Slashdot Mirror


User: Ashurnasipal

Ashurnasipal's activity in the archive.

Stories
0
Comments
17
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 17

  1. No "superuser" in VMS on Flaw Found iIn Ethernet Device Drivers · · Score: 1
    But that's true of ,say, unix 'root' vs Vax VMS 'superuser'.
    There is no such thing as VMS superuser. VMS never used lame 40-year old security paradigms such as 'superuser'. Windows security is superficially like Unix because Windows NT is a broken, dumbed-down version of VMS. MS broke the VMS kernel model when they spliced in graphics routines and mouse drivers at inappropriate levels - it's hard to explain in unix terms, the kernels are fundamentally different.

    Out of the box, the VMS account SYSTEM has CMKRNL and SETPRIV privileges, which allow a knowledgeable user logged in as SYSTEM to do all the stuff root can do under unix. However, you can delete that account entirely, or remove these privileges, and VMS still works fine. I have used a VMS box where there were no user accounts with SETPRIV (admittedly an incredibly paranoid site) and the system worked fine.

    Ted T'so's work with Linux capabilities is bringing VMS-style security to linux. This is one of the main reasons that linux is NOT unix, it's BETTER than unix. If you don't understand this, research T'so's work, and look into the way Red Hat has stripped all privs from their ntp daemon - except the ability to set the hardware clock, something normally restricted to root.
  2. There are indeed HIPAA issues. on Flaw Found iIn Ethernet Device Drivers · · Score: 1

    Once there are patches available, if you do not apply them, you will be in violation of HIPAA. However, you aren't in trouble if your OS does not yet have a fix available.

    HIPAA is pretty forgiving of this sort of predictable technical mishap - one cannot buy anything if products are required to be free of undiscovered flaws! But you are required to follow industry-recognized security practices, and applying all patches for known bugs is definitely covered by that requirement.

    Where HIPAA comes down on you like a giant ball-peen hammer is when you knowingly profit from disclosing patient medical records. You'll need a striped suit and some soap-on-a-rope if you get caught doing that. Anything else is not really such a big deal under HIPAA, but of course you set yourself up for civil suit problems if you violate your own security and/or privacy policies (regardless of HIPAA rules).

  3. Re:Nitpicks and clarifications. on Where are the 70% Efficient Solar Cells? · · Score: 1
    The battery on hybrids need to be replaced every 2-4 yrs, I believe, at the cost on the order of thousands of dollars. It's also a more complex machine so there will probably also be additional maintenance.
    Incorrect. The Prius comes with an eight-year battery and hybrid warranty, as well as complimentary roadside assistance and three-year basic maintenance programs. These are not optional.

    Since the Prius has only been on the market since 1997 (and only in true volume production for a year or so) nobody has ever had to buy a battery pack for it. Toyota has replaced several under warranty and some have required replacement due to accidents, but they are projected (probably optimistically) to last 200,000 miles in real use. Replacement packs currently run around 4000 US dollars, which is admittedly costly, but you should be able to get some trade-in value for the 110 pounds of NiMH you are replacing, and the price is expected to come down with increased production.

    I have found that the quality control is so high on Toyotas that there is no additional maintenance burden when compared to a Detroit car. Of course I've only had mine about a year, but I monitor several Prius mailing lists and most people are reporting very low maintenance costs. Only time will tell in the long run.

    But, as I mentioned before, it's not about cost for me anyway.

    I have seen hundreds of testimonials of Prius owners who absolutely LOVE their cars. I have seen *one* by a person who was dissatisfied - and it appears he got the statistically inevitable lemon, since his gas tank had to be replaced after less than a year. Toyota is paying for everything, but he's still pissed off - and honestly I would be too.
  4. Re:Nitpicks and clarifications. on Where are the 70% Efficient Solar Cells? · · Score: 1

    Your information is out-of-date; Toyota says they are no longer subsidizing hybrid production - in fact they are making a reasonable profit (not reasonable by GM standards, of course, but reasonable for a Japanese auto maker).

    On the other claw, you're right again - it's impossible to say at this point how long the Prius will last. I know pure electrics last far longer than internal combustion cars (electrics have very few moving parts) but there are severe drawbacks to pure electrics that you've already correctly pointed out. I can't use a pure electric due to range requirements, I need a hybrid.

    I'm a special case, in some ways, because I've got professional auto mechanic experience, I'm a blackleg electrician, and I also have professional experience hacking undocumented LAN protocols. Thus, I can do my own maintenance on the Prius, which most owners cannot. However, most auto owners today can't do their own maintenance anyway, so for the majority of potential customers this is not an issue. Totoya has gone to considerable expense to make sure that you can get Prius parts and maintenance anywhere in the US - they actually forced all Toyota dealerships to have accredited Prius mechanics on staff.

