What you're really saying is, that your organization has over 400 applications that were written insecurely to begin with and were probably open to attack.
No, what I'm saying is that they use other forms of authentication than Microsoft WANTS us to use (and that some of them are using forms of authentication that Microsoft told us we could use that were taken away with Service Pack 2). In addition, we're behind a strong firewall to begin with- we damn well don't need a firewall on every freakin' desktop.
Nice for home users. It's going to be a real nightmare here at ODOT- we probably won't be able to roll SP2 out officially until February. Until then, we've sent out a mesage to all 4500 users not to install it, and set a group policy to turn off the firewall temporarily on personal laptops that connect to the network (whether brought from home or through RAS).
If your admins did what mine did- they set a group policy in Active Directory to shut off the firewall on any machine that some nimrod installs SP2 on accidentally.
That's one of the reasons why I have to use a test network for all of my SP2 testing.
That got me too. RPC & DCOM are understandible- the security on them is at a higher level than the firewall. NetBios & friends isn't understandible- and isn't true on the machine I'm testing with SP2.
There's a great deal more- I'd suggest you read up on the subject if you've got even one distant relative running XP relying on you for support. This was a HUGE update- on any 64-bit system it replaced most of the API and changed the behavior of DCOM, the firewall, Internet Explorer and more.
My primary job function is slowly going away and being replaced with SP2 testing so right now I need to keep VERY informed on this subject. It seems to me most of the ZD Net staff were swept up in TCI hoopla- and wanted to test SP2 to see if it lived up to the hoopla.
That was the other bit- RPC and DCOM are ON after an SP2 install, because if you actually read the documents from Microsoft, under SP2 there's a whole new accessibility layer built into the DCOM Server that checks the registry to see if this COM component can really be activated by a remote procedure call- and the default setting is "Yes, but authentication required, no anonymous connections." I know this because we've got a lot of DCOM here, and for EACH component we're going to need a separate group policy setting in Active Directory to get it all to run right.
That's because it doesn't also re-optimize the whole damn API for a processor you probably don't own. I still can't believe I need to replace every damn dll in the API for a 64-bit AMD processor when I'm running on a Pentium III.....
To some extent the Reg Reporter was just FUDing- if you truly turned off everything that article said to turn off, you'd lose a lot of functionality.
Having said that- I was surprised by his port scan of a SP2 machine, since my own tests at ODOT showed NetBios inaccessible after SP2 install, killing the ability for SMS to see the machine (one of the reasons that I'm NOT allowed to do testing on the real network for SP2).
Re:You can hack anything.
on
Port-A-Nuke
·
· Score: 1
It was very likely a Freudian Slip with all of the DRM stuff going on, yes. I meant to say SENSORS...sounds the same but means entirely different.
Although, it's occured to me in the past that censors and weapons inspectors and the like should be armed with GPS laser range finders hooked up directly to Navy Destroyers that launch Tomahawk Cruise Missiles..."No, Ayotolah, I don't believe that is an Asprin Factory. Get everybody out of it now, because 30 minutes after I punch this button it's going to be a smoking hole in the ground".
Re:Portable nuke? Cool!
on
Port-A-Nuke
·
· Score: 1
In this case, the safety circuit is the control ring, without which this sub-critical reactor core can't heat up at all. The ONE thing that can go wrong is that the ring gets stuck for some reason and stops falling- at which point it will simply stop making electricity.
Uh, no- it monitors itself and alerts you when something goes wrong. RTFA. Still, though, I agree with you- tidal energy or solar energy would be much more usefull- but both have limitations on where they can go, this doesn't.
Re:No boom, you will just scorch the paint
on
Port-A-Nuke
·
· Score: 2, Informative
Which is why the reactor plans call for a GPS unit that phones home if tampered with. RTFA.
Re:This is not really such a good idea..
on
Port-A-Nuke
·
· Score: 1
radiation that can penetrate any armor.
I call FUD on that one- we've got radiation suits already that can significantly reduce the risk, as well as silver nitrate based dosimeters that can give you a cheap and quick indicator of how much radiation you've recieved in a day.
The same thing can be acomplished with 100 smoke detectors and a block of C-4. Probably cheaper.
