Slashdot Mirror


User: lamour

lamour's activity in the archive.

Stories
0
Comments
58
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 58

  1. buffer overflow on Microsoft Rolls Out iLoo · · Score: 1
    Brings a new meaning to flushing the buffer, doesn't it?

    ...and would you really want to walk in? I mean, can you name a vendor more plagued by buffer overflows?

  2. Re:Basics on Securing Your Network? · · Score: 1

    My suggestion about #3 is that you read this site. Some of the statistics in the papers on that site show that brutalizing your users as you suggest doesn't solve the problem, it just moves the problem. It just depends on where you think your biggest threat is.

    I also consider this to be an excellent paper on the topic of network security. It's short, but it brings up most of the big issues.

    But then, I'm posting on /. so I probably don't know what I'm talking about either. ;-)

    for what it's worth,
    Michael

  3. Loose Source Route scanner and tunnels on Black Ops of TCP/IP: Paketto Keiretsu 1.0 Release · · Score: 4, Interesting

    A friend of mine wrote an LSR scanner and an LSR tunnel tool which you probably won't understand either. Go get them, play with them, and then think about what it means. Here's his short paper on LSR.

    While I'm here, let me just bitch for a second. I "love" slashdot. I can sort of understand the people who complain when a non-geeky story gets posted, but I just can't understand someone who complains when a technical story gets posted. "News for Nerds" dude! You can't get a whole lot nerdier than this. Stop complaining and go read some FMs. If you can't handle it, go read Wired or something instead. I'm happy to have a story posted here that my 7 year old doesn't understand yet...it gives us something new to talk about. ;-)

    IMHO,
    Michael

  4. Re:I get more functionality in X than Aqua... on What's Keeping You On Windows? · · Score: 1

    I'm such a dork...how could I forget:

    9) Cut & Paste - Doing this in X is MUCH more efficient than on the Mac GUI. You just select the text and then middle click (I have a 5 button wheel mouse on the Mac, so this wouldn't be a problem). I hate having to do the Cmd-C/Cmd-V thing.

    I'm sure I'm forgetting more stuff too,
    Michael

  5. I get more functionality in X than Aqua... on What's Keeping You On Windows? · · Score: 1

    It amazes me sometimes that I am one of the few people who really seems to say anything about a couple issues I have with OS X. I've never really used Windows, so I can't say how much of this it suffers. Anyway, I just wonder if anyone else cares about these issues at all.

    Quick background: I've been using Macs since the 128K Mac back in 1985. I've purchased 5 Macs. Even so, I've never really been a Mac power user. I've used a Sun as my primary desktop at work since 1988. I love Unix. I'm attempting to become happy with my G4 with Jaguar as my desktop box at home. I've been using Linux as my desktop at home for the past couple years (until Jaguar came out).

    1) Click to Focus - yuck! I hate click to focus. I ALWAYS use Focus Follows Mouse. I find all the extra clicks to be wasteful.
    2) Auto-Raise - This paired with the first issue makes it impossible to overlap windows and type in a window that isn't on top. Anyone who doesn't understand this issue probably doesn't use a cmdline very often.
    3) Send Window to Back - Basically, having the ability to do this allows you to have a stack of windows, and cycle through them easily. I'm not a huge fan of the dock. I just want to be able to hit a keystroke and get to the window I'm looking for. I shouldn't necessarily need to use the mouse to get to it.
    4) Open File dialog - I agree with you! I can't figure out what they're trying to do with that.
    5) Terminal - This stupid @$%#$%!& app swallows the PgUp/PgDn keys and just "helpfully" scrolls the terminal window for me. What if I'm running an application IN the terminal window that I need to send these chars to??? Even the old dialup programs used to have special buttons or menus to send any characters they swallowed for any interface reasons.
    6) Mail - The other night I was trying to attach a photo to a mail message, and when I double clicked the folder in the dialog box so I could click on the pic to attach, the application decided that I must mean that I wanted to attach the whole freaking 178MB folder to my email message!!!! After listening to my disk do the dance of joy for about 12 minutes, I just power-cycled it so I could get back to work. The one time I wanted to be annoyed by a dialog box asking me if I was sure I wanted to do something, and there was none. :-/
    7) iTunes and iPhoto - Both of these apps have the same "feature". When you tell iTunes to add songs to the list of songs in your library, it COPIES the song files from the dir where they are into your home directory!! I worked around this with symlinks, but this is stupid. Even if I hadn't partitioned my disk such that iTunes filled one up with this feature, I still wouldn't want 2 copies of all those songs on my drive. I guess they figure that I've never ripped a CD before I loaded Jaguar, and that none of my family members like the same songs that I do.
    8) File system view - What can I say here? The fact that the effective root directory from the GUI and from the cmdline are different is just insanely confusing. IMHO, this is made even worse if you partition the drive.

