Slashdot Mirror

The new sourceforge fork of atscap is now up on sourceforge: http://sourceforge.net/projects/atscap-gpl/

Can the project owner upload the atscap source tarball into sourceforge please?

irate radio is working to be part of the solution to that particular problem.

I see someone has already posted the TLE's for this, so at least there is a chance that we can track it.

Does anyone know if Gpredict can calculate impact points ?

However, it's important to realize that he does NOT own the copyright to any patches he may have accepted. As a result, he IS bound by the recursive nature of the GPL on those patches, and any derivative works. I know of one project that's moved from the MPL to a private repository (DROD) they had to get permission from every contributor, and they removed the code written by non-consenting contributors from the codebase.

The source code is still released under the MPL, but it's developed on a private repository. The original announcement of this can be found on the SourceForge page.

Furthermore, in any country in which the GPL is enforceable as a contract (not Canada, by the way. All copyright licenses in Canada must be signed by the copyright holder), the GPL has no termination clause, so he cannot simply 'revoke' the license and state that all uses have been invalid (unless he's Canadian, in which case the GPL never was a copyright license in the first place).

Disclaimer: IANAL.

Since it used to be hosted on sourceforge, it would seem an appropriate location.

I looked at Dexpot some time ago, and while it looks lovely, I also note that the last release was a year and a half ago, with no news items on the website since then. Is this project dead? Though I am happy to note that the site actually loads now -- last time I looked it took *ages* to come up, and that was even without the benefit of a slashdotting.

Then again, I happen to be using Virtual Dimension, which likewise seems to be dead, with no releases since July 2005. I contracted this particular VD :) only after my previous love, Virtual Desktop Toolbox, went belly-up when the website disappeared and the sole dev vanished into thin air.

Cheers,

A quick and easy way to check all your files is to use md5deep, which
will scan directories recursively and generate all the md5s into
a single file which you could compare against a baseline:

http://md5deep.sourceforge.net/

I thought about this myself. One possible solution that I considered would be to maintain a local list of files on your server and their CRC/Hash values. A script on the server would scan all the files and output a similar list than you could then check against your local copy and would quickly identify any new or changed files. This could be set to a cron job to do periodic scans or just initiate a manual scan whenever.

Congratulations! You have just described Tripwire.

In 2.6.24, eCryptfs overhauled its I/O mechanism with the lower filesystem (check out fs/ecryptfs/read_write.c). It used to directly manipulate the lower inode address mappings, which caused problems with certain filesystems like NFS (they like to be the only filesystems directly locking, reading, and writing their own address mappings). Now it opens a persistent lower file for each and every stacked inode and uses that for all I/O with the lower filesystem. This significantly decreases the complexity of the execution path for reading and writing the lower data. Together with this patch, eCryptfs now works pretty well on networked filesystems like NFS and CIFS.

There is another patch to provide HMAC integrity enforcement, and the kernel GIT tree for eCryptfs has a branch indicating that filename encryption is being worked on.

In 2.6.24, eCryptfs overhauled its I/O mechanism with the lower filesystem (check out fs/ecryptfs/read_write.c). It used to directly manipulate the lower inode address mappings, which caused problems with certain filesystems like NFS (they like to be the only filesystems directly locking, reading, and writing their own address mappings). Now it opens a persistent lower file for each and every stacked inode and uses that for all I/O with the lower filesystem. This significantly decreases the complexity of the execution path for reading and writing the lower data. Together with this patch, eCryptfs now works pretty well on networked filesystems like NFS and CIFS.

There is another patch to provide HMAC integrity enforcement, and the kernel GIT tree for eCryptfs has a branch indicating that filename encryption is being worked on.

You mean DenyHosts? Works like a charm.

I'll see your good point, and raise you a pf.conf snippet:

### MACROS AND TABLES SECTION
table <wan_bruteforce> persist

### PACKET FILTERING SECTION
block in quick on $if_wan inet from <wan_bruteforce>
# ...
pass in on $if_wan inet proto tcp from any to ($if_wan) \
port ssh flags S/SFRA synproxy state \
(max-src-conn-rate 3/30, overload <wan_bruteforce> flush global)

That's how you can block non-massively-distributed password dictionary attacks on the BSDs, anyway. Sadly, the fact that OpenBSD's firewall can perform this task on its own means that we probably won't see this feature worked into OpenSSH itself any time soon -- so on Linux you'll need a third-party script such as DenyHosts, as others have already pointed out.

