Not to mention, I can't think of a rootkit that doesn't hack ps.
Standard fare for me is to keep a statically compiled ps and lsof available to me off-machine in case anything 'weird' happens. It doesn't solve all problems, but it helps.
Actually this is already being done in the unix world, just no one takes advantage of it, or at least, pays attention.
FreeBSD's ports system checks MD5 sums automatically.
RPM can use GPG signing keys. I believe deb can too.
RedHat signs all their RPMs with their security key, Mandrake, SuSE and other RPM pals do it as well. The MD5 sum accompanying FreeBSD's system is distributed by the FreeBSD ports team and generated from the file that is being fetched. It will either try and re-download the file or refuse to work if it it does match, which I'm pretty sure is the case for the GPG counterparts.
It's not limiting the system but it is keeping tabs on what you install.
Of course, if you get "joe's p2p tool 2000 pro platinum gold l33t edition" that one of those groups doesn't distribute, well, you can't blame anyone but yourself for not checking the code itself.
7.3 is widely used. It's because it was the last version of RH that wasn't nearly as chained to the desktop before the Fedora guys came in (who some would say made it worse).
Most of the people running 7.3 are either doing it because it's too costly to upgrade (money is generally not as much of a problem as time or suggestively, downtime) and a good admin can keep things patched regardless.
Those that are moving but are keeping RedHat are generally looking at RHEL. 7.3 is no longer supported which is the prime motivator, not any technological benefit.
God damnit, I hate it when some clueless fart machine spits out something that is patent B.S. and then covers it all under the umbrella of "security". Even the servers with the best service contracts don't rely on that to make their systems "secure". It's common practice to "roll your own" where it's really important.
The approach that wxWindows and in some ways, the way Apple integrates java I think are the best solutions.
wxWindows says that the standard windowing toolkit is law and let's abstract it.
The AppleJava connection indicates that java, a cross-platform language, is an integral part of the OS. It's not merely an after thought.
The wxWindows way seems the most pragmatic, as getting two groups of users to agree on anything, much less language or API choice, even if functionally equivalent, is pretty damned impossible. Of course, this whole statement lends to paradox because of it.
Well, I think you know better, but if you use Windows, can you recite the point release you have installed?
No, you have "SP 2".
Games are a great example - there have been a number of games which simply don't install or run on modern hardware, and are immediately patched after release.
Uh, while I haven't had a crash in XP for a long, long time, I distinctly recall when it does happen it's pretty clear it's an error.
It even gives you the option to offer user feedback, something that plenty of other programs and systems (one of which is the topic of this discussion) do as well.
I don't know either of these technologies very well, so perhaps you could explain, given a presumably trusted environment, what are the technical merits of using XUL over ActiveX?
Re:Security of Online Apps a Hurdle?
on
Firefox - The Platform
·
· Score: 4, Interesting
I really think you missed the point.
The tool for the job does not really leave room for an all encompassing smorgasborg of half-assed features.
The tool for the job is sed, or awk, or perl. It's cp, not mv. It's FreeBSD on the server but not on the Desktop. It's Windows for gaming.
Really, is this so hard to understand? Are you really advocating that your multi tool have a soldering iron, ball peen and crow hammers, cross-cut and standard tooth saw, and everything else that might be in your belt?
Frankly, I am concerned with my desktop performing window management and placing things in spots and in ways that make sense. Everything else is just shit and fluff in a nice little glossy package. The OS, being a more complete idea, should be something for a desktop role that makes sense for my needs. It should not be something that's also my first choice for a server, unless it truly merits that.
Really, how many of you would willingly use X11 if it was not free?
You forgot, "Street Fighter the Championship Movie Edition Turbo" (in which the film displays at twice the speed and all the characters are presented with stunt doubles across from them), and "Capcom vs. The Academy", where Chun Li battles Tom Hanks for who did the most hackneyed, stereotypical accent for a character this year.
