redhat certs tend to train one to do everything the "redhat recommended way"...
Kind of like Microsoft trainning teaches you how to use their products in the reccommended Microsoft way. Kind of like Novell trainning teaches you how to use their products in the approved Novell way. Kind of like Cisco training teaches you how to use hteir products in the approved Cisco way.
This is normal for all trainning. Any good sysadmin should be well rounded enough to take all of the specifice conventions that are taught and be able to apply them to their entire skill set.
I'm not a very savy website admin, but AFAIK if you configure Apache to execute cgi-bin scripts, does it not run it as whatever user Apache is running as, and would you not set that users default shell to/bin/false?
There are exceptions to every rule, but 9 chances out of 10 you will find accounts that have shell access that do not require it. If you remove shell access for the accounts that do not require it, and then lockdown all accounts that do through sound policies and vigilant monitoring (which any good SysAdmin should be doing), you should be able to greatly reduce the odds of this exploit being taken advantage of. You got to remeber, the only secure computer (no matter what the OS), is one that is turned off and never used.
Actually the best way to avoid this exploit is to remove shell access for all accounts except for the Administrator and root. If someone gains access to those accounts, it doesn't matter about the exploit, because your b0x3n is alreadey 0wn3d.
You use the tool that is best for the job, e.g. a large sprayer.
You are right, but if that sprayer is weighed down and bloated with more gadgets, handles, nozzles, etc. to the point where you can barely lift it, then I would gladly take the paint brush.
The profession is potentially lethal. You may take home something other than pay...
...and sysadmins don't. Hell my job has made me take home, high blood preasure, ulcers, and carple tunnel (yeah I know the last one is not lethal, but niether is herpes.)
This would explain why Bob, our Sysadmin was in our wiring closet whereing a loin cloth, wolf's head hat, and shacking some buffalo bones at my racks of cables. One day I asked him, "What in the hell are you doing in there dressed like that?" and when he stopped his ritualistic dance and song, all of a sudden we were exceeding our collision domain, the UPS's started beeping, our backups were failing, the Internet router failed, and flames were shooting out of the patch panels! Then he looked at me and said "Do you understand now? I am the Shamanistrator"
That's not true. I had an IBM stinkpad with 64MB of memeory and a 10 GB HD, running W2K. The drive was formatted NTFS. I used Partition magic to create a linux swap partition so I could run KDE. Once Knoppix was booted, I was able to mount, read and write to the NTFS partition. I think you might want to try using the distro, before you start talking about how it works. Try the forums, they are quite informative on how to do things.
Well God forbidden, that a person actually learn something new. How about if they read the manual, and actually learn that there are more than just the 3 features they are looking for. Hell they might even learn about some of the other features that would make them more effcient and enhance their user experience. That's seems to be most peoples problems, sequential searches are perceived to be costly. They are only costly, if you spend the time and do not learn anything from it. Hell if just 10% of my lusers were to learn how to use one function properly by reading the manuals, the amount of time saved in my wasted labor would be enormous. Not to mention, if the user becomes more efficient, then eventually the time saved from said efficiency would recoup the initial cost of reading the entire manual. You can't make money without spending money.
That would be a great idea, but now I have to draft the document, go to review meetings to review the draft, make changes to the draft, finalize the draft, and finally distribute the document to all of my users (To be PC, I can't just single her out). Now that all of my lusers have a copy, now they all will be contacting me stupid keyboard problems because they misinterpret the information outlined in the document. This will generate more work that needs to be prioritized and dealt with, which will lead to more stress.
I could actually go to a movie, a park, or a religious service without being called. Sure, its nice to be able to sit on hold with AAA if my car dies on the highway, but I could do with being a little less accessible the rest of the time....
If more people actual read the manual first, then they would already know how to make this tiny change, therefore reducing their stress level. RTFM!! I'm sick and tired of people treating their computers like television sets. Everyone takes the manuals and places them on their book shelves for decoration without ever reading them. Then they turn the PC on and actaully expect it to "just work", like a TV. Turn it on, and the dumb device automagically does all of my work, and when it doesn't, I call the "computer guy" to come fix it. Unfortunately I can't fix RTFM problems. If people were to actually read the manuals first, they might understand that it is actually a complex device that requires some understanding of how it will process your requests to produce the desired results.
Wow, I read your post and felt stressed, does that mean I technology caused it, or do we need to perform a study on stress being related to/.
