Slashdot Mirror

There is also Beamer, which appears to look even better than Prosper. I am planning to try using it next time I need to do a presentation.

Powerpoint? Ha! Come back when you support "math mode".. oh, and try to make the slides look the same on any computer.

I think we need an alternate Wikipedia.
The politics and the administrators of the current Wikipedia are immune to advice.
An alternate Wikipedia could work as a filter to the current wikipedia.
When an article exists in the current Wikipedia the alternate Wikipedia would just take it's contents.
Changes in the alternate Wikipedia would also go straight to the current Wikipedia.
When an article is removed in the current Wikipedia it's last version remains in the alternate Wikipedia.
Such articles could get a notifier like: "Deleted in the old wikipedia"
Additionally there could be a system to maintain the notability of an Article as integer value.

Greetings Thomas Mertes

Seed7 Homepage: http://seed7.sourceforge.net/
Seed7 - The extensible programming language: User defined statements
and operators, abstract data types, templates without special
syntax, OO with interfaces and multiple dispatch.

Well, as it turns out, I'm kind of a fan of light-weight stream encryption anyway. It adds only trivial computational overhead. I could update the form_friendship messages to use RSA public key encryption for the friend-key exchange.

However, how secure would it be? By analyzing the traffic between a peer and the publisher, an ISP would know what NetFS sites you've visited. He could also know who your peers are. If your ISP secretly (or openly) becomes one of your peers, he'll know what files you request from him. Your ISP could even register with the publisher to be your preferred mirror, and then he'd know everything you download. In general, in any P2P system, you can never count on your peers not being your ISP, so security is pretty limited.

Can you think of a good reason to encrypt streams, even if it is very likely that your ISP is your most reliable and fastest peer to download from?

Oh, I should have added -- Microsoft also has sponsored ODF plug-ins, which is useful if you're using Office 2007, which Sun doesn't yet support.

So if you have Office 2000, XP, 2003, or 2007, you're minutes away from having an ODF-compatible office suite with 100% of the features of Microsoft Office.

If the protocol is open-sourced, I don't care if he writes a closed-source implementation. However, the current protocol that they claim to be writing isn't published on the wiki. They're keeping it a secret... so, screw BitTorrent.

I vote that we write one of our own. I've written a BitTorrent client before, and have written a protocol extension. I'm just beginning to ponder a completely new protocol. Any interest?

If the protocol is open-sourced, I don't care if he writes a closed-source implementation. However, the current protocol that they claim to be writing isn't published on the wiki. They're keeping it a secret... so, screw BitTorrent.

I vote that we write one of our own. I've written a BitTorrent client before, and have written a protocol extension. I'm just beginning to ponder a completely new protocol. Any interest?

Hey Pirate Bay folks, here's my list of feature requests for the new version of your open source torrent protocol:

ONION ROUTING:
1) Implement Onion routing (aka: Tor / anonymize the sources) as a built in feature.
2) Onion Routing should, where possible, try to use exit points and middle points that have roughly the same amount of bandwidth as you, otherwise torrenting will not become a reality through Onion Routing. So some kind of peer bandwidth algorythm needs to be incorporated.
3) Onion routing should be on by default, and each user should also become an exit point and donate 30% of their bandwidth to this. This will greatly increase the number of exit routers & provide this as a defacto alternative, as opposed to just some obscure security feature for the 31337 (hackers & government homeland types).
4) Individual site upload ratios, should take into consideration that fact that you are an exit point and some portion of that 30% should be counted toward your uploaded bytes ratio (even if traffic is going to other sites)... in other words, help promote torrent security = get bonus points from private trackers.

SIMPLIFY ISP SHAPING BYPASS
Background: Forcing protocol encryption isn't enough these days; some ISPs are shaping or even blocking torrent traffic by methods such as sending TCP RST packets to close a session, or their infrastructure auto-analyzes your encrypted traffic patters and if they are high bandwidth, very encrypted and on for long amounts of time to the same destination you get flagged & shapped (regardless of the fact that you could indeed be doing something legal)

1) There's a page on Wikipedia that lists all the "BAD ISPs" (http://www.azureuswiki.com/index.php/Bad_ISPs). This is a list of ISPs internationally that in one way or another shape your bitorrent traffic (Comcast anyone?). We need to be one step ahead of these ISPs and render their multi-million dollars worth of shaping infrastructure useless - sooner rather than later - sooner so that they can't make up for the ROI on all that gear they purchased. If the ROI fails, the next time engineering dept approach CEO for X dozens of millions more, they will get declined and we (torrent community) will win.

