Domain: freshmeat.net
Stories and comments across the archive that link to freshmeat.net.
Comments · 2,668
-
Article on Coding for Porn Sites
This article on working for porn sites was on http://freshmeat.net a while back.
It's really interesting (and no, it's not a dirty story). It's about how porn sites have to be coded really well to cope with high loads, including tons of images, and with very high reliability since they are pay sites.
Do you grok? Maybe you can work for the porn industry!
-
Re:erk...You need to be root to do anything moderately useful, and if you're root, then you're able to fuck the system.
Not necessarily so -- sudo allows you to define groups and users that are allowed to execute certain commands.
This gives us the current unix security fiasco - sendmail ahs never been a secure product, apache cgi, no one seems to make a secure ftpd, no one makes a secure bind, etc etc..Look at exim, qmail (both MTAs with an eye toward security), and djbdns.
For instance, rewrite the kernel and libc so that bind on a privledged port (80) succeeds for a non-root user, so long as the process is "apache", has a trusted md5 sum, was started by a user in group wheel, lives in directory /usr/local/bin/httpd, etc etc.I agree -- it'd be nice to have non-root users bind low ports. Sudo can fix half of this (allowing users to run apache, ftpd, etc) but the daemon would still have too much power.
disclaimer: I'm no unix guru, but this stuff works for me. -
Re:erk...You need to be root to do anything moderately useful, and if you're root, then you're able to fuck the system.
Not necessarily so -- sudo allows you to define groups and users that are allowed to execute certain commands.
This gives us the current unix security fiasco - sendmail ahs never been a secure product, apache cgi, no one seems to make a secure ftpd, no one makes a secure bind, etc etc..Look at exim, qmail (both MTAs with an eye toward security), and djbdns.
For instance, rewrite the kernel and libc so that bind on a privledged port (80) succeeds for a non-root user, so long as the process is "apache", has a trusted md5 sum, was started by a user in group wheel, lives in directory /usr/local/bin/httpd, etc etc.I agree -- it'd be nice to have non-root users bind low ports. Sudo can fix half of this (allowing users to run apache, ftpd, etc) but the daemon would still have too much power.
disclaimer: I'm no unix guru, but this stuff works for me. -
Re:erk...You need to be root to do anything moderately useful, and if you're root, then you're able to fuck the system.
Not necessarily so -- sudo allows you to define groups and users that are allowed to execute certain commands.
This gives us the current unix security fiasco - sendmail ahs never been a secure product, apache cgi, no one seems to make a secure ftpd, no one makes a secure bind, etc etc..Look at exim, qmail (both MTAs with an eye toward security), and djbdns.
For instance, rewrite the kernel and libc so that bind on a privledged port (80) succeeds for a non-root user, so long as the process is "apache", has a trusted md5 sum, was started by a user in group wheel, lives in directory /usr/local/bin/httpd, etc etc.I agree -- it'd be nice to have non-root users bind low ports. Sudo can fix half of this (allowing users to run apache, ftpd, etc) but the daemon would still have too much power.
disclaimer: I'm no unix guru, but this stuff works for me. -
Re:erk...You need to be root to do anything moderately useful, and if you're root, then you're able to fuck the system.
Not necessarily so -- sudo allows you to define groups and users that are allowed to execute certain commands.
This gives us the current unix security fiasco - sendmail ahs never been a secure product, apache cgi, no one seems to make a secure ftpd, no one makes a secure bind, etc etc..Look at exim, qmail (both MTAs with an eye toward security), and djbdns.
For instance, rewrite the kernel and libc so that bind on a privledged port (80) succeeds for a non-root user, so long as the process is "apache", has a trusted md5 sum, was started by a user in group wheel, lives in directory /usr/local/bin/httpd, etc etc.I agree -- it'd be nice to have non-root users bind low ports. Sudo can fix half of this (allowing users to run apache, ftpd, etc) but the daemon would still have too much power.
disclaimer: I'm no unix guru, but this stuff works for me. -
check freshmeatHi.
Check out Freshmeat for what you seek. A search on 'help desk' brings up a page full of options, of which about 5 or so are what you seek. Of those 5, 3 of them version 1.0 or greater, so I think that they may be stable/robust enough for you to use. Ben
-
Suggestion Made from Slashdot Reader
-
VisualizationGo to Freshmeat.Net, SAL or your other favorite software directories (or a web search engine) and search for "visualization" or "scientific visualization". Also consider Computer Aided Design tools There are assorted tools that you can feed all kinds of data to.
