While in my embryonic linux stage, I had two boxes cracked, and it was due to the default services (at their default configs) left on by the RH install, and then by me as I didn't know to turn them off (or how to check that they were on, how to know what the given services were for, etc.).
Of course, getting cracked was an *amazingly* effective incentive to learn how to secure a system, which is why I haven't had a box cracked since those initial two. It also planted the seed of my now-healthy sense of paranoia, which contributes greatly to my skills in system administration.
Anyways, RH's installation left a lot to be desired. It *still* leaves something to be desired, but they are improving. I'll stop there, as this subject has been discussed into the ground many times.
It's not surprising that this has occured.
Expensive lawsuits, big profits, long-term royalties, easy option for a competing industry-sponsored service to be created (and they've got the best collection of us all!) and wipe them out....
The only way they could have continued is to join up with the industry. And there's the added bonus of getting to cash out at a very young age for Shawn. Hopefully they'll keep a brain and make the costs of the subscription service low, and also make sure that the quality of the files they provide is high (not just sound quality, but id3 tagging and file naming and organization).
Time will tell.
Quick! Post the wrong link to the site like an idiot!
You may want to tone down your assholishness when attempting to dress down other folks, as you are not yourself perfect.
Thanks to your episode of brilliance, you posted the link to the 8-month-old version, instead of the up-to-date version. Soooo....all those folks who actually *did* go there and download it and read it and make comments on it and send them in...were commenting on the wrong edition, if they didn't bother to actually check up on your information. Way to go - score 1 for democracy.
Yes, I realize you were trying to be helpful. But, helpful means doing the research first *in fullness*. I do appreciate the thought...but the execution was a bit lacking.
But, don't get pissed...get even. Do it right next time. I promise to eat my words if I see it.:)
I did research for myself about 4 months back to find the most useful X-based text editor I could find - good features sets (syntax highlighting for the various bits 'o code I write was a big one - had to support PHP, Perl, HTML and shell at the least) but at the same time let me keep using the windows-type key bindings for navigation and text manipulation (shift and control with the arrow keys, Home and End...you know, basic stuff), and I eventually decided on Nedit.
Though it's got a few (very small) rough edges, and I'd like to see some features in it more like the windows editor Ultra Edit...it's still great. Though I'm sure that vi(m) and (x)emacs are just fabulous, I've managed to get my windows-type text navigation keybindings hardwired into my brain, and trying to change that makes me break out in hives and want to kick the cat.:)
I'd have to say that the "high profile" projects spoken of in this article are high profile only because of press coverage, and that because of the press' need to find a few "major themes" and sell advertising space around them. The reality (and beauty) of the open source community (I'm not using this word in a Katz-Petreley sense, I'm using it in a smile-and-nod-at-the-bumper-sticker sense) is that people who want to make cool stuff happen do it because they want to, because it's fun, because nifty people are impressed by it, and because they want to be a part of creating something free, diverse and very long lasting.
I'm looking forward to writing free software and documentation - my major problem is figuring out exactly what project to work on. I'm looking forward to that first email or message board post (and all the others after it) from a knowlegeable person telling me where I've screwed up and where I can get better - because I want to learn and make it (whatever "it" eventually is) better.
Every little bit of work that every person out there does toward making a better, freer world does indeed count. It means something. I know that it does, because if someone can read a HOWTO and understand it all perfectly the first time around because I either wrote it well or did good copyediting on it, they've saved time, and they're now that much closer to being a part of that overall freedom. Just because information about my efforts is not squished between advertisements in a magazine somewhere doesn't take away from that at all.
I went to IIT for a year before I escaped. It's an odd little school...kind of like a campus attached to a giant defense research project. Lessee...fun facts/rumors/etc (you pick 'em!) about IIT:
- The IITRI research building on the main campus (well, the main one, the one that's above ground) is the also the tallest building on campus. And...it's entirely bulletproof. Why is this, you ask? Because the entire campus (being located a few miles directly south of The Loop) is smack dab in the middle of some of the most interesting slums/ghettos in the midwest - and the denizens of the housing project towers (yes, towers - they're big-ass buildings) kept taking shots at the researchers through the windows. *giggle*
- There is at least one entire building underground. You normally can't see this (the roof is just ground with grass on it) but in the winter, the snow likes to melt on top of it - and only there.
