Slashdot Mirror

Please use a mirror, yeah, har har. Thanks, buddy. As of now, of course, none of the mirrors have updated, possibly because people post links right to the master.

Australia (Canberra, .au only) http://mirror.aarnet.edu.au/pub/OpenBSD/songs/song 32.ogg
Australia (Melbourne) http://www.openbsd.aba.net.au/ftp/songs/song32.ogg
Australia (Sydney) http://ftp.planetmirror.com/pub/OpenBSD/songs/song 32.ogg
Australia (Sydney) http://the.wiretapped.net/OpenBSD/songs/song32.ogg
Austria (Vienna) http://gd.tuwien.ac.at/opsys/OpenBSD/songs/song32. ogg
Belgium (Ghent) http://openbsd.rug.ac.be/ftp/pub/OpenBSD/songs/son g32.ogg
Canada (Edmonton) http://sunsite.ualberta.ca/pub/OpenBSD/songs/song3 2.ogg
Canada (Sherbrooke) http://gulus.usherb.ca/ftp/OpenBSD/songs/song32.og g
Finland http://ftp.fi.debian.org/OpenBSD/songs/song32.ogg
Finland (Jyvskyl) http://ftp.jyu.fi/ftp/pub/OpenBSD/songs/song32.ogg
Germany (Esslingen) http://ftp-stud.fht-esslingen.de/pub/OpenBSD/songs /song32.ogg
Germany (Frankfurt) http://pandemonium.tiscali.de/pub/OpenBSD/songs/so ng32.ogg
Germany (Stuttgart) http://ftp.uni-stuttgart.de/pub/OpenBSD/songs/song 32.ogg
Italy (Napoli) http://ftp.openbsd.it/OpenBSD/songs/song32.ogg
Sweden (Uppsala) http://ftp.sunet.se/pub/OpenBSD/songs/song32.ogg
Sweden (Uppsala) http://mirror.pudas.net/OpenBSD/songs/song32.ogg
Taiwan http://openbsd.nsysu.edu.tw/pub/OpenBSD/songs/song 32.ogg
TamSui, Taiwan http://ftp.tku.edu.tw/pub/OpenBSD/songs/song32.ogg
USA (Batesville, AR) http://gandalf.neark.org/pub/distributions/OpenBSD /songs/song32.ogg
USA (Sunnyvale, CA) http://east.dl.sourceforge.net/mirrors/OpenBSD/son gs/song32.ogg
USA (Tallahassee, FL) http://mirror.csit.fsu.edu/pub/OpenBSD/songs/song3 2.ogg
USA (Lake in the Hills, IL) http://rt.fm/pub/OpenBSD/songs/song32.ogg
USA (Indianapolis, IN) http://archive.progeny.com/OpenBSD/songs/song32.og g
USA (West Lafayette, IN) http://ftp7.usa.openbsd.org/pub/os/OpenBSD/songs/s ong32.ogg
USA (Cambridge, MA) http://openbsd.mirrors.netnumina.com/songs/song32. ogg
USA (State College, PA) http://carroll.cac.psu.edu/pub/OpenBSD/songs/song3 2.ogg
USA (Fairfax, VA) http://mirrors.rcn.net/pub/OpenBSD/songs/song32.og g
USA (Fairfax, VA) http://openbsd.secsup.org/songs/song32.ogg
USA (Springfield, VA) http://www.tux.org/pub/bsd/openbsd/songs/song32.og g
USA (Madison, WI) http://mirror6.cs.wisc.edu/pub/mirrors/OpenBSD/son gs/song32.ogg

• Australian Mirror (Thanks to Grant Bayley)
  
• German Mirror (Thanks to Tom Fischer)
  
• Polish Mirror (Thanks to Rafal Maszkowski)
  
• US Mirror (Thanks to Aj Effin ReznoR)
  
• US Mirror (Thanks to Tim Lyons)
  
• US Mirror (Thanks to Gareth Bromley)
  
• UK Mirror (Thanks to Gareth Bromley)
  

Ok, /. put an extra space in the URL after "openssl-ss". I will make a link URL: The Link

There've been electric-powered planes for at least 25 years. Paul MacCready's team, the same ones who built the first human-powered airplane in the 1970s, built a solar-powered (and thus, obviously, electric) airplane called the Gossamer Penguid.

