Slashdot Mirror


User: dsoltesz

dsoltesz's activity in the archive.

Stories
0
Comments
226
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 226

  1. I Volunteer on Internet Book Database? · · Score: 1

    For years I've intended to get just my Asimov collection into a database of some sort, but the idea of pulling down all the books and typing the info by hand is daunting (or maybe ridiculous). So, I've spent the last hour or so playing with some ideas I picked up from this article's discussion earlier. After hunting around in vain to see if there was a decent book database out there, I started thinking "ya know, if we /.ers all got together, we could probably build and populate a database..."

    ...IOW, I'd love to contribute to such a project. If anyone is seriously thinking of starting such a thing, let me know.

  2. Notice about this sent to M$ on Don't Hit That Back Button · · Score: 1
    I've sent the following to M$:
    This patch does not prevent the exploit of running scripts after hitting the "Back" button when arriving at the error page:

    http://www.microsoft.com/technet/treeview/default. asp?url=/technet/security/bulletin/MS02-015.asp

    Testing (in MSIE 6.0.26 on Win2K SP2) with the HTML code sample at:

    http://online.securityfocus.com/archive/1/267561

    resulted in running the javascript on that page being allowed to run Minesweeper from the Windows/system32 directory and allowing the cookie set by Google to be read and displayed.
    M$ Suggestion Submission Page
  3. Re:This catch anyone's eye? on Don't Hit That Back Button · · Score: 1

    The patch doesn't work. I've been keeping win2k and MSIE 6 updated with Windows Update, but installed the patch "just to be sure" and it didn't stop the exploit sample from running minesweeper and getting my Google cookie.

  4. Re:Test it out if you have IE on Don't Hit That Back Button · · Score: 1

    Win2K SP2 and MSIE 6 -- both always kept up-to-date with Windows Update. Only the first link didn't work (cuz there's a Windows directory instead of a WinNT directory). Proceeded to try it in Opera, Netscape 4.7 and 6.2, Mozilla, all of which successfully did not get exploited.

    Got to the point in this thread where someone said "there's a patch". First, I got pissed that this patch wouldn't have been included in the Windows Update. Checked Windows Update to assure my self that indeed the system was up-to-whatever-the-fuck-date Microsoft has on their calendar. Got the patch. Installed the patch. Minesweeper still runs, at least the first time. My Google cookie is still read.

    Disturbingly, even tho I have all the scripting stuff set to "Prompt" I don't always get prompted for the script to execute. I'm not getting prompted to have the Google cookie set, and I do have all cookies set to "prompt" me -- I'll have to dig deeper on this one.

    Anyone got a "Pop-Up Stopper" that works with Opera?

  5. "Solid" might be an overstatement on Apache Auth and Self-signed Cert Tutorials with FreeBSD · · Score: 5, Informative
    The "Self-signed X.509 Certificate Generation" might be nifty. I've not tried such a thing, so I really can't comment, but if I need something like this, this tutorial will be the place I start.

    On the other hand, the "Basic Authentication for Apache" really only glances over the whole basic authentication idea... the instructions given are a good place to start, but a little more reading is recommended for folks who want to do this. There are a million and one pages out there very similar to this one -- I would have liked to have seen a more comprehensive tutorial.

    1. The tutorial makes an assumption about where apache is installed. Many administrators do not put it in the default place, instead opting to put all the web tools and files in a central location to make things easier for the web master.
    2. All the stuff in the .htaccess file can be put in the httpd.conf file, and probably should. .htaccess is a method for allowing web users to do their own sub-site configuration without bugging the webmaster. The webmaster should allow users to do this only if she wants to allow it, and should do her own access constraints and other configuration in the httpd.conf file.
    3. A discussion about preventing surfers from being able to read the .htaccess files that live in the htdocs tree would be a good addition to the tutorial.

    That's my $.02

  6. Re:A few thoughts. on Teaching Linux/Unix Basics to Microsoft Junkies? · · Score: 1

    But I can do the same thing with Windows telnet

    Aahhhhhh!!! Passwords in plaintext. Telnet is the devil. SSH is encrypted. These are not equivalent services.

    Easy enough to get SSH, etc., servers for Windows. If brought up, his students probably should be warned about security issues like telnet for any system.