Re:You can hack anything.
on
Port-A-Nuke
·
· Score: 1
No more than the Winebiko requiring 100% success in dilligence- in other words, the dilligence is inside the reactor, not in somebody sitting in a room waiting for the signal. The damn thing will shreik an a wide variety of frequencies until you send a military unit to secure and bring it back to the United States for refurbishing.
Re:You can hack anything.
on
Port-A-Nuke
·
· Score: 1
Yep- I love computers that phone home when you try to hack them and let their owners know everything you're doing to hack them. I like it even better when they're in a tamper resistant case- so that they phone home the second one of the censors on the case indicates something strange is going on *before* you get in. This is physical security combined with BEHEMOTH Winebiko technology, tried, tested, and true. You could no more steal a BEHEMOTH bike and get away with it than you can tamper with one of these babies, because the damn thing phones home and lets the US Military know that you've hacked into it and are trying to use it for something other than what it was intended to do.
Re:On the next episode of Trading Spaces!
on
Port-A-Nuke
·
· Score: 2, Funny
Of course- if Doug picks this up, he'll match it with woven sheets of aluminum on the top and padded black rubber on the bottom, for that modern look...
People who have watched Trading Spaces will agree, we hate Doug.
People in Portland, OR who had Doug redesign their living room into a home theater, complete with suspended TV stand that fell off the ceiling a week later and destroyed their TV set REALLY hate Doug.
On the next episode of Trading Spaces!
on
Port-A-Nuke
·
· Score: 3, Interesting
Looking at the octopi at work and around home it seems my next house should have powerstrips along the walls, not just outlets.
Power Strip Wainscotting! I love it! I think I'm going to redo my home office with it!
I'm fine if the black box also gives driver feedback, both audio and visual. As in, beeps when you exceed the speed limit for the road you are on. It's amazing how my current navigation system works to keep me safe.
Me too- and our discussion led to an interesting solution to nuclear waste- using it to melt glaciers and generate electricity at the same time. Apparently, the problem is with the inert materials left over and even once you remove those, a small amount of highly concentrated radioactive material that needs to be disposed of. Disolve it into water, put it in a very thick tank (got to have lots of shielding) and put one end of the thermocouple into the water (which will stay 80C for decades). Put the other end into a glacier (which will stay 0C for decades), and you can get energy off of the temperature differential.
Slashdot Mirror
What you're really saying is, that your organization has over 400 applications that were written insecurely to begin with and were probably open to attack.
No, what I'm saying is that they use other forms of authentication than Microsoft WANTS us to use (and that some of them are using forms of authentication that Microsoft told us we could use that were taken away with Service Pack 2). In addition, we're behind a strong firewall to begin with- we damn well don't need a firewall on every freakin' desktop.
Nice for home users. It's going to be a real nightmare here at ODOT- we probably won't be able to roll SP2 out officially until February. Until then, we've sent out a mesage to all 4500 users not to install it, and set a group policy to turn off the firewall temporarily on personal laptops that connect to the network (whether brought from home or through RAS).
If your admins did what mine did- they set a group policy in Active Directory to shut off the firewall on any machine that some nimrod installs SP2 on accidentally.
That's one of the reasons why I have to use a test network for all of my SP2 testing.
That got me too. RPC & DCOM are understandible- the security on them is at a higher level than the firewall. NetBios & friends isn't understandible- and isn't true on the machine I'm testing with SP2.
Started back at the begining of last month on August 8th. OEMs had it before it was even avilable for download on MSDN.
There's a great deal more- I'd suggest you read up on the subject if you've got even one distant relative running XP relying on you for support. This was a HUGE update- on any 64-bit system it replaced most of the API and changed the behavior of DCOM, the firewall, Internet Explorer and more.
Good question- he seemed to have earlier in the summer. You can find this article and more that he's written since May at This search page I created on SP2 articles at ZDNet
My primary job function is slowly going away and being replaced with SP2 testing so right now I need to keep VERY informed on this subject. It seems to me most of the ZD Net staff were swept up in TCI hoopla- and wanted to test SP2 to see if it lived up to the hoopla.
That was the other bit- RPC and DCOM are ON after an SP2 install, because if you actually read the documents from Microsoft, under SP2 there's a whole new accessibility layer built into the DCOM Server that checks the registry to see if this COM component can really be activated by a remote procedure call- and the default setting is "Yes, but authentication required, no anonymous connections." I know this because we've got a lot of DCOM here, and for EACH component we're going to need a separate group policy setting in Active Directory to get it all to run right.