See my post above. You definetily hit the nail on the head. Even though my post above was meant to be rather comical(And yes it was a real tech support call!!), IMHO situations like that one happen frequently everywhere. Small things that get blow out of porpotion cause stress for multiple people. My user was so stressed by the fact that she could not read her email at her workstation, caused her boss, my boss, and myself undue stress. The computer and email did not cause the stress for everyone. The fact that she did not how to check her email any other way, and could not cope with that, caused a chain reaction of stress for multiple people. The technology was not the problem, her ability to cope with the situation was.
You are correct. Technolgy does not cause stress, people do. I have the coolest geek job in the worl, where I can play with technology all day, but then the phone rings. It ususally some stupid users, with a stupid problem. For example:
(Actual event) Users: Fubar1971, did you steal my keyboard? Fubar1971: No, if I was to REPLACE your keyboard, I would have left you a better one to use. User: Someone stole my keyboard, are you sure it was not you? Fubar1971: No, I did not take your keyboard. User: Well I need a new keyboard then. Fubar: OK, I will be in your office in 5 minutes
4 minutes and 30 seconds later User is no where to be found, and the office is locked
30 minutes later after asking every person except the All MIGHTY himself to let me into the office, I go back to the tech department.
Phone rings
Fubar1971: Hello? User: I thought you were going to give me a new keyboard? Fubar1971: I tried, but you locked up your office and could not be found. User: Well I figured since I couldn't use my computer I would go to lunch. Fubar197: Well how am I suppose to replace your keyboard when you lock your office and nobody has a key? User: Oh, I didn't think of that. Well I'm here now, can you come down and install my new keyboard now? Fubar1971: Well, I'm in the middle of something right now, (Setting up new linux email server), but I can be there in about an hour. User: HOUR!!!! I need to check my email. This is totally unacceptable Fubar1971: I'm sorry, but that is the best I can do. You can always check your email from another workstation, or try using the internal web interface.... User:HANGUP
5 minutes later Phone Rings
Fubar1971:Hello? Fubar1971's BOSS:Foo, what the hell, I just got an irrate phone call from User's boss that you refuse to install a keyboard. Fubar1971: No, I tried to this morning, but the user locked the office and went to lunch. When they returned, I was in the middle of installing the new email server and instructed them I would be there in an hour and they should try using a different workstation until I get there. Fubar1971's BOSS: Well they are pretty p*ssed, I need you to go down there and take care of it now. Fubar1971: What about the email server? Fubar1971's BOSS: You'll have to stay late and get it done afterhours. Fubar1971: Fine
Fubar1971 goes back to the office to install the keyboard
User: It's about time Fubar1971:silence User: See, my keyboard is missing, I still think you took it Fubar1971: NO, I DID NOT TAKE YOUR KEYBOARD!!
Fubar1971 pulls the keyboard drawer out to feed the keyboard cable through to the computer, and what does he find... THE KEYBOARD!!
Fubar1971: Is this your keyboard User: Why yes, how did you find it? Fubar1971: All I did was pull your keyboard drawer out. User: Well, why was my keyboard drawer closed? Did you close my keyboard drawer? Fubar1971: Have a nice day
And did anyone apologize for wasting my time, NO. Did anyone apologize for making me stay late to get the email server up and running, NO. The technology does not cause stress, just stupid users!!!
At my place of employment we began receiving this virus on January 19th. I checked my AV software, and received the updates on January 18th. I am currently running Symantec Corp. Ed. I have successfully detected, stopped, and removed 95 copies of this virus within 1 day. What version of symantec are you running? If I were you, I would definetily check your Def dates, and how often you are updating them.
The FBI who has to deal with Tons of paper work to even start spying on you then needs to make a strong case that you are a criminal, worthy of prosecution....
This is not necisarilly true. If the FBI wants, they can use the Patriot Act (where applicable, which is almost everywhere), to spy on you with out obtaining a warrant.
Now the FBI neither has the Manpower or the money to monitor everyone on earth or even the USA or Even New York.
This is of course why the Patriot Act gives the Feds there new powers. Of course the counter to that argument, is...
Now the FBI neither has the Manpower or the money to monitor everyone on earth or even the USA or Even New York.
You'll take my porn when you pry it from my cold, dead, sticky fingers
:P
That would make a good sig, but I don't have time to change it. I'm watching pr0n
redhat certs tend to train one to do everything the "redhat recommended way"...
Kind of like Microsoft trainning teaches you how to use their products in the reccommended Microsoft way. Kind of like Novell trainning teaches you how to use their products in the approved Novell way. Kind of like Cisco training teaches you how to use hteir products in the approved Cisco way.
This is normal for all trainning. Any good sysadmin should be well rounded enough to take all of the specifice conventions that are taught and be able to apply them to their entire skill set.
The poster can't add the link. This is the slashdot page, not Frontpage. HTML tags, what's that?
