Slashdot Mirror

I've subscribed to a whole bunch of mailing lists. The sourceforge mailing lists in particular are great. I'm currently a member of the gdalgorithms list. I learn new things every day.

While the DFSG and the OSD are equivalent, that doesn't mean that Debian and the OSI always interpret them similarly.

Debian generally errs on the side of caution, whereas the OSI seems mostly interested in looking good in the press, so lets dubious stuff like the APSL through.

The last word on the APSL on debian-legal concludes that the APSL probably doesn't even qualify for non-free, because of the insistence on a 12 month minimum source publication period, whereas Debian only keeps source for versions of binaries we are currently publishing.

When the heck didBUGTRAQ Agree?

Here are some hints...

Securing your box.

Now, secure your box... And please stop trolling.

This functionality isn't present in Mozilla, even though it would solve many of the incompatibilities between Mozilla and the rest of the internet. The developers may have decided that accurate traffic stats are more important than a few rendering inconsistencies, which is a completely reasonable position. In light of their goals to push web standards, I suspect that giving the end-user the ability to masquerade as a less-compliant browser may simply seem antithetical to their purposes and philosophy. Still, I personally would have preferred a "spoofing" feature over accurate statistics, but I'm not the one writing an underdog rendering engine.

Linux has had support much longer than the article implies. Here's one post which is significantly before.

In fact, this isn't the first since it mentions the USB 2.0 support that was in the 2.4 -ac kernel. It only mentions a patch for Linus' 2.4 kernel tree.

Actually, the version 2 protocol has been in use for some time. On my system, where I installed Razor in February 2002:

paul@wallace ~ > razor-check -v
Razor Client Tools 1.19, protocol version 2

Eventually, Razor is going to use the Nilsimsa Hash Algorithm, which is supposed to be able to detect spams where the spammer made only a minor change to avoid being matched against previously transmitted copies. The Razor V2 protocol has support for this hashing algorithm and others. Who knows, maybe they're already implmented it? Ought to take a peek at the perl code sometime....

Hi, I'm one of the Audacity developers. A few of us are following the discussion here, so feel free to ask questions of us.

Regarding the MP3 exporting, the next Audacity 1.1 release can export to arbitrary command-line programs on Linux. The code in 1.1.0 has some bugs (doesn't work on big-endian hardware) and no user-interface yet, but see this mailing list post for more information.

As for dropped frames during recording, this has been our most long-standing problem. Dominic is planning a "Smart Record" mode where the program will do nothing but record samples with the minimum possible latency. On Linux, we also hope to move to ALSA eventually, which should help with latency.

• Bunnie's XBox Hacking Site (he's the guy that wrote the paper)
• XBox Linux Project
• XBawx.org
• XBox Linux Mailing List
• XBox Hacker Forum
• Xtreme XBox

The ZwXxx routines provide a set of system entry points parallel to some of the executive's system services. A call to a ZwXxx routine from kernel-mode code results in a call to the corresponding system service.

Now, as Microsoft do not document the executive services, only the public WIN32 calls and the kernel-mode DDK calls, one has to rely on the ZwXXX documentation for the actual powers of these executive services. The interface should be the same when called from user-space as when called from kernel-space.

Sendmail in OpenBSD hasn't run as root since 2.9.

Theo and team seem confident in Sendmail's security. They've spent upwards of 30 hours going through the source and reporting bugs. That's why it's included in the default install. Keep in mind that you can easily disable sendmail and go to postfix or another mail transfer agent through the ports tree if you don't trust Theo's judgement. An email regarding the why's of using Sendmail versus another MTA are here.

I implement sendmail all the time, and I work in an IT security shop. Set up properly, it's rock solid. My pen-tester co-workers have the same knee-jerk reaction to sendmail that you have. They heard somewhere that sendmail is insecure... Funny though, not one of them has been able to penetrate any of my OpenBSD boxes, through sendmail or any other avenue. These are guys that walk through firewalls and IIS webservers in moments. They're so good at this, that we give a money back guarantee, we don't get in, it's free. If OpenBSD gets popular, we might start losing money.

RedHat Up2Date, what about that? I seem to remember a bug in that app.. here's the text from redhat: [RHBA-2000:081-05] Update Agent`s rhnsd daemon leaks file descriptors (can't seem to find it on RedHat after a quick search)

The new Update Agent provided with Red Hat Linux 7.0 contains a daemon, rhnsd, which periodically polls Red Hat Network for updates. This daemon leaks file descriptors. On a default installation, all available file descriptors will be used by rhnsd in approximately three weeks, making the system unusable.

