Slashdot Mirror


User: bl8n8r

bl8n8r's activity in the archive.

Stories
0
Comments
925
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 925

  1. Where did Wales blow the $4 mil already? on Should Wikipedia Just Accept Ads Already? · · Score: 1

    $2 meg. from Ebay founder
    $2 meg. from google

    Where'd it blow^H^H go? Seems like 4 million should be enough to last a while.  They're not doing DARPA research for chrissakes.

  2. Not a sustainable practice on JBI's Plastic To Oil Gets Operating Permit · · Score: 2

    The point is, we can't keep burning fossil fuels at the rate we have been for the last 110 years.  The Carbon, Methane and other environmentally detrimental byproducts released when fossil fuels burn is a bigger problem than running out of oil. 

  3. sifting through the database on Sheriff's Online Database Leaks Info On Informants · · Score: 1

    Is cop-speak for damage control.

  4. possible cause of failure on Amazon Says Hardware, Not Hackers, Caused Outage · · Score: 4, Insightful

    Load from the DDoS traffic fried the switch.  So you see, it's a hardware failure.

  5. amazon unscathed? on WikiLeaks Defenders Threaten Amazon · · Score: 1

    As of 11:00 am amazon seems to load quite quickly, slashdot on the other hand...

  6. Typical love triangle on Wikileaks Founder Arrested In London · · Score: 0

    Sounds like the typical love triangle to me.  Everyone was all yeah and happy until the women started scheming. Sorry but that's pretty typical outcome in my experience.

  7. Implement better IDS on ProFTPD.org Compromised, Backdoor Distributed · · Score: 1

    Anyone with an internet facing anything should be doing (better) intrusion detection. It doesn't need to be expensive and doesn't need to be fancy.  I ran an ftp box for over 10 years and we had some simple, automated processes to detect attacks.  The box took a lot of flack but never got cracked and we could prove it.  You know your security is working when you can *prove* it's working.  "Set-and-forget" isn't a secure option.

    1) (md5|sha1)sum everything on the box. (eg: find / -exec md5sum '{}' \; > /tmp/md5.txt )
    Save it on your internal lan. Nightly, allow a box from your lan to ssh into the server to re-create the list and compare them. It will be a short list because you've certainly removed all unnecessary software from the box.  This will tell you what files have changed,rooted,trojaned.  For extra security burn the binaries on a cdrom and stick it on the server.  create the list using r/o binaries in case they themselves get hacked. (eg: ssh server '/mnt/cdrom/find / -exec /mnt/cdrom/md5sum ...')

    2) scan messages logs hourly from cron
    Look for attacks (eg: Invalid login from alicia, .. from alex, .. from albert, etc). Usually, people don't make one connection and crack your server.  It takes some probing and guesswork first and I've seen dictionary attacks last for an entire week before the attacker gives up. This is where you should be catching the attack - at the probe stage.  (eg: fgrep 'session opened for user' /var/log/auth.log)

    3) watch your firewall logs
    connection attempts for services you do not host on the box are cause for notice. Repeated connections for port 22, on a server you do not host ssh on, should be prime candidates for the bitbucket on the firewall. (eg: iptables -A INPUT -p tcp --dport 22 -m limit --limit 4/min --limit-burst 4 -j LOG --log-prefix "SSH_INGRESS: ")

       

  8. Re:Why do we keep talking about her? on Sarah Palin 'Target WikiLeaks Like Taliban' · · Score: 1

    > why the hell does the media pay so much attention to her?

    Because most of the media is more interested in ratings and drama than they are in reporting facts.  The majority of people are addicted to to this kind of crap too so it gives the media a clear and easy target audience. 

  9. Coming from an expert on 'Fail' on Microsoft Ups Online War, Says Google's 'Failing' · · Score: 1

    pot kettle black

  10. Titan seems plausible on Curious NASA Pre-Announcement · · Score: 5, Informative

    "NASA believes it has found vital clues that alien life does indeed exist on Titan, "
    http://news.gather.com/viewArticle.action?articleId=281474978743812

  11. Better explanation: condensation on Earth's Water Didn't Come From Outer Space · · Score: 1

    Early on when the earth was just starting out, there was all sorts of rocks, dust, planetoids and other debris floating around the solar system. As stuff slammed into the earth, it's mass increased. It "sucked in" more and more debris which gave it more mass: omnomnomnom > more mass > omnomnomnom > more mass... etc, etc.  The frequency of and size of debris constantly pummeling the earth  created an immense amount of heat.  The heat created a bubbling lava-like ooze that covered the planet. Eventually, the supply of nearby debris was exhausted and the ooze started to cool.  As it cooled, steam and vapor condensed into clouds and finally rain.  The falling rain cooled the earth more, which created more condensation, which created more rain.. etc, etc.

