Image 01 Image 02

Archive for March, 2006

To fall or not to ..

Wednesday, March 22nd, 2006

A couple of days EARLIER i was reading to a girls weblog, which talked about breakups and possibility of reunions.
At the start let me declare i still very firmly believe in the theory of (firstlove–>marriage).For a relationship to work ,You have to make it work .

But somehow today as i look around myself, People seem to move in and out of relationships easily enough.probably its the lack of a real attitude in to a relationship or they have a deep faith in indian population rate.You know, there never is going to be a shortage of boys or girls.

There can be many reasons why a relationship wont work, but i always thot there is one reason why u shud make a relationship work and the reason is none other than YOURSELF.

And past scars make you not go back to the previous relations.And most of the time people end up crying for the lost relations than to make it work again. I surely feel no shame in goingback to your past and try and see if you can correct them,no matter how harsh it and afterall the person u loved is just another person.And mind you i say all this assuming “You still love the person “.Which is true in most cases, the first love ceases to go out of memory. and all other attempts at falling become more a medicine for the past hurtings than just a genuine love.

And in most cases if ou are weak enough , umight just be taken for a emotional roller coster again.This is one of the first reasons i always believed one should try and look to see through your first love i remember the first time i saw someone comeup like this ,it was with goddess.
and trust me ,the minute she let people know she had brokenup, and given the fact she is very pretty ,Suddenly a whole swarm of would be emerged and everyone was sweet atleast thats how they sound.For a second she did confide , she might fall in for someone , and i realise how scared i was.For i knew most o fthese guys here and i also knew what men can do with a gal who is weak enough on morale.and it took some long hours of talks to get her back to thinking abt her ex :) an dit did work.They came together and the love only increased. And if hs ehad chosen ,and the reason she gave for the split,inability of men to commit.well thats something which comes upon in every phase and its jus so easy to throw away a relationship in words and i am sure its 1000 times difficult to really discard it.

In a case where the split is really an uncommited love,then the option obviosuly is to look for another love .But how do u do it ?

Sad and yet a harsh reminder…

Wednesday, March 22nd, 2006

Married at the age of four, an Afghan girl was subjected to years of beatings and torture, finally escaping to discover that within all the world’s cruelty, there is also some kindness.

Afghanistan - Eleven-year old Gulsoma lay in a heap on the ground in front of her father-in-law. He told her that if she didn’t find a missing watch by the next morning he would kill her. He almost had already.

Enraged about the missing watch, Gulsoma’s father-in-law had beaten her repeatedly with a stick. She was bleeding from wounds all over her body and her right arm and right foot had been broken.

Read th erest of story here

Sun comes down to GPL !!!!

Wednesday, March 22nd, 2006

Its official.. you can get the source code to Sun’s Ultra T1 chip and its even gpl’d … no its not in C/C++ or Perl or even java so don’t expect to compile it… its in Verilog

So finally we have the SUN coming heavily on to FOSH :p he he free and Opensource hardware :D

Get the Verilog code here

SUDO magic !! :)

Wednesday, March 22nd, 2006

In Mac OS X, the root account is disabled by default. The first user account created is added to the admin group and that user can use the sudo command to execute other commands as root. The conventional wisdom is that sudo is the most secure way to run root commands, but a closer look reveals a picture that is not so clear.
What you get with sudo

What are you really gaining by using sudo in the default Mac OS X configuration? First, you gain some comfort that nobody can login as root, either locally or remotely via SSH or FTP and tamper with your machine. Second, you get a log entry in /var/log/system.log every time sudo is used showing you who used it and what command was executed. These appear good enough reasons to endure the slight inconvenience of using sudo.

However, the way sudo is configured out of the box, you only need to enter your own password for authentication. This means that if someone guesses your password or steals it (and has access to it locally or via SSH), they can take over your box just as if you had root enabled.

Worse, if you execute sudo -s to start a root shell, the only thing that shows up in your system.log is this:

Mar 20 07:49:12 sudo: username : TTY=ttyp3 ; PWD=/Users/
username ; USER=root ; COMMAND=/bin/bash

Every other command after starting a root shell does NOT get logged at all. All you can tell from this is when someone started the root shell. Whatever happened after that is a mystery. The same problem exists if a command is executed that permits shell escapes like many text editors, telnet programs, etc. So, in fact, using sudo has gained us absolutely nothing over enabling and using root.

These deficiencies can be mitigated, and we’ll get to that later.
Securing the root account

If you enable the root account, there are a couple of precautions you should take. First, give root a different password than your user account.

You can prevent root logins to SSH by changing this line in the sshd configuration file, /private/etc/sshd_config:
#PermitRootLogin yes
to this:
PermitRootLogin no

Then, stop and restart SSH in System Preferences / Sharing. To go one step further, disable all password logins to SSH and allow only public key authentication. This is how I configure my Linux servers. There are many fine resources on the web that describe the gory details of using SSH public key authentication.

