Slashdot is powered by your submissions, so send in your scoop

 



Forgot your password?
typodupeerror
×

Submission + - Adware Privdog worse than Superfish

Presto Vivace writes: Comodo ships Adware Privdog worse than Superfish

tl;dr There is an adware called Privdog that gets shipped with software from Comodo. It totally breaks HTTPS security.

From Naked Capitalism's summary:

So here we have the CEO of a Certificate Authority (CA), Comodo, who is also the CEO of Privdog, whose product subverts the certificate authority system. Oh, and Comodo ships that very product with its software. These bottom feeders make Bill Gates look like St. Francis of Assisi. How deep does the rot in the software industry go, anyhow?

I am beginning to believe that Richard Stallman is right, living in freedom means using free and open software.

Comment Re:No (Score 1) 532

I compete with myself, trying to be a better person today than yesterday. Does that mean I am aggressive with myself?

Yes.

If you fail, do you just not even care? Or do you get a twinge of frustration with yourself and proclaim that you will do better tomorrow? If the former, then what even motivates you to get out of bed, let alone self improve? If it's the latter, that frustration...that anger... you feel is aggression. Without it, there is no improvement.

Comment Re:Trust has been broken (Score 1) 266

I guess maintaining integrity from start to finish has become far too much for anyone to expect out of today's companies? I'm sorry, but whatever happened to "you only get one chance"? Much as the many facets of Sony have garnered the "this bridge must now burn" hatred from me due to actions from 10 years ago, so too has Lenovo now entered this hated realm. They will not have a single dollar from me, ever, and I pray they crash and burn.

Comment Re:Choice is good. (Score 1) 755

More like "Oh, you've changed your fundamental structure. Screw you guys, I'm taking my yearly donation fund and going home!" I know the value of an operating system. I normally take half the price of what I would pay for a commercial server UNIX licenses and dump that into a donation fund that gets split among the OS projects I use. If a project uses systemd and doesn't offer an alternative, they don't get my money for further development, and I'll use legacy versions of their software until I can find something to replace it with. Simple.

Comment Re:Choice is good. (Score 1) 755

So... Is there a yum or apt based distro available that hasn't drunk the systemd Kool-Aid yet and has no foreseeable plan to? I've been looking for a distro to sink my yearly OS donation fund into since the Debian dried up and CentOS looks like shakey ground. At least something to tide me over until Devuan actually puts out a stable OS so that I can see how it will work for my needs.

Comment Re: Conspiracy-theorist? (Score 1) 755

What is so hard to lock down?
HTTPd: Only run it on 80 or 443 on the system.
FTPd: only use port 21.
SSHd: only use port 22.
SMTPd: Only use port 25.
BIND: Only use port 53.
Close off every other port on the server that you don't need. If the ISP blocks the above ports, use port forwarding on the router to get around it and leave your daemons running on the standard port. There's still a good majority of us that use Linux for servers. These are the people who do not need or want systemd. These are also the people that the big distros are not listening to and making systemd a one size fits all. Keeping systemd on a desktop distro is fine by me. Keep it off my servers.

Comment Re:Why does John shut down all systemd talk? (Score 1) 716

Ok...I think you're confused here. We're talking about where the global configuration files are going. We're not talking about where the packages or the user's own files are going. What you're talking about, Linux itself has no problem doing. If you want the "more careful" approach, all you have to do is build each package from source, ensuring that you point the $PREFIX environment variable to where you want that package to install. If you want to break FHS, there's nothing in Linux that stops you. When I built my LFS system, $PREFIX was heavily used to direct packages to /usr, /usr/tools, /usr/games, /usr/bin, or wherever else I wanted the package to install to using the ./configure script for the source code before running make.

Global configuration files (what the AC above was actually talking about) , however, you don't generally want to have placed anywhere but /etc. This makes system administration considerably easier because the location of the configuration files are now known across systems.

