The DMCA makes unauthorized reviews illegal. Unlike an EULA, it is legally enforcable in your country. If you don't like it Larry, then either take it like a man or donate some of that hard earned cash towards the EFF.
The Linux security modem *IS* weak.
on
Microsoft Cracked
·
· Score: 1
The Linux security *model* is weak in comparison to NTs. It's just that NTs is more easily circumvented. If Microsoft plugged the holes a little more, NT security would theoretically be better than Linux.
RWX permissions offer no fine grained control, and should have been abandoned years ago. There's absolutely no reason Linux should be using this security model besides legacy support. The hazards outweigh the advantages.
Unix provided the basis and way of thinking for most modern operating systems. Some, [or even most] brilliant OS ideas came from Unix. But rwx permissions wasn't one of them [neither was the backspace/delete difference]. In fact, rwx permissions often mean things end up being less Unix like. POSIX even has provisions for ACLs.
On of the Unix fundamentals is that many things should be represented as files. Another is that of code-reuse, and uniformity. But since rwx permissions provide such pathetic granularity in security, many applications, such as Squid and Samba are re-implementing their own security models because the current system is to basic. This is both a kludge and a security risk - more implementations mean more fronts to fight crackers on, and makes things hard to manage. Most serious level DOD certifications require the use of ACLs [among other security measures, like Domain Type Enforcement and Capabilities].
Another example would be firewalling. Let's Unixify it - make it into a file. Set ACLs on/proc/ports/incoming/8080, and/proc/services/http [for stateful inspection]. The user gets the most restrictive permission applied to them. There's probably flaws in that system [it was thirty seconds of brain work], but the concept remains.
rwxs is pathetic. Multiple security implementations on one platform is a kludge. People using an account which has full access to the system is a security risk - let's distribute administrative load to priviledged accounts. `root' sucks. Sudo is a kludge. Deal with it.
Yes, implementing ACLs on Linux will break things, but so has a stack of other things [the change in binary format, various GlibC bits and pieces]. In those instances the benefit was worth it, and it will be again.
Works already been started. Get involved. ACLs for Linux 3.0 If you can think, stew about it with compatriots on your mailing lists. If you can hack, then take the time to look at some of the work and discussion by hunting for Linux ACLs on Google. If you have a project, think about the security implementation, and design with the future in mind. If you work for any company that wants to see widespread corporate use of Linux [which is assisted by shiny things like DOD certifications], then fund the damned think. And thanks for listening - especially if your name is Alan, Richard, Theodore, or Linus.
DMCA only covers Copyright (dmCa), obviously. Not trade secrets, which is all I could think they could claim.
Scientology typically uses copyright law to prevent the posting of internal documents to the web, and even critiques of those documents, which fall under fair use.
While the material they have removed is rarely illegal, the financial weight of the business [they don't pay taxes, and provide a decent tax write off for many financially successful folk] compared to its dissenters usually means they are able to manipulate the law as they see fit.
It's not really that odd an idea though. I'm sure Thomas Kaplan would call any device which decrypts DVDs illegal, despite the fact that all the MPAA licensed players do [and must - this is what playing a DVD is. Meanwhile Emannuel Goldstein will be 8 million dollars in debt if he loses the case
.
So in summary, there is no justice for the financially insecure.
I'd quote, but pathname is down right now. Damn straight I have read the FHS, and its description of of opt primarily states *optional*. Packages that are self contained [ie, which need their own tree] should live in/usr/local/.
Either way, `optional' is a pathetic label. Is StarOffice optional? Is KDE optional? I can run a system without grep, is that optional? What about compilers? If you use binary packages, are they optional?
On Solaris, anything not made by Sun is [usually] considered `optional'. Okay. Apply the same logic to Linux distributions. In that case, Acrobat reader is optional of redhat, but non-optional on Caldera.
Sorry, I'm not buying it until there some proper documentation for running it. The WINE people might have great software, but they never document what steps to take to run a particular application. The only people that do are LinuxGames and the Lotus Notes guy.
