Slashdot Mirror


User: lars_boegild_thomsen

lars_boegild_thomsen's activity in the archive.

Stories
0
Comments
108
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 108

  1. Re:Greylisting on Spam Filtering For Small/Medium Business? · · Score: 1

    Shhhh - don't tell the spammers!!!

    Seriously - right at this moment in time, greylisting is just about the best defense there is, but I am sure sooner or later the spammers are going to start resending spam to get around it (I am actually seeing that happening right now).

    I am maintaining the mail system for a 150 user network and I originally played around with greylisting because spamassassin had problems keeping up with the load (I guess it rejected around 10000 emails daily). After pointing the primary DNS to an IP address with no SMTP server running and doing greylisting on the real SMTP server, this number dropped to less than 100 a day.

    It's a two-edged sword though. I reckon that the low number of rejected messages now means that whatever spam is clever enough to get around the greylisting is ALSO clever enough to get through spamassassin and in reality this might be because spamassassin has very little real spam to train it's bayes filter on.

    Anyway - for now - while it last - nothing beats greylisting in my opinion.

  2. Re:Blast from the past! Handheld PC - H/PC - Palmt on War Brewing on the Inexpensive Laptop Front · · Score: 1

    Yeah - I do remember the Jornada and I bought one when it came out - and if I am not mistaken it was nearly GBP 700 back then (even if I remember wrong it was @#!$@#% expensive). And guess what - when the initial excitement wore off I didn't like it. Nor did I like many of the other gadget's I've bought in my life - organisers, smartphones, tablets. All of them have made me excited when I got them, and then after a few weeks, I've just stopped using them.

    I bought an Eee PC a few month back and I absolutely love it. I am actually using it more and more and my trusty Thinkpad have turned into a Desktop PC at home - I just never bother to carry it around.

    I have spend a lot of time thinking about what makes the Asus different. Honestly - the keyboard ain't fantastic, the display is annoyingly small, the battery life is way too small and I will never comprehend why Asus decided to save one or two bucks and not include bluetooth on a device that's supposed to be mobile. My personal conclusion is that the these two points make ALL the difference for me:

    1. A USABLE Keyboard

    OK - I will probably never get as fast on the Asus as I am on a normal laptop, but it is very very close. I really don't mind writing long emails or even documents on the Asus.

    2. It's HACKABLE!

    This one is probably the major one. While Windows CE (or whatever they call it these days) look pretty neat on a small display it is just so static. Yes I can install a few applications, but no - the Asus I can hack to pieces. I can tweak and twist it into running EXACTLY the way I want. Even the mind boggling lack of Bluetooth wasn't that much of a problem. A few hacks on the command line and a Bluetooth dongle was accepted, and a few hours with a soldering iron and a screw driver, and the dongle was no longer a dongle but a built-in device.

    Really - your mileage might differ, but to me, those two point are the ones that make all the difference. The Jornada was cool looking and built like a tank (still got it - and it's still working) but the keyboard was just too small to use more than two fingers, and it was about the least hackable device I have ever seen.

  3. Re:first post on What Kind of Alternate Business Models Could ISPs Use? · · Score: 1

    Overusing resources? Wait a minute here.. Last time I checked, Verizon is selling me a DSL connection capable of 3 Mbps down, 1 Mbps up. They advertise it as such, and I am billed for this service. Am I not allowed to use the service I'm paying for? Should I only be using 1 Mbps down and maybe 100 Kbps up? Or, perhaps I should only be using it in bursts, 3-5 seconds per burst with a suitable wait interval in between. Kind of how the typical web browser works.

    Unfortunately, I can't seem to come up with a good car analogy for this.. Hrm..


    Well, let's see. The Bugatti Veyron is sold as capable of an average top speed of 400 km/h. At this speed the tires will burn out in 15 minutes, which is ok, because it will run out of fuel in 12 minutes and 46 seconds. I mean - WTF - it's about a million euro for one of those and it'll only run at top speed for 12 minutes. My trusty (I am saying that to be nice to it) old Saab have been running at top speed for hours at the time.
  4. Re: GPS on 3G iPhone Going Into Production In May · · Score: 1

    My Nokia N73 - which I seriously do not like very much do just that and that s about the only thing I like about it :) It's ugly, bulky, the user interface is a horror story, the os is buggy - but when I get into my car it connects to my bluetooth gps receiver and my bluetooth headset - and the screen is big enough so the navigation actually works.

