He does tell us. There is a new TXT record that has been inserted by the owner of the DNS site, and it carries his message in plain English:
$ host -t TXT IP.relays.osirusoft.com IP.relays.osirusoft.com text "Please stop using relays.osirusoft.com"
Re:Wonderful, 5237 and counting
on
P2P Spam?
·
· Score: 1
Wonderful, I have gotten 5237 of these things and counting as I type this
I sympathize. I receive over 100 of these a day, now ignored by a procmail recipe but nevertheless a bandwidth burden. Plus all the mailer daemon bounces. I have written Windows software for many years and am on too many Windows users' address books. This kind of thing makes me question the wisdom of associating with Windows users.
Very few people are understanding what the article is saying
The research teams have been able to fabricate semiconductor gates. In other words, they have probably been able to make a couple lone transistors (on/off electrical amplification switches) on a substrate lying in a lab with very controlled conditions -- long way off from computer processing.
You can run Doom on this about as easily as you can run Quake with your bedroom lightswitch...
Perspective; a long way to go
on
The Diamond Age
·
· Score: 1
The research teams have been able to fabricate semiconductor gates. In other words, they have probably been able to make a couple lone transistors (on/off electrical amplification switches) -- long way off from computer processing.
You can run Doom on this about as easily as you can run Quake with your bedroom lightswitch...
In general I found that virtual domains were a bit trickier to set up in postfix than in sendmail
postfix used to have a different way to do virtual domains (in fact, it was called the "sendmail-style" virtual domains). These were a pain. Now it is very easy to set up virtual domains. There are 3 steps, and it will take you all of 2 minutes to set this up. I kid you not...
Make sure 'virtual_maps' directive is in postfix.conf; e.g.
virtual_maps = hash:/etc/postfix/virtual
Edit the file 'virtual' making sure you include the "Virtual domain" as the first line of a group. Include as many as of these blocks as you want, multiple domains. example.com Virtual domain
ad1@example.com destuser1
ad2@example.com destuser2
For comparison; I am trying out a fresh spamprobe install and I'm finding that after training with about 150 messages (about 70% of which are spam) I'm seeing great results.
If you decide to try out spamprobe or another bayesian filter, try this web interface which lets you easily reclassify mail, even those marked as spam. I found that "training" the bayesian filters was the hardest part; this definitely simplifies the process.
This is where procmail comes to the rescue! Add this rule:
# Ignore W32/Sobig.f@MM :0 B * ^vZgwXohhqrN4MDHpZfjXC6Aye4uyh5TU7soFb85wpJILzujHN /dev/null
This matches the worm on a base64 encoded line from its body. This is on the current variant I got flooded with; redirect the suckers to/dev/null. And if you get a NEW strain, just take an encoded body sample from it and make a new rule!
I'm a techie, and I find stuff like this interesting of course -- I love the idea of optical communication, personally.
But I really fear that a sea creature such as this could be exploited. Imagine there's another tech boom, and everyone's out to capture these thingies. Is it really worth wiping out species just so we can get faster porn?
This is kind of interesting: Microsoft's insecure Windows platforms is the breeding ground of massively distributed worms, which are designed to attack Microsoft's own servers (karma?)
While Microsoft thinks the "solution" is to move the target server, the real solution is to fix those gaping holes in their products.
Why not use ProFTPD? It has a much better security track record that wuftpd, and is actively developed. Considering all the roots that happen from default wuftpd installs, one of the first thing I recommend to linux newbies is to scrap wuftpd. And setting up a chroot environment is as easy as one directive: "DefaultRoot ~"
PCs are seriously bad news for "identity safety" because they are both generally insecure, yet also frequently used for things as important as banking and other government operations.
Do you store passwords somewhere on your hard drive? Do the passwords protect any valuable data (e.g. financial)? This data could escape if:
Your computer catches a virus/trojan with backdoor, and an intruder snoops your files
A co-worker snoops into your files
Your data BACKUPS go somewhere insecure
Your old hard drive is recovered by someone else
Valuable data is inadvertently copied somewhere you don't expect, which is insecure
Your computer is stolen!
