Wrecking homes are a social problem. Daughter probably aren't too comfortable with a new man higher up in the social ranks than her, in her moms life. Communication and interest in understanding each other is a good key to remember. Not just bash your little "property" daughter just because she has a free will and mind of her own.
Not sure why I'm responding to an AC (since you'll probably never read this...) She'd been there for the better part of a decade. I don't know the whole story, but that seems to be the straw that broke the camel's back.
A technical solution, would be for the man to have a clue and only let the daughter in on the machine on a limited account. Then she wouldn't be able to install ANYTHING.
That's the problem. He's a regular joe, not a computer geek.
Claiming the "machine" to be wrecked is false. If the hardware is at fault, return it. If Windows is utterly corrupted, run Adaware or reinstall the whole thing.
From her (the wife's) description, I'm guessing adware. In any case, no one there is technically competent enough to fix it and keep it that way.
Just don't take it on your steph-daughter for your own technical limitations.
:-) I'm not posting as a 'friend' lamenting my own problems. I generally keep my own problems to myself.
There is certainly no loss of thousands of dollars here, just a couple of hours from a clueful and helpful geek. Maybe that is You?:-)
'Fixing' it would only help them temporarily. I've advised a simpler solution. Buy a Mac;-)
You married a virgin?! But she has no bedroom experience!
while(good==experience++) { /* infinite loop: good not necessarily related to experience please use variable directly related to good */ }
For me, "no experience" equates to "not already deep in the pocket of some corporation or political action committee." That's a big plus in my book. A candidate with no 'political experience' might actually do things that benefit The People.
A friend of mine at work got a new Windows PC within the last year. It is already unusable. Her husband purchased it for their daughter and told her in no uncertain terms not to put that 'file sharing stuff' on the new machine. Daughter did, machine slowed to an infested crawl, husband & daughter get into big fight, daughter moved three states away to live with biological father, and husband has spent the past several months, off and on, trying to fix the machine to recover some part of his several thousand dollars invested in it.
So there you have it folks. Windows PCs wreck happy homes.;-)
Hmm, let's see. In the past 225 years, America has managed to enslave, impoverish, and oppress one race, yet still have time to commit genocide on another. Oh yeah, our track record is way better than China's when it comes to basic human rights. But wait, we're a kinder,gentler America now, aren't we?
At least a nuclear plant only makes its presence known to the locals when something goes wrong...
Not all nuclear reactors. I'm afraid China is going to be the one who shows the west how it's done. I guess we'll let China whip us for the next ten years or fifteen years, then adopt what pans out.
Put the 'windows' on the outside of the house, then you could create all sorts of interesting things for the nosy folks across the street to witness:-)
Aurora Borealis? At this time of year? At this time of day? In this part of the country? Localized entirely within your kitchen?
Look harder. Some of the proof of concepts were altered to do really malacious stuff. My Mac users go to primarily art/design sites, and that's where they found the fubared disk images (things that said stuff like "download this until Apple fixes it"). Target the audience.
I looked when the exploit was an issue. I saw plenty of bad advice to 'fix' the problem, which could have in turn borked things, but I not once saw a live malicious exploit. There are no incident notes at CERT on the subject, and to my knowledge, none of the anti-virus companies have reported seeing a malicious exploit either. Like I said before, feel free to post a link and correct me here.
Actually, it required going to a page that hosted a.dmg. Not many are out there.
No, it didn't. It could have been hosted through webdav, samba, afp, or anything else. A disk:, disks:, or help: URI was not a requirement, nor was a.dmg file. All that was required was the mounting of a volume (remote or local), and a redirect link to execute the code. Linking could even be done through an <img> tag allowing the exploit to fire on a message board that allowed images. Cross site scripting could have pushed the exploit through trusted domains. Nothing short of disconnecting from the internet would have allowed for perfect safety.
Ah, the grand old question. My users refuse to run as anything but root. The first time I set up OS X, they were frustrated that they were being asked for their passwords. "OS 9 never did this". They never grew out of it.
You can auto-login with a regular user account just as easily as you can with an admin account.
I personally blame the Mac mindset.
Maybe you should have a look at the mindset that computing must be a hassle to be secure.
You don't see anything from the GUI, which is where much of this problem lie.
The runscript AppleScript, which was the start of the whole mess, was indeed editable/open source. The exploit discovered in relation to it was a problem with LaunchServices, not the GUI. Having the source would not have prevented the flaw in either case. It was well documented behavior, not a bug in the source, that allowed for the existence of this exploit. You can argue that the fix could have been made available sooner had the entire OS been open source, but your argument that the OS would have been more secure had it been entirely open source does not stand up to scrutiny.