  • Where do I go to disable root from logging in to my box through ssh? /etc/ssh/sshd_config
  • Where do I go to change a vhost in apache? /etc/apache2/apache2.conf
  • Where do I go to fix an acl problem for my dns server? /etc/bind/named.conf.options

See the pattern? If I need to configure something, I don't need to think through "ok, where did this package install its config? /usr/config? /opt/conf? /svr/<appName>/conf?" All I have to do is know the name of the daemon that needs to be configured and then I can do ls /etc...and there will either be an <appName>.conf file or a directory for <appName>. If it's not <appName> then at the very least it would be <daemonName>. Easier on the Admin which is always a good thing, especially in larger administrative environments.

Comment Re:Why does John shut down all systemd talk? (Score 1) 716

As far as hardcoding the install prefix, I can agree with you; there needs to be a way for users to change the install target. I disagree that global configuration files need to have the $Prefix as well, and I'm against that idea. A global configuration really needs to be placed in /etc as a matter of convention. If a daemon/application has multiple configuration files that require a global position where multiple users must be able to access them(ssh, apache, etc.) then a directory should be created for that daemon/app underneath the /etc directory (/etc/apache, /etc/ssh...). It's precisely the known convention because that's what system administrators are used to; having to re-learn the location of where these files are placed from system to system or even version to version is a training nightmare in a professional environment and wastes time most often in situations where time does not need to be wasted. Maybe you were thinking more of /etc$PREFIX or /etc/$PREFIX

Comment Re:superhero origin stories (Score 2) 98

In the case of the Matrix, the 3rd movie was so bad that it made most people forget that the 2nd movie was actually okay

The Matrix had no sequels you insensitive clod!

Yes, I understand that there were movies that held the name of "The Matrix" with many of the same actors, but I and many geeks like me have banished them from memory much like there was never a "Highlander II"

Submission + - NASA Releases Details of Titan Submarine Concept (gizmag.com)

Zothecula writes: Now that NASA has got the hang of planetary rovers, the space agency is looking at sending submarines into space around the year 2040. At the recent 2015 NASA Institute for Advanced Concepts (NIAC) Symposium in Cocoa Beach, Florida, NASA scientists and engineers presented a study of the Titan Submarine Phase I Conceptual Design, which outlines a possible mission to Saturn's largest moon, Titan, where the unmanned submersible would explore the seas of liquid hydrocarbons at the Titanian poles.

Submission + - LXQt 0.9 Released

jones_supa writes: The fans of lightweight desktop environments should be pleased, as LXQt, the effort to convert LXDE to use Qt, is advancing nicely. Version 0.9 has just been released. Regarding the GUI toolkit, this version moves from Qt 4 to Qt 5. LXQt 0.9 also brings in the first KDE Frameworks dependencies. KWindowSystem is a true-and-tested library for handling window events. It replaces the custom XFitMan library and will greatly help in becoming fully compatible with Wayland. KGuiAddons also replaces a hard dependency on Xlib in lxqt-panel. There is still a Qt regression which impacts drag & drop in PCManFM, but that is fixed in the upcoming Qt 5.4.1 release. Go to the download page to try out the new version. For issues, suggestions, and wild new ideas, head to the official issue tracker. Want to contribute? LXQt is always looking for new developers, now more than ever.

Submission + - How Microsoft and Intel sabataged OLPC ..

An anonymous reader writes: 'Has it been harder than I expected? Yes. But do you know why? It is not due to what I had anticipated, things like corruption and logistics. It has been due to commercial interests and press, stories like yours.'

'This is Nicholas Negropote's response to One Laptop Per Child — The Dream is Over as published by UN Dispatch here, but unlike them, OLPC News has comments open for your public input' ref
-------

"Why Microsoft Must Control One Laptop Per Child"

'Yikes, We should see how we can "target" the funds for the specific research. There is a way to position this around MSFT willing to possibly give MORE if they do research on stuff that is mutually interesting .. I think we should name our open source license and romance its creation. "Education Open Source" or something like that .. clearly we don't want a world where .. the devices being somehow locked to google search.'

'Remember that a key part of our strategy is to create a situation where even if Nick rejects us for philosophical reasons there is a long and visible history of our attempts to work with them and then we have to ask to get a license for the "open source hardware" and we will make our own offering on the commercial side.' ref

Slashdot Top Deals

This file will self-destruct in five minutes.

Working...