Slashdot Mirror


User: Kalriath

Kalriath's activity in the archive.

Stories
0
Comments
5,654
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 5,654

  1. Re:Already done on Diginotar Responds To Rogue Certificate Problem · · Score: 1

    Why bother? Microsoft, Mozilla, and Google have all already removed the trust on that CA Root certificate (Apple is notably absent). Your next desktop update should nuke it for you.

  2. Re:Security theater a little on Mac OS X Lion LDAP Vulnerability Emerges · · Score: 1

    Well, if you're running Exchange 5.5 it's easy - if you authenticate as an administrator, Exchange 5.5 will let you open any mailbox.

  3. Re:Security theater a little on Mac OS X Lion LDAP Vulnerability Emerges · · Score: 1

    You might be right actually - I believe there is an attribute within ADS which is only visible to administrators which may contain the (irreversible) password hash.

  4. Re:Finally on New Worm Morto Using RDP To Infect Windows PCs · · Score: 1

    Ah, well that makes sense - it's all in how you parse out the sentence I guess.

  5. Re:Security theater a little on Mac OS X Lion LDAP Vulnerability Emerges · · Score: 2

    Contrary to boxxa's completely fabricated post, NT domains aren't that insecure. For a start, Windows uses LDAPS for communication with the LDAP server, and second the authentication is all done using Kerberos v5. Logon history is not accessible over LDAP or even remotely at all short of remote event log viewing, user passwords cannot be retrieved via LDAP and you cannot access anyone's email just by getting some details out of LDAP.

  6. Re:Security theater a little on Mac OS X Lion LDAP Vulnerability Emerges · · Score: 1

    Actually, the login history is stored in the event log if auditing is enabled - the LDAP user store contains only the last login date, nothing more. You also cannot get the password from Active Directory (you have to crack the SAM on the server). You certainly can't access the mailboxes using only the details in AD since you have to authenticate with the Exchange server using a valid Kerberos ticket (NTLM requires you already have the password) to get those.

  7. Re:Hilarious waste of Time and $ on GameStop Offers $50 Certificate For Coupon Fiasco · · Score: 1

    Maybe they don't, but they probably paid Square a small fortune to include the coupons in the first place, and got ripped off by the retailer - you can bet Square isn't going to give OnLine a partial refund...

  8. Re:they're afraid of OnLive? on GameStop Offers $50 Certificate For Coupon Fiasco · · Score: 1

    Neat technology? It's all about making it so you don't buy games, you rent a license to run the game on a central server from your dumb terminal (with the associated datamining, and the inevitable monthly demand to pay again for the same game). It's one step towards not actually owning computers, but simply dumb terminals that connect to servers run by giant conglomerates who shaft you with monthly fees - and that's not even counting the ISPs with their gargantuan per-GB fees making sure you end up paying twice to three times for the game. I'm not even willing to try a service built on such a craptastic premise, but I'll sure as hell continue to talk about how much I loathe it regardless.

  9. Re:Corporate humility at its best on GameStop Offers $50 Certificate For Coupon Fiasco · · Score: 1

    Or they could have swapped it out for an Impulse coupon of the same value, since they bought that out (and promptly fucked it up, but that's pretty typical of a global mega-corp).

  10. Re:sex.xxx on Celebrities Flock To Reserve .xxx Domains · · Score: 1

    No, that's actually what the authoritative DNS server returns for that name.

  11. Re:Get Rid of TLDs on Celebrities Flock To Reserve .xxx Domains · · Score: 1

    Excuse 1: The USA is not the only country on the internet.

    Oh wait, that actually torpedoed your entire post. Whoops.

  12. Re:Duplicate names never happen. on Celebrities Flock To Reserve .xxx Domains · · Score: 1

    The policy is that anyone can contest a blacklist registration. I don't recall if a contested blacklist results in a refund for the applicant, but it probably doesn't considering the scummy actions of ICM thus far.

  13. Re:Finally on New Worm Morto Using RDP To Infect Windows PCs · · Score: 1

    "It's just a silent commentary as to the quality of MCSE's thrown into a server administration role".

    No, actually, he did say that having an MS cert makes someone a bad sysadmin.

  14. Re:Require a VPN connection on New Worm Morto Using RDP To Infect Windows PCs · · Score: 1

    SSL RDP? Oh, right - Remote Desktop Gateway. Yes, that's possible as of 2008 Server. Essentially tunnels a Remote Desktop connection over HTTPS, with certificate validation and stuff. Theoretically, you can also configure (as of 2003 I think) your remote desktop connection to use Smart Cards to authenticate rather than passwords... you see where this is going.

