Slashdot Mirror


User: walshy007

walshy007's activity in the archive.

Stories
0
Comments
1,597
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 1,597

  1. Re:I think you've come to the wrong conclusion. on The Dumber Android Is, the Better, Say Experts · · Score: 1

    you don't need to run apache as root, of course you must run above port 1024 in the apache setup, assuming your directly connected to the internet and can't get some form of port forwarding happening it still matters not.

    iptables (kernel ip settings) on the box it's running on fixes all
    take the following for instance, assume your on a lan and while do have root access, don't want apache to be run as root and also want it to be on port 80
    the below assumes you start running it on port 2000 and is 192.168.0.3 with ip forwarding enabled in the kernel (simple modprobe if you don't)

    iptables -t nat -A PREROUTING -p tcp -i eth0 -d 192.168.0.3 --dport 80 -j DNAT --to 192.168.0.3:2000
    iptables -A FORWARD -p tcp -o eth0 -d 192.168.0.3 --dport 80 -j ACCEPT

    if you run nmap on the box itself or try to access it on port 80 on itself it won't work, however to all network connections to you rbox port 80 will be the web server your running as non-root on port 2000

    this is indeed a single instance, however my actual point is, there is basicly no user-land programs that desperately need root access, any other examples you can name I can probably also say how to run them as non-root. This is why I 'missed' your point, there isn't one, if you don't want to run as root, you don't have to. the best way to run apache is so it only has access to the stuff it requires.

    now on to the next point your right that any program running as you will always have access to your home files, the question then is, what do you run as your user that you do not trust to not delete them all?

    it doesn't make sense to me to limit programs access to places you would probably store saved files etc for the given program. if you distrust the source of the program then it isn't wise running it as your user anyway, but there isn't a need to with different user accounts available.

    In essence, must all trusted userspace programs run entirely restricted without access to saved files they need by your requirements?
    All on the chance there could be a buffer overflow exploit AND somebody came up with a decent payload AND it's sole purpose was to hose your home directory since it couldn't access anything else AND they specifically targeted you as you were running it.
    It could only really happen to an online program that somebody was willing to put that level of effort in to for no payoff but to piss you off?

    while possible, the probability of say, somebody hosing my home directory by exploiting something in xchat is worth the risk of me using it imho :P you have higher chances of bad hardware killing your box.

    while I do believe the first bit of this post is solid, I've probably failed in outlining things properly in the last bit from lack of time. please outline any inconsistencies or questions.

  2. Re:most basic of basic programming trumps security on The Dumber Android Is, the Better, Say Experts · · Score: 1

    it took a bit of me thinking to come up with something of what he was meaning, my only thought came to the days of the c64 and commodore basic.

    Certain basic commands directly translated to certain machine instructions, thusly if you were smart enough, you could probably hex dump, get machine instructions and reconstruct the basic program albeit with nfi in regard to the variable names etc.

    however, the moment he said "exe" which would indicate dos or windows, I.. also, have no idea what he's on about. at least it reminded me of something funky though.

  3. Re:I think you've come to the wrong conclusion. on The Dumber Android Is, the Better, Say Experts · · Score: 1

    anybody who uses root for anything non-trusted should get what they deserve, seriously it's like letting a two year old have admin access, say 'have a play' then being amazed it's borked a day later, even if the chances of that happening were rather small.

    hardware level privilege separation between ring zero and ring five.... is a shite site better than any software method of security. hardware vm's are handy sure, but pure software emulated environments? whats the point? the hardware security does its job better and faster.

    it's your own stupid fault if you escalate a program's privileges to root to enable it to do stupid things, just like enabling java to read/write whatever it likes when you don't know the program.

    you could bring the argument that since the java vm runs as a program, and seeing even if it was compromised it still wouldn't have access to the kernel etc due to hardware bits, thats true, but that begs the question how many layers of unneeded crap should be added before you consider it 'secure'. there's no point adding extra crap, when you can simply get the first layer right and avoid the mess.

    it's rather late at night here, so if I come off as condescending I apologize, I'm not against java, I think it's great for quick prototyping, however, the right tool for the right problem. choosing java for extra security is like wearing two hats because you think it might be particularly bright today.

