Slashdot Mirror

Slashback is packed tonight with updates and clarifications on several fronts: read on below for, among other things, BitTorrent download stats after the recent Red Hat 9 release, the BSA's questionable statistical methods when it comes to calculating incentives and losses in the source-secret software world, and (can you believe?) yet another way to assemble an eerie pulsing light fixture.

Click on through for some impressive graphs ... . bramcohen writes "Since RedHat 9 got /.'ed last week there have been over ten thousand complete downloads using BitTorrent. Initial traffic got very high, transferring over a gibibit a second. All throughout the BitTorrent servers, run by volunteers using stock tools, held up just fine. Meanwhile downloads from RedHat Network, only available to subscribers, transferred at a crawl. The third Animatrix also got quite a few downloads. Thanks to everyone who left their downloaders running, and David Stutz and Eike Frost for setting things up."

If you exaggerate enough the first time, subsequent revisions sound like concessions. Russell McOrmond writes "An article in ITBusiness.ca includes references to the methodology of the BSA studies, and how it confuses Free/Libre and Open Source Software with piracy. There are some related articles talking about CAAST/BSA on my work weblog from the past."

Tap, Tap, Tap. feagle814 writes "Recently, I saw a question on Ask Slashdot that intrigued me. The person was asking for ideas relating to building your own glowing and color-changing ball. Being the kind of person to take such a general request for comments and turn it into a personal reason for living, I quickly skimmed the description on ThinkGeek and came up with these requirements for my project:

1. It must meet the generic description of the Ambient Orb,
2. It must cost less than $50 to make,
3. It must be wireless, with at least a 30-foot range, and
4. It must be controllable by home computer.

After much deliberation, I came up with the following solution. I've included pictures and instructions, as well as a recounting of my experiences."

Not just a simulation. Olmy's Jart writes "This is a followup to yesterday's article on "Samba Exploit Discovered, Fixed". Digital Defense has posted an apology to the Samba Team for posting a complete live working exploit (not even a mere "proof of concept", but a zero day rooter) on their site for this vulnerability. The exploit has been taken down, for what that's worth now. This is being reported in an article on ZDNet AU. Digital Defense now claims that this was done without the approval of their management."

Funny, CompUSA is finally selling duplicators, too. Unominous Coward writes "According to this article, the man who planned to install CD copying machines around Australia has withdrawn from the idea. Not surprisingly, this was after a lawsuit by the music industry."

Anyone who would like to buy me one is free to do so. prostoalex writes "Sharp Zaurus deal is back at Home Shopping Network. Sharp Zaurus SL-5500 is $199, but a coupon code HSN4897 knocks the price down by 15%. With standard shipping the order comes to around $173."

We need both more Korean food and more Korean electronics. Jo "directhex" Shields writes "HEXUS.net has completed its extensive messing around with GamePark's GP32 Handheld, which recieved a mention a couple of days ago on Slashdot (and recieved the usual thrashing from members too busy to read the article but not too busy to post trashy ill-informed comments about it).

It should help to clear up a few myths about what the unit is, what it tries to do, and what it succeeds at doing. Read the review, and pass mighty Slashdot Judgement."

An anonymous reader submits: "Digital Defense reported a remote root vulnerability in Samba that has existed in Samba source code for over 8 years. If it hadn't been caught from a wild packet capture, who knows how many more years it might have gone on. Fixes for this, and at least three other vulnerabilities have been fixed today. This is a serious threat to many thousands of people.. Did you plan to spend your Monday upgrading to Samba 2.2.8a?" elijahao supplies some more information: "All stable versions are affected (2.x), but the 3.0 series is not. Here is a link to the News page. Check out a mirror near you to get the Source or Security patches from 2.2.7a, 2.2.8, or 2.0.10."

hdm writes "My company recently published a paper on security issues with common terminal emulator applications. The interesting thing about these vulnerabiltiies is that many of them only require the victim to be running tail on their log files (apache, syslog, etc) for the attack to be successful. The paper (TXT) can be found here."