|
Was driven by an eccentric scientist who only used it on a special track to drive into the past. 
Freedom is the freedom to say that two plus two make four. If that is granted, all else follows.
-- 6079 Smith W.
|
|
|
|
|
No drivers license. I was talking about the missus:
Mike Hankey wrote: good shape, low mileage.
Only driven from time to time.
Bastard Programmer from Hell 
"If you just follow the bacon Eddy, wherever it leads you, then you won't have to think about politics." -- Some Bell.
|
|
|
|
|
in the future or in the past?
M.D.V. 
If something has a solution... Why do we have to worry about?. If it has no solution... For what reason do we have to worry about?
Help me to understand what I'm saying, and I'll explain it better to you
Rating helpful answers is nice, but saying thanks can be even nicer.
|
|
|
|
|
Heavy.
|
|
|
|
|
Systems mostly on CentOS, mostly Java applications, mostly Postgresql databases.
Compliance requires separating infrastructure operations, application operations, computer operations to be separated.
This means that an infrastructure operator is su to be root on a server, an app operator su to be root on a database and have some su rights do keep the apps running, and a computer operator is a lesser mix of the two.
Root password and some high priority passwords managed by Password Manager Pro, released after a four-eye check, and changed by PMP after use.
But this is not enough. Looks like the gold old four eyes rule is required.
Is there a solution to restrict OS/DB to require the consent of two people to execute something with raised privileges? Like launching a nuke-tipped missile with two keys.
|
|
|
|
|
Peter Adam wrote: Is there a solution to restrict OS/DB to require the consent of two people to execute something with raised privileges? Like launching a nuke-tipped missile with two keys.
Yes. We call it "common sense", as you would.
Bastard Programmer from Hell
"If you just follow the bacon Eddy, wherever it leads you, then you won't have to think about politics." -- Some Bell.
|
|
|
|
|
Eddy Vluggen wrote: We call it "common sense", as you would.
Though, of course, "common sense" is an illusion. 
EDIT
Came back to say :
The illusion is shattered the instant anything goes wrong and managers become involved.
After that it's all just finger-pointing.
|
|
|
|
|
raddevus wrote: The illusion is shattered the instant anything goes wrong and managers become involved
Managers being famous for not having the common sense.
raddevus wrote: After that it's all just finger-pointing
If you a manager yes. All others keep records.
raddevus wrote: Though, of course, "common sense" is an illusion.
We just call them Americans 
Bastard Programmer from Hell
"If you just follow the bacon Eddy, wherever it leads you, then you won't have to think about politics." -- Some Bell.
|
|
|
|
|
raddevus wrote: The illusion is shattered the instant anything goes wrong and managers become involved.
After that it's all just finger-pointing.
That's after it facked up and becoming a Hollywood movie.
Common sense says not to be an American. Ehr.. I meant, "before you fack up".
Nearly the same.
Bastard Programmer from Hell
"If you just follow the bacon Eddy, wherever it leads you, then you won't have to think about politics." -- Some Bell.
|
|
|
|
|
There is no common sense nor trust when the daily amount of just the change money measured in 1E3 €s...
|
|
|
|
|
Only if you trust $.
Those that do, have trouble with intrinsic value. The paper, EU or US, has none. More debt in those currencies being created, to "save the economy".
ha 
Bastard Programmer from Hell 
"If you just follow the bacon Eddy, wherever it leads you, then you won't have to think about politics." -- Some Bell.
|
|
|
|
|
Much like "We had to destroy the village to save it."
|
|
|
|
|
|
I have been. Only once ofcourse, one doesn't keep making the same errors.
So. I have to say no to your proposal
Bastard Programmer from Hell
"If you just follow the bacon Eddy, wherever it leads you, then you won't have to think about politics." -- Some Bell.
|
|
|
|
|
How many people stood there to watch and testify that you both said "Yes"? Was it about $?
|
|
|
|
|
You pissed me off with your question.
Peter Adam wrote: How many people stood there to watch and testify that you both said "Yes"?
Without parents, just two. Of those two, she facked one.
Will not make that mistake again.
Bastard Programmer from Hell
"If you just follow the bacon Eddy, wherever it leads you, then you won't have to think about politics." -- Some Bell.
|
|
|
|
|
Peter Adam wrote: Is there a solution to restrict OS/DB to require the consent of two people to execute something with raised privileges? Like launching a nuke-tipped missile with two keys
This is an interesting idea.
It's almost the idea of two-factor but with an additional check that the person with the 2nd factor is not the same person who attempted the login.
So Op1 attempts to login.
Op2 gets a 2-factor notification on her phone and has to accept.
|
|
|
|
|
We had 2 people with half the password each, then they needed backup for leave/sick events.
This naturally was a complete PITA when SA access was required and that invariably occurred when you could not locate both halves of the password. So it became a team of people for each half password at which point the entire thing became a farce.
Never underestimate the power of human stupidity -
RAH
I'm old. I know stuff - JSOP
|
|
|
|
|
Back in the mid 1980s, very early days of EFT, I was involved in setting up the crypto infrastructure for a major independent player. Before the days of Diffie-Hellman etc, there was a requirement for link master keys (typically 2 x 56bit DES for EDE) to be manually entered in the other party's crypto box.
At least half of the big 4 banks just gave the left and right halves of each key to different people.
... Oh nice. I've got one half. I only need to try about 2^28 possibilities (which was just about feasible in those days) to crack the whole thing.
