Slashdot Mirror

I'd like to suggest something like trevisor, a hypervisor for a single guest VM. Where the user enters a passphrase on boot, and the encryption keys are only stored in debug registers. Though this probably needs some additional work to be production ready.

Keep all your AES keys in registers -- no affiliation, except that I'm a user and I would much prefer that it be mainlined to streamline my rebuild process. Given that there's such little performance penalty on x64/AES-NI, this should be the defacto standard.

Johannes Schlumberger and others did some hacking on Mifare cards here in Germany. The University of Erlangen-Nuremberg uses them for wireless payments in their canteen and also for access control to sensitive areas. After notifying the manufacturer they didn't try to fix the problems, but threatened him with legal action -- even though it was a research project. As it says on Schlumberger's homepage: "Unfortunately I am not allowed to make my results public"

Johannes Schlumberger and others did some hacking on Mifare cards here in Germany. The University of Erlangen-Nuremberg uses them for wireless payments in their canteen and also for access control to sensitive areas. After notifying the manufacturer they didn't try to fix the problems, but threatened him with legal action -- even though it was a research project. As it says on Schlumberger's homepage: "Unfortunately I am not allowed to make my results public"

Johannes Schlumberger and others did some hacking on Mifare cards here in Germany. The University of Erlangen-Nuremberg uses them for wireless payments in their canteen and also for access control to sensitive areas. After notifying the manufacturer they didn't try to fix the problems, but threatened him with legal action -- even though it was a research project. As it says on Schlumberger's homepage: "Unfortunately I am not allowed to make my results public"

Over here:

http://www.rrze.uni-erlangen.de/

These guys are really top-class.

I tell you what: you go ahead and buy $4000 of those Dual core kits, and we'll compare your output from a well-written algorithm versus the Cell system designed by this team.

Some interesting code examples for using the Cell have been demonstrated and it has immense processing power that most people don't recognize immediately. Check out this Dr Dobb's Journal article for an example.

I think this is a very neat idea. Just one more step on the progression of languages down the software stack. A while back no one would have dreamed of writing OS code in anything but assembler. Now the Linux scheduler is written in C. Times change. Maybe a managed OS will be future. Garbage collection is really nice to have.

A 'safe' kernel sounds slow...
It seems like it is slow. From http://www4.informatik.uni-erlangen.de/Projects/JX/publications/jx-sec.pdf (jxos):
Performance is in the 50% range of monolithic UNIX performance for computational-intensive OS operations. The difference becomes even smaller when I/O from a real device is involved.

I am an astrophysicist, so let me try and explain in a little bit more detail why this result is so interesting.
First of all: No, the discovery of these black holes has nothing to do with questions concerning the dark energy or missing mass. Note that one has to distinguish between dark energy or missing mass. What is meant by missing mass is the fact that in order to explain the rotation of many galaxies we need to invoke about 10 times more mass than what is found from observing the galaxies. What we do here is that we look at the rotation of the galaxies from which it is possible to infer their mass using simple dynamics arguments. In order to infer the mass present in a galaxy independently of the dynamics, you can simply make a picture of it. Since we know that typical stars have about the luminosity of the Sun it is then possible to calculate from the observed light how much radiating matter is present in the galaxy. It turns out that to explain the observed motions, about ten times more mass is required. Similar arguments also apply to galaxy clusters. This is what's called the missing mass.
Dark energy, on the other hand, is a term proposed in the Einstein field equations, and therefore also in the Friedmann-Equations, which describe the expansion of the universe. With a so-called cosmological constant, these equations predict an accelerated expansion of the universe. It turns out that this is what's observed. About 85 percent of what is causing the curvature of the universe (the so-called Omega-parameter) is due to this cosmological constant, and many astronomers call the cosmological constant "dark energy". There is a nice plot by Mike Turner summarizing the different terms that need to be added to explain by the observed matter density of the universe.
To turn to the question as to why we astronomers were looking for black holes enshrouded in gas: there is a long standing question about the number density of black holes in the universe. We know that in the local universe most galaxies, including our milky way, harbor a supermassive black hole in their center. These black holes are difficult to find since most are just sitting there, doing nothing. The mass of such a black hole is on the order of one million to one billion solar masses. This sounds a lot, but is really not very much: the typical radiating mass of a galaxy is 100 times more, and if you add the missing mass, then the supermassive black hole only contributes less than 0.1 per cent to the mass of the galaxy. So, on cosmological terms, the mass contained in these black holes is really negligable.
What matters, however, is that models for the evolution of black holes predict that there should be a large number of black holes that are enshrouded in rather dense material in many galaxies. It has been difficult to detect these objects so far, since the dense material absorbs most radiation from the accreting black hole. With infrared observations with Spitzer that are summarized in the press release the Slashdot posting points to it has finally been possible to confirm the long-standing assumption that these black holes exist. What is the nice thing in all of this is that these observations confirm the predicted space density of black holes inferred from previous observations, which is a very nice and important result.

