They have 13,000 linux-based computers, but after paying €50m to migrate they'll deploy 29,000 windows computers. This is bonkers. There has got to be conflict of interest here somewhere.
I disconnected the power to it a long time ago. They're still useful. Magazines still put them on the covers, and if you buy music then you probably don't want the mp3, I've not seen flac files on sale, despite today's bandwidth being fine to cope with wav.
I wonder though if its more likely to be related to other hobbies, such as cycling, or running where people drink coffee along with a physical task that involves a coffee break.
Who is going to get all hot and sweaty doing a physical activity, and then go drink a hot cup of coffee as a refreshment? That is a rather silly idea. Caffeine actually increases your thirst.
Caffeine is also included in sports drinks, and energy gels. It increases your tolerance of pain.
Every cycle club that I've been a member of normally has a half way coffee stop, or a coffee stop at the end of the ride. It's the done thing. It's very refreshing in the winter and in the Summer I normally let the coffee cool down first and have it at the very end.
selection bias. people who worry about drinking coffee live shorter lives.
I was thinking there could be some of that going on. I wonder though if its more likely to be related to other hobbies, such as cycling, or running where people drink coffee along with a physical task that involves a coffee break. So could be the exercise rather than the coffee. Would be like saying "wearing sports clothes extends your life" just because those who do athletics wear sports clothes.
Nothing stops Root from resetting append access only (I do it in the program I noted to Mr. Stoll himself during the File Open (as append, reset etc.)/Read-Write/Flush-Close cycle either really IF you think about it...
Same goes for diverting where the print goes. Difference is though, if both are attacked, you have some chance of grepping the logs, grepping print output takes a much longer as eyeballs don't work as fast. This assumes you can do something with it afterwards. On a laser, I'm not sure, but if you close the print fd file, I think it ejects the page. On line printers, this isn't as much an issue. If there is a large (page) buffer, then I think there's some chance that the lpd could be -9'd thus nothing gets written. Obvious when the admin gets in, but was damage done in the meanwhile? To be honest, I'm more bothered about dormant intrusions, those that are immediately obvious are less of a problem as you can deal with those.
I'd have more confidence in that than other methods. Granted you have to reboot to rotate, but it seems a fairly good compromise and has a lower carbon foot print than the paper method. There may also be times when the log buffer fills waiting for the printer to warm up and some connections may time out, though I've never checked this, would be mighty annoying if you cannot ssh to quiet machine because the log write hasn't returned.
P.S.=> Great read that book - imo, it ought to be required reading for security pros (can wipe logs all day, try it on a mirrored log AND a printer putting it out on paper the way Stoll did to trap East Germans & KGB w/ evidence they could NOT wipe)... apk
I agree, it should be required reading, or part of Sysadmin Employee Handbook.
You can make append only files, FWIW, which could be useful for logging in this way. Nothing stopping someone who gains root from rebuilding the FS though, just gives them another task and need to reboot the system. Printers run out of paper eventually.
Or, test it, zip in linux and tar both trap the attack vector. Its only some crappy librarys that are affected. output edited for path's, since it breaks/.'s filter otherwise.
This. The libraries that are affected total some thousands, not all projects that use the os tools.
This is another good reason to use containers/micro services for random bits of software. Compartmentalise things, particularly when dealing with untrusted, dirty uploads.
I doubt very much that people will pirate games if the game is more a subscription service. The games with the real longevity are in 90s cartridges. Single player games seem to have disappeared. If you want a good game of chess, you'll probably "apt-cache search" or google for an online variant. Would anyone bother getting "battle chess" these days? I see it was remade in 2014, but requires Windows {xp,7,8}, so that's going to be a no from me, won't be looking any further.
So Microsoft cannot buy Linux or Linus, but the closest thing they can do is to acquire a company based on software that Linus wrote. MS have also taken note of developers on the internet, they need a means to collaborate and I see the purchase of github as a way of buying that collaboration platform. Metadata will be lost in the collaboration tool, all the history will be stored in an import-only tool. This was true when it was github alone, but I fear that MS will employ predatory tactics and make this an issue as they may decide to modify the standard git tools a little in their favour, perhaps making things noticeably harder to work with if you don't use their brand (see HTML-ised email and their versions of javascript in the earlier days).
Greater focus on ease-of-use in the toolkit
Beat commodity protocols / services
Linux's homebase is currently commodity network and server infrastructure. By folding extended functionality into today's commodity services and create new protocols, we raise the bar & change the rules of the game.
I don't think the container would ever know the/truth/. Ultimately it could have a debugger attached, you may know about this in a thin sense like when you try and strace the same process twice. In an emulated sense it would be entirely possible. I believe at the kernel level things like dtrace/systemtap can run simultaneously, just like debugfs. At that level Windows MS can target you based on what processes are doing. Lets say, for example, all mail server data written to disk could be scanned and you could get advertiser mined that way.