    EMOT, I think the German super-diesels are an excellent choice, and they certainly should meet your standards of reliability. Most of them are also easily converted to run biodiesel, I hear, so you could take a further step if you wanted to.

  5. Nitpicks and clarifications. on Where are the 70% Efficient Solar Cells? · · Score: 1

    You're mostly right, but your details are incorrect.

    - Environmentalists don't hate hydro. A few environmentalists hate all forms of hydro, and nearly all environmentalists dislike badly implemented hydro. A minor point worth knowing.

    -Controlling pollution from burning fossil fuels at point sources (such as power plants) is easier than a distributed sources (such as private automobiles). In fact, it's profitable - those stack scrubbers pull valuable compounds like uranium and gold from the fuel (coal contains some amount of pretty much all the elements) which can be used or sold. Check it out, it's true.

    -Also, you're forgetting natural gas. Most power plants being built today run on methane - which has gone up in cost by more than 400% in the last ten years or so. More power requirements = more methane demand = higher home heating bills. A non-obvious consequence of pure electric vehicles.

    -Hybrid vehicles are not appreciably more expensive than comparable gas-only cars. My Prius will pay for the inital investment in less than three years, using today's real-world consumption and fuel cost figures (yes I did the math) and I usually keep cars for ten years or more. Your comments are pretty accurate for pure electrics, though - especially given GM's absurdly anti-social behaviour in regards to the EV1 and associated charging technology patents.

    Incidentally, I don't care about the damn costs. My best friend, my grandfather and two uncles died of lung cancer and I live in an area that has the highest cancer rate in the US. I bought the Prius for the 90% pollution reduction at the tailpipe. Sit with a person you love as s/he screams and writhes in an agony that morphine can't control as s/he slowly dies, and you won't care about cost either!

    Nonetheless, your conclusion is apropos.

  6. DISEASE VECTOR!!! on Tornado in a Can · · Score: 5, Interesting

    Ya know, a friend of mine died of Jakob-Kreutzfeld disease not too long ago.

    It's supposed that he got it from eating beef contaminated by BSE, Bovine Spongiform Encephalopathy, which is a prion disease spread through the industry practice of feeding butcher's waste to cattle.

    Cannibalism is bad, people. Ref. Oliver Sach's description of diseases among the descendants of cannibals. It's an unhealthy feedback loop, that optimizes disease organisms.

    So, the poultry farmers have already spread salmonella through the entire US chicken industry with their unsound practices, now they want to do it better, cheaper, faster.

    So much for chicken soup as health food.

  7. Re: Delaware-bashing on Sneaking DRM Amendments Through the Back Door · · Score: 1

    Are you smoking crack at work again? I didn't vote for Biden, in fact most of the people in Delaware didn't vote for Biden, as five minutes of research might have told you.

    Maybe you should visit the place before you spout your crack dreams on slashdot. Delaware is small, and the government even smaller - small enough that citizens can literally call their senators, representatives, even the governor and expect to talk to them personally. I have done it myself on occasion, although I usually write paper letters instead since they count for more at the end of the day.

    Biden is like Helms or Roth - people don't want to vote him out because he has accumulated power that will not be passed on to his sucessor.

  8. Jeez, that had to hurt! on Next Generation Regexp · · Score: 1
    Six months ago I was handed a printed copy of our family
    Holy Toledo. How big was the xerox machine? Was the lid open, or did you all have to be forced through the document feeder?

  9. The surefire way to crush DMCA.... on ACLU Files New DMCA Challenge · · Score: 1

    ... is to tie it to children surfing porn or male paedophilia.

    These are apparently the thoughts that dominate the minds of America's lawmakers.

    You know it's true.

  10. Re:Actually, it's amazingly simple. on Drive a Greasecar - DIY Biodiesel · · Score: 1
    This is not true. I cannot give you a full lecture (anyway not without boring you and everybody else) but if this would be true, you could easily modify a diesel engine to burn gasoline...

    Go read the post you are replying to again.

    Yes, diesel engines (which are based on the engine Rudolf Diesel demonstrated running 100% pure peanut oil at the 1900 World's Fair) are extremely different from gasoline engines.

    Which has nothing to do with the topic of vegetable oil.

    Thank you for sparing me the lecture, I have extensive practical experience with the workings of both diesel and gasoline engines already. Diesels do not burn petrol or any other highly volatile fuel (although they can burn jet fuel, kerosene, or home heating oil, with varying degrees of sucess).

    To recap: Modern diesels burn "biodiesel" with no modifications. They can also burn vegetable oil with a few minor modifications, mostly because that's what Dr. Diesel originally designed his machine for.

    Thirty seconds of research on Google, or a weekend of experimentation, will easily verify these statements.
  11. Actually, it's amazingly simple. on Drive a Greasecar - DIY Biodiesel · · Score: 5, Informative

    Caveat: Although I have friends who run diesels on various fuels, I myself do not. So I'm a friend of experts, not an expert myself.