While I was studying computational linguistics at http://www.linguistik.uni-erlangen.de/en_contents/ index.php me and three other students implemented such a system in C on HP-UX within 6 weeks for German-English and English-German wordform translation during an internship. That was about 13 years ago, if I remember correctly. So really nothing new and extraordinary.

If somebody needs a reference for prior art, feel free to contact me.

• Caldera in Erlangen runs openlinux.org site from 1998 or so.
• Caldera shuts down operation in Erlangen but leaves DNS entry intact.
• IP address is reallocated to Fachschaftsinitiative Informatik.
• Someone at FSI decides to play a little prank on SCO.
• openlinux.org entry is removed by SCO.

informatik.uni-erlangen.de = Department of Computer Sciences at Universität Erlangen-Nürnberg.

fsi-server.X.uni-erlangen.de (where X is a department name) appears to be student/faculty web space, for instance this one. There are also numerous wiki scripts (many old versions I can see), etc, loaded onto fsi.informatik.uni-erlangen.de, so its quite possible the system may have been comprimised.

More then likely some wise ass is responsible for this.

good Point.. SRSS 3.1 does not work (out of the box) with the Linux 2.6 kernel (2.4 it works fine I have it running on RH AS 3) but I think you would have to mess with the install script so it installed he Solaris X86 kernel modules and then installed the Linux RPMS. (alien) There are a few sites showing how to run SRSS on debian already.. http://wwwcip.informatik.uni-erlangen.de/~simigern /sunray-debian/3.1fcs.html

It's called a SunRay, and they're even available with built-in 1280x1024 displays.

So far as I know, there's no Linux port, but you can boot its regular firmware from a Linux server using these directions if you aren't lucky enough to have a Solaris machine.

imagine running JNode or JX on your DVD player! Then you could use the ethernet ports on these players to play streaming video on vlc on the java os on your java enabled dvd player! Yay convergence! I think I just threw up in mouth a little.

• Asterisk, the Open Source PBX
  
• OpenBSD, the secure operating system
  
• The OpenBSD PF FAQ
  
• IPsec HOWTO
  

Armed with this information, use OpenBSD to set up firewalls with ALTQ packet prioritizing, PF stateful filtering and IPsec secure VPNs between all endpoints.

Setup Asterisk PBX' behind the firewalls and network them over the VPNs.

Now let them try to monitor your calls.

(No, this doesn't help with calls you terminate with an insecure 3rd party, like a VoIP provider gatewaying your calls out to the PSTN. The "P" in PSTN is for "Public", so you need to treat it as completely insecure and act accordingly.)

• pdksh is a superb shell
• screen is a first-rate window manager
• nvi is a fine editor
• lynx is a good browser
• snownews is a decent RSS aggregator
• And /usr/bin contains most anything else you might require.

About 18 months ago, Slashdot posted an article The Black Ops of TCP/IP: Paketto Keiretsu 1.0 Release with a nice collection of unconventional networking tools.

Included was a very cool tool, Phentropy, for visualizing arbitrary data using Strange Attractors. You may recall a paper on TCP/IP Sequence number analysis that highlighted the usefulness of Strange Attractors for data visualization.

Phentropy plots an arbitrarily large data source (of arbitrary data) onto a three dimensional volumetric matrix, which may then be parsed by OpenQVIS. Data mapping is accomplished by interpreting the file as a one dimensional stream of integers and progressively mapping quads in phase space.

OpenQVIS is a neat package and could fill a lot of arbitrary data viz needs.. But damned if I have been able to get the thing to build under Linux. The project could really use some help, and I think a lot of good could come of it. The Phd types who wrote it seem to have mostly moved on..

Writeups of the talks I went to are at:

the Nove Hrady wiki.

The CoVirt Project
The CoVirt project is investigating how to use virtual machines to provide security in an operating-system-independent manner. Virtual-machine security services can work even if an attacker gains complete control over the guest operating system.

One hard part of designing virtual-machine security services is the semantic gap between the virtual machine and those services. Services in the virtual machine operate below the abstractions provided by the guest operating system and applications. This can make it difficult to provide services. For example, it is difficult to provide a service that checks file system integrity without knowledge of on-disk structures.

Another potential challenge of using virtual machines is that running all applications above the virtual machine hurts performance due to virtualization overhead. Commercial virtual machine monitors such as VMware achieve excellent performance by executing (mostly) directly on the bare hardware. However, we would like to use a virtual-machine monitor that runs as a user-mode application on top of a host operating system (so-called Type II VMM), and these tend to be an order of magnitude slower than a standalone system. We modified a host OS (Linux) to enable it to better support a virtual-machine monitor. The resulting virtual-machine monitor and modified guest OS (based on UMLinux) runs even kernel-intensive applications at about 14-35% overhead. See our USENIX paper for details.

