I just set up iptables to only allow connections from specific ip addresses. I may change it to only
allow from specific mac addresses since it looks like some of these jokers are spoofing or moving around:
Jul 15 15:53:59 mybox kernel: Bad SSH traffic:IN=eth1 OUT= MAC=00:50:04:22:ea:00:00:01:96:57:4c:70:08:00 SRC=203.177.84.181 DST=xxx.xxx.xxx.xxx LEN=60 TOS=0x00 PREC=0x00 TTL=40 ID=33219 DF PROTO=TCP SPT=45089 DPT=22 WINDOW=5840 RES=0x00 SYN URGP=0
Jul 15 19:48:15 mybox kernel: Bad SSH traffic:IN=eth1 OUT= MAC=00:50:04:22:ea:00:00:01:96:57:4c:70:08:00 SRC=220.130.159.159 DST=xxx.xxx.xxx.xxx LEN=60 TOS=0x00 PREC=0x00 TTL=39 ID=56948 DF PROTO=TCP SPT=53300 DPT=22 WINDOW=5840 RES=0x00 SYN URGP=0
It looks like the same mac address is making attacks from very different ip addresses.
I haven't been able to come up with any answer to the 'outside dependencies break my code'. Well, other than the obvious one, remove all outside dependencies. Which isn't always very useful since a program with no outside dependencies is not very useful (other than games). Since I see many other systems experiencing it too, I guess they haven't either (or just haven't addressed it).
Gentoo portage is an automated build system and also an automated delivery system. Is civility a concept you understand? Perhaps you might consider it as more than just an outdated concept.
>I'm curious why you think the software that is released would be different from what the what the testers tested.
As an example:
@time x: You write code that uses zlib version 1.00. You test it and it works.
@time x+1: Zlib releases 1.01. It's broken, or fixes a bug that was broken in version 1.0. This causes your code to break.
@time x+2: users download your code + zlib 1.01 (the latest release).
User gets broken code. Developer gets complaints. What user compiled isn't what was tested.
>Seriously dude, are you a developer? Say it aint so.
Why are you so rude to people you've never met? I didn't piss in your cornflakes, and said nothing rude about you, so take your attitude elsewhere please.
And people think software is bad now, this will make it worse. The code a user gets will be based on when he got it (what code had been released up to that point). It will therefore almost never be what the developer or testers used. Incompatibilities between modules will quickly grow until the software moves from bug ridden to useless without constant retesting. Hopefully this idea's time has come, and gone.
I would hardly think the threat of being blacklisted as a spammer would inspire "terror". It might be called criminal, or a conspiracy, but I don't think "terrorism" is very appropriate.
Get the book 'dress for success'
Amazon.com Used & new from: $2.45 . Read the studies about the difference it makes just by dressing correctly. In most professional jobs you're expected to be reliable, personable, and articulate as well as good at your job. Body mods and poor dress trigger the stereotypes that you're none of the above. You want the big bucks you gotta tow the line.
if there's no mechanism to use it to verify election results. Even if there was verified and found to be wrong would it make any difference in the outcome? The electoral college decides who is president anyway, so I don't understand why it matters.
I agree. The cheap version of XP might be just
the thing. If it's secure and stable they'll sell
a lot of copies.
I don't think Linux is much competition
for windows in the desktop area.
For servers I pick linux/unix first,
but not for the desktop. Linux doesn't have
the support for business apps. No enterprise
tools for rollouts, debugging, spying on your
employees, etc. For personal use it's too hard
to use and setup compared to Windows. The open
office suite was a big step in the right
direction though. A simplified version of
redhat or mandrake with good support for
hardware and it'd have a shot.
That's part of the reason I suggested an image scheme. I assume they will trash the computers regularly so a method of restoring them to workable operating condition with little effort is important. You'd want to reimage them anyway, just to ensure there were no time bombs, virii, or mangled settings.
I gotta wonder what people are doing that they get infected every week. I helped one friend lock down his home network and he kept getting reinfected. I finally found out he was taking his wi-fi equipped laptop to work and getting infected there. I made him put a firewall on his laptop instead of just his DSL connection and his problems ceased.
I would think a decent firewall and a copy of a freshly installed hard disk burned to CD by Ghost would be a much cheaper solution. Less direct cost and you'd want to reimage the systems anyway for a lot of reasons. If they get a virus just reboot to and restore from the cd. We've been running win 98 for many years unpatched with no virii.
