The guy was being provacative but he was not being derogatory. He knew exactly what he said and what it would cause but he did not insult women's ability to achieve the highest levels of achademics.
I agree that people think first "You can't say something like that?!" before ever considering "That can't be correct can it?"
You went about this wrong. You need to reconfigure all of THEIR APs to be on the same channel and clear on up for you. Or set yours on illegal channels.
Actually, the first 4 are mounted in a ASUS 4u rackmount server w/ a 120 fan infront of them. I assume i can do the same thing on the other side, (moving the DVD drive to the slim-drive bay below the original 4 drives). The people I had built it said there were no temp issues w/ the first build and didn't forsee any w/ additions. Also, I can add 4 120mm fans to the top of the 20u enclosure the case is going in, (pick it up today), to assist in cooling.
It might be a little over-the-top for a home rig, but I'm that kinda guy.
And yes, I figure just at 2TB for 300GB drives and a little over 3TB for 500GB drives. I would have gone 400's but the cost difference didn't justify the storage increase, (which will likely be the case for the 500's, but they would have bumped the 400's down to a reasonable cost which might have let me breach the phychologically satisfying 1TB mark.)
Well great, right after I put 4 300GB drives in Raid5 on a sata, 8 drive card, this comes out. w/ 500GB drives the practical size of the array when full would be almost another TB. (the 4 300GB drives in raid 5 produce about 850GB now so I assume 8 drives would produce about 2TB).
There is definately a problem with management and process. It comes down in every study that process is needed. Basically, best practices dictate that you are not reliant on your 'heros' to complete a project.
The problem is that we haven't defined where the balance is. A program with ALL processes PERFECTLY documented is just as good as an ad-hoc program if the processes are shelfware. You Will ALWAYS Need Heros! A project manager I talked to described the lady that made sure all the programmers filled out the correct documentation/etc. She was a hero.
Now, if you know you are always going to have heros, how much process do you need? Obviously you'd like to have documented that your going to Get Requirements, Design, Code Functions, Test, Unit Test, Integration Test, Acceptance Test, etc. But Does it help to have 10 people working full time to impliment all best practices from configuration control to requirements control to metrics calculation when you only have 8 people coding? There needs to be more research on how to draw the line with how much process is necessary starting with the assumtion that you Will Need Heros. What information is it ok to lose when you Hero retires? What processes can everyone teach their intern rather than telling the intern to read the 200 page paper that took 12 people 2 years to write. These are very important questions that need to be addressed in Software Aquisition and Program Management.
I'm sure they're going to charge me 20 for a local phone and then 50 to install it. If they could give me local channels and, say, 5 of the channels normal analog cable gets me for 20 total, I'd do it, but I'm not paying for a phone. (If I get one it'll be VoIP because all my calls are long distance.) And i'm not paying theh 40/month the cable company wants for analog which gets me over-the-air and 5 channels I want plus 30 I'll never watch.
Take a look at Cooler Master. I only found them because they had a case that I think every CompUSA got 1 of and could never sell so it ended scratched up w/o a UPC somewhere in their store. Still I followed up with the few letters and numbers on it and eventually found it.
They make the most beautiful media pc or just PC case in general. The ATC-620 is a wonderful case. It is a shame it is so often overlooked.
For a tower, I would say the Antec Sonata is about as nice as they come.
How hard would it be to impliment filtering that scanned email bodies for links to China, Korea, and Taiwan and then filter those emails out? Would it be hard to impliment this in spamassassin or such?
Adding the punctuation and capitalization does make it harder to crack, but also harder to remember. More research needs to be done on 1: exactly how much harder to crack, 2: exactly how much harder to remember, and 3: where's the optimal point between 1 and 2.
Passphrases need to be random though. Lyrics, quotes, and scripts can all be loaded into a passphrase dictionary and used the same way dictionary attacks are used against passwords. If you are going to use non-random passphrases, you need to use dictionary checking to make sure someone didn't use, "I am your father luke"
All you would need is a brute force program that had a physical layout module. It would have to check less 8^6*46=77,262,336 combinations, (though we can start signifigantly reducing that since many of those keys do not border 6 characters). At 3,000,000 checks/second (a number I saw somewhere, probably for checking LM Hashes though), thats less than 26 seconds.
Of course, we all know that once a person has physical access to the machine, all bets are off anyway.
