I will second the clothing thing. Often times, you'll see people wearing clothes that are worn out, wrinkled, or maybe even have small holes in them. I understand that most developers are not customer-facing, and looking like you care about your appearance doesn't generally affect your productivity. But still. Do it anyway.
It's been a while since I've read up on this stuff, but isn't there a bunch of overhead to take into account? I don't think it's actually possible to get even close 100Mb/s on a 100Mb ethernet line.
1. Probably the most amazing and useful feature ever in a phone--auto synchronization between Gmail, Google calendar, contacts, and photos. Yes blah blah Mobile Me. Well Google is free--Apple is $100/yr. And please, the functionality and features of Gmail and Google calendar absolutely crap on the lame excuse of the Apple offerings. Don't even try to argue this one.
You can also connect to Gmail as if it were an Exchange server using ActiveSync. This allows for full two-way synchronization of your mail, calendar and contacts with the native applications on the device - not that awful web interface. It actually works very well - although, I'm sure the integration still isn't as tight as it is with Android (of course).
Only reason I can think of to buy a new iPod is if your old one didn't have enough space for all your music - or if it doesn't do something that the newer ones do (for example, if you had an iPod that doesn't play video and you wanted to).
I could also see having a hard-drive iPod to have your whole media collection, and maybe a flash-based one (with far less storage) to use when you're exercising, as they are theoretically more resistant to damage from being shaken and/or dropped.
But several? Wouldn't you just want to sell the old ones on eBay or something?
I've actually been able to reduce the amount of spam I get from that stuff. You can set your news feed to ignore stuff from individual apps. Problem is you have to do it for all of them... and all the new ones that pop up.
FreeBSD in-place upgrades are also very smooth. They have been for as long as I've been using it (since 2.2.5-RELEASE, if I recall correctly). Occasionally, the mergemaster gets a little confusing (there are a lot of config files)... and once in a while I've accidentally replaced a config file I didn't want to... but other than that.:)
Yep. I mean, as it's been stated in other comments, I think Google's way of hedging its bets is to have redundant data centers, so I think they correctly focused on the procedural issues.
However... as a current programmer and former IT guy, I'd like to know more about what caused the failures in the first place.
I was under the impression that Google's servers all had small individual batteries in each chassis to provide power during generator spin-up in lieu of full-on UPSs. Maybe some of them didn't last as long as they were supposed to? Or maybe the generator took longer to warm up than it should have>
While I agree that changing the port is nothing more than obfuscation - which is a terrible security policy, it should be noted that it still probably will eliminate the portion of break-in attempts that come from script kiddies, zombie machines, and the like, because they're probably just looking for stuff on common ports and moving on to the next machine.
However, if someone wants to get into my system specifically, they're going to do exactly what you described, and they're not going to be fooled by the "Port 55432" in my sshd_config.
So, even though you've eliminated some of the risk, it's really not much of a solution.
That, of course, requires only a small amount of vigilance with your keys. Do backups? Maybe put one on a thumb drive or CD and put it in a fireproof box?
Also,
If I'm local, I can reboot and run kernel mode single.
So all is not totally lost if his PC needs to be wiped. Just makes things a pain in the ass:)
On many Linux distributions I've used, PermitRootLogin is enabled by default on SSH. I find it absolutely hilarious (FreeBSD has it disabled by default).
I also find hilarious the number of machines where this is left enabled after a box is deployed into production.
This seems to be especially common at places that call themselves "Microsoft Shops." This isn't a potshot against Windows admins - there are lots of very intelligent ones out there - it's just that there are a lot of Windows admins who don't really know Linux, but need to set up one or two Linux boxes in the data center for some software that they need to run.
Slashdot Mirror
As Office Linebacker Terry Tate says - "You kill the joe, you make some mo'"
I will second the clothing thing. Often times, you'll see people wearing clothes that are worn out, wrinkled, or maybe even have small holes in them. I understand that most developers are not customer-facing, and looking like you care about your appearance doesn't generally affect your productivity. But still. Do it anyway.
whereas the guys at Tuffmail seem to find it interesting enough to do it even better than I did.
Not to mention the fact that effectively fighting spam as well as the big guys (Google, Postini, Tuffmail, Fastmail, etc) is a complete PITA.
Safari doesn't have tabbed browsing? Well, it doesn't have actual tabs...
