ALWAYS, if the protocol isn't openly documented and severely tested over a communications line for security it is insecure.
I recommend the majority of people I deal with use jabber (this is not some plug for jabber; it's just at the end of the day, it's more secure and yet accomplishes the same goal AIM etc etc have)
If you are using AIM, do yourself a favor a pickup a jabber client, you won't be sorry.
It's really not as easy as you make it seem. Mac OS X has standards it has it's own standard widget set and there are UI guidelines. Linux, desktop wise has absolutely NONE of that, do you port for GTK or QT or do you just go native? Obviously biasing AND binding yourself to one of the three. Not to mention not using GTK/QT will make your porting efforts extremely more intensive unless you write your own tk or wrapper and for all that "getting-raw" looks ugly. Then you have problems of porting over systems that Mac's and Windows have had for quite sometime. Need a new font in Linux?? Download the ttf or bitmap font install it into your fontdir, recreate fonts.dir, restart xfs if you use it or whatever fontserver you are using just to get fonts working (whether it be an X module or xfs or whatever else exists). It's not a pain for someone like me or you but the subsystem just isn't there to make a feasible port for the dumb user.
Printing as well in Windows and or Mac you "clickety-click" add printer or whatever it is, add a driver, reboot, and you're done. The subsystems just aren't there right now for a properly functioning office suite.
I don't want some super office suite on my system to begin with, Abiword works fine and is light, unlike others in different fields I don't have to write large amounts of papers on the discovery of a new virus that bonds itself to itself for protection and replication using the raped cells as defense as it mutates a single cell into an absolute killer.
I'm sure they don't want some lightweight office system that doesn't have all those little plugins that MS Office does. I don't know most people that use Linux that would actually bother purchasing Office when Abiword, OpenOffice, StarOffice etc do basically the same thing for a computer programmer; allow us to read word documents.
If you want Office for Unix, you got it.. get a mac for your secretary or whatever.
Most if not ALL MEPS (Military Entrance Processing Stations; I think) use Unix to enroll new soldiers and for other accounting tidbits. So if you're thinking of joining or happen to be in a MEPS station you can check it out.
I interviewed Larry McVoy and he says some very interesting things about the "OpenSource modeling a free software; gpl". If you didn't know Larry McVoy is the guy who wrote the paper called the SourceWare operating system proposal.. Very good read.
Being a battery but not feeling like one is a "Better" life??.. People might shun enlightenment because they are scared but once one brick is pulled the rest come tumbling down.
That's not the case. Gnome can be compiled on many systems including BSD's, Solaris, HP-UX etc.. Nautilus and Evolution run on diff platforms as well. GNOME libs are being ported to diff platforms as we speak.
Re:Hey people he got what he DESERVED
on
Brian West Update
·
· Score: 1
Can you read?
That's a better analogy comparable to the net. I wouldn't apply it to this case but it's just a refute to "lets push doors to see what's open and make ourselves look good by admitting to breaking and entering". It's more like "lets make sure my neighbors doors are closed to make sure they are safe and so am I". Sorta like neighborhood watch.
Oh please spare me with the portscans, the only people annoyed, bothered or scared of them are people with machines that haven't been secure. If you're machine is secure you only have ports that you need open and then ports that you want open. All other ports are closed. If you're scared.. get packet encapsulation..
You hack but you don't violate the law and break into someone elses system. So umm what are you hacking?? your own systems at home for vital information that you could also login as root and get?? There is no argument about hacking being made legal... IT IS illegal to do so, whether good or bad is a totally diff subject. You don't start hacking systems over night.. It takes a long long long time and the payoff has to be worth it..
Re:Hey people he got what he DESERVED
on
Brian West Update
·
· Score: 1
That analogy isn't good I don't know why people keep using it.
If you own a home.. and you had weapons in your home that were unsecure.. And the invisible men outside keep breaking into other peoples homes and using those weapons to attack people. You happen to be looking in your backyard and see your neighbors window open. Or passing by, or trimming your hedges. What do you do?? You go over there knock on the door and tell him to close the freaking thing in fear that an invisble man will break into his home and steal his weapons to try and come kill your family. That's what you do.
That's a better analogy comparable to the net. I wouldn't apply it to this case but it's just a refute to "lets push doors to see what's open and make ourselves look good by admitting to breaking and entering". It's more like "lets make sure my neighbors doors are closed to make sure they are safe and so am I". Sorta like neighborhood watch.
