Slashdot Mirror


User: mzs

mzs's activity in the archive.

Stories
0
Comments
1,079
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 1,079

  1. Re:Nope on Dell Begins Selling Inspiron Mini 9 · · Score: 1

    Hmm I guess the deal now showed-up:

    http://www.engadget.com/2008/09/05/doing-the-math-on-that-99-inspiron-mini-deal/

    The problem is that you cannot get the cheaper notebook models and need things like the $25 more expensive color case, worthless AV software, and 3 year support too and it does not really come-out much cheaper.

  2. Re:DivX is NO FORMAT! on Best Way To Distribute Video Online? · · Score: 1

    How about the need for the index at the end of the file.

  3. Nope on Dell Begins Selling Inspiron Mini 9 · · Score: 1

    I just added the base Studio 15 ($649) and the cheapest Mini 9 ($349) to my cart and got no such discount. If this is true, could someone please detail how to get the discount.

  4. two discs? on Red Alert 1 Released As Freeware · · Score: 1

    I never played this game before but my son likes Rise of Nations so I may give this a try. Why is there a Soviets CD and an Allies CD? Do you need one to play as NATO and the other as the Warsaw Pact or something like that? Is there a manual somewhere?

  5. O'Reilly: Essential System Administration on Computer Textbooks For High Schoolers? · · Score: 1

    That is what I learned out of. Then man pages and the web after that. There is a great little appendix teaches Bourne shell scripting. I have no idea of a good Windows admin book. You will need to do some exercises in firewalls that are not in that book. Also little exercises that expose to all sorts of useful commands like grep, find, awk, jot, etc. If you need to teach both Windows and Unix, then there is no time for more in a high school type class in two years. If you can avoid the Windows you should get the camel book and teach perl as that is a sort of natural extension from shell scripting to more powerful scripts.

  6. Re:Brilliant, judo-like move on McCain Picks Gov. Palin As Running Mate · · Score: 1

    Actually their experience is roughly similar. Obama was twice a state senator. Living in his district for more than four years and knowing some of the same circles of people because of the University of Chicago I know he was very involved in politics behind the scenes for a long time prior to this and also during the two years he was not a state senator. That is just how things work in Chicago. He was being groomed during that time and waited for an opportunity to become the state senator so he could move on to bigger things later. Read about how he first became the state senator to see that Obama is in fact a rough and tumble sort of politician when it matters.

    Palin on the other hand spent a longer time as a city council member, yes there is experience there during that time, but it is of a different scale.

  7. Re:How can I figure out if a key is affected? on Compromised SSH Keys Lead To Linux Rootkit Attack · · Score: 1

    Debian put together a patch:

    http://people.debian.org/~cjwatson/openssh-blacklist.diff

    There is a tool in there called ssh-vulnkey and you can get the blacklists from debian here:

    http://ftp.de.debian.org/debian/pool/main/o/openssh-blacklist/openssh-blacklist_0.1.1.tar.gz

    You need to run the install script as some bytes get stripped from the provided blacklist files.

  8. Re:Debian compromise: probably related... on Compromised SSH Keys Lead To Linux Rootkit Attack · · Score: 1

    I just realized that what was done is that all plausible Debian DSA 1024 bit and RSA 2048 bit weak keys were hashed and some bytes stripped away into a more than 7 MB of files. Ouch!

    I don't think that is comical anymore just not practical. What if someone had a key of a different size for example? Also what about someone with a valid key but when you strip away the 12 bytes of the hash now it matches? What about servers with time/space constraints?

  9. Re:Oh noes!!1! on Compromised SSH Keys Lead To Linux Rootkit Attack · · Score: 1

    It is a worm so the trick is spreading. It can get very far by trying the same username for all the hosts in the known_hosts file even if it cannot get root. It can also look at /etc/passwd for other users and try to spread that way to other hosts. If it can get root with a local exploit, it can look at everyone's known_hosts for more places to try and spread to. Also with root it can look in the comments of the keys and log files for more targets and usernames. Basically if it can get to 1% of the hosts that is still huge.

  10. Re:Oh noes!!1! on Compromised SSH Keys Lead To Linux Rootkit Attack · · Score: 1

    No if you have a user that logs in via ssh keys and that user generated the keys on an affected Debian box, an attacker can get in. Then they use a barrage of local root exploits to gain root, not a passwordless sudoer.

