I'm the only one in my family that uses a hardware firewall. I explain why they are important, but they don't want to spend another $40 or whatever on hardware or are somehow satisfied with McAfee. Also, separate hardware firewalls are really only useful for broadband, especially when most people have already paid for a modem in their PC.
When people buy PCs, they want a package deal. When they are told that they need to also buy this and that, and some more of that, and this too, they start getting pretty anxious about the cost.
You would rather leave ports exposed to the Internet? Just because there aren't security bulletins for a particular service doesn't make it safe. My firewall (BSD-based) shows incoming requests for Windows services in the log files all the time.
This isn't a matter of striking fear into anyone for bad reasons.
SP2 is better, that really isn't a point of argument. The only thing that nags at me is why Microsoft didn't do this ten or so years ago, when home users were beginning to connect to the Internet in large numbers. It isn't like stack protection is new technology, nor is having basic firewall functionality available. These two things are probably among the easiest things to implement security-wise, with many examples to follow. If Microsoft had moved the Outlook Express "File Attachments Convenience Team" over to the "Basic Firewall Team" they would have saved themselves a ton of grief.
I looks to me like every Fedora release is a dot-zero release. That didn't appeal to me. Maybe I'm reading it wrong, but Fedora seems more like Red Hat's test bed than a production platform.
Is the basic problem with Fedora is that Red Hat is trying the classic free/value-add approach but missing the reasons why that approach often works? In their case, it seems the free version is inferior in ways beyond just features or support--it is less stable and mature, too.
In other free/value-add approaches, the free and value-added versions are basically identical but differ in added features, like OpenOffice.org/StarOffice, or differ in paid support options with no software differences. This can be subtle, but where Red Hat is failing is trying to make stability a value-added aspect. That just doesn't work in the OSS world.
1) Now that I've got it working, flashblock is a god-send, and my CPU thanks you.
2) Aaargh, I wish Firefox would provide more feedback about errors! The darn thing would't install, and I eventually had to set ACLs for my user account on my Firefox install directory. Was it JavaScript? Was it my firewall? What is it?!? Oh, it's stupid directory permissions!
Do CNG cars last as long as gasoline-fueled cars? I thought I heard something about cylinders wearing faster, or something like that, because gasoline is an upper-cylinder lubricant.
I've seen him on talk shows start talking about the little people oppressed and poor and struggling and weak and helpless, etc., and it seems he would create a tremendous welfare state if he could. Just because I can see through GWB like a sheet of pure polished glass doesn't mean I'm a Moore booster.
I write up my shopping list at the last minute, and I rarely stick to it. It gets thrown away immediately upon getting home. Why invest so much money in an electronic version of something so casual and disposable?
I think the comments about mapping store traffic are the most plausible explanation. Perhaps they'll finally put the frozen foods just past the refrigerated ones so people don't have to walk all the way back to pick up ice cream before leaving. Some stores are just laid out by morons.
Yes, it was. While I don't lean anywhere near Moore politically, it is pretty clear the movie didn't make anything up. The crying mommy emotional stuff got annoying, but the movie was generally very good.
The problem is that GWB's political team are vastly smarter and more unscrupulous than their opponents, and they are flat-out geniuses relative to their voters. That is what wins elections. The opposition can be smart about the issues, but that just makes them look like geeky nerds to the public, and who votes for nerds? GWB isn't a nerd--he wears a cowboy hat and jeans!
"Its aim is to reveal and focus attention on works of quality..."
In spite of all the bashing going on around here, come to think of it the graphic designers for Star Wars are second to none. The audience at Cannes can easily find things to appreciate beyond the cheesy love stories and flappy-eared wierdos.
I still see fresh Solaris installs complete with internet-facing NFS. And its so wonderfully secure.
It's only Internet facing if you make it Internet facing. Most of Sun's customers tend to put their Solaris boxes on intranets behind firewalls. Sun tailors their default install to these customers.
There are good documents that show how to harden Solaris for Internet-facing roles. It really is not very hard, and any competent sysadmin can do it. Also, it looks like there is a "Reduced Network Support" install option that is appropriate for this, too, but I've never used it.
Sun basically says that it is a joke but in more politically-correct terms. Out of curiosity, I double-checked my docs, and NIS is still supported! I was wrong about it being EOL, I'm suprised it is still hanging on. Back when I found I can use regular commands to get the password hashes of everyone on the network (shadow files be damned), I knew NIS was old news.
While NIS was truly simple to setup and use, it was also truly simple to get too much information about other users. It was designed for the 1980s, and Sun's documentation is very clear about this.
And, when Microsoft falls from #1, Intuit falls with them. This guarantees Intuit a future of about ten years at the size they are now, IMO. Businesses that think only ten years out aren't doing their job properly for their customers and share holders. Personal finance certainly won't go away in ten years. This means Intuit is leaving Linux open for competitors, for the only reason of keeping Microsoft happy.