And six years ago, a team at the University of Stuttgart built this, a fully solar-powered self-launching motorglider (that is, an airplane which is intended to shut off its engine and glide once it reaches altitude).

Some more data has become public: Some one close to the Apache team claimed that the IIS patch is wrong, and there's a response from IIS. Maybe the IIS patch does fix the problem, but it is certainly not the most obvious and reader-friendly way to do it.

And, by the way, we have extrated the critical patch from the 1.3.x CVS (currently skipping mod_proxy), created a Debian package containing it, and written a German notice (still preliminary) for our free security newsletter. (The Debian package will be updated as new changes appear in the Apache CVS .)

Some more data has become public: Some one close to the Apache team claimed that the IIS patch is wrong, and there's a response from IIS. Maybe the IIS patch does fix the problem, but it is certainly not the most obvious and reader-friendly way to do it.

And, by the way, we have extrated the critical patch from the 1.3.x CVS (currently skipping mod_proxy), created a Debian package containing it, and written a German notice (still preliminary) for our free security newsletter. (The Debian package will be updated as new changes appear in the Apache CVS .)

Some more data has become public: Some one close to the Apache team claimed that the IIS patch is wrong, and there's a response from IIS. Maybe the IIS patch does fix the problem, but it is certainly not the most obvious and reader-friendly way to do it.

And, by the way, we have extrated the critical patch from the 1.3.x CVS (currently skipping mod_proxy), created a Debian package containing it, and written a German notice (still preliminary) for our free security newsletter. (The Debian package will be updated as new changes appear in the Apache CVS .)

Some more data has become public: Some one close to the Apache team claimed that the IIS patch is wrong, and there's a response from IIS. Maybe the IIS patch does fix the problem, but it is certainly not the most obvious and reader-friendly way to do it.

And, by the way, we have extrated the critical patch from the 1.3.x CVS (currently skipping mod_proxy), created a Debian package containing it, and written a German notice (still preliminary) for our free security newsletter. (The Debian package will be updated as new changes appear in the Apache CVS .)

Some more data has become public: Some one close to the Apache team claimed that the IIS patch is wrong, and there's a response from IIS. Maybe the IIS patch does fix the problem, but it is certainly not the most obvious and reader-friendly way to do it.

And, by the way, we have extrated the critical patch from the 1.3.x CVS (currently skipping mod_proxy), created a Debian package containing it, and written a German notice (still preliminary) for our free security newsletter. (The Debian package will be updated as new changes appear in the Apache CVS .)

Some more data has become public: Some one close to the Apache team claimed that the IIS patch is wrong, and there's a response from IIS. Maybe the IIS patch does fix the problem, but it is certainly not the most obvious and reader-friendly way to do it.

And, by the way, we have extrated the critical patch from the 1.3.x CVS (currently skipping mod_proxy), created a Debian package containing it, and written a German notice (still preliminary) for our free security newsletter. (The Debian package will be updated as new changes appear in the Apache CVS .)

You are excluding a greenhouse-gas-less technology that works NOW. Externalities, including waste management, amount to about a tenth of cost. Essentially, externalities have been to seen to be mostly paid for in advance through the elaborate safety systems in non-Soviet plants.

See
the huge ExternE study, (more here).

In case the site is slashdotted, you can get the images from there and there.

In case the site is slashdotted, you can get the images from there and there.

It is, according to some people...

The "How to write Unmaintainable Code" article on the web is an excellent resource for documentation - much as "Web Pages that Suck is an excellent guide for web designers.

Your organisation - even if it's just 1 man and a dog - should already have a style guide in place. Don't have one? Well then it's easy, there are plenty of good ones on the Net, for Java, C++,Lisp,MATLAB, Ada and many others.

