Well as unwilling as most people are to admit it, there must be some of them with at least some skill.
If they had that much skill, they'd be getting paid huge amounts of cash to do what they're capable of in some professional context, not sitting on IRC flooding connections.
You're also assuming some script kiddy wrote the exploits they use in the first place, that usually doesn't happen. Exploits come from other places, that have interests in keeping hidden. Script kiddies make perfect cannon fodder for these people.
I'm not asking for bending of rules -- I'm asking for different rules for different levels of user competence.
Yea, but what this comes down to in the actual environment is that you're asking the admin staff to risk having to do extra work, to risk staying late to fix your machine, to risk costing your company money. You're asking them to risk that based purely on your word that you "know what you're doing". How many self-proclaimed IT experts have you met who are actually completely clueless?
I appreciate that you don't like the way the parent described things, but unfortunately that is exactly the way they are and will stay for a long time in most companies. Its CYA CYA CYA in IT, and don't expect that to change just to make your life easier.
you don't necessarily have this luxury, unless you have someone else to hit 'record' for you.
My friend uses his bluetooth phone for that very purpose, so he can start recording while being sat behind the drumkit. On apples site bluetooth adds $50 to the price, not too sure about 3rd party adapters but they're pretty damn cheap, usb ones seem to be as low as $15. It looked pretty easy to set it up to control the mouse pointer in OSX.
Of course that's assuming you can get bluetooth phones fairly easily, here in the UK quite a few new phones support it and don't tend to cost too much more.
Were Linux in a dominant position instead, we might well be seeing similar stories about a few high profile sites struggling with an attempted switch to Windows
No we wouldn't because linux uses open standards to avoid that kind of lock-in in the first place.
I suppose non-root users can't send e-mail? And I suppose non-root users can't listen on a port for incomming instructions to execute? Or run a proxy server on a non-privleged port?
Not with SELinux or other ACL systems such as grsecurity and LIDS if they're given the right settings, revoke net capabilities from all users and only grant them to the ones that need it.
And will it stop a trojan which asks 'Root password needed to continue:' and then proceeds to use it to screw your system?
SELinux will yea, thats kinda the point of it. They're assuming your box is going to get rooted, and letting you protect it from what root can do to it.
Theres a couple of SELinux demo systems online that let you login as root, one here. Yep, anyone, anywhere, given free root, only you can't do anything with it. Normal linux, yep all your arguments stand, bung ACL's on there and its rock solid. Unfortunately its also a royal PITA to run a desktop machine on.
I've not got around to trying selinux yet but was thinking of the posibility of a perl script parsing its error log while its running in non-enforce mode and generating ACL's from that, anyone know if this would be possible? Would certainly make it a lot easier to setup a desktop workstation running SELinux.
Yep you're completely right, I was going for helpful/explaining but ended up coming off pedantic. Still I managed to confuse myself enough with iproute so good to see I can do it with others too:p
Running wondershaper here I also need to set the $UPLINK to a little less than my actual uplink value. I'm not entirely sure why. I think its something to do with the modem using its queue more when its getting near the lines capacity, as it assumes it may need the queue to act as a buffer soon (since it has no more line capacity to send over if the flow gets 10kbit bigger for example), but while its below this threshold it doesn't buffer the packets so much/at all.
Perhaps someone with a bit more clue could help out as I am guessing on that one.
Wondershaper does actually prioritise SSH and ACK packets according to the docs on the new version so you shouldn't need to alter it for that.
Great complaints guys, nicely worded, making the OSS community sound well informed, educated and intelligent, which should put the journalist of that article to shame.
Just one thing, ask for an apology from the journo.
If he said such things about any non-free software he would be sued into oblivion.
Oh, you might also want to subtly mention that the bbc just lost half its upper management because they published unsubstanciated information so its not exactly wise for them to be doing EXACTLY the same thing less than a week after the results of the Hutton report.