We have designed and implemented a replay service for virtual machines called ReVirt. ReVirt logs enough information to replay a long-term execution of a virtual machine instruction-by-instruction. This enables it to provide arbitrarily detailed observations about what transpired on the system, even in the presence of non-deterministic attacks and executions.

We designed and implemented a system called BackTracker that will help system administrators understand (and thereby recover from) an intrusion. BackTracker automatically identifies potential sequences of steps that occurred in an intrusion. Starting with a single detection point (e.g. a suspicious file), BackTracker identifies files and processes that could have affected that detection point and displays chains of events in a dependency graph.

Here is an example of BackTracker's output for an attack against a machine that we set up as a honeypot. It shows an attacker gaining access through httpd, downloading a tar archive using wget, then installing a set of files using tar and gzip. The attacker then ran the program openssl-too, which read the configuration files that were unpacked. We detected the intrusion when the openssl-too process began scanning other machines on our network for vulnerable ports.

Project members
Papers
Presentations
Project Sponsors
Source Code

The virtual machine that ReVirt and its predecessor are built on is called UMLinux. I used it for a school project that analyzed a virtual kernel that had been minimized to achieve improved performance. The current incarnation of UMLinux, now called FAUmachine, is available from the FAUmachine project site.

Please check your facts. Development on Lisp started long before the 1960 paper.

We do not know which translation rules McCarthy used in the end of 1958 ... When McCarthy was working on this function S. Russel saw it and suggested translating it by hand - as he had done so often - and adding it to the program system . McCarthy recalls (22): "... this EVAL was written and published in the paper [I think this is referring to AI memo number 4, where apply first appeared] and Steve Russell said, look, why don't I program this EVAL and you remember the interpreter, and I said to him, ho, ho, you're confusing theory with practice, this EVAL is intended for reading not for computing. But he went ahead and did it. That is, he compiled the EVAL in my paper into 704 machine code fixing bugs and then advertised this as a LISP interpreter which it certainly was, so at that point LISP had essentially the form that it has today, the S-expression form ..."

Anyone who's done more than a little programming knows that strings need to be "first class" objects. The lack of genuine strings is one of the worst problems in the C language, and the source of most of the published vulnerabilities at CERT.

You do know that Lisp (unlike C) includes higher order procedures that make data representation irrelevant, or are you just speaking out of ignorance?

scripsit mi:

Except he was not really a Frenchman for France did not really exist back then.

If you're talking about states, then practically no currently existing state existed in 732. The French monarchy existed more than, for example, the German, Italian, or Danish. (I don't recall if the Merovingian monarchs used the title rex francorum or not--WW-Person gives their title in German as ``König im Frankenreich.'') To the extent that you can talk about any nation existing in the eighth century, it is fair to speak of Franks/French.

Your point was, of course, that French were quite battle-worthy some time ago. This point would've better proven by bringing up the Napoleon's name. Much more recent too :-)

If that were the only point, then yes, Napoléon would have been a better example (It took all of Europe united to bring him down). However, since the poster to which I was responding decided to invoke the mediaeval Islamic threat to Europe, I thought it appropriate to mention that the person who ended that invasion was Frankish/French.

Well, I may have overestimated the potential for convergence :-)

I think you misunderstood. I used to be a "Java fan" and am responsible for its adoption by several companies.

I see.

But Sun has demonstrated bad faith and incompetence when it comes to Java over the last half dozen years: not only has Sun patented key aspects of Java, they have also pulled out of several standardization efforts, and they have failed to deliver essential technologies and enhancements that they promised.

But it seems that Dotnet is the lesser of two evils after all, and people following your earlier advice to embrace C Sharp are now the ones who have cause to worry.

Sun, in contrast, have continuously opened up the specs, tools and standardization processes over the last year, as OSS developers are happy to acknowledge. Yes, they still retain patents, so in deciding who is the lesser evil one has to compare MS's record with Sun's. Two points in Sun's favour are that they've allowed the Kaffe and JBoss people access to the JVM and J2EE test suites (previously licensed) and that IBM, BEA and a bunch of other implementors are apparently happy to continue investing in Java (TM) and working with Sun.

I find it rather ironic that Swing, the GUI that Java-baiters love to hate, is now elevated to a must-have API. It seems that when it is present people demand an alternative; when it isn't, AWT and SWT are somehow no longer acceptable.

There is still some hope for C#: the Mono project is actually increasingly relying on non-.NET APIs

So you're saying that the less hope there is for Mono cloning Dotnet, the more hope there is for C Sharp? I trust that those who are still following your advice can keep this principle clearly in mind.

And so to the collaborative development of a new programming language, which appears to have got off to a rather rocky start:

1. Java-style byte codes are an awful representation for manipulating programs.

Quite right, and one reason why we're not talking about Java, but about an alternative to Java.

