Slashdot Mirror


User: Mad+Marlin

Mad+Marlin's activity in the archive.

Stories
0
Comments
554
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 554

  1. Re:so.. how are we supposed to store passwords? on Crack a Password, Save Norwegian History · · Score: 1
    Yup, I agree. My main password is an 11 alphanumeric pseudo-random combo (pseudo because I made it up in my head, so who knows how random it really is, but it looks damn random). 36^11 is roughly 10^18, so good luck brute forcing that in your lifetime.

    Passphrases are a much easier approach. For example, a few old passwords of mine are Residual ionization, Way beyond plain old potatoes, and Licence to spill, all case-sensitive, with the spaces. It is much easier to make up, remember, and tell to anybody who might need it, and very hard to brute-force. In case you are wondering, FreeBSD will allow login passwords up to 128 characters in length, and all the Linux systems I have ever used allow long passwords too, but I don't know the maximum length. The thing I hate the most about D.E.S. is that it has a fixed 8-byte password length. It doesn't take long to run through all realistic possibilities. Triple D.E.S. setups will often use the same password for the first and third stage, for what amounts to a fixed 16-byte keylength, which is realistically intractable by commercial entities for now. For login passwords though, a really long password isn't all that necessary, because it will take a few seconds for each login attempt, and a few thousand failed login attempts should be noticed.

    At work we have to change one of our passwords every 6 months, and we can not re-use them. So I have had to come up with 9 passwords (oh, and they can only have 6-8 characters. Thanks for flexibility) that I can remember yet are fairly secure. I've been reduced to creating full numerics based on a stupid algorithm I made. Totally sucks.

    6--8 characters as a hard password length requirement is just plain worthless, but then you seem to know that. Too bad whoever programmed your system didn't. However, using only numbers greatly reduces the search space. Throw in some letters just for fun.

  2. Re:Sure you do.... on Technology for Undercover Journalists? · · Score: 1

    Actually, I assumed this guy was just some stalker.

  3. Re:Sounds like a great idea..... on Taking Issue With The Outer Space Treaty · · Score: 1
    ... Europe loves the idea of the US signing, because they don't manufacture much anymore anyway ...

    Actually, The E.U. produces much more than the U.S.A., at least when taken as a whole. The percentage of G.D.P. for every E.U. nation is much larger than that of the U.S.A. From The C.I.A. World Factbook 2001 (all figures in US$*10^9, billions of U.S. dollars):

    Austria: industry is 30.4% of 203 = 61.7.
    Belgium: 26% of 259.2 = 67.4.
    Denmark: 25% of 136.2 = 34.1.
    Finland: 29% of 118.3 = 34.3.
    France: 26.1% of 1,448 = 377.9.
    Germany: 30.4% of 1,936 = 588.5.
    Greece: 27.3% of 181.9 = 49.7.
    Ireland: 38% of 81.9 = 31.1.
    Italy: 30.4% of 1,273 = 387.
    Luxembourg: 30% of 15.9 = 4.8.
    The Netherlands: 26.3% of 388.4 = 102.1.
    Portugal: 36% of 159 = 57.2.
    Spain: 31% of 720.8 = 223.4.
    Sweden: 27.9% of 197 = 55.
    U.K.: 24.9% of 1,360 = 338.6.
    Total E.U.: 28.5% of 8,479 = 2,413.
    U.S.A.: 18% of 9,963 = 1,793.

    Since industry is generally the primary source of pollution, and since technology in the E.U. should be on par with technology of the U.S.A., therefore the E.U. most likely pollutes more than the U.S.A, yet the Kyoto Accords often target the U.S.A. specifically.

  4. Re:Webserver on Buying Unix? · · Score: 1
    For less than half the cost of that Sun POS, you can build a box that will handle quite a load if you build it from generic parts.

    Sun POS? How easily can you build a 64-bit rackmount computer from generic parts?

    Check out Pricewatch (or just about any smaller out-of-state supplier) and you'll find much lower prices on equipment.

    Saving $100 isn't worth the lost reliability.

    Second, download one of the many distro's out there - They're free and most of them include an option for building just a webserver.

    Did you even read past the first 5 words? It is replacing a Linux web server.

