im actually running ftps, so no cleartext. i may move to sftp one of these days if i ever need to rebuild that server or just have some free time on my hands.
-i heard its good to remove SUID from any binaries that have it set. check google for this, its some long command that involves xargs.
-check your/var/log/auth.log from time to time and make sure there arent a bunch of failed login attempts.
-if you see a lot of activity in auth.log and other logfiles pointing to repeated attempts at breaking into your system, identify the method theyre trying to get in through (usually ssh or ftp) and change the port. i usually use 2222 for ssh and 2121 for ftp, that stopped all the connection attempts i was getting and theyre easy to remember.
yeah, these are kind of basic and are not helpful in learning in-depth, but im kind of in the same boat. iv been using debian since 2001 and these (plus the basics of course) are all iv needed to secure my systems from attempted intrusions (at least, the ones i KNOW about).
I got rid of windows at home nearly ten years ago, so I understand not wanting windows...
However, if you want a Dodge Viper without any seats and a built-in coffee maker, you are going to have to purchase a Dodge Viper, remove the seats and install a coffee maker. They dont sell them in that configuration. While it is frustrating to purchase extra 'features' that you dont want, its the only option you have aside from not buying it at all.
So then if I cant afford to purchase a Lexus, then Im BANNED from driving one? No, if they cant afford to do stuff without federal funding, then maybe they should do something else. Why does EVERYONE deserve federal funds for EVERYTHING? Federally funded swine smell research in ohio (or wherever it was) benefits people, but it was decried as wasteful spending.
the parent shouldnt be a troll, who the hell modded him to -1??
as an alaskan, i agree completely. why should anyone from the lower 48 (and hawaii) have to pay to watch our volcanos? why should i have to pay for some bullshit in massachusetts?
spend federal dollars on federal stuff, spend state dollars on state stuff!
ah, youre right about the construction. the keys that exhibit the problem appear to be making a circuit before the click. regardless, its a nice little keyboard, and i like it even more now that i know the click is entirely for the user's pleasure!
i actually found an NMB clicky keyboard at work and im using it to type this post. its nice, but it doesnt stack up to the model m at home. one thing i noticed is that windows registers a keystroke before the click on a lot of the keys. its my only clicky keyboard at work so i dont want to take it apart and see what the deal is.
and yeah, the \ key and single-key sized backspace are annoying, but its still much better than those dell keyboards everyone else has.
youre comparing a hobo's shit with a beautiful princess's shit. theyre both shit, and it doesnt matter which one dumped first. i wish people would stop using the last administration's fuckups to excuse the current administration's fuckups.
really? how about if they tax 75% of your earnings? do you reply "oh well, at least they didnt take 76%!"? when does bullshit stop being acceptable?
its a ploy to gain public support by showing us vague pie charts. if 'transparent-enough' satisfies your definition of 'transparency' then i suppose that they met their goal.
file sharing will become encrypted? gg copyright laws?
how can this solve the problem, though? you could just have an RIAA node out there on a tracker. whoever uploads encrypted data of a song to them gets their IP logged and nothing is changed.
that said, torrents are scary, i use encrypted usenet. its not infallible, but its a lot better.
agreed that some of the CEOs (mostly the ones we hear about on the news) are greedy SOBs using money as toilet paper, but if a company thinks theyre worth the salary, arent they?
CEOs and higher-ups are paid a lot for what looks like a little, but imagine having a total dolt in charge and he drives the company into the ground. what do you think happens to the workers? people get paid what theyre thought to be worth, and some of these people are indeed worth the millions they are paid to keep multi-billion dollar companies successful.
that said, others arent worth shit. i would like to know why GM and chrystler havent refreshed their management. people have resigned for less than publicly humiliated their organization in a fiasco where they beg for money they have no right to.
and all the important data is likely stored in SQL databases, which can be modified from any OS. also you can use a single server as a launching point to use remote management to do the rest of the job. doesnt seem like too much work, when you think about it.
I think he was referring to the trillions of tax dollars spent on bullshit in the name of 'fixing' the current economic issues. hopefully my great-great grandchildren will see the debt incurred by it paid off, but i doubt it.
any time that we have people leaving work on a business trip, we ship them off with a laptop and instructions on how to use the VPN. thats the plan, but we cant control the user when they want to do stupid things...
CLASSIFIED data is not allowed on a personal computer (in case the data was CLASSIFIED). I dont see anything about unclass material not being allowed, but think about it for a minute...
Back before the USB media ban, information could be moved about on USB media with no enforcable restrictions. If the user took a DoD USB or CD with files on it to their home, why did they need to put it on an mp3 player? perhaps it was on a CD and they didnt have a cd burner to burn the updated files for transport back to work... why not email over AKO? perhaps they didnt have internet, thats fine. why put it on an mp3 player? DoD->home and home->DoD are equivalent. why not use an approved USB device in the first place? their mp3 player obviously had usb, so there is no limitation there.
there is a lot of conjecture before we know any facts, but all signs point to a violation of AR25-2 in one way or another. anyway, there are personnel that do security investigations for a reason. they DO get to the bottom of stuff like this, and they are some of the most competent IT people in the Army.
Slashdot Mirror
im actually running ftps, so no cleartext.
i may move to sftp one of these days if i ever need to rebuild that server or just have some free time on my hands.
-i heard its good to remove SUID from any binaries that have it set. check google for this, its some long command that involves xargs.
-check your /var/log/auth.log from time to time and make sure there arent a bunch of failed login attempts.
