Re: Why are they on the internet?
I was under the impression that the Target breach was committed by someone with direct access to their sales terminals who managed to infect their corporate servers.
2456 publicly visible posts • joined 17 Mar 2010
And Target has already significantly raised their prices....
I've been shopping there for years as they're the only viable alternative to Wal-Mart* around here. I've not noticed any significant price increases. There have been some minor increases, but they've basically been in line with inflation.
*I refuse to shop at Wal-Mart. Don't get me started on the reasons or I'll be ranting all day.
A robot uprising makes for entertaining fiction, but let's get real for a moment here: What reason would an AI have to wipe out humanity? It's not like it would be competing with us for resources other than energy, and it seems likely that any super-intelligent AI would crack fusion pretty quickly. With fusion working there would be unlimited energy. So, basically, the only reason AI would have to attack humanity is if we were a threat to it. Any AI capable of wiping us out would be able to do the situational analysis to realize that attacking humanity is the quickest way to turn us into a threat to its own survival.
Frankly I think Orion's Arm is a much more likely AI scenario than Terminator.
Inadvertently adding an .exe to an email is not a concern. Inadvertently dropping an infected file onto a file server, however, is a concern. I've seen that one happen more than once. A Linux user gets an infected file from a Windows user and passes the infection on to another Windows user or even a group of them via a shared NAS, totally unaware that he's just helped a virus propagate. Plus there's the issue than systems running Wine can sometimes be infected with Windows malware. Admittedly such an infection would be laughably easy to cleanup, but still it happens.
Gimp? I might consider it again as and when it's gifted a user interface that mere mortals rather than the gods of image processing can understand
Oddly until I took a class on Photoshop Gimp's interface made more sense to me than Photoshop's.
Use whatever floats your boat. Having used both, though, I don't understand why anyone'd WANT to use Windows, but I'm not going to heckle someone for doing so.
EXACTLY my feeling on the matter, except that I do understand why some people would rather run Windows. In fact I've told several people to stick with Windows when they asked me about Linux. The two main reasons I'd tell someone that are if they're currently in or planning to go to school (because many classes require certain software which may not run on Linux - I learned that one the hard way when I went back) and if they primarily use their computers for gaming (because of the number of major titles that never make it to Linux and don't run under Wine).
Doesn't seem to work on my Fedora install.
You should be able to convert the .deb to a .rpm. Look into alien.
My problem with it is that I need a note taking app that will work on basically everything. I've got Mint Debian Edition on my home computer, my work computer is Win7, as is my wife's (she needs access to some of my notes) and I have several Android devices and the iPad issued to me at the office. I need my note app to work on all of them. Looks like I'm sticking with Evernote/Nixnote for a while. Too bad because I'd really like to give Springseed a try.
it is less than wonderful for any conversions beyond mobi > epub
I dunno. It's never failed me for conversions. Then again, I use it mostly for managing my library since I get just about everything in epub to begin with.
Sigil is very nice for fixing horribly formatted epubs, even the "retail" ones...
Yes, yes it is.
It's also quite useful, when used in conjunction with a website mirroring program, for turning non-downloadable online language references into nicely bookmarked epub files. Very convenient when your cubical doesn't have enough space to add a bookshelf for all the references you would like to have available.
Some of them I've not used, but of the ones I have (about 3/4 of the list) they're all top notch, with one glaring exception. I did not get along well with Tomahawk.
It wasn't a flaw in the program or anything, it just didn't do things quite the way I wanted them to. It did come closer than any other media library manager I've tried unless you count Mixxx, which is not going to work well for most people but meets my needs perfectly. I blame the time I've spent DJing.
How often do you have to reboot your system, A Non e-mouse? This box (Slackware-current on a nine year old HP ZV5105) hasn't been rebooted for close to a month.
And there's the difference between a server and a desktop. It's why I still run Debian on my servers but run Mint on my desktop and laptops: They have different needs.