(And yeah, unlike this PF configuration, DenyHosts lets you synchronize your table with a sort of universal blacklist of blocked hosts, so some might choose to run it on BSD anyway. It sounds like a good idea on paper, but boy does it suck when your home IP address keeps inexplicably winding up on the blacklist due to what turns out to be a single site's massively misconfigured server.)

But I think the most important lesson to be learned here, assuming that this thing does turn out to be an ssh attack, is that allowing single-factor, password-based administrative logins to a highly connected host is never a good idea. If you have the luxury of complete control over the site and its users (or are simply a highly empowered BOFH), disable password-based logins entirely and force the use of ssh public keys:

# /etc/ssh/sshd_config
PubkeyAuthentication yes
ChallengeResponseAuthentication no
PasswordAuthentication no
KerberosAuthentication no
GSSApiAuthentication no
UsePAM no

As a concession, if you want to ensure access without having to carry around an encryption key on a USB dongle, on Linux you can use PAM and libpam-opie to set up secondary access using a dual-factor combination of an S/Key one-time password and your regular login password (S/Key is like Steve Gibson's much-trumpeted "Perfect Paper Passwords" system, which is ingenious in its own right, except that S/Key is designed so that you don't need to keep your secret key stored unencrypted on the very server you're worried about protecting):

# /etc/ssh/sshd_config
PubkeyAuthentication yes
ChallengeResponseAuthentication yes
PasswordAuthentication no
KerberosAuthentication no
GSSApiAuthentication no
UsePAM yes

# /etc/pam.d/ssh
auth requisite pam_opie.so
auth required pam_unix.so nullok_secure

With the above configuration you can still log in seamlessly using your ssh private key. But if you get stuck somewhere without access to your private key, you just pull your S/Key passwords list out of your pocket and enter the next password in the sequence, as prompted, followed by your login password. This PAM configuration has the nice property that if you enter the correct S/Key password but then an incorrect Unix password, you will be asked for the next one-time password in the sequence before you can continue: so unless your attacker is exceptionally good at plaintext attacks on large cryptographic hashes, a successful brute-force attack becomes impossible.

Wow, this post got a lot longer than I wanted it to... I'm, um, going out to get some fresh air or something.

You should also have some process that completely blocks ssh login attempts from a given IP after so many failed login attempts instead of letting the hi-jacker poll your machine for as long as he wishes.

My son is 3 and 4 months and he loves ri-li , supertux and childsplay as well as other debian games, I set up a imac g3 for him and told him "this is your computer", it dual boot OS X tiger and when ever I boot mac he tell's me that he don't like that and to put his computer on! It helps since he wanted my computer all the time (just to push buttons), also it will play his dvd's as well!, its teaching him coordination with the mouse and also the letters and numbers on the keyboard. Also keeps him away from the tv.

My son is 3 and 4 months and he loves ri-li , supertux and childsplay as well as other debian games, I set up a imac g3 for him and told him "this is your computer", it dual boot OS X tiger and when ever I boot mac he tell's me that he don't like that and to put his computer on! It helps since he wanted my computer all the time (just to push buttons), also it will play his dvd's as well!, its teaching him coordination with the mouse and also the letters and numbers on the keyboard. Also keeps him away from the tv.

I would recommend that you try out Mrxvt along with Kuake, Yakuake or Yeahconsole .

Mrxvt is a sweet and fast little console with tabs (and tab switching!).

Or Kmeleon.

On windows, you should at least be using notepad++.

Aqualung is the best audiophile player I know of. Mesk tries to be more of a foobar clone. I rid myself of windows before foobar really hit the scene so i'm not 100% sure what the most important features are considered to be.

http://mesk.nicfit.net/
http://aqualung.sourceforge.net/

And while I'm at it, where's my window shading and sloppy focus too?

http://bb4win.sourceforge.net/bblean/

Window shading, sloppy focus, virtual desktops, and all the other goodness Blackbox has to offer, but on Windows. I've been using it for a year and a half straight, have never had a single problem.