- The entire campus is connected by fun underground tunnels, from the dorms to the tower. Most of the fun ones have been closed off...and for some reason, it's really hard to get a blueprint of 'em (I tried).
- An unusually large portion of the student body consists of Army, Navy, Chair Force and Marine ROTC scholarship holders (how I got there) - when I was there, there were about 500 ROTC students, which was about 35% of the student body population
- The undergrad physics department is both unusually small and has an unusually large amount of toys for such a small department. Then again, being as closely associated with the collider up there as they are, not too surprising.
- The southern limb of the L goes literally DOWN THE MIDDLE of the campus. About 800 feet from the dorms. If you've ever seen the L (or el, if you wish), or more specifically, *heard* the L, you'd laugh your ass off just as I did the first time "experiencing" a passthrough while outdoors. Thank god my room was on the other side of the dorm complex.
- IIT has one of the most advanced high-speed wind tunnels on the face of the planet.
- Cafe Edelstein. If you've taken undergrad physics, you'll know what I'm talking about. If you're still going to class after the first 3 classes, that is. Hmm, wonder if he's still there/alive.
- It's got some of the weirdest buildings you'll ever see. That's because it used to be (well, still is in some circles) a really high-end architectural school, and Mies Van der Roah (sp?) designed most of the (older) buildings on campus. Think "giant boxes made of slate and glass" and you're really close.
- 'Cuz of the L, you're a short walk away from downtown - which is really cool, because Chicago is a great city (in the summer) to hang out in downtown.
- Chicago was the first time I'd seen bridges with potholes on 'em. Like....damn.
- Nearly half the main campus (engineering and suchlike, for the most part) is foreign nationals - mostly Chinese, Indian and Pakistani. You should see some of the fights between the Indians and Pakistani folk...damn...
- Not a single solitary math professor speaks intelligible English. Oh, wait, that's everywhere, nevermind...:D
So, all things considered...I find this highly amusing. IITRI "examining" this thing is like asking the whore if she likes her pimp while the pimp is standing there listening.
First off, I said "business that depends on the security of a piece of encryption", not "...business model built on security." Diff.
Second off, QNX is stupid. I'm not being shown a huge spray of brains on the part of their engineers (that they "own" as you say) in implementing an easily cracked system-level encryption algorithm. So, until you can prove to me otherwise, not only will I ignore your assertion to "not ever forget that", but I will giggle at it as well. I'm sure they're all great people - but someone was asleep at the wheel the day they drove into that particular decision.
Ooooohhh, so NOW I understand. If QNX puts an insecure system-level encryption algorithm into their product, and their customers get soooo stupid as to use that insecure encryption algorithm, then it's the customers who are stupid!! Gosh, thanks for clearing that up for me. And it's that way "PERIOD." I appreciate your driving that home like that - it really bolsters your arguement. I'm truely convinced.
Call 202-707-5000. Hit "0" (zero). Ask to speak to the librarian of congress. You'll be transferred to James Billing's office. Ask to speak to him.
At this point, you won't be able to - they're neck-deep in 200th anniversary celebrations planning for this Monday, and he's (obviously) really busy with that. But ask if you can schedule a time to speak with him. BE POLITE - they are nice people answering these phones. Chances are, you won't be able to, due to their preparations. But, read on.
I called about 20 minutes ago and spoke to Barbara. She was very nice. She asked me if I could call back Wednesday (April 26th) to speak with James Billing, or at least schedule a time to speak with him. I let her know a quick synopsis of why I was calling - the speech he gave, my desire to understand his position and express mine,etc, which you should do too so they know that there are people really concerned about this - and agreed to call back on the 26th.
Don't bother with email. CALL HIM. That way, it's not just an electronic message, which he seems to have a major problem with - it's a breathing (but not too heavily!!:) human on the other end of the line that he's talking with and listening to. It makes a difference.
Obviously, you didn't read what he said. Also, obviously you've never read the title of the root slashdot page - "Slashdot:News for Nerds. Stuff that Matters."
It's downright cute that you think that Slashdot is a "large and diverse community". Even a cursory glance at Slashdot would tell the observer that Slashdot is specifically NOT diverse. It's oriented toward "geek stuff", with a heavy free software/Linux/U*ix 'community' pitch to it, with a dash of general science and technology thrown in.
This is not abcnews.com, this is Slashdot.