    All that said, I think I like OS X better than 9, but I struggle to like it as much as using X on Unix. Perhaps 10.3 or 10.8 or 11.0 will be more to my liking.

    IMHO,
    Michael

  6. Paradox of the Slashdot Effect? on Wireless Internet In An Off-Grid House · · Score: 4, Funny

    ok, someone explain this to me. For a site to get slashdotted, slashdot readers would need to click through to read the articles...but as a long-time slashdot reader, I know that nobody here actually reads the articles, so...what's really taking down all these web servers?

  7. Java... 'nuff said on Words That Speak a Thousand Pictures · · Score: 2, Insightful
    the behavior of that site was not in line with most (considerate) websites, it is reasonable that the poster would be annoyed.

    How???? He had to go to the site and then go to the prefs in his browser to turn on Java and then click on the link that said it was going to analyze the entire text of some long book and make pretty pictures out of it...in Java. (and if he didn't have to turn on Java, then he's probably due for some more disappointment in the future) What alternative does the site have to make their research available to others? Should they have just put up this note?

    We are doing some cool research, and we've
    developed this really cool tool that we'd
    love to let you play with, but we're worried
    that some individuals may have unreasonable
    expectations of how powerful their machines
    are and we don't want to burst their bubbles,
    so instead, we'll just keep it to ourselves.

    that's just silly. I mean, the system recommendation contains the following:

    • 600 Mhz Pentium III or faster
    • 256 Mb of RAM
    • A fast internet connection
    • No other memory-intensive programs running
    • Netscape 6.2 (the most recent) browser (RECOMMENDED for fastest Java)


    Sounds like a good enough warning to me that if you're using a 486 with 32MB of RAM over a dialup, that, perhaps, you don't want to try running it.

    IMHO,
    Michael
  8. Nausicaa on Disney Aquires Sen to Chihiro, Lasseter to Dub · · Score: 1

    ...Laputa (or Castle in the Sky as they're calling it). It always generates the biggest and best reaction amongst first-time Ghibli viewers IMHO.

    I've heard that from others too. I was underwhelmed by the ending, but it's been a while since I've seen it. Perhaps I missed something. I found Nausicaa to be a much better movie. That's still my favorite of all the ghibli films I've seen.

    Either way, I'd love to have Nausicaa, Laputa, Porco Rosso, and Kiki's on DVD.

    IMHO,
    Michael

  9. Re:An incorrect assumption? on Jef Raskin Talks Skins · · Score: 1

    > I know that I like changing my window background
    > to 20% grey. It provides enough contrast without
    > blasting my eyes with bright white light.

    I used to think that too. Try a better monitor, and do not set it to maximum contrast. (I'm serious about this. Black on white is much more readable.)


    for YOU! That's the whole point. I agree with him. It strains my eyes to stare at any color text on a white background for a long time. I've been told that I have extreme photosensitivity. Perhaps that's why. I don't know, but I'm positive it's not because of the quality of the monitors I use.

    Regarding your example of source code, you cannot customize the way code looks when reading a book. Still, you probably do read example code in books, don't you? And you probably don't have too much difficulty doing so.

    No, but I can read code much more efficiently when it has been color-highlighted. I even set up enscript to print color-highlighted code to a color printer I used to have in the office, since it was so much easier to read. I *CAN* read unhighlighted code, but it's easier for me to read highlighted code. Easier for me...maybe not someone else.

    Customizability is what allows people with different issues, preferences, situations and backgrounds to use the same software. I've worked with people who were color blind who set colors on their desktop that were painful for others to see, but they were the best colors for them. I've worked with blind people who have the damnedest time convincing software developers that their application is needlessly tied to a GUI when text-based interfaces would be more than enough to access all the functionality. I work with someone who had to switch to a Kenesis keyboard to prevent strain on his wrists. I can guarantee that there are few things short of the red on red trick that would be more limiting to a guest user on his machine. I've had a 9600 baud modem connection to the Internet at the same time that I've had OC-3 access at work, yet I used the same browser for each, just configured differently. My mom, my wife, my kids and I all have computers that run Mac OS. They aren't configured even close to the same. This is because of the wildly varying skill-levels of the users. The needs are different. The configurations are different.