2) This site breaks down "throttling" into 5 different categories or ways in which the ISP can throttle you... each listing the bypass method.
http://www.azureuswiki.com/index.php/Avoid_traffic_shaping#Escalation_of_the_crypto_settings
Note that level 5 (the most aggressive shaping method known so far) is only bypassable by a single client today (Azeurus), utorrent to my understanding can not bypass this.

Anyway my point with these above 2 items is that these facts need to be considered:
1. The number of ISPs throttling internationally is already large and growing larger
2. Your new torrent client needs to simplify bypassing these various levels of encryption so that it can be adopted by the masses. If it is not adopted by the masses (rendering ISP throttling useless), the ISPs will have won.

I don't have time to type more, so please research what other clients out there (beyond just torrent) are doing and borrow ideas from them.
Here's a brief list of intelligent encryption/anonymous software out there to investigate:
RODI: http://slashdot.org/article.pl?sid=05/06/01/1252232
MUTE: http://mute-net.sourceforge.net/
ANTS: http://antsp2p.sourceforge.net/
GNUnet: http://gnunet.org/
I2P: http://www.i2p.net/
FreeNet: http://freenetproject.org/
TOR: http://tor.eff.org/

THanks and good luck!

Hey Pirate Bay folks, here's my list of feature requests for the new version of your open source torrent protocol:

ONION ROUTING:
1) Implement Onion routing (aka: Tor / anonymize the sources) as a built in feature.
2) Onion Routing should, where possible, try to use exit points and middle points that have roughly the same amount of bandwidth as you, otherwise torrenting will not become a reality through Onion Routing. So some kind of peer bandwidth algorythm needs to be incorporated.
3) Onion routing should be on by default, and each user should also become an exit point and donate 30% of their bandwidth to this. This will greatly increase the number of exit routers & provide this as a defacto alternative, as opposed to just some obscure security feature for the 31337 (hackers & government homeland types).
4) Individual site upload ratios, should take into consideration that fact that you are an exit point and some portion of that 30% should be counted toward your uploaded bytes ratio (even if traffic is going to other sites)... in other words, help promote torrent security = get bonus points from private trackers.

SIMPLIFY ISP SHAPING BYPASS
Background: Forcing protocol encryption isn't enough these days; some ISPs are shaping or even blocking torrent traffic by methods such as sending TCP RST packets to close a session, or their infrastructure auto-analyzes your encrypted traffic patters and if they are high bandwidth, very encrypted and on for long amounts of time to the same destination you get flagged & shapped (regardless of the fact that you could indeed be doing something legal)

1) There's a page on Wikipedia that lists all the "BAD ISPs" (http://www.azureuswiki.com/index.php/Bad_ISPs). This is a list of ISPs internationally that in one way or another shape your bitorrent traffic (Comcast anyone?). We need to be one step ahead of these ISPs and render their multi-million dollars worth of shaping infrastructure useless - sooner rather than later - sooner so that they can't make up for the ROI on all that gear they purchased. If the ROI fails, the next time engineering dept approach CEO for X dozens of millions more, they will get declined and we (torrent community) will win.

2) This site breaks down "throttling" into 5 different categories or ways in which the ISP can throttle you... each listing the bypass method.
http://www.azureuswiki.com/index.php/Avoid_traffic_shaping#Escalation_of_the_crypto_settings
Note that level 5 (the most aggressive shaping method known so far) is only bypassable by a single client today (Azeurus), utorrent to my understanding can not bypass this.

Anyway my point with these above 2 items is that these facts need to be considered:
1. The number of ISPs throttling internationally is already large and growing larger
2. Your new torrent client needs to simplify bypassing these various levels of encryption so that it can be adopted by the masses. If it is not adopted by the masses (rendering ISP throttling useless), the ISPs will have won.

