Re: Lenovo and Superfish

2015-02-20 Thread David Crayford

On 20/02/2015 11:54 PM, John McKown wrote:

On Fri, Feb 20, 2015 at 9:39 AM, Mark Post  wrote:


On 2/20/2015 at 08:32 AM, David Crayford  wrote:

Barbarian! Macs are beautiful.

The product may be beautiful, but the company that produces it most
certainly is not.  Every time my wife brings up the idea of buying anything
from them I tell her "no."


Mark Post


​Well, I personally like both Windows and Mac users. Why? "Low hanging
fruit". I don't have hackers going after my Linux set up at home so long as
there are easier targets. If Linux becomes too popular, then there is
always OpenBSD or one of the other *BSD systems.


I'm a lot more worried about hackers going after my android devices than 
my Mac (or iPhone). Say what you like about Apple but they

quality control apps far better than most vendors.

I'm not a big fan of Windows because I much prefix Unix-like systems. 
But it's certainly usable and has a nice UI. And I still haven't found a 
decent
3270 emulator for Linux (or Mac) yet which I require for work. All the 
good ones are Windows only.






--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Lenovo and Superfish

2015-02-20 Thread Tom Marchant
On Fri, 20 Feb 2015 11:57:22 -0700, Mark Post wrote:

>The problem he was having isn't with the hardware, but what the 
>vendors layer on top of it.  Since I wipe any system containing 
>Windows on it and install Linux, I don't really care much about that 
>aspect.

There are problems with much of the hardware, in that some hardware 
requires proprietary drivers to run. ThinkPenguin.com has some nice 
hardware that works with free drivers. My son has a nice laptop from 
there. It came with trisquel installed.

-- 
Tom Marchant

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Lenovo and Superfish

2015-02-20 Thread John McKown
On Fri, Feb 20, 2015 at 12:57 PM, Mark Post  wrote:

> >>> On 2/20/2015 at 11:28 AM, Tomasz Rola  wrote:
> >>  ​ And I trust Linux hardware vendors more than those who get extra
> >> money for installing "adware" and the like.
> >
> > I'm afraid this is the very same hardware.
>
> The problem he was having isn't with the hardware, but what the vendors
> layer on top of it.  Since I wipe any system containing Windows on it and
> install Linux, I don't really care much about that aspect.
>
> It's actually somewhat gratifying.  More people should try it.  :)
>

​I prefer buying a "bare" machine to getting one with Windows & wiping it.
What I'd really like to do is just build my own, but my fingers are
arthritic and it is just plain too much of a bother.​ ZaReason or System76.



>
>
> Mark Post
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>



-- 
He's about as useful as a wax frying pan.

10 to the 12th power microphones = 1 Megaphone

Maranatha! <><
John McKown

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Lenovo and Superfish

2015-02-20 Thread Mark Post
>>> On 2/20/2015 at 11:28 AM, Tomasz Rola  wrote: 
>>  ​ And I trust Linux hardware vendors more than those who get extra
>> money for installing "adware" and the like.
> 
> I'm afraid this is the very same hardware.

The problem he was having isn't with the hardware, but what the vendors layer 
on top of it.  Since I wipe any system containing Windows on it and install 
Linux, I don't really care much about that aspect.

It's actually somewhat gratifying.  More people should try it.  :)


Mark Post

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Lenovo and Superfish

2015-02-20 Thread R.S.

W dniu 2015-02-20 o 19:01, Sam Siegel pisze:

On Fri, Feb 20, 2015 at 9:40 AM, R.S. 
wrote:


W dniu 2015-02-20 o 16:54, John McKown pisze:


On Fri, Feb 20, 2015 at 9:39 AM, Mark Post  wrote:

  On 2/20/2015 at 08:32 AM, David Crayford  wrote:

Barbarian! Macs are beautiful.

The product may be beautiful, but the company that produces it most
certainly is not.  Every time my wife brings up the idea of buying
anything
from them I tell her "no."


Mark Post

  ​Well, I personally like both Windows and Mac users. Why? "Low hanging

fruit". I don't have hackers going after my Linux set up at home so long
as
there are easier targets. If Linux becomes too popular, then there is
always OpenBSD or one of the other *BSD systems.


  Good reason to use zTPF. ;-)

BTW: Is there any (still used and supported) OS less popular than zTPF?