2. Programs can manipulate persistent data directly rather than mapping it to and from storage systems.

Well, not in Java, and not in anything with a Java runtime.

You're really not paying attention are you? Java isn't relevant here, something like SQL might be.

3. Commercial workflow has nothing to do with operating system processes or threads.

From whose perspective? Not from mine, if I'm programming logic using BEA WebLogic Workshop. This allows me to express my program as a sequence of steps that can be distributed over a number of machines, persisted, paused and resumed, managed and interrupted.

The goal of high-level programming systems is to abstract and automate - abstract away from system details such as workflow to thread mapping and automate processes such as memory management.

4. I have no idea whose "original intent" for LISP that is supposed to have been.

Indeed? My view is that the history of LISP is highly relevant to modern language design. As several people have observed, all language developments tend to converge towards something like CLOS. For your reference, the original intent that LISP be an intermediate language is described here.

I think multi-language support is vastly overrated. [...] I do think a platform should support mixing high-performance statically typed code and convenient dynamically typed code, but for that, you only need two languages (java/bsh, C/Tcl, C++/Python, etc.).

I take it that you don't use SQL or XML?

I agree that Dotnet-style "multilanguage" support is overrated, but that's a limitation of the CLR, not the principle.

Regarding static and dynamic typing, it is a mistake to assume that the use of both models must or should imply separate languages. This paper, and implementations such as Strongtalk (on Smalltalk) and typed modules (on Scheme) show the benefits of unifying the approaches, which are after all nothing more than (partial) program verification techniques.

4. I don't want security features in my day-to-day language: they are complex and costly.

Obviously your requirements are somewhat different from typical corporate IT systems. That's perfectly OK, we will keep this in mind when evaluating any future recommendations.

Java is not a particularly well-engineered platform because many of its tradeoffs were driven by one environment (platform-independent, untrusted client software) and make no sense for a general-purpose language.

On the contrary, a VM must be able to deal with untrusted code as well as trusted, otherwise it wouldn't be general-purpose.

The Java VM supports different levels of trust, allowing code from different sources to coexist. What's more, it can do so efficiently, since the JIT allows things like access checks that are always true to be optimized out - something impossible in the purely compiled languages you seem to be advocating.

And C# has copied most of those bad tradeoffs.

Well, it missed the opportunity to innovate, we can agree there.

Perhaps it's good that both Java and C# are removing themselves from the space of open, free languages: it might be best to start over with a simpler, better engineered system anyway.

Absolutely.

At this point bandwith is key, and it is these kinds of situations where specifically-designed graphics workstations (eg. SGI) mop the floor with your $400 games cards.

How does this compare to the OpenQVIS work?

All kidding aside, I would seriously love to see a good research paper on the reasons behind Fortran's (relatively) enormous success, especially compared to other languages of the era. I've briefly looked at some Fortran code, and I just can't understand why it's been consistently used for so long. Anyone have any links?

• ftp://gd.tuwien.ac.at/infosys/browsers/mozilla/sou rces/
• http://gd.tuwien.ac.at/infosys/browsers/mozilla/so urces/

• ftp://mozilla.mirror.pacific.net.au/mozilla/
• http://mozilla.mirror.pacific.net.au/
• ftp://ftp.planetmirror.com.au/pub/mozilla/
• http://planetmirror.com.au/pub/mozilla/

• ftp://ftp.belnet.be/packages/mozilla/

• ftp://ftp.ntrl.net/pub/mirror/mozilla/

• ftp://sunsite.ualberta.ca/pub/Mirror/mozilla/

• ftp://sunsite.cnlab-switch.ch/mirror/mozilla/

• ftp://ftp.ibiblio.org/pub/packages/infosystems/WWW /clients/mozilla/
• http://www.ibiblio.org/pub/packages/infosystems/WW W/clients/mozilla/
• ftp://ftp.tux.org/pub/net/mozilla/
• http://www.cise.ufl.edu/ftp/mirrors/mozilla/
• ftp://ftp.yggdrasil.com/mirrors/site/ftp.mozilla.o rg/pub/
• ftp://sunsite.utk.edu/pub/netscape-source/
• ftp://archive.progeny.com/mozilla/
• http://archive.progeny.com/mozilla/
• rsync://archive.progeny.com/mozilla/
• http://mirrors.xmission.com/mozilla/
• ftp://mozilla.teleglobe.net/ftp.mozilla.org/pub/

• ftp://ftp.cvut.cz/mozilla/
• http://ftp.cvut.cz/mozilla/

• ftp://ftp-stud.fht-esslingen.de/pub/Mirrors/ftp.mo zilla.org/pub/mozilla/
• ftp://ftp.fh-wolfenbuettel.de/pub/www/mozilla/
• ftp://ftp.uni-bayreuth.de/pub/packages/netscape/mo zilla/
• ftp://sunsite.informatik.rwth-aachen.de/pub/mirror /ftp.mozilla.org/pub/
• ftp://ftp.leo.org/pub/comp/general/infosys/www/bro wsers/mozilla/
• ftp://ftp.rhein-zeitung.de/mirrors/mozilla.org/
• ftp://ftp.uni-erlangen.de/pub/mirrors/mozilla/
• http://ftp.uni-erlangen.de/pub/mirrors/mozilla/

