I believe you can determine this, to a point. Maybe not country, but region (continent?) I've heard people talk about having to block all of Asia after reviewing audit logs to see that most attacks come from there.
Wan't to access a London, have to submit to their laws.
How would that work, if I'm in the US, and attempt to access a server in London, am I then exempt from US law? If I'm subjected to both countries laws, what if they conflict? I'm not sure how the whole passport idea would work in cyberspace. If I physically travelled to London, I'd be subject to their laws, and (correct me if I'm wrong) exempt from US law.
It doesn't matter what type of account you run as, admin or not. If you get a virus or an exploit happening, it will run with the privileges of your account. So it will have access to everything you have access to. The operating system (and apps) can be reinstalled, but (assuming no backups... average users don't do that) how easy is it to replace your personal files (email, documents, etc)? Running as non-admin will help save the OS and apps, but not the data that's harder to replace.
I've used windows search before to search within the text of many files for a certain string of text, and several items in the resulting list didn't even HAVE the string I was looking for. This has happened several times. Also, it would be nice to be able to use logical (AND/OR) operators in windows search, or maybe be able to search within the results. There doesn't seem to be a way to do that.
Agreed, the probability of 'funny.sh' spreading is much lower than funny.exe. However, that may very well change as more and more people migrate to linux on the home desktop. "stupid" users will be "stupid" users no matter what operating system they run. On any platform, there is no way to completely remove the possibility of things like this happening. Various controls can be put in place, like your example of alias rm='rm -i' but what normal user would do that? Unless that alias is made part of the standard load of a distro.
Thanks for the tip. I'll keep that in mind. I'm glad modern linux distros automatically prompt for the root password when needed. As far as I'm concerned (on the windows side), having to open the entire shell (explorer) as admin in order to run a certain program (e.g., control panel) seems like bad design. But at least that option is there. I would at least like to see the commandline version of runas work as well as su does in linux.
I've tried to use RunAs to execute different things as an admin user from my normal account on XP Pro. Some things just don't seem to work right. For example, the Control Panel. Most programs you should be able to just right click, RunAs... but I haven't figured out how to do that for the control panel for things like adding/removing hardware/software, changing services, etc. I've even tried it at the console "runas/user: administrator control.exe" or something like that. RunAs doesn't always work in my experience. Unlike su in linux, works every time for me.
Well, it's kinda hard to be able to do anything to your files if you can't access them.
Couldn't the browser be designed to run as a separate "browser" user? The actual user that wants to browse the web could be part of the "web" group or something similar. The "browser" user account wouldn't have full access to the real user's files because "browser" is a different user. Just like with other programs like, say, MySQL. the MySQL daemon runs as mysql on my system. My username is part of the mysql group, and the mysql daemon does not have access to my files. Sure, that example is on linux, but Windows should be able to operate in a similar fashion.
Some people can't afford to install the latest version. I run Win98SE at home and I haven't had much problem. I am on a dialup connection too, so I'm not always connected, which helps I guess.
Actually, in Windows, can't a normal user install software if they install it to their \Documents and Settings\ folder? I thought the main reason regular users could not install software was because it installs to c:\Program Files by default. It should work if the user changes that setting to a folder they have full access to. I've installed a couple apps this way as a regular user. Of course then, just like in *nix systems, this app would have access to anything the user has access to.
Yes, I've noticed that parts of the explorer GUI change when moving from the local system to the web. But explorer does open other protocols (ftp for example) embedded. I can also open different documents (word, flash, etc) embedded. It would be better if the GUI would stay the same (especially menu options) though. However, I don't even use IE anymore anyway. I'm trying out Firefox and Opera now.:-)
I did reply to this as AC because I didn't realize I wasn't logged in. However, my response doesn't seem to be showing up. Basically, I did a stage3/GRP because my system is a bit on the slow side. I am on dial-up, one phone line, so I can't afford the time to download all the sources for a stage1 or 2. However, I did want to install Gentoo because I heard it was a good distro to learn the inner-workings of linux. Perhaps one of these days I'll give Debian a try, or move to Slackware.
Tt's a universal browser and viewer via embeddable parts and pluggable protocols - which enables it to handle filesystem browsing and management as well as web browsing as just two of the many things it can do - and all by simply providing a light framework for other parts to do the work.
