"when I was asking for a relatively minor email-related fix.. I found it surprising that they would access my database data without my consent.. When I asked them why they were accessing the database without my permission, they've pretty much ignored me"
Look, how else are they going to fix it, besides which there are multiple copies of your 'stuff' on backup tapes available to any government agency who wants them. And aren't they going to compile a list of hits to your website and sell it to a third party marketing company. If it's on the Internet then it ain't private. Besides which what else would the BOFH have to amuse hinself with if it wasn't reading other peoples e-mails..:)
'One thing I find myself wondering about is whether we shouldn't try
and make the "ACPI" extensions somehow Windows specific. It seems unfortunate if we do this work and get our partners to do the
work and the results is that Linux works great without having to do the work. Maybe there is no way to avoid this problem but it does bother me. Maybe we could define the APIs so that they work well with NT and not the others even if they are open. Or maybe we could patent something related to this'
Foxconn:" It has been marketed as a Microsoft Certified Motherboard for their operating systems
Me:" I've found separate DSDT tables that the BIOS hands to Linux specifically, changing it to point to the DSDT tables Vista gets fixes all Linux issues with this board
Why does the VISTA table work with Linux? Since when does a motherboard have to be hacked to run on a particualr OS instead of the other way round.
"The one for Linux points to a badly written table that does not correspond to the board's ACPI implementation"
If 'it doesn't support Linux' then why does the BIOS have a table exclusively for Linux, who designed it and why does it write to a badly written table, and what does the Microsoft Linux Lab make of it.
You seem to be using Microsoft Internet Explorer. Although this site is made up of valid HTML 4.01 and CSS2, when using Internet Explorer, the layout will be messed up, because Microsoft deliberately sabotages the CSS standard (among other things). I have no intention of including all sorts of work arounds for this. Do yourself a favor, get Firefox. It is more secure and much more convenient. Any other normal browser will do as well...
"You can't get the same scaling from a physical server as you can get from "the cloud" for anywhere near the same price"
Most people don't need such scaling and I can get more per price from a box hosted in a server farm. The reason "the cloud" would be cheaper is they build and staff it at the lowest possible cost. Things happen like forgetting to test the emergency generators, or what probably really happened, skimping on routine maintenence.
"Even if the third party has way more experience and better hardware than you do?"
I've worked for some of the 'premier' ISPs and major multinationals, one being a consultancy to the business sector. I've seen better IT infrastructure in the average tech college. As for the expertise of the consultancy, as far as I could make out it conssted of a VB macro to create unique file names for the reports, written as PPT files. Oh yea, the only other 'innovation' was splitting the research department up into teams and refering to them as 'pods'..:)
Relying on third party technology is never going to provide the reliability or uptime required. The more straight forward solution is to hire some rackspace and host your own solution. 'Cloud Computing' is just the latest marketing promotion designed to move us to renting software.
"Unfortunately we were hit and our servers went down overnight while RHN dropped its bomb and I am frankly surprised there has not been more of an uproar about this"
You mean you installed a patch that you didn't know was faulty and didn't have a rollback option in place, shame on *you* Mr. Sysadmin..:)
This, in my view, is total nonsense, if you don't mand me saying so, CmdrTaco. The full source is out there for anyone to see, bugs are reported in the kernel mailing
list, for anyone to see. How is this in any way shape or form 'security through obscurity'
"so guys (meaning not only Greg but Andrew, Linus, et al.), when will you publicly explain why you're covering up security impact of bugs", pagee...@freemail.hu
"I don't cover them up", Torvalds
"by 'cover up' i meant that even when you know better, you quite consciously do *not* report the security impact of said bugs", pagee...@freemail.hu
"Yes. Because the only place I consider appropriate is the kernel changelogs, and since those get published with the sources, there is no way I can convince myself that it's a good idea to say "Hey script kiddies, try this" unless it's already very public indeed", Torvalds
"one reason I refuse to bother with the whole security circus is that I think it glorifies - and thus encourages - the wrong behavior It makes "heroes" out of security people, as if the people who don't just fix normal bugs aren't as important", Torvalds
"I refuse to have anything to even _do_ with organizations like vendor-sec that I think is a corrupt cluster-fuck of people who just want to cover their own ass", Torvalds
Slashdot Mirror
"when I was asking for a relatively minor email-related fix .. I found it surprising that they would access my database data without my consent .. When I asked them why they were accessing the database without my permission, they've pretty much ignored me"
.. :)
Look, how else are they going to fix it, besides which there are multiple copies of your 'stuff' on backup tapes available to any government agency who wants them. And aren't they going to compile a list of hits to your website and sell it to a third party marketing company. If it's on the Internet then it ain't private. Besides which what else would the BOFH have to amuse hinself with if it wasn't reading other peoples e-mails
'"it works on Windows" is not enough to claim ACPI compatibility'
.. dumass .. ;)
...
It works on Microsoft ACPI
'One thing I find myself wondering about is whether we shouldn't try and make the "ACPI" extensions somehow Windows specific'
übersoft.net
'One thing I find myself wondering about is whether we shouldn't try and make the "ACPI" extensions somehow Windows specific. It seems unfortunate if we do this work and get our partners to do the work and the results is that Linux works great without having to do the work. Maybe there is no way to avoid this problem but it does bother me. Maybe we could define the APIs so that they work well with NT and not the others even if they are open. Or maybe we could patent something related to this'
Foxconn:" It has been marketed as a Microsoft Certified Motherboard for their operating systems
Me:" I've found separate DSDT tables that the BIOS hands to Linux specifically, changing it to point to the DSDT tables Vista gets fixes all Linux issues with this board
Why does the VISTA table work with Linux? Since when does a motherboard have to be hacked to run on a particualr OS instead of the other way round.