That's funny, because remember that exploit Apple had a few months back: the one where you click a disk image and it automatically ran?
That's funny, I don't remember an exploit. I remember a hole. I remember example exploits, but I don't recall a live exploit that did damage to any system being reported anywhere. Feel free to link me to one if you can prove me wrong here.
We have only 4 Mac users, and 2 of them clicked disk images on the net. *2 of them*. Half of the staff. Both got weird variants of a program that basically hosed their Applications directory.
The exploit did not require clicking 'disk images on the net.' It did not require any kind of carelessness or stupidity on the user's part. That's why it was considered such a serious hole. Besides Mr. Admin, what were your Mac users doing running with admin privileges? That's the only way they could fuck up/Applications.
ls -l / | grep "Applications" drwxrwxr-x 65 root admin 2210 7 Sep 23:57 Applications drwxrwxr-x 16 root admin 544 2 Dec 2003 Applications (Mac OS 9)
Now, if my PC users had that batting average (.500), I'd be pulling my hair out. Fortunately, we only have 1 or 2 people do stupid things monthly.
About that 1 or 2 stupid things monthly... Does giving administrator accounts to the graphics department qualify?
Mac is really no better, and I think if virus writers actually targetted the thing we'd see an "anti-resurgance". Personally, no OS is secure unless I can see the code.
You can see the code. As for better, I'm not going to turn this into a Mac v. PC pissing contest. I know which is better, and you don't understand the Mac OS well enough to argue the point.
Ah, just thought you were challenging the credibility of the source. On that note, about 5 minutes after posting this, I read another story that seems to downplay the whole thing. Looks interesting, but unlikely to be a nuke. None of the typical preparation appears to have been done for a nuke test, and it did happen Thursday. If it were a nuke test, I think N. Korea would have done a little bragging by now. N. Korea appears to have a lot of problems right now, not nukes.
A supervisor actually advised me to be careful and even pad things out if need be, so that others dont start relying on me finishing ahead of schedule and start overloading me with work.
Or he could be looking at his own job security. The middle management types I've dealt with in my lifetime are concerned first and foremost with their own job security, followed by actually producing for their own boss. Having a one employee among their flock exhibit exceptional ability makes them very uneasy. I have watched sales managers chase off their best salesmen because they fear for their own position. Upper management never seems to notice, accepting whatever BS story the PHB has for them. That also relates back to the 'more work/less pay' point made by the grand parent poster BTW. By heaping the shit on you with no compensation, you are discouraged from performing too well.
Most recipes are designed for women, and their funny way of looking at the world
What, exactly, is so offensive about that statement? Men and women have very different information processing abilities. Don't let yourself get so wrapped up in political correctness. As I've already said in an earlier post, read the part about drawing bicycles. Ignoring scientific fact in the name of political correctness is for politicians, not nerds:-)
Which would you rather know? Who sent the mail, or where the mail came from? Sender ID only tells you where. With S/Mime you get both. And this sender ID/SPF thing requires that EVERYBODY use it or else. On the other hand, S/Mime can be phased in gradually, one user at a time, and could easily be filtered client side. It looks to me like a major piece of the spam solution is right under your noses.
Basically, when the police arrest someone, the Crown Prosecution Service has to determine whether they can win a case and whether it's in the public interest to convict. So while it's obviously correct to try and convict Paul Burrell of stealing from *Our lady of grace, Princess Diana* [sarcasm intended], after her death, petty theft is not. Case in point. My sister and GF were attacked in the street. The attacker was known as someone who assaults people. The police said that they couldn't press charges because the woman in question had children and it wouldn't be in the public interest to remove a violent prat from the streets. THAT is what we contend with daily in the UK. We're by no means a police state, we just have the apparatus at the hands of the incompetant.
There was a vast amount of criminality in London, a whole world-within-a-world of thieves, bandits, prostitutes, drug-peddlers, and racketeers of every description; but since it all happened among the proles themselves, it was of no importance. In all questions of morals they were allowed to follow their ancestral code. The sexual puritanism of the Party was not imposed upon them. Promiscuity went unpunished, divorce was permitted. For that matter, even religious worship would have been permitted if the proles had shown any sign of needing or wanting it. They were beneath suspicion. As the Party slogan put it: 'Proles and animals are free.' - George Orwell, '1984'
How successful would the most popular music store online to date have been if Record Industry PHBs, who thought 'Rip' meant rip off, had this law in place three years ago?