  7. Do they know DOS? on Teaching Linux/Unix Basics to Microsoft Junkies? · · Score: 3, Insightful
    If these Windows users also know DOS (I don't know if that's a fair presumption) one approach is the Unix Guide for DOS Users approach -- give them a list of the basic commands and their Unix counterparts. That combined with man/info can certainly give them a jump start. (Unfortunately, the book I'm thinking of appears to be out of print.) As for the basics, Windows users will appreciate knowing how to (ab)use ln.

    I'm also assuming they don't need to know how to set up and install a system, just be a user. They should know how to configure their own environments, set environment variables, etc. System stuff should be limited to the software they might be using and managing -- where are the logs and conf files, how to install, and so forth.

    Free alternatives to costly software is a great idea. What about a brief discussion of Apache, JavaServer/JSP, Xerces, Xalan, etc? No need to get into the nitty gritty, but let them know there are free, multiplatorm alternatives to everything. My alternative to Visual Studio is Visual SlickEdit.

  8. The ASU/NASA release is the real story... on Artifacts by Little Green Men? · · Score: 1
    ...and the city/fort is pretty clear in the new Odyssey image they released. The links to the "there is intelligent life on Mars" sites was simply to give an alternative point of view on the imagery as well as some history into the controversy/debate.

    Here's a couple links with other images of the city (also called the "fort" by some):

    Personally, I'm with ASU -- landforms that look like familiar objects are nothing more than that. Looking at the Themis image I can see all kinds of shapes -- for instance the mouthless skull below the face and above the pyramid, and to the left of the hill just below the pyramid appears to be three partially obliterated silos or water tanks in a row (running horizontally).

  9. GNU is pretty clear on GPL for beta releases on Lindows - Where's the Source? · · Score: 3, Insightful
    The GPL FAQ seems pretty damn clear about this issue:
    Does the GPL allow me to distribute a modified or beta version under a nondisclosure agreement? No. The GPL says that anyone who receives a copy of your version from you has the right to redistribute copies (modified or not) of that version. It does not give you permission to distribute the work on any more restrictive basis.
    As addressed elsewhere in this discussion, Lindows must make available all the GPL source code to users who have the binaries, and cannot charge more for the distribution of the code than the cost of distributing it. If these subscribed users are not able to get the entire set of matching source code that's under GPL, Lindows is violating the GPL. I don't think it will hold up in court that members of the Lindows Insiders subscription service are "internal".
  10. Re:Ooooh, scary on War Driving Version 2.0 · · Score: 5, Interesting
    Well, we picked up a set of X10's that were coming with the rotating base. Our purpose was to transmit goofy "web cam" and home monitoring stuff -- video of the bird feeders, the dogs in the backyard (we're curious what they do all day to entertain themselves you see), spy on the cats (how in the hell did they get up there?), and as a cheap image capture for the telescope. It hadn't occurred to us the phone was also running at 2.4 GHz, which interfered with the picture. We unplugged the phone, played for a while, then packed everything up and sent it all back -- we weren't about to give up this particular phone in order to keep the cameras :-D

    I thought the system was worth the $250 bucks or so -- four cameras, robotic base, and other accessories. The images were acceptably clear, there's an interesting selection of cameras available, and the robotic base runs very smoothly and quietly. A decent web cam ususally runs around $50 or $60, so I thought it was worth the money.

    Actually, the robotic base is what pushed us over the edge to finally buy a package. We were looking for a cheaper alternative to the $2500 and up price tags we were finding for such things. Even though the set up didn't work for our house, we think using them at work to "monitor" things like the computer rooms, printers, etc. would be handy. Printers and plotters in particular -- some folks in other buildings waste a lot of time walking across campus checking up on their prints.

  11. Re:1979 Miniseries? on Burrough's Martian Tales Optioned · · Score: 1

    I have the whole thing on VHS, and enjoy them, but I rank Bradbury as one of my most favorite authors of all time (along with Asimov and Herbert), so my opinion is not really objective.

    I did make a reference earlier to Martian Chronicles in making a comment about the likelihood of Hollywood making a movie based on old stories that are no longer considered remotely plausible. On the otherhand, the classical value and fan base of such authors who wrote stories about our neighboring planets before space exploration might be enough to "sell" the movie to the public (Martian Chronicles being one example).

