Slashdot Mirror


User: rduke15

rduke15's activity in the archive.

Stories
0
Comments
789
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 789

  1. If you have a NAS on the Internet, remove it! on Bash To Require Further Patching, As More Shellshock Holes Found · · Score: 1

    If you have a NAS accessible through the Internet, it will probably soon be part of a botnet. See Using curl to test Qnap NAS for Shellshock.

    And note that, as a bonus for crackers, the NAS even runs it's web server as root.

  2. Re:Derp on New Mayhem Malware Targets Linux and UNIX-Like Servers · · Score: 1

    For Europe at least, you can get RIPE IP blocks from their web site or through their RIPEstat Text Service. I use it for one of my servers to get daily lists for one country, and feed it to ipset. Maybe others like ARIN etc. also publish lists? Or you can get GeoIP databases. Or you could try a (Perl) module like IP::Country?

  3. Subsidies and lobbying on Study: Global Warming Solvable If Fossil Fuel Subsidies Given To Clean Energy · · Score: 1

    Maybe it could theoretically work (or maybe not), but it's irrelevant because almost impossible to do.

    The problem is: how do you take away money (subsidies) from those who have a lot of it (partly precisely from subsidies)?

    They can spend a lot for lobbying and public relations in general. The industries which would need to receive these subsidies don't have comparable means for their campaigns, and in part these industries don't even exist yet, because the money is lacking to develop them.

    In social movements, many poor can force a few rich to pay more.

    But industries are different. How do a few poor convince that the money of many very rich industries (which also feed many workers) should go to them?

  4. Why can't the Swiss company be named? on Industrial Control System Firms In Dragonfly Attack Identified · · Score: 2

    So the Belgian and German companies can be named, but not the Swiss one? That seems strange.

  5. Re:How about a home brew dynamic DNS system? on Microsoft Takes Down No-IP.com Domains · · Score: 1

    If you already have a server with a static IP, it's pretty easy to configure bind to accept dynamic updates. See for example Set up your own Dynamic DNS.

    I set it up like that, and have short scripts on my Linux and Mac notebooks to do the updates when the network comes up. On Linux, it's a short script in /etc/network/if-up.d/. On Mac, it's a script called by a LaunchDeaemon (a .plist file in /Library/LaunchDaemons).

  6. Re:Daily lethal doses on Long-Lasting Enzyme Chews Up Cocaine · · Score: 1

    Yes, "daily lethal doses" is really weird. The problem with cocaine is not lethal doses (that's a problem with heroin). It's that the people addicted to cocaine end up completely crazy after a few years. The effect on the brain can be fun, but in the long run it is really destructive.

  7. Proof (with silly statistics) ... on Perl Is Undead · · Score: 4, Informative

    Is it dead? Well, some quick scripting can tell us the truth, using Bash and of course Perl.

    On my Ubuntu notebook and main machine:

    sudo find /etc /bin /sbin /usr/bin /usr/sbin -type f -executable -exec file -b "{}" \; \
    | perl -MData::Dumper -nle '
            next unless /script/;
            if ( /(shell|python|ruby|perl|bash)/i ) {
                $types{$1}++
            }
            else {
                warn "Other: $_\n"
            };
            END {
                print Dumper(\%types);
            }'

    Output:

    Other: a /usr/bin/make -f script, ASCII text executable
    Other: a nickle script, UTF-8 Unicode text executable
    Other: awk script, ASCII text executable
    $VAR1 = {
                        'perl' => 283,
                        'python' => 104,
                        'bash' => 1,
                        'Ruby' => 3,
                        'ruby' => 9,
                        'shell' => 602
                    };

    On a server:

    Other: a /bin/dash script, ASCII text executable
    $VAR1 = {
                        'Python' => 36,
                        'Perl' => 139,
                        'shell' => 267
                    };

    Looks very much alive. Unless of course, Perl realized what it was calculating and cheated and made it's own numbers up on the fly...

  8. But LSD must be better on 'Godfather of Ecstasy,' Chemist Sasha Shulgin Dies Aged 88 · · Score: 2

    Because it's inventor died 14 years older at 102. :-)

    And seriously, the one time I tried ecstasy, I didn't like that it seemed to interfere with my emotions.

    LSD modifies percepetions and paths of thought, which can be a fantastic experience (or just great fun) if you are in the right mood for it, but I don't remember it ever modifying my emotions.

    Ecstasy gave me the impression of creating out of proportion artificial emotions in me. After the fact, I really didn't like that aspect. No wonder it was all the rage during the years of techno music. I guess people dancing to that cold techno music really needed something to still feel human.

    But anyway, peace to "Godfather of Ecstasy" and all chemists experimenting with psychoactive drugs. When used right, these all give valuable experiences.

