Slashdot Mirror

ickle_matt writes "SCO have announced the final termination of IBM's UNIX license, despite Novell telling them they can't. Interestingly enough there's a new set of "stolen code" figures in the release - 'approximately 148 files of direct Sequent UNIX code to the Linux 2.4 and 2.5 kernels, containing 168,276 lines of code. This Sequent code is critical NUMA and RCU multi-processor code previously lacking in Linux. Sequent-IBM has also contributed significant UNIX-based development methods to Linux in addition to the direct lines of code specified above.' "

securitas writes "One of the most challenging business problems is trying to figure out how to make money on the Internet, especially with content. Louis Borders believes that Internet users will pay for online content and explains in an interview the how and why. He is founder of Borders Group, a $3.4 billion company that is the second-largest bookseller in the USA, as well as the billion-dollar online grocer and dotcom flameout, Webvan. Borders thinks he has found the answers and has just launched KeepMedia, an online newsstand subscription service. As someone who has had spectacular success and failure in his career, Borders' latest venture will be an interesting one to watch."

An anonymous user writes, "Most Sun Microsystems employees use Apple when they're not at work. This leaves Jonathan Schwartz, executive vice-president of Sun's software group, hinting at a Sun/Apple partnership." This comes on the heels of Pat Gelsinger, senior VP and chief technology officer of Intel, claiming Apple makes the wrong decisions about CPUs. So it figures Sun, who Intel likely thinks wouldn't know a good processor if it came up and -- um, processed something, would like Macs.

Thanks to the VDSA (Video Software Dealers Association), who have released new information from its 2003 Annual Report, including the information that "Gamers spent $722 million renting video game software [in the US] in 2002." This is significantly up from the 2002 Annual Report, which gave a figure of $633.6 million for game rentals in 2001, and presents an interesting comparison to DVD rentals, which were $2.9 billion in 2002. The report also reveals that "65 million people own at least one game console", and, for what it's worth, that "the majority of console video game users prefer ultrarealism and sports competition." Now, if they could only invent an anti-scratch coating for game rental discs...

Paul Johnson asks: "This article at ComputerWorld describes a sysadmin's discovery that many people in his company are installing Linux on their desktops without consulting IT. The writer is concerned with the security implications, but there is a wider issue. At present the 'official' penetration of Linux into the desktop market is something around 1%. The writer of this article doesn't give figures, but it sounds like he may have stumbled on several times that percentage of desktop Linux installations. If so then this is an important trend. Linux got its foot in the datacentre door in exactly the same way a few years ago, with unofficial installations doing odd server jobs. If you are a sysadmin, in an organization that runs Windows on the desktop, have you stumbled on many unofficial Linux installations?"

Thanks to Gamesindustry.biz for their article discussing Sony's disappointing games division financial results. According to the piece: "Global sales of the PlayStation 2 may well have peaked, with Sony's results for the quarter ended June 30 revealing a steep decline in sales of the console and a drop in overall revenues for the games division of the corporation." The specific news was mixed: "The company sold some 4.59 million PS2s during the quarter last year - this year, however, the figure has dropped off to 2.65 million. As you might expect at this point in the console's life cycle, however, software sales are up - gaining four million units in during the period this year to bring the total to 31 million units."

An anonymous reader writes "Remember that story about the city of Munich choosing Linux to power 14,000 desktop computers? One aspect of this story that most people don't know about is that up to 80 percent of those Linux desktops will be equipped with VMWare, a virtual machine emulator, under which they will run Windows and Windows applications. That's right, folks: The majority of those 'Linux desktops' will be used to run ... Windows." This Gartner report from early June seems to be the one mentioned in the article, though I'm not sure exactly where Thurrott gets the 80% figure.

Licensed2Hack writes "'Goodbye "e-mail," the French government says, and hello "courriel" -- the term that linguistically sensitive France is now using to refer to electronic mail in official documents.' . Curriel? 'Hey Pierre, curriel me those sales figures.' Just sounds wrong!" Especially if you don't actually speak french ;)

PlainBlack queries: "Our company has been developing an open source project for a couple years now that has gotten pretty popular. The one thing we haven't yet figured out how to do well is packaging. It seems like every operating system has it's own standards for packaging, and installers, and for each OS we support, we end up adding a lot of time to our packaging process. So my question is, what do all of you do to package your apps? Do you just release source tarballs? Do you manually package your RPMs, EXEs, DEBs, DMGs, BINs, PKGs, [and MSIs] by hand? Do you have an automated build process that creates all the packages? If so, how does it work? Is it available for other developers to use?" There are tons of installers listed on SourceForge, but which one allows the creation of OS packages without too much hassle? Duplicating work, especially software installation procedures, across all supported OSes, is time consuming. Is there an easier way?