Right and it will be a different world after they think everything is ok. If you're in their roster except to get some good old broomstick luving from police, gov and the military.. They will rape you in public, jail you and throw away the key into some sulfuric acid trap.
The terrorists are getting exactly what they wanted.. They wanted us to get scared and unite and give up ALL of our rights. Game over.
There is currently nothing that a hacker could do in this region of the US to help anything. If you didn't know the gov't rarely changes it's views on anything and when they do it takes an event as large as the actual downing of the WTC to make a difference. If anyone is thinking about doing this; think again, I can guarantee that you will be screwed and you will be screwed hard.
Driving a car in and of itself isn't criminal. Hacking is of a criminalistic nature and when I say hacker I don't mean the term cracker or whatever nonsense people wanna call it. Not some dude who hacks code. Someone who takes the time and researches a system to know it's ins and outs. They take the time to research their target. Months upon months of research, dumpster diving, phone phreaking etc. When it's all done they will attack when they see fit. I for one don't trust the.gov,.ss,.mil,.whatever at all.. And I'm in the military.
Anyone that was seriously considering doing this is probably not capable of hacking or cracking any systems to begin with.
Microsoft: Here are the opensource structures for Microsoft * File Format:
Me: Cool.. I'll add an extra FREE to the end of every variable name and include Microsoft in my/* HEADER */ *clickety-click*.......... tada!! Should be done now
Microsoft: Whoops forgot to add/* HEADER */ giving credit to Microsoft..
Me: Sorry about that.. here/* HEADER MICROSOFT OPEN FILE BLAH BLAH FORMAT */
Microsoft: Cool, thanks man.
That's what happened. Whoever posted the story blew the shit into some mass media frenzy type of story.. that's considered a troll to me. What a waste of time.
That analogy does not work; The organism with the most potentional predators in any enviroment makes itself immune or dies off. Unix is pretty much immune to such things already thats why you don't see as much worms, virii etc. So a flu for windows is a sneeze for Unix. You should read more about what you are talking about, I'd recommend a book by "Laurie Garett" on future biological organisms that will keep trying to kill off the human race. AIDS just didn't pop up.. it was a virus spawned by nature that can effectively kill us. We are behind the 8 ball now so mother nature is pretty much in the lead.
Running scripts in email is a dumb approach to email. People read email it's a text message.. you send a text message to another person and they read it. How scripts fit into that equation is a mystery to me.
I'm not worried. Apache runs as user "www" on my machine. User www doesn't have access to anything not even the apache bins or logs or anything else for that matter.. It's a standard apache installation at that. The misconception that this could happen on a unix clone type of system is quite laughable nowadays. It's even more laughable on a system like openbsd, freebsd, linux, netbsd, basically all of them.
However, it's possible but the way the worm would have to be written and executed would only work on some systems and then you'd have to have someone dumber than dirt to exploit it in some non-standard, weird condition that a dumb user wouldn't be able to create such a condition if they tried. The reason you don't see any major Unix worms is simply because the effort involved and the payoff; ie: having your worm spread over internet isn't worth it. Your worm will probably affect very few machines if any at all.
It's not about market share because Unix has always had the major market share on servers and on the desktop front I really wish people would stop fighting for such a thing, the software just isn't there yet. Unix on desktops is a new thing.
They don't even have to do that.. grab the file from stage and live.. run a diff.. if there is a difference.. send off an email.. MD5/PGP can be saved for other things that are in transit.
Usama bin Laden and your message of hate is uncalled for. Arabian peoples don't condone this type of behavior. The simple matter of fact is that first and foremost their gov't doesn't listen to them as the citizens, secondly Usama is a fanatic, he does this in the name of Allah but anyone from Islam can tell you.. these type of acts aren't promoted, they aren't condoned, violence isn't promoted, it's frowned upon. Think of David Koresh; he and Usama are along the same lines except Usama has alot more money, alot more following and protection.
The main reason for his protection; politics. That's all it is. The United States citizens really need to get more involved with how we are represented to the rest of the world. We have no one to blame except ourselves and the people that did this. If we would be more involved with our public relations across the world and how we treat other countries (not to bring anything but Bush has been stepping all over international pacts) we wouldn't be in such a bad position as now. I'm not saying it wouldn't have happened, considering the way it was going it probably would have HOWEVER if treaties and pacts were put into place before this Usama would of probably already been caught.