VirtuaWin is very good.

http://virtuawin.sourceforge.net/ - obviously it isn't perfect but it is better than MSVDM. The worst incompatibility I have found is that some programs show up on every desktop.

I have mentioned this before in posts on slashdot, but I have no relationship with the project.I, like many of us, have to use MS Windows for work, but with virtuawin at least I have ONE annoyance out of the way.

I second this, and my process is now automagic now that I've spent some time learning rtorrent config AND I finally found a linux cronnable RSS parser.

pytvshows
To
rtorrent
(Read the Common Tasks page to see how to have it move movies/TV shows to their own folder and set up different watch folders)

Plus XBMC having the destination directory as a source and as soon as TV shows are done they pop up.

---- Apple could provide a Framework for iPod interaction, but it doesn't - that's not open to third parties. This closes out reasonable competition for the sake of their music store. . . .

• gtkpod
• Anapod Explorer
• PodLift
• YamiPod
• Floola
• ImTOO Pod

The fact that Apple doesn't devote resources to publishing and maintaining an SDK hasn't stopped the groups above from putting out products that manage an iPod without a user even needing to install iTunes. The fact that you apparently didn't know they existed says something about the overwhelming demand for such products in the general market.

If Apple truly wanted to lock out such products, it would be easy for them to run the syncing process through a home-grown encryption tool for which they hold a patent. That would make any other product that worked an automatic infringement of the patent, and any attempt to circumvent the encryption a violation of the DMCA.

As for limiting DTrace, I think it's most likely that Apple's decision is based on its contractual agreements with the movie studios who just signed up to provide rentals. Those are the guys who demand that HD content remain in encrypted and unobservable channels from disc to screen. Granted the rental files aren't HD, but they are exploding media, to keep the Apple offerings more or less channel-neutral with pay-per-view cable, and I don't think the MPAA would be happy about a tool that allows people to snoop the video channel as it passes through iTunes.

http://popfile.sourceforge.net/

Lunix is a cut-down unixoid operating system for the C64. Did you mean linux, perchance? Either way, you're (a) wrong and (b) an asshole.

What I find missing in all the comments so far is the completely different approach to virtualization that VMware has when compared to MS and Xen. The in MS/Xen model, the hypervisor is flat out part of the OS, and the VMs rely on some sort of Dom0 or master partition where most of the real drivers exist.

In the VMware model (think ESX 3i), the hypervisor is a completely different layer that sits under the OS, so there is no direct OS dependency. All the drivers are specially designed and engineered to be high performance for that kind of environment, a reason why it scales so much better (at least when compared to Xen) and also a reason why they don't support all the devices out there.

I think for most of us that care about freedom of choice, the VMware model makes more sense going forward. A good, OS independent, thin hypervisor with standard open interfaces (VMI) for any guest OS kernel that wants to leverage paravirtualization, or just a full hardware abstraction via the VMM for the ones that do not, coupled with good, open source set of instrumentation tools and accelerated drivers.

On top of that, VMware has open sourced their virtual disk format (VMDK), has collaborated with Xen on a completely open VM portable packaging format (OVF), and has a number of fully open source programs. This is allowing the developing of the Virtual Appliance concept and has facilitated the penetration of Linux in places that wouldn't have otherwise.

Now, because I work for VMware (use as disclaimer also), I can tell you that the bread and butter for us is NOT the hypervisor, but all the stack we built on top of it, that includes disaster recovery, lab automation, VM lifecycle and a bunch of other very very high level stuff.

Still, competition is good for the market, open source or not, and as users, we'll all benefit.

We do the exact same thing, though I suspect our style of OO in C might bend your mind just a bit. The hand-rails are the important thing, whether provided for by a strong group leader or by the language the group uses.

i know this may be a little off topic, but here goes, i followed the link http://sourceforge.net/forum/forum.php?thread_id=1877483&forum_id=618307 and i ended up back at the website for this piece of software in question, in a forum where a quite heated exchange between two users kingfish and Elise , which of these two users are in the right here? both people were making points that sound , at first to be quite informed, but they make quite a go ,out of picking apart each others arguments to the point where i dont know which is which. LOL anyone care to clarify which person wasted less of their breath?? tx

Hey dude.

DRM is usually a pain for your customers. Some people like me buy stuff and try to use it and begin to really hate DRM. I hate DRM so much, I use linux at home. I'm willing to give up a decent OS just to be rid of DRM.

