Yes, the parent is right on. An imap sync program (or unison, mentioned above), seem to be a good idea. I've been researching this a lot myself. I have a few basic needs for mail that must be met.
1 IMAP Account, 2 identities (one gets forwarded in and filed with sieve rules). 2 PGP Keys; not using subkeys, home and work. Ability to access email from my personal server on the internet, or my laptop when disconnected. Works with OS X contacts so I can use the missing sync to keep my phone's addy book up to date.
Unfortunately you'd think I'm the only person on the planet who needs this. Thunderbird doesn't work with the address book, Mail.app has big time problems checking the sub folders (even with a sync on check hack) for new mail and remembering flags. It's really annoying to see you have 15 new mails, that YOU'VE ALREADY READ.
I'm really about to go through the hassle of using an imap sync program and mutt to handle all my email. I haven't used mutt much (went from Pine to a GUI IMAP client back in the 90s), but it's worth the hassle to know I can use the same email config when I SSH in, or am on my desktop, and have it all work. Now it's just a matter of finding time to sit down, write a mutt config, learn all the shortcuts, and set up syncing.
Another thing, if the original poster wants their own mail server, I'll plug Linode every time I get a chance. As long as you don't overload the server package you get (I have a 200 that's overkill for me) it's the best thing a geek can have. You can run whatever you need to, and when a major upgrade goes bad you have full console access to boot another distro and fix your mess. It's on 24/7 in a real data center and you can run whatever you need to with no restrictions. More stable than Xen, and the service can't be beat. Oh, and they're way more affordable than a dedicated server.
Now if only I can figure out a stable working offline email system that meets my needs and isn't buggy.
They paid to ROMS, the RIAA refused to take money from ROMS. I'd assume because they'd be acknowledging that allofmp3 was in fact paying money, just at a rate they happen to not agree with. Being a cartel, it's not surprising.
It's the same when I listen to terrestrial radio, I expect the station to pay the ASCAP/BMI for the plays they make. It's up to the songwriter to collect. The same with internet radio, they have to pay ASCAP/BMI, and the RIAA for the bullshit 'reproduction' tax. As you can tell, I happen to disagree with the reproduction license, but that's the law, and it's up to the RIAA to get their due percentage from the people who collect the fees.
I somehow doubt if artists stopped collecting their royalties from ASCAP/BMI that you'd go screaming on slashdot that all radio stations in the United States are illegal, but that's what you're doing.
The patents are on; "Buying stuff with puters using methods adapated from what brick and morter stores used for thousands of years." You're saying IBM didn't notice people doing that before 2002? There was an entire stock market bubble that came and went on that exact thing during that time!
While I agree Amazon's 1-click is an obvious use of what cookies were intended to do, they didn't watch everybody else do 1-click ordering for 10 years and then proceed to sue the biggest name in the 1-click ordering industry.
This is indeed a submarine style approach. In the article: "The '542 patent, for instance, was filed in 1990, while the '771 patent was filed in 1993." Notifying somebody in 2002 for infringing on something that, in IBM's words, "represents the work product of tens of thousands of scientists and engineers and billions of dollars of investment," is either done on purpose, or is a product of gross negligence.
I realize he didn't explain what the link was, but it does look to be a legit piece of software that has to do with the article. Before you mark somebody a troll, at least take the time to verify they're actually trolling. This isn't digg yah know.
It seems like his real problem is that he's suffering from cronic lack of intelligence.
Jeeze. It's funny, lighten up. I know the guy personally, and the website was started as a joke to make light of the accident. I'm sure you or nobody you know has ever hurt themselves while having fun and known 2 seconds later they shouldn't have done that. He's a self employed web developer with his own company/product (that's doing more business every day), so I'm sure he's just trying to save money by not taking an ambulance. It's not like it mattered anyway, since it took 3 trips to 3 different doctors to figure out what was wrong.
Oh, and before you cast stones, learn how to spell Chronic.
I've used a proxy plenty of times to hit backend systems, it's a good tool. I think it even says all over the mod_proxy docs that you should be careful not to hit stuff you don't control, or leave it wide open.
There are hundreds of other things that people do too, like open urls on arbitrary servers with their php code that aren't safe. That doesn't mean I want the developers to remove the ability to do that when I decide it's safe to do.
The reason is so the flash app doesn't go trading data with servers you didn't explicitly go to. It's the same reason java won't load classes off servers other than the one you went to. If you're proxying the request out somewhere else on your server farm, then you're vouching for that content, since it looks like it came from you. It would be pretty silly to do unless you controlled the content, since a malicious server operator could do some nasty stuff to your users.
