I live outside Raleigh and I switched to uverse about a two years ago, and as soon as one year went by I got an amazing deal from TWC for almost half what I was paying with them. I had to send them my last bill from uverse but it was deal I couldn't pass up. Uverse is now coming back with deals that are almost as good and I am just waiting for one a bit closer as I hate the TWC DVR interface and the internet is all over the place. Everyone else I know is paying over $130 for twc tv/dvr and standard internet, while I am getting the same thing for just over $70. Competition is awesome!
I have the exact same problem with my ceiling fans that have dimmers built-in with a remote (not a wall switch). The only CFL that don't have the "Not for use with dimmers" on the box are 4x the price and of the larger size where I need the smaller (more popular now) ones to fit on the fan and I only found them once at Home Depot over a year ago. Only online now.
The second place where CFL don't work properly are on motion sensor switches. I put one in my kitchen so I don't have to fumble around for the switch at night, and it does work for the most part but sometimes it flashes like a strobe after turning off. The same thing happened when I replaced two of my flood lights with ones that have a normal brightness when motion is detected and a low light for otherwise (on sale:)). Same thing, blinking like a strobe light with CFL buibs.
Hmm, I have been installing FreeBSD for around 10 years and I don't think I have never had to know anything about the disk geometry of any of the installs. Are you sure you are not thinking about one of the other BSDs, they are different you know?
You can use the defaults or put in how many MB you want for each slice, simple. The installer works great, even from a serial console. I do wish they would add ZFS support to the installer... It is not as easy as Ubuntu, but then again, they are not targeting that group of users.
I have to agree. Security is like an onion, it is made up of layers. chroot is just one of those layers.
If a process is not running as root, and there are no suid binaries or kernel exploits, then it is much harder to break out, especially using the second chroot() method. If you do have kernel exploits or suid binaries laying around and not using chroot, then you are just as vulnerable. At least adding a chroot environment adds the possibility of being more secure.
If someone wants to hack your server, and they have enough skill, then they will. Why make it easier for them? If they don't have enough skill, you stopped them from making a mess. It's not a cure, but it is better then nothing.
This is were open_basedir comes in handy. open_basedir is set on the server to directories where including can occur. Its a pain to set up for each virtualhost, but it does help out.
XFree86 has not Merged with X.Org [23 January 2004] There are several news items claiming that X.Org and The XFree86 Project have merged. This is a blatant lie. The XFree86 Project remains an independent organisation, and will continue as operate as an independent organisation according to its mission statement. There has been no discussion with X.Org about any such merge, let alone any agreement to a merge.
X.Org is a vendor-sponsored organisation, formed by vendors to best suit the interests of those vendors; XFree86 is an independent volunteer organisation, with a focus on the individual. Therein lies the rub.
Just to make it clear about the -RELEASE -STABLE and -CURRENT branches.
-RELEASE is the most stable of the three. Only major problems are fixed in this branch such as security issues. This branch really does not change much at all if at all. Of the three branches, this is the one you want to use for production machines.
-STABLE is the 2nd most stable, even though it's name confuses people. It is the development branch between releases. After a release, the -STABLE branch is opened and new features are added and new bugs are fixed. This branch will become the next -RELEASE. The changes are usually very mild but there can be problems.
-CURRENT is where all the development for the next _major_ version is done and it is the least stable. Major changes are made and it might not compile at all for extended periods. It also takes a bit more knowhow to get things working as the docs are not always up-to-date.
With 5.X they have decided to not create a -STABLE branch so that from my guess they can still make major changes and not get as much complaining:). Major and minor changes are still being made, and it takes a bit more knowledge and understanding to work around a major change that you are unfamiliar with.
Yeah it would be crazy to to release a x86 port, after all you can make a lot more money via hardware sales then through software/OS sales like the ones Microsoft does.... ohh wait...
I can run out and get a PowerPC chip and generic mobo and run MacOS on it... oh wait I can't do that b/c it requires special apple hardware. They surely couldn't do that with their x86 platform... oh wait they could.
Well all the end user software would have to be ported, ohh wait the big companies already do this, and its more then just recompiling on a i386 which would probably be all that's needed.
Apple could never pull off a chip change.... oh wait they have already done that in the past.