    I've also used Unix computers in many different lab settings, and configured the hell out of every single application I used with absolutely *NO* impact to *ANY* other user of those systems. Why? Because Unix was designed to be a multiuser system and allows for personal settings to be stored in a user's home directory, and those labs were designed to have portable home directories so that a user's settings can follow them around from machine to machine.

    I don't care what any UI guru says, I'm not giving up my .emacs file.

    IMHO,
    Michael

  10. Re:Barbara Tuchman on Writers Who Will Stand the Test of Time? · · Score: 1

    The Guns of August is easily the best history book I've ever read. It has been a LONG time since I read it, but I remember it being historically accurate yet written in more of the style of a fiction book.

    I read a second book by her after that (Zimmerman Telegraph?) which I also liked, but not as much.

  11. Re:Samuel Delany? on Writers Who Will Stand the Test of Time? · · Score: 1

    I love Delany. I haven't read Dhalgren yet (though I've owned it for many years). As you point out, it's kind of long, and I read somewhere in a newsgroup that one should not try to read it without some familiarity with his writing style. So, I collected a few of his books (I have 16 on my bookshelf). I probably got through around half of them before I stopped reading everything except manuals. (About a year ago I started to read pleasure books again, but Dhalgren isn't on my short list yet)

    Just for the record, I hated Joyce. I hated him. Of all the authors I was forced to read in high school, I think I only rate Melville below Joyce. That said, I kind of understand why people compare Delany to Joyce, and I still love Delany anyway.

    Most of Delany's books are much shorter than Dhalgren. If you can find one, try reading it first. I think Triton was the one I liked best. Einstein Intersection was the first one I read. It was given to me by a high school english teacher to challenge my belief that whatever drip I was reading at the time was the best sci-fi writer in the world. ;-)

    for what it's worth,
    Michael

  12. my kids are worth the $ for a book on The Space Child's Mother Goose · · Score: 1

    If it's out of print, and I can't get it anywhere, then a printout is maybe all I can have, but if someone gave me a choice between a bound book or a printout, I'm going with the book.

    I print out manuals and such all the time, and that's fine. But for a literary work, I'd rather have a book. Especially a kids book, which usually has good artwork.

    and frankly, I'd rather my kids get the impression that I think they're worth the money for a real book. My kids, at 6 & 4, already have more books than I had when I left home for college, and I'll keep buying them books as long as they keep reading them...

  13. current kids TV on The Space Child's Mother Goose · · Score: 1

    well, I would guess that you don't have kids of this age, and are just postulating based on "popular" opinion.

    Seseme Street is still on, though I find it quite a bit more lame than it was when I was a kid. And they brought back Zoom about 3 years ago. Electric Company is still dead, and that kinda sucks. I loved that show.

    However, all is not lost. There are shows like Arthur, Dragon Tales, Clifford, Caillou, Sagwa and the like that deal with social skills. There are shows like In Between the Lions (this show rocks!) and Reading Rainbow which focus on reading skills. Noddy is kind of a cool show. And were still just on PBS.

    If we hop over to Nick Jr., we get shows that promote problem solving and "audience" participation with Dora the Explorer and Blues Clues. And more social shows like Franklin and Little Bill and Maurice Sendak's Little Bear.

    On Disney, we have some other cool shows like PB&J Otter and Out of the Box.

    It's not all bad...and having cable or a dish helps, but just because all you hear about is teletubbies and barney doesn't mean all of the kids shows suck that bad.

  14. Emacs, Epoch, Lucid Emacs, XEmacs, where next? on GNU Emacs 21 · · Score: 1

    I would love to have a rational answer to this as well. I started out on Emacs, went to Epoch, and then to Lucid Emacs when 19.1 was released. I used it until it became XEmacs, and I still use it today.

    When Stallman's Emacs 19 came out, I immediately downloaded it and installed it, and found it unusable. I think it finally became usable around 19.16 or so, but still lacked features I liked in Lucid Emacs at the time. I installed many versions of GNU Emacs before I eventually quit, because I never used it.

    A lot of the "new" features listed here for GNU Emacs 21 have been in XEmacs for quite a while now. I want someone to make a compelling argument for why I should try Emacs again. No bile. Just facts and reason. I want to choose an editor on the merits of the editor not on the ideology of the developers.