Now, yes, I agree - the stock market dropping like it has is rather significant news - BUT IT DOESN'T FALL ANYWHERE NEAR SLASHDOT'S FOCUS (fuzzy as it may be from time to time...:)
Lastly, you'll note that he's been getting MUCH shit from people - to the point of imbiciles emailing him accusing him of participating in some kind of conspiracy that this 'news' not be covered (even though, as he stated, it's being covered to death on thousands of sites on the 'net already).
And for you folks who are going to mewl "Well, Slashdot has covered stocks before!", you too obviously didn't read what he said. Note that he stated that Slashdot has covered the stock of particular companies as relates to some specific tech or linux/free software subject, not "the market in general", which is what people have been bitching at him about.
As punishment for your transgressions, you are to be summarily thrice LARTed with a week-old baguette.
Just about as ethical as it was for QNX to put a non-secure encryption algorithm into their products.
And don't even bother giving me crap about "Well, what if they didn't know??" - that doesn't matter, because there are straightforward ways of knowing - hello, if you don't have the expertise on staff, hire an expert, make sure they're a certified engineer so that if they're either an idiot or lie to you about the security of the algorithm, you can sue them for malpractice.
And what makes you sooooooo sure that QNX WOULD have told their customers about the breach??
Besides. They know about it *now*....and if someone has a business that depends on the security of a particular piece of encryption, they're STU-STU-STOOPID if they don't monitor cryptography journals/newletters/news/bug sites for up-to-the-nanosecond info on it.
that the act of passing the DMCA violates the DMCA itself as it now conflicts with the GPL in this particular instance? Legislatures are trafficking in an instrument that damages a copyrighted material protection method....
Makes perfect sense to me...
Damn, I do love law sometimes. It's like math, but only word problems.:)
I use Winamp on the above respective systems, and anytime that I scroll in a window in any program (netscape, ie, outlook, win explorer, word, etc.) winamp skips a bit.
Slashdot Mirror
Ding!
Uh.
Mary Poppins??
At least the Julie Andrews part was right...unless you want to include Dick Van Dyke. And so on.
Hell, I'd turn it off in *hopes* of inducing neurosis.
Cops there are hard up for dirty Tampons?
*snork*snork*snork*snork*
:)
(And yes, I get to say that 'cuz I live in Tampa. So there.)
Well, because it's just the truth.
While in my embryonic linux stage, I had two boxes cracked, and it was due to the default services (at their default configs) left on by the RH install, and then by me as I didn't know to turn them off (or how to check that they were on, how to know what the given services were for, etc.).
Of course, getting cracked was an *amazingly* effective incentive to learn how to secure a system, which is why I haven't had a box cracked since those initial two. It also planted the seed of my now-healthy sense of paranoia, which contributes greatly to my skills in system administration.
Anyways, RH's installation left a lot to be desired. It *still* leaves something to be desired, but they are improving. I'll stop there, as this subject has been discussed into the ground many times.
heh
That was excellent.
And so it goes...
And so it goes.
the outer limit of grant aquisition attempts.
Hey...having a Queen in charge is a good thing.
:P
It's not surprising that this has occured.
Expensive lawsuits, big profits, long-term royalties, easy option for a competing industry-sponsored service to be created (and they've got the best collection of us all!) and wipe them out....
The only way they could have continued is to join up with the industry. And there's the added bonus of getting to cash out at a very young age for Shawn. Hopefully they'll keep a brain and make the costs of the subscription service low, and also make sure that the quality of the files they provide is high (not just sound quality, but id3 tagging and file naming and organization).
Time will tell.
Quick! Post the wrong link to the site like an idiot!
:)
You may want to tone down your assholishness when attempting to dress down other folks, as you are not yourself perfect.
Thanks to your episode of brilliance, you posted the link to the 8-month-old version, instead of the up-to-date version. Soooo....all those folks who actually *did* go there and download it and read it and make comments on it and send them in...were commenting on the wrong edition, if they didn't bother to actually check up on your information. Way to go - score 1 for democracy.
Yes, I realize you were trying to be helpful. But, helpful means doing the research first *in fullness*. I do appreciate the thought...but the execution was a bit lacking.
But, don't get pissed...get even. Do it right next time. I promise to eat my words if I see it.
