Slashdot Mirror

These things seem to run rampant during this time of year, but I figured I'd at least post this one. It's probably old, but christmas only comes once a year, so click the link below to read a little Unix Christmas poem sent to us by Kiana Marie A Unix Christmas

you better !pout !cry

you better watchout

lpr why

santa claus < north pole > town

cat /etc/passwd > list

ncheck list

ncheck list

cat list | grep naughty > nogiftlist

cat list | grep nice > giftlist

santa claus < north pole > town

who | grep sleeping

who | grep awake

who | egrep 'bad | good'

for (goodness sake)

{

be good

}

santa claus < north pole > town

Well folks, I have officially finished my last exam. Assuming I'm not missing anything anywhere, I've earned a B.S. in Computer Science and a Studio Art Minor at Hope College. Now that I've got that whole mess out of the way, my plan is to take it easy for a few weeks, and then I will start my "Job". Basically, I work for my company (Block Stackers Inc: basically Hemos, Me, Nate and Kurt) and my job will be to run Slashdot in the best way I can. It'll kinda be nice to be working only one full time job instead of running Slashdot and full time school. It means new features, better stability, and hopefully the ability to pay my student loans and rent. This site serves close to 8 million pages a month, now I just have to figure out how to make a living at it. Lastly, some folks have actually sent real graduation presents- you know who you are- you rock.Hey, click below if you want our address to send presents. Rob's Big G-Day
116 E.18th
Holland, MI
49423

Well I did this last year, and the among the best things I got was a gigantic floppy disk, and a box full of dead hard drives. It was just so much fun that I figured I ought to try again this year. If you have cool geek stuff: beer, strange hardware, posters, or anything else that a geek might like as a strange Christmas present, mail it to the address I've posted at the end of this article. I'm gonna post pictures of the coolest stuff. You could even consider this a combo Christmas/Graduation present since my last class is next week thursday *grin*. Now back to the news (Bracing myself for the flames: "This isn't News!") Rob Malda Christmas Crap
116 E 18th
Holland, MI 49423

Ho ho ho. Nothing illegal please. And nothing that I would have to feed.

Otter writes "The Onion seems to be a popular read among Slashdotters. There's a fun article about it in Upside describing the Onion folks as a collection of truly disturbed people. They've swung a $450,000 book deal with Crown and an MTV Christmas special, and are negotiating for a network TV special. " I guess you've arrived when you get your own MTV Christmas special. Pretty cool though. I wouldn't mind a 6 figure book deal. I could call it "Document Contains No Data". Allright, so I oughtta stick to perl *grin*.

CodeRed writes " Here is a poll at Interplay's feedback site asking whether Carmageddon 2 should be ported to Linux. In a previous thread an Interplay employee said he would talk to the coders on a Linux port. I figured why not let the Slashdot effect help their choice? " Obviously you should only respond if you would buy this game.

The master hacker Raph Levien sent me a Reuters press release regarding the signing of the Wassenaar arrangement by 33 countries, including Germany, Japan, Finland, Canada, Ireland, and Britain. One of the reasons cited was that firms including Intel and Microsoft "have complained that the lack of restrictons in other countries hampered their ability to compete abroad". Interestingly enough, products which use encryption to protect "intellectual property" are exempt. This should show up on all the major news sites soon. For those who haven't figured it out yet, the agreement is not exactly a laissez faire sorta thing. Update: Read the Reuters Article, or check the Wassenaar Arrangment web site for more info.

Jason Haas writes "We have the first real beta version of LinuxPPC 5.0 running! It's running glibc2 and fvwm -- and looks identical to RedHat 5.x. I posted the update about it on www.linuxppc.org from the PowerBook G3 that it was developed on, so I know basic services are working. We'll post the beta for everyone to break/fix/contribute in a day or so. (Figure December 3 would be a realistic date to have it up with a working installer.) To read about the R5 beta's first boot, go to www.linuxppc.org/r5.html. We'll put up a large note there when R5b1 is available online. "

A few have asked about getting these spiffy remotes working under Linux so I figured I'd finally have to run something, but the submissions have been piling up rather quickly. So if you have a remote mouse, this topic is for you! Here are a couple of the submissions I've received on this... Codger, asks "I have a Logitech remote control, and I'd like to use it under Linux. Does anyone know anything about this? The remote plugs into a serial port and augments the mouse pointer when on. I have software for it that runs under Windows 95, but I'd like to get it working under the 'One True OS'. Anybody have any ideas?"