It's been a while since I've read up on this stuff, but isn't there a bunch of overhead to take into account? I don't think it's actually possible to get even close 100Mb/s on a 100Mb ethernet line.
Heh. I think I get what you mean by "vocal." I can't stand "vocal" responses from fanboys. I hope I didn't come off as too "vocal." :)
Just one quick correction:
1. Probably the most amazing and useful feature ever in a phone--auto synchronization between Gmail, Google calendar, contacts, and photos. Yes blah blah Mobile Me. Well Google is free--Apple is $100/yr. And please, the functionality and features of Gmail and Google calendar absolutely crap on the lame excuse of the Apple offerings. Don't even try to argue this one.
You can also connect to Gmail as if it were an Exchange server using ActiveSync. This allows for full two-way synchronization of your mail, calendar and contacts with the native applications on the device - not that awful web interface. It actually works very well - although, I'm sure the integration still isn't as tight as it is with Android (of course).
Hey Farva, what's the name of that restaurant you like, with all the goofy shit on the walls and the mozzarella sticks?
Remember the good old days, when ATMs ran OS/2?
Only reason I can think of to buy a new iPod is if your old one didn't have enough space for all your music - or if it doesn't do something that the newer ones do (for example, if you had an iPod that doesn't play video and you wanted to).
I could also see having a hard-drive iPod to have your whole media collection, and maybe a flash-based one (with far less storage) to use when you're exercising, as they are theoretically more resistant to damage from being shaken and/or dropped.
But several? Wouldn't you just want to sell the old ones on eBay or something?
I've actually been able to reduce the amount of spam I get from that stuff. You can set your news feed to ignore stuff from individual apps. Problem is you have to do it for all of them... and all the new ones that pop up.
Realplayer? Really? Is this 1998? :)
... without the new comment system, of course.
FreeBSD in-place upgrades are also very smooth. They have been for as long as I've been using it (since 2.2.5-RELEASE, if I recall correctly). Occasionally, the mergemaster gets a little confusing (there are a lot of config files)... and once in a while I've accidentally replaced a config file I didn't want to... but other than that. :)
Yep. I mean, as it's been stated in other comments, I think Google's way of hedging its bets is to have redundant data centers, so I think they correctly focused on the procedural issues.
However... as a current programmer and former IT guy, I'd like to know more about what caused the failures in the first place.
I was under the impression that Google's servers all had small individual batteries in each chassis to provide power during generator spin-up in lieu of full-on UPSs. Maybe some of them didn't last as long as they were supposed to? Or maybe the generator took longer to warm up than it should have>
It's lots of fun to watch if you have money riding on it.
While I agree that changing the port is nothing more than obfuscation - which is a terrible security policy, it should be noted that it still probably will eliminate the portion of break-in attempts that come from script kiddies, zombie machines, and the like, because they're probably just looking for stuff on common ports and moving on to the next machine.
However, if someone wants to get into my system specifically, they're going to do exactly what you described, and they're not going to be fooled by the "Port 55432" in my sshd_config.
So, even though you've eliminated some of the risk, it's really not much of a solution.
fail2ban has a whitelist.
I still see failed login attempts on my non-standard ssh port. Not nearly as many, though. Anecdotal evidence... but still.
That, of course, requires only a small amount of vigilance with your keys. Do backups? Maybe put one on a thumb drive or CD and put it in a fireproof box?
Also,
If I'm local, I can reboot and run kernel mode single.
So all is not totally lost if his PC needs to be wiped. Just makes things a pain in the ass :)
And DISABLE ROOT LOGIN!
On many Linux distributions I've used, PermitRootLogin is enabled by default on SSH. I find it absolutely hilarious (FreeBSD has it disabled by default).
I also find hilarious the number of machines where this is left enabled after a box is deployed into production.
This seems to be especially common at places that call themselves "Microsoft Shops." This isn't a potshot against Windows admins - there are lots of very intelligent ones out there - it's just that there are a lot of Windows admins who don't really know Linux, but need to set up one or two Linux boxes in the data center for some software that they need to run.
I'm not a "denier" - but Al Gore really has packed on the pounds recently...
When it's a political controversy like this, it's "-1 disagree, +1 agree."
Also when there's a Linux vs. Windows discussion.
He *did* kill manbearpig. I think the man deserves some credit for that.