  11. Re:Debian compromise: probably related... on Compromised SSH Keys Lead To Linux Rootkit Attack · · Score: 1

    Not really it looks like the DragonflyBSD folks added the Debian patches and these are not to be found in the OpenSSH sources. But that is sort of a joke actually. The tool is called ssh-vulnkey, and you can find a patch for it here:

    http://people.debian.org/~cjwatson/openssh-blacklist.diff

    There is a man page for it, here is an online version:

    http://www.tin.org/bin/man.cgi?section=1&topic=ssh-vulnkey

    What it does is a binary search of key files against /etc/ssh/blacklist.TYPE-LENGTH files. It can be used to hunt for bad known weak keys. You can download the blacklist files here from debian:

    http://ftp.de.debian.org/debian/pool/main/o/openssh-blacklist/openssh-blacklist_0.1.1.tar.gz

    The README describes it better (I had to trim the junk characters):

    This package contains a set of default SSH keys that were known to have
    been generated during the time when the Debian OpenSSL package had a
    broken Random Number Generator.

    The source package contains the full fingerprint of the vulnerable keys
    in blacklist.RSA-2048 and blacklist.DSA-1024. The installed package uses a
    partial fingerprint for identifying the keys by stripping off the first 12
    bytes of the fingerprint.

    Also there is a new feature of the patched sshd that searches the blacklist files for matches. It can be disabled by the 'PermitBlacklistedKeys' option to sshd.

    So the reason that this is funny is that how this works is that there is a list of known weak keys. If some user generated a ssh key pair on an affected Debian box, you're affected and the blacklist won't do you any good.

  12. As in everything... on Hacker Uncovers Chinese Olympic Fraud · · Score: 1

    you are either a cheater or a loser.

  13. Re:line doubling? on New Study Finds Low Interest In Blu-ray · · Score: 1

    That is a great reply, but a little niggle. I have a CRT HD TV set. It is a lot like a multisync monitor common before LCDs. It actually scans the electron beam however it has too. I verified it with all sorts of crazy modelines. It is more than fast enough for 1080i. I love it, the only draw back is that I needed to adjust the brightness as the 720 channels are darker than the 1080 and 480 ones (I am assuming it double scans per line for 480). A later set auto adjusted the brightness to compensate but I got the close-out prior model much cheaper.

  14. victor 2000 on $12 MIT Computer Based On NES, Not Apple II · · Score: 1

    I used to have a semi XT clone called a Victor 2000 if I remember correctly. It had floppy disks in an incompatible format to the XT, a Herculesish graphics again incompatible with XT, and an NEC 8088 compatible processor running at a faster clock rate than the XT. Anyone else remember these? It was nothing like these Victor-60 and Victor-90 machines.

  15. Re:That's one smug grin i would love to see. on Tufts Tells Judge, We Can't Tie IP To MAC Addresses · · Score: 1

    I wish I had mod points. What the parent wrote is correct. In fact I see the following happen to me. My lease time is 6 hours. Every fourth time I try to renew the lease I get a different IP address. I think my ISP does this to make it hard for people to run servers. I guess they do not know about DDNS and their perfect 24 hour pattern makes it very easy for me to get the new IP addresses at a time it usually does not cause a problem.

  16. Re:Prepare a press leak, Smitty, we have a patsy on Apparent Suicide In Anthrax Case · · Score: 1
  17. Re:Possible semi-benign explaination? on PCMark Memory Benchmark Favors GenuineIntel · · Score: 1

    PCMark simply did not test with many Via chips is the most likely reason. They probably have a slew of if then statements after a few cpuid instructions. They don't treat Via special and so it goes down a generic pentium path. When you reset the output of cpuid on a newer Via cpu to pretend to be an AMD with features that are available and fast on the Via cpu, then of course the benchmark will return a more favorable score.

    BTW the reason that the benchmark is most likely coded like this is that in the past Via and Cyrix chips commonly had the cpuid stuff messed-up relative to their actual features. To really learn what the cpu had you had to do outb and inb instructions and there was a range of a few fake io bus addresses that the cpu would catch and handle. The cpu only decoded the few lower address lines and so they appeared every 2k or so! Also the SIMD and FP available was often very slow on Via and Cyrix parts so you learned from practice to not use those features even if they were available.

