Slashdot Mirror


User: Aighearach

Aighearach's activity in the archive.

Stories
0
Comments
12,400
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 12,400

  1. Um apparently the internet didnt get that memo because apache is still the most popular webserver.

    That's not the presumed implication.

    The joke is, nobody uses a shared stack with a web config running as an apache module anymore. Each user on a modern shared system has their own virtualized private OS. Unix users and groups are good for managing the ownership of files between various partially-trusted users, but it is not a reasonable basis for any sort of serious security.

    Of course everybody is still running apache. But on the modern stack, you can only root yourself with this.

  2. Re:Stop using open source server software!!! on Apache Web Server Bug Grants Root Access On Shared Hosting Environments (zdnet.com) · · Score: 1

    When it requires already having a user account on the server, it isn't really a secret backdoor. It is more like kicking in the door of the server cage next to you; they're going to know who did it.

  3. The real reason it not an issue with over 99.999% of web servers is that few people are still using 90's style shared servers with no virtualization or sandboxing.

    If you're using a cheap web server that is protected merely by the unix user controls, my goodness, you should shop around. Seriously. Are you really really really sure that you need a webserver, but can't afford $5/month for a VPS?

    In 1998, you might have to subject yourself to that if you wanted the price that low. But virtualization lowers the costs for the operator, so the price curve inverted long long ago.

  4. I've never seen apache running as root.
    I guess working at data center for the last decade doesn't make me any kind of expert or anything though.

    Nope. "Working at a data center" does not "make [you] any kind of expert or anything."

    Being competent enough to have already RTFM would imply that you may be at least minimally competent. But the manual would explain a wide variety of circumstances that leave you with a root process that is used to spawn more processes. If you were an expert you'd already have used all that stuff in all the different configurations, from one BOFH to the next. And you'd also know that under the most common usage scenarios, there is a root process.

    You probably don't even have root on those machines.

  5. People that want a thinner front end use Apache Traffic Server these days.

    And before that, you just learn how to write an apache config file and turn off what you don't use, and suddenly it is fast. ;)

  6. Re:Not all run it as root ... on Apache Web Server Bug Grants Root Access On Shared Hosting Environments (zdnet.com) · · Score: 1

    Personally, I'd rather have one process running as root than to have a hard requirement to start up a process as every possible user that could own a process.

    It is sad the state of technical knowledge on slashdot these days. There was a time when a random slashdot cowherd was expected to understand the basics of system administration!

  7. Re: Isn't this the 80/20 solution? on The End of the Desktop? (computerworld.com) · · Score: 1

    No, that is a crap IDE that was created by a company that had some neckbeards who weren't capable of providing support for GCC from one version to the next, so they made their own compiler. That way somebody else maintains the GCC fork that everybody actually uses, and the company has an excuse.

    But since they were bought by their arch-rivals who also have a non-standards-compliant, non-portable compiler for their own microcontrollers. Don't expect features that became popular in the last 20 years to show up in any of those.

    Whereas, the thing I was talking about was TI, and their IDE works (regular offline, and the web version) with both a proprietary compiler, and also GCC. And they support both. Because they hire engineers that are not also neckbeards. So they're capable of actual work. And then they also have a wimpy Anduino-like one that works with their ARM products. That is also available in a web version.

  8. US exports weapons to Saudi Arabia. What could be worse, a few routers?

    F-16 is a great airplane, if the enemy only has Russian planes. US exports to Saudi Arabia are a game-changer for them, because their enemies would usually be flying Russian planes.

    The F-16 is not a threat to the US. We have other planes that the F-16 can't even see! It is not a national security risk at all.

    Routers could be routing any data. Any. There is very little cap on how bad the damage to US interests could be, including National Security.

  9. Re:China is such a great place on People Changing Jobs Too Often Could Be Punished by China's Social Credit System (abacusnews.com) · · Score: 1

    Serfs were not slaves. Serfs were people under military protection from bandits, who had by right a row of farmland to work, and if the local farming practices included horse-driven plows, the local Lord was responsible for plowing that row for them. And in return they were required to provide a certain number of days of labor to the Lord, and to the Church. The Church was then also required to use some of that for Sunday Alms. Which in that period meant a bowl of soup and a glass of beer.

    Farmers who were not themselves Lords, and who were not Serfs, were unprotected and routinely had their output stolen by bandits. Few commoners had a better life than a Serf.

    Serfs can't always leave their job, but that "job" is only few weeks of labor per year. The rest of their time is their own. Retainers get a lot more pay, but they have to do whatever the Lord says at any time, day or night, all year, with no side jobs. If a Serf makes money at a side job, that money is their own. I mean, they better keep it hidden or taxes might get collected, but still.

  10. Re:Can it make pasta even more... on Machine Learning Is Making Pesto Even More Delicious (technologyreview.com) · · Score: 1

    No. Corn starch.

  11. Re:AGW is the opposite of ML? on Machine Learning Is Making Pesto Even More Delicious (technologyreview.com) · · Score: 1

    Everything bad that happens is blamed on AGW, whether or not it makes any sense.