Depends what your goal is. In a situation where the workstations are in a secure area, (guards at the front desk, etc), for user passwords, (non system accounts and non-hardware passwords), the goal would be an audit trail linking traffic back to a certain person, not the saving of the machine or securing of the machine from compromise.
I understand what he's saying and he has a point about it being a weakness. But we need to take care of it in different ways by applying the security measures a corporate network would apply to themselves to the internet. Things such as detection and filtering of DoS's, exploits, etc, but with a waiver for those who agree to protect themselves. That way Aunt and Uncle Cletis aren't participating in a DoS, but I don't have my pen testing filtered by someone upstream.
4x400GB HD's will run you 1k by themselves minimum. For SATA (which is what I want), they'll run you more. You could get the rest of the computer for 500. (To get reasonable quality and the raid you'll be around 1k though.) And, lets face it, for 1.6TB, unless your using this AS your backup, (ie. the information exists elsewhere), your going to want that much storage in raid.
I would be interested in a list of the passwords attempted by the worms since they managed to compromise the SBS2003 and winXP1 boxes that way.
Second, the linux box isn't necesarily representative. Mandrake, for example, has open ports and no firewall. I would like to see a fresh mandrake box put on the net rather than the more secure Linspire. Additionally, was it ever figured out what port 7741 was used for? In a digital attack simulation we had, Linspire boxes were hard to characterize for the attackers because of the lack of any ports open on them. 7741 may be a good way to characterize the OS of the box. (Also, I worry more about open ports I don't recognize than ones I do, even if they aren't connected to extremely strong programs.)
Also, the abstract seems to indicate the OSX box was NOT one of the better ones since it seemed to draw so many attempts. (I think this explained in comments as having to do with samba being turned on. Was samba on by default? And is there any implications of having a cloned service on as it draws more attacks even though these attacks are fundamentally hopeless.)
I can see someone making a lot of money off mythTV. First you sell full computers of 3 brands: Normal/HDTV. Then you offer options: DVD play/record support, more tuners/other types of tuners, etc.
Finally, you offer just hard drives imaged w/ pre-made images of the full computers you offer. Along with the image you include the hardware that the setup requires.
Every person who installs MythTV should not have to take the hours and hours to get it running. It should be distributed in a few forms (hdtv/dvd/music/pvr/combo) created for specific hardware. (Obviously an idea akin to this is the reason for KnoppixMyth's popularity.)
Does WMC5 still have the problem that the video is stored in a proprietary format? I would love to use WMC5, but I need to be able to use the video anywhere I want to on whatever OS.
I can't remember where to get it but there is a disk you can boot off of that lets you turn off the administrator password and turn it back on. If you find it you'll be able to use it to fix the comp.
I use KDE for my normal computers, but I have one k6-2 400 thats slow as sin so I needed something really stripped down for it. Thats where I use fluxbox.
Slashdot Mirror
I agree that people think first "You can't say something like that?!" before ever considering "That can't be correct can it?"
You went about this wrong. You need to reconfigure all of THEIR APs to be on the same channel and clear on up for you. Or set yours on illegal channels.
It might be a little over-the-top for a home rig, but I'm that kinda guy.
And yes, I figure just at 2TB for 300GB drives and a little over 3TB for 500GB drives. I would have gone 400's but the cost difference didn't justify the storage increase, (which will likely be the case for the 500's, but they would have bumped the 400's down to a reasonable cost which might have let me breach the phychologically satisfying 1TB mark.)
Well great, right after I put 4 300GB drives in Raid5 on a sata, 8 drive card, this comes out. w/ 500GB drives the practical size of the array when full would be almost another TB. (the 4 300GB drives in raid 5 produce about 850GB now so I assume 8 drives would produce about 2TB).
The problem is that we haven't defined where the balance is. A program with ALL processes PERFECTLY documented is just as good as an ad-hoc program if the processes are shelfware. You Will ALWAYS Need Heros! A project manager I talked to described the lady that made sure all the programmers filled out the correct documentation/etc. She was a hero.
Now, if you know you are always going to have heros, how much process do you need? Obviously you'd like to have documented that your going to Get Requirements, Design, Code Functions, Test, Unit Test, Integration Test, Acceptance Test, etc. But Does it help to have 10 people working full time to impliment all best practices from configuration control to requirements control to metrics calculation when you only have 8 people coding? There needs to be more research on how to draw the line with how much process is necessary starting with the assumtion that you Will Need Heros. What information is it ok to lose when you Hero retires? What processes can everyone teach their intern rather than telling the intern to read the 200 page paper that took 12 people 2 years to write. These are very important questions that need to be addressed in Software Aquisition and Program Management.
