His comments are not that bad when compared to past comments. Keeping firewalled and running your updates is sound advice even to Linux admins. He says perfect code is not required. I have heard of his "slave" campus his idea of perfect software would be perfect software. No one has released any of that yet. He is stating that by proactively configuring your firewall and watching his update site you will be significantly more secure. He even adds that "But did we have the tools that made that easy and automatic and that you could really audit that you had done it? No. Microsoft in particular and the industry in general didn't have it." He himself adds that MS was a PARTICULAR part of the problem. I think the work done between 2000 and 2003 is very promising in terms of security.
The real truth is that in five or ten years the big recording companies will most likely not resemble at all the companies that we know today. Their business model is doomed because there are too many people with too many computers that don't want to pay a dollar for a song or seventeen for an album.
And Linux will be on every desktop. And Asscroft will not erode any of our rights and you will kick whatever addiction you seem to have. Look at the real numbers of how the "masses" of downloaders affect sales. It is positive if anything though I think it is nothing.
So which situation would you prefer? Relatively equal distribution for all, including the artist (a la music), or grossly disproportionate distribution of the profits (a la movies)?
Very simple to explain (NOT!!!)
The artist (and band)creates a record. The Management team finds someone who will record and market it. The recording company records it. In my opinion (and the arrangement I have with bands I manage [only 2]) is that each of those 3 entities is one third of the albums success.
So, if our next album does 3,000,000$ (it probably wont make 1/6 of that) the band, mgt. and studio take a mill ea. Now if there are 4 musicians in the band they would each take 250,000 (if the front man chose to share it that way). If I share mgt duties with a promoter or two (I do) we would split a mill. The recording co then receives a mill for their work. Using this scheme I can not get on with major labels but smaller labels let you negotiate.
If anything, these "artists" deserve a McWage because they're just doing exactly what they're told, and not adding anything to the sum total of human knowledge and culture.
They are catering to the "majority" taste of CD purchasers. The fact that the marketing company can shape purchasing habits is irrelavant. I am sure if McFlipper could simultaneously serve 350,000 screaming teens a McBurger McFlipper might be well off as well. However he can't and McBritney can sing to 100s of 1000s of McConsumers on the radio at once. Additionally, most (ok well a decent chunk of them) are actually good musicians and if Simon & Garfunkle style music was pop they could pull it off (maybe not write it, well B.Naked Ladies might) but they could play it. Who is we that sucked off Simon? I sure don't I choose music that appeals to me and you should too (well, maybe not to me).
Musicians always look so poor when I see them on television. Finally, they can afford the lifestyle they deserve.
First, musicians won't get the money they deserve. The minions and scumbags around them will get the lions share. Second, do you like music and enjoy listening to recordings? If so you should pay for that convenience. Artists SHOULD get paid commensurate with the amount of people they make happy. Top 40 stars are listened to by millions of people and thus should make millions of dollars. Alternative underground bands may have 100s or 1000s of followers and should make money that supports that level. Just because Cowboy Neal does not believe that creating something that will make 1000s of people sit and relax and listen for a couple of minutes is a worthwhile endeavour doesn't mean that it isn't. I consider slashdot to be my source of "press" on these issues, it would be nice to see it treated as such. Artists deserve their licensing to be respected just like programmers do wether you agree with the license model or not.
Websites will begin installing software automatically that contains recorded messages and a worm like propagation manner. Spammers will go to stores and stuff wi-fi labels back between shelves etc...The software will work like gator eventually being everywhere (or like blaster). Then you will be walking through the aisles and your cart will say...
Add three inches to your penis!
I am sure that using methods similar to the above it will happen.
I read through many stories in his blog and finally came to one at the bottom of the link he cites the Chewbacca Defense. It is so cool to see mainstream culture come from a cartoon!
But it does present several other interesting issues, including that of the trade-off between the bad publicity that comes from the firing and whatever bad results follow when employees feel free to post such things.
To me the big thing to think about is this...MS would know that this would get out. The only benefit to this is if their are a lot of other embarassing points that could make blogs, their employees will think twice. So there must be a lot of shinola on their floors.
I love Tennessee, especially Chatt, but this just goes to show you how stupid our poiliticians are.
Your' politicians are smart. Long ago Franklin and Adams argued over who should run the country, the majority (according to Franklin) or the elite few (according to Adams). The letters they exchanged had a strong impact on the future of American government with both the two party system and the electoral college owing not just a little to those letters. Sounds like your state sides with Adams.
Sure they spend millions trying to fight our attempts to freely use the stuff we have bought.
