Slashdot Mirror

Use their SourceForge site here.

All the same files are posted there!

Please use the SourceForge link below people. The Gallery forums aren't working either because the site is being owned.

Gallery 2

I have a gallery2 site too. It'l be nice when I can get enough bandwidth to get the full version of gallery2 :(

Site (With default theme and ~500 pics): here

I'll have to try that sometime... right now, I use a product by "Acronis" called "Drive Cleanser" & it works.

My guess, were I to design it? Would be that it first vectors thru whatever folder/directory structures exist on disk, opens each file, does the 1-0-1 "DOD" type wipe, then one with random characters, & if NTFS?

Renames EACH letter of EACH file, randomly... doing so, directory/folder-by-directory/folder listing of files held in a stringlist of candidate files to work on... doing so, until it hits the end of the lists it creates (which would be the files in the LAST directory/folder).

Then, finally, overwriting the disk with one LARGE file, 1-0-1, & random characters, lastly reformatting the disk.

Is this impervious to data recovery? Let me know from YOUR viewpoints if you would... this is because I am involved in such a project @ work currently.

I believe it is a viable solution, assuming this product works SOMETHING along the lines of what I suspect above... assuming I am right about its methods/algorithms/engines/design of operations that is.

Anyhow:

Supposedly, it can even defy "deskewed" (correct term? Correct me here if I am wrong) attempts to obtain the original data from the disks' original files!

(BUT, that part? That's easy enough to wipe out here though, as far as original file content imo, & for good, even on NTFS)

Acronis' product also is capable of using several possible methods of DOD type wipes with random char overwrites (usually, I use the 4 pass pattern).

It works as far as I know, & is "impervious" to original data retrieval.

"Years ago, I watched a friend recover information from a newly arrived warranty repaired drive." - by slashnutt (807047) on Tuesday September 13, @04:22PM

And, you're right - this holds true because even if say, the drive's actuator arm bearings go buggy, that doesn't necessarily mean the platter data is unreadable. It very well possibly STILL IS, and a diskeditor can show you that!

(In fact, on that note? Acronis' "Drive Cleanser" program product has a disk editor built-in so you can even verify the drive content after any wipe-type you choose to use from its options as well... bonus!)

APK

P.S.=> This part of the field, forensics, I have been into for a wee bit now, & it is interesting...

I will have to check-out this "eraser" program you mention here:

http://sourceforge.net/projects/eraser

So, all-in-all, thanks for the tip on that & if any, thoughts on my ideas & statements above! I am into this end of things, but only the last year now or so... as far as professional work & being on a team responsible for JUST SUCH A TASK, right now on the job...

A bit BORING, but important to do, especially for the company I am doing this for: Financial Data in nature that is in question on said drives! Very important to make sure it is 110% clean...

apk

My organization is in a similar situation with sharing administrative passwords. The politics dictate that I share specific account information with specific users. I was given a set of specifications which included a central repository of passwords, web interface, no 'master' password, and access control for each password entered. I really don't have the time to modify an open source package like http://w3pw.sourceforge.net/ or http://pasonda.sourceforge.net/, so I found http://www.argosytelcrest.co.uk/pwsafe/. As long as I can secure the server it runs on for internal use only, this will suffice for our needs (given the political environment and red tape I have to endure). Many will frown on applications like this, but people wouldn't be coding apps like this if there wasn't a need. Sure it may be an organizational design issue, but it's better than sending passwords through email or writing them down so the users can forget them in a restaurant, considering I have no control over the organization's design.

My organization is in a similar situation with sharing administrative passwords. The politics dictate that I share specific account information with specific users. I was given a set of specifications which included a central repository of passwords, web interface, no 'master' password, and access control for each password entered. I really don't have the time to modify an open source package like http://w3pw.sourceforge.net/ or http://pasonda.sourceforge.net/, so I found http://www.argosytelcrest.co.uk/pwsafe/. As long as I can secure the server it runs on for internal use only, this will suffice for our needs (given the political environment and red tape I have to endure). Many will frown on applications like this, but people wouldn't be coding apps like this if there wasn't a need. Sure it may be an organizational design issue, but it's better than sending passwords through email or writing them down so the users can forget them in a restaurant, considering I have no control over the organization's design.

Linux has its own niche; it is not meant to replace windoz boxes, and it will not replace them in the near future. So, who cares ?