    Oh, great. Thanks Obama!

    (/s)

  12. Re: Tastes better? on Machine Learning Is Making Pesto Even More Delicious (technologyreview.com) · · Score: 2

    Typical âoeAIâ nonsense story

    Kids these days with their funny words. I don't even know what âoeAIâ means! And honestly, I'm not even sure how many syllables it has.

  13. I love oregano but its a weed

    I love oregano, but my wife thought it was a weed and plucked it, so now I'm eating it dried from a plastic can.

    I'm just glad the thyme was too difficult to pull up.

    Luckily she's Thai so I can at least grow basil safely.

  14. Re:sustainable? on Machine Learning Is Making Pesto Even More Delicious (technologyreview.com) · · Score: 1

    It is a bit hard to stay alive if you leave the bubble. Are you sure you didn't just sneak in this morning? Wait right here while I have security scan your ID implant.

  15. Re:sustainable? on Machine Learning Is Making Pesto Even More Delicious (technologyreview.com) · · Score: 1

    The "revolutionary" aspect is that they did a farming experiment where they tried to maximize taste.

    Normally farming experiments only try to maximize yield, durability, and resistance to toxins.

  16. Re:The sheer incompetence of MS is staggering on Windows 10 Will No Longer Auto Install Feature Updates Twice a Year (windowscentral.com) · · Score: 1

    They have too many engineers, and at least 50% of them are Scotty from Star Trek, forever lying about how hard anything is.

    They've had all sorts of MBAs try to fix it. They even tried letting Balmer smash it until worked. But it still didn't.

    It may not be fixable. This is why when you start a company they say it is very important to choose and implement an effective company culture at the earliest stages.

  17. Re:So if I understand this correctly... on Windows 10 Will No Longer Auto Install Feature Updates Twice a Year (windowscentral.com) · · Score: 1

    No. They're offering to attempt to reduce the rate of annoying delays, not to stop them.

    Also, unexpectedly deleted files will be reduced, and you'll have more say in when the unexpected deletions happen.

    "But I can't update, I haven't finished the TPS report!"

  18. You don't get a thank you thou.

    Yeah, that would be pretty rare. Usually you can expect either a thank you or a thank thou, but not both.

  19. Re:Isn't this the 80/20 solution? on The End of the Desktop? (computerworld.com) · · Score: 1

    The comparable sort of "programming for dummies" type IDE from Texas Instruments works fine over the web.

    You probably think that being a non-web-app matters for that use case because you don't understand the details of what the tools are doing under the hood.

    I use the same AVR microcontrollers as the traditional Arduinos have, but I just use regular C. So I end up knowing what the different layers of tools are. It wouldn't be that hard to put up a web interface; and for that matter, you can install the whole build system in an android app if you really want to.

    The reasons that the desktop will stick around is not based on necessity, but preference. And on that note, even the regular more advanced IDE that TI offers (mostly for ARM programming) has a web-based version.

  20. Re:END? on The End of the Desktop? (computerworld.com) · · Score: 1

    Not until the patent on the special underpants that makes it all work expires. Until then you're pretty much only going to see it sold in bubble cities and the duty-free at Lunar City spaceport.

  21. You can see more stars from LEO than from where the humans live down here. 24 "hours" a "day," too.

    In the word "Starliner," the root is liner. As in, some type of people-mover than operates on a schedule. Modified by the word "star." As the modifier, it can be indirect and still be applicable. So a people-mover that gives you really good views of the stars, this is still a very literal word. Any complaint is merely stylistic, not semantic.

    In Starship, however, the key word is ship. The modifier isn't attaching to a word having to do with humans and the human perspective; it is a more concrete word, referring to the craft itself rather than its function. So here, Starship does imply that it's role as a ship has something to do with stars. But a ship doesn't "look," it doesn't have an experiential perspective to easily sweep in modifiers.

    So yeah, if you're a person who wants the name to be literally true, Starship would be misleading in a way that Starliner is not. Luckily though, names don't actually work that way; Jefferson Airplane were not actually an airplane, the Beatles were not insects, and it is a good thing too, because what about the Birds?

  22. OK, so if the payload includes a solar sail, then yes?

    So, yes?

    It almost sounded like were saying "no," except the arguments you made seem to be in support of what he said, at least after subtracting the conclusory opinions.

  23. Lets not get ahead of ourselves, this thing is not a starship , it couldn't even get out of the solar system.

    It goes faster than Jefferson Starship, sonny boy. They only go 3/5th of a mile in 10 seconds.

  24. It'd help an interstellar spaceship if it were doing a propulsive landing on a planet with atmosphere.

    Everybody who watches sci-fi already knows; the only inter-system spaceships that can land on a planet with an atmosphere have some sort of an energy drive; you don't even think about it with a propulsive drive.

    So far, the only "space drive" type of technology are some small prototypes. But we don't have good enough energy storage yet to use that on a spaceship for anything other than maneuvering thrusters.

  25. If you have a degree in mathematics and don't already understand software algorithms, my advice, forget education and get a brain scan to find out happened more recently that caused the decline.