Slashdot Mirror


User: fimbulvetr

fimbulvetr's activity in the archive.

Stories
0
Comments
1,340
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 1,340

  1. Re:Interesting on Tru64 Unix Advanced File System (AdvFS) Now GPL · · Score: 1

    I remember reading responses by kernel devs saying they would not put ZFS into the kernel, regardless of license. IIRC, it was because it violated in so many spectacular ways the concept of layering.

  2. Re:Ask Slashdot on Tru64 Unix Advanced File System (AdvFS) Now GPL · · Score: 4, Funny

    At least they're not stealing underpants anymore. Must have been because I saved that gnome in halflife 2 episode 2. Ever since then, they seem to be treating me better.

  3. Re:Anything else out there? on The State of X.Org · · Score: 1

    Are you suggesting that the fewer lines something has, the more it resembles documentation?

  4. Re:Backwards compatibility is very important on Changes In Store For PHP V6 · · Score: 1

    Yes, actually very soon you will need to update your server. PHP4 is no longer being updated - this means security and all types of other bugs, including data loss/critical bugs. From now on, security updates will NOT be official and subject to people's whim. It's absolutely retarded that you suggest one can stick with PHP4 and be happy. The happiness will only last until there's no fix for their dataloss bug or their system has been hacked.

  5. Re:With those arguements, any platform can suck on How Microsoft Dropped the Ball With Developers · · Score: 5, Insightful

    Maybe the point was that MS fosters bad programming by keeping legacy API calls around indefintely, whilst other systems do not. I'm the last guy to ever go pro-apple on /., having "been there, done that", but he really does have a point. MS is afraid to deprecate bad ways in favor of keeping some minor share of customers happy.

    While this has short term benefits, the long term imposes a hefty penalty, the same penalty MS (and some of its developers) is paying now.

  6. Re:Though is some places? on Nevada Governor to Bill Fossett Widow For Search · · Score: 1

    Sounds like you're making excuses for your ineptitude. Maybe next time you should try certified mail and maybe asking for what's called a "receipt". They work really well when a purchase is contested.

  7. Re:Though is some places? on Nevada Governor to Bill Fossett Widow For Search · · Score: 1

    I don't think it can work that way. All that money "they take a loss" on has to be recovered some way since it's not all profit, whether in insurance (Which would inevitably stop insuring once it became non-profitable) or by raising the cost of the treatment which would perpetuate people's inability to pay. Slippery slope.

  8. Re:What the hell? on Sun May Begin Close Sourcing MySQL Features · · Score: 1

    Wine?

  9. Re:No, and No on Hardy Heron Making Linux Ready for the Masses? · · Score: 1

    Hey, I just said less frequently, I never said never.

    As that article mentioned, that updated was fixed in _minutes_. Need I find you complaints from apple's users who's updates months ago broke something critical to them that _still_ are not fixed?

  10. Re:Ubuntu Webserver on Hardy Heron Making Linux Ready for the Masses? · · Score: 1

    1st. As a said, it's small but it's still non-trivial. A correctly partitioned machine is going to have the smallest footprint possible. This makes rapid deployments painless. I.E. use a 200MB disk image on an EC2/vmware or "ghosted" image is a hell of a lot easier than a 4000MB image that include an image editor, gui client, google earth, calculator, web browser, etc. As I said, non trivial.

    2nd. Let's find a few examples, shall we?
    http://www.ubuntu.com/usn

    What isn't running on a typical server:
    Squid
    Ghost
    CUPS
    Firefox
    Thunderbird
    Evolution
    libcdio
    xorg
    gd
    pigeon
    emacs
    libpng
    gnome-screensaver
    openoffice
    libsnd
    elinks
    kdm

    and on, and on, and on...

    Now, let's take a few of those and look for priv escalations:

    PulseAudio (573-1)
    Xorg (571-2)
    Xorg (571-1)
    THunderbird (CVE-2007-3844)
    ppp (SA20996)

    None of those would be installed without a gui. At least a few of them are default GUI install.

    3rd.
    Let's pick some daemons (Always running) that use memory:
    Trackerd - up to GIGs of memory usage. Not installed on servers, but on desktops.
    Xorg - several hundreds of megs.
    CUPS - dozens of megs.
    gdm/kdm and children - hundreds of megs.
    bluetooth daemons - dozens of megs
    dbus - dozems of megs

    Need I go on? With a server, even one w/ 16GB of ram, with a gui, you could easy have 1/8th of that being used before daemons on a default install.

    4th. I never implied NOT patching, merely not having to patch because the utilities were NOT installed. It's the difference between a few K and 2 seconds of patch time (If it were, say, a "passwd" update) and hundreds of megs of patch downloads just because I had pidgen, firefox, xorg, etc. to update. These are computers, they're not always perfect. A dpkg could be interrupted for some reason and has much more of a chance with many more packages. This causes me to personally have to fix the error on the server. When you're running hundreds, you quickly realize this is inefficient.

    5th. Then you've never ran anything *big*. I'm talking hundreds of machines, where you cannot afford the BS of personally attending to each machine.

