User: justMichael

Re:I'm lost

On: Mac Trojan Horse Disguised as Word 2004

I hope you get the funny mod that deserves ;)

Re:I'm lost

On: Mac Trojan Horse Disguised as Word 2004

I think you are thinking of a worm.

This is exactly what a trojan is.

Just one of the many definitoins:
A destructive program that masquerades as a benign application. Unlike a virus, Trojan horses do not replicate themselves but they can be just as destructive.

Re:LaCie disk

On: The Ultimate All-In-One Storage Solution

OS X can access fat32?

Apparently it's been possible since OS 9, it's about half way down.

Re:They try to do this already

On: Comcast Plans Cable Boxes with Integrated Wi-Fi and Snooping

Odd, maybe it's different in your neck of the woods. I had to install their software to "authorize" the modem, but once that was done I have had no problems with lots of different devices popping onto my network from time to time and there are 3 on regularly.

As for the install software, I just copied a Virtual PC disk image, did the install and deleted the image, no way in hell they are getting their software into my Mac.

At least Adelphia had the decency to pre-auth the modem before they handed it to me. Too bad their service was unreliable.

Re:Don't bother looking or anything

On: Apache HTTP Server 1.3.31 Released

No. It says "Do not use Apache 2.0 and PHP in a production environment neither on Unix nor on Windows."

That document is also almost 9 months old, to the day: Last updated: Sat, 09 Aug 2003.

I have numerous sites running apache2 and PHP and have had no problems.

The only issue I have is no mod_throttle, and I'm not the guy to try and port it to the 2.x API ;)

Re:Well

On: Microsoft Security Updates for Pirated Windows?

Actually I think the day you can choose from hundreds of games at your local (best buy|circuit city|generic store) will be the day there is a large drop in Windows piracy.

Most of the people I know that pirate Windows do so only to play games.

Re:For current Gentoo users, no need to "upgrade"

On: Gentoo Linux Announces Gentoo Linux 2004.1

So I finally got around to mucking around with packages.keywords and it seems to be working OK, with the exception of bind 9.2.3, using both .keywords and .unmask. I can't get it to believe that I actually want 9.2.3 installed.

Thanks for the tip. now to figure out the bind issue.

Re:REALLY bad password

On: Passwords That Should Never Be Used

Given that a lot of web developers use MySQL, your password is going to do nothing but error out.

MySQL doesn't support multiple queries, yet ;)

Re:Yet another Apple upgrade.

On: Mac OS X 10.4 "Tiger" Preview at WWDC

What ever is in it, I'm sure that it will cost around 200$ to upgrade and still wont have everything that they said would be in version 10. But maybe I'm just an embittered ex Apple developer.

I think you mean around $130, unless you are buying the family pack. Or maybe the exchange rate is pushing it up to $200?

To the best of my knowledge the cost has remained a constant $129 USD.

way OT

On: NetBSD Sets Internet2 Land Speed World Record

Re: your sig...
To provide more relevacne for the band you might want to use something like the following:

Googling up my brother's Acid Metal band, Ahymsa

Google places more weight on the text that's actually inside the link ;)

Quality

On: Core CSS (2nd ed.)

Write a book advocating the joys of CSS and then use a non standard cursor for the "a" tag ;)

Re:and while we're at it - international shipping!

On: Websites For The Frugal?

No you aren't all rotten, but there is a lot more fraud with international orders.

The best way I have found to deal with this is either stop shipping international or use extra measures to make sure someone isn't trying to screw you.

1) Start using an extra service to get data on your orders. I use maxmind's service, they tell me many things that will set off a red flag. Did they come in through an anonymous proxy, are they using one of the many free email services, how far is their mapped IP from their billing address. Nothing personal just enough data to be relatively sure that they are who they claim to be. If the order was placed 8000 kilometers from the billing address, it's probably a stolen card.

2) If you are even remotely concerned about the validity of the order have them sign a form with a photo copy of their card, yes it's a pain, but too many charge backs and you start paying crappy rates or get dropped. If they are legit, they should have no problem doing that.

Re:Enterprise Gentoo Linux?

On: Gentoo Linux Musings

emerge grub from .93 to .94, reboot your machine and come back and tell me that stable means stable in the gentoo portage tree.

Don't get me wrong, I use and like gentoo, but as I have said before, you gotta watch your ass with gentoo.

They seem to have a hard time upgrading packages without screwing up configs and no there wasn't anything to be done by etc-update after the emerge and there were no messages about potential issues.

