Slashdot Mirror


User: MikeBabcock

MikeBabcock's activity in the archive.

Stories
0
Comments
6,826
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 6,826

  1. Re:Question about how this works on First Shellshock Botnet Attacking Akamai, US DoD Networks · · Score: 1

    At no point are you not in control of the environment variables in question; unless you're allowing unsanitized input of course.

  2. Re:patched my servers last month on First Shellshock Botnet Attacking Akamai, US DoD Networks · · Score: 1

    I've forbidden shell interactions from web servers forever on my client systems and I'm always in shock that online control panel systems allow direct shell access to the system. It just seems obviously wrong.

  3. Re:min install on Outlining Thin Linux · · Score: 1

    Aside from someone else already pointing out that you want to use different tools, that's exactly my point -- their minimal install is truly minimal -- there's no need to roll your own at all.

    My basic install procedure is a CentOS minimal with a quick shell script that installs the packages and configs I need on top of that on a per-client basis.

  4. Re:min install on Outlining Thin Linux · · Score: 1

    If you're putting together your own optimized small footprint installs, you're not a sysadmin anymore, you're a distro maker. I spend way too much time actually administering working machines to be bothered to do someone else's job as well.

    CentOS does a fantastic job of maintaining their minimal install for me (and anyone else who wishes to use it), what possible advantage is there to me putting together something else (not to mention learning a new filesystem and config layout for no reason).

  5. Re:min install on Outlining Thin Linux · · Score: 3, Interesting

    As a frequent user of the CentOS-6.5-x86_64-minimal.iso install image, I can see that its still not *as* thin as the author describes but none of the unnecessary bits are included and its super-easy to customize.

  6. Re:HTC seemed to manage on Why You Can't Manufacture Like Apple · · Score: 1

    I'm surprised the author seems unaware of companies like Sony who manufacture far more devices than Apple does and has been doing so for far longer. I'll take an Xperia over an iPhone any day.

    cf. http://www.whatmobile.net/wp-c...

  7. Re:And KDevelope is what exactly? on KDevelop 4.7.0 Released · · Score: 1

    Its an IDE that has been around for quite a while. Googling 'what is kdevelop' I got:

    KDevelop is a free software integrated development environment (IDE) for the KDE Platform on Unix-like computer operating systems. KDevelop includes no compiler; instead, it uses an external compiler such as GCC to produce executable code.

  8. Re:I prefer Warframe on Early Reviews of Destiny: Unfulfilled Potential · · Score: 1

    How is first or third person relevant to its MMO status?

    Have you watched the game played on PS4? The graphics are quite impressive. The framerate is smoother, which would be nice, but not enough to do a PC upgrade and force myself to run Windows.

    cf. https://www.youtube.com/watch?... for a graphics comparison

  9. Re:Screwdriver analogy on Drone-Based Businesses: Growing In Canada, Grounded In the US · · Score: 1

    One concern about drones would be when perverts use them. Like hooking a camera on it and viewing people over their fence. Stuff like that.

    Don't you have guns for that?

  10. I prefer Warframe on Early Reviews of Destiny: Unfulfilled Potential · · Score: 1

    Warframe for PC and PS4 is a much better semi-mmo shooter (although I most frequently play with just a sword) than Destiny. The updates are good, the new missions are interesting and the challenge is high. Its also free to play.

  11. Re:Bullcrap on Unpopular Programming Languages That Are Still Lucrative · · Score: 1

    Why would a company train you to learn a language you should be able to pick up on the job if you can program well enough in similar languages?
    That's like expecting GM to teach you how to use a wrench.

  12. Re:SHA1 is not encryption on Why Google Is Pushing For a Web Free of SHA-1 · · Score: 1

    Its a cryptographic hash function that uses encryption algorithms to generate (what used to be) secure hashes.

    There are some pretty terrible hash functions that are not crypto (like parity bits) but SHA is crypto.

  13. Re:Deprecation shouldn't start at the browser on Why Google Is Pushing For a Web Free of SHA-1 · · Score: 2

    Print your cert with a QR code on a single sheet of correspondance. Its not hard, and it would be easy to disseminate.

  14. Re:Chip and PIN cards affected too on Home Depot Confirms Breach of Its Payment Systems · · Score: 1

    I've twice taken random trips and had a phone call waiting for me when I get home from my CC company asking if I'm the one who made the random purchases in question because they don't match my normal profile and they want to prevent fraud.

    I also only use chip&pin or NFC for payments (also Canadian).

  15. Re:Just bite the bullet on Home Depot Confirms Breach of Its Payment Systems · · Score: 1

    Call the police every time as well as your bank.

    Duh.

  16. Re:PCs are the problem on Home Depot Confirms Breach of Its Payment Systems · · Score: 1

    Come on up to Canada, we're all chip&pin ready and mostly tap&pay as well.

  17. Re:PCs are the problem on Home Depot Confirms Breach of Its Payment Systems · · Score: 2

    Why would you want to run an insecure OS like XP instead of an easily secured one like Unixware or PCDOS?

    Being pretty doesn't make it an upgrade.

  18. Re:Free for the community on Stallman Does Slides -- and Brevity -- For TEDx · · Score: 1

    Yes, they've robbed the users of their hardware from the ability to use self-compiled BSD on *that* hardware in *that* way because any changes made by Apple are secret and the user is stuck not having them except in compiled form.

    When a user has a problem with the OS they're robbed of the ability to fix it themselves by looking at the source code that would've otherwise been available and they're robbed of the ability to expand the abilities of the system without Apple's consent as well.

  19. Re:No thanks on Stallman Does Slides -- and Brevity -- For TEDx · · Score: 1

    Funny, I'm pretty sure you just made a pun.

  20. Re:not communism on Stallman Does Slides -- and Brevity -- For TEDx · · Score: 1

    Yes. He endorses workers, users, and owners all having equal rights to their means of production. Ownership is still held by the Copyright holder of free software, and that person allows others certain rights. There is no communism here.

  21. The problem is that you can never assure yourself that closed source software is secure. You can trust or insure but you can't assure.

    Assurance requires access to the source code.

  22. Re:must me false on Akamai Warns: Linux Systems Infiltrated and Controlled In a DDoS Botnet · · Score: 1

    Any user can change their own password without root. Just fyi.

  23. Re:must me false on Akamai Warns: Linux Systems Infiltrated and Controlled In a DDoS Botnet · · Score: 1

    SUID? Which programs are running setuid by default on a Linux box? Most Linux systems also ship by default with SELinux enabled.

    My only complaint on a modern Linux distro is that SSHD often allows remote root logins by default.

  24. Its just miseducation on your part to think that OpenSSL is part of Linux. It may ship with a given Linux distribution, or it may not. Its a library used by third party software, some of which may or may not be part of the problem.

    Most vulnerable systems have disabled SELinux, disabled other security features and are running fast and loose with their user permissions.

  25. The source has nothing to do with it, but yes, any one unpatched OS can be at risk just like any other ... if improperly configured.

    I'm quite certain with a properly configured SELinux configuration even unpatched Apache would survive however.