Slashdot Mirror

You know you've been hacking too long when...

...you test a program, and it fails, so you jump into the editor, look at it, jump out, recompile and test (without making changes) and it still doesn't work, so you jump ........ and it still doesn't work ...... recompile without any changes........

By the way, a solution that I haven't seen mentioned yet is to perform something like a man-in-the-middle attack by hooking up another box to the unprotected signal going to the speakers.

Gramofile does essentially that without the need for a second box. Records from the signal on the sound card within the same machine.

I run a CVS server on behalf of a client on a FreeBSD box. It is running in pserver mode, and is launched by cvsd , which is a chroot() jail for CVS.

It is not clear from the sensationalistic news story what an administrator should do, or whether my particular configuration is vulnerable. Could a more knowledgeable person please summarize the issues involved, or point to the original vulnerability report so I can evaluate my risk?

Thanks,
Schwab

Here's one mention of something related.

CDex
Ogg Vorbis Audacity

CD-DA X-Tractor AudioCoding Mp3splt Mp3Wrap

Alba Extractor PeerCast GNUMP3d Mp3 Tag Tools

GramoFile FFmpeg

JAZZ++ Open Sound World

Wow. Slashdot really sucks. If the lameness filter actually prevented ascii art, they might have an excuse.

Why haven't you updated yet? Hurry, get version 1.03 ! Shit, I wouldn't be reading this if I were you, there are MAJOR security holes in 1.02!

Good to see MySQL develops so fast and its press releases are already hyped enough.

If the MySQL development team did clustering, perhaps now they could consider implementing stuff from numerous wishlists, mainly from here and here...

Great! Now I know how to get on with that game.

Oh... and don't forget to give the dog your sandwich

MIRROR
the admin of this box is a total ***hole, so i mirrored the article on it. bombs away.

now with link and without the added space
i know, i suck at slashdot

try this one

All you have to do is run a cable from the output on a tape player to the line in of your sound card. Set line in as the recording device, start a program to record a wav, and hit play on the tape player. Then go through with Audacity and separate the songs. I've done it before, it works fine.

Actually, for simply getting the tracks from a tape to your hard drive, Gramofile might be a better fit, although I have never used it. Anyway, good luck!

So it's in /fedora/core/test/1.90/i386/os/images/boot.iso

(Waiting till his own ISP has it so he can download it from a computer only 1 hop away ;-)

This is a nifty table that explains why Russian engines are so desireable.

This is a fluffier piece on the RD-180, now being built in the US under license.

Finally, this is a crowded table of all the Energomash engines. NOTE: this table's hard to read, and you'll find some WILD variants...

This was discovered by Sander Haemes 3 years ago.

I have never heard of gnuphonograph either, but Gramofile should suit your needs. I've used it myself to record music from vinyl to hard drive (just to encode it to ogg vorbis (to keep this post a bit closer to topic)) and I think it does a great job. Unfortunately the development of this nice little thing seems to have stallen.

The dutch voting machines are just as bad as the us ones. They have no paper trail and can't be checked. Read this (in Dutch)

I would keep my damned perverted teenager away from those perverted websites.

I would note that 100 year floods can occur 2 years in a row, so the search for near-Earth asteroids should continue

I think 'Want to see my tattoo?' would be a more honest pick-up line than relying on an electronic beeper that goes off when I get near someone with supposed similar interests



Oh dang - wrong post - hmm.... maybe not -

From perverted teenager result

From 100 year flood search

From 'Want to see my tattoo?'

Just too much fun!

The LART is perfect - its cheap (okay, 200UKP+) and the design is completely open - including schematics - so you've got the best hardware combo for your Linux software:

The LinuxDevices page on LART

The LART home page

Last I checked (2 months ago) they still had LART boards available from a 'community-production run' of boards made for other LART hackers ... so you could spend a few hundred bucks and easily get yourself a nice little board for experimenting with.

That said, I'll give you another bit of advice for eval boards for Linux: GO DIRECTLY TO THE CHIP VENDORS. Do not pass google. Do not spend $200.

Chip vendors (Motorola/Intel/HP/AMD/etc.) make evaluation boards for their embeddable CPU designs, and you can guess which OS is the most commonly supported, at the engineering level ... yes, Linux.

Pick your CPU, check if there's a port for it (there probably is), then go to the CPU vendor and get their eval board for it...

Samsung have some good ARM920T-based designs which are cheap and supported by eval board vendors around the world (check www.mizi.com for example) ... and the Motorola Coldfire team love Linux.

Slashdot won't give you a good answer. Go for the CPU vendors...