  15. Re:Finally on New Worm Morto Using RDP To Infect Windows PCs · · Score: 2

    Flamebait much? (And I have mod points, just preferred not to use 'em).

    Someone having an MS qualification does not make them a bad sysadmin. There are equally shitty Unix sysadmins out there. A stupid sysadmin is a stupid sysadmin no matter who issued their certificate.

  16. Re:And The Rest Of What Makes Windows Garbage on Estimated Transfer Time Is No More In Windows 8 · · Score: 1

    So, just a folder then. Right, got it.

    And actually, it does not under any circumstances mean everything to do with that application is in that folder at all. Safari is a great example, with its components spread across /Applications/, /Library/Application Support/, /Users/Username/Library/Application Support/, and who knows where else. VMWare scatters itself across an equally large number of locations, as does MySQL.

  17. Re:DIAF, Rob Malda! on So Long, CmdrTaco, and Thanks For All The Posts · · Score: 2

    That's not kdawson anyway. All the editors have a little /. logo beside their name.

  18. Re:This is a sad day for the tech world on Steve Jobs Resigns As Apple CEO · · Score: 1

    You don't need to Jailbreak. There's a program called "PhoneDisk" that will mount the filesystem of your non-jailbroken iPhone/iPad/iPod as a drive in Windows Explorer/Finder, and you can even navigate to /private.

  19. Re:Double standards and people on Interview With 'Idiot' Behind Key Software Patent · · Score: 1

    I don't know about the US, but where I come from public sector jobs are the lowest paying and least stable jobs available, with the least benefits. All because we elected a right wing government who made wholesale cuts to everything except giving money to the rich.

  20. Re:queue on Estimated Transfer Time Is No More In Windows 8 · · Score: 1

    $1/GB? You think the magic number is $500 for a 500GB hard drive?

    If you really believe that, I have a bridge in Brooklyn I'd like to sell you.

  21. Re:where is our critical mass of Linux Users? on Estimated Transfer Time Is No More In Windows 8 · · Score: 1

    No it's not free, it's pirated. But he is correct on one point: Visual Studio has no DRM. In fact, Microsoft's developer tools are the only products they make with absolutely no real attempt at copy protection. No DRM, no Activation, not even a disk check or something. Just a product key and you're away. And since the only real place people get Visual Studio is MSDN, they don't even see that as Microsoft bakes the key into the installer.

    But this guy's computer is probably running 8 botnet nodes and a couple of viruses. And Norton.

  22. Re:And The Rest Of What Makes Windows Garbage on Estimated Transfer Time Is No More In Windows 8 · · Score: 2

    * Drive letters - WTF???

    Mount points are just fucking indecipherable to regular users. "/dev/sda1" lolwut?

    * \ instead of the standard / - leave it to Microsoft when faced with picking a sane choice and and a mind boggling idiotic one...

    Oh, you mean Digital Research, who wrote DOS. Microsoft didn't.

    * Can't boot to a standard desktop from any Windows OS media

    A feature no-one cares about. Joy.

    * No application bundles

    Here you show your true colours, Mac fanboy. Since OS X is the only OS that has this concept. And app bundles are just folders anyway. /Applications/Safari.app is no different than C:\Program Files\Safari except one of the two OSes hides the implementation from the user. I don't like my computer hiding things from me, mmkay.

    * The Registry - LOL. Why lose just the settings for a single application when you can lose everything! Thanks Microsoft!

    Despite how you *nix fanboys rant on about it, I have never, in my entire life, encountered a corrupt registry. It's almost like you overstate the prevalence of this issue to make Windows look bad!

  23. Re:Those Booty's on WebAPI: Mozilla Proposes Open App Interface For Smartphones · · Score: 1

    What, the fuck, is a minuteness.

  24. Re:"Oldtime shareware/freeware dev" here... apk on Download.com Now Wraps Downloads In Bloatware · · Score: 1

    CNET/ZDNet - They CAN be a "tough lot" to deal with... but this updater doesn't sound ALL THAT BAD really!

    I was with you up to this bit - I personally don't agree that a downloader that rams toolbars onto the user's PC is a good thing at all. Is it possible you're confusing the Cnet Downloader with Cnet TechTracker, which is a program which checks for new versions of installed apps from download.com?

    I mean, what's next? SourceForge with MS apps?? Doubt that, closed source & all, & just being "facetious" is all on this last account!

    ... apk

    Actually, funny you mention that... MS has a few apps on Sourceforge, including what has to be the best Open Source installer packager for Windows - WiX.

  25. Re:Why can't they make this a good thing? on Download.com Now Wraps Downloads In Bloatware · · Score: 1

    They have that, it's called TechTracker. And the CNet Downloader rams it in your face too.