  5. Re:df -h on Hands-On With the Windows XP-Based Asus Eee PC · · Score: 2, Insightful

    The "df" command won't show you the true story :) The thing is the Asus is using unionfs to layer two filesystems on top of each other. One is the original system partition - which is slightly bigger than 2 GB, almost full and read-only. On top of that the slightly less than 2 GB partition that is almost empty bar your /home/user directory is layered. The df command will report around 2 GB with around 2 GB available (I honestly can't remember the total size reported and I've nuked the unionfs on my eee and merged the two partitions into one r/w partition instead).

    And well - it IS pretty much a standard debian with almost a complete KDE minus a little bloat (mostly the window manager as far as I can see). If you dig around you'll discover tons of stuff that is either not used or not accessible through the "easy gui". Examples are kontact/kmail/korganizer. The darn thing also got a complete java jre environment - that alone sucks up what - 50 - 80 MB or so.

    If you want the true sizes you can mount the partitions of the flash manually and then do your df.

  6. Re:Good, I hope they don't sell well. on Hands-On With the Windows XP-Based Asus Eee PC · · Score: 3, Interesting

    > The full featured Xandros OS fits in about 200MB. It includes open
    > office, flash, firefox, Google mail and chat links,
    > Skype and other software that can use the webcam and a reasonable
    > media player.

    I am not sure from where you got that figure. The standard Eee PC 4G Surf comes with the built-in 4G flash disk partitioned into two partitions (no there's four actually but only those two are part of the Linux installation) - one slightly above 2GB and one slightly below 2GB. The first is used entirely for Linux system and the other is layered on top of that using unionfs. ALL changes by user - EVEN system updates take place on the second partition. The original more than 2 GB partition is almost full - so I reckon the standard Xandros with all you mention is around 2G roughly.

    Considering the amount of software - including LOTS is not directly available in simple mode (for example konqueror, kontact, kmail etc.) that is still very impressive.

  7. Re:I declare a fatwah! on Network Solutions Suspends Site of Anti-Islam Film · · Score: 1

    That is a somewhat dangerous assumption. Afaik islam is the fastest growing religion and fractions of it are able to talk people into blowing themselves up. That is pretty good marketing really.

  8. Re:The real dissaster is spectrum regulation. on Australian WiMax Pioneer Calls It a Disaster · · Score: 1

    I guess you could argue that if a suicide bomber get caught online he's not much good at what he does.

  9. Censorship on Domains Blocked By US Treasury 'Blacklist' · · Score: 0, Flamebait

    So, in other words, the only difference between United States and countries like - say China, Iran and North Korea - is that the technology used to censor the Internet in United States is significantly weaker and easier to bypass.

    It's pathetic! I fart in your general direction.

  10. Re:Why does it matter if it's free? on Why You Can't Buy a Naked PC · · Score: 1

    Because it's NOT free! I don't know how it is elsewhere, but I currently live in Malaysia, and here many PC's are available without Windows (loaded with freedos) and it will typically save you around RM 300 (which is around USD 75 or so). It's not a fortune but hell if I am going to give Microsoft ANYTHING considering all the pain they have inflicted on me through the times.

    It's by the way quite interesting to see the pattern of who can deliver without XP:

    1. Toshiba - ALWAYS comes with XP
    2. Dell - ALWAYS comes with XP
    3. Lenovo/IBM - XP is optional
    4. Acer - XP is optional
    5. Compaq - XP is optional on MOST but not all models
    6. HP - weirdly XP doesn't seem optional on HP branded laptops

    Needless to say Acer is by far the best selling brand of laptops here.

  11. Re:Way to go! on S Korea & China Mandate Common Chargers, Data Cables · · Score: 3, Insightful

    They GOT credit you mean. Utopia is is not more - they now use a thinner and completely incompatible plug in several of their phones. I decided - no more Nokia. This is the very reason I've bought Nokia for a long time.

  12. Re:ripoff on OpenBSD 4.0 Pre-orders are Available · · Score: 5, Funny

    That's ok - it's not uncommon that software is priced cheaper in third-world countries.

  13. Woah - this is a GREAT Idea on Spamhaus to Ignore $11.7M Judgement · · Score: 1

    In an uncontested trial in a Somali court, yours truly obtained a default judgement that all Americans with an L in their name is to pay me a sum of USD 100 each.

    What do you mean you don't care?