  12. I'm skeptical... on Burrough's Martian Tales Optioned · · Score: 1

    The recent trends seem to lean towards a certain amount of plausibility required in a sci-fi movie based in our own solar system. Despite the classic value of the tales, I find it difficult to believe Hollywood's going to resurrect the "little green men" of yesteryear.

    The latest stuff I can think (Red Planet for example) of builds on what we know of Mars and attempts to work in that context. Granted, occasional leaps involving super-advanced aliens are involved, but the Mars depicted is the post-Viking Mars nonetheless. The Mars of ERB does not match our current notions. Pathfinder in particular seems to have changed the awareness and depiction of Mars (and our relationship with the red planet) in fiction. I don't think a Barsoom movie could be done today any more than Lucky Starr and the Oceans of Venus. I could be wrong -- after all, The Martian Chronicles was produced not long after Viking...

  13. Re:Free Text of Princess of Mars on Burrough's Martian Tales Optioned · · Score: 1

    All? Not even. After tearing through the five Barsoom eTexts at Gutenburg, I finally had to track down several more from online used bookstores in order to try to finish the series.

  14. Re:Its not 12! on Abit's New Motherboard Lays On The Ports · · Score: 1
    The specs say:
    • 2 Channels of Bus Master IDE Ports supporting up to 4 Ultra DMA 33/66/100/133 devices
    • 4 Channels of Bus Master IDE Ports supporting up to 8 Ultra DMA 33/66/100/133 (RAID 0/1/1+0) devices
    That's 12 disks.

    There's also:

    • 4 USB 1.1 Connectors
    • On board VIA VT6202 USB 2.0 header for four extra USB channels
    • Three 1394a fully compliant cable ports at 100/200/400 megabits per second
  15. Re:Criteria for companies to participate and.... on Gov't Wants Techies to Play Musical Chairs · · Score: 1
    Well on the government side:

    (1) works in the field of information technology management;
    (2) is considered an exceptional performer by the individual's current employer; and
    (3) is expected to assume increased information technology management responsibilities in the future.

    An employee of an agency shall be eligible to participate in this program only if the employee is employed at the GS-11 level or above (or equivalent) and is serving under a career or career-conditional appointment or an appointment of equivalent tenure in the excepted service.

    This describes a group of people who, in my experience, have actually worked for their positions. You don't get a GS-11 without a Ph.D. or equivilant experience.

    Of course, getting a manager to go with "new technology" is often a fight. Maybe after seeing a bit of the "real world" they'll be more open to accepting and using new technologies.

  16. Re:hmm on Gov't Wants Techies to Play Musical Chairs · · Score: 1

    Yeah, but who's paying for that? With this "techie exchange program" the governement gets the private sector to bear the costs.

  17. Re:Greener on the other side of the fence? on Gov't Wants Techies to Play Musical Chairs · · Score: 2, Interesting

    As the poster of the article, I often wonder if the grass is greener on the other side. My friends who left for "real jobs" seem to think I'm nuts for staying in a small town, sticking to my gov't job. Of course, some of them have pretty fantastic government jobs - but the National Labs are an exception (now there's the green grass I really keep gazing towards). I love my job -- flexitime, flexiplace, flexishoes, few meetings, and lots of creative control. I live in a small town -- 10 mintute commute, little pollution, and great lifestyle.

    On the other hand, I'm working in an environment where a lot of people are still working on PIII 500's, and using Fortran and vi. I make less than half what my friends do in the Big City (with cost of living taken into account). I don't think the benefits make up for the disparity in pay, but it helps. We can't afford all the corporate perks -- up-to-date workstations, yearly conferences, expensive seminars. Oh, and the 40 hour a week thing? That's a myth. When the server goes down or the deadline's coming up, late nights are seen by all. Many of us take work or studying home in an effort to keep up.

    Staffing is an issue, and the government knows it. OPM gave IT folks a raise a while ago -- it doesn't come close private salaries, but at least they tried, and it did make a difference on whether or not I stuck with my job. Many of us are doing the jobs of several people -- spread too thin and suffering the "jack of all trades" syndrome. Keep up with the "times"? It's just not that easy.

    Of course, my brother is a cushy corporate type, and is amazed we don't have a dress code, and can't fathom that if I want a day or week off I simply announce I won't be in the office and off I go.

  18. Is more on the way? on How To Profit From Telemarketing · · Score: 1

    ZDNet has a article about Interactive Intelligence and Sprint making a deal allowing Interactive to use Sprints' lines for it's new Interactive Voice Response software, which replaces telephone operators with a computer to make (or take) phone calls to people -- one application of the software is telemarketing.