I don't have time to type more, so please research what other clients out there (beyond just torrent) are doing and borrow ideas from them.
Here's a brief list of intelligent encryption/anonymous software out there to investigate:
RODI: http://slashdot.org/article.pl?sid=05/06/01/1252232
MUTE: http://mute-net.sourceforge.net/
ANTS: http://antsp2p.sourceforge.net/
GNUnet: http://gnunet.org/
I2P: http://www.i2p.net/
FreeNet: http://freenetproject.org/
TOR: http://tor.eff.org/

THanks and good luck!

You speak out what I feel: People who can't create often like to destroy. And I think that in Wikipedia the destroyers have much more power than the creators. Years ago I wrote several things for Wikipedia (using an IP). Then I saw the efforts of many days thrown away by people who are just active in deletion discussions.

Greetings Thomas Mertes

Seed7 Homepage: http://seed7.sourceforge.net/
Seed7 - The extensible programming language: User defined statements
and operators, abstract data types, templates without special
syntax, OO with interfaces and multiple dispatch.

Or Flac maybe?
http://flac.sourceforge.net/

Do I really need to write up a how-to for would-be criminals?

Virtualize the hard drive!
Remove networking from the VM.
Look for whatever goodies you're looking for on the HD.
Blow away the HD
Profit!

I'm currently running a Goldring 1012 cartridge in an old-ish Rega Planar 3 table. Not the highest end out there, but good enough for me. Fundamentally, that's all I'm looking for in vinyl playback, is something that's Good Enough vs. the flaws in records.

I'm not impressed with the needle that comes with the ION. My XUbuntu + Ensoniq AudioPCI + Bose speakers pick up all the Album flaws (I still need a decent record cleaner). Bundled with Audacity, (http://audacity.sourceforge.net/ the ION is good enough too.

I like the fact that I was supporting Linux/Audacity with my ION purchase.

Swordgeek? I have two different broadswords and a flail. I'm trying to talk my wife into a double-bladed Axe and samurai but she won't let me. Stay single.

Enjoy,

http://spring-netbeans.sourceforge.net/. Works well IMHO.

Actually plain Emacs doesn't do syntax checking in real time. It needs Flymake mode to be able to do syntax checking and even that's not realtime but incurs usually a few seconds delay due using external tools to compile the source.

And the latest PDT and Pydev make Eclipse the best (free) IDE for PHP and Python development.

Personally my editor for everything textual is Vim

One of these skills is keyboarding, and honestly, how many typing training packages have you seen on 'nix? Or even Mac?

That is a valid point. The point should not mean every computer capible of running Windows needs a copy. How many copies of KStars have you seen in the science lab? There is no reason to have every computer a clone of each other. A keyboarding class is OK to license some machines to run educational software. The license should not exclude other very fine educational software simply because it is not Open Source. Schools having kids play Where in the world is Carman and The Oregon Trail because it might have some valid history or geography is no replacement for real educational software, much of which does not run on Windows.

There is a place for Kickstart software. There is also a place for Linux chemestry, astronomy and physics software.
http://sourceforge.net/projects/genchemlab/
http://www.redbrick.dcu.ie/~noel/linux4chemistry/
http://adsabs.harvard.edu/abs/2004APS..MARW38008R
http://www.mathlab.cornell.edu/support/m434_support/gap_info/
http://www.mathworks.com/products/matlab/whatsnew.html
http://edu.kde.org/kstars/
http://edu.kde.org/

Some of the above can run on Windows, but it is not a requirement. The valid complaint is the requirement to license all Windows capible machines, even those without Windows, or even needing Windows. It's like getting a pre-paid Texaco credit card for your kid's car and they require you to buy a Texaco license for any hardware you have that is capible of burning gasoline including your weed eater, hedge trimmer, chain saw, your boat, and all other cars. Maybe you want to run Flex Fuel on your PT Cruiser.

Sort of, kind of, not really? Schools are supposed to teach children skills that they can apply in the real world. One of these skills is keyboarding, and honestly, how many typing training packages have you seen on 'nix? Or even Mac?

