> I had no problems leaving the store without being searched:)
They tried that at CompUSA. I told 'em that I wouldn't be searched and they didn't have the legal authority to detain me. They called the cop standing outside the store (not a rent-a-cop, in uniform). I decided I didn't have time for it and let them open my bag anyway. After which I walked up to the service desk and asked for a refund, walked over to Best Buy across the street, and bought the same game. I still go to CompUSA to buy games if BestBuy doesn't have it. When you have no car or no plastic, you don't really get a lot of choices.
> This means that Beryllium is the lightest/strongest metal for practical use
Except for the fact that it's highly toxic so it's not terribly practical to machine the stuff. There's more workers from Rocky Flats suffering from beryllium disease than radiation problems.
> 1) Now, let's look at Linux. No graphical interface, natively anyway. To get the GUI, you need an extra layer of programming
Look, I hate X as much as the next guy, but despite MS's best efforts, windows uses an "extra layer of programming" as well, called GDI. Yes, it's been made to run in kernel space, and Linux has framebuffers that do as well -- it's not a big stretch to imagine moving other display code into the kernel as well (KGI anyone?). X sucks, but there is nothing about Linux OR Windows that magically does graphics without a graphics API.
And get over your self-important persecution complex about "I'm going to get moderated down over this". Either it happens and you leave slashdot for kuro5hin or advogato, or it doesn't, but it's gotten really old to read this prediction of moderation behavior over and over.
> 'Three years without a remote hole in the default install!'
DOS attacks are not root hacks. OpenBSD has never claimed to be immune to DOS attacks. And unless you can control the connection end-to-end (or at least a hop away from your box), you can't ever be.
> Where can I get -credible- data to prove that Apache can outperform IIS?
You can't. Apache's developers have never claimed apache is the fastest. One of them even replied to a tuning question with "...if by ``tuning'' you mean replacing apache with something that's actually fast."
Now Zeus is another matter entirely when it comes to speed. You can get a free demo of it. And its admin interface is nice and purty too:)
than by cutting out a sharply defined microsoft-shaped hole and saying your conference is about everything but this hole. microsoft doesn't put on "anything but linux" or "anything but solaris" shows.
"I can no longer sit back and allow Communist infiltration, Communist indoctrination, communist subversion, and the international Communist conspiracy to sap and impurify all of our precious bodily fluids."
> Don't try this on Linux! The ext2 fsck is horrible after a powerfail, and I've lost superblocks and had to re-install:( .
Doesn't it scan for backup superblocks? It should have created at least a dozen or so of them. At the very least, there should have been some utility runnable off a rescue disk that could copy a backup superblock.
> An OS should NEVER absolutely refuse to do what it's told to do
Isn't security built around this very thing? Furthermore, devices are designed to refuse to perform an operation that would put them in an invalid state. Furthermore, as hardware moves more and more to firmware, there are bugs that can turn a machine into a boat anchor. I would very much like the OS to refuse to perform these operations.
Hey it's kind of a theological question, should the OS that can do everything be able to create a virtual rock it can't lift?;)
Yeah, except for the fact that the interpreter chokes when you don't give it the proper number of tabs (just forget copy and paste). It's annoying in emacs, it's unforgiveable in a tty mode.
Here's how it is on a Raq. Each virtual site directory is owned by httpd, and owned by a group created for that site. httpd, admin (the webmaster basically, you don't use root to maintain web content), and any site users belong to that group. Works well in theory, but once you have more than 30 virtual sites on one raq (there's one here that has 56) then the admin account stops working, and you need an admin2 to belong to the higher numbered groups, then an admin3, and so on. This is because you can only belong to 32 groups in Linux -- and only 16 in BSD, and the same problem probably exists in Solaris. Any more groups after that are ignored. This is the pie in the face of those who believe groups are adequate to replace ACL's.
Solaris has ACL's which just don't have that problem. You can put an ACL on a dir, and create the same effect as the setgid bit with it as well, having all files and directories created under that dir also inherit it.
