朱熹之の空间

硬件按照摩尔定律每十八个月性能提高一倍，看似很好很强大！但是，我们的软件开销却是更加牛×！

不想讨论服务器，只说说桌面系统。

看看最常见的windows系列。
最古老的三个版本对系统需要很低很低，1.0只需要256kb的内存，2.10需要512kb的内存，3.1则需要80286的处理器和1mb的内存，以及6.5mb的硬盘空间。
win 95成就了比尔盖茨的全球首富地位，但只需要80386 dx的处理器，4mb的内存，以及50mb的硬盘就足够了。
win 98则只需要486dx-2/66 mhz的处理器，16mb的内存就足够了，当然，其对硬盘的开销也是直线上升到了500mb。
win me需要150mhz的pentium处理器，32mb的内存，硬盘则只需要320mb。
win 2000需要133mhz的pentium处理器，32mb内存，以及700mb的硬盘。
xp的需求则是233mhz的pentium处理器，64mb的内存，但硬盘则需要1.5gb。
vista就牛了，处理器最小需要800mhz，内存暴涨到512mb，显卡也需要32mb，硬盘则是消耗20gb。

老猪依稀还记得，当年win98和win2000都是在pentium ii 266mhz的处理器，32mb的内存上跑的，速度都还不错！后来家里的机器升级成了p4 2.4g，256mb的内存，跑xp是足够了。第一个笔记本是pentium-m 1.4g的处理器，265的内存，intel extreme集成显卡，xp也是跑起来没任何问题。【顺便扯一句题外话，对sun的java很不爽，开销实在是大啊#_#】现在的本子是compaq的3905au，turion 64 2g双核，4g内存，装vista，默认开机就吃了我1g的内存，精简后吃了600多mb。这个开销也实在是太……%￥了吧！

其实对俺们硬件资源的肆意浪费还不仅仅是windows的专利，一些类unix系统也有这个毛病【再次声明，我说的是默认安装下的桌面系统，不是服务器】。比如opensolaris 2008.05要求512mb的内存，开机就要吃掉800多mb的内存#_#

虽然说现在内存确实便宜了，200rmb就能买根kingston的2g条子，但软件供应商们也不能如此的强奸我们的钞票啊！其实，vista的难以推广不仅仅是其兼容性的问题，更重要的是其对资源的开销。我现在就拿vista来娱乐，正二八经的做事还是在solaris上。另外，像fvwm这样的轻量级桌面在类unix环境上的流行，也说明更多的用户不愿意让自己的硬件被系统占用。

希望开发商真的能给我们带来一些低开销的操作系统！但这样的希望，或许也只能是一种梦想而已！

现在的solaris（准确的说应该是sunos）有点像linux了，谁都可以在上面加个“壳”，做成自己的发行版。目前的内核是5.10，正在开发的是5.11。开源后的sunos遵循基于mpl的cddl协议，老猪比较喜欢：cddl允许公共版权使用，无专利费，并提供专利保护，可集成于商业软件中，允许自行发布许可。

sun的发行版叫做solaris，社区发行版叫做opensolaris。这两个发行版的关系就是redhat和fedora的关系，说得通俗一点，就是说sun通过opensolaris来“勾引”开发者和用户，真正的目的是推广自己的solaris，或许更重要的是卖sparc服务器吧。

opensolaris和ubuntu长得很像，目前的最新版本是2008.05，包括了内核、系统库、桌面环境，以及一个新的软件包管理系统ips（老猪写的ips使用简介）。按照目前计划，下一个发行版应该是2008.11，目前的开发是每两周进行一次更新，可以通过ips命令pkg image-update进行更新。

还有个社区的发行版叫做solaris express community edition的发行版，主要是面向opensolaris的开发者的，代号叫做nevada。这个版本是由最新的opensolaris代码构建而成的，目前每两周发布一次，发布时间为周五。其他发行版所谓的b89等内核代号就是以这个发行版来进行标识的，目前为b93。

除了opensolaris社区的“官方”发行版，还有belenix等几个不错的发行版可供大家选择。

belenix是一个livecd，目前的最新版本为0.71，是基于的b93的，桌面采用的是kde 3.5.9。此外，belenix也可以被安装到usb盘上。

nexenta的最新版本为1.01，是基于b85的，其最大特点为能够基于其对发行版进行自定义。同时，nexenta还有一个叫做nexentastor的存储管理版本。

还有个发行版叫做milax，是个很小的solaris发行版，仅有100多mb，可以安装在cd或usb上。目前最新版为0.3.1，基于b89的。milax有桌面和服务器两个版本，服务器的live cd还能运行于sparc之上，稍微大一点，但也只有230mb。

除了这几个，像martux mbe、schillix、polaris等等，也都是不错的发行版。

最后说下老猪的选择，嘿嘿，本来一直对“官方”的opensolaris比较感冒，可这个确实用起来不咋地，简直把我们当作小白鼠了，特别是2008.05版的网络管理......其他的版本嘛，背后又得不到“官方”的强有力支持，可怜啊。最后还是选择了milax，因为这似乎是目前唯一支持ips包管理系统的“非官方”发行版，哈哈，体积比较小也是优点嘛，我的usb上现在就跑这个小家伙。当然了，本子的虚拟机上还是跑opensolaris。

The popular media conception is that there is a coordinated attempt by the Chinese government to hack into U.S. computers -- military, government corporate -- and steal secrets. The truth is a lot more complicated.

