Slashdot Mirror
Slashback: Disclosure, Maricopa, Telecoms
Quick work by smart people. ciaweb writes "The OpenSSH group has revised its security advisory about the recent OpenSSH vulnerabilities. In it, they describe their decision-making process for releasing the bug information. It is interesting to contrast their procedure, which appears designed to maximize user protection, against Microsoft's, which appears to maximize Microsoft's protection."
Pardon me, sir, would you mind if I SLAMMED THIS HAMMER ON YOUR FINGERS?! D0wnsp0ut writes "I thumbed through my mail today and found what appeared to be a renewal notice for my domain. This one came from "Domain Registry of America." Verisign attempted something similar back in March and Bulkregister.com fought back and won an injunction, against the mailings. So watch out if your domain is getting close to expiring. I talked to my registrar (Register.com) and they're aware of it.
I'll scan the letter but have no place to post the pictures. Can anyone lend some bandwidth?"
Half the world has never eaten a Krispy Kreme donut, either. cshirky writes "I've just written an essay on the phrase ' Half the world has never made a phone call'. It's more 'voice telephony-y' than the usual telecom stories here, but after seeing the interest in media and the market that surfaced during my /. interview, I thought it might be of some interest."
Please stop sending my money to Redmond, OK? TrumpetPower! writes "All that brouhaha over Maricopa County's policy prohibiting companies or persons convicted of antitrust violations has had an effect. I just received the following note announcing a public forum scheduled for this coming Monday.
You recently inquired about the County's use of Microsoft products and the manner in which we license their software. We appreciate your interest in the County's technology plans. To provide a forum in which to discuss our technology direction and address any questions you may have, we will have Information Technology staff members available to meet with citizens at 8:30 am on Monday July 8th. The meeting location will be the County Administration Building at 301 W. Jefferson in Suite 420. Please RSVP your attendance so we can ensure that adequate facilities are available for the meeting.Thank you for your inquiry,
Paul Allsing
Deputy CIO
Maricopa County
301 W Jefferson, Suite 420
Phoenix, AZ 85003"
Ah, but what about the first annoying family photographer? 7h3_B055 writes: "Contrary to this article on Slashdot claiming the first photograph was created in 1826, much evidence is pointing to the fact that the Shroud of Turin may have been an earlier example (substantially earlier) of photography using ingredients as basic as egg-white for treating cloth (the photopaper) and urine for developing it. The camera itself could have been a simple box with a hole in it and the exposure time would have been lengthy."
Of course, there are a lot of theories about the Shroud of Turin, and a google search is likely to intrigue you for days.
i certainly wouldn't have my offices in suite 420.
or maybe i would.
I've gotten both the Verisign and the DRA letter, and after reading both in light of the Veresign suit, the DRA letter is VERY clear that submitting the form back to them will switch your registry to them; this is printed on the front of the letter in the same type as the rest of the page. In the Verisign case, the transfer statement was printed on the back of the letter in fine print (with no indication there was something on the back). While somewhat tacky, I don't think DRA is in the wrong here, compared to Verisign.
"Pinky, you've left the lens cap of your mind on again." - P&TB
"I can see my house from here!" - ST:
Wrong: it doesn't imply hopelessness, but rather encourages us to take action to change. Do you think that Kofi Annan wants us to throw up our hands and not care about the rate of improvement? No! By recognizing the magnitude of the problem, we can realize how important <i>more</i> improvement is. Just because things are improving doesn't mean we shouldn't be concerned about the huge inequalities that exist.
-Brendan
From the linked evidence website...
One theory is that Jesus became pure energy and the radiation burned the image into the cloth. This isn't a far fetched theory really. We don't know how He resurrected. As the theory suggests, He could have transformed into a form of energy. Einstein's famous equation E=mc2 tells that matter can become pure energy. In fact this is the same concept of an atom bomb - matter becoming pure energy using radioactive material as a catalyst.
This is evidence???????
If you don't want to repeat the past, stop living in it.
- in Arizona
- the 4th largest county in the US
- home of Phoenix, a major metropolitan area
Otherwise, I agree with your sentiments. As someone who grew up in the area, I just wanted to defend my turf-J
It'll also be pretty sweet when all that GPL'd, SouthWest-oriented county management software can finally get used. It's been ramping up in usability on SourceForge for literally months and it's time to give that stuff a spin around the block!
It's a great time to be a Linux fanatic!