I woke up.. got on the train for school (Pace University about 3 mins away from the world trade center). My class is from 7:00am to 8:30am and then I get on the train inside the world trade center to go to work, 2 stops away.
My professors watch wasn't working to well and she ran the class kinda of late till like 8:40. I decided hell I need the book for the class I'll go inside the world trade center and pickup a book and get some coffee and head on to work.
I get to the front of the world trade center and hear a loud rumble like a plane. I look up and see a plane kinda low. I'm thinking damn this plane is gonna crash obviously the pilot is going to turn it into the hudson and hopefully that way he/she would minimize life lost. I kept looking.. and standing there.. standing there for about 2 minutes.. the plane isn't turning infact it's trying to get aligned. It slams into the world trade center and debris is everywhere.. TOTAL MAYHEM!!. Everyone is running and I'm standing there in total freaking awe. I couldn't believe it. It's really a good thing I was closer to the building the impact pushed the debris over my head but the guy behind me wasn't so lucky. I heard a big thud and turned around and the guy was laying on the floor. He had a hole in his head that needed to be stitched and was bleeding profusely.. I took off his jacket and try to stop the bleeding helping him. I'm a us army reverist so I know first aid.. I'm yelling for help dialing 911 on my phone (all circuits busy). About 10 minutes later I hear another big BOOM.. and look up and debris is going to hit me.. so I'm trying to pull the guy and decide that's not a good idea.. Good thing a guy helped me pull him over to the Millenium Hotel across the street.. we were in the garage area and debris is still coming down and the plane is still blowing up. I couldn't stop the bleeding on this guy so I told the other guy to stay there as I find a doctor or nurse or somebody.. I see an ambulance and flag it down immediately.. They put the guy on the strecther and I hope he's alright he lost alot of blood.. I've never see a wound bleed so profusely like that (PLEASE PLEASE IF NOTHING ELSE GIVE BLOOD.. JUST DO IT; PLEASE!!).. My dad works in that area so I went to his office.. relaxed a bit and I was actually fine like it didn't bother me. Then I called worked and said I was gonna be late (no one answered). So i went to the train and it was closed off.. so I walked to work which isn't too far.... that was my day.. i am now in shock and on call
No. I do however expect it to happen eventually. When a monopoly is usually broken up and the companies it is split into have to compete with each other not to mention other competitors in the market. Things change, and they change quickly. Microsoft might still have a dominant hold on the desktop but except to see quality software for once and the opening of some of their file formats . They have to do this simply to remain on top and finally the users would get some quality software because Microsoft1and/or2,3,4 whatever will have to fight for it's position in the market. People are truly fedup with the BSOD and things just crashing for no damn reason.
I'd sincerely hope that MS was broken up for this one reason. Quality Goods. Infact if MS had a monopoly because of their quality software and outstanding products I don't think anyone here would object. It would be a "good monopoly" A monopoly that is created because people don't want any other product, they buy Microsoft and they buy Microsoft because it's affordable and quality goods. Nothing wrong with that. Too bad it's the other way around.
They obviously have programmers working on the security enhanced linux kernel and all these other little tiny projects the NSA people get that are cool.. Military Intel doesn't get to do all that cool stuff they leave it to shit like DARPA.. I'll believe the NSA is behind in the times, technology etc when George W. Bush say's something like "I'm switching parties to Democrat". Or when Satan himself is wearing a ski outfit. This is typical.. we suck, we are trying hard to keep everything together so they can get more cool toys. Like all units of DoD do this time of yr.
Security companies are warning Linux users over a new and dangerous Trojan that may have originated in the UK.
Later on in reading
Qualys, the security firm claiming to have discovered the worm
HAS any other security company reported they've found this trojan?? If no other company has reported finding the trojan the likeliness is that the trojan has not spread.
What's even more odd is the qualys wants you to actually fill out information to download the utility for cleaning.
Analysis; This trojan was made up. If it was truly wild qualys wouldn't have been the first to discover it.
Is anyone infected? ANYONE?
Slashdot Mirror
ALWAYS, if the protocol isn't openly documented and severely tested over a communications line for security it is insecure.