A good list of C and C++ styleguides is here. Just pick one. The important thing is to make sure everyone uses the same one, exactly which one is more a religious issue than anything else. That's an over-simplification, some really are better than others, but at least all the ones on that list have been tried, tested and peer-reviewed.

As for my own opinions, a few issues

• Make variable names meaningful. If you do this, then most of your comments will be metadata, e.g why you did something, and who and when a change was made, rather than what is being done. If you're doing something tricky or unusual, then having a pseudocode preamble can be worthwhile.
• If you can, try to use a relatively high-level language like Ada rather than a low-level one like C. But this is almost never under your control. The Javadoc auto-documentation tool is one of the biggest plusses that Java has over other languages - so if programming in Java, Use It!!

My favourite book on code readability happens

to be free. Unfortunately it is not about

C++.

Try:

Ada95 quality and style

Ever try using a winmodem in linux?
Can people stop saying this. I am using a winmodem right now and have never had any problems.

Microsoft was going to open up passport authentication to third-party ID servers via passport, right? Or am i just confused about that? Is that not happening anymore?

• Expedia (not surprising as it used to be an MS co-own)
• Egg.com - announced but not implemented as yet. Egg are hard-core Microsoft lackeys^Wpartners

Um that's it AFAIK

I suppose people are already familiar with Controlled Area Networks in Autos. I have been told(and not lazily verfied) that a company called Vector holds some kinda monopolistic hold over CAN bus technology.

The idea of running an IP network in a car is not new. I know of atleast one R&D project at our Uni which is done by "Institute of Communication Networks and Computer Engineering" which investigates among other things, developing a communication architecture in an auto...the research to run an IP network on Das Auto! Read more
here
I am sure there are other projects like this taking place elsewhere as well.
It seems soon internet will find its way to our carburtors!!

You don't have to upgrade to get around this problem! I'm still running 5.08, but managed to 'patch' myself through a config setting outlined here before yesterday's story appeared on Slashdot.

It's a config setting, and Domino Administrators are (or bloody should be) prepared to tweak these settings.

I don't know if you're aware of this, but every Domino server, by default, installs as an open relay. Unless you lock it down with a setting in the server's configuration document (Router/SMTP - Restrictions and Controls - SMTP Inbound Controls - Inbound relay controls), you are going to have problems anyway.

It's a configuration issue.
Lotus are famous for leaving configurations wide open, and leaving it for the the Administrator to tweak. I admit that they completely missed this issue coming, but fixing it is a 20 second job. I suppose now their problem is letting admins know....

Yesterday's article about ORBZ shutting down told us about this article, which explained that when ORBZ tested Lotus Domino servers to see if they were open mail relays, the Domino server would get DoSed (enter a mail routing loop consuming 100% CPU). Cheers!

The Register has a little more info. It seems that there is a workaround which involves changing the settings in Domino, though persuading everyone in the world who's running Domino to apply the fix might be hard! It seems like orbz.org is down already, and it's probably going to stay that way :(

It seems like if there isn't a mailing list for every single library's security issues, then closed source vendors will become second-class citizens when it comes to getting forewarning about a big security announcement like this.

I don't believe this is true. Look at this list. Many vendors were contacted in advance, vendors of proprietary and free software. However, CERT/CC probably assumed that this is a pure UNIX vulnerability, and did not contact all vendors. (In fact, they should have contacted Microsoft nevertheless, because of Interix.)

However, we can clearly see one thing (if you look at the find-zlib output): Most proprietary vendors do not update their copies of zlib at all. Previous versions of zlib had their problems, too, and yet the vendors didn't care, even though the software was still maintained. Probably they had already forgotten that the code came from an external source. Free Software projects are different here, I guess: New upstream sources are merged in a rather timely fashion.