My home desktop gets shut down every night before I go to bed and doesn't get turned back on until I eventually sit back down at it. Total it usually runs about 3-4 hours a day. My work computer usually gets shut down at 5 every Friday (and usually has in-progress projects open overnight the rest of the week) and gets booted back up while I'm getting coffee on Monday. There's no reason to leave a desktop on eating electricity all the time.
Contrast that to my server at home, which, aside from power outages and a span of about a week a couple months ago while I waited for a new motherboard to come in, hasn't been off since the last time I moved.
Presumably they know that Linux is not Unix then, and that it was never intended to be, and has non-Unix-like features ?
You're half right. Linux is not Unix and was never intended to be. What it is and was always intended to be is a kernel for GNU, which itself was always meant to be a libre clone of Unix.
Presumably they also know though, that init and systemd are in user space and not the kernel, so that would be the "GNU" bit of Debian GNU/Linux ? Did they ever read up on what the "N" in GNU stands for ?
Again, "not Unix" only because Unix was, at the time, as proprietary (maybe more so) as Windows is today. Remember the whole thing was the brainchild of Stallman, a man who's convinced that all the evils of the IT world stem from proprietary and closed software.
And I guess that they also know about SMF and launchd, which systemd is more or less a clone of, and the Unix systems on which they run ?
Black boxes. Pretty much the thing GNU and Linux were written to avoid because they cause problems that are hard to troubleshoot.
Or, maybe they don't know what they are talking about...
I find it more likely that you just don't understand where they're coming from.
The Debian community has changed pretty significantly in the ten years that I've been a part of it (this wouldn't have even been a debate 10 years ago), but I can't imagine it's changed enough for the people opposed to making systemd part of a stable release a minority. It's not ready for prime time. It's as simple as that. It used to be that the Debian community as a whole would have understood that without even talking about it. It might have made it into the testing branch for a while before coming back out when the problems emerged, but more likely it wouldn't be out of sid, or maybe even experimental, yet. The change from hotplug to udev took quite some time, as it should. There's absolutely no reason for a change to systemd, if it's even necessary, to move any faster.
Reminds me of back in the day when I got a letter, allegedly from SCO, about my "unlicensed use of their property" or some such rubbish. Frankly I'd find out what made them think I was file sharing then offer to let them set the court date and hang up on them. You can't win these cases with just an IP address and even if some brain dead court did award them a judgement with no other evidence it'd be far less than $20 per song.
'd much rather chance being zapped with a laser once on my way home than face the dozens of morons with their faulty headlights I pass every evening.
I agree that those xenon headlights are annoying and dangerous and should probably be illegal, but I think that the permanent damage to your eyes by just one high-powered laser would be far worse than the annoyance that overly bright headlights can cause.
That said I've not seen any news stories involving one of these lasers being used on drivers. That doesn't mean it hasn't happened, of course, but the pricing on them is high enough that your typical numbskull prankster is going to opt for a lower priced model for their shenanigans. I highly doubt that there's any real need to take them off the market, but I do understand the decision to do so.
Since you obviously value intelligence and truth and given your obvious hostility towards religion I'd encourage you to look up just who came up with the original premise for the Big Bang Theory back in 1931. Here's a hint: Google Lemaitre. The answer just might make you reconsider your opinion on people of faith.
Because if it didn't start here, but "out there, somewhere" then there's a high probability life, as we know it, exists on any planet with a similar climate.
I prefer to think that there has to be life out there somewhere. I find it impossible to accept that in all of the hundreds of trillions of planets out there that only this one insignificant rock managed to spawn life. Even if Earth is very special in that the exact right 1 in a billion circumstances happened that still means there should be hundreds of planets out there with the same circumstance.
Even if it turns out to be viable space microbes (which is exceedingly unlikely at this point) and panspermia claims the day the real question still remains unanswered. Rather than "we don't know" the answer to where life came from simply becomes "not Earth". Which is really not a terribly helpful answer as far as figuring out how life came to be in the first place.
Remember, if you can simulate the universe then the odds that we're not living in a simulated universe are near nil. Ditto for the boffins running our simulation and the ones running theirs and so on. There could be thousands of layers of simulations above us before you get to the ones in the real world.
