Slashdot Mirror

If it logs everything sent to your screen, it fails.

Why does it fail on this account? Excessive logging on chatty commands (e.g. 'tail -f verbose_log_file') ?

The key is that the end user must not be greatly inconvenienced by the logging so that they do not feel like there is a reason to go around it. That's why I like the ksh-93 with auditing approach. It's a comfortable and familiar shell, but it logs their command line history in real time off-host. (Built into ksh-93, but not enabled in a default build).

What I look for isn't necessarily what they did after they took actions to evade logging, but did an action occur that could reasonably allow them to bypass logging?

Like running a shell they prefer (for some reason), or the one that stipulated as being the required shell for the admin user of an expensive proprietary application?

Have you looked at something like sudosh or it's AWOL-but-enterprise-variant, eash?

have a windows mobile phone from the generation before. I tell everyone I'm able: it really is the worst product that I've ever seen actually released.

I share the same thought. My experience with Windows Mobile was so bad that I bought a Alcatel OT-106 and have absolutely no intentions of buying anything superior.
I just didn't sell the Windows Mobile phone yet (HTC Wizard) because I could join a development team that is porting Linux into it. http://sourceforge.net/apps/trac/linwizard/wiki Seriously, the phone even has a qwerty keyboard! How is it possible that Microsoft messed up so bad?

Alright. The source files for the code in my citation are WinMTRNet.cpp (see also WinMTRNet.h) and net.c in the mtr-0.80.tar.gz. Both include the ICMPHeader struct with identical field names (not very strong evidence), the struct sequence with identical field names, and the structs nethost and s_nethost which share half a dozen field names precisely--when they do they are in the same order. These three structs are in the same order in each file.

The functions after new_sequence in the MTR source are, in order, net_send_query, net_process_ping, and net_process_return; the functions after GetNewSequence are SendQuery, ProcessPing, and ProcessReturn.

These are things I noticed looking at those two source files briefly; I didn't have to hunt around at all. It's reasonable to expect a fair amount of difference since WinMTR was started ~8 years ago and both sources have diverged somewhat since then. Expecting large blocks of identical code seems unreasonable because of the time frame, though I wouldn't be at all surprised to find numerous snippets like the above in a detailed analysis.

There appear to be large blocks of very suggestively similar code. Ordering and name conventions alone are enough for me that I would swear in court that the two are derivatives.

Alright. The source files for the code in my citation are WinMTRNet.cpp (see also WinMTRNet.h) and net.c in the mtr-0.80.tar.gz. Both include the ICMPHeader struct with identical field names (not very strong evidence), the struct sequence with identical field names, and the structs nethost and s_nethost which share half a dozen field names precisely--when they do they are in the same order. These three structs are in the same order in each file.

The functions after new_sequence in the MTR source are, in order, net_send_query, net_process_ping, and net_process_return; the functions after GetNewSequence are SendQuery, ProcessPing, and ProcessReturn.

These are things I noticed looking at those two source files briefly; I didn't have to hunt around at all. It's reasonable to expect a fair amount of difference since WinMTR was started ~8 years ago and both sources have diverged somewhat since then. Expecting large blocks of identical code seems unreasonable because of the time frame, though I wouldn't be at all surprised to find numerous snippets like the above in a detailed analysis.

There appear to be large blocks of very suggestively similar code. Ordering and name conventions alone are enough for me that I would swear in court that the two are derivatives.

While it is still there, run:

rsync -av winmtr.cvs.sourceforge.net::cvsroot/winmtr/* .

Source: http://sourceforge.net/apps/trac/sourceforge/wiki/Backup%20your%20data

Sourceforge takes some time to actually delete projects, before it does so the backups are still available.

While WinMTR was one version, and some people were able to make it disappear from SourceForge, there is another version for Windows call dotMTR (http://sourceforge.net/p/dotmtr/home/), that seems to be worth looking at.

Read the comments in The Fine Article.

