Slashdot Mirror


User: Shados

Shados's activity in the archive.

Stories
0
Comments
3,645
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 3,645

  1. Re:WebDAV used much? on Microsoft Downplays IIS Bug Threat · · Score: 1

    Yeah I realized that after I posted, that it could be taken as "attempt". Obviously, especially with all the script kiddies and bots, it mostly comes from the outside, but most of those are against patched vulnerabilities. Even in high profile companies like banks, there is a general feeling of "Who would hack us from the inside?! They wouldn't even know how!!!", without realizing how quickly the secretary will learn how to run a hacker's script if you piss her off on the wrong day.

  2. Re:WebDAV used much? on Microsoft Downplays IIS Bug Threat · · Score: 5, Informative

    Yup. You need a fairly specific setup: WebDav enabled on the same application as NTLM authentication (kerberos and anonymous/form is ok as far as I understand), and there must not be anything on top of WebDev for authentication (such as one of the various single signon ISAPIs or a CMS exposing its content through webdav with some form of custom security schemes).

    Since no one in their right mind will have WebDav and NTLM exposed to a public site, then the "hackers" can only come from within in the vast majority of scenarios. Don't get me wrong: that is severe, as most hacking DOES come from within.

    What makes it far more major, is that its one of the extremely rare remotely exploitable vulnerability that IIS6 have had. Contrary to Slashdot beleif, IIS6 (IIS7 more so though) is totally rock solid and extremely secure, so having something like that pop up is quite scary.

  3. Re:bogus answers on Study Shows "Secret Questions" Are Too Easily Guessed · · Score: 1

    My PIN is 10 characters long, thank you very much. Still only digits though.

  4. Re:bogus answers on Study Shows "Secret Questions" Are Too Easily Guessed · · Score: 1

    Even worse, in my opinion, is some bank's web sites, like mine: It doesnt let me have a password of more than 8 characters, and special characters are not allowed (only alpha and numbers, not even space!).

    Then in the name of security, they put these stupid questions. Fix the passwords first anyone?

  5. Re:Tired of crappy CMS' on Front End Drupal · · Score: 1

    The more mature CMSs (such as those you mentionned, Alfresco, Sharepoint, etc) can be extended programmatically to do pretty much anything and everything, so its just a foundation. Unlike prebaked web packages of old, where if you hit the limit, you were screwed, these are just a starting point that can be extended indefinately. Usually they're selected by the developers once the requirements are excessive to begin with :)

  6. Re:I've been saying this for... on Gartner Tells Businesses to Forget About Vista · · Score: 1

    Honestly, Microsoft would really prefer that businesses upgrade to Vista now, then upgrade to Windows 7 a year from now. That means more money to them

    Aside for all the businesses with software insurance or a similar licensing agreement, where its the same amount of money either way :)

  7. Re:I did the commuter rail thing on Your Commuting Costs By Car Vs. Train? · · Score: 1

    Its really more useful if you live within reach of a subway or a bus that can get you to the subway... For the "after work" stuff, once you fix up your routine a bit, it often ends up a bit simpler (You can get moderately drunk and not have to leave your car, for one =P)

    In my case, door to door in car is 45-50 minutes, door to door in bus + subway (20 minutes bus, 40 minutes subway, 10 minutes walk) is 70 minutes.

    Transit card costs me 105$/month, 15% tax deductible. Fuel well...its something like 400$~/month (long, long way, plus tons and tons of red lights on the way that you can't dodge), parking is 200-250$ (and there's a 2 years wait line to get a subscription), and the buses/subways come every 3 minutes so even if I miss one, no biggy.

    If there's remotely any traffic, then between the subway and the transit-only lane in bus, I'll get home 20-30 minutes faster than if I was in car. And during winter after a snowstorm, without a car to dig out I can save a good 15-20 minutes too.

    So overall, the lifestyle is debatedly better using just transit (zipcar for everything else, there's like 3 right in front of my place, though I honestly never needed it), and its infinitely cheaper.

  8. Re:Ah, Vista on Microsoft Not Ditching Vista Until At Least 2011 · · Score: 1

    Aero uses a few douzen megs of RAM at most. If your install runs on 1 gig without Aero, it will run just as well on 1 gig with it. Its only at 512 megs that you really need to turn it off, since every megs count (but disabling that and a few other things like superfetch, or just using Home Basic, and it works fine even on that)

  9. Re:time for new tax structure on Battle Lines Being Drawn As Obama Plans To Curb Tax Avoidance · · Score: 1

    It makes a difference because the movie you buy in an area with sales tax, the more "punished" you get for spending. Its not "a few invisible percents" everywhere, and if you abolished income tax, it would have to be much, much higher to compensate. Just in some provinces in Canada and in Europe it can range between 10-20%. On everything you buy. See something in a sales tax free area for 1000$, it costs you 1150 to 1200$~!

