Jump to content

CoffeeFiend

Patron
  • Posts

    4,973
  • Joined

  • Last visited

  • Donations

    0.00 USD 
  • Country

    Canada

Everything posted by CoffeeFiend

  1. RAID 5 isn't for two drives. Think of it as RAID0 between all of your drives minus one, which is for parity. Even with 3 drives you're still "losing" 1/3 of your space. With 4 drives or more it's not too bad - the more drives, the better. With 2 drives, you can only use 0 or 1, or nothing at all.
  2. There's no registry cleaner included in Windows. And no, they're not "necessary" - windows will still run perfectly fine without one. I don't use any, and don't see why I would bother. Most often do more harm than good.
  3. So basically, you're saying he's possibly partially right, because that would have been used for a XSS attack (which is NOT a "html injection" hence making him wrong in the first place). That hardly makes him right... XSS is on the rise a lot, but it's hardly certain it was used. There are TONS of other extremely popular (MUCH more common than XSS) ways to hack web apps. You can speculate, but without logs of any kind, you're only guessing, and most likely you're totally wrong. A bit like playing lotto. The odds are very much against a single type of vulnerability. And most forum software out there does a very good job of scrubbing posts from stuff that shouldn't be there (like <script> tags and such), otherwise almost every forum out there would get hacked everyday (just how many instances of phpbb/vB/ipb are out there?) Most likely he's wrong. If one wants to find out for sure, they look at logs, or at the very least read security bulletins for exploits for the versions of the apps being used. Saying "html injection" or "XSS" is a bit like saying someone died of cancer, without having any kind of evidence - there's that slight chance you might be right, but it very well can be anything else. No point in speculating like that. Heck, there's no way to tell right now if it was even a problem with his CMS, his forum, or any other app, plugin, module or whatever he's using (not like he's positively given us a comprehensive list) and the versions. It's a bit like your garage telling you what's wrong with your car as you book the appointment, without anyone knowing what car it is and without having looked at it - just from being told "something's wrong". Again, there's that slight chance they'll have made the right guess, but... Besides, I doubt it was a forum exploit that took his CMS down...
  4. That's a gross over-simplification at best. There are many ways apps get hacked. Things like SQL injection (which a TON of web apps are vulnerable to - WAY too many), cross site scripting aka XSS (on the rise), and plain stupid app design (or lack of), leading to overly insecure code (not validating user input client AND server side - query strings included and such, before doing anything with it; often they just take the unvalidated user input and concatenate that into some SQL query - the best way to get hacked; or running commands on the box). Also server software exploits (web server, host OS, database, etc), issues with the language used (like register globals for php) or of any of dependancies used by any component of an app (libs, modules, plugins, frameworks, components, etc) including the ever so common buffer overflows, other software running on the server (like the recent cPanel exploit), or a security issue with any of the previous being used by someone else on the same [shared] box - just like the phpbb bug we've seen ago that let hackers hack every other site located on the same box (they often get root login to the database or box or such), or any of the previous be misconfigured for anyone on that box, improper ACLs letting hackers get access to files they should not be able to or even upload stuff, insecured protocols (like webdav), weak passwords on anything or broken encryption (or none at all) which is fairly common or key management problems, broken authentication mechanism, session hijacking, stupid error messages (I've seen error messages saying can't connect to some_db using login X and password Y and the like), malformed XML, path traversal, leaving config pages on the server (too accessible), issues with http headers (like splitting), etc. Most web apps developpers just don't see what's coming to them, and don't know how to protect against it (often the code is really crappy too - real hack jobs). That list is pretty much endless. Done via "html injection"? If you say so... I wish it was that simple. Securing apps is a specialty nowadays (and it pays well). And we're disregarding things like phishing, social engineering and such here too. Most people ought to be scared... A chain is only as strong as its weakest link, and very often one of the links is very weak. The majority of websites could be hacked with some knowledge and determination.
  5. Wise's "Wise for Windows Installer Getting Started Guide" would be a good place to start... They've got documentation, support, webcasts and all, and I'm sure google can find more if you try.
