6,279 reputation
42339
bio website kilroy.chi.il.us
location Illinois
age 49
visits member for 5 years, 4 months
seen 5 hours ago

Physicist by training, now a programmer by choice. My languages of preference are Java and C, although I am also skilled in C# and many assembly languages, and competent in Perl, general shell scripting, and a handful of other languages I use less often. I can speak basic SQL. I write my HTML by hand and prefer table-free page layout.

I use Linux by preference, but also develop extensively under Windows. I've developed under various embedded and custom OS's and RTOS's (primarily Microware OS-9 and VxWorks), assorted UNIXes, VAX/VMS, and assorted Windows releases. I've played with RSTS/E and a few other operating systems that are unknown today.

My home website is pretty sparse, but will some day be populated. Really.


Nov
6
comment “POSSIBLE BREAK-IN ATTEMPT!” in /var/log/secure — what does this mean?
What is the downside to disabling sshd reverse lookups on a server connected to the public Internet? Is there any upside at all to leaving this option enabled?
May
4
comment In a Win7 computer that belongs to a domain, how do I append DNS search list entries?
I'm not trying to circumvent anything. I have full admin rights on this development box, but I am not the network admin for this network. If my question is more appropriate for SuperUser, I'd expect it to get moved there, not closed as "not constructive."
May
4
comment In a Win7 computer that belongs to a domain, how do I append DNS search list entries?
It's true that I could have worked around this apparent missing feature of Windows by manually applying my DNS, including the search list. Except oddly, even doing that the search list configuration is greyed out. I can change anything else in there except that, via the UI you show above.
May
1
comment In a Win7 computer that belongs to a domain, how do I append DNS search list entries?
Your answer lead me via Google to something that seems to work. I edited the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\SearchList, then I did ipconfig /registerdns, and after that point I saw the new search list entry.
May
1
comment In a Win7 computer that belongs to a domain, how do I append DNS search list entries?
I have the ability to edit my hosts file. But if I go that route, I have to edit this file regularly as servers are added and removed from the lab domain. If I can add a DNS search list entry, I only have to do that one time and it works forever, for every lab server ever added to that domain.
May
1
comment In a Win7 computer that belongs to a domain, how do I append DNS search list entries?
So there is no command-line utility or WSH way to append to the DNS search list?
May
1
comment In a Win7 computer that belongs to a domain, how do I append DNS search list entries?
People are voting to close this as "not constructive" which I don't understand. I'm not asking, "What is the best practice." I'm asking, "How do you do this very specific configuration in Windows 7?" How is that not constructive, or likely to elicit discussion or debate?
May
1
comment In a Win7 computer that belongs to a domain, how do I append DNS search list entries?
The goal is that I don't have to type the fully-qualified name for certain lab domains.
Apr
8
comment How do you find what process is holding a file open in Windows?
sure this works for a text file. It doesn't care what kind of file is open.
May
6
comment Hard drive read errors that… stop?
If the bad blocks found were all successfully mapped out, and no additional sectors went bad, then your results are what you expect to see. Your last paragraph is still the right answer though.
Oct
18
comment Do you think NAT is largely responsible for the delay in IPv6 adoption?
@Richard Gadsen, how can you have a full NAT firewall that is default -allow? If an incoming connection arrives to the firewall itself (which isn't running any services, just the firewall) it has no destination in its NAT tables to send the connection. It's still a default-deny for new incoming connections. Clarification: NAT is not a great security tool for a business. It's more reasonable for a home where the average user will use the default config. For a business, it is still "belt-and-suspenders," an extra layer of default-unreachability for internal machines.
Oct
18
comment Do you think NAT is largely responsible for the delay in IPv6 adoption?
@Richard Gadsen, @Cristian Ciupitu, I understand what you both say. I'm just reacting to the absolutist statement that NAT does not in any way enhance security, which is silly.
Jul
15
comment Why can't I print from Windows on CUPS from a single application?
What authentication does your CUPS require for printing to this printer? Can anyone who knows the IP address print to it? The one server that has this problem, is it a Vista or XP one? Most likely the problem is some configuration setting for IE on that one server.
Jul
3
comment Why are Linux-based operating systems considered safer than Windows?
OK, I've been using Linux for 12+ years and UNIX-like operating systems for even longer. As much as I like Linux, you cannot say that it has a stronger permissions system than Windows. It has a better security model than early Windows versions (i.e., don't always be admin), but WinNT and later has a strong permissions system that just wasn't used to good effect. Recent Linux versions have selinux, which is even stronger, but this is a relatively recent (if very powerful) addition.
Jun
25
comment Unable to understand the connections between FQDN and DNS
Most likely, that means you DO NOT have a search list. If you do not have a search list, then you must always provide the FULL domain name of a computer you want to reach. The nameserver lines show the IP addresses (NEVER NAMES!!!) of the DNS servers you will connect to to resolve names.
Jun
23
comment Silent Install of MSI
Not all MSIs will allow silent installation, I don't think.
Jun
22
comment Disable blue LED on a LaCie 1TB High-Speed USB 2.0 external drive
If the LED is annoying enough, just remove it! (Or put opaque tape over it.)
Jun
20
comment How do you secure the “gallery” photo gallery?
+1. I didn't know about the -Z option to ps. Looking, there is very very little running as not-me that is unconfined. It's mostly bash (from a single su session) and a few custom scripts that are not internet-facing. Everything else running that is not from my non-root GNOME session is confined.
Jun
17
comment Which parts to skimp on when buying a server?
I honestly don't understand the deliberate culture of vastly underpowered video cards for servers. It's not like I'm suggesting people spend $100 on a server video card.
Jun
16
comment What does “<service_name> dead but subsys locked” mean?
Ah, and running the status not as root, you may not have had read access to /var/run/memcached.pid, thus, the command assumed the subsystem was dead because it couldn't locate the correct process.