I really can't recall something like this for windows... something with the DEFAULT INSTALL that will make a windows system unusable after 3 weeks.. (unless you count the XP activation... heh)

This is a modified orinoco_cs driver with firmware loader. It supports wireless extensions. I use it on i386 and ARM systems every day without any problems.

I made a wallet-sized PDP-11 (see photo) using these tools.

I put the simh PDP-11 emulator and unix_v7_rl.dsk along with the following script onto a CF card formatted as a DOS FAT partition.

set cpu 18b
set rl0 RL02
att rl0 unix_v7_rl.dsk
boot rl0
#boot
#rl(0,0)rl2unix

You have to type those last two lines manually to the PDP-11's boot prompt.

I'm ready to roll with a PDP-11 in my wallet (or, if you include the $9.95 CF-USB (Linux driver) card, in my Penguin Mints container, which matches the black and yellow 48MB Lexar card I got on sale at Fry's for $19.95).

Total cost for a PDP-11 running Unix: $29.90, mints not included.

BTW, the default V7 "root" password is "root" (I ran John the Ripper and it took 0.00002 seconds).

It's programs like these that make some people so queasy about Open Source.

Sure, it's very interesting that Linux has a system interface that's so straightforward that it can be easily manipulated in sort-of-real-time by a simple scripting language, and I'm sure you have to be root to run it, but somehow the fact that somebody's already put together something like this, even just as a proof-of-concept, really makes me less confident about Linux, not more.

Maybe it's just the whole Matrix-like undertones.*

*ObGeekFiction: Actually, the first literary reference that came to my mind was Hiro's "BigBoard" in Snow Crash. (Looks like someone is working on the Metaverse too...)

For example, the apps are rough around the edges and source code for them doesn't seem to be available.

Message: 8229011
FROM: Kurt Skauen
DATE: 03/27/2002 10:14:53
SUBJECT: [Atheos-developer] :(

Several of you have requested my responce to this. I don't really see
why. You all know what my stand is. That includes you Bill Hayden. I
won't reiterate that any more...

I was hoping to get started on AtheOS again during the easter wacation
(now that I'm done with the exams for the pilot license). Unfortunately
the first thing I fixed was my mail-account at atheos.cx :(

--
Kurt Skauen. ( http://www.atheos.cx/ )

"There are two kinds of people, those who do the work and those who take
credit. Try to be in the first group, there is less competition there." __
Indira Gandhi

_______________________________________________
AtheOS-developer mailing list
<EMAIL: PROTECTED>
https://lists.sourceforge.net/lists/li stinfo/atheo s-developer

he replied with a sad smiley.

Where did you see that?

I was looking for a response from Kurt in the thread here, and I didn't see anything.

There is some sort of funny "you've got no right" vs "read the gpl sometime" comments in there though (from other people, not kurt).

Last year I tried really hard to get RedHat (LinuxPPC) to work on a Mac. It didn't recognize the Ethernet card I was using, so I had to download the kernel sources, figure out what configuration options I needed to turn on, recompile, reboot, then repeat until I managed to figure out how to enable the right Ethernet support.

And then it so happened that the new kernel didn't support my display properly -- in order to use anything more than unaccelerated 8-bit video, my display required kernel patches which hadn't been rolled into the main distribution yet -- so I had to figure out what was different in the code between the kernel I had been using and the kernel I was using now, and patch my new kernel source with the display diffs, recompile, swap out kernels, reboot... (here's evidence of my pain)

And the latest kernel also didn't support audio or my serial modem. I never could get those working. I still don't know if the latest Linux kernel on a Mac properly supports audio.

In the end, I finally gave up on trying to use Linux on a Mac.

No. Its immune. Check out freebsd-security if you want more detail ( geocrawler is a good place for archives if you arent on the lists )

traceroute provided an example of an exploit for a double-free in a setuid program.

That sounds like the ARC firmware. I've used it many times to install Linux, though it was about 5 years ago now. Check out a thread I contributed to at google groups. There are some useful links there.

Further, I seem to recall that this post describes roughly what I used to do on these machines.

Sounds as though you gave up without really trying...

--

Alan Cox is also in favour of upping HZ or getting rid of it altogether - take a look at this thread. In one posting he says it would improve the quality of both games and MIDI music.