While there's a good chance this probe will find nothing, espionage is still alive and well. The world as not nearly as peaceful as we'd like to think it is. Have you ever seen xray photos of electronics with bugs embeded in them? They do exist.
Indeed. All 3 people who run the windows version of sendmail (of all things...) can rest easy.
Am I the only one who thinks the idea of running sendmail on windows is downright strange? I've used postfix for years... I know you can come up reasons to run sendmail on windows, but jeeze... That's like finding a reason to run activex on linux.
I JUST got a PPC-6700 and am looking for ssh software...
I can't vouch for it, and I haven't used it yet. (How's that for a review?) So mostly I'm wondering if anybody else has tried it before I drop $50 on it.
There are a few free ones out there (how's the putty port?) but this one seems to be pretty full featured. I really would like to be able to use keys and have some sort of bookmark capability.
Like the second sentance you quoted, I assumed you'd use a config file.
What happens when somebody gets into your front end? They have a password to your DB. Chmod 600 isn't going to help you if they get root. Or if the server is running as root and they exploit that.
Sorry, I meant data source config as in an XML config file, I guess that's why I said config.
Updating a whole swath of poorly designed apps is rough. I've seen a single password change on an account ripple through systems really badly. Just because there are ways to make it easier, it doesn't mean that the developer who was rushed through the project did things right, or the paper MCSE set it up right.
I think you and the mods missed the point. So how does tomcat talk to mysql? Do you use a password? Trust the IP? Bind to 127.0.0.1 or Unix sockets only?
The idea that instead of USERS having passwords, the APPLICATIONS do now. You can't just auto lock them out after a certain amount of time with no change, if somebody forgets to change the password, you're down. So you've got s3cr3t456 hard coded in the data source config of your app, who's gonna change that? You better have procedures in place, and you better keep that config file locked down since you have a powerful DB account password in plain text in your front end app server. Some vendors obtusify that password with what looks like encryption, but unless you've set it up right and enter a password each time you start the app server, it's still trivial to decrypt.
Another sticky problem is access to the data is no longer controlled by the RDBMS, since that application account needs wide open access. One security hole in your in house written app can trash any part the application could need to write to. If you use the security/roles in an DB you can restricted access to the data to a much finer level. Principal of least access and all... Unfortunatly, that's how things used to be done and in the land of middleware aren't anymore.
I wrote a custom data source for a servlet once that would auth each user using the account in the db and connect as them to the db. It really breaks how server side java is supposed to work though. One of the big ideas of J2EE is you're supposed to move almost all the logic that used to be data related in the DB up a layer into the middleware. It helps sun take customers from big DB vendors, but makes real world security much harder.
It's a sticky set of problems in todays world, with no widely accepted solutions.
Yes he's conflicted, and a hypocrite and a liar. He made his choice, in this day and age, people in the music scene know what labels are like. He wants the best of both worlds and that's wrong.
So I guess: Band gets signed to label. Band goes in debt to label. Band needs people to hear them, encourages trading. Band makes it big. Label puts protection on CD. Band discourages trading. Fans who trade get sued. This is ok with you.
They are our best chance for success, and we desperately need them to be listening to us, talking about us, coming to our shows and yes, trading us.
To be clear, I certainly don't encourage people to pirate our music. I have poured my life into my band, and after two major label records, our accountants can tell you that we're not real rock stars yet. But before a million people can buy our record, a million people have to hear our music and like it enough to go looking for it. That won't happen without a lot of people playing us for their friends, which, in turn, won't happen without a fair amount of file sharing.
Don't steal, except when it helps us. Our label won't sue you, promise! Right...
RAC is one way to cluster in Oracle. There are ways to do replication though. The easy ones are one way, but multimaster local/distant site replication is totally doable.
I have yet to find anything oracle can't do. It is a bit of an 8000 pound gorilla though...
While the grandparent was a bit of a zealot about software freedom, you didn't read. He didn't complain about macromedia flash crashing his browser, it was the free alternative, gplflash.
Slashdot Mirror
Yes, the parent is right on. An imap sync program (or unison, mentioned above), seem to be a good idea. I've been researching this a lot myself. I have a few basic needs for mail that must be met.
1 IMAP Account, 2 identities (one gets forwarded in and filed with sieve rules).
2 PGP Keys; not using subkeys, home and work.
Ability to access email from my personal server on the internet, or my laptop when disconnected.
Works with OS X contacts so I can use the missing sync to keep my phone's addy book up to date.