Can any of the FF games be reduced to a RPG? Not really, unless you really want to take "RPG" out of context.
I really think that NWN is the only "RPG" that current executes in binary form. It's open ended enough to take on almost any game in it's chosen setting.
If you want an example, try getting another "RPG" to break the rules. DM's do this all the time (albeit silently if they still want bribes from their players) to further the plot in the direction that seems most worthy for the game.
That "DM shield" has nothing to do with the stats on the side that faces the DM. Seriously.
If you get it, be sure and get the PSX version. I had enough trouble getting the PC version to run on existing hardware - it's a glide-based game and well, if you know what that means you know why you shouldn't be buying it.
I disagree - FF7 was the last one that I enjoyed, but it was really not one of my favorites... And besides, FF7 was more or less the same as the last 6 with a better engine for tiles and an occasional FMV.
Above that, I really think it was voice acting that did it. Graphics wise for their time in the games industry, Square has always been ahead of the curve. I remember the awe looking at graphics in FF6 that nowadays people put on t-shirts to look "retro". Of course, back then these people were more interested in a pair of guess jeans than playing nintendo.
Voice acting took a large element of my imagination, stomped on it and declared it was pointless. I see the same problem with so many other video RPG's today.
A lot of the original japanese roms, if you can still find them, have been translated by fans.
For those that want to experience the original, I highly suggest going that route.
Also, the japanese-only releases have been translated as well - please don't cite that PSX B.S. that square released to make an extra buck. It really doesn't compare.
A game has to at least pretend it has an intriguing plot before it can be made into a successful movie. So your Street Fighter, Tomb Raider, Wing Commander, etc, are definitely out.
A movie that adopts the title of a game but bears no resemblence other than to attract a cursory fandom of the company who builds said game should be out as well. Strike Final Fantasy. (Although I did see it, but that's my fault for being a fan)
Resident Evil, well, it sounds like they just fucked up - that could have been pretty good.
I agree with you that way too much stink is made about [fringe os] doing [something that any os can do].
If anything, the advantage is that it's easy to point at to object to arguments that are based on superstition and not experience or fact.
The downside is that while Mac OS X is a great UNIX workstation, you're not going to see any news source write, "Good god! I got my workstation up in an hour and a half and it works just as great or better than any other system!", or, "To install this program, I didn't have to configure 12 packages or hunt down a small army of rpm files! I just opened the disk image and copied the app to a location where I want to run it from!". "I can run photoshop, office, and KDE on it with no extra software!"
That doesn't have any "sex appeal", but I'd argue these things are some of the most redeeming things about using a Mac.
I hesitate to post with my name on this, but here's some insight. I hate these people just as much as you do.
I'm not working for a corp anymore, trying to get a contracting business going, because you get screwed or outsourced working for anyone who gets investors via stock. The faceless nature of a corporation does not care who you are, your aspirations unrelated to the workplace and your current situation. They merely want your skills and labor. This is a concept that trickles down the management chain, unfortunately less by force but by those who want to "succeed". Personally, I'll take a heaping helping of poverty over that kind of success. I left when the disgust was far beyond what I could stand. Let's just say I'm not persuing the traditional avenues for work anymore. I would like to think I have an impressive skill set and resume, and I think a good portion of hiring companies would agree. So my talent is not really in question here.
Anyways, to augment my stifled income I turned to various online freelance places. The pay isn't great but it's a buck to be made which equates to food being placed in my fridge, a roof over my head and some modern amenities such as electricity, plumbing, and internet access, 2 of which I require to make money at my trade. (No, I am not a plumber:)
First off, you're bidding against guys in India and parts of Eastern Europe where $200 is a month's rent. The buyers are well aware of this and drive the price down to far beyond minimum wage. I've done a couple projects which equate to cents on the hour, but again, food on the table.