Phronesis writes "M. Granger Morgan and his graduate student Bill Strauss have a nice article in Issues in Science and Technology about the risks posed by electronic devices in flight. Unlike most articles on the subject, this one neither pooh-poohs the risks ('We have estimated that reported events are occurring at a rate of about 15 and perhaps as many as 25 per year') nor exaggerates them ('RF interference from consumer electronics is unlikely to have figured in more than a few percent of commercial air accidents, if any at all, during the past 10 years.'). Instead, it presents a sensible plan for dealing with the risks that will accompany the inevitable expansion of the range of electronic devices passengers will use in flight, including cell phones and wireless computer networking."

Thanks to an anonymous reader for pointing to Microsoft's press release discussing sales figures and plans for Xbox hardware and software, as part of their 4th quarter earnings. According to the release, "Since the launch of Xbox in 2001, Microsoft has sold over 9.4 million Xbox consoles worldwide, and by the end of the next fiscal year, Microsoft expects to have sold 14.5 to 16.0 million consoles." Xbox Live has "..over 500,000 subscribers worldwide participating in more than 1 million game sessions every week", and Halo 2 will be out by June 2004 (the end of next fiscal year), but other than saying that the Xbox-related Home and Entertainment section "..posted stronger than expected results in the fourth quarter, with 8% revenue growth over the prior year", there was no specific statement about Xbox's overall financial gain or loss.

Thanks to GameSpy for their interview with Bill Roper, quizzing the ex-Blizzard veteran further on his recent departure from the company. He confirms: "..the uncertainly surrounding [Blizzard's] future in regards to who was going to own us understandably caused a lot of speculation and uncertainty. Our lack of participation in the process made it difficult for us to provide any insight to the people we worked with." In related news, Blizzard has announced that former Diablo II lead programmer Rick Seis will now lead Blizzard North, who "..will be streamlining their teams into one core group in order to focus.. on one key project." Finally, GameSpot has photos of the new Warcraft III action figures, including the death knight Prince Arthas, the night elf archer Shandris Feathermoon, and the dread lord Tichondrius.

gbjbaanb writes "Wired News is reporting about the GIA, software inspired by the TIA program. 'Researchers at the MIT Media Lab unveiled the Government Information Awareness, or GIA, website Friday. Using applications developed at the Media Lab, GIA collects and collates information about government programs, plans and politicians from the general public and numerous online sources. Currently the database contains information on more than 3,000 public figures. The premise of GIA is that if the government has a right to know personal details about citizens, then citizens have a right to similar information about the government.'"

TheSync writes "A Reuters/Yahoo story says University of Arizona and Russian scientists have detected water ice uniformly distributed in the soil of Mars' north polar regions. The amount of hydrogen detected indicates ice of 80% to 90% of soil volume. Data was used from the Mars Global Surveyor and Mars Odyssey." It's worth noting that their study only detected large amounts of hydrogen; so much hydrogen that ice is figured to be the only form it could be in, although I kind of like the idea of Mars' pole covering a huge pocket of hydrogen gas.

Factomatic writes "Kent Salas has unveiled his latest creation, the Pyramac G4 pyramid, which took six months to design and build. Salas says the toughest part was figuring out how to get all of those rectangular parts to fit into a pyramid, but he finally managed to cram in the motherboard from a 466 MHz Graphite Power Mac he bought on eBay for $600, a $400 1.4 GHz overclocked G4 upgrade card, 768 MB RAM, a 100 GB hard drive, an ATI 8500 video card and a CD-RW/DVD optical drive. You may remember Salas as the creator of the BlueIce modified Power Mac G4 tower with a front-mounted 5-inch LCD screen (also here). Wired News has an article and eight images of the Pyramac mod, but Salas has included the full set of 51 images on the building page of Pyramac site. I'm sure it won't be long before pyramid PCs show up at mini-itx.com... add a Webcam to the top and John Poindexter's vision of Total Information Awareness can be a reality in your home or office!"

nychef asks: "My school has decided to give me money to set up a server for my club. I'll be running e-mail for about 250 people, and webpages for about 100 which will mostly be static webpages, but there will be a few dynamic ones. I am trying to figure out just how powerful I need the hardware to be. They gave me a pretty decent budget, but my budget is to include the internet line. So I want to maximize bandwidth and minimize the cost of the server. I am looking in the range of dual P4 2.8's with a 3 disk RAID5 stack and 1 GB of ram. Is this adequate or overkill?" nychef has a budget of about $4,000. What kind of hardware and bandwidth options do you think he can afford?

Subliminal Fusion writes "Business 2.0 has an article that breaks down where that $1 goes when you buy a song from iTunes or other online music services. Key figures: the site takes .40, the labels take .30 and the artists get a measly 12 cents for each download."

HeelToe asks: "Two nights ago, I sat down to do a few chores with finance websites and check my mail. To check my mail, I use an ssh connection and read it via mutt. I had already hit Slashdot for my semi-hourly dose of content, but then noticed my ssh client complaining about a difference between its cached copy of the server key and the server key presented, so I started investigation. After figuring out what was going on, I contacted the tech support line for my service provider (Charter Communications) to no avail, as well as the FBI and NIPC, again, both to no avail. There are all these laws and all this hype about enforcing these computer crime laws - what must an end user do to get some enforcement done? Read on for more, much more..." Update: 06/21 19:13 GMT by C :As it turns out, the issue wasn't a hack at Charter but a particularly nasty form of Spyware. Stll, the question is valid, and some of the suggestions already given, have been real informative. Keep 'em coming!

