Slashdot Mirror

"BSD", as some idiot quoted it, is NOT a "License", it's a *Copyright*. There is a huge difference there. Get it right.

The BSD style Copyright is now best represented by, and deployed as, the following...

https://www.openbsd.org/policy.html https://cvsweb.openbsd.org/src... https://www.freebsd.org/copyri...

With additional discussion here... http://landley.net/toybox/lice... https://urchin.earth.li/~twic/...

You should also know that the next major release of FreeBSD 12.0 will be out in 1.5 weeks :-) You can liveboot the RC3 sampler from USB today.

Copyright is a legal concept emblazoned in the United States Constitution and in many other countries around the world. To make a lot of legal stuff as simple as possible, it means "if you write the code, you own it and have the right to say what happens to it". Since you are the owner, you now have to do something to allow usage by someone else. That "something" is the license. BSD is a license, not a copyright. BSD always was more permissive than most other licenses, and over the years it removed the few requirements that it had, until now the "0BSD" license is almost indistinguishable from "Public Domain" software. However, it is best to put a license somewhere in your code stream, just to let the people who want to use your code that they can and under what circumstances.

I'm supposed to download binaries that don't have Authenticode signatures, from a web server that doesn't support TLS.

Actually, the download server that it links to supports TLS now.

But yes, I completely agree that the switch to 2048- or 4096-bit keys is long overdue...

Well, I googled around and found this: http://urchin.earth.li/pipermail/debian-haskell/2006-May/000169.html So I guess they are using Haskell - what an interesting choice.

Haha, I take it you are an old C64 user as well - I remember that sys call you gave! Amazing how these numbers stick in one's mind - there's also 53280, 53281, etc.

A lot of the support for Haskell *used* to be in Academia. But #haskell is full of people using it for every day real-world purposes it seems. I was especially impressed after talking to Cliff Beshers of Linspire who are doing all of their distro-specific coding such as the installer etc. in Haskell. I have now seen IRC bots in haskell, web servers and web application servers in haskell, and video games in haskell. Heck, the only existing implementation of Perl 6 is written in Haskell. It seems like it has escaped Academia and has been looking for a problem to solve for a few years now. And it looks like this multi-core business may well be it. Especially since haskell has a parallelizing compiler.

Coincidentally, I discovered today that Linspire/Freespire are standardizing on Haskell for core OS development. I'm still blinking a bit about that one, but you have to give them marks for chutzpah.

Add Standard ML to the list. Everyone should know about functional programming with variant datatypes.

It also has a good book on compilers, another topic any serious CS guy should know about (Andrew Appel's Modern Compiler Implementation in ML; avoid the Java one, it only shows how to get the ML stuff done in Java with three times the code).

Alternatively some people prefer Haskell, which grows more and more popular, and arguably has a nicer syntax.

The PuTTY win32 client documentation can be found here. It has a good intro to SSH as well.

Actually my favorite singularity fiction comes from Vernor Vinge. I think he actually came up with the singularity idea - the link goes to a 1993 talk in which he presents the idea.

I don't know whether we'll reach that singularity he talks about, but I really enjoy his books, for example the early True Names, or more recent books such as A deepness in the sky or A fire upon the deep. These last two are my two favorite science fiction books.

And, no, I'm not affiliated with V. Vinge.

According to the documentation: "PSFTP, the PuTTY SFTP client, is a tool for transferring files securely between computers using an SSH connection."

Whereas the OP said: "I need a command line FTP client that supports 'Implicit SSL'"

SSH is not SSL.

There's an excellent FTP client that does everythign you need: psftp. It's highly scriptable, and scripting info is available here.

Somewhat complicated, but can be done. First of all you go to a PGP key signing party. The more the better, but just one gives quite good chances already. Then you use the PGP key path finder and it tries to find a path from your key to the Mozilla one.

Does it sound messy? Yes, it is. It's not as automatic as going to a site and have the browser pop up a window saying it's been blessed by Verisign and so it should be okay? Indeed.

