Slashdot Mirror


User: maximilln

maximilln's activity in the archive.

Stories
0
Comments
1,736
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 1,736

  1. Re:To be fair to Microsoft on The Cost of Computer Naivete · · Score: 1


    Good thing a normal user can't rename/move svchost.exe and replace it with something which has been modified.
    </humor>

    I just tried it. It's particularly useful since "System" and "svchost.exe" seem to be catchall processes which handle half the listening network connections.

    Now, if I tried to rename or move ssh, or ftpd, or smbd on Debian as a normal user I probably wouldn't be able to do that.

  2. Re:To be fair to Microsoft on The Cost of Computer Naivete · · Score: 1

    And don't ever try killing all svchost instances or your clipboard may go missing...

    I was thinking more about killing the "System" process since it has the most listening ports that I don't recognize.

    Granted, this is the work machine, so it's probably just the IT admin-spyware. :-)

  3. Re:To be fair to Microsoft on The Cost of Computer Naivete · · Score: 1

    And I think XP and W2k3 has the -O option (or -o, i can't remember) that allows a PID to be reported also

    Alright, through a clumsy implementation of the task manager and netstat -o I can track PIDs of network connections to processes. Now we're addressing the obscurity of Windows in that half of the connections are assigned to process "System" and process "svchost.exe".

    On a typical *NIX system I can tell you exactly what each and every network connection is doing and what it's legitimate uses are. If I don't know I can type "man ".

    I guess we just hope that a trojan or malware never decides to attach itself to "System" or "svchost.exe", huh?

  4. Re:To be fair to Microsoft on The Cost of Computer Naivete · · Score: 1

    it's netstat -b instead

    netstat /? doesn't show any -b here (WinXP Pro) and netstat -b just gives a summary of command options.

  5. Re:To be fair to Microsoft on The Cost of Computer Naivete · · Score: 2, Informative

    Both 2000 and XP have a command line application called netstat - I'd have thought it imitates the GNU netstat...? It certainly was useful to me a couple of times

    It's pretty useless without process tracking. Sure I can see all the connections, so is that connection to that odd numerical IP from the latest banner ad/popup or is that a trojan?

    Right now, as I look at the netstat list (-a 1), I see about 12 entries that I can't identify and I have no chance of ever tracking what on the system is causing them.

    Netstat never shows any connections when I use Wordpad.exe, but the TCP and IP byte counts both go up.

  6. Re:To be fair to Microsoft on The Cost of Computer Naivete · · Score: 1, Flamebait

    2000 and XP have netstat. A five-second check would save you from looking like a pro linux homeboi

    Oh yeah? And where's the PID tracking so that you know which applications are making those connections?

  7. Re:The fact is... on The Cost of Computer Naivete · · Score: 1

    It's now a major pain to install a windows system from scratch, using the original CD

    It's even worse with MS selling "upgrade CDs". I recently helped a colleague with a Gateway. Install Win98 (first edition!) to find out that it can't be upgraded to WinXP. Then try to upgrade it to Win98SE to find out that it can't be upgraded. So install Win98SE (from _MY_ CD) so that I can install they're WinXP.

    UGH! The headache. It took about 10 hours... especially since his daughters had 3 gb mp3 libraries which just _HAD_ to be saved.

  8. Re:Bull on The Cost of Computer Naivete · · Score: 1

    Firstly, installing "everything" on a machine, including Office and other big application suites, on a 400MHz machine, with (very likely) a slow HDD, will take ages.

    Win98, Norton AV/Firewall (with full updates), O2k Pro, Photoshop, plus network configuration including ICS on both a PII/400 and a K6-3/400 with WD or SeaGate HDs (5400 and 7200)... about 3 hours.

    Debian Sid (0-day) on same systems with same functionality (samba, ICS, reasonable WM settings)... also about 3 hours.

    And what if those are lost, and repairing is the only option?

    That's when you make use of your real skills and find keygens. Repairing is never the only option and it is rarely an option even worth bothering with. Windows explicitly tries to preserve broken/compromised components with bubble-gum and duct tape. That .dll that's newer than the version you're trying to install--is that newer because of the updated driver or is it newer because of virus? Then, if you take the safe route and replace it, you find yourself in IRQ hell where you have to uninstall (and physically remove) every piece of hardware and add them back in, one at a time, updating the drivers as you go. It's just not even funny.