I'm sure they're going to charge me 20 for a local phone and then 50 to install it. If they could give me local channels and, say, 5 of the channels normal analog cable gets me for 20 total, I'd do it, but I'm not paying for a phone. (If I get one it'll be VoIP because all my calls are long distance.) And i'm not paying theh 40/month the cable company wants for analog which gets me over-the-air and 5 channels I want plus 30 I'll never watch.
They make the most beautiful media pc or just PC case in general. The ATC-620 is a wonderful case. It is a shame it is so often overlooked.
For a tower, I would say the Antec Sonata is about as nice as they come.
How hard would it be to impliment filtering that scanned email bodies for links to China, Korea, and Taiwan and then filter those emails out? Would it be hard to impliment this in spamassassin or such?
Adding the punctuation and capitalization does make it harder to crack, but also harder to remember. More research needs to be done on 1: exactly how much harder to crack, 2: exactly how much harder to remember, and 3: where's the optimal point between 1 and 2.
or look at your computer. Plus that seems slightly hard to impliment remotely.
Passphrases need to be random though. Lyrics, quotes, and scripts can all be loaded into a passphrase dictionary and used the same way dictionary attacks are used against passwords. If you are going to use non-random passphrases, you need to use dictionary checking to make sure someone didn't use, "I am your father luke"
All you would need is a brute force program that had a physical layout module. It would have to check less 8^6*46=77,262,336 combinations, (though we can start signifigantly reducing that since many of those keys do not border 6 characters). At 3,000,000 checks/second (a number I saw somewhere, probably for checking LM Hashes though), thats less than 26 seconds.
Where exactly did all this bandwidth to just give away come from when the Military is having to override garage door openers to effectively use it's bandwidth?
I understand what he's saying and he has a point about it being a weakness. But we need to take care of it in different ways by applying the security measures a corporate network would apply to themselves to the internet. Things such as detection and filtering of DoS's, exploits, etc, but with a waiver for those who agree to protect themselves. That way Aunt and Uncle Cletis aren't participating in a DoS, but I don't have my pen testing filtered by someone upstream.
shoot the camera first.
4x400GB HD's will run you 1k by themselves minimum. For SATA (which is what I want), they'll run you more. You could get the rest of the computer for 500. (To get reasonable quality and the raid you'll be around 1k though.) And, lets face it, for 1.6TB, unless your using this AS your backup, (ie. the information exists elsewhere), your going to want that much storage in raid.
Pricing a U2/U3 server w/ 4x400 in Raid5 (so really 1.2TB storage) I was seeing prices in the 2000-2500 range. 1200-1400 seems optimistic.
Second, the linux box isn't necesarily representative. Mandrake, for example, has open ports and no firewall. I would like to see a fresh mandrake box put on the net rather than the more secure Linspire. Additionally, was it ever figured out what port 7741 was used for? In a digital attack simulation we had, Linspire boxes were hard to characterize for the attackers because of the lack of any ports open on them. 7741 may be a good way to characterize the OS of the box. (Also, I worry more about open ports I don't recognize than ones I do, even if they aren't connected to extremely strong programs.)
Also, the abstract seems to indicate the OSX box was NOT one of the better ones since it seemed to draw so many attempts. (I think this explained in comments as having to do with samba being turned on. Was samba on by default? And is there any implications of having a cloned service on as it draws more attacks even though these attacks are fundamentally hopeless.)
Finally, you offer just hard drives imaged w/ pre-made images of the full computers you offer. Along with the image you include the hardware that the setup requires.
Every person who installs MythTV should not have to take the hours and hours to get it running. It should be distributed in a few forms (hdtv/dvd/music/pvr/combo) created for specific hardware. (Obviously an idea akin to this is the reason for KnoppixMyth's popularity.)
Does WMC5 still have the problem that the video is stored in a proprietary format? I would love to use WMC5, but I need to be able to use the video anywhere I want to on whatever OS.
Its work, but not a job. And sorry about the spelling. I'm an engineer, (though an EE).
It's only a job if you get payed.
I can't remember where to get it but there is a disk you can boot off of that lets you turn off the administrator password and turn it back on. If you find it you'll be able to use it to fix the comp.
I use KDE for my normal computers, but I have one k6-2 400 thats slow as sin so I needed something really stripped down for it. Thats where I use fluxbox.