Second, because you are not put in the position where one job will pay the rent, you are put in a position where you bid on tons of jobs at a time - my average "bid day" is about 100 bids. These are all communicated and fullfilled. A good "bid day" will equate to around 20-30 projects varying in price from $50-$300. Only the cabals of 20 programmers get the big projects, and this isn't exactly something I want to make a sustainable income on. I average one bid day a month, $300 is a very well-paying project.
Anyways, with the combination of these two, you can see where I'm going here. They give me a project, I don't ask what they're doing and I really don't care. Food on the table. I could care less if you get a silly piece of email that sells you viagra, I've got bigger things to worry about. Thankfully, my "real" contracting is starting to take off so I've stopped bidding until I have to worry about it again.
I have gotten my "revenge" through a couple of well-placed timebombs in my scripts, and occasionally I'll create new accounts to bid and accept projects that are extremely vile (yes, there are lines) just to let them fall by the wayside.:) One time I configured a DNSBL for a spammer. Hope he doesn't plan to get mail from those hosts.:)
If you want to blame me, fine. Sadly, I have bigger concerns than the morality of unsolicited email, giving someone a tool to spider popular websites and search engines (complete with auto-correcting open proxy support), amongst other things. As stated before it's not something I like at all, but it is, unfortunately, somewhat of a necessary evil. If you're about to say, "get a job at a gas station" or something sillier, I have a job coming up that requires 100% of my time at a pay which is 4 times what I was making at my corp job. The pay from that alone can keep me off those bids for... oh, 6 or 7 months.
Anyways, I'm done justifying myself. Consider this informative of the landscape that you are encountering. The "evil" people aren't writing these applications, the hungry are.:)
Crime always comes to those who are lazy and want a good paycheck for being lazy. OTOH, I worked 80 hours last week for $40. If you want to call me a slimeball, think about the guy I used to work for who told me one thing about a raise I needed to get my head above water
I'm willing to bet this is a classic case of engineering middle management.
It's easy to fall into the trap of "this design is teh beast EVAR!" when you're on a roll, and I imagine some clueless engineer got excited and told his boss.
A note to engineers: make your damn boss ask. Never volunteer. If he asks, make it sound worse than it actually is, because it'll counter-balance all the hot air he blows into it when he talks to his boss.
I remember a project, our boss tried to make it sound like it was demanded of him, but he had made the promise that we would have this feature that was concieved in a "hall meeting" 2 days ago 1 month from now. This was easily a project 3 times that size or worse, and that was with the full cooperation of our 7-man team. Fuzzy math rules management.
Anyways, this set two bad precedents. We made our deadline due to careful planning and a pact to say NO! to everything that wasn't critical in our view. Some of us also worked late nights and weekends. In the end the code operated, but no one was happy with the design and manifestations of that took the form of plenty of rewrites.
The second problem was that any delay in any future project was seen as incomprehensible because "you got that project done in a month". Rarely the response of, "I had 6 other guys helping me" was convincing enough, although "I can rip out these 20 features to get it done on time" (with careful attention to the features they wanted the most) had a resounding effect.
I hear fables that some companies pay engineers more than management. I'm not saying the management doesn't have a place, but if a manager wants to make more because he/she has "people skills", they shouldn't only be directed towards their superiors./rant
Apparently sexism is OK if it's not in your face? Seriously, pick a side here. I bet you'd be more than happy to use a fountain at a business that had a "whites only" sign above it, but yell at a local group of KKK members.
It's people like you that make me ashamed to call myself American.
Slashdot Mirror
Not to mention, I can't think of a rootkit that doesn't hack ps.
Standard fare for me is to keep a statically compiled ps and lsof available to me off-machine in case anything 'weird' happens. It doesn't solve all problems, but it helps.
Actually this is already being done in the unix world, just no one takes advantage of it, or at least, pays attention.
FreeBSD's ports system checks MD5 sums automatically.
RPM can use GPG signing keys. I believe deb can too.
