Slashdot Mirror

If people would READ the updated info on the post submission screen they would find out that you can now just use "http://example.com/" which will auto-link a URL.

See, http://slashdot.org/

FUCK YOU LINUX HIPPIES

URLs http://example.com/ will auto-link a URL
Important Stuff

Please try to keep posts on topic.
Try to reply to other people's comments instead of starting new threads.
Read other people's messages before posting your own to avoid simply duplicating what has already been said.
Use a clear subject that describes what your message is about.
Offtopic, Inflammatory, Inappropriate, Illegal, or Offensive comments might be moderated. (You can read everything, even moderated posts, by adjusting your threshold on the User Preferences Page)
If you want replies to your comments sent to you, consider logging in or creating an account.

Lunix faggs

URLs http://example.com/ will auto-link a URL
Important Stuff

Please try to keep posts on topic.
Try to reply to other people's comments instead of starting new threads.
Read other people's messages before posting your own to avoid simply duplicating what has already been said.
Use a clear subject that describes what your message is about.
Offtopic, Inflammatory, Inappropriate, Illegal, or Offensive comments might be moderated. (You can read everything, even moderated posts, by adjusting your threshold on the User Preferences Page)
If you want replies to your comments sent to you, consider logging in or creating an account.

I'll bet that IANA are not going to be happy about having example.com slashdotted!

See rfc 2606 for more info on example.com

(For those who missed it, after coming up from maintenance, all links off the slashdot front page went to example.com instead of slashdot.org - ie http://example.com/comments.pl?sid=114762&threshol d=1&mode=thread&commentsort=0&op=Reply )

Someone apparently forgot to remove an "example.com" placeholder! It's good to see that slashdot hires people so well versed in RFC 2606!

( Read More... | science.example.com )

( Read More... | 91 comments | yro.example.com )

And so on...

- JoeShmoe
.

Someone apparently forgot to remove an "example.com" placeholder! It's good to see that slashdot hires people so well versed in RFC 2606!

( Read More... | science.example.com )

( Read More... | 91 comments | yro.example.com )

And so on...

- JoeShmoe
.

You have reached this web page by typing "example.com", "example.net", or "example.org" into your web browser.

These domain names are reserved for use in documentation and are not available for registration. See RFC 2606, Section 3.

example.com

example.com was reserved by the IETF so that dummy email addresses could be used in examples. See www.example.com/

It's an example domain, set aside to be used as an example.

There are plenty of places you can safely point to. It's fair to assume that mailboxes at example.{com|net|org} are unmonitored. There's also me@privacy.net which bounces email with a polite notice that you don't want email from the sender. Spamcop provides the conspicuous nobody@devnull.spamcop.net, originally provided for users of their newsgroups but open to all and of course you can just use fake tlds like nobody@fake.invalid which will always be rejected before the email even leaves the spammer's servers.

If you do want to recieve email but only, say, once from a company then you'll be looking at SpamGourmet which provides simple, free, fowarding addresses that expire after X hits.

All email is received by one account, but each message can have a different "to:" header

I do not use the to: to filter, I use the from: to filter.
Also I have turned off the catch-all account, especialy because suddenly I got spam to dave@example.com, john@example.com and a set of other names. Also bounces from these names that spammers used. It redused my spam from hundreds to tens a day. I am the sole and lonely user of my domain and I am sure I never, ever, used those names.

Luckily I am with a provider that allowed me to manage my own mailboxes. Naturaly I also add aliasses for different reasons, like jobaplications where it is less cool to have an adress like h0ax3r@example.com

(and people, please use example.com if you use a domainname as an example, just as RFC 2606 intended it)

Etienne Greeff, director at MIS Corporate Defence Solutions, said: "This is a very sophisticated exploit using encryption and stealth technologies to deliver its payload, using previously unknown vulnerabilities to work."

One of the major causes of some of those bugs was trying to retain backwards compatibility with older broken applications, in this case password handlers, and the need to do that is as endemic as the weaknesses in previous systems of theirs. Another major example of clueless encryption use was the various worthless encryption things they built into Word and Excel - people have run entire businesses that provide cracking services for MS Office docs that customers forget the password for.

The major weaknesses in SSL today aren't esoteric bugs that only government spies can crack. One of them Microsoft Outlook, which will happily display mail that's "From: security@paypal.com" and let you click on the URL update-your-data-now.this-is-really-from-paypal-tr ust-us.paypal.com without the user interface even hinting that that it's from phishing-site.example.com. Another major weakness is viruses infecting machines, which is occasionally because of bugs in various programs (mostly overflow bugs, which are inexcusable these days, but still there) but often because the UI in Outlook encourages users to send executable attachments around and makes it hard for users to tell that the object they're about to click on isn't what they thought it was but easy to excecute them.

