I always thought that NAT and bastille would be enough. I never considered the risk of this sort. Worse yet, it seems that the reported exploit isn't the only locally exploitable flaw
What's an admin to do?
from the without-users-this-wouldn't-be-a-problem dept.
*Shudders*
Then, methinks: "I'll just apply a patch..."
It turns out that patches do NOT always fix the problem.
It pleases me to know that there are those who have strongly held beliefs, but manage from falling into dogma. Consider the following quote by Steven Pinker from the article:
When I say I believe this but cannot prove it, I don't mean that it's a matter of raw faith or even an idiosyncratic hunch. In each case I can provide reasons for my belief, both empirical and theoretical.
Am I knocking dogma? Not necessarily. It's just that I have noticed that there are those who can't tell the difference and claim they are being attacked for their beliefs.
SP: But I certainly can't prove it, or even demonstrate it in the way that molecular biologists demonstrate their claims, namely in a form so persuasive that skeptics can't reasonably attack it, and a consensus is rapidly achieved. The idea of a richly endowed human nature is still unpersuasive to many reasonable people, who often point to certain aspects of neuroanatomy, genetics, and evolution that appear to speak against it. I believe, but cannot prove, that these objections will be met as the sciences progress.
Here, here! I couldn't agree more. Bottom line: I don't care what you believe. If you have trouble providing reasons for your beliefs that can hold water, your credibility evaporates. To be sure, there will always be skeptical detractors, but if the logic is riddled with holes, every one would look like a detractor.
It's should be expected that a hotheaded retard like avalys would have trouble understanding that the point was to defend the work of an entire community.
Not that I am a phishing scam victim, but I look forward to using this application. FWIW, news reports are showing up about the increased intelligence of such scams. There was just one such report posted here yesterday.
Just because I have not suffered from such scams does not mean that I am invulnerable to them. Hopefully, this will be a very useful tool to combat the onslaught.
With any luck, this might be another Firefox killer app, in addition to googlebar. Maybe it could even deep-six the puny anti-spoof extension which is currently available for Firefox?
That is one downside to this technology. They go to great lengths to ensure the customer is aware that this is NOT your regular 911 service.
FWIW, I did the math on the odds that I will call 911. Although I have yet to use 911 during the better part of the last three decades, I know I that I use VoIP at my own risk. They say they may not be able to provide 911 service in the event of a power outage.
At any rate, I have discontinued my traditional phone service.
When I call my family using VoIP, they can't tell the difference.Who would have thought making calls across the atlantic would be much cheaper than calling someone across town on a payphone?
I don't care what they decide to call it. I'm just glad it's dirt cheap.
With a license like BSD if your product hits the big time, your competitor can grab it, change some things to break compatability, and force you out of the market, while keeping their customers and yours from ever making the changes they need to their systems.
Truer words have never been spoken. As much as I respect and value the work done by OpenBSD developers, I have serious reservations about participating in BSD development, simply because I fear that "whatever I code CAN AND WILL be used against me" at a later date.
To be sure, much has been made about the antisocial tendences of BSD proponents and their insatiable need to heckle GPL advocates to get PR. However, one can not deny the benefit associated with having access to any improvements made on one's work.
At least with GPL, I will always have an opportunity to improve on improvements made by others on my work.
Of course, there is always the possibility that I have missed some of the advantages of BSD in the Free Software / Open Software arena. So please do not consider this post an attempt to start a flame war. Instead, feel free to enlighten me.
It's interesting to know that there was a fair amount of thought involved in enabling the firewall in SP2. Who would've thought that could break a system? Not that I use Windows much any more, but it's still a welcome enhancement.
Sprint. The bane of my existence. I recently discovered that I have developed an allergy to incompetence, thanks in no small part to customer service provided by Sprint.
I got my first wireless phone in 1999, which was locked in with Sprint. In 2002, I upgraded to the Treo 300. Prior to the upgrade, I had no need to call Sprint customer service for assistance. However, the Treo repeatedly crashed, causing me to lose what data was stored on the device.
Whenever I tried to call customer service for assistance, I was directed to an automated system which "screened out" customers before they could talk with a live person. I would be trapped in a "press button number..." maze for minutes. I guess the most annoying part of the ordeal was that the automated system used a pathetic speech recognition system. Nice.