The purpose of this act is to outlaw Gnutella, Kazaa, and other networks like them. Let's say, for the sake of argument, you do outlaw these networks. Tell me Senator Hatch, how will that have any effect on either the Gnutella or Kazaa network? Kazaa isn't based in America, and isn't subject to American authority. Gnutella is completely decentralized. It isn't based anywhere. How do you plan to stop these networks? The great firewall of America perhaps?
I mean, it requires you to connect it to your computer and upload to their website. Hell, if that isn't the fox guarding the hen house. I mean, we'll be the first to know about the shift key exploit;-) And naturally any code will be GPL so everyone can share in low rates! Just send one to DVD Jon. He'll have that puppy cracked in no time:-D
All good points, but there's one flaw in the strategy this time. iPods don't do WMA. They really are going to need that $50 vapor player if they plan to take the market this time. And since iPods are only $0 to $69, it's going to be a hard sell:-)
In all seriousness though, Apple has momentum. They've got a greater marketshare with iPods and iTunes than they ever had with the Macintosh. This time, Apple has the ubiquitous hardware advantage. Microsoft is Tyson fighting Buster Douglas. MS is getting soft. XBox hasn't gone according to plan. Licensing and product activation is leading their customers to jump ship. They've peaked. There's nowhere to go but down now;-)
Yeah, it would be like someone identifying an undercover CIA agent on national television. I *KNOW* there would be consequences for an action like that! </sarcasm>
Don't get me wrong, I'm not arguing for either party here. I dislike them both equally, but you're just wrong. Have you even looked at the website in question? This isn't a bunch of pro-life freaks with gun sights superimposed over pictures of doctors. It's an image map of the US linked to lists of delegates. Now step away from the TV, away from your 30-seconds-hate, clear your partisan head a bit, and look again. Does it really look like a tool of the devil? Do you really think it was Osama that posted that page? Come on now.
Besides, your "common sense" approach would be just the kind of attitude to get something like this pulled offline. It's not black or white; it's grey. If the Bill of Rights only applies in the white, it isn't worth anything.
Furthermore, if you don't like anonymous posters, I suggest you move. Why do you think it is the First Amendment? Anonymous publishing has been used as a political tool in this land since before the dawn of this nation. The Bill of Rights is simply there to point out that ACs are OK. It's one of the founding principles of this nation.
I'll spare you the long, all caps bwahaha. Maybe the world is all rainbows and strawberries in the UK. Here in America, history books call genocide, "The Trail of Tears." The corporations probably couldn't do a worse job. Just a different one.
If you had to google that, I wonder how effective it will be to people who don't speak english 10,000 years into the future... (There must be a clue to what it means further into the tomb! Let's go, quickly!!) I think the geeks at Sandia, with all due respect, should contact Apple about the interface design;-)
Wrecking homes are a social problem. Daughter probably aren't too comfortable with a new man higher up in the social ranks than her, in her moms life. Communication and interest in understanding each other is a good key to remember. Not just bash your little "property" daughter just because she has a free will and mind of her own.
Not sure why I'm responding to an AC (since you'll probably never read this...) She'd been there for the better part of a decade. I don't know the whole story, but that seems to be the straw that broke the camel's back.
A technical solution, would be for the man to have a clue and only let the daughter in on the machine on a limited account. Then she wouldn't be able to install ANYTHING.
That's the problem. He's a regular joe, not a computer geek.
Claiming the "machine" to be wrecked is false. If the hardware is at fault, return it. If Windows is utterly corrupted, run Adaware or reinstall the whole thing.
From her (the wife's) description, I'm guessing adware. In any case, no one there is technically competent enough to fix it and keep it that way.
Just don't take it on your steph-daughter for your own technical limitations.
:-) I'm not posting as a 'friend' lamenting my own problems. I generally keep my own problems to myself.
There is certainly no loss of thousands of dollars here, just a couple of hours from a clueful and helpful geek. Maybe that is You? :-)
'Fixing' it would only help them temporarily. I've advised a simpler solution. Buy a Mac ;-)
Not everything with G attached will be associated with Google...
Like Gspot... Unfortunately for slashbots though, that too is invite only ;-)
You married a virgin?! But she has no bedroom experience!
For me, "no experience" equates to "not already deep in the pocket of some corporation or political action committee." That's a big plus in my book. A candidate with no 'political experience' might actually do things that benefit The People.