I keep all my vital passwords, account numbers and other identification inside a PGP encrypted file which I keep on a portable USB flash drive which I keep on my person all the time. I also store other vital files (such as emails) only on this portable drive.
Why do I store it off the computer? Because even a private PGP key file residing on your hard drive is dangerous. Best to keep it portable, and on you. The trick I use is to remind myself: any data on fixed storage can easily 'escape'.
MS patches have, and continue to be, available for download as standalone installers. You can burn them to CD, DVD, write them onto a CF card.. whatever. Sad, and rather telling that this nonsense got modded as anything other than flamebait.
Thanks for the clarification everyone. It's good to hear that all the updates are available as standalone packages. Windows users should have no problem installing RPC and other patches in the future, since they can download what they need from a friend's computer.
But my primary concern remains -- computer users are being trained to blindy install anything automatic updates tell them to. And you all know as well as I that a desire of large software companies is to maintain control over their users. Put these two together, logically, and you have a means by which a company can keep a line of communication open with installs of their product under the bluff of "security".
Uh... why didn't he just unplug the net cable and install the patches?
Bravo!! I was waiting for this to come up in an interesting context, and this worm illustrates the problem perfectly.
The reason you can no longer unplug the network cable and install patches for Microsoft products is because Microsoft (and other companies) want you to be constantly connected to the Internet. This way your computer can constantly exchange digital rights and other background data. And since everyone is running those pretty little web based installers, you have little knowledge of what's really being transferred to and from your computer.
I run UNIX servers; when I need to install patches, I simply download them from another computer and burn them to a CD. My computers can run without network connections, thank you. You might have noticed that Microsoft phased out standalone patches a couple years ago.
Just wait for the chaos that will happen when we go back to centralized computing; you won't even be able to use your word processor without a network connection. And then when networks fail, nobody will be able to do any work.
Statistical filters (like those that run at the user level, not side-wide) can very effectively filter spam for users without the fear of collateral damage that goes hand-in-hand with blocklists. Although locking IPs and netblocks definitely saves bandwidth, it can result in loss of legitimate mail.
Statistical filters such as Bayesian filters have the advantage of considering all mail, then filtering out spam based on content. In my testing on over 5000 emails over several months, I have only had 5 "false positives" (all non-English, BTW) and a total filter effectiveness of over 97%
If you have access to a shell account on your mail system, or you run your mail server you really must check out spamprobe and optionally the webfilt interface. spamprobe is a fast Bayesian mail filter that is invoked by procmail, and webfilt is an interface that aids reclassification. Both are free.
that this may be an issue for national security is because the nation has a homogenous composition of operating systems: almost purely Microsoft Windows.
In this age of terrorism and electronic dependence it seems stupid to form our nation's business infrastructure upon one operating system. Now if we had a proper diversity of systems, this would not be a big problem.
I have used this technique during my "worst days" to get back on track. Starting with when you get up, keep a record of what hours you spend doing what. Be very honest with yourself. Include things like time for eating, watching TV, wasting time on the Internet. When do you get up? When do you go to bed?
Then you can identify where you are really "wasting" time. Time spent with friends is not, IMHO, a waste of time. Neither is time spent exercising, or fucking your partner. etc.
Do this for a week and look at the results. Where are you truly wasting your time? Cut down on whatever that happens to be.
This sounds like a pretty wacky claim on Microsoft's part. The only example that comes to my mind is maybesamba, which uses the Microsoft SMB protocol.
Now unfortunately for Microsoft, it is legal to reverse engineer a protocol for the sake of interoperability, when the documentation is not available from the company. This is clearly in the best interest of the public, which is most of us:)
A large amount of the other data made publicly available was protected by very weak compression/encryption software known as PKZip, which requires a password for access to the underlying work. PKZip passwords are relatively easy to avoid, and programs for locating passwords for PKZip files are readily available online. Moreover, passwords that others have located for these files have been freely available online for some time. Nonetheless, we decided to limit our research to only the files that were publicly available without any further effort, in part due to concerns about possible liability under the anti-circumvention provisions of the Digital Millennium Copyright Act.