B.S. Linux *has* replaced Windows in my house. My five year old child uses linux exclusively. My wife uses Linux. I use linux.

Granted, Linux doesn't have much in the games category, but I'm not much of a games player. Besides, I've got a PS2.

My list of unmet needs are getting pretty short:

* Shockwave/Director player.

* Flash IDE (but that's coming.)

* Better general multimedia support. I can view trailers on apple.com, but I can't watch video on ifilm or Daily Show clips on CC.com. I don't blame linux for this shortcoming, I blame patents and closed source codecs. I'm running FC4 with a bunch of xine/gstreamer packages installed from extras, so either I've done something wrong, or there's more bugs to work out.

* Educational software for my kids.

I have been using Quick Digital Image Gallery for a few years now. My reasons for choosing it over gallery:
1) much smaller code, much easier to understand, much easier to hack. 2) more secure than gallery. I was scared off by the large number of security problems gallery was having back then (and apparently still are, I'm told but haven't confirmed there was another one discovered recently?).

Qdig isn't for everyone though, as it is rather spartan. It does come with a web-based admin script I've never used, so some of the things I may think it lacks, might be handled by that (probably are). I generally just scp my files to the server though and manage directories (galleries) that way.

On the other hand, has anyone here actually tried to "secure wipe" at 200+ Gb hard drive? It can take DAYS.

actually yes, using wipe on a 200gb maxtor on a reasonably fast machine takes about 1.5 days.

Use your head and ask some questions. You can then turn left or right and get away from that brick wall you keep bumping your head into.

http://sourceforge.net/project/showfiles.php?group _id=7130&package_id=14464

http://www.google.com/search?hl=en&q=jhead&btnG=Go ogle+Search

http://www.google.com/search?hl=en&lr=&q=imagemagi ck&btnG=Search

Try out Gallery Local, a smart client for gallery.

It allows viewing of your gallery offline. It takes advantage of the new XML-RPC routines available in Gallery 2.

Since the gallery.menalto-site seems to be slashdotted already here's a working download link at least, directly from sourceforge.net: gallery 2.0 file list

Here's some useful linkage:

http://www.cs.auckland.ac.nz/~pgut001/pubs/secure_ del.html
http://dban.sourceforge.net/

Oh, that sounds like a tough one to me. Ok, ok, it's actually not that tough - but it DOES require combining a number of kernel patches, there's no one-stop-shop (at the moment) for this. It also requires that network connections be IPv6, as there's bugger all mobility support out there for IPv4 for Linux as best as I can tell.

openMosix is a GPLed fork of MOSIX & is undergoing rapid development. No need to recode apps. Apps will work like they do in an SMP machine. So, if they are already faster on a dual-processor machine, they won't need to use special libraries or threading methods to work over several workstations.

sshfs/ftpfs/anything you want-fs: take a look at http://lufs.sourceforge.net/lufs/

Fun stuff.

Roger

For any who wish to avoid such "Data Dangers", I've been using Boot & Nuke (http://dban.sourceforge.net/) for some time now. It's pretty easy to use and supposedly reaches DoD levels of secure delete. All used hard drives my shop sells get a dban scrubbing before they leave.

http://dban.sourceforge.net/

Set that up for 27 wipes and you're set.

...with something like Darik's Boot & Nuke

I always hate having to send in my hard drive for warranty repair. Years ago, I watched a friend recover information from a newly arrived warranty repaired drive. If the drive is dead and has to be sent into for warranty service, make sure one of those super powerful magnets from another drives is put around all over the hard drive case. Don't, know if that will wipe anything but I don't expect the manufacturer to ensure my data is secure.

That said I used eraser every night.

I would like to copy these vhs tapes to dvd [...] Would this be software I would want to use?

Probably not - Cinelerra is more for cutting + pasting segments of video, adding sounds and doing compositing. It might be of some use, but it's likely to be far more than you need. For basic conversion, this is what I do with free tools on Windows:

The first step is to get the video into an MPEG stream suitable for writing to DVD. I convert my source to a ginormously huge AVI encoded with the HuffyUV codec - which is a free lossless video compression codec (hint: Quicktime files can be converted to AVI with the Rad Video Tools). I'd then do a tweaking pass with VirtualDub (resizing / cropping / whatever as needed) - again saving to another lossless file, then use BBMPEG to convert the processed AVI to a DVD-suitable MPEG stream (hint: set the output aspect ratio here if you're doing anamorphic widescreen). I'm not entirely sure what programs / codecs you could use on Linux. You may be able to capture directly to an MPEG, but that's something I'd recommend against if you have the disk space can so you can tweak and process the video file (change brightness, contrast, apply filters, etc) if you need to.