"The one for Linux points to a badly written table that does not correspond to the board's ACPI implementation"
If 'it doesn't support Linux' then why does the BIOS have a table exclusively for Linux, who designed it and why does it write to a badly written table, and what does the Microsoft Linux Lab make of it.
"Well, two points here .. First of all, security and spam are not the same"
Identifying spam is actually 'enumerating badness', which does lead to losing legitimate messages.
"the new HPB service will employ a link analysis algorithm to cross-compare firewall logs"
..
Snoooze
Guess the concept don't grok around here and reading the responces was almost a complete waste of time, look mom, I'm on slashdot .. :)
irrelevant keywords:
ups, raid5, copy-on-write, blocked vents, batteries ...
"The reason I remember the exact minute it failed was I had my bag in hand and was walking toward the door when the server alarm went off"
You actually had a server alarm - cool !!!
Didn't Novell sort this out years ago with something called 'transaction tracking' or was some kind of parallel universe?
"NetWare includes a transaction-monitoring feature called the Transaction Tracking System (TTS(TM))"
--
You seem to be using Microsoft Internet Explorer. Although this site is made up of valid HTML 4.01 and CSS2, when using Internet Explorer, the layout will be messed up, because Microsoft deliberately sabotages the CSS standard (among other things). I have no intention of including all sorts of work arounds for this. Do yourself a favor, get Firefox. It is more secure and much more convenient. Any other normal browser will do as well...
"Web 2.0 techniques, specifically the incremental feature releases, quick user feedback loops and quality assurance programs that include users"
Didn't that used to be known as Open Source methodology ?
"You can't get the same scaling from a physical server as you can get from "the cloud" for anywhere near the same price"
Most people don't need such scaling and I can get more per price from a box hosted in a server farm. The reason "the cloud" would be cheaper is they build and staff it at the lowest possible cost. Things happen like forgetting to test the emergency generators, or what probably really happened, skimping on routine maintenence.
"hiring rackspace is relying on third party technology"
..
Just for the box, a USB and an Internet connection. If you don't own your own technology, you're not a real business
"Even if the third party has way more experience and better hardware than you do?"
.. :)
I've worked for some of the 'premier' ISPs and major multinationals, one being a consultancy to the business sector. I've seen better IT infrastructure in the average tech college. As for the expertise of the consultancy, as far as I could make out it conssted of a VB macro to create unique file names for the reports, written as PPT files. Oh yea, the only other 'innovation' was splitting the research department up into teams and refering to them as ' pods '
Relying on third party technology is never going to provide the reliability or uptime required. The more straight forward solution is to hire some rackspace and host your own solution. 'Cloud Computing' is just the latest marketing promotion designed to move us to renting software.
"I don't really like Firefox-3.x .. which is starting to look like feature creep"
..
Try Gran Paradiso, supposed to be at the bleeding edge of development
"I know someone who worked on the cisco side with this guy .. The dude was threatening co-workers"
What was the name of this someone, who did Terry Childs threaten, what was the nature of these threats?
"lot of people work in small shops that can't afford multiple redundant servers .. What are those admins supposed to do?"
Keep two harddrives in the same machine and keep a clone of the DNS server on the second HD, if an upgrade borks, just swap the drives.
"Unfortunately we were hit and our servers went down overnight while RHN dropped its bomb and I am frankly surprised there has not been more of an uproar about this"
.. :)
You mean you installed a patch that you didn't know was faulty and didn't have a rollback option in place, shame on *you* Mr. Sysadmin
Whenever Firefox is mentioned on slashdot, make sure to bring up the memory leak issue .. :)
corrected headline .. :)
This, in my view, is total nonsense, if you don't mand me saying so, CmdrTaco. The full source is out there for anyone to see, bugs are reported in the kernel mailing list, for anyone to see. How is this in any way shape or form 'security through obscurity'
"so guys (meaning not only Greg but Andrew, Linus, et al.), when will you publicly explain why you're covering up security impact of bugs", pagee...@freemail.hu
"I don't cover them up", Torvalds
"by 'cover up' i meant that even when you know better, you quite consciously do *not* report the security impact of said bugs", pagee...@freemail.hu
"Yes. Because the only place I consider appropriate is the kernel changelogs, and since those get published with the sources, there is no way I can convince myself that it's a good idea to say "Hey script kiddies, try this" unless it's already very public indeed", Torvalds
"one reason I refuse to bother with the whole security circus is that I think it glorifies - and thus encourages - the wrong behavior It makes "heroes" out of security people, as if the people who don't just fix normal bugs aren't as important", Torvalds
"I refuse to have anything to even _do_ with organizations like vendor-sec that I think is a corrupt cluster-fuck of people who just want to cover their own ass", Torvalds
http://tinyurl.com/5qyon3
http://groups.google.co.uk/group/fa.linux.kernel/browse_thread/thread/5bdf2e1b8a90142c/abcf79768bb7ce7f?hl=en&lnk=st&q=#abcf79768bb7ce7f
re: fuck off you bought and paid for AstroWhore .. :)
"Would MS still have gone after AOL if they had a successful bid on Yahoo?"
.. :)
Obviously *no*, but isn't Microsoft also going to have to report this deal to the US antitrust subcommittee