Yes. WinMTR does seem to contain mtr sources, or at least older mtr sources from before mtr supported IPV6. You can get the sources for WinMTR from http://winmtr.cvs.sourceforge.net/viewvc/winmtr/.

example code omitted

Definitely looks like there is verbatim copying. If they clear out the CVS, I will mirror the code on my blog

I finally managed to pull a copy of the v0.8 source from archive.org, and it seems that you can still access the CVS repository even though it seems to be missing from the SourceForge page. I can find references to contributions by Vasile Laurentiu Stanimir (the main developer) and Silviu Simen in the source code and Teodorescu Cristian in the commit logs. The latter is interesting as he seems to have started work on WinMTR 0.9 in 2004, contradicting Appnor's statement of inactivity.

What you've just described already exists. It is called the OFF system.

http://sourceforge.net/projects/offsystem/

Performance isn't doubling anymore. Cores are increasing, and the pipelines are being reworked, cache is increasing, but PERFORMANCE isn't doubling.

It really is, if you have software that takes advantage of all those core. If you have a single-threaded task, then you probably aren't seeing an increase in performance of that task, but you can now run that task plus something else at the same time.

I have been encoding audio to Dolby Digital recently, and the single-threaded compressor finished the job in about 1-2% of the length of the audio, so, 1 hour of audio took about a minute to encode. Although it has been available for a long time, I had not tried the Aften AC-3 encoder before, but after discovering that it is multithreaded and can encode that same hour of audio in less than 5 seconds on an 8-core machine, I'm never using anything else.

There are many other examples like mine that show overall performance is increasing. Even games now benefit from more cores, although 4 is about the limit of increasing performance for most current titles.

The only real problem I've had with Win 7 is the very limited view of apps in the start menu.
Yes, I've pinned the 10 most commonly used apps on the task bar. And that's enough. It's not reasonable to pin all commonly used apps onto the task bar, because then it would get too cluttered.
And it's a royal pain when the start menu enforces a tiny view of a very long list.

The solution?
I installed http://classicshell.sourceforge.net/ so I could get the full view of Programs.

Aside from that (and some small problems with file search) I quite like with Win7.

I cannot recommend ClassicShell enough to people who skipped Vista and (relatively) recently moved to Windows 7. It will not take care of all the quirks in Explorer, but a lot. Just the "folder up" button is worth installing this.

No, I am not involved with this project at all.

I've often said that I'd upgrade from XP to Win7 once they get a file browser and start menu that works as cleanly as XP's

Classic Shell helps to fix those issues.

You must have been nabbed by date and time issues. I have and I consider my self to be a reasonable coder. There is no logic behind it You have to read the rules cross your fingers and prey.

If you are using Java then this might help
http://joda-time.sourceforge.net/
I'm not independant as I do know the bloke that wrote the lib. It was written because of the issues we were having.

Matt

http://karel.sourceforge.net/ Technically my first exposure to programming was a loop in BASIC that printed hello world, however, I was fond of Karel as my second encounter with programming. It has a very small instruction set (prevents kids from being overwhelmed and forces them build more tools with procedures) and can keep their interest because it is a game/puzzle.

It is very similar to Visual Basic with a nice IDE, but it is free (as in beer and as in freedom, under the GPL license), and works with Linux (it is included in major distributions). http://gambas.sourceforge.net/en/main.html You can easily make GUI applications (GTK, Qt) with the visual form designer (so it is motivating) while learning basic programming constructs (if then, while and for loops, ...) Later, you can use to teach more elaborate stuff like connections to databases (MySQL, PostgreSQL).

What alternative do you propose? I must have accounts on 100 different websites by now, including this one.

Two things immediately come to mind.

* First, if a website asks you to create an account, consider whether you really need it. You may not actually need accounts on hundreds of different sites.
* Second, use a program like Password Safe to organize your passwords. It can even generate random passwords to you in accordance with various policies (goodbye dictionary attacks).

Of course it would also be nice if we didn't need passwords, but I fail to see how that can be made to work while retaining anonymity/pseudonymity. There's solutions like OpenID, but if I create an account on my "home site" (say, Slashdot) and then use it to log in to a hundred other sites, all these other sites will be connected not just to my Slashdot account but also to each other. It may not be such a big deal if you're already using a unique username that pretty much identifies you, but not everyone does, and even if you do, it a) removes all doubt and b) actively pushes the info out to all those sites, rather than simply putting it within the reach of a google search (which they'd still have to do themselves).

OpenID also has the problem that everyone wants to be a provider, but not a consumer. "Other people can use their identity from my site and use it elsewhere on the net? Great, I get more exposure! People from other sites start appearing on my site and plastering my competitors' names all over it? Not cool." That's how management thinks, at least.

