Slashdot Mirror

my fleshlight make the perfect hackers toolkit.

and a fleshlight...

I was bound and determined not to spend another Valentine's Day alone, so I bough THIS!!!

May I suggest the Fleshlight, it certainly helped my sex life, I won't even have to buy into the spam e-mails anymore!

Actually, I haven't bought one yet, you are welcome to buy one for me ;)

these have been around for a while...

Now be sure to buy the anal attachment and thust away to counterbalance your buggary from shitty music and corporate faggotry you consumer whoring niggers.

Also don't forget to leave out mince pies for our fat bearded guest, yes CowboyNeal is coming to town, though he'd have more chance of being flung away by a Linux Box explosion and landing on pussy island than ever craming his obese arse down your chimney, so just leave teh door open, k?

VERSE 1

Fag tidings we bring for you and your kin, We wish you a Merry Christmas and a Happy New Year!


VERSE 2

Now bring us some hot grits, now bring us some hot grits, Now bring us some hot grits and bring it right here.


VERSE 3

We won't go until we get some, we won't go until we get some. We won't go until we get some, so bring it right here niggers.


VERSE 4

We all like our hot grits, we all like our hot grits, So bring us some hot grits, with all its good cheer! propz to GNAA and Goatse.info

The mere fact that it should be fixed immediately does not at all mean that Apple MUST just quickly hack something together and just release it to the public.

Guess what, in theory, all computers SHOULD IMMEDIATELY be secure out of the box and never ever require any patch. But this is real life. not utopia.

I have yet to see a tested, reliable proposed patch for this vulnerability at the open-source darwin resources. My guess is it is far from being a trivial fix, and chances are Apple wants to thoroughly test it before releasing it.

All Carrel is doing is demanding a deadline that was different from what Apple told him. He could have very-well just waited another month before releasing his advisory. Chances of someone else finding out about it on their own *and* managing to slither their way onto vulnerable subnets, write and execute an exploit, all this within, say, at most 30 days from the day this story popped-up and the latest possible day in december, are fucking slim to none. It is also NOT like this vulnerability would allow a script writer to write a worm that could quickly spread to the internet. Sure, entire subnets could be affected at a time, but the exploit would remain WITHIN the subnet, spreading it out to other networks would require sending email viruses or other stupid PEBKAC-based annoyances. Oh and the victim machine has to be initiating a dhcp request for it to get owned, which typically only happens at boot/startup time, or connection/disconnection. I can see laptop on large corporate networks being vulnerable, but again, a malicious machine would have to make its way INSIDE the network: it needs to live within 802.11b/g range and/or local hub. The offending machine could very easily be traced and its owner hung by the balls.

Yes Apple reneged on their original deadline, chances are they had good reason and were trying to address that botched 10.2.8 release to have a stable base system to release another security patch on. As long as they communicate timeline information back to him, they clearly are NOT giving him the run-around. December is not unreasonable provided what we get is a stable, reliable fix. Confirming a vulnerability can be a far fucking cry from having a successful patch implemented and released, if the fix for the vulnerability is not trivial. For example, a mere buffer-overflow vulnerability in a piece of C code is typically a trivial fix. Revamping DHCP is not necessarily.

Does Carrel's advisory offer a code fix to the Darwin Core? NO it doesn't. Has the potential issue of rogue evil Netinfo servers been around for a while? YES IT HAS.

Some geeks should consider getting laid once in a while and resist the amazing trepidations of unleashing a juicy piece of information that'll quench a lifetime's worth karma-whoring lust.

I don't know about ladies, but there is this one for men...

i am certain there are people out there who can abstain. i am also pretty damn certain these asexual prudes are in the minority. ;-P

I agree most poeple have sex. It's a basic need. Unfortunately, you're talking to a group of people that represent the largest concentration of people who don't typically get any.

Geeks. Slashdot Geeks.

Though, I'm pretty sure that is just an overplayed joke. I'm willing to bet a good portion of these fine geeky humans at least get sex once in a while. Realdolls, Fleshlights, and masturbation don't count.

I've said it before, I'll say it again. Shut up! I don't know who you're trying to impress. Your comments don't add to the discussion. If I want to know about your research (mentioned twice in the past week I believe!) I'll go to your friggin homepage. You seem to post on every 5th story! Looking up that much information on the net to copy and paste into a slashdot comment must take up an enormous amount of time. Do yourself (and us) a favor and use this time to search for a girlfriend or at least go buy a fleshlight (warning, not safe for work or kids.)

Yeah and they're cheaper than you think.