IBM still sells AIX, and Solaris is still the biggest selling UNIX by a large margin. What will hurt MS Windows is the evolution of the Linux Desktop. The current Linux Desktops are basically on par with Windows in usability, now what we need are games and business applications. If companies like Intuit were to step off the Windows bandwagon to make their apps portable to GNOME or KDE, that would be a huge win. If they were to do a good port to Java, the could even support Linux, Windows, and Mac OS with minimal additional effort.
"ISPs and carriers can insist that when cable modems and DSL hookups are made, firewalls are installed. It is not enough for an ISP or carrier to say, oh, and by the way, you might want to think about a firewall."
While his comments about TCPA are open for debate, this particular comment is right on the money. The fact that so few Internet-connected people use firewalls is not just appalling, it's also disturbing, upsetting, and pitiful all at once. That Microsoft didn't provide a firewall earlier is simply negligent. I mean, really, if OpenBSD can get a whole new firewall, a good one, within a year by only a few people working on it, Microsoft has no excuse at all.
All the heavily regulated industries are that way after lots of property damage and loss of life. Just like a fire inspector might say "all these codes are written in blood." The computer industry is definitely large enough, now, where huge damage is likely.
For example, what was the value in proprietary information lost due to those worms that e-mail random documents off of PCs? Analogously, who would install a filing cabinet that has a door to the outside for the postman to pick up the files and put them in random P.O. boxes?
There is just very little common sense in the IT industry, and where there is no common sense there's regulation.
It's a sham, because the discovery and disclosure processes for Linux and Windows are completely different. If the "black hats" were to admit everything they know, I'd bet the number of known holes in Windows would skyrocket, while the number known in Linux would rise some but not dramatically. I'd like to hear their take on OpenBSD, too, for good measure.
It certainly is not in Microsoft's interests to disclose security problems unless they really have to, so they very likely don't. Why say anything when saying nothing is so much easier? Who wants to bet that Microsoft's issue tracking systems have hundreds to thousands of security-related bugs that are deemed proprietary information and never see the light of day?
I took a look at Rosegarden not too long ago and thought it was impressive, but it really isn't a turn-key system--there are just too many ducks to line up (ALSA, JACK, getting MIDI sound libraries, etc.). I got the impression that if I had already shelled out the big bucks for the right hardware, it would be a lot easier. But for someone who just wants to play around with notes on the screen, is there something simpler and turn-key?
I'm the only one in my family that uses a hardware firewall. I explain why they are important, but they don't want to spend another $40 or whatever on hardware or are somehow satisfied with McAfee. Also, separate hardware firewalls are really only useful for broadband, especially when most people have already paid for a modem in their PC.
When people buy PCs, they want a package deal. When they are told that they need to also buy this and that, and some more of that, and this too, they start getting pretty anxious about the cost.
You would rather leave ports exposed to the Internet? Just because there aren't security bulletins for a particular service doesn't make it safe. My firewall (BSD-based) shows incoming requests for Windows services in the log files all the time.
This isn't a matter of striking fear into anyone for bad reasons.
If it blocks all incoming connections, that would be a start. Does it block all incoming connections by default?
SP2 is better, that really isn't a point of argument. The only thing that nags at me is why Microsoft didn't do this ten or so years ago, when home users were beginning to connect to the Internet in large numbers. It isn't like stack protection is new technology, nor is having basic firewall functionality available. These two things are probably among the easiest things to implement security-wise, with many examples to follow. If Microsoft had moved the Outlook Express "File Attachments Convenience Team" over to the "Basic Firewall Team" they would have saved themselves a ton of grief.
I looks to me like every Fedora release is a dot-zero release. That didn't appeal to me. Maybe I'm reading it wrong, but Fedora seems more like Red Hat's test bed than a production platform.
Is the basic problem with Fedora is that Red Hat is trying the classic free/value-add approach but missing the reasons why that approach often works? In their case, it seems the free version is inferior in ways beyond just features or support--it is less stable and mature, too.
In other free/value-add approaches, the free and value-added versions are basically identical but differ in added features, like OpenOffice.org/StarOffice, or differ in paid support options with no software differences. This can be subtle, but where Red Hat is failing is trying to make stability a value-added aspect. That just doesn't work in the OSS world.
So, Mr. President, who is it for you in 2008? Condi or Hillary?
1) Now that I've got it working, flashblock is a god-send, and my CPU thanks you.
2) Aaargh, I wish Firefox would provide more feedback about errors! The darn thing would't install, and I eventually had to set ACLs for my user account on my Firefox install directory. Was it JavaScript? Was it my firewall? What is it?!? Oh, it's stupid directory permissions!
Me thinks they are slow learners.
Red Hat are the new Sun Micro? Hehe.
Do CNG cars last as long as gasoline-fueled cars? I thought I heard something about cylinders wearing faster, or something like that, because gasoline is an upper-cylinder lubricant.
hmmm
I've seen him on talk shows start talking about the little people oppressed and poor and struggling and weak and helpless, etc., and it seems he would create a tremendous welfare state if he could. Just because I can see through GWB like a sheet of pure polished glass doesn't mean I'm a Moore booster.