  19. Re:Interference at LAN parties on Tool Box PC · · Score: 1

    One thing to remember at a lan party is everyone's computers are generally shielded, so one unshielded box I don't think would cause a problem...

    My buddy got tired of pulling his case apart and just started running around with the thing open the the world -- including at gaming parties. Never seemed to be a problem with other computers or anything else (he always sits in my computer room with me).

    I've been dying to stick a handle on my SO's SBC (~12"x12"x4" case), but I like this toolbox idea way better! Wonder if I could dig out my old Barbie wardrobe carrying case and cram a system into it... even better, do like the LLNL folks and build me a BarbieWulf Cluster :-D

  20. Re:they're not talking about the main search on Overture Sues Google Over Pay-for-Placement Patent · · Score: 1

    A system and method for enabling information providers using a computer network such as the Internet to influence a position for a search listing WITHIN a search result list generated by an Internet search engine.

    I agree with others who have pointed out that since Google doesn't use the "bid-for-placement" method to generate search ranking, but rather uses "bid-for-advertising-space" to generate a list of ads on the page separate from the search results, Google is not infringing on Overture's patent.

  21. Re:I understand... on Intel Puts The Squeeze On ... A Yoga Foundation? · · Score: 1

    It will be the title of my next web page if drudnick would like to lisence to me -- I got a dollar in my pocket.

  22. Re:My favorite algorithm on Deep Algorithms? · · Score: 1

    Actually, I've recently used this very algorithm to illustrate while loops to my niece, as follows:

    do {
    lather () ;
    rinse () ;
    } while (hairIsDirty == true)

    On the shampoo bottle, the condition is implied but nonetheless there, meeting the requirement for termination after a finite number of steps...

    btw, my niece, once a computer-phobic literary snob, has discovered the joys of qbasic: colorful blinking text, ascii art decorations, and being the only girl in class. At one time she used "geek" as an insult, but now proclaims herself a Geek Goddess. There's nothing quite like having all the boys gather 'round with jaws dropped ogling yer bodacious GUI :-D

  23. Re:Utah == Mars as desert == Moon? on Utah, the New Red Planet · · Score: 1

    Better than that, some training/testing grounds have had craters blown into them to create a surface as nearly identical as possible to potential lunar landing sites:

    The volcanic fields around Flagstaff have proven particularly useful in testing equipment and training astronauts. Cameras planned for use in the Surveyor project were tested on the Bonito Flow in Sunset Crater National Park because the lava flow appeared to be similar to flows on the lunar surface. A field of artificial impact craters were created in the Cinder Lakes volcanic field near Flagstaff to create a surface similar to the proposed first manned American landing site on the Moon.
    -- Astronaut training in Cinder Lakes, Flagstaff

    Testing sites have been chosen for climate, surface cover, surface type, etc., depending on exactly what they're testing or training for.

  24. Re:so what (The Missing Links) on Build Your Own UFO · · Score: 1

    My recommendation is: those who are uncertain of their HTML coding abiliities should stick to plain-text and simply give the URLs:

    That's all I have to contribute. Despite all the debate, "build your own UFO" looks like a fun thing to distract myself with some weekend.

  25. Hey thanks! I needed that! on Google's Weakness, AltaVista's Strength · · Score: 1

    I've been in a constant state of seething pissed-offness since Northern Light shut down their search engine... I had only recently recovered from Infoseek's conversion to useless wierdness a couple years back.

    This very night, we've been searching for a company that does speedometer refurbishing, so with the search "refurbished speedometer" in hand, off we went...

    * tried HotBot (his fave engine) -- the results sucked... a link to Firewire iBook was _not_ what we had in mind.

    * tried Google (the one I have resorted to lately based on the advice of small children) -- the results sucked less (at least some of the results were about cars), but nonetheless sucked.

    * logged into /. to relieve some stress... Voila!!! Got diverted to AltaVista and got 5 out of 10 relevant results! Actual companies that will actually repair our actual speedometer!!!

    As for the time it takes to get a site into a search engine, all of them are advertising 1 to 3 month time periods for "free indexing"... I submitted a new site a couple weeks ago to both Google and AltaVista -- neither one of them has searched the site yet.