    Thanks,
    Michael

  15. No...you have it backward on Anti-DDOS Alliance In The Works? · · Score: 1

    being the company grc is, I'm 100% sure they had all their patches up to date

    Not grc need to patch their systems. The people who's boxes were owned and used to attack grc need to patch their systems. zyklone's 100% right. DDoS can happen because so many machines on the Internet are trivial to own. Without all those boxes being fixed, the ISPs and everyone else is at the mercy of the hackers.

    Remember, Code Red only uses an IIS 5 vulnerability. What percentage of Windows boxes on the Internet is that? I'd guess small. What if the next worm uses a general Windows bug instead of just IIS? What if they ALL started flooding? This is the point I think zyklone was trying to make. Until everyone takes responsibility for the security of their own boxes, everyone else is at risk.

    A site being slashdotted would be allowed because the traffic is from tens of thousands (maybe even millions) of IP addresses (as opposed to a few hundred from the typical ddos attack) all going after tcp port 80 (which is a standard port, as opposed to UDP port 5785, which isn't a standard port for anything afaik)

    Heard of Code Red? Read your comment again with that in mind. Doesn't seem so cut and dry now, does it?

    IMHO,
    Michael

  16. Re:Passwordless Authentication on OpenSSH Management - Understanding RSA/DSA Authent · · Score: 1


    1. Hostbased Authentication

    2. rhosts/shosts authentication

    3. ssh-agent


    4. Kerberos

    If you're looking for passphraseless-entry for interactive use, this is the right answer, IMHO. You kinit to get a TGT. Then you can ssh into any host in the kerberos realm "for free". And using ssh ticket-forwarding you can even chain the ssh sessions from host to host. That allows you to do something cool like:

    ssh -t foo.bar.com ssh -t guinness.bar.com ssh -t iron.bar.com xemacs -nw

    without having to type a passphrase. Or say that your desktop is sand, and you've ssh'd into law, and then you decide you want to ssh into upc. You don't have to pop a new Eterm on sand to ssh to upc. You can just ssh from law to upc without a passphrase. This doesn't require home directory sharing across the machines (which you might not want on a server, say). And it doesn't require the maintenance of host keys, because it's still user authentication.

    Of course, it does require the mantenance of a kerberos realm, but that's the right thing to do anyway. (krb5 patches for openssh are available)

    it's the best way...bar none,
    Michael

  17. Re:the Handera 330 rocks! on On the Question of Handhelds: iPaq Best? · · Score: 1

    What sort of applications are available that use the extra resolution?

    read the memoware review. it has all sorts of details on that. All the stuff on the CD supports the higher res, and that includes Aportis Doc and Teal Doc.

    So far (a whole week or something), every app I've tried has worked fine without a hitch. As the handera I have access to is my wife's (mine's not here yet), I haven't had a chance to go completely nuts with testing stuff yet.

    impatiently awaiting mine to show up,
    Michael

  18. Re:The HandEra does sound sweet... on On the Question of Handhelds: iPaq Best? · · Score: 3
    It is. The screen is wonderful. in the small font you can get 80 chars in landscape mode. The backlight is nicer than the one on the palm...and having the graffiti area backlit is truly wonderful if you're trying to scrawl in the dark. I also actually found the jog dial and "escape" button to be fairly useful for one-handed navigation. I think it's a really nice PDA.

    The box that the handera is packaged in claims that it has MP3 support. I'd guess it would have to be a CF card, but there is no further info in the box to tell me where I can order any of the accessories they claim to support on the box (they claimed a couple other things on the box that I was skeptical of as well).

    Other "useful" info:

    the CD is Windows only...and some of the Handera licenced software on the CD can only be loaded on a PC. This is a real bite, since one of the vendors even has a Mac and a Linux version of their software. No info was included on how to transfer the license to a version that I could use. (I refuse to load Windows on a box just so I can load an app onto my PDA)

    I had to download the latest Palm Desktop software for my Mac to sync anything to it. (note that there was no indication in the included materials of how to do this or even that this would work, even though they claim Mac support on the box.) I was also able to use Pilot Link under Linux on my Vaio. I had to use the serial port though...in limited playing I couldn't get it to sync over IR. I'm sure I had something set up wrong on my laptop though. After reading through the Inrared-HOWTO and doing some google searches, I just gave up and plugged in the Viao dongle thing with the serial port on it, and synced with that without problems.