    Third, firewall the living hell out of that box (except the necessary ports) and turn it loose. Should only take a weekend to put the thing together and get it running.

    Why not do it during the regular work-week? Some people don't like to work weekends.

    The security might take a bit longer, but there's about a metric ton of stuff out there to help you configure a decently working firewall.

    The machine shouldn't even touch the network until it is secure.

    I wouldn't waste state money on Sun equipment and warranties, since most machines don't fail inside the warranty period (personally, I would buy from Sun on principle, but that's another matter).

    One shouldn't make purchasing decisions based upon ``principlep'', but rather on the quality of the products offered.

  5. Re:Clarification on Funding for Non-Traditional Comp. Sci Students? · · Score: 2, Informative
    Excuse my ignorance, but what exactly is a non-traditional student?

    Generally anybody over 25 or married or not going full-time©

  6. Re:metadata on Music Filesystems? · · Score: 1
    for MIME filetyping so that the browser is capable of displaying data in the way you want.

    I actually consider extensions in the filename superior to storing the MIME type, or keeping a seperate extension like in DOS. If you think about it, keeping the MIME type seperate from the filename is exactly the same as the DOS 8.3 format, just a lot longer, say 255.32. The perfect example as to why this is a bad example is file.tar.gz. Making a seperate MIME type for *.tar, *.gz, and *.tar.gz is just plain stupid. What if I want source.c.gz, should we invent a new MIME type? Can different files have the same name if they have different MIME types? If not, how can I have files like paper.LaTeX, paper.dvi, paper.ps and paper.pdf, a situation that exists often with me. If so, how would I tell it to copy one of those files somewhere and not the rest, without using some bad kludge like the name.ext in DOS (probably something like index:text/html).

    I know this is not the party line, but BSD has a better chance of getting this supported as it is a decentralised group of programmers.

    I have no trouble believing that, if this was a good idea, it would show up in BSD before Linux. On a related note, I use FreeBSD, not Linux.

  7. Re:metadata on Music Filesystems? · · Score: 1
    I agree but a few points you are still storing meta data you are just storing it in the file name and for that to work well it owuld be nice to define a scema that can be used by mp3 players and such to parse that info in to a more searchable and readable format. But I agree that now way should we be defining a filesystem for such a trivial task.

    the parser would be easy on such a plan. Just split the filename by newlines for each metadata item, and then by colons for the datatype:value sets. Searching would be easy as can be, just use the good old-fashioned locate and find commands to do the searching. As for readability, what is more readable than this? Not much. This seems like a non-issue to me.

  8. metadata on Music Filesystems? · · Score: 3, Interesting
    The problem with metadata information is that it is too inflexible. The ID3 tag is an excellent example. It contains title, artist, album, comment, year, track number, and genre. What about classical music, where you would want a composer field? Items not from a CD don't need album or track number.

    A better solution is to take advantage of the flexibility of a modern Unix filesystem, where any charater (excepting '/') can bu used in a file name, including the newline. There is no reason why you couldnt name a file:

    Title: Symphony 2
    Composer: Bach, Johann Sebastian
    Composition Date: a long time ago
    Performing Artists: St. Louis Symphony Orchestra
    Performance Date: not very long ago
    Genre: Classical
    .
    .
    .
    Format: .mp3

    The Unix filesystem is adequate for the job, metadata is a curse disguised as a blessing.

  9. Re:I'd make or modify an existing program to do th on Cloaking Detection? · · Score: 1
    I imagine wget or another HTTP client can be coaxed to spit out the spider and browser type strings associated with search engine spiders. It would be a simple, straightforward hack to make a script that would request a page twice, once reporting itself as a search engine (and requesting the robots.txt file for good measure) and secondly as a regular browser. Then do a simple compare.

    For wget, --user-agent= AgentString will determine what user agent it reports. A list of user agent strings may be found here. The file robots.txt is retrieved by default in wget.

  10. Re:Security still number one? on Custom OpenBSD 3.0 with IPFilter From Darren Reed · · Score: 1
    It may not be registered, but that is not required for copyright (Besides, you showed a trademark). Trademarks don't require registration either, it just makes them stronger.