My Mythtv experience pretty well matched theirs and I bought hardware that was "guaranteed to work". It will NOT work with old junk hardware. You need a fast machine to get useful performance.
KnoppMyth didn't work.
I got it to work under Gentoo.
I got the OS up using Gentoo's docs. The gentoo ebuilds don't work. Some don't compile and a couple have incompatible versions. The mythtv folks will not provide any support, write fragile code, and refused to make even minimal changes to the readme that might make a user's experience better.
Make sure you do NOT get the latest QT lib. There's a bug in the latest version, or a bug the code relied upon in the previous version that isn't there now. You'll end up being an hour off during daylight savings time.
You should use the virtual partition system because you'll want to have partition that span physical drives.
Mine still doesn't play dvds, the web server php still errors out when trying to access it from the network, some of the remote control keys don't work, and it crashes if you attempt to play a second recorded shows. It occasionally crashes the X server when trying to record and play at the same time.
I'm investigating rewriting the front end to use framebuffer instead of X/mythfrontend.
People seldom make decisions such as these for rational reasons. They make them for political and emotional reasons.
If they board that's making the decisions are "activists" tell them "We don't want to buy from a company that won't support human rights. They're under investigation for corruption and have been found guilty in European courts".
If they're conservative tell them "governments and organizations all over the world are switching to this because of the cost savings (and the predatory practices of the supplier). If they balk show them "the department of homeland security recommendation to use firefox, another one of those 'free' programs."
Because it's fairly clear that money buys elections. If it didn't why would we have so many regulations concerning donations to political parties? Companies can, and do, put a lot of money into the system to support their owners' agenda.
>Even if user data is the most important thing, if you run as root on a multi user box you put every users data at risk instead of only your own.
There's only one users data on almost every computer. In 99% of the cases other user's data isn't secured against access/deletion by non root users either.
>> Well, you could accidentally drive into a wall as well, it doesn't mean we should make all cars drive at 10 miles an hour. So, I don't see the added benefit.
>Cars happen to have seat belts. Roads also have speed limits, so this analogy is flawed.
This counter argument is flawed as well. Your car will still drive without the belt buckled and will go faster than the speed limit.
I've been on a few where something got changed for a very good reason, but the reasoning was lost when the staff left, or was forgotten with time. I like to see comments on WHY things were done, not stuff like:
i++;// increment i
A contract is an agreement freely entered into by two entities. I didn't agree to view the advertising. You might argue that when I return to a web site I know has advertising then I am 'accepting the contract'. Many advertisers seem to feel free to add intrusive sound, popups, popunders, and anything else they like. They break the implicit contract with such behaviour. The contract is not explicit and that behaviour is not expected or acceptable to the majority. When it's common practice for advertisers to break contractual promises the value of those promises decreases rapidly to zero
I didn't post any of that until he asked what I had contributed. So you slam me for answering his question?
You, and a couple of the other posters, insist on making this into an affront to your honor, a personal attack on you, or some twisted way for me to brag in public. Everything in those posts was about respect, contributions, or emotions. None of it was about technology. None of it answered the question.
It doesn't matter what my contributions are, or if my shit stinks. The question was couldn't spend their time on something more important.
It occurs to me the answer is simple.
They really did do what was important. *To them*. They did it so they could continue to be the "big fish". So people would love them because they're the "gods of GUI". Nobody else is allowed to accomplish anything because people would love them better. Nobody is allowed to question their accomplishments because then less people might love them.
Which seems to what motivated you too. Seems like a really sad way to live.
Huh? You're comparing anonymous sources with scientific research? That's like saying my
wrench makes a really bad screwdriver. Duh!
Anonymous sources are absolutely necessary.
How can people protect themselves from retribution
without it?
"out-of-control media, intoxicated with power"?
Sounds like you have serious reality connection issues.
Not everything is a conspiracy.
Every sparrow that falls wasn't killed by God.
Sometimes a cigar is just a cigar.
Shit happens.