Anyhow, passwords may not be ideal, but what alternative is there?

Aside from changing indentation, I've used it for things like turning single column tables into multiple column tables, removing common prefixes from a list, removing commas from aligned numbers, moving table columns in LaTeX source, and moving pieces of ascii diagrams around (for block comments designed to be renderable in ditaa.) Those are just some uses that I can think of off the top of my head.

I find it one of those things that doesn't seem very useful until you have an editor that can actually do it. Then you suddenly start finding uses for it.

ffdshow has support for Indeo 2 and 3 at the very least. This is based on the video format list in the configuration dialog box. I haven't got anything to test against but I have no reason to doubt it. Check it out - http://ffdshow-tryout.sourceforge.net/ - open source and has support for Windows 7. There are also some 64-bit builds you can try.

...Or you can use ADTPro and send the images directly to the target machine. Ciderpress can manipulate all kinds of Apple II formats and can even read/preview some of the files directly.... or you can load them up on an emulator.

...Or you can use ADTPro and send the images directly to the target machine. Ciderpress can manipulate all kinds of Apple II formats and can even read/preview some of the files directly.... or you can load them up on an emulator.

... While the substances are an easy way to experience something a little different, it's also possible to achieve "altered states of consciousness" entirely without the chemicals.

I don't have a copy of Stoned Free, but I like the premise:

Now you can just say "No!" to drugs... and get high anyway! This book enumerates many drugless consciousness altering techniques, both timeless and recent in origin, that anyone can make use of. Meditation, breathing techniques, high-tech highs, sleep and dream manipulation, and numerous other methods are examined in detail. Avoid incarceration, save money, and skip the wear and tear on your body, while getting higher than a kite.

I had to figure out how to relax my body (it was dysfunctional following a head injury), but even so I've had some neat experiences along the way: hypnagogic imagery, 360-degree vision, etc. If you've previously used substances (marijuana, LSD, etc) one can re-vivify those experiences with self-suggestion (self-hypnosis), or use descriptions of others to design your own trip.

Tripping without substances generally begins with relaxing the physical body, relaxing the mind, then making suggestions to yourself.

Binaural beats can help - Gnaural is the open source tone generator. I had to do some other things to fully recover from said concussion, and I'm finally dreaming up a storm. :)

And some people need drugs to find reality.... you sound like you trip out just fine without any assistance at all. I prefer more control of my altered states.

P. J. Barnum wishes you luck with your new business venture.

... While the substances are an easy way to experience something a little different, it's also possible to achieve "altered states of consciousness" entirely without the chemicals.

I don't have a copy of Stoned Free, but I like the premise:

Now you can just say "No!" to drugs... and get high anyway! This book enumerates many drugless consciousness altering techniques, both timeless and recent in origin, that anyone can make use of. Meditation, breathing techniques, high-tech highs, sleep and dream manipulation, and numerous other methods are examined in detail. Avoid incarceration, save money, and skip the wear and tear on your body, while getting higher than a kite.

I had to figure out how to relax my body (it was dysfunctional following a head injury), but even so I've had some neat experiences along the way: hypnagogic imagery, 360-degree vision, etc. If you've previously used substances (marijuana, LSD, etc) one can re-vivify those experiences with self-suggestion (self-hypnosis), or use descriptions of others to design your own trip.

Tripping without substances generally begins with relaxing the physical body, relaxing the mind, then making suggestions to yourself.

Binaural beats can help - Gnaural is the open source tone generator. I had to do some other things to fully recover from said concussion, and I'm finally dreaming up a storm. :)

If you don't know what perl golf is, time to treat yourself to some mind blowing perl. Perl golf is a challenge to complete a give set of algorithms in the fewest (key) strokes. Consider the Buroughs Wheeler algorithm, which is what bzip uses. How many keystrokes should that take to write? how about 55?
http://perlgolf.sourceforge.net/cgi-bin/PGAS/post_mortem.cgi?id=11

Mind blowing. Also informative as well.

I love perl. It has it's problems but I love how it's such a mutable language and how simple the core language is. It has one of the thinnest O-reily guides for a language that has Regex, Databases, and hashes built into it.