  4. Re:Cheap games would be nice but... on EA Boss Says Games Too Expensive · · Score: 1

    I'd always considered Geek as the kind of person who winds up being an engineer of some kind. Due to interest of wanting to know how things work, and having the technical skill to figure it out.

    as opposed to a nerd, which learns stuff only he needs to, for instance in an attempt to show up someone, mostly memorising useless facts or notes without ever 'getting it'.

    so yes, I'd consider nerd and geek being swapped apt.

    imho geeks are kind of people who would, for instance, get a new-fangled console with no sdk (a la ds when it was new) disassemble it and discover the pinouts required to hook up a device to run code you would like to, then proceed to make an sdk from the gnu toolchain, modify it for the now partially reverse-engineered architechture, and have a play.

    as opposed to a nerd who may, for instance, learn everything the media says about said console, but never take it apart and understand it themselves.

  5. Re:Now say after me on Australian Army Invests in Electrical Shirts · · Score: 1

    but what about the weight of the batteries you carry?

    As a signalman you'll carry a fair few, now which is a better use of energy, using it to haul around 15 kilo of batteries, or being lighter but using a little extra energy for charging batteries?

  6. Re:USA and Canada only on Nominate SysAdmin of the Year By Oct. 12 · · Score: 1

    The context is usually gotten from where it is used, in your example of McDonald's employee of the month, you are only likely to see that in said store, if used anywhere else that store would either be implied beforehand, otherwise the name of the store specifically said.

    In the case of slashdot, this is an international website, a significant portion of users come from countries other than the US. and thus it makes sense to assume an award by slashdot, digg, sourceforge etc, would be international, for all of the sponsors are. It makes a great deal of sense where only a small portion of your audience will be applicable to use a quantifier to identify them in the summary or title.

  7. Re:business and government are run by aliens? on GAO Report Slams FCC · · Score: 2, Insightful

    unfortunately.. I believe your confusing the way lobbying SHOULD work, with the way it works in practice.

  8. Re:Blender UI :-( on Blender Compared To the Major 3D Applications · · Score: 1

    going the other way, blender to max, everything seems so much slower in regards to how things are done, probably due to knowing all of the blender shortcuts, which is a must if your going to use it decently. a few weeks learning it are nothing compared to the eventual time you lose doing things a slower way forever, even if it is easier.

  9. Re:Aside from the flamebait-ish nature of the post on Fork the Linux Kernel? · · Score: 1

    I fail to see how user level software would fail with a kernel fork, so long as they keep to the POSIX api, while in kernel interfaces change every kernel, there has been a stable interface on int 0x80 for the entire time, sure linux has extra things that can be used that aren't specified by the spec. So long as you keep your featureset to the POSIX api, all is compatible. With the exception of when you change architecture to something that the dev wasn't expecting, porting something between linuxen should be a walk in the park. Oh and incompatibilities with libraries etc between distro's aren't exactly the kernels fault, thusly couldn't be blamed.

  10. quake 3 arena on Any "Pretty" Code Out There? · · Score: 1

    while not in c++, it is a rather complex application, and very elegant imho. understanding it requires 3d background knowledge, but it is still very clean code.

  11. Re:Missing the point.... on U.S. Soldiers Hate New High-Tech Gear · · Score: 1

    on the weapons point, the australian and european steyrs are probably more suited a tad, same barrel length, but due to the bullpup design 22cm shorter overall length, 31cm shorter if you use the optional shorter barrel, fully and semi-auto by the trigger pressure used, etc. In regard to accuracy with standard barrel good for up to 600m (655 yards). The usual assortment of attachments apply for both firearms. I've seen a steyr run over by a 2 tonne truck, only piece broken was lens on the scope. Downsides: 900grams heavier(not that much an issue I think), and a great deal more expensive to manufacture. I have but once seen a steyr for sale (modified for single fire only) secondhand and it was over $4000,

    On a completely different note, could not agree more to the point you made on constantly beaconing your position, it would only function against low-tech unorganised enemies, and even then they could clue in. Someone with 'electronic warfare' in their job description would make it look too easy, to find their location, and take appropriate action.

  12. Re:Why are people allowed to possess guns in the U on Many Dead In Virginia Tech Shooting · · Score: 1

    I'm from AU also, and even pre-port arthur where firearm laws were rather (understatement) lax, we have always had significantly less firearm related deaths than the US.

