..they'd found Foley's explanation on his site. He doens't intend to sue the creators. He's only interested in taking down pirates who compete with his legit business. It's a crooked tactic but apparently he thinks its justified.
Security settings if it's IE (activex, trusted sites & zones etc); cache size, profile location and default download location to suit your network (the desktop may be write protected by GPO and a huge local cache destroys roaming profiles); proxy settings if it's not transparent; plugins; language extensions; reasonable defaults for things like home page and links; disable questions and reminders about SSL and such; lock down settings so users can't change them; disable product updates. These come to mind.
Remember the average user is clueless and in a corporate environment you use the network to save all information.
If you let all the employees buy and install their own software you're in deep shit.
You install the OS and all the software from the network and you have no trouble with CD's.
Install the OS from an image or using RIS.
Don't buy retail software! Get a license plan and enterprise install CD's that let you create a network install point for MS Office. Installation takes place via group policies so there's zero user involvement in software installation.
When I have a new machine to add to the network, I check out its MAC address and create an account for it in AD and the appropriate OU. I boot it up from the network and type in a username and password. After that Windows is installed automatically, it's added to the domain and all the relevant software gets installed. This is at a school of about 80 PCs. It's even better for large corporations who use SMS.
If you ever go on a t0rren7 site that has UK TV shows on it, you'll find that many, if not most, downloaders are people living abroad craving for quality TV. Many are living in yankistan or canuckistan. I won't hazard a guess if they're all Brit refugees or natives.
Read this first. The point is you assume that the servers get compromised sooner or later, and you want to limit the damage by compartmentalizing the network. The router/firewall box (A P1/200 running something Unixish) has separate network interfaces for the DMZ and LAN. Outbound connections from the DMZ are limited to things like DNS queries and software updates to specific hosts, certainly no connections to the LAN or the router allowed. Even if an attacker compromises a server, they can't use it to attack my LAN or other hosts on the Internet.
I had the same idea to access files at home from school and work. I had some problems, I think it was related to the fact that in Windows you can't change the port you connect to, so the client loses the local Windows network while the tunnel is up.
Alternatives include a VPN, which gives you a secure network device, not limited to SMB. This requires admin privileges on the client machine, and installing extra software.
I decided the way to go as WebDAV on Apache/SSL. No extra software required on the client and it's more secure than plain SMB. The client is integrated into Windows explorer.
Now if there were an SCP client for windows that would map the connection to a network drive...
- Home server(s) on a DMZ
- Ntop on the router/fw to keep track of network usage
- Filter outbound connections, too
- Mixture of *BSD and Linux on network and server equipment.
- Peerguardian when using P2P software.
- Up to date virus scan.
- Don't use IE or Outlook Express.
I think "many to one" describes mapping many internal IPs to one external IP (the public interface on the router).
I'd say you have NAT with port forwarding. Apparently for purists it's PAT. For the moderates it's probably both since they'd see PAT as a special case of NAT (only one external address).:p
[pedant_mode] Hmmh. I see the point that "network address translation" kind of implies a one to one relation between external and internal addresses.
However, to me "port address translation" sounds worse because the *network address* is still the key thing that gets changed in a many to one situation. The fact that the router assigns a new client port for outbound connections is just a side effect. The server and client still use the same ports, regardless the router does in between.
"PAT" sounds more logical when describing a port forwarding situation where the router is listening to port x but forwards it to a different port y on an internal server. [/pedant_mode]
This month's issue of a Finnish computer magazine tested spyware programs and GIANT won it hands down. Their verdict: "clearly the most powerful, feature-rich and easy to use". They say that since the MS acquisition you can no longer obtain a free trial version. Typical.
Go these in Helsinki. They're even free to use, you only need a 2 euro deposit, just like with shopping carts. They're provided by the City's local transport dep't.
The crime investigation unit together with local units is investigating the extensive distribution of films, music and other material on the Internet as a suspected intellectual property crime. Numerous home searches have been conducted around Finland as part of the investigation.