RedHat signs all their RPMs with their security key, Mandrake, SuSE and other RPM pals do it as well. The MD5 sum accompanying FreeBSD's system is distributed by the FreeBSD ports team and generated from the file that is being fetched. It will either try and re-download the file or refuse to work if it it does match, which I'm pretty sure is the case for the GPG counterparts.
It's not limiting the system but it is keeping tabs on what you install.
Of course, if you get "joe's p2p tool 2000 pro platinum gold l33t edition" that one of those groups doesn't distribute, well, you can't blame anyone but yourself for not checking the code itself.
7.3 is widely used. It's because it was the last version of RH that wasn't nearly as chained to the desktop before the Fedora guys came in (who some would say made it worse).
Most of the people running 7.3 are either doing it because it's too costly to upgrade (money is generally not as much of a problem as time or suggestively, downtime) and a good admin can keep things patched regardless.
Those that are moving but are keeping RedHat are generally looking at RHEL. 7.3 is no longer supported which is the prime motivator, not any technological benefit.
God damnit, I hate it when some clueless fart machine spits out something that is patent B.S. and then covers it all under the umbrella of "security". Even the servers with the best service contracts don't rely on that to make their systems "secure". It's common practice to "roll your own" where it's really important.
I'll be happy doing it the old way.... ... doing my business in the bathroom.
The approach that wxWindows and in some ways, the way Apple integrates java I think are the best solutions.
wxWindows says that the standard windowing toolkit is law and let's abstract it.
The AppleJava connection indicates that java, a cross-platform language, is an integral part of the OS. It's not merely an after thought.
The wxWindows way seems the most pragmatic, as getting two groups of users to agree on anything, much less language or API choice, even if functionally equivalent, is pretty damned impossible. Of course, this whole statement lends to paradox because of it.
Well, I think you know better, but if you use Windows, can you recite the point release you have installed?
No, you have "SP 2".
Games are a great example - there have been a number of games which simply don't install or run on modern hardware, and are immediately patched after release.
Uh, while I haven't had a crash in XP for a long, long time, I distinctly recall when it does happen it's pretty clear it's an error.
It even gives you the option to offer user feedback, something that plenty of other programs and systems (one of which is the topic of this discussion) do as well.
I don't know either of these technologies very well, so perhaps you could explain, given a presumably trusted environment, what are the technical merits of using XUL over ActiveX?
I really think you missed the point.
The tool for the job does not really leave room for an all encompassing smorgasborg of half-assed features.
The tool for the job is sed, or awk, or perl. It's cp, not mv. It's FreeBSD on the server but not on the Desktop. It's Windows for gaming.
Really, is this so hard to understand? Are you really advocating that your multi tool have a soldering iron, ball peen and crow hammers, cross-cut and standard tooth saw, and everything else that might be in your belt?
Frankly, I am concerned with my desktop performing window management and placing things in spots and in ways that make sense. Everything else is just shit and fluff in a nice little glossy package. The OS, being a more complete idea, should be something for a desktop role that makes sense for my needs. It should not be something that's also my first choice for a server, unless it truly merits that.
Really, how many of you would willingly use X11 if it was not free?
You forgot, "Street Fighter the Championship Movie Edition Turbo" (in which the film displays at twice the speed and all the characters are presented with stunt doubles across from them), and "Capcom vs. The Academy", where Chun Li battles Tom Hanks for who did the most hackneyed, stereotypical accent for a character this year.
Can any of the FF games be reduced to a RPG? Not really, unless you really want to take "RPG" out of context.
I really think that NWN is the only "RPG" that current executes in binary form. It's open ended enough to take on almost any game in it's chosen setting.
If you want an example, try getting another "RPG" to break the rules. DM's do this all the time (albeit silently if they still want bribes from their players) to further the plot in the direction that seems most worthy for the game.
That "DM shield" has nothing to do with the stats on the side that faces the DM. Seriously.