I never actually understood how objects actually work or the difference between a column and row database stucturce till I wrote in perl objects. The mind blowing thing to me is that to go from non-onject oriented perl to objected oriented perl, only two changes were made to the language: bless() and @ISA. it's uncanny that that's actually true for all languages. add those and your object oriented. This means for example, that you can start tommorrow writing object oriented fortran 77 just by implementing those two functions. If you don't believe me then you are like I was: you don't understand how object oriented programming actually works. And For those of you wondering: a row data base is the same as a perl object based on a blessed hash (how python does it behind the scenes) and a column database is a perl object based on a blessed scalar.

Well then, don't use links. The hooks are shown with jpegs.

Hmm, if only Microsoft had bought a company that made an x86 emulator. Oh, wait, they did.

Are you referring to Virtual PC? You might need to read up on what an emulator is and what virtualization software is. Bochs is an emulator, Virtual PC is virtualization software. You can't use Virtual PC on, let's say a SPARC, software to run Windows on that machine. You can, however, run Bochs on a SPARC machine to run Windows... I wouldn't suggest you try, because it's going to be slow.

Virtualization software only supports the architectures that the underlying architecture supports.

In a Von Neumann Architecture, Data and Programs are the same. In the strict sense of the word, even compiled code is data. So just differentiating Java Apps or Perl scripts from compiled code makes no sense.

It's not impossible to do this translation (thinking of Rosetta here), but is it the task of the operating system? That's pretty much what commodore64_love was insinuating.

As for drivers... How can you even mention so casually "apart from timing loop issues"? The reason they're drivers is because they have these issues, otherwise it could simply be implemented in user space.

Basically, if you want this, you need an operating system that provides only a managed Virtual Machine (in the Java sense) and you can only implement on that. To gain backward compatibility (which this ARM/x86 thread is about), you'd need a VM that does x86 on any architecture. That is called emulation and is slow. Try Bochs someday.

"seasoned" code reviewers who can't understand what the program is supposed to do in the first place? You are overestimating your competence.

It's supposed to write a '0'! The sneaky bit is it writes extra zeroes depending on what is being "censored".

Good luck with a rewrite when your resulting program has better readability but doesn't even work.

See: http://underhanded.xcott.com/?p=8

The object of this year's contest: write a short, simple C program that redacts (blocks out) rectangles in an image. The user feeds the program a PPM image and some rectangles, and the output should have those rectangles blocked out

Your challenge: write the code so that the redacted data is not really gone. Ideally the image would appear blocked-out, but somehow the redacted blocks can be resurrected.

The removed pixels don't have to be perfectly reconstructable; if a very faint signal remains, that's often good enough for redacted document scans. Indeed, an attacker may know that a redacted block might be one of two words, and any tiny bit of leakage that helps her determine which is more likely is technically a valid attack. However, more points are given for greater pixel leakage.

And the PPM format: http://netpbm.sourceforge.net/doc/ppm.html

It seems like the project never bothered to get polished, but it is a handy frontend to nxagent/nxproxy with manual tweaking:

http://sourceforge.net/projects/simplenx/develop

It won't work with nxclient at all or anything, but I don't need to be root on the server to get it working.

LOGO is not a programming language, no matter who yells it at the top of their lungs.

Wow... the people doing real agent-based modelling research dare to differ with you [PDF].

I would check out life lines. If I remember correctly it has a slightly steep learning curve, but it's very powerful. It saves the info in an open format called GEDCOM and can generate some really nice output with family trees and family histories. I used it a while ago and have always wanted to go back and really flesh out my family tree.

GenealogyJ can be found at: http://genj.sourceforge.net/ This free software works on Linux, Windows, Mac. It supports the Gedcom standard.

Lifelines

It's console based, but it's fairly powerful for that. Once you learn the navigation keys (and there's a help window at the bottom of the screen), then you can walk up and down your family tree with ease. It reads in GEDCOM, allows you to edit those records as GEDCOM (so you have a lot -- perhaps too much -- freedom in record structure and normalisation), and it exports in GEDCOM as well, as well as a scripting language which allows for all sorts of reports and outputs. You can even tell it to keep records in UTF8.

It is a record/database manipulation program: you will need to gather your data yourself, and enter it by hand. While the actual entry process is tedious (which, to be frank, will always be the case, flashy GUI or not), it is a good opportunity to go over the data and discover incongruities and patterns.)