This, coupled with a poor coverage area (Washington, DC - imagine that!) made the decision to switch to Verizon very easy for me. Oh, I also decided to abandon the Treo product line. Based on recent news reports, this seems to have been a smart move on my part.
My brother uses Nextel (he has for years) and I wonder what will happen when he realizes that the quality service he is familiar with has become tainted by one of the more incompetent vendors around.
What more can I say?? Live and Learn, live and learn.
If you think paying $100 for a "Lead-Free" PC is a good idea, then you might be unfamiliar with the
"Tin Whiskers Alert" issued by the University of Maryland.
For what it's worth, an Independence Day weekend article posted "here" provides a preview of what can be expected due to the proliferation of such hardware.
While box office revenue may not have suffered, it is worth noting that ticket prices have escalated over the past few years. Soon enough, prices would be in the double digits for everyone (yes, that includes senior citizens.)
My reaction is to not frequent movie theatres as much as I once did, thanks to rising ticket prices. Not that I am protesting, just that I cannot afford it. Nowadays, I wait until the movie of interest makes it to (cable/satellite) TV.
For what it's worth, I've had this problem before. You can switch to fullscreen in VMware, but only after you edit the module section of your XFree86/X.org config file as appropriate.
Well, what a relief to see that the forum has some sane people in here. I was beginning to wonder if the "Anonymous Coward(s)" had much else to do besides berating others.
As an avid user of Gentoo Linux, I must say that I've kept an eye out for the different BSD flavors. I definitely appreciate the ports-style package management used by the distribution.
That said, I am in no hurry to switch if the interaction is going to be this negative.
Slashdot Mirror
Actually, I like my massive amounts of information, if it's well-sorted and I can read it.
Point taken. The enlightenment is greatly appreciated.
Now, could someone explain why on earth I'm marked down as "offtopic" as though I went on some irrelevant tangent?
Just a thought.
How does this help with information overload?
While this does not exactly match the provided specs, it might be worth a look:
Wireless VGA [grandtec.com]
One thing to note -- It's a Class A device. So there are certain FCC requirements you must meet.
Cheers
I always thought that NAT and bastille would be enough. I never considered the risk of this sort. Worse yet, it seems that the reported exploit isn't the only locally exploitable flaw
What's an admin to do?
from the without-users-this-wouldn't-be-a-problem dept.
*Shudders*
Then, methinks: "I'll just apply a patch..."
It turns out that patches do NOT always fix the problem.
What's an admin to do?
It pleases me to know that there are those who have strongly held beliefs, but manage from falling into dogma. Consider the following quote by Steven Pinker from the article:
When I say I believe this but cannot prove it, I don't mean that it's a matter of raw faith or even an idiosyncratic hunch. In each case I can provide reasons for my belief, both empirical and theoretical.
Am I knocking dogma? Not necessarily. It's just that I have noticed that there are those who can't tell the difference and claim they are being attacked for their beliefs.
SP: But I certainly can't prove it, or even demonstrate it in the way that molecular biologists demonstrate their claims, namely in a form so persuasive that skeptics can't reasonably attack it, and a consensus is rapidly achieved. The idea of a richly endowed human nature is still unpersuasive to many reasonable people, who often point to certain aspects of neuroanatomy, genetics, and evolution that appear to speak against it. I believe, but cannot prove, that these objections will be met as the sciences progress.
Here, here! I couldn't agree more. Bottom line: I don't care what you believe. If you have trouble providing reasons for your beliefs that can hold water, your credibility evaporates. To be sure, there will always be skeptical detractors, but if the logic is riddled with holes, every one would look like a detractor.
It's should be expected that a hotheaded retard like avalys would have trouble understanding that the point was to defend the work of an entire community.
Not that I am a phishing scam victim, but I look forward to using this application. FWIW, news reports are showing up about the increased intelligence of such scams. There was just one such report posted here yesterday.
Just because I have not suffered from such scams does not mean that I am invulnerable to them. Hopefully, this will be a very useful tool to combat the onslaught.
With any luck, this might be another Firefox killer app, in addition to googlebar. Maybe it could even deep-six the puny anti-spoof extension which is currently available for Firefox?
That is one downside to this technology. They go to great lengths to ensure the customer is aware that this is NOT your regular 911 service.