Now that's kind of funny, isn't it? You have here a system which everyone agrees should be inherently secure. The developers use extremely weak (PKZip) passwords to protect some of their work, probably the more important components. Researchers can not break the password, however, because they will violate the DMCA.
On the other hand, criminals, terrorists, and anyone else who wants to corrupt the voting process can easily break the password and discover how to mess up the voting.
Now that's the DMCA in action, protecting your freedom! Oh yes, the DMCA is going to be just excellent for technology research and innovation.
Slashdot Mirror
He does tell us. There is a new TXT record that has been inserted by the owner of the DNS site, and it carries his message in plain English:
$ host -t TXT IP.relays.osirusoft.com
IP.relays.osirusoft.com text "Please stop using relays.osirusoft.com"
Very few people are understanding what the article is saying
The research teams have been able to fabricate semiconductor gates. In other words, they have probably been able to make a couple lone transistors (on/off electrical amplification switches) on a substrate lying in a lab with very controlled conditions -- long way off from computer processing.
You can run Doom on this about as easily as you can run Quake with your bedroom lightswitch...
The research teams have been able to fabricate semiconductor gates. In other words, they have probably been able to make a couple lone transistors (on/off electrical amplification switches) -- long way off from computer processing.
You can run Doom on this about as easily as you can run Quake with your bedroom lightswitch...
This short guide walks you through the steps used to compile and install a new 2.4 kernel.
example.com Virtual domain
ad1@example.com destuser1
ad2@example.com destuser2
For comparison; I am trying out a fresh spamprobe install and I'm finding that after training with about 150 messages (about 70% of which are spam) I'm seeing great results.
If you decide to try out spamprobe or another bayesian filter, try this web interface which lets you easily reclassify mail, even those marked as spam. I found that "training" the bayesian filters was the hardest part; this definitely simplifies the process.
This is where procmail comes to the rescue! Add this rule:
N
/dev/null. And if you get a NEW strain, just take an encoded body sample from it and make a new rule!
# Ignore W32/Sobig.f@MM
:0 B
* ^vZgwXohhqrN4MDHpZfjXC6Aye4uyh5TU7soFb85wpJILzujH
/dev/null
This matches the worm on a base64 encoded line from its body. This is on the current variant I got flooded with; redirect the suckers to
I'm a techie, and I find stuff like this interesting of course -- I love the idea of optical communication, personally.
But I really fear that a sea creature such as this could be exploited. Imagine there's another tech boom, and everyone's out to capture these thingies. Is it really worth wiping out species just so we can get faster porn?
This is kind of interesting: Microsoft's insecure Windows platforms is the breeding ground of massively distributed worms, which are designed to attack Microsoft's own servers (karma?)
While Microsoft thinks the "solution" is to move the target server, the real solution is to fix those gaping holes in their products.
Why not use ProFTPD? It has a much better security track record that wuftpd, and is actively developed. Considering all the roots that happen from default wuftpd installs, one of the first thing I recommend to linux newbies is to scrap wuftpd. And setting up a chroot environment is as easy as one directive: "DefaultRoot ~"
Do you store passwords somewhere on your hard drive? Do the passwords protect any valuable data (e.g. financial)? This data could escape if:
- Your computer catches a virus/trojan with backdoor, and an intruder snoops your files
- A co-worker snoops into your files
- Your data BACKUPS go somewhere insecure
- Your old hard drive is recovered by someone else
- Valuable data is inadvertently copied somewhere you don't expect, which is insecure
- Your computer is stolen!
I keep all my vital passwords, account numbers and other identification inside a PGP encrypted file which I keep on a portable USB flash drive which I keep on my person all the time. I also store other vital files (such as emails) only on this portable drive.Why do I store it off the computer? Because even a private PGP key file residing on your hard drive is dangerous. Best to keep it portable, and on you. The trick I use is to remind myself: any data on fixed storage can easily 'escape'.
Thanks for the clarification everyone. It's good to hear that all the updates are available as standalone packages. Windows users should have no problem installing RPC and other patches in the future, since they can download what they need from a friend's computer.
But my primary concern remains -- computer users are being trained to blindy install anything automatic updates tell them to. And you all know as well as I that a desire of large software companies is to maintain control over their users. Put these two together, logically, and you have a means by which a company can keep a line of communication open with installs of their product under the bluff of "security".