Try This Instead
Hell, check all of 'em out
I did research for myself about 4 months back to find the most useful X-based text editor I could find - good features sets (syntax highlighting for the various bits 'o code I write was a big one - had to support PHP, Perl, HTML and shell at the least) but at the same time let me keep using the windows-type key bindings for navigation and text manipulation (shift and control with the arrow keys, Home and End...you know, basic stuff), and I eventually decided on Nedit.
:)
Though it's got a few (very small) rough edges, and I'd like to see some features in it more like the windows editor Ultra Edit...it's still great. Though I'm sure that vi(m) and (x)emacs are just fabulous, I've managed to get my windows-type text navigation keybindings hardwired into my brain, and trying to change that makes me break out in hives and want to kick the cat.
I'd have to say that the "high profile" projects spoken of in this article are high profile only because of press coverage, and that because of the press' need to find a few "major themes" and sell advertising space around them. The reality (and beauty) of the open source community (I'm not using this word in a Katz-Petreley sense, I'm using it in a smile-and-nod-at-the-bumper-sticker sense) is that people who want to make cool stuff happen do it because they want to, because it's fun, because nifty people are impressed by it, and because they want to be a part of creating something free, diverse and very long lasting.
I'm looking forward to writing free software and documentation - my major problem is figuring out exactly what project to work on. I'm looking forward to that first email or message board post (and all the others after it) from a knowlegeable person telling me where I've screwed up and where I can get better - because I want to learn and make it (whatever "it" eventually is) better.
Every little bit of work that every person out there does toward making a better, freer world does indeed count. It means something. I know that it does, because if someone can read a HOWTO and understand it all perfectly the first time around because I either wrote it well or did good copyediting on it, they've saved time, and they're now that much closer to being a part of that overall freedom. Just because information about my efforts is not squished between advertisements in a magazine somewhere doesn't take away from that at all.
I went to IIT for a year before I escaped. It's an odd little school...kind of like a campus attached to a giant defense research project. Lessee...fun facts/rumors/etc (you pick 'em!) about IIT: :D
- The IITRI research building on the main campus (well, the main one, the one that's above ground) is the also the tallest building on campus. And...it's entirely bulletproof. Why is this, you ask? Because the entire campus (being located a few miles directly south of The Loop) is smack dab in the middle of some of the most interesting slums/ghettos in the midwest - and the denizens of the housing project towers (yes, towers - they're big-ass buildings) kept taking shots at the researchers through the windows. *giggle*
- There is at least one entire building underground. You normally can't see this (the roof is just ground with grass on it) but in the winter, the snow likes to melt on top of it - and only there.
- The entire campus is connected by fun underground tunnels, from the dorms to the tower. Most of the fun ones have been closed off...and for some reason, it's really hard to get a blueprint of 'em (I tried).
- An unusually large portion of the student body consists of Army, Navy, Chair Force and Marine ROTC scholarship holders (how I got there) - when I was there, there were about 500 ROTC students, which was about 35% of the student body population
- The undergrad physics department is both unusually small and has an unusually large amount of toys for such a small department. Then again, being as closely associated with the collider up there as they are, not too surprising.
- The southern limb of the L goes literally DOWN THE MIDDLE of the campus. About 800 feet from the dorms. If you've ever seen the L (or el, if you wish), or more specifically, *heard* the L, you'd laugh your ass off just as I did the first time "experiencing" a passthrough while outdoors. Thank god my room was on the other side of the dorm complex.
- IIT has one of the most advanced high-speed wind tunnels on the face of the planet.
- Cafe Edelstein. If you've taken undergrad physics, you'll know what I'm talking about. If you're still going to class after the first 3 classes, that is. Hmm, wonder if he's still there/alive.
- It's got some of the weirdest buildings you'll ever see. That's because it used to be (well, still is in some circles) a really high-end architectural school, and Mies Van der Roah (sp?) designed most of the (older) buildings on campus. Think "giant boxes made of slate and glass" and you're really close.
- 'Cuz of the L, you're a short walk away from downtown - which is really cool, because Chicago is a great city (in the summer) to hang out in downtown.
- Chicago was the first time I'd seen bridges with potholes on 'em. Like....damn.
- Nearly half the main campus (engineering and suchlike, for the most part) is foreign nationals - mostly Chinese, Indian and Pakistani. You should see some of the fights between the Indians and Pakistani folk...damn...
- Not a single solitary math professor speaks intelligible English. Oh, wait, that's everywhere, nevermind...
So, all things considered...I find this highly amusing. IITRI "examining" this thing is like asking the whore if she likes her pimp while the pimp is standing there listening.
uh.