While browsing the page for the book, I noticed the author is working on a new lisp dialect called "Arc". I hope they manage to fix the niggling thing that keeps me from really trying Lisp: freely available MATURE cross platform libraries for threads, GUI toolkit, and networking.

Hell, I would settle for just a GUI toolkit!

The "CLIM" (the standard Lisp gui toolkit) has a free implementation, but it is unfinished.
Garnet, has been abandoned by CMU (the developers).
XIT hasn't been modified in 6 years.
Winterp is its own mini-Lisp and is Unix-specific.

The article is surely right about their comment about the throw-away mentality with assignment. But there are exceptions: at my University there is a so called "Software Engineering" degree, where the emphasis is on good code with good documentation and many test-cases. Correct code only amounts to 50% of the final mark; the other half comes from documentation, comments, testcases and how well you followed the style-guide. I quite like it, because the assumption is that basically all software in todays world simply sucks.

It is asymmetric and it is also ONE-WAY authentication as opposed to the TWO-WAY authentication which actually takes care of the problems you mentioned above.
All one-way schemes suffer from the same problem and thus can be hacked. Even "retina signatures", "thumb-prints" etc are after all converted to binary data and thus can be hacked!!
The only known secure solution in 1-way is the combination of CARD+PIN code. That is the "private key" is in the card but the access to the card is through the PIN code. This combination you can see in many shapes.
However, i have tried to break the 2-way authentication algorithms and till this point there is no success. There are relatively much more secure. for more info,take a look at this applet.
uni of stuttgart
this is self explanatory(allow sometime for the applet to load)

Whats the big news? See this( at Uni of Stuttgart ) they even have ROBOCOP matches!


Robocop

This is Multiagent theory in the context of AI.

Hi,

There are already several electrically powered aircraft flying. Ok, most of them are gliders that use the engine for take off and then retract it and continue flying, gliding and gaining altitude in thermals. But there is already a powered glider, the icare, which uses solarcells to power an electric motor for take off and sustained cruise.

Take a look at the following websites:

Lange Flugzeugbau
Icare
Silent AE1

Conventional self launching gliders are already very sophisticated, but the engines they use, require a lot of maintenance and are sometimes not as reliable as you might wish. Well anyway, if the engine fails I land on a field, no problem there, ... that is if a field is in range. Electric engines should increase reliability quite a lot. Hopefully they are available soon.

Regards, Thomas.

Shameless plug: There are also German summaries for the ptrace() and symlinks. Well, with the recent advisory on the security problem in Windows Media Player (regarding DRM), I shouldn't travel to the US while the DMCA is in place.

Shameless plug: There are also German summaries for the ptrace() and symlinks. Well, with the recent advisory on the security problem in Windows Media Player (regarding DRM), I shouldn't travel to the US while the DMCA is in place.

Shameless plug: There are also German summaries for the ptrace() and symlinks. Well, with the recent advisory on the security problem in Windows Media Player (regarding DRM), I shouldn't travel to the US while the DMCA is in place.

Shameless plug: There are also German summaries for the ptrace() and symlinks. Well, with the recent advisory on the security problem in Windows Media Player (regarding DRM), I shouldn't travel to the US while the DMCA is in place.

Well I remember germany sponsering GPG development, and lately encryption extensions to both kmail and mutt. This seems like one giant step forward in this process.

Exploits that lead to user-access is normally less important than exploits that lead to root-access.

It is extremely difficult to maintain local security on UNIX systems if you and your users are using quite a few tools. For example, GNU Emacs 20 still has temporary file races (really old advisory), and a lot of your favorite tools, too. Such problems disappear only very, very slowly.

Of course, there seems to be a way out of this dilemma: don't install anything on your server except the server software itself. Put each service (HTTP, SMTP, NNTP) on separate machines, and interactive users onto another. Unfortunately, after you've done this, you are facing a remarkable farm of servers, each requiring maintenance, which is not always acceptable.

As a result, if you have limited capacities (and who doesn't?), you are better off when you focus most of your energy on securing against attacks over the network, as long as you can trust your local users. Relying on the security features of a typical UNIX system to confine a security breach to a certain account is not a good idea, at least at the moment.