They got all s*itty when we insisted on three full length components to be entered separately, and XORed inside our secure box to make the actual key.
Reason for 3 not 2? So there is no leakage through the parity bits in the key. Each component can be odd parity, like the final key.
Drove them nuts, but afaik it was never compromised during the 15+ year lifetime of that system.
By the time the successor system was implemented, the whole crypto (and comms) landscape had shifted.
Cheers from an(other) old fart,
Peter
Software rusts. Simon Stephenson, ca 1994. So does this signature. me, 2012
|
|
|
|
|
I recall that MS SQL can be setup with privileges like that out of the box, if that wasn't possible you would just have to get some decent programmer(s) to write your database authorization code for you. This can be done by having users log into the auth server before they can access the database. Of course then you have to consider how that system could potentially be compromised to gain unauthorized access to the database.
|
|
|
|
|
Giant apologizes: [^]
Reminds me of the old Russian fable of the scorpion and the frog ... scene from Orson Welles’ film 'Mr. Arkadin:' [^].
In a 1958 interview with Cahiers [^], Orson comments:Quote: CAHIERS: We’ve been very struck in your work, from The Lady from Shanghai to Mr. Arkadin and a little less explicitly, perhaps, in Touch of Evil, by the theme of character. Doesn’t the scorpion say, “It’s my character”? Is that an excuse that the scorpion makes to the frog? We would like to know how your own ideas relate to the story of the scorpion, because basically what we have been talking about does pose, does it not, the problem of the frog and the scorpion?
ORSON WELLES: Oh yes, well, there’s a lot to say about that. Point number one: the frog was an idiot.
CAHIERS: So you think there was culpable stupidity on the part of the frog?
ORSON WELLES: Yes indeed!
CAHIERS: And do you consider that the scorpion was evil?
ORSON WELLES: Neither of them was any good. But seriously. I must insist that I was very serious when I said that I not only put forward the best possible arguments for my enemies being as they are, but I also put into their mouths the best possible justifications I can find for their point of view. Nevertheless I do not feel that one can justify one’s acts by saying it is one’s character, although I admit that it is very tempting to do so. There is nothing more attractive than a bastard admitting he’s a bastard. A man can be anything, a swine, a murderer, he can admit to me that he’s killed three people�the moment he admits it he’s my brother, because he is frank. I believe that frankness does not excuse crime, but it makes it very seductive, gives it attraction. It is nothing to do with morality; it’s a question of what is and is not attractive.
«One day it will have to be officially admitted that what we have christened reality is an even greater illusion than the world of dreams.» Salvador Dali
|
|
|
|
|
This more a discussion if free will exists, and there's no proof for free will.
Your body/reptile brain will give an initial evaluation, based on biology, chemistry and neurons; your ape-brain adds experience to that to evaluate it. Then you become aware in your brain, there's a "decision". One that's already made by the evaluation of both brains. Here, guilt or upbringing may change it a bit, but not by much.
Being sorry has nothing to do with the first steps; it is part of upbringing (which also happens to adults). If you go to jail often, that might become a part of your fenotype and you may base your actions on it; not inherently good or bad, just social acceptable or not. Those who keep failing at being socially acceptible (regardless of whether social acceptible is "good" or "justified"), will be thrown out of the group, to protect the group.
Making it a self-regulating system, based on our collective experience and our different morals.
..or to simplify; the dog might actually miss its owner, despite what it did  Would I trust/adopt the dog? Hell no!
Bastard Programmer from Hell
"If you just follow the bacon Eddy, wherever it leads you, then you won't have to think about politics." -- Some Bell.
|
|
|
|
|
Eddy Vluggen wrote: Would I trust/adopt the dog? Hell no!
Damn right. Here, the dog would be put down by order of a court, if not voluntarily.
I know the dog only did what it's owner (failed to) train it to do, and it's not "the dog's fault" - but it's killed a human, and that's a red line in the sand.
"I have no idea what I did, but I'm taking full credit for it." - ThisOldTony
"Common sense is so rare these days, it should be classified as a super power" - Random T-shirt
AntiTwitter: @DalekDave is now a follower!
|
|
|
|
|
OriginalGriff wrote: Damn right. Here, the dog would be put down by order of a court, if not voluntarily.
Ditto here. Bad upbringing makes aggressive dogs and at the first offence, they put down because "rehabilitation" is often not possible, and expensive if it is.
..but any animal is a sum of genotype and fenotype; I'll not blame any animal for doing as it did, as it acted on those. A human? I often do; we actively take memories and morally value them when in rest. We (often) know the consequences before we act.
Bastard Programmer from Hell
"If you just follow the bacon Eddy, wherever it leads you, then you won't have to think about politics." -- Some Bell.
|
|
|
|
|
Yep.
I've known Rottweilers that were really friendly, that you could leave with annoying kids and the kids would be fine when you came back (the dog might be scarred for life however).
Training and upbringing are the key - get it right and all dogs are fine*. Don't bother, or get it wrong and ... you get a killer. Trouble is, a lot of people want a "vicious dog" to make them look "harder". 
* Except possibly Dobermans. Every one of those I've met has been on the edge of freaking out ...
"I have no idea what I did, but I'm taking full credit for it." - ThisOldTony
"Common sense is so rare these days, it should be classified as a super power" - Random T-shirt
AntiTwitter: @DalekDave is now a follower!
|
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