From that crucifixion photography link, the site shows us a very modern, very clear, very unrealistic (in my opinion) photo of an actual crucified foot (near the bottom of the page). Is it just me, or does that just look too nice and neat with carefully arranged (but not too messy) bright red blood? Thankfully I'm no expert on the subject, but it just looks so 'perfect'. Nice clean, attractive foot, nice rustic piece of timber (artistically angled for composition), artsy clouds in the background, carefully spread bloodflow on feet and wood, etc.
One obviously questionable assertion that they try to pass off in the details makes for a whole site of suspicion.
-J
I'd like to formally apologize to Sears Photo Studio for ever having complained while sitting through those family portraits back in the '70s. In retrospect, you were surprisingly gentle with me.
-J
"Yea. I knew Jesus. Nice guy. Real concern for his fellow man. Kinda quiet. But boy... once you set him off... what a temper!"
i find the equation "E=mc2" extremely funny.
...if Jesus were the energy source that etched this image on the linen, he wouldn't cast a shadow, now would he?
Jesus is a vampire? Does that mean if you take communion, you become a vampire? I can't believe the church doesn't advertise this. I'm on my way to mass.
...or perhaps first "camera"
I recently saw a TV segment about research showing that he quite likely projected an image onto canvas using a lens, then painted or sketched the projected image.
He probably wasn't the inventor of the technique. I believe it was called a 'camera obscura'.
Just found a link, thanks to Google:
Vermeer's Camera
Wow, that's really inane. Now I know why people some peole call some Christians morons... I'm a Christian myself, but I have had little awareness of all the hilarious "evidence" out there... Amazing that people think a big ball of radiation could walk out of the tomb and talk to Mary Magdalene...
A solution to the problem with music today
Disclaimer: I don't want to know this so I can run around and r00t a bunch of machines. I'm genuinely interested, since the flaw wasn't immediately apparent to me when I glanced at the patch a few days ago.
:)
With that said - does anyone have an analysis/description of where in the source the overflow was actually exploitable? I followed the auth_chall2.c call path fairly far, and didn't manage to find where nresp > 100 would actually overflow. It doesn't seem to be exploitable in the xmalloc() immediately following the patch, unless I really missed something. I didn't trace into openssl, so if it's an interaction between the two libraries, I wouldn't have hit it.
Hints, pointers, source snippets? All are appreciated.
I think the first thing(s) i would try to clone if i could would be anything resembling human DNA in the shroud. It would be hilarious if some blond/black chinese guy(or even girl) come out of the clonation!
So did he have any broken bones, or not?
In "Carrying the cross" --
Christ's broken nose is attributed to the impact of his face hitting the ground as he fell while carrying the cross.
In "Death" --
The Gospel of John concludes that paragraph saying, "this was done so that scripture would be fulfilled that not one bone of His body be broken." And indeed, throughout the entire passion of Jesus, despite the extraordinary atrocities done to him, not one of his bones were broken.
I's like to touch on a point not raised by the Shroud site. It stands to reason that Jesus was circumcised, being Jewish. so, when he rose to heaven, did he leave his foreskin behind?
Napster-to-go says "Fill and refill your compatible MP3 player", which is a lie. It's not MP3. It's WMA with DRM.
Anyone who runs SuSE Linux from version 6.4 through version 8.0 inclusive may be interested in this.
SuSE's "SuSE-Security-Announce" mailing list released this post today regarding their response to the OpenSSH vulnerability. It contains a ton of information, and FTP links to update your OpenSSH packages for the aforementioned versions of SuSE's distribution.
Why naturally Sherman, you have heard of "Critical Mass" haven't you?
-Peabody
This is assuming that the shroud even depicts Jesus. It seems one has to use circular logic to prove this (i.e. assume it is Jesus to prove it is Jesus, much like the problem with proving the existence of God.)
Besides, everyone knows we only discovered nuclear fusion in the 1940s. Sillies.
isn't the nose only cartilaginous, rather than true bone?
;)
...
Seems like a technicality either way, but still
My mom's nose was once broken by (someone else's) ski pole. They didn't even stop to apologize, which did not please her.
Best book I've read on the SoT is the one by (iirc) John Heller, quoted on some of the sites I've seen today
timothy
jrnl: http://tinyurl.com/c2l8yr / foes: http://tinyurl.com/ckjno5
I talked to my registrar (Register.com) and they're aware of it.
That's interesting, I have a letter from Register.com asking me if I want to extend my domain name term. But my registrar is easyDNS.com.
I'm not kidding, I have it right here.
"First you gotta do the truffle shuffle."