TPF is very popular with the companies which use it. :-)

All five? ;-)


--
Radoslaw Skorupka
Lodz, Poland






---
Treść tej wiadomości może zawierać informacje prawnie chronione Banku 
przeznaczone wyłącznie do użytku służbowego adresata. Odbiorcą może być jedynie 
jej adresat z wyłączeniem dostępu osób trzecich. Jeżeli nie jesteś adresatem 
niniejszej wiadomości lub pracownikiem upoważnionym do jej przekazania 
adresatowi, informujemy, że jej rozpowszechnianie, kopiowanie, rozprowadzanie 
lub inne działanie o podobnym charakterze jest prawnie zabronione i może być 
karalne. Jeżeli otrzymałeś tę wiadomość omyłkowo, prosimy niezwłocznie 
zawiadomić nadawcę wysyłając odpowiedź oraz trwale usunąć tę wiadomość 
włączając w to wszelkie jej kopie wydrukowane lub zapisane na dysku.

This e-mail may contain legally privileged information of the Bank and is 
intended solely for business use of the addressee. This e-mail may only be 
received by the addressee and may not be disclosed to any third parties. If you 
are not the intended addressee of this e-mail or the employee authorized to 
forward it to the addressee, be advised that any dissemination, copying, 
distribution or any other similar activity is legally prohibited and may be 
punishable. If you received this e-mail by mistake please advise the sender 
immediately by using the reply facility in your e-mail software and delete 
permanently this e-mail including any copies of it either printed or saved to 
hard drive.

mBank S.A. z siedzibą w Warszawie, ul. Senatorska 18, 00-950 Warszawa, 
www.mBank.pl, e-mail: kont...@mbank.pl
Sąd Rejonowy dla m. st. Warszawy XII Wydział Gospodarczy Krajowego Rejestru 
Sądowego, nr rejestru przedsiębiorców KRS 025237, NIP: 526-021-50-88. 
Według stanu na dzień 01.01.2015 r. kapitał zakładowy mBanku S.A. (w całości 
wpłacony) wynosi 168.840.228 złotych.


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Lenovo and Superfish

2015-02-20 Thread Sam Siegel
On Fri, Feb 20, 2015 at 9:40 AM, R.S. 
wrote:

> W dniu 2015-02-20 o 16:54, John McKown pisze:
>
>> On Fri, Feb 20, 2015 at 9:39 AM, Mark Post  wrote:
>>
>>  On 2/20/2015 at 08:32 AM, David Crayford  wrote:
>>
> Barbarian! Macs are beautiful.

>>> The product may be beautiful, but the company that produces it most
>>> certainly is not.  Every time my wife brings up the idea of buying
>>> anything
>>> from them I tell her "no."
>>>
>>>
>>> Mark Post
>>>
>>>  ​Well, I personally like both Windows and Mac users. Why? "Low hanging
>> fruit". I don't have hackers going after my Linux set up at home so long
>> as
>> there are easier targets. If Linux becomes too popular, then there is
>> always OpenBSD or one of the other *BSD systems.
>>
>>
>>  Good reason to use zTPF. ;-)
>
> BTW: Is there any (still used and supported) OS less popular than zTPF?
>

TPF is very popular with the companies which use it. :-)


>
> --
> Radoslaw Skorupka
> Lodz, Poland
>
>
>
>
>
>
> --
> Treść tej wiadomości może zawierać informacje prawnie chronione Banku
> przeznaczone wyłącznie do użytku służbowego adresata. Odbiorcą może być
> jedynie jej adresat z wyłączeniem dostępu osób trzecich. Jeżeli nie jesteś
> adresatem niniejszej wiadomości lub pracownikiem upoważnionym do jej
> przekazania adresatowi, informujemy, że jej rozpowszechnianie, kopiowanie,
> rozprowadzanie lub inne działanie o podobnym charakterze jest prawnie
> zabronione i może być karalne. Jeżeli otrzymałeś tę wiadomość omyłkowo,
> prosimy niezwłocznie zawiadomić nadawcę wysyłając odpowiedź oraz trwale
> usunąć tę wiadomość włączając w to wszelkie jej kopie wydrukowane lub
> zapisane na dysku.
>
> This e-mail may contain legally privileged information of the Bank and is
> intended solely for business use of the addressee. This e-mail may only be
> received by the addressee and may not be disclosed to any third parties. If
> you are not the intended addressee of this e-mail or the employee
> authorized to forward it to the addressee, be advised that any
> dissemination, copying, distribution or any other similar activity is
> legally prohibited and may be punishable. If you received this e-mail by
> mistake please advise the sender immediately by using the reply facility in
> your e-mail software and delete permanently this e-mail including any
> copies of it either printed or saved to hard drive.
>
> mBank S.A. z siedzibą w Warszawie, ul. Senatorska 18, 00-950 Warszawa,
> www.mBank.pl, e-mail: kont...@mbank.pl
> Sąd Rejonowy dla m. st. Warszawy XII Wydział Gospodarczy Krajowego
> Rejestru Sądowego, nr rejestru przedsiębiorców KRS 025237, NIP:
> 526-021-50-88. Według stanu na dzień 01.01.2015 r. kapitał zakładowy mBanku
> S.A. (w całości wpłacony) wynosi 168.840.228 złotych.
>
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Lenovo and Superfish