I don't know why more people don't chroot apache or patch to use chroot(2). It can be a pain at times, but it can't be worse then having to reformat and reinstall the entire os because your are not sure what was tampered with. I know chroot is not perfect and you can break out of it, but as long as you are carefull about what goes in it, you are relatively safe. It would at least keep rootkits away from gcc, which seems to be required for most of these rootkits.
Has anyone tried the SL-A300? I really like its form factor much better then the 5500 (I would miss the keyboard though). I wish I knew someone in Japan who could pick one up for me:-). Anyone know the differences between the two?
Isn't mod_deflate similar in function to mod_gzip? I have not tried it yet, but it seems to play the same role. PHP support seems to be somewhat stable on apache2 using the prefork mpm. The threaded mpm's don't work on FreeBSD, so I didn't really have a choice. The preformance seems to be pretty good after I removed the unneeded modules.
--Matt
Apache2 is not supported by php at all, its just for the bleeding edge few. This bug was corrected in php's cvs long ago, and bugs.php.net even had a large banner telling everyone to not report the bug and get the latest snapshot. That worked for a while until the cvs of apache2 had some internal changes that required changes in php that in turn made the php cvs (and snapshots) require apache-2.0.40 (the unreleased cvs version).
If you are going to be playing around on the bleeding edge, you mine as well checkout the cvs versions of both, skip the patching, and have some real fun:)
Using a database server would be ideal. You would get fast lookups for things such as subjects, but I am not sure how quota would be handled. I did see a patch that used qmail for delivery, but injected the entire mail message into mysql or postgresql (probably it was mysql), but it was young and I can't find it anymore. There are many database password lookup patches, but thats about it. pop3 and imap servers could be patched easily so you would have to probably have your local mail clients use those services rather then the traditional mbox/MailDir lookup to get around having to make messy wrappers. It could be done.
After thinking about this for a while, I realize that having i368 support would not be that bad. Having it install on the most hardware is most likely the best option.
What I would like to see is a option after sysinstall has finished up to build a custom kernel if sys was installed. Maybe it could take the information from dmesg and set itself up to be optimized for your processor and maybe even remove hardware not on your system. I doubt I would ever use it, but a new user may. And it would save them the time of searching through LINT. I have always wondered if a loaded module would be slower then if it were compiled in the kernel. I usually compile everything I need in, so running a higher securelevel won't stop me from loading what I need.
Your make world idea in the install sounds great. I wonder if doing a make world with CPUTYPE=iXXX or CFLAGS options in make.conf would increase performance by any further distance. I will have to see. I have not done a make world in a while:)
You have to ask youself, who would be using an outdated i386 and at the same time keeping current with FreeBSD? You can pick up Pentium Is or old 486s for next to nothing. They are not asking you to "track the latest revision of every hardware component", but instead keep within the last say 8 years. If you have the time to track the latest FreeBSD release, then you have time to throw together a new box. If you have special needs for using an i386 box and nothing else will work, then make world on another computer and install over nfs. There are just so few running an i386, why kill performance for the whole? I never use the GENERIC kernel, but those new to FreeBSD (like the dumbass writers who do their non scientific benchmarking) use GENERIC and their performance suffers. Building a new kernel is easy, but many do not know how.
P.S. Having high uptime just shows that you have a lazy admin and a system with exploits.
What I hate is the borderless popups that I get every once in a while. I am pretty sure is IE only. If you have not gotten one of these, its a popup without any borders, not even the title bar with the close/minimize/max buttons. Its just a square ad. Usually they have there own close button hidden somewhere in the ad. You have to scan the add to find it! I did come across one with no way to close it, I have to kill IEEXPLORE. I have started to use mozilla snapshots more and more lately, I really like the tabbed browsing, the alpha layered PNGs, and the being able to easily disable popups.
Well things have changed. My fraternity house had a major remodeling and had 2-4 ethernet drops put into every room in the 3 story house. For a while we were just connected via a dialup modem, but then our school ran single mode fiber the mile or so to our house (for free! & the house is not owned by the school). All we had to do was buy the expensive transceiver for our end, and we had access to the campus lan and internet. We thought the number of drops for each room was crazy at first, but then every Freshmen after my class got a Thinkpad laptop, and the extra drops in the rooms and even basement (for DJing mp3s through our huge stereo) came in real handy.