I'm sure your a nice person, I'm just trying to warn you: If you put your DRM junk in my app, I will download your source, and make it save without the DRM.

Then I will fork it and put it on sourceforge. If you're looking for it, it will be called the same with _free or _liberty on the end.

I will then spam your forums telling your customers that you are a liar and a thief and are using DRM to spy on your customers. Which is fairly accurate, you're putting DRM in their app you sound like a real bastard.

Go closed source or the forkers will get you.

Thanks for your concern.

Here's an open source project that tried to put horrible banner ads in their app: http://sourceforge.net/forum/forum.php?thread_id=1877483&forum_id=618307
Now they're trying to unopen source it hehe.

SMART is not foolproof, but it is the only way I know of to take pre-emptive action against HD failure. At my old job, we implemented smartmon tools. Each machine would run a script that invoked "smartctl -a /dev/hda" (yes, this works in Windows) on startup. We would redirect the output to a common folder on the file server, with a file named for each machine that ran the script. Another program (on the server) would search the common log directory, looking for troublesome SMART conditions. For laptops in the field, it logged to the local hard disk, searched it's own log file at startup, and nagged the user to contact IT if anything was less than kosher. We took pre-emptive action on more than a few hard drives.

My PHB wanted to know why computers did not have this capability right out of the box. I said, "The diagnostic information is readily available, but a system that routinely exposed marginal hard drives would trigger a lot of in-warranty replacements. Without SMART monitoring, there is a chance that at least some of these drives will sputter through the warranty period, so detecting them is not what the manufacturers really want. Microsoft could do this on their own, but their customer is the manufacturer, not us."

Accurate lip-reading techniques would be of enormous benefit for agencies involved in counter-terrorism and other law-
enforcement areas. Unfortunately, there are very few skilled lip-readers, and it is apparently a difficult skill to transmit,
so the area is under-resourced. In this paper we investigate the possibility of making the lip-reading task more amenable
to a wider range of operators by enhancing lip movements in video sequences using active appearance models. These are
generative, parametric models commonly used to track faces in images and video sequences. The parametric nature of the
model allows a face in an image to be encoded in terms of a few tens of parameters, while the generative nature allows
faces to be re-synthesised using the parameters. The aim of this study is to determine if exaggerating lip-motions in video
sequences by amplifying the parameters of the model improves lip-reading ability. We also present results of lip-reading
tests undertaken by experienced (but non-expert) adult subjects who claim to use lip-reading in their speech recognition
process.

just to mention a project that have been
working on this for a long time and deserves
recognition:
http://cmusphinx.sourceforge.net/html/cmusphinx.php

open source speech recognition project, university grade.

There is also CMU Sphinx, which is completely free (no HTK used) and very good quality.
http://cmusphinx.sourceforge.net/
http://en.wikipedia.org/wiki/CMU_Sphinx

Carnegie Mellon open-source sphinx years ago: http://cmusphinx.sourceforge.net/html/cmusphinx.php

It's a speaker-independent, continuous speech recognizer that can be configured to do everything from simple commands to full-text dictation. It's not Dragon's stuff, but it's pretty good.

They even have a pure Java version of it: http://cmusphinx.sourceforge.net/sphinx4/

Carnegie Mellon open-source sphinx years ago: http://cmusphinx.sourceforge.net/html/cmusphinx.php

It's a speaker-independent, continuous speech recognizer that can be configured to do everything from simple commands to full-text dictation. It's not Dragon's stuff, but it's pretty good.

They even have a pure Java version of it: http://cmusphinx.sourceforge.net/sphinx4/

If this is the first, what was Sphinx then?

First, in most cases there's no need to spend time comprehending a large code base. You have to be selective, and the tools you'll use will depend on the problem you're facing.