The case involves the distribution of copyrighted material using the BitTorrent-p2p application, which is used to share files between users. Registration is required to access the network [Sic, they are mixing up finreactor with bt]. When a user downloads material on offer, he also becomes a distributor for other users who are downloading the file. The maximum penalty for an intellectual property crime is two years' imprisonment, and these kinds of crimes often involve payment for damages.
Distributed materials included among other things films, music, software and games for a total of about 6000 titles. One title may have contained for example a single CD, the entire back catalog of an artist or several films. The network has been used to distribute material worth many millions of euros.
Four administrators and 30 moderators are from around Finland are suspected of maintaining the network. The network has had an estimated 10 000 users, presumably all Finnish.
The early investigative part of the case will take many months.
Apologies for the awkward translation. Don't know the equivalent legal terms in English that well so some meanings are probably lost. Don't turn me in for pilfering their text.
The police must think they have grounds for proving this is a crime, a misdemeanour wouldn't be sufficient to warrant seizing equipment.
It isn't actually illegal (yet) for a natural person to copy material for personal use in Finland, but making it available is. This affects the users.
Secondly, the administrators were aware of and facilitating illegal activity. If you know about illegal activity and don't report it, you're alredy over the line.
The money aspect is probably the biggest issue here.
I've read suggestions that some users' machines were trojaned by a security company employed by the entertainment industry to help gather evidence. If this is true it could add an interesting spin. If this was illegal it won't nullify the evidence (as in the US) but could be very bad publicity for the entertainment industry at the very least.
The EU has X amount of power right now, and remains X. It's a question of who controls the EU, the parliament, the commission or the council of ministers.
The democratically elected parliament is a better option than an anonymous elite of bureaucrats, IMHO.
Relax. I spent 5 years in the South East. Experienced university cafeterias, restaurants, pubs, chippies, takeaways, you name it.
It wasn't bad, just didn't like things like fried kidney on my breakfast plate.
Miss the Indian food. A lot. There's a place called The Guru in Old Woking you should visit. Also, Sunday roast with a pint in a countryside pub on a crisp winter day. Don't forget the horse raddish and English mustard. Oh, and tinned beans aren't the same anywhere else in the world.
Serves them well. My native Finland is regularly omitted from European maps, for example weather forecasts on the international news channels. They just crop the picture south of our border.
Oh, and history books often had the iron curtain between Finland and Sweden. I got a fit every time I saw that. Had to explain to my classmates (non-Finns) Finland isn't a Soviet satellite state. They often preferred to believe the maps.:|
'Real' colour management or 'Professional' publishing can mean a lot of things. It depends if you publish a colour newspaper (I help maintain PCs at the editorial office of one such) or the National Geographic.
Where I work, once the monitor is calibrated and the scanned image looks good enough for the person operating Photoshop & InDesign that's all there is to it. There are no specialized bits of hardware involved, just using a monitor calibration helper site like this one.
Incidentally, they have a nice quote regarding Epson colour profiles you mention:
In my experience, Epson really cares about color-matching. Their printer ink actually has a larger gamut than standardized CMYK, and their drivers come with very well-calibrated color profiles (and are ColorSync-compatible on the Mac. Similarly, their scanners are very well-calibrated, and at least the Perfection 2450 Photo's colorspace rivals even human vision in many areas.
tkgamma - a monitor calibration util for XFree86.
Of course you need to consider the monitor, scanner and printer when dealing with colour profiles. The site I linked to earlier does have nstructions for scanning negatives with Gimp, so it's not specific to printing.
A 10 second bout of googling and I found The Gimp color manager which lets you use ICC color profiles. You'll find the relevant profiles on your Epson driver disk.
Slashdot Mirror
..they'd found Foley's explanation on his site. He doens't intend to sue the creators. He's only interested in taking down pirates who compete with his legit business. It's a crooked tactic but apparently he thinks its justified.