I've taken SNMP data from radio network nodes, dropped it into Gnuplot, and placed on a web page a rotating GIF of a 3-D contour plot showing what the error rates are througout a building. There also are tools which can be interfaced to external data. I've used network configuration data to produce charts (although TkIned has tools to do this already).
-
April Fool's
Some of the cool April Fool's jokes I found:
- Freshmeat lists Linux-2.4.3-NSA1 (the first Linux kernel released by the NSA) http://freshmeat.net/releases/44655/
- The Register has been acquired by Microsoft! http://www.theregister.co.uk/
-
Game ports lure Windows gamersI've seen people convert to Linux solely because of the Quake III port (which I own), so it's not just Linux users who are the target market, it's gamers in general who are looking for something a little different. As for free and/or GPL'd games which unpaid developers toil late into the night over, they are part of the equation too. Games like Jump n Bump and Car World show promise - and who knows - these uncompensated and largely ignored developers may in the future design the next big thingTM.
-
I've wanted one of those..
I've actually wanted one of those boxes for a while.
I would say that there is a LOT of potential there. You could have it synch with your addressbook and read the caller ID data. Thus, you would be able to tag who called and e-mail you that information.
I'd say that your best bet is to encode it in some sort of well-compressed file format, once you get it off of the modem. MPEG layer 3 would work just about anywhere, so you'd probably want to just use that as the file format.
I would say that for everything but the actual MP3 audio, and perhaps even the audio, you might just want to use PostGreSQL to store the data. It's accessible under Linux, and it's also accessible via ODBC with PsqlODBC. That way, you have the option for multiple interfaces. You can write a windows and Linux binary client, plus a web-client (Which is nice if you are at the office and want to check the home phone messages).
And, of course, check out Freshmeat to see if there's anything useful. I found KPhoneCenter and the VoiceModem Kit.
-
I've wanted one of those..
I've actually wanted one of those boxes for a while.
I would say that there is a LOT of potential there. You could have it synch with your addressbook and read the caller ID data. Thus, you would be able to tag who called and e-mail you that information.
I'd say that your best bet is to encode it in some sort of well-compressed file format, once you get it off of the modem. MPEG layer 3 would work just about anywhere, so you'd probably want to just use that as the file format.
I would say that for everything but the actual MP3 audio, and perhaps even the audio, you might just want to use PostGreSQL to store the data. It's accessible under Linux, and it's also accessible via ODBC with PsqlODBC. That way, you have the option for multiple interfaces. You can write a windows and Linux binary client, plus a web-client (Which is nice if you are at the office and want to check the home phone messages).
And, of course, check out Freshmeat to see if there's anything useful. I found KPhoneCenter and the VoiceModem Kit.
-
Re:Man.. that was way harsh.
http://freshmeat.net/projects/forkbombdefuser/
It's licensed under the GPL.
Fork Bomb Defuser (rexFBD) allows you to configure the max_forks_per_second and max_tasks_per_user parameters, at the time of loading the module. Any possible Fork Bomb is detected using these parameters and is defused (deactivated) in real time. The uid of the user who started it, as well as the time it was started is logged in /var/log/messages for the system administrator to take action. -
Re:Yes, thank you!
You mean koules is not a Linux game!
You must be joking... :) -
Re:Didn't Steve Jobs Speak at MacWorld about....Apple can pay for as many hands as it wants, especially for features that are critical to its marketing campaign. That's why I can't see a leaf-node feature like DVD playback as being a problem unless there's a broader issue. Any decent contracting house could do that in a month or two for a few hundred grand at most, if it were feasible to do it at all.
People have been churning out CD writer apps for many years and there's no apparent reason that one couldn't have been contracted out here as well, unless there's some reason the work has to be tightly coupled to the main system.
I'm not insinuating anything, and your response seems rather defensive. I'm saying it doesn't make sense to me -- as a former Apple technical lead -- that these particular critical features should have slipped. I have speculated on one possible reason, but I'm by no means committed to that possibility as the one and only truth. If all you can see is an insult to a beloved kernel, that's your interpretation, not mine.
Porting cdrecord would be a good test of the possibility that problems in Mac OS X scheduling are involved in the slip.
Tim
-
Re:Diversity is the key
-
Re:Diversity is the key
-
Re:Diversity is the key
-
Re:Diversity is the key
-
Free update agents are plentiful
I can see the need for the RH Network if you're updating a lot of machines but for personal use there are a lot of alternatives (see Freshmeat) that do the job perfectly. I for example run a little utility called "frmps" as a cron job - it simply checks every night if there are any new rpms available, installs them and mails me a report. That's all I need to keep my system current automatically.