I just set up iptables to only allow connections from specific ip addresses. I may change it to only allow from specific mac addresses since it looks like some of these jokers are spoofing or moving around: Jul 15 15:53:59 mybox kernel: Bad SSH traffic:IN=eth1 OUT= MAC=00:50:04:22:ea:00:00:01:96:57:4c:70:08:00 SRC=203.177.84.181 DST=xxx.xxx.xxx.xxx LEN=60 TOS=0x00 PREC=0x00 TTL=40 ID=33219 DF PROTO=TCP SPT=45089 DPT=22 WINDOW=5840 RES=0x00 SYN URGP=0 Jul 15 19:48:15 mybox kernel: Bad SSH traffic:IN=eth1 OUT= MAC=00:50:04:22:ea:00:00:01:96:57:4c:70:08:00 SRC=220.130.159.159 DST=xxx.xxx.xxx.xxx LEN=60 TOS=0x00 PREC=0x00 TTL=39 ID=56948 DF PROTO=TCP SPT=53300 DPT=22 WINDOW=5840 RES=0x00 SYN URGP=0 It looks like the same mac address is making attacks from very different ip addresses.
Thanks! :)
I haven't been able to come up with any answer to
the 'outside dependencies break my code'. Well,
other than the obvious one, remove all outside
dependencies. Which isn't always very useful since
a program with no outside dependencies is not
very useful (other than games). Since I see
many other systems experiencing it too, I guess
they haven't either (or just haven't addressed
it).
Have a good one.
Gentoo portage is an automated build system and also
an automated delivery system. Is civility a concept you understand? Perhaps you might consider it as more than just an outdated concept.
>I'm curious why you think the software that is released would be different from what the what the testers tested.
As an example:
@time x: You write code that uses zlib version 1.00. You test it and it works.
@time x+1: Zlib releases 1.01. It's broken, or fixes a bug that was broken in version 1.0. This
causes your code to break.
@time x+2: users download your code + zlib 1.01 (the latest release).
User gets broken code. Developer gets complaints.
What user compiled isn't what was tested.
>Seriously dude, are you a developer? Say it aint so.
Why are you so rude to people you've never met?
I didn't piss in your cornflakes, and said nothing rude about you, so take your attitude elsewhere please.
And people think software is bad now, this will
make it worse. The code a user gets will be based on when he got it (what code had been released up to that point). It will therefore almost never be what the developer or testers used. Incompatibilities between modules will quickly grow until the software moves from bug ridden to useless without constant retesting. Hopefully this idea's time has come, and gone.
use ftp, scp, etc. They should be learning how to use tools they'll use when they get a job.
I would hardly think the threat of being blacklisted as a spammer would inspire "terror". It might be called criminal, or a conspiracy, but I don't think "terrorism" is very appropriate.
Get the book 'dress for success' Amazon.com Used & new from: $2.45 . Read the studies about the difference it makes just by dressing correctly. In most professional jobs you're expected to be reliable, personable, and articulate as well as good at your job. Body mods and poor dress trigger the stereotypes that you're none of the above. You want the big bucks you gotta tow the line.
if there's no mechanism to use it to verify election results. Even if there was verified and found to be wrong would it make any difference in the outcome? The electoral college decides who is president anyway, so I don't understand why it matters.
Might be a long commute for me!
But seriously, you might be able to get some
volunteers if you publicized the need for them.
I agree. The cheap version of XP might be just the thing. If it's secure and stable they'll sell a lot of copies. I don't think Linux is much competition for windows in the desktop area. For servers I pick linux/unix first, but not for the desktop. Linux doesn't have the support for business apps. No enterprise tools for rollouts, debugging, spying on your employees, etc. For personal use it's too hard to use and setup compared to Windows. The open office suite was a big step in the right direction though. A simplified version of redhat or mandrake with good support for hardware and it'd have a shot.
That's part of the reason I suggested an image
scheme. I assume they will trash the computers
regularly so a method of restoring them to
workable operating condition with little effort
is important. You'd want to reimage them anyway,
just to ensure there were no time bombs, virii,
or mangled settings.
I gotta wonder what people are doing that they
get infected every week. I helped one friend
lock down his home network and he kept getting
reinfected. I finally found out he was taking
his wi-fi equipped laptop to work and getting
infected there. I made him put a firewall on
his laptop instead of just his DSL connection
and his problems ceased.
I would think a decent firewall and
a copy of a freshly installed hard disk burned
to CD by Ghost would be a much cheaper solution.
Less direct cost and you'd want to reimage
the systems anyway for a lot of reasons. If
they get a virus just reboot to and restore
from the cd. We've been running win 98 for many
years unpatched with no virii.