Security settings if it's IE (activex, trusted sites & zones etc); cache size, profile location and default download location to suit your network (the desktop may be write protected by GPO and a huge local cache destroys roaming profiles); proxy settings if it's not transparent; plugins; language extensions; reasonable defaults for things like home page and links; disable questions and reminders about SSL and such; lock down settings so users can't change them; disable product updates. These come to mind. Remember the average user is clueless and in a corporate environment you use the network to save all information.
Standardization, standardization!
If you let all the employees buy and install their own software you're in deep shit.
You install the OS and all the software from the network and you have no trouble with CD's.
Install the OS from an image or using RIS.
Don't buy retail software! Get a license plan and enterprise install CD's that let you create a network install point for MS Office. Installation takes place via group policies so there's zero user involvement in software installation.
When I have a new machine to add to the network, I check out its MAC address and create an account for it in AD and the appropriate OU. I boot it up from the network and type in a username and password. After that Windows is installed automatically, it's added to the domain and all the relevant software gets installed. This is at a school of about 80 PCs. It's even better for large corporations who use SMS.
If you ever go on a t0rren7 site that has UK TV shows on it, you'll find that many, if not most, downloaders are people living abroad craving for quality TV. Many are living in yankistan or canuckistan. I won't hazard a guess if they're all Brit refugees or natives.
I'm not sorry if I've offended someone.
Read this first. The point is you assume that the servers get compromised sooner or later, and you want to limit the damage by compartmentalizing the network. The router/firewall box (A P1/200 running something Unixish) has separate network interfaces for the DMZ and LAN. Outbound connections from the DMZ are limited to things like DNS queries and software updates to specific hosts, certainly no connections to the LAN or the router allowed. Even if an attacker compromises a server, they can't use it to attack my LAN or other hosts on the Internet.
I had the same idea to access files at home from school and work. I had some problems, I think it was related to the fact that in Windows you can't change the port you connect to, so the client loses the local Windows network while the tunnel is up. Alternatives include a VPN, which gives you a secure network device, not limited to SMB. This requires admin privileges on the client machine, and installing extra software. I decided the way to go as WebDAV on Apache/SSL. No extra software required on the client and it's more secure than plain SMB. The client is integrated into Windows explorer. Now if there were an SCP client for windows that would map the connection to a network drive...
- Home server(s) on a DMZ - Ntop on the router/fw to keep track of network usage - Filter outbound connections, too - Mixture of *BSD and Linux on network and server equipment. - Peerguardian when using P2P software. - Up to date virus scan. - Don't use IE or Outlook Express.
I think "many to one" describes mapping many internal IPs to one external IP (the public interface on the router).
:p
I'd say you have NAT with port forwarding. Apparently for purists it's PAT. For the moderates it's probably both since they'd see PAT as a special case of NAT (only one external address).
[pedant_mode]
Hmmh. I see the point that "network address translation" kind of implies a one to one relation between external and internal addresses.
However, to me "port address translation" sounds worse because the *network address* is still the key thing that gets changed in a many to one situation. The fact that the router assigns a new client port for outbound connections is just a side effect. The server and client still use the same ports, regardless the router does in between.
"PAT" sounds more logical when describing a port forwarding situation where the router is listening to port x but forwards it to a different port y on an internal server.
[/pedant_mode]
Don't forget to visit the Golden Shower restaurant in nearby Moshi. It's a ... refreshing experience.
:)
Greets to all waafrika.
This month's issue of a Finnish computer magazine tested spyware programs and GIANT won it hands down. Their verdict: "clearly the most powerful, feature-rich and easy to use". They say that since the MS acquisition you can no longer obtain a free trial version. Typical.
I have a TC1000 and it crawls with WinXP. I'm going to try this and hopefully get a bit more oomph out of it. Debian's my favourite distro anyway.
Go these in Helsinki. They're even free to use, you only need a 2 euro deposit, just like with shopping carts. They're provided by the City's local transport dep't.
This was a message from FHNESTS (Foreigners Helping Native English Speakers To Spell).
Nanana SNANA & GNANA - beat you to it!
The crime investigation unit together with local units is investigating the extensive distribution of films, music and other material on the Internet as a suspected intellectual property crime. Numerous home searches have been conducted around Finland as part of the investigation.