In fact, until Windows 2000 (which has a BSDI ported stack that cost them ~$3M in fees), the Microsoft stacks routinely violated the RFCs on connection closing

Regards, Tommy

Please, read this post carefully:

FROM: Mike Bouma <mike.bouma@talk21.com>
DATE: 01/25/2002 02:33:58
SUBJECT: ports/34262: Can't compile port sysutils/kernel





>Number: 34262
>Category: ports
>Synopsis: Can't compile port
sysutils/kernel
>Confidential: no
>Severity: critical
>Priority: high
>Responsible: freebsd-ports
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: sw-bug
>Submitter-Id: current-users
>Arrival-Date: Fri Jan 25 02:40:01 PST 2002
>Closed-Date:
>Last-Modified:
>Originator: Mike Bouma
>Release: bouma FreeBSD 2.2.8-STABLE
>Organization:
>Environment:
>Description:
This port is broken and doesn't compile.
>How-To-Repeat:
make menuconfig
>Fix:
Install GNU/LNUX
>Release-Note:
>Audit-Trail:

Sincerely, Mike Bouma

Yesterday, information became widely available that described possible stability issues (system crashes, hangs, etc.) when using an AGP video card under Linux in conjunction with an AMD Athlon processor. It was generally called a "bug" in the Athlon CPU.

More information is now available at http://www.gentoo.org, including an analysis of AMD's response. AMD's official response was posted to LKML, and is available at http://www.geocrawler.com/lists/3/Linux/35/175/762 6960/.

There is apparently some kind of bad interaction between the AGP GART ("Graphics Address Remapping Table", I think?), speculative memory operations performed by the Athlon processor, the memory mappings used by the kernel, and cache coherency. The details are beyond me, but the practical upshot appears to be that the wrong data ends up being written back to main memory at some point.

I recommend reading the above LKML thread if you suspect you are affected by this issue. Information is still being uncovered, and it is not immediately clear how this occurs, what causes it, who is affected by it, and how to work around it.

In particular, there is some uncertainty as to whether the "mem=nopentium" option actually prevents the problem, or merely makes it less likely to occur.

And, for convenience, a rundown by the players involved (both for the Linux kernel and AMD) is here.

In short, for the reading-impaired, it's not an Athlon bug.

Where did you get that from?

The issue that the OpenBSD guys had with IPF was that the license wasn't 100% BSD compatible as it stood when they decided to ditch it. I can't recall exactly what the issue was, but there's historical posts in the misc@openbsd.org mailing list. (Searching for Theo De Raadt and IPF should be enough - he's explained his position at least a half dozen times). Afterwards. Darren decided to change the license so that the other BSD's wouldn't ditch IPF in favor of PF too.

All in all, one of the things I respect most about the OpenBSD guys is how they do stick to their principles, as they did in the IPF fiasco.

more evidence

Even funnier/sadder was the thing with Tricon. He represented a Dutch company named "Tricon Engineering BV" that held a trademark on the name "Tricon". And because "Triton" could be confused with Tricon, he got an injunction on people advertising computers and motherboards with an Intel chipset commonly known as "Triton". He even tried to get Microsoft in the sack, because Windows 95 flashed "Triton" on the screen when booting on a machine with said chipset. Heise article (in german), post from the freebsd-chat, and the Gravenreuth Abmahnungs FAQ (in German), Part 1 of 6.

As said by Dick Johnson:


If we change anything......, we should define a new system of units, PI, instead of SI. The basic unit is measurement is the Penguin. It is abbreviated as p.

Powers of 2:

2 ^ 0 = p (1)
2 ^ 1 = dp dipenguin
2 ^ 2 = qp hepenguin
2 ^ 3 = op octpenguim
2 ^ 4 = hp hexpenguim
2 ^ 5 = ddp duodipenguin
2 ^ 6 = oop octoctpenguin
2 ^ 7 = ohp octohexpenguin
2 ^ 8 = hhp hexahexpenguin
2 ^ 9 = dhhp duohexahexpenguin
2 ^ 10 = kp kilopenguin
2 ^ 20 = mp megapenguin
2 ^ 30 = gp gigapenguin
...etc.

........ otherwise we should leave it alone!

Well, if you have checked the linux-ntfs website, especially the mailing list archives you would see this question comes up a lot.

Here's one reply to why it hasn't been done yet.