"So I determined that I was connecting to xxx.p5115.tdko.com instead of xxx. I started looking at dns settings. Of course, under Windows, the default is to accept the default dns domain specified by a DHCP server for the PC's ethernet connection. There are settings to disable this, but I hadn't thought about it until now. It turns out, Charter Communications' DHCP servers were infiltrated and were providing p5115.tdko.com as the 'Connection-specific DNS suffix', causing all non-hardened Windows (whatever that means in a Windows context) machines to get lookups from a hijacked subdomain DNS server which simply responded to every query with a set of 3 addresses (66.220.17.45, 66.220.17.46, 66.220.17.47).

On these IPs were some phantom services. There were proxying web servers (presumably collecting cookies and username/password combos), as well as an ssh server where the perpetrators were most likely hoping people would simply say 'yes' to the key differences and enter in their username/password.

Has anyone else seen this type of attack before? Pretty sneaky. I bet it would slip by most people that don't use anything but a web browser. This makes me want to step up my plans to put an OpenBSD firewall in place and allow it as little trust of the outside world as possible, providing more trusted DNS/DHCP services to the hosts on my network. It would be nicer to be able to boot the thing self-contained-and-configured off read-only media and have no writable access to anything from the operating system to totally prevent break-in/tampering.

With respect to the law enforcement issues. I first called Charter, and after 10 minutes on hold was told to submit a report to their abuse account. I asked the tech support rep if they really wanted me submitting the incident report through a hijacked proxying web server. I hadn't yet reconfigured my Windows systems because I wanted to collect as much information as possible while the attack was still live. The long and short from the tech support rep was they'd look at it, but couldn't do anything with respect to responding to me about it unless I submitted that report.

I moved on to calling the FBI. The after hours person had no idea what evidence collection procedures I should follow, nor if their office would even be interested in investigation. I was told to call back during business hours. I did a little searching and found the National Infrastructure Protection Center. I gave them a ring and was asked to fill out an incident report. I was told it would be reviewed in the NOC quickly and a decision made about further investigation. The rep answering the phone said to collect any and all information I could think of regarding the attack. I got a response later this morning that their NOC personnel had evaluated the report and decided not to investigate further.

I called the FBI back this morning, only to be told they generally didn't investigate these types of crimes for individuals, but usually only for companies that had lost at least a couple thousand dollars. To inflate my ego a bit, I asked if I could count my time cleaning up/investigating as a loss of this magnitude and was told no, that it would have to be a financial loss like is associated with internet credit card fraud. Given how Kevin Mitnick was convicted and sentenced on 'evidence' that included employee time for investigation and cleanup, why is this any different for me?

With respect to getting some action on any future attacks - what should I do? Who should I call? I'm not a h/\x0r, and I have reasonable investigation skills, but aren't there professionals doing this to uphold the law? What's the point of all those federal laws anyway? Monitoring of third party communications, without the consent of either party; unauthorized access to Charter's systems - the list can go on a lot further depending on the activity happening at those proxying servers. Are these laws just tools to oppress unpopular computer criminals but just plain not enforced most of the time?

I found this situation and particular method of attack interesting... hopefully this was fun to read. If you have suggestions for what I should do in the future to handle attacks, I'd love to hear about it!"

Blue Booger asks: "I was looking over some fibrechannel hard drives and noticed that the Mean Time Between Failures was rated at 1.2 million hours. I thought that was pretty high, and figured it up to be close to 137 YEARS!! I went to check some regular IDE drives just for comparison, and they were rated at 500,000 hours (57 years). Now, as I understand it, this is supposed to be the average time that you can expect the drive to last before failures. I rarely have an IDE drive last more than 4 years, and my record is 10 years, so what is the deal? BTW, that is 57 years running 24 hours a day...the MTBF is rated as power on time. Here you can find Western Digital's glossary that defines the term MTBF (pdf). Here you can find a spec sheet on one of their 20GB IDE drives. I checked, and Seagate also lists similar MTBFs. How the heck are they coming up with these numbers?"

Thanks to an anonymous reader for pointing to a press release announcing that Capcom will publish the phenomenally successful Grand Theft Auto 3 in Japan. It appears the big Japan publisher will "..localize, publish and distribute.. Grand Theft Auto 3" for both Playstation 2 and PC, and "Grand Theft Auto 3 is scheduled for release in the Japanese market in Fall 2003." Interestingly, one commentary about GTA3 in Japan says that the author's Japanese friends "..have been disgusted that such a game exists, and judgmental, as in 'that's the kind of game only an American would like'", but the game's suitability for the Japanese market will only be definitely proved/disproved by sales figures.