    It's a weird weird world :)

  14. Re:Glaring technical errors on The Problems of Web Surfing in Public Places · · Score: 2, Interesting

    I was being asked why it wasn't rampant and I merely stated I wouldn't know that :) All I know is that it is doable and it doesn't require much skills to do so, so yes - my personal guess is that it is pretty common and will become even more so in the future.

    Actually I did consider writing that the only reason I could think of was that people are still essentially honest with only a few crooks around - but I decided against it :)

  15. Re:Glaring technical errors on The Problems of Web Surfing in Public Places · · Score: 5, Interesting

    Well - I am not sure I would call it obvious. Experimentally I had two PC's on the same LAN segment. One was running ettercap the other I used for browsing. Ettercap was configured to do ARP poisoning and track SSL sessions with dynamic certificate generation. From the other PC I logged on to my so-called secure banking and ettercap had absolutely NO problem whatsoever in getting my username and password. From a user perspective the only HINT that something was wrong was that the cert was self signed (all the data in the cert was a replica of the original - just self signed).

    Yes - if I had started the attack in the middle of a session it would probably have been obvious, but no - since ettercap was running before I even started logging on - there was no warnings of any kind - just a request from my browser if I wanted to accept the cert or not. Even looking at the cert for Joe Six-pack I would bet it looked pretty ok. You would need to understand the technology behind certificated to know that a self signed certificate is not secure - and honestly - while you and I might do that, how many users of on-line banking know? I am fairly sure that most - if not all - non-IT educated people would readily accept such a cert and therefore in reality browse in the open.

    Regarding pop-ups on man in the middle attacks. Well - obviously I went through quite a lot of testing - mostly because I wanted to know what was possible and - if possible - how to prevent it. I did experience a few switches (and that is 2 to be exact out of at least 15 I tried with) that for some reason was not prone to the ARP poisoning, BUT I in those cases the attempt just quietly failed. In all other cases - ettercap happily sniffed just about any connection I tried to make without any hint on the client. The truly scary part is that ettercap can run pretty much unattended and just log whatever passwords it comes across, so I would say it was/is pretty viable to bring a laptop to a Starbucks and let it run for a few hours while I had a cup of coffee - then go home and see what I got. From the ettercap manual:


    SSL MITM ATTACK
                  While performing the SSL mitm attack, ettercap substitutes the real ssl
                  certificate with its own. The fake certificate is created on the fly
                  and all the fields are filled according to the real cert presented by
                  the server. Only the issuer is modified and signed with the private key
                  contained in the 'etter.sll.crt' file. If you want to use a different
                  private key you have to regenerate this file.


    The key here is that I do not agree with you that the chances of someone being there and ready is pretty small. Someone doesn't need to be ready - just run an application and wait - that is ALL it takes.

    So why is this not rampant (as someone else was commenting). Well - I wouldn't know. What I do know is that I just selected ettercap from the standard list of Debian packages and did no configuration whatsoever. I wouldn't know if it run on Windows or if it is hard to install and/or use. I guess in the Starbucks scenario I mentioned, the hard part would be the wep keys, last time I checked that still did require some knowledge and wasn't fully automated, but once on a shared network it does not require much skills.

  16. Re:Glaring technical errors on The Problems of Web Surfing in Public Places · · Score: 5, Informative

    Who told you ssl is safe? Any computer on the same lan segment - a bit of arp poisoning and you got an efficient man-in-the-middle attach. Then you present the client with a fake ssl certificate made on the fly to look like the original server certificate. No - it will not have the proper signatures by any cert authorities, but honestly - how often do YOU read all the details of a certificate presented to you before you say "Accept"?

    Sounds complicated to do in reality - well there are tools readily available that does EXACTLY what I described above and just about anybody can use them with a few hours of playing around.

    So - you do your SECURE SSL encrypted bank transactions over a public or semi public WIFI network. Anybody with a bit of knowledge can crack the wireless encryptions in a matter of 10 minutes, and sniff ALL traffic - including SSL without you having a clue what is going on.

  17. Comparing what? on HD DVD vs Blu-ray Direct Comparisons · · Score: 1

    Was I the only one that found this review a tad weird. It was presented as comparing two media formats, but reading the reviews it became pretty obvious to me that the guy was in fact comparing two players. I mean - it's highly likely that exactly the same mpeg-2 source was used for both discs - I mean why on earth encode it twice? 3 reviews and it all 3 he complains about the same things - different aspect ratio and darker images on blue ray. Ahem - could it be that one player was crap compared with the other one?

