166mmx with a voodoo3. Granted he only gets 30 fps. Too bad T2 was too damn expensive. Oh well, I'm just hoping the Linux version drops in price and the online game finder\player still works.
I'm no longer a teenager (well I could be a 15 year old with a decade of experience) but I "came of age" during the BBS era and I thought that the ammounts of information available to me were astounding, phone specs, bomb making, hacking, phreaking, and sweet sweet porn. Now that the information age has come of age, I feel that there is nothing I can't figure out with the help of a net connection. I could build a house, a business, I could write a book, or frag people I've never seen before. I can't imagine what this would do to some one ten years younger than me who sees his parents as pigeon-holed in their careers. The cynical sneers of their parents must look like an ignorant abomination to their wide eyed wonderment of the sheer number of possibilities. If there is anything a 15 year old should try to learn from their elders, I would say it's "emotional intelligence". Parent's aren't useless, but they can, despite their good intentions, be harmful...
there is the sciencenter's "Einstein's Attic Sale" usually in late September. They have cool computer stuff, science related electronics, labratory glassware, you name it! It's for a good cause and after 2pm the price on "stuff" drops to $25 a pickup truck load (they fill...sorry). They'll post the date of the sale on their site:
http://www.sciencenter.org/
According to my experience, my 100Mhz whizbang chip with a 512 bit bus, can roll up you P4 1.4ghz and smoke it!
I thought pointing out the shoddy design in some one's Intellectual Property was illegal according to the DMCA. Is Washington breaking their own law?
---===[end sarcasm]===---
To people crying "but copyright violations are illegal" all I can say is so were abortions, drinking, not facing your partner during intercourse, operating a CB radio, etc, etc. It's when our representitives pass st00pid laws that it becomes our duty not to abide by them. To do so would give them more power and make us less free. And honestly, getting your cable modem subscription canceled for flagrant disregard of copyright laws is a small price to pay.
As far as I'm concerned the media conglomerations have abused the original intention of copyrights, namely to give credit where credit is due. For the longest time media giants told us we were paying for the experience of the music/movie/what ever, which many years later we found to be complete BS. I can not take my musical experience of Toto, recorded on an 8-track, to the store and exchange it for the same experience on CD. They tied the experiece to the media and made phat l00t. Now in the digital age their collective panties are in a bunch over the fact that everyone discovered just how media independant the experience can be. And they haven't figured out how to pump us for nearly as much, and probably never will.
In my personal code of ethics, as long as I don't claim to be the creator of "Obladi Oblada", I won't have infringed on MICHAEL JACKSON's copyright no matter how many peeps suck the mp3 off my HD. Thank you, and good evening.