Now we know how the phrase "Jesus Christ" came to be a term of awe, or frustration or anger, as in... "Jeesus Christ! Look at the guy explode !" :-)
NZ Electronics Enthusiasts: Check out my Trade Me Listings
My domains are registered through Go Daddy. I used them because they were cheapest and a friend recommended them to me. To date (several months), I have recieved no spam from them other than a notice warning me about Verisign's nasty renewal notices, and a recent notice about how they're making domain transfer free. Also, my normal flow of spam didn't noticeably go up after registering. So while I'd agree that most registrars are scumbags, I gotta say I'm very happy with Go Daddy. So far, at least.
c-hack.com |
OK...
:) ... the problem when applying human logic to Devine events...
if a pure matter to energy conversion took place...
Energy = Mass(Speed of light)^2
Assume a 90kg person, and C= 2997992458 m/s
Energy = 90kg(299792458m/s)^2
Energy = 90(8.9876e16)
Energy =5.3925e18 kg-m/s or 163,410,032,498,000,000 kilowatts
SO in short, that shroud wouldn't have an image burned in, the shroud (along with a good deal of the surrounding tomb and Pilate's Guards would have been vaporised.
No it is pretty clear the shroud of turin was constructed in a similar (but more complicated) manner as rubbing a pencil over a sheet of paper held on top of a credit card. In other words they put the shroud on top of some statue and then imprinted that on the shroud.
The only reason someone would claim the shroud was a photograph is because it is a negative image like negatives are. In no way shape or form was a picture taken involving pinhole cameras and the like. I mean good photosensitive materials were a long way in coming still.
If you liked this thought maybe you would find my blog nice too:
As someone who regularly consults at the county , city and AZ state agency level, I hate to inform ya'll that this is very much a Microsoft kinda town. Yep, you heard it here first.
Further, Maricopa county is small potatoes when compared to the state and city agencies/IT budgets. Scottsdale's (one of the valley's cities) CIO probably has four times the dough than the dude that runs the county's boxen. Not to mention Phoenix city proper. And Tempe, Chandler, Mesa, etc. etc. Oh, and the state government.
And of course, government agencies are the least prepared to transition an existing employee base to a brand new technology paradigm, regardless of the cost benefits this might theoretically bring (or how supposedly easy it is to switch to Linux/KDE/OSS Office suite).
Sorry, I had to break the news.
When will people realise that the way to help your child grow up safely is not to forbid things Gee, maybe the same time they realise that if a pair of minors wants to have unprotected sex, then that's their business. I.e., NEVER, HOPEFULLY, BECAUSE YOU'RE TALKING FUCKING STUPID.
Hey Genius, we're talking about minors here, doing illegal things. It's one thing if you want to try and make a point about the futility of the war on drugs among adults, and the government's assault on civil liberties by trying to regulate activites exclusive to one or more consenting grown ups, but geez, kid, get your head out of your ass and use some common sense. We're talking about kids here. I know in your little fantasy world it's the 10-year-olds who are hacking out the planet-saving patches keeping this fragile society together, while the Ph.d educated engineers at Microsoft scratch their heads in awe, so this may surprise you: kids DON'T know it all. Kids need guidance. They need discipline. And, to borrow a phrase from my father, as long as you're living under my roof, eating my food, and using my phone, you're going to follow MY RULES
Good Lord man, you take this all kids are good and can be trusted thing too far.
Like woodworking? Build your own picture frames.
If you live in the Phoenix Metro area, this is your big chance to make a great impression, show interest in your local government, and learn something too -- I mean, this is great-- the people who make important decisions about the county's technology are going to be LISTENING to you-- aside from the inevitable rips on Microsoft (easy to do), be sure to play up the cost-benefits and reliability of Linux and *bsd as viable alternatives. Have some printed materials (or CD-ROMs?) to give out.
;) A well-thought out, reasoned discussion about the benefits of open source software may make a tremendous difference if you can reach the right people and they are truly open to change.
If you seem too fanatical or "out there", you may scare them off-- it's easy to dismiss a lunatic, even when they're right. So please don't dress like Obiwan
Good luck everyone! Let us know how it works out Monday! Someone call the Arizona Republic and New Times. (And be on the lookout for a counter-offensive from Microsoft).
W
-------------------
This is my SIG. There are many like it, but this one is mine.
if Jesus were the energy source that etched this image on the linen, he wouldn't cast a shadow, now would he?
No, but he could have left burn marks...
Granted this makes their explanation of shadows and Hiroshima completely unfounded, but it still doesnt' eliminate the possibility. Personaly the image looks rather unasthetic to me.. is it proportional? Has this been measured?
CAn'T CompreHend SARcaSm?
Are you thinking what I'm thinking?
;)
Yep... that Mediterranean Sea's looking a lot more suspicious now...