I'm not a very savy website admin, but AFAIK if you configure Apache to execute cgi-bin scripts, does it not run it as whatever user Apache is running as, and would you not set that users default shell to /bin/false?
There are exceptions to every rule, but 9 chances out of 10 you will find accounts that have shell access that do not require it. If you remove shell access for the accounts that do not require it, and then lockdown all accounts that do through sound policies and vigilant monitoring (which any good SysAdmin should be doing), you should be able to greatly reduce the odds of this exploit being taken advantage of. You got to remeber, the only secure computer (no matter what the OS), is one that is turned off and never used.
Actually the best way to avoid this exploit is to remove shell access for all accounts except for the Administrator and root. If someone gains access to those accounts, it doesn't matter about the exploit, because your b0x3n is alreadey 0wn3d.
You use the tool that is best for the job, e.g. a large sprayer.
You are right, but if that sprayer is weighed down and bloated with more gadgets, handles, nozzles, etc. to the point where you can barely lift it, then I would gladly take the paint brush.
The profession is potentially lethal. You may take home something other than pay...
...and sysadmins don't. Hell my job has made me take home, high blood preasure, ulcers, and carple tunnel (yeah I know the last one is not lethal, but niether is herpes.)
This would explain why Bob, our Sysadmin was in our wiring closet whereing a loin cloth, wolf's head hat, and shacking some buffalo bones at my racks of cables. One day I asked him, "What in the hell are you doing in there dressed like that?" and when he stopped his ritualistic dance and song, all of a sudden we were exceeding our collision domain, the UPS's started beeping, our backups were failing, the Internet router failed, and flames were shooting out of the patch panels! Then he looked at me and said "Do you understand now? I am the Shamanistrator"
That's not true. I had an IBM stinkpad with 64MB of memeory and a 10 GB HD, running W2K. The drive was formatted NTFS. I used Partition magic to create a linux swap partition so I could run KDE. Once Knoppix was booted, I was able to mount, read and write to the NTFS partition. I think you might want to try using the distro, before you start talking about how it works. Try the forums, they are quite informative on how to do things.
I have been preaching that for years. I always say that there are only 3 steps to making a computer 100% secure:
1. Turn it Off
2. Unplug all of the connections
3. make sure it is Un-manned
Unfortunatelly this just is not practical, but is th only certain gaurantee to 100% security.
....so no it doesn't use any swap
It does if you don't have the minimum memory requirements.
From the knoppix website
"20 MB of RAM for text mode, at least 96 MB for graphics mode with KDE (at least 128 MB of RAM is recommended to use the various office products),_"
Not to mention, you can still mount your local drive and store data on it.
hmm seems like a whole lot of touching going on....
Why read about 100 features when you only want 3?
Well God forbidden, that a person actually learn something new. How about if they read the manual, and actually learn that there are more than just the 3 features they are looking for. Hell they might even learn about some of the other features that would make them more effcient and enhance their user experience. That's seems to be most peoples problems, sequential searches are perceived to be costly. They are only costly, if you spend the time and do not learn anything from it. Hell if just 10% of my lusers were to learn how to use one function properly by reading the manuals, the amount of time saved in my wasted labor would be enormous. Not to mention, if the user becomes more efficient, then eventually the time saved from said efficiency would recoup the initial cost of reading the entire manual. You can't make money without spending money.
That would be a great idea, but now I have to draft the document, go to review meetings to review the draft, make changes to the draft, finalize the draft, and finally distribute the document to all of my users (To be PC, I can't just single her out). Now that all of my lusers have a copy, now they all will be contacting me stupid keyboard problems because they misinterpret the information outlined in the document. This will generate more work that needs to be prioritized and dealt with, which will lead to more stress.
PREACH IT MY BROTHER!!!!!!
Jeezus, you plugged a 6 in cast iron pipe! Try eating more fiber!!!
I could actually go to a movie, a park, or a religious service without being called. Sure, its nice to be able to sit on hold with AAA if my car dies on the highway, but I could do with being a little less accessible the rest of the time....
Try the off switch. It works for me.
You may have to read an entire manual...
/.
If more people actual read the manual first, then they would already know how to make this tiny change, therefore reducing their stress level. RTFM!! I'm sick and tired of people treating their computers like television sets. Everyone takes the manuals and places them on their book shelves for decoration without ever reading them. Then they turn the PC on and actaully expect it to "just work", like a TV. Turn it on, and the dumb device automagically does all of my work, and when it doesn't, I call the "computer guy" to come fix it. Unfortunately I can't fix RTFM problems. If people were to actually read the manuals first, they might understand that it is actually a complex device that requires some understanding of how it will process your requests to produce the desired results.