    In my honest opinion, the firearm laws have mostly only made it a lot harder for legitimate lawful people to own firearms, in the process it has made illegal firearms demand outreach supply (read: price hike) so apart from small poor crooks that don't have the cash or means to steal their own, it has not stopped anyone. If you have the money and the want you can get almost anything you want in this world, just a case of how much money is required.

    That being said, doing so I would assume would make it extremely more cost effective to simply get more men involved and manpower as opposed to getting firearms.

    I've had the qualifications to get several types of firearms licenses for quite a few years, I love target shooting, however even though I do its just too much hassle and too many hoops to jump through and too expensive to legally own a firearm.

    Even if I went and got one, I would never be able to use my favourite weapon of choice, sure I could go on a military range and shoot there (in the army also). however I'd hardly call that a fun, relaxed target shoot at the range.

    I have no doubts that we should have more regulation than the US, firearms training and safety courses should always be pre-requisites of using firearms. There just comes a point where things start becoming rediculous and the effort and money involved is too much for most sane people to get them the legal way, in most cases, at all.

  13. Re:ignore the hype on Why Apple Delayed Leopard for the iPhone · · Score: 1

    even though it has been years since the buyout, whenever someone says apple logic I think, huh? don't they mean emagic logic, before thinking.

    I still think its sad when such a great tool can be simply bought to force it onto one platform only. a lot of people nowadays think apple came up with logic.

  14. Re:Obsolyte! on Fun and Profit With Obsolete Computers · · Score: 1

    if only that were the case here in AU with apple II's, c64's can still be found pretty darn easy, but I've been looking for an apple II here for a while and they seem damn near impossible, probably because not that many were sold here to start with I think.

  15. Re:Yeah whatever on HardOCP Spends 30 Days With Vista · · Score: 1

    complaining about the many different versions of linux seems quite ironic, as that is one of its strengths.

    for instance, as a user, and for other people I give linux stuff to, I tend to give them ubuntu since it has all the basics they'd need on the cd.

    as a developer, and my main box's use, however, I'd install fedora core, all the software I'd need almost ever is on the dvd, granted I'd never install all of it, however from the get go I can have all the packages I want on my system with their dev packages.

    to put it simply, different distros for different needs.

    you can't have a 'standard' of linux (besides vanilla kernel releases) because different people need linux for different uses.

    do regular users need the shiteload of stuff thats on the fedora dvd? no
    do developers tend to need more than whats on the ubuntu cd? yes

    granted through repositories you can always install what you need usually, however a fast internet connection is not always available.

  16. Re:Yeah whatever on HardOCP Spends 30 Days With Vista · · Score: 1

    for the truly technically incompetant, linux will only be suitable for them when its completely preconfigured and installed in their machine when they get it. same as any of the very non-computer people who use windows, they'll call for support if something screws up.

    as for binary drivers, all that would be needed is for the vendor to use hardware which already has open source drivers, problem solved. the companies with said drivers are rewarded for their efforts, and having kernel updates with binary drivers that don't get updated is no longer a problem.

    Video drivers would probably be the only exception, while there is the intel chipsets with open drivers, on the high end machines the nvidia module would be needed, unlike other drivers that tend to need source to recompile for new kernels, the nvidia driver can adapt to each kernel just by recompiling the kernel interface bits, and is a great deal better quality than most other proprietary drivers. That being said, loading the proprietary driver would pretty-much kill all kernel issues support though.

      thus the intel would be a better choice except for those who know what they're doing and can resolve issues by themselves.

  17. Re:Yeah whatever on HardOCP Spends 30 Days With Vista · · Score: 1

    I do believe that is more of a support and debugging thing, if you have a tainted kernel, you have no right to bug developers that 'my kernel crashed and it kills babies' because you loaded a big chunk of code that they have nfi how it works, they couldn't help you with it if they tried.

    even though there is no warrenty, loading binary closed-source drivers is like voiding your chances at all support. thus "tainted" is an apt position, if the message annoys you, feel free to recompile your kernel and disable it.