Ask an artist about the 1st amendment and how it applies to the RIAA or the MPAA (I only know first hand about RIAA). The freedom of Speech is basically this, "I (the RIAA) say that you owe me money. By the way thanks for writing the songs." The RIAA is a bunch of sanctioned felons who have no place in the halls of congress, senate, the mayors office or the Citgo shitter for that matter.
Sort of. Same basic concept. Write a program and use some of their secret copyrighted comments. Here is a good example of a way to cause SCO to own you (C Code excerpt):
\\This is broke. Fix it later
That comment is obviously part of Sys V Unix
If a host had the latest patches applied, wouldn't it be immune from attack? Didn't MS release the patch for the RPC exploit months before the virus came out?
Assuming that MS the infallible (random quote..."No one would ever need more than 640K") identifies EVERY flaw BEFORE worm writers do than yes, patching makes perfection. Please, do not assume that.
(Imagine a well-constructed honeypot framework capturing a worm, redirecting worm traffic to fake services, and launching counter attacks to clean infected hosts!)
As a matter of a fact it sounds an awful lot like the anti-blast worm some jackass wrote. That bit of well meaning cyber-carpentry got on my network despite being prepared for blast and it did very similar damage. The honey pot project should look for useful things to the community not to an individual.
Perhaps IBM is just having a hard time competing with them.
You must be in a marketing department or something. IBM produces servers PCs etc... some of their stuff ships with Red Hat. Do you honestly think that Red Hat (a software company) is outcompeting IBM (a hardware company)? If so, I'll tell you my apples are better oranges than yours.
Microsoft could have tried to buy them out. We all know what would happen then.
Not at all what you think. First, MS would scream in triumph "We own Linux we bought it." Then Sco would come back with "Oh no you didn't. We own, we have this old program we bought a long time ago from Novell. We own Linux." Linus would say "It's a community thing, bugger off or I'll sick Big Blue on you."
Finally, IBM would have it's feelings hurt when Billie G tells them "None of this would have happened if you would have bought an OS in the first place."
If they owned SUSE, what most likely would they do with it?
The same thing they did with everything else they ever owned. Use it to keep Microsoft from becoming an all powerful force in the software industry and continue to assert the fact that Novell is the "other OS". Oh wait, I am sorry I forgot Novell is all but irrelevant. In terms of Microsofts thoughts on Novell, an X-Men quote comes to mind: Why don't you people ever die?
In the corporate environments I've worked in it is a normal practice to boot, and then go get coffee and come back 10-15 minutes later.. that is more than enough time for the worm to be off and running.
First off, the post is about remote log ins, not sitting in the office log ins (though you should speak to your management 10-15 minutes is a lot of wasted productivity for a cupa joe). They log into a special server which is isolated from the network, this server analyzes both their virus-defs and patches as well as any custom checking, when that check is good they are then given a one time connection (ie set up then and discarded later) connection to the network. It is basically a more advanced version of Ciscos Temporary ACLs (more advanced in that they are setup automatically, not more advanced in function).
Plug an infected notebook into your network of unpatched machines and a worm will bring you down in seconds.
That was true but now you can use Network quarantine areas on Windows 2003. My server checks when they login and if virus updates and patches etc...are not applied it shunts them to a highly restricted quarantine server. The only comms they have then are for virus updates and patches.
I happily installed all the latest patches for my Redhat 8 box until one day, several months ago, on reboot (a kernel update), the box was totally hosed.
Not to play favorites, my Windows 2003 server recently crashed and burned after a patching incident, requiring a full re-install.
I have nothing leaving my central office without documentation and thus nothing comes back without it. See you assign an asset number to an asset and then you use the remarkably complex "database" to store both the asset number and unique information. Then when the item comes back you can use the "database" to find all your documentation, all that without even paying 699$ to SCO. I also maintain current service contracts on everything so it is EXTREMELY rare that anything should come back to me at all. Service contracts are to cheap not to use.
Explain to me what happens when you have 15 print servers come back from the field, lets say removed because in this case they upgraded to intermec's with built in print servers.
We live in extremely different worlds. I have nothing 'coming back from the field'. I would not know why something would come back with no documentation as I allow nothing to go out without documentation and the documentation is stored centrally on one of them new fangled file servers. If I had something come back with no documentation I would dis-employ somebody.