    Yeah, nobody cares...

  10. Re:time for new tax structure on Battle Lines Being Drawn As Obama Plans To Curb Tax Avoidance · · Score: 1

    If you remove income tax and only tax sales, you hurt merchants like crazy. It happens to some extent in canadian cities not too far from the border. Our sales tax are really high, so people buy elsewhere, thus both reducing the tax income and hurting commerces.

    I'd almost think the opposite would be better. Remove all sales taxes, and just tax incomes, that way everyone wants to buy from you...helps the economy, create jobs, etc.

    But then you have to catch people who dodge tax... so I guess nothing is both good and easy :)

  11. Re:Badly Specified Standard on Office 2007SP2 ODF Interoperability Very Bad · · Score: 2, Interesting

    This. Same issue with Html/CSS, actually. The XHTML/CSS specs leave a lot to the implementation, so that even for parts where IE8 is fully compliants, you have to test between other browsers. The only thing that makes it seem like Firefox, Safari, Opera, etc all use the "same standard", is because they push it a notch further, and on top of the standard, they synchronize their custom implementations on the parts that are not in the standard, while IE8 does not (that includes part where Firefox, etc are NOT standard, yet IE8 is, which makes it seem like its the other way around).

    This is no different. The standard sucks, and instead of implementing the standard, people implement the "convention". "Oh, this is exactly what the standard dictates, but it doesnt work in suite XYZ..so lets fix it".

    Of course, I'm not going to claim OOXML is any better, its really not, and the 2003 doc format is a million times worse... but these standard specifications are simply not fit to be used as the end all be all. If we lost overnight all of the current implementations, we'd have one hell of a hard time reimplementing them as is from only the specs. Which totally kill the points.

  12. Re:mixed opinion of the reviewer's intelligence on A Mixed Review For Windows 7's XP Mode · · Score: 1

    My point is that at least to me, even Windows 98 is unbearable, performance-wise, on my old 256 megs, celeron 366 mhz. Win NT was pushing it, 2k was painful, XP was like putting home premium on unsupported hardware. So i have a feeling your definition of fast differs from quite a few people's.

  13. Re:mixed opinion of the reviewer's intelligence on A Mixed Review For Windows 7's XP Mode · · Score: 1

    Word would launch in about 3 seconds from a fresh reboot. Excel was similarly fast.

    Considering thats slower than Excel 2007 -without- preloading on Vista with 512 megs of RAM....

  14. Re:E-Book? I'd rather have a document reader. on Samsung Papyrus E-Book Reader, Coming Soon · · Score: 1

    You actually don't need wifi to convert the file. You can convert it via a free email service and then transfer it from your computer, no wifi needed. You got me on the experimental part (it works fine, like the browser: its experimental in the same way half of Google's stuff is beta...they don't want to take responsability for it, and if it eats away in their sales they may take it away...which I realize is pretty bad), but most other ebook readers have PDF native.

    Most grad student in the country didn't hold one in their hands, thats why they don't want one, IMO. I bought a kindle to my girlfriend who's currently in the US (i'm canadian, so I can't easily get one for myself), because she wanted one, but once I saw it and tried it out....wow, just wow.

  15. Re:Scalability? on Windows 7 RC Rush Crashes MSDN, TechNet Pages · · Score: 1

    yeah, especially since the download servers are handled by a third party that runs Linux across the board... :)

  16. Re:Well... on Why Is It So Difficult To Fire Bad Teachers? · · Score: 1

    Where are going to base this on? Some students that can't solve math problems?

    Do what many colleges do. Record the damn classes.

    When I was in highschool, my english teacher (second language... I was going to a french canadian school) had absolutely no interest in teaching english. He would teach philosophy, history, blah blah blah, anything but english (not like most second language classes where they use these things as a subject to get the language through...nope, there was zero english teacher, and grading was purely on the content, spelling, grammar, lexical mistakes didn't matter, and the linguistic/literature qualities didn't matter either, so you couldn't even argue it was a literature class: it wasn't). We would be given 1-2 class periods to fill up the mandatory exercise books right before the official finals and that was it.

    At some point where we needed to make a 150 pages essay in 5 days (highschool...second language class...remember that) about the relation between time and space (or something along those lines), I went to complain to the administration...who simply didn't beleive me and thought I was making it up. I watched the teacher get asked about it, and straight up lied saying he did no such thing, and that the mandatory program was what was being thought...