    It's intriguing to think of the heating and cooling process as a recursive function :)

  12. if you're going to talk bisphenol A... on Being Too Clean Can Make People Sick · · Score: 2, Informative

    Then don't forget phthalates, sunscreen and many more products. It makes no damn logical sense to complain about hand soap when you can basically get the same results from sunscreen or plastic (or plastic-lined) water bottles.  This crap is in so many products that hand soap is only the tip of the iceberg.

    http://en.wikipedia.org/wiki/Phthalate
    http://www.ewg.org/2010sunscreen/9-surprising-facts-about-sunscreen/
    http://www.kk.org/cooltools/archives/001616.php

  13. Re:Apple getting desperate? on Apple Bans Android Magazine App From App Store · · Score: 1

    > Is Apple that insecure that it can't allow a stupid app like this onto its platform?

    Apple is ubiquitous right now; they don't care about insecurity. They are more concerned with keeping the competition from somehow establishing a presence in their product-line.  It's not very good capitalism etiquette to allow that.

  14. that's the price of popularity on Apple, Microsoft, Google Attacked For Evil Plugins · · Score: 2, Insightful

    when you have 300 jillion people using your product, you can afford not to care.  No it's not fair, but that's capitalism.

  15. microsoft is a bad omen for windows on New Windows Kernel Vulnerability Bypasses UAC · · Score: 1, Offtopic

    Can't we just say "uncle" and start over with something else?  I'd give anything to be rid of Exchange and Active Directory.

  16. ssh tunnel on SSL Certificates For Intranet Sites? · · Score: 0, Troll

    ssh -L 8888:localhost:80 frooboz@appliance.onmylan.net
    firefox http://localhost:8888/

    You *are* buying only *nix based appliances, right?

  17. typo in tfa on Russia To Help NATO Build Anti-Missile Network · · Score: 1, Funny

    they spelled China as 'elsewhere'.

  18. IODP Drilling sponsored by BP, Big Oil et. al on Life Found In Deepest Layer of Earth's Crust · · Score: 1

    How is it these guys can be drilling again?

    "...Tom Wilson and the entire Shell organization bent over backward to release seismic, well, drilling, and geotechnical data. Shell employees generously shared their time to help design a safe and effective drilling program. The scientists, engineers, and lawyers of Shell, Amerada Hess, and British Petroleum worked together to achieve scientific drilling within industry lease blocks."

    http://publications.iodp.org/proceedings/308/acknow.htm

  19. sudo -u lamer /usr/local/Adobe/bin/acroread on Adobe Launches Sandboxed Reader X · · Score: 1

    Run acrobat as another user using sudo.  This will contain future exploits to "lamer's" home directory instead of relying on Adobe to protect you.   I fully expect Adobe's sandbox implementation to be as dismal as their security track-record.

  20. Re:Embarassing? on Internet Explorer 9 Caught Cheating In SunSpider · · Score: 4, Funny

    > And their 10-Q definitely indicates that they're not losing money.

    Microsoft added 'optimization' for the 10-Q results as well.

  21. Re:Confused. on UK Minister Backs 'Two-Speed' Internet · · Score: 1

    > where is someone not getting paid in this?

    It's not really about "not" getting paid, so much as it is about creating a way to control and capitalize on the technology; to the point it becomes useless of course with the latter being the ultimate endgame.   It's in the same boat as DRM. And the RIAA at the helm.

  22. Re:PEBKAC on Web-Users Fall For Fake Anti-Virus Scams · · Score: 1

    All kidding aside, a lot of web based malware does do an incredibly good job of mimicking windows file manager and/or windows pop-ups. It's not fair to say a user is a lamer because they clicked something - especially when pop-ups are so frigging commonplace in desktop environments.

    EULAS, errors, inane install programs, they all want the user to read and click 10 times and it's friggin annoying. People just click to make it go away and don't even bother to read it. Hallf the time the dialogs are undecipherable ('blah cause a general protect fault'.. etc); this means nothing to the average user except maybe 'I hurled so restart something'.

    If you want to crusade against something, blame microsoft. They are the ones allowing maware to propogate so readily; they could stop it if they wanted to but they don't.

  23. f00f bug on Research Inches Toward Processor-Specific Malware · · Score: 1

    Just like on the Pentiums http://en.wikipedia.org/wiki/F00f

  24. impact on the environment on Factory To Make Biodiesel From Chicken Fat · · Score: 1

    I'm not a vegetarian so not too worried about the air smelling like fried chicken, but I'll bet if that's all you could smell any time you walked outside you would get sick of it. I would be more concerned about the impact this would have on Tyson land use, run-off, and disease control (antibiotics). It's already pretty f#cked up.

  25. this is why monopolies suck on Despite FTC Settlement, Intel Can Ship Oak Trail Without PCIe · · Score: 1

    Imagine a world without AMD, cyrix, Nvidia or other chip manufacturers. There would be no market or competition to face Intel and the company could force you to run whatever they wanted. I mean, a lot like it is now, but more so. As a consumer, figure out how to support the competition equally or there won't be any.