And come on folks, their business model is to sell support. Of course they will charge for it, and they should. This is no news.
-
Oh no!!!
Because of its all in all crappy command line interface, I gave up on up2date on my machines that don't have X.
I use rhup, a free (you don't get charged ten bucks to use it) utility to download updates for you. -
XFree86 4.0.3
The biggest problem with people mistaking Slashdot for Freshmeat is that there is rarely enough information given for a good software announcement. That said:
XFree86 is a freely redistributable implementation of the X Window System that runs on UNIX(R) and UNIX-like operating systems.
Author:
The XFree86 Project <XFree86 at XFree86 dot org>
Homepage:
http://www.xfree86.org/
Tar/GZ:
ftp://ftp.xfree86.org/pub/XFree86/4.0.3/
Changelog:
http://www.xfree86.org/4.0.3/RELNOTES.html
Trove categories:
Old Appindex :: X11 :: System
Summary of updates in 4.0.3.
Some temporary file-related security vulnerabilities are fixed.
Screen corruption problems and palette saving problems with some Neomagic chips are fixed.
'XFree86 -configure' problems are fixed in some drivers (including sis and i810).
A problem with some plain S3 ViRGE cards is fixed.
Some Xaw incompatibilities with Xaw6 are fixed.
Some XKB files are updated.
Some trident driver updates, including fixing acceleration for the Cyber9388.
A palette saving problem in the vgahw module is fixed.
Support for the wsmouse protocol is added for OpenBSD/i386.
A load problem with the sis driver module, and some depth 24 problems are fixed.
Support for the "PD" variant of the ATI Rage 128 is added.
Support for GNU Hurd is updated.
Some TrueType font problems are fixed.
The mga driver doesn't attempt to drive the G450 if the "mga_hal" module isn't available.
A problem with bold font simulation in xterm is fixed.
The (DPS) stub files created by pswrap are now compatible with the Adobe version.
Some glint driver problems are fixed.
Support for building on OpenBSD-current, and multi-thread support for OpenBSD are provided.
A problem with the ThinkingMousePS/2 protocol is fixed in the mouse driver.
Support for the Render extension with Xinerama is added.
A DGA-related server crash is fixed.
Some Chips & Technologies driver bugs are fixed.
Some tseng driver bugs are fixed.
Some Alpha platform updates are included.
Support for the GeForce3 is added to the nv driver.
Misc build-related issues are fixed.
Various documentation updates, including a reworked XFree86(1) manual page. -
Re:voodoo5 5500Your comment says a lot about supporting open-source, doesn't it ?
I purchased a Voodoo5 5500 not because I saw 3Dfx commercials (I'm in the U.K. and we don't get them); but because they allowed Daryll Strauss (who implemented Glide for Linux) to open-source his code and 3Dfx provided XFree86 developers with full documentation for the whole Voodoo range.
Which is more than nVidia have done; and which is why you will find full and comprehensive support for *all* Voodoo cards in XFree86 4.0x - and that is more than you get with nVidia; who are always a full XFree86 release behind with their 'closed-source' drivers!
I got rid of my TNT2 when I found out that nVidia couldn't even be bothered to support the XRender extension with their 0.9.5 driver release and nobody at nVidia would reply to my e-mails asking if/when it would be supported. The XFree86 2D-only support provided support for XRender but then I couldn't use the 3D acceleration of the TNT2 for anything.
Indeed, my computer doesn't crash now while playing Unreal Tournament using OpenGL with the Voodoo5 - why ? - because nVidia's drivers don't fully support SMP and freely admit in the driver README file that it can cause random lockups on SMP machines.
Add to that the number of problems people have been experiencing with these drivers, enough to add comments to the Freshmeat project page here.
If I am going to experience random lockups while using my machine; then I might as well be running Windows
:-PP.S. No, j00 d0n't 0wn a11 u5 3Dfx u53r5, nVidia does (seeing as though they bought out 3Dfx), so get yer facts straight!
-
Re:Life after SF == Life before SFone of my pet peeves is thinking I found a program I really needed but didn't have the time to work on myself, only to find out it hasn't been updated in 18 months
Have a look at the vitality index on Freshmeat. An example is available at the bottom of their stats page.
Have fun
//Johan -
Bookmark Managers
-
Re:Packet writing works with DVD-RAMPacket writing in 2.2.17+ and 2.4.0+ works just fine with no special patches. Just mount away read-write (as long as you built your kernel with read-write support). Though it is marked experimental and dangerous, I haven't had any trouble with the two drives I have here. You can also use any file system you wish. It doesn't have to be UDF. It doesn't work with CD-RW yet though.