You might also want a system that doesn't report your data and activity to Microsoft.
Not you personally, but you know. Thinking people.
How would the container (MS Windows) not know what the WSL is doing? By definition, it is a subsystem, therefore the same kernel is collecting the same telemetry.
... but also the S4B client has this peculiar tendency to occasionally stop being able to open new conversation windows. I still get messages (they show up in the notification area), but they are in no window whatsoever....
Yes, I notice this too, it is frustrating. I think there is some disconnect between a new IM session and the existing IM windows. Why the Skype authors decided to do something different to existing IM software and require some form of acknowledgement I have no idea. Why all IMs cannot be considered unacknowledged until you start typing? That would make more sense IMHO. Minimum viable product I guess.
Sometimes the UI just stops painting. I don't know if they are writing custom UI functionality or what, but Pidgin's "boring" use of the stock GTK UI elements has been much more consistent and reliable.
And yes. I completely agree, stock, working, tried and tested GTK UI is much more reliable, much more consistent and it's about time MS started using it;)
What's the point of an IM system that's so heavily bloated it takes multiple minutes to start at login on the platform they own? Coming from a primary linux background, having to wait obscene quantities of time for basic messaging (outlook, skype) to start is a huge time sink. Look at Mutt/Finch or Thunderbird/Pidgin. They're so much better at what they do and free.
It isn't just the start/task bar. Applications (and web sites assume the screens are tall like a mobile phone) so they stack the menu bars from top to bottom. Great if you can move one of the bars to the side of the screen, but that's barely scratching the surface of the problem. My preference is to go back to 4:3 layouts as they balanced the content with the tools. Too wide or too tall are painful. If I wanted to just read, I think I'd look for an eInk display, but that's another story.
From a political perspective, yes, 4 legs good, 2 legs better!
They have 13,000 linux-based computers, but after paying €50m to migrate they'll deploy 29,000 windows computers. This is bonkers. There has got to be conflict of interest here somewhere.
I disconnected the power to it a long time ago. They're still useful. Magazines still put them on the covers, and if you buy music then you probably don't want the mp3, I've not seen flac files on sale, despite today's bandwidth being fine to cope with wav.
What is the machine provides life support? Oh wait, you'd be mad doing that with windows, ok carry on!
Only Chuck Norris has the top gear
If I had the points, I'd mod up as you make a lot of sense.
I wonder though if its more likely to be related to other hobbies, such as cycling, or running where people drink coffee along with a physical task that involves a coffee break.
Who is going to get all hot and sweaty doing a physical activity, and then go drink a hot cup of coffee as a refreshment? That is a rather silly idea. Caffeine actually increases your thirst.
Caffeine is also included in sports drinks, and energy gels. It increases your tolerance of pain.
Every cycle club that I've been a member of normally has a half way coffee stop, or a coffee stop at the end of the ride. It's the done thing. It's very refreshing in the winter and in the Summer I normally let the coffee cool down first and have it at the very end.
selection bias. people who worry about drinking coffee live shorter lives.
I was thinking there could be some of that going on. I wonder though if its more likely to be related to other hobbies, such as cycling, or running where people drink coffee along with a physical task that involves a coffee break. So could be the exercise rather than the coffee. Would be like saying "wearing sports clothes extends your life" just because those who do athletics wear sports clothes.
Please check your block as it doesn't appear to be working:
$ curl -I www.slashdot.org
HTTP/1.1 301 Moved Permanently
Server: nginx/1.13.12
Date: Sun, 01 Jul 2018 08:05:36 GMT
Content-Type: text/html
Content-Length: 186
Connection: keep-alive
Location: https://www.slashdot.org/
Nothing stops Root from resetting append access only (I do it in the program I noted to Mr. Stoll himself during the File Open (as append, reset etc.)/Read-Write/Flush-Close cycle either really IF you think about it...
Same goes for diverting where the print goes. Difference is though, if both are attacked, you have some chance of grepping the logs, grepping print output takes a much longer as eyeballs don't work as fast. This assumes you can do something with it afterwards. On a laser, I'm not sure, but if you close the print fd file, I think it ejects the page. On line printers, this isn't as much an issue. If there is a large (page) buffer, then I think there's some chance that the lpd could be -9'd thus nothing gets written. Obvious when the admin gets in, but was damage done in the meanwhile? To be honest, I'm more bothered about dormant intrusions, those that are immediately obvious are less of a problem as you can deal with those.
My hints were towards https://man.openbsd.org/OpenBS...
I'd have more confidence in that than other methods. Granted you have to reboot to rotate, but it seems a fairly good compromise and has a lower carbon foot print than the paper method. There may also be times when the log buffer fills waiting for the printer to warm up and some connections may time out, though I've never checked this, would be mighty annoying if you cannot ssh to quiet machine because the log write hasn't returned.