Trust me, you do not want to play X-2.
X was bad enough - a game which really incorporated no adventure with justice to the rest of the series but more than enough (perhaps too much) story.
X-2 is a camp-fest which can only be described as to the FF series what Plan 9 from Outer Space is to the movie industry.
If you get it, be sure and get the PSX version. I had enough trouble getting the PC version to run on existing hardware - it's a glide-based game and well, if you know what that means you know why you shouldn't be buying it.
Niiiice.
:)
I like how you threw Max Payne in there, although there were no strippers you could throw money at in MP.
BTW, you forgot about shadow warrior.
I disagree - FF7 was the last one that I enjoyed, but it was really not one of my favorites... And besides, FF7 was more or less the same as the last 6 with a better engine for tiles and an occasional FMV.
Above that, I really think it was voice acting that did it. Graphics wise for their time in the games industry, Square has always been ahead of the curve. I remember the awe looking at graphics in FF6 that nowadays people put on t-shirts to look "retro". Of course, back then these people were more interested in a pair of guess jeans than playing nintendo.
Voice acting took a large element of my imagination, stomped on it and declared it was pointless. I see the same problem with so many other video RPG's today.
A lot of the original japanese roms, if you can still find them, have been translated by fans.
For those that want to experience the original, I highly suggest going that route.
Also, the japanese-only releases have been translated as well - please don't cite that PSX B.S. that square released to make an extra buck. It really doesn't compare.
Uh,
If you haven't played the game, this makes no sense.
If you have, it's almost verbatim, taken from the game.
I will say that FF has gone down the tubes since they introduced voice acting. You can infer from that what you want.
A game has to at least pretend it has an intriguing plot before it can be made into a successful movie. So your Street Fighter, Tomb Raider, Wing Commander, etc, are definitely out.
A movie that adopts the title of a game but bears no resemblence other than to attract a cursory fandom of the company who builds said game should be out as well. Strike Final Fantasy. (Although I did see it, but that's my fault for being a fan)
Resident Evil, well, it sounds like they just fucked up - that could have been pretty good.
You ever think some people just don't like it?
That said, I hope this will make it my way.
I agree with you that way too much stink is made about [fringe os] doing [something that any os can do].
If anything, the advantage is that it's easy to point at to object to arguments that are based on superstition and not experience or fact.
The downside is that while Mac OS X is a great UNIX workstation, you're not going to see any news source write, "Good god! I got my workstation up in an hour and a half and it works just as great or better than any other system!", or, "To install this program, I didn't have to configure 12 packages or hunt down a small army of rpm files! I just opened the disk image and copied the app to a location where I want to run it from!". "I can run photoshop, office, and KDE on it with no extra software!"
That doesn't have any "sex appeal", but I'd argue these things are some of the most redeeming things about using a Mac.
I suggest....
Not bothering with the central air. 4 computers in here and it feels like I'm in hawaii when it's snowing outside.
I hesitate to post with my name on this, but here's some insight. I hate these people just as much as you do.
:)
:) One time I configured a DNSBL for a spammer. Hope he doesn't plan to get mail from those hosts. :)
... oh, 6 or 7 months.
:)
I'm not working for a corp anymore, trying to get a contracting business going, because you get screwed or outsourced working for anyone who gets investors via stock. The faceless nature of a corporation does not care who you are, your aspirations unrelated to the workplace and your current situation. They merely want your skills and labor. This is a concept that trickles down the management chain, unfortunately less by force but by those who want to "succeed". Personally, I'll take a heaping helping of poverty over that kind of success. I left when the disgust was far beyond what I could stand. Let's just say I'm not persuing the traditional avenues for work anymore. I would like to think I have an impressive skill set and resume, and I think a good portion of hiring companies would agree. So my talent is not really in question here.