FTP logins by root are disabled by default since the root account is listed in the /etc/ftpusers file. Users listed in that file are not allowed to login using FTP.

Finally, disable user access to sudo by commenting out the %admin line in /private/etc/sudoers:
#%admin ALL=(ALL) ALL

With two minor configuration changes, we have a system that is arguably more secure than the default system using sudo. Why? Because if someone guesses or steals your user password, they can’t use sudo to take over the machine. They still have to guess the root password. Of course, if they have a local account, they may be able to use a privilege escalation vulnerability to gain root access, but that is an issue for Apple.
Back to sudo

Is there a way to make the sudo configuration more secure? There are many things that can be done to improve the default settings. Here are a couple.

The most obvious change is to require a different password than your user password to authenticate. This can be done while keeping root logins disabled with a little trickery. First, enable the root account, change the root password, then use Netinfo Manager to change the root shell to /usr/bin/false. Any attempt to login as root will immediately end. Then, you can force sudo to require the root password by adding this line to /private/etc/sudoers:
Defaults:ALL rootpw

Another security enhancement is to set up restrictions by user, and listing specific commands that are allowed to be run using sudo. By limiting the commands that can be run, you can limit the damage that can be done by a user account. This means changing the line in /private/etc/sudoers that grants all commands to users in the admin group. Check the sudoers man page for the details.

With these changes in place, sudo becomes much more secure, and is probably safer than using root directly. You should still change the SSH configuration to deny root logins and use public key authentication.
The real story

I’ve made arguments and suggestions for using the root account and for using sudo. But consideration should be given to the role of the computer and primary user(s) before making a decision on which may work best for you.

The main goal of sudo is to allow users limited access to root commands for the purpose of distributing the sysadmin load. On a single user box, you are only distributing the load to yourself. If you take a few precautions, enabling the root user is perfectly acceptable and can be more secure than the default configuration using sudo. On a multi-user box, sudo adds value and may be the best way to go. Given its limitations, the notion that sudo is always the best choice is dubious. The real story is it depends on the configuration.

Wow ! i jump another bridge :)

Monday, March 20th, 2006

Just yesterday, life was one long Sunday afternoon as you sat by the window watching dust float past a bright blue sky. Nothing really changed. Life moved at a comfortable pace and there were always enough tomorrows to live out your king-size dreams. But alas, in a flash i couldnt exactly remember how long , it is already today and you wake up with this funny feeling of nothaving studied for the next day exam .Yes i have already planned to bunk one of them.

Yesterday I completed another year of rank carelessness, aimlessness and lackadaisical under-achievement on planet earth. For all of you who aren’t yet twenty , let me tell you it is a horrible age to be in. You actually have a more than a quarter of a century to look back on and (for quite a few of us) nothing much to say for yourself. You know dot-com millionaires, sports-icons, films-stars, IT-professionals and investment-bankers who are semi-retired with an impressive nest-egg at your age (Alright, I made up the last two! Those greedy bastards can never get enough J).

But then, all this is something I spend a few pensive minutes on, very 20th march. And at the end of it all, I just shrug my shoulders and get back to that lethargic jaywalk through life that I have always enjoyed. This year, though, something was different. I suddenly had that dreadful realization that, for all I know, I might remain a moderately successful, , five-day week, regular student at college! But what really bothered me was that, until recently, with a book, a dog, music and a cup of Coffee I would have been happy being regular Joe happily going home to the love and comfort of family and friends. Guess that is what I have forgotten somewhere in the recent past – the importance of treasuring special little moments in everyday life! It is this failure on my part – my inability to stop and take in the view - that has turned life’s uphill stretches into mere mud-tracks of worries and anxieties.

So, this 20th March, I stand tall and take a resolution. While I shall continue to compare myself to the Jobbs,Sanias and Maria Sharapovas of the world (I also reserve the right to continue ogling at the last two). I shall continue to derive my joy from the puppies, babies, butterflies, sunrises, flowers, sunsets, moonlight, trees, old books, raindrops, sunbirds, sparrows, clouds and blue skies of the world which no evil business genius has managed to put too much of a premium on. I shall dream. And in my own simple ways, I shall strive to realize those oversized dream. But when time’s waves drench my sand-castles, I shall smile indulgently and start building again. What’s a day in the beach anyway, without a few sand-castle disasters?

So, pampered with more cakes, candies and apparel than in the last several years (thanks to B), here I begin my another -outing in the beach – building castles, riding waves, living it up!!!

Four roads fork out from where he stands…
All equally alluring…

i stand ,i look and i realise i have lost
Cause is not lost .

I cry for myself and so do my kins ,
then i smile ,i know i shall rise
For i know i have earned every drop of their tears .

Well this is nothing :) just a few disconnected thoughts of a careless guy. Ramblings of an empty mind…..
Dont mind the UN-ARTISTIC sense :P he he :)

PS:
And yeah thanx for all the mails,letters calls and yeah not to forget the bday songs from babes and football :) love you all !!


FireStats icon Powered by FireStats