Re:Tom Siebel is Evil

On: UIUC Unveils the Worlds Most Advanced Building

As an aside I heard that Tom Siebel drives a bullet proof custom mercedes of some sort, anyone know what kind?

If he does in fact have an armoured Mercedes Benz, it' most likely one of these, well something along those lines. I think the only one that would be able to get out of it's own way with all the weight is the S 600.

Re:Apple Hugger

On: New Online Ad Technology To Bypass Popup Blockers

I didn't bother to look at the link, but it's a pretty safe guess that they are using CSS/Javascript to do this.

it's a pretty simple concept:

var ad = window.open(...);
window.setTimeout('checkAd()', 1500);

function checkAd() {
if (! ad) {
show a floating layer with an ad in it...
}
}

Re:For current Gentoo users, no need to "upgrade"

On: Gentoo Linux Announces Gentoo Linux 2004.1

OK, so your post got me digging on /etc/portage/packages.keywords, apparently this is now the way to do it, but the docs are wrong?

Just another classic example of the problems with Gentoo (don't get me wrong, I use it and like it, but you gotta watch your ass) if -U is so wrong, a hack and deprecated, why is there no message stating so when it's used?

My initial concern with using /etc/portage/packages.keywords for masking is that I may only want an unstable version to get a feature that I need now, when that version becomes stable, I don't want the bleeding edge. I only unmask packages that I need features in.

Re:Am already there!

On: Gentoo Linux Announces Gentoo Linux 2004.1

Weekly cron job:

emerge --no-spinner sync
emerge -uUp world

have a look at the output and see what needs to be done.

Re:Textpad

On: First Ten Programs on New Install?

heh, actually I have a few different reasons for that being there... but it has generated some sales ;)

Re:Which is why

On: Volunteering for OSS == Sign Up for Spam?

Apparently you are very active online, I see your handle (Anonymous Coward) all over the place ;)

Re:Textpad

On: First Ten Programs on New Install?

I used to be a TextPad user, but moving between Win/Mac/Linux depending on location I wanted something that was the same across the board.

I settled on jEdit since it also supports regular expression search and replace and that was the "killer" feature in TextPad for me.

Re:From C to PHP & Admin Responsibilities

On: PHP and SQL Security

One thing I haven't quite figured out, and maybe I just need the proper Apache mod, but when a PHP app creates a file, it's owned by the web process and not the script user process, so in safe_mode, to get things working you either have to change permissions or give liberal directory permissions in order for things to work with user-uploaded code.

Look into these, might help:

Here is one for 1.3, but the disclaimer concerns me and running apache as root is not something I would do...

http://www.snert.com/Software/mod_become/

If you are running apache2.

http://solaris.bluecoara.net/servers/apache/mod_su id2_en.phtml

Re:This was modded up?

On: PHP and SQL Security

To the best of my knowledge, you have never neen able to execute more than one query per call to MySQL.

Of course they were nice enough to add it into 4.1, but you still have to enable it when you open the connection, so it's not insecure by default.

Re:No.

On: PHP and SQL Security

Snuff out > and < chars so that they can't contain the Script HTML tag when purifying data. Replacing these characters with their html entities usually works; ie:
> becomes &gt;
< becomes &lt;

I have found this one to be pretty reliable for completely nuking HTML, it is based on Larry Walls code and slashdots code:

function cleanInput($in) {
if ($in != '') {
// strip out comments
$in = preg_replace('/<!(.*?)(--.*?--\s*)+(.*?)>/', '', $in);

// cleans up leftovers from nested comments
$in = preg_replace('/-->/', '', $in);

// strip out script tags
$in = preg_replace('/<script[^>]*?>.*?<\/script>/' , '', $in);

// strip out all tags
$in = preg_replace('/<(?:[^>\'"]*|".*?"|\'.*?\')+>/', '', $in);

// convert multiple newlines into a single newline
$in = preg_replace('/[\r|\n]+/', "\n", $in);
}

return $in;
}

I'm sure somebody will find a problem with it ;)

Re:Large LCD Screens as monitors

On: Large LCD HDTV as a Computer Monitor?

Sorry- I will admit that I pulled that price from the IBM site, I didn't have the time to go price shopping.

Re:Large LCD Screens as monitors

On: Large LCD HDTV as a Computer Monitor?

Here is one, that's close, not exactly 1920 x 1080, but 1900 x 1200.

Or if you really have money to burn, you can get one from IBM at a blistering 3840 x 2400 for a measly $8k plus a grand or so for a card to drive it.