Re: Using memcached on localhost in WAMP/WIndows

2010-08-07 Thread Henrik Schröder
Download binaries, install as service with sc: http://support.microsoft.com/kb/251192 On Sat, Aug 7, 2010 at 08:12, CaminskyColombia camilosanche...@gmail.comwrote: Hi guys. I am interested in coding memcached within my project. I would like to use it in my localhost. I have been researching

Re: Making memchaed more secure

2010-08-07 Thread Henrik Schröder
What do you mean at startup? I click start service in my service control panel, and then... where would that warning be displayed? Seriously though, there are many ways to solve this problem, binding to private IPs is one way to do it, but not necessarily the best way, and definitely not the only

Re: Making memchaed more secure

2010-08-07 Thread Loganaden Velvindron
Here's a git-diff. It disables remote debug cachedump support. Feedback is welcomed. It works fine on our server since this morning. Sorry for not having posted this earlier. //Logan C-x-C-c Esokia Web Agency http://www.esokia-webagency.com/ diff --git a/memcached.c b/memcached.c index

Re: Making memchaed more secure

2010-08-07 Thread Loganaden Velvindron
There seems to be a problem when I pasted it in gmail. Here's a link to the git diff: http://devio.us/~loganaden/memcached.git.diff //Logan C-x-C-c Esokia Webagency On Sat, Aug 7, 2010 at 6:30 PM, Loganaden Velvindron logana...@gmail.comwrote: Here's a git-diff. It disables remote debug

Re: Using memcached on localhost in WAMP/WIndows

2010-08-07 Thread CaminskyColombia
Hey guys thanks for the suggestions. I understand the benefits of developing on a linux machine but right now I can't , I had a partitioned hd with ubuntu but I got rid of it a while ago. Now I only develop on windows. My goal is just to learn to implement memcached within my code for development

Re: Making memchaed more secure

2010-08-07 Thread Dustin
On Aug 7, 5:09 am, samwyse samw...@gmail.com wrote: I've just now suggested this on Slashdot:  At startup, issue a big multi-line warning if the IP addresses that are getting bound aren't on the loopback address or a private internet.  The private internets are defined in RFC 1918 as:      

Re: Making memchaed more secure

2010-08-07 Thread Dustin
On Aug 7, 7:52 am, Loganaden Velvindron logana...@gmail.com wrote: There seems to be a problem when I pasted it in gmail. Here's a link to the git diff: http://devio.us/~loganaden/memcached.git.diff This makes some sense to me. That functionality is kind of a plague. On one hand we've

Re: Making memchaed more secure

2010-08-07 Thread samwyse
So you don't think it's a good idea to warn idiot sysadmins if they set up memcached in the one way it was never ever ever intended to be setup? I disagree. If people would RTFM, we wouldn't need the acronym. Checking the address that is being bound would only incur a cost at startup, and

Re: Making memchaed more secure

2010-08-07 Thread Michael Shadle
memcached has never claimed to be secure in the sense you're thinking. It's a domain specific application that was designed the lightest way possible with certain expectations of its usage. Do you also want mysql to spit out a warning if its listening on a public ip? Do you want your webserver

Re: Making memchaed more secure

2010-08-07 Thread samwyse
On Aug 7, 2:17 pm, Michael Shadle mike...@gmail.com wrote: memcached has never claimed to be secure in the sense you're thinking. In what sense am I thinking? It's a domain specific application that was designed the lightest way possible with certain expectations of its usage. My

Re: Making memchaed more secure

2010-08-07 Thread dormando
On Sat, 7 Aug 2010, Dustin wrote: On Aug 7, 7:52 am, Loganaden Velvindron logana...@gmail.com wrote: There seems to be a problem when I pasted it in gmail. Here's a link to the git diff: http://devio.us/~loganaden/memcached.git.diff This makes some sense to me. That

RE: Using memcached on localhost in WAMP/WIndows

2010-08-07 Thread Walter Crosby
I wasn't suggesting that you develop your app in Linux. Go ahead, develop on Windows -- memcached you shouldn't care what OS it is on -- it's just going to take serialized objects, and store them in a key-value cache. I just think it's much easier to get it running on Linux, and has less

Re: Making memchaed more secure

2010-08-07 Thread Dustin
On Aug 7, 12:17 pm, Michael Shadle mike...@gmail.com wrote: ) a username/password in the protocol (slowing it down an negating the original purpose) Note that SASL does allow username/password and many other types of authentication. If your app uses long-lived connections (as they all

Re: Making memchaed more secure

2010-08-07 Thread Michael Shadle
On Sat, Aug 7, 2010 at 8:31 PM, Dustin dsalli...@gmail.com wrote:  Note that SASL does allow username/password and many other types of authentication.  If your app uses long-lived connections (as they all should), authentication doesn't make it more slower in any meaningful way. If using

Re: Making memchaed more secure

2010-08-07 Thread Dustin
On Aug 7, 8:49 pm, Michael Shadle mike...@gmail.com wrote: I won't be able to use remote debug or dump the cache.  You can't do it now. Brian said you can dump the cache... My notes from OSCON: you can dump your data using memdump - pulls back a meg worth of keys, also has a C API for it