I recommend the majority of people I deal with use jabber (this is not some plug for jabber; it's just at the end of the day, it's more secure and yet accomplishes the same goal AIM etc etc have)
If you are using AIM, do yourself a favor a pickup a jabber client, you won't be sorry.
It's really not as easy as you make it seem. Mac OS X has standards it has it's own standard widget set and there are UI guidelines. Linux, desktop wise has absolutely NONE of that, do you port for GTK or QT or do you just go native? Obviously biasing AND binding yourself to one of the three. Not to mention not using GTK/QT will make your porting efforts extremely more intensive unless you write your own tk or wrapper and for all that "getting-raw" looks ugly. Then you have problems of porting over systems that Mac's and Windows have had for quite sometime. Need a new font in Linux?? Download the ttf or bitmap font install it into your fontdir, recreate fonts.dir, restart xfs if you use it or whatever fontserver you are using just to get fonts working (whether it be an X module or xfs or whatever else exists). It's not a pain for someone like me or you but the subsystem just isn't there to make a feasible port for the dumb user.
Printing as well in Windows and or Mac you "clickety-click" add printer or whatever it is, add a driver, reboot, and you're done. The subsystems just aren't there right now for a properly functioning office suite.
I don't want some super office suite on my system to begin with, Abiword works fine and is light, unlike others in different fields I don't have to write large amounts of papers on the discovery of a new virus that bonds itself to itself for protection and replication using the raped cells as defense as it mutates a single cell into an absolute killer.
I'm sure they don't want some lightweight office system that doesn't have all those little plugins that MS Office does. I don't know most people that use Linux that would actually bother purchasing Office when Abiword, OpenOffice, StarOffice etc do basically the same thing for a computer programmer; allow us to read word documents.
If you want Office for Unix, you got it.. get a mac for your secretary or whatever.
Most if not ALL MEPS (Military Entrance Processing Stations; I think) use Unix to enroll new soldiers and for other accounting tidbits. So if you're thinking of joining or happen to be in a MEPS station you can check it out.
I interviewed Larry McVoy and he says some very interesting things about the "OpenSource modeling a free software; gpl". If you didn't know Larry McVoy is the guy who wrote the paper called the SourceWare operating system proposal.. Very good read.
The interview can be found on www.kernelcode.com
Being a battery but not feeling like one is a "Better" life??.. People might shun enlightenment because they are scared but once one brick is pulled the rest come tumbling down.
That's not the case. Gnome can be compiled on many systems including BSD's, Solaris, HP-UX etc.. Nautilus and Evolution run on diff platforms as well. GNOME libs are being ported to diff platforms as we speak.
Can you read?
That's a better analogy comparable to the net. I wouldn't apply it to this case but it's just a refute to "lets push doors to see what's open and make ourselves look good by admitting to breaking and entering". It's more like "lets make sure my neighbors doors are closed to make sure they are safe and so am I". Sorta like neighborhood watch.
Oh please spare me with the portscans, the only people annoyed, bothered or scared of them are people with machines that haven't been secure. If you're machine is secure you only have ports that you need open and then ports that you want open. All other ports are closed. If you're scared.. get packet encapsulation..
You hack but you don't violate the law and break into someone elses system. So umm what are you hacking?? your own systems at home for vital information that you could also login as root and get?? There is no argument about hacking being made legal... IT IS illegal to do so, whether good or bad is a totally diff subject. You don't start hacking systems over night.. It takes a long long long time and the payoff has to be worth it..
That analogy isn't good I don't know why people keep using it.
If you own a home.. and you had weapons in your home that were unsecure.. And the invisible men outside keep breaking into other peoples homes and using those weapons to attack people. You happen to be looking in your backyard and see your neighbors window open. Or passing by, or trimming your hedges. What do you do?? You go over there knock on the door and tell him to close the freaking thing in fear that an invisble man will break into his home and steal his weapons to try and come kill your family. That's what you do.
That's a better analogy comparable to the net. I wouldn't apply it to this case but it's just a refute to "lets push doors to see what's open and make ourselves look good by admitting to breaking and entering". It's more like "lets make sure my neighbors doors are closed to make sure they are safe and so am I". Sorta like neighborhood watch.
Actually the first poster's stuff is probably a bit more likely.