    And since OpenBSD is based here in Canada, the above (NAL) summarized US rules don't necessarily apply, other than through treaties on Intellectual Property. It is not a registered trademark in Canada either, as you can check here.

    I guess it isn't that strange that its not regestered at the USPTO then, I forgot all about the whole ``Blame Canada'' thing. It is kind of strange that it isn't registered in Canada though. It can't cost that much to register something.

  11. Re:Security still number one? on Custom OpenBSD 3.0 with IPFilter From Darren Reed · · Score: 3, Informative
    As long as the distribution does not use the file layout of the "original" OpenBSD (the layout is copyrighted by Theo), it should be legal. OpenBSD is just an OS name, like Linux.

    Stangely, OpenBSD does not appear to be registered with the US Patent Office (check in TESS). Note that this is unlike Linux, which is:


    Word Mark LINUX
    Goods and Services IC 009. US 021 023 026 036 038. G & S: computer operating system software to facilitate computer use and operation.
    FIRST USE: 19940802.
    FIRST USE IN COMMERCE: 19940802
    Mark Drawing Code (1) TYPED DRAWING
    Serial Number 74560867
    Filing Date August 15, 1994
    Published for Opposition June 13, 1995
    Change In Registration CHANGE IN REGISTRATION HAS OCCURRED
    Registration Number 1916230
    Registration Date September 5, 1995
    Owner
    (REGISTRANT) Croce, William R. Della, Jr. INDIVIDUAL UNITED STATES 33 Snow Hill St. Boston MASSACHUSETTS 02113
    (LAST LISTED OWNER) TORVALDS, LINUS INDIVIDUAL Assignee of FINLAND 5774 CANNES PLACE SAN JOSE CALIFORNIA 95138
    Assignment Recorded ASSIGNMENT RECORDED
    Attorney of Record ROBERT T. DAUNT
    Type of Mark TRADEMARK
    Register PRINCIPAL
    Affidavit Text SECT 15. SECT 8 (6-YR).
    Live/Dead Indicator LIVE
  12. Re:It doesn't matter because: on Export-level Encryption Proves Insufficient · · Score: 1
    That is as long as you don't use a Euro coin. This is becuase most denominations of Euro coins are weighted to come down heads.

    I remember reading in one of my probability books a while back that the US quarter gets heads 54% of the time. This was for the old eagle quarters though, the new state quarters probably each have different probabilities.

  13. Re:Huh? Are we looking at the same site? on Site Review: 2002 Olympics · · Score: 1
    Bitching? Who's bitching? I just made an observation...

    Perhaps that was a bit over the top on my part, but I do get tired of hearing ``Site foo.com doesn't work on such-and-such browser! There is a whole 200 people using such-and-such browser! Sure, we could use something that would work, but we shouldn't have to!'' The site looks fine in Mozilla, it looks fine in Opera, and frankly that is a lot more cross-browser compatibility than many corporate websites today.

  14. Re:Huh? Are we looking at the same site? on Site Review: 2002 Olympics · · Score: 1
    Mozilla? Nah, Opera's a better choice. It requires less than a half gig of ram and processors under 1.5GHz can run it's interface without it lagging.

    The site looks fine in Opera too, although it doesn't natively run if FreeBSD (although FreeBSD can run Linux executables, so that isn't really a problem). Also, I don't like running any program that I can't compile myself, and I especially don't like that built-in banner ad that is there all the time. Does it go away if I register my copy?

    The oldest machine I have ever used Mozilla on is a Pentium II, but it ran decently on that, and you can pick those up for around US$100 these days. I don't know how well it handles on anything slower from personal experience. On my Pentium III 500MHz with 192MB of RAM (a good system, but by no means the fastest around anymore) it runs with no noticable delay.

  15. Re:Huh? Are we looking at the same site? on Site Review: 2002 Olympics · · Score: 1
    I went there with konqueror. The page was visible for a breif moment, then it looked like it decided that my browser wasn't supported and forwarded me to a blank page. I

    Let them shoot themselves in the foot. I didn't even know that the olympics were coming because I don't visit or view "major" media sites or channels.

