Slashdot Mirror
Slashback: Disclosure, Maricopa, Telecoms
Quick work by smart people. ciaweb writes "The OpenSSH group has revised its security advisory about the recent OpenSSH vulnerabilities. In it, they describe their decision-making process for releasing the bug information. It is interesting to contrast their procedure, which appears designed to maximize user protection, against Microsoft's, which appears to maximize Microsoft's protection."
Pardon me, sir, would you mind if I SLAMMED THIS HAMMER ON YOUR FINGERS?! D0wnsp0ut writes "I thumbed through my mail today and found what appeared to be a renewal notice for my domain. This one came from "Domain Registry of America." Verisign attempted something similar back in March and Bulkregister.com fought back and won an injunction, against the mailings. So watch out if your domain is getting close to expiring. I talked to my registrar (Register.com) and they're aware of it.
I'll scan the letter but have no place to post the pictures. Can anyone lend some bandwidth?"
Half the world has never eaten a Krispy Kreme donut, either. cshirky writes "I've just written an essay on the phrase ' Half the world has never made a phone call'. It's more 'voice telephony-y' than the usual telecom stories here, but after seeing the interest in media and the market that surfaced during my /. interview, I thought it might be of some interest."
Please stop sending my money to Redmond, OK? TrumpetPower! writes "All that brouhaha over Maricopa County's policy prohibiting companies or persons convicted of antitrust violations has had an effect. I just received the following note announcing a public forum scheduled for this coming Monday.
You recently inquired about the County's use of Microsoft products and the manner in which we license their software. We appreciate your interest in the County's technology plans. To provide a forum in which to discuss our technology direction and address any questions you may have, we will have Information Technology staff members available to meet with citizens at 8:30 am on Monday July 8th. The meeting location will be the County Administration Building at 301 W. Jefferson in Suite 420. Please RSVP your attendance so we can ensure that adequate facilities are available for the meeting.Thank you for your inquiry,
Paul Allsing
Deputy CIO
Maricopa County
301 W Jefferson, Suite 420
Phoenix, AZ 85003"
Ah, but what about the first annoying family photographer? 7h3_B055 writes: "Contrary to this article on Slashdot claiming the first photograph was created in 1826, much evidence is pointing to the fact that the Shroud of Turin may have been an earlier example (substantially earlier) of photography using ingredients as basic as egg-white for treating cloth (the photopaper) and urine for developing it. The camera itself could have been a simple box with a hole in it and the exposure time would have been lengthy."
Of course, there are a lot of theories about the Shroud of Turin, and a google search is likely to intrigue you for days.
i certainly wouldn't have my offices in suite 420.
or maybe i would.
I've gotten both the Verisign and the DRA letter, and after reading both in light of the Veresign suit, the DRA letter is VERY clear that submitting the form back to them will switch your registry to them; this is printed on the front of the letter in the same type as the rest of the page. In the Verisign case, the transfer statement was printed on the back of the letter in fine print (with no indication there was something on the back). While somewhat tacky, I don't think DRA is in the wrong here, compared to Verisign.
"Pinky, you've left the lens cap of your mind on again." - P&TB
"I can see my house from here!" - ST:
From the linked evidence website...
One theory is that Jesus became pure energy and the radiation burned the image into the cloth. This isn't a far fetched theory really. We don't know how He resurrected. As the theory suggests, He could have transformed into a form of energy. Einstein's famous equation E=mc2 tells that matter can become pure energy. In fact this is the same concept of an atom bomb - matter becoming pure energy using radioactive material as a catalyst.
This is evidence???????
If you don't want to repeat the past, stop living in it.
It'll also be pretty sweet when all that GPL'd, SouthWest-oriented county management software can finally get used. It's been ramping up in usability on SourceForge for literally months and it's time to give that stuff a spin around the block!
It's a great time to be a Linux fanatic!
-J
I'd like to formally apologize to Sears Photo Studio for ever having complained while sitting through those family portraits back in the '70s. In retrospect, you were surprisingly gentle with me.
"Yea. I knew Jesus. Nice guy. Real concern for his fellow man. Kinda quiet. But boy... once you set him off... what a temper!"
...or perhaps first "camera"
I recently saw a TV segment about research showing that he quite likely projected an image onto canvas using a lens, then painted or sketched the projected image.
He probably wasn't the inventor of the technique. I believe it was called a 'camera obscura'.
Just found a link, thanks to Google:
Vermeer's Camera
Wow, that's really inane. Now I know why people some peole call some Christians morons... I'm a Christian myself, but I have had little awareness of all the hilarious "evidence" out there... Amazing that people think a big ball of radiation could walk out of the tomb and talk to Mary Magdalene...
A solution to the problem with music today
Disclaimer: I don't want to know this so I can run around and r00t a bunch of machines. I'm genuinely interested, since the flaw wasn't immediately apparent to me when I glanced at the patch a few days ago.