Wow, I read your post and felt stressed, does that mean I technology caused it, or do we need to perform a study on stress being related to
See my post above. You definetily hit the nail on the head. Even though my post above was meant to be rather comical(And yes it was a real tech support call!!), IMHO situations like that one happen frequently everywhere. Small things that get blow out of porpotion cause stress for multiple people. My user was so stressed by the fact that she could not read her email at her workstation, caused her boss, my boss, and myself undue stress. The computer and email did not cause the stress for everyone. The fact that she did not how to check her email any other way, and could not cope with that, caused a chain reaction of stress for multiple people. The technology was not the problem, her ability to cope with the situation was.
BOFH...What other people's technology related stress will do to you if you work in the IT field.
:)
BOFH official Archive for the noobs out their
don't see how technology can cause stress.
You are correct. Technolgy does not cause stress, people do. I have the coolest geek job in the worl, where I can play with technology all day, but then the phone rings. It ususally some stupid users, with a stupid problem. For example:
(Actual event)
Users: Fubar1971, did you steal my keyboard?
Fubar1971: No, if I was to REPLACE your keyboard, I would have left you a better one to use.
User: Someone stole my keyboard, are you sure it was not you?
Fubar1971: No, I did not take your keyboard.
User: Well I need a new keyboard then.
Fubar: OK, I will be in your office in 5 minutes
4 minutes and 30 seconds later
User is no where to be found, and the office is locked
30 minutes later after asking every person except the All MIGHTY himself to let me into the office, I go back to the tech department.
Phone rings
Fubar1971: Hello?
User: I thought you were going to give me a new keyboard?
Fubar1971: I tried, but you locked up your office and could not be found.
User: Well I figured since I couldn't use my computer I would go to lunch.
Fubar197: Well how am I suppose to replace your keyboard when you lock your office and nobody has a key?
User: Oh, I didn't think of that. Well I'm here now, can you come down and install my new keyboard now?
Fubar1971: Well, I'm in the middle of something right now, (Setting up new linux email server), but I can be there in about an hour.
User: HOUR!!!! I need to check my email. This is totally unacceptable
Fubar1971: I'm sorry, but that is the best I can do. You can always check your email from another workstation, or try using the internal web interface....
User:HANGUP
5 minutes later
Phone Rings
Fubar1971:Hello?
Fubar1971's BOSS:Foo, what the hell, I just got an irrate phone call from User's boss that you refuse to install a keyboard.
Fubar1971: No, I tried to this morning, but the user locked the office and went to lunch. When they returned, I was in the middle of installing the new email server and instructed them I would be there in an hour and they should try using a different workstation until I get there.
Fubar1971's BOSS: Well they are pretty p*ssed, I need you to go down there and take care of it now.
Fubar1971: What about the email server?
Fubar1971's BOSS: You'll have to stay late and get it done afterhours.
Fubar1971: Fine
Fubar1971 goes back to the office to install the keyboard
User: It's about time
Fubar1971: silence
User: See, my keyboard is missing, I still think you took it
Fubar1971: NO, I DID NOT TAKE YOUR KEYBOARD!!
Fubar1971 pulls the keyboard drawer out to feed the keyboard cable through to the computer, and what does he find... THE KEYBOARD!!
Fubar1971: Is this your keyboard
User: Why yes, how did you find it?
Fubar1971: All I did was pull your keyboard drawer out.
User: Well, why was my keyboard drawer closed? Did you close my keyboard drawer?
Fubar1971: Have a nice day
And did anyone apologize for wasting my time, NO. Did anyone apologize for making me stay late to get the email server up and running, NO. The technology does not cause stress, just stupid users!!!
At my place of employment we began receiving this virus on January 19th. I checked my AV software, and received the updates on January 18th. I am currently running Symantec Corp. Ed. I have successfully detected, stopped, and removed 95 copies of this virus within 1 day. What version of symantec are you running? If I were you, I would definetily check your Def dates, and how often you are updating them.
Oops that is suppose to be Title V not IV :P
Go read Title IV
The FBI who has to deal with Tons of paper work to even start spying on you then needs to make a strong case that you are a criminal, worthy of prosecution....
:)
This is not necisarilly true. If the FBI wants, they can use the Patriot Act (where applicable, which is almost everywhere), to spy on you with out obtaining a warrant.
Now the FBI neither has the Manpower or the money to monitor everyone on earth or even the USA or Even New York.
This is of course why the Patriot Act gives the Feds there new powers. Of course the counter to that argument, is...
Now the FBI neither has the Manpower or the money to monitor everyone on earth or even the USA or Even New York.
Oh well, at least that caught a scum bag