There certainly is a lot of hacking coming out of China. Any company that does security monitoring sees it all the time.

These hacker groups seem not to be working for the Chinese government. They don't seem to be coordinated by the Chinese military. They're basically young, male, patriotic Chinese citizens, trying to demonstrate that they're just as good as everyone else. As well as the American networks the media likes to talk about, their targets also include pro-Tibet, pro-Taiwan, Falun Gong and pro-Uyghur sites.

The hackers are in this for two reasons: fame and glory, and an attempt to make a living. The fame and glory comes from their nationalistic goals. Some of these hackers are heroes in China. They're upholding the country's honor against both anti-Chinese forces like the pro-Tibet movement and larger forces like the United States.

And the money comes from several sources. The groups sell owned computers, malware services, and data they steal on the black market. They sell hacker tools and videos to others wanting to play. They even sell T-shirts, hats and other merchandise on their Web sites.

This is not to say that the Chinese military ignores the hacker groups within their country. Certainly the Chinese government knows the leaders of the hacker movement and chooses to look the other way. They probably buy stolen intelligence from these hackers. They probably recruit for their own organizations from this self-selecting pool of experienced hacking experts. They certainly learn from the hackers.

And some of the hackers are good. Over the years, they have become more sophisticated in both tools and techniques. They're stealthy. They do good network reconnaissance. My guess is what the Pentagon thinks is the problem is only a small percentage of the actual problem.

And they discover their own vulnerabilities. Earlier this year, one security company noticed a unique attack against a pro-Tibet organization. That same attack was also used two weeks earlier against a large multinational defense contractor.

They also hoard vulnerabilities. During the 1999 conflict over the two-states theory conflict, in a heated exchange with a group of Taiwanese hackers, one Chinese group threatened to unleash multiple stockpiled worms at once. There was no reason to disbelieve this threat.

If anything, the fact that these groups aren't being run by the Chinese government makes the problem worse. Without central political coordination, they're likely to take more risks, do more stupid things and generally ignore the political fallout of their actions.

In this regard, they're more like a non-state actor.

So while I'm perfectly happy that the U.S. government is using the threat of Chinese hacking as an impetus to get their own cybersecurity in order, and I hope they succeed, I also hope that the U.S. government recognizes that these groups are not acting under the direction of the Chinese military and doesn't treat their actions as officially approved by the Chinese government.

This essay originally appeared on the Discovery Channel website:
http://dsc.discovery.com/technology/my-take/computer-hackers-china.html or http://tinyurl.com/5lv3ac

伟大的奥运，确实是伟大，先是赛区城市要“酌情”暂缓部分手术的进行，当然是为了奥运。现在又有新规定了，全国范围内的零售药店都禁止销售含兴奋剂的药物了。猛一看，好像和我等草民无关，但仔细一看，不对啊，好多常用药都被禁售了！例如皮炎平、派瑞松、咳喘宁、大活络丸等百姓常用药被禁止销售，奥运确实伟大啊！

sohu给出了一个被禁售的常用药列表，http://2008.sohu.com/20080717/n258199118.shtml，有兴趣的朋友可以自己去看看。

sohu上还有个新闻，在http://2008.sohu.com/20080717/n258193100.shtml，叫做《药监局规定北京奥运期间停售部分药品引发争议》。截至目前，共有900余条网友的评论，当然仅有区区58条被允许显示，自己去看看，全是啥样的评论被留下来了。

奥运确实伟大！前无古人，后无来者！绝对能够与第一次火炬传递的奥运媲美了！

最近怎么啦？先是全球最大的开源站点source forge被GFW无情的封杀，tor的封杀可以说是必然的，今天又发现tcpdump也被封杀了。这不都是技术站点么？

如果硬要说和ZZ有啥联系的话，那就是sf上的notepad++了吧，人家提到了抵制下个月的那个活动，不过notepad++的首页到是能够无障碍的访问，彻底晕死了！其他的话，或许是freenet了？但freenet早就是关键字过滤了啊，也早就被封杀了啊！

至于人家tcpdump，更不知道是在啥事上开罪了gfw？！莫非是人家剑桥的研究人员在研究gfw时用到了这个工具不成？？还记得前年freebsd被封的事么？莫非又有谁要搞个中国版的tcpdump了？！

至于tor嘛，被封杀是迟早的事，最近也终于访问不了了，还好tor的软件还能用，嘿嘿。我的skydrive上也留了个备份，上网怎么能不带tor呢？？

再给大家提供一下我skydrive上的tor套件下载链接吧：http://cid-9f9349bda3920f99.skydrive.live.com/browse.aspx/%e5%8c%bf%e5%90%8d%e9%80%9a%e4%bf%a1/%e6%b4%8b%e8%91%b1%e8%b7%af%e7%94%b1%ef%bc%88TOR%ef%bc%89/%e5%ae%89%e8%a3%85%e7%a8%8b%e5%ba%8f

source forge的首页为http://www.sourceforge.net
notepad++的首页为http://notepad-plus.sourceforge.net/tw/site.htm
tor的首页为http://www.torproject.org/
tcpdump的首页为http://www.tcpdump.org

如果说中国的周老虎是民间最牛×的PS杰作，那伊朗的导弹就必然是官方最牛×的PS杰作了！不说空话，只看下面两个牛图，伊朗人真牛×！！

有朋友说没看懂，我就补充说明下吧，这两张照片是伊朗官方先后公布的同一时间，同一地点进行的同一次导弹发射，真牛×啊