Someone who wants the PHB and the rest of the goat trodding followers of MS to think that they are fully MS compliant. Whoever it is; smart man.
Right and it will be a different world after they think everything is ok. If you're in their roster except to get some good old broomstick luving from police, gov and the military.. They will rape you in public, jail you and throw away the key into some sulfuric acid trap.
The terrorists are getting exactly what they wanted.. They wanted us to get scared and unite and give up ALL of our rights. Game over.
There is currently nothing that a hacker could do in this region of the US to help anything. If you didn't know the gov't rarely changes it's views on anything and when they do it takes an event as large as the actual downing of the WTC to make a difference. If anyone is thinking about doing this; think again, I can guarantee that you will be screwed and you will be screwed hard.
Driving a car in and of itself isn't criminal. Hacking is of a criminalistic nature and when I say hacker I don't mean the term cracker or whatever nonsense people wanna call it. Not some dude who hacks code. Someone who takes the time and researches a system to know it's ins and outs. They take the time to research their target. Months upon months of research, dumpster diving, phone phreaking etc. When it's all done they will attack when they see fit. I for one don't trust the .gov, .ss, .mil, .whatever at all.. And I'm in the military.
Anyone that was seriously considering doing this is probably not capable of hacking or cracking any systems to begin with.
Back to my bat cave.
code reuse..
/* HEADER */ *clickety-click*.... ... ... tada!! Should be done now
/* HEADER */ giving credit to Microsoft..
/* HEADER MICROSOFT OPEN FILE BLAH BLAH FORMAT */
Microsoft: Here are the opensource structures for Microsoft * File Format:
Me: Cool.. I'll add an extra FREE to the end of every variable name and include Microsoft in my
Microsoft: Whoops forgot to add
Me: Sorry about that.. here
Microsoft: Cool, thanks man.
That's what happened. Whoever posted the story blew the shit into some mass media frenzy type of story.. that's considered a troll to me. What a waste of time.
That analogy does not work; The organism with the most potentional predators in any enviroment makes itself immune or dies off. Unix is pretty much immune to such things already thats why you don't see as much worms, virii etc. So a flu for windows is a sneeze for Unix. You should read more about what you are talking about, I'd recommend a book by "Laurie Garett" on future biological organisms that will keep trying to kill off the human race. AIDS just didn't pop up.. it was a virus spawned by nature that can effectively kill us. We are behind the 8 ball now so mother nature is pretty much in the lead.
Running scripts in email is a dumb approach to email. People read email it's a text message.. you send a text message to another person and they read it. How scripts fit into that equation is a mystery to me.
I'm not worried. Apache runs as user "www" on my machine. User www doesn't have access to anything not even the apache bins or logs or anything else for that matter.. It's a standard apache installation at that. The misconception that this could happen on a unix clone type of system is quite laughable nowadays. It's even more laughable on a system like openbsd, freebsd, linux, netbsd, basically all of them.
However, it's possible but the way the worm would have to be written and executed would only work on some systems and then you'd have to have someone dumber than dirt to exploit it in some non-standard, weird condition that a dumb user wouldn't be able to create such a condition if they tried. The reason you don't see any major Unix worms is simply because the effort involved and the payoff; ie: having your worm spread over internet isn't worth it. Your worm will probably affect very few machines if any at all.
It's not about market share because Unix has always had the major market share on servers and on the desktop front I really wish people would stop fighting for such a thing, the software just isn't there yet. Unix on desktops is a new thing.
They don't even have to do that.. grab the file from stage and live.. run a diff.. if there is a difference.. send off an email.. MD5/PGP can be saved for other things that are in transit.
read above.
Usama bin Laden and your message of hate is uncalled for. Arabian peoples don't condone this type of behavior. The simple matter of fact is that first and foremost their gov't doesn't listen to them as the citizens, secondly Usama is a fanatic, he does this in the name of Allah but anyone from Islam can tell you.. these type of acts aren't promoted, they aren't condoned, violence isn't promoted, it's frowned upon. Think of David Koresh; he and Usama are along the same lines except Usama has alot more money, alot more following and protection.
