Become a fan of Slashdot on Facebook

 



Forgot your password?
typodupeerror
×

Comment Do different rules apply to senior managers? (Score 5, Insightful) 151

I've never understood why people do stuff like this. Years ago I recovered data from a CFO's laptop, only to find the thing filled with porn. Senior managers generally make enough money to have personal devices to look at porn on -- why do they risk the embarrassment of being discovered misusing company resources? I guess now that I think of it, the CFO in question wasn't fired (or even really disciplined) for this, as far as I can tell, so maybe senior managers just think that they're important enough that rules and common sense don't matter. If the laptop had belonged to a lower-level employee, he or she probably would have been disciplined.

Comment Re:Cisco isn't going anywhere, yet (Score 1) 192

Familiar or not, IOS ps pretty cludgy and difficult to navigate, and lacks a lot of basic tools that are available at a bash shell. For example, why can't I pipe muptiple 'include' statements together yet? I've been able to pipe multiple grep statements together since, well, since I started using Linux at least 13-14 years ago.

Comment Cisco isn't going anywhere, yet (Score 3, Informative) 192

As much as I would like to see Linux / BSD being used to power network devices (and I admit that it's already happening), it's going to be a long time before most enterprises ditch their Cisco gear for equipment that runs an open source OS. Many large enterprises have already made significant investments in hardware and personnel. Even if a vendor were to come along with an excellent product at a great price point it would probably be at least 5-10 years before most enterprises move away from their Cisco switches, routers and other appliances. Don't get me wrong -- I'd like to see Cisco's dominance challenged, and to see a Linux / BSD based CLI used to configure network equipment instead of IOS -- but it seems unlikely in the near future.

Submission + - How should I wean myself off of Google services?

grahamsaa writes: My primary e-mail account is with gmail, and has been for years. I catch up with remote friends and family by using Google chat (within gmail). I have an Android phone and tablet, and am generally happy with them. Unfortunately, due to Google's cooperation with the NSA and other agencies, I'm becoming increasingly uncomfortable with my dependency on their services.

I do have a riseup.net e-mail account, but their webmail interface (squirrelmail) isn't nearly as polished as gmail's is (I can't fault them for this — Riseup is small and funded entirely on donations — but giving up some of gmail's features will be difficult). I'm not opposed to setting up my own mail server and I'm experienced enough with Linux to do this, but that presents the some of the same problems. In addition to that, it will take time to update my contacts with new address information, and surely some people will slip through the cracks, probably resulting in complete loss of communication.

Getting away from Google on mobile platforms is even more difficult. Google Now already knows where I live and work, what sports teams I follow, etc. Occasionally I rely on GPS to get around, which works very well, but it also leaks my location data to Google Maps. I need to use a smartphone for work (and my employer pays for my phone), but there don't seem to be any good alternatives to Android. iOS is locked down, and no better from a privacy perspective, and Windows Mobile (or whatever they're calling it these days) is no better.

I'm not interested in switching away from insecure / monitored services because I'm engaged in anything illegal, or because I have anything "to hide" per se. . . I just think that Google already knows too much about me. Switching to a search engine like Duckduckgo is easy enough, but getting away from other services looks like it's going to be very cumbersome. I ditched Facebook years ago and haven't looked back, but I expect this transition to be far more difficult.

Has anyone done this successfully? What services / applications work well? What do you recommend?

Submission + - New Linux Trojan in the Wild (rsa.com) 2

Nerdfest writes: It appears that a Russia based cybercrime team has set its sights on offering a new banking Trojan targeting the Linux operating system. This appears to be a commercial operation, which includes support/sales agents and software developer(s). It has an anti-research tool box, which includes anti VM, anti-sandbox and anti-debugger features.

The Trojan’s developer claims it has been tested on 15 different Linux desktop distributions, including Ubuntu Fedora and Debian. As for desktop environments, the malware supports 8 different environments, including Gnome and Kde.

With recent recommendations to leave the supposedly insecure Windows OS for the safer Linux distributions, does Hand of Thief represent the early signs of Linux becoming less secure as cybercrime migrates to the platform?

Submission + - German ISPs launch "E-mail made in Germany" initiative (telekom.com)

An anonymous reader writes: Deutsche Telekom and United Internet have launched an initiative within the industry for secure e-mail communication across Germany. The partners' "E-mail made in Germany" program utilizes an additional security standard that for the very first time enables GMX, T-Online and WEB.DE users to automatically encrypt data over all transmission paths and offers peace of mind that data are handled in compliance with German data privacy laws. Data are encrypted directly by the provider, which means customers need no specific technical know-how and incur no extra costs. All data are stored in secure data centers located in Germany. In addition, a special designation allows users to see before dispatching their e-mail which of the recipients selected also use secure e-mail addresses and thus comply with the initiative's security standards.

From today, e-mail communication between data centers at GMX, T-Online and WEB.DE is being sent in encrypted form. Transmission from the handset to the e-mail server is already encrypted for all customers who use an e-mail application from one of the partners or who have activated SSL encryption in their e-mail program (e.g., Outlook). For security reasons, from the beginning of 2014 the initiative partners will only transport SSL-encrypted e-mails to ensure that data traffic over all of their transmission paths is secure.

