At the point you make the matter public, it DOES become the publics business.
While in principle I agree with you, think of it this way: If you come to me for advice meeting women, does that entitle me to watch the resulting sexual activity?
Ignoring of course the issue of whether I WANT to. ..:)
Excellent point. How do we define "completed" in terms of software, though? Bug-free? Feature-complete? Both either moving targets or chimeras, depending on the project. Even time-tested tools like grep get updated.
. ..which is totally his decision. While I'm hightly curious and even more concerned, it's None Of Our Damn Business. I can think of nothing more private.
It's enough for me that he's feeling better, and presumably on the road to recovery. Best wishes and good health, Pat.
So does this mean that it's possible to find a useful MD5-equivalent file for any file? Just because someone alters a file does not mean they have done anything destructive. Would one be able to take a binary, make a change of some sort, and then run a tool to determine the block of data to add to the binary to both allow the change to take effect and cancel out the MD5 change? How complex would it be to construct this tool?
Between Spamassassin and Sendmail using a few blacklists, I get almost no spam. Based on my logs from the past week, I've blocked nearly 500 messages. Not bad when you consider I run a small server with few users.
Why allow that to be a problem? Choose a distro with a huge support structure, like Fedora or Debian, even Slackware, and stick with it. Also, it's not like the efforts of each distro occur in a vacuum. If a Debian maintainer finds and fixes a bug in package X, you can bet the maintainer of that package for Fedora will roll that into her own package. That's the beauty of OSS. As one distro finds a way to do something that works really well, sometimes other distros adopt it(apt) and sometimes others do the same thing differently(yum). As they compete, all improve, and everyone benefits. Sure beats having one vendor calling all the shots (MS). Ever see Windows Update break any speed records?
While I agree with you, we have to ask ourselves why Windows should not be held to that standard. What Windows task is truly as easy as Linux detractors seem to want Linux tasks to be? This week I had to retrain my father-in-law from using on MS Photo editing app to another MS photo editing app. The newer version that he was forced to upgrade to for licensing reasons has a totally different interface, tasks are grouped differently, and seems to be missing a few features. Hold this up against the Gimp, which is currently 2.0+. I've been using it since just after 1.0, and nothing has changed substantially, except for added features. I can still open the Gimp, in any distro, and make the same series of clicks to do task X that I did a full major version ago. For Abiword, I can say this from.96 to the present 2.0+. What MS app has done this? I can't even reliably OPEN a Word97 doc in Word2003!
Windows's only advantage is the intertia of a large installed base. Which Linux/F/OSS are chipping away at.
Does the book offer any comprehensive ideas beyond tools you can download and hwo to use them? I'm really more interested in knowing where an attacker's footprints are likely to be evident, not in using some sort of footprint detector. Tools are nice, but one should have basics to fall back on when tools are unavailable or untrusted. That said, the best Windows security tool is Nero. It's great for burning Debian.isos. ..:)
While there is something to be said for the "Server-Grade" hardware, and rack mountability at that, there is no good reason why intelligently chosen and configured "Desktop" hardware can't perform as well. The key is to recognize limitations of various components, such as being aware of SCSI vs. IDE specs, and the fact that standard PCI slots prevent total saturation of a 1GB NIC. If you choose your parts wisely, and with your goals in mind, you can save quite a bit of money without sacrificing performance or reliability, and maintaining vendor neutrality.
Slashdot Mirror
The game's WHAT is notable for its connections to the Halo franchise?
Oh, I get it. Spare apostrophe. If only /. had editors.
What's that? Oh. Never mind.
Sigh. . . :)
Your IP address is what again?
While in principle I agree with you, think of it this way: If you come to me for advice meeting women, does that entitle me to watch the resulting sexual activity?
Ignoring of course the issue of whether I WANT to. . .:)
Excellent point. How do we define "completed" in terms of software, though? Bug-free? Feature-complete? Both either moving targets or chimeras, depending on the project. Even time-tested tools like grep get updated.
Yes. Did you? I can still charge for support and distribution, I just have to make the source available.
So, where's my check? :)
It's enough for me that he's feeling better, and presumably on the road to recovery. Best wishes and good health, Pat.
And clearly not an English major. ;)
Nothing beats a woman who's both smart and hot. Nothing.
Now what are we going to DO about it?
So does this mean that it's possible to find a useful MD5-equivalent file for any file? Just because someone alters a file does not mean they have done anything destructive. Would one be able to take a binary, make a change of some sort, and then run a tool to determine the block of data to add to the binary to both allow the change to take effect and cancel out the MD5 change? How complex would it be to construct this tool?
Does not your comment negate your comment?
Between Spamassassin and Sendmail using a few blacklists, I get almost no spam. Based on my logs from the past week, I've blocked nearly 500 messages. Not bad when you consider I run a small server with few users.
No x10^53. NO!
What's that in Terabytes/Fortnight? Not as cool as the speed Furlongs/Fortnight, but. . .
I see an automatic pistol holding a lit cigarette. . .
Why allow that to be a problem? Choose a distro with a huge support structure, like Fedora or Debian, even Slackware, and stick with it. Also, it's not like the efforts of each distro occur in a vacuum. If a Debian maintainer finds and fixes a bug in package X, you can bet the maintainer of that package for Fedora will roll that into her own package. That's the beauty of OSS. As one distro finds a way to do something that works really well, sometimes other distros adopt it(apt) and sometimes others do the same thing differently(yum). As they compete, all improve, and everyone benefits. Sure beats having one vendor calling all the shots (MS). Ever see Windows Update break any speed records?
Windows's only advantage is the intertia of a large installed base. Which Linux/F/OSS are chipping away at.
will be "Sharks", in fulfillment of the prophecy of Dr. Evil. . .
B) I hope his replacement isn't worse.
Does the book offer any comprehensive ideas beyond tools you can download and hwo to use them? I'm really more interested in knowing where an attacker's footprints are likely to be evident, not in using some sort of footprint detector. Tools are nice, but one should have basics to fall back on when tools are unavailable or untrusted. That said, the best Windows security tool is Nero. It's great for burning Debian .isos. . .:)
Seriously, as an Amerikan citizen who voted to get W out, I hereby apologize to the rest of the world. We WILL do better next time, I promise.
While there is something to be said for the "Server-Grade" hardware, and rack mountability at that, there is no good reason why intelligently chosen and configured "Desktop" hardware can't perform as well. The key is to recognize limitations of various components, such as being aware of SCSI vs. IDE specs, and the fact that standard PCI slots prevent total saturation of a 1GB NIC. If you choose your parts wisely, and with your goals in mind, you can save quite a bit of money without sacrificing performance or reliability, and maintaining vendor neutrality.
I meant PURPOSES. How tacky, to make a typo in a post mocking a typo. . .