Unfortunately, killing the referer header breaks alot of sites which are blocking image pointing. We (KeenSpace) just put in header checking. We do it so that if a request for an image isn't from a webpage we host (eazy stuff to do), it's 404'ed.
Then you need to use a better method, such as rewriting all HTML on the fly to link to images with rotating keys. There is software available that does just that.
I didn't mod you but it probably has something to do with saying that Cold Fusion is as good as a Java- JSP/Servlet for most things
CF is not as robust, not as scalable, you are tied to one vendor for the life of the project. So even when dealing with lightweight projects you're still saddled with CF crap...
The latest versions of ColdFusion are Java. ColdFusion is compiled into Java Servlets before it is run, so it should be just as fast and scalable as anything else written in Java.
I have Unix developers who want root access because when they type 'find / malloc.c', it returns too many 'permission denied' messages. I tried to explain that if they tack on '2>/dev/null' onto the end, the errors messages would go away and they would still find their file.
This seems fair. They are providing phone service that connects with the regular phone network, so why shouldn't they be treated like a traditional phone company?
does "doing their job properly" include preventing end-users from touching the keyboards?
End users in most environments should not have the privileges that would allow them to infect themselves. Windows machines can be secured while still allowing users to get work done. Doing so requires a competent administrator.
With eight IT dudes running around fixing all of the Wintel systems
No "IT dudes" worth anything will be "running around fixing" things. If they had done their job properly in the first place, they wouldn't have to fix anything at all.
id game engines are well-known for allowing rather odd exploits of their physics, not to mention having heavily framerate-based physics in the first place (ie having to have a certain minimum framerate far above normal to rocket-jump a certain height).
The rocket jumping problem is due to rounding errors. Such an issue is hard to correct without using a lot more CPU time. With computers being much faster now, I'm sure we'll see better physics.
Of course, all of this assumes that he's adding in a completely new physics engine when the game is almost done, as opposed to just final tweaking and maybe some minor additions to make sure it's up to the state of other games
Carmack also has the amazing ability to rewrite a large amount of code in a short amount of time. The original Doom was rewritten at least four times during development. The original Quake went through many revisions before Carmack figured out the optimal way to represent the world. Carmack initially added dynamic lighting to Quake in a little over an hour. He is one of the best programmers in the world. Don't sell him short.
See ``Michael Abrash's Graphics Programming Black Book'' for more interesting stuff about id Software.
It's good to see that Valve may have made id realize that physics are important, I just hope that id can put together a physics engine that is worth the delay, instead of just some rushed-together pos that we would've been better off without.
Until you go and upgrade proftpd and it kindly forgets to mention that the new version uses a new config format, so you're left with no ftpd until someone notices.
You shouldn't use proftpd anyway -- it's insecure. Use publicfile, or if you really need upload, pureftpd.
Then switch to qmail, an MTA that follows the UNIX philosophy. Every part of qmail is a separate program that does one task and has a well documented interface. As such, you can easily replace a single component without changing anything else.
Yeah, but what stops spammers from obscuring their URL into machine-unreadable format, and providing innocent URLs in machine-readable format?
Because most people who buy things from spam are not computer literate enough to go to the site. If it doesn't have a clickable link, it's not going to produce results.
If the cardholders are indemnified it just means the cost of the theft is passed back to the card company, the vendors, or their insurers.
Hahahaha. The merchant always gets hit. The credit card companies never take a loss for anything. Remember all those commercials about not being responsible for fraudulent purchases? Visa simply charges it back to the merchant, along with a nice charge back fee.
What has been done before is to provide two methods. One checks the existence of a file, and will return true or false, and the other opens a stream and throws an exception if the file's not there. In that scenario, you really should check for the file's existence before opening the stream.
That method is completely wrong. It contains a race condition: the file can be deleted or renamed after it is checked but before it is opened.
Code wizards are way more trouble than they're worth anyway. Especially with GUI designers, the code they generate is totally un-maintainable.
You've obviously never used Borland Delphi or C++Builder. Those products are an excellent example of a GUI builder / RAD done correctly. They don't screw up if you change the code and don't make the code unmaintainable. I can't imagine a more productive environment for GUI development.
Gaming: Fairly NAT friendly. Most of my games work fine, battle.net works fine
Starcraft does not work through NAT if both players have NAT. One player must forward UDP port 6112 in order to host the game. Even with port forwarding, no more than one player behind the same NAT can play.
Slashdot Mirror
Unfortunately, killing the referer header breaks alot of sites which are blocking image pointing. We (KeenSpace) just put in header checking. We do it so that if a request for an image isn't from a webpage we host (eazy stuff to do), it's 404'ed.
Then you need to use a better method, such as rewriting all HTML on the fly to link to images with rotating keys. There is software available that does just that.
I didn't mod you but it probably has something to do with saying that Cold Fusion is as good as a Java- JSP/Servlet for most things
CF is not as robust, not as scalable, you are tied to one vendor for the life of the project. So even when dealing with lightweight projects you're still saddled with CF crap...
The latest versions of ColdFusion are Java. ColdFusion is compiled into Java Servlets before it is run, so it should be just as fast and scalable as anything else written in Java.
I understand your desire for AOL to lose [...] They're a privately owned company
AOL is not a privately owned company.
