Slashdot is powered by your submissions, so send in your scoop

 



Forgot your password?
typodupeerror
×
Security

Preventing My Hosting Provider From Rooting My Server? 539

hacker writes "I have a heavily-hit public server (web, mail, cvs/svn/git, dns, etc.) that runs a few dozen OSS project websites, as well as my own personal sites (gallery, blog, etc.). From time to time, the server has 'unexpected' outages, which I've determined to be the result of hardware, network and other issues on behalf of the provider. I run a lot of monitoring and logging on the server-side, so I see and graph every single bit and byte in and out of the server and applications, so I know it's not the OS itself. When I file 'WTF?'-style support tickets to the provider through their web-based ticketing system, I often get the response of: 'Please provide us with the root password to your server so we can analyze your logs for the cause of the outage.' Moments ago, there were three simultaneous outages while I was logged into the server working on some projects. Server-side, everything was fine. They asked me for the root password, which I flatly denied (as I always do), and then they rooted the server anyway, bringing it down and poking around through my logs. This is at least the third time they've done this without my approval or consent. Is it possible to create a minimal Linux boot that will allow me to reboot the server remotely, come back up with basic networking and ssh, and then from there, allow me to log in and mount the other application and data partitions under dm-crypt/loop-aes and friends?" Read on for a few more details of hacker's situation.

Comment Re:How stupid are we (Score 1) 249

Thorough human history, and in all culture I'm aware of, there have always been midwives. Women who help other women, who learn from one another, watching the other women delivering babies, learning from mistakes and teaching each other.

So, no, I don't think not innately knowing how to deliver a baby is a big deal. At least nothing that changed in the last hundred years.

What has changed is our isolation from others. A hundred or two hundred years ago, you'd be hard pressed to live somewhere without some midwife nearby. Maybe if you lived alone on a farm (hard as there would always be family/farmhands around), but in this case the couple couldn't even call the neighbors for help, and they wouldn't be likely to know what to do.

Actually, I'm kind of surprised the midwife didn't stay on the phone to talk them through it. But yeah, google can substitute in a pinch. Kudos to the father for his level-headedness, many would've freaked out in that situation.

Space

Super-Earths Discovered Orbiting Nearby, Sun-Like Star 242

likuidkewl writes "Two super-earths, 5 and 7.5 times the size of our home, were found to be orbiting 61 Virginis a mere 28 light years away. 'These detections indicate that low-mass planets are quite common around nearby stars. The discovery of potentially habitable nearby worlds may be just a few years away,' said Steven Vogt, a professor of astronomy and astrophysics at UCSC. Among hundreds of our nearest stellar neighbors, 61 Vir stands out as being the most nearly similar to the Sun in terms of age, mass, and other essential properties."
Linux

Linus Torvalds For Nobel Peace Prize? 541

An anonymous reader writes "I'm as much of a Linux fanboy as anyone else, but I've never thought of anything in computing as being worth a Nobel Peace Prize. Apparently, there are those who take global collaboration seriously, though..." The suggestion has been bouncing around the Portland Linux community, where Torvalds lives. Is it worthy of wider attention and discussion?

Comment Re:Where does this leave GIMP? (Score 3, Interesting) 900

Group layers and a single window interface are in current SVN.

For everything else you'll have to wait a year or two until the Gimp developers integrate their new GEGL framework, revamping Gimp into something else entirely along the way. It'll use float-based RGB as its internal representation, but handle anything as input and output. The current implementation of GEGL is dog-slow though, so don't bother to try it.

As for the GP's suggestion for adjustment layers, no it's not enough. And yes, Adjustment layers could be implemented without waiting for GEGL integration, but the Gimp developers refuse to do it worrying that it'll make the integration harder (And because they want to come up with a completely new UI for them).