The figure for the US was calculated by including all us, mil and gov networks and percentages for the following networks: com 50%, edu 90%, int 50%, net 80% and org 80%.
The Ozone layer and global warming are NOT related. So many people see these as the same thing, and they are not. The hole in the ozone layer simply allows for more UVB to reach the ground. The UVB has been linked to skin cancer, cataracts, damage to materials like plastics, and harm to certain crops and marine organisms and that is it. The green house effect is where a blanket of gases is formed around the earth that traps radiation and is natural and we need it. It stabalizes our temperature. But too much of this effect is what is believed to cause global warming.
Turns out that NTFS cannot be used on removable disks
I use NTFS on my zip 100 disks all the time. Its not that it won't work on removable disks, its that they disable the use of NTFS on small disks (and i guess flash cards? never used them.). I have not formated one on WinXP yet, but I have on WinNT4 and Win2000.
You would not have 2000 PATH entries, only a few dozen. That would go completely against what the author is trying to say. You would group programs by what they do or whose program they belong too. I recently noticed that on my FreeBSD server, the postgresql port now installs its files into/usr/local/ while it used to install everything into/usr/local/pgsql/ by default. Although this makes it much easier with paths and such, it makes it much harder to say back up everything or even to just know what programs are included (although you can just make a package or use pkg_info). The one thing that i don't like is that its harder to have two different versions of a program since spreading it through/usr/local make installing the new version clobber the old.
I was wondering what this meant: Now if only Microsoft would let me legally distribute this software I'd be a happy person.
This was posted to his site before the Xbox release, can he still not distribute it?
Slashdot Mirror
I live outside Raleigh and I switched to uverse about a two years ago, and as soon as one year went by I got an amazing deal from TWC for almost half what I was paying with them. I had to send them my last bill from uverse but it was deal I couldn't pass up. Uverse is now coming back with deals that are almost as good and I am just waiting for one a bit closer as I hate the TWC DVR interface and the internet is all over the place. Everyone else I know is paying over $130 for twc tv/dvr and standard internet, while I am getting the same thing for just over $70. Competition is awesome!
I have the exact same problem with my ceiling fans that have dimmers built-in with a remote (not a wall switch). The only CFL that don't have the "Not for use with dimmers" on the box are 4x the price and of the larger size where I need the smaller (more popular now) ones to fit on the fan and I only found them once at Home Depot over a year ago. Only online now.
The second place where CFL don't work properly are on motion sensor switches. I put one in my kitchen so I don't have to fumble around for the switch at night, and it does work for the most part but sometimes it flashes like a strobe after turning off. The same thing happened when I replaced two of my flood lights with ones that have a normal brightness when motion is detected and a low light for otherwise (on sale :)). Same thing, blinking like a strobe light with CFL buibs.
Hmm, I have been installing FreeBSD for around 10 years and I don't think I have never had to know anything about the disk geometry of any of the installs. Are you sure you are not thinking about one of the other BSDs, they are different you know?
You can use the defaults or put in how many MB you want for each slice, simple. The installer works great, even from a serial console. I do wish they would add ZFS support to the installer... It is not as easy as Ubuntu, but then again, they are not targeting that group of users.
I have to agree. Security is like an onion, it is made up of layers. chroot is just one of those layers.
If a process is not running as root, and there are no suid binaries or kernel exploits, then it is much harder to break out, especially using the second chroot() method. If you do have kernel exploits or suid binaries laying around and not using chroot, then you are just as vulnerable. At least adding a chroot environment adds the possibility of being more secure.
If someone wants to hack your server, and they have enough skill, then they will. Why make it easier for them? If they don't have enough skill, you stopped them from making a mess. It's not a cure, but it is better then nothing.
This is were open_basedir comes in handy. open_basedir is set on the server to directories where including can occur. Its a pain to set up for each virtualhost, but it does help out.
XFree86 has not Merged with X.Org
[23 January 2004]
There are several news items claiming that X.Org and The XFree86 Project have merged. This is a blatant lie. The XFree86 Project remains an independent organisation, and will continue as operate as an independent organisation according to its mission statement. There has been no discussion with X.Org about any such merge, let alone any agreement to a merge.