So what's this guy running to get Word and Excel not to display the `re-install me' that I get? Is he using Windows DLLs or WINE DLLS? What's the contents of his wine.conf? What's the cointents of his WINE registry? Did he install under Windows or Linux?
FUCK THEM if they want to tell the world they can, but not document how. All that achieves is a lot of very angry users.
Try doing some serious layout work in Word 2000 and Word 97 [which allegedly use the same file format] and watch as things jump all over the place. or better yet, try saving into Word 6 format from Word 97 and watch as all your graphica are scrolled 1/3 to the right, and have r and g on one side, and b on the other.
There are Linux suites now which are nearly as compatible with Word as Word is. And that's the best you can ask for. WPO2K does a shitty job [I've trested all five], StarOffice 5.2 does a good one [they're rewritten the import filters from 5.1].
But I do agree with you about the choice. Who the hell says I have to use open source software with an Open Source OS?
I don't think the Slashdot people are pissed off that their ISP isn;t taking care of this for them, I think its more the fact that they are angry on behalf of the computer newbies being lied to by cable modem companies - in that spending more time and bandwidth on the net doesn't increase risk, when clearly it does.
But I think WinAmp was there for playing CDA, now MP3. They probably shipped it with a nise M20 skin, some vis plugins, and WinAmp's minibrowser would link from CDDB to the M20 site.
Prozac causes the brain to be unable to break down serotonin. There's a build up over time.
Ecstacy causes the brain to produce more serotonin than it needs.
Dancing for 8 hours [as either one is likely to cause] without bothering to drink water, overdosing, or being `allergic' to the drug is likely to happen in either case. But getting bad pills is much more likely to occur via e.
Which is why I'm seeing an awful lot of people using Prozac over miotsubishi.
* Use IP fingerptinting to find OSs sending packets from particular IPs.
* Trace the IP at a particular time to a MAC address
* Block the MAC address at your firewall.
95A, OSR1)Original retail release
95B, OSR2)OEM only. Includes FAT32,
95C, OSR2.1)Not sure. Either OSR/2 with Y2K fixes or the non-IE-doesn't-work fuck-you-DOJ version. Difficult to obtain.
95D, OSR2.5)IE4.01 SP0. USB supplement.
Oh, and...
W2K Professional
W2K Server
W2K Advanced Server
W2K Datacenter Server
`Minor javascript incompatibility'
If this genuinely is an incompatibility [and not javascript used to stupidly check for Windows or Macintosh], then the problem would seem to be your javascript implementation. Javascript should be cross platform. If the implementation in Netscape is wrong, work with the mozilla guys to make sure it becomes right. Don't annoy the bank - they're not doing anything wrong if they're using standard javascript, but your implementation is shitty.
This is an unfortunate aspect of much open source advocacy - you have to be able to recognize your faults in order to fix them. And, no, I'm no Windows apologist [and I'm posting this from Konqueror], but if someone tells me that, for example, Linux doesn't have a multimedia app as comprehensive as Windows MEdia player, I'm willing to listen and put some effort into making sure it does.
Slashdot Mirror
Or better yet. Lobby congress.
The DMCA makes unauthorized reviews illegal. Unlike an EULA, it is legally enforcable in your country. If you don't like it Larry, then either take it like a man or donate some of that hard earned cash towards the EFF.
The Linux security *model* is weak in comparison to NTs. It's just that NTs is more easily circumvented. If Microsoft plugged the holes a little more, NT security would theoretically be better than Linux.
/proc/ports/incoming/8080, and /proc/services/http [for stateful inspection]. The user gets the most restrictive permission applied to them. There's probably flaws in that system [it was thirty seconds of brain work], but the concept remains.
RWX permissions offer no fine grained control, and should have been abandoned years ago. There's absolutely no reason Linux should be using this security model besides legacy support. The hazards outweigh the advantages.
Unix provided the basis and way of thinking for most modern operating systems. Some, [or even most] brilliant OS ideas came from Unix. But rwx permissions wasn't one of them [neither was the backspace/delete difference]. In fact, rwx permissions often mean things end up being less Unix like. POSIX even has provisions for ACLs.