    I would be amazed if Konqueror accounts for even 0.1% of browser usage, and the page shows up fine under Mozilla 0.9.7, which can be used in nearly every modern OS in existence, so just install Mozilla and stop your bitching. Also, I seriously doubt that you didn't know the olympics were happening (every 2 years, alternating Summer or Winter Olympics), and even if you didn't, you do now, because of a ``major'' media site that you do visit by the name of Slashdot.
  16. Re:Well, we do it the same way.... on Microsoft Caught Rigging ZD Net Poll · · Score: 1

    Sorry, I just tried, and apparently ZDNet learned their lesson. It only let me vote once.

  17. Re:Nationalsozialistische deutsche Arbeiter-Partei on Beijing Snubs Microsoft For Municipal PCs' Software · · Score: 1
    Oh come on hindsight? After he wanted to annex Czechoslavakia and Austria after he helped fascists come to power in Spain? It was not hard to see he had far reaching ambitions. You did not need any hindsight after all that to see he wanted continental heghemony.
    Austria would be totally excusable, since that is actually where Hitler was from (that's right folks, Hitler wasn't German). Why wouldn't he also want control of his childhood home? Czechoslavakia directly borders both Germany and Austria, and was a vital buffer zone for Germany and the USSR (as was Poland for that matter) and therefore conquering it was understandable from a purely defensive stance. The Nazi actions in Spain were a good clue, but only because of the scale of involvement, not because of the existence of involvement.
  18. Re:Nationalsozialistische deutsche Arbeiter-Partei on Beijing Snubs Microsoft For Municipal PCs' Software · · Score: 1
    Yes I know they called themselves Socialist. So does the USSR and most of Western Europe today. Obviously these groups have a very different vision of "Socialism."
    Different from whose view of socialism, yours? Nearly everybody would agree that the USSR was mostly socialist. A majority of the workers in western europe (which generally has free elections) apparently consider their elected representatives socialist, since they voted them in on a socialist ticket.
    >>Mad Marlin:"Crushed the country's worker movement? He placed it in total control of the nation, with himself as leader."

    Well by your very admission, it is no longer a workers movement it was his movement. You made that one real easy.

    I made no such admission, I stated that he was the movement's leader, not that it was his movement. Those are two very different things.
    How about when most of Western Europe watched, with hands on their asses, as the Nazi's annexed Czechoslavkia and Austria. You know why they did this? They thought it would curb his ambition and they could have peace. This is well documented how Western Europe appeased Hitler's ambitions in hopes of peace, right up until he declared war and invaded Poland. That is when they learned and declared war on him.

    Also I am pretty sure that the haughty French thought that no one could get through their Magniot line up untill the Panzer's came through the Arden forests and blitzed them. I doubt the cocky French politicians were too scared before the war, they placed all their faith in that stupid piece of fixed defense.

    Hindsight is 20-20. I am sure that the French would have managed to pre-emptively conquer Germany under your leadership.
  19. Nationalsozialistische deutsche Arbeiter-Partei on Beijing Snubs Microsoft For Municipal PCs' Software · · Score: 1
    ... (I hate to bring up the Nazis but it is really relevant to the development of Socialism.) ...

    Nazi is short for ``Nationalsozialistische deutsche Arbeiter-Partei'' which translates into english as ``National Socialist German Workers' Party''. Yes, the Nazis had a lot to do with the development of socialism, since they were some of the most successful socialists of all history.

    ... As Hitler crushed his country's workers movement the other governments of Europe were jubilated ...

    Crushed the country's worker movement? He placed it in total control of the nation, with himself as leader.

    They feel in the love with the man. All they could think of was if the same thing could be done in their own nations ...

    Fell in love with the man? All the other governments in europe feared the same thing happening to their own nations.

  20. Re:Crap on Making Linux Look Harder Than It Is · · Score: 1
    ... I have nontechnical users merrily sending mail from Mutt and Pine on OpenBSD now because I simply give them a set of directions, say "It's not perfect, but it's a compromise, and in 3 years we've never been hacked; please play along nicely". Since my users all accomplish what they want to, they are happy ...