Kids' software needs are significantly different from that of adults, with the possible except of a good Office suite, which everybody needs. Where's the equivalent of your doodling software, trivia games, and all that stuff you would find in a primary school computer lab?

While I agree MS's tactics here are pretty low, it doesn't immediately lead us to "switch to Linux", because honestly it's not a viable alternative.

On the other hand, Apple has traditionally had the support of children's software publishers. Maybe they can leverage this situation to their advantage...

Buy a HP printer then. Full printing, scanning, faxing and network support which HP makes GPLed.
http://hplip.sourceforge.net/

What more could you ask for?

The only thing that keeps me (occasionally) booting into my Windows partition is when I need to locate a CD/DVD using the Disc Stakka. SourceForge has a project in pre-alpha that hasn't been touched since April 2006. This is a great product but for this one limitation.

Your wait has been over for a while my friend: Frets on Fire

Please do download our code (and email us at security@slashcode.com if you find any bugs). We quote arguments in the approved fashion before using them in a query string, and additionally we do regex whitelist-style filtering on many commonly-used params (e.g. $form->{cid} is guaranteed to be numeric). Generally we're pretty good at this stuff. Which is not to say we never make mistakes...

Please do download our code (and email us at security@slashcode.com if you find any bugs). We quote arguments in the approved fashion before using them in a query string, and additionally we do regex whitelist-style filtering on many commonly-used params (e.g. $form->{cid} is guaranteed to be numeric). Generally we're pretty good at this stuff. Which is not to say we never make mistakes...

On my Windows machines I use VirtuaWin. It was a little tricky to get it the that I want (like Ubuntu) but works great.
http://virtuawin.sourceforge.net/

What about VirtuaWin at http://virtuawin.sourceforge.net? You can have up to 9 Desktop, and even run on XP Pro x64.

I use this at work on my d620 with XP and it is barely usable and is a far cry from virtual desktops. Pain. Agony. Despair.

If you are in an environment that does not frown on FOSS http://virtuawin.sourceforge.net/ is a much better choice than the powetoys.

There are some especially nice developer/unix features -- DTrace, extensive support for Ruby, and 'bridges' to allow Ruby and Python apps to enjoy Cocoa and the OSX scripting interfaces.

While you wouldn't know it from Apple's cleverly worded 'feature list' page, the aforementioned Cocoa bridges are really just new releases of RubyCocoa and PyObjC, both of which are already well-established OSS projects. While Apple and others have put a load of work into polishing and improving these new versions, and it's great to see them finally receive an 'official blessing' which they totally deserve, you don't actually require Leopard in order to get your mitts on them. :) Likewise, third-party scripting bridges have also been available for quite some time (although Apple's gone with its own solution in Leopard); see my sig.

I'll definitely be checking out the new DTrace stuff though; while having an oh-so-conveniently pre-installed Rails might be just the thing that finally tempts me to learn it...

There are some especially nice developer/unix features -- DTrace, extensive support for Ruby, and 'bridges' to allow Ruby and Python apps to enjoy Cocoa and the OSX scripting interfaces.

While you wouldn't know it from Apple's cleverly worded 'feature list' page, the aforementioned Cocoa bridges are really just new releases of RubyCocoa and PyObjC, both of which are already well-established OSS projects. While Apple and others have put a load of work into polishing and improving these new versions, and it's great to see them finally receive an 'official blessing' which they totally deserve, you don't actually require Leopard in order to get your mitts on them. :) Likewise, third-party scripting bridges have also been available for quite some time (although Apple's gone with its own solution in Leopard); see my sig.

I'll definitely be checking out the new DTrace stuff though; while having an oh-so-conveniently pre-installed Rails might be just the thing that finally tempts me to learn it...

I'm currently using VirtuaWin at work and am quite happy with the results. There are a handful of apps that don't behave nicely with it but overall performance is decent (and stable). I have a different background set to each (of my four) desktops and can switch between them quickly using keyboard shortcuts or the tray icon.

I do not have any affiliation with VirtuaWin.

VirtuaWin kicks ass. Have you tried that one?

I learned about it from a Slashdot post, so maybe I can return the favor.