  9. Anything interesting for a script kiddie? on Heartbleed Bug Exploited Over Extensible Authentication Protocol · · Score: 1

    That is all very interesting, but all I want to know is how I can use this to get a ride on my neighbours' WiFi...

  10. Start looking for another job? on Ask Slashdot: Taking a New Tack On Net Neutrality? · · Score: 1

    You could waste many hours calculating how much it would cost (equipment, maintenance, support calls, unsatisfied customers, risk of legal actions, etc.). After spending a lot of time on this, you could most probably demonstrate it's a bad business idea.

    But why bother? I'm sure you have more interesting things to do than writing a memo to explain in detail why a stupid idea is stupid.

    It is also pretty obviously a bad idea from an "ethical" point of view. You don't have to spend hours doing boring research to explain that. You can just explain it.

    Maybe most of the board will understand it straight away (if they didn't already when one of them suggested it). If not, then you don't want to work for these people.

    So after explaining to them why you think it is a bad idea, just say you will not help implement it because you feel it's not ethically acceptable. If most of the board people are smart, they will appreciate your clear point of view. If not, they will show you the door, and you will be grateful for being forced to leave these idiots.

    Could it be that a single idiot on the board came up with the idea, and that the rest of the board didn't want to discuss it and just asked you to "write a memo" to get rid of the subject?

  11. Mod parent up on Perl 5.20 Released, and Mojolicious 5.0: the Very Modern Perl Web Framework · · Score: 1

    Someone please mod parent up...

  12. Re:The Republicans here... on Brazil Approves Internet Bill of Rights · · Score: 1

    I have actually read that "Director's Rules" pdf, and dont' see how it would prevent equipment upgrades to allow faster Internet.

    What I see in the pdf, is that working on or installing equipment on public property requires a permit, and it lists what documents must be provided to get the permit (like a plan with street names, etc).

    I sure hope every city in the world has similar rules. What is the problem? What did I miss? And what do republicans have to do with that? Aren't they against any rules other than those of The Market?

  13. Re:Google was never on Mr. Schmidt Goes To Washington: A Look Inside Google's Lobbying Behemoth · · Score: 1

    Indeed, it started as a two men shop at least, and definitely more than 9 years ago.

  14. They may have fine SSDs, but the ones I bought to add to 2 mac minis were ridiculously slow for SSDs. Around 80 MBps read/write according to BlackMagic's disk speed test. Not faster than the original normal drive that came with the machines. In one of the Mac minis, I replaced the OWC with a Samsung, and it's much faster (I forgot how much, but certainly over 120 MBps).

    So in conclusion, yes, SSD may improve performance, but only if they are fast SSDs. Some aren't and won't make a big difference. (and when they fail, they tend to do so without warning and completely, so be sure to always have backups).

  15. Re:plain short scripts on Ask Slashdot: How Do You Manage Your Passwords? · · Score: 1

    Thanks, but that is actually not the same. Your single line does an "OR" with the searches. I use multiple greps to achieve "AND". ("search1.*search2" would not work either, failing to find them in a different order like in "...search2 ... search1").

  16. plain short scripts on Ask Slashdot: How Do You Manage Your Passwords? · · Score: 1

    plain text file in a Truecrypt volume, and little scripts to query/add to the file. It used to be batch scripts when I used Windows. Now I use bash in Linux, which should also work on Mac. The "t" script is to mount the Truecrypt volume if needed.

    $ cat `which p`
    #!/bin/bash
    [ -d /media/truecrypt1 ] || t on

    # accept up to 3 arguments, and filter on all 3
    if [ -z "$2" ]; then
            grep -ni "$1" /media/truecrypt1/p
    else
            grep -ni "$1" /media/truecrypt1/p | grep -i "$2" | grep -i "$3"
    fi

    $ cat `which padd`
    #!/bin/bash
    [ -d /media/truecrypt1 ] || t on
    echo `date +%F` " $@" >>/media/truecrypt1/p

  17. trained terrorist with any experience? on TSA: Confiscating Aluminum Foil and Watching Out For Solar Powered Bombs · · Score: 1

    The trouble is that with the methods en vogue among this young generation of terrorists (blowing themselves up), they can hardly accumulatae any experience. That is, if they survived training...

  18. Re:so what free codec can/should I use? on FLOSS Codecs Emerge Victorious In Wikimedia Vote · · Score: 2

    You are obviously not one of the people who needs to work with these videos, but I'm still interested in learning which "21st century cross platform container format" you would recommend, that anyone and their uncle is able to open (without calling me on the phone first).

    I don't like QT much either, but what else can play back ProRes and H264, move frame-by-frame (including backwards), and display timecode and frame numbers?