• http://mirrors.sunsite.dk/mozilla/
• ftp://mirrors.sunsite.dk/mozilla/
• rsync://mirrors.sunsite.dk/mozilla/

• ftp://ftp2.mbp.ee/pub/mozilla/

• ftp://ftp.rediris.es/mirror/mozilla/
• http://ftp.rediris.es/mirror/mozilla/
• ftp://ftp.etsimo.uniovi.es/pub/mozilla/
• http://www.etsimo.uniovi.es/pub/mozilla/

• ftp://ftp.funet.fi/pub/mirrors/ftp.mozilla.org/pub /

• ftp://ftp.univ-lille1.fr/pub/mozilla/
• ftp://ftp.oleane.net/pub/mozilla/
• http://ftp.oleane.net/pub/mozilla/
• ftp://ftp.free.fr/pub/Networking/www/Mozilla
• ftp://fr2.rpmfind.net/linux/mozilla/
• http://fr2.rpmfind.net/linux/mozilla/

• ftp://ftp.ntua.gr/pub/www/Mozilla/ ftp://ftp.duth.gr/pub/mozilla -->

• ftp://ftp.comp.hkbu.edu.hk/pub/mozilla/
• ftp://sunsite.ust.hk/pub/mozilla/

• ftp://ftp.c3.hu/pub/mirrors/mozilla/
• http://mozilla.szentimre.hu/

• ftp://ftp.EUnet.ie/mirrors/ftp.mozilla.org/pub/

• http://mozilla.fresh.co.il/

• ftp://ftp.cin.nihon-u.ac.jp/pub/net/www/mozilla ftp://his.ktarn.or.jp/pub/mirrors/mozilla/ --->
• ftp://ring.aist.go.jp/pub/net/www/mozilla/
• ftp://ring.crl.go.jp/pub/net/www/mozilla/
• ftp://ring.etl.go.jp/pub/net/www/mozilla/
• ftp://ring.exp.fujixerox.co.jp/pub/net/www/mozilla /
• ftp://ring.nacsis.ac.jp/pub/net/www/mozilla/
• ftp://ring.so-net.ne.jp/pub/net/www/mozilla/
• ftp://ftp.jaist.ac.jp/pub/Mozilla/
• ftp://ftp.lab.kdd.co.jp/Mozilla/
• ftp://ftp.kddlabs.co.jp/Mozilla/
• http://mirror.nucba.ac.jp/mirror/mozilla/
• ftp://mirror.nucba.ac.jp/mirror/mozilla

• ftp://ftp.hpcnet.ne.kr/pub/Mozilla/
• ftp://linux.sarang.net/mirror/network/client/web/m ozilla/

• ftp://ftp.uninett.no/pub/network/www/mozilla/

• ftp://sunsite.icm.edu.pl/pub/mozilla/
• http://sunsite.icm.edu.pl/pub/mozilla/
• ftp://ftp.task.gda.pl/pub/mozilla/

• ftp://ftp.global-one.pt/pub/Packages/Mozilla/

• ftp://ftp.chg.ru/pub/WWW/mozilla/

• ftp://ftp.sunsite.kth.se/mirrors/ftp.mozilla.org/
• ftp://ftp.fredan.org/mozilla/

• http://mirror.averse.net/pub/mozilla/
• ftp://mirror.averse.net/pub/mozilla/

• http://www.mozilla.sk/pub/

• ftp://ftp2.sinica.edu.tw/pub3/www/mozilla/
• ftp://ftp.nctu.edu.tw/WWW/mozilla/
• rsync://ftp.nctu.edu.tw/ftp/WWW/mozilla

• ftp.mirror.ac.uk/sites/ftp.mozilla.org/pub/ ftp://ftp.gbnet.net/pub/mozilla/
• http://www.gbnet.net/public/mozilla/ -->
• ftp://mozilla.teleglobe.net/ftp.mozilla.org/pub/

• ftp://gd.tuwien.ac.at/infosys/browsers/mozilla/sou rces/
• http://gd.tuwien.ac.at/infosys/browsers/mozilla/so urces/

• ftp://mozilla.mirror.pacific.net.au/mozilla/
• http://mozilla.mirror.pacific.net.au/
• ftp://ftp.planetmirror.com.au/pub/mozilla/
• http://planetmirror.com.au/pub/mozilla/