Does their old license prevent them from just
continuing to use their old copies of windows 98?
My Mythtv experience pretty well matched theirs and I bought hardware that was "guaranteed to work". It will NOT work with old junk hardware.
You need a fast machine to get useful performance.
KnoppMyth didn't work.
I got it to work under Gentoo.
I got the OS up using Gentoo's docs.
The gentoo ebuilds don't work. Some don't
compile and a couple have incompatible versions.
The mythtv folks will not provide any support,
write fragile code, and refused to make even
minimal changes to the readme that might make
a user's experience better.
Make sure you do NOT get the latest QT lib.
There's a bug in the latest version, or a
bug the code relied upon in the previous version
that isn't there now. You'll end up being an
hour off during daylight savings time.
You should use the virtual partition system
because you'll want to have partition that
span physical drives.
Mine still doesn't play dvds, the web server
php still errors out when trying to access
it from the network, some of the
remote control keys don't work, and it crashes
if you attempt to play a second recorded shows.
It occasionally crashes the X server when trying
to record and play at the same time.
I'm investigating rewriting the front end
to use framebuffer instead of X/mythfrontend.
To run anything as power hungry as a laptop.
l
You might be able to run a watch with it if
you designed it carefully to watch your power
consumption.
" I think that you might get at least a couple of milliamps of high-voltage current from it. "
http://www.americanantigravity.com/plasmavolt.htm
People seldom make decisions such as these for
rational reasons. They make them for political
and emotional reasons.
If they board that's making the decisions are
"activists" tell them "We don't want to buy
from a company that won't support human rights.
They're under investigation for corruption and
have been found guilty in European courts".
If they're conservative tell them "governments
and organizations all over the world are
switching to this because of the cost savings
(and the predatory practices of the supplier).
If they balk show them "the department of homeland
security recommendation to use firefox, another
one of those 'free' programs."
Find the appropriate spin for the audience.
Because it's fairly clear that money buys elections.
If it didn't why would we have so many regulations
concerning donations to political parties? Companies
can, and do, put a lot of money into the system
to support their owners' agenda.
>Descrimination based on sexual orientation does not exist.
So why do the gays tell us they can't get the
same rights as others?
Why is it not permissible for them to do something
a straight man and woman are permitted to do?
Think again.
>Even if user data is the most important thing, if you run as root on a multi user box you put every users data at risk instead of only your own.
There's only one users data on almost every
computer. In 99% of the cases other user's
data isn't secured against access/deletion
by non root users either.
>> Well, you could accidentally drive into a wall as well, it doesn't mean we should make all cars drive at 10 miles an hour. So, I don't see the added benefit.
>Cars happen to have seat belts. Roads also have speed limits, so this analogy is flawed.
This counter argument is flawed as well.
Your car will still drive without the
belt buckled and will go faster than the speed
limit.
I've been on a few where something got changed // increment i
for a very good reason, but the reasoning was
lost when the staff left, or was forgotten with
time. I like to see comments on WHY things were
done, not stuff like:
i++;
A contract is an agreement freely entered
into by two entities. I didn't agree to
view the advertising. You might argue that when
I return to a web site I know has advertising
then I am 'accepting the contract'. Many
advertisers seem to feel free to add intrusive
sound, popups, popunders, and anything else
they like. They break the implicit contract
with such behaviour. The contract is not
explicit and that behaviour is not expected
or acceptable to the majority. When it's
common practice for advertisers to break
contractual promises the value of those
promises decreases rapidly to zero
I didn't post any of that until he asked
what I had contributed. So you slam me
for answering his question?
You, and a couple of the other posters, insist on
making this into an affront to your honor,
a personal attack on you, or some
twisted way for me to brag in public.
Everything in those posts was about respect,
contributions, or emotions. None of it
was about technology. None of it answered
the question.
It doesn't matter what my contributions
are, or if my shit stinks. The question was
couldn't spend their time on something
more important.
It occurs to me the answer is simple.
They really did do what was important.
*To them*. They did it so they could
continue to be the "big fish". So people would
love them because they're the "gods of GUI".
Nobody else is allowed to accomplish
anything because people would love them better.
Nobody is allowed to question their
accomplishments because then less people
might love them.
Which seems to what motivated you too.
Seems like a really sad way to live.