-if you see a lot of activity in auth.log and other logfiles pointing to repeated attempts at breaking into your system, identify the method theyre trying to get in through (usually ssh or ftp) and change the port. i usually use 2222 for ssh and 2121 for ftp, that stopped all the connection attempts i was getting and theyre easy to remember.
yeah, these are kind of basic and are not helpful in learning in-depth, but im kind of in the same boat. iv been using debian since 2001 and these (plus the basics of course) are all iv needed to secure my systems from attempted intrusions (at least, the ones i KNOW about).
'Internet Freedom Preservation Act of 2009'
sounds great! who would vote against a bill that preserves freedom?!
so... what did they hide in it?
I got rid of windows at home nearly ten years ago, so I understand not wanting windows...
However, if you want a Dodge Viper without any seats and a built-in coffee maker, you are going to have to purchase a Dodge Viper, remove the seats and install a coffee maker. They dont sell them in that configuration.
While it is frustrating to purchase extra 'features' that you dont want, its the only option you have aside from not buying it at all.
So then if I cant afford to purchase a Lexus, then Im BANNED from driving one?
No, if they cant afford to do stuff without federal funding, then maybe they should do something else.
Why does EVERYONE deserve federal funds for EVERYTHING? Federally funded swine smell research in ohio (or wherever it was) benefits people, but it was decried as wasteful spending.
how about posting some supporting evidence instead of just 'redricking' the post and moving on?
the parent shouldnt be a troll, who the hell modded him to -1??
as an alaskan, i agree completely. why should anyone from the lower 48 (and hawaii) have to pay to watch our volcanos? why should i have to pay for some bullshit in massachusetts?
spend federal dollars on federal stuff, spend state dollars on state stuff!
i just assume that if no political party is given that theyre one of the "protected" parties.
except that Al is almost an elected politician now. no one can shut them up.
its a catch-phrase that people use to support their argument because its witty, and witty comments you agree with are true.
ah, youre right about the construction.
the keys that exhibit the problem appear to be making a circuit before the click.
regardless, its a nice little keyboard, and i like it even more now that i know the click is entirely for the user's pleasure!
i actually found an NMB clicky keyboard at work and im using it to type this post.
its nice, but it doesnt stack up to the model m at home. one thing i noticed is that windows registers a keystroke before the click on a lot of the keys. its my only clicky keyboard at work so i dont want to take it apart and see what the deal is.
and yeah, the \ key and single-key sized backspace are annoying, but its still much better than those dell keyboards everyone else has.
youre comparing a hobo's shit with a beautiful princess's shit. theyre both shit, and it doesnt matter which one dumped first.
i wish people would stop using the last administration's fuckups to excuse the current administration's fuckups.
really?
how about if they tax 75% of your earnings? do you reply "oh well, at least they didnt take 76%!"?
when does bullshit stop being acceptable?
its a ploy to gain public support by showing us vague pie charts.
if 'transparent-enough' satisfies your definition of 'transparency' then i suppose that they met their goal.
I dont see why they would, the bat chose to go to space. who are environmentalists to decide what a bat should do with his life?? damn interlopers...
agreed, this comment isnt very good anyway
file sharing will become encrypted? gg copyright laws?
how can this solve the problem, though?
you could just have an RIAA node out there on a tracker. whoever uploads encrypted data of a song to them gets their IP logged and nothing is changed.
that said, torrents are scary, i use encrypted usenet. its not infallible, but its a lot better.
but your Monopoly license agreement allows up to four concurrent players, so thats not really a good example.
agreed that some of the CEOs (mostly the ones we hear about on the news) are greedy SOBs using money as toilet paper, but if a company thinks theyre worth the salary, arent they?
CEOs and higher-ups are paid a lot for what looks like a little, but imagine having a total dolt in charge and he drives the company into the ground. what do you think happens to the workers? people get paid what theyre thought to be worth, and some of these people are indeed worth the millions they are paid to keep multi-billion dollar companies successful.
that said, others arent worth shit. i would like to know why GM and chrystler havent refreshed their management. people have resigned for less than publicly humiliated their organization in a fiasco where they beg for money they have no right to.
a 7 billion dollar bet? thats peanuts! wake me up when someone makes a 1.5 trillion dollar bet on the economy.
and all the important data is likely stored in SQL databases, which can be modified from any OS.
also you can use a single server as a launching point to use remote management to do the rest of the job. doesnt seem like too much work, when you think about it.
I think he was referring to the trillions of tax dollars spent on bullshit in the name of 'fixing' the current economic issues.
hopefully my great-great grandchildren will see the debt incurred by it paid off, but i doubt it.
any time that we have people leaving work on a business trip, we ship them off with a laptop and instructions on how to use the VPN.
thats the plan, but we cant control the user when they want to do stupid things...
i dont think that was a troll...
anyway, the DoD has their own budget, and this falls under DoD. DHS doesnt mess with us.
CLASSIFIED data is not allowed on a personal computer (in case the data was CLASSIFIED).
I dont see anything about unclass material not being allowed, but think about it for a minute...
Back before the USB media ban, information could be moved about on USB media with no enforcable restrictions. If the user took a DoD USB or CD with files on it to their home, why did they need to put it on an mp3 player? perhaps it was on a CD and they didnt have a cd burner to burn the updated files for transport back to work... why not email over AKO?
perhaps they didnt have internet, thats fine. why put it on an mp3 player? DoD->home and home->DoD are equivalent. why not use an approved USB device in the first place? their mp3 player obviously had usb, so there is no limitation there.
there is a lot of conjecture before we know any facts, but all signs point to a violation of AR25-2 in one way or another.
anyway, there are personnel that do security investigations for a reason. they DO get to the bottom of stuff like this, and they are some of the most competent IT people in the Army.