BTW, if you want to create UDF filesystems, you need the UDF utilities which you can get from http://freshmeat.net/projects/udf/
-
WeirdX
There's a GPL'd Java app called WeirdX that functions as an X server. Since That covers the remote X on win9x part. I'm don't know of any way to use it securely, though. (hmm, maybe that would be a good project, a Java ssh client with X forwarding...)
-
Re:Are there Free X-Servers for Windows.
Check out WeirdX. It's hosted on SourceForge and also has a project page on Freshmeat.
WeirdX is a GPL'd Java-based X server and even has ESD support. It should run great any operating system which has decent Java support (including Windows and MacOS).
Hopefully this is what you're looking for. If you're willing to try an X server for DOS, then I suppose Java is even more than adaquate. (:
-
Bandwidth not the only problem
The ability to work on lower bandwidth links is not the only thing that needs to be addressed with X to make it feasible for the sorts of applications mentioned above. What we also need is some way of disconnecting and later reconnecting to a previous session. Just like screen does for terminal sessions.
I don't imagine that this would be *that* a feature to add to X, with a caveats - like the screen size, bitrate etc not changing. Since low bandwidth links also tend to be less reliable (going out of range with mobile phones etc) this would be really useful and is a good reason why people often use VNC between linux systems even though they could be using X. -
You can always get an MCSEfrom the you-can-always-get-a-MCSE dept
hehe, and to help train for that MCSE, get the MCSE Trainer
Oddly enough though, on Linuxgruven it talks about how the market has been so bad for technology companies, but not them!
-
The solution so farWell, there's no really, really good stuff yet, but you can control the mouse now. You can use a standard remote control with a serial device you have to build (but its pretty simple).
Did you look on freshmeat? All you have to do is look!
-
Stone soup
Access is just being used as the front end. [...] Access is definitely not good for multiusers dbs, unless you have a backend to it.
It seems to me, that (at runtime, anyway), we're pretty close to dealing with stone soup here. If you're only after a front end, why not use (now here's the brilliant bit) a front end? Why use the saw from a Swiss Army Fork instead? There are bazillions of nice, neat GUI frontends, from Python and Ruby RAD tools through PERL-based Web front-ends. Go visit FreshMeat and have a bit of a browse. -
This is actually very easy.There are ODBC drivers for MySQL that can be found over at Freshmeat.
-
This is actually very easy.There are ODBC drivers for MySQL that can be found over at Freshmeat.
-
a quick search
I performed a quick search on Freshmeat for you. Here's the results (filtered for stuff that's actually relevant, I think). In no particular order:
CYCAS - not sure if it's open-source, but will run on Linux and BSD and looks pretty powerful
Jcad - written in Java, this is an open-sourced CAD which works with DXF file formats. Not the most powerful of tools out there, but it's a start
iCADis - can't tell much from the site, but it might be worth a try. Uses GTK and is covered by the GPL
OCTree - looks like it has a really innovative interface. Not sure about the license though.
Varicad - for mechanical engineering. Looks good, but unsure if it's open.
QCad - seems to be one of the better ones, and it's open.
That's all I can find. You can judge yourself if you need it to be 100% open-source, if you need it to be free, and if you need it to run on a particular platform. Perhaps you might settle on a combination of these, since it doesn't look likely that you'll find something that meets all 3 conditions (assuming you were looking for it).
If you're a programmer, then by all means help out with one of the open-source projects out of the ones mentioned above. Lots of them could use things like improved rendering (speed, effects etc), and the ability to load lots of different file formats. -
Re:A little test.
-
I thought...
I thought they meant this FIPS! I figured it was taking it a bit far making a disk partitioning program in to an Advanced Encryption Standard, but you never know...
;-)
"I may not have morals, but I have standards." -
Re:Why ca't you use it in RH?
You can, take a look at this fresmeat article!
Szo -
Data
I don't really understand what's so interesting about Deja's code. Should be no major problem to create a search engine / interface with all the code that is out there for indexing etc. and all the capable people willing to write / enhance free software.
The archived postings are the interesting part. At groups.google.com it says that there is a terabyte of data. Maybe it could be made available for download per FTP, one tar.bz2 file per month per newsgroup. Different projects could then try to use the data... Tools like MG (Managing Gigabytes) can create an inverted index that reduces textual data to about 40 percent and is searchable. Well, that's still 400 GB, but HDDs are getting cheaper all the time ;-) -
srm
-
Re:Of course no C/C++
-
Re:GraffitiI just saw this the other day on Freshmeat, it's a Virtual Keyboard for just this kind of thing. (for the link paranoid: http://freshmeat.net/projects/xvkbd/) Personally I like this approach because I've never really got the hang of grafitti. I can always go faster if I use the little keyboard thing. Of coarse, then someone showed me that to really get going, you should just enter the data on your computer then hotsync it in. It's a lot easier that way.