• ftp://ftp.belnet.be/packages/mozilla/

• ftp://ftp.ntrl.net/pub/mirror/mozilla/

• ftp://sunsite.ualberta.ca/pub/Mirror/mozilla/

• ftp://sunsite.cnlab-switch.ch/mirror/mozilla/

• ftp://ftp.ibiblio.org/pub/packages/infosystems/WWW /clients/mozilla/
• http://www.ibiblio.org/pub/packages/infosystems/WW W/clients/mozilla/
• ftp://ftp.tux.org/pub/net/mozilla/
• http://www.cise.ufl.edu/ftp/mirrors/mozilla/
• ftp://ftp.yggdrasil.com/mirrors/site/ftp.mozilla.o rg/pub/
• ftp://sunsite.utk.edu/pub/netscape-source/
• ftp://archive.progeny.com/mozilla/
• http://archive.progeny.com/mozilla/
• rsync://archive.progeny.com/mozilla/
• http://mirrors.xmission.com/mozilla/
• ftp://mozilla.teleglobe.net/ftp.mozilla.org/pub/

• ftp://ftp.cvut.cz/mozilla/
• http://ftp.cvut.cz/mozilla/

• ftp://ftp-stud.fht-esslingen.de/pub/Mirrors/ftp.mo zilla.org/pub/mozilla/
• ftp://ftp.fh-wolfenbuettel.de/pub/www/mozilla/
• ftp://ftp.uni-bayreuth.de/pub/packages/netscape/mo zilla/
• ftp://sunsite.informatik.rwth-aachen.de/pub/mirror /ftp.mozilla.org/pub/
• ftp://ftp.leo.org/pub/comp/general/infosys/www/bro wsers/mozilla/
• ftp://ftp.rhein-zeitung.de/mirrors/mozilla.org/
• ftp://ftp.uni-erlangen.de/pub/mirrors/mozilla/
• http://ftp.uni-erlangen.de/pub/mirrors/mozilla/

• http://mirrors.sunsite.dk/mozilla/
• ftp://mirrors.sunsite.dk/mozilla/
• rsync://mirrors.sunsite.dk/mozilla/

• ftp://ftp2.mbp.ee/pub/mozilla/

• ftp://ftp.rediris.es/mirror/mozilla/
• http://ftp.rediris.es/mirror/mozilla/
• ftp://ftp.etsimo.uniovi.es/pub/mozilla/
• http://www.etsimo.uniovi.es/pub/mozilla/

• ftp://ftp.funet.fi/pub/mirrors/ftp.mozilla.org/pub /

• ftp://ftp.univ-lille1.fr/pub/mozilla/
• ftp://ftp.oleane.net/pub/mozilla/
• http://ftp.oleane.net/pub/mozilla/
• ftp://ftp.free.fr/pub/Networking/www/Mozilla
• ftp://fr2.rpmfind.net/linux/mozilla/
• http://fr2.rpmfind.net/linux/mozilla/

• ftp://ftp.ntua.gr/pub/www/Mozilla/ ftp://ftp.duth.gr/pub/mozilla -->

• ftp://ftp.comp.hkbu.edu.hk/pub/mozilla/
• ftp://sunsite.ust.hk/pub/mozilla/

• ftp://ftp.c3.hu/pub/mirrors/mozilla/
• http://mozilla.szentimre.hu/

• ftp://ftp.EUnet.ie/mirrors/ftp.mozilla.org/pub/

• http://mozilla.fresh.co.il/

• ftp://ftp.cin.nihon-u.ac.jp/pub/net/www/mozilla ftp://his.ktarn.or.jp/pub/mirrors/mozilla/ --->
• ftp://ring.aist.go.jp/pub/net/www/mozilla/
• ftp://ring.crl.go.jp/pub/net/www/mozilla/
• ftp://ring.etl.go.jp/pub/net/www/mozilla/
• ftp://ring.exp.fujixerox.co.jp/pub/net/www/mozilla /
• ftp://ring.nacsis.ac.jp/pub/net/www/mozilla/
• ftp://ring.so-net.ne.jp/pub/net/www/mozilla/
• ftp://ftp.jaist.ac.jp/pub/Mozilla/
• ftp://ftp.lab.kdd.co.jp/Mozilla/
• ftp://ftp.kddlabs.co.jp/Mozilla/
• http://mirror.nucba.ac.jp/mirror/mozilla/
• ftp://mirror.nucba.ac.jp/mirror/mozilla

• ftp://ftp.hpcnet.ne.kr/pub/Mozilla/
• ftp://linux.sarang.net/mirror/network/client/web/m ozilla/

• ftp://ftp.uninett.no/pub/network/www/mozilla/

• ftp://sunsite.icm.edu.pl/pub/mozilla/
• http://sunsite.icm.edu.pl/pub/mozilla/
• ftp://ftp.task.gda.pl/pub/mozilla/

• ftp://ftp.global-one.pt/pub/Packages/Mozilla/

• ftp://ftp.chg.ru/pub/WWW/mozilla/

• ftp://ftp.sunsite.kth.se/mirrors/ftp.mozilla.org/
• ftp://ftp.fredan.org/mozilla/