I have Unix developers who want root access because when they type 'find / malloc.c', it returns too many 'permission denied' messages. I tried to explain that if they tack on '2>/dev/null' onto the end, the errors messages would go away and they would still find their file.
Why didn't you teach them about locate?
This seems fair. They are providing phone service that connects with the regular phone network, so why shouldn't they be treated like a traditional phone company?
does "doing their job properly" include preventing end-users from touching the keyboards?
End users in most environments should not have the privileges that would allow them to infect themselves. Windows machines can be secured while still allowing users to get work done. Doing so requires a competent administrator.
With eight IT dudes running around fixing all of the Wintel systems
No "IT dudes" worth anything will be "running around fixing" things. If they had done their job properly in the first place, they wouldn't have to fix anything at all.
If you set your score for MICROSOFT_EXECUTABLE high enough, and these emails with their .pif
Even easier: reject it at the SMTP level
Actually, it seems that an automatic pactch installer could totally render EULA updates null and void.
Windows EULAs are already null and void unless you sign a contract with Microsoft.
Sure you can upgrade the ram in an x-serve, or the processor. But at what price?
From Pricewatch: G4 1.2GHZ upgrade: $465
Athlon XP 2100: $61
People that want to keep their data center from catching on fire don't use AMD CPUs in their servers. Putting a super hot CPU in a 1U is a bad idea.
id game engines are well-known for allowing rather odd exploits of their physics, not to mention having heavily framerate-based physics in the first place (ie having to have a certain minimum framerate far above normal to rocket-jump a certain height).
The rocket jumping problem is due to rounding errors. Such an issue is hard to correct without using a lot more CPU time. With computers being much faster now, I'm sure we'll see better physics.
Of course, all of this assumes that he's adding in a completely new physics engine when the game is almost done, as opposed to just final tweaking and maybe some minor additions to make sure it's up to the state of other games
Carmack also has the amazing ability to rewrite a large amount of code in a short amount of time. The original Doom was rewritten at least four times during development. The original Quake went through many revisions before Carmack figured out the optimal way to represent the world. Carmack initially added dynamic lighting to Quake in a little over an hour. He is one of the best programmers in the world. Don't sell him short.
See ``Michael Abrash's Graphics Programming Black Book'' for more interesting stuff about id Software.
It's good to see that Valve may have made id realize that physics are important, I just hope that id can put together a physics engine that is worth the delay, instead of just some rushed-together pos that we would've been better off without.
This is John Carmack we're talking about here.
Until you go and upgrade proftpd and it kindly forgets to mention that the new version uses a new config format, so you're left with no ftpd until someone notices.
You shouldn't use proftpd anyway -- it's insecure. Use publicfile, or if you really need upload, pureftpd.
Yes, but I'm not of anyone who claims their software is "absolutely secure"
http://cr.yp.to/qmail/guarantee.html
http://cr.yp.to/djbdns/guarantee.html
Never, ever, EVER run an FTP server - you are committing suicide by doing so.
Anonymous FTP is fine.
My MTA, again, a monolithic application.
Then switch to qmail, an MTA that follows the UNIX philosophy. Every part of qmail is a separate program that does one task and has a well documented interface. As such, you can easily replace a single component without changing anything else.
Yeah, but what stops spammers from obscuring their URL into machine-unreadable format, and providing innocent URLs in machine-readable format?
Because most people who buy things from spam are not computer literate enough to go to the site. If it doesn't have a clickable link, it's not going to produce results.
If the cardholders are indemnified it just means the cost of the theft is passed back to the card company, the vendors, or their insurers.
Hahahaha. The merchant always gets hit. The credit card companies never take a loss for anything. Remember all those commercials about not being responsible for fraudulent purchases? Visa simply charges it back to the merchant, along with a nice charge back fee.
So far I have made roughly $5,000 in royalties on my book (which is amittedly below average due to releasing it in a rotten economy)
I would blame it on being priced at $45. That type of book should be no more than $25.
I didn't say it was right, just that it had been done.
True.
And of course you can use locking methods to mitigate the race condition
Nope. Locking can only be done on an open file. See flock(2) and fcntl(2).
What has been done before is to provide two methods. One checks the existence of a file, and will return true or false, and the other opens a stream and throws an exception if the file's not there. In that scenario, you really should check for the file's existence before opening the stream.
That method is completely wrong. It contains a race condition: the file can be deleted or renamed after it is checked but before it is opened.
Code wizards are way more trouble than they're worth anyway. Especially with GUI designers, the code they generate is totally un-maintainable.
You've obviously never used Borland Delphi or C++Builder. Those products are an excellent example of a GUI builder / RAD done correctly. They don't screw up if you change the code and don't make the code unmaintainable. I can't imagine a more productive environment for GUI development.
Gaming: Fairly NAT friendly. Most of my games work fine, battle.net works fine
Starcraft does not work through NAT if both players have NAT. One player must forward UDP port 6112 in order to host the game. Even with port forwarding, no more than one player behind the same NAT can play.
I didn't know that PHP didn't scale well. Then again, I just use it for hobby sites.
PHP does scale. Most people just don't know what they are doing. A good start is not doing fifty queries to the database every page load.
The difference is that while Postfix CAN reject based on HELO etc...qmail seems to do so by DEFAULT.
No, it does not. In fact, you don't even need a HELO with qmail.
Also, take a look at djbdns some time- it violates RFC's left and right.
Which ones and how?