Bit lame replying to myself but while we're on the subject:
You can mark packets from iptables rules and tc can read those marks and use them to classify traffic by using the mangle rules and --set-mark.
Sounds simple but that gives you incredible power to setup QoS on linux routers. You can provide QoS on any of the filters iptables uses, so for instance you could use the layer 7 protocol filters (experimental) and limit traffic by protocol even if it's running over non-standard ports.
Afaik no Cisco/Juniper/Foundary/Anything else can do this. Most seem only able to deal with classifying based on port or IP addresses, and sometimes with diffserv, which is also possible with iptables/tc (reading the TOS field).
Since VoIP and similar are getting more and more popular, QoS is going to become more of an issue, nice to see linux could be well out in front on that one.
Sets those ports to only use up 200k of my 256k upstream leaving me the rest for SSH etc.
Not quite, you're shaping your entire uplink to 200kb and not using the extra at all. To quote the wondershaper source:
# shape everything at $UPLINK speed - this prevents huge queues in your # DSL modem which destroy latency: # main class
tc class add dev $DEV parent 1: classid 1:1 cbq rate ${UPLINK}kbit \ allot 1500 prio 5 bounded isolated
Thats the class all uploads are shaped through. If you read the script all the other traffic classes are set with parent 1:1 which is the classid of the above. With tc you have to run all traffic through the available classes otherwise it gets 0kb rather than any remaining bandwidth, I accidently broke a netcafe once by forgetting to put DNS traffic into any class. Wondershaper does actually assign all traffic to 3 classes within the above, each with differing priority.
The ports you mention are given lower priority but within that class, so within that bandwidth set in $UPLINK.
You can be sure that Sony will in some way make the PS3 backwards compatible with the PS2, and likely even the PS1
I'm not so sure, if they do software emulation like you say then its a definate possibility. The reason the PS2 can play PS1 games is because the IO chip in the PS2 is the same chip used as the main CPU in the PS1.
Instead he ends up doing community service. Exeter is about half an hour from here. The community service in this part of the UK is an incredibly harsh and difficult punishment. I'll describe it for those who have not come across its horrors before.
Its likely that he will end up being forced to sit in a sunny field in the middle of the Devon countryside smoking joints and drinking cans of extra strong lager with all the other community service peeps, while they supposedly dig some ditch that doesn't need to be dug so nobody will ever care about it actually being done or not.
Not to flame but gentoo is a long way from slackware, and unlikely to ever be that similar. It certainly won't be as fast unless the entire base system is re-written to be much less complicated. Sure the binaries might run a tiny amount faster but as you say this often isn't the driving factor, and if you install stuff on slack from source its irrelevant.
Slackware is so simple, clean, easy to understand the entire init/boot process within 5 minutes of cat'ing the scripts. It boots up in about 1/10th the time of gentoo (and most other OS's), and can easily be tweaked to do that faster (stopping ldconfig running at boot nearly halves slacks startup time).
I used slack for years, then went to freebsd because of the ports, then went to gentoo because of emerge. If its true that portage is going to appear on slackware, all i can say is woohoo!. I'll dump gentoo in a second if their packaging system ends up in slack. The main problem I had with slack was keeping software up to date, even compiling from source it was damn hard to not end up breaking things after a few glibc upgrades. Portage could cure that.
I'm all excited at the thought of getting slack back, damn I need to go outside more often:-)
Grrr, yet more websites contributing the the illusion that PHP/MySQL cannot scale due to silly programming mistakes.
Use @mysql_connect() and exit gracefully if it can't connect. They've just advertised the fact they use no mysql password to the world, aswell as showing an extremely ugly error message when they could have either cached the article or given a nice "sorry, try again in a bit".
If a function be advertised to return an error code in the event of difficulties, thou shalt check for that code, yea, even though the checks triple the size of thy code and produce aches in thy typing fingers, for if thou thinkest ``it cannot happen to me'', the gods shall surely punish thee for thy arrogance.