• http://mirror.averse.net/pub/mozilla/
• ftp://mirror.averse.net/pub/mozilla/

• http://www.mozilla.sk/pub/

• ftp://ftp2.sinica.edu.tw/pub3/www/mozilla/
• ftp://ftp.nctu.edu.tw/WWW/mozilla/
• rsync://ftp.nctu.edu.tw/ftp/WWW/mozilla

• ftp.mirror.ac.uk/sites/ftp.mozilla.org/pub/ ftp://ftp.gbnet.net/pub/mozilla/
• http://www.gbnet.net/public/mozilla/ -->
• ftp://mozilla.teleglobe.net/ftp.mozilla.org/pub/

That last server apparently is non-existant now, sorry. However, this much older page from the FreeBSD mail archives lists his e-mail as eilts@iwte01.dialin.rrze.uni-erlangen.de, which suggests that he went to that university at some point in time. Perhaps you could get contact information from them?

Those security holes you are speaking of are only found in the free software version of SSH, OpenSSH, hacked together by Theo de Rat and his National Socialist friends.

The commercial version of SSH by Tatu Ylönen, OTOH, is completely secure and bugfree.

If only the rest of the world realized this and used commercial software instead of open source...

I don't know if it's been mentioned, but I would use IPSEC if I were you,
simply because 802.11a/b sniffing is trivial now and mac address spoofing is
even easier. Also, I would probably recommend against going with an
established commercial wap product, as they all almost definately aren't going
to have the flexibility you need in the future and are probably way too
expensive. I would roll a couple of OpenBSD boxes with wireless cards, that
way you have an all in one solution with lots of nifty stuff like traffic
shaping per mac, monthly bandwidth accounting capablities via pf, syslog, and
tons of other stuff that commercial vendors just don't offer. And I do mean,
don't offer, regardless of price. This page
offers a good howto regarding ipsec on openbsd and this page
give a pretty good read on replacing wep with ipsec on openbsd as well. Good
luck.

SealBeater

you are no doubt religious so they teach to to do that..but still

*LOL* it's spelled J-O-K-E. You make too many assumptions! I used to do experiments on lab rats and flies when I was a biology student just like everybody else... Inherently any experimentation on emergent systems requires the use of a selector or predation algorithm. This guy happens to be applying the same principles I used when developing evolutionary models inside a computer (using EA or evolutionary algorithms), only he's applying them to living organisms. A better title for the article would be Principa Evolvica in a Petri Dish

But I do think it's funny that the researcher is sitting in his lab frying little organisms and performing an EA step by step essentially by hand. Which is to say he generates a population, runs predation or selectors, reproduces and mutates, runs predation, reproduce and mutate, predate, mutate, ... ect. put that way it doesn't sound funny but if you put it this way: "You guys alive? *zap* You guys still alive? *zap* Still alive? *zap* Not dead yet? *zap*" I personally think it's funny as hell. I certainly wouldn't want to have to sit and run an EA by hand anyhow. BTW: They're called Tropisms not instincts when you're dealing with non-cephalized creatures.

There's also a good page quickly discussing Villain-to-Victim computing. The point is to use correctly configured machines to do things they were not intended to.

well i do it every year, and most everyone has probably seen it, but this is a scientific article (dont worry, it's hilarious-- from the online "hitchhikers guide to the galaxy) into the existence of a santa claus.
--
http://www.hawo.stw.uni-erlangen.de/~asheiduk/pgg/ 02R/02R055.html

You did not mention which language you use. I tried to use autoconf/automake to build a project using C++ that

• has to work on Linux, Solaris, IRIX and NT
• uses modern C++ features (namespaces, exceptions, STL, maybe even member templates)
• uses native compilers for speed optimization (NT: Borland, VC++ and cygwin are not sufficient) besides GCC
• cannot use cygwin.dll because that is GPLed
• will maybe sometime in the future turn into open-source or even free software

I've been very satisfied with the unform way of configuring and compiling programs for Linux and Unices. It seemed viable even for big C++-Projects like KDE. "Even wxWindows uses it, and that's cross-platform for sure.", I thought.

Well, that was naive. I struggled for weeks building a build system that would work on Linux(GCC), IRIX(MipsPro), SUN(SunWS) and NT(Borland). Even the difference between GCC and the other Unix compilers became a hard problem. In the end I coded a macro that set CXXFLAGS and various other AC_SUBST variables according to the platform used. Still, the automatic dependency tracking only worked with GCC, so I started writing a script that simplified the generation of the configure script. Now I have to reconfigure each time I want to try, say, IRIX for compiling. Hmpf.