  18. Re:CPUIDs on PCMark Memory Benchmark Favors GenuineIntel · · Score: 1

    Or for Via CyrixInstead and I am not making this up I saw a part with VIAVIAIVIAVIA.

  19. Re:MMX/SMD Extensions on PCMark Memory Benchmark Favors GenuineIntel · · Score: 0, Redundant

    But older VIA chips had buggy SIMD and broken CPUID where features were reported incorrectly and if the SIMD worked it worked slowly.

  20. yeah aluminum... on MacBook Updates Rumored To Include Glass Trackpad · · Score: 2, Interesting

    so the wifi range can be shorter O_o

  21. Re:Just like buisness hotels on Olympic Media Village – Most Expensive Internet In the World? · · Score: 1

    Minute you go to any "business class" hotel or go within a block of a convention center, you start getting charged $10/day to $10/hr.

    Next time go to a Marriot Residence Inn. It is like being in an apartment. During the weekdays they make you breakfast and dinner. Free faxes, printers, computers, and ethernet and/or wifi in your rooms (yes rooms at least a kitchen, living/dining area, bedroom, and bathroom). For after work there is a workout room, hot tub, and pool and most have a bar some have a squash, tennis, or basketball court outside. All that is free, but sometimes they charge you for parking in large cities. Also always free newspapers and coffee and often free snacks like cookies or brownies.

  22. Re:Do yourself a favor... on How To Encourage a Young Teen To Learn Programming? · · Score: 1

    I agree, but the poster did say that his son has shown some interest. The best thing the father can do is open his pocket book so the son can have books and computers to experiment with. He'll naturally have questions and then the son can ask the father. Often those people that think that they are terrible at explaining things but clearly have some knowledge in that area frustrate those that ask the questions because the poor explanations make them feel stupid. That is why the boy learning so much on his own will work great. The father's role in answering questions then really will not be to answer the question, but to point where the answer is, it helps if the father will answer in a humble way such as, "I don't really remember exactly let's man awk." The other thing the father can do is when he notices a pattern like this: The son will come and ask a specific question, yes he could answer it but it seems like the boy may be going about the problem the wrong way. Some conversation there instead of simply answering the question would be better and then a suggestion of pointing out a different approach will work great. It works great to say something like, "Man I had such a similar question when I was doing foo, and after banging my head on it for at least two months I figured-out I was going about it completely the wrong way. It's better if you do it this way..."

  23. Re:hello? on China Races To Clean Up Olympic Air · · Score: 1

    No there is a famous legend where he tried to command the tide.

  24. unrelated question on RHN Bind Update Brings Down RHEL Named · · Score: 1

    I've been using Thiobor HyperWRT for a while now but that has not been maintained for a while now. I use dnsmasq on the WRT54G (an old one more like today's GL version) and I see that it has been patched to the newer stuff. It looks like I will have to move to OpenWRT, does anyone know which versions are new enough so that they have this fix? I took a look but could not find a Chnage Log and the versions seem older. Or alternatively is HyperWRT in fact still being maintained somewhere and do you know the new link?

    Thanks in advance.

  25. don't save thresh hold on Slashdot Discussion System Updates · · Score: 1

    In the older system, there was a comment thresh hold drop down and a check box to save it. I used to open a bunch of comments in a new tab and then make the thresh hold -1 to read all the comments. Now open a new tab and then slide the slider to view them all but it remembers this the next story I open. I wish there was a button there to save this as the default and the slider would only apply to that one tab.

    Maybe there are some keyboard shortcuts to open all the comments under the current one and collapse them all instantly. If so that would be fine as well, but really clickable thing a bons for that functionality would be nice.

    Another thing is the obnoxious size of the reply to this button. Why can't it simply be a hyperlink?

    Also I miss the parent link, it used to be simple now I need to scroll a bunch of messages up losing track of where I was.

    Finally sometimes I open a comment by clicking on it and my whole page moves. That is frustrating, maybe I still want to see the bottom of the parent? Also why is it not consistent?