X.Org is a vendor-sponsored organisation, formed by vendors to best suit the interests of those vendors; XFree86 is an independent volunteer organisation, with a focus on the individual. Therein lies the rub.
Just to make it clear about the -RELEASE -STABLE and -CURRENT branches.
:). Major and minor changes are still being made, and it takes a bit more knowledge and understanding to work around a major change that you are unfamiliar with.
-RELEASE is the most stable of the three. Only major problems are fixed in this branch such as security issues. This branch really does not change much at all if at all. Of the three branches, this is the one you want to use for production machines.
-STABLE is the 2nd most stable, even though it's name confuses people. It is the development branch between releases. After a release, the -STABLE branch is opened and new features are added and new bugs are fixed. This branch will become the next -RELEASE. The changes are usually very mild but there can be problems.
-CURRENT is where all the development for the next _major_ version is done and it is the least stable. Major changes are made and it might not compile at all for extended periods. It also takes a bit more knowhow to get things working as the docs are not always up-to-date.
With 5.X they have decided to not create a -STABLE branch so that from my guess they can still make major changes and not get as much complaining
Just my 2 cents.
Yeah it would be crazy to to release a x86 port, after all you can make a lot more money via hardware sales then through software/OS sales like the ones Microsoft does.... ohh wait...
I can run out and get a PowerPC chip and generic mobo and run MacOS on it... oh wait I can't do that b/c it requires special apple hardware. They surely couldn't do that with their x86 platform... oh wait they could.
Well all the end user software would have to be ported, ohh wait the big companies already do this, and its more then just recompiling on a i386 which would probably be all that's needed.
Apple could never pull off a chip change.... oh wait they have already done that in the past.
Yes it would be the stupidest things ever....
ICY> glxgears
7377 frames in 5.0 seconds = 1475.400 FPS
7359 frames in 5.0 seconds = 1471.800 FPS
7342 frames in 5.0 seconds = 1468.400 FPS
7316 frames in 5.0 seconds = 1463.200 FPS
ICY> uname -a
FreeBSD 5.0-CURRENT FreeBSD 5.0-CURRENT #3: Wed Nov 6 09:29:55 EST 2002 root@:/usr/obj/usr/src/sys/ICY i386
libc required a little editing (that damn __sF), but it works.
I don't know why more people don't chroot apache or patch to use chroot(2). It can be a pain at times, but it can't be worse then having to reformat and reinstall the entire os because your are not sure what was tampered with. I know chroot is not perfect and you can break out of it, but as long as you are carefull about what goes in it, you are relatively safe. It would at least keep rootkits away from gcc, which seems to be required for most of these rootkits.
Has anyone tried the SL-A300? I really like its form factor much better then the 5500 (I would miss the keyboard though). I wish I knew someone in Japan who could pick one up for me :-). Anyone know the differences between the two?
Isn't mod_deflate similar in function to mod_gzip? I have not tried it yet, but it seems to play the same role.
PHP support seems to be somewhat stable on apache2 using the prefork mpm. The threaded mpm's don't work on FreeBSD, so I didn't really have a choice.
The preformance seems to be pretty good after I removed the unneeded modules. --Matt
Apache2 is not supported by php at all, its just for the bleeding edge few. This bug was corrected in php's cvs long ago, and bugs.php.net even had a large banner telling everyone to not report the bug and get the latest snapshot. That worked for a while until the cvs of apache2 had some internal changes that required changes in php that in turn made the php cvs (and snapshots) require apache-2.0.40 (the unreleased cvs version).
:)
If you are going to be playing around on the bleeding edge, you mine as well checkout the cvs versions of both, skip the patching, and have some real fun
--Matt
Here is a freebsd usb page I bookmarked a while back:
http://www.etla.net/~n_hibma/usb/
I don't know how current it is, but its worth a look.
Using a database server would be ideal. You would get fast lookups for things such as subjects, but I am not sure how quota would be handled. I did see a patch that used qmail for delivery, but injected the entire mail message into mysql or postgresql (probably it was mysql), but it was young and I can't find it anymore. There are many database password lookup patches, but thats about it. pop3 and imap servers could be patched easily so you would have to probably have your local mail clients use those services rather then the traditional mbox/MailDir lookup to get around having to make messy wrappers. It could be done.