"Oh Good Lord, its the HOSTS file troll." - by hairyfeet (841228) bassbeast1968&gmail,com> on Sunday December 19, @11:39AM (#34607794)

Ahem: Tell us, won't you, WHERE you got your "IT certification" from, please? LMAO!

(That cert's by NO MEANS a full CSC or MIS degree & the work they entail by a LONG SHOT - & yes, I have them both & 17++ yrs. of actual well-noted & internationally published experience in the art & sciences of computing, see below):

SO, the day you can manage to show us all you've done more than I have (along with dual degrees work as I have as well) than this, & EARLIER too?

----

Windows NT Magazine (now Windows IT Pro) April 1997 "BACK OFFICE PERFORMANCE" issue, page 61

(&, for work done for EEC Systems/SuperSpeed.com on PAID CONTRACT (writing portions of their SuperCache program increasing its performance by up to 40% via my work) albeit, for their SuperDisk & HOW TO APPLY IT, took them to a finalist position @ MS Tech Ed, two years in a row 2000-2002, in its HARDEST CATEGORY: SQLServer Performance Enhancement).

WINDOWS MAGAZINE, 1997, "Top Freeware & Shareware of the Year" issue page 210, #1/first entry in fact (my work is there)

PC-WELT FEB 1998 - page 84, again, my work is featured there

WINDOWS MAGAZINE, WINTER 1998 - page 92, insert section, MUST HAVE WARES, my work is again, there

PC-WELT FEB 1999 - page 83, again, my work is featured there

CHIP Magazine 7/99 - page 100, my work is there

GERMAN PC BOOK, Data Becker publisher "PC Aufrusten und Repairen" 2000, where my work is contained in it

HOT SHAREWARE Numero 46 issue, pg. 54 (PC ware mag from Spain), 2001 my work is there, first one featured, yet again!

Also, a British PC Mag in 2002 for many utilities I wrote, saw it @ BORDERS BOOKS but didn't buy it... by that point, I had moved onto other areas in this field besides coding only...

Being paid for an article that made me money over @ PCPitstop in 2008 for writing up a guide that has people showing NO VIRUSES/SPYWARES & other screwups, via following its point, such as THRONKA sees here -> http://www.xtremepccentral.com/forums/showthread.php?s=ee926d913b81bf6d63c3c7372fd2a24c&t=28430&page=3

Lastly, lately (this year)?

It's also been myself helping out the folks at the UltraDefrag64 project (a 64-bit defragger for Windows), in showing them how to do Process Priority Control @ the GUI usermode/ring 3/rpl 3 level in their program (good one too), & being credited for it by their lead dev & his team... see here -> http://ultradefrag.sourceforge.net/handbook/Credits.html

----

What do I have to say about that much above? I can't say it any better, than this was stated already (from the greatest book of all time, the "tech manual for life" imo):

"But by the grace of God I am what I am: and his grace which was bestowed upon me was not in vain; but I labored more abundantly than they all: yet not I, but the grace of God which was with me." - Corinthians Chapter 10, Verse 10

(And, because I got LUCKY to have been exposed to some really GREAT classmates, professors, & colleagues on the job over time as well)

---

The day you can show us all reading here that you've done more than that that was noted well by those in this field in international publication than I have? Well - at is the day you can talk, & even BEGIN to act as if you are my "peer" in computing... stooge.

---

"For the rest of us you can either just use the free Comodo Dragon browser and pick the "yes I'd like to use the secure Comodo DNS" box on install,

I did a couple searches thanks to your post and appreciate being closer to my answer.

I have one gmail account but importing twelve years of private Yahoo e-mail into gmail, which has existed a mere five, makes me cringe. Can't allow them to cash in with its advertising partners on a huge data mine for one single user. Yahoo mail never had privacy problems, and you cringe because they're the least flashy one. Good for me. Hotmail and gmail accounts get hacked all the time.

I'll settle for a pst-type Yahoo archive to be saved away from the web and potential advertisers down the road.

I did a couple searches thanks to your post and appreciate being closer to my answer.