Wasn't this one of the complaints people had about Internet Explorer? It is a single application that can browse both your local system and the web.
If Gentoo takes so long to compile KDE for you (doesn't seem to take so long for others), why not install KDE as a GRP package? I installed my entire Gentoo system as a stage3/GRP install on a 333 MHz Pentium II and it all runs just fine. Is it really necessary to compile *everything*? Could these long compile times be at least partly due to including USE flags for a bunch of features you don't need supported in every package?
I used to drive manual transmission all the time. However, my wife will only drive automatic. Since we switch cars from time to time, she needs to be able to drive both cars. So unfortunately, I'm stuck with automatic.
Are these acronyms really necessary? I guess it's easier to type WRT than to type "with regard to" but for thos of us out there who might not have ever seen that acronym (myself included) it makes your post a little more difficult to read, IMHO. However, IANAL so YMMV.
Exactly. There are 2 consecutive entrances onto an interstate where I live that are both well known for the high rate of accidents. Local authorities were actually thinking of putting a stop sign in if the accidents didn't decrease. A large part of the problem is the people who insist on stopping at the end of the ramp before merging. Stop signs would only make this worse.
Also, as you are coming down an entrance ramp, quickly accellaerating to merge in with the insanely fast interstate drivers, the differential speed between you and the person stopped at the merge point waiting for an opening to enter the interstate also increases.
As far as passing in that situation being illegal in the US, I was talking about when the center line is a double solid yellow line. Of course, if the center line is a single dotted yellow line, you may pass, or a double line where your side of the line is dotted. If they are both solid, no pass. (but people still insist on doing it even around blind corners.
Isn't it also illegal to pass someone using the opposing-direction lane? If I understand you correctly, you're describing a scene where you are on a road, one lane one way, one lane the other. You cross over into oncoming traffic (there may be no cars coming at you) to pass, and move back to your lane. I see people do that all the time, but as far as I know, it's not legal in the US (at least where I live).
I believe you can determine this, to a point. Maybe not country, but region (continent?) I've heard people talk about having to block all of Asia after reviewing audit logs to see that most attacks come from there.
How would that work, if I'm in the US, and attempt to access a server in London, am I then exempt from US law? If I'm subjected to both countries laws, what if they conflict? I'm not sure how the whole passport idea would work in cyberspace. If I physically travelled to London, I'd be subject to their laws, and (correct me if I'm wrong) exempt from US law.
It doesn't matter what type of account you run as, admin or not. If you get a virus or an exploit happening, it will run with the privileges of your account. So it will have access to everything you have access to. The operating system (and apps) can be reinstalled, but (assuming no backups... average users don't do that) how easy is it to replace your personal files (email, documents, etc)? Running as non-admin will help save the OS and apps, but not the data that's harder to replace.
Um... F3 != Windows Search (Start -> Search...)
F3="Find in active application"
I've used windows search before to search within the text of many files for a certain string of text, and several items in the resulting list didn't even HAVE the string I was looking for. This has happened several times. Also, it would be nice to be able to use logical (AND/OR) operators in windows search, or maybe be able to search within the results. There doesn't seem to be a way to do that.
Agreed, the probability of 'funny.sh' spreading is much lower than funny.exe. However, that may very well change as more and more people migrate to linux on the home desktop. "stupid" users will be "stupid" users no matter what operating system they run. On any platform, there is no way to completely remove the possibility of things like this happening. Various controls can be put in place, like your example of alias rm='rm -i' but what normal user would do that? Unless that alias is made part of the standard load of a distro.
What about when the clueless linux user opens the latest 'funny' script that contains something like 'rm -rf ~/*'?
Thanks for the tip. I'll keep that in mind. I'm glad modern linux distros automatically prompt for the root password when needed. As far as I'm concerned (on the windows side), having to open the entire shell (explorer) as admin in order to run a certain program (e.g., control panel) seems like bad design. But at least that option is there. I would at least like to see the commandline version of runas work as well as su does in linux.
per week
per week
Save ink?