So there you have it folks. Windows PCs wreck happy homes. ;-)
Hmm, let's see. In the past 225 years, America has managed to enslave, impoverish, and oppress one race, yet still have time to commit genocide on another. Oh yeah, our track record is way better than China's when it comes to basic human rights. But wait, we're a kinder, gentler America now, aren't we?
Not all nuclear reactors. I'm afraid China is going to be the one who shows the west how it's done. I guess we'll let China whip us for the next ten years or fifteen years, then adopt what pans out.
Well, assuming we aren't still whining about 'Intellectual Property' and draining our resources fighting 'Rouge Dictators' when they have beaten us in cloning, stem cell treatments, computer science, computer hardware, and space exploration. Energy production almost seems small by comparison.
Look harder. Some of the proof of concepts were altered to do really malacious stuff. My Mac users go to primarily art/design sites, and that's where they found the fubared disk images (things that said stuff like "download this until Apple fixes it"). Target the audience.
I looked when the exploit was an issue. I saw plenty of bad advice to 'fix' the problem, which could have in turn borked things, but I not once saw a live malicious exploit. There are no incident notes at CERT on the subject, and to my knowledge, none of the anti-virus companies have reported seeing a malicious exploit either. Like I said before, feel free to post a link and correct me here.
Actually, it required going to a page that hosted a .dmg. Not many are out there.
No, it didn't. It could have been hosted through webdav, samba, afp, or anything else. A disk:, disks:, or help: URI was not a requirement, nor was a .dmg file. All that was required was the mounting of a volume (remote or local), and a redirect link to execute the code. Linking could even be done through an <img> tag allowing the exploit to fire on a message board that allowed images. Cross site scripting could have pushed the exploit through trusted domains. Nothing short of disconnecting from the internet would have allowed for perfect safety.
Ah, the grand old question. My users refuse to run as anything but root. The first time I set up OS X, they were frustrated that they were being asked for their passwords. "OS 9 never did this". They never grew out of it.
You can auto-login with a regular user account just as easily as you can with an admin account.
I personally blame the Mac mindset.
Maybe you should have a look at the mindset that computing must be a hassle to be secure.
You don't see anything from the GUI, which is where much of this problem lie.
The runscript AppleScript, which was the start of the whole mess, was indeed editable/open source. The exploit discovered in relation to it was a problem with LaunchServices, not the GUI. Having the source would not have prevented the flaw in either case. It was well documented behavior, not a bug in the source, that allowed for the existence of this exploit. You can argue that the fix could have been made available sooner had the entire OS been open source, but your argument that the OS would have been more secure had it been entirely open source does not stand up to scrutiny.
That's funny, I don't remember an exploit. I remember a hole. I remember example exploits, but I don't recall a live exploit that did damage to any system being reported anywhere. Feel free to link me to one if you can prove me wrong here.
We have only 4 Mac users, and 2 of them clicked disk images on the net. *2 of them*. Half of the staff. Both got weird variants of a program that basically hosed their Applications directory.
The exploit did not require clicking 'disk images on the net.' It did not require any kind of carelessness or stupidity on the user's part. That's why it was considered such a serious hole. Besides Mr. Admin, what were your Mac users doing running with admin privileges? That's the only way they could fuck up /Applications.
Now, if my PC users had that batting average (.500), I'd be pulling my hair out. Fortunately, we only have 1 or 2 people do stupid things monthly.
About that 1 or 2 stupid things monthly... Does giving administrator accounts to the graphics department qualify?
Mac is really no better, and I think if virus writers actually targetted the thing we'd see an "anti-resurgance". Personally, no OS is secure unless I can see the code.
You can see the code. As for better, I'm not going to turn this into a Mac v. PC pissing contest. I know which is better, and you don't understand the Mac OS well enough to argue the point.
Ah, just thought you were challenging the credibility of the source. On that note, about 5 minutes after posting this, I read another story that seems to downplay the whole thing. Looks interesting, but unlikely to be a nuke. None of the typical preparation appears to have been done for a nuke test, and it did happen Thursday. If it were a nuke test, I think N. Korea would have done a little bragging by now. N. Korea appears to have a lot of problems right now, not nukes.
Here
Or he could be looking at his own job security. The middle management types I've dealt with in my lifetime are concerned first and foremost with their own job security, followed by actually producing for their own boss. Having a one employee among their flock exhibit exceptional ability makes them very uneasy. I have watched sales managers chase off their best salesmen because they fear for their own position. Upper management never seems to notice, accepting whatever BS story the PHB has for them. That also relates back to the 'more work/less pay' point made by the grand parent poster BTW. By heaping the shit on you with no compensation, you are discouraged from performing too well.