I think that's the best way to go, but there does need to be a way to get data in "on the road." So far, this is all I've seen from the open source camp, and it does have it's issues.
- X-Based, so the PDA needs to be X-Based
- Not all X programs accept events from other applications, so they are effectively useless for this kind of thing
- It takes up screen real-estate, you have to have it to type and to have it you give up screen space
Hopefully, these guys will embed some kind of graffiti in it making it a complete solution.
-
Word docsWhy not just use antiword instead ?
Works for me.
-
Linux FilteringActually, there are a number of HTML proxy filters. Start with the list in Freshmeat Old Appindex
:: Daemons :: Proxy. In addition to the content filters which are already there, notice that the banner filter technology can also be used to filter other things.Linux firewalling also allows user-level filters -- packets can be directed to programs for filtering.
-
Text onlyI live in a non GUI world.
There nothing worse then trying to get information from a site and having the whole site renderd unusable by "modern code".
There was a time when I had no option but to use my laptop to surf the web and with its small harddrive X was just too big to use just for the benifit of a GUI browser.
links/lynx/w3m were all incapible of viewing the site of the manufacture of the laptop. What was I to do?
I was to say that I would never buy that brand of computer again.
If they can't display in plain text then they lose all my buissness.
Txt browsers are the fastest means of getting to real information on the web without all the distraction of corp america trying to get me to click on this and win that.
Altavista was even so nice as to know that you were using a txt browser and give you a readable page. Google looks great in txt or GUI.
The comand line is your friend. ibpconf.sh
-
Re:Browser good, mailer bad...
I am using Sylpheed, it's quite a quite good 3 pane gtk mail client, rather stable, handles international character sets.
It does the job rather well for me. (small, fast, user friendly)
-
Re:Are there good pre-made firewalls for 2.4?I was amazed to find configuration tools already out for iptables, but all you need to do is a search at Freshmeat ][.
I, too, would like to see some fairly robust front ends come out with support for IPTables, but I think it will take some time. I expect something like this when the distributions start incorporating the 2.4 kernel (i.e. firewall-config under RH 7.0).
In the meantime, realized that 2.4 includes backwards support for IPChains as long as you compile it into the kernel.
-
OpenNap
The OpenNap servers are *very* good. I don't think I've used a Napster server for several months now. Grab gnapster and get this and you are good to go.
-
More SSH NewsJust read on the cryptography@c2.net mailing list that the Fressh package has a security hole - when a
/dev/urandom is not present the code falls back to an awful 'random number generator'.
See the message original message below:
Date: Wed, 14 Feb 2001 14:29:00 +0000
From: Charles M. Hannum
To: cryptography@c2.net
Subject: Bad PRNGs revisted in FreSSH
The newly announced FreSSH, when there is no /dev/urandom available,
uses a `fallback' to seed its PRNG that consists of:[Fucking code snipped coz Slashdot filter no longer accepts C source code because it detects 'junk characters' - WTF!?!?!]
I don't think I need to tell people on this list why that's absolutely
horrible; I'm just pointing out that code is still released today with
crap like this. I would have thought we'd learned this lesson years
ago with the AFS, krb4, Netscape, et al vulnerabilities.
-
Re:Here's my part of the discussion
The key concept is the storage engine driving the groupware server - all of the messages and data need to be stored somewhere.
I've been a Notes Admin since v3.3 or so, and I have to say that I think Tom has hit the nail on the head with this point. One of Notes/Domino's strongest features is its excellent database structure, and the replication technology. The Notes Client and the Domino server share the same database engine, so moving a particular application from a locally stored version to a server for general use can be done by simply copying the file.
It's user interface is possibly its worst feature, so hopefully we can ignore that.
I'm no DB geek by any definition, but has anyone thinking about this considered what/how the database ought to work? Is it possible to
implement a solution built on top of MySQL or Postgres, or something else that might scale well?
Can either of these do replication/data synching between servers? Is there any OS DB that does? That what should be used. Combine with standard email, LDAP, something like SteelBlue, or other ColdFusion-like system, and you've got most of the stuff you need.
What we need from a groupware project is for all these types of elements to be tied together, while still allowing the individual elements to be upgraded individually and even replaced with alternates.
That's what I'd like to see, anyway. A real open source replacement for Notes, combining the best of everything, for everyone.