Why do some many of the non-UI attacks keep hitting the MS Filesharing/Netbios/etc. ports 135-139,445, 5000, etc? Because its security still sucks, even after 10+years.

If you look at what is proposed, it describes clients sending tokens like this:

GET http://www.webserver.com/webpage.html HTTP/1.1
Authorization: JabberTicket 54yudvjhssa76dta6sgdst78r4sadsfjdhs...

now apart from the nitpicking complaint that they should use example.com as the test domain (follow link to see why), its obvious that this needs client-side support. With browser rollouts being mindnumbingly s l o w, that means they are probably targeting web services, or non-browser clients, or must be building a browser extension?

Secondly, the spec for the client request for a ticket doesnt include any authentication info whatsoever. Ok, this means they must be doing that in 'some other protocol' (presumably Jabber + SASL). They could be a bit clearer... this part basically requires you to have a fairly complete XMPP implementation in order to get at the apparently simple ticket service.

Mark me down as unconvinced. Take a look at Shibboleth and OpenSAML to see what others are doing in this space - they are already doing single sign on, and it already works (OpenSAML does have the downside of being affected by a free-to-license RSA patent).

We have integrated sites into Athens (SSO for the UK EDU/GOV sectors), which is similar to Shibboleth in scope, and doesn't require browser changes.

Yes, trivial obscuring like user(at)example(dot)com with various special characters can be done in 10 lines. (Could be hard to get the last 3 lines filled with code.)

But what if the user does not use English language, but German? And what if (s)he does not mark the obscured charachters? user klammeraffe example punkt com or with some funny synonymes user a im kringel example klecks com. Decoding this in 10 lines of Perl becomes harder, and it becomes harder with every new language. Decode this with 10 lines for English, German, French, Polish, Russian, Bantu, Spanish, ...

What happens if the user is really "evil" to spammers? Meine Mail-Adresse besteht aus dem Domainnamen meines Providers example unter der Top-Level-Domain fur kommerzielle Webseiten, dem wird mein Kundenpseudonym user und ein Klammeraffe vorangestellt. (I'm still hiding user@example.com - translation: My mail address is composed from the domain name of my provider example undet the top level domain for commercial websites, prefixed with my client pseudonym user and an at sign.) Decode this and similar examples in 10 lines of Perl for 10 languages, while still being able do decode all trivial variants and all slashdot mail obscurations.

Getting more evil: Meine e-Mail ist catch-those-spammers@example.com mit user vor dem Klammeraffen. Schicken Sie keine Mails an die falsche Adresse. (My email is catch-those-spammers@example.com with user in front of the at sign. Don't send mail to the wrong address.) Set up an account catch-those-spammers that marks and blocks all computers that test that acocunt or send mail to it. Now decode this and all examples above and all slashdot obscuration and don't run into the trap, and do not use more than 10 lines (with 80 characters each) of Perl code.

I bet it can't be done in 10 lines with 80 characters each, using Perl 5 and no external modules.

With nearly no work it is possible to make automatic address collecting harder and thus more expensive. Spammers don't want to spend much money, they want to maximise their profit. So they will do at most only trivial decoding, if they can't collect enough unobscured mail adresses. This is why images containing the mail address won't be OCRed for a while. It simply costs too much. On the other hand, just guessing names for existing domains works pretty well and it is very cheap. I have an unpublished six-letter account at a big German mail provider, and it is permanently hit by spam. The generic (unused and unpublished) accounts (sales, info, mail, accounting, vertrieb) of my domain are also spammed very often. Guessing is cheaper than collecting addresses.

So while this is not a mathematical proof, you can see that non-trivial obscuration will help. See also What You Get When You Buy a Spam CD.

Tux2000

I've been in the situation of having to hunt for drivers for not-even-particularly-obscure hardware items on Google, etc, and any replies that explain how the driver was found are going to be useful to me. Getting drivers for obscure hardware is an art, not a science.

Google not only blocks the spam, but every result after it.

Sounds like an attack waiting to happen. Lets see, I really hate that blasted www.example.com site, ever since they totally ripped off my page! First, I'm going to mirror it here! Then I'm going to take that collection of spam I've been saving up all these years and attach it to my mirrored site. Then, if I can somehow push my site above in google page rank, they should not show up in any search and I have thwarted my opponent! YES!

Someone should do that. It's broken right now.

Ya well according to this source, its really 74 percent of statistics that are made up.