    Reformat and reinstallation is the logical way to go, preferably with a zero-fill over the first 1024 cylinders.

  9. Re:To be fair to Microsoft on The Cost of Computer Naivete · · Score: 2, Interesting

    Not if the person who hacked your box knows what they are doing

    That's lacking proper perspective. I know of only a few dozen people who could successfully deceive ps and netstat at will, and all of them have far more important things to do. I know of many other people who probably have the skill to do it but have no interest in poring over the source code to actually figure it out. Then there's the matter of writing a properly deceived edition, compiling it, and placing it on the victim's machine. Script kiddies use rootkits, which are typically kernel modules, and most Linux enthusiasts will switch their kernel once or twice a year which would require that the kmod be recompiled.

    I'd say the single best thing to do is watch netstat. Of course, doing this had me infuriated one time when gconfd was hosting a remote network connection. Even after several hours of looking through Gnome documentation I had no reason why this would have been happening.

    Ironically, Windows, even 2k or Me, do not have a program which is as neat and tidy as netstat. I don't know if this is by design or by idiocy, but the best thing you can do is set the network monitor to look at total traffic incoming and outgoing (IP and TCP byte count). When I did this I noticed that both IP and TCP byte counts would go up even if I launched Wordpad.exe and started typing. I didn't want to get too paranoid so I turned it off.

  10. Neatly illustrated on The Cost of Computer Naivete · · Score: 4, Interesting

    I finally decided to install Apache. I had been running an ftpd for a long time to transfer files between home/work/family/friends but so many of them began asking for me to appeal to the least common denominator that I finally did the apt-get install apache. Honestly speaking it was the easiest fileserver I've ever set up. Granted I didn't look into authentication or restricting access yet. I simply wanted to install it and offer files. In terms of basic functionality apache was much easier to achieve liftoff than ftpd or samba.

    Here's the rub that fits with this article: Apache was not up and running for more than 2 hours before I had 3 IP addresses, two of them on my own ISPs /24, poking around for overflow vulnerabilities by sending SEARCH and GET requests with more than 8190 bytes.

    Why can't these script kiddies be stopped? It is obvious what the intent was.

  11. Re:Vested Interests on U.S. Cancels Fusion Program · · Score: 1

    Oh, we really have some bargaining power now, don't we? What "we" do you mean by the way?

    Of course you raise a fine point. The average American citizen is still screwed. The Federal Government is going to continue to tax us for all we're worth until the Federal Reserve dismisses the debt owed to them. Since that will never happen then the Federal Reserve and the largest corporations will continue to profit through the elaborate money-laundering scheme called the stock market.

    I wasn't indicating that "we" as a nation have any bargaining power. It's pretty clear that the only things that really matter are controlling business interests. What I was mostly commenting on was the common quips about Bush "wanting the oil". It's not that Bush and Associates, LLC, et. al., Inc., International wanted the oil. They wanted a way in which to divest themselves of the oil. With OPEC controlling such huge streams of financing through their unlimited stranglehold on the oil market it was almost impossible to convince any other large corporations to move away from suckling at the OPEC teat.

    By invading Iraq and showing OPEC that we will force our politics and our puppets onto them we have given our multinational business interests a beginning wedge with which to influence how OPEC funnels the stream of neverending oil money.

  12. Re:Vested Interests on U.S. Cancels Fusion Program · · Score: 2, Insightful

    You might be right, but remember there's really no such thing as an oil company. There are only energy companies

    Precisely. GW Bush didn't invade Iraq because he wanted the oil. The financial movers and shakers in this nation needed an excuse to drive an American wedge into OPEC. OPEC has had a stranglehold on the US for decades and it wasn't getting any better. The only way that the US could ever break the controlling hold of OPEC was to physical invade their territory. If OPEC had been allowed to continue their trend then their money, money which came from sale of oil, would never be spent on alternative research. By putting an American political wedge into the Middle East we can finally hold some real bargaining power when it comes time to decide where the trillions of dollars in oil revenue get parceled out.