However, it's definitely a lot safer if you can verify it. Unlike with Verisign, with PGP/GPG you know that the key can be trusted because you signed Alice's key, and Alice signed Bob's and Bob signed the Mozilla one. GPG can be told to only trust if there are several signatures on the key that can be verified if you're feeling paranoid, too.

Ok, I miss putty

Well then download that bitch, compile it and miss no more.

LK

After several attempts to live solely on the console, here are the best apps I've found:

Links: a superior web browser alternative to Lynx that formats things correctly on your screen.

Mutt and Pine: Two great email clients that allow you to work much more quickly than with any graphical client.

Nano: My favorite text editor. I refuse to feel guilty that it's easy to use!

Micq: a very nice ICQ client that works much better than the various AIM console clients that are out there.

Finally, last, and well yes, basically least, Seatris: This is the best -- the best! -- of all the console tetris games. It takes me back to wasting hours in the various UC Santa Cruz computer labs.

Um, Go Banana Slugs! Go Stevenson College! I think that takes care of this year's quota of school spirit.

1] PuTTY

2] WinSCP

3] McAffee VirusScan Enterprise

4] Moz Firefox

5] WinAMP

6] WinZIP

7] SciTE

8] MS Office

(I'm familiar with OO.o and StarOffice, but from what I've seen, MSOffice is the hands-down winner for me and is primarily what keeps me on Windows).

9] Adobe Acrobat 6.0 PRO

10] DBDesigner 4

And that about rounds out the list. After that, I reboot and hot-patch the box with locally stored patches, reboot, THEN connect for new patches.

Speaking of Iomega website, it's not accessible for those of us who have the TCP ECN bit turned on. This has earned them an entry in the ECN Hall of shame listing. Their response? ... We can revisit this in several years. It isn't a big deal right now ... To be honest, I would be surprised if anybody had a problem talking to us because of ECN.

FYI, /proc/sys/net/ipv4/tcp_ecn is the switch that controls whether Linux uses the ECN option or not.

Have you tried plink?

PuTTY does not, in fact insist that you use XWindows style cut and paste. I refer you to section 4.11.2 of the manual.

At least one girl (my wife) is a contented Debian user and even went to a Debian 10th birthday party with me.

Since it's about to get Slashdotted, here is the mirror list section from the xfree86.org site:

Web Mirrors

Our web site is very busy and often causes timed out connections. The following sites have been verified as being both accurate and reliable in their mirroring process, and so we recommend these for the best access:

Costa Rica
Copenhagen, Denmark
Paris, France
St. Denis, France
Berlin, Germany
Dortmund, Germany
Athens, Greece
Seoul, Korea
Amsterdam, Netherlands
Bucharest, Romania
London, United Kingdom

Not posting as AC 'cause the troll potential would be too high...

You should be careful how much trust you put into these signatures. MD5 sums only tell you that the file hasn't been modified between the download server and your computer. If the software was trojaned, the MD5 sum can be changed to match the new trojaned software.

If there is a PGP signature, but it is from an untrusted key, that is no better than a MD5 sum. Anyone can create a PGP key with any name on it and upload it to the public keyservers. The real authentication comes from the web-of-trust. Of course, there are some mitigating factors.. like having the author sign with the same key for previous releases and then you notice that the key has changed. That can help, but only if you are vigilant.

The web-of-trust is the real important factor here. If you are a software distributor, try to get your keys signed by multiple people in the well-connected group.

If you are a software user, see if you can find a key that you trust enough to sign it.. either by a face-to-face identification verification (with a signature that you can upload to the keyservers), or by using a well-accepted key in the well-connected set and signing it LOCALLY (so that it doesn't get uploaded to the keyservers and pollute the trusted set for other users). Something from the top-50 signed keys would be suitable:.

Sites like biglumber.com maintain a list of people interested in key signings in different localities. This is a big help in getting some signatures and connecting yourself to the well-connected-set of keys.