The case involves the distribution of copyrighted material using the BitTorrent-p2p application, which is used to share files between users. Registration is required to access the network [Sic, they are mixing up finreactor with bt]. When a user downloads material on offer, he also becomes a distributor for other users who are downloading the file. The maximum penalty for an intellectual property crime is two years' imprisonment, and these kinds of crimes often involve payment for damages.
Distributed materials included among other things films, music, software and games for a total of about 6000 titles. One title may have contained for example a single CD, the entire back catalog of an artist or several films. The network has been used to distribute material worth many millions of euros.
Four administrators and 30 moderators are from around Finland are suspected of maintaining the network. The network has had an estimated 10 000 users, presumably all Finnish.
The early investigative part of the case will take many months.
Apologies for the awkward translation. Don't know the equivalent legal terms in English that well so some meanings are probably lost. Don't turn me in for pilfering their text.
"rikos" == crime
"rikkomus" == misdemeanour
The police must think they have grounds for proving this is a crime, a misdemeanour wouldn't be sufficient to warrant seizing equipment.
It isn't actually illegal (yet) for a natural person to copy material for personal use in Finland, but making it available is. This affects the users.
Secondly, the administrators were aware of and facilitating illegal activity. If you know about illegal activity and don't report it, you're alredy over the line.
The money aspect is probably the biggest issue here.
I've read suggestions that some users' machines were trojaned by a security company employed by the entertainment industry to help gather evidence. If this is true it could add an interesting spin. If this was illegal it won't nullify the evidence (as in the US) but could be very bad publicity for the entertainment industry at the very least.
Wrong.
The EU has X amount of power right now, and remains X. It's a question of who controls the EU, the parliament, the commission or the council of ministers.
The democratically elected parliament is a better option than an anonymous elite of bureaucrats, IMHO.
Relax. I spent 5 years in the South East. Experienced university cafeterias, restaurants, pubs, chippies, takeaways, you name it.
It wasn't bad, just didn't like things like fried kidney on my breakfast plate.
Miss the Indian food. A lot. There's a place called The Guru in Old Woking you should visit. Also, Sunday roast with a pint in a countryside pub on a crisp winter day. Don't forget the horse raddish and English mustard. Oh, and tinned beans aren't the same anywhere else in the world.
Must ... resist ... comment ... about English food.
I'm proud of myself, but the effort at self-restraint gave me a headache.
Serves them well. My native Finland is regularly omitted from European maps, for example weather forecasts on the international news channels. They just crop the picture south of our border.
:|
Oh, and history books often had the iron curtain between Finland and Sweden. I got a fit every time I saw that. Had to explain to my classmates (non-Finns) Finland isn't a Soviet satellite state. They often preferred to believe the maps.
'Real' colour management or 'Professional' publishing can mean a lot of things. It depends if you publish a colour newspaper (I help maintain PCs at the editorial office of one such) or the National Geographic.
Where I work, once the monitor is calibrated and the scanned image looks good enough for the person operating Photoshop & InDesign that's all there is to it. There are no specialized bits of hardware involved, just using a monitor calibration helper site like this one.
Incidentally, they have a nice quote regarding Epson colour profiles you mention:
In my experience, Epson really cares about color-matching. Their printer ink actually has a larger gamut than standardized CMYK, and their drivers come with very well-calibrated color profiles (and are ColorSync-compatible on the Mac. Similarly, their scanners are very well-calibrated, and at least the Perfection 2450 Photo's colorspace rivals even human vision in many areas.
Repeating myself here, but check this utility out or just do some quick googling
tkgamma - a monitor calibration util for XFree86. Of course you need to consider the monitor, scanner and printer when dealing with colour profiles. The site I linked to earlier does have nstructions for scanning negatives with Gimp, so it's not specific to printing.
May I suggest a new acronym to accompany RTFM? UTFSE - for Use The Fine Search Engine.
A 10 second bout of googling and I found The Gimp color manager which lets you use ICC color profiles. You'll find the relevant profiles on your Epson driver disk.