I like GIMP http://www.gimp.org/ and use it a lot. My work requires treating several hundred photos per day. GIMP adds to a photo some magic. No other soft does it to my knowledge. Thank you guys. Thank you Spencer Kimball and Peter Mattis. Thank you Jernej Simoni for Windows installer http://gimp-win.sourceforge.net/stable.html

Just run DenyHosts

Oct 24 19:21:40 UtopiaPlanetia sshd[10319]: Failed password for invalid user staff from 74.86.168.131 port 51218 ssh2
Oct 24 19:21:43 UtopiaPlanetia sshd[10321]: Failed password for invalid user sales from 74.86.168.131 port 51494 ssh2
Oct 24 19:21:46 UtopiaPlanetia sshd[10323]: Failed password for invalid user recruit from 74.86.168.131 port 51739 ssh2
Oct 24 19:21:49 UtopiaPlanetia sshd[10325]: Failed password for invalid user alias from 74.86.168.131 port 51998 ssh2
Oct 24 19:21:52 UtopiaPlanetia sshd[10328]: Failed password for invalid user office from 74.86.168.131 port 52226 ssh2

Oct 24 19:21:53 UtopiaPlanetia denyhosts: Added the following hosts to /etc/hosts.deny - 74.86.168.131 (wdbservers.com)

Oct 24 19:21:55 UtopiaPlanetia sshd[10333]: refused connect from ::ffff:74.86.168.131 (::ffff:74.86.168.131)

speaking of which....

http://gimp-win.sourceforge.net/stable.html is where you get the windows version. do not get suckered by the asshats that "sell" wingimp for an insane price.

Get the real thing from sourceforge.

That way your windows friends can have it as well, it's another step in breaking their addiction.

I just installed 2.4 on my windows box from http://gimp-win.sourceforge.net/ , it was one installer, I had to click next like twice, and it was done. No extra libraries or anything, everything was included. The only thing that's not included is GAP, and that's a second installer, I would imagine just as easy as the main program.

I'm not sure what you mean about the turntable. I have a USB turntable I bought from Thinkgeek. I can rip my records to any format I like (MP3, WAV, OGG, etc) that Audacity supports. Half of my Ipod library is my ripped vinyl, and I have a lot of CDs made from my record collection. And it works fine on Linux.

YMMV, but GCALDaemon will set you up, The guides were all made before they made a GUI configurator (GCALDaemon/bin/config-editor.sh), which makes it so easy it ought to be a crime. HTH :)

"In such a mode, you keep all the positive effects of UAC, such as Internet Explorer operating in the protected mode, applications starting without the administrative privileges by default, etc. The only thing that gets changed is that you will no longer see the infamous "Windows needs your permission to continue" messages whenever you attempt to make a change to your Vista configuration, or when you run a program that needs administrative rights."

Great! However, Vista didn't like being the server for my Synergy setup with Gutsy on the 2nd monitor. Once I made Gutsy the synergy server it was much more well behaved. Really, it's hard not to have both a Gutsy and a Vista box. They're both pretty fresh.

Maniac Mansion, heck yes! Games like that, where you could really do whatever you wanted, are still playable today. I just got done playing Maniac Mansion again.

Did you ever play star control (I think that actually was on the amiga)? Star Control2? There is actually an open source port of SC2 (done by the original designers, no less) called ur-quan masters. That's another classic. I still play that one pretty regularly. In a lot of ways (wide open play, free form gameplay), it's like Maniac Mansion.

Klipper completely obliterates this problem. It's native to KDE (and installed by default in Kubuntu) but apparently will run happily in GNOME, or you can check out Glipper. Problem solved.

Isn't NTLM cracked (by brute force) already? I have used ophcrack against my systems and it got the password quite quickly (10 min in one case, 20 in other). Sure, building the tables probably took more than a few minutes, but it's do-once-crack-everything.

http://ophcrack.sourceforge.net/

>. ihbt

http://padict.sourceforge.net/

I know it isn't build in, but Virtual Dimension does provide this functionality on Windows rather well.

Open the file in a hex editor and it's blatantly obvious there's data in the photo.

Please look at these images and tell me exactly what in the hex dump makes it "blatantly obvious" that one is stegged.