I still think he's wrong. I think for your average case the attack surface between two apps running on the same box is significantly higher than the attack surface of those same two apps running on separate VM'd OS's on the same physical machine. Sure your MOST secure option is to run them on their own physical servers, but that's just not financially or environmentally responsible if the apps are good candidates for running in a VM. I have many roles as a network administrator and security is just one of them. Theo's almost sole purpose in life is security to the point where it often blinds him to the whole problem. This is why techies often have such a problem with business people, they get so embroiled in edge cases and whatifs that they fail to look at the big picture of how to best serve the business. I'm not saying ignore security, I'm just saying look at it in the right framework.
virtualizing hardware is inherently less secure than the physical segmentation of using actual, separate machines, so when you consolidate many machines onto a VM system you have a net loss in security.
And you know what, I don't freaking care about that. If I can trade a little theoretical attack surface for real world gains I'd be foolish to not consider it. I mean we do it every day when we use normal OS's instead of something like Trusted Solaris, so why not do it to see significant gains. The gains are reduced server count, reduced electricity use, reduced physical plant, etc. Those have significant direct and indirect benefits (lowered cost and less environmental impact primarily). I guess if you're a security zealot you wouldn't even consider the tradeoff, but for those of us in the real world it's probably not a tough sell.
Exporting text to a path is not the same as having text follow a path! I'm talking about being able to create a path along a curve or outside of an object and have the text follow that path.
I just used the Gimp again for the first time in a couple years and was reminded of where it can really lack for even non-professional users. Font support sucks completely, both from a looks perspective as well as from a feature perspective (kerning, strength, etc). The other feature I had an immediate use for that wasn't there was text along a path, if you can't apply an object like text to a path how useful are they?
Probably somewhere out East, there was a county where you could be within sight of one of the big telco's headquarters, near MAE-East and not have any broadband options. I remember multiple postings over the years from employees of said telco bitching about the fact that they ran one of the largest networks in the world but were stuck with IDSL at huge cost as the only "broadband" option.
Re:imap with multiple accounts?
on
Free IMAP On Gmail
·
· Score: 3, Informative
Use an MUA that doesn't suck? Even Outlook 2003 supports multiple IMAP accounts. Thunderbird has supported it since the Netscape Communicator 4 days. Actually I can't think of a client off the top of my head that supports IMAP and doesn't support multiple profiles.
Ok, I now found the only thing a coworker should have on her car! She has a 300M with the license plate IDTENT, a slashdot sticker like that would be the perfect compliment, geeks would know instantly what it meant and the rest of the world would be COMPLETELY clueless =)
Because it's only faster in raw throughput, not random reads, and if it's RAID-5 not writes either. While everything has its place most midsized and larger shops are going to have a lot of $ wisely invested in 10&15k drives. We use SATA for DR, archival storage, and disk to disk to tape, and that's about it. Not everyone is Google where you can design your app to run in ram with disk as a backup or a startup that builds their own file servers.
You could run Windows well on flash without too much trouble, use a ramdrive and redirect TMP and TEMP to that and disable swap, set your browser to use TMP for cache or disable it altogether. Turn off timestamping on file access and it's even better. By that point if your flash has 500K writes before average failure then you have a drive that will last many years, probably longer than your average HDD.
I'm specifically talking about when Firefox grows to using hundreds of MB of ram over extended periods of time and doesn't release it even when I close like half my 50+ open tabs. It would be nice if you could tell the engine that you want to purge the data cache that it keeps to improve browser performance. While I generally like the performance I gain from the way that FF uses ram there are times when it would be much easier to purge the data cache then either let the OS page it out then back in later or closing the browser and dealing with the opening of 25 tabs the next time I fire it up.
Huh? The copy of Mozilla that I'm posting this on has been open since 2.0.0.7 was release which was about a month ago. I run 13 addons that are are a mix of very popular and not so popular, and since 2.0 came out I've had very few stability problems. I still wish it did a better job of release cache memory, or at least had a GC procedure I could manually launch to free up all the ram except the currently in use parts, but that's my only real remaining complaint.
Hmm, I run a Windows shop of 800 users at 100 sites with 150 servers and we have a total of 11 technical staff including helpdesk and telecom. I have a large number of servers that were last rebooted last summer when we took our datacenter down to double its size and upgrade our UPS system. I would have to ask if the 40 servers in the Novel environment included Dev/Test/Prod servers because that's pretty much a requirement for publicly traded companies today.
I can't believe there's been such a big discrepancy between models with different storage to this point. I just bought a 500 GB HDD for $99 but the difference between a 60GB model and a 80GB model is $100! Ok, so the bigger model also includes a game, but even at a high retail of $60 for the game that's still $40 for 20GB of storage. That's why I like commodity PC's, I can pick the best capacity/performance/efficiency for my price point.