[sarcasm]Don't tell me you're one of those users who writes on the monitor.[/sarcasm]
I've tried to use RunAs to execute different things as an admin user from my normal account on XP Pro. Some things just don't seem to work right. For example, the Control Panel. Most programs you should be able to just right click, RunAs... but I haven't figured out how to do that for the control panel for things like adding/removing hardware/software, changing services, etc. I've even tried it at the console "runas /user: administrator control.exe" or something like that. RunAs doesn't always work in my experience. Unlike su in linux, works every time for me.
Couldn't the browser be designed to run as a separate "browser" user? The actual user that wants to browse the web could be part of the "web" group or something similar. The "browser" user account wouldn't have full access to the real user's files because "browser" is a different user. Just like with other programs like, say, MySQL. the MySQL daemon runs as mysql on my system. My username is part of the mysql group, and the mysql daemon does not have access to my files. Sure, that example is on linux, but Windows should be able to operate in a similar fashion.
Some people can't afford to install the latest version. I run Win98SE at home and I haven't had much problem. I am on a dialup connection too, so I'm not always connected, which helps I guess.
Actually, in Windows, can't a normal user install software if they install it to their \Documents and Settings\ folder? I thought the main reason regular users could not install software was because it installs to c:\Program Files by default. It should work if the user changes that setting to a folder they have full access to. I've installed a couple apps this way as a regular user. Of course then, just like in *nix systems, this app would have access to anything the user has access to.
If we're talking about your average Joe User here, what Joe User performs backups anyway?
Yes, I've noticed that parts of the explorer GUI change when moving from the local system to the web. But explorer does open other protocols (ftp for example) embedded. I can also open different documents (word, flash, etc) embedded. It would be better if the GUI would stay the same (especially menu options) though. However, I don't even use IE anymore anyway. I'm trying out Firefox and Opera now. :-)
I did reply to this as AC because I didn't realize I wasn't logged in. However, my response doesn't seem to be showing up. Basically, I did a stage3/GRP because my system is a bit on the slow side. I am on dial-up, one phone line, so I can't afford the time to download all the sources for a stage1 or 2. However, I did want to install Gentoo because I heard it was a good distro to learn the inner-workings of linux. Perhaps one of these days I'll give Debian a try, or move to Slackware.
Wasn't this one of the complaints people had about Internet Explorer? It is a single application that can browse both your local system and the web.
If Gentoo takes so long to compile KDE for you (doesn't seem to take so long for others), why not install KDE as a GRP package? I installed my entire Gentoo system as a stage3/GRP install on a 333 MHz Pentium II and it all runs just fine. Is it really necessary to compile *everything*? Could these long compile times be at least partly due to including USE flags for a bunch of features you don't need supported in every package?
That's a lie and you know it.
I used to drive manual transmission all the time. However, my wife will only drive automatic. Since we switch cars from time to time, she needs to be able to drive both cars. So unfortunately, I'm stuck with automatic.
Are these acronyms really necessary? I guess it's easier to type WRT than to type "with regard to" but for thos of us out there who might not have ever seen that acronym (myself included) it makes your post a little more difficult to read, IMHO. However, IANAL so YMMV.
on slackware
What about the other non-public networks? 192.168.0.0-192.168.255.255? 172.16.0.0-172.31.255.255?
Exactly. There are 2 consecutive entrances onto an interstate where I live that are both well known for the high rate of accidents. Local authorities were actually thinking of putting a stop sign in if the accidents didn't decrease. A large part of the problem is the people who insist on stopping at the end of the ramp before merging. Stop signs would only make this worse.
Also, as you are coming down an entrance ramp, quickly accellaerating to merge in with the insanely fast interstate drivers, the differential speed between you and the person stopped at the merge point waiting for an opening to enter the interstate also increases.
As far as passing in that situation being illegal in the US, I was talking about when the center line is a double solid yellow line. Of course, if the center line is a single dotted yellow line, you may pass, or a double line where your side of the line is dotted. If they are both solid, no pass. (but people still insist on doing it even around blind corners.
Isn't it also illegal to pass someone using the opposing-direction lane? If I understand you correctly, you're describing a scene where you are on a road, one lane one way, one lane the other. You cross over into oncoming traffic (there may be no cars coming at you) to pass, and move back to your lane. I see people do that all the time, but as far as I know, it's not legal in the US (at least where I live).