Slashdot Mirror
His comments are not that bad when compared to past comments. Keeping firewalled and running your updates is sound advice even to Linux admins. He says perfect code is not required. I have heard of his "slave" campus his idea of perfect software would be perfect software. No one has released any of that yet. He is stating that by proactively configuring your firewall and watching his update site you will be significantly more secure. He even adds that "But did we have the tools that made that easy and automatic and that you could really audit that you had done it? No. Microsoft in particular and the industry in general didn't have it." He himself adds that MS was a PARTICULAR part of the problem. I think the work done between 2000 and 2003 is very promising in terms of security.
named GONAD ?
I was going to make a clever nad comment. Curses.
The real truth is that in five or ten years the big recording companies will most likely not resemble at all the companies that we know today. Their business model is doomed because there are too many people with too many computers that don't want to pay a dollar for a song or seventeen for an album.
And Linux will be on every desktop. And Asscroft will not erode any of our rights and you will kick whatever addiction you seem to have. Look at the real numbers of how the "masses" of downloaders affect sales. It is positive if anything though I think it is nothing.
So which situation would you prefer? Relatively equal distribution for all, including the artist (a la music), or grossly disproportionate distribution of the profits (a la movies)?
Very simple to explain (NOT!!!)
The artist (and band)creates a record. The Management team finds someone who will record and market it. The recording company records it. In my opinion (and the arrangement I have with bands I manage [only 2]) is that each of those 3 entities is one third of the albums success.
So, if our next album does 3,000,000$ (it probably wont make 1/6 of that) the band, mgt. and studio take a mill ea. Now if there are 4 musicians in the band they would each take 250,000 (if the front man chose to share it that way). If I share mgt duties with a promoter or two (I do) we would split a mill. The recording co then receives a mill for their work. Using this scheme I can not get on with major labels but smaller labels let you negotiate.
If anything, these "artists" deserve a McWage because they're just doing exactly what they're told, and not adding anything to the sum total of human knowledge and culture.
They are catering to the "majority" taste of CD purchasers. The fact that the marketing company can shape purchasing habits is irrelavant. I am sure if McFlipper could simultaneously serve 350,000 screaming teens a McBurger McFlipper might be well off as well. However he can't and McBritney can sing to 100s of 1000s of McConsumers on the radio at once. Additionally, most (ok well a decent chunk of them) are actually good musicians and if Simon & Garfunkle style music was pop they could pull it off (maybe not write it, well B.Naked Ladies might) but they could play it. Who is we that sucked off Simon? I sure don't I choose music that appeals to me and you should too (well, maybe not to me).
Musicians always look so poor when I see them on television. Finally, they can afford the lifestyle they deserve.
First, musicians won't get the money they deserve. The minions and scumbags around them will get the lions share. Second, do you like music and enjoy listening to recordings? If so you should pay for that convenience. Artists SHOULD get paid commensurate with the amount of people they make happy. Top 40 stars are listened to by millions of people and thus should make millions of dollars. Alternative underground bands may have 100s or 1000s of followers and should make money that supports that level. Just because Cowboy Neal does not believe that creating something that will make 1000s of people sit and relax and listen for a couple of minutes is a worthwhile endeavour doesn't mean that it isn't. I consider slashdot to be my source of "press" on these issues, it would be nice to see it treated as such. Artists deserve their licensing to be respected just like programmers do wether you agree with the license model or not.
remember they are Communists
I knew open source was actually a soviet plot!
Great idea
Websites will begin installing software automatically that contains recorded messages and a worm like propagation manner. Spammers will go to stores and stuff wi-fi labels back between shelves etc...The software will work like gator eventually being everywhere (or like blaster). Then you will be walking through the aisles and your cart will say...
Add three inches to your penis!
I am sure that using methods similar to the above it will happen.
I read through many stories in his blog and finally came to one at the bottom of the link he cites the Chewbacca Defense. It is so cool to see mainstream culture come from a cartoon!
But it does present several other interesting issues, including that of the trade-off between the bad publicity that comes from the firing and whatever bad results follow when employees feel free to post such things.
To me the big thing to think about is this...MS would know that this would get out. The only benefit to this is if their are a lot of other embarassing points that could make blogs, their employees will think twice. So there must be a lot of shinola on their floors.
I love Tennessee, especially Chatt, but this just goes to show you how stupid our poiliticians are.
Your' politicians are smart. Long ago Franklin and Adams argued over who should run the country, the majority (according to Franklin) or the elite few (according to Adams). The letters they exchanged had a strong impact on the future of American government with both the two party system and the electoral college owing not just a little to those letters. Sounds like your state sides with Adams.
Sure they spend millions trying to fight our attempts to freely use the stuff we have bought.