Probably 99% of PHP coders around completely ignore this, if you're reading this and you use PHP, check the return values!
My thoughts were, wow, much faster. I'm now running 2.6 on all my desktop machines and it flies. They "seem" much more responsive with 2.6 than 2.4, especially under load.
The initial boot time to load the kernel seems to have massively dropped although I could be imagining that.
The new build system in 2.6 definately rocks, forgot to compile something important in? No need to wait for * to recompile anymore, just the vital parts are re-done.
Are you talking about programming with it or using it for displaying the editor?
I can't speak for SWT coding, but SWT GTK runs fine in linux, so does eclipse. I wouldn't have been using it as my main editor for the last 2 years otherwise. I've had the motif and GTK versions running on sub 500mhz machines and they're still plenty useable enough to develop on. Thats even on different distro's with different versions of java installed. Sounds like a local issue rather than a problem with SWT.
SWT works great for rendering eclipse, it gives my theme widgets on the editor instead of some custom/java/simplistic look that doesn't fit in with the rest of my desktop. Whats the problem with it? Could you link to the bugzilla?
To ask a possibly flamebaitish question or not...hrm...well I don't know the answer so here goes, take it as you will.
Why are the centrino's clock speeds considerably slower than many other CPU's around?
What are the benefits of that, does a 1.5ghz pentium M run faster than this 2ghz celeron laptop? Are the clock ratings fairly irrelevant? I can see it'd need less cooling, but 2ghz laptops are pretty small and seem to cool themselves OK, what gives, all marketing?
Slashdot Mirror
We've heard from many of our fans that have been duped, and who have accidentally shelled out their hard-earned dineros.
Hold on, didn't they stop when it asked for their credit card number for a free download?
That just sounds a little OTT for me, surely people aren't actually that stupid?
Well as unwilling as most people are to admit it, there must be some of them with at least some skill.
If they had that much skill, they'd be getting paid huge amounts of cash to do what they're capable of in some professional context, not sitting on IRC flooding connections.
You're also assuming some script kiddy wrote the exploits they use in the first place, that usually doesn't happen. Exploits come from other places, that have interests in keeping hidden. Script kiddies make perfect cannon fodder for these people.
I'm not asking for bending of rules -- I'm asking for different rules for different levels of user competence.
Yea, but what this comes down to in the actual environment is that you're asking the admin staff to risk having to do extra work, to risk staying late to fix your machine, to risk costing your company money. You're asking them to risk that based purely on your word that you "know what you're doing". How many self-proclaimed IT experts have you met who are actually completely clueless?
I appreciate that you don't like the way the parent described things, but unfortunately that is exactly the way they are and will stay for a long time in most companies. Its CYA CYA CYA in IT, and don't expect that to change just to make your life easier.
you don't necessarily have this luxury, unless you have someone else to hit 'record' for you.
My friend uses his bluetooth phone for that very purpose, so he can start recording while being sat behind the drumkit. On apples site bluetooth adds $50 to the price, not too sure about 3rd party adapters but they're pretty damn cheap, usb ones seem to be as low as $15. It looked pretty easy to set it up to control the mouse pointer in OSX.
Of course that's assuming you can get bluetooth phones fairly easily, here in the UK quite a few new phones support it and don't tend to cost too much more.
Also they might get disqualified because someone else using the same pseudonym has offensive opinions.
Using lynx, links or dillo will give you a similar browsing experience on your main PC.
Using mozilla with images blocked from images.slashdot.org will probably have the same effect aswell.
Were Linux in a dominant position instead, we might well be seeing similar stories about a few high profile sites struggling with an attempted switch to Windows
No we wouldn't because linux uses open standards to avoid that kind of lock-in in the first place.
by posting to /.
:-)
Unfortunately you forgot a link.