The simulation argument is fun, though I'm not sure why.
There ARE no obstacles to setting it up that way, and in fact it's pretty much the norm in the US Congress. Any bill that actually gets passed comes with riders tacked on by the other side. Sadly that's the only way to get anything done in Congress these days. Our political system really is that broken.
I've never met an original Black Panther as far as I know. By the time I was old enough to care the originals had pretty much quit advertising, and from what I understand they weren't at all bad. They were (so I've been told) basically a civil rights group.
I have, however, had the misfortune of meeting both New Black Panthers* and Klansmen. I'd not willingly spend any time in the company of either. I have no tolerance for the rather potent strain of stupidity that is racism.
*The original Black Panthers and the New Black Panthers, for those who don't know, are completely unrelated organizations. The NBP just usurped the name.
prohibiting children from crossing the road by themselves would make more sense than banning them from accessing the Internet alone
Most parents DO prohibit children from crossing the road by themselves, at least until they're old enough to understand the danger. Unfortunately the age that most kids understand the danger of the internet is much higher than the age that they understand the danger of crossing the road.
A child who feels able to discuss most details of their online activities with an interested parent is likely to be far more safe.
Very true. And to be fair I don't plan of banning my kids outright from anything online except the obvious stuff like illegal sites and porn. In fact my daughter already has a FB account (in violation of FB's age policy - my wife's doing, but I didn't protest or ban her from it when I found out after the fact). I will insist on knowing who they're talking to when they get old enough for it to be an issue. Part of that will come from the computer being in the living room, and for fairness my computer is in the living room also.
My kids are significantly younger than that, but I've got to say I agree with the no-laptops-upstairs rule. Banning social media is too much, but I think monitoring what your kids are doing online is just a simple, sane precaution.
I've seen way too many kids lured off into predators' hands because their parents didn't know what they were up to. It doesn't take too many times of having to talk to a classroom full of kids about why their classmate was killed by a pedo freak to get to that point. I've had or been very near to that unpleasant experience three times, plus another time that the daughter of a close friend got lucky and was rescued before the perv she'd hopped a train to see was finished with her.
Needless to say when I see someone saying the world "isn't any scarier than when we were kids" it makes me either laugh or reach for a clue-by-four, depending on my mood.
Looks like that whole html5/javascript stack is just not as appealing for mobile development has some would like to believe.
I find it VERY appealing and use it all the time, but the problem with the HTML5/JavaScript stack as a base for a mobile OS is that if you do it right your app doesn't care what OS it's running on. Why would I, as a developer using that stack, do the extra work tie myself down to a particular OS when I could do less work and have my apps work on all platforms, mobile or otherwise? Sure having it show up as a native app is nice, but it's ludicrously easy to make a web app look native for iOS or Android and not much harder for Windows 8.
Simply put, from a developers perspective FirefoxOS adds nothing. From a typical users perspective the question is "What's FirefoxOS?"
Mozilla would probably get almost as much money from Microsoft for Bing to be the default search engine
Not likely. Anyone savvy enough to not use their system's default browser (Firefox is the default on very few systems - almost all of them some flavor of Linux, so those users are savvy too) is savvy enough to switch the default search engine. Most such people, at least the ones I know, don't use Bing.
NO intelligent user of ANY OS supposes it to be "magically" completely secure (the ones who do don't count).
Don't be ridiculous. Of course they count. And some of them (at least one whom I personally know) are quite intelligent.
Unix systems are not magically "secure" but they are demonstrably "more secure".
True enough.
Their use across the web does not constitute a "small target".
As far as user-targeting malware is concerned, yes it does. Servers are another matter, but servers are much harder to infect than desktops to begin with. For starters, they almost never hang out in sleazy websites like users do.
Let's say it yet, yet, yet again: There are currently no viruses proper - at all - for OSX (there will be, sometime, but this isn't one of them).