Submission + - NSA Surveillance Costing Cloud Computing Industry $35 Billion (ibtimes.com)

coolnumbr12 writes: The secret NSA surveillance programs revealed by Edward Snowden don’t just infringe on the privacy and constitutional rights of U.S. citizens, they can also be very damaging for the American technology industry.According to a report by the Information Technology & Innovation Foundation, a Washington D.C.-based think tank, companies that provide cloud computing services stand to lose as much as $35 billion over the next three years unless Congress takes action to alleviate the worries of American people.

Comment I feel bad for the programmers and sysadmins (Score 3, Insightful) 284

I feel bad for the programmers and sysadmins that are being asked to implement this. Surely, they must know that it won't work, but senior management probably insists that everyone can afford all the content they want, and that DRM is easy to deal with (and somehow beneficial) because senior management is completely lost.

The front line people responsible for setting this up are probably rolling their eyes in disgust, and looking for better jobs. If I were in their position, I would be. Have fun trying to enforce something that is unworkable and unrealistic. When you're not having fun anymore, hopefully you'll find a job that uses your skillset to do something that makes sense.

Comment free subversion repository? (Score 1) 186

Goldman Sachs wasn't equipped to host their own repository? For code that is supposedly proprietary, valuable and highly sensitive? That's pretty shocking. Either this guy violated company policy by using a free repo host when he was explicitly told not to, or whoever is responsible for IT infrastructure at Goldman should be fired for incompetence. Hosting your own repo is easy enough, and trusting a free repo host for sensitive code is about as stupid as using a pastebin to share medical records.

Submission + - Oops! Japanese Gov't Shares Internal Email Over Google Groups (itworld.com)

itwbennett writes: An official at Japan's Ministry of the Environment created a Google Group to share email and documents related to Japan's negotiations during a meeting held in Geneva in January, but used the default privacy settings, which left the exchanges wide open. According to Japan's Yomiuri Shimbun newspaper, over 6,000 items, including private contact information of government officials, was publicly accessible. Michihiru Oi, a ministry official, said the ministry has its own system for creating groups and sharing documents, but it doesn't always function well outside of Japan, sometimes leading to 'poor connections' and a 'bad working environment.'

Submission + - Is Postgres on par with Oracle? 1

grahamsaa writes: I work at medium sized company that offers a number of products that rely fairly heavily on backend databases, some of which are hundreds of gigabytes and deal with hundreds or thousands of queries per second. Currently, we're using a mix of Postgres, Oracle, and MySQL, though we're working hard to move everything to Postgres. The products that are still on MySQL and Oracle were acquisitions, so we didn't get to choose the RDBMS at the time these products were designed.

So far, we've been very happy with Postgres, but I know next to nothing about Oracle. It's expensive and has a long history of use in large enterprises, but I'm curious about what it offers that Postgres might not — I'm not saying this because I think that sticking with Oracle would be a good idea (because in our case, it probably isn't), but I'm curious as to how some companies justify the cost — especially considering that EnterpriseDB makes transitioning from Oracle to Postgres feasible (though not painless) in most cases. For those that use Oracle — is it worth the money? What's keeping you from switching?

Comment You have a few options (Score 3, Insightful) 100

As others have pointed out, you've missed a few details. So, you're getting 503's -- do you know why? Is processor or disk load too high? Is your server misconfigured? I'm guessing at this point that your host is managed by a third party -- have you asked them to explain the problems you're having? Have they offered a solution (even if it might cost you more money)?

What is your budget? What are you currently paying? What about your level of in-house experience? If you're a linux / unix admin (or have one at your disposal) you might be best served by using either a managed VPS or colocated server (or a couple, behind a load balancer, but that gets to be more expensive and complicated to set up).

If you're less willing or able to manage hosting yourself, be aware that generally, you'll get better service from managed hosting providers if you're willing to spend money. Even though you're a non-profit, probably with a limited budget, you shouldn't skimp on hosting if you decide that a managed host is right for you. If you typically have ~1000 active users on your site, any downtime will hurt you -- even if it doesn't cost you in terms of donations, it will make you seem less legitimate.

Anyway, here are your options:

Unmanaged VPS -- cheapest option, will require some technical expertise on your end. Potentially less reliable than colocated servers.
Colocation -- Can be expensive, requires a fair amount of technical expertise. If configured properly, your site should be very, very reliable, but there's a lot of room for error.
Managed hosting -- Forget about paying $80/year for managed hosting, considering the amount of traffic you're getting. You may have to spend $100/month or more. Good managed hosting won't require much experience from you or your staff, and will be less expensive (probably) than colocating multiple servers. Do research, read reviews, etc. to find a provider you feel comfortable with. While price is an important consideration, you shouldn't go with the cheapest option just because it's the cheapest. If you need to talk to a technician at 3am, you want to be sure that you're going to get someone on the phone when you call. It's also probably important that the person you get when you call during an outage / emergency isn't an idiot, and with most bargain-basement hosts, you're lucky to get a human on the phone at all.

Good luck :)
Botnet

Submission + - New Windows RDP Flaw allows unauthenticated code execution (microsoft.com)

AlphaSys writes: Microsoft today released six security updates that patched seven vulnerabilities, including a critical Windows bug that hackers will certainly try to exploit with a network worm, according to researchers.

"This is a pre-authentication, remote code bug," said Andrew Storms, director of security operations at nCircle Security, referring to MS12-020, the one critical bulletin today and the update that he, other researchers and even Microsoft urged users to patch as soon as possible.

"It will allow network execution without any authentication, and has all the ingredients for a class worm," said Storms.

Slashdot Top Deals

If you would know the value of money, go try to borrow some. -- Ben Franklin

Working...