Gotcha!
;-)

I was thinking about it, and one comment I would have is the [comments] don't actually say what they're linking too, only what kind of content there is. Links should, and I know I don't always obey this but I will eventually, actually say what they are. Then you begin to get long things like [(dummy) etext on rabid donkeys] and by that stage, you've lost the advantage of it, and might just as well have said that you should read the (dummy) re-hashed etext on rabid donkeys, and any advantage you might still have had you've totally lost, because that's what you would've (should've) said in the first place.

I was thinking about it, and one comment I would have is the [comments] don't actually say what they're linking too, only what kind of content there is. Links should, and I know I don't always obey this but I will eventually, actually say what they are. Then you begin to get long things like [(dummy) etext on rabid donkeys] and by that stage, you've lost the advantage of it, and might just as well have said that you should read the (dummy) re-hashed etext on rabid donkeys, and any advantage you might still have had you've totally lost, because that's what you would've (should've) said in the first place.

I'm going to start following your excelent example with my Slashdot comments.

Make money fast! Click here now!

I think it will help to improve the quality of my comments, and bring in more readers.

Your computer is not optimised. Optimise now!

However I'm a little concerned that people may find it difficult to follow my posts if I keep breaking them up with adverts and links.

Naked cheerleaders!

I guess it might also be a problem for users on high latency links.

Get your University diploma. Act now!

Who am I kidding? Fuck um, I'll just milk a single post for 6 page impressions per reader and overload it with adverts, animated GIFs and other shit. All I need to do is work out how to make Slashdot accept blink tags and embedded Flash, I can be just as leet as your site is every day!

Adverts got you down? Want content? Well we can't help!

( Read More... | 4 of 330 comments | Your Rights Online

one thing i hate is having to "e-mail with subject \"help\" to receive a list of possible commands", each of which, I gather, includes sending an e-mail with a certain subject, then receiving an e-mail in confirmation of it. Blech!

Whatever you use, make sure it has a clean web interface, and configure it to include a link at the end of each e-mail sent to the group to the effect of "Click here to change or configure your mailing list membership."

Just follow this link for a step by step guide.

Mainstream household accessory!? Since when has R2D2 been a mainstream household accessory!?

Oh, Linux has been ported to it, by the way, download it here not.

Making up domain names still pollutes the namespace, though -- imagine if people made up telephone numbers the same way. Why not use example.com instead?

The example.com, example.net and example.org domains are reserved by IANA for use in testing and documentation; they're the equivalent of a telephone 555 prefix, only less obvious. See RFC 2606, or visit the example.com web page.

Seriously, they took example.com live a while back. http://example.com/ resolves to a page saying "These domain names are reserved for use in documentation and are not available for registration."

I don't think they've got any mail server set up, though, so it's still safe to use them for fake mail addresses. I think.

P.S. When you guys fill out forms asking for an e-mail address, PLEASE PLEASE PLEASE do not use domains like that. Someone owns them. Use "domain.com" or "example.com" instead, which will never resolve to anything. "your.org" gets more spam than you could possibly imagine.

It didn't work? Must have been DoS'd then. ;)

1) Some of those errors are in user content. Slashdot has no control over it.

2) Slashdot has to generate defensive HTML to protect against things like links that never close, as well as formatting tags that screw up the whole page layout. The spec was not designed with that in mind.

Well, other than the thing, this already exists. Just use and it will become http://example.com/.

hmmm... ground-level o3 does tend to occupy the top-bit of inverted thermal domes... a good thing as it tends to keep it out of our lungs. In theory though, ozone should only be a problem if you have:
1. the thermal inversiona from hell
2. A much-bigger-than-normal amount being produced.. ie, 250 vand de graff generators running a street level.

I vote for number 1 since if there were 250 van de graff generators being run at street level anywhere cmdrTaco would have run it as a story... viz:

posted by cmdrTaco on Monday July 10 @04:22AM
from the It-makes-my-hair-stand-on-end-but-in-a-good-way dept.
BozoTheClown writes "The Mayfield Daily Blatt has this story about an high school science teacher who is trying for the Guiness record for "largest baloon stuck to wall with static electricity". He has a full size replica of the Hindenberg (no, not hydrogen filled, thank god) and, get this, 250 full-sized van de graff generators... better than rubbing the blimp on your head!" 250? Wow, that's like a Beowulf cluster of van de graff generators!!

(Read More... | 2 of 1045 comments | Stunts )

hmmm... ground-level o3 does tend to occupy the top-bit of inverted thermal domes... a good thing as it tends to keep it out of our lungs. In theory though, ozone should only be a problem if you have:
1. the thermal inversiona from hell
2. A much-bigger-than-normal amount being produced.. ie, 250 vand de graff generators running a street level.