After thinking about this for a while, I realize that having i368 support would not be that bad. Having it install on the most hardware is most likely the best option.
:)
What I would like to see is a option after sysinstall has finished up to build a custom kernel if sys was installed. Maybe it could take the information from dmesg and set itself up to be optimized for your processor and maybe even remove hardware not on your system. I doubt I would ever use it, but a new user may. And it would save them the time of searching through LINT. I have always wondered if a loaded module would be slower then if it were compiled in the kernel. I usually compile everything I need in, so running a higher securelevel won't stop me from loading what I need.
Your make world idea in the install sounds great. I wonder if doing a make world with CPUTYPE=iXXX or CFLAGS options in make.conf would increase performance by any further distance. I will have to see. I have not done a make world in a while
You have to ask youself, who would be using an outdated i386 and at the same time keeping current with FreeBSD? You can pick up Pentium Is or old 486s for next to nothing. They are not asking you to "track the latest revision of every hardware component", but instead keep within the last say 8 years. If you have the time to track the latest FreeBSD release, then you have time to throw together a new box. If you have special needs for using an i386 box and nothing else will work, then make world on another computer and install over nfs. There are just so few running an i386, why kill performance for the whole? I never use the GENERIC kernel, but those new to FreeBSD (like the dumbass writers who do their non scientific benchmarking) use GENERIC and their performance suffers. Building a new kernel is easy, but many do not know how.
P.S. Having high uptime just shows that you have a lazy admin and a system with exploits.
What I hate is the borderless popups that I get every once in a while. I am pretty sure is IE only. If you have not gotten one of these, its a popup without any borders, not even the title bar with the close/minimize/max buttons. Its just a square ad. Usually they have there own close button hidden somewhere in the ad. You have to scan the add to find it! I did come across one with no way to close it, I have to kill IEEXPLORE.
I have started to use mozilla snapshots more and more lately, I really like the tabbed browsing, the alpha layered PNGs, and the being able to easily disable popups.
From the User Guide PDF:
"For details on synchronization with a PC, etc., see the on-line operation manuals (on the CD-ROM) for the PC link software."
Also Intellisync Manual PDF
Well things have changed. My fraternity house had a major remodeling and had 2-4 ethernet drops put into every room in the 3 story house. For a while we were just connected via a dialup modem, but then our school ran single mode fiber the mile or so to our house (for free! & the house is not owned by the school). All we had to do was buy the expensive transceiver for our end, and we had access to the campus lan and internet. We thought the number of drops for each room was crazy at first, but then every Freshmen after my class got a Thinkpad laptop, and the extra drops in the rooms and even basement (for DJing mp3s through our huge stereo) came in real handy.
The figure for the US was calculated by including all us, mil and gov networks and percentages for the following networks: com 50%, edu 90%, int 50%, net 80% and org 80%.
The Ozone layer and global warming are NOT related. So many people see these as the same thing, and they are not. The hole in the ozone layer simply allows for more UVB to reach the ground. The UVB has been linked to skin cancer, cataracts, damage to materials like plastics, and harm to certain crops and marine organisms and that is it. The green house effect is where a blanket of gases is formed around the earth that traps radiation and is natural and we need it. It stabalizes our temperature. But too much of this effect is what is believed to cause global warming.
Turns out that NTFS cannot be used on removable disks
I use NTFS on my zip 100 disks all the time. Its not that it won't work on removable disks, its that they disable the use of NTFS on small disks (and i guess flash cards? never used them.). I have not formated one on WinXP yet, but I have on WinNT4 and Win2000.
You would not have 2000 PATH entries, only a few dozen. That would go completely against what the author is trying to say. You would group programs by what they do or whose program they belong too. I recently noticed that on my FreeBSD server, the postgresql port now installs its files into /usr/local/ while it used to install everything into /usr/local/pgsql/ by default. Although this makes it much easier with paths and such, it makes it much harder to say back up everything or even to just know what programs are included (although you can just make a package or use pkg_info). The one thing that i don't like is that its harder to have two different versions of a program since spreading it through /usr/local make installing the new version clobber the old.
I was wondering what this meant:
Now if only Microsoft would let me legally distribute this software I'd be a happy person.
This was posted to his site before the Xbox release, can he still not distribute it?