P.S.=> Great read that book - imo, it ought to be required reading for security pros (can wipe logs all day, try it on a mirrored log AND a printer putting it out on paper the way Stoll did to trap East Germans & KGB w/ evidence they could NOT wipe)... apk
I agree, it should be required reading, or part of Sysadmin Employee Handbook.
You can make append only files, FWIW, which could be useful for logging in this way. Nothing stopping someone who gains root from rebuilding the FS though, just gives them another task and need to reboot the system. Printers run out of paper eventually.
Was a very awesome book, I should read it again.
... it was in the book 'The Cuckoo's Egg'.
Or, test it, zip in linux and tar both trap the attack vector. Its only some crappy librarys that are affected. /.'s filter otherwise.
output edited for path's, since it breaks
This. The libraries that are affected total some thousands, not all projects that use the os tools.
This is another good reason to use containers/micro services for random bits of software. Compartmentalise things, particularly when dealing with untrusted, dirty uploads.
I doubt very much that people will pirate games if the game is more a subscription service. The games with the real longevity are in 90s cartridges. Single player games seem to have disappeared. If you want a good game of chess, you'll probably "apt-cache search" or google for an online variant. Would anyone bother getting "battle chess" these days? I see it was remade in 2014, but requires Windows {xp,7,8}, so that's going to be a no from me, won't be looking any further.
So Microsoft cannot buy Linux or Linus, but the closest thing they can do is to acquire a company based on software that Linus wrote. MS have also taken note of developers on the internet, they need a means to collaborate and I see the purchase of github as a way of buying that collaboration platform. Metadata will be lost in the collaboration tool, all the history will be stored in an import-only tool. This was true when it was github alone, but I fear that MS will employ predatory tactics and make this an issue as they may decide to modify the standard git tools a little in their favour, perhaps making things noticeably harder to work with if you don't use their brand (see HTML-ised email and their versions of javascript in the earlier days).
Greater focus on ease-of-use in the toolkit
Beat commodity protocols / services
Linux's homebase is currently commodity network and server infrastructure. By folding extended functionality into today's commodity services and create new protocols, we raise the bar & change the rules of the game.
http://www.catb.org/esr/hallow...
I don't think the container would ever know the /truth/. Ultimately it could have a debugger attached, you may know about this in a thin sense like when you try and strace the same process twice. In an emulated sense it would be entirely possible. I believe at the kernel level things like dtrace/systemtap can run simultaneously, just like debugfs. At that level Windows MS can target you based on what processes are doing. Lets say, for example, all mail server data written to disk could be scanned and you could get advertiser mined that way.
You might also want a system that doesn't report your data and activity to Microsoft.
Not you personally, but you know. Thinking people.
How would the container (MS Windows) not know what the WSL is doing? By definition, it is a subsystem, therefore the same kernel is collecting the same telemetry.
Some of us have a smaller SSD as C drive...
Wow, C drive, I almost forgot about that. I hope that does not trigger any other ancient, painful memories. How is life, back there in Hell?
Backslash for path separator :-)
The registry for config
Indeed, the only people who benefit are those who have shares in the power companies.
mutt is my choice. Use it continually. One of the best days of my life was when I found header caching.
Amen to that!
... but also the S4B client has this peculiar tendency to occasionally stop being able to open new conversation windows. I still get messages (they show up in the notification area), but they are in no window whatsoever. ...
Yes, I notice this too, it is frustrating. I think there is some disconnect between a new IM session and the existing IM windows. Why the Skype authors decided to do something different to existing IM software and require some form of acknowledgement I have no idea. Why all IMs cannot be considered unacknowledged until you start typing? That would make more sense IMHO. Minimum viable product I guess.
Sometimes the UI just stops painting. I don't know if they are writing custom UI functionality or what, but Pidgin's "boring" use of the stock GTK UI elements has been much more consistent and reliable.
And yes. I completely agree, stock, working, tried and tested GTK UI is much more reliable, much more consistent and it's about time MS started using it ;)
What's the point of an IM system that's so heavily bloated it takes multiple minutes to start at login on the platform they own? Coming from a primary linux background, having to wait obscene quantities of time for basic messaging (outlook, skype) to start is a huge time sink. Look at Mutt/Finch or Thunderbird/Pidgin. They're so much better at what they do and free.
'member xenix?
It isn't just the start/task bar. Applications (and web sites assume the screens are tall like a mobile phone) so they stack the menu bars from top to bottom. Great if you can move one of the bars to the side of the screen, but that's barely scratching the surface of the problem. My preference is to go back to 4:3 layouts as they balanced the content with the tools. Too wide or too tall are painful. If I wanted to just read, I think I'd look for an eInk display, but that's another story.