And another from Nicholas Loscalzo who would like help with the following: "A couple of days ago, I picked up, for free (well, after the rebate) an Interact Web.Remote professional from OfficeMax. The thing is pretty damned cool. Serial port interface to a wide-angle IR receiver. The remote unit has a trackball, left and right "clickers" (two sets) and a keypad with 9 numerics and 9 play/stop/rewing/vol/etc keys. My question: I enjoy using my intellimouse with my main machine too much, so I don't want to set up the remote on that box (tried it on it though, it's definitely NOT a full-time use mouse, despite the advertisement.....), so I was thinking of popping it on to my linux box. Question is, has anyone written support for it yet in X (or consoles?) ? It'd be cool as hell to be able to control a bunch of functions all from remote."

Duncan McQueen would like to query you all on this issue "What is a good AGP video card for Linux? I have seen much about the new Savage 3D card by S3 and it is definitely in my price range, but I haven't seen anyone's success with running X on it. Any suggestions?" There have been quite a few submissions like this one, but they have been mostly requests for X servers which support the latest AGP cards. So I figured I'd kill two birds with one stone.

Greg Briggs asks this burning question "My question for Slashdot is... What can I do? I don't know any programing languages, (I'm learning) but would like to help support Open Source Software. I am good with Photoshop and The GIMP, but have not been able to get in contact with anyone that could use my services. For some time I have been thinking of starting a database that could link people with projects that can use their services. It would be a "OSS help search" of sorts. Well, if anyone at Slashdot has any ideas for ways that I (and other slashdot readers) can help post them on the site. Also if you know of anyone that could spare some space and bandwidth I would be happy to run a "OSS Help Search" site." There are plenty of ways for non-coders to support Open Source Software, but I figure you all knew all the answers better than I did. And does that "OSS Help Search" sound like a really good idea to you all? I know I can could it, since a lot of people like submitting questions that would be better off on such a site...

Steve Moore asks: "...any idea what the status of working in a four color (i.e. CMYK) space is within gimp? is it that the algorithms used to go from RGB to CMYK is too complex, or is it a copyright issue (on the algorithms) that's preventing gimp from getting into the prepress realm?" I've seen this issue come up a lot when discussing GIMP, and its ability to compare with other paint programs, so I figured a lot of you out there might want to see this one.

Martin Chisholm poses this query: "I have two computers for home use: a 486 Linux box and a P166 NT machine. I want to be able to run Linux programs and NT programs simultaneously. Since Windows was never designed to display things remotely, I have the monitor and keyboard on the NT box. I figure that running an X-Server is my solution. I have tried MicroImages MI/X, but I didn't like it. It was okay for xterms, but was lousy for graphical programs (such as XEmacs). I found VNC to be fairly slow, and it had some weird quirks. I am currently using StarNet's XWin32 demo, and except for the 2-hour limit, I am pleased with it. I have heard good things about Hummingbird's Exceed, but it seems pricy. However, before I shell out money, I want to Ask Slashdot the following: What is a good Win32 X-Server at a reasonable price? Or is there some alternative? Did I simply not give MI/X and VNC a fair chance?"

Dave Kimmel asks "Ok - I'm a big Linux fan, and use it for my fileserver/IP Masquerading/main working box, but I also use Windows on another box for things like school (developing in Access), and games (like Starcraft). Here's my question: Has anyone figured out how to get Kali to work through IP Masquerading?"

Rob Kaper sent us a link to something you might have missed on Freshmeat. It's a nifty site that is tracking Server uptimes. El wrote in to send us a link to "Penguin Lust" which I found silly enough to post. Josh Baugher sent us a link to the so called Christmas Document that you might find amusing. Quazi sent us a link to a ZDNet IE5 Review that normally wouldn't deserve a glance. But apparently a Slashdot fan was involved. Or just as likely, they wanted some hits and figured that this publicity might send some clicks their way *grin*. iota wrote in to send us a link about Mexico using Linux in schools and saving themselves over a hundred million bucks in the process. Mark Woon sent us a link to a funny BMW ad poking fun of MS. Lastly, worth noting (and based on the submissions box, and my msglog, a lot of you did) Red Hat has updated their website with a cleaner, and frameless design. Joy!

Giving some actual theory to the whole cryptography discussion, Ian S. Nelson's review of Handbook of Applied Cryptography takes a look at this veritable tome of information. This isn't a book for those of you trying to figure out exactly what the NSA actually does; this is for the real meat and numbers behind it all. Click below for more info. Handbook of Applied Cryptography author Alfred J. Menezes, Paul C. van Oorschot, Scott A. Vanstone pages publisher CRC Press rating 9/10 reviewer Ian S. Nelson ISBN 0-8493-8523-7 summary Required reading for any cryptography freak. REVIEW: Handbook of Applied Cryptography Alfred J. Menezes, Paul C. van Oorschot, Scott A. Vanstone CRC Press (ISBN 0-8493-8523-7) Nutshell
Review: Required reading for any cryptography freak.
Rating: 9/10 The Scenario CRC Press has been building a series of books on discrete mathematics and its applications. Doug Stinson wrote the theory book on cryptography (Cryptography: Theory and Practice (ISBN: 0-8493-8521-0, if you don't like this book you'll vomit when you see the Stinson book) and this is the application book on cryptography. It's close to 800 pages chocked full of information.