Businesses

Less Than Free 330

VC Bill Gurley has up an insightful piece on the strategy behind Google's releasing turn-by-turn mapping for free. He calls it the "Less Than Free" business model, and it is beyond disruptive. On the day that Google announced its new service, the stock in the two companies that had controlled the market for map data, Garmin and TomTom, dropped by 16% and 21%, respectively. (Those companies had bought Google's erstwhile map-data suppliers, Tele Atlas and NavTeq, in 2007.) "When I asked a mobile industry veteran why carriers were so willing to dance with Google, a company they once feared, he suggested that Google was the 'lesser of two evils.' With Blackberry and iPhone grabbing more and more subs, the carriers were losing control of the customer UI... With Android, carriers could re-claim their customer 'deck.' Additionally, because Google has created an open source version of Android, carriers believe they have an 'out' if they part ways with Google in the future. I then asked my friend, 'So why would they ever use the Google (non open source) license version?' ... Here was the big punch line — because Google will give you ad splits on search if you use that version! That's right; Google will pay you to use their mobile OS. I like to call this the 'less than free' business model. This is a remarkable card to play. Because of its dominance in search, Google has ad rates that blow away the competition. To compete at an equally 'less than free' price point, Symbian or Windows Mobile would need to subsidize." Gurley speculates that the company may broaden "less than free" to include the Google Chrome OS.

Comment Re:Nightmare (Score 1) 526

Interestingly, I was looking at Sun's licensing and procedures. It turns out that they require a copyright assignment form to include your changes in the official version (like the FSF does, but the FSF is not a for profit company). Their procedure is for shared copyright with the author, but it gives them the right to do whatever they want with the code, regardless of license.

So, IBM would be buying the right to include all of the work in Sun's open source projects in their closed-sourced solutions and/or cannibalize them anyway they want. That's pretty big, really.

Granted, the current open source projects would survive, and IBM is nice enough to the open-source crowd that these won't be killed outright.

Education

Computer Science Major Is Cool Again 328

netbuzz sends along a piece from Network World reporting that the number of computer science majors enrolled at US universities increased for the first time in six years, according to new survey data out this morning. The Taulbee Study found that the number of undergraduates signed up as computer science majors rose 8% last year. The survey was conducted last fall, just as the economic downturn started to bite. The article notes the daunting competition for positions at top universities: Carnegie Mellon University received 2,600 applications for 130 undergrad spots, and 1,400 for 26 PhD slots. "...the popularity of computer science majors among college freshmen and sophomores is because IT has better job prospects than other specialties, especially in light of the global economic downturn. ... The latest unemployment numbers for 2008 for computer software engineers is 1.6%... That's beyond full employment. ... The demand for tech jobs may rise further thanks to the Obama Administration's stimulus package, which could create nearly 1 million new tech jobs."

Comment Re:What is eye-fi and why would I care? (Score 2, Insightful) 128

Then it sounds like you need a camera and GPS with bluetooth. They can talk to each other and fill in location data in real-time, and if you're in a studio or near your laptop, it can upload the pictures in the background.

You could even use it as a phone camera, or for videoconferencing, or whatever you want. Bluetooth is pretty standard for tethering like this.

Wifi is only useful if you want to upload directly to the internet. That's not always the best solution

Debian

Debian GNU/Linux 5.0 "Lenny" Released 386

Alexander "Tolimar" Reichle-Schmehl writes "The Debian Project is pleased to announce the official release of Debian GNU/Linux version 5.0 (codenamed Lenny) after 22 months of constant development. With 12 supported computer architectures, more than 23,000 packages built from over 12,000 source packages and 63 languages for the new graphical installer, this release sets new records, once again. Software available in 5.0 includes Linux 2.6.26, KDE 3.5.10, Gnome 2.22.2, X.Org 7.3, OpenOffice.org 2.4.1, GIMP 2.4.7, Iceweasel 3.0.6, Apache 2.2.9, Xen 3.2.1 and GCC 4.3.2. Other notable features are X autoconfiguring itself, full read-write support for NTFS, Java programs in the main repository and a single Blu-Ray disc installation media. You can get the ISOs via bittorrent. The Debian Project also wishes to announce that this release is dedicated to Thiemo Seufer, a Debian Developer who died on December 26th, 2008 in a tragic car accident. As a valuable member of the Debian Project, he will be sorely missed."

Comment Re:Not suprised (Score 1) 493

GCC has supported PGO since at least 1999 (when I first saw it)

See if you can find some old docs and look up -pg, --profile-arcs, and related flags.

The amount and quality of optimization based on this information has varied over the years, but the basic infrastructure is pretty old. I think modern gccs build themselves with PGO by default.

Comment Re:Why not? (Score 2, Interesting) 493

I just wanted to point out that statically compiled code with PGO is even more advantageous because your final version is optimized with the runtime information, but doesn't have profiling code built in (which the java version would). So once again, static languages win.

Sorry, just tired of this stupid slashdot meme.

Slashdot Top Deals

Without life, Biology itself would be impossible.

Working...