    Rudolf Diesel designed his engine to run on vegetable oil. That's how it was originally supposed to work, and it was originally demonstrated at the World's Fair running peanut oil.

    Modern diesel engines are slightly modified to optimally burn the refinery waste products we call "diesel fuel". But only slightly...

    If you want to efficiently burn vegetable oil in an unmodified modern diesel, you should use biodiesel (easily home-made, see Tickell's site for details).

    If you want to run straight veggie oil, you need to preheat the oil (no problem when the engine is running, plenty of heat easily available, but you will need a preheater or a small tank of "starter fuel" at startup time). You also need to make sure that your filters are very efficient, and that you have bacteria/fungi controls, and that you have a water trap. These are the same considerations with regular "diesel fuel", but since the latter is nasty hostile petrowaste and the former is edible bio-friendly fryer grease you will have to be much more careful and vigilant.

    Most people running straight vegetable oil are uber-geeks. They like to tinker and they aren't afraid of breaking things, because they know they will be able to get something to work if they need to. If you don't feel like that is a description of you, try biodiesel instead, and you won't have to make any modifications to your vehicle at all. You can even mix biodiesel and petrodiesel with no problem.

  12. Back to the Future on Hitachi's Water-cooled Laptop · · Score: 5, Funny

    I still remember the DEC guys making fun of the water-pumping IBM mainframers - "I see your computer is down, have you called the plumber yet?"

  13. Where are you getting those 10-bit bytes? on Traffic Shaping on DSL? · · Score: 1
    An 8KB TCP window is 80k bits
    B = Byte
    b = bit

    1B = 8b
    8B = 64b

    8KB = 64Kb

    8KB != 80Kb
  14. Cool, send me your old drives. on MojoNation ... Corporate Backup Tool? · · Score: 1


    Seriously, I pick up everybody's old hard drives and use 'em. A windows 98 machine needs only a 528 MB disk to be a schweet network client, MacOS needs a little less.

    I store all the big stuff on the network and use linux soft RAID to build big volumes out of small drives. Right now the main server has seven 9GB SCSI-3 drives in a RAID-5 configuration with a single hot spare. At one time I had 15 hard drives, though, because I had eight IDE drives and seven SCSI-2 (all in the 200-600 MB range). There's also a secondary server, used to store backups, that has 13 2.4 GB SCSI-2 drives on old ISA-bus controllers. It runs soft RAID5 also, and linux's (lame) NFS implementation but most of the time it is turned off to save power.

    The down side is it tends to run hot as hell, especially with the IBM SCSI-3s - but since I started running three six-inch fans repinned from 12 to 5 volts it's reasonably cool & quiet. When I replace my furnace next month I'm going to take the gigantic blower our of the bottom and run it extremely slowly in the bottom of the rack, that will put some CFMs in the system!

    I get a fair number of drives from the "technology recycling" bin the state runs out by the wastewater reclaimation plant. CD-ROM drives in the 4-12X range are easily found there too.

  15. Prove it. on All Sourceforge.net Being Blocked by SmartFilter · · Score: 1

    Post some examples or be branded a lying AC.

  16. Slashdot ate my "less than" sign on SSH-Based Solutions - Looking for Industry Proof? · · Score: 1

    I meant the prior post to say that versions of the SSH protocol prior to 1.5 are vulnerable to certain rare and obscure forms of attack. Should've used "preview", eh Taco?

  17. Answers for all your questions. on SSH-Based Solutions - Looking for Industry Proof? · · Score: 2, Insightful

    Both OpenSSH and SSH are industry proven and supported software. SSH is supported by the original author of the protocol, Tatu Ylonen, among others. OpenSSH is supported by acknowleged Open Source security experts including Markus Friedl, Dug Song, and Theo de Raadt.

    The version of SSH that Sun is shipping with Solaris is in fact OpenSSH. Sun is not trying to hide this, they are proud of shipping it because it is an excellent program.

    Most major insurance companies run SSH (if they are Microsoft shops) or OpenSSH (if they are not). Most hospitals run OpenSSH.

    I use both products. Support is superb for both; but SSH.com has friendly, personable phone support while the OpenSSH support comes mostly from Usenet and Email (and can be fiery if you ask exceptionally stupid questions). OpenSSH fixes bugs faster than SSH.Com, but both products have had about the same number of problems, and all have been quickly and effectively resolved.

    Popular clients for windows include putty and Teraterm SSH. Make sure you get a recent version, however, older versions of those programs use versions of SSH ( v 1.5) that have known bugs.

    If you are dealing with a company that thinks commercial software is "better" than "freeware" you should be careful how you approach this project. If there is a single person who has created this mindset, that person is likely to be both powerful and not very analytical - a dangerous combination.