Ask an artist about the 1st amendment and how it applies to the RIAA or the MPAA (I only know first hand about RIAA). The freedom of Speech is basically this, "I (the RIAA) say that you owe me money. By the way thanks for writing the songs." The RIAA is a bunch of sanctioned felons who have no place in the halls of congress, senate, the mayors office or the Citgo shitter for that matter.
Hey can you make Honey pots for SCO stuff??
Sort of. Same basic concept. Write a program and use some of their secret copyrighted comments. Here is a good example of a way to cause SCO to own you (C Code excerpt):
\\This is broke. Fix it later
That comment is obviously part of Sys V Unix
If a host had the latest patches applied, wouldn't it be immune from attack? Didn't MS release the patch for the RPC exploit months before the virus came out?
Assuming that MS the infallible (random quote..."No one would ever need more than 640K") identifies EVERY flaw BEFORE worm writers do than yes, patching makes perfection. Please, do not assume that.
Throught Asia, honeypots are used to store 'nightsoil.
I throught you make a good point.
(Imagine a well-constructed honeypot framework capturing a worm, redirecting worm traffic to fake services, and launching counter attacks to clean infected hosts!)
As a matter of a fact it sounds an awful lot like the anti-blast worm some jackass wrote. That bit of well meaning cyber-carpentry got on my network despite being prepared for blast and it did very similar damage. The honey pot project should look for useful things to the community not to an individual.
Perhaps IBM is just having a hard time competing with them.
You must be in a marketing department or something. IBM produces servers PCs etc... some of their stuff ships with Red Hat. Do you honestly think that Red Hat (a software company) is outcompeting IBM (a hardware company)? If so, I'll tell you my apples are better oranges than yours.
Microsoft could have tried to buy them out. We all know what would happen then.
Not at all what you think. First, MS would scream in triumph "We own Linux we bought it."
Then Sco would come back with "Oh no you didn't. We own, we have this old program we bought a long time ago from Novell. We own Linux."
Linus would say "It's a community thing, bugger off or I'll sick Big Blue on you."
Finally, IBM would have it's feelings hurt when Billie G tells them "None of this would have happened if you would have bought an OS in the first place."
If they owned SUSE, what most likely would they do with it?
The same thing they did with everything else they ever owned. Use it to keep Microsoft from becoming an all powerful force in the software industry and continue to assert the fact that Novell is the "other OS". Oh wait, I am sorry I forgot Novell is all but irrelevant. In terms of Microsofts thoughts on Novell, an X-Men quote comes to mind:
Why don't you people ever die?
Hmm... I wonder if I can use the same tatics on my wife...
Do you mean that you need to counter her keyloggers and develop a paper trail?
In the corporate environments I've worked in it is a normal practice to boot, and then go get coffee and come back 10-15 minutes later.. that is more than enough time for the worm to be off and running.
First off, the post is about remote log ins, not sitting in the office log ins (though you should speak to your management 10-15 minutes is a lot of wasted productivity for a cupa joe). They log into a special server which is isolated from the network, this server analyzes both their virus-defs and patches as well as any custom checking, when that check is good they are then given a one time connection (ie set up then and discarded later) connection to the network. It is basically a more advanced version of Ciscos Temporary ACLs (more advanced in that they are setup automatically, not more advanced in function).
Plug an infected notebook into your network of unpatched machines and a worm will bring you down in seconds.
That was true but now you can use Network quarantine areas on Windows 2003. My server checks when they login and if virus updates and patches etc...are not applied it shunts them to a highly restricted quarantine server. The only comms they have then are for virus updates and patches.
I happily installed all the latest patches for my Redhat 8 box until one day, several months ago, on reboot (a kernel update), the box was totally hosed.
Not to play favorites, my Windows 2003 server recently crashed and burned after a patching incident, requiring a full re-install.
You should outsource your patching needs.
I have nothing leaving my central office without documentation and thus nothing comes back without it. See you assign an asset number to an asset and then you use the remarkably complex "database" to store both the asset number and unique information. Then when the item comes back you can use the "database" to find all your documentation, all that without even paying 699$ to SCO. I also maintain current service contracts on everything so it is EXTREMELY rare that anything should come back to me at all. Service contracts are to cheap not to use.
Explain to me what happens when you have 15 print servers come back from the field, lets say removed because in this case they upgraded to intermec's with built in print servers.
We live in extremely different worlds. I have nothing 'coming back from the field'. I would not know why something would come back with no documentation as I allow nothing to go out without documentation and the documentation is stored centrally on one of them new fangled file servers. If I had something come back with no documentation I would dis-employ somebody.