Slashdot Mirror

http://mirrors.linuxpowered.com/WhoWroteSobig.pdf

"Lets say I copied all the available tunes titles from the itunes store"

But why copy, when there's already phptunes?

Or am I clueless and is iTunes wine-able?

It works fine using any Linux web browser and PhpTunes

phpTunes lets you access iTunes from a browser, although buying might not actually work since the upgrade. I'm out of cash so I can't test.

I'm working on reverse-engineering the new stuff...
damn... they break it 4 days after I get purchasing working in phpTunes...

It's mostly worthless now that they changed the DRM, but phpTunes lets you search and buy songs, if you already have an iTunes account.

My other post here says why I think Gamespy's assessment of dating sims is [censored], so here are some links for anyone who wants to find out about them from people who don't think they're only for the terminally weird:

The ren'ai games mailing list.

You already read Megatokyo, right? Check the forums: the "dating sims" forum there includes plenty of information, as well as a FAQ which covers the subject in some depth.

So what is up with those buffer overflows...do Microsoft developers hate users and not care about quality? Well, no. It only takes one buffer overflow in the whole system that hundreds of developers have worked on, to make it vulnerable.

It takes only one buffer overflow in the whole system that any number of developers, from one to one million, have worked on to make it vulnerable.

It doesn't matter how careful you are. Zero defects at the individual level is a pipe dream. The goal of software quality assurance is that you test code to determine whether it conforms to the specifications with no astonishing side effects. Structured implementation (use of safe libraries, re-use of validated code) can reduce the effort and increase the quality of code.

Want to eliminate buffer overflow? It's easy. Just write a routine ONCE that sucks up characters and puts it into a buffer, debug the corner cases ONCE to ensure you can't go beyond the boundaries, and use that routine for all your work, without exception. Not even when marketing comes in and says "Hey, you didn't come out on top in performance when HAL Magazine ran their tests!" Oh, and your QA people have to actually try to execute some kind of buffer overflow as one part of their suite of test cases...

When a buffer overflow is discovered "in the wild," you find out the source of the buffer overflow and take appropriate action -- against the coder and against QA as well. You have to show these people that you MEASURE them by this sort of stuff.

By the way, don't forget that code should check for attempts to go "outside the box" by using unusual character sequences like ".." in URLs, too. Again, write a single block of code that does the job right, test the hell out of the corner cases, and use that code, without exception.

A Google search yields some interesting approaches. I would like to see the adoption as part of the ANSI definition of the C language an extension to the STR* library routines that are length-safe, such as the STRL* routines found in NetBSD; see the man page and the discussion in the Secure Programs HOWTO.

Don't kid anyone. Buffer overflow can be avoided, by putting in place the proper process and discipline to do the job right.

In wake of all the tragic pictures circulating the web, and even the entire issue of Time magazine.. I've put up a site, remembering the twin towers, with pictures I took myself.

http://pictures.linuxpowered.com

The site also offers, different ways to help. The terrorists may have destroyed the Twin Towers, but they can never take away the memories. They can never take away the memories of the fallen, and of all the innocents.

I'm trying to setup a site remembering NYC and WTC before all of this happened. I've setup a site
with pictures of more pleasant times..
Linuxpowered

If you have pictures of the city/twin towers before this incident, please send them to me.