FWIW, I did the math on the odds that I will call 911. Although I have yet to use 911 during the better part of the last three decades, I know I that I use VoIP at my own risk. They say they may not be able to provide 911 service in the event of a power outage.
At any rate, I have discontinued my traditional phone service.
When I call my family using VoIP, they can't tell the difference.Who would have thought making calls across the atlantic would be much cheaper than calling someone across town on a payphone?
I don't care what they decide to call it. I'm just glad it's dirt cheap.
With a license like BSD if your product hits the big time, your competitor can grab it, change some things to break compatability, and force you out of the market, while keeping their customers and yours from ever making the changes they need to their systems.
Truer words have never been spoken. As much as I respect and value the work done by OpenBSD developers, I have serious reservations about participating in BSD development, simply because I fear that "whatever I code CAN AND WILL be used against me" at a later date.
To be sure, much has been made about the antisocial tendences of BSD proponents and their insatiable need to heckle GPL advocates to get PR. However, one can not deny the benefit associated with having access to any improvements made on one's work.
At least with GPL, I will always have an opportunity to improve on improvements made by others on my work.
Of course, there is always the possibility that I have missed some of the advantages of BSD in the Free Software / Open Software arena. So please do not consider this post an attempt to start a flame war. Instead, feel free to enlighten me.
It's interesting to know that there was a fair amount of thought involved in enabling the firewall in SP2. Who would've thought that could break a system? Not that I use Windows much any more, but it's still a welcome enhancement.
Sprint. The bane of my existence. I recently discovered that I have developed an allergy to incompetence, thanks in no small part to customer service provided by Sprint.
I got my first wireless phone in 1999, which was locked in with Sprint. In 2002, I upgraded to the Treo 300. Prior to the upgrade, I had no need to call Sprint customer service for assistance. However, the Treo repeatedly crashed, causing me to lose what data was stored on the device.
Whenever I tried to call customer service for assistance, I was directed to an automated system which "screened out" customers before they could talk with a live person. I would be trapped in a "press button number..." maze for minutes. I guess the most annoying part of the ordeal was that the automated system used a pathetic speech recognition system. Nice.
This, coupled with a poor coverage area (Washington, DC - imagine that!) made the decision to switch to Verizon very easy for me. Oh, I also decided to abandon the Treo product line. Based on recent news reports, this seems to have been a smart move on my part.
My brother uses Nextel (he has for years) and I wonder what will happen when he realizes that the quality service he is familiar with has become tainted by one of the more incompetent vendors around.
What more can I say?? Live and Learn, live and learn.
Forgive me if you considered this option, but the link below may be the solution you seek:
Wireless VGA
Just one problem, though - It's a Class A device. That means the FCC could come after you just for being in possession of one at your residence.
Me surmises that this may help you develop some hardware hacking ideas of your own.
If you think paying $100 for a "Lead-Free" PC is a good idea, then you might be unfamiliar with the "Tin Whiskers Alert" issued by the University of Maryland.
For what it's worth, an Independence Day weekend article posted "here" provides a preview of what can be expected due to the proliferation of such hardware.
Bottom line, THERE IS NO FREE LUNCH!!!
While box office revenue may not have suffered, it is worth noting that ticket prices have escalated over the past few years. Soon enough, prices would be in the double digits for everyone (yes, that includes senior citizens.)
My reaction is to not frequent movie theatres as much as I once did, thanks to rising ticket prices. Not that I am protesting, just that I cannot afford it. Nowadays, I wait until the movie of interest makes it to (cable/satellite) TV.
For what it's worth, I've had this problem before. You can switch to fullscreen in VMware, but only after you edit the module section of your XFree86/X.org config file as appropriate.
It never ceases to amaze me how often folks think such "under the table" activities will go unnoticed.
When I read this story, the first thing that to came to mind was:
HEY MAN, NICE SHOT!!!
http://www.wordiq.com/definition/R._Budd_Dwyer
I get the feeling this will not be the last of this story.
Well, what a relief to see that the forum has some sane people in here. I was beginning to wonder if the "Anonymous Coward(s)" had much else to do besides berating others.
As an avid user of Gentoo Linux, I must say that I've kept an eye out for the different BSD flavors. I definitely appreciate the ports-style package management used by the distribution.
That said, I am in no hurry to switch if the interaction is going to be this negative.