    I eventually raised enough hell with the help of my parents to be switched class, and things were good (for me anyway...I still heard horror stories from other students who were not able to switch). When my new teacher asked why I went through so much trouble, and I explained, she didn't beleive me and thought -I- was lying, because "such a good teacher as my former one would NEVER do such things!", she said.

    Bad teachers are incredibly good at screwing up the system in their favor. Recording and reviewing classes is the only way to ensure quality.

  17. Re:Surprise Surprise on Windows 7 RC Rush Crashes MSDN, TechNet Pages · · Score: 1

    No, they are doing it wrong, because for development purpose software, companies can get better deals for bulk purchases. MSDN subscriptions are a package deal with pseudo-software insurance, support contract and other benefits, which are far more valuable than the software themselves. Actually, if you're good at convincing Microsoft its in their best interest, they'll give you the stuff free.

  18. Re:They also blame us on US Says Canadian Copyright As Bad As China's, Russia's · · Score: 2, Informative

    Off I go to legaly download some music.

    Morally OK dowload some music, yes. Legally, not so much. So many people will quote the ruling that stated that because of the levy it was legal to download stuff in Canada...then conveniently forget the result of the next appeal. No ruling ever stated that it was legal, and the laws don't mention anything about it being legal because of that (totally stupid) levy.

    I agree we should either remove that damn levy, or assert that its legal to go on a download spree...but as of today, neither are set.

  19. Re:Surprise Surprise on Windows 7 RC Rush Crashes MSDN, TechNet Pages · · Score: 1

    a geforce 8XXX serie is DX10 compatible, and its starting to be kindda outdated. I have one and it still runs most games very well, but a 7XXX serie would seriously be pushing it.

    So it basically just means that all videocards that don't suck have DX10...doesn't give you much choice here, hmm?

  20. Re:Surprise Surprise on Windows 7 RC Rush Crashes MSDN, TechNet Pages · · Score: 1

    MSDN is only expensive for people who buy it straight from Microsoft's web site. Any company with volume licensing agreement or individuals going through a reseller can get it for like 900$/year for the premium edition (Team System are more expensive, but are actually cheaper, but a LOT, than the non-MS commercial alternatives...)

    And that gives you a support contract and a bunch of other things. Really, its peanuts.

    Anyway, point is, MSDN's private servers are arguably slower than the public ones a lot of the time. Thats not where most of the cost of the subscription goes. (If anyone, especially a company, buys a bunch of MSDN subscriptions for the downloads, they're doing it wrong)

  21. Re:VM's are easy and fun... I'll take a free licen on Windows 7 To Include "Windows XP Mode" · · Score: 1

    Even extremely high I/O. You can make VMs use physical discs directly, and even virtual discs aren't that bad. As a general rule, if a cluster of VMs doesn't suit your I/O need, you need to pull a Google or an Ebay and wrap a custom solution anyway. Many of the biggest clusters of databases in the world (note I did -not- say the actual biggests) run in datacenters fully virtualized, and it works fine. So real time graphic hardware acceleration (which you did mention) is really the only bottleneck now...once thats fixed, we'll want to start considering having all desktops as VMs, too, for ease of support, management, and restores (many businesses are already considering that, since they dont need hardware graphics)

  22. Re:Happy, and depressing on Obama Says 3% of GDP Should Fund Science Research And Development · · Score: 1

    The problem is that lately, merely staying alive at all is a relatively expensive thing, so there isn't much left for the extras. Sucks, but thats how it is.

  23. Re:Hmnn on Zombie Macs Launch DoS Attack · · Score: 1

    Non-updated machines aside, the near totality of virus infected windows boxes come from people being tricked into running software, even if it means entering an admin password or clicking a big box warning them not to (or even, god forbid, canceling out their anti-virus so the damn thing will install!).

    I can stick an infected USB drive in my computer (that almost sounds wrong) all day long without getting a virus on my windows box...

  24. Re:Antivirus on Vista Post-SP2 Is the Safest OS On the Planet · · Score: 1

    /looks at his Vista machine that he uses everyday, since the very day Vista hit MSDN with absolutely no anti-virus...

    Yup, you can! I do an online scan (switching provider everytime) every couple of months, and no virus. I'm not particularly careful, either. Just leave UAC and memory protection on (brownie point if you're running 64 bit and have the hardware version on... I don't. Oh, and more brownie points if you don't run as admin at all, so the UAC popup will ask for a password instead of just a mouse click), and you're pretty much safe, unless you do something stupid explicitely, but hey, thats true for all OS anyway.

  25. Re:No such thing as unlimited on Time Warner To Offer Unlimited Bandwidth For $150 · · Score: 1

    you fit in the very, very few (aside for netflix users) legitimate (im assuming a lot here =P) downloaders who would be affected by a bandwidth cap.