    There's a wonderful review at MemoWare that you should definitely read if you're thinking about buying one. I couldn't sift through all the marketing BS at handera's website to figure out what it could and couldn't do. After reading the PDA newsgroups and this review, I was convinced that my money would not be wasted buying one. After getting one, I am convinced that it was worth the money. (second one is on order)

    YMMV,
    Michael

  19. the Handera 330 rocks! on On the Question of Handhelds: iPaq Best? · · Score: 2
    I got one for my wife (mine hasn't shown up yet), and I have to say that they did a fantastic job designing this little beast. It doesn't have color, but then, I didn't want color on my PDA. I just wanted the higher resolution. The 2 card slots, jog dial, and other stuff is just a bonus.

    You can read the marketing hype at Handera's website. [Note: Handera used to be TRG, but changed their name for some silly reason] Or you can read this excellent review at MemoWare.

    The only thing I disagree with them on is the use of serial instead of USB. I can understand their desire to make it compatible with all of the palm III add-ons, but still.

    As for linux support...I have no idea.

    for what it's worth,
    Michael

  20. of Netscape and Mozilla fame? on Diskless Linux Kiosks · · Score: 1

    Am I the only one disgusted by this? of all the wonderful things JWZ has done for my geek quality of life, all you can come up with is Netscape? Frankly, I'm busily trying to forget that he was ever involved in Netscape.

    XEmacs (well, technically, Lucid Emacs), BBDB, xscreensaver, xkeycaps, xdaliclock, his PostScript audio cassette labeler, and a host of other stuff...and you picked Netscape.

    If anything, his fame came from emacs, not netscape.

    IMHO

  21. Blast! on Searching for Exceptional Multimedia Productions? · · Score: 1

    Well, since you mentioned Stomp...

    The show Blast! is pretty cool too. It's kind of like a drumcorps show on a theatre stage. The variety of music is good. The quality of the music is excellent. All of the props, costumes, choreography and "special" effects are very, very simple but come together in interesting ways. A wonderful, wonderful example of the whole being greater than the sum of the parts.

    I found the website here.

    for what it's worth,
    Michael

  22. Re:yuck on To Z Or Not To Z · · Score: 1

    despite being smaller and simpler, it's more powerful. it provides branching pipelines for example:

    % cmp <{echo hello world} <{echo hello Xorld}
    /fd/6 /fd/5 differ: char 7


    you are so right...that is so much more powerful than this:

    zsh% cmp <(echo hello world) <(echo hello Xorld)
    /proc/self/fd/11 /proc/self/fd/12 differ: char 7, line 1


    Next time, at least look at the shell before dismissing it. I gave that courtesy to rc when it came out. I've been using zsh for over 10 years (way back when Paul Falstad was still at UPenn working on it). I've used the other shells, but I just like the feature set of zsh better.

    But honestly, the best shell ever was the adventure shell. ;-)

    (wish I still had a copy...especially with April Fools coming up. ;-)

    IMHO,
    Michael

  23. Re:AFS has very good support for ACLs on Access Control Lists In Linux Filesystems? · · Score: 1

    Mode bits are completely ignored in AFS, for both files and directories.

    I agree with everything else you said, but this is, of course, overstated. File permission bits are treated identically for everyone who has access to the directory, but they aren't ignored. All users with access to the directory use the owner permission bits for the files in it.

  24. Re:distributed interactive shell? on Sun Releases Grid 5.2 for Linux · · Score: 1

    GridEngine also comes with a "grid-enabled" interactive tcsh, so you can have an interactive shell running which is actually spawing work all over the compute farm, as resources are available.

    Sweet! How would that work?

    tcsh% hostname
    firstpost
    tcsh% hostname
    beowolf
    tcsh% hostname
    hotgrits
    tcsh% hostname
    portman

  25. What about Jabber? on IRC Improvements · · Score: 1

    I tried Gale about 4-5 months ago. gale is strange. gale is basically encrypted zephyr without kerberos authentication. There are some nice things about gale, but it just didn't do what I wanted the way I wanted. YMMV.

    after trying Gale, I tried Jabber. I think jabber is much closer to the answer I was looking for. I just wish it was closer to done than it is...and I REALLY wish there was a clearer map of all the jabber-related projects.

    All I wanted was an easy to set up and easy to use chat/messaging server with encrypted communication and strong authentication.

    IMHO,
    Michael