:)
With that said - does anyone have an analysis/description of where in the source the overflow was actually exploitable? I followed the auth_chall2.c call path fairly far, and didn't manage to find where nresp > 100 would actually overflow. It doesn't seem to be exploitable in the xmalloc() immediately following the patch, unless I really missed something. I didn't trace into openssl, so if it's an interaction between the two libraries, I wouldn't have hit it.
Hints, pointers, source snippets? All are appreciated.
I think the first thing(s) i would try to clone if i could would be anything resembling human DNA in the shroud. It would be hilarious if some blond/black chinese guy(or even girl) come out of the clonation!
Anyone who runs SuSE Linux from version 6.4 through version 8.0 inclusive may be interested in this.
SuSE's "SuSE-Security-Announce" mailing list released this post today regarding their response to the OpenSSH vulnerability. It contains a ton of information, and FTP links to update your OpenSSH packages for the aforementioned versions of SuSE's distribution.
Why naturally Sherman, you have heard of "Critical Mass" haven't you?
-Peabody
My domains are registered through Go Daddy. I used them because they were cheapest and a friend recommended them to me. To date (several months), I have recieved no spam from them other than a notice warning me about Verisign's nasty renewal notices, and a recent notice about how they're making domain transfer free. Also, my normal flow of spam didn't noticeably go up after registering. So while I'd agree that most registrars are scumbags, I gotta say I'm very happy with Go Daddy. So far, at least.
c-hack.com |
As someone who regularly consults at the county , city and AZ state agency level, I hate to inform ya'll that this is very much a Microsoft kinda town. Yep, you heard it here first.
Further, Maricopa county is small potatoes when compared to the state and city agencies/IT budgets. Scottsdale's (one of the valley's cities) CIO probably has four times the dough than the dude that runs the county's boxen. Not to mention Phoenix city proper. And Tempe, Chandler, Mesa, etc. etc. Oh, and the state government.
And of course, government agencies are the least prepared to transition an existing employee base to a brand new technology paradigm, regardless of the cost benefits this might theoretically bring (or how supposedly easy it is to switch to Linux/KDE/OSS Office suite).
Sorry, I had to break the news.
When will people realise that the way to help your child grow up safely is not to forbid things Gee, maybe the same time they realise that if a pair of minors wants to have unprotected sex, then that's their business. I.e., NEVER, HOPEFULLY, BECAUSE YOU'RE TALKING FUCKING STUPID.
Hey Genius, we're talking about minors here, doing illegal things. It's one thing if you want to try and make a point about the futility of the war on drugs among adults, and the government's assault on civil liberties by trying to regulate activites exclusive to one or more consenting grown ups, but geez, kid, get your head out of your ass and use some common sense. We're talking about kids here. I know in your little fantasy world it's the 10-year-olds who are hacking out the planet-saving patches keeping this fragile society together, while the Ph.d educated engineers at Microsoft scratch their heads in awe, so this may surprise you: kids DON'T know it all. Kids need guidance. They need discipline. And, to borrow a phrase from my father, as long as you're living under my roof, eating my food, and using my phone, you're going to follow MY RULES
Good Lord man, you take this all kids are good and can be trusted thing too far.
Like woodworking? Build your own picture frames.
If you live in the Phoenix Metro area, this is your big chance to make a great impression, show interest in your local government, and learn something too -- I mean, this is great-- the people who make important decisions about the county's technology are going to be LISTENING to you-- aside from the inevitable rips on Microsoft (easy to do), be sure to play up the cost-benefits and reliability of Linux and *bsd as viable alternatives. Have some printed materials (or CD-ROMs?) to give out.
;) A well-thought out, reasoned discussion about the benefits of open source software may make a tremendous difference if you can reach the right people and they are truly open to change.
If you seem too fanatical or "out there", you may scare them off-- it's easy to dismiss a lunatic, even when they're right. So please don't dress like Obiwan
Good luck everyone! Let us know how it works out Monday! Someone call the Arizona Republic and New Times. (And be on the lookout for a counter-offensive from Microsoft).
W
-------------------
This is my SIG. There are many like it, but this one is mine.
Now while I'm wondering how someone decided that oysters were edible, I can wonder how someone figured out 2000 years ago that urinating on an egg-white soaked cloth would produce an recognizable image. I know that things like gun cotton and Bakelite were discovered by accident but this egg-white thing I'm finding a bit hard to believe. But I would sure like to see a Mel Brooks bit on that historic moment.
CUR ALLOC 20195.....5804M
MS likes to think its EULAs are binding contracts. Therefore, if the EULAs are valid, then there is a contract between the county and MS. Conclusion: Whenever someone in the county installs any MS product, MS is de facto a contractor.
Alternate conclusion: MS wants its products used, and has to admit the EULAs aren't binding contracts in order to not be considered a contractor. All EULAs are then admitted by Microsoft to be invalid.