You do realize that even Apple stopped trying to push that particular line of bull 5 years ago, right? Yes, OSX viruses do exist and are in the wild and have been around since at least 2006. For a few examples, see
OSX_IWORM.A OSX_SLORDU.A OSX_MACKONTROL.A and OSX_MUSMINIM.A all of which are viruses that can be picked up via drive-by-downloads. And those are just a few examples. Yes, there is much less malware of all types around for OSX, but don't be one of those fools going around believing it doesn't exist.
OSX (and anything else *nix based) is harder to infect that Windows, but by no means is it so difficult as to not be worth it were there a greater number of potential targets. The diminutive market share of non-Windows PCs is very much one of the reasons we don't see more non-Windows malware.
Not a bug, a feature
Normally that's meant as a joke, but in this case it really is a feature. Not only is it A feature, but it's THE feature as far as enterprises are concerned. Take this away and force them to install the apps they need on their corporate iWhatsits one at a time through the app store and you wouldn't be able to give the things to corporate users.
Sadly, as with many features designed for convenience, it's also an attack vector. Such problems shall always exist as long as non-geeks want to use technology.
I think it's been pretty well proven that a lot of people WILL pay for music over pirating it provided they feel like they're being treated fairly. Personally I'm not a fan of Spotify specifically because the person doing all the work (the artist) isn't getting paid. That's the same reason I make sure all my royalties get paid when I DJ.
Here's the thing people: if musicians don't get paid they don't make music. I'm not saying we should go back to paying $20 to get one or two good songs plus a bunch of garbage we don't want, but the $1 per song model seems pretty fair to everyone. The consumer gets what they want for a good value and the artist gets paid. There's still the problem of middle-men and record execs sucking up most of the profits, but I think we're well on our way to that problem being solved. There are quite a few successful* indie artists out there now who've done away with the record execs and are only paying a (debatably fair) percentage to the music stores now.
*In this context, "successful" means that they've been able to quit their day jobs, not that they have private jets.
I believe she is a popular, beat combo m'lud. Or to put it another way, she sings both kinds of music. Country, and Western.
She started out in country but has sort of migrated more towards pop over the course of her career. Neither are among my favorite kinds of music. Honestly I'd never heard of her until Kanye West's stunt at the Grammy Awards a few years back, but apparently she'd already become quite popular. I'm still not sure I've ever actually heard any of her music.
BYOD equally a lower salary is a no brainer for me. Why? Because I know exactly what it costs to implement BYOD. I'm not one of the guys who makes the decision, but one of the hats I wear mean that I would be one of the guys involved in the process of making it happen.
Anyway what it boils down to is that our relatively small organization (about 1500 employees total, plus 7000ish students, though realistically only about half of them are old enough to be expected to bring devices) would need something on the order of a $2,000,000 investment in infrastructure to make BYOD possible. That's mostly expanding our wireless capability to account for everyone having a device on top of all the wireless devices we already support.
And then after that initial investment (which is a hefty chunk of our annual IT budget already) there is the ongoing additional security concern. Now suddenly instead of one centralized antivirus solution paired with a well managed firewall we have thousands of unknown devices on our network which may or may not have proper security precautions in place. For all we know a previous employer might have installed a remote control app on that BYOD iPad and now has access to all of our student records. (And yes, such things exist. We have one that we install on our iPads.)
Ok, this has been bugging me for a week now. Could someone please explain to me what Tim Cooks sexuality has to do with Steve Jobs? So the guy who took over for Jobs when he died is gay. Even if he was hand picked what leap of (dis)logic makes people associate Jobs with homosexuality from that?
Seriously, I can't see the connection the homophobes are making here.
Currently I'm the only one in these parts allowed to have a Linux machine, and it's a technically end of life machine. To get it I had to promise to hand it over to be disposed of if it ever develops hardware issues rather than repair it. Given that I'm the IT guy that would be in charge of any Linux desktops we ever deployed (because no one else around here has the skill set for it) I think I can safely say that VDI Linux is not going to make a difference here. This place is a Windows shop. Even our server room is Windows only.