Unfortunately you'd think I'm the only person on the planet who needs this. Thunderbird doesn't work with the address book, Mail.app has big time problems checking the sub folders (even with a sync on check hack) for new mail and remembering flags. It's really annoying to see you have 15 new mails, that YOU'VE ALREADY READ.
I'm really about to go through the hassle of using an imap sync program and mutt to handle all my email. I haven't used mutt much (went from Pine to a GUI IMAP client back in the 90s), but it's worth the hassle to know I can use the same email config when I SSH in, or am on my desktop, and have it all work. Now it's just a matter of finding time to sit down, write a mutt config, learn all the shortcuts, and set up syncing.
Another thing, if the original poster wants their own mail server, I'll plug Linode every time I get a chance. As long as you don't overload the server package you get (I have a 200 that's overkill for me) it's the best thing a geek can have. You can run whatever you need to, and when a major upgrade goes bad you have full console access to boot another distro and fix your mess. It's on 24/7 in a real data center and you can run whatever you need to with no restrictions. More stable than Xen, and the service can't be beat. Oh, and they're way more affordable than a dedicated server.
Now if only I can figure out a stable working offline email system that meets my needs and isn't buggy.
They paid to ROMS, the RIAA refused to take money from ROMS. I'd assume because they'd be acknowledging that allofmp3 was in fact paying money, just at a rate they happen to not agree with. Being a cartel, it's not surprising.
It's the same when I listen to terrestrial radio, I expect the station to pay the ASCAP/BMI for the plays they make. It's up to the songwriter to collect. The same with internet radio, they have to pay ASCAP/BMI, and the RIAA for the bullshit 'reproduction' tax. As you can tell, I happen to disagree with the reproduction license, but that's the law, and it's up to the RIAA to get their due percentage from the people who collect the fees.
I somehow doubt if artists stopped collecting their royalties from ASCAP/BMI that you'd go screaming on slashdot that all radio stations in the United States are illegal, but that's what you're doing.
The patents are on; "Buying stuff with puters using methods adapated from what brick and morter stores used for thousands of years." You're saying IBM didn't notice people doing that before 2002? There was an entire stock market bubble that came and went on that exact thing during that time!
While I agree Amazon's 1-click is an obvious use of what cookies were intended to do, they didn't watch everybody else do 1-click ordering for 10 years and then proceed to sue the biggest name in the 1-click ordering industry.
This is indeed a submarine style approach. In the article: "The '542 patent, for instance, was filed in 1990, while the '771 patent was filed in 1993." Notifying somebody in 2002 for infringing on something that, in IBM's words, "represents the work product of tens of thousands of scientists and engineers and billions of dollars of investment," is either done on purpose, or is a product of gross negligence.
You're trying too hard: http://www.amp.com/
They make all kinds of connectors. There's a good chance you have a large number of them in your office or living room and don't even know it.
I realize he didn't explain what the link was, but it does look to be a legit piece of software that has to do with the article. Before you mark somebody a troll, at least take the time to verify they're actually trolling. This isn't digg yah know.
It seems like his real problem is that he's suffering from cronic lack of intelligence.
Jeeze. It's funny, lighten up. I know the guy personally, and the website was started as a joke to make light of the accident. I'm sure you or nobody you know has ever hurt themselves while having fun and known 2 seconds later they shouldn't have done that. He's a self employed web developer with his own company/product (that's doing more business every day), so I'm sure he's just trying to save money by not taking an ambulance. It's not like it mattered anyway, since it took 3 trips to 3 different doctors to figure out what was wrong.
Oh, and before you cast stones, learn how to spell Chronic.
First google result: http://www.adtron.com/products/A25fb-SerialATAFlas hDisk.html
Flash drives have been used in embeded stuff for a while now.
I've used a proxy plenty of times to hit backend systems, it's a good tool. I think it even says all over the mod_proxy docs that you should be careful not to hit stuff you don't control, or leave it wide open.
There are hundreds of other things that people do too, like open urls on arbitrary servers with their php code that aren't safe. That doesn't mean I want the developers to remove the ability to do that when I decide it's safe to do.
The reason is so the flash app doesn't go trading data with servers you didn't explicitly go to. It's the same reason java won't load classes off servers other than the one you went to. If you're proxying the request out somewhere else on your server farm, then you're vouching for that content, since it looks like it came from you. It would be pretty silly to do unless you controlled the content, since a malicious server operator could do some nasty stuff to your users.
I may be wrong, but last time I checked, the Core Duo was not a 64bit chip.