What, exactly, is so offensive about that statement? Men and women have very different information processing abilities. Don't let yourself get so wrapped up in political correctness. As I've already said in an earlier post, read the part about drawing bicycles. Ignoring scientific fact in the name of political correctness is for politicians, not nerds :-)
Uhhhhgg, don't be so PC. We are wired differently. Read the part about drawing bicycles. The same applies here. :-)
Which would you rather know? Who sent the mail, or where the mail came from? Sender ID only tells you where. With S/Mime you get both. And this sender ID/SPF thing requires that EVERYBODY use it or else. On the other hand, S/Mime can be phased in gradually, one user at a time, and could easily be filtered client side. It looks to me like a major piece of the spam solution is right under your noses.
In Oceania there is no law.
There was a vast amount of criminality in London, a whole world-within-a-world of thieves, bandits, prostitutes, drug-peddlers, and racketeers of every description; but since it all happened among the proles themselves, it was of no importance. In all questions of morals they were allowed to follow their ancestral code. The sexual puritanism of the Party was not imposed upon them. Promiscuity went unpunished, divorce was permitted. For that matter, even religious worship would have been permitted if the proles had shown any sign of needing or wanting it. They were beneath suspicion. As the Party slogan put it: 'Proles and animals are free.' - George Orwell, '1984'
How successful would the most popular music store online to date have been if Record Industry PHBs, who thought 'Rip' meant rip off, had this law in place three years ago?
The purpose of this act is to outlaw Gnutella, Kazaa, and other networks like them. Let's say, for the sake of argument, you do outlaw these networks. Tell me Senator Hatch, how will that have any effect on either the Gnutella or Kazaa network? Kazaa isn't based in America, and isn't subject to American authority. Gnutella is completely decentralized. It isn't based anywhere. How do you plan to stop these networks? The great firewall of America perhaps?
I mean, it requires you to connect it to your computer and upload to their website. Hell, if that isn't the fox guarding the hen house. I mean, we'll be the first to know about the shift key exploit ;-) And naturally any code will be GPL so everyone can share in low rates! Just send one to DVD Jon. He'll have that puppy cracked in no time :-D
All good points, but there's one flaw in the strategy this time. iPods don't do WMA. They really are going to need that $50 vapor player if they plan to take the market this time. And since iPods are only $0 to $69, it's going to be a hard sell :-)
In all seriousness though, Apple has momentum. They've got a greater marketshare with iPods and iTunes than they ever had with the Macintosh. This time, Apple has the ubiquitous hardware advantage. Microsoft is Tyson fighting Buster Douglas. MS is getting soft. XBox hasn't gone according to plan. Licensing and product activation is leading their customers to jump ship. They've peaked. There's nowhere to go but down now ;-)
Yeah, it would be like someone identifying an undercover CIA agent on national television. I *KNOW* there would be consequences for an action like that!
</sarcasm>
Don't get me wrong, I'm not arguing for either party here. I dislike them both equally, but you're just wrong. Have you even looked at the website in question? This isn't a bunch of pro-life freaks with gun sights superimposed over pictures of doctors. It's an image map of the US linked to lists of delegates. Now step away from the TV, away from your 30-seconds-hate, clear your partisan head a bit, and look again. Does it really look like a tool of the devil? Do you really think it was Osama that posted that page? Come on now.
Besides, your "common sense" approach would be just the kind of attitude to get something like this pulled offline. It's not black or white; it's grey. If the Bill of Rights only applies in the white, it isn't worth anything.
Furthermore, if you don't like anonymous posters, I suggest you move. Why do you think it is the First Amendment? Anonymous publishing has been used as a political tool in this land since before the dawn of this nation. The Bill of Rights is simply there to point out that ACs are OK. It's one of the founding principles of this nation.
I'll spare you the long, all caps bwahaha. Maybe the world is all rainbows and strawberries in the UK. Here in America, history books call genocide, "The Trail of Tears." The corporations probably couldn't do a worse job. Just a different one.
They'll remind you that you DO NOT save seed corn, lest you be sued into oblivion.
Sounds to me like they just don't want anyone but the 'official' bloggers posting review... "Worst convention EVER!"
If you had to google that, I wonder how effective it will be to people who don't speak english 10,000 years into the future... (There must be a clue to what it means further into the tomb! Let's go, quickly!!) I think the geeks at Sandia, with all due respect, should contact Apple about the interface design ;-)