  13. Re:What is the Fed? Everyone is very off base on Federal Reserve To Use Internet For Money Transfer · · Score: 1

    the entire idea behind capitalism is that humans have labor
    the other end of the one-dimensional line of this thinking is socialism/communism

    Okay, even say for a moment that you are thinking about what you type everything should be obvious to you as of this next remark:

    as it is now capitalistic systems are heavily regulated

    And a system of capitalism with unending government rules and regulations is known as: communism.

    Quit blaming everything on capitalism. It is natural for men to want to increase their holdings, whether it be money, or chickens, or land, or anything. The real issue here is the enormous system of governmental loopholes which require legal budgets and enormous teams of lawyers to exploit. It is not capitalism that favors those who are already wealthy but rather the enormous legal obstacle course which costs money at every turn.

    I am aware that fits these criteria are the primitive ones, where everything is kept small and local, and often such communities could not be smaller without compromising long-term self-sufficiency. Corruption and other abuses are kept to a minimum

    Primitive has such bad connotations. Dare we say "libertarian" for fear of being ostricized? I agree, the only real choice is to try and MINIMIZE corruption and abuse. In reality, however, big government is unbeatable and big industry is no less a formidable opponent.

    We're just screwed.

  14. Re:Progressive taxes are worse than regular ones on Pay To Have Your Phone Tapped · · Score: 1

    Nonsense. Political power and the government is NOT in the hands of "the wealthy classes". Political power is squarely in the hands of ALL the people

    Pass the crack pipe, please.

    What rock do you live under? And how did you get to be so susceptible to lip service? You know, the kind where people tell you what you want to hear just so you'll go back to working, paying taxes, and not asking any difficult questions?

  15. Re:What is this? on Pay To Have Your Phone Tapped · · Score: 1

    If no one payed for social security disability, or food stamps, or head start programs, then we'd have a whole lot more crime as people grow up unable to find simple things like food and jobs. How do you even begin to measure that?

    Those programs are inefficient pyrmaid schemes which take more money from the taxpayers than they give back to the needy. By eliminating them we'd actually be doing society and the economy a favor by putting the money back in the hands of the locales that need it most. No longer would Washington DC amass huge coffers from which it can dispense aid to its preferred locales, but each locale would address its own issues on a case by case basis.

    If you don't agree then I will be more than happy to take your money and put it into a trust, which I control, to dispense for your aid as I see fit. Doesn't that make perfect sense? Don't you trust me? Why should you trust someone who, for the greatest probability, you didn't even vote for?

  16. Ideal vs. Reality on Pay To Have Your Phone Tapped · · Score: 1

    Ideally I'm a libertarian (with a small l). I want government to be small. I do not want government to have these blanket rights to do these things because, ultimately, the misuses and abuses will scale up to be more expensive than any real uses. People can cry and scream about catching criminals all they want but, at the end of the day, how many times has any criminal been caught on the basis of a phone tap? In all of my years criminals are still caught by good old-fashioned investigation. Phone taps rarely reveal anything that enforcement officials didn't already know.

    Now back to reality...

    Big government is here. Big government does not care two whits what you, I, or anyone on /. thinks. Big government cares only about one thing: self-propagation. Topics such as wiretapping are simply flavor-of-the-day. They provide debate. They get people's blood running hot. They provide emotion and energy which mobilizes silly legal feuds which, ultimately, cost the working taxpayer more and more money with every year.

    But big government is not all bad. Without big government the big corporations and big banks would have us all as tenant slaves on their property, renting out slums from their agencies. Our only defense against big industry is big government. It's a never-ending vicious cycle. It is a cycle that cannot be broken in today's era of world government. Big government will not capitulate and neither will big industry. Our only choice is to carve out what little happiness we can from life.

    Do not fret about your freedoms. Do not lament your rights. At the end of the day only one thing is certain: You will pay and someone else will profit. Live with it.

    Besides, if you don't like it, you can always leave.

  17. Re:What is the Fed? Everyone is very off base on Federal Reserve To Use Internet For Money Transfer · · Score: 1

    Remove your tin foil hat

    Nice quip. Do you feel superior now?