  6. That bashing the .NET framework in every post is getting real old ya know... Don't like it? Don't use it! Yes, it could have been written in C, but it would likely require MUCH more code, take much more time to code, code would be nowhere as elegant, etc. The world is moving to .NET VERY fast, and adoption keeps getting faster by the day. You'll have to get used to it. Lots of the new stuff (Vista techs) is .NET ONLY. Try making a WPF app with MFC. WCF is going to be very big too (in the server world at least). So please stop with the pointless bashing. There are other installers out there, use whatever works for you. Or you can make one youself since you seem to like that language so much. (I do some C for embedded projects, but other than that, .NET only! It's just SO much better.) #rootworm: Why use ini files? ini files are a relic from the Win 3.11 days... XML would have been a better pick IMO, or even a lightweight DB like SqLite, which works quite well with .NET and would let you store LOTS of stuff in a nice and simple way. I was going to ask if you'd make the source available (under GPL or what not), but seemingly you have. Kudos to you! Not many folks do that... Haven't peeked at the source yet nor tried it though, as I use my own isntaller (C# and .Net 2.0 too)
  7. I don't see how "it's not true". He said Vista is limited in transfers (but XP also is). The upgrade part is hogwash though... But then again the VM part is also true, and that's a new limitation (well, except Vista Enterprise which allows 4 instances like 2003). So more like half and half...
  8. Well, you're only going to get so much help. There are 3 main possibilities: 1) Javascript is disabled: Jeremy said check under "Tools > Internet Options > Advanced Tab" (I'm too lazy to open that POS to double check) 2) You've got an old flash player, so install it. (or perhaps you've disabled it altogether?) 3) Something is very wrong with your browser (or system), so use one that doesn't suck
  9. I haven't tried this, but here's what a quick google search found: .net fw 2.0 plugin for BartPE And WinPE. It's a beta though. There is another plugin for the old v1.1 fw too. If it works reliably, I just may start making apps for WinPE/BartPE - and using it a lot more. They REALLY shot themselves in the foot by not including .net support.
  10. cluberti: that only applies to retail version of windows. OEM version (of XP at least) are meant to be installed on ONE and single PC only, so Vista allows one more - but seemingly the limitation is there for the retails versions too. Mind you, for most people it's a non-issue even if that's how it ends up being. They get windows with their new PC, and the day it's not fast enough anymore, they just buy a new one, which also comes with Windows. This is only going to be affecting those swapping hardware a lot (and for those, it'll be a HUGE pain in the ...) There's even restrictions about running in a VM. Nice OS, but they're starting to put a lot very annoying artificial limits. Like with most protections, those who "win" are the pirates who run totally unrestricted versions and can transfer at will... Not that I condone piracy or anything, but it's just the way it is, and it's pretty sad when you think about it.
  11. Not going to bash you or anything. I actually considered buying it instead of the DS3. But it's already like 30$ more, and if I ever want to have Aero Glass running on it at some point in the future, then it'll need a good amount of video RAM. And nice fast RAM is pretty expensive. 256MB out of a 2GB kit that cost 300$+ is like 50$ worth of RAM. Add those 2 up and it's enough to buy a a PCI-E GeForce 7300 GS with 256MB of RAM. Still not a gamer's card, but I saw the onboard option as being at least no cheaper. And it's really not a bad card at all - it can do things like hardware assist of decoding high def H.264 & mpeg2 & wmv9 video and such things that the onboard likely can't. When time comes to swap it for something beefier, then that card will still be usable in another PC too (considering the card "didn't cost you anything" to start with, it's not bad at all) AFAIK, it uses a bit less power and it's a bit faster than the X300 too. Between the S3 and the DS3 IIRC, the price difference was minimal, and it will prolong the life of the board, that's why I picked the DS3. Nice, quality board that's OC friendly and all. But then again, if someone's not willing to pay the 40$ difference between the 6300 and 6400...
  12. Wow. I wish they made things clearer. That was FAR from being obvious. Thanks for the info.
  13. The action pack is 350$/year. And it's not so open as you tend to say it is: It might work for his purposes, but it's hardly the same as a "normal" license either (no production environment). And low CALs indeed... Regardless, AFAIK the Action Pack does NOT include SMS.
  14. The Geek-a-Cycle does seem over the top indeed. And likely not comfortable. Wouldn't work for me. I'd end up bagning my knees under the keyboard holder, *WAY* too far from the monitor for my old eyes (unless it comes with the Hubble telescope or a 60" screen?), and it seems VERY HARD for the back indeed - which is my primary ergonomic concern (my back screwed up totally). Never considered anything for legs like that before as I walk a lot most days. That comfortkeyboard site sure has a lot of weird keyboards. Mind you I wouldn't swap my Model M for any of them The only thing I'd consider instead's a Maltron which are too expensive (820$ for the nice one). Kind of funny though, because I likely have spent more $ on LOTS of crappy keyboards (up to 150$ a pop) than a Maltron costs, and they're likely to never be used even once again... I've just ordered a spare yesterday - buckling spring switches is where it's at!