Yes, yes, ext3, xfs, jfs... none of those are here now, and til then I am kludging around the situation in various ways, none of them particularly elegant. I'm not even fond of POSIX ACL's, since you can't centrally edit their definition like you could on even PRIMOS. Imagine a user-defined group and you're close.
Normally I'd jump at the possibility of solaris on a raq, but I really don't care much for the interface. Webmin is already far more functional, faster, and less cumbersome. And though cobalt is a little closer at having its interface integrate the tasks of managing virtual hosts and their DNS records, its interface is simply too slow to bother with. Raqs are nice for office workgroups, but they may as well just be another form factor for a qube, and just as bad a fit for a ISP.
> Maybe this new processor will substantiate Sun's claims of being "the dot in.com" (now isn't this untrue, since ICANN is literally the com in.com?).
They used to be the dot in.com. and.org. and.net.... that last dot, since the root nameservers ran off sun boxen. No longer, it's IBM boxen now. It was always just a goofy and amazingly stupid slogan, but it's not what's clever, it's what's catchy. God I hate marketing.
When I was at Sun, the engineers were pestering Valve to let them port HalfLife to Solaris. Big time Team Fortress addicts there, there's a whole network of quake servers at sun. Quake2 was also ported, but it was OpenGL only, and you needed a pretty beefy framebuffer to handle it (Sun framebuffers are kind of like Matrox, great 2D quality, lousy 3D speed)
> For example, can Intel hardware currently run 200-prosessor SMP-systems?
Sequent seems to think so. Been doing that for many years now. Not that you run that many processors in a SMP configuration, but I'll assume you use that term for any MP setup.
> Remind me when was the last time you've seen ANY version of Windows running on Solaris? (and no, I'm not talking about Soft Windows - although I'm not sure if it was for Solaris, and I'm not talking about WABI either)..
So um, did you know that both of those are operating systems? If you're not talking about SoftWindows, what *do* you mean? Windows running on the, uh, Solaris CPU architecture or something?
> There is starting to be support for capabilities in Linux
Linux's so-called "capabilities" are a joke. They are nothing of the sort, they are just more acl bits tacked onto operations. You want real capabilities, try something like EROS. A true capability manifests as a visibility thing -- you can't call a forbidden operation if you can't even get a handle on it. A true capabilities system is a "thought police" model. You can't perform a forbidden operation because you just can't have that thought. You can't delete a file you can't touch. You can't open a device you can't see. Etc.
Capabilities can be rock-solid security, but they do have some problems, like revocation. The neat thing about EROS is that stack smash attacks can't gain any extra privileges, because they can't manufacture any extra capabilities -- you'd have to smash the kernel stack to do that.
> Try dragging a Netscape icon from the file manager into one of the sub-panels.
Try dragging the netscape bookmark widget (the one to the left of the Location bar) to a folder. Crash. Actually I like those drawers in the panel (especially the "install icon" drop target), I just wish they would make the damn thing a little narrower and have it dock to the bottom of the screen. Then again it's kind of moot now since I don't use CDE anymore, and it would seem that very soon, neither will Sun:)
No option to disable it, just to make it use PCI by default for the video. Still get "/dev/agpgart: device not configured" when starting X tho... only with BSD, not with redhat (and I didn't even download intel's binary-only module). I can completely turn off all the other integrated devices in the BIOS, but not this one. Oh well, supposedly some tool called up2date will give me a less grating experience with redhat, and I have to deal with redhat on half our servers anyway, so I may as well figure out how to live with it.
Slashdot Mirror
> I had no problems leaving the store without being searched :)
They tried that at CompUSA. I told 'em that I wouldn't be searched and they didn't have the legal authority to detain me. They called the cop standing outside the store (not a rent-a-cop, in uniform). I decided I didn't have time for it and let them open my bag anyway. After which I walked up to the service desk and asked for a refund, walked over to Best Buy across the street, and bought the same game. I still go to CompUSA to buy games if BestBuy doesn't have it. When you have no car or no plastic, you don't really get a lot of choices.
> Didn't MS stop shipping system with CDs for the very same reason?