Also, if you want to check the path of trust between two keys, check out the PGP Pathfinder. An example is the path from Werner Koch (GPG author) to Phil Zimmerman (PGP author).

This will enable you to build up your web-of-trust, which really indicates that the keys belong to who they say they do. PGP is your friend, use it wisely.

-molo

You should be careful how much trust you put into these signatures. MD5 sums only tell you that the file hasn't been modified between the download server and your computer. If the software was trojaned, the MD5 sum can be changed to match the new trojaned software.

If there is a PGP signature, but it is from an untrusted key, that is no better than a MD5 sum. Anyone can create a PGP key with any name on it and upload it to the public keyservers. The real authentication comes from the web-of-trust. Of course, there are some mitigating factors.. like having the author sign with the same key for previous releases and then you notice that the key has changed. That can help, but only if you are vigilant.

The web-of-trust is the real important factor here. If you are a software distributor, try to get your keys signed by multiple people in the well-connected group.

If you are a software user, see if you can find a key that you trust enough to sign it.. either by a face-to-face identification verification (with a signature that you can upload to the keyservers), or by using a well-accepted key in the well-connected set and signing it LOCALLY (so that it doesn't get uploaded to the keyservers and pollute the trusted set for other users). Something from the top-50 signed keys would be suitable:.

Sites like biglumber.com maintain a list of people interested in key signings in different localities. This is a big help in getting some signatures and connecting yourself to the well-connected-set of keys.

Also, if you want to check the path of trust between two keys, check out the PGP Pathfinder. An example is the path from Werner Koch (GPG author) to Phil Zimmerman (PGP author).

This will enable you to build up your web-of-trust, which really indicates that the keys belong to who they say they do. PGP is your friend, use it wisely.

-molo

for those who didn't RTA, the rock is really big an d kinda infinitely smooth. here's a mirror of the primary photo.

it's very easy to find a public machine that allows me to authenticate via https as opposed to one that has an ssh client.

I've yet to find a publicly-accessible Win32 machine that was locked down tight enough that I couldn't pull a PuTTY binary off my home webserver and run it. Mozilla won't work, but IE gives you the option to run binaries right after they're downloaded without saving them anywhere in particular. You could even run it directly from this link provided by the author. (That IE allows this is a security hole through which you could drive a Mack truck, but such is the state of security on your average Windows box. That doesn't stop me from taking advantage of it if I can. It's not like I'd run a fork-bomb type of program that throws up a bunch of windows pointing to goatse.cx and/or tubgirl.com...)

This sounds like a precursor to Planet-es. It's a very well written anime (even from a Hard Sci-fi POV)

Linksys And The GPL: The Saga Continues

Possible Linksys GPL Violations: The Saga Continues

more on kernel mailing list

*cough*

Even if you're behind a firewall, you can still use PuTTY.

:)

Theres another very similar, also free, also GPL'd, also linux network-devices-on-a-disk project called Sisela, available here.

It looks fairly promising, though I've never used it or LRP.

Vernor Vinge for the utterly fantastic A Fire upon the Deep and A Deepness in the Sky

George R.R. Martin for the excellent A Song of Ice and Fire series (in progress)

China Mieville for the dark, strange, gothic steampunk brick Perdido Street Station

I would go back to Putty in a flash if it did port forwarding. Till then, ttssh for me.

Because he asked for a free (beer, not speech) solution. Each one you listed is a shareware (not free) solution. PuTTY SSHed into a GNU/Linux or FreeBSD box, from there, tn3270 to mainframe. Zero software cost solution.

I know this is a nitpick: httpQ, Winamp Control Center (alt), and Muse all offer some control of Winamp or streams from an HTML interface, and they offer source code too. Other general purpose plugins for Winamp expose hooks in Visual Basic and stuff. If you feel like it, you can build a wholly different interface with entirely different capabilities, and a set of new problems - like people complaining just because of a new interface. Oh well.