2015-02-20 Thread R.S.

W dniu 2015-02-20 o 16:54, John McKown pisze:

On Fri, Feb 20, 2015 at 9:39 AM, Mark Post  wrote:


On 2/20/2015 at 08:32 AM, David Crayford  wrote:

Barbarian! Macs are beautiful.

The product may be beautiful, but the company that produces it most
certainly is not.  Every time my wife brings up the idea of buying anything
from them I tell her "no."


Mark Post


​Well, I personally like both Windows and Mac users. Why? "Low hanging
fruit". I don't have hackers going after my Linux set up at home so long as
there are easier targets. If Linux becomes too popular, then there is
always OpenBSD or one of the other *BSD systems.



Good reason to use zTPF. ;-)

BTW: Is there any (still used and supported) OS less popular than zTPF?

--
Radoslaw Skorupka
Lodz, Poland






--
Treść tej wiadomości może zawierać informacje prawnie chronione Banku 
przeznaczone wyłącznie do użytku służbowego adresata. Odbiorcą może być jedynie 
jej adresat z wyłączeniem dostępu osób trzecich. Jeżeli nie jesteś adresatem 
niniejszej wiadomości lub pracownikiem upoważnionym do jej przekazania 
adresatowi, informujemy, że jej rozpowszechnianie, kopiowanie, rozprowadzanie 
lub inne działanie o podobnym charakterze jest prawnie zabronione i może być 
karalne. Jeżeli otrzymałeś tę wiadomość omyłkowo, prosimy niezwłocznie 
zawiadomić nadawcę wysyłając odpowiedź oraz trwale usunąć tę wiadomość 
włączając w to wszelkie jej kopie wydrukowane lub zapisane na dysku.

This e-mail may contain legally privileged information of the Bank and is 
intended solely for business use of the addressee. This e-mail may only be 
received by the addressee and may not be disclosed to any third parties. If you 
are not the intended addressee of this e-mail or the employee authorized to 
forward it to the addressee, be advised that any dissemination, copying, 
distribution or any other similar activity is legally prohibited and may be 
punishable. If you received this e-mail by mistake please advise the sender 
immediately by using the reply facility in your e-mail software and delete 
permanently this e-mail including any copies of it either printed or saved to 
hard drive.

mBank S.A. z siedzibą w Warszawie, ul. Senatorska 18, 00-950 Warszawa, 
www.mBank.pl, e-mail: kont...@mbank.pl
Sąd Rejonowy dla m. st. Warszawy XII Wydział Gospodarczy Krajowego Rejestru 
Sądowego, nr rejestru przedsiębiorców KRS 025237, NIP: 526-021-50-88. 
Według stanu na dzień 01.01.2015 r. kapitał zakładowy mBanku S.A. (w całości 
wpłacony) wynosi 168.840.228 złotych.


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Lenovo and Superfish

2015-02-20 Thread Tony Harminc
On 20 February 2015 at 08:00, Jon Butler  wrote:
> In fairness, since yesterday was Chinese New Year, Lenovo have decided to 
> come to the party after all:
>
> http://support.lenovo.com/us/en/product_security/superfish

Who knew - Lenovo has a Z-Series!