Anyways, to augment my stifled income I turned to various online freelance places. The pay isn't great but it's a buck to be made which equates to food being placed in my fridge, a roof over my head and some modern amenities such as electricity, plumbing, and internet access, 2 of which I require to make money at my trade. (No, I am not a plumber
First off, you're bidding against guys in India and parts of Eastern Europe where $200 is a month's rent. The buyers are well aware of this and drive the price down to far beyond minimum wage. I've done a couple projects which equate to cents on the hour, but again, food on the table.
Second, because you are not put in the position where one job will pay the rent, you are put in a position where you bid on tons of jobs at a time - my average "bid day" is about 100 bids. These are all communicated and fullfilled. A good "bid day" will equate to around 20-30 projects varying in price from $50-$300. Only the cabals of 20 programmers get the big projects, and this isn't exactly something I want to make a sustainable income on. I average one bid day a month, $300 is a very well-paying project.
Anyways, with the combination of these two, you can see where I'm going here. They give me a project, I don't ask what they're doing and I really don't care. Food on the table. I could care less if you get a silly piece of email that sells you viagra, I've got bigger things to worry about. Thankfully, my "real" contracting is starting to take off so I've stopped bidding until I have to worry about it again.
I have gotten my "revenge" through a couple of well-placed timebombs in my scripts, and occasionally I'll create new accounts to bid and accept projects that are extremely vile (yes, there are lines) just to let them fall by the wayside.
If you want to blame me, fine. Sadly, I have bigger concerns than the morality of unsolicited email, giving someone a tool to spider popular websites and search engines (complete with auto-correcting open proxy support), amongst other things. As stated before it's not something I like at all, but it is, unfortunately, somewhat of a necessary evil. If you're about to say, "get a job at a gas station" or something sillier, I have a job coming up that requires 100% of my time at a pay which is 4 times what I was making at my corp job. The pay from that alone can keep me off those bids for
Anyways, I'm done justifying myself. Consider this informative of the landscape that you are encountering. The "evil" people aren't writing these applications, the hungry are.
Crime always comes to those who are lazy and want a good paycheck for being lazy. OTOH, I worked 80 hours last week for $40. If you want to call me a slimeball, think about the guy I used to work for who told me one thing about a raise I needed to get my head above water
I'm willing to bet this is a classic case of engineering middle management.
/rant
It's easy to fall into the trap of "this design is teh beast EVAR!" when you're on a roll, and I imagine some clueless engineer got excited and told his boss.
A note to engineers: make your damn boss ask. Never volunteer. If he asks, make it sound worse than it actually is, because it'll counter-balance all the hot air he blows into it when he talks to his boss.
I remember a project, our boss tried to make it sound like it was demanded of him, but he had made the promise that we would have this feature that was concieved in a "hall meeting" 2 days ago 1 month from now. This was easily a project 3 times that size or worse, and that was with the full cooperation of our 7-man team. Fuzzy math rules management.
Anyways, this set two bad precedents. We made our deadline due to careful planning and a pact to say NO! to everything that wasn't critical in our view. Some of us also worked late nights and weekends. In the end the code operated, but no one was happy with the design and manifestations of that took the form of plenty of rewrites.
The second problem was that any delay in any future project was seen as incomprehensible because "you got that project done in a month". Rarely the response of, "I had 6 other guys helping me" was convincing enough, although "I can rip out these 20 features to get it done on time" (with careful attention to the features they wanted the most) had a resounding effect.
I hear fables that some companies pay engineers more than management. I'm not saying the management doesn't have a place, but if a manager wants to make more because he/she has "people skills", they shouldn't only be directed towards their superiors.
It doesn't take very much to draw the conclusion that using the web and being productive are not capable of intersection.
Another thing I want to address:
Apparently sexism is OK if it's not in your face? Seriously, pick a side here. I bet you'd be more than happy to use a fountain at a business that had a "whites only" sign above it, but yell at a local group of KKK members.
It's people like you that make me ashamed to call myself American.