• If you're only trying to solve a specific bug, then, as other posters already commented, the debugger is your tool of choice.
• If you're facing performance problems, then use the various performance measurement tools.
• If you must evaluate the code, then invest on metric collection tools, like CCCC.
• If you want to reuse the code in another project, then you need to investigate packaging tools and techniques.
• If the code's identifiers or its structure require refactoring, then try using a refactoring browser, like CScout.
• If the code's formatting and style brings you a headache, look at formatter, like indent

Second, never underestimate the power of grep. Grep will often find things that other tools can't. It can search in documentation, comments, binary files, unparsable source code, and change logs. It can work on any language, and (with the help of find(1) and xargs(1) tools) traverse deep directory hierarchies. Unlike most other tools, grep doesn't need any setup, tuning, or configuration. Grep will often locate what you're looking for, in less time than what you need to download a more sophisticated tool.

As the developer of an Open Source package based on GTK called LiarLiar, I am very pleased that Trolltech decided to offer the Linux community such a powerful and easy to use toolkit; however, I chose to use Gtk+ because I may decide someday to release a Shareware version of my application. I receive nowhere near enough income from my app to even pay 1/10th of the license fee and I suspect many other developers are in the same boat. While the big commercial developers can afford a license, the thousands of small shareware authors would never be able to justify the license fees to be able to release their software. Thus, they will end up sticking with the windows API's.

Now if Trolltech decided to release Qt as LGPL, that would make cross-platform development of many shareware applications possible, but would likely hurt Trolltech's bottom line.

A while back I started a new job where I'd be maintaining a lot of old code, so I spent a bit of time trying to answer that same question. The first thing I looked at was OpenGrok. Sun uses it for online browsing of the OpenSolaris code. You can see it in action here. The cross referencing is nice, but it takes a while to generate, can use a lot of disk space, and is only marginally more useful than grep with a good editor.

Source Navigator is a bit more useful.

Generating call graphs can be helpful. I know kprof will generate them, but it requires generating profiling information, and more or less requires Linux, so it might not be possible in your environment. I think Doxygen can do it, and I'm sure there are other tools that can.

Other than that, I agree with the people who said to set breakpoints and start playing. Obviously it helps if you have some kind of goal in mind, or a specific area of the code to look at.

1. How a NASA-based educational MMO should be designed.

Think Big. NASA's MMO network should eventually have a worldwide support involving hundreds to thousands of NASA personnel who seed content into the system or supervise the system in various ways. It might entail tens of thousands of server nodes as well as extensively involve users machines for local processing. Naturally, some parts of the operation of the system might be outsourced, like to Amazon's or Sun's pay-as-you-go virtualized cloud computing infrastructures. NASA's MMO framework should be he definitive place worldwide to go for manufacturing knowledge -- like Wikipedia only about how to make things and simulate them and develop software to control all that. Yes, there are some sites like Marshall Brain's "How Stuff Works" but this will eclipse those by several orders of magnitude in terms of detail (and people like him would be good consultants on content if they were willing to contribute under free licenses).

The entire thing should be done under a free and open source license, including all content contributions. This may entail getting all non-NASA participants to contribute a signed document about their involvement with the project.

It should be done by NASA cooperating with the existing leaders in the open source and free software projects, like by looking at SourceForge or FSF projects (many projects already exist for physic modeling and MMORGs in a variety of ways). Hiring an existing commercial MMO group creates two conflicts -- one is that this project could detract from a current online offering, the other is that there will be a temptation not to release the details of simulation technologies (And so keep huge chunks of the software or content proprietary) or to provide older packages other than what is being commercially promoted. There is lots of knowledge in the free and open source world on how to do big systems and how to write simulation software.

Been thinking about this on and off for over ten years (including kicking around some ideas with with Al Globus in the past, not that that means he endorses anything here).

See NASA pre-proposal from about ten years ago: "Open Source Community On Manufacturing Knowledge)
http://www.kurtz-fernhout.com/oscomak/

See SSI paper of about seven years ago: "A Review of Licensing and Collaborative Development with Special Attention to the Design of Self-Replicating Space Habitat Systems"
http://www.kurtz-fernhout.com/oscomak/SSI_Fernhout2001_web.html

Knowledge should be stored in a RDF-like approach (similar to how our Pointrel data storage system works).
http://pointrel.sourceforge.net/

Open software architectures should be used, like our PataPata project tried (similar to Squeak or Python, maybe on Java):
http://sourceforge.net/projects/patapata

Overall architecture will be a hierarchy of simulated activities, structured across a loose meshwork of nodes. There will also be multiple levels of realism and detail.

It should be planned as incremental and evolutionary changes as hardware and software continue to improve -- in part from the use of this system itself for design and simulation.

