There is a module for PostgreSQL called PostGIS with quite impressive feature set... It's there for a while, it is actively developed and have support from PostgreSQL core hackers.
I have tested this DoS attack against lighttpd and nginx. Out of the box both servers are vulnerable (despite the note in the announcement that lighttpd is not vulnerable, just use enough number of connections). Nginx could be configured to not be affected by this type of attacks:
No. I do not know the languages that the boss should allow me to use. But I know at least 6 languages I do not want to use: PHP,Java,C++ (C is OK), Basic and its derivatives, ASM, etc...
The voting procedure in Bulgaria is even worse. There is Bulgarian Institute for Standardization (BIS) that have different Technical Comitees (TC) in different fields. The TC in IT have voted against the promoted DIS 29500 for number of technical reasons but also because the proposed DIS 29500 doubles the functionality of an always existing standard (ISO 26300) and conflicts with a number of established others (XML,ISO 8601, ISO 639, ISO/IEC 10118-3 etc.). But in spite of that, the Institute, pushed mainly by the State IT Agency and pro-M$ parties have approved the DIS 29500 with some notes.
"The major commercial RDBMS vendors -- including Oracle, IBM, and Microsoft -- could point to this deficiency as reason enough to choose their proprietary sstems over MySQL or any other open source system, such as PostgreSQL..."
They could not point this because PostgreSQL has stored procedures for decades... fully tested, stable, offering e bunch of languages for writing functions/triggers, including Perl, Python, Tcl and their own PlSQL that is very close to Oracle's variant.
Slashdot Mirror
Is it possible to define new data types in MySQL, using plugins or by other means?
Nothing could stop Free.fr from blackhole-ing emails comming from hadopi servers or from @hadopi.com senders - this is how SPAM filtering works.
There is a module for PostgreSQL called PostGIS with quite impressive feature set... It's there for a while, it is actively developed and have support from PostgreSQL core hackers.
Gnome parser is not even mentioned in the article but appears in the /. title...
I have tested this DoS attack against lighttpd and nginx. Out of the box both servers are vulnerable (despite the note in the announcement that lighttpd is not vulnerable, just use enough number of connections). Nginx could be configured to not be affected by this type of attacks:
Put in "http" section:
client_body_timeout 10;
client_header_timeout 10;
keepalive_timeout 10;
send_timeout 10;
limit_zone limit_per_ip $binary_remote_addr 1m;
and put in "server" section :
limit_conn limit_per 16;
The last 2 configuration lines are for limiting connections per client IP. This fist lines are same sane connection timeouts.
May be lighttpd could be configured in a similar manner but I am not a spec in it.
Best regards
No. I do not know the languages that the boss should allow me to use. But I know at least 6 languages I do not want to use: PHP,Java,C++ (C is OK), Basic and its derivatives, ASM, etc...
You could disable frames in mozilla/firefox browsers. In about:config set browser.frames.enabled to false. Will this prevent such kinds of attacks?
If they have not changed the code. Most of the hardware on todays STBs are fully supported by main linux kernel.
The voting procedure in Bulgaria is even worse. There is Bulgarian Institute for Standardization (BIS) that have different Technical Comitees (TC) in different fields. The TC in IT have voted against the promoted DIS 29500 for number of technical reasons but also because the proposed DIS 29500 doubles the functionality of an always existing standard (ISO 26300) and conflicts with a number of established others (XML,ISO 8601, ISO 639, ISO/IEC 10118-3 etc.). But in spite of that, the Institute, pushed mainly by the State IT Agency and pro-M$ parties have approved the DIS 29500 with some notes.
"The major commercial RDBMS vendors -- including Oracle, IBM, and Microsoft -- could point to this deficiency as reason enough to choose their proprietary sstems over MySQL or any other open source system, such as PostgreSQL..." They could not point this because PostgreSQL has stored procedures for decades... fully tested, stable, offering e bunch of languages for writing functions/triggers, including Perl, Python, Tcl and their own PlSQL that is very close to Oracle's variant.