So you started dishing a bunch of general complaints about the nature of Debian, and couldn't take it when someone disagreed with you, and didn't care to up the politeness level. Um, yeah, people on Debian lists complaining that Debian is doing everything wrong and they should do it my way don't tend to get much respect, just like everywhere else in the world.

For reference, the message is
http://www.geocrawler.com/mail/msg.php3?msg_id=1 28 1814&list=199

*

Here's Matt's post on Geocrawler:

here

I don't think the "flaming" is nearly as bad as he makes it out to be.

While we are talking about incompatible kernel patches, please be aware that ALSA 0.5.12 does not work under 2.4.15. You need to get the CVS version, as described here . ALSA 0.5.12 compiles, but does not work.

None of the views of the petition go against any law, Bayh-Dole or other, that's just yellow journalism on the part of Silicon Valley. In fact all NSF and NIH program directors that we've discussed the petition with are all in favor of Open Source. They just feel that because of Bayh-Dole, the can't require that software be released Open Source.

Also, if you want to read the in-depth discussion that we had with Phil Green, take a look at the mailing list archive here, instead of the tiny piece that silicon valley completely misquoted.

Actually, it only appears to work great. The great conumdrum, is something broken if it appears to work? Read up more here. I.e. It does have the same problem, it is just masked....

For good details on what broke ALSA 0.5.12, see here.

Actually, it only appears to work great. The great conumdrum, is something broken if it appears to work? Read up more here. I.e. It does have the same problem, it is just masked....

For good details on what broke ALSA 0.5.12, see here.

I ues both Galeon and Mozilla, and while I prefer Galeon, I miss Mozilla's sidebar. It seems to have been coded once (look here) but somehow never made it into the Galeon main distribution.

While we are talking about incompatible kernel patches, please be aware that ALSA 0.5.12 does not work under 2.4.15. You need to get the CVS version, as described here. ALSA 0.5.12 compiles, but does not work.

Hmm, recently OpenBSD and FreeBSD (I'm not sure about NetBSD though) have added improved dirpref code (created by an OpenBSD developer(s)).

When data is written with the new algorithm, subsequent reads and writes are on average faster (being conservative). People are seeing 6x improvements for certain tasks as well!

So while there weren't any major changes to the VM in FreeBSD AFAIK as well, if the benchmark involves using any files on the disk, then it'll most likely be sped up...!

Here's a link to the discussion on the FreeBSD-stable mailing list...

and another link...

Hmm, recently OpenBSD and FreeBSD (I'm not sure about NetBSD though) have added improved dirpref code (created by an OpenBSD developer(s)).

When data is written with the new algorithm, subsequent reads and writes are on average faster (being conservative). People are seeing 6x improvements for certain tasks as well!

So while there weren't any major changes to the VM in FreeBSD AFAIK as well, if the benchmark involves using any files on the disk, then it'll most likely be sped up...!

Here's a link to the discussion on the FreeBSD-stable mailing list...

and another link...

See http://www.geocrawler.com/lists/3/Linux/35/2250/67 89857/ and related emails in the thread - the "exploit" just gives you a non-priviledged shell because ptrace() does not honor the setuid bit.

See http://www.geocrawler.com/lists/3/Linux/35/2250/67 89857/ and related - according to the thread ptrace refuses to honor the setuid bit and even though the exploit program thinks it has succeeded, it just provides a non-priviledged shell.

Tucows has a new "exciting offer", for software authors. They can now get "new customers", watch "competition's software" and "purchase keywords". Submiting software now means buying one of their "bronze, silver or gold accounts". The more you pay, the more visibility you get.
This totally breaks free software rules.
Have a look at this post .
What authors are now seeing when they want to submit something to Tucows is this page .

BTW, with -ac you don't get the most up to date ext3, 0.9.12.

The government funds a lot of university research that is at least published and many times open source as well.

Geocrawler is no longer being maintained (http://www.geocrawler.com/about/)

Geocrawler is not the most important site in the osdn but it's usefull.
--Bram.

It's nice to see that so far more projects have been hilighted for being open than for not. I'd like to add Galeon to the list. The devel list happily accepts patches, even my poor attempts to produce graphics for it.

Not. You just can't see them because they happen to be firewalls.

The Geocrawler mail-list archive of OpenBSD misc has nothing but doubled from 1996~2000.

Speaking of which, is Geocrawler out of business? there are no messages showing up for September...