I vote for number 1 since if there were 250 van de graff generators being run at street level anywhere cmdrTaco would have run it as a story... viz:

posted by cmdrTaco on Monday July 10 @04:22AM
from the It-makes-my-hair-stand-on-end-but-in-a-good-way dept.
BozoTheClown writes "The Mayfield Daily Blatt has this story about an high school science teacher who is trying for the Guiness record for "largest baloon stuck to wall with static electricity". He has a full size replica of the Hindenberg (no, not hydrogen filled, thank god) and, get this, 250 full-sized van de graff generators... better than rubbing the blimp on your head!" 250? Wow, that's like a Beowulf cluster of van de graff generators!!

(Read More... | 2 of 1045 comments | Stunts )

hmmm... ground-level o3 does tend to occupy the top-bit of inverted thermal domes... a good thing as it tends to keep it out of our lungs. In theory though, ozone should only be a problem if you have:
1. the thermal inversiona from hell
2. A much-bigger-than-normal amount being produced.. ie, 250 vand de graff generators running a street level.

I vote for number 1 since if there were 250 van de graff generators being run at street level anywhere cmdrTaco would have run it as a story... viz:

posted by cmdrTaco on Monday July 10 @04:22AM
from the It-makes-my-hair-stand-on-end-but-in-a-good-way dept.
BozoTheClown writes "The Mayfield Daily Blatt has this story about an high school science teacher who is trying for the Guiness record for "largest baloon stuck to wall with static electricity". He has a full size replica of the Hindenberg (no, not hydrogen filled, thank god) and, get this, 250 full-sized van de graff generators... better than rubbing the blimp on your head!" 250? Wow, that's like a Beowulf cluster of van de graff generators!!

(Read More... | 2 of 1045 comments | Stunts )

hmmm... ground-level o3 does tend to occupy the top-bit of inverted thermal domes... a good thing as it tends to keep it out of our lungs. In theory though, ozone should only be a problem if you have:
1. the thermal inversiona from hell
2. A much-bigger-than-normal amount being produced.. ie, 250 vand de graff generators running a street level.

I vote for number 1 since if there were 250 van de graff generators being run at street level anywhere cmdrTaco would have run it as a story... viz:

posted by cmdrTaco on Monday July 10 @04:22AM
from the It-makes-my-hair-stand-on-end-but-in-a-good-way dept.
BozoTheClown writes "The Mayfield Daily Blatt has this story about an high school science teacher who is trying for the Guiness record for "largest baloon stuck to wall with static electricity". He has a full size replica of the Hindenberg (no, not hydrogen filled, thank god) and, get this, 250 full-sized van de graff generators... better than rubbing the blimp on your head!" 250? Wow, that's like a Beowulf cluster of van de graff generators!!

(Read More... | 2 of 1045 comments | Stunts )

hmmm... ground-level o3 does tend to occupy the top-bit of inverted thermal domes... a good thing as it tends to keep it out of our lungs. In theory though, ozone should only be a problem if you have:
1. the thermal inversiona from hell
2. A much-bigger-than-normal amount being produced.. ie, 250 vand de graff generators running a street level.

I vote for number 1 since if there were 250 van de graff generators being run at street level anywhere cmdrTaco would have run it as a story... viz:

posted by cmdrTaco on Monday July 10 @04:22AM
from the It-makes-my-hair-stand-on-end-but-in-a-good-way dept.
BozoTheClown writes "The Mayfield Daily Blatt has this story about an high school science teacher who is trying for the Guiness record for "largest baloon stuck to wall with static electricity". He has a full size replica of the Hindenberg (no, not hydrogen filled, thank god) and, get this, 250 full-sized van de graff generators... better than rubbing the blimp on your head!" 250? Wow, that's like a Beowulf cluster of van de graff generators!!

(Read More... | 2 of 1045 comments | Stunts )

hmmm... ground-level o3 does tend to occupy the top-bit of inverted thermal domes... a good thing as it tends to keep it out of our lungs. In theory though, ozone should only be a problem if you have:
1. the thermal inversiona from hell
2. A much-bigger-than-normal amount being produced.. ie, 250 vand de graff generators running a street level.

I vote for number 1 since if there were 250 van de graff generators being run at street level anywhere cmdrTaco would have run it as a story... viz:

posted by cmdrTaco on Monday July 10 @04:22AM
from the It-makes-my-hair-stand-on-end-but-in-a-good-way dept.
BozoTheClown writes "The Mayfield Daily Blatt has this story about an high school science teacher who is trying for the Guiness record for "largest baloon stuck to wall with static electricity". He has a full size replica of the Hindenberg (no, not hydrogen filled, thank god) and, get this, 250 full-sized van de graff generators... better than rubbing the blimp on your head!" 250? Wow, that's like a Beowulf cluster of van de graff generators!!

(Read More... | 2 of 1045 comments | Stunts )

Click Here