    Not to mention that nearly everyone who has gone to college in the last 10 years has used Mutt, Pine or Elm anyway, for their school email account. It's amazing how many people have never heard the word Unix, but do have a working knowledge of what they like to call just ``telnet'', not knowing that they used a Unix login prompt (real Unix, generally SunOS, not Linux) nearly daily for several years. A few even used old-school mail (not even mailx), something which your average ``Linux Expert'' can't handle. Friends of mine use my computer (FreeBSD) to surf the web often, because I don't try to use the command-line as a big dick to stick in their face. I log in and startx, and tell them which icon is for Mozilla, which I explain as just being netscape with a cool little dragon thing instead of that stupid `N' (not as bad as the original `N', mind you) as the logo, and they have absolutely no trouble.

  21. Re:It's very simple on Fighting the Scourge of Gaming Addiction · · Score: 3, Interesting
    It could be worse - some people turn to alcohol, drugs, or gambling, all much, much, MUCH more destructive than games or work. (except for maybe M:TG - that can do a number on your bank account that can match many drugs)

    Atually, drugs are a lot cheaper than most people think. A hit of LSD is usually US$3-6, about the same price as a movie ticket. Where a movie usually lasts 90 minutes, your trip will last 6-12 hours, sometimes longer. It's generally a lot more entertaining than the latest crap from Hollywood too. As for video games, they are usually $49.95 plus the cost of a brand new ultra-mega-hyper-voodoo 9000 video card w/10gb of onboard ram, a new Pentium9 666GHz, etc. so the graphics won't suck, making them a lot more expensive than drugs.

  22. Re:Blame me on Next Restricted CD Coming Soon · · Score: 1
    I'd just like everyone here to know that I'm to blame for all this.

    I copy files like crazy on Kazaa. I burn them on CD's. I seldom buy music anymore, because I can get it free.

    A big sorry to all those of you who will be able to listen to less and less music on your computers/in your car. A big sorry to all those who use Kazaa for only legitimate purposes (hi Dan!)

    Quite true. Of all these people complaining and saying that they only use legal mp3s, about 99% of them are lying. Also, there are much better distribution methods for legal stuff than p2p, it only exists so that you don't have to worry about your ftp server being shut down.

    The RIAA probably hate me even more than you. I used to buy CDs pretty often, and I have several hundred. However, I didn't have one of those CD jukeboxes, and don't like getting up to change CDs every hour, so I ripped nearly every CD I owned to mp3 (and not with joint-stereo either, that sounds like crap). This allowed me to reduce my CD purchaces, since I could just borrow a friend's CD for a few hours and not need to buy the CD. Now I have a high-speed internet connection, and can get a much wider selection of music without paying for it than I ever could legally, and all of my music can be downloaded by other people. It has been about 9 months since I last bought a CD. However, I will be buying a new hard drive soon.

  23. Re:A useful services?! on Path of Least Surveillance · · Score: 1
    ... The muggers tend to wear baseball caps and hooded tops at the same time, pretty much obscuring their face altogethor ...

    Perhaps that is a good solution for people who are concerned about their loss of privacy. The news media has recently been pushing the idea that we are fighting in Afghanistan so that their women can dress like Britney Spears (complete with speeches from President Bush's wife, and the UK Prime Minister's wife). If average people in the US and the UK start wearing outfits similar to what the Afghan women were wearing (burkhas?) it would defeat the facial recognition cameras they have been installing.

  24. Oh, Those Copyright Symbols on Freedom or Power? · · Score: 1

    Now that I am back home on my FreeBSD machine, I see what you are talking about. Apparently, Mozilla 0.9.6 on Windows 98 may still have some issues. The © (copyright) symbols should be periods (.), the ¥ (yen) symbol should be an exclamation point (!) (I think). That is really weird.

  25. Copyright Symbols? on Freedom or Power? · · Score: 1
    Nice use of a Red Dwarf quote ¥I love the macho Rimmer ;- but did you post that from, say, Win2K using IE? If so, WTF is up with the copyright symbols? Did MS finally change from CR/LF to something else? Is that Unicode for "Enter"? What is going on, Ye Gods Above?

    No, Mozilla 0©9©6 on Windows 98, since I have been visiting my parents for Thanksgiving, and can't convince my Dad to use FreeBSD© I am not sure what you are talking about with this copyright symbol business, it looks fine to me, and no copyright symbols in sight© Where do you see this at? Is anybody else seeing them?