Now you have to author a DVD - creating menus to glue MPEG segments together and then turning them into burnable .ISO images. I've successfully used DVD Styler which is a cross-platform front end to the DVD Author tools (I've used it on Windows, it should also work on Linux). It isn't as full-featured (yet) as commercial packages - but it works well for me. (And I used the GIMP to actually create the menu images).

I then use the Nero DVD burning tools that came bundled with my DVD burner to write the output .ISO to a DVD+R disk with the booktype set to DVD-ROM (so that the DVD player thinks it's looking at a normal DVD). I'm unsure if CDRecord can set the booktype.

You'd probably need a couple of day's worth of testing to figure out all the best parameters - but those are the approximate steps I take to convert camcorder video to DVD.

I've been thinking about starting up a file system project (as you do), and was wondering if anyone has thought of using something like the FUSE kernel module with a database (say MySQL or Berkeley DB) to create an easily indexible file system. The idea is to create a basic proof of concept using FUSE and if it gets any interest turn it into a proper (kernelspace) FS.

What sort of problems can I expect to face?

Here's what I did to do the conversion:

• Capture video from the TV input card to the disk. As suggested, 'mencoder' is probably the best program for the job. First figure out how to watch a live stream from the TV card using 'mplayer', because once you get that working you can reuse most of those parameters with 'mencoder'. ("mplayer tv://88 -tv driver=v4l2:norm=ntsc:chanlist=us-cable:input=0:al sa" with no break in alsa (thanks Slashdot) gets me channel 88, but you may need to tweak this line depending on your area and Linux version.)

• Edit video. The programs I found for this are picky about what video format you're editing, so you'll need to tell mencoder to output something compatible with your video editor in the step above. Cinelerra was too buggy for me at the time, so I went with 'avidemux' -- it was more straightforward for me, but probably far less advanced than this new version of Cinelerra, and I'm sure there are other editors out there.

• Convert video to DVD format (if necessary.) If your editor isn't capable of editing MPEG2 video/audio then after you're done cutting you need to convert your finished product to DVD-compatible video. This part was the most awful for me and will probably require the most reading and tweaking. The program 'transcode' ultimately worked out.

• Create DVD menu. I followed an online tutorial and did this with a graphics program ('gimp') and composed the result with 'dvdauthor'. I thought the process was ugly but since then GUI menu editors have been released (DVDStyler and Q DVD-Author in particular look pretty good.)

• Create DVD layout. This is an XML file you feed to 'dvdauthor' that defines your DVD -- the menu, titles, chapters, etc. Looks difficult, but there are sample templates and tutorials out there that you can copy from and tweak for good results.

• Create DVD filesystem. 'dvdauthor' again, taking that XML file and those videos and transforming them into a DVD filesystem. After this finishes your output directory will resemble the layout of a DVD.

• Test DVD filesystem. 'xine' will let you watch the content of the output directory as if it was a DVD if configured properly. The command is 'xine dvd://(path to dir containing VIDEO_TS)' -- if output is in '/video', 'xine dvd:///video'.

• Write image to disk. For me, this is 'growisofs -speed=1 -dvd-compat -Z /dev/cdrom -dvd-video'

Here's what I did to do the conversion:

• Capture video from the TV input card to the disk. As suggested, 'mencoder' is probably the best program for the job. First figure out how to watch a live stream from the TV card using 'mplayer', because once you get that working you can reuse most of those parameters with 'mencoder'. ("mplayer tv://88 -tv driver=v4l2:norm=ntsc:chanlist=us-cable:input=0:al sa" with no break in alsa (thanks Slashdot) gets me channel 88, but you may need to tweak this line depending on your area and Linux version.)

• Edit video. The programs I found for this are picky about what video format you're editing, so you'll need to tell mencoder to output something compatible with your video editor in the step above. Cinelerra was too buggy for me at the time, so I went with 'avidemux' -- it was more straightforward for me, but probably far less advanced than this new version of Cinelerra, and I'm sure there are other editors out there.