Yeah, that's right, register.com may be "aware" of other slams, but they are at least as bad. In fact, they are the only registry that has attempted to trick me into a "renewal" slam. I got the official-looking notice referring to my 5 domains just last week.
...Nothing interesting here. Just move along...
Are you talking about the Shroud of Turin or the Shroud of Urine?
Now while I'm wondering how someone decided that oysters were edible, I can wonder how someone figured out 2000 years ago that urinating on an egg-white soaked cloth would produce an recognizable image. I know that things like gun cotton and Bakelite were discovered by accident but this egg-white thing I'm finding a bit hard to believe. But I would sure like to see a Mel Brooks bit on that historic moment.
CUR ALLOC 20195.....5804M
Half the world has never eaten a Krispy Kreme donut.
;-)
Is that by weight?
I'm glad there's going to be a hearing (re: Maricopa) but I believe that everyone there will simply be clarified on the spirit of that law, which is to give the County a means to unilaterally sever a contract IF THEY WANT TO, and establishes some reasonsble grounds to do so, probably limited by what's appropriate to the State constitution.
I don't read the statute as a binding mandate on the county to stop doing business with a contractor, but rather, as an escape valve that they may exercise if they so choose.
I suspect that everybody who shows up Monday will be told as much, if the matter is even addressed. I'll try to be there...
-fb Everything not expressly forbidden is now mandatory.
Yeah, but isn't the image on the shroud a negative?
When information is power, privacy is freedom.
Hello, I am a member of PLUG and have RSVP'd for the meeting and was going to post a request to the slashdot community for documentation on successful conversions from M$ to Linux, including articles or links to sites, so I can go armed with some facts on government conversions including military, local, state, federal, school systems (many of our school systems in AZ use the same rules for contractors as the county does), etc. For instance, about those schools in the northwest that converted their labs recently. thanks, just reply to this thread and i will keep an eye out for it, or email me at the above address.
How much different is that from the Moses talking to a burning bush?
When information is power, privacy is freedom.
MS likes to think its EULAs are binding contracts. Therefore, if the EULAs are valid, then there is a contract between the county and MS. Conclusion: Whenever someone in the county installs any MS product, MS is de facto a contractor.
Alternate conclusion: MS wants its products used, and has to admit the EULAs aren't binding contracts in order to not be considered a contractor. All EULAs are then admitted by Microsoft to be invalid.
Alternate conclusion #2: Microsoft is a supplier. Suppliers supply goods. Contractors supply services.
Jesus suffered from obesity. He ate far too much radioactive fish. The evidence: the lake was so polluted that you could walk on it.
The Drowned and the Saved - Primo Levi
And yet he didn't vaporize most of the middle east during his e=mc^2 ascent to heaven. (70kg matter makes a _lot_ of energy...)
;-)
Truly miraculous
"First lesson," Jon said. "Stick them with the pointy end."
The point is that MS and other software companies are trying to deny they are suppliers of goods. That would imply a sale, which would give the consumer rights under law, and they don't want that. They are instead saying they are implementing a licensing program where there is a license (contract) between the consumer and the vendor to use the software. They are therefore contractors.
This actually falls within one of the parts of TCO that I've heard mention here. A careful company would have the lawyers review every EULA very carefully for every piece of software installed by every employee. The reason being that an employee would be entering the company into a legal contract (click-wrap) without prior legal review.
as an Austinite, it's my duty to profess the truth: Round Rock donuts are better.
And now, back to your regularly scheduled surfing...
-l
Help cure AIDS, cancer, and more. Donate your unused computer time to worldcommunitygrid.org. Join Team Slashdot!
Chapter 11.28
Suspension And Debarment Of Contractors
You recently inquired about the County's use of Microsoft products and the manner in which we license their software.
You got my ass raked over the coals by the Board of Supervisors. Goddamned Linonuts.
We appreciate your interest in the County's technology plans.
I'm damned tired of you taxpayers poking your nose into how I waste, errr I mean spend, your money. If you'd all just die now, it would make my career that much easier.
To provide a forum in which to discuss our technology direction and address any questions you may have, we will have Information Technology staff members available to meet with citizens at 8:30 am on Monday July 8th.
I'm gonna have enough MCSEs at that meeting to outnumber you commie hippy Linonuts two-to-one. And Microsoft plans on having every OEM and VAR in the valley there too.
Please RSVP your attendance so we can ensure that adequate facilities are available for the meeting.
I'm making sure that most of the audience will be Microsoft shills, and the place will be so crowded by sunrise you won't even get inside. There'll be enough of us make you look pretty stupid if this gets on TV. But it probably won't.