While there's a good chance this probe will find nothing, espionage is still alive and well. The world as not nearly as peaceful as we'd like to think it is. Have you ever seen xray photos of electronics with bugs embeded in them? They do exist.
Indeed. All 3 people who run the windows version of sendmail (of all things...) can rest easy.
Am I the only one who thinks the idea of running sendmail on windows is downright strange? I've used postfix for years... I know you can come up reasons to run sendmail on windows, but jeeze... That's like finding a reason to run activex on linux.
Have you heard of FinchSync?
http://www.finchsync.com/
FinchSync is a tool for synchronizing contacts, appointments and tasks from Mozilla email and calendar products with a Pocket PC.
I JUST got a PPC-6700 and am looking for ssh software...
I can't vouch for it, and I haven't used it yet. (How's that for a review?) So mostly I'm wondering if anybody else has tried it before I drop $50 on it.
http://choung.net/mToken/
There are a few free ones out there (how's the putty port?) but this one seems to be pretty full featured. I really would like to be able to use keys and have some sort of bookmark capability.
The GodFather is one of the best windows taggers, and it's free.
Java+BEA is a python job, at least if you have any sort of exposure to WLST, their scripting tool for running weblogic servers that based on jython.
Like the second sentance you quoted, I assumed you'd use a config file.
What happens when somebody gets into your front end? They have a password to your DB. Chmod 600 isn't going to help you if they get root. Or if the server is running as root and they exploit that.
Sorry, I meant data source config as in an XML config file, I guess that's why I said config.
Updating a whole swath of poorly designed apps is rough. I've seen a single password change on an account ripple through systems really badly. Just because there are ways to make it easier, it doesn't mean that the developer who was rushed through the project did things right, or the paper MCSE set it up right.
I think you and the mods missed the point. So how does tomcat talk to mysql? Do you use a password? Trust the IP? Bind to 127.0.0.1 or Unix sockets only?
The idea that instead of USERS having passwords, the APPLICATIONS do now. You can't just auto lock them out after a certain amount of time with no change, if somebody forgets to change the password, you're down. So you've got s3cr3t456 hard coded in the data source config of your app, who's gonna change that? You better have procedures in place, and you better keep that config file locked down since you have a powerful DB account password in plain text in your front end app server. Some vendors obtusify that password with what looks like encryption, but unless you've set it up right and enter a password each time you start the app server, it's still trivial to decrypt.
Another sticky problem is access to the data is no longer controlled by the RDBMS, since that application account needs wide open access. One security hole in your in house written app can trash any part the application could need to write to. If you use the security/roles in an DB you can restricted access to the data to a much finer level. Principal of least access and all... Unfortunatly, that's how things used to be done and in the land of middleware aren't anymore.
I wrote a custom data source for a servlet once that would auth each user using the account in the db and connect as them to the db. It really breaks how server side java is supposed to work though. One of the big ideas of J2EE is you're supposed to move almost all the logic that used to be data related in the DB up a layer into the middleware. It helps sun take customers from big DB vendors, but makes real world security much harder.
It's a sticky set of problems in todays world, with no widely accepted solutions.
Yes he's conflicted, and a hypocrite and a liar. He made his choice, in this day and age, people in the music scene know what labels are like. He wants the best of both worlds and that's wrong.
So I guess:
Band gets signed to label.
Band goes in debt to label.
Band needs people to hear them, encourages trading.
Band makes it big.
Label puts protection on CD.
Band discourages trading.
Fans who trade get sued.
This is ok with you.
Pick one way or the other, you can't have both.
They are our best chance for success, and we desperately need them to be listening to us, talking about us, coming to our shows and yes, trading us.
To be clear, I certainly don't encourage people to pirate our music. I have poured my life into my band, and after two major label records, our accountants can tell you that we're not real rock stars yet. But before a million people can buy our record, a million people have to hear our music and like it enough to go looking for it. That won't happen without a lot of people playing us for their friends, which, in turn, won't happen without a fair amount of file sharing.
Don't steal, except when it helps us. Our label won't sue you, promise! Right...
Assholes, just like Metallica.
RAC is one way to cluster in Oracle. There are ways to do replication though. The easy ones are one way, but multimaster local/distant site replication is totally doable.
I have yet to find anything oracle can't do. It is a bit of an 8000 pound gorilla though...
While the grandparent was a bit of a zealot about software freedom, you didn't read. He didn't complain about macromedia flash crashing his browser, it was the free alternative, gplflash.
Energy is never lost, it becomes heat. If you live someplace where it's cold, that can be handy.