Apparantly Zowie Interactive made a similar toy. It was a pirate ship with serial cable, and moving the pieces around would make your computer respond. Product disappeared without a trace; very little is on the net, and eBay has nothing.

Also apparantly, the company was bought by LEGO, so there may be hope.

These guys have all available info, including a link to the above MIT paper.

what research is there in non-Von Neumann architectures?

Take a look at TTA. Probably the coolest computer architecture ever. Processors designed to be so simple that they don't even have an instruction set. I read about this concept years ago, in Byte, but the idea has never really made it out of academia.

IIRC, it was originally intended for massively parallel computing (possibly as a backend for Lisp programs), which it was suitable for because it increases the granularity of operations.

Kobra is a Star Wars-themed one.

users can ask their computers to retrieve all pictures that include a specific person's face

I wonder if they'll link to any of this pictures, when searching for this specific person's face:

http://www.areyadone.com/images/hated/bill-gates.j pg
http://users.cybercity.dk/~cfs4636/PIC/Bill%20Gate s%20-%20007.jpg
http://www.holub.com/goodies/images/Billborg.jpg
http://home.midsouth.rr.com/catcam/bill-gates-borg .gif
http://www.kewlcard.de/bilder/postcard/5/bill%20ga tes.jpg
http://www.rockhardplace.com/horror/images/ironmai den/eddie-bill%20gates.jpg
http://superwebon.iespana.es/superwebon/Archivos/B romas/Fotos/Humor%202/Bill%20Gates%20Feto.jpg
http://www.paulsjusticepage.com/images/cyborg.jpg
http://www.telegraph.co.uk/money/graphics/2002/09/ 24/cnforb24.jpg
http://ta.twi.tudelft.nl/DV/Staff/Lemmens/gates.jp g
http://images.ecampus.com/images/d/258/0312192258. gif

There is now a FULL MIRROR available.

Enjoy! :D

Mirror. Please, don't slashdot it too much, no wget etc.

The main site is really slow, so not all files are on this mirror yet. Just try back in a few HOURS :)

Mirror

Another mirror here. Please don't slashdot it too much, it's an old, falling-apart server :)

http://elektron.its.tudelft.nl/~aakeur21/title.gif

Also try this http://elektron.its.tudelft.nl/~aakeur21/title.gif

Its not xrays, but you might want to check out...
Terahertz Imaging:Another Way to See Through Walls
Terahertz Imagery Progresses
Teravision
Star Tiger

i just put the movies over here as the site seems rather slow: PLEASE BE GENTLE PEOPLE!!!

the PPC doesn't have native multiplication instruction

What exactly are you talking about? PPC has 4 mulitplication instructions. Here's one of them. If you're really intrested the basic instruction list can be found here

the PPC doesn't have native multiplication instruction

What exactly are you talking about? PPC has 4 mulitplication instructions. Here's one of them. If you're really intrested the basic instruction list can be found here

Yep, this is a pretty obvious way to approach it. Indeed, a team from the Information Technology and Systems faculty at the Delft Technical University in Holland have published a report on how they did exactly that.

My Dutch isn't all that great (I spent 12 months as a postdoctoral researcher in their operating systems software distribution group working on a Beowulf-aware version of apt-get, but most of the staff spoke perfect English), but it looks like they deployed a 256-node cluster running a highly tweaked version of Debian GNU/Hurd, and were able to solve the problem in 14 days, 4 hours and 17 minutes of computation time.

While I'm sure that's not impressive for the folks at Google, what with their massive GNU/Linux clusters for web searching and keeping their apt.sources files up to date, it does go to show how even a smallish CS faculty can crack these tough sorts of problems using the power of clustering, Debian, and apt-get.

FWIW, Dutch voters don't have any more insight in the source code for the voting machines than Irish voters have. Similar requests have been done here to no avail.

An article by Peter Knoppers about why electronic voting is bad (Dutch). Also shows a picture of the NEDAP machine.

Tried a LART?

Actually I think the hole potentially gave the ability to run arbitrary code, which isn't the same as a root vulnerability.

Confirmed remote exploitable:
setiathome-3.03.i386-pc-linux-gnu-gn ulibc2.1
setiathome-3.03.i686-pc-linux-gnu-gnulib c2.1
setiathome-3.03.i386-pc-linux-gnulibc1-stati c
setiathome-3.03.i686-pc-linux-gnulibc1-static
setiathome-3.03.i386-winnt-cmdline.exe
i386-unkno wn-freebsd2.2.8 (Special thanks to Niels Heinen)
SETI@home.exe (v3.07 Screensaver)

With passive terahertz imaging, you have to face the problem that basically everything, including your detector, is emitting terahertz radiation. With a well-designed pulsed terahertz source, as in the links, you are much less sensitive to thermal noise. Unfortunately, it requires quite a bit more equipment, most importantly a femtosecond pulsed laser system which is too expensive (at least USD 150,000), bulky, and fragile for use outside a laser laboratory.

tell me if their platform is just a copy of the LART project?

platform reminds me of the LART project. Anyone else more knowledgable about this care to comment?

The GPS PDA is one of the first devices to contain the new DragonBall MXL (MC9328MXL), according to this.

Its ARM9-based, is 150mhz and does 150mips. Doesn't sound like much, but its only US$10.30 in "low volumes". It has an MMU so it would run linux. I'd like a cheap, small, LART style computer with some useful IO (ethernet, serial ports etc) I can run linux on and generally hack about with. This seems like an ideal CPU (shame it doesn't have integrated ethernet though).

In november 1995, the ETV - student association of EE, Delft University of Technology, The Netherlands - allready did a similar thing.
It's in Dutch, but there are some pictures.

"I Wonder if some of the Indian exports assisted in DPRK weapons systems development?"

This is such a naive statement that shows you really know very little about India! First of all India is a responsible sensible democratic nation that unlike much of the sillyness of the cold war never aligned itself with either side and was a leader of the Non Aligned Movement (NAM) (Which was an organization that thumbed its nose at NATO and Warsaw pact). India has a history of never sharing sensitive technology with rogue nations. India has been doing space/nuclear/computer technology for a long time now (many decades) never mind that most common westerners are getting to hear about it now only (e.g. Did you know we first exploded a nuclear bomb in 1974?) On top of all this DPRK is an ally of Pakistan having supplied the Paki's rockets in return for Nuclear bomb tech. The Paki's can't make a thing on their own. They stole most of nuclear tech from Europe on the sly and got all their missile tech from DPRK. India would never even have decent relations with countries so much in bed with undemocratic islamic radicalists and terrorist infested Pakistan. Please read a bit more of a background research about India and South Asia before wondering such silly things. Is that too much to expect from a Pullitzer Prize winning professor? ;) Sometimes the American ignorance about India appalls me.

The Simputer is intended as a community-shared device (hence it's smartcard), but its sad that you're mostly right. The Simputer's progress has been a bit of a disappointment so far, with only development kits available... I wish it's creators had GPL'd/LGPL'd the hardware right from the beginning (IIRC, the software is GPL'd anyway) and had gotten hardware developers the world over involved in on this... this could have done the same thing for the PDA, as Linux did for Operating systems.

Right now, the hardware seems pretty dated (the Dell Axim you mentioned runs 100Mhz faster for $50 less -- but it doesn't have the smartcard, USB, or modem of the Simputer). However, it's the Simputer's software that could be the breadwinner -- the claim is (haven't tested it myself) seamless integration of smart card access, SSL security, document annotation, voice-to-text, etc. Simputer hardware development kits are available, but are expensive. My understanding is the software should compile/work on another StrongARM platform like the IPaq/Cerfcube/Lart, maybe even the Axim!

I have never heard of open source hardware.

There's several open source cores for FPGA's, and an ARM based single board computer.

Dave

A friend of mine pointed to some very cool photo's of the fire, made by a professional photographer and Computer Science-student at the university of twente. They are located here. Thought you might want to know :)

the link to 2xsai is here at http://elektron.its.tudelft.nl/~dalikifa/. the link provided in the article is to Scale2x. The page even says at the top "Instead, this effect is pretty different from the SuperEagle, 2xSaI, Super2xSaI effects "

is sai2x basically 'eagle'?

Eagle and Kreed's 2xSaI are based on different algorithms. The "Super Eagle" and "Super 2xSaI" filters by Kreed are combinations of the techniques of Eagle and 2xSaI.

Huh? For some reason my first link messed up... anyways:

Kreed's Homepage: 2xSaI : The advanced 2x Scale and Interpolation engine

The Async tools page has the list of most tools we use.
Ones we use most often are:

Balsa: make just about anything with it. Its personally quite VHDL like and very well mentained. Recently used to make a whole synthesized ARM compatable asynchronous chip. Comes with many flavours of back end (dual rail, single rail, safe and more).

Petrify: Make small components by describing each part transition by transition. (VSTGL) makes the process a little more graphical.

MINIMALIST: Simmilar to petrify but a little simpler to specify things.

The best way to learn these tools is to go to async 2003 where they have a tutorial of some of them.

There is also the book. It goes through a balsa tutorial.

The most important part of designing async stuff is to learn the different methods. Read the intoductions to some of these theses. They explain the basics. Before you start designing know what makes the system good or not.