Actually, in the meantime, an additional draft has been released, see for example this copy. However, no technical changes have been made.

But their hardware runs well without Windows; find it here.
--

The second i read the mail about multiple files i understood what Patrick was going to do. Putting information in filenames is a very old trick that was used to get around file system quotas for a pretty long time. But it is pretty stupid of Mike not to include a clause that filenames themselve are also data.

It's not even a natural island... it's a very small platform about the size of a McDonalds, it doesn't even look like an island, it's just resembles an oil platform :)

The Brits could literally blow it off the face of the earth in a second if they wanted to, and do you think these guys are gonna be any defence against a cruise missile? ;-) (how about one of those Tomahawk's the Brits have just bought off the US?)

There's a picture of some geeks inside the place too. And one of the boss, Sean Hastings, did anyone say Alan Cox?

Also, the island has to patch its satellite/microware link back to the mainland somewhere, the government could just put pressure on the upstream provider.

Considering the Brits actually built the island as WW2 defence platform, maybe this could affect the sovereignty of the island. When the courts last ruled on the independence of the platform, it was purely a humours peculiarity bought forward by an ex-military eccentric, obviously they didn't envision data heavens when they made the ruling back in the 60's, after all, who would want a decaying remote platform stuck on the east coast, they thought. I'm sure the government were happy to give the platform away so they didn't have to bother paying maintenance or demolition costs (at the time).

Being only 20 miles of the coast is a little precarious, it could be annexed at any time.

If you're interested in some other 3D software for Linux (some GPL, some not), there's 3dom, 3dpm, Behemot, G3D, Giram, 3delight, AC3D, and of course Blender as mentioned above.

Come on Karma, don't fail me now! The Linux Pimp

Or there's the related PDFTOHTML if you prefer that for your access method.

For the truly lazy, a clickable link to the site mentioned above.

--

Don't you think there is some kind of scale, including "confidential","hidden","not accesible" or "private"?
Perhaps we are touching the base of the whole encryption discussion at the moment. Is data free, or do we have the right of private sphere, including encryption? And can you call this "secret"?
I think there is a difference between "private" and "secret". And there is a difference in who is using this "privacy". Maybe the government, as representative of the people, has no "privacy", just "secrets". Yes, maybe you are right.

alien

P.S. hey, I don't know who you are, it's a secret for me... :)
In fact the SA algorithms aren't so secret. It's the P-Code itself you want to know. And that definitevly is top secret!

There was an excellent movie here in germany last year: "23"
23 is the number of the illuminatus conspiration. One of the Hackers (Karl Koch) believes he is monitored by them...
(does anybody around here know that feeling?... ;) )
I don't know if the movie will be translated into english. I saw it two times now (in german) and love it. When you remember the early 90ies computer world you will love it too...

alien

So in my humble opinion GPS is not really "secret". Parts of the data is not accesible for civilians, but they get enough data for their needs. Let's compare this to an police station: you can't go everywhere, but you know what is there. Do you call that "top secret"?

alien

I am not sure if I understand what you think GPS is like, or what you mean with "working".
But I can tell you about the GPS data format, the transmission frequencies, the satellite orbits and much more. I learned this stuff for a class at university and it didn't seem to be secret at all.
Learn more at:
www.utexas.edu/depts/grg/gc raft/notes/gps/gps.html
Have Fun!

reply to: alien@studbox.uni-stuttgart.de

• University of Toronto Neural Network Group has some software which fits the Open Source model.
  
• University of Stuttgart has a neural network simulator. Source is available, its GPL.
  
• Pacific Northwest National Laboratory has a slew of links to free/share ware. No idea if any of it is Open Source.
  
• Karsten Kutza maintains Neural Networks at Your Fingertips.
  

The German pages about this student project can be found at http://www.ra.informati k.uni-stuttgart.de/~stankats/pg99.html. More details about the various modules are provided there.