2. How a NASA-based educational MMO should support both formal and informal education efforts.

Make a general learning tool usable by everyone; create safer filtered whitelisted subsets of it for use in classrooms. The use of an RDF-like approach helps support this kind of tagging and filtering across multiple data sources.

3. How a NASA-based educational MMO should connect to current and future NASA missions.

Add NASA data and knowledge to the system including detailed plans for NASA equipment. Participants will help desig

1. How a NASA-based educational MMO should be designed.

Think Big. NASA's MMO network should eventually have a worldwide support involving hundreds to thousands of NASA personnel who seed content into the system or supervise the system in various ways. It might entail tens of thousands of server nodes as well as extensively involve users machines for local processing. Naturally, some parts of the operation of the system might be outsourced, like to Amazon's or Sun's pay-as-you-go virtualized cloud computing infrastructures. NASA's MMO framework should be he definitive place worldwide to go for manufacturing knowledge -- like Wikipedia only about how to make things and simulate them and develop software to control all that. Yes, there are some sites like Marshall Brain's "How Stuff Works" but this will eclipse those by several orders of magnitude in terms of detail (and people like him would be good consultants on content if they were willing to contribute under free licenses).

The entire thing should be done under a free and open source license, including all content contributions. This may entail getting all non-NASA participants to contribute a signed document about their involvement with the project.

It should be done by NASA cooperating with the existing leaders in the open source and free software projects, like by looking at SourceForge or FSF projects (many projects already exist for physic modeling and MMORGs in a variety of ways). Hiring an existing commercial MMO group creates two conflicts -- one is that this project could detract from a current online offering, the other is that there will be a temptation not to release the details of simulation technologies (And so keep huge chunks of the software or content proprietary) or to provide older packages other than what is being commercially promoted. There is lots of knowledge in the free and open source world on how to do big systems and how to write simulation software.

Been thinking about this on and off for over ten years (including kicking around some ideas with with Al Globus in the past, not that that means he endorses anything here).

See NASA pre-proposal from about ten years ago: "Open Source Community On Manufacturing Knowledge)
http://www.kurtz-fernhout.com/oscomak/

See SSI paper of about seven years ago: "A Review of Licensing and Collaborative Development with Special Attention to the Design of Self-Replicating Space Habitat Systems"
http://www.kurtz-fernhout.com/oscomak/SSI_Fernhout2001_web.html

Knowledge should be stored in a RDF-like approach (similar to how our Pointrel data storage system works).
http://pointrel.sourceforge.net/

Open software architectures should be used, like our PataPata project tried (similar to Squeak or Python, maybe on Java):
http://sourceforge.net/projects/patapata

Overall architecture will be a hierarchy of simulated activities, structured across a loose meshwork of nodes. There will also be multiple levels of realism and detail.

It should be planned as incremental and evolutionary changes as hardware and software continue to improve -- in part from the use of this system itself for design and simulation.

2. How a NASA-based educational MMO should support both formal and informal education efforts.

Make a general learning tool usable by everyone; create safer filtered whitelisted subsets of it for use in classrooms. The use of an RDF-like approach helps support this kind of tagging and filtering across multiple data sources.

3. How a NASA-based educational MMO should connect to current and future NASA missions.

Add NASA data and knowledge to the system including detailed plans for NASA equipment. Participants will help desig

I must add "Silent Bob" - http://silentbob.sourceforge.net/ Cheers.

Understand for C++ http://www.scitools.com/products/understand/cpp/product.php if you have some money to spend. SCI will give you a 15 day evaluation copy and the cost is $495 (cheaper each if you buy more). Nobody has been maintaining it for a while but for free you can have Source Navigator http://sourcenav.sourceforge.net/. It is basically a Tcl/Tk based editor that has decent cross-referencing capabilities. It also builds a class hierarchy and lets you search on files, variables, functions, etc.

I've since added both cscope and freescope, as well as the old Red Hat Source Navigator for good measure.

I've since added both cscope and freescope, as well as the old Red Hat Source Navigator for good measure.

I've since added both cscope and freescope, as well as the old Red Hat Source Navigator for good measure.

I've since added both cscope and freescope, as well as the old Red Hat Source Navigator for good measure.