We'll demonstrate its capacity, or lackof therein, for ya
...when my main linux browser was netscape 4.7, oh my god the horror!
Seconded, thank you Mozilla team for saving my sanity.
I suppose non-root users can't send e-mail? And I suppose non-root users can't listen on a port for incomming instructions to execute? Or run a proxy server on a non-privleged port?
Not with SELinux or other ACL systems such as grsecurity and LIDS if they're given the right settings, revoke net capabilities from all users and only grant them to the ones that need it.
And will it stop a trojan which asks 'Root password needed to continue:' and then proceeds to use it to screw your system?
SELinux will yea, thats kinda the point of it. They're assuming your box is going to get rooted, and letting you protect it from what root can do to it.
Theres a couple of SELinux demo systems online that let you login as root, one here. Yep, anyone, anywhere, given free root, only you can't do anything with it. Normal linux, yep all your arguments stand, bung ACL's on there and its rock solid. Unfortunately its also a royal PITA to run a desktop machine on.
I've not got around to trying selinux yet but was thinking of the posibility of a perl script parsing its error log while its running in non-enforce mode and generating ACL's from that, anyone know if this would be possible? Would certainly make it a lot easier to setup a desktop workstation running SELinux.
Yep you're completely right, I was going for helpful/explaining but ended up coming off pedantic. Still I managed to confuse myself enough with iproute so good to see I can do it with others too :p
Running wondershaper here I also need to set the $UPLINK to a little less than my actual uplink value. I'm not entirely sure why. I think its something to do with the modem using its queue more when its getting near the lines capacity, as it assumes it may need the queue to act as a buffer soon (since it has no more line capacity to send over if the flow gets 10kbit bigger for example), but while its below this threshold it doesn't buffer the packets so much/at all.
Perhaps someone with a bit more clue could help out as I am guessing on that one.
Wondershaper does actually prioritise SSH and ACK packets according to the docs on the new version so you shouldn't need to alter it for that.
Great complaints guys, nicely worded, making the OSS community sound well informed, educated and intelligent, which should put the journalist of that article to shame.
Just one thing, ask for an apology from the journo.
If he said such things about any non-free software he would be sued into oblivion.
Oh, you might also want to subtly mention that the bbc just lost half its upper management because they published unsubstanciated information so its not exactly wise for them to be doing EXACTLY the same thing less than a week after the results of the Hutton report.
Bit lame replying to myself but while we're on the subject:
You can mark packets from iptables rules and tc can read those marks and use them to classify traffic by using the mangle rules and --set-mark.
Sounds simple but that gives you incredible power to setup QoS on linux routers. You can provide QoS on any of the filters iptables uses, so for instance you could use the layer 7 protocol filters (experimental) and limit traffic by protocol even if it's running over non-standard ports.
Afaik no Cisco/Juniper/Foundary/Anything else can do this. Most seem only able to deal with classifying based on port or IP addresses, and sometimes with diffserv, which is also possible with iptables/tc (reading the TOS field).
Since VoIP and similar are getting more and more popular, QoS is going to become more of an issue, nice to see linux could be well out in front on that one.
Not quite, you're shaping your entire uplink to 200kb and not using the extra at all. To quote the wondershaper source:
Thats the class all uploads are shaped through. If you read the script all the other traffic classes are set with parent 1:1 which is the classid of the above. With tc you have to run all traffic through the available classes otherwise it gets 0kb rather than any remaining bandwidth, I accidently broke a netcafe once by forgetting to put DNS traffic into any class. Wondershaper does actually assign all traffic to 3 classes within the above, each with differing priority.
The ports you mention are given lower priority but within that class, so within that bandwidth set in $UPLINK.
Screenshot here.
Thats just a menu screen though, iirc in the actual game on the bbc everything was wireframe.
I think the later version of it was called frontier. Searching with that should get a few more results.