I write up my shopping list at the last minute, and I rarely stick to it. It gets thrown away immediately upon getting home. Why invest so much money in an electronic version of something so casual and disposable?
I think the comments about mapping store traffic are the most plausible explanation. Perhaps they'll finally put the frozen foods just past the refrigerated ones so people don't have to walk all the way back to pick up ice cream before leaving. Some stores are just laid out by morons.
"An excellent piece of filmmaking?"
Yes, it was. While I don't lean anywhere near Moore politically, it is pretty clear the movie didn't make anything up. The crying mommy emotional stuff got annoying, but the movie was generally very good.
The problem is that GWB's political team are vastly smarter and more unscrupulous than their opponents, and they are flat-out geniuses relative to their voters. That is what wins elections. The opposition can be smart about the issues, but that just makes them look like geeky nerds to the public, and who votes for nerds? GWB isn't a nerd--he wears a cowboy hat and jeans!
"Its aim is to reveal and focus attention on works of quality..."
In spite of all the bashing going on around here, come to think of it the graphic designers for Star Wars are second to none. The audience at Cannes can easily find things to appreciate beyond the cheesy love stories and flappy-eared wierdos.
I still see fresh Solaris installs complete with internet-facing NFS. And its so wonderfully secure.
It's only Internet facing if you make it Internet facing. Most of Sun's customers tend to put their Solaris boxes on intranets behind firewalls. Sun tailors their default install to these customers.
There are good documents that show how to harden Solaris for Internet-facing roles. It really is not very hard, and any competent sysadmin can do it. Also, it looks like there is a "Reduced Network Support" install option that is appropriate for this, too, but I've never used it.
Sun basically says that it is a joke but in more politically-correct terms. Out of curiosity, I double-checked my docs, and NIS is still supported! I was wrong about it being EOL, I'm suprised it is still hanging on. Back when I found I can use regular commands to get the password hashes of everyone on the network (shadow files be damned), I knew NIS was old news.
I think NIS is now EOL.
While NIS was truly simple to setup and use, it was also truly simple to get too much information about other users. It was designed for the 1980s, and Sun's documentation is very clear about this.
Who is the CEO of Microsoft, now?
And, when Microsoft falls from #1, Intuit falls with them. This guarantees Intuit a future of about ten years at the size they are now, IMO. Businesses that think only ten years out aren't doing their job properly for their customers and share holders. Personal finance certainly won't go away in ten years. This means Intuit is leaving Linux open for competitors, for the only reason of keeping Microsoft happy.
IBM still sells AIX, and Solaris is still the biggest selling UNIX by a large margin. What will hurt MS Windows is the evolution of the Linux Desktop. The current Linux Desktops are basically on par with Windows in usability, now what we need are games and business applications. If companies like Intuit were to step off the Windows bandwagon to make their apps portable to GNOME or KDE, that would be a huge win. If they were to do a good port to Java, the could even support Linux, Windows, and Mac OS with minimal additional effort.
Thanks, I don't think that was available back when I tried it.
"ISPs and carriers can insist that when cable modems and DSL hookups are made, firewalls are installed. It is not enough for an ISP or carrier to say, oh, and by the way, you might want to think about a firewall."
While his comments about TCPA are open for debate, this particular comment is right on the money. The fact that so few Internet-connected people use firewalls is not just appalling, it's also disturbing, upsetting, and pitiful all at once. That Microsoft didn't provide a firewall earlier is simply negligent. I mean, really, if OpenBSD can get a whole new firewall, a good one, within a year by only a few people working on it, Microsoft has no excuse at all.
All the heavily regulated industries are that way after lots of property damage and loss of life. Just like a fire inspector might say "all these codes are written in blood." The computer industry is definitely large enough, now, where huge damage is likely.
For example, what was the value in proprietary information lost due to those worms that e-mail random documents off of PCs? Analogously, who would install a filing cabinet that has a door to the outside for the postman to pick up the files and put them in random P.O. boxes?
There is just very little common sense in the IT industry, and where there is no common sense there's regulation.
It's a sham, because the discovery and disclosure processes for Linux and Windows are completely different. If the "black hats" were to admit everything they know, I'd bet the number of known holes in Windows would skyrocket, while the number known in Linux would rise some but not dramatically. I'd like to hear their take on OpenBSD, too, for good measure.
It certainly is not in Microsoft's interests to disclose security problems unless they really have to, so they very likely don't. Why say anything when saying nothing is so much easier? Who wants to bet that Microsoft's issue tracking systems have hundreds to thousands of security-related bugs that are deemed proprietary information and never see the light of day?
I took a look at Rosegarden not too long ago and thought it was impressive, but it really isn't a turn-key system--there are just too many ducks to line up (ALSA, JACK, getting MIDI sound libraries, etc.). I got the impression that if I had already shelled out the big bucks for the right hardware, it would be a lot easier. But for someone who just wants to play around with notes on the screen, is there something simpler and turn-key?
Windows is more secure than Linux! Right? No?!? It was all a sham? Oh, I see.