• Convert video to DVD format (if necessary.) If your editor isn't capable of editing MPEG2 video/audio then after you're done cutting you need to convert your finished product to DVD-compatible video. This part was the most awful for me and will probably require the most reading and tweaking. The program 'transcode' ultimately worked out.

• Create DVD menu. I followed an online tutorial and did this with a graphics program ('gimp') and composed the result with 'dvdauthor'. I thought the process was ugly but since then GUI menu editors have been released (DVDStyler and Q DVD-Author in particular look pretty good.)

• Create DVD layout. This is an XML file you feed to 'dvdauthor' that defines your DVD -- the menu, titles, chapters, etc. Looks difficult, but there are sample templates and tutorials out there that you can copy from and tweak for good results.

• Create DVD filesystem. 'dvdauthor' again, taking that XML file and those videos and transforming them into a DVD filesystem. After this finishes your output directory will resemble the layout of a DVD.

• Test DVD filesystem. 'xine' will let you watch the content of the output directory as if it was a DVD if configured properly. The command is 'xine dvd://(path to dir containing VIDEO_TS)' -- if output is in '/video', 'xine dvd:///video'.

• Write image to disk. For me, this is 'growisofs -speed=1 -dvd-compat -Z /dev/cdrom -dvd-video'

The thread you link to nicely illustrates the political manoevering necessary to get a filesystem accepted into the kernel. This is one good reason why filesystems should be implementable in userspace.

There are so many wonderful things that can be done with filesystems once they can be added from userspace. How about transparently accessing files through SSH or FTP, from any application?

There are various tricks that allow filesystems to be implemented in userspace, such as LUFS and FUSE. Other filesystems (especially the ones that are portable to other systems) pretend to be NFS.

All of these suffer a performance penalty, but I wonder how much that really matters when you're interacting with disks or networks, which are very slow compared to the CPU and RAM anyway.

Many things besides filesystems would benefit from being implementable in userspace, but filesystems are what I personally have thought about most.

The thread you link to nicely illustrates the political manoevering necessary to get a filesystem accepted into the kernel. This is one good reason why filesystems should be implementable in userspace.

There are so many wonderful things that can be done with filesystems once they can be added from userspace. How about transparently accessing files through SSH or FTP, from any application?

There are various tricks that allow filesystems to be implemented in userspace, such as LUFS and FUSE. Other filesystems (especially the ones that are portable to other systems) pretend to be NFS.

All of these suffer a performance penalty, but I wonder how much that really matters when you're interacting with disks or networks, which are very slow compared to the CPU and RAM anyway.

Many things besides filesystems would benefit from being implementable in userspace, but filesystems are what I personally have thought about most.

The default Cinelerra is quirky enough that gentoo doesn't want to install it by default - is this fixed in 2.0?

Cinelerra-cvs http://cvs.cinelerra.org/ is a fork which incorporates a variety of patches (apparently the original Cinelerra is developed by a single author, so cinelerra-cvs tries to avoid the bottlenecks that often result). cinelerra-cvs can be installed on gentoo, and once one switches to the Bluedot theme it's not half bad to look at :-).

Also of interest are LiVES http://www.xs4all.nl/~salsaman/lives/ and Jahshaka http://www.jahshaka.org/ - there's also Kdenlive but that seems to not be actively developed any more: http://kdenlive.sourceforge.net/index.html

The Hitachi SuperH processor is 128bit. It's popularly known implementation was in the Sega Dreamcast entertainmant console. Linux has already been ported to it, and it is a verry good system for people to experiment in the realm beyond 64bit computing.

Here are the more popular Dreamcast with GNU/Linux URLs that I have known...

http://www.fivemouse.com/dclinux.html
http://linuxdc.sourceforge.net/
http://www.m17n.org/linux-sh/dreamcast/

I believe there is such software already available: http://sourceforge.net/projects/ext2fsd.This is a driver for NT systems (NT/2k/xp). I haven't tried it out, but it clearly wouldn't make for a turnkey solution, unless MS integrated it into windows...don't hold your breath.

Bryan

Thanks for the point in the right direction, rincebrain.