We just blew up meta.slashdot.org which is probably a single web frontend possibly with its own database (though it's likely tied into the main DB cluster).
I always find the UID discussion funny. Most people with UID's in the 2-4 digit range started reading slashdot early enough to remember there weren't any at the start. I personally only signed up for a named account after the atrocity that was John Katz when they added the feature to block certain authors.
You missed the point of my post, I have no stance on the possibility of a successful suite RE bricking of iPhones, rather about the denial of warranty service for a physical defect in manufacture or workmanship. If your screen breaks and that is normally covered under warranty then Apple must prove that your third party addon broke the screen or else they cannot deny you warranty coverage in just about any jurisdiction so long as your claim would have been covered without the addon. Most of this case law was hashed out many, many years ago after the auto manufacturers tried to ban third party parts from being used for non-warranty vehicle repairs or routine maintenance. Even limited warranty service must not be selectively granted to exclude third party parts, this has as much to do with antitrust law as consumer protection law.
I hate to sound like an elitist ass, but get some skills. While I might occasionally die doing murlocs I completed all relevant quests two levels before recommended with both my mage and my hunter. My tanks types didn't do murlocs as they did those levels elsewhere to stave off boredom, but I don't think you should have a problem with proper pulling techniques. I don't play WoW anymore due to boredom, so perhaps they made the murlocs super strong post BC launch?
My 42" LCD TV(which is 16x larger) uses 170W max, so about 4.25x more efficient per area. Now some of that power draw is constant since things like a tv tuner take a relatively fixed amount of power.
There are a couple of problem with using this for production. It's SD, not HD or digital cinema resolution. It's oled which has horrible color accuracy problems, even if they have the life up to 10K+ hours I really doubt they have allowed it to stay color accurate over more than a tiny fraction of that time. Finally the drive electronics look significantly bigger than the equivalent for LCD so its use in portable applications is questionable.
Actually denying hardware warranty service on a device because of third party software is illegal just about everywhere. This practice would be covered under the same laws as third party hardware such as RAM in computers or non warranty covered parts in an automobile, unless they can conclusively prove that the third party part is the cause of the failure they cannot deny you warranty coverage.
Slashdot Mirror
I still think he's wrong. I think for your average case the attack surface between two apps running on the same box is significantly higher than the attack surface of those same two apps running on separate VM'd OS's on the same physical machine. Sure your MOST secure option is to run them on their own physical servers, but that's just not financially or environmentally responsible if the apps are good candidates for running in a VM. I have many roles as a network administrator and security is just one of them. Theo's almost sole purpose in life is security to the point where it often blinds him to the whole problem. This is why techies often have such a problem with business people, they get so embroiled in edge cases and whatifs that they fail to look at the big picture of how to best serve the business. I'm not saying ignore security, I'm just saying look at it in the right framework.
virtualizing hardware is inherently less secure than the physical segmentation of using actual, separate machines, so when you consolidate many machines onto a VM system you have a net loss in security.
And you know what, I don't freaking care about that. If I can trade a little theoretical attack surface for real world gains I'd be foolish to not consider it. I mean we do it every day when we use normal OS's instead of something like Trusted Solaris, so why not do it to see significant gains. The gains are reduced server count, reduced electricity use, reduced physical plant, etc. Those have significant direct and indirect benefits (lowered cost and less environmental impact primarily). I guess if you're a security zealot you wouldn't even consider the tradeoff, but for those of us in the real world it's probably not a tough sell.
Well, based on this table I would say almost ALL US cities have half overcast days since only 8 listed have more than 188 days of sunshine.
They already do that, it's called the trusted traveler program.
Exporting text to a path is not the same as having text follow a path! I'm talking about being able to create a path along a curve or outside of an object and have the text follow that path.
I just used the Gimp again for the first time in a couple years and was reminded of where it can really lack for even non-professional users. Font support sucks completely, both from a looks perspective as well as from a feature perspective (kerning, strength, etc). The other feature I had an immediate use for that wasn't there was text along a path, if you can't apply an object like text to a path how useful are they?
Probably somewhere out East, there was a county where you could be within sight of one of the big telco's headquarters, near MAE-East and not have any broadband options. I remember multiple postings over the years from employees of said telco bitching about the fact that they ran one of the largest networks in the world but were stuck with IDSL at huge cost as the only "broadband" option.
Use an MUA that doesn't suck? Even Outlook 2003 supports multiple IMAP accounts. Thunderbird has supported it since the Netscape Communicator 4 days. Actually I can't think of a client off the top of my head that supports IMAP and doesn't support multiple profiles.