Did you make this up yourself or do you just believe everything some zealots tell you?
1) Microsoft doesn't ship PC's.
2) MS is very insistent that the CD ship with a machine as an anti-piracy measure.
> OEM copies are illegal to distribute without a computer BUT it doesn't limit fair use
You say that as if "Fair Use" even exists anymore.
> When I was a kid, corporations paid three-quarters of the income taxes.
Which of course they never passed on to you, being such kind benevolent generous souls that they are.
> This means that Beryllium is the lightest/strongest metal for practical use
Except for the fact that it's highly toxic so it's not terribly practical to machine the stuff. There's more workers from Rocky Flats suffering from beryllium disease than radiation problems.
> 1) Now, let's look at Linux. No graphical interface, natively anyway. To get the GUI, you need an extra layer of programming
Look, I hate X as much as the next guy, but despite MS's best efforts, windows uses an "extra layer of programming" as well, called GDI. Yes, it's been made to run in kernel space, and Linux has framebuffers that do as well -- it's not a big stretch to imagine moving other display code into the kernel as well (KGI anyone?). X sucks, but there is nothing about Linux OR Windows that magically does graphics without a graphics API.
And get over your self-important persecution complex about "I'm going to get moderated down over this". Either it happens and you leave slashdot for kuro5hin or advogato, or it doesn't, but it's gotten really old to read this prediction of moderation behavior over and over.
Bah, here's the correct link
> 'Three years without a remote hole in the default install!'
DOS attacks are not root hacks. OpenBSD has never claimed to be immune to DOS attacks. And unless you can control the connection end-to-end (or at least a hop away from your box), you can't ever be.
> Where can I get -credible- data to prove that Apache can outperform IIS?
:)
You can't. Apache's developers have never claimed apache is the fastest. One of them even replied to a tuning question with "...if by ``tuning'' you mean replacing apache with something that's actually fast."
Now Zeus is another matter entirely when it comes to speed. You can get a free demo of it. And its admin interface is nice and purty too
than by cutting out a sharply defined microsoft-shaped hole and saying your conference is about everything but this hole. microsoft doesn't put on "anything but linux" or "anything but solaris" shows.
> 2. Needs to retain basic functionality, but could be extended (eh, this guy doesn't get it, does he?)
This is the same proviso of the Artistic license, actually.
> 3. Reverse engineering is 'infringement'
Pretty goofy, why would you reverse engineer SOURCE CODE? Unless it was some obfuscated nonsense like nvidia pulled.
"I can no longer sit back and allow Communist infiltration, Communist indoctrination, communist subversion, and the international Communist conspiracy to sap and impurify all of our precious bodily fluids."
Hmm.
> Mount Pinatubo, Phillipines
;)
Naw I vote for Krakatoa
Any word on ReiserFS for FreeBSD? I've searched around, and found several people asking, and no one seems to have an answer.
> Don't try this on Linux! The ext2 fsck is horrible after a powerfail, and I've lost superblocks and had to re-install :( .
Doesn't it scan for backup superblocks? It should have created at least a dozen or so of them. At the very least, there should have been some utility runnable off a rescue disk that could copy a backup superblock.
> An OS should NEVER absolutely refuse to do what it's told to do
;)
Isn't security built around this very thing? Furthermore, devices are designed to refuse to perform an operation that would put them in an invalid state. Furthermore, as hardware moves more and more to firmware, there are bugs that can turn a machine into a boat anchor. I would very much like the OS to refuse to perform these operations.
Hey it's kind of a theological question, should the OS that can do everything be able to create a virtual rock it can't lift?
Yeah, except for the fact that the interpreter chokes when you don't give it the proper number of tabs (just forget copy and paste). It's annoying in emacs, it's unforgiveable in a tty mode.
Here's how it is on a Raq. Each virtual site directory is owned by httpd, and owned by a group created for that site. httpd, admin (the webmaster basically, you don't use root to maintain web content), and any site users belong to that group. Works well in theory, but once you have more than 30 virtual sites on one raq (there's one here that has 56) then the admin account stops working, and you need an admin2 to belong to the higher numbered groups, then an admin3, and so on. This is because you can only belong to 32 groups in Linux -- and only 16 in BSD, and the same problem probably exists in Solaris. Any more groups after that are ignored. This is the pie in the face of those who believe groups are adequate to replace ACL's.