  18. Re:Forced to upgrade? on How To Make the DS Even Better · · Score: 1

    I quite like my original ds, never really liked the ds-lite excepting the awesomely bright screen, mainly due to the d-pad used and physical size is small for my liking.

    anyways, nintendo ds browser, ds-lite only, there's an add-on gba cart for memory for it to use to function etc, I'm betting the only reason its lite-only is because of the smaller size of the gba-slot. I'd buy the browser in a moment if it wasn't for the fact I need a ds-lite for it, even though its more or less the exact same hardware. I'd consider that borderline "forced to upgrade" by artificial limitations

  19. debugging on Is Assembly Programming Still Relevant, Today? · · Score: 1

    while debugging has been mentioned here previously by people as a reason for which assembly is helpful, the majority I think are a bit out of the right scope it should be in.

    while for programs written in c/c++ source level debuggers are a very handy piece of work, what happens when the bug in question actually originates in the compiler or assembler putting your program together.

    my logic with debugging is a layered approach, if something screws up, go to the layer beneath it to see why. long story short, when it comes down to the lowest level, your dealing with machine code, to debug that it helps to understand it :)

  20. Re:nVidia Linux Drivers support x86-64 on Open nVidia Linux Driver Pledge Nearly Complete · · Score: 1

    so PowerPC, SuperH, ARM, 68k, sparc, etc aren't important eh? (granted you'd have great difficulty finding hardware with a pci bus on some of those)

    I happen to own a fair few bits and pieces with the procs above, it would be handy to have the ability to hack something together and put an old nvidia card in some of the systems, where possible.

    I think the parent poster above you when he said x86 meant IA-32 x86-64 IA-64 granted IA-64 is a different beast

  21. Re:Fixing things... on A 3D Printer On Every Desktop? · · Score: 1

    three dimensional open source CAD tools haven't quite had their niche filled yet.

    but I would greatly recommend getting used to blender (open source 3d modeling, animation, rendering, compositor etc etc) seeming as it can save to almost any format known to man including cad ones. learning curve on blender is high, however if you limit yourself to only modeling there'll be a lot less to do.

    seen blender used for 3d printing before, so all should be good with it.

  22. IE in transcript on Developers As Pawns and One-Night Stands · · Score: 1

    am I the only one who finds an almost phoenix wright :ace attorney like humour in the IE discussion transcript with all of the "OBJECTION!"'s that occurred.

    qoute

    MR. HOLLEY: Your Honor, I move to

                          13 strike that answer as violating prior orders of

                          14 this Court.

                          15 THE COURT: Sustained. Stricken.

                          16 Jury will disregard.

                          17 Q. Mr. Alepin, from a less variety point

                          18 of view, and I'm just talking about

                          19 technological, how has there been less variety?

    response then...

                    25 MR. HOLLEY: Your Honor, same motion

                                                                                                                            7016

                            1 to strike the testimony for the same reason.

                            2 THE COURT: Overruled. I'll allow it

                            3 as answered. It's different.

      Q. In relation solely to the

                            5 technological effect, sir, how has there been

                            6 less innovation?

                            7 MR. HOLLEY: Objection, Your Honor.

                            8 THE COURT: Overruled.

                            9 You may answer.

    and so on...

  23. Re:An idea for Nintendo... on New PS3, Wii, 360 Downloadables Announced · · Score: 1

    you'll find the real cartridges are worth more in good condition than any of the virtual console downloads if you've chosen good games to invest in.

    years ago family decided to give away old nes games etc, and I've only recently tried to get some of the classics back, $70 for a used nes is the cheapest I can find... $15-20 per game...

    probably worth your while to find a game collector to sell to.

  24. shiny 3d on NASA Playing With Unreal Engine For Virtual World · · Score: 1

    wouldn't effort be better spent on getting the nitty gritty very detailed physics down first and dedicating the majority of processing power to that? for professional applications like what I can forsee nasa needing a nice overly pretty 3d engine would be the least of their concerns. if accuracy is really needed for rendering I just wouldn't trust most 3d hardware either.

    if the simulator gets to the point it simulates the stress and forces on all hardware involved to some insanely small degree, thats awesome imho. If your doing that level of computation however, bah to graphics, secondary thought.

  25. happened here in AU for a while on Drivers License Swipes Raise Privacy Concerns · · Score: 4, Insightful

    in gilhoolies strathpine (brisbane, australia) a couple nights they've required all who enter to surrender their licenses to be put through a machine and to be photographed, the overwhelming majority don't care because if they don't do it they won't be let in.

    when it comes down to it theres a choice of, hey, awesome night out at a pub, or go home because of a violation of privacy. I don't see many young people choosing the latter.

    I just assumed most pubs were all going down this route, and that it was nothing new.