I must confess that I'm a cryptography freak and I'm a little sick of the constant political discussions and lack of tech talk, this book is all tech and might even be a little much if you're not into math. It's a wonderful companion to the Schneier books (Applied Cryptography 1st or 2nd Edition A.K.A. "the crypto bible") if you're into the nitty gritty details of cryptography.

What's Bad? I really like this book and I can't find a lot that I don't like about it... but I think in places the math gets a little thick. I have a degree in math and I find myself returning to the math overview section more often than I'd like to admit. If you're not familiar with discrete math and combinatorics then this book probably isn't for you. If you enjoy that stuff, then this will be a piece of cake. If you're looking to build your crypto book library up I'd highly recommend this book before you get some of the more hard-core books.

Something else I feel is lacking is cryptanalysis on ciphers. They discuss attacks on various protocols and hashes but actual attacks on ciphers are glossed over. As a companion to Cryptography: Theory and Practice, which covers cryptanalysis in more detail, it is understandable to leave that material out of this book but I think they could discuss it a little more than they do without going into specifics.

The no-nonsense style can be a little dry at times, there aren't a lot of jokes or anecdotes to lighten things up in this book.

What's Good? Cipher isn't spelled with a 'y' anywhere in this book. It's not filled with a lot of opinion or rumor. It doesn't hardly bring up ITAR, key escrow, or the NSA's mystical superpowers. This book is about cryptographic techniques and a listing of patents is about as political or opinionated as it gets.

It is kind of like a textbook without the problems at the end of each chapter. It is written in an outline format with subitems of "Definition", "Fact", "Notes", "Example", and "Algorithm." Each subitem is followed by a few short but concise paragraphs of explanation.

Plenty of charts and figures fill the pages and everything is explained well. While it lacks source code, there is certainly enough information for you to implement any of the ciphers, hashes, or protocols covered. It even includes some test vectors for a lot of the algorithms.

So What's In It For Me? If you want to learn about cryptography, not the politics but the actual technology, then this is a great book to get before you get over your head. It's very readable and while the math can be a little heavy in places it is accessible and useful. It gives you a good flavor of how more advanced papers and books on the subject are and it avoids the nonacademic discussions surrounding cryptography.

To pick this book up, head over to Amazon and help Slashdot out.