On of the Unix fundamentals is that many things should be represented as files. Another is that of code-reuse, and uniformity. But since rwx permissions provide such pathetic granularity in security, many applications, such as Squid and Samba are re-implementing their own security models because the current system is to basic. This is both a kludge and a security risk - more implementations mean more fronts to fight crackers on, and makes things hard to manage. Most serious level DOD certifications require the use of ACLs [among other security measures, like Domain Type Enforcement and Capabilities].
Another example would be firewalling. Let's Unixify it - make it into a file. Set ACLs on
rwxs is pathetic. Multiple security implementations on one platform is a kludge. People using an account which has full access to the system is a security risk - let's distribute administrative load to priviledged accounts. `root' sucks. Sudo is a kludge. Deal with it.
Yes, implementing ACLs on Linux will break things, but so has a stack of other things [the change in binary format, various GlibC bits and pieces]. In those instances the benefit was worth it, and it will be again.
Works already been started. Get involved. ACLs for Linux 3.0 If you can think, stew about it with compatriots on your mailing lists. If you can hack, then take the time to look at some of the work and discussion by hunting for Linux ACLs on Google. If you have a project, think about the security implementation, and design with the future in mind. If you work for any company that wants to see widespread corporate use of Linux [which is assisted by shiny things like DOD certifications], then fund the damned think. And thanks for listening - especially if your name is Alan, Richard, Theodore, or Linus.
POSIX ACLs for Linux 3.0, let's do it.
> "see what happens when you don't run linux"
Um, Microsofts firewalls are mostly OpenBSD based.
Nuff said
DMCA only covers Copyright (dmCa), obviously. Not trade secrets, which is all I could think they could claim.
Scientology typically uses copyright law to prevent the posting of internal documents to the web, and even critiques of those documents, which fall under fair use.
While the material they have removed is rarely illegal, the financial weight of the business [they don't pay taxes, and provide a decent tax write off for many financially successful folk] compared to its dissenters usually means they are able to manipulate the law as they see fit.
It's not really that odd an idea though. I'm sure Thomas Kaplan would call any device which decrypts DVDs illegal, despite the fact that all the MPAA licensed players do [and must - this is what playing a DVD is. Meanwhile Emannuel Goldstein will be 8 million dollars in debt if he loses the case
.So in summary, there is no justice for the financially insecure.
.It'll be Sun Industry Standard Source License.
Why is it an Industry Standard? Because they called it one.
You forgot ECMAscript, whiuch doesn't actually have anything to do with Java besides a nifty cross promotional marketing scheme.
But it Daikatana isn't it? :-)
Dell is the only major brand computer manufacturer that won't touch AMD. HP, Compaq, IBM, Gateway, etc. all do.
I actually thought it implied a little more violence than that...
The man was leaning out on the road, waiting to cross. Standing a little too close, he's about to get his skull shattered.
Why don't you?
/usr/local/.
I'd quote, but pathname is down right now. Damn straight I have read the FHS, and its description of of opt primarily states *optional*. Packages that are self contained [ie, which need their own tree] should live in
Either way, `optional' is a pathetic label. Is StarOffice optional? Is KDE optional? I can run a system without grep, is that optional? What about compilers? If you use binary packages, are they optional?
On Solaris, anything not made by Sun is [usually] considered `optional'. Okay. Apply the same logic to Linux distributions. In that case, Acrobat reader is optional of redhat, but non-optional on Caldera.
/opt is fucked.
Sorry, I'm not buying it until there some proper documentation for running it. The WINE people might have great software, but they never document what steps to take to run a particular application. The only people that do are LinuxGames and the Lotus Notes guy.
So what's this guy running to get Word and Excel not to display the `re-install me' that I get? Is he using Windows DLLs or WINE DLLS? What's the contents of his wine.conf? What's the cointents of his WINE registry? Did he install under Windows or Linux?
FUCK THEM if they want to tell the world they can, but not document how. All that achieves is a lot of very angry users.