  11. Re:Ubuntu Webserver on Hardy Heron Making Linux Ready for the Masses? · · Score: 1

    No, not really.

    First off, additional libraries and apps on a server can increase the amount of space used. While this is small any more, it's still nontrivial.
    Secondly, the amount of binaries these provided substantially increase the vulnerability of a server - be it daemons or binaries (priv esca).
    Third, apps that are running take RAM. I'm not sure if you've ever ran a server that needs any level of resources, but every bit of ram is sacred.
    Fouth, more applications == bigger PITA when security updates come out. The more you can avoid patching, the better.
    Fifth, the idea of having a server that requires a GUI almost immediately rules out the fact that you run any sort of scale of servers - or if you did you are amazingly inefficient, and quickly on your way to going postal.

  12. Re:No, and No on Hardy Heron Making Linux Ready for the Masses? · · Score: 2, Interesting

    Before you take on the elitist attitude, you may notice that I put "plists" in the original text. I've seen these corrupt hundreds of times, with the leading cause being the same as many other problems - improper shutdowns.
    In addition, this can happen in a variety of other situations, and a quick perusal of apple's docs confirms as much. Indeed, a search for "terminal" also reveals many cases where one has to drop to a shell in OSX.

    While we're on the subject, I should also note that second only to windows, Apple updates are capable of breaking things in wildly spectacular ways - moreso than I've ever experienced with ubuntu.

  13. Re:They're doing great on Hardy Heron Making Linux Ready for the Masses? · · Score: 1

    That's odd. Does a bug report exist for it? If you need help hop on over to the forums.

  14. Re:Yes, and yes. on Hardy Heron Making Linux Ready for the Masses? · · Score: 1

    Please, post here or on the forums your hardware so we can make sure there's a bug report. If there's a bug report there's at least documentation and you can "subscribe" so you can get an email if something's fixed/changed. One time I reported an abiword bug I forgot about for years until I got an email notifying me it was fixed (The years thing wasn't a big deal, the bug report was not for me because I was competent enough to work around it, but rather for the rest of the people).

  15. Re:No, and No on Hardy Heron Making Linux Ready for the Masses? · · Score: 1

    SO true. No if we could only have an OS that didn't have registries, plists or conf files that you occasionally have to edit/delete/view, we'd have it made!

  16. Re:Open source? on Sun Developing Open Media Stack · · Score: -1, Troll

    LOL, "Certified open source".

    Much like how you can buy "Official" gold eagle dollars from those infomercials. By "Official" they mean minted by the govn't of liberia.

  17. Re:And google wonders why ... on Google Mail Servers Enable Backscatter Spam · · Score: 1

    You should try to "stand in the shoes" of the shareholders. Do you think a shareholder is honestly going to want to give him cash? No way man, tie his performance into it so the executive has a *vested interest* in the company - otherwise the executive could just lie out his teeth and cause an enron style collapse. It's no different than the reason companies give you a vesting schedule when you get hired, to keep you around and to keep you productive.

  18. Re:And google wonders why ... on Google Mail Servers Enable Backscatter Spam · · Score: 2, Insightful

    It's not a scapegoat - it's the way it works. If you have a problem with it, I suggest you adopt your own form of economic policy and we'll see how well it works.

  19. Re:Scary on New Botnet Dwarfs Storm · · Score: 1

    Both Doubleclick and Yahoo, IIRC.

  20. Re:Scary on New Botnet Dwarfs Storm · · Score: 1

    Oh yeah, I forgot about ZA being 100% secure. Forgive me for thinking that no one product or line of defense is capable of rendering Windows secure to the threats of the world.

  21. Re:Scary on New Botnet Dwarfs Storm · · Score: 1

    It's not a question of random things or unsafe websites, even safe websites are a huge risk especially if you're running IE.

    Or do you think those "hacker safe" logos on websites mean you're 100% safe? Check out what happened to kbb.com a couple years back.

  22. Re:So, in the end, this article is totally useless on New Botnet Dwarfs Storm · · Score: 1

    Amazing. I never thought of how intelligent it would be to only report on problems that have solutions. Why bother with things that we haven't solved yet?

  23. Re:Aggravating... on New Botnet Dwarfs Storm · · Score: 1

    Hey, stupid. Yeah, you!

    You realize you just implied that you read about Kraken + Bot? Well you most certainly failed to do any critical reading or thinking. Had you got to the point where it mentioned that most software is incapable of detecting this bot, not for lack of signatures but because the bot is polymorphic, your braincell might have been able to deduce that there's no 100% way of "How to detect it".

  24. Re:Mac Book Air Hacked on New Botnet Dwarfs Storm · · Score: 1

    It was the first one to go down and it only took 2 minutes.

    http://www.news.com/8301-13579_3-9905095-37.html

  25. Re:Scary on New Botnet Dwarfs Storm · · Score: 4, Insightful

    Perhaps you don't understand the implications of the article.

    ZoneAlarm, AVG and Spybot are _incapable_ of detecting trojans like the aforementioned Kraken simply because they are polymorphic. Don't be ignorant, just because these programs say you haven't been infected, there's a non-trivial chance that you have been.