Table of Contents

1. Overview of Cryptography
2. 1. Introduction
   2. Information Security and Cryptography
   3. Background on Functions
   4. Basic Terminology and Concepts
   5. Symmetric-key Encryption
   6. Digital Signatures
   7. Authentication and Identification
   8. Public-key Cryptography
   9. Hash Functions
   10. Protocols and mechanisms
   11. Key establishment, management, and certification
   12. Pseudorandom numbers and sequences
   13. Classes of attacks and security models
   14. Notes and further references
3. Mathematical Background
4. 1. Probability theory
   2. Information theory
   3. Complexity theory
   4. Number theory
   5. Abstract algebra
   6. Finite fields
   7. Notes and further references
5. Number-Theoretic Reference Problems
6. 1. Introduction and overview
   2. The integer factorization problem
   3. The RSA problem
   4. The quadratic residuosity problem
   5. Computing Square roots in Z _n
   6. The Discrete logarithm problem
   7. The Diffie-Hellman problem
   8. Composite moduli
   9. Computing individual bits
   10. The subset sum problem
   11. Factoring polynomials over finite fields
   12. Notes and further references
7. Public-Key Parameters
8. 1. Introduction
   2. Probabilistic primality tests
   3. (True)Primality tests
   4. Prime number generation
   5. Irreducible polynomials over Z _p
   6. Generators and elements of high order
   7. Notes and further references
9. Pseudorandom Bits and Sequences
10. 1. Introduction
    2. Random bit generation
    3. Pseudorandom bit generation
    4. Statistical tests
    5. Cryptographically secure pseudorandom bit generation
    6. Notes and further references
11. Stream Ciphers
12. 1. Introduction
    2. Feedback shift registers
    3. Stream ciphers based on LFSRs
    4. Other stream ciphers
    5. Notes and further references
13. Block Ciphers
14. 1. Introduction
    2. Background and general concepts
    3. Classical ciphers and historical development
    4. DES
    5. FEAL
    6. IDEA
    7. SAFER, RC5, and other block ciphers
    8. Notes and further references
15. Public-Key Encryption
16. 1. Introduction
    2. RSA public-key encryption
    3. Rabin public-key encryption
    4. ElGamal public-key encryption
    5. McElliece public-key encryption
    6. Knapsack public-key encryption
    7. Probabilistic public-key encryption
    8. Notes and further references
17. Hash Functions and Data Integrity
18. 1. Introduction
    2. Classification and framework
    3. Basic constructions and general results
    4. Unkeyed hash functions (MDCs)
    5. Keyed hash functions (MACs)
    6. Data integrity and message authentication
    7. Advanced attacks on hash functions
    8. Notes and further references
19. Identification and Entity Authentication
20. 1. Introduction
    2. Passwords (weak authentication)
    3. Challenge-response identification (strong authentication)
    4. Customized zero-knowledge identification protocols
    5. Attacks on identification protocols
    6. Notes and further references
21. Digital Signatures
22. 1. Introduction
    2. A framework for digital signature mechanisms
    3. RSA and related signature schemes
    4. Fiat-Shamir signature schemes
    5. The DSA and related signature schemes
    6. One-time digital signatures
    7. Other signatures schemes
    8. Signatures with additional functionality
    9. Notes and further references
23. Key Establishment Protocols
24. 1. Introduction
    2. Classification and framework
    3. Key transport based on symmetric encryption
    4. Key agreement based on symmetric techniques
    5. Key transport based on public-key encryption
    6. Key agreement based on asymmetric techniques
    7. Secret Sharing
    8. Conference Keying
    9. Analysis of key establishment protocols
    10. Notes and further references
25. Key Management Techniques
26. 1. Introduction
    2. Background and basic concepts
    3. Techniques for distributing confidential keys
    4. Techniques for distributing public keys
    5. Techniques for controlling key usage
    6. Key management involving multiple domains
    7. Key life cycle issues
    8. Advanced trusted third party services
    9. Notes and further references
27. Efficient Implementation
28. 1. Introduction
    2. Multiple-precision integer arithmetic
    3. Multiple-precision modular arithmetic
    4. Greatest common divisor algorithms
    5. Chinese remainder theorem for integers
    6. Exponentiation
    7. Exponent recoding
    8. Notes and further references
29. Patents and Standards
30. 1. Introduction
    2. Patents on cryptographic techniques
    3. Cryptographic standards
    4. Notes and further references
31. Appendix A: Bibligraphy of Papers from Selected Cryptographic Forums
32. 1. Asiacrypt/Auscrypt Proceedings
    2. Crypto Proceedings
    3. Eurocrypt Proceedings
    4. Fast Software Encryption Proceedings
    5. Journal of Cryptology papers

Black Art writes "The Department of Labor has been having continual system problems. More information can be found at The NT Pages and at Kirberger & Associates According to these articles many of the offices of the DOL lost more than a weeks work due the crashes. The links from the government site appear to have been removed or no longer in service. " Seems to me that the US government should use Linux. Not only would it save them weeks of work, but it would also avoid them wasting money to figure out how many licenses of what they have.

Rhapboy writes "In response to a number of fake screenshots of Mac OS X running about the Net, Stepwise has posted the ultimate "screamshot" of the OS. " they're offering a prize to the first one who can figure it all out. I'm a couple short.

Al writes "TIME has an article about Linus and Linux. I guess this means we're mainstream now! " I figure we've seen it all now. Well, there is still Better Homes & Gardens, Rolling Stone and Cosmo...

Kevin writes "The Diamond Rio is being put on hold due to a court order. I really don't understand how it is even possible. If this is successful can they outlaw CD players and VCR's just because they can play illegally copied material? " Personally, I'm willing to buy one of those Rio's just to make a statement against the RIAA goobers who are making this messy. Note to RIAA:The way you do business is going to die. The Rio is just the first step- wait until Radio moves to the Internet. Why would I listen to WXYZ when wxyz.com will play my exact choice of music? Why would I buy a physical object at all? The future is gonna be great: on demand media will make accessing music better for the everyone. Stop trying to protect your ass with lawsuits and instead try to win the new game by offering consumers what we want. Release all your music as MP3 and figure out a better way to profit then the existing distribution system that rips off the artists, and makes things unecessarily expensive and difficult for consumers. Soapbox mode off.

Just figured I'd quick explain what that jobs link is over on the left hand side of the page. There are 3 or 4 extremely common feature requests for Slashdot, and a service to help find jobs is probably #3 (after AC filtering and a mailing list, which both are coming as well). So click that thing if you're interested in employment. I'm not in charge of it, it's run by Developers.Net, I'm merely throwing it up here because of the huge number of people who asked for something like this on Slashdot. So if you're an unemployed bum, and want to alter that have at it.