Try doing some serious layout work in Word 2000 and Word 97 [which allegedly use the same file format] and watch as things jump all over the place. or better yet, try saving into Word 6 format from Word 97 and watch as all your graphica are scrolled 1/3 to the right, and have r and g on one side, and b on the other. There are Linux suites now which are nearly as compatible with Word as Word is. And that's the best you can ask for. WPO2K does a shitty job [I've trested all five], StarOffice 5.2 does a good one [they're rewritten the import filters from 5.1]. But I do agree with you about the choice. Who the hell says I have to use open source software with an Open Source OS?
I don't think the Slashdot people are pissed off that their ISP isn;t taking care of this for them, I think its more the fact that they are angry on behalf of the computer newbies being lied to by cable modem companies - in that spending more time and bandwidth on the net doesn't increase risk, when clearly it does.
As root, edit the file /etc/sysconfig/desktop to read KDE instead of GNOME, to use KDM.
Then reboot [or init 3 then init 5] for the change to take effect
You'll also need:
/ RPMS/libuulib-5.0.13-2.i386.rpm
ftp://rpmfind.net/linux/caldera/LTP/col/install
Its an OpenLinux RPM, but [unlike the rest of OpenLinux] it puts things in the right place.
Then uninstall everything qt and kde related, and the stuff that requires it.
Then install uulib, libmng, and the qt stuff. Then all the stuff on your KDE directory.
Et voila! Dependencies fulfilled, no compilation, no --force!
There's three extra files you need which aren't on any of the mirrors:
/ RPMS/libmng-0.9.2-1.i386.rpm
/ RPMS/qt-2.2.1-4.i386.rpm
/ RPMS/qt-devel-2.2.1-4.i386.rpm
ftp://rpmfind.net/linux/rawhide/1.0/i386/RedHat
ftp://rpmfind.net/linux/rawhide/1.0/i386/RedHat
ftp://rpmfind.net/linux/rawhide/1.0/i386/RedHat
Cheers,
Mike
Where did you get QT 2.2.1 RPMs? They're a dependency for KDE2 on RH7 and I can't find the damned file anywhere. Thanks
Rippers and encoders are available as plugins.
But I think WinAmp was there for playing CDA, now MP3. They probably shipped it with a nise M20 skin, some vis plugins, and WinAmp's minibrowser would link from CDDB to the M20 site.
In laymans terms:
Prozac causes the brain to be unable to break down serotonin. There's a build up over time.
Ecstacy causes the brain to produce more serotonin than it needs.
Dancing for 8 hours [as either one is likely to cause] without bothering to drink water, overdosing, or being `allergic' to the drug is likely to happen in either case. But getting bad pills is much more likely to occur via e.
Which is why I'm seeing an awful lot of people using Prozac over miotsubishi.
* Use IP fingerptinting to find OSs sending packets from particular IPs.
* Trace the IP at a particular time to a MAC address
* Block the MAC address at your firewall.
>I suppose there's a place for every OS out there, even DR. DOS
Are you somehow implying that DR-DOS wouldn't regularly be considered to have a place in your IT department? Pffftt!
Not quite accurate re: 95
95A, OSR1)Original retail release
95B, OSR2)OEM only. Includes FAT32,
95C, OSR2.1)Not sure. Either OSR/2 with Y2K fixes or the non-IE-doesn't-work fuck-you-DOJ version. Difficult to obtain.
95D, OSR2.5)IE4.01 SP0. USB supplement.
Oh, and...
W2K Professional
W2K Server
W2K Advanced Server
W2K Datacenter Server
`Minor javascript incompatibility' If this genuinely is an incompatibility [and not javascript used to stupidly check for Windows or Macintosh], then the problem would seem to be your javascript implementation. Javascript should be cross platform. If the implementation in Netscape is wrong, work with the mozilla guys to make sure it becomes right. Don't annoy the bank - they're not doing anything wrong if they're using standard javascript, but your implementation is shitty. This is an unfortunate aspect of much open source advocacy - you have to be able to recognize your faults in order to fix them. And, no, I'm no Windows apologist [and I'm posting this from Konqueror], but if someone tells me that, for example, Linux doesn't have a multimedia app as comprehensive as Windows MEdia player, I'm willing to listen and put some effort into making sure it does.