I have one gmail account but importing twelve years of private Yahoo e-mail into gmail, which has existed a mere five, makes me cringe. Can't allow them to cash in with its advertising partners on a huge data mine for one single user. Yahoo mail never had privacy problems, and you cringe because they're the least flashy one. Good for me. Hotmail and gmail accounts get hacked all the time.

I'll settle for a pst-type Yahoo archive to be saved away from the web and potential advertisers down the road.

If you have server space, there's SemanticScuttle. Works nicely for me--once I fixed it so it (a) didn't expect to be importing from a file with uppercase HTML markup, and (b) didn't insist on converting all my tags to lowercase. Unfortunately, it can't import the del.icio.us privacy settings, so your imported bookmarks will end up globally public or globally private.

Yep, and then just import it into http://sourceforge.net/projects/scuttle/ , which is a del.icio.us replacement to run on your own server.

"The census will become the first time the open standards are used by an Australian Federal Government agency."

Really?
http://xena.sourceforge.net/

You might want to check out these games.

Wing Commander Universe
http://sourceforge.net/projects/wcuniverse/

Privateer Gemini Gold
http://sourceforge.net/projects/privateer/

Wing Commander Saga (Built on top of Freespace 2)
http://www.wcsaga.com/

You might want to check out these games.

Wing Commander Universe
http://sourceforge.net/projects/wcuniverse/

Privateer Gemini Gold
http://sourceforge.net/projects/privateer/

Wing Commander Saga (Built on top of Freespace 2)
http://www.wcsaga.com/

There is an open source project for an engine to run the first 3 Keen games:

http://clonekeen.sourceforge.net/

I can't stress enough how much I want a new Keen game. Who owns the rights these days? Atari?

If I was a small game development company trying to make a name for myself, this would be a perfect project. There are WAY too many shooters, and it is hard to differentiate yourself in that market, especially on a budget.

But a good platformer can be developed on the cheap. New platformers still find ways to innovate and change gameplay all the time. You can capitalize on the fact that this a known name and might get hyped up by eager geeks, but at the same time the franchise has been dormant long enough that you might get the license real cheap.

For those who need reminding and don't have a copy of it, play it in your browser using JPC:
http://jpc.sourceforge.net/keen.html
There are other versions here:
http://classicdosgames.com/online.html

> Stallman warns would-be hackers not to download the LOIC software being pushed as a method of expressing anger with sites that have acted against Wikileaks - not because he thinks the protest is wrong, but because the tool's code is not visible to the user. "It seems to me that running LOIC is the network equivalent of the protests against the tax-avoiders' stores in London. We must not allow that to constrict the right to protest," he notes. "[But] if users can't recompile it, users should not trust it."

LOIC's source code is available on SourceForge.
http://sourceforge.net/projects/loic/

Haven't RTFA'd, but I've always been interested in the MUTE project ), which is a truly anonymous p2p filesharing system which is based on how ants find food: http://mute-net.sourceforge.net/howAnts.shtml

(I've never tried it and it hasn't been updated for a while but it's always sounded cool to me as an anonymous method of filesharing, even though there's obvious issues)

Haven't RTFA'd, but I've always been interested in the MUTE project ), which is a truly anonymous p2p filesharing system which is based on how ants find food: http://mute-net.sourceforge.net/howAnts.shtml

(I've never tried it and it hasn't been updated for a while but it's always sounded cool to me as an anonymous method of filesharing, even though there's obvious issues)

Wheres the -1 clueless? Installing tomato and coreboot isnt remotely close to "compiling firmware" for them, any more than sticking an ubuntu install disk in your PC is rolling your own operating system.

Unless, of course, you compile the firmware.

there was a mod some maniac made over ten years ago of id's original doom fps. you were let loose in a level full of monsters, and each monster correlated with a process running on your computer. when you shot a monster (with a shotgun, preferably), the process associated with that sprite was terminated as well.
 
  psDooM

How can "simply downloading the software" earn a conviction? This software (LOIC) seems to have been developed for legitimate uses for testing networks.

http://sourceforge.net/projects/loic/

::Sigh:: It's really not any different than the way purchasing a gun earns you a murder conviction.

Look, Guns kill people. If you buy a gun and get caught, you go to jail for killing people, it's simple.

The Low Orbit Ion Cannon is a HUGE gun! If you buy a Huge Gun, even for $0.00, you WILL GO TO JAIL!

http://sourceforge.net/projects/loic/