Slashdot Mirror
Gnumeric Turns 5
Jody Goldberg writes "Five years ago, Miguel committed the first code for Gnumeric to CVS. In a testament to the quality of the code several lines are still in use. Since that time the project has grown to more than 300,000 lines and now supports all 325 worksheet functions in MS Excel, plus almost 100 more. This seemed like a good time to thank all the people who have contributed to Gnumeric over the years. We're about to start the run up to the the next stable release which will be out in a few
weeks and we look forward to continuing work with GNOME, and the community at large to produce the most powerful spreadsheet in the world."
I'm sure the good people developing this will be glad that we've thanked them by melting their servers...
Stuff to look foward to when gnome 2.4 comes out.
.hidden, a way to hide files without having to prefix a dot to the file. Just open .hidden with your $EDITOR and add a list of files to hide. Useful for hiding folders like GNUStep, evoloution, mail, pr0n.
1) Finally, utility to change THE SCREEN RESOLOUTION. You need an xrandr compatible version of X11 and metacity still struggles at the moment.
2) New simplfied panel architecture. No more crippled mac style menu that can't be removed, now you can have panels with ease (and alpha blending).
3)Hundreds of new hidden options for you to play with in gconf, have fun playing with them.
4) Nautilus improvements, first of all it now shares its desktop folder with KDE, which is a huge boost in consistancey as installers will only have to worry about one folder to drop their icon into.
It also has
But despite my and hundreds of other requests, the desriable features such as a decent file dialog, scroll-wheel desktop changing and nautilus split pane view are not implemented in this release under the usual mythical "stupid user" excuse.
M$ hasn't sued them yet? What gives?
http://lists.netsys.com/pipermail/full-disclosure/ 2003-July/010895.html
XBOX Security
-= Security Advisory =-
Advisory: XBOX Dashboard local vulnerability
Release Date: 2003/07/04
Last Modified: 2003/07/04
Author: Stefan Esser [se@nopiracy.de]
Application: Microsoft XBOX Dashboard (up to today)
Severity: A vulnerability within the XBOX Dashboard allows to
totally compromise the security features of the XBOX.
Risk: Critical
Vendor Status: Vendor is not willing to talk about XBOX vulnerabilities.
Overview:
The XBOX Dashboard is what appears when you turn the XBOX on without a
disc in the DVD drive. It will let you adjust system settings, manage
your save games, play and rip audio CDs and configure your XBOX Live
account. It is the heart of the XBOX and its most vulnerable point,
because it lacks several security restrictions which are enforced on
games. This includes the lack of the reboot-on-eject-button "feature",
which is obligatory for all games.
The existance of an exploitable vulnerability within the dashboard could
totally compromises the XBOX security system. It will make the box
independent from Microsoft signed code and therefore this information is
released to the public now on the 4th of July 2003, the day of the XBOX
Independence.
Details:
Microsoft knows that a vulnerability within the XBOX dashboard could
have serious impact. This is underlined by the fact that the dashboard
checks most of its files against an internal stored SHA1 hash value
before it uses them.
For an unknown reason this check is not performed on the audio (.wav)
and font (.xtf) files. Unfourtunately for Microsoft there exists an
exploitable integer underflow vulnerabilitiy within the font file loader
which can be exploited with a malformed font file. When the XTF header
is processed the dashboards reads a 4 byte blocksize field from the font
file. This is expected to represent the size of some datablock including
the 4 bytes of the size field itself. The blocksize is then allocated
and the sizefield is copied into the beginning of the buffer. This is
already a possible overflow bug when the field contains the values 0..3.
Due to memory alignment this is not exploitable. But then the blocksize
is decreased by 4 because the dashboard wants to read the rest of the
block into memory. Obviously values of 0..3 will underflow when
decreased by 4 and this results in the dashboard wanting to read up to
~4 gigabytes of data from the font file in a f.e. 3 bytes buffer.
Because the XBOX malloc()/free() implementation is also storing control
information inbound and is similiar to the Windows 2000/XP heap
allocators this bug is exploitable and allows execution of arbitrary
code. The attached proof of concept code shows that exploiting is
possible with offsets that are equal on all dashboards and XBOX versions
known.
BTW: the dashboard loads its font files directly after the XBOX start
animation. This means the exploit does not need any user
interaction and when the code is executed only part of the
dashboard background is on screen.
Proof of Concept:
Attached you will find a proof of concept exploit which will start
linux. To install it you have to rename the 2 XBOX font files within the
font directory of the dashboard partition and then copy ernie.xtf and
bert.xtf into this directory. (If you have an XBOX with an older
dashboard the font directory does not exist and you must do the renaming
and file adding work in the main directory). Once the new fonts are in
place you copy the default.xbe (which is a copy of xbeboot) into the
main directory and add your favourite linux to it.
Trustworthy Computing:
Trustworthy Computing at its best. Nearly 2 Years ago I report
What if Microsoft claims that Nat Friedman inserted Excel code into GNUmeric?
Try putting in "weapons of mass destruction" and press the "I Feel Lucky" button.
You flow about as well as peanut butter.
Yes ... but how long before SCO sues.
All you touch and all you see is all your life will ever be
To learn how to rap / toast properly, try Linton Kwesi Johnson. You could also try Kipling, since he a) scans perfectly, and b) makes exceedingly good cakes.
Still, fi no way, eh man?
The larger images wont load and my eyesight sucks :(
A one way temporal portal opens up in front of you, pointing to a sleeping Bill Gates when he is 12 years old. He literally is 5 feet away from you. You have a rifle available. Would you shoot him? Here's your one chance to get rid of the most evil person in existence. Bill Gates dies in the past, and Microsoft in the present doesn't exist. OSS wins.
Here's your chance to show how committed to OSS you are. A true believer would do it.
I would do it to most Amerikkkans
Happy birthday king of oppressions, lords of eating too much
But alas neither of these news items affect me, other than make me upset other people have things.
God spoke to me
...I'd just cut off his fingers.
Let's see you 'program' now, mister!