NT (with Borland) was a disaster in itself. First, I installed cygwin to have the necessary tools. The CLI of Borland differs greatly from the (more-or-less) Unix standard, so I ended up writing wrapper scripts that translated them. The final point came when I wanted to build a static library. Well, it works, with another wrapper script, but it ends up in *.a files, because I found no way to tell autoconf/automake that there might be different extensions for static libs. Maybe I'm to blame here, because I didn't dare to use libtool, but the complexity of the toolset already grew over my head.

Autoconf may have its advantages if your are using C and need to be compatible to some brain-dead machines from the seventies. For writing portable C++ programs, look for something else. Or stay with the makefiles. Good crafted makefiles still aren't that bad. You can even supply a dummy configure script, so no one downloading the thing has to change his habits ...

IPSec. Why waste your time with anything else? I really want a guide for getting Linux with FreeSwan to talk to FreeBSDs IPSec (using racoon?). There are a number of guides to getting IPSec working on Windows 2000, FreeBSD, OpenBSD, etc... Here are a few links:


How to setup IPsec interoperable for Linux, OpenBSD and PGPNet
Replacing WEP With IPsec

Why does IPSec with Linux seem like such a hack? FreeSwan is pretty annoying - why don't they just get IPSec into the kernel and go from there? Instead there appears to be a megapatch. It just makes me nervous. It's probably ok but man... Also, while I'm bitching, IPSec is a bit of a pain - or at least the implementations are. It doesn't need to be this complicated.

The Lisp-like language I was referring to is the one listed on this page - look for the heading "The First Known Interpreter". This language is not Lisp as we know it - it used McCarthy's M-expression syntax - and syntactically, it is not the S-expression language that the first interpreter was capable of interpreting. Hence my statement that "the very first computer language interpreter ever was a Lisp interpreter, written in a Lisp-like language".

In "The implementation of Lisp" by McCarthy himself, he describes the following:

I decided to write a paper describing LISP both as a programming language and as a formalism for doing recursive function theory. The paper was "Recursive functions of symbolic expressions and their computation by machine, part I".
...
Another way to show that LISP was neater than Turing machines was to write a universal LISP function and show that it is briefer and more comprehensible than the description of a universal Turing machine. This was the LISP function eval[e,a], ...
...
S.R. Russell noticed that eval could serve as an interpreter for LISP, promptly hand coded it, and we now had a programming language with an interpreter.

Do I get that cigar now?

This reminds me of one of the Works in Progress papers from the this year's USENIX security symposium on Villain-to-Victim.

Basically you store data by sending off an icmp echo request containing arbitrary data to a site or sites that you know have slow links and wait for it to come back. You are using the routers etc in between as a storage medium.

Well, after spending 15 hours in front of a computer at work, you sometimes want to have a life on the side :)

I'm a sysadmin, but my home computer is a 486/33 which I only use as a text-based terminal (it's connected via a 14.4 modem to my computer at work). I've become a huge fan of screen though.

If not, here's one of many links that came up on Google.

A good format although optimised for planar displays rather than the chunky pixels most of us use today. Anyone know a browser that supports these? (presumably referring to amiga IFF Anim 7)

Well, Netscape 4.x on Linux can, and will even render them in-page, with the Xanim netscape plugin (included with Mandrake 7 as /usr/lib/netscape/plugins/xanim.so).

I would guess that the Amiga browsers (Voyager, IBrowse, AWeb) also could, through Amiga DataTypes.

ftp://ftp.uni-er langen.de/pub/utilities/screen/screen-3.9.5.tar.gz

Something in the line of this article is this paper It talks about storing information on people's machines without their consent.

What constitutes music, or a musical expression? (couldn't someone's IP address be percieved as latent musical expression?)

How should remixed or rewritten or rethought music be differentiated and classified from the 'pristine original', whatever that is? How should this be done in a decentralized computing environment, such as the one we're playing with currently?

Your answer seems to raise more questions than it settles.

Not true! Who says you cannot do orbitals or animations in VRML? We do them! And in much better graphical quality. Normal vibrations in Chime are atrocious, both in graphical quality and the physics behind it (sawtooth function? Bah!). Example
Another Example

Not true! Who says you cannot do orbitals or animations in VRML? We do them! And in much better graphical quality. Normal vibrations in Chime are atrocious, both in graphical quality and the physics behind it (sawtooth function? Bah!). Example
Another Example

The problem? You need a certain kind of DAT drive. The ONLY kind of DDS drives that have audio capabilities are Archive Pythons, which are now made by Seagate, formerly by Connor. Any other drive -- I tried it with my Digital DDS-2 drive to confirm it -- absolutely will not work.

The reason? SGI managed to convince Archive, back in the day, to include audio capabilities in the drives they manufactured for them. Ever since then, Pythons have been the only computer DAT drive that'll rip audio.

DATlib, the set of programs you can use on Linux for ripping DAT audio, is available at ftp://ftp.informatik.uni-erlangen.de/ pub/DATlib.

- A.P.
--

"One World, one Web, one Program" - Microsoft promotional ad