The reason I ask is that I'm using an open wireless network, and before I log-in to my emails or do anything more sensitive than reading /., I want to know that my browsing can't be intercepted... hence installing Privoxyhttp://sourceforge.net/projects/ijbswa on my shared server space... but even from within the cpanel I havn't been able to ascertain what bloody distribution its running. (and Privoxy has different packages for different distibutions).

Thanks for the tip, anyway. I'll work it out in the end...

Agreed. I, and probably many others, have solved this problem by scripting streamripper.

If you are interested in doing this, see my page about it.

I have used this mainly to time-shift Fresh Air and The Writer's Almanac.

I think you'll find Rot-13 will rotate into a previous password rather quickly. Any number that isn't a multiple of 2 or 13 will require 26 iterations before a password is repeated.

In fact, I do use a PDA with Keyring for most of my passwords.

Check out AntNet and MUTE.
(JetiAnts and AntsP2P are offshoots of MUTE as far as I can tell.)

Check out AntNet and MUTE.
(JetiAnts and AntsP2P are offshoots of MUTE as far as I can tell.)

Yeah, for a $2 million dollar project it was ridiculously understaffed on the Google side. But Googlers like Chris DiBona and Greg Stein worked extraordinarily hard to keep things flowing relatively smoothly. So it still turned out to be a huge success for Nmap and most/all of the other participating projects. Thanks, Chris and Greg!

So what did we (Nmap project) accomplish in those two months? The sponsored students and their credentials/projects are listed here. Much of their work can be found in Nmap 3.90, which was released on Thursday. SoC changes include:

• Doug Hoyte nearly tripled the size of the version detection database, added OS/device type/hostname detection using the version detection DB. He made numerous other improvements as well.
• Zhao Lei added more than 350 OS detection fingerprints to Nmap, bringing the total to 1684. He also helped design a 2nd generation OS detection (stack fingerprinting) system.
• Adriano Monteiro designed and implemented an advanced Nmap GUI and results viewer named http://sourceforge.net/projects/umit">UMIT (screenshots).
• Ole Morten Grodaas designed and implemented another advanced Nmap GUI and results viewer (its nice to have choices in open source!) named NmapGUI. Details and download here)
• Chris Gibson has written a sweet little network tool named Ncat, which takes the venerable Netcat in an interesting and extremely useful direction with features such as connection brokering, socks proxying, and much more.

It has been a crazy two months, but I'm very pleased to see so much accomplished! If you're using an older version of Nmap, you really should consider upgrading to 3.90 to see the difference.

Cheers,
Fyodor

Yeah, for a $2 million dollar project it was ridiculously understaffed on the Google side. But Googlers like Chris DiBona and Greg Stein worked extraordinarily hard to keep things flowing relatively smoothly. So it still turned out to be a huge success for Nmap and most/all of the other participating projects. Thanks, Chris and Greg!

So what did we (Nmap project) accomplish in those two months? The sponsored students and their credentials/projects are listed here. Much of their work can be found in Nmap 3.90, which was released on Thursday. SoC changes include:

• Doug Hoyte nearly tripled the size of the version detection database, added OS/device type/hostname detection using the version detection DB. He made numerous other improvements as well.
• Zhao Lei added more than 350 OS detection fingerprints to Nmap, bringing the total to 1684. He also helped design a 2nd generation OS detection (stack fingerprinting) system.
• Adriano Monteiro designed and implemented an advanced Nmap GUI and results viewer named http://sourceforge.net/projects/umit">UMIT (screenshots).
• Ole Morten Grodaas designed and implemented another advanced Nmap GUI and results viewer (its nice to have choices in open source!) named NmapGUI. Details and download here)
• Chris Gibson has written a sweet little network tool named Ncat, which takes the venerable Netcat in an interesting and extremely useful direction with features such as connection brokering, socks proxying, and much more.

It has been a crazy two months, but I'm very pleased to see so much accomplished! If you're using an older version of Nmap, you really should consider upgrading to 3.90 to see the difference.

Cheers,
Fyodor

Pulver Innovations had a WiSIP phone that would connect over your LAN to act as a standard SIP phone, which you could use, for example, with Free World Dialup or asterisk@home. Unfortunately, as one article points out, most WiFi hot spots don't co-operate and the the phone connect, so it has some major limitations. Even Pulver doesn't push it anymore... I had a tough time finding a link to it on any of their sites.