First off, I said "business that depends on the security of a piece of encryption", not "...business model built on security." Diff.
Second off, QNX is stupid. I'm not being shown a huge spray of brains on the part of their engineers (that they "own" as you say) in implementing an easily cracked system-level encryption algorithm. So, until you can prove to me otherwise, not only will I ignore your assertion to "not ever forget that", but I will giggle at it as well. I'm sure they're all great people - but someone was asleep at the wheel the day they drove into that particular decision.
Ooooohhh, so NOW I understand. If QNX puts an insecure system-level encryption algorithm into their product, and their customers get soooo stupid as to use that insecure encryption algorithm, then it's the customers who are stupid!! Gosh, thanks for clearing that up for me. And it's that way "PERIOD." I appreciate your driving that home like that - it really bolsters your arguement. I'm truely convinced.
Call 202-707-5000. Hit "0" (zero). Ask to speak to the librarian of congress. You'll be transferred to James Billing's office. Ask to speak to him.
At this point, you won't be able to - they're neck-deep in 200th anniversary celebrations planning for this Monday, and he's (obviously) really busy with that. But ask if you can schedule a time to speak with him. BE POLITE - they are nice people answering these phones. Chances are, you won't be able to, due to their preparations. But, read on.
I called about 20 minutes ago and spoke to Barbara. She was very nice. She asked me if I could call back Wednesday (April 26th) to speak with James Billing, or at least schedule a time to speak with him. I let her know a quick synopsis of why I was calling - the speech he gave, my desire to understand his position and express mine,etc, which you should do too so they know that there are people really concerned about this - and agreed to call back on the 26th.
Don't bother with email. CALL HIM. That way, it's not just an electronic message, which he seems to have a major problem with - it's a breathing (but not too heavily!! :) human on the other end of the line that he's talking with and listening to. It makes a difference.
Call him, folks. This is a big deal.
Obviously, you didn't read what he said. Also, obviously you've never read the title of the root slashdot page - "Slashdot:News for Nerds. Stuff that Matters."
:)
It's downright cute that you think that Slashdot is a "large and diverse community". Even a cursory glance at Slashdot would tell the observer that Slashdot is specifically NOT diverse. It's oriented toward "geek stuff", with a heavy free software/Linux/U*ix 'community' pitch to it, with a dash of general science and technology thrown in.
This is not abcnews.com, this is Slashdot.
Now, yes, I agree - the stock market dropping like it has is rather significant news - BUT IT DOESN'T FALL ANYWHERE NEAR SLASHDOT'S FOCUS (fuzzy as it may be from time to time...
Lastly, you'll note that he's been getting MUCH shit from people - to the point of imbiciles emailing him accusing him of participating in some kind of conspiracy that this 'news' not be covered (even though, as he stated, it's being covered to death on thousands of sites on the 'net already).
And for you folks who are going to mewl "Well, Slashdot has covered stocks before!", you too obviously didn't read what he said. Note that he stated that Slashdot has covered the stock of particular companies as relates to some specific tech or linux/free software subject, not "the market in general", which is what people have been bitching at him about.
As punishment for your transgressions, you are to be summarily thrice LARTed with a week-old baguette.
Just about as ethical as it was for QNX to put a non-secure encryption algorithm into their products.
And don't even bother giving me crap about "Well, what if they didn't know??" - that doesn't matter, because there are straightforward ways of knowing - hello, if you don't have the expertise on staff, hire an expert, make sure they're a certified engineer so that if they're either an idiot or lie to you about the security of the algorithm, you can sue them for malpractice.
And what makes you sooooooo sure that QNX WOULD have told their customers about the breach??
Besides. They know about it *now*....and if someone has a business that depends on the security of a particular piece of encryption, they're STU-STU-STOOPID if they don't monitor cryptography journals/newletters/news/bug sites for up-to-the-nanosecond info on it.
Oy.
that the act of passing the DMCA violates the DMCA itself as it now conflicts with the GPL in this particular instance? Legislatures are trafficking in an instrument that damages a copyrighted material protection method....
:)
Makes perfect sense to me...
Damn, I do love law sometimes. It's like math, but only word problems.
I use Winamp on the above respective systems, and anytime that I scroll in a window in any program (netscape, ie, outlook, win explorer, word, etc.) winamp skips a bit.