You can be sure that Sony will in some way make the PS3 backwards compatible with the PS2, and likely even the PS1
I'm not so sure, if they do software emulation like you say then its a definate possibility. The reason the PS2 can play PS1 games is because the IO chip in the PS2 is the same chip used as the main CPU in the PS1.
Its mentioned here
I believe the application form is in ~admin at 131.225.70.2 :-)
Instead he ends up doing community service. Exeter is about half an hour from here. The community service in this part of the UK is an incredibly harsh and difficult punishment. I'll describe it for those who have not come across its horrors before.
Its likely that he will end up being forced to sit in a sunny field in the middle of the Devon countryside smoking joints and drinking cans of extra strong lager with all the other community service peeps, while they supposedly dig some ditch that doesn't need to be dug so nobody will ever care about it actually being done or not.
That'll learn 'im.
heh, do you really think you can /. the bbc?
Have a look here to see their traffic. Totals are here. They can handle 2gb/sec. Thats some monster pipe, and it will take some severe slashdotting.
On the count of three, hit refresh like a mofo. If all 600,000 of us do it we might just create a tiny lump on that graph.
Not to flame but gentoo is a long way from slackware, and unlikely to ever be that similar. It certainly won't be as fast unless the entire base system is re-written to be much less complicated. Sure the binaries might run a tiny amount faster but as you say this often isn't the driving factor, and if you install stuff on slack from source its irrelevant.
:-)
Slackware is so simple, clean, easy to understand the entire init/boot process within 5 minutes of cat'ing the scripts. It boots up in about 1/10th the time of gentoo (and most other OS's), and can easily be tweaked to do that faster (stopping ldconfig running at boot nearly halves slacks startup time).
I used slack for years, then went to freebsd because of the ports, then went to gentoo because of emerge. If its true that portage is going to appear on slackware, all i can say is woohoo!. I'll dump gentoo in a second if their packaging system ends up in slack. The main problem I had with slack was keeping software up to date, even compiling from source it was damn hard to not end up breaking things after a few glibc upgrades. Portage could cure that.
I'm all excited at the thought of getting slack back, damn I need to go outside more often
Use @mysql_connect() and exit gracefully if it can't connect. They've just advertised the fact they use no mysql password to the world, aswell as showing an extremely ugly error message when they could have either cached the article or given a nice "sorry, try again in a bit".
This is one of the programming commandments given to us by god thousands of years ago.
Probably 99% of PHP coders around completely ignore this, if you're reading this and you use PHP, check the return values!
mplayerplug-in is your friend.
My thoughts were, wow, much faster. I'm now running 2.6 on all my desktop machines and it flies. They "seem" much more responsive with 2.6 than 2.4, especially under load.
The initial boot time to load the kernel seems to have massively dropped although I could be imagining that.
The new build system in 2.6 definately rocks, forgot to compile something important in? No need to wait for * to recompile anymore, just the vital parts are re-done.
Are you talking about programming with it or using it for displaying the editor?
I can't speak for SWT coding, but SWT GTK runs fine in linux, so does eclipse. I wouldn't have been using it as my main editor for the last 2 years otherwise. I've had the motif and GTK versions running on sub 500mhz machines and they're still plenty useable enough to develop on. Thats even on different distro's with different versions of java installed. Sounds like a local issue rather than a problem with SWT.
SWT works great for rendering eclipse, it gives my theme widgets on the editor instead of some custom/java/simplistic look that doesn't fit in with the rest of my desktop. Whats the problem with it? Could you link to the bugzilla?
To ask a possibly flamebaitish question or not...hrm...well I don't know the answer so here goes, take it as you will.
Why are the centrino's clock speeds considerably slower than many other CPU's around?
What are the benefits of that, does a 1.5ghz pentium M run faster than this 2ghz celeron laptop? Are the clock ratings fairly irrelevant? I can see it'd need less cooling, but 2ghz laptops are pretty small and seem to cool themselves OK, what gives, all marketing?