They also had a gadget that you could plug a cell phone into that would allow you to preferentially use the cell phone's free minutes for long distance calls from your VOIP system. Since most cell phones come with a huge number of free long distance minutes, it might be worth the lower quality to some, but I can't even find a link to it any more :(

Tsync is a Summer of Code project. Looks cool...

Anyway, from NetBSD's side, check out the NetBSD-SoC page where you can find information and code about all accepted projects.

Yes - and while you're at it why not do this for all applications not just Firefox?

It's another reason why the file picker should be part of the desktop environment (like the window manager or panel) and not implemented separately by every application.

If your apps are GNOME apps or KDE apps then of course they use a library to display the file picker dialogue, but it's still running as part of the application. This means that the app needs to run with permission to view the whole directory tree and open any file the user can open. Whereas if the file picker were a separate process and passed an open filehandle to the app once a file was selected, the application could run with very minimal permissions.

Personally, I like the idea of dragging a file from the file browser onto the application icon to load it, and dragging from the application into a directory window to save. See ROX. (The same principle could be applied to other actions - eg no need for every application to run with permission to make connections to lpd to print, instead drag an icon from the app to a printer icon to print the document. This probably sounds like overkill though.)

You use this nifty registry editing boot disk to fix the registry

And you use the linux NTFS tools and TestDisk to undelete/unformat/rebuild lost or damaged files and partitions. I use these all the time, they work REALLY well.

I carry around a copy of Damn Small Linux on my USB key, customized with above tools and including an image of the registry editing floppy and endless other utilities. Not to mention, DSL Linux gives me full access to the Debian APT repository! It serves me very well, especially since it can boot entirely into RAM, so I can take my key out and boot additional system.

20 Questions is not where it's really at in artificial intelligence.

Mind.Forth is the True AI you're not supposed to know about.

Stumble upon Forbidden Knowledge in artificial intelligence and you could be in danger because you Know Too Much.

Slashdot readers figure out the Hidden Truth for themselves.

914pcbots.com is the Forbidden A.I. Zone where techies discuss installing secret AI Minds in PC-based robots but: Hush! (It's a big secret -- Forbidden Knowledge).

Novamente is another truth-will-out story of Artificial General Intelligence (AGI).

AGI Mail List is where the l33t heavyweights talk about Artificial General Intelligence.

AGI Secret Archive is where you may eat of the fruit of the tree of the Forbidden Knowledge about artificial general intelligence.

Lasciate ogni esperanza, voi che entrate .

How does one take a pattern generated by a cellular automaton, and render it as music? The key idea of WolframTones is to take a swath through the pattern and tip it on its side, and treat it as a musical score Once the cellular automaton pattern has been "tipped on its side" so that time runs across the page, the height of each black square is related to the pitch of a corresponding note. The specific mapping from height to pitch is determined by the musical scale that is used. Each scale picks out certain of the 12 standard tones in an octave. The C major scale, for example, picks out the following:

http://lintelkku.sourceforge.net/index.php

Cellular automata and music (in java): http://www-128.ibm.com/developerworks/library/j-ca music/?ca=dnt-520

Common Music (jazz in lisp): http://commonmusic.sourceforge.net/doc/cm.html

Supposedly, ClamAV gets definitions for the latest and greatest viruses before commercial vendors are able to...although I have no evidence to back this claim up.

Here ya go!

I'd give an excerpt, but SourceForge is currently down (that's where ClamAV's news is hosted). The gist is, for the most recent 50 viruses, ClamAV had the quickest response time for 77% of them. That says a lot.

la la la la la

The best detection and prevention I have found to date is simply watching tcpdump and taking action manually.

If you find watching lines of packet information less than thrilling, you could try out something like the Cube of Potential Doom.
http://sourceforge.net/projects/net3d/

Although, I'm surprised to see this project go stagnant.

You want to be a LUnix zealot? Well, I guess if you really like the Commodore64 that much, you'd pretty much have to be in for zealotry.

Web Server for Palm OS

When I see Non-Commercial, I tend to move on. I make my stuff available for commercial use and I try not to waste my time working with anything less.

Where would we be if the Free Software licenses had a non-commercial clause?

http://www.ourmedia.org/user/17145
http://zbcw.sourceforge.net/

all the best,

drew