That's because it doesn't also re-optimize the whole damn API for a processor you probably don't own. I still can't believe I need to replace every damn dll in the API for a 64-bit AMD processor when I'm running on a Pentium III.....
To some extent the Reg Reporter was just FUDing- if you truly turned off everything that article said to turn off, you'd lose a lot of functionality.
Having said that- I was surprised by his port scan of a SP2 machine, since my own tests at ODOT showed NetBios inaccessible after SP2 install, killing the ability for SMS to see the machine (one of the reasons that I'm NOT allowed to do testing on the real network for SP2).
It was very likely a Freudian Slip with all of the DRM stuff going on, yes. I meant to say SENSORS...sounds the same but means entirely different.
Although, it's occured to me in the past that censors and weapons inspectors and the like should be armed with GPS laser range finders hooked up directly to Navy Destroyers that launch Tomahawk Cruise Missiles..."No, Ayotolah, I don't believe that is an Asprin Factory. Get everybody out of it now, because 30 minutes after I punch this button it's going to be a smoking hole in the ground".
In this case, the safety circuit is the control ring, without which this sub-critical reactor core can't heat up at all. The ONE thing that can go wrong is that the ring gets stuck for some reason and stops falling- at which point it will simply stop making electricity.
Uh, no- it monitors itself and alerts you when something goes wrong. RTFA. Still, though, I agree with you- tidal energy or solar energy would be much more usefull- but both have limitations on where they can go, this doesn't.
Which is why the reactor plans call for a GPS unit that phones home if tampered with. RTFA.
radiation that can penetrate any armor.
I call FUD on that one- we've got radiation suits already that can significantly reduce the risk, as well as silver nitrate based dosimeters that can give you a cheap and quick indicator of how much radiation you've recieved in a day.
The same thing can be acomplished with 100 smoke detectors and a block of C-4. Probably cheaper.
No more than the Winebiko requiring 100% success in dilligence- in other words, the dilligence is inside the reactor, not in somebody sitting in a room waiting for the signal. The damn thing will shreik an a wide variety of frequencies until you send a military unit to secure and bring it back to the United States for refurbishing.
Yep- I love computers that phone home when you try to hack them and let their owners know everything you're doing to hack them. I like it even better when they're in a tamper resistant case- so that they phone home the second one of the censors on the case indicates something strange is going on *before* you get in. This is physical security combined with BEHEMOTH Winebiko technology, tried, tested, and true. You could no more steal a BEHEMOTH bike and get away with it than you can tamper with one of these babies, because the damn thing phones home and lets the US Military know that you've hacked into it and are trying to use it for something other than what it was intended to do.
Of course- if Doug picks this up, he'll match it with woven sheets of aluminum on the top and padded black rubber on the bottom, for that modern look...
People who have watched Trading Spaces will agree, we hate Doug.
People in Portland, OR who had Doug redesign their living room into a home theater, complete with suspended TV stand that fell off the ceiling a week later and destroyed their TV set REALLY hate Doug.
Looking at the octopi at work and around home it seems my next house should have powerstrips along the walls, not just outlets.
Power Strip Wainscotting! I love it! I think I'm going to redo my home office with it!
Can Washington County, OR PUD be a beta tester?
OTOH- if Cold Fusion becomes possible, the waste Helium will be great for a revival of lighter-than-air cruise ships!
I'm fine if the black box also gives driver feedback, both audio and visual. As in, beeps when you exceed the speed limit for the road you are on. It's amazing how my current navigation system works to keep me safe.
Me too- and our discussion led to an interesting solution to nuclear waste- using it to melt glaciers and generate electricity at the same time. Apparently, the problem is with the inert materials left over and even once you remove those, a small amount of highly concentrated radioactive material that needs to be disposed of. Disolve it into water, put it in a very thick tank (got to have lots of shielding) and put one end of the thermocouple into the water (which will stay 80C for decades). Put the other end into a glacier (which will stay 0C for decades), and you can get energy off of the temperature differential.
Hate to disillusion you- but most kids under the age of six can't read AT ALL.