The main reason for his protection; politics. That's all it is. The United States citizens really need to get more involved with how we are represented to the rest of the world. We have no one to blame except ourselves and the people that did this. If we would be more involved with our public relations across the world and how we treat other countries (not to bring anything but Bush has been stepping all over international pacts) we wouldn't be in such a bad position as now. I'm not saying it wouldn't have happened, considering the way it was going it probably would have HOWEVER if treaties and pacts were put into place before this Usama would of probably already been caught.
I woke up.. got on the train for school (Pace University about 3 mins away from the world trade center). My class is from 7:00am to 8:30am and then I get on the train inside the world trade center to go to work, 2 stops away.
My professors watch wasn't working to well and she ran the class kinda of late till like 8:40. I decided hell I need the book for the class I'll go inside the world trade center and pickup a book and get some coffee and head on to work.
I get to the front of the world trade center and hear a loud rumble like a plane. I look up and see a plane kinda low. I'm thinking damn this plane is gonna crash obviously the pilot is going to turn it into the hudson and hopefully that way he/she would minimize life lost. I kept looking.. and standing there.. standing there for about 2 minutes.. the plane isn't turning infact it's trying to get aligned. It slams into the world trade center and debris is everywhere.. TOTAL MAYHEM!!. Everyone is running and I'm standing there in total freaking awe. I couldn't believe it. It's really a good thing I was closer to the building the impact pushed the debris over my head but the guy behind me wasn't so lucky. I heard a big thud and turned around and the guy was laying on the floor. He had a hole in his head that needed to be stitched and was bleeding profusely.. I took off his jacket and try to stop the bleeding helping him. I'm a us army reverist so I know first aid.. I'm yelling for help dialing 911 on my phone (all circuits busy). About 10 minutes later I hear another big BOOM.. and look up and debris is going to hit me.. so I'm trying to pull the guy and decide that's not a good idea.. Good thing a guy helped me pull him over to the Millenium Hotel across the street.. we were in the garage area and debris is still coming down and the plane is still blowing up. I couldn't stop the bleeding on this guy so I told the other guy to stay there as I find a doctor or nurse or somebody.. I see an ambulance and flag it down immediately.. They put the guy on the strecther and I hope he's alright he lost alot of blood.. I've never see a wound bleed so profusely like that (PLEASE PLEASE IF NOTHING ELSE GIVE BLOOD.. JUST DO IT; PLEASE!!).. My dad works in that area so I went to his office.. relaxed a bit and I was actually fine like it didn't bother me. Then I called worked and said I was gonna be late (no one answered). So i went to the train and it was closed off.. so I walked to work which isn't too far.... that was my day.. i am now in shock and on call
No. I do however expect it to happen eventually. When a monopoly is usually broken up and the companies it is split into have to compete with each other not to mention other competitors in the market. Things change, and they change quickly. Microsoft might still have a dominant hold on the desktop but except to see quality software for once and the opening of some of their file formats . They have to do this simply to remain on top and finally the users would get some quality software because Microsoft1and/or2,3,4 whatever will have to fight for it's position in the market. People are truly fedup with the BSOD and things just crashing for no damn reason.
I'd sincerely hope that MS was broken up for this one reason. Quality Goods. Infact if MS had a monopoly because of their quality software and outstanding products I don't think anyone here would object. It would be a "good monopoly" A monopoly that is created because people don't want any other product, they buy Microsoft and they buy Microsoft because it's affordable and quality goods. Nothing wrong with that. Too bad it's the other way around.
They obviously have programmers working on the security enhanced linux kernel and all these other little tiny projects the NSA people get that are cool.. Military Intel doesn't get to do all that cool stuff they leave it to shit like DARPA.. I'll believe the NSA is behind in the times, technology etc when George W. Bush say's something like "I'm switching parties to Democrat". Or when Satan himself is wearing a ski outfit. This is typical.. we suck, we are trying hard to keep everything together so they can get more cool toys. Like all units of DoD do this time of yr.
Security companies are warning Linux users over a new and dangerous Trojan that may have originated in the UK.
Later on in reading
Qualys, the security firm claiming to have discovered the worm
HAS any other security company reported they've found this trojan?? If no other company has reported finding the trojan the likeliness is that the trojan has not spread. What's even more odd is the qualys wants you to actually fill out information to download the utility for cleaning.
Analysis; This trojan was made up. If it was truly wild qualys wouldn't have been the first to discover it. Is anyone infected? ANYONE?