Bravo!! I was waiting for this to come up in an interesting context, and this worm illustrates the problem perfectly.
The reason you can no longer unplug the network cable and install patches for Microsoft products is because Microsoft (and other companies) want you to be constantly connected to the Internet. This way your computer can constantly exchange digital rights and other background data. And since everyone is running those pretty little web based installers, you have little knowledge of what's really being transferred to and from your computer.
I run UNIX servers; when I need to install patches, I simply download them from another computer and burn them to a CD. My computers can run without network connections, thank you. You might have noticed that Microsoft phased out standalone patches a couple years ago.
Just wait for the chaos that will happen when we go back to centralized computing; you won't even be able to use your word processor without a network connection. And then when networks fail, nobody will be able to do any work.
Wait a couple years and then laugh
that we saw this article on location-tracking software in PDAs, using simple triangulation. I wonder if this uses a similar technology?
I hope you don't consider this too off-topic ;)
Can someone explain to me, or provide some good links, so I can learn properly what 'shorting' is in respect to stocks? No particular reason...
Statistical filters (like those that run at the user level, not side-wide) can very effectively filter spam for users without the fear of collateral damage that goes hand-in-hand with blocklists. Although locking IPs and netblocks definitely saves bandwidth, it can result in loss of legitimate mail.
Statistical filters such as Bayesian filters have the advantage of considering all mail, then filtering out spam based on content. In my testing on over 5000 emails over several months, I have only had 5 "false positives" (all non-English, BTW) and a total filter effectiveness of over 97%
If you have access to a shell account on your mail system, or you run your mail server you really must check out spamprobe and optionally the webfilt interface. spamprobe is a fast Bayesian mail filter that is invoked by procmail, and webfilt is an interface that aids reclassification. Both are free.
that this may be an issue for national security is because the nation has a homogenous composition of operating systems: almost purely Microsoft Windows.
In this age of terrorism and electronic dependence it seems stupid to form our nation's business infrastructure upon one operating system. Now if we had a proper diversity of systems, this would not be a big problem.
Diversity == hard target for disaster
- DRM can only further complicate the issue of media transfer; it can never simplify it
- DRM takes the right-of-storage away from the user; people are not getting what they pay for
- DRM, if it takes a hold, will make long term archival of media next to impossible (think long term: this is a significant problem)
- DRM puts questionable authorities in control of media on your computer. In many cases your computer ceases to function as an independant entity.
- DRM is erroneously pushed as a "security enhancement" for user. The reason for the lies is that DRM actually has no benefit for the user.
The key point: DRM offers no benefit for the user.I have used this technique during my "worst days" to get back on track. Starting with when you get up, keep a record of what hours you spend doing what. Be very honest with yourself. Include things like time for eating, watching TV, wasting time on the Internet. When do you get up? When do you go to bed?
Then you can identify where you are really "wasting" time. Time spent with friends is not, IMHO, a waste of time. Neither is time spent exercising, or fucking your partner. etc.
Do this for a week and look at the results. Where are you truly wasting your time? Cut down on whatever that happens to be.
This sounds like a pretty wacky claim on Microsoft's part. The only example that comes to my mind is maybe samba, which uses the Microsoft SMB protocol.
:)
Now unfortunately for Microsoft, it is legal to reverse engineer a protocol for the sake of interoperability, when the documentation is not available from the company. This is clearly in the best interest of the public, which is most of us
Also check out this web page on How to Reverse Engineer and still be Legal.
- Find a nice girl and date her a long time
- Find a girl that wants to be wild and fulfill her fantasy
- Find a confused girl and work quickly while she's still baffled
- Find a slut and do shots with her (while you cheat)
- Find an artsie girl and read shitty poetry to her that you found on
/.
Oh wait -- that last one probably won't work.On the other hand, criminals, terrorists, and anyone else who wants to corrupt the voting process can easily break the password and discover how to mess up the voting.
Now that's the DMCA in action, protecting your freedom! Oh yes, the DMCA is going to be just excellent for technology research and innovation.