  19. so what free codec can/should I use? on FLOSS Codecs Emerge Victorious In Wikimedia Vote · · Score: 1

    My question is unrelated to wikimedia, but this seems like the right place to discuss the alternatives to h264/mp4.

    I often have to encode videos to send to a few people. Most are computer-illiterate, and it needs to "just work". So I use H264 in Quicktime .mov, because most users have Macs, and those who have Windows definitely have Quicktime installed. I guess .m4v might also work as a container, except it doesn't have a timecode track.

    But for the codec, is there a realistic alternative to H264 today? A format which can fit a feature-length HD movie in high quality in a file under 4GB so that it fits on any USB stick including FAT32, and that anyone can read?

  20. Re:I see a lot of discussion about systemd on Debian Technical Committee Votes For Systemd Over Upstart · · Score: 2

    You are thinking server. Linux is also about the desktop.

    Are you kidding?

    How many servers run Linux?
    How many Desktops?
    Who cares about Linux (who is the "audience" for Linux)?

    My main machine is actually a Linux notebook. It's a pretty miserable desktop, but it's OK for what I do, and I have the comfort of a real shell, and real keyboard with all the keys, and can try out sonme server stuff on my notebook. But I could replace it with a Mac or Windows notebook if necessary.

    Where I really care about Linux is on servers. Headless servers, with neither Gnome nor KDE installed.

    Until now, I heard that systemd would boot faster. Maybe it has some other benefits for servers, but boot spped is certainly not one of them. The servers spend much more time in the BIOS screens than booting the OS, and they reboot about once a year or less. So to convince me, it will need much more than a few seconds of boot speed...

  21. Anyway on A Corporate War Against a Scientist, and How He Fought Back · · Score: 5, Interesting

    Tyrone Hayes [...] began to display signs of apparent paranoia over a decade ago. [...] But he wasn't paranoid

    “Just because you're paranoid doesn't mean they aren't after you”
            -- Joseph Heller (?)

    “Paranoia is just having the right information.”
            -- William S. Burroughs

  22. It doesn't matter and won't affect me on Ask Slashdot: Are AdBlock's Days Numbered? · · Score: 3, Insightful

    It may not be obvious to the /. crowd, but nobody uses ad blockers. Of the people I know, I am the only one who does.

    If a website goes to the trouble of preventing ad blockers for such a tiny demographic, chances are high that I'm not interested in their "content" anyway (if there is any).

  23. TC is usually still mounted after sleep anyway on TrueCrypt Master Key Extraction and Volume Identification · · Score: 2

    TruCrypt can be written to automatically unmount the 'drive' as the computer goes to sleep

    It could, but it isn't. I was shocked to discover that my TC volume was still mounted after resuming from sleep. After all, notebooks get stolen, and that is why I have my passwords and SSH keys in a TrueCrypt volume. And notebooks are not normally shut down but put in sleep mode instead. So I discovered that the way Truecrypt worked made it's encryption quite irrelevant...

    I fixed the problem on my Ubuntu notebook with a "tc-unmount" script in /etc/pm/sleep.d/ but I guess not many people do that. In Windows, I think there is a configuration setting for unmounting on sleep, but it was not enabled by default last time I looked.

    So, while it may sound impressive that it is possible to extract the keys from RAM, it is usually unnecessary. The volume may simply be mounted and directly accessible, even after sleep.

  24. Re:Being able to do the same things is irrelevant on JPMorgan Files Patent Application On 'Bitcoin Killer' · · Score: 1

    That sounds so weird that it is hard to believe.

    If you cannot transfer money to your friend's account, how can you transfer any money to any account? And if you cannot transfer money to another account, then why do you have a bank account at all? That doesn't make sense.

    Maybe what you mean is that you could do it free of charge, and that now there is a small transaction fee, even if both accounts are in the same bank?

    Or maybe the redesigned their web pages and you didn't find the correc page page for transfers to another account?

  25. Top of the lline pro camera is not 4K yet... on Why You Shouldn't Buy a UHD 4K TV This Year · · Score: 1

    As mentioned already, there is hardly any content for a 4K TV. Nobody broadcasts 4K, and there is no 4K cable provider either.

    While there are 4K movie theaters, and some productions are really shot and finished in 4K, most are not. And the current model of the most professional and widely used motion picture camera, the Arri Alexa, is not 4K.

    From their FAQ:

    Will there be a 4K ALEXA?

    [...] Given that 4K digital workflows are still in their infancy, and that for the foreseeable future most productions will finish in 2K or HD, ALEXA is the perfect choice for theatrical features as well as television productions. Furthermore, the ascendance of 3D has resulted in a doubling of image data volumes which further complicates the effective storage, processing and movement of such data. So, for the foreseeable future, ALEXA is ideally suited for 2K or HD workflows in 2D and 3D.