... none of those are here now, and til then I am kludging around the situation in various ways, none of them particularly elegant. I'm not even fond of POSIX ACL's, since you can't centrally edit their definition like you could on even PRIMOS. Imagine a user-defined group and you're close.
Solaris has ACL's which just don't have that problem. You can put an ACL on a dir, and create the same effect as the setgid bit with it as well, having all files and directories created under that dir also inherit it.
Yes, yes, ext3, xfs, jfs
Normally I'd jump at the possibility of solaris on a raq, but I really don't care much for the interface. Webmin is already far more functional, faster, and less cumbersome. And though cobalt is a little closer at having its interface integrate the tasks of managing virtual hosts and their DNS records, its interface is simply too slow to bother with. Raqs are nice for office workgroups, but they may as well just be another form factor for a qube, and just as bad a fit for a ISP.
> Maybe this new processor will substantiate Sun's claims of being "the dot in .com" (now isn't this untrue, since ICANN is literally the com in .com?).
.com. and .org. and .net. ... that last dot, since the root nameservers ran off sun boxen. No longer, it's IBM boxen now. It was always just a goofy and amazingly stupid slogan, but it's not what's clever, it's what's catchy. God I hate marketing.
They used to be the dot in
> Further, does UT even run on Solaris?
When I was at Sun, the engineers were pestering Valve to let them port HalfLife to Solaris. Big time Team Fortress addicts there, there's a whole network of quake servers at sun. Quake2 was also ported, but it was OpenGL only, and you needed a pretty beefy framebuffer to handle it (Sun framebuffers are kind of like Matrox, great 2D quality, lousy 3D speed)
> For example, can Intel hardware currently run 200-prosessor SMP-systems?
Sequent seems to think so. Been doing that for many years now. Not that you run that many processors in a SMP configuration, but I'll assume you use that term for any MP setup.
> Remind me when was the last time you've seen ANY version of Windows running on Solaris? (and no, I'm not talking about Soft Windows - although I'm not sure if it was for Solaris, and I'm not talking about WABI either)..
So um, did you know that both of those are operating systems? If you're not talking about SoftWindows, what *do* you mean? Windows running on the, uh, Solaris CPU architecture or something?
Windows doesn't run on FreeBSD or MacOS either...
> There is starting to be support for capabilities in Linux
Linux's so-called "capabilities" are a joke. They are nothing of the sort, they are just more acl bits tacked onto operations. You want real capabilities, try something like EROS. A true capability manifests as a visibility thing -- you can't call a forbidden operation if you can't even get a handle on it. A true capabilities system is a "thought police" model. You can't perform a forbidden operation because you just can't have that thought. You can't delete a file you can't touch. You can't open a device you can't see. Etc.
Capabilities can be rock-solid security, but they do have some problems, like revocation. The neat thing about EROS is that stack smash attacks can't gain any extra privileges, because they can't manufacture any extra capabilities -- you'd have to smash the kernel stack to do that.
> Try dragging a Netscape icon from the file manager into one of the sub-panels.
:)
Try dragging the netscape bookmark widget (the one to the left of the Location bar) to a folder. Crash. Actually I like those drawers in the panel (especially the "install icon" drop target), I just wish they would make the damn thing a little narrower and have it dock to the bottom of the screen. Then again it's kind of moot now since I don't use CDE anymore, and it would seem that very soon, neither will Sun
No option to disable it, just to make it use PCI by default for the video. Still get "/dev/agpgart: device not configured" when starting X tho ... only with BSD, not with redhat (and I didn't even download intel's binary-only module). I can completely turn off all the other integrated devices in the BIOS, but not this one. Oh well, supposedly some tool called up2date will give me a less grating experience with redhat, and I have to deal with redhat on half our servers anyway, so I may as well figure out how to live with it.