Tony H.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Lenovo and Superfish

2015-02-20 Thread Tomasz Rola
On Fri, Feb 20, 2015 at 06:44:18AM -0600, John McKown wrote:
> On Thu, Feb 19, 2015 at 5:32 PM, Paul Gilmartin <
> 000433f07816-dmarc-requ...@listserv.ua.edu> wrote:
> 
> > Here we go again:
> > http://www.wired.com/2015/02/lenovo-superfish/
> >
> > And, a classic (Ken Thompson ca. 1984):
> > http://cm.bell-labs.com/who/ken/trust.html
> >
> > -- gil
> >
> >
>
> ​The above is why I use Linux and not Windows, except when work
> forces me to use Windows. Granted, I do not _personally_ vet that
> Fedora 21 and all the stuff in it are valid. But there are a _lot_
> of people who, together, do tend to review all the stuff in those
> packages. So I trust them _more_ that I trust MS and other
> vendors.

My current attitude towards Linux, despite using it since 1994 (I
guess, memory blur, where are the notes?..) is, that recent almost
univocal adoption of systemd smells [1]. I just cannot tell if it
smells roses or fish. I am looking at FreeBSD now, with
OpenSolaris/OpenIndiana/etc as possible "plan C". I guess/hope I won't
have too consider "plan D" for at least five years, but, of course I
am always interested in learning.

> ​ And I trust Linux hardware vendors more than those who get extra
> money for installing "adware" and the like.

I'm afraid this is the very same hardware.

> If you like this problem, you'll love the Samsung "Smart TV" with
> its ad-injection during the play of _your_ personally recorded
> videos. "OOPS, how did that get into the field? It was just for
> internal testing. Honest!  , , , " I may need
> to end up wiping _all_ my home routers and installing OpenWRT. Those
> vendors are likewise "suspect".  ​
> 

Perhaps the future of the successful few is to go the way they did it
in "Battlestar Galactica" (a recent one, I haven't seen 1970-ish
version). I.e. "I want my computers/hardware to be dumb and not
talking to each other". Of course, model 6 is excluded from this harsh
rule.

[1] Last time I looked, only two big distros stayed away, or rather,
Gentoo said I would be able to choose between initd and systemd, and
Slackware claimed they won't adopt systemd. Others switched, are going
to switch or are closing their shop. So there are some promises right
now, but longer term, I think the game is over in this field. Debian,
which I regarded highly enough to use from 1997 on, decided to toast
itself. Cut the ropes! ;-/

Morale: trust, what's this?

-- 
Regards,
Tomasz Rola

--
** A C programmer asked whether computer had Buddha's nature.  **
** As the answer, master did "rm -rif" on the programmer's home**
** directory. And then the C programmer became enlightened...  **
** **
** Tomasz Rola  mailto:tomasz_r...@bigfoot.com **

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Lenovo and Superfish

2015-02-20 Thread John McKown
On Fri, Feb 20, 2015 at 9:39 AM, Mark Post  wrote:

> >>> On 2/20/2015 at 08:32 AM, David Crayford  wrote:
> > Barbarian! Macs are beautiful.
>
> The product may be beautiful, but the company that produces it most
> certainly is not.  Every time my wife brings up the idea of buying anything
> from them I tell her "no."
>
>
> Mark Post
>

​Well, I personally like both Windows and Mac users. Why? "Low hanging
fruit". I don't have hackers going after my Linux set up at home so long as
there are easier targets. If Linux becomes too popular, then there is
always OpenBSD or one of the other *BSD systems.


-- 
He's about as useful as a wax frying pan.

10 to the 12th power microphones = 1 Megaphone

Maranatha! <><
John McKown

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Lenovo and Superfish

2015-02-20 Thread Mark Post
>>> On 2/20/2015 at 08:32 AM, David Crayford  wrote: 
> Barbarian! Macs are beautiful.

The product may be beautiful, but the company that produces it most certainly 
is not.  Every time my wife brings up the idea of buying anything from them I 
tell her "no."


Mark Post

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Lenovo and Superfish

2015-02-20 Thread David Crayford

On 20/02/2015 9:22 PM, Shane Ginnane wrote:

On Fri, 20 Feb 2015 20:58:35 +0800, David Crayford wrote:


But lately I've turned into a Mac weenie! I can do all my
favorite *nix stuff using brew and I've got a much better UI compared to
Ubuntu.

Philistine.
I place Apple below M$oft.


Barbarian! Macs are beautiful.