I'm about as far from a fan of Jobs as you can get without completely discounting his accomplishments, but you're taking it a bit too far. True enough that he didn't invent anything, but he did provide the inspiration that led to improvements in an number of products. Tablets are a perfect example. Tablet PCs were a failed technology that had fallen into a niche market that conventional wisdom said no one with an ounce of common sense would touch with a ten foot pole. Jobs saw potential and guided the engineers to develop the iPad. Because of that one move we now have mobile computing as we know it. He may not have invented the digital music player, but the iTunes store was a huge step towards the acceptance of digital music by the music industry. We'd have gotten there eventually, but I honestly feel that iTunes helped get us there faster.
The man wasn't an engineer, true. His talents lay in other directions. He had a knack for seeing how to improve upon things in such a way that people would buy them. It's unfortunate that he was also very greedy and a bit of a wanker, but that doesn't diminish his genius in any way.
And so are a few of my closest friends. Their orientation is just as newsworthy as his. Or rather his orientation is no more newsworthy than theirs.
I mean seriously, how slow a news day is it when you're writing about the sexual orientation of a man who's not even in the closet?
The FCC should ban claims of "unlimited" unless the connection is guaranteed to run at advertised speed all the time. To my knowledge, zero of the major telcos offer that.
I've only ever seen one consumer American ISP that advertised the speed they could maintain, mobile or landline. The cable/DSL/fiber providers all advertise their maximum speed (the one you could reasonably expect to get only if all their other subscribers were dead and their network completely empty). The one exception advertised their minimum. I was with them briefly and never got less than double their advertised speed, which was, sadly, still a paltry 3mb downstream bandwidth. Now I'm paying for a "20mb" connection that never actually gets above 12. That's pretty much the norm here unless you upgrade to a business account.
A limit on speed is also unavoidable with current technology. But these 'unlimited' data plans don't even amount to unlimited data transferred. If you can transfer 3gb of data but then your connection slows down enough to make you miss the 14.4k modem you were rocking back when the non-tech-savy world discovered the internet then it's functionally no different from a limited 3gb plan except that instead of paying $10 for another gb you just can't use your data at all till the end of the cycle.
"In some cases, customers had their feeds throttled by speeds of up to 90 per cent or more, making features like web browsing and content streaming virtually inoperable."
I found content streaming virtually inoperable on AT&T's network without them throttling me. Hence why I'm no longer on AT&T's network.
In my (admittedly anecdotal and unscientific) observation women seem to respond more to traits not connected to appearance or physical fitness. In short, women respond far less overall to physical appearance than men do. Confidence, money, or the word of another woman that he's dynamite in bed all seem to be just as good or better for impressing them than looks.
In case you're wondering, no, it's not personal experience. My number is less than the fingers on one hand and unlikely to ever rise again. If it does my wife will no doubt ensure that it only does so once.
No idea. However, last year hitting the magic 40 (age, not bedpost notches) I had a works medical, and the experience that is my first prostate exam. Oh. My. God. It was quite the surprise, and I'll not be having them for leisure purposes, I can tell you. Young people : be afraid.....
There is research that regular prostate exams may actually increase the likelihood of prostate cancer far more than they prevent it by finding precancerous polyps.
Attacks that fail don't make the news. The ones in this article should be failing because there shouldn't be more than a handful of machines still running an unpatched Bash out there by now. That was my point.
Also, to answer the question posed, yes I was aware of Apache's pulling in of Bash (knowledge which, given that I'm a web developer, should surprise no one), but I was unaware that Mutt did it. I sort of doubt it's going to change though. There are just too many tasks easily done with a half dozen lines of Bash that take a thousand lines of C++. More code means more bugs. More bugs means more security holes. Plus programmers are lazy sorts when it comes to reinventing the wheel (hence the popularity of OOP and reusable libraries).
For crying out loud people, patch your bash already. The shellshock fix was rolled into every major distro's security updates weeks ago. Why are there still vulnerable systems out there? I'm one who usually doesn't update without a good reason, but this is not your typical priviledge-escalation-if-the-attacker-is-at-the-keyboard bug that most Linux vulnerabilities are. This one is big and remotely exploitable. GO RUN YOUR UPDATES FFS!