Ok, I now found the only thing a coworker should have on her car! She has a 300M with the license plate IDTENT, a slashdot sticker like that would be the perfect compliment, geeks would know instantly what it meant and the rest of the world would be COMPLETELY clueless =)
Because it's only faster in raw throughput, not random reads, and if it's RAID-5 not writes either. While everything has its place most midsized and larger shops are going to have a lot of $ wisely invested in 10&15k drives. We use SATA for DR, archival storage, and disk to disk to tape, and that's about it. Not everyone is Google where you can design your app to run in ram with disk as a backup or a startup that builds their own file servers.
This may be the most insightful thing ever posted to Slashdot in its ten year history.
You could run Windows well on flash without too much trouble, use a ramdrive and redirect TMP and TEMP to that and disable swap, set your browser to use TMP for cache or disable it altogether. Turn off timestamping on file access and it's even better. By that point if your flash has 500K writes before average failure then you have a drive that will last many years, probably longer than your average HDD.
I'm specifically talking about when Firefox grows to using hundreds of MB of ram over extended periods of time and doesn't release it even when I close like half my 50+ open tabs. It would be nice if you could tell the engine that you want to purge the data cache that it keeps to improve browser performance. While I generally like the performance I gain from the way that FF uses ram there are times when it would be much easier to purge the data cache then either let the OS page it out then back in later or closing the browser and dealing with the opening of 25 tabs the next time I fire it up.
Huh? The copy of Mozilla that I'm posting this on has been open since 2.0.0.7 was release which was about a month ago. I run 13 addons that are are a mix of very popular and not so popular, and since 2.0 came out I've had very few stability problems. I still wish it did a better job of release cache memory, or at least had a GC procedure I could manually launch to free up all the ram except the currently in use parts, but that's my only real remaining complaint.
Hmm, I run a Windows shop of 800 users at 100 sites with 150 servers and we have a total of 11 technical staff including helpdesk and telecom. I have a large number of servers that were last rebooted last summer when we took our datacenter down to double its size and upgrade our UPS system. I would have to ask if the 40 servers in the Novel environment included Dev/Test/Prod servers because that's pretty much a requirement for publicly traded companies today.
I can't believe there's been such a big discrepancy between models with different storage to this point. I just bought a 500 GB HDD for $99 but the difference between a 60GB model and a 80GB model is $100! Ok, so the bigger model also includes a game, but even at a high retail of $60 for the game that's still $40 for 20GB of storage. That's why I like commodity PC's, I can pick the best capacity/performance/efficiency for my price point.
Yes but most of those will pass the bar so they have a fallback in case their career in politics doesn't work out.
We just blew up meta.slashdot.org which is probably a single web frontend possibly with its own database (though it's likely tied into the main DB cluster).
I always find the UID discussion funny. Most people with UID's in the 2-4 digit range started reading slashdot early enough to remember there weren't any at the start. I personally only signed up for a named account after the atrocity that was John Katz when they added the feature to block certain authors.
but then again, half of all lawyers graduate in the bottom half of their class
Not true, some significant percentage of people who graduate at the bottom of their JD class will never pass the bar and get the title of lawyer =)
You missed the point of my post, I have no stance on the possibility of a successful suite RE bricking of iPhones, rather about the denial of warranty service for a physical defect in manufacture or workmanship. If your screen breaks and that is normally covered under warranty then Apple must prove that your third party addon broke the screen or else they cannot deny you warranty coverage in just about any jurisdiction so long as your claim would have been covered without the addon. Most of this case law was hashed out many, many years ago after the auto manufacturers tried to ban third party parts from being used for non-warranty vehicle repairs or routine maintenance. Even limited warranty service must not be selectively granted to exclude third party parts, this has as much to do with antitrust law as consumer protection law.
I hate to sound like an elitist ass, but get some skills. While I might occasionally die doing murlocs I completed all relevant quests two levels before recommended with both my mage and my hunter. My tanks types didn't do murlocs as they did those levels elsewhere to stave off boredom, but I don't think you should have a problem with proper pulling techniques. I don't play WoW anymore due to boredom, so perhaps they made the murlocs super strong post BC launch?
My 42" LCD TV(which is 16x larger) uses 170W max, so about 4.25x more efficient per area. Now some of that power draw is constant since things like a tv tuner take a relatively fixed amount of power.
There are a couple of problem with using this for production. It's SD, not HD or digital cinema resolution. It's oled which has horrible color accuracy problems, even if they have the life up to 10K+ hours I really doubt they have allowed it to stay color accurate over more than a tiny fraction of that time. Finally the drive electronics look significantly bigger than the equivalent for LCD so its use in portable applications is questionable.
Actually denying hardware warranty service on a device because of third party software is illegal just about everywhere. This practice would be covered under the same laws as third party hardware such as RAM in computers or non warranty covered parts in an automobile, unless they can conclusively prove that the third party part is the cause of the failure they cannot deny you warranty coverage.