  15. Agreed. I just decided to use the DS3 in my new rig too. The Asus boards seemed nice too, but they basically offered nothing extra besides costing a bunch more. CPU wise, I thought about going with the 6600 at first, but it seemingly doesn't OC as well (usually), and the performance gain once OC'ed seemed somewhat negligible over what you get out of a 6400 - not enough to warrant the 100$ price gap IMO. The extra multiplier is half-negated by not OC'ing as well, but it also has twice the cache - nice, but not worth 100$ more IMO. The 6400 OC'ed can beat the 6600 (even seen it beat the 6700 on some encoding benches if OC'ed a lot), which is plenty fast for most stuff already (the 6400 un-OC'ed is already fast enough as far as I'm concerned) But if the cash's burning a hole in your pocket, why not get a 6600?
  16. Quality is not much worse than the Hauppauge PVRxxx series capture cards really (well, depends on which card you're talking about, true enough). Analog capturing sucks (especially over RF lead), that's all there is to it. And indeed, it's not a tuner at all, just a composite and/or s-video input usually (coming from your cable/satellite "box", with some software having the option to use a 3rd party RF blaster to change channels sometimes) The outputs are usually pretty good quality nowadays (again, dependso on the actual vid card - some rival the very best DVD players, others aren't so great). Composite and s-video are pretty much standard, some have component too (although not always great, as it usually won't pass HD video if there is macrovision and such). Great for HTPCs (if you're into that) or to play mpeg4 stuff on TV every once in a while (the set top "divx players" are always lagging behing tech - some just plain suck) - providing your PC is close enough to TV or you've got a long enough cable... Some cards also support WinXP MCE. If the video quality of whatever card you buy is very good and that you're willing to invest some time setting up a good decoder (like nvidia purevideo + ffdshow post processing & scaling in ZoomPlayer), you can get as good or even better picture quality than most 1000$ DVD players would give you.
  17. If you can't afford the nice stuff, instead of going with nothing (or doing it all manually), you can always try to script a little something that connects to PCs (or runs as part of logon script or such) and that enumerates soft installed (or even looks for key files of apps you want to check for), then you can do some little reports from that data (in access or excel), based on the known prices of most software. Yes, it's a bit of work, and likely not exactly what you want, but it might be better than nothing, and requires very little effort/time do do.
  18. Just a quick comment. Your title says java (and you say "the Java bit" and "turn Java bk on), whereas it's a JavaScript related problem. The two may sound alike, but they're TOTALLY unrelated (making the title somewhat misleading). Jut FYI...
  19. No idea what you're seeing as hostile. I have read the irrelevant article, and it says nothing of HOW to do backups, which is exactly what he's asking for (NOT how to do planning and such). Title or not, that's NOT what he asked for, so I pointed to relevant ones (which say EXACTLY how to do it). And obviously he's already planned the most part, as he's asking how to back them up - nobody's going in blind here, you're just assuming other people are. Besides, I totally disagree on the 90% is planning part. Planning a simple DB backup is more or less trivial. Implementing (install hardware, backup software, configure it all, write sprocs and schedule stuff, etc), testing and monitoring is the tedious part. I've seen many times backups gone wrong (even if planned right), because of bad credentials, ACL issues, insufficient disk space and such, hence the testing (ensuring it actually runs when scheduled and works), and monitoring (like disk space).
  20. Hadn't bothered to jump into what would likely be a long thread, but just for fun: via chipset by any chance? (or perhaps nforce?)
  21. That sums the whole discussion up pretty good. PS CS2 upgrade (from any old version like I've said before) is 150$ - and it's TOTALLY worth the extra 50$ IMO. Yes, the full retail thing is bloody expensive, but why bother when the upgrade's cheap?
  22. Video In Video Out Yes, yet another acronym...
  23. Likely you've never used any real programming language, because you wouldn't be saying that... PHP is the worst "programming" language I've EVER seen.
  24. Showing a very complex app to old folks hardly means anything (I doubt your "test group" was statistically relevant either). Sounds like "old folks prefer PSP". I find these folks are often better served with simpler apps, like Photoshop Elements. Something with easy guides to do common tasks. Showing powerful and complex software to a bunch of older not very computer literate guys is not the way to get your program be appreciated for its powerful and advanced features. Either ways, it doesn't make the app technically better (just arguably harder/easier to use in someone's opinion) And yes, it can probably do 90% of what photoshop does 90% as good, but that last bit matters very much to a lot of folks (me included) - the old 80/20 rule. Just like OpenOffice is good enough for most basic users, but for a lot of people it's just not cutting it.
×
×
  • Create New...