    There is no tin foil in recognizing the greed of men. This trait has been evident throughout history and only the truly ignorant would seek to dispel its reality.

    So, back to the question, why should anyone believe that the Fed is acting first and foremost in the interest of the general populance as opposed to their own familial preservation? The answer: There is no reason. Greed conquers all. The only real solution is decentralization.

    But, back to reality, big government is here to stay and, without it, the corporations would have all of us be indentured tenants living in squalor. So the choice is really a non-choice. We're all screwed.

  18. Re:What is the Fed? Everyone is very off base on Federal Reserve To Use Internet For Money Transfer · · Score: 1

    Why would ANYONE put out a negative review of the person who holds their financial future in a vice?

    Like, if you could audit your bank manager, would you? Would you issue a bad audit knowing that he could foreclose on your house and send you, your wife, and your children into homelessness?

    Quit hiding behind idealities. This is REALITY.

  19. Re:What is the Fed? on Federal Reserve To Use Internet For Money Transfer · · Score: 1

    Okay. Ideally, you're right.

    In reality it's just a pyramid scheme to support the little brats of families who haven't put a decent days work in for several hundred generations.

  20. Re:What is the Fed? on Federal Reserve To Use Internet For Money Transfer · · Score: 3, Insightful

    The main job of the Fed is to adjust interest rates as the governing board deems necessary to keep the economy stable.

    You mean that they adjust the interest rates to ensure that the US Gov't will never be able to pay back the debt that they owe to the Fed, thus keeping all of us normal citizens forever enslaved to pay back a loan that we never even asked for.

    It's convenient for the people closest to the top of the pyramid...

  21. Mods on crack: Call this offtopic on 100 Terabyte 3.5-inch Optical Storage · · Score: 1

    I remember when SeaGate was making the MiniChief and DataChief hard drives (20 and 40 mb, respectively). At that time there were already one or two outfits who were working on "floptical" media. Price was comparable but storage was about half. With the refinement of laser technology I've often wondered what's been holding up floptical media. circa 1992 the drives were around $400 and disks were about $50.

    I don't want to say that it's an industry conspiracy but, well, there's no better explanation for why floptical drives haven't received the kind of attention, development, and marketing that they deserve. For all practical applications floptical media could leave magnetic media far behind.

    Yes, this is an active troll for more mods to waste more mod points and, yes, I can post it again and again and again...

  22. Really dragging their feet on 100 Terabyte 3.5-inch Optical Storage · · Score: 0, Offtopic

    I remember when SeaGate was making the MiniChief and DataChief hard drives (20 and 40 mb, respectively). At that time there were already one or two outfits who were working on "floptical" media. Price was comparable but storage was about half. With the refinement of laser technology I've often wondered what's been holding up floptical media. circa 1992 the drives were around $400 and disks were about $50.

    I don't want to say that it's an industry conspiracy but, well, there's no better explanation for why floptical drives haven't received the kind of attention, development, and marketing that they deserve. For all practical applications floptical media could leave magnetic media far behind.

  23. Re:It could have been worse.... on Wired on Defeating the Olympics Censorship · · Score: 1

    Ganymedes. Most accounts seem to skim over the physical nature of Zeus' attraction. Apparently it was enough to set Hera off, though, for it was the reason that she wished to destroy Troy.

    Additionally many scholars feel that the tale of Ganymedes was invented by the inhabitants of Crete to justify their own male same-sex desires. From the few accounts that I read Greece wasn't so big on homosexuality until the Cretans made a large impact.

  24. Re:Stealth? *ARGGGH* -- hypocrisy on How Secure is Windows Firewall? · · Score: 1

    I'm an OpenBSD and pf user. I don't see it as bad behaviour, since you should typically only be "breaking standards" on packets you should not be receiving anyway.

    Good point. Is there an RFC for virus behavior?

  25. Re:The police are our founders' "standing army" on Wiretapping the Web Easier Than Ever · · Score: 1

    It sounds to me like the police forces were created by the wealthy to enforce the social order of things. I'm happy to see that not much has changed in 170 years.