One day whilst looking at tracing some kernel level interaction a few years 
back, I stumbled upon the following. The author demands attention:
https://blogs.oracle.com/ahl/entry/mac_os_x_and_the


What do you consider worse for the average user. A vendor blocking 
function or the likes of the Windows API being so powerful that a half 
decent C/C++ programmer can use the debugging
hooks to insert malicious code into a running process.  I used to think 
the black hats were a bunch of genius coders bunkered down with a bunch 
of crypto books and then I discovered they were

just using an API. Sigh!



Wow. So Apple is explicitly preventing DTrace from examining or recording data 
for processes which don't permit tracing. This is antithetical to the notion of 
systemic tracing, antithetical to the goals of DTrace, and antithetical to the 
spirit of open source.


Shane ...
(I deleted my comments so this would pass corporate nanny-ware)

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Lenovo and Superfish

2015-02-20 Thread Shane Ginnane
On Fri, 20 Feb 2015 20:58:35 +0800, David Crayford wrote:

>But lately I've turned into a Mac weenie! I can do all my
>favorite *nix stuff using brew and I've got a much better UI compared to
>Ubuntu.

Philistine.
I place Apple below M$oft.

One day whilst looking at tracing some kernel level interaction a few years 
back, I stumbled upon the following. The author demands attention:
https://blogs.oracle.com/ahl/entry/mac_os_x_and_the


Wow. So Apple is explicitly preventing DTrace from examining or recording data 
for processes which don't permit tracing. This is antithetical to the notion of 
systemic tracing, antithetical to the goals of DTrace, and antithetical to the 
spirit of open source.


Shane ...
(I deleted my comments so this would pass corporate nanny-ware)

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Lenovo and Superfish

2015-02-20 Thread Jon Butler
In fairness, since yesterday was Chinese New Year, Lenovo have decided to come 
to the party after all:

http://support.lenovo.com/us/en/product_security/superfish

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Lenovo and Superfish

2015-02-20 Thread David Crayford

On 20/02/2015 8:44 PM, John McKown wrote:

On Thu, Feb 19, 2015 at 5:32 PM, Paul Gilmartin <
000433f07816-dmarc-requ...@listserv.ua.edu> wrote:


Here we go again:
 http://www.wired.com/2015/02/lenovo-superfish/

And, a classic (Ken Thompson ca. 1984):
 http://cm.bell-labs.com/who/ken/trust.html

-- gil



​The above is why I use Linux and not Windows, except when work forces me
to use Windows.


Same here. I've got a Windows laptop for work which dual boots to 
Ubuntu. But lately I've turned into a Mac weenie! I can do all my 
favorite *nix stuff using brew and I've got a much better UI compared to 
Ubuntu.







--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Lenovo and Superfish

2015-02-20 Thread John McKown
On Thu, Feb 19, 2015 at 5:32 PM, Paul Gilmartin <
000433f07816-dmarc-requ...@listserv.ua.edu> wrote:

> Here we go again:
> http://www.wired.com/2015/02/lenovo-superfish/
>
> And, a classic (Ken Thompson ca. 1984):
> http://cm.bell-labs.com/who/ken/trust.html
>
> -- gil
>
>
​The above is why I use Linux and not Windows, except when work forces me
to use Windows. Granted, I do not _personally_ vet that Fedora 21 and all
the stuff in it are valid. But there are a _lot_ of people who, together,
do tend to review all the stuff in those packages. So I trust them _more_
that I trust MS and other vendors. ​
And I trust Linux hardware vendors more than those who get extra money for
installing "adware" and the like. If you like this problem, you'll love the
Samsung "Smart TV" with its ad-injection during the play of _your_
personally recorded videos. "OOPS, how did that get into the field? It was
just for internal testing. Honest! , , , " I may need
to end up wiping _all_ my home routers and installing OpenWRT. Those
vendors are likewise "suspect".
​


-- 
He's about as useful as a wax frying pan.

10 to the 12th power microphones = 1 Megaphone

Maranatha! <><
John McKown

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Lenovo and Superfish

2015-02-19 Thread Shane Ginnane
On Thu, 19 Feb 2015 17:32:53 -0600, Paul Gilmartin wrote:

>Here we go again:
>http://www.wired.com/2015/02/lenovo-superfish/

The gall of these people is unbelievable.
Hop on a plane that uses gogo for onboard wifi with one of these, and *really* 
expose yourself to a man-in-the middle attack.

Shane ...

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN