Slashdot Mirror

The exploit is one thing, but the real story is that the exploit code was leaked from somewhere inside Microsoft, likely the MSRC. There's a string in the exploit that points to a folder on an internal MSRC server. This is about as bad as it gets. See here: https://twitter.com/#!/jduck1337/status/180495975377408001 and here: https://threatpost.com/en_us/blogs/ms12-020-rdp-exploit-found-researchers-say-code-may-have-leaked-security-vendor-031612

Bullshit.

I'd say screen resolution is the /easiest/ thing to work around. With Android, you've got all sorts of problems with inconsistent behaviour between different versions. Prior to 2.3 (Gingerbread), you couldn't put assets in an APK larger than about a megabyte and the app installer won't clean up after data that you put in the officially sanctioned directory on the sd card. Trivial stuff when you're trying to bundle potentially large graphics files I guess. With Gingerbread, Google broke the Expandable ListWidget class. As far as screen resolutions go, there are predefined ways to handle the different sizes and densities. It's actually pretty flexible and one of the more intuitive things about Android development. Other than the list of acceptable values itself being something of a moving target, it's not /so/ bad.

As for the free development suite, you get what you pay for. I certainly much prefer XCode to Eclipse, to the extent that I use NetBeans to do development instead. Of course, the hot new SDK broke some minor things like incremental builds with NB. Previous versions of the Linux SDK shipped with broken versions of gcc that wouldn't compile the kernel properly (okay app devs don't worry about this, but it goes to show how chaotic the Android ecosystem is), and the supposedly supported MacOS X lacks support for various things like dexopt (OS dev) or Google TV support. Yeah, okay, I'm still chaffed that Google refuses to integrate SDK support for other free, open, non-Linux, UNIX-like operating systems and just writes sloppy code.

Linux as the required SDK platform is a bonus only if you're already using it.

Punitive damages, anyone?

Here's my tweet from a few days ago, "Do Americans not like government, because theirs is so bad? Cause or effect?" https://twitter.com/#!/stephanwehner/status/176761789281869824

S

Anonymous Coward,

You may want to read the end of this comment before jumping to conclusions:

    https://bugzilla.gnome.org/show_bug.cgi?id=664611#c10

Ie. I offered to fix it, before the report was published. And the report is deliberately misinformed to make it look like I said I don't have any intention to fix it. And the report author tweetted [1] "Apparently not a lot of people read Slashdot anymore or RTFA. I've only had 971 hits to the article so far. :-(", which makes me believe that his true intention was to get Slashdot / Reddit / Hacker News bragging rights. Comes handy if you are a sysadmin I guess...

behdad

[1] https://twitter.com/#!/climagic/status/177796284755873793

You're just saying that because you don't read climagic

Are there any details on the exploit beyond "Code execution and sandbox escape (medium integrity process resulted)"?

5 minutes into the Pwn2Own cracking contest team Vupen exploited 2 Chrome bugs to demonstrate a total break of Google's browser.

Thanks for linking to a complete useless, pointless and content-free Twitter post.

One of his last tweet before the arrest:

"They read your mails. Listen to your calls. Break into your wireless routers+sniff your traffic. GPS cars. I'm not talking about terrorists." https://twitter.com/#!/anonymouSabu/status/176683665919721472

I guess he really knew what he was talking about.

http://twitter.com/#!/homakov/status/176476394455437312

"Thank you all,sweethearts! For support, and shit too. One more thing to clarify. That tattoo is kind of fake made with henna. eat vegetables"

On climagic I laid it out in less than 140 characters.

I managed to pre-order one in the USA through the Farnell export site; this was about 8:20am GMT. The page has now gone to a register-your-interest form, so probably not much use now.

Price GBP 24.55, estimated delivery date 16/04/2012. No idea what postage will cost, I'm prepared for something horrendous to get it to Seattle.

What people are missing is that they're now build-to-order. Instead of before, where the Raspberry Pi organisation had an initial batch of 10,000, the sale of which would fund the next batch to arrive at some indeterminate point in the future - RS and Farnell are ordering the things from the manufacturers themselves.

I was watching with amazement as both RS and Farnell got nuked off the intertubes within seconds of the announcement. This board is popular. The previous plans for ordering wouldn't have worked at all.

Would Apple have coped better with such a launch? Probably. But as the Raspberry Pi twitter feed says: "Apple has a market cap of $500bn. We have Liz's collection of fridge magnets and a few coins down the back of the sofa."

I'm really looking forwards to my Pi arriving. Given that I was expecting to wait at least until the summer to get one, things are going well!

Perhaps not moves in the web, but apparently G. Van Rossum has had some privacy problems related to his contacts.

You may want to check those figures again.
http://mobile.twitter.com/cdaffara/status/169836817376493568
"B&N lawsuit: MS asks $7.50-$12.50 per Android device = 3.8%-6.3% of Nook price. And they contest Moto 2.25% request."

http://www.geekwire.com/2012/judge-microsofts-android-tactics-hard-bargaining-patent-misuse

Gleick's announcment Feb 20: http://dotearth.blogs.nytimes.com/2012/02/20/peter-gleick-admits-to-deception-in-obtaining-heartland-climate-files/
McArdle's Article: Feb 19: http://www.theatlantic.com/national/archive/2012/02/heartland-memo-looking-faker-by-the-minute/253276/
Pielke's tweet Feb 18: http://twitter.com/#!/RogerPielkeJr/status/170542669007818752

It is funny that their take-down notice is copyrighted itself too. They should take-down the zdnet article for re-printing a screenshot of it, and then replace it with the actual page that the screen shot is of.

It is worth following JackOfKent on twitter for his insight into this. He noted that the take-down notice could actually be a contempt of court.

Tim Berners-Lee Twitter Reference: https://twitter.com/timberners_lee/status/167724524299759616

Kristin Paget used to be Chris Paget, famous GSM hacker. With that out of the way, we return you to this awesome hack.

No one has tweeted to me that there was a speed trap around the bend.

True. But a lot of people coordinated #SOPA and #PIPA protests via Twitter. @jimmy_wales raised a lot of awareness about the issue with his tweets supporting the protest.

I'll take a speeding ticket any day of the week over SOPA, PIPA and the current outrage, ACTA.

No one has tweeted to me that there was a speed trap around the bend.

True. But a lot of people coordinated #SOPA and #PIPA protests via Twitter. @jimmy_wales raised a lot of awareness about the issue with his tweets supporting the protest.

I'll take a speeding ticket any day of the week over SOPA, PIPA and the current outrage, ACTA.

It has traveled 22 miles (34 km), according to one of the JPL people who drive it:

https://twitter.com/#!/marsroverdriver/status/162678175388803072

This isn't for Egypt, Saudi Arabia or third world countries.

Go try telling that to Arab activists (eg: Iyad ElBaghdadi). They are livid about this. There appears to be a "blackout" boycott effort being organized for tomorrow.

I'll have to disagree ...it's tech worthy news. The more money Apple gets, the more money they have to influence the shape of things to come.

It's good to be aware of the shifts in power and the current status quo regardless of whether you are a fanboi or not.

Speaking of which :
@fmanjoo : "Apple's profits ($13 billion) exceeded Google's entire revenue ($10.6 billion)."

Thought that was pretty mind-blowing since we're all used to thinking of Google as some kind of juggernaut.

It's been slashdotted offline!!! There's download links on the twitter feed! https://twitter.com/#!/NoSafeHarbor

I was one of the guys who did that drive. It cost £20 for electricity and would have been £200 in an ICE. I'm getting a Vauxhall Ampera (european Volt). For me the car will pay for itself in its lifetime. £40,000 of fuel savings for commuting alone. See https://twitter.com/#!/dpeilow/status/158629331885752321/photo/1 for the details.

See, for instance, #herpderpedia, listing reactions by many clueless teens.

Clueless? I'll say. Maybe I'm prejudiced (I certainly am) but my kids seem a lot more intelligent than your basic tweeting teenager suffering wikipedia denial.
I'm also reminded why I don't use Twitter. Does every tweet have the word "gay" in it?

Washington Post has an interesting article about the Wikipedia blackout.

Thanks. The article is amusing and insightful.

This is one of those days when we realize how little we know.
We have spent our lives figuring out where to get the information we
require (without really absorbing that information). Now, for a moment,
we’re left alone with the contents of our own heads, and the pickings
are slim.

Unfortunately, there are too many people that still do not understand what SOPA/PIPA are about, and simply complain about the loss of Wikipedia. See, for instance, #herpderpedia, listing reactions by many clueless teens. It's disappointing how none of them spend the time to actually read the notice. Washington Post has an interesting article about the Wikipedia blackout.

Jimmy Wales just announced on twitter that the entire House of Representatives system is down. They appear to be having technical difficulty keeping up with the response.

I can't tell if you're joking. He tweeted: "So Obama has thrown in his lot with Silicon Valley paymasters who threaten all software creators with piracy, plain thievery."

That doesn't even make sense. I can't tell if he's crazy, or cynically trying to manipulate people.

In fact, Jimbo Wales — founder of Wikipedia — kindly warned students yesterday.

Blackout day is still on. I am pleased to share the report that Wikipedia will definitely participate.

From GoogleTV's Twitter:

can't say for sure but we are working with various networks to bring more stuff to GoogleTV. Keep your eyes peeled.

I wonder what that comment is worth, but I don't think they will make the same mistake twice.

This is a distraction to get media focus back on Twitter because of the Google search plus announcement. Honestly Twitter shows me the Fail Whale about once a week and their service record is poor for such a large site - so what will they be complaining about next?

Google has been amassing tons of data and is now planning to use that to have personalized search - that is the story. I don't see how they will get around the filter bubble issue. (Never mind personal data protection and other issues.)

As a side I am still trying to wrap my head around Wolfram's blog today about using a TLD .data in relation to the Google announcement.

Bad day for the internet?

I am surprised it didn't hit Twitfail

Meanwhile I imagine the bought and paid congressional goons are just singing the Meow Mix jingle in their heads during these hearings.

Or surfing the web, even tweeting how "boring" listening to someone argue against the bill during a fucking meeting explicitly for that purpose was...

Here's some of what he found "boring":

"But there are sufficient loopholes here that would allow innocent sites to be shut down, thereby a loss of jobs. Have we answered the question dealing with national security? And as well are we recognizing the value of the First Amendment?"

Yeah, the First Amendment is just so fucking boring...

it looks like this person is responsible for the stupidity: https://twitter.com/#!/luca_passani

i've advised openddr to contact the SFLC but this is twitter: can i recommend that people also advise openddr on twitter to contact the SFLC, as well as pressurise the moron who doesn't understand what the DMCA is for.

Ok I was just on the flight that had "turbulence" in a A380 and honestly it was kind of amazing falling out of the sky...
see my commentary

https://twitter.com/johnjonesname

I just feel sorry for whomever it is that's living next door to the thieves when Israel overreacts. Israel isn't exactly known for keeping any sort of perspective on things. Kill one of their citizens and they'll kill dozens of your citizens with little to no concern for innocent civilians.

Not according to Jonathan Sacerdoti in the New Statesman (most certainly not a pro-Israel publication). In fact, during Operation Cast Lead, Israel managed a better than 1:1 ratio (that is, one civilian per combatant killed). The UN estimate for similar assymetric warfare is 3:1 - that is three civilians for each combatant killed. And since then, they have done even better. In 2011, it was either 1:10 (Jane's correspondent in Israel) or 1:3 (Elder of Zion - factoring in numbers from PCHR).

Look for the actual facts, not mass media accounts. And as a rule of thumb, I'd discount hysterical claims right after an event, until they are actually examined. (Cases in point: the whole Muhammed al-Dura story, which was later shown to be a hoax, the supposed "massacre" of hundreds or thousands in Jenin that turned out to be 52 or 53, mostly combatants).

Not really related, but I recall John Carmack recently posted on Twitter saying that a cell phone will use less than $1 of grid electricity over their lifespan (based on this calculation).

Interesting insight into how little power a cell phone uses compared to other devices!

Not really related, but I recall John Carmack recently posted on Twitter saying that a cell phone will use less than $1 of grid electricity over their lifespan (based on this calculation).

Interesting insight into how little power a cell phone uses compared to other devices!

So the terrorists are broadcasting their messages on twitter.. and they maybe have followers or something?

Not exactly. The account for Al-Shabaab hasn't twitted yet (may be they're using Direct Messages). I hope that Israeli organization is proud of itself. That Twitter account was probably the only lead the CIA had on Al-Shabaab.

And the Twitter account for Hezbollah is private, only has two followers, and seems to be under the name of some Jewish guy.
https://twitter.com/#!/Hezbollah

I guess Twitter could always shut down that Hezbollah account on the grounds that impersonating a terrorist organization you're not affiliated with is a direct violation of their terms of services, but I don't see them shutting down that first account, especially if it's being monitored by government officials.

Even for mere drug dealers in the US, phone companies are usually told by the government not to shut down accounts for non-payment if there is an active tap on their line.

So the terrorists are broadcasting their messages on twitter.. and they maybe have followers or something?

Not exactly. The account for Al-Shabaab hasn't twitted yet (may be they're using Direct Messages). I hope that Israeli organization is proud of itself. That Twitter account was probably the only lead the CIA had on Al-Shabaab.

And the Twitter account for Hezbollah is private, only has two followers, and seems to be under the name of some Jewish guy.
https://twitter.com/#!/Hezbollah

I guess Twitter could always shut down that Hezbollah account on the grounds that impersonating a terrorist organization you're not affiliated with is a direct violation of their terms of services, but I don't see them shutting down that first account, especially if it's being monitored by government officials.

Even for mere drug dealers in the US, phone companies are usually told by the government not to shut down accounts for non-payment if there is an active tap on their line.

Wonderful way to snatch some karma, plagiarize the tweet from Harry McCracken that's going around. Bravo ;)

Have a read at his twitter account...

From there (posted some hours ago):

I didn't know who the dude was at Penny Arcade - I really didn't do anything wrong, and my reputation is ruined forever.
---
Basically, what Gabe did is this If you were in a bar, drinking and hanging out with a bunch of people and in that group of people was one guy that you didn't know was a mixed martial arts champion. He knows he can kick the shit out of anyone in that bar and you happen to pick a fight with him. He doesn't tell you what he is you take a swing at him and the next thing you know you have a broken jaw and you're on the way to the hospital.
---
I talked to four or five thousand people before I talked to this kid. None of them went viral. Before Sunday my reputation was impeccable - it was as clean as the most expensive diamond. Now it's just trash, and that bothers me.

Still feel sorry for him? I feel sorry for his family (which also seem to be harassed, which is really sad), but him? No.. Not the way he's still acting.

He keeps on going! Doesn't believe he did anything wrong. STILL beating his chest, STILL bragging
about who he knows. Sad.

http://twitter.com/OceanStratagy

Geico is already using it.

+1 internets for their PR person being up on current events.

David Ulevitch, founder of OpenDNS, had a more likely hypothesis, which is that Google is protecting itself from increased antitrust scrutiny. Remember that they often display a message on Google.com trying to convince people to download Chrome. Along with Android, Google needs to appear like it's not too dominant.

So, in your opinion, Google is paying Mozilla to strengthen its search engine market share (85%) at the expense of its web browser market share (25%) because they fear the antitrust scrutiny. Just to point out, an antitrust investigation on Chrome is just impossible: it is not by any means in the same position as IE was, the only browser bundled with a monopolistic OS.

It's like how Microsoft keeps releasing Office for Mac and various other utilities to make sure the Mac is out there just enough to keep antitrust regulators off its back.

No. MS keeps releasing Office for Mac because: it makes money (1), it secures the Office lock-in by spreading the OOXML format (2). The second point is extremely important to MS, they want to spread their inextricable file formats everywhere so to secure their monopoly. See? All the contrary to what you said.

Many took this as charity, and for the purpose of advancing the web.

Which is absurd. Chrome and Firefox are competing for the same users. Chrome helps Google display ads by directing users to Google services, such as with searches in the address bar. Google and Mozilla are competitors. Remember, you are the product, and advertisers are Google's customers.

David Ulevitch, founder of OpenDNS, had a more likely hypothesis, which is that Google is protecting itself from increased antitrust scrutiny. Remember that they often display a message on Google.com trying to convince people to download Chrome. Along with Android, Google needs to appear like it's not too dominant.

Peter Kasting at Google posted a response, but it focused on claims about Google killing Firefox and didn't actually contradict Ulevitch's thesis on why they paid so much to be Firefox's default search provider. Firefox usage is falling because of Chrome, so it's not like Mozilla (a non-profit) is best pals with Google (a for-profit, multibillion-dollar advertising megacorp). And Mozilla has questioned Google's motives in the past over their refusal to implement Do Not Track in Chrome when all the other major browsers committed to it.

It's like how Microsoft keeps releasing Office for Mac and various other utilities to make sure the Mac is out there just enough to keep antitrust regulators off its back.

Like the anonymous coward below notes, I actually took it too low. AIDG gets charged $35 per chargeback, so it's probably more like $350,000 or more.

Stratfor Global has us worried. Pls don't donate to AIDG with stolen credit cards, we get hit $35 per fraudulent transaction! #anonymous RT

Indeed. Good job, Anonymous!

UPDATE:

This person also has a history of bad mouthing customers (link).

According to www.examiner.com, Paul Christoforo has apologized to the customer and to Penny Arcade, and also asks them to please tell people to stop sending hate male and calling him on the phone. BUT, this guy continues to badmouth Penny Arcade on Twitter, and Reddit and people who play video games.

Some of the latest posts from his twitter account:

OK ENOUGH! Just fuck off already u god damn fucking gaming cunts. Boo Hoo I yelled at a customer big deal. Ge over it

...

I don't need a degree I'm just naturally smart.

...

Domestic violence no, it's called a fucking hug

...

Look at all these gamers. Bunch of fucking losers, everyone in the biz makes fun of you fucks. All the sites you like laugh at yuo.

...

Penny Arcade is for autsitic preteens that can handle good entertianment. I'm suprised you can even read at all.

And the fun continues...

Yes, Charlie Sheen is much better at this sort of stuff.

References:
https://twitter.com/oceanstretagy
https://imgur.com/t1iiM
https://www.examiner.com/video-game-industry-in-national/ocean-marketing-gaming-pr-rep-to-avoid-at-all-cost

Interesting.

To direct link, click the time when the Tweet was made (from the Web client) and it will take you to the direct link for that Tweet.

Is this the message to which you're referring?