  18. Re:The Linux Flaw on Ubuntu Hacks · · Score: 1

    Do you mean to say that this is never the case on Windows?

    I can't count the number of times I've had to edit the registry manually, copy some dll, install some weird application in order to do something perfectly ordinary.

    The main difference as I see it is that most of these things are at least well documented on a Linux system. It might not be immediately obvious where to find the documentation, but it is out there somewhere. And to me that pretty much sums it up. Everybody run into problems with servers and networks. When I am faced with a problem on Linux I am ALWAYS - WITHOUT EXCEPTION - confident that it CAN be solved and that the information IS there - it's just a matter of how much I have to Google to find it. On Windows my general feeling would be: Well - if I am in luck someone had this problem and I might find a solution. If not - I'm fucked.

  19. All alone in the world on New Caldera Promised · · Score: 1

    I found it mildly amusing that a search of partners in Europe and Asia returned - well - exactly ZERO matches in both cases.

    I guess I'll have to pre order my new Caldera systems directly from SCO.

  20. Most secure device EVER on Microsoft Says Vista Most Secure OS Ever · · Score: 1

    I've got a shoebox that is the most secure device for storing large amount of money ever devised. Just place your money in the box AND put the box inside a bank vault and it will NOT get stolen - PERIOD!

    Sigh - they claim it's secure because it's got a DEVICE that can SCAN for virus and spyware. If it was that bloody secure it wouldn't need no device to do that.

  21. Open Document Format on Document Management and Version Control? · · Score: 1

    The latest versions of OpenOffice uses the Open Document format - which basically is neatly formatted XML inside a ZIP file - easy to convert to just about whatever format but still easy for end users to edit.

    Throw those files into Subversion and you got an excellent tracking and versioning tool. Install TortoiseSVN on end users workstations and they'll be able to use it.

    Use a tool such as Apache Cocoon to present those documents in HTML format on an intranet.

  22. Re:Latency on T-Mobile Releases New Card, Outlaws VoIP and IM · · Score: 1

    That's a common misunderstanding. Quite simply - most people will not notice a round-trip latency of up to about half a second. Above that it becomes noticeable but still - well can get used to up to around 700-800 ms without too much trouble.

    I daily have voip calls between Malaysia and Denmark (via US - so that's practically one trip around the globe) and the latency varies about 350 ms (off peak) and 700 ms (peak).

    The 3G services currently offered in Malaysia works fine with VoIP. Doesn't significantly change the above mentioned latency.

  23. Re:Yay for viruses! on 20 Years of Computer Viruses · · Score: 1

    Let's discuss that in 6-7 years :)

  24. Re:Screw their license and software: use Linux on Sony's EULA Worse Than Its Rootkit? · · Score: 1

    Well, there's hope even for Windows users :)

    Of course it's great that Linux can easily read the music tracks, but you still gave Sony money in the first place. Personally I would have thrown a couple of bucks in this direction:

    http://music.allofmp3.com/r2/G3/Live_In_Tokyo_(Sat riani__Vai__Petrucci)/group_3696/album_2/mcatalog. shtml?albref=14

    No EULA, No software installed on my computer - and more important - absolutely zero money to Sony - only to the artists.

    The record companies will wake up eventually or they die - it's as simple as that. Meanwhile I am happily buying more music than I have bought in many years.

  25. Why is this important? on Sarge is Now Frozen · · Score: 3, Informative

    I never understood why so many people focus so much on releasing a new version like this. I have more or less run Debian since around the Woody release (coming from years of running Slackware) and one of the things I enjoy about Debian is the "floating" update. I generally just do an update with dselect on all my boxes once a week and everything is reasonably current. Debian "old"? Well - most stuff is reasonably up to date and it's certainly more up to date than if I took ANY of the commercial Linuxes and installed that without updates. So what IS the fuss about? I seriously LIKE not having to go through a major update/reinstallation every now and then. In my eyes it's the KEY quality of Debian.

    Oh - of course I see the argument in a production environment - and then again - I don't. As I said - been running Debian "testing" or "sarge" for 3 years on something like 20 machines or so. During that time I've had TWO problems that was so serious it made one machine (the one I was testing the update on) unusual for a short while. One was when somebody screwed up the Adaptec aix_7xxx driver in the kernel in the early 2.6.8 and the other was during the switch from LVM 1 to LVM 2. Apart from that - every single update have been successful. That IS pretty impressive if you ask me.